test(server): resolution capture unit + integration coverage (CRU-130)

[selfcontained]

Summary

Phase 1 test coverage for the review round-trip flow (parent of CRU-127). Backs the resolution-capture implementation landed in #372 / CRU-128 with unit + HTTP integration tests so every new guard has a regression net.

No production code changed — tests only.

Coverage

Unit (apps/server/test/db/agent-manager.test.ts, additive):

• updateFeedbackStatus / updateFeedbackStatusByParent
  • ignored rejects without a reason (empty, whitespace-only)
  • fixed accepted with or without a reason
  • resolution_reason, resolution_commit, resolved_at persisted
  • Benign re-resolve preserves the original audit trail (COALESCE)
  • resolved_at does not drift on repeat calls; cleared on revert to open
• submitReviewResolution
  • Empty / whitespace / over-length (10k) summary
  • Review not in complete state
  • Still-open items surface the offending IDs
  • Ignored-without-reason items surface the offending IDs
  • Missing review returns 404
  • Happy path: summary + resolution commit + round_number=1
  • Idempotent upsert replaces summary + commit on repeat submit
  • Summary is trimmed on persist
  • Failing preconditions leave no partial rows
• persona_reviews.last_reviewed_commit
  • Set on createPersonaReview; defaults to null
  • Updated on completePersonaReview; COALESCE preserves when omitted

HTTP integration (apps/server/test/resolution-capture-integration.test.ts, new file):

• PATCH /api/v1/agents/:id/feedback/:feedbackId
  • Reason must be a string; 10k cap
  • ignored without reason → 400
  • Happy paths for fixed / ignored record reason + HEAD sha
  • Reverting to open does not recompute resolution commit
• POST /api/v1/agents/:id/persona-reviews/:personaAgentId/resolution
  • Summary validation (missing / whitespace / non-string) → 400
  • Still-open items → 409 with IDs
  • Ignored items missing a reason → 409 with IDs
  • Review not complete → 409
  • Parent not found → 404
  • Happy path persists summary + HEAD sha, row readable via DB
  • Unauthenticated requests → 401

Follows the mcp-auth-integration.test.ts pattern: inert runtime, isolated test DB, runCommand mocked so resolveHeadSha returns a controlled value.

Test plan

• pnpm run check (backend + web tsc)
• pnpm run test — 366 passed, 11 skipped (pre-existing)
• New suite alone: 39 unit + integration tests all green
• pnpm run test:e2e — not re-run; no production code changed, no E2E assertions touched