Description

Summary:
When a user enters an incorrect API key during onboarding, the key is immediately saved to ~/.nemoclaw/credentials.json. On subsequent nemoclaw onboard runs, the onboard wizard detects the stored key and skips the key input prompt, reusing the invalid stored value. Validation fails again with the same error, and the user has no way to re-enter the key through the CLI.

Steps to reproduce:

1. nemoclaw onboard → choose a provider → enter a wrong API key
2. Key saved to ~/.nemoclaw/credentials.json
3. Validation fails → exit or back
4. nemoclaw onboard again → wizard sees stored key → skips prompt → validation fails again

Expected behavior:

• When stored credential fails validation, the wizard should re-prompt for the key instead of silently reusing the invalid value.
• Or: provide a CLI command like nemoclaw credentials reset to clear a stored credential.

Workaround:
Manually edit ~/.nemoclaw/credentials.json and fix or remove the invalid key.

Environment

• NemoClaw v0.0.7
• OpenShell 0.0.23
• OpenClaw 2026.3.11
• Node.js 22.22.1

Bug Details

[NVB# 6056320]

[NVB#6056320]