Simplify firewall activity summary format

[Copilot]

Removed emoji decoration and moved header into collapsible summary line for cleaner step output.

Changes

• Removed standalone header: Eliminated ### 🔥 Firewall Activity markdown header
• Simplified summary prefix: Changed from 📊 emoji to sandbox agent: text prefix
• Consolidated structure: Header text now part of <summary> tag instead of separate element

Result

Before:

### 🔥 Firewall Activity

<details>
<summary>📊 2 requests | 1 allowed | 0 blocked | 1 unique domain</summary>

After:

<details>
<summary>sandbox agent: 2 requests | 1 allowed | 0 blocked | 1 unique domain</summary>

Files Modified

• pkg/workflow/js/parse_firewall_logs.cjs - Summary generation logic
• pkg/workflow/js/parse_firewall_logs.test.cjs - Test assertions
• pkg/cli/logs_firewall_parse_test.go - Integration test expectations

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/user
  • Triggering command: /usr/bin/gh gh api user --jq .login ion-precompile.git l /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linux_amd64/cgo REDACTED refs/tags/v1 /usr/bin/gh /opt/hostedtoolcache/go/1.25.0/x64/pkg/tool/linu--jq -V=f�� ithub-script/git/ref/tags/v8 gh /usr/bin/git /repos/actions/ugit --jq /usr/bin/infocmp168.63.129.16 git (http block)
  • Triggering command: /usr/bin/gh gh api user --jq .login orkflows git ache/go/1.25.0/x64/pkg/tool/linux_amd64/compile runs/20251219-13git rev-parse /usr/bin/git ache/go/1.25.0/x64/pkg/tool/linu-address orig�� tags/v6 git e/git wall_logs.test.c/tmp/gh-aw-compile-integration-2246389799/gh-aw config 0/x64/bin/node e/git (http block)
  • Triggering command: /usr/bin/gh gh api user --jq .login ithub/workflows -trimpath 017d8ed99eb3fe1423c4f3ad715ed1b4121/log.json l main -lang=go1.25 e/git-remote-https om/a�� it/ref/tags/v5 -dwarf=false ache/node/24.12.0/x64/bin/node go1.25.0 -c=4 -nolocalimports git (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

Simplefiy Firewall activity step summary description and move the header into the details summary:

current:
🔥 Firewall Activity
📊 2 requests | 1 allowed | 0 blocked | 1 unique domai

new (no emoji)
sanbox agent: 2 requests | 1 allowed | 0 blocked | 1 unique domai

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[github-actions]

✨ The prophecy is fulfilled... Smoke Codex has completed its mystical journey. The stars align. 🌟

[github-actions]

✅ Firewall validation complete... Smoke Codex Firewall confirmed network sandboxing is operational. 🛡️

[github-actions]

🤖 DIAGNOSTIC COMPLETE: Smoke Copilot No Firewall STATUS: ALL_UNITS_OPERATIONAL. MISSION_SUCCESS.

[github-actions]

🎉 Yo ho ho! Changeset Generator found the treasure and completed successfully! ⚓💰

[github-actions]

🎬 THE END — Smoke Claude MISSION: ACCOMPLISHED! The hero saves the day! ✨

[github-actions]

📰 VERDICT: Smoke Copilot has concluded. All systems operational. This is a developing story. 🎤

[github-actions]

🎉 Yo ho ho! Smoke Copilot Safe Inputs found the treasure and completed successfully! ⚓💰

[github-actions]

Smoke Test Results

GitHub MCP: ✅ (Last 2 PRs reviewed)
File Writing: ✅ (Created /tmp/gh-aw/agent/smoke-test-copilot-20371590655.txt)
Bash Tool: ✅ (Verified file contents)
Serena MCP: ✅ (Listed project classes)
Safe Input gh: ✅ (Listed GitHub issues)

Status: PASS

Ahoy! This treasure was crafted by 🏴‍☠️ Smoke Copilot Safe Inputs fer issue #6946 🗺️

[github-actions]

Smoke Test Results

Last 2 Merged PRs:

• [WIP] Simplify firewall activity summary description #6944: [WIP] Simplify firewall activity summary description
• Add AWF support for Codex engine #6906: Add AWF support for Codex engine

Test Results:
✅ GitHub MCP Testing - Retrieved last 2 PRs
✅ File Writing - Created /tmp/gh-aw/agent/smoke-test-copilot-20371590667.txt
✅ Bash Tools - Verified file contents successfully
✅ GitHub MCP Default Toolset - Confirmed get_me unavailable (403 error as expected)
✅ Cache Memory - Created /tmp/gh-aw/cache-memory/smoke-test-20371590667.txt
✅ Available Tools - Standard Copilot toolset (GitHub default, file operations, bash)

Status: PASS

cc: @pelikhan @Copilot

📰 BREAKING: Report filed by Smoke Copilot fer issue #6946 🗺️

[github-actions]

Last merged PRs: Add AWF support for Codex engine; Replace Node.js file embedding with bash script in setup-safe-outputs action
OpenAI access: ❌ (dns block)
GitHub MCP (list merged PRs): ✅
File write/read /tmp/gh-aw/agent/smoke-test-codex-firewall-20371590657.txt: ✅
Blocked domain (example.com) blocked: ✅
Network: SANDBOXED
Overall: FAIL

🔥 Firewall tested by Smoke Codex Firewall fer issue #6946 🗺️

[github-actions]

Smoke Test Results for Copilot Engine (No Firewall)

Last 2 Merged PRs:

• docs: enhance campaign orchestrator/worker architecture and add roadmap view guidance #6938: docs: enhance campaign orchestrator/worker architecture and add roadmap view guidance
• Add project-github-token support for campaign specs #6935: Add project-github-token support for campaign specs

Test Results:

• ✅ GitHub MCP: Retrieved PR data successfully
• ✅ File Writing: Created /tmp/gh-aw/agent/smoke-test-copilot-20371590671.txt
• ✅ Bash Tool: File verification successful
• ✅ Playwright MCP: Navigated to https://github.com and verified title contains "GitHub"
• ⚠️ Safe Input gh Tool: Not tested (skipped)

Overall Status: PASS (4/4 core tests successful)

🤖 DIAGNOSTIC REPORT GENERATED BY Smoke Copilot No Firewall fer issue #6946 🗺️

[github-actions]

Last 2 merged PRs: Add AWF support for Codex engine; Replace Node.js file embedding with bash script in setup-safe-outputs action
GitHub MCP: ✅
File write/read (/tmp/gh-aw/agent): ✅
Playwright title contains "GitHub": ✅
Cache memory file: ✅
safeinputs-gh (gh issues list): ❌ tool unavailable in this run
Overall: FAIL

🔮 The oracle has spoken through Smoke Codex fer issue #6946 🗺️