Description

Fresh NemoClaw install currently resolves NemoClaw latest to v0.0.40, but the install then fails while installing OpenShell because OpenShell's latest release is 0.0.40 and NemoClaw v0.0.40 declares / enforces max_openshell_version=0.0.39.

This is a recurrence of the same failure class as #3404: NemoClaw should install a compatible OpenShell release (highest published OpenShell release <= max_openshell_version) instead of fetching OpenShell latest and failing after the compatibility gate.

QA report / logs

margaretz@spark-cbcf:~$ curl -fsSL https://www.nvidia.com/nemoclaw.sh | bash
[INFO]  Detected DGX Spark.
  Run express install (auto-configures inference and applies suggested security policy)? [Y/n]: Y
[INFO]  Using express install for DGX Spark.

[1/3] Node.js
  ──────────────────────────────────────────────────
[INFO]  Node.js found: v22.22.2
[INFO]  Runtime OK: Node.js v22.22.2, npm 10.9.7

[2/3] NemoClaw CLI
  ──────────────────────────────────────────────────
[INFO]  Installer payload is not a persistent source checkout — installing from GitHub…
[INFO]  Installing NemoClaw from GitHub…
[INFO]  Resolved install ref: latest
  ✓  Cloning NemoClaw source
  ✓  Preparing OpenClaw package
  ✓  Installing NemoClaw dependencies
  ✓  Building NemoClaw CLI modules
  ✓  Building NemoClaw plugin
  ✓  Linking NemoClaw CLI
  ✗  Installing OpenShell CLI

[install] Detected Linux (aarch64)
[install] openshell 0.0.40 is above the maximum (0.0.39) supported by this NemoClaw release. Upgrade NemoClaw first.

Expected result

A fresh install of NemoClaw v0.0.40 succeeds by installing / retaining an OpenShell version within NemoClaw's supported envelope, e.g. OpenShell 0.0.39 when max_openshell_version=0.0.39.

Actual result

The installer encounters OpenShell 0.0.40 and exits with:

openshell 0.0.40 is above the maximum (0.0.39) supported by this NemoClaw release. Upgrade NemoClaw first.

Notes

• This should be covered by E2E: the install path needs a guard that simulates / exercises "OpenShell latest is newer than NemoClaw max" and verifies NemoClaw pins to a compatible OpenShell instead of failing.
• PR fix(onboard): pin openshell fetch to blueprint max_openshell_version (#3404) #3446 already targets the underlying [DGX Spark][Install] openshell 0.0.38 above NemoClaw max-supported 0.0.36 — install fails #3404 failure mode by making the blueprint's OpenShell min/max the source of truth and resolving the highest compatible published OpenShell release. Please confirm it also covers this v0.0.40 / OpenShell 0.0.40 regression before closing this issue.

Environment