fix(ci): restore cross-platform release gates

Normalize the CSS contract test across CRLF checkouts and bind the delegated live platform smoke to its caller-owned execution workspace.

Co-authored-by: Ouroboros <311266734+ouroboros-agent@users.noreply.github.com>

scripts/claudexor_platform_smoke.py

@@ -252,6 +252,10 @@ def build_request(lane: str, harness: str, model: str, effort: str,
         "maxSeconds": int(max_seconds),
     }
     if lane == "live":
+        # Production binds a fresh delegated mutating run to the caller-owned
+        # execution tree. The smoke owns ``root`` too, so exercise that same
+        # admission contract instead of relying on the project scope as a shim.
+        request["execution"]["workspaceRoot"] = str(root)
         # Production sends "subscription". CI cannot authenticate one, so it asks
         # for the substrate it actually has. This is THE difference between what
         # this gate exercises and what production does.

tests/test_claudexor_platform_smoke.py

@@ -414,7 +414,11 @@ def test_the_request_uses_the_seams_own_authority_shape(tmp_path):
     # The delegated marker rides the live lane only: a fake maps no
     # `external_sandbox_full`, so the engine refuses the delegated mutating shape
     # on a pinned fake lane wherever the host has a kernel boundary.
-    assert live["execution"] == {"isolation": shape.isolation, "delegated": shape.delegated}
+    assert live["execution"] == {
+        "isolation": shape.isolation,
+        "delegated": shape.delegated,
+        "workspaceRoot": str(tmp_path),
+    }
     assert fixture["execution"] == {"isolation": shape.isolation, "delegated": False}
     # Both lanes pin the pool: `primaryHarness` alone only reorders the auto-pool,
     # and the auto-pool excludes `fake-*` routes entirely.
@@ -467,7 +471,11 @@ def test_the_live_request_pins_the_pool_and_keeps_the_delegated_marker(
     request = smoke.build_request("live", "claude", "m", "low", tmp_path, "p", 300)
     assert request["harnesses"] == ["claude"]
     assert request["primaryHarness"] == "claude"
-    assert request["execution"] == {"isolation": "live", "delegated": True}
+    assert request["execution"] == {
+        "isolation": "live",
+        "delegated": True,
+        "workspaceRoot": str(tmp_path),
+    }
     assert request["authPreference"] == "api_key"
 
 

web/tests/harness_accounts.test.js

@@ -55,7 +55,8 @@ import {
 } from '../modules/harness_login_cards.js';
 
 test('account actions stack at the app shell compact breakpoint', () => {
-    const css = readFileSync(new URL('../style.css', import.meta.url), 'utf8');
+    const css = readFileSync(new URL('../style.css', import.meta.url), 'utf8')
+        .replace(/\r\n?/g, '\n');
     assert.ok(css.includes(`@media (max-width: 980px) {
     .harness-account-row {
         grid-template-columns: minmax(0, 1fr);