NemoClaw v0.0.39 release

[ericksoa]

NemoClaw v0.0.39

NemoClaw v0.0.39 is the release where the runtime path moves onto the new OpenShell runtime instead of treating it as a compatibility layer around older gateway flows. Linux onboarding now uses the OpenShell Docker-driver gateway with GPU-aware sandbox creation through #3001, and macOS arm64 follows the OpenShell 0.0.37 standalone gateway plus VM driver path through #3391. New installs are now aligned with the OpenShell release NemoClaw validates: the installer fetches the required helper binaries, the blueprint pins the 0.0.37 range, and provider routing stays owned by the OpenShell gateway rather than by host-side shims.

The release also makes Hermes and inference switching much more complete. #3320 adds Hermes Provider onboarding while keeping credential durability inside OpenShell, and #3354 extends runtime model switching so Hermes sandboxes can move models without a rebuild. The surrounding fixes tighten inference identity and provider behavior: OpenClaw now reconciles the agent's self-reported model after a route change in #3319, local NIM gets its NGC key propagation and faster failure mode back in #3335, Windows Ollama is relaunched into a reachable binding in #3330, and mixed-GPU hosts get clearer preflight output in #3346.

The rest of v0.0.39 is focused on making install, operations, and release quality less fragile. Linux installs now check Docker and group membership earlier in #3314, DGX Spark and DGX Station users get an express-install path in #3317, stale gateway reuse is guarded by host HTTP readiness in #3312, and host aliases are now first-class sandbox commands in #2406. The sandbox startup path drops more residual Linux capabilities through #3328 and #3329, while the test and CI surface grew with E2E advisor comments, Brave Search coverage, gateway health coverage, code scanning, and targeted release-prep cleanup.

PRs Landed Since v0.0.38

Runtime, OpenShell, and Onboarding

• #3001 - Use OpenShell Docker GPU sandboxes for onboarding.
• #3391 - Add the minimal macOS OpenShell 0.0.37 standalone gateway path.
• #3319 - Reconcile runtime agent identity with the selected provider on sandbox start.
• #3312 - Require host HTTP readiness before reusing an existing gateway.
• #3318 - Seed default workspace templates when bootstrap is skipped.
• #3291 - Validate sandbox names before snapshot restore.
• #3316 - Invoke auto-onboarding by absolute path.
• #3269 - Clarify that the Model Router prompt expects NVIDIA API keys.

Hermes and Inference

• #3320 - Add Hermes Provider onboarding foundation.
• #3354 - Support Hermes runtime model switches.
• #3335 - Restore NGC API key passthrough and fast-fail NIM health checks.
• #3330 - Relaunch Windows Ollama after install.
• #3346 - Surface per-GPU breakdowns on mixed-model hosts.

Installer, Hardware, and Operations

• #3317 - Add an express install prompt for DGX Spark and DGX Station.
• #3314 - Ensure Docker is installed and the user is in the docker group.
• #2406 - Add sandbox host alias commands for LAN-only services.
• #2722 - Add Brev troubleshooting guidance.

Security and Sandbox Hardening

• #3328 - Tighten sandbox bounding-set capabilities.
• #3329 - Drop CAP_FOWNER, CAP_SETUID, and CAP_SETGID via setpriv.
• #3202 - Add the code scanning workflow.
• #3369 - Resolve ShellCheck code scanning alerts.

Tests, CI, and Release Quality

• #3289 - Add E2E Advisor recommendations.
• #3321 - Add Brave Search E2E coverage with a real API key.
• #3325 - Retry sandbox destroy in TC-STATE-02 for transient gRPC errors.
• #3362 - Add a gateway-health honesty coverage guard for #3111.
• #3350 - Enable the Brev E2E job with long-lived BREV_API_TOKEN.
• #3373 - Revert the long-lived BREV_API_TOKEN nightly job path from #3350.
• #3364 - Add a TUI chat correlation regression.
• #3374 - Speed up dashboard curl mocks in onboard tests.
• #3322 - Revert the closed-item sprint assignment workflow.
• #3366 - Grant pull-requests:write so the advisor can post PR comments.
• #3375 - Refresh v0.0.39 release prep documentation.

Refactoring and Maintenance

• #3361 - Remove completed TypeScript migration phase tooling.
• #3294 - Group remaining CLI architecture modules.
• #3295 - Extract initial onboard policy helpers.