## Summary

Follow-up to PR #4331 (`fix(onboard): forward host proxy env into
sandbox`). #4331 started forwarding the host `HTTP_PROXY` /
`HTTPS_PROXY` / `NO_PROXY` into `openshell sandbox create -- env ...` so
OpenShell-internal traffic could traverse the host proxy when one is
configured. The forwarded `NO_PROXY` seed list did not yet include the
OpenShell-managed inference hostname (`inference.local`) or the rootless
container-host alias (`host.containers.internal`). When a host
`HTTP_PROXY` is active on macOS + Colima, OpenShell's L7 proxy chains
`inference.local` through the host proxy — which cannot reach an
OpenShell-internal hostname — and streaming chat completions stall until
the 120 s idle timeout fires (#4846).

This PR seeds `inference.local` and `host.containers.internal` into the
`withLocalNoProxy()` augmentation so the regression introduced by
#4331's host-proxy forwarding stops short of the managed inference
hostname.

## Related Issue
Fixes #4846 (regression source: #4331).

## Changes

- `src/lib/subprocess-env.ts` and `nemoclaw/src/lib/subprocess-env.ts`
(mirrored): append `inference.local` and `host.containers.internal` to
the seeded `NO_PROXY` host list in `withLocalNoProxy()`; JSDoc documents
the boundary (host-side subprocesses + `openshell sandbox create -- env
...`) and the removal condition.
- `src/lib/onboard/http-proxy-preflight.ts`: warning copy now names the
managed inference hostname and includes it in the suggested `export
NO_PROXY=` line for tools running outside the sandbox. Suppression now
also requires `inference.local` so users with the previous loopback-only
guidance still see the new export advice.
- `docs/reference/troubleshooting.mdx`: document the full set of host
names NemoClaw adds to `NO_PROXY` when a host HTTP proxy is detected.
- Regression tests in `src/lib/subprocess-env.test.ts` and
`src/lib/onboard/http-proxy-preflight.test.ts`, plus
`test/host-proxy-inference-local-e2e.test.ts` (curl-driven E2E proving
`inference.local` reaches a local listener directly when `HTTP_PROXY` is
set). `subprocess-env.test.ts` also adds negative tests proving
arbitrary `*.local` / `.local` hostnames are not added to the bypass and
that a caller-provided `.local` entry does not expand the bypass
surface. CLI / plugin sync test in `test/credential-exposure.test.ts`
updated to match the new host list.

## Scope and boundaries

- **`*.local` suffix.** Deliberately narrow: only exact
`inference.local` is seeded. The reported failure path is the single
OpenShell-managed inference hostname; widening to any `*.local` would
change the bypass surface beyond the reported repro without evidence of
other affected hostnames. A negative test (`subprocess-env.test.ts`)
pins this behaviour.
- **Sandbox-runtime `NO_PROXY` is unchanged.**
`scripts/nemoclaw-start.sh` continues to set
`NO_PROXY=localhost,127.0.0.1,::1,${PROXY_HOST}` inside the sandbox and
intentionally **does not** include `inference.local` there — OpenShell's
L7 proxy resolves that hostname internally, and bypassing it would force
a direct DNS lookup that does not resolve from inside the container.
This PR does not touch that runtime layer.
- **Fix surface is host-side env propagation.** `withLocalNoProxy()`
runs through `appendHostProxyEnvArgs()` into `openshell sandbox create
-- env ...`. The `NO_PROXY` entry is consumed by OpenShell at
sandbox-create time when it decides whether to chain its L7 proxy
through the host `HTTP_PROXY` for a given hostname. With
`inference.local` in `NO_PROXY` at sandbox-create time, OpenShell stops
tunneling that hostname through the host proxy (the reported `Proxy
connection error: Broken pipe (os error 32)` path).
- **E2E coverage.** `test/host-proxy-inference-local-e2e.test.ts`
exercises the env-construction primitive end-to-end via a real `curl`
spawn driven by `buildSubprocessEnv()` against a local listener bound to
`inference.local`. The full macOS + Colima sandbox path requires a macOS
runner and is left to scenario E2E (`ubuntu-repo-cloud-openclaw` covers
the closest cloud-onboard cross-section).

## Type of Change

- [ ] Code change (feature, bug fix, or refactor)
- [x] Code change with doc updates
- [ ] Doc only (prose changes, no code sample modifications)
- [ ] Doc only (includes code sample changes)

## Verification
- [x] `npx prek run --all-files` passes
- [x] `npm test` passes
- [x] Tests added or updated for new or changed behavior
- [x] No secrets, API keys, or credentials committed
- [x] Docs updated for user-facing behavior changes
- [ ] `npm run docs` builds without warnings (doc changes only)
- [ ] Doc pages follow the [style
guide](https://github.com/NVIDIA/NemoClaw/blob/main/docs/CONTRIBUTING.md)
(doc changes only)
- [ ] New doc pages include SPDX header and frontmatter (new pages only)

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Bug Fixes**
* Proxy bypass now also excludes additional local hostnames
(inference.local, host.containers.internal, ::1, 0.0.0.0), preventing
local services and managed inference from being routed through user
proxies; preflight warning now requires inference.local to be present to
suppress warnings.

* **Documentation**
* Updated proxy-preflight guidance and warning text to show suggested
NO_PROXY/no_proxy exports including managed inference hosts and extra
local aliases.

* **Tests**
* Added/updated unit and e2e tests validating the expanded
NO_PROXY/no_proxy behavior and direct reachability of inference.local.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Signed-off-by: Tinson Lai <tinsonl@nvidia.com>

---------

Signed-off-by: Tinson Lai <tinsonl@nvidia.com>
Co-authored-by: Carlos Villela <cvillela@nvidia.com>