> ## Documentation Index
> Fetch the complete documentation index at: https://nono.sh/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Agent Setup Guide

> Get started using nono with your preferred AI coding agent

nono works with any CLI tool, but these guides walk through setup and best practices for popular AI coding agents.

## Supported Clients

| Client | Profile | Network | Description |
| - | - | - | - |
| [Pi](https://pi.dev) | `nolabs-ai/pi` | Allowed | Open-source, provider-neutral coding agent |
| [Claude Code](https://nono.sh/docs/cli/clients/claude.md) | `nolabs-ai/claude` | Allowed | Anthropic's CLI coding agent |
| [Codex](https://nono.sh/docs/cli/clients/codex.md) | `nolabs-ai/codex` | Allowed | OpenAI's CLI coding agent |
| [OpenCode 2](https://nono.sh/docs/cli/clients/opencode.md) | `nolabs-ai/opencode` | Allowed | Current OpenCode release |
| [OpenCode 1](https://nono.sh/docs/cli/clients/opencode.md) | `nolabs-ai/opencode-v1` | Allowed | Legacy OpenCode release |
| [OpenClaw](https://nono.sh/docs/cli/clients/openclaw.md) | `nolabs-ai/openclaw` | Allowed | Multi-channel AI agent platform |

## Quick Start

Every supported client has a package profile available through the registry. Use its fully-qualified name with a single flag:

```bash theme={null}
nono run --profile <name> -- <command>
```

For example:

```bash theme={null}
# Pi
nono run --profile nolabs-ai/pi -- pi

# Claude Code
nono run --profile nolabs-ai/claude -- claude

# Codex
nono run --profile nolabs-ai/codex -- codex --no-daemon --sandbox danger-full-access --ask-for-approval on-request

# OpenCode 2
nono run --profile nolabs-ai/opencode -- opencode --standalone

# OpenCode 1
nono run --profile nolabs-ai/opencode-v1 -- opencode

# OpenClaw gateway
nono run --profile nolabs-ai/openclaw -- openclaw gateway
```

## Using a Different Client?

nono is agent-agnostic. If your tool isn't listed here, you can run it directly with capability flags:

```bash theme={null}
nono run --allow-cwd -- my-agent
```

Or create a custom profile. See [Security Profiles](https://nono.sh/docs/cli/features/profiles-groups.md) for the profile format and how to create your own.

## What the Sandbox Does

When you run a client through nono:

1. Only the directories and files you grant are accessible
2. Sensitive paths (`~/.ssh`, `~/.aws`, etc.) are blocked by default
3. Network can be allowed or blocked per-profile
4. All child processes inherit the same restrictions
5. The sandbox cannot be escaped at runtime - expansion requires explicit supervisor approval (Linux only)

See [Security Model](https://nono.sh/docs/cli/internals/security-model.md) for full details.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.