Remove dead cleanupFirewallNetwork export from host iptables network module

src/host-iptables-network.test.ts

@@ -1,5 +1,4 @@
 import { execaResult, mockedExeca, setupHostIptablesTestSuite } from './test-helpers/host-iptables-test-setup';
-import { cleanupFirewallNetwork } from './host-iptables-network';
 import { ensureFirewallNetwork } from './host-iptables';
 import { iptablesSharedTestHelpers } from './host-iptables-shared';
 
@@ -61,25 +60,4 @@ describe('host-iptables (network)', () => {
       ], { env: expect.any(Object) });
     });
   });
-
-  describe('cleanupFirewallNetwork', () => {
-    it('should remove the firewall network', async () => {
-      mockedExeca.mockResolvedValue(execaResult({
-        stdout: '',
-        stderr: '',
-        exitCode: 0,
-      }));
-
-      await cleanupFirewallNetwork();
-
-      expect(mockedExeca).toHaveBeenCalledWith('docker', ['network', 'rm', 'awf-net'], { reject: false, env: expect.any(Object) });
-    });
-
-    it('should not throw on errors (best-effort cleanup)', async () => {
-      mockedExeca.mockRejectedValue(new Error('network removal error'));
-
-      // Should not throw
-      await expect(cleanupFirewallNetwork()).resolves.not.toThrow();
-    });
-  });
 });

src/host-iptables-network.ts

@@ -47,20 +47,3 @@ export async function ensureFirewallNetwork(): Promise<{
     proxyIp: '172.30.0.30',
   };
 }
-
-/**
- * Removes the firewall network.
- *
- * @internal Test-only helper for cleaning up the dedicated firewall network.
- */
-export async function cleanupFirewallNetwork(): Promise<void> {
-  logger.debug(`Removing firewall network '${NETWORK_NAME}'...`);
-
-  try {
-    await execa('docker', ['network', 'rm', NETWORK_NAME], { reject: false, env: getLocalDockerEnv() });
-    logger.debug('Firewall network removed');
-  } catch (error) {
-    logger.debug('Error removing firewall network:', error);
-    // Don't throw - cleanup should be best-effort
-  }
-}