Claude Code: Fix the two critical bugs identified in the audit:

memory/cain.py

@@ -4,19 +4,50 @@ Lightweight state management to ensure persistence without heavy dependencies.
 """
 import json
 import os
+import logging
+from pathlib import Path
+
+logger = logging.getLogger(__name__)
 
 class Memory:
     def __init__(self, persist_path="/data/memory/state.json"):
         self.persist_path = persist_path
-        self.state = self._load()
+        self._ensure_directory_writable()
+        try:
+            self.state = self._load()
+        except (OSError, IOError, json.JSONDecodeError) as e:
+            logger.warning(f"Failed to load state from {self.persist_path}: {e}")
+            self.state = {"status": "clean_slate", "runs": 0}
+
+    def _ensure_directory_writable(self):
+        """Validate and create the persist_path directory if needed."""
+        persist_path = Path(self.persist_path)
+        parent_dir = persist_path.parent
+
+        # Create directory if it doesn't exist
+        try:
+            parent_dir.mkdir(parents=True, exist_ok=True)
+        except (OSError, PermissionError) as e:
+            logger.error(f"Cannot create directory {parent_dir}: {e}")
+            raise
+
+        # Verify directory is writable
+        if not os.access(parent_dir, os.W_OK):
+            logger.error(f"Directory {parent_dir} is not writable")
+            raise PermissionError(f"Cannot write to {parent_dir}")
 
     def _load(self):
         if os.path.exists(self.persist_path):
             try:
                 with open(self.persist_path, 'r') as f:
                     return json.load(f)
-            except Exception:
+            except (json.JSONDecodeError, ValueError) as e:
+                logger.warning(f"Corrupt state file at {self.persist_path}: {e}")
+                return {"status": "clean_slate", "runs": 0}
+            except (OSError, IOError) as e:
+                logger.warning(f"Cannot read state file {self.persist_path}: {e}")
                 return {"status": "clean_slate", "runs": 0}
+        logger.info(f"State file does not exist (first run): {self.persist_path}")
         return {"status": "born", "runs": 0}
 
     def save(self):

scripts/sync_hf.py

@@ -470,17 +470,45 @@ class OpenClawFullSync:
             with open(config_path, "r") as f:
                 data = json.load(f)
             print("[SYNC] Config parsed OK.")
-        except (json.JSONDecodeError, Exception) as e:
+        except (json.JSONDecodeError, ValueError) as e:
             # Config is corrupt — back up and start fresh
             print(f"[SYNC] Config JSON is corrupt: {e}")
             backup = config_path.with_suffix(f".corrupt_{int(time.time())}")
             try:
                 shutil.copy2(config_path, backup)
                 print(f"[SYNC] Backed up corrupt config to {backup.name}")
-            except Exception:
-                pass
-            data = {}
-            print("[SYNC] Starting from clean config.")
+            except (IOError, PermissionError, OSError) as backup_err:
+                print(f"[SYNC] WARNING: Failed to back up corrupt config: {backup_err}")
+            # Ensure valid default config structure to avoid cascading failures
+            data = {
+                "gateway": {
+                    "mode": "local",
+                    "bind": "lan",
+                    "port": 7860,
+                    "trustedProxies": ["0.0.0.0/0"],
+                },
+                "session": {"scope": "global"},
+                "models": {"mode": "merge", "providers": {}},
+                "agents": {"defaults": {"workspace": "~/.openclaw/workspace"}}
+            }
+            print("[SYNC] Starting from clean config structure.")
+        except (IOError, PermissionError, OSError) as e:
+            # Filesystem error - cannot read config file
+            print(f"[SYNC] ERROR: Cannot read config file: {e}")
+            print(f"[SYNC] Check permissions and filesystem integrity for {config_path}")
+            # Ensure valid default config structure
+            data = {
+                "gateway": {
+                    "mode": "local",
+                    "bind": "lan",
+                    "port": 7860,
+                    "trustedProxies": ["0.0.0.0/0"],
+                },
+                "session": {"scope": "global"},
+                "models": {"mode": "merge", "providers": {}},
+                "agents": {"defaults": {"workspace": "~/.openclaw/workspace"}}
+            }
+            print("[SYNC] Using default config structure due to filesystem error.")
 
         try:
             # Remove /dev/null from plugins.locations