* feat(openai): default fresh setup to GPT-5.6 * test(crestodian): expect GPT-5.6 Codex defaults * test(crestodian): expect GPT-5.6 bootstrap default
9.1 KiB
summary, read_when, title, sidebarTitle
| summary | read_when | title | sidebarTitle | ||
|---|---|---|---|---|---|
| CLI onboarding: guided setup for gateway, workspace, channels, and skills |
|
Onboarding (CLI) | Onboarding: CLI |
openclaw onboard
CLI onboarding is the recommended terminal setup path on macOS, Linux, and
Windows (native or WSL2). By default it detects AI access already available on
the machine, verifies it with a real completion, and configures a workspace and
local Gateway. openclaw setup runs the same flow (Setup covers
the --baseline config-only variant). Windows desktop users can also start
from Windows Hub.
The guided flow offers the classic wizard for provider sign-in, remote Gateway setup, channel pairing, daemon controls, skills, and imports. You can also open Crestodian chat or skip AI setup and return later.
Guided setup, the classic wizard, and Crestodian chat are interchangeable. The
guided flow offers chat and classic choices; inside Crestodian, use open setup wizard, open classic wizard, or open channel wizard for <channel> to switch
back. Channel setup that needs secrets always continues in a masked terminal
wizard.
Locale
The wizard localizes fixed onboarding copy. Resolve order: OPENCLAW_LOCALE,
LC_ALL, LC_MESSAGES, LANG, then English. Supported locales: en,
zh-CN, zh-TW.
OPENCLAW_LOCALE=zh-CN openclaw onboard
Product names, commands, config keys, URLs, provider IDs, model IDs, and plugin/channel labels stay in English regardless of locale.
To reconfigure later:
openclaw configure
openclaw agents add <name>
Guided default
Plain openclaw onboard follows this path:
- Accept the security notice and choose the workspace.
- Detect configured models, API-key environment variables, and supported local AI CLIs.
- Test the recommended candidate with a real completion. On failure, show the reason and continue to the next usable candidate.
- If detection is exhausted, try another detected candidate, enter a provider API key in a masked prompt, open Crestodian chat, use the classic wizard, or skip AI setup.
- Persist the model, credential, workspace, and QuickStart Gateway settings only after a passing test. Then install/start the Gateway service and probe it for reachability.
Re-running the command on a configured installation tests the current default
model first, making the guided flow a verification and repair pass. A failing
check never replaces the configured model automatically; onboarding stops and
asks how to continue. Run openclaw channels add or openclaw configure for
later additions.
Classic wizard: QuickStart vs Advanced
Run openclaw onboard --classic to open the full wizard. It starts with a
choice between QuickStart (defaults) and Advanced (full control). Pass
--flow quickstart or --flow advanced (alias manual) to select the classic
flow and skip that prompt.
Remote mode (--mode remote) always uses the advanced flow; it only
configures this machine to connect to a Gateway elsewhere and never installs
or changes anything on the remote host.
What classic onboarding configures
Local mode (default) walks through these steps:
- Model/Auth - pick a provider auth flow (API key, OAuth, or
provider-specific manual auth), including Custom Provider
(OpenAI-compatible, OpenAI Responses-compatible, Anthropic-compatible, or
Unknown auto-detect). Pick a default model.
Fresh OpenAI API-key setup defaults to
openai/gpt-5.6(the bare direct-API id resolves to Sol); fresh ChatGPT/Codex setup defaults toopenai/gpt-5.6-sol. Re-running setup preserves an existing explicit model, includingopenai/gpt-5.5. Selectopenai/gpt-5.5explicitly if the account does not expose GPT-5.6. Security note: if this agent will run tools or process webhook/hook content, prefer the strongest latest-generation model available and keep tool policy strict - weaker or older tiers are easier to prompt-inject. For non-interactive runs,--secret-input-mode refstores env-backed refs instead of plaintext API key values; the referenced env var must already be set, or onboarding fails fast. Interactive secret reference mode can point at an environment variable or a configured provider ref (fileorexec), with a fast preflight check before saving. After model/auth setup, the wizard offers an optional live completion test; a failure can return to model/auth setup once or be ignored without blocking the rest of onboarding. - Workspace - directory for agent files (default
~/.openclaw/workspace). Seeds bootstrap files. - Gateway - port, bind address, auth mode, Tailscale exposure. In
interactive token mode, choose plaintext token storage (default) or opt
into a SecretRef. Non-interactive SecretRef path:
--gateway-token-ref-env <ENV_VAR>. - Channels - built-in and official plugin chat channels, including Discord, Feishu, Google Chat, iMessage, Mattermost, Microsoft Teams, QQ Bot, Signal, Slack, Telegram, WhatsApp, and more.
- Daemon - installs a LaunchAgent (macOS), a systemd user unit
(Linux/WSL2), or a native Windows Scheduled Task with a per-user
Startup-folder fallback.
If token auth is required and
gateway.auth.tokenis SecretRef-managed, daemon install validates it but does not persist a resolved token into supervisor service environment metadata; an unresolved SecretRef blocks install with guidance. If bothgateway.auth.tokenandgateway.auth.passwordare set whilegateway.auth.modeis unset, install is blocked until you set the mode explicitly. - Health check - starts the Gateway and verifies it is reachable.
- Skills - installs recommended skills and their optional dependencies.
--flow import runs a detected migration flow (for example Hermes) in the
classic wizard instead of fresh setup; see Migrate and the migration guides under
Install. openclaw onboard --modern starts
Crestodian, a conversational setup/repair assistant.
openclaw crestodian opens the same assistant directly.
Add another agent
Use openclaw agents add <name> to create a separate agent with its own
workspace, sessions, and auth profiles. Running without --workspace starts
an interactive flow for name, workspace, auth, channels, and bindings - it is
not the full openclaw onboard wizard.
What it sets:
agents.list[].nameagents.list[].workspaceagents.list[].agentDir
Notes:
- Default workspace:
~/.openclaw/workspace-<agentId>(or underagents.defaults.workspaceif that is set). - Add
bindingsto route inbound messages to this agent (onboarding can do this for you). - Non-interactive flags:
--model,--agent-dir,--bind,--non-interactive.
Full reference
For detailed step-by-step behavior and config outputs, see
CLI setup reference.
For non-interactive examples, see CLI automation.
For the full flag reference, see openclaw onboard.
Related docs
- CLI command reference:
openclaw onboard - Onboarding overview: Onboarding overview
- macOS app onboarding: Onboarding
- Agent first-run ritual: Agent Bootstrapping