Reference

NemoClaw for Pi CLI Commands Reference

View as Markdown

Use nemoclaw for Pi sandbox lifecycle and pi for work inside the sandbox.

Pi remains a release candidate. Ordinary installations reject --agent pi until final activation lands in a release. Internal candidate qualification settings are not user commands.

Onboard and Inspect

CommandPurpose
nemoclaw onboard --agent pi --name <name>Create a Pi sandbox after activation
nemoclaw listList registered sandboxes and agents
nemoclaw <name> statusCheck Pi, inference, policy, and runtime state
nemoclaw <name> logsRead bounded sandbox logs
nemoclaw <name> doctorDiagnose Pi sandbox state; this command does not recover Pi
nemoclaw <name> recoverRepair a stopped Pi gateway and its host forwards

Run Pi

CommandPurpose
nemoclaw launch <name>Run launch preflight and open interactive Pi
nemoclaw <name> connectOpen a shell in the sandbox
nemoclaw <name> exec --workdir /sandbox --no-tty -- pi --no-approve --print "<task>"Run one headless task from the host
nemoclaw <name> exec --workdir /sandbox --no-tty -- pi --no-approve --mode json --print "<task>"Emit newline-delimited JSON task events

Inside a connected sandbox:

$pi
$pi --no-approve --print "Review the current changes"
$pi --no-approve --mode json --print --tools read "Read README.md"
$pi --no-context-files

--no-approve ignores project-local executable resources. It does not disable AGENTS.md or CLAUDE.md; use --no-context-files for that boundary.

Preserve and Replace State

Finish active Pi work and lower Shields before snapshot creation.

$nemoclaw <name> shields down
$nemoclaw <name> snapshot create --name before-change
$nemoclaw <name> snapshot list

Review the selected version, name, or timestamp before restore replaces sandbox state.

$nemoclaw <name> snapshot restore <version-or-name-or-timestamp>

Rebuild validates recorded authority and resolves the current release’s exact Pi image.

$nemoclaw <name> rebuild --yes
$nemoclaw <name> recover

Stop or Remove the Sandbox

$nemoclaw <name> stop
$nemoclaw <name> start

Create a snapshot before destroy when user state must survive. Destroy does not remove a provider credential from the OpenShell gateway.

$nemoclaw <name> shields down
$nemoclaw <name> snapshot create --name before-destroy
$nemoclaw <name> destroy --yes

After every dependent sandbox is gone, remove the gateway-held credential explicitly.

$nemoclaw credentials list
$nemoclaw credentials reset <provider> --yes