Skip to content

Repo Sync Agent (identity.md)

This page documents identity and access control for the connectsoft-repo-sync agent, assuming WhatsApp is already connected.

Channel policy (WhatsApp)

Recommended defaults:

  • Start with dmPolicy: "pairing" while validating.\n+- Move to dmPolicy: "allowlist" for steady-state.\n+- Keep allowFrom minimal (your number(s) only).

Conceptual snippet:

{
  channels: {
    whatsapp: {
      enabled: true,
      dmPolicy: "allowlist",
      allowFrom: ["+15555550123"]
    }
  }
}

Group safety

If you use the agent in group chats:

  • require mentions\n+- use mention patterns for the agent id\n+ 
    {
  channels: { whatsapp: { groups: { "*": { requireMention: true } } } },
  agents: {
    list: [
      { id: "connectsoft-repo-sync", groupChat: { mentionPatterns: ["@openclaw", "openclaw"] } }
    ]
  }
}

Ownership and accountability

  • One owner (you) controls allowlists and schedules.\n+- All runs must produce a report file that can be audited.