## Summary
- Add the v0.0.59 release notes from the GitHub announcement discussion.
- Refresh local inference and credential-storage guidance for the
current release behavior.
- Regenerate the user skills from the updated Fern docs.
- Tighten release-prep and docs review guidance for generated skills, PR
labels, and shared `$$nemoclaw` command placeholders.

## Verification
- `python3 scripts/docs-to-skills.py docs/ .agents/skills/ --prefix
nemoclaw-user --doc-platform fern-mdx`
- `rg "permissive mode|shields down|shields up|shields status|config
rotate-token|rotate-token" --glob '*.{md,mdx}'`
- `git diff --check`
- `npm run docs` (rerun outside sandbox after sandbox-only `tsx` IPC
permission failure)
- `npm run typecheck:cli`
- Pre-commit hooks during commit passed, including markdownlint,
docs-to-skills verification, gitleaks, commitlint, and skills YAML
tests.

## Source Summary
- #3679, #4437, #4681, #4766, #4772, #4775, #4786 ->
`docs/about/release-notes.mdx`, `docs/reference/commands.mdx`,
`docs/reference/troubleshooting.mdx`: Summarize OpenClaw 2026.5.27
compatibility, runtime path pinning, plugin registry recovery, live
gateway reconciliation, and clearer host-alias/startup diagnostics.
- #4332, #4402, #4769, #4776, #4779 -> `docs/about/release-notes.mdx`,
`docs/inference/inference-options.mdx`,
`docs/inference/use-local-inference.mdx`,
`docs/inference/switch-inference-providers.mdx`: Document the release
inference changes covering Local NIM waits, Hermes Anthropic routing,
Nemotron 3 Ultra, the current Ollama starter fallback, and Spark
managed-vLLM context length.
- #4628, #4652, #4733, #4745 -> `docs/about/release-notes.mdx`,
`docs/security/credential-storage.mdx`,
`docs/manage-sandboxes/messaging-channels.mdx`,
`docs/reference/troubleshooting.mdx`: Capture permission healing,
gateway-stored credential reuse, cross-sandbox messaging credential
conflict checks, and CDI preflight diagnostics.
- #4728, #4737, #4743, #4744, #4782 -> `.agents/skills/nemoclaw-user-*`:
Regenerate the user skill references from the updated source docs.
- Follow-up maintenance ->
`.agents/skills/nemoclaw-contributor-update-docs/SKILL.md`,
`.coderabbit.yaml`: Add release-prep area labels for docs and skills
PRs, and teach docs review guidance that `$$nemoclaw` is the correct
shared command placeholder for examples that work across agent aliases.

Note: the `documentation` label was not present in the repository, so
this PR is labeled with `v0.0.59` only.

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Documentation**
  * Updated default model for local Ollama inference setup to qwen3.5:9b
  * Added Nemotron 3 Ultra 550B as an NVIDIA Endpoints model option
* Clarified credential storage and reuse behavior for post-deployment
(day-two) operations
* Added v0.0.59 release notes covering OpenClaw compatibility, inference
options, Hermes messaging sync, and troubleshooting
* Clarified CLI selection guidance and updated OpenClaw version example
in status output
* Revised release-prep instructions and docs review guidance for CLI
alias usage
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

…ng onboard (#4598)

## Summary

Two preflight cleanup paths assumed the OpenShell gateway and dashboard
forward were process-wide singletons. When a second NemoClaw onboard ran
with `NEMOCLAW_GATEWAY_PORT=N`, the preflight retired the existing
per-port gateway as "legacy" and killed the first sandbox's dashboard
SSH forward — leaving the first sandbox unreachable. This PR scopes both
cleanups so the second instance starts its own gateway alongside the
first instead of replacing it.

## Related Issue

Fixes #4422 · Refs #3053

#4422 is the specific SIGKILL-on-second-onboard symptom: a second
onboard with `NEMOCLAW_GATEWAY_PORT=N` destroyed the previous instance's
per-port gateway and dashboard forward. This PR fixes both preflight
cleanups so concurrent onboards no longer step on each other.

#3053 is the broader ask — full multi-instance segregation of registry,
credentials, snapshots, messaging, and lifecycle behind a configurable
`NEMOCLAW_INSTANCE` identity. That work is out of scope here and tracked
separately; this PR removes the destructive cross-talk that previously
prevented two NemoClaw-managed sandboxes from coexisting at all, but
does not yet introduce the instance identity primitive.

## Changes

- `src/lib/onboard/machine/handlers/gateway.ts`: skip
`retireLegacyGatewayForDockerDriverUpgrade` when `gatewayReuseState ===
"foreign-active"`. A foreign-active gateway is another sandbox's
per-port `nemoclaw-<port>` — not legacy state to retire. Normalises to
`"missing"` so the current onboard proceeds with its own per-port
gateway alongside.
- `src/lib/onboard.ts`: dashboard-port preflight no longer kills an
"orphaned SSH port-forward" when `openshell forward list` shows the port
is held by another live sandbox. The runtime allocator picks a different
dashboard port for this sandbox at create time instead.
- `src/lib/onboard/machine/handlers/gateway.test.ts`: unit test for the
foreign-active no-retire branch.
- `test/e2e/test-concurrent-gateway-ports.sh`: new E2E that onboards two
sandboxes (default + `NEMOCLAW_GATEWAY_PORT=18080`), asserts both reach
`Ready`, distinct gateway ports (8080 + 18080), distinct dashboard ports
(18789 + 18790), and that destroying one leaves the other intact. Each
sandbox is queried via its own gateway with `openshell sandbox list -g
<gateway-name>` so the global active-gateway pointer does not flip the
read.
- `.github/workflows/nightly-e2e.yaml`: registers
`concurrent-gateway-ports-e2e` in the dispatchable-jobs catalog, `needs`
lists, and the advisor comment block. Also documents existing
`openclaw-skill-cli-e2e` and `channels-add-remove-e2e` in the catalog so
the PR-review E2E advisor surfaces them when relevant changes land —
catches up leftover automation from PRs #4766 (#4709 OpenClaw skill CLI)
and #4745 (#3895 channels add/remove) where the tests shipped but were
never advertised to the advisor.

## Type of Change

- [x] Code change (feature, bug fix, or refactor)
- [ ] Code change with doc updates
- [ ] Doc only (prose changes, no code sample modifications)
- [ ] Doc only (includes code sample changes)

## Verification

- [x] `npx prek run --all-files` passes
- [x] `npm test` passes
- [x] Tests added or updated for new or changed behavior
- [x] No secrets, API keys, or credentials committed
- [ ] Docs updated for user-facing behavior changes
- [ ] `npm run docs` builds without warnings (doc changes only)
- [ ] Doc pages follow the [style
guide](https://github.com/NVIDIA/NemoClaw/blob/main/docs/CONTRIBUTING.md)
(doc changes only)
- [ ] New doc pages include SPDX header and frontmatter (new pages only)

---
Signed-off-by: Tinson Lai <tinsonl@nvidia.com>


<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **New Features**
* Manage concurrent gateway ports safely across multiple sandboxes on
the same host.

* **Bug Fixes**
* Improved cleanup for orphaned SSH port-forwards that block dashboard
ports.

* **Tests**
  * Added E2E test validating concurrent gateway-port scenarios.
* Added/updated unit tests for gateway-state and orphaned-forward
handling.

* **Chores**
* Added nightly E2E workflow job for concurrent gateway port testing and
integrated it into reporting.

* **Documentation**
  * Expanded nightly E2E job documentation for related tests.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

---------

Signed-off-by: Tinson Lai <tinsonl@nvidia.com>
Co-authored-by: Carlos Villela <cvillela@nvidia.com>