Merge branch 'main' into fix/10085-config-get-doc-example

Author: apurvvkumaria

.github/workflows/candidate-compatibility.yaml

@@ -185,7 +185,7 @@ jobs:
           exec > >(tee "candidate-lane-${LANE}.log") 2>&1
           [[ "$LANE" == installer ]] || { echo "::error::untrusted lane id: $LANE"; exit 1; }
           npx vitest run --project installer-integration \
-            test/install-openshell-version-check.test.ts \
+            test/installer-integration/install-openshell-version-check.test.ts \
             --testNamePattern "validates the receipt-bound candidate through the installer path"
           base_path="${PATH#*:}"
           env \

.github/workflows/e2e.yaml

@@ -137,7 +137,7 @@ jobs:
         if: ${{ steps.publication_mode.outputs.required == '1' || steps.publication_mode.outputs.reuse == '1' }}
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
-          ref: ${{ inputs.checkout_sha || github.sha }}
+          ref: ${{ inputs.workflow_sha || github.workflow_sha }}
           fetch-depth: 0
           persist-credentials: false
 
@@ -2708,6 +2708,7 @@ jobs:
         include: ${{ fromJSON(needs.generate-matrix.outputs.matrix) }}
     env:
       E2E_ARTIFACT_DIR: ${{ github.workspace }}/e2e-artifacts/live
+      E2E_MANAGED_IMAGE_REVISION: ${{ needs.generate-matrix.outputs.managed_image_catalog == '' && needs.base-image-publication.outputs.managed_image_revision || '' }}
       NEMOCLAW_LANGCHAIN_DEEPAGENTS_CODE_SANDBOX_BASE_IMAGE_REF: ${{ needs.base-image-publication.outputs.dcode_base_ref }}
       NEMOCLAW_CLI_BIN: ${{ github.workspace }}/bin/nemoclaw.js
       NEMOCLAW_RUN_LIVE_E2E: "1"
@@ -5368,7 +5369,7 @@ jobs:
           path: ${{ runner.temp }}/e2e-artifacts/live/jetson-nvmap-gpu/
 
   cloud-onboard:
-    needs: generate-matrix
+    needs: [base-image-publication, generate-matrix]
     if: ${{ contains(fromJSON(needs.generate-matrix.outputs.selected_jobs), 'cloud-onboard') }}
     runs-on: ubuntu-latest
     timeout-minutes: 70
@@ -5379,6 +5380,7 @@ jobs:
       E2E_OBSERVABLE_OUTCOME: "Public install onboarding hosted inference and security checks succeed"
       E2E_ENVIRONMENT_OR_INFERENCE_ENDPOINT: "Ubuntu; NVIDIA hosted inference"
       E2E_ARTIFACT_DIR: ${{ github.workspace }}/e2e-artifacts/live/cloud-onboard
+      E2E_MANAGED_IMAGE_REVISION: ${{ needs.generate-matrix.outputs.managed_image_catalog == '' && needs.base-image-publication.outputs.managed_image_revision || '' }}
       NEMOCLAW_CLI_BIN: ${{ github.workspace }}/bin/nemoclaw.js
       NEMOCLAW_RUN_LIVE_E2E: "1"
       NEMOCLAW_E2E_USE_HOSTED_INFERENCE: "1"

.github/workflows/platform-vitest-main.yaml

@@ -78,7 +78,7 @@ jobs:
           npx vitest run --project integration test/platform.test.ts
           npx vitest run --project installer-integration \
             --testTimeout 30000 \
-            test/install-preflight.test.ts
+            test/installer-integration/install-preflight.test.ts
 
   macos-vitest:
     name: macOS compatibility (${{ matrix.shard }}/4)

.github/workflows/pr-self-hosted.yaml

@@ -30,8 +30,13 @@ concurrency:
 jobs:
   select-llama-cpp-generic-gpu:
     runs-on: ubuntu-latest
-    timeout-minutes: 5
+    timeout-minutes: 55
+    permissions:
+      actions: read
+      contents: read
     outputs:
+      base_sha: ${{ steps.changed.outputs.base_sha }}
+      managed_image_revision: ${{ steps.publication.outputs.head_sha }}
       selected: ${{ steps.changed.outputs.selected }}
     steps:
       - id: changed
@@ -48,6 +53,7 @@ jobs:
           pr_number="${BASH_REMATCH[1]}"
           pr_json="$(gh api "repos/$GITHUB_REPOSITORY/pulls/$pr_number")"
           head_sha="$(jq -er '.head.sha | select(test("^[a-f0-9]{40}$"))' <<<"$pr_json")"
+          base_sha="$(jq -er '.base.sha | select(test("^[a-f0-9]{40}$"))' <<<"$pr_json")"
           [[ "$head_sha" == "$GITHUB_SHA" ]] || {
             echo "::error::Copied PR branch SHA does not match the current PR head" >&2
             exit 1
@@ -79,7 +85,42 @@ jobs:
           else
             selected=false
           fi
-          printf 'selected=%s\n' "$selected" >>"$GITHUB_OUTPUT"
+          {
+            printf 'base_sha=%s\n' "$base_sha"
+            printf 'selected=%s\n' "$selected"
+          } >>"$GITHUB_OUTPUT"
+
+      - name: Check out trusted publication gate
+        if: ${{ steps.changed.outputs.selected == 'true' }}
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+          ref: ${{ steps.changed.outputs.base_sha }}
+
+      - name: Set up Node for publication verification
+        if: ${{ steps.changed.outputs.selected == 'true' }}
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
+        with:
+          node-version: 22
+
+      - name: Install trusted publication gate dependencies
+        if: ${{ steps.changed.outputs.selected == 'true' }}
+        run: npm ci --ignore-scripts --no-audit --no-fund
+
+      - id: publication
+        name: Verify applicable base-image publication
+        if: ${{ steps.changed.outputs.selected == 'true' }}
+        env:
+          EXPECTED_SHA: ${{ steps.changed.outputs.base_sha }}
+          GITHUB_TOKEN: ${{ github.token }}
+          REQUIRE_MANAGED_IMAGE_PUBLICATION: "1"
+        shell: bash
+        run: |
+          set -euo pipefail
+          export GITHUB_REF=refs/heads/main
+          export GITHUB_SHA="$EXPECTED_SHA"
+          node --experimental-strip-types --no-warnings tools/e2e/base-image-publication.mts --wait-seconds 3000 --poll-seconds 30
 
   llama-cpp-generic-gpu:
     name: llama.cpp on generic NVIDIA GPU
@@ -90,6 +131,7 @@ jobs:
     env:
       E2E_ARTIFACT_DIR: ${{ github.workspace }}/e2e-artifacts/live/llama-cpp-generic-gpu
       E2E_JOB: "1"
+      E2E_MANAGED_IMAGE_REVISION: ${{ needs.select-llama-cpp-generic-gpu.outputs.managed_image_revision }}
       E2E_TARGET_ID: llama-cpp-generic-gpu
       NEMOCLAW_ACCEPT_THIRD_PARTY_SOFTWARE: "1"
       NEMOCLAW_CLI_BIN: ${{ github.workspace }}/bin/nemoclaw.js

AGENTS.md

@@ -38,7 +38,7 @@ Skills that write or review explanatory text must follow the shared [Documentati
 | `nemoclaw-blueprint/` | YAML | Blueprint definition and network policies |
 | `nemoclaw-blueprint/model-specific-setup/` | JSON | Agent-scoped model/provider compatibility registry |
 | `scripts/` | Bash/JS/TS | Install helpers, setup, automation, E2E tooling |
-| `test/` | JavaScript (ESM) | Root-level integration tests (Vitest) |
+| `test/` | JavaScript/TypeScript (ESM) | Integration tests and explicit execution lanes (see `test/README.md`) |
 | `test/e2e/` | Bash/JS/TS | End-to-end tests, target registry, and live runner (see `test/e2e/README.md`) |
 | `docs/` | MDX/Markdown | User-facing Fern docs and Markdown routes for AI documentation clients |
 | `fern/` | YAML/CSS/SVG | Fern site configuration and shared assets |
@@ -95,7 +95,7 @@ Tests are organized into disjoint Vitest projects defined in `vitest.config.ts`:
 
 1. **`cli`** — `src/**/*.test.ts` — CLI unit tests importing source
 2. **`integration`** — `test/**/*.test.{js,ts}` — root integration tests importing source; excludes the explicit lanes below
-3. **`installer-integration`** — installer tests that spawn real `install.sh` processes
+3. **`installer-integration`** — `test/installer-integration/**/*.test.ts` — installer tests that spawn real `install.sh` processes
 4. **`package-contract`** — `test/package-contract/**/*.test.ts` — the only non-live lane that imports compiled CLI/plugin artifacts
 5. **`plugin`** — `nemoclaw/src/**/*.test.ts` — plugin unit tests co-located with source
 6. **`e2e-support`** — fast tests for the E2E fixture/support layer; this project runs in the
@@ -104,7 +104,7 @@ Tests are organized into disjoint Vitest projects defined in `vitest.config.ts`:
 
 When writing tests:
 
-- Root-level tests (`test/`) use ESM imports
+- Tests under `test/` use ESM imports and follow the directory ownership rules in `test/README.md`.
 - Plugin tests use TypeScript and are co-located with their source files
 - Import CLI source from ordinary tests. Put genuine compiled-artifact assertions under `test/package-contract/`.
 - Keep project globs disjoint and exhaustive; `npm run test:projects:check` compares filesystem candidates with Vitest and rejects missing, overlapping, or unexpected membership.

agents/hermes/host/tool-gateway-broker.ts

@@ -1005,6 +1005,16 @@ async function handleProxy(req, res, route) {
     return;
   }
 
+  // `redirect: "manual"` above already declines to follow a 3xx here, so
+  // relaying one just hands the same redirect to the sandbox client, which
+  // does follow it. Fail closed instead, matching the pinned inference
+  // forwarder in src/lib/inference/https-pin-runtime-adapter-forward.ts.
+  if (upstreamResp.status >= 300 && upstreamResp.status < 400) {
+    await upstreamResp.body?.cancel().catch(() => {});
+    sendText(res, 502, "Upstream redirect blocked: the broker does not follow or relay redirects.");
+    return;
+  }
+
   const buffer = Buffer.from(await upstreamResp.arrayBuffer());
   res.writeHead(upstreamResp.status, forwardResponseHeaders(upstreamResp));
   res.end(buffer);

ci/source-shape-test-budget.json

@@ -21,11 +21,6 @@
       "test": "returns a credential-free JSON manifest byte for byte",
       "category": "security"
     },
-    {
-      "file": "test/dashboard-remote-bind-lifecycle.test.ts",
-      "test": "rejects a mutated checked-in security inventory instruction (#6024)",
-      "category": "security"
-    },
     {
       "file": "test/e2e/live/hermes-e2e.test.ts",
       "test": "hermes-e2e: install.sh onboards Hermes and proves health plus live inference",
@@ -166,11 +161,6 @@
       "test": "rejects $name even with a test-only matching lock digest",
       "category": "security"
     },
-    {
-      "file": "test/openclaw-locked-install.test.ts",
-      "test": "rejects a same-registry tarball with a substituted package manifest",
-      "category": "security"
-    },
     {
       "file": "test/openclaw-locked-install.test.ts",
       "test": "rejects any lock byte tamper before registry metadata is consulted",

ci/test-file-size-budget.json

@@ -6,7 +6,7 @@
     "src/lib/inference/nim.test.ts": 2064,
     "src/lib/onboard/preflight.test.ts": 1875,
     "test/generate-openclaw-config.test.ts": 1907,
-    "test/install-preflight.test.ts": 3025,
+    "test/installer-integration/install-preflight.test.ts": 3025,
     "test/nemoclaw-start.test.ts": 4671,
     "test/onboard-messaging.test.ts": 2023,
     "test/onboard-selection.test.ts": 4177

docs/reference/commands.mdx

@@ -4958,12 +4958,12 @@ Set them before running `$$nemoclaw onboard`.
 | `NEMOCLAW_TRUSTED_PRIVATE_HOSTS` | comma-separated exact hostnames or IP literals | Allows operator-owned RFC1918, CGNAT, or IPv6 unique local destinations through supported inference, managed MCP, and custom-policy registration paths. Link-local metadata and other reserved ranges remain blocked; DNS resolution and exact address pinning remain active; wildcards are not supported. |
 | `NEMOCLAW_TRUSTED_PRIVATE_INFERENCE_HOSTS` | comma-separated exact hostnames or IP literals | Inference-only compatibility alias. Inference onboarding combines entries from this variable and `NEMOCLAW_TRUSTED_PRIVATE_HOSTS`. |
 | `NEMOCLAW_PREFERRED_API` | `completions` (currently the only honored value) | Forces the validation probe to use the `/v1/chat/completions` API path instead of the newer `/v1/responses` API. |
-| `NEMOCLAW_INFERENCE_INPUTS` | comma-separated list of `text` and/or `image` | Declares model input modalities for vision-capable models. Validated strictly; unknown tokens are ignored. |
 | `NEMOCLAW_OLLAMA_REQUIRE_TOOLS` | `0` to disable, anything else to keep the default | When set to `0`, skips the Ollama tool-calling capability check during local-inference onboarding. |
 | `NEMOCLAW_OLLAMA_INSTALL_MODE` | `system`, `user`, or empty/unset | Pins the Linux Ollama install location. Refer to the Linux Ollama install mode details below. |
 | `NEMOCLAW_PROXY_HOST` | hostname or IP | Overrides the sandbox-side outbound HTTP proxy host. Defaults to `10.200.0.1`. |
 | `NEMOCLAW_PROXY_PORT` | integer port | Overrides the sandbox-side outbound HTTP proxy port. Defaults to `3128`. |
 <AgentOnly variant="openclaw">
+| `NEMOCLAW_INFERENCE_INPUTS` | comma-separated list of `text` and/or `image` | OpenClaw only. Declares model input modalities. Unsupported or duplicate values are rejected. |
 | `NEMOCLAW_OPENCLAW_OTEL` | `1` to enable | Enables OpenClaw conversation diagnostics export through the `diagnostics-otel` plugin. Disabled by default. |
 | `NEMOCLAW_OPENCLAW_OTEL_ENDPOINT` | OTLP/HTTP URL | Sets the OpenTelemetry collector endpoint for OpenClaw diagnostics. Defaults to `http://host.openshell.internal:4318` when `NEMOCLAW_OPENCLAW_OTEL=1`. |
 | `NEMOCLAW_OPENCLAW_OTEL_SERVICE_NAME` | service name | Sets the OTEL `service.name` for OpenClaw gateway spans. Defaults to `openclaw-gateway`. |

internal/security-reviews/openshell-0.0.101-migration-review.md

@@ -127,7 +127,7 @@ are `a2704babbb468fd0a359bfdd9844de71095b730758541b4ca8cbab77d4018920` for linux
 `88300e35f153123e4dc3021c537834dd6c0a09665a4a6d3974cd285d512345c4` for linux-aarch64.
 
 The correction commit has a raw SSH signature and exact contributor `Signed-off-by` trailer. Its
-independent exact-commit review passed all nine security categories, 90 focused trust tests, the
+independent exact-commit review passed every security category, 90 focused trust tests, the
 repository integrity checks, and type-checking. Both findings are closed with no new blocker.
 Because the formula asset remains mutable upstream, a replacement now causes a fail-closed
 availability failure instead of silently changing trusted identity. The dormant v0.0.101 sandbox