feat(tenancy): implement workspace isolation

tests/integration/api/test_knowledge.py

@@ -10,6 +10,7 @@ from __future__ import annotations
 
 import pytest
 from unittest.mock import MagicMock, AsyncMock, Mock
+from types import SimpleNamespace
 
 from tests.factories import FakeApp
 
@@ -69,7 +70,28 @@ def fake_knowledge_app():
     app.user_service = Mock()
     app.user_service.is_initialized = AsyncMock(return_value=True)
     app.user_service.verify_jwt_token = AsyncMock(return_value='test@example.com')
-    app.user_service.get_user_by_email = AsyncMock(return_value=Mock(email='test@example.com'))
+    account = SimpleNamespace(
+        uuid='00000000-0000-0000-0000-000000000001',
+        user='test@example.com',
+    )
+    app.user_service.get_authenticated_account = AsyncMock(return_value=account)
+    app.user_service.get_user_by_email = AsyncMock(return_value=account)
+    app.workspace_collaboration_service = SimpleNamespace(
+        resolve_account_workspace=AsyncMock(
+            return_value=SimpleNamespace(
+                execution=SimpleNamespace(
+                    instance_uuid='instance-knowledge-api',
+                    placement_generation=1,
+                ),
+                workspace=SimpleNamespace(uuid='00000000-0000-0000-0000-00000000000a'),
+                membership=SimpleNamespace(
+                    uuid='00000000-0000-0000-0000-000000000010',
+                    role='owner',
+                    projection_revision=0,
+                ),
+            )
+        )
+    )
     app.apikey_service = Mock()
     app.apikey_service.verify_api_key = AsyncMock(return_value=True)