Skip to content

docs(security): replace deprecated Deep Agents deploy command - #6604

Merged
cv merged 1 commit into
mainfrom
codex/6546-replace-deepagents-deploy
Jul 9, 2026
Merged

docs(security): replace deprecated Deep Agents deploy command#6604
cv merged 1 commit into
mainfrom
codex/6546-replace-deepagents-deploy

Conversation

@miyoungc

@miyoungc miyoungc commented Jul 9, 2026

Copy link
Copy Markdown
Collaborator

Summary

This PR replaces the deprecated Deep Agents deploy example in the shared credential-storage page with the supported onboard --name flow.
It also removes Brev-only credential-forwarding claims that do not apply to current onboarding.

Related Issue

Closes #6546.

Changes

  • Rename the deprecated deploy section to describe current onboarding behavior.
  • Render nemo-deepagents onboard --name my-instance in the generated Deep Agents guide.
  • Remove obsolete HF_TOKEN, Telegram, and Brev forwarding guidance from the example.

Type of Change

  • Code change (feature, bug fix, or refactor)
  • Code change with doc updates
  • Doc only (prose changes, no code sample modifications)
  • Doc only (includes code sample changes)

Quality Gates

  • Tests added or updated for changed behavior
  • Existing tests cover changed behavior — justification: the shared-agent variant and copyable-command tests cover placeholder rendering and fenced command structure.
  • Tests not applicable — justification:
  • Docs updated for user-facing behavior changes
  • Docs not applicable — justification:
  • Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging)
  • Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification: Pending maintainer review of this docs-only credential guidance correction.
  • Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue:

Verification

  • PR description includes the DCO sign-off declaration and every commit appears as Verified in GitHub
  • Normal pre-commit, commit-msg, and pre-push hooks passed, or npm run check:diff passed when hooks were skipped or unavailable
  • Targeted behavior tests pass for the current change set, or tests are marked not applicable above — command/result or justification: npx vitest run --project integration test/sync-agent-variant-docs.test.ts test/docs-copyable-command-blocks.test.ts (5 tests passed).
  • Applicable broad gate passed — npm test for broad runtime/test-harness changes; npm run check for repo-wide validation/coverage changes — command/result: Not applicable to this focused docs-only change.
  • Quality Gates section completed with required justifications or waivers — pending sensitive-path review of the credential guidance.
  • No secrets, API keys, or credentials committed
  • npm run docs builds without warnings (doc changes only) — command passed with the repository's existing light-mode accent contrast warning.
  • Doc pages follow the style guide (doc changes only)
  • New doc pages include SPDX header and frontmatter (new pages only)

Signed-off-by: Miyoung Choi miyoungc@nvidia.com

Summary by CodeRabbit

  • Documentation
    • Updated credential storage guidance to describe onboarding behavior for credentials read from the host environment.
    • Added an example showing how to pass an environment-based API key during onboarding.
    • Removed outdated deploy-specific instructions from the affected section.

@miyoungc miyoungc added the area: docs Documentation, examples, guides, or docs build label Jul 9, 2026
@miyoungc miyoungc self-assigned this Jul 9, 2026
@miyoungc miyoungc added the area: docs Documentation, examples, guides, or docs build label Jul 9, 2026
@coderabbitai

coderabbitai Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 8e892ea9-834f-4a55-8daf-67975b56f49d

📥 Commits

Reviewing files that changed from the base of the PR and between 614122b and d2fe02d.

📒 Files selected for processing (1)
  • docs/security/credential-storage.mdx

📝 Walkthrough

Walkthrough

Updates credential-storage documentation to describe $$nemoclaw onboard reading host environment credentials, registering them with the OpenShell gateway, and creating the sandbox.

Changes

Credential onboarding documentation

Layer / File(s) Summary
Onboarding credential flow
docs/security/credential-storage.mdx
Replaces deploy-based instructions with $$nemoclaw onboard guidance and an NVIDIA_INFERENCE_API_KEY example.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Possibly related PRs

  • NVIDIA/NemoClaw#5366: Aligns credential documentation with NVIDIA_INFERENCE_API_KEY as the canonical hosted-inference credential name.
🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly summarizes the main docs change from the deprecated deploy flow to the new onboarding flow.
Linked Issues check ✅ Passed The updated docs replace the deprecated deploy example with a supported onboard command that reads env credentials and starts a sandbox.
Out of Scope Changes check ✅ Passed The PR appears documentation-only and stays within the credential-storage update described by the linked issue.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch codex/6546-replace-deepagents-deploy

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

E2E Advisor Recommendation

Required E2E: None
Optional E2E: None

Workflow run

Full advisor summary

E2E Recommendation Advisor

Base: origin/main
Head: HEAD
Confidence: high

Required E2E

  • None. Docs-only change to credential storage documentation. It cannot affect installer/onboarding, sandbox lifecycle, credentials implementation, security boundaries, network policy, inference routing, deployment, or real assistant flows at runtime. The deterministic risk plan lists no required jobs.

Optional E2E

  • None.

New E2E recommendations

  • None.

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

E2E Target Recommendation

Required E2E targets: None
Optional E2E targets: None

Workflow run

Full E2E target advisor summary

E2E Target Advisor

Failed: Target advisor SDK provider error: session: 429 status code (no body); turn: target-analysis: 429 status code (no body)

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

PR Review Advisor — No blocking findings

Merge posture: No blocking advisor findings
Primary next action: No advisor follow-up required beyond maintainer review.
Open items: 0 required · 0 warnings · 0 suggestions · 0 test follow-ups
Since last review: 0 prior items resolved · 0 still apply · 0 new items found

Workflow run details

This is an automated, non-binding review; it still expects maintainers and agents to respond to each required or warning item. Treat suggestions as current-PR improvements when they touch changed code; defer only with maintainer rationale or a linked follow-up. A human maintainer must make the final merge decision.

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

PR Review Advisor (Nemotron Ultra) — No blocking findings

Merge posture: No blocking advisor findings
Primary next action: No advisor follow-up required beyond maintainer review.
Open items: 0 required · 0 warnings · 0 suggestions · 0 test follow-ups
Since last review: 0 prior items resolved · 0 still apply · 0 new items found

Workflow run details

This is an automated, non-binding review; it still expects maintainers and agents to respond to each required or warning item. Treat suggestions as current-PR improvements when they touch changed code; defer only with maintainer rationale or a linked follow-up. A human maintainer must make the final merge decision.

@cv
cv merged commit fe61cb9 into main Jul 9, 2026
43 of 48 checks passed
@cv
cv deleted the codex/6546-replace-deepagents-deploy branch July 9, 2026 21:42
Hadar301 pushed a commit to Hadar301/NemoClaw-OpenShift that referenced this pull request Jul 12, 2026
…#6604)

<!-- markdownlint-disable MD041 -->
## Summary
<!-- 1-3 sentences: what this PR does and why. -->
This PR replaces the deprecated Deep Agents `deploy` example in the
shared credential-storage page with the supported `onboard --name` flow.
It also removes Brev-only credential-forwarding claims that do not apply
to current onboarding.

## Related Issue
<!-- Fixes #NNN or Closes #NNN. Remove this section if none. -->
Closes NVIDIA#6546.

## Changes
<!-- Bullet list of key changes. -->
- Rename the deprecated deploy section to describe current onboarding
behavior.
- Render `nemo-deepagents onboard --name my-instance` in the generated
Deep Agents guide.
- Remove obsolete `HF_TOKEN`, Telegram, and Brev forwarding guidance
from the example.

## Type of Change

- [ ] Code change (feature, bug fix, or refactor)
- [ ] Code change with doc updates
- [ ] Doc only (prose changes, no code sample modifications)
- [x] Doc only (includes code sample changes)

## Quality Gates
<!-- Check exactly one tests line and one docs line. Check other lines
when applicable. Add every requested justification or approval
reference. -->
- [ ] Tests added or updated for changed behavior
- [x] Existing tests cover changed behavior — justification: the
shared-agent variant and copyable-command tests cover placeholder
rendering and fenced command structure.
- [ ] Tests not applicable — justification:
- [x] Docs updated for user-facing behavior changes
- [ ] Docs not applicable — justification:
- [x] Sensitive paths changed (security, policy, credentials, preflight,
onboarding, inference, runner, sandbox, or messaging)
- [ ] Sensitive-path review completed or maintainer-approved waiver
recorded — reviewer/approval link/justification: Pending maintainer
review of this docs-only credential guidance correction.
- [ ] Non-success, skipped, or missing CI check accepted by maintainer —
check name, approval link, and follow-up issue:

## Verification
<!-- Check each applicable item only when supported by the requested
evidence. Run targeted tests once per relevant change set and rerun
after later edits or hook autofixes that can affect the tested behavior.
Do not rerun hook-covered checks. -->
- [x] PR description includes the DCO sign-off declaration and every
commit appears as `Verified` in GitHub
- [x] Normal `pre-commit`, `commit-msg`, and `pre-push` hooks passed, or
`npm run check:diff` passed when hooks were skipped or unavailable
- [x] Targeted behavior tests pass for the current change set, or tests
are marked not applicable above — command/result or justification: `npx
vitest run --project integration test/sync-agent-variant-docs.test.ts
test/docs-copyable-command-blocks.test.ts` (5 tests passed).
- [ ] Applicable broad gate passed — `npm test` for broad
runtime/test-harness changes; `npm run check` for repo-wide
validation/coverage changes — command/result: Not applicable to this
focused docs-only change.
- [ ] Quality Gates section completed with required justifications or
waivers — pending sensitive-path review of the credential guidance.
- [x] No secrets, API keys, or credentials committed
- [ ] `npm run docs` builds without warnings (doc changes only) —
command passed with the repository's existing light-mode accent contrast
warning.
- [x] Doc pages follow the [style
guide](https://github.com/NVIDIA/NemoClaw/blob/main/docs/CONTRIBUTING.md)
(doc changes only)
- [ ] New doc pages include SPDX header and frontmatter (new pages only)

---
<!-- DCO sign-off is required in this PR description, and every commit
must appear as Verified in GitHub. Run: git config user.name && git
config user.email -->
Signed-off-by: Miyoung Choi <miyoungc@nvidia.com>


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->

## Summary by CodeRabbit

* **Documentation**
* Updated credential storage guidance to describe onboarding behavior
for credentials read from the host environment.
* Added an example showing how to pass an environment-based API key
during onboarding.
* Removed outdated deploy-specific instructions from the affected
section.

<!-- end of auto-generated comment: release notes by coderabbit.ai -->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: docs Documentation, examples, guides, or docs build

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[All Platforms][Docs] credential-storage page references deprecated nemo-deepagents deploy command

3 participants