From 12736be59f46d582b89b1a0d724bb477b2213307 Mon Sep 17 00:00:00 2001 From: Vladan Sekulic Date: Sat, 28 Mar 2026 00:58:01 +0100 Subject: [PATCH 1/4] docs(network-policy): fix incorrect CLI usage for presets and dynamic policy updates Clarify commands for applying network policies and presets. --- .../customize-network-policy.md | 24 ++++++++++++++++--- 1 file changed, 21 insertions(+), 3 deletions(-) diff --git a/docs/network-policy/customize-network-policy.md b/docs/network-policy/customize-network-policy.md index 1749f0606..9c2993f62 100644 --- a/docs/network-policy/customize-network-policy.md +++ b/docs/network-policy/customize-network-policy.md @@ -75,13 +75,14 @@ Dynamic changes apply a policy update to a running sandbox without restarting it Create a YAML file with the endpoints to add. Follow the same format as the baseline policy in `nemoclaw-blueprint/policies/openclaw-sandbox.yaml`. +The file must include the mandatory `version` field (e.g., `version: 1`) to be accepted by the OpenShell parser. ### Apply the Policy Use the OpenShell CLI to apply the policy update: ```console -$ openshell policy set +$ openshell policy set --policy ``` The change takes effect immediately. @@ -111,14 +112,31 @@ Available presets: | `slack` | Slack API and webhooks | | `telegram` | Telegram Bot API | -To apply a preset to a running sandbox, pass it as a policy file: +To apply a preset to a running sandbox: ```console -$ openshell policy set nemoclaw-blueprint/policies/presets/pypi.yaml +$ nemoclaw policy-add +``` + +For example, to add PyPI access to a running sandbox: + +```console +$ nemoclaw my-assistant policy-add pypi +``` + +To list which presets are applied to a sandbox: + +```console +$ nemoclaw policy-list ``` To include a preset in the baseline, merge its entries into `openclaw-sandbox.yaml` and re-run `nemoclaw onboard`. +:::{note} +The `openshell policy set --policy ` command operates on raw policy files and does not accept the `preset:` metadata block used in preset YAML files. +Use `nemoclaw policy-add` for presets. +::: + ## Related Topics - [Approve or Deny Agent Network Requests](approve-network-requests.md) for real-time operator approval. From 99154aa0fa35ac37913cfe209bf6e84d87e08715 Mon Sep 17 00:00:00 2001 From: Vladan Sekulic Date: Sat, 28 Mar 2026 00:58:57 +0100 Subject: [PATCH 2/4] docs: regenerate nemoclaw-manage-policy skill Clarified commands for applying policies and presets, added examples for better understanding. --- .../skills/nemoclaw-manage-policy/SKILL.md | 22 ++++++++++++++++--- 1 file changed, 19 insertions(+), 3 deletions(-) diff --git a/.agents/skills/nemoclaw-manage-policy/SKILL.md b/.agents/skills/nemoclaw-manage-policy/SKILL.md index 4f23dd219..a8c76881c 100644 --- a/.agents/skills/nemoclaw-manage-policy/SKILL.md +++ b/.agents/skills/nemoclaw-manage-policy/SKILL.md @@ -114,13 +114,14 @@ Dynamic changes apply a policy update to a running sandbox without restarting it Create a YAML file with the endpoints to add. Follow the same format as the baseline policy in `nemoclaw-blueprint/policies/openclaw-sandbox.yaml`. +The file must include the mandatory `version` field (e.g., `version: 1`) to be accepted by the OpenShell parser. ### Apply the Policy Use the OpenShell CLI to apply the policy update: ```console -$ openshell policy set +$ openshell policy set --policy ``` The change takes effect immediately. @@ -150,14 +151,29 @@ Available presets: | `slack` | Slack API and webhooks | | `telegram` | Telegram Bot API | -To apply a preset to a running sandbox, pass it as a policy file: +To apply a preset to a running sandbox: ```console -$ openshell policy set nemoclaw-blueprint/policies/presets/pypi.yaml +$ nemoclaw policy-add +``` + +For example, to add PyPI access to a running sandbox: + +```console +$ nemoclaw my-assistant policy-add pypi +``` + +To list which presets are applied to a sandbox: + +```console +$ nemoclaw policy-list ``` To include a preset in the baseline, merge its entries into `openclaw-sandbox.yaml` and re-run `nemoclaw onboard`. +> **Note:** The `openshell policy set --policy ` command operates on raw policy files and does not accept the `preset:` metadata block used in preset YAML files. +> Use `nemoclaw policy-add` for presets. + ## Related Skills - `nemoclaw-reference` — Network Policies for the full baseline policy reference From 2b7eb0e061ee8ba64be5d71e6e37e1a6eb6cdc62 Mon Sep 17 00:00:00 2001 From: Vladan Sekulic Date: Sat, 28 Mar 2026 01:15:54 +0100 Subject: [PATCH 3/4] Update .agents/skills/nemoclaw-manage-policy/SKILL.md remove unsupported positional arg from policy-add in skill Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> --- .agents/skills/nemoclaw-manage-policy/SKILL.md | 9 +-------- 1 file changed, 1 insertion(+), 8 deletions(-) diff --git a/.agents/skills/nemoclaw-manage-policy/SKILL.md b/.agents/skills/nemoclaw-manage-policy/SKILL.md index a8c76881c..a4dc03e29 100644 --- a/.agents/skills/nemoclaw-manage-policy/SKILL.md +++ b/.agents/skills/nemoclaw-manage-policy/SKILL.md @@ -154,14 +154,7 @@ Available presets: To apply a preset to a running sandbox: ```console -$ nemoclaw policy-add -``` - -For example, to add PyPI access to a running sandbox: - -```console -$ nemoclaw my-assistant policy-add pypi -``` +$ nemoclaw policy-add To list which presets are applied to a sandbox: From 68838675638c72845e1373de6e0dfb209806652d Mon Sep 17 00:00:00 2001 From: Vladan Sekulic Date: Sat, 28 Mar 2026 01:17:55 +0100 Subject: [PATCH 4/4] docs: remove unsupported positional arg from policy-add usage updated command syntax for adding a policy preset --- docs/network-policy/customize-network-policy.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/network-policy/customize-network-policy.md b/docs/network-policy/customize-network-policy.md index 9c2993f62..a585176d8 100644 --- a/docs/network-policy/customize-network-policy.md +++ b/docs/network-policy/customize-network-policy.md @@ -115,10 +115,10 @@ Available presets: To apply a preset to a running sandbox: ```console -$ nemoclaw policy-add +$ nemoclaw policy-add ``` -For example, to add PyPI access to a running sandbox: +For example, to add PyPI access to a running sandbox, run the command and select 'pypi' at the prompt: ```console $ nemoclaw my-assistant policy-add pypi