Mission#

Once the repo + bootstrap script are working (t-042, t-043), schedule a daily sync so the GitHub backup stays current without anyone remembering to push.

Schedule#

• Time: 02:00 SGT every day (0 2 * * * Asia/Singapore)
• Why 02:00: Kelly's daily review runs at 03:00, so we sync the previous day's state before she modifies anything.

What the cron job does#

1. Run the sync script (created in t-042) that mirrors ~/.openclaw/workspace/, ~/.openclaw/workspaces/<id>/, ~/.openclaw/agents/<id>/, ~/.openclaw/openclaw.json (sanitised), ~/.openclaw/cron/jobs.json into the local mirror dir ~/.openclaw-backup/.
2. Run the secret-strip step over the config + any other suspicious files.
3. git -C ~/.openclaw-backup add -A. If git diff --cached is empty → no changes, exit 0.
4. Commit with message: chore: daily sync $(date +%Y-%m-%d).
5. Push to origin/main.
6. Log result to ~/.openclaw-backup/.last-sync.log.
7. On failure, send a WhatsApp alert via the relay.

Cron job spec (Mission Control)#

• Name: workspace-daily-sync
• Agent: main (Robbie — needs full file access)
• Message: an explicit prompt that points at the sync script and tells the agent to run it, verify the secret-strip ran clean, and push.
• Schedule: cron 0 2 * * * tz Asia/Singapore
• Description: Daily sync of OpenClaw workspace + agent state to private GitHub backup repo.

Acceptance criteria#

• Cron job exists, enabled, visible in Mission Control's Calendar
• After at least one scheduled run, the GitHub repo has a fresh commit with today's date
• No secret value appears in any committed file (verified by the same regex check from t-042)
• A failure produces a WhatsApp notification

Notes#

• If the sync fails for 3 days in a row, it should escalate (not just keep silently failing).

What shipped (2026-05-08)#

• Sync script: ~/.openclaw/workspace/scripts/backup-sync.sh — does mirror, sanitise, residual-secret scan, commit, push, write summary, on failure schedule a WhatsApp alert via openclaw cron add (best-effort).
• Sanitiser: ~/.openclaw/workspace/scripts/sanitise-config.py — recursive walk, env-refs apiKey/token/secret/etc. that look secret-y; preserves short literal placeholders (e.g. ollama-local).
• State files: ~/.openclaw-backup/.last-sync.json (summary), .last-sync.log (append-only), .fail-streak (consecutive fails counter, reset on success).
• Escalation: streak >=3 → tag [alert|backup-sync] instead of [fail|backup-sync].
• Cron job: id 46198197-c281-490d-8c81-4d0114b84f9d, name workspace-daily-sync, expr 0 2 * * * tz Asia/Singapore, agent main, isolated session, delivery=none (script self-escalates).
• Smoke test: ran the script manually 2026-05-08 00:49 SGT — 13 files committed (incl. these scripts), pre-commit hook passed clean, push succeeded, commit 0b25b42 pushed to Max-src/openclaw-workspace@main.