Skip to content

docs: fix Deep Agents troubleshooting security link - #6606

Merged
cv merged 2 commits into
mainfrom
codex/docs-6558-deep-agents-security-link
Jul 9, 2026
Merged

docs: fix Deep Agents troubleshooting security link#6606
cv merged 2 commits into
mainfrom
codex/docs-6558-deep-agents-security-link

Conversation

@miyoungc

@miyoungc miyoungc commented Jul 9, 2026

Copy link
Copy Markdown
Collaborator

Summary

Fixes the shared troubleshooting page so the OpenShell compatibility review link stays within the active OpenClaw, Hermes, or Deep Agents guide instead of sending Deep Agents readers to the OpenClaw guide.
The existing route checker accepted the old absolute URL because it resolved to a published page, so this PR also adds a focused variant regression assertion.

Related Issue

Closes #6558.

Changes

  • Replace the hard-coded OpenClaw compatibility-review URL in docs/reference/troubleshooting.mdx with a route-style relative link.
  • Publish the existing OpenShell 0.0.72 compatibility review in the Deep Agents security navigation.
  • Verify generated troubleshooting pages keep the review link within each agent guide.

Type of Change

  • Code change (feature, bug fix, or refactor)
  • Code change with doc updates
  • Doc only (prose changes, no code sample modifications)
  • Doc only (includes code sample changes)

Quality Gates

  • Tests added or updated for changed behavior
  • Existing tests cover changed behavior — justification:
  • Tests not applicable — justification:
  • Docs updated for user-facing behavior changes
  • Docs not applicable — justification:
  • Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging)
  • Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification:
  • Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue:

Verification

  • PR description includes the DCO sign-off declaration and every commit appears as Verified in GitHub
  • Normal pre-commit, commit-msg, and pre-push hooks passed, or npm run check:diff passed when hooks were skipped or unavailable
  • Targeted behavior tests pass for the current change set, or tests are marked not applicable above — command/result or justification: npx vitest run --project integration test/agent-variant-docs.test.ts passed 8/8 tests.
  • Applicable broad gate passed — npm test for broad runtime/test-harness changes; npm run check for repo-wide validation/coverage changes — command/result:
  • Quality Gates section completed with required justifications or waivers
  • No secrets, API keys, or credentials committed
  • npm run docs builds without warnings (doc changes only) — command passed; Fern reported the existing light-mode accent contrast warning (2.41:1), and the route checker reported all internal links resolve.
  • Doc pages follow the style guide (doc changes only)
  • New doc pages include SPDX header and frontmatter (new pages only)

Signed-off-by: Miyoung Choi miyoungc@nvidia.com

Summary by CodeRabbit

  • New Features
    • Added a new Security page entry for the OpenShell 0.0.72 Compatibility Review to the Deep Agents documentation navigation.
  • Bug Fixes
    • Updated troubleshooting documentation to link directly to the new security review page via the correct relative URL.
  • Tests
    • Added automated checks to ensure the security review link renders correctly across multiple agent variant guides and is not rewritten into a variant-specific path.

@miyoungc miyoungc added the area: docs Documentation, examples, guides, or docs build label Jul 9, 2026
@miyoungc miyoungc self-assigned this Jul 9, 2026
@coderabbitai

coderabbitai Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 589723da-9d30-4654-abd6-63f9c595135d

📥 Commits

Reviewing files that changed from the base of the PR and between 1edc238 and 7cb3c10.

📒 Files selected for processing (1)
  • test/agent-variant-docs.test.ts
🚧 Files skipped from review as they are similar to previous changes (1)
  • test/agent-variant-docs.test.ts

📝 Walkthrough

Walkthrough

The PR adds the OpenShell 0.0.72 compatibility review to NemoClaw security navigation, updates the troubleshooting link to its relative security path, and tests link rendering across all agent variants.

Changes

OpenShell compatibility review

Layer / File(s) Summary
Documentation routing and link validation
docs/index.yml, docs/reference/troubleshooting.mdx, test/agent-variant-docs.test.ts
Adds the compatibility review to Deep Agents security navigation, updates the troubleshooting link, and verifies correct relative links across openclaw, hermes, and deepagents.

Estimated code review effort: 2 (Simple) | ~10 minutes

Suggested reviewers: prekshivyas, jyaunches

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly describes the docs fix for the Deep Agents troubleshooting security link.
Linked Issues check ✅ Passed The PR fixes the broken troubleshooting link context and adds a regression test matching issue #6558.
Out of Scope Changes check ✅ Passed The navigation update and test are aligned with the stated docs-link fix and add no unrelated scope.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch codex/docs-6558-deep-agents-security-link

Comment @coderabbitai help to get the list of available commands.

@github-code-quality

github-code-quality Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

Code Coverage Overview

Languages: TypeScript

TypeScript / code-coverage/plugin

The overall coverage remains at 96%, unchanged from the main branch.

TypeScript / code-coverage/cli

The overall coverage in the codex/docs-6558-deep... branch remains at 77%, unchanged from the main branch.

Show a code coverage summary of the most impacted files.
File main ac9e1bc codex/docs-6558-deep... 7cb3c10 +/-
src/lib/state/config-io.ts 95% 88% -7%
src/lib/actions...-add-restart.ts 19% 14% -5%
src/lib/messagi.../persistence.ts 95% 92% -3%
src/lib/credentials/store.ts 61% 59% -2%
src/lib/adapters/http/probe.ts 89% 91% +2%
src/lib/security/redact.ts 96% 98% +2%
src/lib/actions...ridge-policy.ts 62% 64% +2%
src/lib/actions...lution-probe.ts 88% 94% +6%
src/lib/actions...e-validation.ts 81% 90% +9%
src/lib/actions...x/mcp-bridge.ts 35% 44% +9%

Updated July 09, 2026 21:25 UTC
Code Coverage is in Public Preview. Learn more and provide us with your feedback.

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@test/agent-variant-docs.test.ts`:
- Around line 185-187: The current test for renderAgentVariantPage only covers
the sourcePath case, so it never exercises the rewriteRelativePaths branch that
runs when both sourcePath and outputPath are present. Update the agent variant
troubleshooting test to pass the generated troubleshooting outputPath for each
variant, then assert against the final rewritten rendered link rather than the
unchanged source link. Use renderAgentVariantPage and rewriteRelativePaths as
the key references while adjusting the test setup and expectation.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 38f4ed42-af78-4aa1-a9cf-a4575387c702

📥 Commits

Reviewing files that changed from the base of the PR and between 614122b and 1edc238.

📒 Files selected for processing (3)
  • docs/index.yml
  • docs/reference/troubleshooting.mdx
  • test/agent-variant-docs.test.ts

Comment thread test/agent-variant-docs.test.ts
@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

E2E Advisor Recommendation

Required E2E: None
Optional E2E: None

Workflow run

Full advisor summary

E2E Recommendation Advisor

Base: origin/main
Head: HEAD
Confidence: high

Required E2E

  • None. No E2E is recommended because this PR is docs/docs-test only: it updates a generated-docs navigation entry, fixes an internal troubleshooting link, and adds a documentation rendering assertion. The deterministic risk plan lists no required jobs, and the changes cannot affect runtime or real assistant user flows.

Optional E2E

  • None.

New E2E recommendations

  • None.

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

E2E Target Recommendation

Required E2E targets: None
Optional E2E targets: None

Workflow run

Full E2E target advisor summary

E2E Target Advisor

Base: origin/main
Head: HEAD
Confidence: high

Required E2E targets

  • None. Docs-only changes and tests outside test/e2e do not affect the NemoClaw E2E target workflow, registry, runtime support, fixtures, or live target behavior.

Optional E2E targets

  • None.

Relevant changed files

  • None.

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

PR Review Advisor (Nemotron Ultra) — No blocking findings

Merge posture: No blocking advisor findings
Primary next action: No advisor follow-up required beyond maintainer review.
Open items: 0 required · 0 warnings · 0 suggestions · 0 test follow-ups
Since last review: 0 prior items resolved · 0 still apply · 0 new items found

Workflow run details

This is an automated, non-binding review; it still expects maintainers and agents to respond to each required or warning item. Treat suggestions as current-PR improvements when they touch changed code; defer only with maintainer rationale or a linked follow-up. A human maintainer must make the final merge decision.

@github-actions

github-actions Bot commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

PR Review Advisor — No blocking findings

Merge posture: No blocking advisor findings
Primary next action: Add or justify PRA-T1 and any related test follow-ups.
Open items: 0 required · 0 warnings · 0 suggestions · 1 test follow-up
Since last review: 0 prior items resolved · 0 still apply · 0 new items found

Action checklist

  • PRA-T1 Add or justify test follow-up: Acceptance clause
Test follow-ups to resolve or justify

If these cover changed behavior, prefer adding them in this PR; otherwise state why existing coverage is enough or link the follow-up.

  • PRA-T1 Acceptance clause — See NVBug for full reproduction steps and environment details. — add test evidence or identify existing coverage. The linked issue body contains only this sentence and the review context returned no issue comments, so no additional public reproduction clauses are available to verify beyond the issue title.

Workflow run details

This is an automated, non-binding review; it still expects maintainers and agents to respond to each required or warning item. Treat suggestions as current-PR improvements when they touch changed code; defer only with maintainer rationale or a linked follow-up. A human maintainer must make the final merge decision.

@miyoungc

miyoungc commented Jul 9, 2026

Copy link
Copy Markdown
Collaborator Author

PRA-T1 is covered by the focused generated-variant regression test and docs route validation.

  • test/agent-variant-docs.test.ts renders the troubleshooting page for OpenClaw, Hermes, and Deep Agents with each production generated outputPath.
  • The test asserts the final link remains the guide-local ../security/openshell-0.0.72-compatibility-review route and rejects hard-coded /user-guide/<variant>/... URLs; npx vitest run --project integration test/agent-variant-docs.test.ts passes 8/8 tests.
  • npm run docs regenerates the variants and reports that all internal links resolve to published routes, including the new Deep Agents compatibility-review destination.

The public issue provides no additional reproduction clauses beyond the title and its NVBug pointer, so these checks directly cover the observable documented behavior available in this repository.

@cv
cv merged commit 43f9613 into main Jul 9, 2026
47 checks passed
@cv
cv deleted the codex/docs-6558-deep-agents-security-link branch July 9, 2026 21:41
Hadar301 pushed a commit to Hadar301/NemoClaw-OpenShift that referenced this pull request Jul 12, 2026
<!-- markdownlint-disable MD041 -->
## Summary
<!-- 1-3 sentences: what this PR does and why. -->

Fixes the shared troubleshooting page so the OpenShell compatibility
review link stays within the active OpenClaw, Hermes, or Deep Agents
guide instead of sending Deep Agents readers to the OpenClaw guide.
The existing route checker accepted the old absolute URL because it
resolved to a published page, so this PR also adds a focused variant
regression assertion.

## Related Issue
<!-- Fixes #NNN or Closes #NNN. Remove this section if none. -->

Closes NVIDIA#6558.

## Changes
<!-- Bullet list of key changes. -->

- Replace the hard-coded OpenClaw compatibility-review URL in
`docs/reference/troubleshooting.mdx` with a route-style relative link.
- Publish the existing OpenShell 0.0.72 compatibility review in the Deep
Agents security navigation.
- Verify generated troubleshooting pages keep the review link within
each agent guide.

## Type of Change

- [ ] Code change (feature, bug fix, or refactor)
- [x] Code change with doc updates
- [ ] Doc only (prose changes, no code sample modifications)
- [ ] Doc only (includes code sample changes)

## Quality Gates
<!-- Check exactly one tests line and one docs line. Check other lines
when applicable. Add every requested justification or approval
reference. -->
- [x] Tests added or updated for changed behavior
- [ ] Existing tests cover changed behavior — justification:
- [ ] Tests not applicable — justification:
- [x] Docs updated for user-facing behavior changes
- [ ] Docs not applicable — justification:
- [ ] Sensitive paths changed (security, policy, credentials, preflight,
onboarding, inference, runner, sandbox, or messaging)
- [ ] Sensitive-path review completed or maintainer-approved waiver
recorded — reviewer/approval link/justification:
- [ ] Non-success, skipped, or missing CI check accepted by maintainer —
check name, approval link, and follow-up issue:

## Verification
<!-- Check each applicable item only when supported by the requested
evidence. Run targeted tests once per relevant change set and rerun
after later edits or hook autofixes that can affect the tested behavior.
Do not rerun hook-covered checks. -->
- [x] PR description includes the DCO sign-off declaration and every
commit appears as `Verified` in GitHub
- [x] Normal `pre-commit`, `commit-msg`, and `pre-push` hooks passed, or
`npm run check:diff` passed when hooks were skipped or unavailable
- [x] Targeted behavior tests pass for the current change set, or tests
are marked not applicable above — command/result or justification: `npx
vitest run --project integration test/agent-variant-docs.test.ts` passed
8/8 tests.
- [ ] Applicable broad gate passed — `npm test` for broad
runtime/test-harness changes; `npm run check` for repo-wide
validation/coverage changes — command/result:
- [x] Quality Gates section completed with required justifications or
waivers
- [x] No secrets, API keys, or credentials committed
- [ ] `npm run docs` builds without warnings (doc changes only) —
command passed; Fern reported the existing light-mode accent contrast
warning (2.41:1), and the route checker reported all internal links
resolve.
- [x] Doc pages follow the [style
guide](https://github.com/NVIDIA/NemoClaw/blob/main/docs/CONTRIBUTING.md)
(doc changes only)
- [ ] New doc pages include SPDX header and frontmatter (new pages only)

---
<!-- DCO sign-off is required in this PR description, and every commit
must appear as Verified in GitHub. Run: git config user.name && git
config user.email -->
Signed-off-by: Miyoung Choi <miyoungc@nvidia.com>


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Added a new **Security** page entry for the **OpenShell 0.0.72
Compatibility Review** to the Deep Agents documentation navigation.
* **Bug Fixes**
* Updated troubleshooting documentation to link directly to the new
security review page via the correct relative URL.
* **Tests**
* Added automated checks to ensure the security review link renders
correctly across multiple agent variant guides and is not rewritten into
a variant-specific path.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
apurvvkumaria pushed a commit that referenced this pull request Jul 22, 2026
## Summary

Fixes a broken link that 404s for Deep Agents readers on the OpenShell
0.0.72 compatibility review page.

The page renders in the openclaw, hermes, and deepagents variants and
links to the OpenShell 0.0.71 gateway authentication review. That review
page is intentionally scoped to openclaw and hermes only. Its content is
specific to those agents (Hermes env-file secret boundaries and the
OpenClaw gateway-runtime API) and it was deliberately left out of the
deepagents nav when the variant was added. A later scoped PR (#6606)
added only the 0.0.72 review to the deepagents nav and included a
regression test asserting that scoping, so adding 0.0.71 to the
deepagents nav would contradict a prior decision and break that test.

Instead of forcing the 0.0.71 page into the deepagents nav, this scopes
the link itself. The sentence is wrapped in AgentOnly
variant="openclaw,hermes" so those readers keep the working link, and a
parallel AgentOnly variant="deepagents" block carries the same sentence
as plain text so Deep Agents readers still get the information without a
dead link. This follows the existing convention in
docs/manage-sandboxes/run-sandboxes.mdx.

## Test plan

npx vitest run test/agent-variant-docs.test.ts passes (13 tests).
npm run docs builds with 0 errors. Verified the generated output:
openclaw and hermes keep the link, deepagents renders the plain-text
sentence with no broken link.

Signed-off-by: Atharv Kumaria <kumariaaatharv@gmail.com>

Signed-off-by: Atharv Kumaria <kumariaaatharv@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area: docs Documentation, examples, guides, or docs build

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[All Platforms][Docs] troubleshooting page links to OpenClaw security doc from Deep Agents guide

3 participants