Document container_configs DB, on-wake restarts, and CLI scope

[mintlify]

Summary

Reflect the upstream NanoClaw rewrite that moves container runtime config from groups/<folder>/container.json into the container_configs table in the central DB, and adds the on_wake race-free restart flow plus per-group cli_scope enforcement.

• concepts/containers.mdx: clarify that container.json is now a materialized view of the container_configs row, add a "Per-agent-group container config" section, and document ncl groups restart with on-wake delivery.
• concepts/groups.mdx: add a "Container CLI scope" section (disabled / group / global) and update the agent-group description.
• concepts/security.mdx: add an "In-container CLI scope" boundary describing host-side cli_scope enforcement.
• api/group-management.mdx: add container_configs to the schema table and document the ncl groups restart and ncl groups config custom operations.
• api/configuration.mdx: split the lead so the per-group container_configs table is named alongside .env and src/config.ts.
• advanced/container-runtime.mdx: note materialized config, add an "onExit callback" line, and a "Restart and on-wake messages" section.
• features/customization.mdx: point per-group mount config at container_configs.

Source

Upstream changes: container config DB migration (qwibitai/nanoclaw@31ccc61), race-free restart (qwibitai/nanoclaw@be3a8a9), per-group CLI scope (qwibitai/nanoclaw@aebcffe), security hardening (qwibitai/nanoclaw@faeeba1).

Validation

• mint validate — passed
• mint broken-links — passed

[mintlify]

Preview deployment for your docs. Learn more about Mintlify Previews.

Project	Status	Preview	Updated (UTC)
nanoclaw-docs	🟢 Ready	View Preview	May 9, 2026, 5:31 PM