test(handlers): fix delegation and MCP tests exposed by full platform suite

Commit b9311134 added a CanCommunicate hierarchy check to proxyA2ARequest.
The executeDelegation tests call proxyA2ARequest directly but did not mock
the workspace hierarchy lookup, causing sqlmock to reject the unexpected
queries and fall through to the DELEGATION_FAILED path.

Fix: add mockCanCommunicate(mock, testSourceID, testTargetID, true) to
each affected executeDelegation test so the hierarchy check returns true
and the proxy is actually called.

Separately, TestMCPHandler_CommitMemory_GlobalScope_Blocked expected
zero DB calls (the handler should block GLOBAL scope before any DB work).
With no memv2 wired, toolCommitMemory fell through to the legacy shim,
which called scopeToWritableNamespace before the scope check.

Fix: wire memv2 via withMemoryV2APIs(nil, nil) in newMCPHandler so the
v2 path is taken and the GLOBAL scope check fires before any DB call.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

workspace-server/internal/handlers/delegation_test.go

@@ -1078,6 +1078,9 @@ func TestExecuteDelegation_DeliveryConfirmedProxyError_TreatsAsSuccess(t *testin
 	allowLoopbackForTest(t)
 
 	expectExecuteDelegationBase(mock)
+	// CanCommunicate: workspace hierarchy check added in b9311134; must be mocked
+	// so proxyA2ARequest doesn't return 403 and trigger the failure path.
+	mockCanCommunicate(mock, testSourceID, testTargetID, true)
 	expectExecuteDelegationSuccess(mock, `{"result":{"parts":[{"text":"work completed successfully"}]}}`)
 
 	// Execute synchronously (not as a goroutine) so we can check DB state immediately.
@@ -1148,6 +1151,9 @@ func TestExecuteDelegation_ProxyErrorNon2xx_RemainsFailed(t *testing.T) {
 	allowLoopbackForTest(t)
 
 	expectExecuteDelegationBase(mock)
+	// CanCommunicate: workspace hierarchy check added in b9311134; must be mocked
+	// so proxyA2ARequest doesn't return 403 and trigger the failure path.
+	mockCanCommunicate(mock, testSourceID, testTargetID, true)
 	expectExecuteDelegationFailed(mock)
 
 	a2aBody, _ := json.Marshal(map[string]interface{}{
@@ -1195,6 +1201,9 @@ func TestExecuteDelegation_ProxyErrorEmptyBody_RemainsFailed(t *testing.T) {
 
 	// First attempt: updateDelegationStatus(dispatched) — from expectExecuteDelegationBase
 	expectExecuteDelegationBase(mock)
+	// CanCommunicate: workspace hierarchy check added in b9311134; must be mocked
+	// so proxyA2ARequest doesn't return 403 and trigger the failure path.
+	mockCanCommunicate(mock, testSourceID, testTargetID, true)
 	// Second attempt (retry): updateDelegationStatus(dispatched) again
 	mock.ExpectExec("UPDATE activity_logs SET status").
 		WithArgs("dispatched", "", testSourceID, testDelegationID).
@@ -1243,6 +1252,9 @@ func TestExecuteDelegation_CleanProxyResponse_Unchanged(t *testing.T) {
 	allowLoopbackForTest(t)
 
 	expectExecuteDelegationBase(mock)
+	// CanCommunicate: workspace hierarchy check added in b9311134; must be mocked
+	// so proxyA2ARequest doesn't return 403 and trigger the failure path.
+	mockCanCommunicate(mock, testSourceID, testTargetID, true)
 	expectExecuteDelegationSuccess(mock, `{"result":{"parts":[{"text":"all good"}]}}`)
 
 	a2aBody, _ := json.Marshal(map[string]interface{}{

workspace-server/internal/handlers/mcp_test.go

@@ -26,6 +26,10 @@ func newMCPHandler(t *testing.T) (*MCPHandler, sqlmock.Sqlmock) {
 	t.Helper()
 	mock := setupTestDB(t)
 	h := NewMCPHandler(db.DB, newTestBroadcaster())
+	// Wire memv2 so toolCommitMemory takes the v2 path (where GLOBAL scope
+	// is blocked before any DB call), rather than the legacy shim path
+	// (which calls scopeToWritableNamespace before the scope check).
+	h.withMemoryV2APIs(nil, nil)
 	return h, mock
 }