feat: OpenClaw guided onboarding with Tailscale and OrbStack agents#813
feat: OpenClaw guided onboarding with Tailscale and OrbStack agents#813marcusquinn merged 2 commits intomainfrom
Conversation
Comprehensive OpenClaw integration into aidevops onboarding: - Rewrite openclaw.md with 3 deployment tiers (native, OrbStack container, remote VPS), security hardening from upstream docs, aidevops cross-integration (Hetzner/Cloudflare/Tailscale), and when-to-use-which decision tree - Add onboarding guided flow: business discovery conversation, deployment tier picker, channel setup with security-first defaults, security audit walkthrough, and aidevops-vs-OpenClaw decision tree - Create Tailscale subagent (services/networking/tailscale.md): install, Serve/ Funnel config, ACLs, VPS integration patterns - Create OrbStack subagent (tools/containers/orbstack.md): Docker/VM management, OpenClaw container deployment, resource management - Update onboarding-helper.sh with check_containers(), check_networking(), check_openclaw() detection functions, guide entries, and JSON output - Update subagent-index.toon (41 -> 43 subagents) and AGENTS.md progressive disclosure table with Containers, Networking, Personal AI domains
|
Warning You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again! |
|
Warning Rate limit exceeded
⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. WalkthroughThis PR expands the DevOps framework with three new integrated services: OrbStack (container runtime for macOS), Tailscale (mesh VPN networking), and OpenClaw (AI assistant). Updates include new documentation, multi-tier deployment guidance, shell script utilities for status checking, and expanded onboarding workflows across agent infrastructure. Changes
Sequence Diagram(s)sequenceDiagram
participant User
participant OnboardingHelper as Onboarding Helper
participant DeploymentTier as Deployment Tier
participant ContainerRuntime as Container Runtime
participant Networking as Networking
participant OpenClaw as OpenClaw
participant Verification as Verification
User->>OnboardingHelper: Initiate onboarding
OnboardingHelper->>User: Present deployment tier options
activate DeploymentTier
User->>DeploymentTier: Select tier (Native/OrbStack/VPS)
deactivate DeploymentTier
alt OrbStack Tier Selected
DeploymentTier->>ContainerRuntime: Install OrbStack
ContainerRuntime-->>OnboardingHelper: Installation complete
else Remote VPS Tier
DeploymentTier->>ContainerRuntime: Configure remote runtime
ContainerRuntime-->>OnboardingHelper: Configuration complete
else Native Local Tier
OnboardingHelper->>ContainerRuntime: Use local environment
end
OnboardingHelper->>Networking: Install & configure Tailscale
activate Networking
Networking-->>OnboardingHelper: Network ready
deactivate Networking
OnboardingHelper->>OpenClaw: Deploy OpenClaw per tier
activate OpenClaw
OpenClaw->>OpenClaw: Execute Security Hardening
OpenClaw-->>OnboardingHelper: OpenClaw deployed
deactivate OpenClaw
OnboardingHelper->>Verification: Run verification checks
activate Verification
Verification->>ContainerRuntime: check_containers()
Verification->>Networking: check_networking()
Verification->>OpenClaw: check_openclaw()
Verification-->>User: All systems verified ✓
deactivate Verification
Estimated code review effort🎯 3 (Moderate) | ⏱️ ~20 minutes Possibly related PRs
Poem
🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
🔍 Code Quality Report�[0;35m[MONITOR]�[0m Code Review Monitoring Report �[0;34m[INFO]�[0m Latest Quality Status: �[0;34m[INFO]�[0m Recent monitoring activity: 📈 Current Quality Metrics
Generated on: Mon Feb 9 21:46:56 UTC 2026 Generated by AI DevOps Framework Code Review Monitoring |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 2
🤖 Fix all issues with AI agents
In @.agents/scripts/onboarding-helper.sh:
- Around line 445-452: The oc_ver assignment and gateway check should mirror the
orb fix: make oc_ver reliably fall back to "unknown" without using the
ineffective "|| echo" after a pipeline (e.g., capture version into oc_ver then
if [ -z "$oc_ver" ]; then oc_ver="unknown"; fi), and remove the redundant
redirection in the gateway status check by replacing "openclaw gateway status
&>/dev/null 2>&1" with a single combined redirect like "openclaw gateway status
&>/dev/null". Update the symbols oc_ver, openclaw --version, openclaw gateway
status, and print_service accordingly.
- Around line 396-402: The orb_ver assignment can be empty when `orb version`
fails because the fallback only covers awk errors; update the logic around the
orb_ver variable (the `orb_ver=$(orb version ... | head -1 | awk '{print $2}' ||
echo "unknown")` pipeline) to robustly handle command failure and empty output:
capture `orb version` output first, check if it's non-empty before extracting
the field (or check the extracted value with -z) and set orb_ver to "unknown" on
failure, then use that safe orb_ver when calling print_service ("OrbStack",
"ready"/"partial", "v${orb_ver}, ...") so you never emit "v, running".
🧹 Nitpick comments (3)
.agents/services/networking/tailscale.md (1)
46-48: macOS daemon management viasudo tailscaled &is fragile.Backgrounding with
&won't survive terminal close or reboot. Consider documentingbrew services start tailscalefor persistent daemon management, or note that users should add a launchd plist. The current instruction works for a quick test but isn't production-grade..agents/tools/containers/orbstack.md (1)
186-191: Docker socket mount is a security-sensitive operation — consider a brief note.Mounting
/var/run/docker.sockgrants the container full Docker daemon access (effectively root). This is required for Coolify but worth a one-line security note for users unfamiliar with the implications..agents/scripts/onboarding-helper.sh (1)
422-422: Redundant2>&1after&>/dev/nullon Line 422.Same redundant redirect pattern as noted above.
Proposed fix
- if tailscale status &>/dev/null 2>&1; then + if tailscale status &>/dev/null; then
…ing helper Address CodeRabbit review findings: - Use parameter expansion fallback for orb_ver and oc_ver instead of unreliable || echo in pipeline (empty string from failed command was not caught by the fallback) - Remove redundant 2>&1 after &>/dev/null in openclaw gateway status check
🔍 Code Quality Report�[0;35m[MONITOR]�[0m Code Review Monitoring Report �[0;34m[INFO]�[0m Latest Quality Status: �[0;34m[INFO]�[0m Recent monitoring activity: 📈 Current Quality Metrics
Generated on: Mon Feb 9 21:53:13 UTC 2026 Generated by AI DevOps Framework Code Review Monitoring |
|
1 participant
Summary
Changes
New Files
.agents/services/networking/tailscale.md— Tailscale mesh VPN agent (install, Serve/Funnel, ACLs, VPS integration).agents/tools/containers/orbstack.md— OrbStack container runtime agent (Docker, Linux VMs, OpenClaw containers)Modified Files
.agents/tools/ai-assistants/openclaw.md— Rewritten with deployment tiers (native/OrbStack/VPS), security hardening from upstream docs, Tailscale integration, aidevops cross-references, when-to-use-which decision tree.agents/aidevops/onboarding.md— New OpenClaw guided setup flow: business discovery conversation, deployment tier picker, channel setup with security-first defaults, security audit walkthrough, aidevops-vs-OpenClaw decision tree. Also adds Containers & Networking service catalog sections..agents/scripts/onboarding-helper.sh— New detection functions:check_containers()(OrbStack, Docker),check_networking()(Tailscale),check_openclaw()(OpenClaw gateway + config). New guide entries for openclaw, tailscale, orbstack. Updated JSON output..agents/subagent-index.toon— Updated count 41→43, addedservices/networking/andtools/containers/entries.agents/AGENTS.md— Added Containers, Networking, Personal AI to progressive disclosure tableTesting
shellcheckpasses (only SC1091 info for sourced file, already disabled)onboarding-helper.sh statuscorrectly detects OrbStack (partial), Tailscale (not installed), OpenClaw (not installed)onboarding-helper.sh jsonincludes new sections with correct structureonboarding-helper.sh guide openclaw|tailscale|orbstackall produce correct outputSummary by CodeRabbit
Release Notes
New Features
Documentation