Skip to content

docs(network-policy): fix incorrect CLI usage for presets and dynamic policy updates #1036

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
vl43den wants to merge 4 commits into
base: main
Choose a base branch
from
+33 −6
Open

docs(network-policy): fix incorrect CLI usage for presets and dynamic policy updates #1036

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
12736be
docs(network-policy): fix incorrect CLI usage for presets and dynamic…
vl43den Mar 27, 2026
99154aa
docs: regenerate nemoclaw-manage-policy skill
vl43den Mar 27, 2026
2b7eb0e
Update .agents/skills/nemoclaw-manage-policy/SKILL.md
vl43den Mar 28, 2026
6883867
docs: remove unsupported positional arg from policy-add usage
vl43den Mar 28, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 12 additions & 3 deletions .agents/skills/nemoclaw-manage-policy/SKILL.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -114,13 +114,14 @@ Dynamic changes apply a policy update to a running sandbox without restarting it

Create a YAML file with the endpoints to add.
Follow the same format as the baseline policy in `nemoclaw-blueprint/policies/openclaw-sandbox.yaml`.
The file must include the mandatory `version` field (e.g., `version: 1`) to be accepted by the OpenShell parser.

### Apply the Policy

Use the OpenShell CLI to apply the policy update:

```console
$ openshell policy set <policy-file>
$ openshell policy set --policy <policy-file> <name>
```

The change takes effect immediately.
Expand Down Expand Up @@ -150,14 +151,22 @@ Available presets:
| `slack` | Slack API and webhooks |
| `telegram` | Telegram Bot API |

To apply a preset to a running sandbox, pass it as a policy file:
To apply a preset to a running sandbox:

```console
$ openshell policy set nemoclaw-blueprint/policies/presets/pypi.yaml
$ nemoclaw <name> policy-add

To list which presets are applied to a sandbox:

```console
$ nemoclaw <name> policy-list
```

To include a preset in the baseline, merge its entries into `openclaw-sandbox.yaml` and re-run `nemoclaw onboard`.

> **Note:** The `openshell policy set --policy <file> <name>` command operates on raw policy files and does not accept the `preset:` metadata block used in preset YAML files.
> Use `nemoclaw <name> policy-add` for presets.

## Related Skills

- `nemoclaw-reference` — Network Policies for the full baseline policy reference
Expand Down
24 changes: 21 additions & 3 deletions docs/network-policy/customize-network-policy.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -75,13 +75,14 @@ Dynamic changes apply a policy update to a running sandbox without restarting it

Create a YAML file with the endpoints to add.
Follow the same format as the baseline policy in `nemoclaw-blueprint/policies/openclaw-sandbox.yaml`.
The file must include the mandatory `version` field (e.g., `version: 1`) to be accepted by the OpenShell parser.

### Apply the Policy

Use the OpenShell CLI to apply the policy update:

```console
$ openshell policy set <policy-file>
$ openshell policy set --policy <policy-file> <name>
```

The change takes effect immediately.
Expand Down Expand Up @@ -111,14 +112,31 @@ Available presets:
| `slack` | Slack API and webhooks |
| `telegram` | Telegram Bot API |

To apply a preset to a running sandbox, pass it as a policy file:
To apply a preset to a running sandbox:

```console
$ openshell policy set nemoclaw-blueprint/policies/presets/pypi.yaml
$ nemoclaw <name> policy-add
```

For example, to add PyPI access to a running sandbox, run the command and select 'pypi' at the prompt:

```console
$ nemoclaw my-assistant policy-add pypi
```

To list which presets are applied to a sandbox:

```console
$ nemoclaw <name> policy-list
```

To include a preset in the baseline, merge its entries into `openclaw-sandbox.yaml` and re-run `nemoclaw onboard`.

:::{note}
The `openshell policy set --policy <file> <name>` command operates on raw policy files and does not accept the `preset:` metadata block used in preset YAML files.
Use `nemoclaw <name> policy-add` for presets.
:::

## Related Topics

- [Approve or Deny Agent Network Requests](approve-network-requests.md) for real-time operator approval.
Expand Down