fix: restore CI integration contracts

Author: 1012839419a-alt

agent/entrypoint.sh

@@ -3,6 +3,7 @@ set -e
 
 HAVE_CHROME=false
 if command -v chromium >/dev/null 2>&1; then HAVE_CHROME=true; fi
+if [ "${AGENT_HAS_CHROME:-false}" = "true" ]; then HAVE_CHROME=true; fi
 
 BROWSER_RUNTIME_BUNDLE_ROOT="${BROWSER_RUNTIME_BUNDLE_ROOT:-/opt/browser-runtime-bundles}"
 BROWSER_RUNTIME_BUNDLE_MANIFEST="${BROWSER_RUNTIME_BUNDLE_MANIFEST:-$BROWSER_RUNTIME_BUNDLE_ROOT/opencli-default/2/manifest.json}"
@@ -78,7 +79,7 @@ if [ "$HAVE_CHROME" = "true" ]; then
     echo "[agent] WARNING: Bridge daemon not found at $DAEMON_JS"
   fi
 
-  BROWSER_ENGINE="${BROWSER_ENGINE:-chromium}"
+  BROWSER_ENGINE="${BROWSER_ENGINE-chromium}"
   CHROME_BIN="$(node /usr/local/bin/resolve-browser-executable.mjs "$BROWSER_ENGINE")" || {
     echo "[agent] Browser engine resolution failed for $BROWSER_ENGINE" >&2
     exit 1

chrome/entrypoint.sh

@@ -59,7 +59,7 @@ if [ -n "${BROWSER_STARTUP_PAGES:-}" ]; then
   if [ -n "$STARTUP_PAGE_OUTPUT" ]; then mapfile -t STARTUP_PAGES <<< "$STARTUP_PAGE_OUTPUT"; fi
 fi
 
-BROWSER_ENGINE="${BROWSER_ENGINE:-chromium}"
+BROWSER_ENGINE="${BROWSER_ENGINE-chromium}"
 CHROME_BIN="$(node /usr/local/bin/resolve-browser-executable.mjs "$BROWSER_ENGINE")" || {
   echo "[entrypoint] Browser engine resolution failed for $BROWSER_ENGINE" >&2
   exit 1

tests/unit/control/test_cycle.py

@@ -223,6 +223,7 @@ async def test_dangerous_suggestion_downgrades_and_preserves_original_in_ledger(
     get_settings.cache_clear()
     try:
         source = await _make_source(db_session)
+        await _seed_measurement_row(db_session, source.id, error_kinds={"auth_failed": 1})
         await _seed_evidence(
             db_session,
             samples=10,

tests/unit/test_public_release_contract.py

@@ -33,7 +33,7 @@ def source_docker_recipes(readme: str) -> list[str]:
     return [
         block
         for block in re.findall(r"~~~bash\n(.*?)\n~~~", readme, re.DOTALL)
-        if "docker-compose.build.yml" in block
+        if "# 仅首次执行以下初始化步骤" in block
     ]