NemoClaw v0.0.49 is out

[jyaunches]

NemoClaw v0.0.49 is a hardening release focused on reliability where users and CI meet the real world: gateway failures are clearer, local environment edge cases are quieter, and OpenClaw compatibility is steadier across Kimi tool calls, JSON envelope drift, and legacy gateway-upgrade fixtures. It also broadens the release safety net with migrated security and inference E2E suites, better advisor signal, and Node 24-ready workflow dependencies.

Full compare: v0.0.48...v0.0.49.

Gateway, Runtime, and OpenClaw Compatibility

• #4022 fails fast when the gateway is unavailable so connection failures point at the real problem sooner.
• #4040 canonicalizes mixed Kimi tool calls for the current OpenClaw streamed-state shape.
• #4038 makes OpenClaw-agent E2E parsing tolerate both legacy and current JSON envelopes.
• #4041 and #4047 pin old gateway-upgrade install fixtures so historical upgrade coverage keeps testing the intended path.
• #4051 reverts #3820, restoring the verified OpenClaw baseline while preserving the current release's E2E library updates.
• #3869 classifies OpenClaw patch drift to make runtime dependency issues easier to diagnose.
• #3960 allows Brev GPU Docker bridge traffic to reach the OpenShell gateway during branch validation.

Onboarding, Policy, and Operator Diagnostics

• #3984 scopes Hermes messaging policies to the selected channels and resolves agent-specific policy presets.
• #3964 targets the selected sandbox during remote-path share probes.
• #3997 suppresses noisy best-effort forward-stop messages when no active forward exists.
• #3976 unions live policy into permissive policy before applying shield updates.
• #3969 detects Windows-host Ollama through a process probe.
• #3966 makes the onboarding step 3 banner provider-agnostic.
• #3965 rejects unsupported Jetson sandbox GPU passthrough earlier.
• #3987 lets the Windows bootstrap degrade gracefully when winget is missing.
• #3906 tolerates empty or malformed onboard config.json during plugin startup.
• #3854 explains restricted dmesg output in debug diagnostics.
• #3866 aligns shields status and log-tail UX.
• #4011 adds Docker group access security guidance to install flow and docs.

Messaging, Manifests, and Documentation

• #4003 adds the first messaging manifest types and registry foundation.
• #3946 clarifies that Homebrew is preinstalled after #3916 and that the brew policy preset opens the needed egress.
• #4028 updates the deployment topology diagram and gateway/proxy architecture notes.
• #4007 refreshes the release-note documentation for v0.0.47 and v0.0.48.

E2E, CI, and Release Confidence

• #3905 migrates security policy and credential coverage into focused validation suites.
• #3903 migrates inference-routing provider coverage.
• #4002 makes scenario suites build against the full repo CLI.
• #3927 updates scenario suites to use supported sandbox subcommands.
• #4004 adds scenario-aware E2E advisor comments for PR guidance.
• #3977 makes the PR review advisor wait for required checks before model analysis.
• #3819 removes the parity report workflow after the migrated suite model superseded it.
• #4017 hardens security credential suite checks.
• #4039 stabilizes the launchable smoke agent turn and improves failure diagnostics.
• #4043 broadens Slack proof OpenClaw root discovery.
• #4045 fixes crash-loop gateway PID detection.
• #4046 updates GitHub Actions workflows for Node 24-compatible action versions.

CLI State and Internal Structure

• #3860 persists onboard machine snapshots on the session file for cleaner state recovery and debugging.