[DGX Spark][Onboard] nemoclaw onboard --recreate-sandbox non-interactive aborts at [3/8] with "NVIDIA Endpoints endpoint validation failed" #5441

On DGX Spark with NemoClaw v0.0.64, running nemoclaw onboard --recreate-sandbox in non-interactive mode fails at [3/8] (Configuring inference provider) with "NVIDIA Endpoints endpoint validation failed. Validation details were omitted to avoid exposing credentials." The same API key succeeds in interactive onboard within the same shell session. The non-interactive flow recovers the provider from saved sandbox build state and then fails credential validation.

Environment

Device:        DGX Spark GB10 (Grace+Hopper)
OS:            Ubuntu 24.04.3 LTS
Architecture:  aarch64
Node.js:       v22.22.1
npm:           10.9.4
Docker:        28.3.3
OpenShell CLI: 0.0.44
NemoClaw:      v0.0.64
OpenClaw:      2026.5.27

Steps to Reproduce

1. Run nemoclaw onboard --name rg-2675-sb interactively with NVIDIA Endpoints provider → completes all 8/8 stages successfully
2. Verify API key is reachable: curl -s https://integrate.api.nvidia.com returns HTTP 200
3. Run non-interactive recreate:

NEMOCLAW_NON_INTERACTIVE=1 NEMOCLAW_ACCEPT_THIRD_PARTY_SOFTWARE=1 \
nemoclaw onboard --name rg-2675-sb --recreate-sandbox --non-interactive

4. Observe onboard abort at [3/8]
5. Reproduced identically with a fresh sandbox name (rg-test-noninter) — not sandbox-specific

Expected Result

Non-interactive onboard --recreate-sandbox should validate the API key correctly (or reuse the already-verified credential from the existing sandbox) and proceed through all 8 stages, applying the NEMOCLAW_POLICY_PRESETS env-var override.

Actual Result

Aborts at [3/8] Configuring inference provider. Exit code 1.

[non-interactive] Agent: OpenClaw
[non-interactive] Provider: build (recovered from sandbox rg-2675-sb)
NVIDIA Endpoints endpoint validation failed. Validation details were omitted to avoid exposing credentials.

The non-interactive flow loads the provider from the saved sandbox 'build' state and then re-validates credentials, which fails. Interactive onboard with the same API key in the same shell session succeeds.

Logs

From /tmp/rg2675-run1.log (agentic QA run T6081209, 2026-06-14):
  [non-interactive] Agent: OpenClaw
  [non-interactive] Provider: build (recovered from sandbox rg-2675-sb)
  NVIDIA Endpoints endpoint validation failed. Validation details were omitted to avoid exposing credentials.

curl pre-check: HTTP 200 from integrate.api.nvidia.com (key is valid)
Interactive onboard with same key: completed all 8/8 stages (PASS)

NVB#6322661