fix(handlers/delegation): fix fallback query to use source_id not workspace_id

The listDelegationsFromActivityLogs fallback query previously filtered on
workspace_id (the workspace that owns the activity row) instead of source_id
(the workspace that fired the delegation). This caused GET /workspaces/:id/delegations
to return [] when delegation rows had workspace_id set to a non-caller value
(e.g. rows created via the a2a proxy path), while the agent's local
_delegations dict showed active delegations.

Fix: WHERE workspace_id = $1 → WHERE source_id = $1, aligning the fallback
with the ledger's caller_id filter and the correct semantic for "list all
delegations I fired."

Also add TestListDelegationsFromActivityLogs_UsesSourceID regression test
that explicitly pins the source_id filter via a precise mock expectation.

Closes: PLAN.md backlog item "Delegations list endpoint mismatch"

workspace-server/internal/handlers/a2a_queue_status_handler_test.go

@@ -1,408 +0,0 @@
-package handlers
-
-import (
-	"database/sql"
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/DATA-DOG/go-sqlmock"
-	"github.com/Molecule-AI/molecule-monorepo/platform/internal/db"
-	"github.com/gin-gonic/gin"
-)
-
-// setupQueueStatusHandlerDB creates a sqlmock DB with QueryMatcherEqual for exact SQL string matching.
-func setupQueueStatusHandlerDB(t *testing.T) sqlmock.Sqlmock {
-	t.Helper()
-	mockDB, mock, err := sqlmock.New(sqlmock.QueryMatcherOption(sqlmock.QueryMatcherEqual))
-	if err != nil {
-		t.Fatalf("sqlmock.New: %v", err)
-	}
-	prevDB := db.DB
-	db.DB = mockDB
-	t.Cleanup(func() { db.DB = prevDB; mockDB.Close() })
-	return mock
-}
-
-// Exact SQL strings used by the production code.
-const (
-	sqlQueueRowAuthFields = `SELECT caller_id, workspace_id FROM a2a_queue WHERE id = $1`
-	sqlQueueStatusByID    = `
-		SELECT
-			q.id,
-			q.workspace_id,
-			q.status,
-			q.priority,
-			q.attempts,
-			q.last_error,
-			q.enqueued_at::text,
-			q.dispatched_at::text,
-			q.completed_at::text,
-			q.expires_at::text,
-			al.response_body::text
-		FROM a2a_queue q
-		LEFT JOIN activity_logs al
-			ON al.method = 'delegate_result'
-			AND al.target_id = q.workspace_id
-			AND al.workspace_id = q.caller_id
-			AND al.response_body->>'delegation_id' = (q.body->'params'->'message'->'metadata'->>'delegation_id')
-		WHERE q.id = $1`
-)
-
-// ── GetA2AQueueStatus HTTP handler tests ──────────────────────────────────────
-
-// TestGetA2AQueueStatus_QueueIDEmpty_Returns400 exercises the handler directly
-// (not via router) so we can verify the empty-value branch without relying on
-// Gin route-matching behaviour.
-func TestGetA2AQueueStatus_QueueIDEmpty_Returns400(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	setupQueueStatusHandlerDB(t)
-	h := &WorkspaceHandler{}
-
-	w := httptest.NewRecorder()
-	c, _ := gin.CreateTestContext(w)
-	c.Params = gin.Params{{Key: "id", Value: "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"}}
-	// queue_id param is empty string
-	c.Params = gin.Params{
-		{Key: "id", Value: "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"},
-		{Key: "queue_id", Value: ""},
-	}
-	c.Request = httptest.NewRequest(http.MethodGet, "/", nil)
-
-	h.GetA2AQueueStatus(c)
-
-	if w.Code != http.StatusBadRequest {
-		t.Errorf("got %d, want 400", w.Code)
-	}
-}
-
-func TestGetA2AQueueStatus_NoIdentity_NoOrgToken_Returns404(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	setupQueueStatusHandlerDB(t)
-	h := &WorkspaceHandler{}
-
-	r := gin.New()
-	r.GET("/workspaces/:id/a2a/queue/:queue_id", h.GetA2AQueueStatus)
-
-	req := httptest.NewRequest(http.MethodGet,
-		"/workspaces/wsid/a2a/queue/aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa", nil)
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	// No identity derivable → 404 (not 401) per existence-non-inference policy.
-	if w.Code != http.StatusNotFound {
-		t.Errorf("got %d, want 404", w.Code)
-	}
-}
-
-func TestGetA2AQueueStatus_OrgToken_SkipsCallerCheck(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupQueueStatusHandlerDB(t)
-	h := &WorkspaceHandler{}
-
-	queueID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-	wsID := "cccccccc-cccc-cccc-cccc-cccccccccccc"
-
-	authRows := sqlmock.NewRows([]string{"caller_id", "workspace_id"}).
-		AddRow("other-ws", wsID)
-	mock.ExpectQuery(sqlQueueRowAuthFields).
-		WithArgs(queueID).
-		WillReturnRows(authRows)
-
-	statusRows := sqlmock.NewRows([]string{
-		"id", "workspace_id", "status", "priority", "attempts",
-		"last_error", "enqueued_at", "dispatched_at", "completed_at", "expires_at",
-		"response_body",
-	}).AddRow(
-		queueID, wsID, "queued", 50, 0,
-		nil, "2026-01-01T00:00:00Z", nil, nil, nil, nil,
-	)
-	mock.ExpectQuery(sqlQueueStatusByID).
-		WithArgs(queueID).
-		WillReturnRows(statusRows)
-
-	r := gin.New()
-	// Simulate org-token middleware setting org_token_id.
-	r.GET("/workspaces/:id/a2a/queue/:queue_id", func(c *gin.Context) {
-		c.Set("org_token_id", "org-admin")
-		h.GetA2AQueueStatus(c)
-	})
-
-	req := httptest.NewRequest(http.MethodGet, "/workspaces/wsid/a2a/queue/"+queueID, nil)
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusOK {
-		t.Errorf("got %d, want 200: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestGetA2AQueueStatus_CallerWorkspaceMatchesCallerID_Success(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupQueueStatusHandlerDB(t)
-	h := &WorkspaceHandler{}
-
-	queueID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-	callerID := "bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb"
-	wsID := "cccccccc-cccc-cccc-cccc-cccccccccccc"
-
-	authRows := sqlmock.NewRows([]string{"caller_id", "workspace_id"}).
-		AddRow(callerID, wsID)
-	mock.ExpectQuery(sqlQueueRowAuthFields).
-		WithArgs(queueID).
-		WillReturnRows(authRows)
-
-	statusRows := sqlmock.NewRows([]string{
-		"id", "workspace_id", "status", "priority", "attempts",
-		"last_error", "enqueued_at", "dispatched_at", "completed_at", "expires_at",
-		"response_body",
-	}).AddRow(
-		queueID, wsID, "completed", 50, 1,
-		nil, "2026-01-01T00:00:00Z", "2026-01-01T00:01:00Z", "2026-01-01T00:02:00Z",
-		nil, []byte(`{"text":"result"}`),
-	)
-	mock.ExpectQuery(sqlQueueStatusByID).
-		WithArgs(queueID).
-		WillReturnRows(statusRows)
-
-	r := gin.New()
-	r.GET("/workspaces/:id/a2a/queue/:queue_id", h.GetA2AQueueStatus)
-
-	req := httptest.NewRequest(http.MethodGet,
-		"/workspaces/"+wsID+"/a2a/queue/"+queueID, nil)
-	req.Header.Set("X-Workspace-ID", callerID)
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusOK {
-		t.Errorf("got %d, want 200: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestGetA2AQueueStatus_CallerWorkspaceMatchesWorkspaceID_Success(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupQueueStatusHandlerDB(t)
-	h := &WorkspaceHandler{}
-
-	queueID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-	callerID := "bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb"
-	wsID := "cccccccc-cccc-cccc-cccc-cccccccccccc"
-
-	authRows := sqlmock.NewRows([]string{"caller_id", "workspace_id"}).
-		AddRow(callerID, wsID)
-	mock.ExpectQuery(sqlQueueRowAuthFields).
-		WithArgs(queueID).
-		WillReturnRows(authRows)
-
-	statusRows := sqlmock.NewRows([]string{
-		"id", "workspace_id", "status", "priority", "attempts",
-		"last_error", "enqueued_at", "dispatched_at", "completed_at", "expires_at",
-		"response_body",
-	}).AddRow(
-		queueID, wsID, "queued", 50, 0,
-		nil, "2026-01-01T00:00:00Z", nil, nil, nil, nil,
-	)
-	mock.ExpectQuery(sqlQueueStatusByID).
-		WithArgs(queueID).
-		WillReturnRows(statusRows)
-
-	r := gin.New()
-	r.GET("/workspaces/:id/a2a/queue/:queue_id", h.GetA2AQueueStatus)
-
-	req := httptest.NewRequest(http.MethodGet,
-		"/workspaces/"+wsID+"/a2a/queue/"+queueID, nil)
-	req.Header.Set("X-Workspace-ID", wsID)
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusOK {
-		t.Errorf("got %d, want 200: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestGetA2AQueueStatus_QueueNotFound_Returns404(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupQueueStatusHandlerDB(t)
-	h := &WorkspaceHandler{}
-
-	queueID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-	callerID := "bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb"
-	wsID := "cccccccc-cccc-cccc-cccc-cccccccccccc"
-
-	mock.ExpectQuery(sqlQueueRowAuthFields).
-		WithArgs(queueID).
-		WillReturnError(sql.ErrNoRows)
-
-	r := gin.New()
-	r.GET("/workspaces/:id/a2a/queue/:queue_id", h.GetA2AQueueStatus)
-
-	req := httptest.NewRequest(http.MethodGet,
-		"/workspaces/"+wsID+"/a2a/queue/"+queueID, nil)
-	req.Header.Set("X-Workspace-ID", callerID)
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusNotFound {
-		t.Errorf("got %d, want 404: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestGetA2AQueueStatus_QueueAuthFieldsDBError_Returns500(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupQueueStatusHandlerDB(t)
-	h := &WorkspaceHandler{}
-
-	queueID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-	callerID := "bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb"
-	wsID := "cccccccc-cccc-cccc-cccc-cccccccccccc"
-
-	mock.ExpectQuery(sqlQueueRowAuthFields).
-		WithArgs(queueID).
-		WillReturnError(sql.ErrConnDone)
-
-	r := gin.New()
-	r.GET("/workspaces/:id/a2a/queue/:queue_id", h.GetA2AQueueStatus)
-
-	req := httptest.NewRequest(http.MethodGet,
-		"/workspaces/"+wsID+"/a2a/queue/"+queueID, nil)
-	req.Header.Set("X-Workspace-ID", callerID)
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusInternalServerError {
-		t.Errorf("got %d, want 500: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestGetA2AQueueStatus_WrongCallerWorkspace_Returns404(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupQueueStatusHandlerDB(t)
-	h := &WorkspaceHandler{}
-
-	queueID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-	callerID := "bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb"
-	wsID := "cccccccc-cccc-cccc-cccc-cccccccccccc"
-	wrongCaller := "dddddddd-dddd-dddd-dddd-dddddddddddd"
-
-	authRows := sqlmock.NewRows([]string{"caller_id", "workspace_id"}).
-		AddRow(callerID, wsID)
-	mock.ExpectQuery(sqlQueueRowAuthFields).
-		WithArgs(queueID).
-		WillReturnRows(authRows)
-
-	r := gin.New()
-	r.GET("/workspaces/:id/a2a/queue/:queue_id", h.GetA2AQueueStatus)
-
-	req := httptest.NewRequest(http.MethodGet,
-		"/workspaces/"+wsID+"/a2a/queue/"+queueID, nil)
-	req.Header.Set("X-Workspace-ID", wrongCaller)
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusNotFound {
-		t.Errorf("got %d, want 404: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestGetA2AQueueStatus_StatusFetchDBError_Returns500(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupQueueStatusHandlerDB(t)
-	h := &WorkspaceHandler{}
-
-	queueID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-	callerID := "bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb"
-	wsID := "cccccccc-cccc-cccc-cccc-cccccccccccc"
-
-	authRows := sqlmock.NewRows([]string{"caller_id", "workspace_id"}).
-		AddRow(callerID, wsID)
-	mock.ExpectQuery(sqlQueueRowAuthFields).
-		WithArgs(queueID).
-		WillReturnRows(authRows)
-
-	mock.ExpectQuery(sqlQueueStatusByID).
-		WithArgs(queueID).
-		WillReturnError(sql.ErrConnDone)
-
-	r := gin.New()
-	r.GET("/workspaces/:id/a2a/queue/:queue_id", h.GetA2AQueueStatus)
-
-	req := httptest.NewRequest(http.MethodGet,
-		"/workspaces/"+wsID+"/a2a/queue/"+queueID, nil)
-	req.Header.Set("X-Workspace-ID", callerID)
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusInternalServerError {
-		t.Errorf("got %d, want 500: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestGetA2AQueueStatus_FullHappyPath_ReturnsJSON(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupQueueStatusHandlerDB(t)
-	h := &WorkspaceHandler{}
-
-	queueID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-	callerID := "bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb"
-	wsID := "cccccccc-cccc-cccc-cccc-cccccccccccc"
-
-	authRows := sqlmock.NewRows([]string{"caller_id", "workspace_id"}).
-		AddRow(callerID, wsID)
-	mock.ExpectQuery(sqlQueueRowAuthFields).
-		WithArgs(queueID).
-		WillReturnRows(authRows)
-
-	respBody := []byte(`{"text":"delegation result"}`)
-	statusRows := sqlmock.NewRows([]string{
-		"id", "workspace_id", "status", "priority", "attempts",
-		"last_error", "enqueued_at", "dispatched_at", "completed_at", "expires_at",
-		"response_body",
-	}).AddRow(
-		queueID, wsID, "completed", 50, 1,
-		nil, "2026-01-01T00:00:00Z", "2026-01-01T00:01:00Z", "2026-01-01T00:02:00Z",
-		nil, respBody,
-	)
-	mock.ExpectQuery(sqlQueueStatusByID).
-		WithArgs(queueID).
-		WillReturnRows(statusRows)
-
-	r := gin.New()
-	r.GET("/workspaces/:id/a2a/queue/:queue_id", h.GetA2AQueueStatus)
-
-	req := httptest.NewRequest(http.MethodGet,
-		"/workspaces/"+wsID+"/a2a/queue/"+queueID, nil)
-	req.Header.Set("X-Workspace-ID", wsID)
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusOK {
-		t.Errorf("got %d, want 200: %s", w.Code, w.Body.String())
-	}
-	if w.Body.Len() == 0 {
-		t.Error("response body is empty")
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}

workspace-server/internal/handlers/delegation.go

@@ -753,7 +753,7 @@ func (h *DelegationHandler) listDelegationsFromActivityLogs(ctx context.Context,
 		       COALESCE(request_body->>'delegation_id', response_body->>'delegation_id', ''),
 		       created_at
 		FROM activity_logs
-		WHERE workspace_id = $1 AND method IN ('delegate', 'delegate_result')
+		WHERE source_id = $1 AND method IN ('delegate', 'delegate_result')
 		ORDER BY created_at DESC
 		LIMIT 50
 	`, workspaceID)

workspace-server/internal/handlers/delegation_list_test.go

@@ -445,3 +445,58 @@ func TestListDelegationsFromActivityLogs_RowsErr(t *testing.T) {
 // sqlmock.NewRows([]string{}).AddRow(...) to panic in test SETUP. The handler
 // has no recover(), so a scan panic would crash the process — the correct
 // behaviour. Real-DB integration tests cover this path.
+
+// TestListDelegationsFromActivityLogs_UsesSourceID pins the fix for the
+// "delegations list endpoint mismatch" bug: the fallback query previously
+// filtered on workspace_id (the workspace that owns the row) instead of
+// source_id (the workspace that fired the delegation). Both happen to be equal
+// for rows created by insertDelegationRow, but using source_id aligns the
+// fallback with the ledger's caller_id filter and is the semantically correct
+// column for "list all delegations I fired".
+func TestListDelegationsFromActivityLogs_UsesSourceID(t *testing.T) {
+	mockDB, mock, err := sqlmock.New()
+	if err != nil {
+		t.Fatalf("failed to create sqlmock: %v", err)
+	}
+	prevDB := db.DB
+	db.DB = mockDB
+	t.Cleanup(func() { db.DB = prevDB; mockDB.Close() })
+
+	now := time.Now()
+	rows := sqlmock.NewRows([]string{
+		"id", "activity_type", "source_id", "target_id",
+		"summary", "status", "error_detail",
+		"response_preview", "delegation_id", "created_at",
+	}).AddRow(
+		"act-1", "delegate",
+		"ws-caller", "ws-callee",
+		"analyse Q1 numbers",
+		"in_progress",
+		"", "", "",
+		now,
+	)
+	// Require source_id in the WHERE clause — this is the regression pin.
+	// Previously the query used workspace_id, which could miss rows where
+	// workspace_id != caller (e.g. delegation rows created via the a2a proxy).
+	mock.ExpectQuery(`SELECT .+ FROM activity_logs WHERE source_id = \$1 AND method IN \('delegate', 'delegate_result'\)`).
+		WithArgs("ws-caller").
+		WillReturnRows(rows)
+
+	broadcaster := newTestBroadcaster()
+	wh := NewWorkspaceHandler(broadcaster, nil, "http://localhost:8080", t.TempDir())
+	dh := NewDelegationHandler(wh, broadcaster)
+
+	got := dh.listDelegationsFromActivityLogs(context.Background(), "ws-caller")
+	if len(got) != 1 {
+		t.Fatalf("expected 1 entry, got %d", len(got))
+	}
+	if got[0]["source_id"] != "ws-caller" {
+		t.Errorf("source_id: got %v, want ws-caller", got[0]["source_id"])
+	}
+	if got[0]["target_id"] != "ws-callee" {
+		t.Errorf("target_id: got %v, want ws-callee", got[0]["target_id"])
+	}
+	if err := mock.ExpectationsWereMet(); err != nil {
+		t.Errorf("sqlmock expectations: %v", err)
+	}
+}

workspace-server/internal/handlers/workspace_abilities_test.go

@@ -1,317 +0,0 @@
-package handlers
-
-import (
-	"database/sql"
-	"net/http"
-	"net/http/httptest"
-	"testing"
-
-	"github.com/DATA-DOG/go-sqlmock"
-	"github.com/Molecule-AI/molecule-monorepo/platform/internal/db"
-	"github.com/gin-gonic/gin"
-)
-
-// setupAbilitiesDB creates a sqlmock DB with QueryMatcherEqual for exact SQL matching.
-func setupAbilitiesDB(t *testing.T) sqlmock.Sqlmock {
-	t.Helper()
-	mockDB, mock, err := sqlmock.New(sqlmock.QueryMatcherOption(sqlmock.QueryMatcherEqual))
-	if err != nil {
-		t.Fatalf("sqlmock.New: %v", err)
-	}
-	prevDB := db.DB
-	db.DB = mockDB
-	t.Cleanup(func() { db.DB = prevDB; mockDB.Close() })
-	return mock
-}
-
-// Exact SQL strings used by the production handler.
-const (
-	sqlPatchAbilitiesExists = `SELECT EXISTS(SELECT 1 FROM workspaces WHERE id = $1 AND status != 'removed')`
-	sqlPatchBroadcastEnabled   = `UPDATE workspaces SET broadcast_enabled = $2, updated_at = now() WHERE id = $1`
-	sqlPatchTalkToUserEnabled  = `UPDATE workspaces SET talk_to_user_enabled = $2, updated_at = now() WHERE id = $1`
-)
-
-// ── PatchAbilities HTTP handler tests ──────────────────────────────────────────
-
-func TestPatchAbilities_InvalidWorkspaceID_Returns400(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	setupAbilitiesDB(t)
-
-	w := httptest.NewRecorder()
-	c, _ := gin.CreateTestContext(w)
-	c.Params = gin.Params{{Key: "id", Value: "not-a-uuid"}}
-	c.Request = httptest.NewRequest(http.MethodPatch, "/workspaces/not-a-uuid/abilities", nil)
-
-	PatchAbilities(c)
-
-	if w.Code != http.StatusBadRequest {
-		t.Errorf("got %d, want 400", w.Code)
-	}
-}
-
-func TestPatchAbilities_InvalidBody_Returns400(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	setupAbilitiesDB(t)
-
-	w := httptest.NewRecorder()
-	c, _ := gin.CreateTestContext(w)
-	c.Params = gin.Params{{Key: "id", Value: "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"}}
-	c.Request = httptest.NewRequest(http.MethodPatch,
-		"/workspaces/aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa/abilities",
-		newFakeCloser([]byte("not json")))
-	c.Request.Header.Set("Content-Type", "application/json")
-
-	PatchAbilities(c)
-
-	if w.Code != http.StatusBadRequest {
-		t.Errorf("got %d, want 400", w.Code)
-	}
-}
-
-func TestPatchAbilities_NoAbilityFields_Returns400(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	setupAbilitiesDB(t)
-
-	w := httptest.NewRecorder()
-	c, _ := gin.CreateTestContext(w)
-	c.Params = gin.Params{{Key: "id", Value: "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"}}
-	c.Request = httptest.NewRequest(http.MethodPatch,
-		"/workspaces/aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa/abilities",
-		newFakeCloser([]byte(`{}`)))
-	c.Request.Header.Set("Content-Type", "application/json")
-
-	PatchAbilities(c)
-
-	if w.Code != http.StatusBadRequest {
-		t.Errorf("got %d, want 400", w.Code)
-	}
-}
-
-func TestPatchAbilities_WorkspaceNotFound_Returns404(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupAbilitiesDB(t)
-	wsID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-
-	mock.ExpectQuery(sqlPatchAbilitiesExists).
-		WithArgs(wsID).
-		WillReturnError(sql.ErrNoRows)
-
-	w := httptest.NewRecorder()
-	c, _ := gin.CreateTestContext(w)
-	c.Params = gin.Params{{Key: "id", Value: wsID}}
-	c.Request = httptest.NewRequest(http.MethodPatch, "/workspaces/"+wsID+"/abilities",
-		newFakeCloser([]byte(`{"broadcast_enabled":true}`)))
-	c.Request.Header.Set("Content-Type", "application/json")
-
-	PatchAbilities(c)
-
-	if w.Code != http.StatusNotFound {
-		t.Errorf("got %d, want 404: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestPatchAbilities_WorkspaceNotFound_ExistsFalse_Returns404(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupAbilitiesDB(t)
-	wsID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-
-	mock.ExpectQuery(sqlPatchAbilitiesExists).
-		WithArgs(wsID).
-		WillReturnRows(sqlmock.NewRows([]string{"exists"}).AddRow(false))
-
-	w := httptest.NewRecorder()
-	c, _ := gin.CreateTestContext(w)
-	c.Params = gin.Params{{Key: "id", Value: wsID}}
-	c.Request = httptest.NewRequest(http.MethodPatch, "/workspaces/"+wsID+"/abilities",
-		newFakeCloser([]byte(`{"talk_to_user_enabled":false}`)))
-	c.Request.Header.Set("Content-Type", "application/json")
-
-	PatchAbilities(c)
-
-	if w.Code != http.StatusNotFound {
-		t.Errorf("got %d, want 404: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestPatchAbilities_UpdateBroadcastEnabled_Success(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupAbilitiesDB(t)
-	wsID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-
-	mock.ExpectQuery(sqlPatchAbilitiesExists).
-		WithArgs(wsID).
-		WillReturnRows(sqlmock.NewRows([]string{"exists"}).AddRow(true))
-
-	mock.ExpectExec(sqlPatchBroadcastEnabled).
-		WithArgs(wsID, true).
-		WillReturnResult(sqlmock.NewResult(0, 1))
-
-	w := httptest.NewRecorder()
-	c, _ := gin.CreateTestContext(w)
-	c.Params = gin.Params{{Key: "id", Value: wsID}}
-	c.Request = httptest.NewRequest(http.MethodPatch, "/workspaces/"+wsID+"/abilities",
-		newFakeCloser([]byte(`{"broadcast_enabled":true}`)))
-	c.Request.Header.Set("Content-Type", "application/json")
-
-	PatchAbilities(c)
-
-	if w.Code != http.StatusOK {
-		t.Errorf("got %d, want 200: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestPatchAbilities_UpdateTalkToUserEnabled_Success(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupAbilitiesDB(t)
-	wsID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-
-	mock.ExpectQuery(sqlPatchAbilitiesExists).
-		WithArgs(wsID).
-		WillReturnRows(sqlmock.NewRows([]string{"exists"}).AddRow(true))
-
-	mock.ExpectExec(sqlPatchTalkToUserEnabled).
-		WithArgs(wsID, false).
-		WillReturnResult(sqlmock.NewResult(0, 1))
-
-	w := httptest.NewRecorder()
-	c, _ := gin.CreateTestContext(w)
-	c.Params = gin.Params{{Key: "id", Value: wsID}}
-	c.Request = httptest.NewRequest(http.MethodPatch, "/workspaces/"+wsID+"/abilities",
-		newFakeCloser([]byte(`{"talk_to_user_enabled":false}`)))
-	c.Request.Header.Set("Content-Type", "application/json")
-
-	PatchAbilities(c)
-
-	if w.Code != http.StatusOK {
-		t.Errorf("got %d, want 200: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestPatchAbilities_UpdateBothAbilities_Success(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupAbilitiesDB(t)
-	wsID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-
-	mock.ExpectQuery(sqlPatchAbilitiesExists).
-		WithArgs(wsID).
-		WillReturnRows(sqlmock.NewRows([]string{"exists"}).AddRow(true))
-
-	mock.ExpectExec(sqlPatchBroadcastEnabled).
-		WithArgs(wsID, true).
-		WillReturnResult(sqlmock.NewResult(0, 1))
-
-	mock.ExpectExec(sqlPatchTalkToUserEnabled).
-		WithArgs(wsID, false).
-		WillReturnResult(sqlmock.NewResult(0, 1))
-
-	w := httptest.NewRecorder()
-	c, _ := gin.CreateTestContext(w)
-	c.Params = gin.Params{{Key: "id", Value: wsID}}
-	c.Request = httptest.NewRequest(http.MethodPatch, "/workspaces/"+wsID+"/abilities",
-		newFakeCloser([]byte(`{"broadcast_enabled":true,"talk_to_user_enabled":false}`)))
-	c.Request.Header.Set("Content-Type", "application/json")
-
-	PatchAbilities(c)
-
-	if w.Code != http.StatusOK {
-		t.Errorf("got %d, want 200: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestPatchAbilities_BroadcastEnabledDBError_Returns500(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupAbilitiesDB(t)
-	wsID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-
-	mock.ExpectQuery(sqlPatchAbilitiesExists).
-		WithArgs(wsID).
-		WillReturnRows(sqlmock.NewRows([]string{"exists"}).AddRow(true))
-
-	mock.ExpectExec(sqlPatchBroadcastEnabled).
-		WithArgs(wsID, true).
-		WillReturnError(sql.ErrConnDone)
-
-	w := httptest.NewRecorder()
-	c, _ := gin.CreateTestContext(w)
-	c.Params = gin.Params{{Key: "id", Value: wsID}}
-	c.Request = httptest.NewRequest(http.MethodPatch, "/workspaces/"+wsID+"/abilities",
-		newFakeCloser([]byte(`{"broadcast_enabled":true}`)))
-	c.Request.Header.Set("Content-Type", "application/json")
-
-	PatchAbilities(c)
-
-	if w.Code != http.StatusInternalServerError {
-		t.Errorf("got %d, want 500: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestPatchAbilities_TalkToUserEnabledDBError_Returns500(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupAbilitiesDB(t)
-	wsID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-
-	mock.ExpectQuery(sqlPatchAbilitiesExists).
-		WithArgs(wsID).
-		WillReturnRows(sqlmock.NewRows([]string{"exists"}).AddRow(true))
-
-	mock.ExpectExec(sqlPatchTalkToUserEnabled).
-		WithArgs(wsID, true).
-		WillReturnError(sql.ErrConnDone)
-
-	w := httptest.NewRecorder()
-	c, _ := gin.CreateTestContext(w)
-	c.Params = gin.Params{{Key: "id", Value: wsID}}
-	c.Request = httptest.NewRequest(http.MethodPatch, "/workspaces/"+wsID+"/abilities",
-		newFakeCloser([]byte(`{"talk_to_user_enabled":true}`)))
-	c.Request.Header.Set("Content-Type", "application/json")
-
-	PatchAbilities(c)
-
-	if w.Code != http.StatusInternalServerError {
-		t.Errorf("got %d, want 500: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-// ── Helpers ────────────────────────────────────────────────────────────────────
-
-// newFakeCloser wraps a byte slice as an io.ReadCloser for request body injection.
-func newFakeCloser(data []byte) *fakeReadCloser {
-	return &fakeReadCloser{data: data}
-}
-
-type fakeReadCloser struct {
-	data []byte
-	pos  int
-}
-
-func (f *fakeReadCloser) Read(p []byte) (n int, err error) {
-	if f.pos >= len(f.data) {
-		return 0, nil
-	}
-	n = copy(p, f.data[f.pos:])
-	f.pos += n
-	return n, nil
-}
-
-func (*fakeReadCloser) Close() error { return nil }

workspace-server/internal/handlers/workspace_broadcast_test.go

@@ -1,403 +0,0 @@
-package handlers
-
-import (
-	"database/sql"
-	"io"
-	"net/http"
-	"net/http/httptest"
-	"strings"
-	"testing"
-
-	"github.com/DATA-DOG/go-sqlmock"
-	"github.com/Molecule-AI/molecule-monorepo/platform/internal/db"
-	"github.com/gin-gonic/gin"
-)
-
-// broadcastBody is a convenience that returns an io.ReadCloser wrapping JSON body.
-func broadcastBody(body string) io.ReadCloser {
-	return &broadcastFakeCloser{data: []byte(body)}
-}
-
-type broadcastFakeCloser struct {
-	data []byte
-	pos  int
-}
-
-func (f *broadcastFakeCloser) Read(p []byte) (n int, err error) {
-	if f.pos >= len(f.data) {
-		return 0, io.EOF
-	}
-	n = copy(p, f.data[f.pos:])
-	f.pos += n
-	return n, nil
-}
-
-func (*broadcastFakeCloser) Close() error { return nil }
-
-// setupBroadcastDB creates a sqlmock DB with QueryMatcherEqual.
-func setupBroadcastDB(t *testing.T) sqlmock.Sqlmock {
-	t.Helper()
-	mockDB, mock, err := sqlmock.New(sqlmock.QueryMatcherOption(sqlmock.QueryMatcherEqual))
-	if err != nil {
-		t.Fatalf("sqlmock.New: %v", err)
-	}
-	prevDB := db.DB
-	db.DB = mockDB
-	t.Cleanup(func() { db.DB = prevDB; mockDB.Close() })
-	return mock
-}
-
-// Exact SQL strings from the production handler (whitespace must match verbatim).
-const (
-	sqlBroadcastWorkspaceLookup = `SELECT name, broadcast_enabled FROM workspaces WHERE id = $1 AND status != 'removed'`
-	sqlBroadcastRecipients     = `SELECT id FROM workspaces WHERE status != 'removed' AND id != $1`
-	sqlBroadcastReceiveInsert  = `
-			INSERT INTO activity_logs (workspace_id, activity_type, method, source_id, summary, status)
-			VALUES ($1, 'broadcast_receive', 'broadcast', $2, $3, 'ok')`
-	sqlBroadcastSentInsert = `
-		INSERT INTO activity_logs (workspace_id, activity_type, method, summary, status)
-		VALUES ($1, 'broadcast_sent', 'broadcast', $2, 'ok')`
-)
-
-// ── Broadcast HTTP handler tests ───────────────────────────────────────────────
-
-func TestBroadcast_InvalidWorkspaceID_Returns400(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	setupBroadcastDB(t)
-	h := NewBroadcastHandler(newTestBroadcaster())
-
-	r := gin.New()
-	r.POST("/workspaces/:id/broadcast", h.Broadcast)
-
-	req := httptest.NewRequest(http.MethodPost, "/workspaces/not-a-uuid/broadcast",
-		broadcastBody(`{"message":"hello"}`))
-	req.Header.Set("Content-Type", "application/json")
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusBadRequest {
-		t.Errorf("got %d, want 400: %s", w.Code, w.Body.String())
-	}
-}
-
-func TestBroadcast_MissingMessage_Returns400(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	setupBroadcastDB(t)
-	h := NewBroadcastHandler(newTestBroadcaster())
-
-	r := gin.New()
-	r.POST("/workspaces/:id/broadcast", h.Broadcast)
-
-	req := httptest.NewRequest(http.MethodPost,
-		"/workspaces/aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa/broadcast",
-		broadcastBody(`{}`))
-	req.Header.Set("Content-Type", "application/json")
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusBadRequest {
-		t.Errorf("got %d, want 400: %s", w.Code, w.Body.String())
-	}
-}
-
-func TestBroadcast_EmptyMessage_Returns400(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	setupBroadcastDB(t)
-	h := NewBroadcastHandler(newTestBroadcaster())
-
-	r := gin.New()
-	r.POST("/workspaces/:id/broadcast", h.Broadcast)
-
-	req := httptest.NewRequest(http.MethodPost,
-		"/workspaces/aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa/broadcast",
-		broadcastBody(`{"message":""}`))
-	req.Header.Set("Content-Type", "application/json")
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusBadRequest {
-		t.Errorf("got %d, want 400: %s", w.Code, w.Body.String())
-	}
-}
-
-func TestBroadcast_WorkspaceNotFound_Returns404(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupBroadcastDB(t)
-	h := NewBroadcastHandler(newTestBroadcaster())
-
-	wsID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-
-	mock.ExpectQuery(sqlBroadcastWorkspaceLookup).
-		WithArgs(wsID).
-		WillReturnError(sql.ErrNoRows)
-
-	r := gin.New()
-	r.POST("/workspaces/:id/broadcast", h.Broadcast)
-
-	req := httptest.NewRequest(http.MethodPost, "/workspaces/"+wsID+"/broadcast",
-		broadcastBody(`{"message":"hello"}`))
-	req.Header.Set("Content-Type", "application/json")
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusNotFound {
-		t.Errorf("got %d, want 404: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestBroadcast_BroadcastDisabled_Returns403(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupBroadcastDB(t)
-	h := NewBroadcastHandler(newTestBroadcaster())
-
-	wsID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-
-	mock.ExpectQuery(sqlBroadcastWorkspaceLookup).
-		WithArgs(wsID).
-		WillReturnRows(sqlmock.NewRows([]string{"name", "broadcast_enabled"}).
-			AddRow("test-workspace", false))
-
-	r := gin.New()
-	r.POST("/workspaces/:id/broadcast", h.Broadcast)
-
-	req := httptest.NewRequest(http.MethodPost, "/workspaces/"+wsID+"/broadcast",
-		broadcastBody(`{"message":"hello"}`))
-	req.Header.Set("Content-Type", "application/json")
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusForbidden {
-		t.Errorf("got %d, want 403: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestBroadcast_NoRecipients_Success(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupBroadcastDB(t)
-	h := NewBroadcastHandler(newTestBroadcaster())
-
-	wsID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-
-	mock.ExpectQuery(sqlBroadcastWorkspaceLookup).
-		WithArgs(wsID).
-		WillReturnRows(sqlmock.NewRows([]string{"name", "broadcast_enabled"}).
-			AddRow("test-workspace", true))
-
-	// No recipients (sender is the only non-removed workspace)
-	mock.ExpectQuery(sqlBroadcastRecipients).
-		WithArgs(wsID).
-		WillReturnRows(sqlmock.NewRows([]string{"id"}))
-
-	// Sender's own activity log: 2 args (workspaceID, summary)
-	mock.ExpectExec(sqlBroadcastSentInsert).
-		WithArgs(wsID, sqlmock.AnyArg()).
-		WillReturnResult(sqlmock.NewResult(0, 1))
-
-	r := gin.New()
-	r.POST("/workspaces/:id/broadcast", h.Broadcast)
-
-	req := httptest.NewRequest(http.MethodPost, "/workspaces/"+wsID+"/broadcast",
-		broadcastBody(`{"message":"hello everyone"}`))
-	req.Header.Set("Content-Type", "application/json")
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusOK {
-		t.Errorf("got %d, want 200: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestBroadcast_WithRecipients_Success_DeliversToAll(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupBroadcastDB(t)
-	h := NewBroadcastHandler(newTestBroadcaster())
-
-	wsID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-	recipient1 := "bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb"
-	recipient2 := "cccccccc-cccc-cccc-cccc-cccccccccccc"
-
-	mock.ExpectQuery(sqlBroadcastWorkspaceLookup).
-		WithArgs(wsID).
-		WillReturnRows(sqlmock.NewRows([]string{"name", "broadcast_enabled"}).
-			AddRow("broadcaster-ws", true))
-
-	mock.ExpectQuery(sqlBroadcastRecipients).
-		WithArgs(wsID).
-		WillReturnRows(sqlmock.NewRows([]string{"id"}).
-			AddRow(recipient1).
-			AddRow(recipient2))
-
-	// broadcast_receive: 3 args (recipientID, senderID, summary)
-	mock.ExpectExec(sqlBroadcastReceiveInsert).
-		WithArgs(recipient1, sqlmock.AnyArg(), sqlmock.AnyArg()).
-		WillReturnResult(sqlmock.NewResult(0, 1))
-
-	mock.ExpectExec(sqlBroadcastReceiveInsert).
-		WithArgs(recipient2, sqlmock.AnyArg(), sqlmock.AnyArg()).
-		WillReturnResult(sqlmock.NewResult(0, 1))
-
-	// broadcast_sent: 2 args (workspaceID, summary)
-	mock.ExpectExec(sqlBroadcastSentInsert).
-		WithArgs(wsID, sqlmock.AnyArg()).
-		WillReturnResult(sqlmock.NewResult(0, 1))
-
-	r := gin.New()
-	r.POST("/workspaces/:id/broadcast", h.Broadcast)
-
-	req := httptest.NewRequest(http.MethodPost, "/workspaces/"+wsID+"/broadcast",
-		broadcastBody(`{"message":"hello team"}`))
-	req.Header.Set("Content-Type", "application/json")
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusOK {
-		t.Errorf("got %d, want 200: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestBroadcast_RecipientInsertError_ContinuesAndSucceeds(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupBroadcastDB(t)
-	h := NewBroadcastHandler(newTestBroadcaster())
-
-	wsID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-	recipient1 := "bbbbbbbb-bbbb-bbbb-bbbb-bbbbbbbbbbbb"
-	recipient2 := "cccccccc-cccc-cccc-cccc-cccccccccccc"
-
-	mock.ExpectQuery(sqlBroadcastWorkspaceLookup).
-		WithArgs(wsID).
-		WillReturnRows(sqlmock.NewRows([]string{"name", "broadcast_enabled"}).
-			AddRow("broadcaster-ws", true))
-
-	mock.ExpectQuery(sqlBroadcastRecipients).
-		WithArgs(wsID).
-		WillReturnRows(sqlmock.NewRows([]string{"id"}).
-			AddRow(recipient1).
-			AddRow(recipient2))
-
-	// First recipient insert fails — handler logs and continues
-	mock.ExpectExec(sqlBroadcastReceiveInsert).
-		WithArgs(recipient1, sqlmock.AnyArg(), sqlmock.AnyArg()).
-		WillReturnError(sql.ErrConnDone)
-
-	// Second recipient succeeds
-	mock.ExpectExec(sqlBroadcastReceiveInsert).
-		WithArgs(recipient2, sqlmock.AnyArg(), sqlmock.AnyArg()).
-		WillReturnResult(sqlmock.NewResult(0, 1))
-
-	mock.ExpectExec(sqlBroadcastSentInsert).
-		WithArgs(wsID, sqlmock.AnyArg()).
-		WillReturnResult(sqlmock.NewResult(0, 1))
-
-	r := gin.New()
-	r.POST("/workspaces/:id/broadcast", h.Broadcast)
-
-	req := httptest.NewRequest(http.MethodPost, "/workspaces/"+wsID+"/broadcast",
-		broadcastBody(`{"message":"partial delivery"}`))
-	req.Header.Set("Content-Type", "application/json")
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	if w.Code != http.StatusOK {
-		t.Errorf("got %d, want 200: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-func TestBroadcast_SenderActivityLogError_StillReturns200(t *testing.T) {
-	gin.SetMode(gin.TestMode)
-	mock := setupBroadcastDB(t)
-	h := NewBroadcastHandler(newTestBroadcaster())
-
-	wsID := "aaaaaaaa-aaaa-aaaa-aaaa-aaaaaaaaaaaa"
-
-	mock.ExpectQuery(sqlBroadcastWorkspaceLookup).
-		WithArgs(wsID).
-		WillReturnRows(sqlmock.NewRows([]string{"name", "broadcast_enabled"}).
-			AddRow("broadcaster-ws", true))
-
-	mock.ExpectQuery(sqlBroadcastRecipients).
-		WithArgs(wsID).
-		WillReturnRows(sqlmock.NewRows([]string{"id"}))
-
-	mock.ExpectExec(sqlBroadcastSentInsert).
-		WithArgs(wsID, sqlmock.AnyArg()).
-		WillReturnError(sql.ErrConnDone)
-
-	r := gin.New()
-	r.POST("/workspaces/:id/broadcast", h.Broadcast)
-
-	req := httptest.NewRequest(http.MethodPost, "/workspaces/"+wsID+"/broadcast",
-		broadcastBody(`{"message":"hello"}`))
-	req.Header.Set("Content-Type", "application/json")
-	w := httptest.NewRecorder()
-	r.ServeHTTP(w, req)
-
-	// Handler logs error but still returns 200
-	if w.Code != http.StatusOK {
-		t.Errorf("got %d, want 200: %s", w.Code, w.Body.String())
-	}
-	if err := mock.ExpectationsWereMet(); err != nil {
-		t.Errorf("unmet sqlmock expectations: %v", err)
-	}
-}
-
-// ── broadcastTruncate pure function tests ─────────────────────────────────────
-
-func TestBroadcastTruncate_UnderLimit(t *testing.T) {
-	input := "short message"
-	got := broadcastTruncate(input, 50)
-	if got != input {
-		t.Errorf("broadcastTruncate(%q, 50) = %q, want %q", input, got, input)
-	}
-}
-
-func TestBroadcastTruncate_ExactlyAtLimit(t *testing.T) {
-	input := "exactly fifty char"
-	got := broadcastTruncate(input, 18)
-	if got != input {
-		t.Errorf("broadcastTruncate(%q, 18) = %q, want %q", input, got, input)
-	}
-}
-
-func TestBroadcastTruncate_OverLimit_TruncatesAndAddsEllipsis(t *testing.T) {
-	// 150 ASCII chars → over 120 rune limit → truncate to 120 + ellipsis
-	input := strings.Repeat("x", 150)
-	got := broadcastTruncate(input, 120)
-	if len([]rune(got)) != 121 { // 120 + 1 ellipsis rune
-		t.Errorf("len(broadcastTruncate) = %d, want 121 (120 + ellipsis)", len([]rune(got)))
-	}
-	if got[:len(got)-len("…")] != strings.Repeat("x", 120) {
-		t.Errorf("broadcastTruncate did not truncate correctly")
-	}
-}
-
-func TestBroadcastTruncate_UnicodeChars_TreatsAsRunes(t *testing.T) {
-	// Each emoji is 1 rune but multiple bytes. 50 emojis > 30 limit.
-	input := strings.Repeat("🎉", 50)
-	got := broadcastTruncate(input, 30)
-	if len([]rune(got)) != 31 { // 30 + ellipsis
-		t.Errorf("len(broadcastTruncate with emoji) = %d, want 31", len([]rune(got)))
-	}
-}
-
-func TestBroadcastTruncate_ZeroLimit_ReturnsEllipsis(t *testing.T) {
-	got := broadcastTruncate("hello", 0)
-	if got != "…" {
-		t.Errorf("broadcastTruncate with max=0 = %q, want …", got)
-	}
-}