build: pin all nat instances to 1.7

Author: gabwow

Dockerfile.agentic-base

@@ -102,7 +102,13 @@ RUN /app/.venv/bin/python -c "import nmp.core.jobs; import nmp.core.entities; pr
 # - nvidia-nat-mcp: mcp_client function type support.
 # - plugins/nemo-agents: exposes `nemo agents ...` commands.
 # - examples/calculator-agent: registers `_type: calculator` function group.
-RUN uv pip install --python /app/.venv/bin/python "nvidia-nat[most]" nvidia-nat-atif nvidia-nat-eval nvidia-nat-mcp && \
+#
+# All nvidia-nat* packages MUST be pinned to the same version. The CLI/meta
+# package historically lagged the plugin packages (e.g. nvidia-nat==1.4.3 vs
+# nvidia-nat-core/eval/langchain==1.7.0), which caused ImportErrors at plugin
+# discovery (e.g. register_dataset_loader) and crashed `nat start fastapi`.
+RUN uv pip install --python /app/.venv/bin/python \
+        "nvidia-nat[most]==1.7.0" nvidia-nat-atif==1.7.0 nvidia-nat-eval==1.7.0 nvidia-nat-mcp==1.7.0 && \
     uv pip install --python /app/.venv/bin/python -e /app/plugins/nemo-agents && \
     uv pip install --python /app/.venv/bin/python -e /app/plugins/nemo-agents/examples/calculator-agent && \
     chown -R harbor:harbor /app/.venv