ci: stabilize varlock path and inference smoke model

Author: benvinegar

bin/ci/smoke-agent-inference.sh

@@ -166,7 +166,7 @@ finally:
 PY
 }
 
-readonly CI_MODEL="anthropic/claude-haiku"
+readonly CI_MODEL="anthropic/claude-haiku-4-5"
 
 inject_ci_config() {
   if [[ -z "${CI_ANTHROPIC_API_KEY:-}" ]]; then

setup.sh

@@ -252,12 +252,19 @@ echo "=== Installing varlock ==="
 # varlock must be available to the agent user (start.sh adds ~/.varlock/bin to PATH).
 # Install as agent user so it lands in the right home directory.
 AGENT_VARLOCK="$BAUDBOT_HOME/.varlock/bin/varlock"
-if [ -x "$AGENT_VARLOCK" ]; then
+AGENT_VARLOCK_CONFIG_BIN="$BAUDBOT_HOME/.config/varlock/bin/varlock"
+if [ -x "$AGENT_VARLOCK" ] || [ -x "$AGENT_VARLOCK_CONFIG_BIN" ]; then
   echo "varlock already installed for baudbot_agent, skipping"
 else
   sudo -u baudbot_agent bash -c 'curl -sSfL https://varlock.dev/install.sh | sh -s'
 fi
 
+# Newer varlock installers place the binary under ~/.config/varlock/bin.
+# Keep a compatibility link at ~/.varlock/bin/varlock for existing runtime scripts.
+if [ -x "$AGENT_VARLOCK_CONFIG_BIN" ]; then
+  sudo -u baudbot_agent bash -c "mkdir -p '$BAUDBOT_HOME/.varlock/bin' && ln -sf '$AGENT_VARLOCK_CONFIG_BIN' '$AGENT_VARLOCK'"
+fi
+
 echo "=== Publishing initial git-free /opt release ==="
 # Build an immutable release snapshot from the local source checkout, then deploy
 # from /opt/baudbot/releases/<sha>. This keeps live operations decoupled from