docs: refresh daily docs for 0.0.31

docs/inference/use-local-inference.md

@@ -67,6 +67,7 @@ The onboard wizard manages the proxy automatically:
   `~/.nemoclaw/ollama-proxy-token` with `0600` permissions.
 - Starts the proxy after Ollama and verifies it before continuing.
 - Cleans up stale proxy processes from previous runs.
+- Retries the sandbox container reachability check and can continue when the host-side proxy is healthy even if the container probe fails.
 - Reuses the persisted token after a host reboot so you do not need to re-run
   onboard.
 
@@ -257,7 +258,7 @@ To select a specific model, set `NEMOCLAW_MODEL`.
 ## Timeout Configuration
 
 Local inference requests use a default timeout of 180 seconds.
-Large prompts on hardware such as DGX Spark can exceed shorter timeouts, so NemoClaw sets a higher default for local providers (Ollama, vLLM, NIM).
+Large prompts on hardware such as DGX Spark can exceed shorter timeouts, so NemoClaw sets a higher default for Ollama, vLLM, NIM, and compatible-endpoint setup.
 
 To override the timeout, set the `NEMOCLAW_LOCAL_INFERENCE_TIMEOUT` environment variable before onboarding:
 

docs/project.json

@@ -1 +1 @@
-{"name": "nemoclaw", "version": "0.0.29"}
+{"name": "nemoclaw", "version": "0.0.31"}

docs/reference/commands.md

@@ -127,6 +127,8 @@ $ BRAVE_API_KEY=... \
 ```
 
 `BRAVE_API_KEY` enables Brave Search in non-interactive mode and also enables `web_fetch`.
+If Brave Search key validation fails in non-interactive mode, onboarding prints a warning, skips web search setup, and continues with the rest of the sandbox setup.
+After fixing the key, re-enable web search with `nemoclaw config web-search`.
 
 The wizard prompts for a sandbox name.
 Names must follow RFC 1123 subdomain rules: lowercase alphanumeric characters and hyphens only, and must start and end with an alphanumeric character.
@@ -171,6 +173,9 @@ If the directory contains unreadable files (for example, Windows system files vi
 $ nemoclaw onboard --from path/to/Dockerfile
 ```
 
+The Dockerfile path must exist.
+Missing paths fail during command parsing before preflight, gateway setup, inference setup, or sandbox creation starts.
+
 The file can have any name; if it is not already named `Dockerfile`, onboard copies it to `Dockerfile` inside the staged build context automatically.
 To create an isolated build context, create a dedicated directory that contains only the Dockerfile and the files it needs:
 
@@ -315,6 +320,8 @@ $ nemoclaw my-assistant status
 
 View sandbox logs.
 Use `--follow` to stream output in real time.
+The command reads both OpenClaw gateway output and OpenShell audit events, so policy denials appear alongside the gateway log stream.
+If one log source is unavailable, NemoClaw prints a warning and keeps reading the remaining source.
 
 ```console
 $ nemoclaw my-assistant logs [--follow]

docs/reference/troubleshooting.md

@@ -41,6 +41,10 @@ The `nemoclaw` binary is installed but the shell session does not know where to
 
 Run `source ~/.bashrc` (or `source ~/.zshrc` for zsh), or open a new terminal window.
 
+When installing from a source checkout with `npm install`, NemoClaw first tries `npm link`.
+If the global npm prefix is not writable, it writes a managed shim to `~/.local/bin/nemoclaw` instead.
+Add `~/.local/bin` to your `PATH` if the command is still not found.
+
 ### Installer fails on unsupported platform
 
 The installer checks for a supported OS and architecture before proceeding.
@@ -525,6 +529,16 @@ If they are missing on an older sandbox, upgrade NemoClaw and run:
 $ nemoclaw <name> rebuild
 ```
 
+### Sandbox creation reports a TLS certificate mismatch
+
+If sandbox creation reports a TLS or certificate mismatch, the OpenShell gateway certificate may have changed since the CLI last trusted it.
+Refresh the gateway trust and then resume onboarding:
+
+```console
+$ openshell gateway trust -g nemoclaw
+$ nemoclaw onboard --resume
+```
+
 ### `openclaw update` hangs or times out inside the sandbox
 
 This is expected for the current NemoClaw deployment model.
@@ -552,14 +566,17 @@ If that line shows `unreachable`, start the local backend first and then retry t
 If the endpoint is correct but requests still fail, check for network policy rules that may block the connection.
 Then verify the credential and base URL for the provider you selected during onboarding.
 
-For local providers (Ollama, vLLM, NIM), the default timeout is 180 seconds.
+For Ollama, vLLM, NIM, and compatible-endpoint setup, the default timeout is 180 seconds.
 If large prompts still cause timeouts, increase it with `NEMOCLAW_LOCAL_INFERENCE_TIMEOUT` before re-running onboard:
 
 ```console
 $ export NEMOCLAW_LOCAL_INFERENCE_TIMEOUT=300
 $ nemoclaw onboard
 ```
 
+For local Ollama and vLLM, onboarding retries the container reachability check and can fall back to the host-side health check when the local backend is healthy.
+If all attempts fail, the error includes container reachability diagnostics such as HTTP status and host gateway resolution.
+
 ### Agent fails at runtime after onboarding succeeds with a compatible endpoint
 
 Some OpenAI-compatible servers (such as SGLang) expose `/v1/responses` but their
@@ -732,6 +749,9 @@ $ nemoclaw onboard
 These are build-time settings baked into the sandbox image.
 Changing them after onboarding requires re-running `nemoclaw onboard` to rebuild the image.
 
+When `HTTP_PROXY` or `HTTPS_PROXY` is set on the host, NemoClaw adds `localhost` and `127.0.0.1` to `NO_PROXY` for managed subprocesses.
+This keeps local Ollama health checks and model pulls from being routed through a corporate or desktop proxy while preserving the proxy for external hosts.
+
 ### Agent cannot reach a host-side HTTP service
 
 When a sandbox needs to call an HTTP service running on the host, use the normal OpenShell network policy path.

docs/versions1.json

@@ -1,8 +1,8 @@
 [
   {
     "preferred": true,
-    "version": "0.0.29",
-    "url": "https://docs.nvidia.com/nemoclaw/0.0.29/"
+    "version": "0.0.31",
+    "url": "https://docs.nvidia.com/nemoclaw/0.0.31/"
   },
   {
     "version": "0.0.25",