diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index dcf1eb0..46c8253 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -50,8 +50,6 @@ jobs:
       JWT_ACCESS_SECRET: ci-only-access-secret-at-least-32-chars
       JWT_REFRESH_SECRET: ci-only-refresh-secret-at-least-32-chars
       WEB_ORIGIN: http://127.0.0.1:4173
-      VITE_PUBLIC_API_BASE_URL: http://127.0.0.1:3000/api/v1
-      VITE_PUBLIC_DEMO_SESSION: 'true'
       PLAYWRIGHT_CHANNEL: ''
 
     steps:
@@ -89,7 +87,11 @@ jobs:
       - name: 单元测试与覆盖率
         run: pnpm test
 
+      # VITE_PUBLIC_DEMO_SESSION 只给构建 / e2e，避免污染单测里对真实登录流程的断言。
       - name: 构建
+        env:
+          VITE_PUBLIC_API_BASE_URL: http://127.0.0.1:3000/api/v1
+          VITE_PUBLIC_DEMO_SESSION: 'true'
         run: pnpm build
 
       - name: 数据库迁移与幂等种子
@@ -109,6 +111,9 @@ jobs:
         run: pnpm exec playwright install --with-deps chromium
 
       - name: 端到端冒烟
+        env:
+          VITE_PUBLIC_API_BASE_URL: http://127.0.0.1:3000/api/v1
+          VITE_PUBLIC_DEMO_SESSION: 'true'
         run: pnpm test:e2e
 
       - name: 归档测试产物
diff --git a/turbo.json b/turbo.json
index 49e5eaf..7743650 100644
--- a/turbo.json
+++ b/turbo.json
@@ -1,15 +1,16 @@
 {
   "$schema": "https://turbo.build/schema.json",
   "ui": "stream",
-  "globalEnv": ["VITE_PUBLIC_API_BASE_URL", "VITE_PUBLIC_DEMO_SESSION"],
   "tasks": {
     "build": {
       "dependsOn": ["^build"],
-      "outputs": ["dist/**"]
+      "outputs": ["dist/**"],
+      "env": ["VITE_PUBLIC_API_BASE_URL", "VITE_PUBLIC_DEMO_SESSION"]
     },
     "dev": {
       "cache": false,
-      "persistent": true
+      "persistent": true,
+      "env": ["VITE_PUBLIC_API_BASE_URL", "VITE_PUBLIC_DEMO_SESSION"]
     },
     "typecheck": {
       "dependsOn": ["^build"]