Skip to navigation
Manage SandboxesState and Backups

Transfer State Manually

View as Markdown

Use manual transfer when you need to inspect or move specific state files. OpenShell preserves the native home/workspace during routine lifecycle operations, and NemoClaw transfers the complete tree during rebuild. Use manual transfer for an independent backup or a targeted cross-sandbox move.

Download State

Use nemo-deepagents <name> download to copy files from the sandbox to your host. The wrapper rejects a directory that contains a symbolic link or another special file before it invokes the OpenShell download or creates the host destination.

SANDBOX=my-deepagents
BACKUP_DIR=~/.nemoclaw/backups/$(date +%Y%m%d-%H%M%S)
mkdir -p "$BACKUP_DIR"
nemo-deepagents "$SANDBOX" download /sandbox/.deepagents/config.toml "$BACKUP_DIR/"
nemo-deepagents "$SANDBOX" download /sandbox/.deepagents/agent/AGENTS.md "$BACKUP_DIR/agent/"
nemo-deepagents "$SANDBOX" download /sandbox/.deepagents/agent/memories/ "$BACKUP_DIR/agent/memories/"
nemo-deepagents "$SANDBOX" download /sandbox/.deepagents/agent/skills/ "$BACKUP_DIR/agent-skills/"

Do not recursively download /sandbox/.deepagents/.state/. That directory can contain upstream credential state such as auth.json and chatgpt-auth.json, which can copy secrets to the host and restore state that the managed launcher refuses. Review every downloaded path and exclude credential state from manual copies.

Do not manually transfer /sandbox/.deepagents/.mcp.json. Entries in that shared native file have entry-level ownership: user-authored credential-free entries belong to the workspace, while NemoClaw-managed entries contain OpenShell provider and policy bindings that are valid only for their source sandbox. Use the managed rebuild flow when native MCP entries must move with the complete native state. Run nemo-deepagents <name> mcp migrate --apply first if the sandbox still has legacy MCP state.

Upload State

Use nemo-deepagents <name> upload to copy files from the host into a sandbox.

SANDBOX=my-deepagents
BACKUP_DIR=~/.nemoclaw/backups/20260320-120000  # pick a timestamp
nemo-deepagents "$SANDBOX" upload "$BACKUP_DIR/agent/AGENTS.md" /sandbox/.deepagents/agent/
nemo-deepagents "$SANDBOX" upload "$BACKUP_DIR/agent/memories/" /sandbox/.deepagents/agent/memories/
nemo-deepagents "$SANDBOX" upload "$BACKUP_DIR/agent-skills/" /sandbox/.deepagents/agent/skills/

Do not upload saved .deepagents/.state or .deepagents/.mcp.json contents during manual restore. Restore only the safe files listed above. Use managed rebuild when native MCP entries must survive replacement, so the complete native state moves with the live OpenShell policy and provider state.

Treat downloaded config.toml as inspection context. Do not upload an old config.toml over a rebuilt sandbox unless you are intentionally replacing NemoClaw’s generated route metadata.