> ## Documentation Index
> Fetch the complete documentation index at: https://nono.sh/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Agent Setup Guide

> Get started using nono with your preferred AI coding agent

nono works with any CLI tool, but these guides walk through setup and best practices for popular AI coding agents.

## Supported Clients

| Client | Profile | Network | Description |
| - | - | - | - |
| [Pi](https://pi.dev) | `nolabs-ai/pi` | Allowed | Open-source, provider-neutral coding agent |
| [Claude Code](/docs/cli/clients/claude) | `nolabs-ai/claude` | Allowed | Anthropic's CLI coding agent |
| [Codex](/docs/cli/clients/codex) | `nolabs-ai/codex` | Allowed | OpenAI's CLI coding agent |
| [OpenCode 2](/docs/cli/clients/opencode) | `nolabs-ai/opencode` | Allowed | Current OpenCode release |
| [OpenCode 1](/docs/cli/clients/opencode) | `nolabs-ai/opencode-v1` | Allowed | Legacy OpenCode release |
| [OpenClaw](/docs/cli/clients/openclaw) | `nolabs-ai/openclaw` | Allowed | Multi-channel AI agent platform |

## Quick Start

Every supported client has a profile available via the registry or as a preset. Use it with a single flag:

```bash theme={null}
nono run --profile <name> -- <command>
```

For example:

```bash theme={null}
# Pi
nono run --profile nolabs-ai/pi -- pi

# Claude Code
nono run --profile nolabs-ai/claude -- claude

# Codex
nono run --profile nolabs-ai/codex -- codex

# OpenCode 2
nono run --profile nolabs-ai/opencode -- opencode --standalone

# OpenCode 1
nono run --profile nolabs-ai/opencode-v1 -- opencode

# OpenClaw gateway
nono run --profile nolabs-ai/openclaw -- openclaw gateway
```

## Using a Different Client?

nono is agent-agnostic. If your tool isn't listed here, you can run it directly with capability flags:

```bash theme={null}
nono run --allow-cwd -- my-agent
```

Or create a custom profile. See [Security Profiles](/docs/cli/features/profiles-groups) for the profile format and how to create your own.

## What the Sandbox Does

When you run a client through nono:

1. Only the directories and files you grant are accessible
2. Sensitive paths (`~/.ssh`, `~/.aws`, etc.) are blocked by default
3. Network can be allowed or blocked per-profile
4. All child processes inherit the same restrictions
5. The sandbox cannot be escaped at runtime - expansion requires explicit supervisor approval (Linux only)

See [Security Model](/docs/cli/internals/security-model) for full details.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.