diff --git a/docs/changelog/2026-10-12.mdx b/docs/changelog/2026-10-12.mdx index 1b96dcc7c86..c0d9496e955 100644 --- a/docs/changelog/2026-10-12.mdx +++ b/docs/changelog/2026-10-12.mdx @@ -45,4 +45,4 @@ It also makes policy removal, provider verification, and configuration export mo Collection and delivery share a five-second total limit, and `NEMOCLAW_DISABLE_TELEMETRY=1` suppresses both. Production delivery is not enabled. Related change: [PR #12859](https://github.com/NVIDIA/NemoClaw/pull/12859). - Refer to [QA Operation Telemetry](/user-guide/openclaw/security/best-practices#qa-operation-telemetry). + Refer to [Operation Telemetry](/user-guide/openclaw/security/best-practices#operation-telemetry). diff --git a/docs/changelog/2026-10-19.mdx b/docs/changelog/2026-10-19.mdx new file mode 100644 index 00000000000..906e2e4a831 --- /dev/null +++ b/docs/changelog/2026-10-19.mdx @@ -0,0 +1,43 @@ +{/* + * SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved. + * SPDX-License-Identifier: Apache-2.0 + */} + +## v0.0.136 + +NemoClaw v0.0.136 expands sandbox-attached inference and adds hosted image input and an experimental local profile for Super VL. +It repairs onboarding and DGX Station Express recovery and strengthens provider ownership checks. +Ordinary operation telemetry now uses the fixed TEST receiver. + +- Fresh custom hosted endpoint selections bind the validated endpoint, API, and credential source to a provider attached to the selected sandbox. + Inference status, health checks, switching, and rebuilds use that recorded route. + Existing shared-route selections remain on their recorded path. + Related change: [PR #13201](https://github.com/NVIDIA/NemoClaw/pull/13201). +- New Deep Agents Code, OpenClaw, and Pi local selections use sandbox-attached providers for qualified local endpoints. + Hermes native-local startup, switching, and rebuild refresh supervisor-issued credential references while preserving the selected route and unrelated settings. + Related changes: [PR #13203](https://github.com/NVIDIA/NemoClaw/pull/13203), [PR #13293](https://github.com/NVIDIA/NemoClaw/pull/13293), [PR #13007](https://github.com/NVIDIA/NemoClaw/pull/13007), and [PR #13292](https://github.com/NVIDIA/NemoClaw/pull/13292). +- For OpenClaw native-local routes, `status`, `connect`, and `start` now send health requests to the provider recorded for the sandbox. + They no longer probe an unconfigured shared route for those selections. + Related change: [PR #13447](https://github.com/NVIDIA/NemoClaw/pull/13447). +- An explicit Experimental Nemotron 3.5 Super VL profile serves one 128 GB DGX Spark with native five-token MTP. + It rejects 64 GB or unknown-memory systems before installation and retains the Spark Qwen default. + Physical serving and managed-installer smoke tests passed; complete agent onboarding and sustained-load qualification remain pending. + Related change: [PR #13357](https://github.com/NVIDIA/NemoClaw/pull/13357). +- The NVIDIA Endpoints model picker includes hosted `nvidia/nemotron-3.5-super-vl-120b-a12b` for OpenClaw. + Interactive and unattended onboarding enable text and image input for that selection unless an explicit valid input override is set. + Related change: [PR #13371](https://github.com/NVIDIA/NemoClaw/pull/13371). +- Fresh Model Router onboarding waits for the selected OpenClaw gateway to accept connections before requesting its native restart. + If startup does not settle within the existing bound or the sandbox identity changes, setup stops before restart. + Related change: [PR #13481](https://github.com/NVIDIA/NemoClaw/pull/13481). +- DGX Station Express keeps automatic model selection under the serving catalog. + Installation and resume now retain the selected GPU and model, accept the catalog's automatic receipt, verify an owned vLLM server before reuse, and preserve an unchanged sandbox route. + Related changes: [PR #13305](https://github.com/NVIDIA/NemoClaw/pull/13305) and [PR #13480](https://github.com/NVIDIA/NemoClaw/pull/13480). +- Credential registration inspects existing operator profiles before changing provider state. + Sandbox creation verifies NemoClaw-owned extra profiles, and messaging setup rejects a fallback to a provider profile it does not own. + Related changes: [PR #13353](https://github.com/NVIDIA/NemoClaw/pull/13353), [PR #13356](https://github.com/NVIDIA/NemoClaw/pull/13356), and [PR #13351](https://github.com/NVIDIA/NemoClaw/pull/13351). +- OpenClaw rebuild keeps the recorded dashboard origin when it restores a sandbox. + The `nemoclaw sandbox mcp` usage message now lists the existing `update` action. + Related changes: [PR #13198](https://github.com/NVIDIA/NemoClaw/pull/13198) and [PR #12384](https://github.com/NVIDIA/NemoClaw/pull/12384). +- The installer and supported CLI operations now attempt anonymous completion telemetry by default through NVIDIA's fixed TEST receiver. + QA runs can still add a valid test label; `NEMOCLAW_DISABLE_TELEMETRY=1` suppresses collection and delivery, and Production delivery remains disabled. + Related change: [PR #13494](https://github.com/NVIDIA/NemoClaw/pull/13494). diff --git a/docs/get-started/quickstart-hermes.mdx b/docs/get-started/quickstart-hermes.mdx index f2183e7de5c..080dcf5c3e1 100644 --- a/docs/get-started/quickstart-hermes.mdx +++ b/docs/get-started/quickstart-hermes.mdx @@ -36,6 +36,11 @@ Review the [Prerequisites](prerequisites) before you begin. + The installer and supported CLI operations attempt anonymous completion telemetry to NVIDIA's fixed TEST receiver by default. + Run `export NEMOCLAW_DISABLE_TELEMETRY=1` in this shell before installation to suppress collection and delivery. + Repeat it in any new shell used for NemoClaw CLI commands. + Refer to [Operation Telemetry](/user-guide/hermes/security/best-practices#operation-telemetry) for details. + Run the hosted installer. ```bash diff --git a/docs/get-started/quickstart-langchain-deepagents-code.mdx b/docs/get-started/quickstart-langchain-deepagents-code.mdx index 54138a215ca..9945e4f95e1 100644 --- a/docs/get-started/quickstart-langchain-deepagents-code.mdx +++ b/docs/get-started/quickstart-langchain-deepagents-code.mdx @@ -40,6 +40,11 @@ If you use the coding-agent prompt in the preceding section, you can skip this p + The installer and supported CLI operations attempt anonymous completion telemetry to NVIDIA's fixed TEST receiver by default. + Run `export NEMOCLAW_DISABLE_TELEMETRY=1` in this shell before installation to suppress collection and delivery. + Repeat it in any new shell used for NemoClaw CLI commands. + Refer to [Operation Telemetry](/user-guide/deepagents/security/best-practices#operation-telemetry) for details. + Run the hosted installer. ```bash @@ -274,7 +279,12 @@ If you upgrade from a release that persisted LangSmith environment values, rebui `status` reports the selected harness as a terminal runtime and prints the interactive/headless command shape. If `status` reports `Runtime health: degraded` with an OOM kill count, rebuild the sandbox to restore the terminal runtime. Proxy launchers and startup scripts are baked into the sandbox image. After upgrading from a release that used `inference.local` for NVIDIA Endpoints, recreate each NVIDIA sandbox during onboarding. NemoClaw does not add the required native provider attachment to an existing beta sandbox. NemoClaw v0.0.78 and newer clients fail closed when a pre-v0.0.78 sandbox image lacks the trusted `/usr/local/lib/nemoclaw/dcode-managed-exec` route-probe helper, even when the installed Deep Agents Code version still matches the managed manifest. Rebuild the sandbox to install that image-owned helper before retrying `status`, `doctor`, `connect`, or onboarding recovery. There is no dashboard port or long-running gateway process for this harness. -Older Deep Agents Code sandboxes with a standalone local shared route have no native provider attachment. Back up the sandbox before upgrading OpenShell, then recreate it with `nemo-deepagents onboard --fresh --name --recreate-sandbox`. Expect downtime while the replacement is created. Resume and rebuild stop if the old standalone local route has no native attachment; NemoClaw does not migrate it automatically. Owned Local NVIDIA NIM keeps its shared route and can resume without a native attachment. +Older Deep Agents Code sandboxes with a standalone local shared route have no native provider attachment. +Back up the sandbox before upgrading OpenShell, then recreate it with `nemo-deepagents onboard --fresh --name --recreate-sandbox`. +Expect downtime while the replacement is created. +Resume and rebuild stop if the old standalone local route has no native attachment; NemoClaw does not migrate it automatically. +This requirement applies to Ollama, standalone vLLM, llama.cpp, and qualifying local compatible endpoints. +Owned Local NVIDIA NIM keeps its shared route and can resume without a native attachment. ## Next Steps diff --git a/docs/get-started/quickstart-pi.mdx b/docs/get-started/quickstart-pi.mdx index 529663a117f..1859ae84a62 100644 --- a/docs/get-started/quickstart-pi.mdx +++ b/docs/get-started/quickstart-pi.mdx @@ -35,6 +35,10 @@ Native Podman, macOS, Windows, WSL, messaging channels, dashboards, host mounts, ## Install and Onboard After Pi activation is available in the selected NemoClaw release, install NemoClaw and select Pi explicitly. +The installer and supported CLI operations attempt anonymous completion telemetry to NVIDIA's fixed TEST receiver by default. +Run `export NEMOCLAW_DISABLE_TELEMETRY=1` in this shell before installation to suppress collection and delivery. +Repeat it in any new shell used for NemoClaw CLI commands. +Refer to [Operation Telemetry](/user-guide/openclaw/security/best-practices#operation-telemetry) for details. ```bash curl -fsSL https://www.nvidia.com/nemoclaw.sh | \ diff --git a/docs/get-started/quickstart.mdx b/docs/get-started/quickstart.mdx index 3b98b3e215d..0814a5a79b0 100644 --- a/docs/get-started/quickstart.mdx +++ b/docs/get-started/quickstart.mdx @@ -35,6 +35,11 @@ Review the [Prerequisites](prerequisites) before you begin. + The installer and supported CLI operations attempt anonymous completion telemetry to NVIDIA's fixed TEST receiver by default. + Run `export NEMOCLAW_DISABLE_TELEMETRY=1` in this shell before installation to suppress collection and delivery. + Repeat it in any new shell used for NemoClaw CLI commands. + Refer to [Operation Telemetry](/user-guide/openclaw/security/best-practices#operation-telemetry) for details. + Run the hosted installer in a terminal. ```bash @@ -337,6 +342,10 @@ Use these details when your first-run path needs more control. | Local Ollama | You want a host-local Ollama model. | None | | Model Router | You want NemoClaw to start the host-side model router. | `NVIDIA_INFERENCE_API_KEY` | + The NVIDIA Endpoints model picker includes hosted `nvidia/nemotron-3.5-super-vl-120b-a12b`. + Selecting it enables text and image input unless you provide an explicit valid override. + Refer to [Configure OpenClaw Model Capabilities](/user-guide/openclaw/inference/manage-inference/configure-model-capabilities) for input settings. + For an OpenAI-compatible HTTP endpoint on `localhost`, `127.0.0.1`, or `[::1]`, press Enter to select no authentication when the endpoint uses the port selected by `NEMOCLAW_VLLM_PORT` (`8000` by default) or port `11434`. Port `11435` is reserved for the proxy and is unavailable for new no-authentication endpoints. Recovery can retain an existing no-authentication route on `11435` only when the proxy has moved and no other protected service owns that port. diff --git a/docs/get-started/windows-preparation.mdx b/docs/get-started/windows-preparation.mdx index 61a27c6cd92..48ee6e7ba3a 100644 --- a/docs/get-started/windows-preparation.mdx +++ b/docs/get-started/windows-preparation.mdx @@ -81,6 +81,10 @@ The default distro is `Ubuntu-24.04`. To reuse an existing distro named `Ubuntu`, pass `-DistroName Ubuntu`. The bootstrap script does not install NemoClaw itself. +The installer and supported CLI operations attempt anonymous completion telemetry to NVIDIA's fixed TEST receiver by default. +Run `export NEMOCLAW_DISABLE_TELEMETRY=1` in the Ubuntu shell before installation to suppress collection and delivery. +Repeat it in any new shell used for NemoClaw CLI commands. +Refer to [Operation Telemetry](/user-guide/openclaw/security/best-practices#operation-telemetry) for details. When Windows preparation is complete, it opens Ubuntu and prints the standard installer command to run inside Ubuntu: ```bash diff --git a/docs/index.mdx b/docs/index.mdx index 8cea6598f40..fbfa59236d7 100644 --- a/docs/index.mdx +++ b/docs/index.mdx @@ -50,6 +50,10 @@ It helps you choose an agent to run in an OpenShell sandbox, asks one question a ### From Your Terminal +The installer and supported CLI operations attempt anonymous completion telemetry to NVIDIA's fixed TEST receiver by default. +Run `export NEMOCLAW_DISABLE_TELEMETRY=1` in this shell before installation to suppress collection and delivery. +Repeat it in any new shell used for NemoClaw CLI commands. +Refer to [Operation Telemetry](/user-guide/openclaw/security/best-practices#operation-telemetry) for details. Paste this command into your terminal for the default installation process. diff --git a/docs/inference/choose-local-inference-server.mdx b/docs/inference/choose-local-inference-server.mdx index 32d84ed6992..270e8bfa8b1 100644 --- a/docs/inference/choose-local-inference-server.mdx +++ b/docs/inference/choose-local-inference-server.mdx @@ -102,6 +102,11 @@ It runs the remaining onboarding steps non-interactively and can recreate the na The runtime stores an owner-only bearer API key and model artifacts on the host. +The installer and supported CLI operations also attempt anonymous completion telemetry to NVIDIA's fixed TEST receiver by default. +Run `export NEMOCLAW_DISABLE_TELEMETRY=1` in this shell before installation to suppress collection and delivery. +Repeat it in any new shell used for NemoClaw CLI commands. +Refer to [Operation Telemetry](/user-guide/openclaw/security/best-practices#operation-telemetry) for details. + ```bash curl -fsSL https://www.nvidia.com/nemoclaw.sh | \ diff --git a/docs/inference/set-up-model-router.mdx b/docs/inference/set-up-model-router.mdx index 255a46cbc9c..4d1e4376763 100644 --- a/docs/inference/set-up-model-router.mdx +++ b/docs/inference/set-up-model-router.mdx @@ -19,6 +19,8 @@ During onboarding, NemoClaw starts the router proxy on host port `4000`, waits f The sandbox does not call port `4000` directly. On a host without cached routing-model files, Model Router downloads and loads its routing model before the health endpoint responds. NemoClaw gives a running router up to 10 minutes to pass its health check and stops onboarding sooner if the process exits. +Routed OpenClaw setup then waits for the selected sandbox gateway to accept connections before requesting its native restart. +If the gateway does not become ready within the startup bound, or the sandbox identity changes while waiting, setup stops before restart. NemoClaw tries to append router process output to `~/.nemoclaw/state/model-router.log`. A nondefault gateway port uses `~/.nemoclaw/gateways//state/model-router.log`. NemoClaw creates or reopens the log with owner-only permissions. diff --git a/docs/inference/set-up-vllm-on-two-dgx-sparks.mdx b/docs/inference/set-up-vllm-on-two-dgx-sparks.mdx index edcf8a034d8..3dbeaadeb44 100644 --- a/docs/inference/set-up-vllm-on-two-dgx-sparks.mdx +++ b/docs/inference/set-up-vllm-on-two-dgx-sparks.mdx @@ -128,6 +128,10 @@ Do not interpret two qualified `200,000 Mbps` rails as measured aggregate servin ## Run Automatic Express Installation Run the interactive installer on the system that should become the head. +The installer and supported CLI operations attempt anonymous completion telemetry to NVIDIA's fixed TEST receiver by default. +Run `export NEMOCLAW_DISABLE_TELEMETRY=1` in this shell before installation to suppress collection and delivery. +Repeat it in any new shell used for NemoClaw CLI commands. +Refer to [Operation Telemetry](/user-guide/openclaw/security/best-practices#operation-telemetry) for details. ```bash curl -fsSL https://www.nvidia.com/nemoclaw.sh | \ diff --git a/docs/inference/set-up-vllm-on-two-dgx-stations.mdx b/docs/inference/set-up-vllm-on-two-dgx-stations.mdx index 95a4286a3dd..e86d12e3c51 100644 --- a/docs/inference/set-up-vllm-on-two-dgx-stations.mdx +++ b/docs/inference/set-up-vllm-on-two-dgx-stations.mdx @@ -67,6 +67,10 @@ A missing, malformed, or mismatched ownership field remains foreign state and st For the first non-interactive setup, pass the managed provider and peer to the shell installer. The installer qualifies the pair and creates the peer binding that managed vLLM requires. Do not set `NEMOCLAW_DGX_STATION_SSH_BINDING` yourself or run `$$nemoclaw onboard` directly for the first pair setup. +The installer and supported CLI operations attempt anonymous completion telemetry to NVIDIA's fixed TEST receiver by default. +Run `export NEMOCLAW_DISABLE_TELEMETRY=1` in this shell before installation to suppress collection and delivery. +Repeat it in any new shell used for NemoClaw CLI commands. +Refer to [Operation Telemetry](/user-guide/openclaw/security/best-practices#operation-telemetry) for details. ```bash curl -fsSL https://www.nvidia.com/nemoclaw.sh | \ diff --git a/docs/inference/set-up-vllm.mdx b/docs/inference/set-up-vllm.mdx index 343a5ee65bb..fdb61de8cc4 100644 --- a/docs/inference/set-up-vllm.mdx +++ b/docs/inference/set-up-vllm.mdx @@ -253,6 +253,7 @@ Managed profiles and model-specific recipes use immutable image digests: It pins Hugging Face revision `0dcd680e5585c791728c83342b311d0a0026dbeb` for the approximately `21.56 GB` model download. - The DGX Station Nemotron 3.5 Super VL recipe uses the published `linux/arm64` vLLM nightly digest `sha256:fd33bec1578f312a01547cc6b9691a5154c3e8bcfb76d2b35acb657bfc4eee8f` with approximately `10.69 GB` of compressed image layers. It pins Hugging Face revision `82d93699acd3be9e4617c53360fe5b3f5dbeb1b3` for the approximately `75.06 GB` model download. + The explicit DGX Spark Super VL profile uses the same image and model revision with a separate Spark recipe. - The optional single-Station Nemotron 3 Ultra recipe uses the multi-platform index digest `sha256:0fec7ec5f3e6bc168e54899935fb0557da908a4832a1dbc88e2debcf2f889416` under `vllm/vllm-openai:v0.22.0`; on DGX Station, that index selects a `linux/arm64` manifest with a compressed layer size of `10.67 GB`. It also pins Hugging Face revision `183968f87ae4cedce3039313cac1fd43d112c578` for the approximately `352.38 GB` model download. - Generic Linux `arm64` hosts use `sha256:447995cbb57e6c7cf792cab95e9852e5f62b5fb6d2f39e030fa4eda9a54eadb4` with a compressed layer size of `9.28 GB` under `nvcr.io/nvidia/vllm:26.03.post1-py3`. @@ -437,6 +438,23 @@ Two behaviors surprise direct callers of the managed vLLM endpoint; the OpenClaw A larger budget lets the answer follow the reasoning. +NVIDIA Nemotron 3.5 Super VL is an Experimental, explicit-only choice for one 128 GB DGX Spark. +Check that `$$nemoclaw profiles list` reports the profile as compatible, then select it: + +```bash +$$nemoclaw onboard --profile vllm.dgx-spark-gb10.single.nemotron-3.5-super-vl-120b-a12b-nvfp4 +``` + +The profile requires Linux ARM64 DGX Spark hardware, driver `580.65.06` or newer, compute capability `12.1` or newer, and at least `120,000,000,000` bytes of reported GPU memory. +It rejects 64 GB Sparks and unknown memory capacity before installation. +The Spark recipe uses a 114,688-token context window, two concurrent sequences, 0.70 GPU-memory utilization, and native five-token MTP. +It retains bearer authentication, permits up to eight inline images, and disables video and arbitrary remote media URLs. +The DGX Spark Qwen default does not change. + +The Spark Super VL profile passed software validation and physical smoke tests through managed installation and endpoint recovery. +Complete agent onboarding, sustained concurrency, full-context load, and agent runtime qualification remain pending. +Do not infer those results from the DGX Station Super VL profile. + Muse Glimmer is an additional single-DGX Spark choice and does not change the Qwen default. Select its stable catalog ID after confirming that `$$nemoclaw profiles list` reports it as compatible. @@ -616,6 +634,10 @@ If onboarding stops after you select option 2, `$$nemoclaw onboard --resume` reu Refer to [Choose a Local Inference Server](choose-local-inference-server#install-a-fixed-vllm-profile) for fixed-profile installation and verification. Refer to [Set Up vLLM on Two DGX Sparks](set-up-vllm-on-two-dgx-sparks) for automatic and explicit distributed-profile selection, profile requirements, and cleanup behavior. +The installer and supported CLI operations attempt anonymous completion telemetry to NVIDIA's fixed TEST receiver by default. +Run `export NEMOCLAW_DISABLE_TELEMETRY=1` in this shell before installation to suppress collection and delivery. +Repeat it in any new shell used for NemoClaw CLI commands. +Refer to [Operation Telemetry](/user-guide/openclaw/security/best-practices#operation-telemetry) for details. To select the existing `deepseek-v4-flash` recipe while retaining the same one-confirmation express flow, run: ```bash @@ -716,7 +738,7 @@ NemoClaw applies the registered `vllm serve` arguments, including the reasoning | `muse-glimmer-30b` | `Inferact/Muse-Glimmer-30B-NVFP4-W4A4` | DGX Spark, Linux x86_64 with an NVIDIA GPU | `12.0` on Linux; `12.1` on DGX Spark | Experimental choice for text, reasoning, and structured tool calls. NemoClaw does not enable or support DFlash for this profile. | | `nemotron-3.5-lightning-30b` | `nvidia/NVIDIA-Nemotron-3.5-Lightning-30B-A3B-NVFP4` | DGX Spark, Linux x86_64 with an NVIDIA GPU | `9.0` on Linux; `12.1` on DGX Spark | Experimental reasoning and tool-calling choice. | | `nemotron-3-nano-4b` | `nvidia/NVIDIA-Nemotron-3-Nano-4B-FP8` | DGX Spark, DGX Station, Linux with an NVIDIA GPU | `8.9` | Generic Linux NVIDIA GPU default. | -| `nemotron-3.5-super-vl-120b` | `nvidia/NVIDIA-Nemotron-3.5-Super-VL-120B-A12B-NVFP4` | DGX Station | `10.0` | Experimental single-Station default for Express and managed onboarding. | +| `nemotron-3.5-super-vl-120b` | `nvidia/NVIDIA-Nemotron-3.5-Super-VL-120B-A12B-NVFP4` | DGX Station, 128 GB DGX Spark | `10.0` on Station; `12.1` on Spark | Experimental single-Station default; explicit-only on DGX Spark. | | `deepseek-v4-flash` | `deepseek-ai/DeepSeek-V4-Flash` | DGX Station | `10.0` | Explicit alternative. | | `nemotron-3-ultra-550b-a55b` | `nvidia/NVIDIA-Nemotron-3-Ultra-550B-A55B-NVFP4` | DGX Station | `10.0` | Explicit single-Station alternative; automatic selection for a qualified two-Station pair. | | `deepseek-r1-distill-70b` | `deepseek-ai/DeepSeek-R1-Distill-Llama-70B` | DGX Spark, DGX Station, Linux with an NVIDIA GPU | None | Gated and requires license acceptance. | diff --git a/docs/manage-sandboxes/recover-rebuild-sandboxes.mdx b/docs/manage-sandboxes/recover-rebuild-sandboxes.mdx index 5600d33e596..727dd55ce9a 100644 --- a/docs/manage-sandboxes/recover-rebuild-sandboxes.mdx +++ b/docs/manage-sandboxes/recover-rebuild-sandboxes.mdx @@ -271,6 +271,7 @@ If a pull or validation fails, rebuild keeps the existing sandbox and stops befo If replacement onboarding returns a nonzero status, rebuild stops before post-create state restoration and preserves the backup and registry recovery state. It does not report a successful rebuild. +If the source backup fails before replacement, NemoClaw keeps the source sandbox and its published inference route unchanged. When NemoClaw can identify the exact stopped Docker container and prove its immutable runtime authority, rebuild captures the complete native root through the Docker provider without starting or executing inside the source. This recovery path supports stopped OpenClaw and Deep Agents Code sandboxes. diff --git a/docs/manage-sandboxes/update-sandboxes.mdx b/docs/manage-sandboxes/update-sandboxes.mdx index 7a5e3263e99..4418311d4d5 100644 --- a/docs/manage-sandboxes/update-sandboxes.mdx +++ b/docs/manage-sandboxes/update-sandboxes.mdx @@ -63,6 +63,11 @@ Then rerun the installer. If you manually retired the gateway, restore the previously installed OpenShell version and its gateway before you transfer the sandbox state. +Installer reruns and supported CLI operations attempt anonymous completion telemetry to NVIDIA's fixed TEST receiver by default. +Run `export NEMOCLAW_DISABLE_TELEMETRY=1` in this shell before the installer command to suppress collection and delivery. +Repeat it in any new shell used for NemoClaw CLI commands. +Refer to [Operation Telemetry](/user-guide/openclaw/security/best-practices#operation-telemetry) for details. + ```bash curl -fsSL https://www.nvidia.com/nemoclaw.sh | bash $$nemoclaw upgrade-sandboxes --check diff --git a/docs/reference/architecture.mdx b/docs/reference/architecture.mdx index d3312a4b375..531f39ecaa9 100644 --- a/docs/reference/architecture.mdx +++ b/docs/reference/architecture.mdx @@ -125,6 +125,10 @@ An inability to grant or remove trust is a hard failure. If the service fails inspection, startup, shutdown, or its health check, NemoClaw prints the formula log command and stops so Homebrew remains lifecycle authority. A host without Homebrew, or with no staged formula and no installed OpenShell keg, uses the standalone macOS gateway. A legacy installation, missing pin, changed formula, failed Homebrew operation, or invalid official-tap identity stops with repair guidance instead of changing lifecycle authority. +The installer and supported CLI operations attempt anonymous completion telemetry to NVIDIA's fixed TEST receiver by default. +Run `export NEMOCLAW_DISABLE_TELEMETRY=1` in this shell before installation to suppress collection and delivery. +Repeat it in any new shell used for NemoClaw CLI commands. +Refer to [Operation Telemetry](/user-guide/openclaw/security/best-practices#operation-telemetry) for details. Rerunning the standard NemoClaw installer downloads and stages the pinned formula before onboarding is retried: ```bash diff --git a/docs/reference/commands.mdx b/docs/reference/commands.mdx index 31e2e92d97a..c399df82bcb 100644 --- a/docs/reference/commands.mdx +++ b/docs/reference/commands.mdx @@ -16,6 +16,11 @@ content: type: "reference" --- +The installer and supported CLI operations attempt anonymous completion telemetry to NVIDIA's fixed TEST receiver by default. +Run `export NEMOCLAW_DISABLE_TELEMETRY=1` in this shell before installing or rerunning it to suppress collection and delivery. +Repeat it in any new shell used for NemoClaw CLI commands. +Refer to [Operation Telemetry](/user-guide/openclaw/security/best-practices#operation-telemetry) for details. + The `$$nemoclaw` CLI is the primary interface for managing NemoClaw sandboxes. It is installed automatically by the installer (`curl -fsSL https://www.nvidia.com/nemoclaw.sh | bash`). For guidance on when to use `$$nemoclaw` versus the underlying `openshell` CLI, refer to [CLI Selection Guide](cli-selection-guide). diff --git a/docs/reference/troubleshooting.mdx b/docs/reference/troubleshooting.mdx index fd782634317..c340f85802d 100644 --- a/docs/reference/troubleshooting.mdx +++ b/docs/reference/troubleshooting.mdx @@ -19,6 +19,10 @@ content: {/* markdownlint-disable MD014 */} This page covers common installation, onboarding, and runtime issues, along with resolution steps. +Installer reruns and supported CLI operations attempt anonymous completion telemetry to NVIDIA's fixed TEST receiver by default. +Run `export NEMOCLAW_DISABLE_TELEMETRY=1` in this shell before a rerun to suppress collection and delivery. +Repeat it in any new shell used for NemoClaw CLI commands. +Refer to [Operation Telemetry](/user-guide/openclaw/security/best-practices#operation-telemetry) for details. The diagnostic commands on this page assume `$$nemoclaw` is on your `PATH` diff --git a/docs/resources/starter-prompt.md b/docs/resources/starter-prompt.md index c9f9a1aa4bc..dfc2366269a 100644 --- a/docs/resources/starter-prompt.md +++ b/docs/resources/starter-prompt.md @@ -243,6 +243,7 @@ Use `channels add` and rebuild only for channels omitted from initial onboarding ## Policy, Approval, and Verification +- Before any installer command, explain that the installer and supported CLI operations attempt anonymous completion telemetry to NVIDIA's fixed TEST receiver by default. Offer `NEMOCLAW_DISABLE_TELEMETRY=1` to suppress collection and delivery. If I opt out, pass it to every installer and NemoClaw CLI command during this setup, including verification commands; do not persist it beyond the setup unless I ask. - If a loaded platform asset selects its approved install path, follow its policy requirement and skip the policy-tier question. - For installation outside an accepted platform-asset path, ask for Balanced, Restricted, or Open policy. - Explain that messaging and web-search selections add required endpoints. diff --git a/docs/security/best-practices.mdx b/docs/security/best-practices.mdx index 281e327e3a2..883acd8c3a1 100644 --- a/docs/security/best-practices.mdx +++ b/docs/security/best-practices.mdx @@ -290,14 +290,15 @@ Its curl paths are used only by onboarding's post-create verifier. Do not replace these paths with a broad `/**` binary rule. Broader binary access would let unrelated sandbox processes send data to Tavily through the same allowed endpoint. -## QA Operation Telemetry +## Operation Telemetry -NemoClaw operation telemetry is currently available only for QA runs. -A valid `NEMOCLAW_TELEMETRY_TEST_LABEL` selects NVIDIA's fixed TEST receiver for the installer and supported CLI commands. +The installer and supported CLI commands attempt to send anonymous operation telemetry to NVIDIA's fixed TEST receiver by default. +Ordinary runs send an empty `testLabel`. +QA runs can set `NEMOCLAW_TELEMETRY_TEST_LABEL` to attach a valid label to the same receiver. Use `qa-