Bump to OpenClaw v2026.2.25, fix rolldown sandbox shim, exclude deleted bird tool

[arubis]

Hi — first-time contributor to the repo here. README discourages opening PRs by us non-established contributors; if this doesn't suit & you'd rather break it down into per-issue PRs or similar, I get it! But I'm scratching my own itch to address #62 and #64 so I can myself be on OpenClaw latest, and figure it's worth sharing the fruits of my Claude's labor.

What this PR does

The goal is to get nix-openclaw onto the latest upstream OpenClaw release — currently v2026.2.25. Nominally that's something the upstream OpenClaw's CI pipeline should do--but we've got some dependency shifts that break here, so that pipeline would be red. The build and test fixes in this PR are the "real work" and are present in service of that. They could be broken out into separate per-issue PRs if preferred, but they form a nice atomic unit since each fix was needed to unblock the bump, which effectively proves their effectiveness (and makes this changeset actually useful instead of just plumbing).

More details in "Fix" section; this is more than just repinning because some underlying deps needed cleanup (for rolldown) or exclusion (bird's OpenClaw-friendly repo was deleted entirely).

Problem

Starting with upstream v2026.2.21, openclaw removed rolldown from direct devDependencies. Their bundle-a2ui.sh now falls back to pnpm dlx rolldown, which requires network access — blocked in the Nix sandbox. Separately, the upstream refactor in 2dcb2449 renamed server.canvas-auth.e2e.test.ts to .test.ts, bringing it into the gateway vitest suite for the first time. That test expects A2UI assets on disk, but the Nix test build never produced them. And on top of that, the steipete/bird GitHub repo has been deleted, so the darwin tools bundle can't fetch its release binary.

Fix

Six commits:

1. Rolldown PATH shim + pin bump to v2026.2.22 — rolldown remains in the pnpm store as a transitive dep (via rolldown-plugin-dts). Before the canvas:a2ui:bundle step, we locate it in node_modules/.pnpm/ and create a PATH shim so the upstream script's command -v rolldown check passes without network access.

2. Regenerate config options — golden file updated for the new upstream schema.

3. Add A2UI bundle step to test build — adds pnpm rebuild (native deps), the same rolldown PATH shim, and pnpm canvas:a2ui:bundle to gateway-tests-build.sh so the canvas-auth test can serve real assets.

4. Bump pins to v2026.2.25 — source pin, macOS app, and regenerated config options for the latest upstream release.

5. Exclude bird from tools bundle — the steipete/bird GitHub repo was deleted, so release asset downloads 404. This was breaking the darwin CI aggregator. Filed upstream: bird 0.8.0: steipete/bird repo deleted, release assets 404 nix-steipete-tools#6

Closes #62
Closes #64

Test plan

• nix build .#checks.x86_64-linux.ci — full Linux CI (gateway build, tests, config validity, config options, package contents, default instance, HM activation VM test)
• nix build .#checks.aarch64-darwin.ci — full darwin CI (gateway, app, config validity, tools bundle)
• home-manager switch on aarch64-darwin — reports openclaw 2026.2.25
• Verified bird 404 is pre-existing on main (not introduced by this PR)
• Verified bird is fully absent from derivation inputs after exclusion

🤖 Generated with Claude Code

[fredcy]

This PR works great. I rebuilt my openclaw instance with it and it's now on v2026.2.22. Hope it gets merged soon.