Enable cloud-hypervisor sandbox runtime for copilot, claude, and gemini smoke workflows

.github/workflows/smoke-agent-all-merged.md

@@ -20,6 +20,7 @@ permissions:
 sandbox:
   agent:
     id: awf
+    runtime: cloud-hypervisor
     sudo: false
 name: "Smoke Agent: all/merged"
 engine: claude

.github/workflows/smoke-gemini.md

@@ -37,7 +37,6 @@ engine:
   id: gemini
 strict: true
 imports:
-  - shared/gh.md
   - shared/reporting-otlp.md
   - shared/otlp.md
   - shared/token-telemetry-check.md
@@ -79,6 +78,7 @@ evals:
 sandbox:
   agent:
     id: awf
+    runtime: cloud-hypervisor
     sudo: false
 ---
 

.github/workflows/smoke-test-tools.md

@@ -58,6 +58,7 @@ features:
 sandbox:
   agent:
     id: awf
+    runtime: cloud-hypervisor
     sudo: false
 ---
 

pkg/workflow/compiler_orchestrator_engine.go

@@ -502,6 +502,7 @@ func (c *Compiler) runPostEngineValidations(
 	enableFirewallByDefaultForCopilot(engineSetting, networkPermissions, sandboxConfig)
 	enableFirewallByDefaultForClaude(engineSetting, networkPermissions, sandboxConfig)
 	enableFirewallByDefaultForPi(engineSetting, networkPermissions, sandboxConfig)
+	enableFirewallByDefaultForGemini(engineSetting, networkPermissions, sandboxConfig)
 	return c.withEffectiveStrictMode(frontmatter, func() error {
 		orchestratorEngineLog.Printf("Validating strict firewall (strict=%v)", c.strictMode)
 		if err := c.validateStrictFirewall(engineSetting, networkPermissions, sandboxConfig); err != nil {

pkg/workflow/firewall.go

@@ -244,6 +244,22 @@ func enableFirewallByDefaultForPi(engineID string, networkPermissions *NetworkPe
 	enableFirewallByDefaultForEngine(engineID, networkPermissions, sandboxConfig)
 }
 
+// enableFirewallByDefaultForGemini enables firewall by default for Gemini engine
+// when network restrictions are present but no explicit firewall configuration exists
+// and sandbox.agent is not explicitly set to false
+//
+// The firewall is enabled by default for Gemini UNLESS:
+// - allowed contains "*" (unrestricted network access)
+// - sandbox.agent is explicitly set to false
+func enableFirewallByDefaultForGemini(engineID string, networkPermissions *NetworkPermissions, sandboxConfig *SandboxConfig) {
+	// Only apply to gemini engine
+	if engineID != string(constants.GeminiEngine) {
+		return
+	}
+
+	enableFirewallByDefaultForEngine(engineID, networkPermissions, sandboxConfig)
+}
+
 // enableFirewallByDefaultForEngine enables firewall by default for a given engine
 // when network restrictions are present but no explicit firewall configuration exists
 // and no SRT sandbox is configured (SRT and AWF are mutually exclusive)

pkg/workflow/firewall_default_enablement_test.go

@@ -124,6 +124,57 @@ func TestEnableFirewallByDefaultForCopilot(t *testing.T) {
 	})
 }
 
+// TestEnableFirewallByDefaultForGemini tests the automatic firewall enablement for the gemini engine.
+func TestEnableFirewallByDefaultForGemini(t *testing.T) {
+	t.Run("gemini engine with network restrictions enables firewall by default", func(t *testing.T) {
+		networkPerms := &NetworkPermissions{
+			Allowed:           []string{"example.com"},
+			ExplicitlyDefined: true,
+		}
+
+		enableFirewallByDefaultForGemini("gemini", networkPerms, nil)
+
+		if networkPerms.Firewall == nil {
+			t.Fatal("Expected firewall to be enabled by default for gemini engine with network restrictions")
+		}
+
+		if !networkPerms.Firewall.Enabled {
+			t.Error("Expected firewall.Enabled to be true")
+		}
+	})
+
+	t.Run("non-gemini engine does not enable firewall", func(t *testing.T) {
+		networkPerms := &NetworkPermissions{
+			Allowed:           []string{"example.com"},
+			ExplicitlyDefined: true,
+		}
+
+		enableFirewallByDefaultForGemini("claude", networkPerms, nil)
+
+		if networkPerms.Firewall != nil {
+			t.Error("Expected firewall to remain nil for non-gemini engine")
+		}
+	})
+
+	t.Run("wildcard allowed domain skips auto-enablement", func(t *testing.T) {
+		networkPerms := &NetworkPermissions{
+			Allowed:           []string{"*"},
+			ExplicitlyDefined: true,
+		}
+
+		enableFirewallByDefaultForGemini("gemini", networkPerms, nil)
+
+		if networkPerms.Firewall != nil {
+			t.Error("Expected firewall to remain nil when wildcard '*' is in allowed domains")
+		}
+	})
+
+	t.Run("nil network permissions does not cause error", func(t *testing.T) {
+		// Should not panic
+		enableFirewallByDefaultForGemini("gemini", nil, nil)
+	})
+}
+
 // TestCopilotFirewallDefaultIntegration tests the integration with workflow compilation
 func TestCopilotFirewallDefaultIntegration(t *testing.T) {
 	t.Run("copilot workflow with network restrictions includes AWF installation", func(t *testing.T) {

pkg/workflow/testdata/TestWasmGolden_AllEngines/gemini.golden

@@ -64,6 +64,7 @@ jobs:
           GH_AW_SETUP_WORKFLOW_NAME: "engine-gemini-test"
           GH_AW_CURRENT_WORKFLOW_REF: ${{ github.repository }}/.github/workflows/workflow.lock.yml@${{ github.ref }}
           GH_AW_INFO_VERSION: "0.55.1"
+          GH_AW_INFO_AWF_VERSION: "vAWF_VERSION"
           GH_AW_INFO_ENGINE_ID: "gemini"
       - name: Generate agentic run info
         id: generate_aw_info
@@ -78,8 +79,8 @@ jobs:
           GH_AW_INFO_SUPPORTS_TOOLS_ALLOWLIST: "true"
           GH_AW_INFO_STAGED: "false"
           GH_AW_INFO_ALLOWED_DOMAINS: '["defaults"]'
-          GH_AW_INFO_FIREWALL_ENABLED: "false"
-          GH_AW_INFO_AWF_VERSION: ""
+          GH_AW_INFO_FIREWALL_ENABLED: "true"
+          GH_AW_INFO_AWF_VERSION: "vAWF_VERSION"
           GH_AW_INFO_AWMG_VERSION: ""
           GH_AW_INFO_FIREWALL_TYPE: "squid"
           GH_AW_INFO_AGENT_RUNTIME: ""
@@ -327,6 +328,7 @@ jobs:
           GH_AW_SETUP_WORKFLOW_NAME: "engine-gemini-test"
           GH_AW_CURRENT_WORKFLOW_REF: ${{ github.repository }}/.github/workflows/workflow.lock.yml@${{ github.ref }}
           GH_AW_INFO_VERSION: "0.55.1"
+          GH_AW_INFO_AWF_VERSION: "vAWF_VERSION"
           GH_AW_INFO_ENGINE_ID: "gemini"
       - name: Checkout repository
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -663,6 +665,7 @@ jobs:
           GH_AW_SETUP_WORKFLOW_NAME: "engine-gemini-test"
           GH_AW_CURRENT_WORKFLOW_REF: ${{ github.repository }}/.github/workflows/workflow.lock.yml@${{ github.ref }}
           GH_AW_INFO_VERSION: "0.55.1"
+          GH_AW_INFO_AWF_VERSION: "vAWF_VERSION"
           GH_AW_INFO_ENGINE_ID: "gemini"
       - name: Check team membership for workflow
         id: check_membership