chore(openshell): upgrade supported version to 0.0.82 by ericksoa · Pull Request #6726 · NVIDIA/NemoClaw

ericksoa · 2026-07-12T19:48:40Z

Summary

This draft upgrades every stable NemoClaw OpenShell selector and consumed artifact from 0.0.72 to stable 0.0.82, including the #6379 credential-rewrite fix and OpenShell's multiline exec contract. Stable v0.0.82 is verified at 94cdd697c55aedb571f177ec13cfa54a8e213919, and the base-owned manifest and sandbox-build trust prerequisites landed in #6778 and #6779.

The branch remains draft while exact-head CI/advisor review and the platform-specific runtime proofs below are incomplete.

Related Issue

Fixes #6379.

Changes

Release provenance

Stable release archives have valid SLSA attestations, and the gateway x86 binary remains compatible through GLIBC 2.28.
GitHub currently exposes no OCI referrer/attestation/SBOM for the stable supervisor image, and its configs contain no source/revision/version labels. The review records that upstream provenance limitation rather than inferring missing evidence.

Type of Change

Code change (feature, bug fix, or refactor)
Code change with doc updates
Doc only (prose changes, no code sample modifications)
Doc only (includes code sample changes)

Quality Gates

Tests added or updated for changed behavior
Existing tests cover changed behavior — justification:
Tests not applicable — justification:
Docs updated for user-facing behavior changes
Docs not applicable — justification:
Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging)
Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification: pending exact-head maintainer review
Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue:

Verification

PR description includes the DCO sign-off declaration and every commit appears as Verified in GitHub
Normal pre-commit, commit-msg, and pre-push hooks passed, or npm run check:diff passed when hooks were skipped or unavailable
Targeted behavior tests pass for the current change set, or tests are marked not applicable above — command/result or justification: bash scripts/check-installer-hash.sh passed all three manifests and all ten consumed release archives against trusted main; npx tsx scripts/checks/dependency-pins.ts, npm run build:cli, and npm run typecheck passed; the installer/trust suite passed 69/69 after its positive future-release fixture was refreshed.
Applicable broad gate passed — npm test for broad runtime/test-harness changes; npm run check for repo-wide validation/coverage changes — command/result: the macOS broad run executed 950 tests across 50 files (870 passed, 72 skipped, 8 failed). One stale installer fixture was fixed and its suite passed 69/69. Four failures require Linux fcntl.F_SEAL_*; two timeout-sensitive files (auto-pair, sandbox exec) passed focused reruns; the older-branch OTLP test still exceeds the local 15-second budget. Authoritative exact-head Linux/platform CI is pending.
Quality Gates section completed with required justifications or waivers
No secrets, API keys, or credentials committed
npm run docs builds without warnings (doc changes only) — result: build completed with zero errors; existing unauthenticated-redirect and light-contrast warnings remain. Route/variant checks and targeted docs tests passed, and an independent docs-writer review required no further edits.
Doc pages follow the style guide (doc changes only)
New doc pages include SPDX header and frontmatter (new pages only) — the security review has the required SPDX header and is not a Fern page.

Signed-off-by: Aaron Erickson aerickson@nvidia.com

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

copy-pr-bot · 2026-07-12T19:48:43Z

Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually.

Contributors can view more details about this message here.

coderabbitai · 2026-07-12T19:48:49Z

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 5e8bc16a-bb72-4434-8732-59a3ba0ec6c7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch dep/openshell-v0.0.82-6379

_{Comment @coderabbitai help to get the list of available commands.}

github-actions · 2026-07-12T19:50:10Z

PR Review Advisor — Informational

Advisor assessment: Informational / high confidence
Primary next action: No advisor follow-up required beyond maintainer review.
Findings: 0 blockers · 0 warnings · 0 optional suggestions
Status: No actionable findings remain in the canonical review ledger.

Model lanes

GPT-5.6 Terra (primary): Completed · high confidence · 0 blockers · 0 warnings · 0 suggestions
Nemotron 3 Ultra (non-blocking second opinion): Completed · high confidence · 0 blockers · 3 warnings · 1 suggestion
Model comparison: normalized findings differ; normalized E2E selections differ; Nemotron reported the same number of blockers, 3 more warnings, 1 more suggestion.

Nemotron is a non-blocking second opinion. Its prose, findings, and E2E guidance do not change the primary assessment above and remain in workflow artifacts only.

E2E guidance

Advisory only: coverage and selector recommendations are non-authoritative. E2E / PR Gate independently computes and dispatches trusted jobs without consuming this output.

Recommended coverage: cloud-onboard, credential-sanitization, full-e2e, hermes-e2e, security-posture, bedrock-runtime-compatible-anthropic, cron-preflight-inference-local, gateway-guard-recovery, hermes-discord, inference-routing, mcp-bridge, mcp-bridge-dev, messaging-compatible-endpoint, network-policy, onboard-repair, onboard-resume, openclaw-inference-switch, openclaw-plugin-runtime-exdev, openclaw-skill-cli, openshell-gateway-auth-contract
Recommended selectors: cloud-onboard, credential-sanitization, full-e2e, hermes-e2e, security-posture, bedrock-runtime-compatible-anthropic, cron-preflight-inference-local, gateway-guard-recovery, hermes-discord, inference-routing, mcp-bridge, mcp-bridge-dev, messaging-compatible-endpoint, network-policy, onboard-repair, onboard-resume, openclaw-inference-switch, openclaw-plugin-runtime-exdev, openclaw-skill-cli, openshell-gateway-auth-contract

cloud-onboard — Selected from the trusted checked-in E2E coverage inventory.
credential-sanitization — Selected from the trusted checked-in E2E coverage inventory.
full-e2e — Selected from the trusted checked-in E2E coverage inventory.
hermes-e2e — Selected from the trusted checked-in E2E coverage inventory.
security-posture — Selected from the trusted checked-in E2E coverage inventory.
bedrock-runtime-compatible-anthropic — Selected from the trusted checked-in E2E coverage inventory.
cron-preflight-inference-local — Selected from the trusted checked-in E2E coverage inventory.
gateway-guard-recovery — Selected from the trusted checked-in E2E coverage inventory.
hermes-discord — Selected from the trusted checked-in E2E coverage inventory.
inference-routing — Selected from the trusted checked-in E2E coverage inventory.
mcp-bridge — Selected from the trusted checked-in E2E coverage inventory.
mcp-bridge-dev — Selected from the trusted checked-in E2E coverage inventory.
messaging-compatible-endpoint — Selected from the trusted checked-in E2E coverage inventory.
network-policy — Selected from the trusted checked-in E2E coverage inventory.
onboard-repair — Selected from the trusted checked-in E2E coverage inventory.
onboard-resume — Selected from the trusted checked-in E2E coverage inventory.
openclaw-inference-switch — Selected from the trusted checked-in E2E coverage inventory.
openclaw-plugin-runtime-exdev — Selected from the trusted checked-in E2E coverage inventory.
openclaw-skill-cli — Selected from the trusted checked-in E2E coverage inventory.
openshell-gateway-auth-contract — Selected from the trusted checked-in E2E coverage inventory.
cloud-onboard — Selected as a trusted checked-in E2E job.
credential-sanitization — Selected as a trusted checked-in E2E job.
full-e2e — Selected as a trusted checked-in E2E job.
hermes-e2e — Selected as a trusted checked-in E2E job.
security-posture — Selected as a trusted checked-in E2E job.
bedrock-runtime-compatible-anthropic — Selected as a trusted checked-in E2E job.
cron-preflight-inference-local — Selected as a trusted checked-in E2E job.
gateway-guard-recovery — Selected as a trusted checked-in E2E job.
hermes-discord — Selected as a trusted checked-in E2E job.
inference-routing — Selected as a trusted checked-in E2E job.
mcp-bridge — Selected as a trusted checked-in E2E job.
mcp-bridge-dev — Selected as a trusted checked-in E2E job.
messaging-compatible-endpoint — Selected as a trusted checked-in E2E job.
network-policy — Selected as a trusted checked-in E2E job.
onboard-repair — Selected as a trusted checked-in E2E job.
onboard-resume — Selected as a trusted checked-in E2E job.
openclaw-inference-switch — Selected as a trusted checked-in E2E job.
openclaw-plugin-runtime-exdev — Selected as a trusted checked-in E2E job.
openclaw-skill-cli — Selected as a trusted checked-in E2E job.
openshell-gateway-auth-contract — Selected as a trusted checked-in E2E job.

Workflow run details

This is an automated, non-authoritative review. Findings are inputs to maintainer adjudication. Warnings and optional suggestions do not require a response or follow-up. A human maintainer makes the final merge decision.

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

github-code-quality · 2026-07-12T20:03:15Z

Code Coverage Overview

Languages: TypeScript

TypeScript / code-coverage/plugin

The overall coverage remains at 96%, unchanged from the main branch.

TypeScript / code-coverage/cli

The overall coverage in the dep/openshell-v0.0.8... branch remains at 79%, unchanged from the main branch.

Show a code coverage summary of the most impacted files.

File	main `462b789`	dep/openshell-v0.0.8... `81895e0`	+/-
`src/lib/agent/dashboard-ui.ts`	89%	83%	-6%
`src/lib/state/config-io.ts`	94%	91%	-3%
`src/lib/securit...ntial-filter.ts`	99%	96%	-3%
`src/lib/runner.ts`	75%	72%	-3%
`src/lib/messagi.../persistence.ts`	86%	89%	+3%
`src/lib/adapter...shell/client.ts`	83%	88%	+5%
`src/lib/onboard...shboard-port.ts`	83%	89%	+6%
`src/lib/state/m...-acquisition.ts`	80%	89%	+9%
`src/lib/onboard...reachability.ts`	63%	72%	+9%
`src/lib/actions...ge-preflight.ts`	74%	89%	+15%

_{Updated July 14, 2026 00:24 UTC
Code Coverage is in Public Preview. Learn more and provide us with your feedback.}

github-actions · 2026-07-12T20:03:21Z

🌿 Preview your docs: https://nvidia-preview-pr-6726.docs.buildwithfern.com/nemoclaw

github-actions · 2026-07-12T20:21:15Z

E2E Target Results — ❌ Some tests failed

Run: 29207131689
Workflow ref: dep/openshell-v0.0.82-6379
Requested targets: (default — all supported)
Requested test IDs: mcp-bridge
Summary: 0 passed, 1 failed, 0 cancelled, 0 skipped, 0 unknown

Test	Result
mcp-bridge	❌ failure

Failed tests: mcp-bridge. Check run artifacts for logs.

github-actions · 2026-07-12T20:55:11Z

E2E Target Results — ✅ All requested tests passed

Run: 29207131689
Workflow ref: dep/openshell-v0.0.82-6379
Requested targets: (default — all supported)
Requested test IDs: mcp-bridge
Summary: 1 passed, 0 failed, 0 cancelled, 0 skipped, 0 unknown

Test	Result
mcp-bridge	✅ success

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

wscurran · 2026-07-12T23:33:51Z

✨
Related open PRs:

#2162 fix: standardize timeout/gtimeout handling

Related open issues:

#6379 [DGX Spark][Sandbox] managed MCP unusable at runtime — OpenShell never resolves the openshell:resolve:env: credential placeholder (sends it literally); mcp status stays all-green

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

## Summary Extend the base-trusted installer parser so a separately reviewed dependency pin PR can add standalone sandbox binary identities as release data without authorizing operational installer changes. This is the remaining base-branch prerequisite for #6726 after #6778 landed. ## Changes - Parse `pinned_sandbox_build_version` as a strict literal digest-to-version case map before normalizing it as release data. - Require a unique SHA-256 per entry, literal `X.Y.Z` versions, a fail-closed default branch, and at least one identity for the selected release. - Bind `DEV_MIN_VERSION` to the same selected release as the installer tables and other stable selectors. - Add positive coverage for a v0.0.82 sandbox identity addition and negative coverage for control-flow, unknown-command, duplicate-digest, and malformed-version edits. The complete v0.0.82 upgrade tree passes this base-trusted checker against all three release manifests and all ten consumed archives. ## Type of Change - [x] Code change (feature, bug fix, or refactor) - [ ] Code change with doc updates - [ ] Doc only (prose changes, no code sample modifications) - [ ] Doc only (includes code sample changes) ## Quality Gates - [x] Tests added or updated for changed behavior - [ ] Existing tests cover changed behavior — justification: - [ ] Tests not applicable — justification: - [ ] Docs updated for user-facing behavior changes - [x] Docs not applicable — justification: this changes only the base-owned dependency verification boundary; active selectors remain on v0.0.72. - [x] Sensitive paths changed (security, policy, credentials, preflight, onboarding, inference, runner, sandbox, or messaging) - [x] Sensitive-path review completed or maintainer-approved waiver recorded — reviewer/approval link/justification: author review confirmed only the fully parsed release-data function and literal selectors are normalized; all other installer text remains locked by the trusted template hash. - [ ] Non-success, skipped, or missing CI check accepted by maintainer — check name, approval link, and follow-up issue: ## Verification - [x] PR description includes the DCO sign-off declaration and every commit appears as `Verified` in GitHub - [x] Normal `pre-commit`, `commit-msg`, and `pre-push` hooks passed, or `npm run check:diff` passed when hooks were skipped or unavailable - [x] Targeted behavior tests pass for the current change set, or tests are marked not applicable above — `npx vitest run test/installer-hash-check.test.ts` (67/67), `npm run build:cli`, `npm run typecheck`, and the base-trusted checker against #6726 - [ ] Applicable broad gate passed — `npm test` for broad runtime/test-harness changes; `npm run check` for repo-wide validation/coverage changes — command/result: not applicable to this focused verifier grammar extension; normal hooks, typecheck, and focused integration coverage passed. - [x] Quality Gates section completed with required justifications or waivers - [x] No secrets, API keys, or credentials committed - [ ] `npm run docs` builds without warnings (doc changes only) - [ ] Doc pages follow the [style guide](https://github.com/NVIDIA/NemoClaw/blob/main/docs/CONTRIBUTING.md) (doc changes only) - [ ] New doc pages include SPDX header and frontmatter (new pages only) --- Signed-off-by: Aaron Erickson <aerickson@nvidia.com>  ## Summary by CodeRabbit - **Security & Reliability** - Strengthened installer verification by adding trusted “sandbox build version” pin checks alongside existing checksum and command pin validation. - Installers now fail closed if sandbox build pins or development minimum version selectors are missing, malformed, inconsistent, or altered. - Updated trusted installer template expectations to improve detection of unauthorized changes and version drift. - **Testing** - Expanded installer-hash tests with new sandbox build mutation scenarios, including both allowed pin changes and multiple rejected tampering cases, plus development-version drift coverage.  --------- Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

…-6379

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

…-6379

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

…-6379

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

…-6379

chore(openshell): prepare 0.0.82 dependency upgrade

2e44620

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

ericksoa self-assigned this Jul 12, 2026

fix(mcp): align credential diagnostics with OpenShell main

225e154

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

docs(mcp): narrow CONNECT 503 diagnosis

2bd7c7c

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

cv added the v0.0.82 Release target label Jul 12, 2026

cv mentioned this pull request Jul 12, 2026

Run speculative compatibility tests against candidate OpenShell, OpenClaw, Hermes, and DCode versions #6691

Open

10 tasks

wscurran added area: sandbox OpenShell sandbox lifecycle, runtime, config, or recovery chore Build, CI, dependency, or tooling maintenance platform: dgx-spark Affects DGX Spark hardware or workflows security labels Jul 12, 2026

ericksoa added 12 commits July 12, 2026 20:16

chore(openshell): prepare 0.0.82 dependency upgrade

3a67bc3

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

fix(mcp): align credential diagnostics with OpenShell main

9213896

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

docs(mcp): narrow CONNECT 503 diagnosis

1fc5e39

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

feat(exec): support multiline OpenShell commands

6e90439

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

fix(install): validate OpenShell archives before extraction

a271c66

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

docs(security): audit OpenShell 0.0.82 migration

06ec576

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

fix(ci): validate trusted OpenShell release upgrades

18189eb

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

fix(ci): require exact OpenShell release asset sets

12a6b1d

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

fix(ci): bind OpenShell hashes to runtime selectors

ece87f2

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

docs(security): bind OpenShell dev artifact evidence

36dda9a

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

test(exec): cover carriage-return command arguments

5e5fe4b

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

test(install): model archive validation in curl fallback

441e0c8

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

ericksoa added 11 commits July 13, 2026 11:46

chore(openshell): upgrade stable pin to v0.0.82

5074db2

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

Merge remote-tracking branch 'origin/main' into dep/openshell-v0.0.82…

7a86d7a

…-6379

test(openshell): keep release-data trust extensible

5ec6b6d

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

test(exec): avoid environment-derived shell path

44bce49

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

test(openshell): keep migration fixtures linear

a765301

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

test(openshell): align upgrade fixtures with 0.0.82

b016b6d

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

ci(e2e): constrain exact-main artifact downloads

acac53e

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

test(openshell): keep stale recovery fixture current

6467eb9

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

Merge remote-tracking branch 'origin/main' into dep/openshell-v0.0.82…

a128d8b

…-6379

Merge remote-tracking branch 'origin/main' into dep/openshell-v0.0.82…

5b7db6a

…-6379

Merge remote-tracking branch 'origin/main' into dep/openshell-v0.0.82…

f7c3ab3

…-6379

cjagwani added v0.0.83 Release target and removed v0.0.82 Release target labels Jul 13, 2026

ericksoa added 10 commits July 13, 2026 14:36

Merge remote-tracking branch 'origin/main' into dep/openshell-v0.0.82…

acdb3a4

…-6379

Merge remote-tracking branch 'origin/main' into dep/openshell-v0.0.82…

ddf425a

…-6379

Merge remote-tracking branch 'origin/main' into dep/openshell-v0.0.82…

d6f746e

…-6379

test(e2e): prove OpenShell v0.0.82 release

d457b47

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

Merge remote-tracking branch 'origin/main' into dep/openshell-v0.0.82…

cf92c03

…-6379

Merge remote-tracking branch 'origin/main' into dep/openshell-v0.0.82…

f2c8cd1

…-6379

test(e2e): keep release proof on stable lane

2c4f38e

Signed-off-by: Aaron Erickson <aerickson@nvidia.com>

Merge remote-tracking branch 'origin/main' into dep/openshell-v0.0.82…

5a67f7f

…-6379

Merge remote-tracking branch 'origin/main' into dep/openshell-v0.0.82…

18255c7

…-6379

Merge remote-tracking branch 'origin/main' into dep/openshell-v0.0.82…

81895e0

…-6379

cv mentioned this pull request Jul 14, 2026

feat(messaging): add Google Chat channel for OpenClaw #6120

Draft

21 tasks

cv added v0.0.84 Release target and removed v0.0.83 Release target labels Jul 14, 2026

cv assigned prekshivyas and unassigned ericksoa Jul 14, 2026

HOYALIM mentioned this pull request Jul 14, 2026

ci(deps): validate OpenShell candidate runtime #6738

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(openshell): upgrade supported version to 0.0.82#6726

chore(openshell): upgrade supported version to 0.0.82#6726
ericksoa wants to merge 57 commits into
mainfrom
dep/openshell-v0.0.82-6379

ericksoa commented Jul 12, 2026 •

edited

Loading

Uh oh!

copy-pr-bot Bot commented Jul 12, 2026

Uh oh!

coderabbitai Bot commented Jul 12, 2026 •

edited

Loading

Review skipped

Uh oh!

github-actions Bot commented Jul 12, 2026 •

edited

Loading

Uh oh!

github-code-quality Bot commented Jul 12, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jul 12, 2026

Uh oh!

github-actions Bot commented Jul 12, 2026

Uh oh!

github-actions Bot commented Jul 12, 2026

Uh oh!

wscurran commented Jul 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

Uh oh!

Conversation

ericksoa commented Jul 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Related Issue

Changes

Release provenance

Type of Change

Quality Gates

Verification

Uh oh!

copy-pr-bot Bot commented Jul 12, 2026

Uh oh!

coderabbitai Bot commented Jul 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

github-actions Bot commented Jul 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR Review Advisor — Informational

Model lanes

E2E guidance

Uh oh!

github-code-quality Bot commented Jul 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Coverage Overview

TypeScript / code-coverage/plugin

TypeScript / code-coverage/cli

Uh oh!

github-actions Bot commented Jul 12, 2026

Uh oh!

github-actions Bot commented Jul 12, 2026

E2E Target Results — ❌ Some tests failed

Uh oh!

github-actions Bot commented Jul 12, 2026

E2E Target Results — ✅ All requested tests passed

Uh oh!

wscurran commented Jul 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

ericksoa commented Jul 12, 2026 •

edited

Loading

coderabbitai Bot commented Jul 12, 2026 •

edited

Loading

github-actions Bot commented Jul 12, 2026 •

edited

Loading

github-code-quality Bot commented Jul 12, 2026 •

edited

Loading