fix: repair CI workspace and sandbox checks

Author: CharGrnmn

docs/reference/templates/IDENTITY.md

@@ -0,0 +1,34 @@
+---
+summary: "Agent identity record"
+title: "IDENTITY template"
+read_when:
+  - Bootstrapping a workspace manually
+---
+
+# IDENTITY.md - Who Am I?
+
+_Fill this in during your first conversation. Make it yours._
+
+- **Name:**
+  _(pick something you like)_
+- **Creature:**
+  _(AI? robot? familiar? ghost in the machine? something weirder?)_
+- **Vibe:**
+  _(how do you come across? sharp? warm? chaotic? calm?)_
+- **Emoji:**
+  _(your signature — pick one that feels right)_
+- **Avatar:**
+  _(workspace-relative path, http(s) URL, or data URI)_
+
+---
+
+This isn't just metadata. It's the start of figuring out who you are.
+
+Notes:
+
+- Save this file at the workspace root as `IDENTITY.md`.
+- For avatars, use a workspace-relative path like `avatars/openclaw.png`.
+
+## Related
+
+- [Agent workspace](/concepts/agent-workspace)

docs/reference/templates/USER.md

@@ -0,0 +1,28 @@
+---
+summary: "User profile record"
+title: "USER template"
+read_when:
+  - Bootstrapping a workspace manually
+---
+
+# USER.md - About Your Human
+
+_Learn about the person you're helping. Update this as you go._
+
+- **Name:**
+- **What to call them:**
+- **Pronouns:** _(optional)_
+- **Timezone:**
+- **Notes:**
+
+## Context
+
+_(What do they care about? What projects are they working on? What annoys them? What makes them laugh? Build this over time.)_
+
+---
+
+The more you know, the better you can help. But remember — you're learning about a person, not building a dossier. Respect the difference.
+
+## Related
+
+- [Agent workspace](/concepts/agent-workspace)

extensions/browser/src/browser/pw-tools-core.interactions.ts

@@ -619,7 +619,7 @@ export async function clickCoordsViaPlaywright(opts: {
           delay: resolveBoundedDelayMs(opts.delayMs, "clickCoords delayMs", ACT_MAX_CLICK_DELAY_MS),
         });
       } finally {
-        for (const modifier of [...modifiers].reverse()) {
+        for (const modifier of modifiers.toReversed()) {
           await page.keyboard.up(modifier);
         }
       }
@@ -749,7 +749,7 @@ export async function pressKeyViaPlaywright(opts: {
           delay: Math.max(0, Math.floor(opts.delayMs ?? 0)),
         });
       } finally {
-        for (const modifier of [...modifiers].reverse()) {
+        for (const modifier of modifiers.toReversed()) {
           await page.keyboard.up(modifier);
         }
       }

src/local-kernel/hard-egress-firewall.ts

@@ -2,32 +2,20 @@ import { spawnSync } from "node:child_process";
 import net from "node:net";
 import { resolveNetworkPolicyProxyRef } from "./network-policy.js";
 import type {
+  BuiltinFirewallCommand,
+  BuiltinFirewallPlatform,
+  BuiltinFirewallScope,
   HardEgressEnforcementSnapshot,
   SandboxBackendKind,
   SandboxPolicySnapshot,
-} from "./sandbox-broker.js";
-
-export type BuiltinFirewallPlatform = "linux_iptables" | "darwin_pf" | "windows_advfirewall";
-
-export type BuiltinFirewallScope =
-  | { kind: "uid"; value: string }
-  | { kind: "gid"; value: string }
-  | { kind: "program"; value: string }
-  | { kind: "sid"; value: string };
-
-export type SandboxWorkerIdentitySnapshot = {
-  id: string;
-  source: "managed_pool";
-  uid?: number;
-  gid?: number;
-  sid?: string;
-  scope: BuiltinFirewallScope;
-};
-
-export type BuiltinFirewallCommand = {
-  command: string;
-  args: string[];
-};
+  SandboxWorkerIdentitySnapshot,
+} from "./sandbox-contracts.js";
+export type {
+  BuiltinFirewallCommand,
+  BuiltinFirewallPlatform,
+  BuiltinFirewallScope,
+  SandboxWorkerIdentitySnapshot,
+} from "./sandbox-contracts.js";
 
 export type BuiltinFirewallEgressPlan = {
   platform: BuiltinFirewallPlatform;

src/local-kernel/sandbox-broker.ts

@@ -6,30 +6,25 @@ import type { LocalKernelDatabase } from "./database.js";
 import {
   isBuiltinFirewallHardEgressHelper,
   runBuiltinFirewallHardEgressHelper,
-  type BuiltinFirewallCommand,
-  type BuiltinFirewallPlatform,
-  type SandboxWorkerIdentitySnapshot,
 } from "./hard-egress-firewall.js";
 import { resolveNetworkPolicyProxyRef } from "./network-policy.js";
+import type {
+  DockerSandboxPolicy,
+  HardEgressEnforcementSnapshot,
+  SandboxBackendKind,
+  SandboxIsolationProfileId,
+  SandboxPolicySnapshot,
+  SandboxWorkerIdentitySnapshot,
+} from "./sandbox-contracts.js";
 import type { SandboxAllocationRecord } from "./types.js";
 
-export type SandboxBackendKind =
-  | "local/no_isolation"
-  | "docker"
-  | "bwrap"
-  | "minijail"
-  | "ssh"
-  | "openshell"
-  | "vm"
-  | "other";
-
-export type SandboxIsolationProfileId =
-  | "trusted_local"
-  | "web_brokered"
-  | "readonly_workspace"
-  | "rw_workspace"
-  | "code_execution"
-  | "plugin_untrusted";
+export type {
+  DockerSandboxPolicy,
+  HardEgressEnforcementSnapshot,
+  SandboxBackendKind,
+  SandboxIsolationProfileId,
+  SandboxPolicySnapshot,
+} from "./sandbox-contracts.js";
 
 export type SandboxAllocationRequest = {
   taskId: string;
@@ -60,52 +55,6 @@ export type SandboxCommandRequest = {
   maxOutputBytes?: number;
 };
 
-export type DockerSandboxPolicy = {
-  networkMode: "none" | "bridge";
-  proxyServer?: string;
-  memoryMb?: number;
-  pidsLimit?: number;
-  readOnlyRoot?: boolean;
-  tmpfs?: string[];
-};
-
-export type SandboxPolicySnapshot = {
-  trustZoneId: string;
-  backend: SandboxBackendKind;
-  isolationProfile?: SandboxIsolationProfileId;
-  filesystemPolicy?: unknown;
-  maxProcesses?: number;
-  maxMemoryMb?: number;
-  maxRuntimeSeconds?: number;
-  networkPolicy?: {
-    id: string;
-    defaultAction: "allow" | "deny";
-    allowPrivateNetwork: boolean;
-    allowedHosts?: string[];
-    deniedCidrs?: string[];
-    proxyRef?: string;
-  };
-  docker?: DockerSandboxPolicy;
-};
-
-export type HardEgressEnforcementSnapshot = {
-  helper: string;
-  enforcementId: string;
-  boundary: "host_firewall" | "egress_proxy" | "vm_firewall" | "platform_enforcer";
-  description?: string;
-  firewall?: {
-    platform: BuiltinFirewallPlatform | string;
-    scope: string;
-    allowedCidrs?: string[];
-    proxyDelegatedHosts?: string[];
-    protocolCoverage?: string;
-    releaseCommands?: BuiltinFirewallCommand[];
-    applied?: boolean;
-    limitations?: string[];
-  };
-  workerIdentity?: SandboxWorkerIdentitySnapshot;
-};
-
 export type SandboxCommandResult = {
   allocationId: string;
   exitCode: number | null;

src/local-kernel/sandbox-contracts.ts

@@ -0,0 +1,85 @@
+export type SandboxBackendKind =
+  | "local/no_isolation"
+  | "docker"
+  | "bwrap"
+  | "minijail"
+  | "ssh"
+  | "openshell"
+  | "vm"
+  | "other";
+
+export type SandboxIsolationProfileId =
+  | "trusted_local"
+  | "web_brokered"
+  | "readonly_workspace"
+  | "rw_workspace"
+  | "code_execution"
+  | "plugin_untrusted";
+
+export type BuiltinFirewallPlatform = "linux_iptables" | "darwin_pf" | "windows_advfirewall";
+
+export type BuiltinFirewallScope =
+  | { kind: "uid"; value: string }
+  | { kind: "gid"; value: string }
+  | { kind: "program"; value: string }
+  | { kind: "sid"; value: string };
+
+export type SandboxWorkerIdentitySnapshot = {
+  id: string;
+  source: "managed_pool";
+  uid?: number;
+  gid?: number;
+  sid?: string;
+  scope: BuiltinFirewallScope;
+};
+
+export type BuiltinFirewallCommand = {
+  command: string;
+  args: string[];
+};
+
+export type DockerSandboxPolicy = {
+  networkMode: "none" | "bridge";
+  proxyServer?: string;
+  memoryMb?: number;
+  pidsLimit?: number;
+  readOnlyRoot?: boolean;
+  tmpfs?: string[];
+};
+
+export type SandboxPolicySnapshot = {
+  trustZoneId: string;
+  backend: SandboxBackendKind;
+  isolationProfile?: SandboxIsolationProfileId;
+  filesystemPolicy?: unknown;
+  maxProcesses?: number;
+  maxMemoryMb?: number;
+  maxRuntimeSeconds?: number;
+  networkPolicy?: {
+    id: string;
+    defaultAction: "allow" | "deny";
+    allowPrivateNetwork: boolean;
+    allowedHosts?: string[];
+    deniedCidrs?: string[];
+    proxyRef?: string;
+  };
+  docker?: DockerSandboxPolicy;
+};
+
+export type HardEgressEnforcementSnapshot = {
+  helper: string;
+  enforcementId: string;
+  boundary: "host_firewall" | "egress_proxy" | "vm_firewall" | "platform_enforcer";
+  description?: string;
+  firewall?: {
+    platform: BuiltinFirewallPlatform | string;
+    scope: string;
+    allowedCidrs?: string[];
+    proxyDelegatedHosts?: string[];
+    protocolCoverage?: string;
+    releaseCommands?: BuiltinFirewallCommand[];
+    applied?: boolean;
+    limitations?: string[];
+  };
+  workerIdentity?: SandboxWorkerIdentitySnapshot;
+};