1. org_helpers.go: filepath.Clean after filepath.Join to strip "."
path components (./subdir/./file.txt → subdir/file.txt) so the
fast-path IsAbs check on absolute roots resolves dot segments.
2. org_helpers_security_test.go: fix hardcoded suffix length (14→16
chars) using strings.HasSuffix instead of slice arithmetic.
3. Add nil-db.DB guards in 5 locations where tests call handlers
without setting up a mock DB (plugins_tracking.go, org_plugin_allowlist.go,
terminal.go ×2, workspace_provision.go). No-op in production
(db.DB is always set); prevents nil-panic in tests that exercise
fast-path logic without a full DB stack.
All 47 schedule tests pass. Full handlers test suite passes (45s).
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
Molecule AI Fullstack Engineer
11d4b398b7