Manage SandboxesState and Backups

Transfer State Manually

View as Markdown

Use manual transfer when you need to inspect or move specific state files. Use Create and Restore Snapshots for normal backup, rebuild, and restore workflows.

Download State

Use openshell sandbox download to copy files from the sandbox to your host.

$SANDBOX=my-deepagents
$BACKUP_DIR=~/.nemoclaw/backups/$(date +%Y%m%d-%H%M%S)
$mkdir -p "$BACKUP_DIR"
$
$openshell sandbox download "$SANDBOX" /sandbox/.deepagents/config.toml "$BACKUP_DIR/"
$openshell sandbox download "$SANDBOX" /sandbox/.deepagents/agent/AGENTS.md "$BACKUP_DIR/agent/"
$openshell sandbox download "$SANDBOX" /sandbox/.deepagents/agent/memories/ "$BACKUP_DIR/agent/memories/"
$openshell sandbox download "$SANDBOX" /sandbox/.deepagents/skills/ "$BACKUP_DIR/skills/"
$openshell sandbox download "$SANDBOX" /sandbox/.deepagents/agent/skills/ "$BACKUP_DIR/agent-skills/"

Do not recursively download /sandbox/.deepagents/.state/. That directory can contain upstream credential state such as auth.json and chatgpt-auth.json, which can copy secrets to the host and restore state that the managed launcher refuses. Use nemo-deepagents <name> snapshot create when you need NemoClaw’s built-in sanitizer for Deep Agents runtime state.

Upload State

Use openshell sandbox upload to push files back into a sandbox.

$SANDBOX=my-deepagents
$BACKUP_DIR=~/.nemoclaw/backups/20260320-120000  # pick a timestamp
$
$openshell sandbox upload "$SANDBOX" "$BACKUP_DIR/agent/AGENTS.md" /sandbox/.deepagents/agent/
$openshell sandbox upload "$SANDBOX" "$BACKUP_DIR/agent/memories/" /sandbox/.deepagents/agent/memories/
$openshell sandbox upload "$SANDBOX" "$BACKUP_DIR/skills/" /sandbox/.deepagents/skills/
$openshell sandbox upload "$SANDBOX" "$BACKUP_DIR/agent-skills/" /sandbox/.deepagents/agent/skills/

Do not upload saved .deepagents/.state contents during manual restore. Restore safe Deep Agents files only, then run the managed rebuild or onboarding flow so NemoClaw regenerates route metadata, managed MCP projection state, and credential handling from host-side state.

Treat downloaded config.toml as inspection context. Do not upload an old config.toml over a rebuilt sandbox unless you are intentionally replacing NemoClaw’s generated route metadata.