fix(inference): admit private IPv6 host bridges (#13544)

.agents/references/provider-profile-inventory.md

@@ -30,6 +30,21 @@ does not authorize adoption of an existing provider. Ambiguous mutations require
 another mutation. Restart and rebuild verify recorded authority; they do not authorize automatic
 migration of old shared-route sandboxes.
 
+## Native local host address boundary
+
+New native-local selections admit RFC1918 IPv4 and IPv6 unique-local (`fc00::/7`) resolution
+only for `host.openshell.internal` or `host.docker.internal`. Each profile still binds one host,
+port, API prefix, binary set, and credential reference. Public IPv6, link-local IPv6, and literal
+IPv6 endpoints remain excluded. Literal private IPv4 endpoints retain their single-address `/32` boundary.
+
+The dual-stack boundary has a distinct profile and provider identity. Existing IPv4-only receipts
+remain valid for verification and cleanup; resume and rebuild retain their recorded permissions.
+To use IPv6 after upgrading, reselect the local provider with `nemoclaw <sandbox> inference set --provider <provider> --model <model>`.
+If onboarding has not finished, resume with `nemoclaw onboard --resume`; if it retains the old
+attachment, reselect local inference before retrying the proof. Do not overwrite or delete an
+attached profile to change its permissions. Reselection uses the existing ownership and cleanup
+transaction. Profile collisions and missing ownership still stop before provider mutation.
+
 ## Owned inference profiles
 
 All fixed definitions below are in

.github/workflows/platform-vitest-main.yaml

@@ -485,6 +485,7 @@ jobs:
           set -euo pipefail
           cd $workdir
           $exports
+          test "`$(git rev-parse HEAD)" = "$env:GITHUB_SHA"
           export NEMOCLAW_RUN_LIVE_E2E=1
           npx vitest run --project e2e-live test/e2e/live/full-e2e.test.ts --silent=false --reporter=default
           "@

ci/e2e-assertion-budget.json

@@ -15,26 +15,26 @@
     "testFileCount": 77,
     "liveFileCount": 186,
     "direct": {
-      "expectCalls": 1260,
-      "matcherAssertions": 1240,
+      "expectCalls": 1267,
+      "matcherAssertions": 1247,
       "nodeAssertions": 109,
-      "namedAssertionHelpers": 423,
+      "namedAssertionHelpers": 424,
       "failCalls": 0,
       "throwGuards": 50,
       "objectFieldAssertions": 184,
-      "assertionPoints": 2006,
+      "assertionPoints": 2014,
       "generatedProbeBlocks": 86,
       "generatedProbeConditions": 215
     },
     "unique": {
-      "expectCalls": 1685,
-      "matcherAssertions": 1660,
+      "expectCalls": 1692,
+      "matcherAssertions": 1667,
       "nodeAssertions": 132,
-      "namedAssertionHelpers": 665,
+      "namedAssertionHelpers": 666,
       "failCalls": 1,
       "throwGuards": 526,
       "objectFieldAssertions": 261,
-      "assertionPoints": 3245,
+      "assertionPoints": 3253,
       "generatedProbeBlocks": 209,
       "generatedProbeConditions": 721
     },
@@ -95,7 +95,7 @@
       "test/e2e/live/onboard-repair.test.ts": [22,26,22,26,0],
       "test/e2e/live/onboard-resume.test.ts": [59,63,59,63,0],
       "test/e2e/live/openclaw-discord-pairing.test.ts": [13,20,28,86,10],
-      "test/e2e/live/openclaw-inference-switch.test.ts": [28,40,55,85,3],
+      "test/e2e/live/openclaw-inference-switch.test.ts": [35,48,62,93,3],
       "test/e2e/live/openclaw-skill-cli.test.ts": [10,14,10,14,1],
       "test/e2e/live/openclaw-slack-pairing.test.ts": [11,18,26,84,10],
       "test/e2e/live/openshell-credential-generation-window.test.ts": [42,92,43,112,18],

ci/e2e-assertion-growth-exceptions.json

@@ -1,5 +1,5 @@
 {
-  "$comment": "SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.\nSPDX-License-Identifier: Apache-2.0\n\nMaintainer-approved exception for the exact PR #10341 budget transition. Adds only deferred-onboarding.test.ts with [12,14,12,14,0]; existing per-file budgets remain unchanged. Approval: https://github.com/NVIDIA/NemoClaw/pull/10341#issuecomment-5799263232. Local hooks and candidate CI may use this branch policy. The independent PR check reads only trusted base policy, so its expected growth failure is explicitly waived for #10341. A changed base or candidate budget invalidates this exception. Remove after #10341 merges.\n\nPR #12305 adds 19 live assertion points for the approved stopped-container recovery proof while retaining healthy-rebuild coverage. Exact budget-transition approval: https://github.com/NVIDIA/NemoClaw/pull/12305#issuecomment-5803852010. No other budget transition is accepted by this entry.\n\nThe same 19-assertion helper is also exercised by rebuild-openclaw, independently of the inherited private-MCP failure. Unique assertion counts are unchanged; one helper file is extracted. Revised exact-transition approval: https://github.com/NVIDIA/NemoClaw/pull/12305#issuecomment-5807159038.\n\nProposed exact budget transition for PR #12591: replace a restart progress-message check with a native gateway-owner observation before and after inference switching. Adds one generated probe and five probe conditions; direct and unique expectation counts do not exceed main. The imported helper also appears in the full-e2e transitive inventory. This entry requires maintainer review before landing on main. Remove it after #12591 merges.\n\nPR #12718 is the prerequisite for the PR #12382 budget transition recorded below. The exception matches only PR #12382 and both budget digests. A changed base or candidate budget invalidates it. The independent check reads trusted base policy, so this prerequisite must land on main before #12382 uses the exception. Remove after #12382 merges.\n\nMaintainer Prekshi Vyas (@prekshivyas) approved this exact refreshed PR #12382 transition on 2026-10-08: base budget SHA-256 53c51c4229d387633165771730f8f1a8373f84e9f3303b2144280027a56e3441 to candidate budget SHA-256 8162408384d7a6b97ef0062042c73d4bc9486f54d2dfa6c0c5732e42d1060e2a. Acceptance record: https://github.com/NVIDIA/NemoClaw/pull/12840#issuecomment-6066319444. It includes one additional unique assertion point and one generated probe condition. This refresh preserves the #12608 concurrent-gateway-ports reduction and the previously reviewed runtime assertion changes. The independent check is not waived: the refreshed exception must land on main before enforcement can accept it. A different PR or budget digest remains rejected. Remove after #12382 merges.\n\nPR #12777 adds exactly two approved live assertions for native host-local inference success and sibling provider isolation. Deterministic behavior remains in unit/integration tests. Approval transcription: https://github.com/NVIDIA/NemoClaw/pull/12777#issuecomment-6048385152. The independent check reads trusted base policy; this entry does not disable it. Remove after #12777 merges.\n\nThe #12777 budget digests account for main #12608 removing seven assertions from concurrent-gateway-ports. The candidate preserves that reduction and adds only the same two approved inference-routing assertions. No other file budget increases.\n\nPR #12886 approved the provider-smoke transition extracted by #12955. Approval: https://github.com/NVIDIA/NemoClaw/pull/12886#issuecomment-6083839176. The unchanged change digest binds the same nine assertion points and companion inventory. This entry supports local preliminary validation and the Slice 2 consumer. Independent CI for the prerequisite requires its own maintainer approval record; this entry does not approve that PR.\n\nPR #12958 extracts the same approved provider-smoke budget transition for #12955. Its exact, unedited maintainer approval is https://github.com/NVIDIA/NemoClaw/pull/12958#issuecomment-6093851571. This candidate entry supports static hooks; the independent check continues to verify the PR-specific approval on GitHub. Remove after #12958 merges.\n\nPR #13203 adds the approved 19 assertion points for real authenticated and credentialless DCode native-local requests, credential isolation and sibling denial. Approval: https://github.com/NVIDIA/NemoClaw/pull/13203#issuecomment-6180239679. This exact change digest supports local hooks and candidate CI. Independent enforcement still verifies the PR-specific maintainer approval on GitHub. Remove after #13203 merges.\n\nPR #13201 adds one generated probe block and one counted probe condition in the existing full E2E owner to verify the selected sandbox agent endpoint, API, model and credential reference. Rebecca Sliter approved this exact delta: https://github.com/NVIDIA/NemoClaw/pull/13201#issuecomment-6180464605. This entry supports local validation; the independent check must verify the maintainer record. Remove after #13201 merges.\n\nPR #13293 consolidates OpenClaw native-local scenarios into the existing switching owner and removes duplicated deterministic metadata checks and the redundant mock curl probe. Suite totals fall by 16 expect calls and 10 assertion points without adding live files. Only the owning file transitive allocation grows because it now imports existing live helpers. Maintainer authorization: https://github.com/NVIDIA/NemoClaw/pull/13293#issuecomment-6211036786. This exact transition supports candidate CI; independent enforcement still verifies the maintainer record.\n\nPR #13007 retains the same ten Pi native-local live assertion points approved at https://github.com/NVIDIA/NemoClaw/pull/13007#issuecomment-6175787892. The exact change digest is unchanged against its replacement OpenClaw parent #13293. This entry supports local checks against that stacked base; independent enforcement still checks the authenticated PR approval.",
+  "$comment": "SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.\nSPDX-License-Identifier: Apache-2.0\n\nMaintainer-approved exception for the exact PR #10341 budget transition. Adds only deferred-onboarding.test.ts with [12,14,12,14,0]; existing per-file budgets remain unchanged. Approval: https://github.com/NVIDIA/NemoClaw/pull/10341#issuecomment-5799263232. Local hooks and candidate CI may use this branch policy. The independent PR check reads only trusted base policy, so its expected growth failure is explicitly waived for #10341. A changed base or candidate budget invalidates this exception. Remove after #10341 merges.\n\nPR #12305 adds 19 live assertion points for the approved stopped-container recovery proof while retaining healthy-rebuild coverage. Exact budget-transition approval: https://github.com/NVIDIA/NemoClaw/pull/12305#issuecomment-5803852010. No other budget transition is accepted by this entry.\n\nThe same 19-assertion helper is also exercised by rebuild-openclaw, independently of the inherited private-MCP failure. Unique assertion counts are unchanged; one helper file is extracted. Revised exact-transition approval: https://github.com/NVIDIA/NemoClaw/pull/12305#issuecomment-5807159038.\n\nProposed exact budget transition for PR #12591: replace a restart progress-message check with a native gateway-owner observation before and after inference switching. Adds one generated probe and five probe conditions; direct and unique expectation counts do not exceed main. The imported helper also appears in the full-e2e transitive inventory. This entry requires maintainer review before landing on main. Remove it after #12591 merges.\n\nPR #12718 is the prerequisite for the PR #12382 budget transition recorded below. The exception matches only PR #12382 and both budget digests. A changed base or candidate budget invalidates it. The independent check reads trusted base policy, so this prerequisite must land on main before #12382 uses the exception. Remove after #12382 merges.\n\nMaintainer Prekshi Vyas (@prekshivyas) approved this exact refreshed PR #12382 transition on 2026-10-08: base budget SHA-256 53c51c4229d387633165771730f8f1a8373f84e9f3303b2144280027a56e3441 to candidate budget SHA-256 8162408384d7a6b97ef0062042c73d4bc9486f54d2dfa6c0c5732e42d1060e2a. Acceptance record: https://github.com/NVIDIA/NemoClaw/pull/12840#issuecomment-6066319444. It includes one additional unique assertion point and one generated probe condition. This refresh preserves the #12608 concurrent-gateway-ports reduction and the previously reviewed runtime assertion changes. The independent check is not waived: the refreshed exception must land on main before enforcement can accept it. A different PR or budget digest remains rejected. Remove after #12382 merges.\n\nPR #12777 adds exactly two approved live assertions for native host-local inference success and sibling provider isolation. Deterministic behavior remains in unit/integration tests. Approval transcription: https://github.com/NVIDIA/NemoClaw/pull/12777#issuecomment-6048385152. The independent check reads trusted base policy; this entry does not disable it. Remove after #12777 merges.\n\nThe #12777 budget digests account for main #12608 removing seven assertions from concurrent-gateway-ports. The candidate preserves that reduction and adds only the same two approved inference-routing assertions. No other file budget increases.\n\nPR #12886 approved the provider-smoke transition extracted by #12955. Approval: https://github.com/NVIDIA/NemoClaw/pull/12886#issuecomment-6083839176. The unchanged change digest binds the same nine assertion points and companion inventory. This entry supports local preliminary validation and the Slice 2 consumer. Independent CI for the prerequisite requires its own maintainer approval record; this entry does not approve that PR.\n\nPR #12958 extracts the same approved provider-smoke budget transition for #12955. Its exact, unedited maintainer approval is https://github.com/NVIDIA/NemoClaw/pull/12958#issuecomment-6093851571. This candidate entry supports static hooks; the independent check continues to verify the PR-specific approval on GitHub. Remove after #12958 merges.\n\nPR #13203 adds the approved 19 assertion points for real authenticated and credentialless DCode native-local requests, credential isolation and sibling denial. Approval: https://github.com/NVIDIA/NemoClaw/pull/13203#issuecomment-6180239679. This exact change digest supports local hooks and candidate CI. Independent enforcement still verifies the PR-specific maintainer approval on GitHub. Remove after #13203 merges.\n\nPR #13201 adds one generated probe block and one counted probe condition in the existing full E2E owner to verify the selected sandbox agent endpoint, API, model and credential reference. Rebecca Sliter approved this exact delta: https://github.com/NVIDIA/NemoClaw/pull/13201#issuecomment-6180464605. This entry supports local validation; the independent check must verify the maintainer record. Remove after #13201 merges.\n\nPR #13293 consolidates OpenClaw native-local scenarios into the existing switching owner and removes duplicated deterministic metadata checks and the redundant mock curl probe. Suite totals fall by 16 expect calls and 10 assertion points without adding live files. Only the owning file transitive allocation grows because it now imports existing live helpers. Maintainer authorization: https://github.com/NVIDIA/NemoClaw/pull/13293#issuecomment-6211036786. This exact transition supports candidate CI; independent enforcement still verifies the maintainer record.\n\nPR #13007 retains the same ten Pi native-local live assertion points approved at https://github.com/NVIDIA/NemoClaw/pull/13007#issuecomment-6175787892. The exact change digest is unchanged against its replacement OpenClaw parent #13293. This entry supports local checks against that stacked base; independent enforcement still checks the authenticated PR approval.\n\nPR #13582 adds eight live assertion points for the WSL2 IPv6 native-local policy boundary. Only openclaw-inference-switch.test.ts increases, by seven direct expectations and the existing onboard-success helper. Deterministic CIDR and receipt coverage remain in source tests. Maintainer approval: https://github.com/NVIDIA/NemoClaw/pull/13582#issuecomment-6308860348. Independent enforcement verifies that PR-specific record. Remove this preliminary local exception after merge.",
   "schemaVersion": 1,
   "exceptions": [
     {
@@ -66,6 +66,10 @@
     {
       "pullRequest": 12244,
       "changeSha256": "17dc02d59670eb356eb608df119747918ad481da4ca11044c55e41f52ba54904"
+    },
+    {
+      "pullRequest": 13582,
+      "changeSha256": "90b021fd5c15eac87cc230ec2310b4b81fcbf2e7ce50c08b31775232d1dbc38e"
     }
   ]
 }

docs/reference/troubleshooting.mdx

@@ -2721,12 +2721,18 @@ Configuring an inference provider with a base URL like `http://host.docker.inter
 getent hosts host.docker.internal
 ```
 
-Expected output:
+A native Linux Docker bridge can return an address such as this example:
 
 ```text
 172.17.0.1      host.docker.internal host.openshell.internal
 ```
 
+With Docker Desktop WSL integration, the aliases can instead resolve to an IPv6 unique-local address in `fc00::/7`, such as `fdc4:f303:9324::254`.
+New native-local host-alias profiles admit private IPv4 and IPv6 unique-local addresses while retaining the selected hostname and port restrictions.
+Public, link-local, and loopback IPv6 addresses remain excluded.
+A valid DNS result does not prove that the host service is reachable.
+In the IPv4 example, this request still fails if the host service is not forwarded to port `11434`:
+
 ```bash
 no_proxy=host.docker.internal curl -v http://host.docker.internal:11434/api/tags
 ```

src/lib/actions/inference-set-openclaw-native-local.test.ts

@@ -9,6 +9,7 @@ import {
 } from "../../../test/helpers/inference-set-openclaw-native-local";
 import { resolveOpenClawLocalSwitch } from "./inference-set/native-local";
 import { runInferenceSet } from "./inference-set";
+import { nativeLocalIdentity } from "../inference/native-local/contract";
 
 vi.mock("../adapters/openshell/provider-policy", () => ({
   requireNativeProviderPolicy: vi.fn(async () => {}),
@@ -85,6 +86,37 @@ describe("OpenClaw native local live selection", () => {
     expect(deps.calls.clearNativeLocalProviderAuthority).not.toHaveBeenCalled();
   });
 
+  it("reselects the same Ollama endpoint with the dual-stack profile (#13544)", async () => {
+    const previous = { ...attachment, ...nativeLocalIdentity(attachment, 1) };
+    const { deps, next, isAttached } = switchingFixture(previous, "ollama-local");
+    await expect(
+      runInferenceSet({ provider: "ollama-local", model: "old-model", sandboxName: "alpha" }, deps),
+    ).resolves.toMatchObject({ provider: "ollama-local" });
+    expect(isAttached()).toBe(true);
+    expect(deps.calls.updateSandbox).toHaveBeenCalledWith(
+      "alpha",
+      expect.objectContaining({ nativeLocalProviderAttachment: next }),
+    );
+    expect(deps.calls.clearNativeLocalProviderAuthority).toHaveBeenCalledWith(previous);
+  });
+
+  it("restores the IPv4 attachment when dual-stack selection cannot save the registry (#13544)", async () => {
+    const previous = { ...attachment, ...nativeLocalIdentity(attachment, 1) };
+    const { deps, isAttached } = switchingFixture(previous, "ollama-local");
+    deps.calls.updateSandbox.mockReturnValue(false);
+    await expect(
+      runInferenceSet({ provider: "ollama-local", model: "old-model", sandboxName: "alpha" }, deps),
+    ).rejects.toThrow(/Failed to update NemoClaw registry/);
+    expect(isAttached()).toBe(false);
+    expect(
+      await deps.providerAdapter.listProviderAttachments({
+        target: { kind: "named", gatewayName: "nemoclaw" },
+        sandboxName: "alpha",
+      }),
+    ).toMatchObject({ ok: true, value: { names: [previous.providerName] } });
+    expect(deps.calls.clearNativeLocalProviderAuthority).not.toHaveBeenCalledWith(previous);
+  });
+
   it("switches from Ollama to another local provider without changing the shared route", async () => {
     const { deps } = switchingFixture();
     await expect(