openclaw new md files (#65)

config/openclaw/HEARTBEAT.md

@@ -0,0 +1,20 @@
+# Heartbeat Checklist
+
+Check these on each heartbeat (rotate, don't do all every time):
+
+## Email (gws gmail)
+- Check unread/recent emails (last 2 hours)
+- Flag anything urgent or action-required
+- Summarize important ones for the human
+- Ignore: marketing, newsletters, automated notifications (unless they look important)
+
+## Calendar (gws calendar)
+- Check events in the next 24 hours
+- Alert if something is coming up within 2 hours
+- Note any conflicts or back-to-back meetings
+
+## Rules
+- Late night (23:00-08:00 local): only surface truly urgent stuff
+- Don't repeat things you already surfaced in the last check
+- Keep summaries short — one line per item max
+- If nothing important: HEARTBEAT_OK

config/openclaw/TOOLS.md

@@ -0,0 +1,38 @@
+# Google Workspace (gws)
+
+## Permissions
+
+### Read freely (no permission needed)
+- Gmail: read, search, list emails
+- Calendar: check events, upcoming schedule, free/busy
+- Drive: list and read files
+
+### Ask first
+- Gmail: sending, replying, drafting emails
+- Calendar: creating, editing, deleting events
+- Drive: editing, moving, uploading files
+
+### Never without explicit permission
+- Deleting anything (emails, events, files)
+- Sending emails on behalf of the user
+- Sharing files/folders with others
+- Changing account settings
+
+## Quick Reference
+
+Gmail:
+  gws gmail users messages list --params '{"userId": "me", "maxResults": 10}'
+  gws gmail users messages get --params '{"userId": "me", "id": "<id>", "format": "metadata", "metadataHeaders": ["Subject", "From", "Date"]}'
+  gws gmail users messages get --params '{"userId": "me", "id": "<id>", "format": "full"}'
+
+Calendar:
+  gws calendar events list --params '{"calendarId": "primary", "timeMin": "<RFC3339>", "timeMax": "<RFC3339>", "singleEvents": true, "orderBy": "startTime"}'
+
+## Browser Use
+
+API key stored in ~/.bashrc as BROWSER_USE_API_KEY
+Endpoint: POST https://api.browser-use.com/api/v3/sessions
+Auth header: X-Browser-Use-API-Key
+
+Use for web tasks that need a real browser (login flows, scraping, form filling).
+Always ask before using on sites that require the user's credentials.