[Nemoclaw][All Platform]onboard skips messaging channel selection, but policy preset step still auto-selects messaging presets from stored credentials

[zNeill]

Description

Description

When running nemoclaw onboard, if the user skips all messaging channels in the Messaging channels step, the later Policy presets step still auto-suggests and preselects messaging-related presets such as telegram, discord, and slack.

This appears to happen because preset suggestions are derived from detected credentials in the credential store / environment, rather than from the user’s current onboarding selections.

As a result, the onboarding flow behaves inconsistently:

• Step 5 indicates messaging channels were skipped
• Step 8 still suggests/applies messaging-related policy presets

This is confusing and makes it look like the previous step was ignored.

Reproduction Steps

1. Ensure messaging credentials already exist in the host environment or credential store:
   • TELEGRAM_BOT_TOKEN
   • DISCORD_BOT_TOKEN
   • SLACK_BOT_TOKEN
2. Run: nemoclaw onboard
3. At [5/8] Messaging channels, do not select any channels and press Enter so the flow shows:
   • Skipping messaging channels.
4. Continue onboarding until [8/8] Policy presets
5. Observe that messaging-related presets are still suggested / preselected (for example discord, slack, telegram)

Actual Result

Even though messaging channels were skipped in the messaging step, the policy preset step still auto-selects or suggests messaging-related presets based on stored credentials.

Example observed behavior:

• Messaging step:
  • Telegram / Discord / Slack shown as configured
  • User presses Enter without selecting any
  • Flow prints Skipping messaging channels.
• Policy step later shows:
  • discord checked
  • slack checked
  • telegram checked

Expected Result

If the user skips messaging channels during onboarding, messaging-related policy presets should not be automatically suggested or preselected later in the same onboarding session.

At minimum, policy suggestions should reflect the current onboarding selection, not only previously detected credentials.

Suspected Cause

Policy presets suggestions are currently built from stored credentials / environment variables instead of the user’s current messaging choices in the same onboarding run.

Observed code path indicates suggestions are derived from checks like:

• getCredential( TELEGRAM_BOT_TOKEN )
• getCredential( SLACK_BOT_TOKEN ) || process.env.SLACK_BOT_TOKEN
• getCredential( DISCORD_BOT_TOKEN ) || process.env.DISCORD_BOT_TOKEN

rather than from the selected messaging channels in the current onboard session.

Impact

• Confusing onboarding UX
• Makes it appear that the messaging selection step was ignored
• Can cause users to unintentionally apply messaging-related network policies they did not intend to enable for this sandbox

Environment:- Platform: macos

• NemoClaw: v0.0.9
• OpenShell CLI: 0.0.24

Bug Details

Field	Value
Priority	Unprioritized
Action	Dev - Open - To fix
Disposition	Open issue
Module	Machine Learning - NemoClaw
Keyword	NemoClaw, NEMOCLAW_GH_SYNC_APPROVAL

---

[NVB# 6059818]

[kjw3]

Working plan update: I’m folding this into the Discord/native remediation branch because it affects the same messaging onboarding flow and can lead to users unintentionally applying Discord, Telegram, or Slack presets even when messaging was skipped.

Planned fix direction from the NemoClaw side:

• make policy preset suggestions reflect the current onboarding channel selections, not just stored credentials
• keep this change aligned with the Discord remediation work so messaging onboarding and policy suggestion behavior are consistent

Working branch: fix/discord-native-remediation

[kagura-agent]

The recent TS migration (#1595) fixed the new-session path for enabledChannels, but the resume path still has a gap:

• enabledChannels is declared as const inside the else block (non-resume path, line ~4443)
• When resuming a session, enabledChannels is never restored — it stays undefined
• This causes setupPoliciesWithSelection to receive no channel info, so policy presets fall back to credential-only mode

I'll put up a fix that hoists the declaration and persists/restores enabledChannels across the resume path.