Onboarding Wizard (CLI)
The onboarding wizard is the recommended way to set up Clawdbot on macOS, Linux, or Windows (via WSL2; strongly recommended). It configures a local Gateway or a remote Gateway connection, plus providers, skills, and workspace defaults in one guided flow. Primary entrypoint:QuickStart vs Advanced
The wizard starts with QuickStart (defaults) vs Advanced (full control). QuickStart keeps the defaults:- Local gateway (loopback)
- Workspace default (or existing workspace)
- Gateway port 18789
- Gateway auth Off (loopback only)
- Tailscale exposure Off
- Telegram + WhatsApp DMs default to allowlist (you’ll be prompted for a number)
What the wizard does
Local mode (default) walks you through:- Model/auth (Anthropic or OpenAI Codex OAuth recommended, API key optional, Minimax M2.1 via LM Studio)
- Workspace location + bootstrap files
- Gateway settings (port/bind/auth/tailscale)
- Providers (Telegram, WhatsApp, Discord, Signal)
- Daemon install (LaunchAgent / systemd user unit)
- Health check
- Skills (recommended)
--json does not imply non-interactive mode. Use --non-interactive (and --workspace) for scripts.
Flow details (local)
-
Existing config detection
- If
~/.clawdbot/clawdbot.jsonexists, choose Keep / Modify / Reset. - Reset uses
trash(neverrm) and offers scopes:- Config only
- Config + credentials + sessions
- Full reset (also removes workspace)
- If
-
Model/Auth
- Anthropic OAuth (Claude CLI): on macOS the wizard checks Keychain item “Claude Code-credentials” (choose “Always Allow” so launchd starts don’t block); on Linux/Windows it reuses
~/.claude/.credentials.jsonif present. - Anthropic OAuth (recommended): browser flow; paste the
code#state. - OpenAI Codex OAuth (Codex CLI): if
~/.codex/auth.jsonexists, the wizard can reuse it. - OpenAI Codex OAuth: browser flow; paste the
code#state.- Sets
agent.modeltoopenai-codex/gpt-5.2when model is unset oropenai/*.
- Sets
- API key: stores the key for you.
- Minimax M2.1 (LM Studio): config is auto‑written for the LM Studio endpoint.
- Skip: no auth configured yet.
- Wizard runs a model check and warns if the configured model is unknown or missing auth.
- Anthropic OAuth (Claude CLI): on macOS the wizard checks Keychain item “Claude Code-credentials” (choose “Always Allow” so launchd starts don’t block); on Linux/Windows it reuses
- OAuth credentials live in
~/.clawdbot/credentials/oauth.json; auth profiles live in~/.clawdbot/agents/<agentId>/agent/auth-profiles.json(API keys + OAuth). - More detail: /concepts/oauth
-
Workspace
- Default
~/clawd(configurable). - Seeds the workspace files needed for the agent bootstrap ritual.
- Full workspace layout + backup guide:
docs/agent-workspace.md
- Default
-
Gateway
- Port, bind, auth mode, tailscale exposure.
- Auth recommendation: keep Off for single-machine loopback setups. Use Token for multi-machine access or non-loopback binds.
- Non‑loopback binds require auth.
-
Providers
- WhatsApp: optional QR login.
- Telegram: bot token.
- Discord: bot token.
- Signal: optional
signal-cliinstall + account config. - iMessage: local
imsgCLI path + DB access.
- DM security: default is pairing. First DM sends a code; approve via
clawdbot pairing approve --provider <provider> <code>or use allowlists.
-
Daemon install
- macOS: LaunchAgent
- Requires a logged-in user session; for headless, use a custom LaunchDaemon (not shipped).
- Linux (and Windows via WSL2): systemd user unit
- Wizard attempts to enable lingering via
loginctl enable-linger <user>so the Gateway stays up after logout. - May prompt for sudo (writes
/var/lib/systemd/linger); it tries without sudo first.
- Wizard attempts to enable lingering via
- Runtime selection: Node (recommended; required for WhatsApp) or Bun (faster, but incompatible with WhatsApp).
- macOS: LaunchAgent
-
Health check
- Starts the Gateway (if needed) and runs
clawdbot health. - Tip:
clawdbot status --deepruns local provider probes without a gateway.
- Starts the Gateway (if needed) and runs
-
Skills (recommended)
- Reads the available skills and checks requirements.
- Lets you choose a node manager: npm / pnpm / bun.
- Installs optional dependencies (some use Homebrew on macOS).
-
Finish
- Summary + next steps, including iOS/Android/macOS apps for extra features.
- If no GUI is detected, the wizard prints SSH port-forward instructions for the Control UI instead of opening a browser.
- If the Control UI assets are missing, the wizard attempts to build them; fallback is
pnpm ui:install && pnpm ui:build.
Remote mode
Remote mode configures a local client to connect to a Gateway elsewhere. What you’ll set:- Remote Gateway URL (
ws://...) - Optional token
- No remote installs or daemon changes are performed.
- If the Gateway is loopback‑only, use SSH tunneling or a tailnet.
- Discovery hints:
- macOS: Bonjour (
dns-sd) - Linux: Avahi (
avahi-browse)
- macOS: Bonjour (
Add another agent
Useclawdbot agents add <name> to create a separate agent with its own workspace,
sessions, and auth profiles. Running without --workspace launches the wizard.
What it sets:
routing.agents.<agentId>.namerouting.agents.<agentId>.workspacerouting.agents.<agentId>.agentDir
- Default workspaces follow
~/clawd-<agentId>. - Add
routing.bindingsto route inbound messages (the wizard can do this). - Non-interactive flags:
--model,--agent-dir,--bind,--non-interactive.
Non‑interactive mode
Use--non-interactive to automate or script onboarding:
--json for a machine‑readable summary.
Add agent (non‑interactive) example:
Gateway wizard RPC
The Gateway exposes the wizard flow over RPC (wizard.start, wizard.next, wizard.cancel, wizard.status).
Clients (macOS app, Control UI) can render steps without re‑implementing onboarding logic.
Signal setup (signal-cli)
The wizard can installsignal-cli from GitHub releases:
- Downloads the appropriate release asset.
- Stores it under
~/.clawdbot/tools/signal-cli/<version>/. - Writes
signal.cliPathto your config.
- JVM builds require Java 21.
- Native builds are used when available.
- Windows uses WSL2; signal-cli install follows the Linux flow inside WSL.
What the wizard writes
Typical fields in~/.clawdbot/clawdbot.json:
agent.workspaceagent.model/models.providers(if Minimax chosen)gateway.*(mode, bind, auth, tailscale)telegram.botToken,discord.token,signal.*,imessage.*skills.install.nodeManagerwizard.lastRunAtwizard.lastRunVersionwizard.lastRunCommitwizard.lastRunCommandwizard.lastRunMode
clawdbot agents add writes routing.agents.<agentId> and optional routing.bindings.
WhatsApp credentials go under ~/.clawdbot/credentials/whatsapp/<accountId>/.
Sessions are stored under ~/.clawdbot/agents/<agentId>/sessions/.
Related docs
- macOS app onboarding:
docs/onboarding.md - Config reference:
docs/configuration.md - Providers:
docs/whatsapp.md,docs/telegram.md,docs/discord.md,docs/signal.md,docs/imessage.md - Skills:
docs/skills.md,docs/skills-config.md