v0.0.138
NemoClaw v0.0.138 tightens installation and image-build security and fixes onboarding, local inference, and timeout recovery. The inference guides also clarify when hosted custom endpoints use native providers or the shared route.
- Linux system-mode Ollama installation verifies a pinned official installer before running it and stops if the downloaded content cannot be verified.
The repository
.dockerignorenow excludes credential, key, and certificate names at every directory depth, including nested files in Docker build contexts. Related change: PR #13614. - New hosted custom endpoint selections outside the Personal tier can use sandbox-attached providers when supported.
Fresh Personal-tier hosted selections stay on
inference.localwithout a native attachment, and retained shared selections remain on their recorded route. The provider guides now describe these paths for OpenClaw, Hermes, Deep Agents Code, and Pi. Related changes: PR #13528, PR #13609. - New local-inference profiles for
host.openshell.internalandhost.docker.internaladmit IPv6 unique-local addresses as well as private IPv4 addresses. Existing sandboxes keep their recorded permissions until the local provider is reselected. Public, link-local, and loopback IPv6 addresses remain excluded. Related change: PR #13582. NEMOCLAW_STATUS_PROBE_TIMEOUT_MSandNEMOCLAW_SANDBOX_EXEC_TIMEOUT_MSvalues above2147483647milliseconds now fall back to their defaults instead of timing out immediately. Related change: PR #13550.- Onboarding records the requested compatible-endpoint reasoning effort with the new sandbox so resume and rebuild use that selection. Related change: PR #12814.
- Interactive onboarding keeps
Ctrl-Cworking when prompt output is captured. Closing stdin during a prompt or between questions cancels with a nonzero exit and preserves the session fornemoclaw onboard --resume. Related changes: PR #12210, PR #12216. - The Hermes managed Dockerfile pins a base image that satisfies the current security inventory. Related change: PR #13581.