refactor(cua): use standard terminal agent path

Signed-off-by: Julie Yaunches <jyaunches@nvidia.com>

Author: jyaunches

agents/nemocua/Dockerfile

@@ -0,0 +1,5 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
+ARG BASE_IMAGE
+FROM ${BASE_IMAGE}

agents/nemocua/manifest.yaml

@@ -0,0 +1,32 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
+name: nemocua
+display_name: NemoCUA
+description: Experimental computer-use agent supplied by the active scenario
+language: python
+install_method: external
+binary_path: /app/run_with_harness.py
+version_command: "python3 /app/run_with_harness.py --help"
+runtime:
+  kind: terminal
+  interactive_command: /bin/bash
+  headless_command: python3 /app/run_with_harness.py
+  smoke_commands:
+    - test -f /app/run_with_harness.py
+    - test -f /app/run.py
+    - test -s /app/config/config.toml
+config:
+  dir: /app/config
+  config_file: config.toml
+  format: toml
+state_lock_plan_in_image: false
+state_dirs: []
+device_pairing: false
+inference:
+  provider_type: openai_compatible
+  default_model: nvidia/nemotron-3-super-120b-a12b
+  proxy_support: implicit
+mcp:
+  support: disabled
+  reason: The experimental browser MVP does not use an MCP bridge

agents/nemocua/policy-additions.yaml

@@ -0,0 +1,44 @@
+# SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+# SPDX-License-Identifier: Apache-2.0
+
+version: 1
+
+filesystem_policy:
+  include_workdir: true
+  read_only:
+    - /usr
+    - /lib
+    - /app
+    - /proc
+    - /etc
+    - /run/nemoclaw/managed-startup-ca-bundle.pem
+  read_write:
+    - /sandbox
+    - /tmp
+    - /dev/null
+    - /dev/pts
+
+landlock:
+  compatibility: best_effort
+
+process:
+  run_as_user: sandbox
+  run_as_group: sandbox
+
+network_policies:
+  managed_inference:
+    name: managed_inference
+    endpoints:
+      - host: inference.local
+        port: 443
+        protocol: rest
+        enforcement: enforce
+        rules:
+          - allow: { method: POST, path: "/v1/chat/completions" }
+          - allow: { method: POST, path: "/v1/responses" }
+          - allow: { method: GET, path: "/v1/models" }
+          - allow: { method: GET, path: "/v1/models/**" }
+    binaries:
+      - { path: /usr/bin/python3 }
+      - { path: /usr/local/bin/python3 }
+      - { path: /usr/bin/curl }

ci/source-architecture-budget.json

@@ -39,8 +39,8 @@
       "src/lib/actions/inference-set.ts": 32,
       "src/lib/actions/sandbox/connect.ts": 42,
       "src/lib/actions/sandbox/destroy.ts": 29,
-      "src/lib/actions/sandbox/doctor.ts": 30,
-      "src/lib/actions/sandbox/status-snapshot.ts": 21,
+      "src/lib/actions/sandbox/doctor.ts": 29,
+      "src/lib/actions/sandbox/status-snapshot.ts": 20,
       "src/lib/actions/sandbox/policy-channel.ts": 30,
       "src/lib/actions/sandbox/process-recovery.ts": 21,
       "src/lib/actions/sandbox/rebuild-pipeline.ts": 29,

docs/reference/commands.mdx

@@ -5003,6 +5003,15 @@ On upgrades, NemoClaw rejects `user` because a user-local install cannot replace
 On upgrades, NemoClaw also rejects `system` under `NEMOCLAW_NON_INTERACTIVE=1` when passwordless `sudo` is unavailable because the installer would hang on a hidden sudo prompt.
 The run exits with an actionable diagnostic instead.
 
+### Experimental NemoCUA
+
+Keep `NEMOCLAW_CUA_ENABLED=1` set whenever NemoClaw uses the experimental `nemocua` agent, including discovery, launch, agent commands, sandbox creation, and rebuild.
+
+| Variable | Format | Effect |
+|----------|--------|--------|
+| `NEMOCLAW_CUA_ENABLED` | exactly `1` to enable | Exposes the experimental `nemocua` agent. Other values keep it absent from agent discovery and prevent its manifest from loading. |
+| `NEMOCLAW_CUA_SANDBOX_IMAGE_REF` | image reference | Selects the caller-prepared NemoCUA sandbox image when `NEMOCLAW_CUA_ENABLED=1`. NemoClaw uses this reference directly and does not resolve a private package source. The value is required whenever NemoClaw creates or rebuilds the NemoCUA sandbox; whitespace and shell syntax are rejected. |
+
 ### Onboarding Behavior Flags
 
 The following flags toggle optional behaviors during onboarding.

package.json

@@ -107,6 +107,8 @@
     "agents/*/manifest.yaml",
     "agents/*/state-lock-plan.json",
     "agents/hermes/host/",
+    "agents/nemocua/Dockerfile",
+    "agents/nemocua/policy-additions.yaml",
     "bin/",
     "dist/",
     "src/lib/messaging/channels/**/policy/*.{yaml,yml}",
@@ -116,8 +118,6 @@
     "nemoclaw-blueprint/",
     "managed-inference/",
     "schemas/network-policy.schema.json",
-    "schemas/cua-lifecycle.schema.json",
-    "schemas/cua-target-manifest.schema.json",
     "schemas/sandbox-policy.schema.json",
     "scripts/",
     "docs/resources/local-credential-form.html",