NemoClaw v0.0.83 is out!

[jyaunches]

NemoClaw v0.0.83 makes shared inference route changes explicit and fail-safe, restores DGX Station GB300 express setup with narrowed vLLM storage preflight, and fixes onboarding, rebuild, and platform edge cases across macOS, Windows, and corporate proxy environments.

This release strengthens the single-gateway time-sharing contract so existing sandboxes are never silently re-routed, improves transport-failure recovery when custom endpoints are unreachable, and preserves tier-default policy presets across re-onboard reuse. Build-time TLS now trusts the operator's corporate CA, and the Hermes light skin writes correctly on macOS.

Full changelog: v0.0.82...v0.0.83

Inference and Route Safety

• Shared inference route changes are now explicit and fail-safe. Onboarding a second sandbox warns immediately before re-pointing the shared route and fails closed when replacing provider-global identity used by another sandbox. Status shows the recorded route, live route, and any drift with a canConnect remediation signal. #6773
• Rebuild preflight uses the model-aware token field for GPT-5 and o-series models, preventing HTTP 400 failures before rebuild processing begins. #6860

Onboarding and Recovery

• DGX Station GB300 systems now enter the express-install path. Managed vLLM storage preflight is narrowed to Docker image pulls and continues when capacity is inconclusive. #6875
• Unreachable custom endpoints route through the existing transport-recovery path with DNS/VPN/URL hints and retry/back/exit, instead of silently looping back to provider selection. #6867
• Re-onboard reuse preserves tier-default Brave Search and Tavily presets when the policy tier and web-search choice are unchanged. #6856
• Risky Spark vLLM servers trigger an explicit warning during onboarding instead of proceeding silently. #6770
• SSH ControlMaster-delegated forwards are now recognized in the untracked-forward fallback, preventing sandbox deletion after a successful forward through a mux daemon. #6833

Sandbox and Platform

• Corporate CA is anchored for the entire sandbox image build stage, so build-time TLS (including npm audit signatures) traverses a TLS-intercepting corporate proxy. #6845
• Hermes light terminal skin writes via stdin on macOS, fixing the newline-in-argument rejection by OpenShell's macOS exec path. #6837
• Skill install upload failures now explain that shields may be blocking the write and suggest shields down before retrying. #6866

Contributor and CI

• Windows .cmd shims are invoked through cmd.exe so npm run checks works on Windows. #6870
• Hermetic Vitest lanes consolidated into the CLI shard matrix, retiring the standalone Ollama proxy workflow. #6857
• E2E support suite speed improved ~32% by removing real timer waits and repeated subprocess startup. #6880
• Jetson workflow validation uses in-memory boundary checks instead of repeated YAML serialization. #6879
• Hermes rebuild output capture bounded to prevent test-infrastructure memory growth. #6841
• PR review advisor uses purpose-driven adversarial reasoning and simplified E2E output guidance. #6832

Thanks

Thank you to our external contributors: @HwangJohn and @tedy-y.