Fix CI: standardize Python import paths + fix llama.cpp cmake fallback

Python tests: test_adversarial.py and test_m5_acceptance.py used
sys.path pointing to services/agent/ with `from agent.models` imports,
conflicting with test_agent.py which adds services/ with
`from agent.agent.models`.  Standardize all three files to use the
same services/ root path and agent.agent.* import convention so pytest
can collect all test files without import collisions.

CI: add PYTHONPATH=services to the Python test step so agent package
resolution works in GitHub Actions.

Build: fix llama.cpp cmake fallback chain — the first attempt with
-DGGML_CUDA=ON caches CUDA settings in build/CMakeCache.txt, causing
all fallback attempts to also try CUDA.  Clear the build directory
(rm -rf build) between fallback attempts so each starts clean.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: SecAI-Hub

.github/workflows/ci.yml

@@ -77,6 +77,8 @@ jobs:
           python -m py_compile services/agent/agent/sandbox.py
 
       - name: Test
+        env:
+          PYTHONPATH: services
         run: python -m pytest tests/ -v
 
   shellcheck:

files/scripts/build-services.sh

@@ -185,8 +185,10 @@ curl -fsSL "https://github.com/ggml-org/llama.cpp/archive/refs/tags/${LLAMA_CPP_
 cd "llama.cpp-${LLAMA_CPP_VERSION}"
 cmake -B build -DGGML_CUDA=ON -DGGML_VULKAN=ON -DBUILD_SHARED_LIBS=OFF \
     -DCMAKE_BUILD_TYPE=Release 2>/dev/null || \
-    cmake -B build -DGGML_VULKAN=ON -DBUILD_SHARED_LIBS=OFF -DCMAKE_BUILD_TYPE=Release 2>/dev/null || \
-    cmake -B build -DBUILD_SHARED_LIBS=OFF -DCMAKE_BUILD_TYPE=Release
+    { rm -rf build && cmake -B build -DGGML_VULKAN=ON -DBUILD_SHARED_LIBS=OFF \
+        -DCMAKE_BUILD_TYPE=Release 2>/dev/null; } || \
+    { rm -rf build && cmake -B build -DBUILD_SHARED_LIBS=OFF \
+        -DCMAKE_BUILD_TYPE=Release; }
 cmake --build build --target llama-server -j"$(nproc)"
 install -m 755 build/bin/llama-server /usr/bin/llama-server
 echo "  -> /usr/bin/llama-server"

tests/test_adversarial.py

@@ -21,10 +21,12 @@
 from pathlib import Path
 from unittest.mock import MagicMock, patch
 
-# Add services directory to path
-sys.path.insert(0, os.path.join(os.path.dirname(__file__), "..", "services", "agent"))
+# Add services/ to path (same convention as test_agent.py)
+_services_root = str(Path(__file__).resolve().parent.parent / "services")
+if _services_root not in sys.path:
+    sys.path.insert(0, _services_root)
 
-from agent.models import (
+from agent.agent.models import (
     Budgets,
     CapabilityToken,
     PolicyDecision,
@@ -38,16 +40,16 @@
     TaskStatus,
     TWO_PHASE_ACTIONS,
 )
-from agent.policy import PolicyEngine, classify_risk
-from agent.storage import StorageGateway
-from agent.capabilities import (
+from agent.agent.policy import PolicyEngine, classify_risk
+from agent.agent.storage import StorageGateway
+from agent.agent.capabilities import (
     clear_nonce_cache,
     create_token,
     sign_token,
     verify_token,
     _reset_signing_key,
 )
-from agent.sandbox import (
+from agent.agent.sandbox import (
     WorkspaceGuard,
     SubprocessIsolator,
     sign_step,

tests/test_m5_acceptance.py

@@ -26,9 +26,12 @@
 import unittest
 from pathlib import Path
 
-sys.path.insert(0, os.path.join(os.path.dirname(__file__), "..", "services", "agent"))
+# Add services/ to path (same convention as test_agent.py)
+_services_root = str(Path(__file__).resolve().parent.parent / "services")
+if _services_root not in sys.path:
+    sys.path.insert(0, _services_root)
 
-from agent.models import (
+from agent.agent.models import (
     Budgets,
     CapabilityToken,
     PolicyDecision,
@@ -40,16 +43,16 @@
     StepStatus,
     TWO_PHASE_ACTIONS,
 )
-from agent.policy import PolicyEngine, classify_risk
-from agent.storage import StorageGateway
-from agent.capabilities import (
+from agent.agent.policy import PolicyEngine, classify_risk
+from agent.agent.storage import StorageGateway
+from agent.agent.capabilities import (
     clear_nonce_cache,
     create_token,
     sign_token,
     verify_token,
     _reset_signing_key,
 )
-from agent.sandbox import (
+from agent.agent.sandbox import (
     WorkspaceGuard,
     SubprocessIsolator,
     sign_step,