fix(cloud): preserve Core-owned collaboration state

tests/unit_tests/api/service/test_user_service.py

@@ -639,6 +639,15 @@ class TestUserServiceCreateOrUpdateSpaceUser:
 
         persistence.execute_async.assert_not_awaited()
 
+    async def test_cloud_invitation_registration_requires_space_identity(self):
+        ap = SimpleNamespace(
+            workspace_service=SimpleNamespace(policy=SimpleNamespace(multi_workspace_enabled=True)),
+        )
+        service = UserService(ap)
+
+        with pytest.raises(ControlPlaneDirectoryRequiredError, match='Space account'):
+            await service.register_invited_account('invite-token', 'member@example.com', 'password')
+
     async def test_create_or_update_new_space_user_first_init(self):
         """Creates new Space user on first initialization."""
         # Setup

tests/unit_tests/cloud/test_directory_projection.py

@@ -815,3 +815,42 @@ async def test_snapshot_for_another_instance_is_rejected(projection_context):
 
     with pytest.raises(DirectoryProjectionUnavailableError, match='another LangBot instance'):
         await service.initialize()
+
+
+async def test_core_owned_membership_survives_directory_updates_and_omission(projection_context):
+    application, session_factory = projection_context
+    service = DirectoryProjectionService(application, _Provider([_snapshot(1)]), INSTANCE_UUID)
+    await service.initialize()
+
+    async with session_factory() as session:
+        async with session.begin():
+            membership = await session.scalar(sqlalchemy.select(WorkspaceMembership))
+            membership.role = 'viewer'
+            membership.status = 'active'
+            membership.projection_revision = 0
+            session.add(
+                WorkspaceMembership(
+                    uuid=SECOND_MEMBERSHIP_UUID,
+                    workspace_uuid=WORKSPACE_UUID,
+                    account_uuid='20000000-0000-0000-0000-000000000099',
+                    role='viewer',
+                    status='active',
+                    joined_at=membership.joined_at,
+                    projection_revision=0,
+                )
+            )
+
+    projected_member = _member(revision=2).model_copy(update={'role': 'owner', 'membership_status': 'removed'})
+    projected_workspace = _workspace(revision=2).model_copy(update={'members': (projected_member,)})
+    await service.apply_snapshot(_snapshot(2, workspaces=[projected_workspace]))
+
+    async with session_factory() as session:
+        memberships = {
+            membership.uuid: membership
+            for membership in (await session.scalars(sqlalchemy.select(WorkspaceMembership))).all()
+        }
+    assert memberships[MEMBERSHIP_UUID].role == 'viewer'
+    assert memberships[MEMBERSHIP_UUID].status == 'active'
+    assert memberships[MEMBERSHIP_UUID].projection_revision == 0
+    assert memberships[SECOND_MEMBERSHIP_UUID].status == 'active'
+    assert memberships[SECOND_MEMBERSHIP_UUID].projection_revision == 0