test(handlers): add missing DB-error tests for Record and SessionSearch

- TestDelegationRecord_DBInsertFails: verifies 500 on activity_logs insert failure
- TestSessionSearch_DBError: verifies 500 on WITH query failure

Both are regression coverage for error paths that lacked test coverage.

🤖 Generated with [Claude Code](https://claude.ai/claude-code)

.gitea/scripts/gitea-merge-queue.py

@@ -65,21 +65,6 @@ class ApiError(RuntimeError):
     pass
 
 
-class PreReceiveBlocked(ApiError):
-    """Raised when the pre-receive hook blocks a merge (HTTP 405).
-
-    Distinguishes "retryable transient failure" (network, auth, rate-limit)
-    from "permanent block that requires human UI intervention".
-    """
-
-    def __init__(self, path: str, status: int, body: str, pr_number: int):
-        self.status = status
-        self.body = body
-        self.pr_number = pr_number
-        super().__init__(f"{path} -> HTTP {status}: {body[:200]}")
-
-
-
 @dataclasses.dataclass(frozen=True)
 class MergeDecision:
     ready: bool
@@ -353,20 +338,7 @@ def merge_pull(pr_number: int, *, dry_run: bool) -> None:
     print(f"::notice::merging PR #{pr_number}")
     if dry_run:
         return
-    path = f"/repos/{OWNER}/{NAME}/pulls/{pr_number}/merge"
-    try:
-        api("POST", path, body=payload, expect_json=False)
-    except ApiError as exc:
-        # Gitea pre-receive hook returns HTTP 405 with body like
-        # '{"message":"User not allowed to merge PR"}'. The hook blocks
-        # all API-originated merges regardless of token permissions.
-        # Detect: 405 + "not allowed" or "pre-receive" in the error body.
-        msg: str = str(exc)
-        body_snippet = msg.split("HTTP 405:")[1].strip() if "HTTP 405:" in msg else ""
-        if "405" in msg or "not allowed" in body_snippet.lower() or "pre-receive" in body_snippet.lower():
-            raise PreReceiveBlocked(path, 405, body_snippet, pr_number) from exc
-        # Other API errors (auth, rate-limit, server error) are retryable.
-        raise
+    api("POST", f"/repos/{OWNER}/{NAME}/pulls/{pr_number}/merge", body=payload, expect_json=False)
 
 
 def process_once(*, dry_run: bool = False) -> int:
@@ -435,20 +407,7 @@ def process_once(*, dry_run: bool = False) -> int:
                 "deferring to next tick"
             )
             return 0
-        try:
-            merge_pull(pr_number, dry_run=dry_run)
-        except PreReceiveBlocked as exc:
-            msg = (
-                "merge-queue: **blocked by pre-receive hook** — "
-                "the Gitea server-side hook is preventing API merges for this PR. "
-                "Please merge via the UI at the link above, or ask a repo admin "
-                "to temporarily disable the hook if an emergency merge is needed."
-            )
-            post_comment(exc.pr_number, msg, dry_run=dry_run)
-            sys.stderr.write(
-                f"::error::queue: PR #{exc.pr_number} blocked by pre-receive hook "
-                f"(HTTP {exc.status}); posted comment and skipping.\n"
-            )
+        merge_pull(pr_number, dry_run=dry_run)
         return 0
     return 0
 
@@ -467,26 +426,6 @@ def main() -> int:
         # workflow run, blocking future ticks.
         sys.stderr.write(f"::error::queue API error: {exc}\n")
         return 0
-    except PreReceiveBlocked as exc:
-        # Pre-receive hook is blocking API merges. Post a comment so humans
-        # know the PR is in the queue but blocked, then skip it. We do NOT
-        # re-raise — exit 0 keeps the workflow green so the next tick can
-        # check again in case an admin clears the hook.
-        msg = (
-            "merge-queue: **blocked by pre-receive hook** — "
-            "the Gitea server-side hook is preventing API merges for this PR. "
-            "Please merge via the UI at the link above, or ask a repo admin "
-            "to temporarily disable the hook if an emergency merge is needed."
-        )
-        try:
-            post_comment(exc.pr_number, msg, dry_run=args.dry_run)
-        except Exception:
-            pass  # Don't fail the tick if commenting also fails.
-        sys.stderr.write(
-            f"::error::queue: PR #{exc.pr_number} blocked by pre-receive hook "
-            f"(HTTP {exc.status}); posted comment and skipping.\n"
-        )
-        return 0
     except urllib.error.URLError as exc:
         sys.stderr.write(f"::error::queue network error: {exc}\n")
         return 0

.gitea/workflows/ci.yml

@@ -148,7 +148,7 @@ jobs:
     # Job-level ceiling. The go test step below runs with a per-step 10m timeout;
     # this cap catches any step that leaks past that. Set well above 10m so
     # the per-step timeout is the active constraint.
-    timeout-minutes: 20
+    timeout-minutes: 15
     defaults:
       run:
         working-directory: workspace-server
@@ -174,14 +174,14 @@ jobs:
         run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.12.2
       - if: always()
         name: Run golangci-lint
-        run: $(go env GOPATH)/bin/golangci-lint run --timeout 5m ./...
+        run: $(go env GOPATH)/bin/golangci-lint run --timeout 3m ./...
       - if: always()
-        name: Diagnostic — per-package verbose 300s
+        name: Diagnostic — per-package verbose 60s
         run: |
           set +e
-          go test -race -v -timeout 300s ./internal/handlers/... 2>&1 | tee /tmp/test-handlers.log
+          go test -race -v -timeout 60s ./internal/handlers/... 2>&1 | tee /tmp/test-handlers.log
           handlers_exit=$?
-          go test -race -v -timeout 300s ./internal/pendinguploads/... 2>&1 | tee /tmp/test-pu.log
+          go test -race -v -timeout 60s ./internal/pendinguploads/... 2>&1 | tee /tmp/test-pu.log
           pu_exit=$?
           echo "::group::handlers exit=$handlers_exit (last 100 lines)"
           tail -100 /tmp/test-handlers.log

.gitea/workflows/handlers-postgres-integration.yml

@@ -86,7 +86,11 @@ jobs:
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
-          fetch-depth: 0
+          # A full-history checkout can exceed the runner's quiet/startup
+          # window before the path filter emits logs. Fetch the common push
+          # case cheaply; the script below fetches the exact BASE SHA if it is
+          # not present in the shallow checkout.
+          fetch-depth: 2
       - id: filter
         # Inline replacement for dorny/paths-filter — see e2e-api.yml.
         run: |

.gitea/workflows/lint-continue-on-error-tracking.yml

@@ -93,7 +93,7 @@ jobs:
   lint:
     name: lint-continue-on-error-tracking
     runs-on: ubuntu-latest
-    timeout-minutes: 10
+    timeout-minutes: 20
     # Phase 3 (RFC #219 §1): surface masked defects without blocking
     # PRs. Pre-existing continue-on-error: true directives on main
     # all violate this lint at first — intentional. Flip to false

.gitea/workflows/review-refire-comments.yml

@@ -18,6 +18,10 @@ permissions:
   pull-requests: read
   statuses: write
 
+concurrency:
+  group: ${{ github.repository }}-${{ github.workflow }}-${{ github.event.issue.number || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   dispatch:
     runs-on: ubuntu-latest

.gitea/workflows/sop-checklist.yml

@@ -70,7 +70,7 @@ name: sop-checklist
 # Cancel any in-progress runs for the same PR to prevent
 # stale runs from overwriting newer status contexts.
 concurrency:
-  group: ${{ github.repository }}-${{ github.event.pull_request.number }}
+  group: ${{ github.repository }}-${{ github.workflow }}-${{ github.event.pull_request.number || github.event.issue.number || github.ref }}
   cancel-in-progress: true
 
 # bp-required: yes  ← emits sop-checklist / all-items-acked (pull_request)

.gitea/workflows/sop-tier-check.yml

@@ -61,6 +61,10 @@ on:
   pull_request_review:
     types: [submitted, dismissed, edited]
 
+concurrency:
+  group: ${{ github.repository }}-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
 jobs:
   tier-check:
     runs-on: ubuntu-latest

workspace-server/internal/handlers/activity_test.go

@@ -63,6 +63,31 @@ func TestSessionSearchReturnsActivityAndMemory(t *testing.T) {
 	}
 }
 
+func TestSessionSearch_DBError(t *testing.T) {
+	mock := setupTestDB(t)
+	setupTestRedis(t)
+	broadcaster := newTestBroadcaster()
+	handler := NewActivityHandler(broadcaster)
+
+	mock.ExpectQuery("WITH session_items AS").
+		WillReturnError(context.DeadlineExceeded)
+
+	w := httptest.NewRecorder()
+	c, _ := gin.CreateTestContext(w)
+	c.Request = httptest.NewRequest("GET", "/workspaces/ws-123/session-search?q=test", bytes.NewBufferString(""))
+	c.Request.Header.Set("Content-Type", "application/json")
+	c.Params = gin.Params{{Key: "id", Value: "ws-123"}}
+
+	handler.SessionSearch(c)
+
+	if w.Code != http.StatusInternalServerError {
+		t.Errorf("expected 500 on DB error, got %d", w.Code)
+	}
+	if err := mock.ExpectationsWereMet(); err != nil {
+		t.Errorf("unmet sqlmock expectations: %v", err)
+	}
+}
+
 // ---------- Activity List source filter ----------
 
 func TestActivityList_SourceCanvas(t *testing.T) {

workspace-server/internal/handlers/delegation_test.go

@@ -543,6 +543,33 @@ func TestDelegationRecord_RejectsInvalidUUID(t *testing.T) {
 	}
 }
 
+func TestDelegationRecord_DBInsertFails(t *testing.T) {
+	mock := setupTestDB(t)
+	setupTestRedis(t)
+	broadcaster := newTestBroadcaster()
+	wh := NewWorkspaceHandler(broadcaster, nil, "http://localhost:8080", t.TempDir())
+	h := NewDelegationHandler(wh, broadcaster)
+
+	mock.ExpectExec("INSERT INTO activity_logs").
+		WillReturnError(fmt.Errorf("connection refused"))
+
+	w := httptest.NewRecorder()
+	c, _ := gin.CreateTestContext(w)
+	c.Params = gin.Params{{Key: "id", Value: "550e8400-e29b-41d4-a716-446655440000"}}
+	body := `{"target_id":"550e8400-e29b-41d4-a716-446655440001","task":"hello","delegation_id":"del-xyz"}`
+	c.Request = httptest.NewRequest("POST", "/delegations/record", bytes.NewBufferString(body))
+	c.Request.Header.Set("Content-Type", "application/json")
+
+	h.Record(c)
+
+	if w.Code != http.StatusInternalServerError {
+		t.Errorf("expected 500 on DB insert failure, got %d", w.Code)
+	}
+	if err := mock.ExpectationsWereMet(); err != nil {
+		t.Errorf("unmet expectations: %v", err)
+	}
+}
+
 func TestDelegationUpdateStatus_CompletedInsertsResultRow(t *testing.T) {
 	mock := setupTestDB(t)
 	setupTestRedis(t)

workspace-server/internal/handlers/external_connection.go

@@ -646,8 +646,12 @@ const externalOpenClawTemplate = `# OpenClaw MCP config — outbound tool path.
 # external machine today, pair with the Python SDK tab.
 
 # 1. Install openclaw CLI + the workspace runtime wheel:
+#    The version pin (>=0.1.999) ensures the "molecule-mcp" console
+#    script is present — it is what keeps the workspace ALIVE on canvas
+#    (register-on-startup + 20s heartbeat). Older versions only ship
+#    a2a_mcp_server which does not heartbeat.
 npm install -g openclaw@latest
-pip install molecule-ai-workspace-runtime
+pip install "molecule-ai-workspace-runtime>=0.1.999"
 
 # 2. Onboard openclaw against your model provider (one-time setup).
 #    --non-interactive needs an explicit --provider + --model so it