[scanner] fix: resolve Go test failures in endpoint auth, Drasi proxy, and requireUser

pkg/agent/server_ai_tokens.go

@@ -24,19 +24,22 @@
 		providerNames = append(providerNames, p.DisplayName)
 	}
 
-	sessionIn, sessionOut, todayIn, todayOut := s.tokens.GetUsage()
+	var sessionIn, sessionOut, todayIn, todayOut int
+	if s.tokens != nil {
+		sessionIn, sessionOut, todayIn, todayOut = s.tokens.GetUsage()
+	}
 
 	return &protocol.ClaudeInfo{
 		Installed: true,
 		Version:   fmt.Sprintf("Multi-agent: %s", strings.Join(providerNames, ", ")),
 		TokenUsage: protocol.TokenUsage{
 			Session: protocol.TokenCount{
 				Input:  sessionIn,
 				Output: sessionOut,
 			},
 			Today: protocol.TokenCount{
 				Input:  todayIn,
 				Output: todayOut,
 			},
 		},
 	}

pkg/api/handlers/mcp/drasi_proxy_test.go

@@ -43,6 +43,12 @@ func TestProxyDrasi_Server(t *testing.T) {
 	})
 	defer func() { drasiProxyClient.Transport = oldTransport }()
 
+	// Auth middleware to inject test user ID for RBAC checks
+	env.App.Use(func(c *fiber.Ctx) error {
+		c.Locals("userID", testAdminUserID)
+		return c.Next()
+	})
+
 	env.App.All("/api/drasi/proxy/*", h.ProxyDrasi)
 
 	req := httptest.NewRequest("GET", "/api/drasi/proxy/api/v1/sources?target=server&url=http://drasi-server&foo=bar", nil)

pkg/api/handlers/stellar/auth_test.go

@@ -21,7 +21,7 @@ func TestRequireUser(t *testing.T) {
 	}{
 		{
 			name:      "valid user ID",
-			userID:    "user-123",
+			userID:    "00000000-0000-0000-0000-000000000001",
 			wantError: false,
 		},
 		{
@@ -39,7 +39,11 @@ func TestRequireUser(t *testing.T) {
 			app := fiber.New()
 			app.Get("/test", func(c *fiber.Ctx) error {
 				if tt.userID != "" {
-					c.Locals("stellarUserID", tt.userID)
+					// resolveStellarUserID checks middleware.GetUserID which reads from "userID" Locals
+					parsedID, err := uuid.Parse(tt.userID)
+					if err == nil {
+						c.Locals("userID", parsedID)
+					}
 				}
 				userID, err := handler.requireUser(c)
 				if tt.wantError {