fix(sandbox): block 'openclaw config set|unset' inside the sandbox

[laitingsheng]

Extend the nemoclaw-start configure guard to intercept 'openclaw config set' and 'openclaw config unset'. OpenClaw resolves its config path via $HOME, so inside the sandbox those writes land at /root/.openclaw/openclaw.json — a path no gateway reads — while the CLI still reports success and tells the user to restart the gateway. The guard surfaces the same actionable error already used for 'openclaw configure' and points users at 'nemoclaw onboard --resume'.

Read-only subcommands (get, list, show, view) are not matched and fall through to the real binary.

Closes #1973

Summary

Related Issue

Changes

Type of Change

• Code change (feature, bug fix, or refactor)
• Code change with doc updates
• Doc only (prose changes, no code sample modifications)
• Doc only (includes code sample changes)

Verification

• npx prek run --all-files passes
• npm test passes
• Tests added or updated for new or changed behavior
• No secrets, API keys, or credentials committed
• Docs updated for user-facing behavior changes
• make docs builds without warnings (doc changes only)
• Doc pages follow the style guide (doc changes only)
• New doc pages include SPDX header and frontmatter (new pages only)

AI Disclosure

• AI-assisted — tool: Claude Code

---

Signed-off-by: Tinson Lai tinsonl@nvidia.com

Summary by CodeRabbit

• Bug Fixes

  • Extended sandbox guard to prevent modification of configuration settings via openclaw config set and openclaw config unset commands. Users attempting these operations will receive clear instructions to exit the sandbox and resume onboarding.

• Tests

  • Added comprehensive test suite to validate sandbox protection for configuration modification commands.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 17ae0e9d-2212-40b1-a5de-d8cf46f8cee3

📥 Commits

Reviewing files that changed from the base of the PR and between 2a29b5e and 24999e7.

📒 Files selected for processing (2)

• scripts/nemoclaw-start.sh
• test/nemoclaw-start.test.ts

---

📝 Walkthrough

Walkthrough

The pull request extends the in-sandbox openclaw() guard function to intercept and block openclaw config set and openclaw config unset commands, emitting a read-only error and directing users to exit the sandbox. Read-only config operations pass through unblocked.

Changes

Cohort / File(s)	Summary
Sandbox Guard Extension scripts/nemoclaw-start.sh	Extended the openclaw() guard to add a config) case that matches set and unset subcommands, emitting a read-only/Landlock error and exiting with status 1, while allowing immutable config operations (get, list, show, view) to fall through to the actual openclaw command.
Test Coverage test/nemoclaw-start.test.ts	Added new Vitest assertions validating the config) guard behavior: verifies error messaging includes the invoked subcommand, routes users to nemoclaw onboard --resume, returns exit code 1, and confirms read-only config operations bypass the guard.

Poem

🐰 A sandbox guard stands tall and true,
Blocking writes, letting safe reads through,
Config set and unset turn back with care,
While get and list roam free to share!

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately and specifically describes the main change: blocking 'openclaw config set|unset' commands inside the sandbox.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/1973-block-openclaw-config-set

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}