Skip to content

docs: consolidate remote deployment on headless servers#7346

Merged
cv merged 8 commits into
mainfrom
codex/docs-headless-server-guide
Jul 22, 2026
Merged

docs: consolidate remote deployment on headless servers#7346
cv merged 8 commits into
mainfrom
codex/docs-headless-server-guide

Conversation

@miyoungc

@miyoungc miyoungc commented Jul 22, 2026

Copy link
Copy Markdown
Collaborator

Summary

Add one provider-neutral guide for running NemoClaw on a headless Linux server over SSH.
Retire the outdated Brev deployment and web UI guides, and redirect their published URLs directly to the shared headless-server guide.

Related Issue

Fixes #7180

Changes

  • Add a variant-aware headless-server guide for OpenClaw, Hermes, and Deep Agents Code, including unattended installation, loopback-only access, readiness checks, credential boundaries, and manual recovery after a host reboot.
  • Clarify that Brev can provision one example of a headless server, while NemoClaw setup starts afterward and depends on neither Brev nor its web UI.
  • Remove the Brev web UI and remote GPU deployment pages from the docs and navigation.
  • Replace Brev deployment claims in the platform matrix with one caveated headless Linux server path.
  • Add direct redirects for the retired canonical and legacy URL forms, including HTML and Markdown routes.
  • Remove stale Brev troubleshooting and cross-references while retaining factual reference documentation for the still-present deprecated nemoclaw deploy compatibility command.
  • Add regression coverage for guide content, variant boundaries, retired routes, direct redirects, published links, and generated platform documentation.

Type of Change

  • Code change (feature, bug fix, or refactor)
  • Code change with doc updates
  • Doc only (prose changes, no code sample modifications)
  • Doc only (includes code sample changes)

Quality Gates

  • Tests added or updated for changed behavior
  • Existing tests cover changed behavior — justification:
  • Tests not applicable — justification:
  • Docs updated for user-facing behavior changes
  • Docs not applicable — justification:
  • Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging)
  • Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification:
  • Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue:

DGX Station Hardware Evidence

  • Tested on DGX Station
  • Tested commit:
  • Station profile/scenario:
  • Result:
  • Supporting evidence:

Verification

  • PR description includes a Signed-off-by: line and every commit appears as Verified in GitHub
  • Normal pre-commit, commit-msg, and pre-push hooks passed
  • Targeted behavior tests pass — npx vitest run test/headless-server-docs.test.ts test/check-docs-published-routes.test.ts test/check-docs-links.test.ts test/generate-platform-docs.test.ts src/lib/gateway-token-command.test.ts (86 passed)
  • Applicable broad gate passed — all 48 applicable PR checks passed, including CLI shards, CodeQL, image builds, platform E2Es, and automated reviews
  • Quality Gates section completed with required justifications or waivers
  • No secrets, API keys, or credentials committed
  • npm run docs builds — 0 errors and one existing Fern warning
  • Doc pages follow the style guide
  • New doc pages include SPDX header and frontmatter
  • Clean-Linux cloud-onboard E2E passed on the final commit — workflow run

Signed-off-by: Miyoung Choi miyoungc@nvidia.com

Summary by CodeRabbit

  • Documentation
    • Added a new “Deploy to a Headless Server” guide for SSH-only setup, including unattended onboarding, readiness/probe checks, policy setup, updates, recovery, and troubleshooting.
    • Updated site navigation and multiple overview/reference pages to point to the new guide.
    • Removed Brev-specific deployment docs and added redirects so legacy links route to the shared headless guide.
  • Tests
    • Added/expanded contract tests to validate published routes and per-agent content, including recovery and dashboard/token behavior.
  • Chores
    • Refreshed platform support metadata and broadened redirect-route validation coverage.

Signed-off-by: Miyoung Choi <miyoungc@nvidia.com>
@miyoungc miyoungc added the area: docs Documentation, examples, guides, or docs build label Jul 22, 2026
@miyoungc miyoungc self-assigned this Jul 22, 2026
@copy-pr-bot

copy-pr-bot Bot commented Jul 22, 2026

Copy link
Copy Markdown

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

@coderabbitai

coderabbitai Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review
📝 Walkthrough

Walkthrough

Changes

The PR adds an end-to-end headless server deployment guide, exposes it for OpenClaw, Deep Agents, and Hermes, retires Brev deployment documentation, adds redirects, and introduces route and content-contract tests.

Headless deployment

Layer / File(s) Summary
Server preparation and unattended onboarding
docs/deployment/deploy-to-headless-server.mdx, test/headless-server-docs.test.ts
Documents prerequisites, loopback SSH access, session handoff, unattended onboarding, and credential-safe environment handling.
Readiness, access, and state boundaries
docs/deployment/deploy-to-headless-server.mdx
Defines readiness checks, agent-specific dashboard and token access, credential/state boundaries, policy installation, and rebuild survival.
Reboot recovery and troubleshooting
docs/deployment/deploy-to-headless-server.mdx
Documents manual reboot recovery, agent-specific repair behavior, tunnel restarts, and failure-layer troubleshooting.
Published navigation and documentation contracts
docs/index.yml, test/check-docs-published-routes.test.ts, test/headless-server-docs.test.ts, fern/docs.yml, scripts/check-docs-published-routes.mts
Adds variant navigation, redirects, and validation for routes, links, commands, onboarding references, readiness wording, and agent-specific content.
Retired Brev paths and references
docs/deployment/*, docs/reference/*, docs/get-started/quickstart.mdx, docs/about/overview.mdx, ci/platform-matrix.json, src/lib/gateway-token-command.ts
Removes Brev deployment pages and troubleshooting content, and updates references, support metadata, and command documentation.

Estimated code review effort: 4 (Complex) | ~45 minutes

Sequence Diagram(s)

sequenceDiagram
  participant Operator
  participant SSHServer
  participant Installer
  participant OpenShell
  Operator->>SSHServer: Connect over SSH
  Operator->>Installer: Run unattended onboarding
  Installer->>OpenShell: Create and configure sandbox
  OpenShell-->>Operator: Return readiness and probe results
Loading

Suggested reviewers: cv, ericksoa, jyaunches

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Docstring Coverage ⚠️ Warning Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Write docstrings for the functions missing them to satisfy the coverage threshold.
✅ Passed checks (4 passed)
Check name Status Explanation
Linked Issues check ✅ Passed The PR adds the headless server guide, navigation, redirects, and regression tests covering the stated onboarding, readiness, recovery, and variant requirements.
Out of Scope Changes check ✅ Passed The remaining edits are documentation, navigation, and test updates that support the headless deployment consolidation, with no obvious unrelated changes.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly matches the main change: consolidating remote deployment documentation around headless server workflows.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch codex/docs-headless-server-guide

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown
Contributor

@github-code-quality

github-code-quality Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

Code Coverage Overview

Languages: TypeScript

TypeScript / code-coverage/plugin

The overall coverage in commit 79e13ca in the codex/docs-headless-... branch remains at 96%, unchanged from commit f992494 in the main branch.

TypeScript / code-coverage/cli

The overall coverage in commit 79e13ca in the codex/docs-headless-... branch remains at 80%, unchanged from commit f992494 in the main branch.

Show a code coverage summary of the most impacted files.
File main f992494 codex/docs-headless-... 79e13ca +/-
src/lib/inferen...lama/process.ts 100% 50% -50%
src/lib/inferen...er-lifecycle.ts 71% 65% -6%
src/lib/state/m...-acquisition.ts 89% 84% -5%
src/lib/messagi...nnels/policy.ts 100% 100% 0%
src/lib/sandbox...rce-identity.ts 87% 87% 0%
src/lib/securit...ntial-filter.ts 93% 93% 0%
src/lib/state/m...ock-identity.ts 95% 95% 0%
src/lib/state/m...lock-storage.ts 97% 97% 0%
src/lib/trace.ts 94% 94% 0%
src/lib/platform.ts 84% 89% +5%

Updated July 22, 2026 14:29 UTC

@github-actions

github-actions Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor

PR Review Advisor — Informational

Advisor assessment: Informational / high confidence
Next action: No advisor follow-up needed.
Findings: 0 blockers · 0 warnings · 0 suggestions
Status: No actionable findings remain in the canonical review ledger.

Model lanes

  • GPT-5.6 Terra (primary): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
  • Nemotron 3 Ultra (second opinion): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
  • Model comparison: normalized findings match; normalized E2E selections differ; severity counts match.

Nemotron output stays in workflow artifacts and does not change the assessment above.

Since last review: 0 prior items resolved · 0 still apply · 0 new items found

E2E guidance

Advisory only. E2E / PR Gate selects and runs jobs independently.

Recommended E2E: cloud-onboard

2 optional E2E recommendations
  • docs-validation
  • ubuntu-repo-docker-post-reboot-recovery

Workflow run details

This automated review informs maintainers. Warnings and suggestions do not require a response. A maintainer decides whether to merge.

@miyoungc
miyoungc marked this pull request as ready for review July 22, 2026 02:25
Signed-off-by: Miyoung Choi <miyoungc@nvidia.com>
@miyoungc miyoungc changed the title docs: add headless server deployment guide docs: consolidate remote deployment on headless servers Jul 22, 2026

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick comments (1)
test/headless-server-docs.test.ts (1)

102-106: 📐 Maintainability & Code Quality | 🔵 Trivial | ⚡ Quick win

Assert the published contract instead of source-file deletion.

These existsSync checks couple the regression test to specific MDX filenames. Assert that the retired published routes are absent or redirect correctly instead, so harmless source reorganization does not break the test and stale routes cannot escape coverage. As per path instructions, tests should review behavioral confidence rather than implementation lock-in.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@test/headless-server-docs.test.ts` around lines 102 - 106, Replace the
filename-based existsSync assertions in the affected test with requests against
the published documentation routes formerly represented by those MDX files.
Assert that each retired route is absent or redirects correctly, preserving
coverage for stale routes without coupling the test to source filenames.

Source: Path instructions

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@test/headless-server-docs.test.ts`:
- Around line 102-106: Replace the filename-based existsSync assertions in the
affected test with requests against the published documentation routes formerly
represented by those MDX files. Assert that each retired route is absent or
redirects correctly, preserving coverage for stale routes without coupling the
test to source filenames.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: b6992041-7fa5-471b-9d16-8cd2d38bb360

📥 Commits

Reviewing files that changed from the base of the PR and between 46df681 and 383b855.

📒 Files selected for processing (17)
  • ci/platform-matrix.json
  • docs/about/overview.mdx
  • docs/changelog/2026-07-08.mdx
  • docs/deployment/brev-web-ui.mdx
  • docs/deployment/deploy-to-headless-server.mdx
  • docs/deployment/deploy-to-remote-gpu.mdx
  • docs/get-started/quickstart.mdx
  • docs/index.yml
  • docs/network-policy/approve-network-requests.mdx
  • docs/reference/commands.mdx
  • docs/reference/enterprise-readiness.mdx
  • docs/reference/platform-support.mdx
  • docs/reference/troubleshooting.mdx
  • fern/docs.yml
  • scripts/check-docs-published-routes.mts
  • test/check-docs-published-routes.test.ts
  • test/headless-server-docs.test.ts
💤 Files with no reviewable changes (4)
  • docs/deployment/brev-web-ui.mdx
  • docs/index.yml
  • docs/deployment/deploy-to-remote-gpu.mdx
  • docs/deployment/deploy-to-headless-server.mdx

Signed-off-by: Miyoung Choi <miyoungc@nvidia.com>
@miyoungc
miyoungc requested review from cv, ericksoa and jyaunches July 22, 2026 03:19
Signed-off-by: Miyoung Choi <miyoungc@nvidia.com>

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@test/headless-server-docs.test.ts`:
- Around line 15-18: Update the section extraction around unattendedGuide to
validate that both heading indexes are found and that the end index is greater
than the start index before calling slice. Make the test fail immediately when
either anchor is missing or the section order is invalid, while preserving the
existing slicing behavior for valid documentation.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 55cb3626-3ea8-4eca-b196-d59b55d44d89

📥 Commits

Reviewing files that changed from the base of the PR and between 1336bff and 84799fd.

📒 Files selected for processing (2)
  • docs/deployment/deploy-to-headless-server.mdx
  • test/headless-server-docs.test.ts
🚧 Files skipped from review as they are similar to previous changes (1)
  • docs/deployment/deploy-to-headless-server.mdx

Comment thread test/headless-server-docs.test.ts Outdated
miyoungc added 2 commits July 21, 2026 21:04
Signed-off-by: Miyoung Choi <miyoungc@nvidia.com>
Signed-off-by: Miyoung Choi <miyoungc@nvidia.com>
@miyoungc

Copy link
Copy Markdown
Collaborator Author

@coderabbitai review

@coderabbitai

coderabbitai Bot commented Jul 22, 2026

Copy link
Copy Markdown
Contributor
✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

@cjagwani cjagwani left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved after refreshing onto the current base and re-running the full exact-revision gate. The accepted #7180 scope is preserved: provider-neutral headless deployment guidance replaces the retired Brev-specific flow, legacy routes redirect directly, copyable commands match supported CLI behavior, and focused route/content contracts protect the migration. All 53 current checks are green, both advisor lanes report no findings, contributor compliance passes, and no unresolved correctness or security concerns remain.

@cv
cv merged commit ad97ec4 into main Jul 22, 2026
54 checks passed
@cv
cv deleted the codex/docs-headless-server-guide branch July 22, 2026 15:17
@cv cv mentioned this pull request Jul 22, 2026
22 tasks
cv added a commit that referenced this pull request Jul 22, 2026
<!-- markdownlint-disable MD041 -->
## Summary

Adds the canonical `## v0.0.92` release entry to
`docs/changelog/2026-07-22.mdx` before the release plan is generated.
The entry summarizes all ten pull requests merged after v0.0.91,
including the OpenClaw security update and Jaeger runtime regression
coverage.

## Changes

- Added the canonical v0.0.92 changelog entry.
- Recorded the user-visible, security, documentation, CI, and test
changes in the release range.
- #7280 -> `docs/changelog/2026-07-22.mdx`: OpenClaw 2026.7.1 and
Node.js 22.23.1 security/runtime update.
- #7378 -> `docs/changelog/2026-07-22.mdx`: canonical macOS watcher path
validation.
- #7379 -> `docs/changelog/2026-07-22.mdx`: stabilized full WSL platform
validation.
- #7380 -> `docs/changelog/2026-07-22.mdx`: bounded swap for hosted
Hermes image exports.
- #7100 -> `docs/changelog/2026-07-22.mdx`: semantic progress phases for
live E2E tests.
- #7376 -> `docs/changelog/2026-07-22.mdx`: restored v0.0.91 changelog
history and corrected tagged guidance.
- #7374 -> `docs/changelog/2026-07-22.mdx`: reviewed Homebrew formula
transition for installer integrity checks.
- #7346 -> `docs/changelog/2026-07-22.mdx`: provider-neutral headless
server deployment guidance.
- #7381 -> `docs/changelog/2026-07-22.mdx`: stabilized Hermes guard
timing and WSL ownership fixtures.
- #7339 -> `docs/changelog/2026-07-22.mdx`: real-artifact Jaeger header
remediation regression coverage.

## Type of Change

- [ ] Code change (feature, bug fix, or refactor)
- [ ] Code change with doc updates
- [x] Doc only (prose changes, no code sample modifications)
- [ ] Doc only (includes code sample changes)

## Quality Gates

- [ ] Tests added or updated for changed behavior
- [x] Existing tests cover changed behavior — justification:
`test/changelog-docs.test.ts` validates the canonical dated changelog
and release heading contract.
- [ ] Tests not applicable — justification:
- [x] Docs updated for user-facing behavior changes
- [ ] Docs not applicable — justification:
- [ ] Sensitive paths changed (security, policy, credentials, preflight,
onboarding, inference, runner, sandbox, or messaging)
- [ ] Sensitive-path review completed or maintainer-approved waiver
recorded — reviewer/approval link/justification:
- [ ] Non-success, skipped, or missing CI check accepted by maintainer —
check name, approval link, and follow-up issue:

## DGX Station Hardware Evidence

- [ ] Tested on DGX Station
- Tested commit: Not applicable
- Station profile/scenario: Not applicable
- Result: Not applicable
- Supporting evidence: Not applicable

## Verification

- [x] PR description includes a `Signed-off-by:` line and every commit
appears as `Verified` in GitHub
- [x] Normal `pre-commit`, `commit-msg`, and `pre-push` hooks passed, or
`npm run check:diff` passed when hooks were skipped or unavailable
- [x] Targeted behavior tests pass for the current change set, or tests
are marked not applicable above — `npx vitest run
test/changelog-docs.test.ts` passed 6/6 tests.
- [ ] Applicable broad gate passed — `npm test` for broad
runtime/test-harness changes; `npm run check` for repo-wide
validation/coverage changes — command/result: Not applicable to a
changelog-only change.
- [x] Quality Gates section completed with required justifications or
waivers
- [x] No secrets, API keys, or credentials committed
- [ ] `npm run docs` builds without warnings (doc changes only) — passed
with 0 errors and 2 pre-existing Fern warnings.
- [x] Doc pages follow the [style
guide](https://github.com/NVIDIA/NemoClaw/blob/main/docs/CONTRIBUTING.md)
(doc changes only)
- [ ] New doc pages include SPDX header and frontmatter (new pages only)

---
Signed-off-by: Carlos Villela <cvillela@nvidia.com>


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Documentation**
* Added `v0.0.92` release notes covering sandboxing updates
(OpenClaw/Node.js bumps, integrity pinning remediation, mcporter
handling, and upgrade validation).
* Updated deployment guidance for provider-neutral headless installs,
and improved live E2E test reporting plus phase-plan validation.
* Tightened installer integrity-check messaging during an OpenShell
Homebrew transition and expanded platform/image validation (including
macOS/WSL timing) and hosted image export behavior.
* Restored the previously missed `v0.0.91` changelog entry and release
validation guidance.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Signed-off-by: Carlos Villela <cvillela@nvidia.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: docs Documentation, examples, guides, or docs build

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add an end-to-end headless server deployment and operations guide

3 participants