Tools
Agent System
By Tanaab-based Agent Management Solution
Install
openclaw plugins install npm:@tanaab/openclaw-agent-systemConfiguration Example
schema-version: 1
agent:
id: tanaabot
name: Tanaabot
email:
from-environment: AGENT_EMAIL
environment:
# import this agent's email and github token from one 1password environment.
op: z7q4m2n9v6k3p8r5t1w0x4c2ba
required:
- AGENT_EMAIL
- GH_TOKEN_TANAABOT
github:
username: tanaabot
token: GH_TOKEN_TANAABOT
policy:
destructive: ask
admin: deny
unknown: deny
config:
git-protocol: sshREADME
# Agent System
<p align="center">
<img src="./assets/agent-system.png" alt="Agent System mark" width="180" />
</p>
<p align="center">
<a href="https://github.com/tanaabased/openclaw-agent-system/releases"><img src="https://img.shields.io/github/v/release/tanaabased/openclaw-agent-system" alt="Latest release" /></a>
<a href="https://github.com/tanaabased/openclaw-agent-system/actions/workflows/pr-examples-tests.yml"><img src="https://img.shields.io/github/actions/workflow/status/tanaabased/openclaw-agent-system/pr-examples-tests.yml?label=Leia" alt="Leia example tests" /></a>
<img src="https://img.shields.io/badge/macOS-26-111827" alt="macOS 26" />
<img src="https://img.shields.io/badge/Ubuntu-24.04-00c88a" alt="Ubuntu 24.04" />
</p>
Agent System is designed to make an OpenClaw agent workspace self-onboarding: run `openclaw agent-system install` there to register and identify the agent, set up its dependencies, memory, and cron jobs, and equip its tools to operate with that agent's own credentials instead of a shared global identity.
> [!NOTE]
> Requires OpenClaw 2026.7.1-2 or newer. CI covers macOS 26 and Ubuntu 24.04.
> [!WARNING]
> Agent System is still a work in progress. Check back regularly for updates.
## Overview
Today, Agent System:
- registers an agent workspace with OpenClaw and reconciles its public identity
- assembles environment variables and credentials per agent from declared dotenv, inline, and 1Password Environment sources
- supplies each Agent System tool only the agent-specific environment and credentials it declares instead of a shared global identity
- configures `gh` with the agent's GitHub identity, credentials, SSH keys, and private CLI settings
- applies `allow`, `ask`, or `deny` policy to destructive, administrative, and unknown GitHub operations
- validates manifests, installs configured components, projects executable paths, and reports installed-state drift
Planned manifest capabilities include:
- installing and configuring agent dependencies, plugins, and memory integrations
- configuring agent-specific Git identity and `git` and GOG tooling
- reconciling agent-owned cron jobs and other scheduled work
## Installation
Once the first npm release is published, the production installation path will be:
```sh
openclaw plugins install npm:@tanaab/openclaw-agent-system
openclaw plugins enable agent-system
```
Until then, follow [Install from source](./DEVELOPMENT.md#install-from-source).
## Usage
Add `.agent-system/agent.yaml` to the workspace you want Agent System to manage. A root-level `agent.yaml` is also supported as a shorthand.
```yaml
schema-version: 1
agent:
id: tanaabot
name: Tanaabot
email:
from-environment: AGENT_EMAIL
environment:
# import this agent's email and github token from one 1password environment.
op: z7q4m2n9v6k3p8r5t1w0x4c2ba
required:
- AGENT_EMAIL
- GH_TOKEN_TANAABOT
github:
username: tanaabot
token: GH_TOKEN_TANAABOT
policy:
destructive: ask
admin: deny
unknown: deny
config:
git-protocol: ssh
```
From that workspace, store the 1Password bootstrap credential when needed, then validate and install the agent:
```sh
# persist the current 1password service account token for this agent.
openclaw agent-system credentials set op --from-env
# validate the manifest, then reconcile the agent and its configured components.
openclaw agent-system validate
openclaw agent-system install
# inspect managed state without changing it.
openclaw agent-system doctor
# verify the github identity supplied by this agent's environment.
openclaw agent-system tool gh -- api user --jq .login
```
`install` is explicit and repeatable: it adds the OpenClaw agent when needed and reconciles only the state declared by the workspace. See [Advanced](./ADVANCED.md) for the complete manifest and CLI references.
## Tools
Agent System tools apply a workspace's declared agent environment and policy to a specific command surface.
- [GitHub CLI](./tools/github/README.md)
## Development
See [Development](./DEVELOPMENT.md) for source installation, the recommended DevGuard workflow, validation, and coding standards.
## Issues, Questions and Support
Use the [GitHub issue queue](https://github.com/tanaabased/openclaw-agent-system/issues) for bugs and feature requests.
## Changelog
See [CHANGELOG.md](./CHANGELOG.md) for implemented changes and [GitHub releases](https://github.com/tanaabased/openclaw-agent-system/releases) for published artifacts.
## Maintainers
- [@pirog](https://github.com/pirog)
## Contributors
<a href="https://github.com/tanaabased/openclaw-agent-system/graphs/contributors">
<img src="https://contrib.rocks/image?repo=tanaabased/openclaw-agent-system" alt="Agent System contributors" />
</a>
Made with [contrib.rocks](https://contrib.rocks).
## License
Agent System is licensed under the [MIT License](./LICENSE).
tools
Comments
Sign in to leave a comment