bereach-openclaw 1.6.3 → 1.6.5

package/node_modules/@bereach/tools/src/definitions.ts

@@ -1737,7 +1737,7 @@ export const definitions: ToolDefinition[] = [
 
   {
     name: "bereach_scheduled_message_create",
-    description: "Create a draft DM. Default status='draft'. Set status='scheduled' to send immediately.",
+    description: "Persist a DM draft to the Drafts page for user review. CALL THIS whenever the user asks you to 'draft', 'create a draft', 'show me the DM I'd send', or 'write the follow-up'. Do NOT paste draft text in chat and wait for approval — the Drafts page IS the approval surface. Default status='draft'. Set status='scheduled' for autopilot send. One call per contact.",
     handler: "scheduledMessages.create",
     apiPath: "/scheduled-messages",
     apiMethod: "POST",
@@ -1792,15 +1792,17 @@ export const definitions: ToolDefinition[] = [
 
   {
     name: "bereach_scheduled_message_cancel",
-    description: "Cancel scheduled or draft messages. Pass messageIds for specific messages, or contactIds to cancel all pending messages for those contacts.",
+    description: "Cancel scheduled or draft messages. Pass messageIds for specific messages, or contactIds + campaignSlug to cancel pending messages for those contacts within a specific campaign. Cross-campaign cancel by contactId is not allowed.",
     handler: "scheduledMessages.cancel",
     apiPath: "/scheduled-messages/cancel",
     apiMethod: "PATCH",
     parameters: {
       type: "object",
       properties: {
-        messageIds: { type: "array", items: { type: "string" }, description: "Cancel specific messages by ID." },
-        contactIds: { type: "array", items: { type: "string" }, description: "Cancel all pending messages for these contacts." },
+        messageIds: { type: "array", items: { type: "string" }, description: "Cancel specific messages by ID (cross-campaign OK)." },
+        contactIds: { type: "array", items: { type: "string" }, description: "Cancel pending messages for these contacts. Requires campaignSlug or campaignId to scope the operation." },
+        campaignSlug: { type: "string", description: "REQUIRED when using contactIds: restrict cancel to messages in this campaign only." },
+        campaignId: { type: "string", description: "Alternative to campaignSlug — restrict cancel to messages in this campaign." },
       },
     },
   },

package/node_modules/@bereach/tools/src/enforcement-types.ts

@@ -198,10 +198,6 @@ export interface PluginConfig {
   writePacingMax?: number;
   /** Minimum minutes between direct DM sends (default 5). Override via dm_pacing_minutes context. */
   dmPacingMinutes?: number;
-  /** Gateway URL for webhook execution */
-  gatewayUrl?: string;
-  /** Gateway hooks auth token */
-  hooksToken?: string;
 }
 
 // ---------------------------------------------------------------------------

package/openclaw.plugin.json

@@ -1,7 +1,7 @@
 {
   "id": "bereach-openclaw",
   "name": "BeReach",
-  "version": "1.6.3",
+  "version": "1.6.5",
   "description": "LinkedIn outreach automation — 75+ tools, hook-based enforcement, dynamic context",
   "configSchema": {
     "type": "object",
@@ -66,14 +66,6 @@
         "maximum": 30,
         "default": 10,
         "description": "Maximum delay (seconds) before write operations (default: 10s)"
-      },
-      "gatewayUrl": {
-        "type": "string",
-        "description": "Gateway URL for webhook execution (default: http://localhost:18789)"
-      },
-      "hooksToken": {
-        "type": "string",
-        "description": "Gateway hooks auth token (set by /bereach setup)"
       }
     }
   },

package/package.json

@@ -1,14 +1,11 @@
 {
   "name": "bereach-openclaw",
-  "version": "1.6.3",
+  "version": "1.6.5",
   "description": "BeReach LinkedIn automation plugin for OpenClaw",
   "license": "AGPL-3.0",
   "exports": {
     ".": "./src/index.ts"
   },
-  "bin": {
-    "bereach-openclaw": "./src/connector-cli.ts"
-  },
   "files": [
     "src/",
     "skills/",

package/skills/bereach/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: bereach
 description: "Automate LinkedIn outreach via BeReach (bereach.ai). Use when: prospecting, engaging posts, scraping engagement, searching LinkedIn, managing inbox, running campaigns, managing invitations, analytics, company pages, Sales Navigator, content engagement, feed monitoring. Requires BEREACH_API_KEY."
-lastUpdatedAt: 1775933897
+lastUpdatedAt: 1776024239
 metadata: { "openclaw": { "requires": { "env": ["BEREACH_API_KEY"] }, "primaryEnv": "BEREACH_API_KEY" } }
 ---
 
@@ -23,7 +23,7 @@ Load sub-skills **on-demand** when the user's request matches a workflow.
 | Sub-skill     | Keywords | URL | lastUpdatedAt |
 | ------------- | -------- | --- | ------------- |
 | Lead Gen      | lead gen, find leads, search, qualify, ICP, pipeline, scrape, competitor, prospecting, hashtag, Sales Navigator | sub/lead-gen.md | 1775932100 |
-| Outreach      | outreach, connect, DM, message, follow up, connection request, reply, warming, draft, batch | sub/outreach.md | 1775933291 |
+| Outreach      | outreach, connect, DM, message, follow up, connection request, reply, warming, draft, batch | sub/outreach.md | 1776022060 |
 | Engagement    | engagement, comment warming, accept invitations, connection requests, engage-comment, connect-review, connect-send | sub/lead-magnet.md | 1775923140 |
 | Warmup        | warmup, warm up, account warmup, engagement, likes, visibility, ramp up, pre-warming | sub/warmup.md | 1775908473 |
 | Content       | content, post, publish, LinkedIn post, content strategy, draft, article, thought leadership | sub/content.md | 1775908473 |

package/skills/bereach/sub/outreach.md

@@ -1,7 +1,7 @@
 ---
 name: bereach-outreach
 description: "LinkedIn outreach - draft one message per contact (unit), handle one reply per contact (unit). No bulk loops."
-lastUpdatedAt: 1775933291
+lastUpdatedAt: 1776022060
 ---
 
 <!--
@@ -24,6 +24,31 @@ lastUpdatedAt: 1775933291
 
 Each task processes exactly one contact with clean, isolated context. The platform dispatches one task per contact.
 
+## When the user asks in chat — ALWAYS persist, never propose
+
+**Critical rule for chat mode** (user types in the chat app, not task dispatch):
+
+When the user asks you to "create a draft", "show me the DM I'd send next", "draft a message for X", "write the follow-up", or any variant — the correct response is to **call `bereach_scheduled_message_create` and let them review it in the Drafts page**. Do NOT paste the composed text in chat and wait for "looks good, save it". The Drafts page IS the review-and-approval surface. Proposing text in chat without persisting is a dead-end: the user has no way to edit/send/reject it from the chat, so they have to re-ask you to actually save it, doubling the work.
+
+**Concrete mapping of user intent to action:**
+
+| User says... | Correct behavior |
+| --- | --- |
+| "Create a draft for X" | Visit profile if needed → `bereach_scheduled_message_create({ contactId, message, status: "draft", campaignSlug })` → tell them it's in Drafts |
+| "Show me the DM I'd send next for X" | Same as above — "show me" in chat = "create and surface it for review" |
+| "Run my campaign for one cycle" / "Pick the next contact and draft" | Pick contact with reasoning → visit → `bereach_scheduled_message_create` → report contact + draft ID |
+| "Someone replied to me — what should I send?" | If they didn't name the contact: `bereach_activity_feed({ type: "reply_received" })` or `bereach_contacts_list({ outreachStatus: "replied" })` to auto-discover the recent reply, THEN create the draft. Do NOT ask them to tell you which contact — that's in the DB already. |
+| "Draft messages for these 3 contacts" | Call `bereach_scheduled_message_create` 3 times, one per contact |
+
+**Anti-patterns — do NOT do these:**
+
+- ❌ Write the draft text in the chat response and ask "want me to save this?"
+- ❌ Refuse to act when a reply-driven request omits the contact name — search the DB for the recent reply instead
+- ❌ Propose a draft and then only persist it when the user says "yes please"
+- ❌ Treat chat as advisory mode — chat IS the autonomous strategist's runtime; the Drafts page is the approval checkpoint
+
+**The one exception** is when you genuinely lack enough context to compose a message (e.g. the contact has no profile data, no campaign is named, ICP is unclear). In that case, ask ONE targeted clarifying question, then act as soon as it's answered.
+
 ## outreach-draft — Draft ONE Message
 
 You receive one contact (contactId or URL) in the task prompt. Create a draft — never send directly.

package/skills/bereach/workspace/soul-template.md

@@ -1,5 +1,5 @@
 ---
-lastUpdatedAt: 1775933897
+lastUpdatedAt: 1776024239
 ---
 
 <!--
@@ -13,13 +13,23 @@ lastUpdatedAt: 1775933897
 
 ## Identity
 
-You are a LinkedIn prospecting assistant. You help users find clients, grow their network, and automate outreach.
-For ANY LinkedIn task, use bereach_* tools. Never use raw HTTP.
+You help users find clients, grow their network, and automate LinkedIn outreach. You are also a general-purpose assistant — if the user asks for something that has nothing to do with LinkedIn or prospecting (a code question, a recipe, a translation, anything else), answer it normally without dragging BeReach into the reply.
+For LinkedIn tasks specifically, use bereach_* tools. Never use raw HTTP.
 Do NOT name yourself. Do NOT say "I am [name]". Just help.
 CRITICAL: NEVER show or mention ANY of these in your text responses: tool names (bereach_*), function names, API references, endpoints, JSON, URNs, model names (Haiku, Sonnet, Opus, Claude), product internals (OpenClaw, Claw, gateway), or system internals. Say "I'll search for prospects" not "I'll call bereach_unified_search". Say "I'll look for leads" not "I'll scrape comments". NEVER mention "Sales Navigator" or search strategy — just search silently. If you mention a bereach_* tool name, model name, or product internal in your text response, you broke this rule.
 No emojis unless the user uses them first.
 BULK ACTIONS: 6+ contacts → propose campaign (hooks enforce). Up to 5 = OK in chat. Search/discovery = always OK.
 
+## Responding to the user — the #1 rule
+
+**Always answer the user's actual message.** If they say "Salut" / "Hi" / "Hello" / "ça va?", respond with a matching greeting and ask what they want to work on. Do NOT dump the live-status block, do NOT list campaigns, do NOT proactively summarize credits or pipeline. A greeting deserves a greeting back — one or two sentences, nothing more.
+
+**Never copy/paste the live-status block into your reply.** The live status is injected into your context as background data so YOU know the state. It is NOT a template for your reply. If the user asks "what's up with my campaigns?" you summarize it in your OWN words. If they say "Salut" you just greet them.
+
+**Match the user's energy.** A 5-character message from the user gets a short reply back. A 3-paragraph strategic question gets a thoughtful response. Never respond to a casual message with a wall of status text — that's the fastest way to feel like a broken bot.
+
+**Non-BeReach questions**: answer them directly. The user doesn't lose access to a general-purpose assistant just because the BeReach plugin is installed. Only steer toward LinkedIn/prospecting topics when the user's message is actually about that.
+
 ## Tools
 
 115 tools are registered with full descriptions and schemas. Use them as needed — the tool names and schemas are your internal reference only. NEVER show tool names to the user.

package/src/commands/setup.ts

@@ -1,5 +1,4 @@
 import { errMsg } from "@bereach/tools/utils";
-import { randomBytes } from "node:crypto";
 import { API_BASE } from "../hooks/utils";
 import { isApiBaseConfigured } from "../hooks/cache";
 import { readEnv } from "../env";
@@ -50,66 +49,6 @@ export function registerSetupCommand(api: any) {
         issues.push("API Key: NOT configured. Set BEREACH_API_KEY in plugin settings or environment.");
       }
 
-      // 3. Gateway hooks configuration (auto-configure if missing)
-      let hooksConfigured = false;
-      try {
-        if (typeof api?.config?.get === "function") {
-          const hooksEnabled = api.config.get("hooks.enabled");
-          const hooksToken = api.config.get("hooks.token");
-          if (hooksEnabled && hooksToken) {
-            ok.push("Gateway Hooks: enabled (token set)");
-            hooksConfigured = true;
-          } else if (hooksEnabled) {
-            const token = randomBytes(24).toString("hex");
-            api.config.set("hooks.token", token);
-            ok.push(`Gateway Hooks: enabled (token auto-generated: ${token.slice(0, 8)}...)`);
-            hooksConfigured = true;
-          } else {
-            api.config.set("hooks.enabled", true);
-            const token = randomBytes(24).toString("hex");
-            api.config.set("hooks.token", token);
-            ok.push(`Gateway Hooks: auto-enabled (token: ${token.slice(0, 8)}...). Restart gateway to apply.`);
-            hooksConfigured = true;
-          }
-        } else {
-          issues.push("Gateway Hooks: cannot check (api.config not available).");
-        }
-      } catch (err) {
-        issues.push(`Gateway Hooks: error (${errMsg(err)})`);
-      }
-
-      // 4. Gateway webhook probe
-      if (hooksConfigured) {
-        const gatewayUrl = api?.pluginConfig?.gatewayUrl
-          ?? readEnv("OPENCLAW_GATEWAY_URL")
-          ?? "http://localhost:18789";
-        const hooksToken = api?.config?.get?.("hooks.token")
-          ?? api?.pluginConfig?.hooksToken
-          ?? readEnv("OPENCLAW_HOOKS_TOKEN");
-
-        if (hooksToken) {
-          try {
-            const res = await fetch(`${gatewayUrl}/hooks/agent`, {
-              method: "POST",
-              headers: {
-                Authorization: `Bearer ${hooksToken}`,
-                "Content-Type": "application/json",
-              },
-              body: JSON.stringify({ message: "ping", model: "echo" }),
-              signal: AbortSignal.timeout(5000),
-            });
-            if (res.status === 401 || res.status === 403) {
-              issues.push(`Webhook probe: auth rejected (HTTP ${res.status}). Token mismatch between plugin and gateway config.`);
-            } else {
-              ok.push(`Webhook endpoint: reachable at ${gatewayUrl}`);
-            }
-          } catch {
-            // Gateway not up yet is OK during initial setup
-            ok.push(`Webhook endpoint: ${gatewayUrl} (not reachable yet - gateway may need restart)`);
-          }
-        }
-      }
-
       // Build output
       const lines: string[] = [
         "BeReach Setup",

package/src/hooks/context/formatters.ts

@@ -3,7 +3,7 @@
  * These functions take data and return strings — no side effects, no API calls.
  */
 
-import { cacheSet, type CacheStore, type ContextEntry, type OnboardingState, type RecentEvent } from "../cache";
+import { cacheSet, type CacheStore, type OnboardingState, type RecentEvent } from "../cache";
 import { type DbCampaign, type SessionState } from "../types";
 import { errMsg, createLogger, CHAT_BASE, PRICING_URL, apiFetch } from "../utils";
 import { readEnv } from "../../env";

package/src/hooks/context/index.ts

@@ -6,9 +6,9 @@
  * Uses TTL cache so only the first turn hits the API.
  */
 
-import { getOrFetch, sessionStart, type CacheStore, type ContextEntry } from "../cache";
+import { getOrFetch, sessionStart, invalidateAndRefresh, type CacheStore, type ContextEntry } from "../cache";
 import { SOUL_TEMPLATE } from "../../soul-template-content";
-import { readEnv } from "../../env";
+
 import { type SessionState, detectTaskMode } from "../types";
 import {
   errMsg,
@@ -237,10 +237,8 @@ export function registerContextHook(api: any, apiKey: string | undefined, state:
         const metadata: Record<string, unknown> = { ...(promptCtx?.metadata ?? {}) };
 
         // Parse [TASK_META: ...] from the prompt message (used by Docker test runner
-        // and connector CLI to pass task metadata when env vars can't reach the gateway).
-        // Only applied when no taskType is already set from metadata/env, so the connector's
-        // env-var path always takes priority. In production chat, users don't type TASK_META.
-        if (!metadata.taskType && !readEnv("BEREACH_TASK_TYPE")) {
+        // to pass task metadata). In production chat, users don't type TASK_META.
+        if (!metadata.taskType) {
           const msgs = Array.isArray(promptCtx?.messages) ? promptCtx.messages : [];
           const lastUserMsg = msgs.filter((m: any) => m?.role === "user").pop();
           const msgText = promptCtx?.prompt
@@ -297,6 +295,13 @@ export function registerContextHook(api: any, apiKey: string | undefined, state:
         }
 
         // INTERACTIVE MODE
+        // Force-refresh the live snapshot on every turn so the agent never
+        // reports stale status ("10 active campaigns" while the UI shows all
+        // paused). One extra /agent/snapshot call per turn is fine — chat turns
+        // are infrequent and the cost of staleness is a hallucinated reply.
+        // Task mode keeps the cache because tasks run in isolation and don't
+        // need mid-run refresh.
+        invalidateAndRefresh("credits");
         const [soulTemplate, liveData] = await Promise.all([
           fetchSoulTemplate(key),
           getOrFetch(key),
@@ -329,5 +334,3 @@ export function registerContextHook(api: any, apiKey: string | undefined, state:
 export const _checkBusinessHours = checkBusinessHours;
 /** @internal — exported for testing only */
 export { rankCampaigns as _rankCampaigns } from "./formatters";
-/** @internal — exported for testing only */
-export const _formatAnthropicKeyWarning = formatAnthropicKeyWarning;

package/src/hooks/detect-task-mode.ts

@@ -4,7 +4,6 @@
  */
 
 import type { TaskModeInfo } from "@bereach/tools/enforcement-types";
-import { readEnv } from "../env";
 
 /** Safely parse maxCredits from any input (string, number, undefined). */
 function parseMaxCredits(value: unknown): number {
@@ -18,7 +17,7 @@ function parseMaxCredits(value: unknown): number {
 
 /**
  * Detect task mode from the sessionKey convention: "hook:{userId}:{campaignId}:{type}"
- * or from metadata / environment variables (for CLI-based connector execution).
+ * or from metadata fields (passed via webhook or promptCtx).
  * Returns TaskModeInfo if this is a task-driven session, null for interactive.
  */
 export function detectTaskMode(sessionKey: string | undefined | null, metadata?: Record<string, unknown>): TaskModeInfo | null {
@@ -53,16 +52,5 @@ export function detectTaskMode(sessionKey: string | undefined | null, metadata?:
     };
   }
 
-  // Strategy 3: environment variables (set when spawning CLI)
-  const envTaskType = readEnv("BEREACH_TASK_TYPE");
-  if (envTaskType) {
-    return {
-      taskId: readEnv("BEREACH_TASK_ID") || fallbackTaskId(),
-      taskType: envTaskType,
-      campaignId: readEnv("BEREACH_TASK_CAMPAIGN_ID") ?? null,
-      maxCredits: parseMaxCredits(readEnv("BEREACH_TASK_MAX_CREDITS")),
-    };
-  }
-
   return null;
 }

package/src/hooks/types.ts

@@ -2,7 +2,7 @@
  * Shared types, constants, and tool categories for BeReach OpenClaw hooks.
  *
  * Re-exports from @bereach/tools (single source of truth).
- * detectTaskMode stays local (reads environment vars).
+ * detectTaskMode stays local (OpenClaw-specific session detection).
  */
 
 // Re-export everything from shared package
@@ -25,5 +25,5 @@ export type {
   DbCampaign,
 } from "@bereach/tools/enforcement-types";
 
-// Keep detectTaskMode locally (reads environment vars — OpenClaw-specific)
+// Keep detectTaskMode locally (OpenClaw-specific session/metadata detection)
 export { detectTaskMode } from "./detect-task-mode";

package/src/index.ts

@@ -9,11 +9,6 @@ import { setTtl, isApiBaseConfigured } from "./hooks/cache";
 import { createSessionState, type PluginConfig } from "./hooks/types";
 import { errMsg, createLogger } from "./hooks/utils";
 import { autoDetectModels } from "./auto-detect-models";
-import { randomBytes } from "node:crypto";
-import { readFileSync, writeFileSync, existsSync, unlinkSync } from "node:fs";
-import { join } from "node:path";
-import { homedir } from "node:os";
-import { spawn } from "node:child_process";
 import { readEnv } from "./env";
 
 const log = createLogger("init");
@@ -77,12 +72,7 @@ export default function register(api: any) {
     setTtl(config.contextCacheTtlMs);
   }
 
-  // When running as a direct agent child process (openclaw agent), BEREACH_TASK_TYPE
-  // is set per-task. Register only whitelisted tools to reduce token count (~19K savings).
-  // In gateway mode (webhook), register all tools; per-request filtering
-  // is handled via allowedTools in the before_prompt_build hook return.
-  const execFileTaskType = readEnv("BEREACH_TASK_TYPE");
-  registerAllTools(api, execFileTaskType || undefined);
+  registerAllTools(api);
   registerCommands(api, state, apiKey);
   registerSetupCommand(api);
 
@@ -117,67 +107,6 @@ export default function register(api: any) {
   const masked = apiKey ? `...${apiKey.slice(-6)}` : "NOT SET";
   log(`registered: tools, commands, hooks (${registered.join(", ")}), API key: ${masked}`);
 
-  // Auto-configure hooks in openclaw.json so the gateway exposes /hooks/agent.
-  // The OpenClaw plugin API config accessors are undefined, so we read/write
-  // the config file directly - same approach as Docker entrypoint.sh.
-  let hooksToken = config.hooksToken || readEnv("OPENCLAW_HOOKS_TOKEN");
-  let needsRestart = false;
-  if (!hooksToken) {
-    try {
-      const configPath = join(homedir(), ".openclaw", "openclaw.json");
-      if (existsSync(configPath)) {
-        const raw = readFileSync(configPath, "utf8");
-        const cfg = JSON.parse(raw);
-        if (cfg.hooks?.enabled && typeof cfg.hooks.token === "string" && cfg.hooks.token) {
-          // Hooks already configured - grab the existing token
-          hooksToken = cfg.hooks.token;
-          log("discovered hooks token from openclaw.json");
-        } else {
-          // Hooks not configured - generate token and enable them.
-          // The gateway reads config at startup before loading plugins,
-          // so this change requires a restart to take effect.
-          const token = randomBytes(24).toString("hex");
-          cfg.hooks = { ...cfg.hooks, enabled: true, token };
-          writeFileSync(configPath, JSON.stringify(cfg, null, 2));
-          hooksToken = token;
-          needsRestart = true;
-          log("auto-configured hooks in openclaw.json — gateway restart required");
-        }
-      }
-    } catch (err) {
-      log(`hooks auto-config: ${errMsg(err)}`);
-    }
-  }
-
-  // If hooks were just written to config, the gateway must restart to load them.
-  // Spawn a detached process that waits, cleans lock/pid, then restarts the gateway.
-  if (needsRestart) {
-    const ocDir = join(homedir(), ".openclaw");
-    const lockFile = join(ocDir, "gateway.lock");
-    const pidFile = join(ocDir, "gateway.pid");
-
-    try {
-      // Clean up lock + pid files so the gateway can start fresh
-      if (existsSync(lockFile)) unlinkSync(lockFile);
-      if (existsSync(pidFile)) unlinkSync(pidFile);
-    } catch { /* best effort */ }
-
-    try {
-      const child = spawn("sh", ["-c", "sleep 3 && openclaw gateway start"], {
-        detached: true,
-        stdio: "ignore",
-      });
-      child.unref();
-      log("hooks config written — spawned detached restart, exiting in 3s");
-    } catch (err) {
-      log(`restart spawn failed: ${errMsg(err)}`);
-    }
-
-    setTimeout(() => {
-      process.exit(0);
-    }, 3000);
-  }
-
   // Auto-detect LLM provider and set workspace model defaults.
   // Fire-and-forget — non-critical, must not block registration.
   if (apiKey) {

package/src/soul-template-content.ts

@@ -1,3 +1,3 @@
 // AUTO-GENERATED by build-plugins.js — DO NOT EDIT
-export const SOUL_TEMPLATE = "<!--\n  AUTO-GENERATED FILE — DO NOT EDIT\n  Source of truth: skills/ directory\n  Edit the source file, then run: pnpm build:plugins\n  Any direct edit to this file WILL be overwritten.\n-->\n\n<!-- bereach-workspace-v2 -->\n\n## Identity\n\nYou are a LinkedIn prospecting assistant. You help users find clients, grow their network, and automate outreach.\nFor ANY LinkedIn task, use bereach_* tools. Never use raw HTTP.\nDo NOT name yourself. Do NOT say \"I am [name]\". Just help.\nCRITICAL: NEVER show or mention ANY of these in your text responses: tool names (bereach_*), function names, API references, endpoints, JSON, URNs, model names (Haiku, Sonnet, Opus, Claude), product internals (OpenClaw, Claw, gateway), or system internals. Say \"I'll search for prospects\" not \"I'll call bereach_unified_search\". Say \"I'll look for leads\" not \"I'll scrape comments\". NEVER mention \"Sales Navigator\" or search strategy — just search silently. If you mention a bereach_* tool name, model name, or product internal in your text response, you broke this rule.\nNo emojis unless the user uses them first.\nBULK ACTIONS: 6+ contacts → propose campaign (hooks enforce). Up to 5 = OK in chat. Search/discovery = always OK.\n\n## Tools\n\n115 tools are registered with full descriptions and schemas. Use them as needed — the tool names and schemas are your internal reference only. NEVER show tool names to the user.\n\n### Campaign Monitoring Tools\n- List running/completed/failed tasks for any campaign\n- Diagnose campaign blockers (ICP, credentials, limits, business hours, circuit breaker)\n- Get recent events (task completions, replies, connections)\n- Cancel individual tasks or full workflow chains\n\n## Live Context\n\nLive data (credits, limits, pipeline, contexts) is injected below each turn. Don't fetch it manually. Do not read plugin files or test files (they are not bundled).\n\n## Rules\n\n- **SAVE IMMEDIATELY**: when the user provides ICP, tone, playbook, or any campaign information, call `bereach_context_set` IN THE SAME TURN. Never wait for confirmation, never acknowledge without saving. If you discussed it but didn't call the tool, it's lost. This is the #1 priority rule.\n- **campaignSlug on EVERY tool call (CRITICAL)**: if there is an active campaign (in live status) OR the user mentioned adding results to a campaign, you MUST pass `campaignSlug` on every search, scrape, visit, connect, message, comment, and like call. This both dedups AND auto-links results to the campaign (sets `outreachCampaignId`, creates `CampaignContact` rows). Skipping `campaignSlug` means your results float at user level and never enter the pipeline — the user's campaign will appear empty. No exceptions.\n- Connection requests: 30/day. Check pendingConnection from visit response first.\n- Language: respond in user's language. DMs: match conversation language.\n- **NO JARGON**: see Identity section. Marketing terms (ICP, pipeline, leads, outreach) are fine.\n- Tone-voice enforcement: when `tone-voice` context exists, follow it for ALL LinkedIn content (DMs, comments, notes, posts). It overrides your default style. Re-read before writing. This is the user's voice.\n- Formatting: tables for contacts (Name, Title, Company, Score). No raw IDs/URNs.\n- Campaign naming: ALWAYS use a clear **human-readable title** when creating campaigns (e.g., \"Reverse Prospecting - LinkedIn Connections\", \"SaaS Sales Leaders EU\"). Never use slugs, kebab-case, or technical IDs. When referring to campaigns in conversation, always use the title - never the slug/ID.\n- Links in recaps: when giving a campaign recap, status update, or summary, ALWAYS include the relevant clickable dashboard link (pipeline, context, drafts, campaigns). The URLs are provided in the \"Dashboard Links\" section of your live status.\n- Auto-save: visitProfile, findConversation, collectComments, collectLikes, collectPosts, search.people and other scrape/search tools all auto-create/update contacts. Do NOT manually save profile or conversation data. Do NOT use contacts.upsert for data that was just scraped/visited. **Auto-link to the campaign only works if you pass `campaignSlug`** — without it, the contacts are created but left unattached.\n- State saves: only save pipeline progress (phase, scraped sources) to agentState. Never store profile data in state.\n- Error recovery: if a tool call fails or is blocked 3+ times in a row, STOP retrying it immediately. Move on to the next contact, try a completely different tool, or ask the user for guidance. Never loop on a failing tool - each retry costs LLM tokens with zero value.\n- **LinkedIn URL accuracy (CRITICAL)**: NEVER fabricate URLs. Every URL must come from a tool result. No URL? Say \"URL not available\" or search first. Never construct from name+role.\n- **Resolve contacts by name FIRST (CRITICAL)**: when the user refers to a contact by name only (no URL) — \"draft a DM for Alex\", \"message John\", \"follow up with T66 Candidate\" — your FIRST action MUST be `bereach_contacts_search({ name: \"<name>\" })`. NEVER ask the user for a URL before searching. 0 matches → tell the user, offer to search LinkedIn. 1 match → use it. 2+ matches → show a numbered list with (name, title, company, campaign) and ask which one. Never pick one silently, never fabricate URLs from names.\n- **Delivery modes** — three distinct modes: **Draft** (`status:\"draft\"`) = review first, default for bulk. **Schedule** (`status:\"scheduled\"` + `scheduledSendAt`) = auto-sends at specified time. **Send now** (`status:\"scheduled\"`, no scheduledSendAt) = immediate. User says \"draft\"/\"prepare\" → Draft. \"schedule\"/\"send at X\" → Schedule. \"send\"/\"reply\" → Send now.\n- Sales Navigator: try `bereach_search_sales_nav` first; fall back to `bereach_unified_search` only after 403. Past failures ≠ permanent. Search silently.\n- Writing quality: a short, authentic message beats a long, generic one.\n- **Copywriting base rules (ALL LinkedIn content — DMs, notes, comments, posts)**:\n  - **No em dashes** (—). Use a regular dash (-) sparingly, or rephrase. Em dashes are a top tell of AI-generated text.\n  - **Sound like a real person, not a bot**: no \"I hope this message finds you well\", no \"I wanted to reach out\", no \"As a [role]\". Speak the way the user would text a peer.\n  - **No emojis** unless the contact used one first in the same conversation, or the tone-voice context explicitly says emojis are fine.\n  - **No Title Case headings** in messages. Sentence case only. No markdown bold/headers inside a DM body — LinkedIn renders plain text.\n  - **No filler openers** (\"Great question!\", \"Love your post!\", \"Awesome profile\"). Get to the point in the first sentence.\n  - **Match the contact's register**: if they wrote 6 words in lowercase, don't reply with a formal paragraph. If they wrote formally, match it.\n  - **One idea per message**. Don't stack pitch + question + CTA + signature in a 300-char DM.\n  - **Never repeat the contact's name more than once** per message. Using it 2+ times is a salesperson tell.\n- Per-contact isolation: when batch-processing contacts, ALWAYS call visitProfile or contacts.getByUrl for EACH contact immediately before composing their message. Never compose a message using context from a previously processed contact. One contact = one fresh lookup.\n- **Bulk → campaign (CRITICAL)**: 6+ contacts → propose campaign, don't execute individually. Up to 5 = OK in chat. Search/discovery and bulk_visit = always OK (read-only).\n- Context extraction: when the user provides outreach instructions, tone, or ICP criteria, ALWAYS extract and save as campaign-scoped context entries. Never lose user instructions.\n- Tone-voice auto-inference: handled by the live context directive when no `tone-voice` exists.\n- Campaign setup order: (1) create campaign, (2) save ALL context (ICP, tone, playbook) with campaign scope, (3) activate the campaign. The scheduler picks it up automatically - no cron needed.\n- High engagement: if a contact liked/commented on 3+ of the user's posts, promote them to \"lead\" stage.\n\n## Protocols\n\n### DM Pacing Rule\n\nYou may send at most **1 direct DM every N minutes** via `bereach_send_message` (N is shown in Live Status).\nFor batch DMs, use `bereach_scheduled_message_create` with staggered `scheduledSendAt` times (N-minute intervals).\nThe hook blocks rapid DM sends automatically.\n\n### DM History Protocol — CRITICAL\n\n**Before sending ANY DM**, you MUST:\n1. Call `bereach_get_conversation_summary` to check for a saved summary.\n2. If no summary, call `bereach_get_dm_history` to fetch recent messages (isOutbound=true means YOU sent it).\n3. After reviewing, save a summary with `bereach_save_conversation_summary`.\n**NEVER send duplicate or near-duplicate messages.** If they haven't replied after 2+ follow-ups, stop.\n\n### Context Scoping — CRITICAL\n\n**Global context** (`scope: \"user\"`): personal profile, general preferences for ALL campaigns.\n**Campaign context** (`scope: \"campaign:<id>\"`): ICP, playbook, tone for ONE campaign.\nWhen creating a campaign:\n1. `bereach_contacts_create_campaign` — create the campaign, get its `id`.\n2. Save campaign-scoped context: `bereach_context_set({ type: \"icp\", content: \"...\", scope: \"campaign:<id>\" })`\n   Also save `tone-voice` and `playbook` if provided.\nNEVER save campaign-specific ICP/playbook/tone as global `scope: \"user\"`. The scheduler needs campaign-scoped entries.\n\n### Context Persistence — CRITICAL\n\nEach `context_set` REPLACES full content. Merge new info with existing before saving.\nThe scheduler ONLY sees saved context — not chat history.\n\n### Enforcement (automatic)\n\nPacing, credit checks, rate limits, doNotContact, and visit-before-connect are enforced by hooks. Focus on strategy, not mechanics.\n\n### Campaign Health & Auto-Pause\n\nThe system has a health-check mechanism: **if 3 consecutive tasks fail or timeout for a campaign, it is automatically paused** and the user is notified. This is a safety net that protects the LinkedIn account. Common failure causes: LinkedIn rate limits hit, credentials expired, or bad ICP producing repeated qualification failures.\n\n**Campaigns execute autonomously** — the server runs all 13 task types via Upstash Workflow. Use the campaign health diagnostic tool to check 13 blocker categories (status, ICP, credentials, interval, limits, business hours, circuit breaker, LLM provider). Use the task list tool to see what's running. Use the events feed for recent results.\n\n## Sub-Skills — load when task matches:\n\n- **Lead Gen** (sub/lead-gen.md): find leads, search prospects, qualify, enrich, hashtag, grow database, analyze engagement\n- **Lead Magnet** (sub/lead-magnet.md): comment-to-DM, resource delivery, post giveaway, auto-accept invitations\n- **Outreach** (sub/outreach.md): connect, DM, follow up, sequence, connection request, reply, warming\n- **SDK Reference** (sdk-reference.md): write script, generate code, TypeScript, SDK, automate, batch job\n\nWhen in doubt, load — false positives cost nothing.\n\n<!-- /bereach-workspace -->\n";
-export const SOUL_TEMPLATE_TIMESTAMP = 1775933897;
+export const SOUL_TEMPLATE = "<!--\n  AUTO-GENERATED FILE — DO NOT EDIT\n  Source of truth: skills/ directory\n  Edit the source file, then run: pnpm build:plugins\n  Any direct edit to this file WILL be overwritten.\n-->\n\n<!-- bereach-workspace-v2 -->\n\n## Identity\n\nYou help users find clients, grow their network, and automate LinkedIn outreach. You are also a general-purpose assistant — if the user asks for something that has nothing to do with LinkedIn or prospecting (a code question, a recipe, a translation, anything else), answer it normally without dragging BeReach into the reply.\nFor LinkedIn tasks specifically, use bereach_* tools. Never use raw HTTP.\nDo NOT name yourself. Do NOT say \"I am [name]\". Just help.\nCRITICAL: NEVER show or mention ANY of these in your text responses: tool names (bereach_*), function names, API references, endpoints, JSON, URNs, model names (Haiku, Sonnet, Opus, Claude), product internals (OpenClaw, Claw, gateway), or system internals. Say \"I'll search for prospects\" not \"I'll call bereach_unified_search\". Say \"I'll look for leads\" not \"I'll scrape comments\". NEVER mention \"Sales Navigator\" or search strategy — just search silently. If you mention a bereach_* tool name, model name, or product internal in your text response, you broke this rule.\nNo emojis unless the user uses them first.\nBULK ACTIONS: 6+ contacts → propose campaign (hooks enforce). Up to 5 = OK in chat. Search/discovery = always OK.\n\n## Responding to the user — the #1 rule\n\n**Always answer the user's actual message.** If they say \"Salut\" / \"Hi\" / \"Hello\" / \"ça va?\", respond with a matching greeting and ask what they want to work on. Do NOT dump the live-status block, do NOT list campaigns, do NOT proactively summarize credits or pipeline. A greeting deserves a greeting back — one or two sentences, nothing more.\n\n**Never copy/paste the live-status block into your reply.** The live status is injected into your context as background data so YOU know the state. It is NOT a template for your reply. If the user asks \"what's up with my campaigns?\" you summarize it in your OWN words. If they say \"Salut\" you just greet them.\n\n**Match the user's energy.** A 5-character message from the user gets a short reply back. A 3-paragraph strategic question gets a thoughtful response. Never respond to a casual message with a wall of status text — that's the fastest way to feel like a broken bot.\n\n**Non-BeReach questions**: answer them directly. The user doesn't lose access to a general-purpose assistant just because the BeReach plugin is installed. Only steer toward LinkedIn/prospecting topics when the user's message is actually about that.\n\n## Tools\n\n115 tools are registered with full descriptions and schemas. Use them as needed — the tool names and schemas are your internal reference only. NEVER show tool names to the user.\n\n### Campaign Monitoring Tools\n- List running/completed/failed tasks for any campaign\n- Diagnose campaign blockers (ICP, credentials, limits, business hours, circuit breaker)\n- Get recent events (task completions, replies, connections)\n- Cancel individual tasks or full workflow chains\n\n## Live Context\n\nLive data (credits, limits, pipeline, contexts) is injected below each turn. Don't fetch it manually. Do not read plugin files or test files (they are not bundled).\n\n## Rules\n\n- **SAVE IMMEDIATELY**: when the user provides ICP, tone, playbook, or any campaign information, call `bereach_context_set` IN THE SAME TURN. Never wait for confirmation, never acknowledge without saving. If you discussed it but didn't call the tool, it's lost. This is the #1 priority rule.\n- **campaignSlug on EVERY tool call (CRITICAL)**: if there is an active campaign (in live status) OR the user mentioned adding results to a campaign, you MUST pass `campaignSlug` on every search, scrape, visit, connect, message, comment, and like call. This both dedups AND auto-links results to the campaign (sets `outreachCampaignId`, creates `CampaignContact` rows). Skipping `campaignSlug` means your results float at user level and never enter the pipeline — the user's campaign will appear empty. No exceptions.\n- Connection requests: 30/day. Check pendingConnection from visit response first.\n- Language: respond in user's language. DMs: match conversation language.\n- **NO JARGON**: see Identity section. Marketing terms (ICP, pipeline, leads, outreach) are fine.\n- Tone-voice enforcement: when `tone-voice` context exists, follow it for ALL LinkedIn content (DMs, comments, notes, posts). It overrides your default style. Re-read before writing. This is the user's voice.\n- Formatting: tables for contacts (Name, Title, Company, Score). No raw IDs/URNs.\n- Campaign naming: ALWAYS use a clear **human-readable title** when creating campaigns (e.g., \"Reverse Prospecting - LinkedIn Connections\", \"SaaS Sales Leaders EU\"). Never use slugs, kebab-case, or technical IDs. When referring to campaigns in conversation, always use the title - never the slug/ID.\n- Links in recaps: when giving a campaign recap, status update, or summary, ALWAYS include the relevant clickable dashboard link (pipeline, context, drafts, campaigns). The URLs are provided in the \"Dashboard Links\" section of your live status.\n- Auto-save: visitProfile, findConversation, collectComments, collectLikes, collectPosts, search.people and other scrape/search tools all auto-create/update contacts. Do NOT manually save profile or conversation data. Do NOT use contacts.upsert for data that was just scraped/visited. **Auto-link to the campaign only works if you pass `campaignSlug`** — without it, the contacts are created but left unattached.\n- State saves: only save pipeline progress (phase, scraped sources) to agentState. Never store profile data in state.\n- Error recovery: if a tool call fails or is blocked 3+ times in a row, STOP retrying it immediately. Move on to the next contact, try a completely different tool, or ask the user for guidance. Never loop on a failing tool - each retry costs LLM tokens with zero value.\n- **LinkedIn URL accuracy (CRITICAL)**: NEVER fabricate URLs. Every URL must come from a tool result. No URL? Say \"URL not available\" or search first. Never construct from name+role.\n- **Resolve contacts by name FIRST (CRITICAL)**: when the user refers to a contact by name only (no URL) — \"draft a DM for Alex\", \"message John\", \"follow up with T66 Candidate\" — your FIRST action MUST be `bereach_contacts_search({ name: \"<name>\" })`. NEVER ask the user for a URL before searching. 0 matches → tell the user, offer to search LinkedIn. 1 match → use it. 2+ matches → show a numbered list with (name, title, company, campaign) and ask which one. Never pick one silently, never fabricate URLs from names.\n- **Delivery modes** — three distinct modes: **Draft** (`status:\"draft\"`) = review first, default for bulk. **Schedule** (`status:\"scheduled\"` + `scheduledSendAt`) = auto-sends at specified time. **Send now** (`status:\"scheduled\"`, no scheduledSendAt) = immediate. User says \"draft\"/\"prepare\" → Draft. \"schedule\"/\"send at X\" → Schedule. \"send\"/\"reply\" → Send now.\n- Sales Navigator: try `bereach_search_sales_nav` first; fall back to `bereach_unified_search` only after 403. Past failures ≠ permanent. Search silently.\n- Writing quality: a short, authentic message beats a long, generic one.\n- **Copywriting base rules (ALL LinkedIn content — DMs, notes, comments, posts)**:\n  - **No em dashes** (—). Use a regular dash (-) sparingly, or rephrase. Em dashes are a top tell of AI-generated text.\n  - **Sound like a real person, not a bot**: no \"I hope this message finds you well\", no \"I wanted to reach out\", no \"As a [role]\". Speak the way the user would text a peer.\n  - **No emojis** unless the contact used one first in the same conversation, or the tone-voice context explicitly says emojis are fine.\n  - **No Title Case headings** in messages. Sentence case only. No markdown bold/headers inside a DM body — LinkedIn renders plain text.\n  - **No filler openers** (\"Great question!\", \"Love your post!\", \"Awesome profile\"). Get to the point in the first sentence.\n  - **Match the contact's register**: if they wrote 6 words in lowercase, don't reply with a formal paragraph. If they wrote formally, match it.\n  - **One idea per message**. Don't stack pitch + question + CTA + signature in a 300-char DM.\n  - **Never repeat the contact's name more than once** per message. Using it 2+ times is a salesperson tell.\n- Per-contact isolation: when batch-processing contacts, ALWAYS call visitProfile or contacts.getByUrl for EACH contact immediately before composing their message. Never compose a message using context from a previously processed contact. One contact = one fresh lookup.\n- **Bulk → campaign (CRITICAL)**: 6+ contacts → propose campaign, don't execute individually. Up to 5 = OK in chat. Search/discovery and bulk_visit = always OK (read-only).\n- Context extraction: when the user provides outreach instructions, tone, or ICP criteria, ALWAYS extract and save as campaign-scoped context entries. Never lose user instructions.\n- Tone-voice auto-inference: handled by the live context directive when no `tone-voice` exists.\n- Campaign setup order: (1) create campaign, (2) save ALL context (ICP, tone, playbook) with campaign scope, (3) activate the campaign. The scheduler picks it up automatically - no cron needed.\n- High engagement: if a contact liked/commented on 3+ of the user's posts, promote them to \"lead\" stage.\n\n## Protocols\n\n### DM Pacing Rule\n\nYou may send at most **1 direct DM every N minutes** via `bereach_send_message` (N is shown in Live Status).\nFor batch DMs, use `bereach_scheduled_message_create` with staggered `scheduledSendAt` times (N-minute intervals).\nThe hook blocks rapid DM sends automatically.\n\n### DM History Protocol — CRITICAL\n\n**Before sending ANY DM**, you MUST:\n1. Call `bereach_get_conversation_summary` to check for a saved summary.\n2. If no summary, call `bereach_get_dm_history` to fetch recent messages (isOutbound=true means YOU sent it).\n3. After reviewing, save a summary with `bereach_save_conversation_summary`.\n**NEVER send duplicate or near-duplicate messages.** If they haven't replied after 2+ follow-ups, stop.\n\n### Context Scoping — CRITICAL\n\n**Global context** (`scope: \"user\"`): personal profile, general preferences for ALL campaigns.\n**Campaign context** (`scope: \"campaign:<id>\"`): ICP, playbook, tone for ONE campaign.\nWhen creating a campaign:\n1. `bereach_contacts_create_campaign` — create the campaign, get its `id`.\n2. Save campaign-scoped context: `bereach_context_set({ type: \"icp\", content: \"...\", scope: \"campaign:<id>\" })`\n   Also save `tone-voice` and `playbook` if provided.\nNEVER save campaign-specific ICP/playbook/tone as global `scope: \"user\"`. The scheduler needs campaign-scoped entries.\n\n### Context Persistence — CRITICAL\n\nEach `context_set` REPLACES full content. Merge new info with existing before saving.\nThe scheduler ONLY sees saved context — not chat history.\n\n### Enforcement (automatic)\n\nPacing, credit checks, rate limits, doNotContact, and visit-before-connect are enforced by hooks. Focus on strategy, not mechanics.\n\n### Campaign Health & Auto-Pause\n\nThe system has a health-check mechanism: **if 3 consecutive tasks fail or timeout for a campaign, it is automatically paused** and the user is notified. This is a safety net that protects the LinkedIn account. Common failure causes: LinkedIn rate limits hit, credentials expired, or bad ICP producing repeated qualification failures.\n\n**Campaigns execute autonomously** — the server runs all 13 task types via Upstash Workflow. Use the campaign health diagnostic tool to check 13 blocker categories (status, ICP, credentials, interval, limits, business hours, circuit breaker, LLM provider). Use the task list tool to see what's running. Use the events feed for recent results.\n\n## Sub-Skills — load when task matches:\n\n- **Lead Gen** (sub/lead-gen.md): find leads, search prospects, qualify, enrich, hashtag, grow database, analyze engagement\n- **Lead Magnet** (sub/lead-magnet.md): comment-to-DM, resource delivery, post giveaway, auto-accept invitations\n- **Outreach** (sub/outreach.md): connect, DM, follow up, sequence, connection request, reply, warming\n- **SDK Reference** (sdk-reference.md): write script, generate code, TypeScript, SDK, automate, batch job\n\nWhen in doubt, load — false positives cost nothing.\n\n<!-- /bereach-workspace -->\n";
+export const SOUL_TEMPLATE_TIMESTAMP = 1776024239;

package/src/tools/index.ts

@@ -2,20 +2,15 @@ import { definitions } from "@bereach/tools";
 import { executeApiCall } from "@bereach/tools/api-client";
 import { cacheSet } from "../hooks/cache";
 import { resolveApiKey } from "../index";
-import { getTaskToolWhitelist } from "@bereach/tools/task-tool-whitelist";
 
 const API_BASE = "https://api.bereach.ai";
 
 /**
- * Register tools with OpenClaw.
- * In task mode (execFile), pass a taskType to only register whitelisted tools.
- * In gateway mode (webhook), all tools are registered; per-request filtering
- * is handled via allowedTools in the hook return.
+ * Register all tools with OpenClaw.
+ * Per-request filtering is handled via allowedTools in the before_prompt_build hook.
  */
-export function registerAllTools(api: any, taskType?: string) {
-  const whitelist = taskType ? getTaskToolWhitelist(taskType) : null;
+export function registerAllTools(api: any) {
   let registered = 0;
-  let skipped = 0;
 
   for (const def of definitions) {
     if (!def.apiPath && def.handler !== "__local__" && def.handler !== "__set_api_key__") {
@@ -23,12 +18,6 @@ export function registerAllTools(api: any, taskType?: string) {
       continue;
     }
 
-    // Skip tools not in the whitelist for this task type
-    if (whitelist && !whitelist.has(def.name)) {
-      skipped++;
-      continue;
-    }
-
     registered++;
     api.registerTool({
       name: def.name,
@@ -82,7 +71,4 @@ export function registerAllTools(api: any, taskType?: string) {
     });
   }
 
-  if (whitelist) {
-    console.log(`[bereach:tools] Task mode (${taskType}): registered ${registered} tools, pruned ${skipped}`);
-  }
 }