rehearsal: ruff production 0 (drop unused agent_def os + server AuthStore imports) and quote 8 unquoted env keys in main-side test tearDowns (latent NameError)

cloud/agent_def.py

@@ -129,7 +129,6 @@ honour that today, and this track says so instead of claiming it:
 """
 
 import json
-import os
 import re
 from pathlib import Path
 

cloud/server.py

@@ -61,7 +61,6 @@ from cloud.agent_def import parse_agent_definition as _parse_agent_definition
 from cloud.agent_def import resolve_registry_agent as _resolve_agent
 from cloud.attempts import ensure_attempts_table as _ensure_attempts
 from cloud.audit_loop import ensure_audit_loop_table as _ensure_audit_loop
-from cloud.auth import AuthStore
 # 演练注：删 _parse_tools_col/_parse_tool_approvals_col（随 helper
 # 移 handler_support）、_MEMBER_ROLES/_coord_parse_parts（用点已随
 # split 移走，server.py 内无其余引用，ruff F401 计）。

cloud/tests/test_audit_batch2.py

@@ -288,7 +288,7 @@ class CoordGateLookupFailureTestCase(unittest.TestCase):
         if self._old is None:
             os.environ.pop("CODEX_PUSH_ALLOW_PRIVATE_TARGETS", None)
         else:
-            os.environ[CODEX_PUSH_ALLOW_PRIVATE_TARGETS] = self._old
+            os.environ["CODEX_PUSH_ALLOW_PRIVATE_TARGETS"] = self._old
         self.tmp.cleanup()
 
     def test_direct_lookup_raises_instead_of_empty_set(self):

cloud/tests/test_audit_batch4.py

@@ -245,7 +245,7 @@ class PersistedWhitespaceModelTestCase(unittest.TestCase):
         if self._old is None:
             os.environ.pop("CODEX_PUSH_ALLOW_PRIVATE_TARGETS", None)
         else:
-            os.environ[CODEX_PUSH_ALLOW_PRIVATE_TARGETS] = self._old
+            os.environ["CODEX_PUSH_ALLOW_PRIVATE_TARGETS"] = self._old
         self.tmp.cleanup()
 
     def _policy(self):
@@ -308,7 +308,7 @@ class ExplicitNonSub2apiGateTestCase(unittest.TestCase):
         if self._old is None:
             os.environ.pop("CODEX_PUSH_ALLOW_PRIVATE_TARGETS", None)
         else:
-            os.environ[CODEX_PUSH_ALLOW_PRIVATE_TARGETS] = self._old
+            os.environ["CODEX_PUSH_ALLOW_PRIVATE_TARGETS"] = self._old
         self.tmp.cleanup()
 
     def _policy(self, mode, capabilities):
@@ -446,7 +446,7 @@ class CoordGateAttributionTestCase(unittest.TestCase):
         if self._old is None:
             os.environ.pop("CODEX_PUSH_ALLOW_PRIVATE_TARGETS", None)
         else:
-            os.environ[CODEX_PUSH_ALLOW_PRIVATE_TARGETS] = self._old
+            os.environ["CODEX_PUSH_ALLOW_PRIVATE_TARGETS"] = self._old
         self.tmp.cleanup()
 
     def _merge(self, child_error, audit_rows=()):
@@ -555,7 +555,7 @@ class GateResultsCheckedTestCase(unittest.TestCase):
         if self._old is None:
             os.environ.pop("CODEX_PUSH_ALLOW_PRIVATE_TARGETS", None)
         else:
-            os.environ[CODEX_PUSH_ALLOW_PRIVATE_TARGETS] = self._old
+            os.environ["CODEX_PUSH_ALLOW_PRIVATE_TARGETS"] = self._old
         self.tmp.cleanup()
 
     def test_direct_call_checked_subset_and_legacy(self):

cloud/tests/test_audit_batch6.py

@@ -197,7 +197,7 @@ class _RunOneCase(unittest.TestCase):
         if self._old is None:
             os.environ.pop("CODEX_PUSH_ALLOW_PRIVATE_TARGETS", None)
         else:
-            os.environ[CODEX_PUSH_ALLOW_PRIVATE_TARGETS] = self._old
+            os.environ["CODEX_PUSH_ALLOW_PRIVATE_TARGETS"] = self._old
         self.tmp.cleanup()
 
 
@@ -272,7 +272,7 @@ class I1MarkerTestCase(unittest.TestCase):
         if self._old is None:
             os.environ.pop("CODEX_PUSH_ALLOW_PRIVATE_TARGETS", None)
         else:
-            os.environ[CODEX_PUSH_ALLOW_PRIVATE_TARGETS] = self._old
+            os.environ["CODEX_PUSH_ALLOW_PRIVATE_TARGETS"] = self._old
         self.tmp.cleanup()
 
     def _merge(self, child_error, audit_rows=()):
@@ -343,7 +343,7 @@ class _WireCase(unittest.TestCase):
         if self._old is None:
             os.environ.pop("CODEX_PUSH_ALLOW_PRIVATE_TARGETS", None)
         else:
-            os.environ[CODEX_PUSH_ALLOW_PRIVATE_TARGETS] = self._old
+            os.environ["CODEX_PUSH_ALLOW_PRIVATE_TARGETS"] = self._old
         self.tmp.cleanup()
 
     def _worker(self, **kwargs):