Harden Tower AI deploy env handling

backend/tests/test_docker_runtime_config.py

@@ -254,8 +254,10 @@ def test_unraid_deploy_passes_ai_build_arg_and_yolo_runtime_env() -> None:
     deploy_sh = (ROOT / "scripts" / "deploy_tower.sh").read_text(encoding="utf-8")
     run_script = (ROOT / "deploy" / "unraid" / "run-dockerman-container.sh").read_text(encoding="utf-8")
 
-    assert "--build-arg GEOINTEL_INSTALL_AI=${GEOINTEL_INSTALL_AI:-false}" in deploy_sh
-    assert "--build-arg GEOINTEL_INSTALL_AI='$InstallAi'" in deploy_ps1
+    assert 'DEPLOY_GEOINTEL_INSTALL_AI="${GEOINTEL_INSTALL_AI:-}"' in deploy_sh
+    assert 'docker build --build-arg GEOINTEL_INSTALL_AI="$GEOINTEL_INSTALL_AI"' in deploy_sh
+    assert 'docker build --build-arg GEOINTEL_INSTALL_AI="$GEOINTEL_INSTALL_AI"' in deploy_ps1
+    assert "DEPLOY_GEOINTEL_INSTALL_AI" in deploy_ps1
     assert "[string]$InstallAi" in deploy_ps1
 
     assert 'YOLO_ENABLED="${YOLO_ENABLED:-false}"' in run_script

backend/tests/test_sprint31_unraid_template.py

@@ -118,6 +118,18 @@ def test_tower_deploy_uses_single_container_unraid_compose() -> None:
         assert "LIVE_SMOKE_CONTAINER=geointel bash scripts/live_migration_smoke.sh" in script
 
 
+def test_tower_deploy_build_uses_remote_env_ai_setting_by_default() -> None:
+    powershell = (ROOT / "scripts" / "deploy_tower.ps1").read_text(encoding="utf-8")
+    bash = (ROOT / "scripts" / "deploy_tower.sh").read_text(encoding="utf-8")
+
+    for script in (powershell, bash):
+        assert "if [ -f .env ]; then" in script
+        assert ". ./.env" in script
+        assert "DEPLOY_GEOINTEL_INSTALL_AI" in script
+        assert 'GEOINTEL_INSTALL_AI="${GEOINTEL_INSTALL_AI:-false}"' in script
+        assert 'docker build --build-arg GEOINTEL_INSTALL_AI="$GEOINTEL_INSTALL_AI"' in script
+
+
 def test_live_migration_smoke_supports_dockerman_native_container() -> None:
     script = (ROOT / "scripts" / "live_migration_smoke.sh").read_text(encoding="utf-8")