feat(tenancy): implement workspace isolation

tests/integration_tests/box/test_box_integration.py

@@ -18,6 +18,7 @@ import shutil
 import socket
 import subprocess
 from types import SimpleNamespace
+from unittest.mock import AsyncMock
 
 import pytest
 
@@ -27,7 +28,8 @@ from langbot_plugin.box.client import ActionRPCBoxClient
 from langbot_plugin.box.errors import BoxBackendUnavailableError
 from langbot_plugin.box.models import BoxExecutionStatus, BoxNetworkMode, BoxSpec
 from langbot_plugin.box.runtime import BoxRuntime
-from langbot_plugin.box.server import BoxServerHandler
+from langbot_plugin.box.server import BoxGenerationFence, BoxServerHandler
+from langbot_plugin.entities.io.context import ActionContext
 
 import langbot_plugin.api.entities.builtin.pipeline.query as pipeline_query
 
@@ -35,6 +37,11 @@ _logger = logging.getLogger('test.box.integration')
 
 # Default image for integration tests — small and fast to pull.
 _TEST_IMAGE = 'alpine:latest'
+_ACTION_CONTEXT = ActionContext(
+    instance_uuid='box-integration-instance',
+    workspace_uuid='box-integration-workspace',
+    placement_generation=1,
+)
 
 
 # ── Skip helpers ──────────────────────────────────────────────────────
@@ -97,6 +104,22 @@ class _QueueConnection:
         pass
 
 
+class _TenantBoxClient(ActionRPCBoxClient):
+    async def _call(
+        self,
+        action,
+        data,
+        timeout=15.0,
+        action_context=None,
+    ):
+        return await super()._call(
+            action,
+            data,
+            timeout=timeout,
+            action_context=action_context or _ACTION_CONTEXT,
+        )
+
+
 async def _make_rpc_pair(runtime: BoxRuntime):
     """Create an in-process (ActionRPCBoxClient, server_task, client_task) connected via queues."""
     from langbot_plugin.runtime.io.handler import Handler
@@ -106,14 +129,20 @@ async def _make_rpc_pair(runtime: BoxRuntime):
     client_conn = _QueueConnection(rx=s2c, tx=c2s)
     server_conn = _QueueConnection(rx=c2s, tx=s2c)
 
-    server_handler = BoxServerHandler(server_conn, runtime)
+    server_handler = BoxServerHandler(
+        server_conn,
+        runtime,
+        host_control_authenticated=True,
+        trusted_instance_uuid=_ACTION_CONTEXT.instance_uuid,
+        generation_fence=BoxGenerationFence(),
+    )
     server_task = asyncio.create_task(server_handler.run())
 
     client_handler = Handler.__new__(Handler)
     Handler.__init__(client_handler, client_conn)
     client_task = asyncio.create_task(client_handler.run())
 
-    client = ActionRPCBoxClient(logger=_logger)
+    client = _TenantBoxClient(logger=_logger)
     client.set_handler(client_handler)
 
     return client, server_task, client_task
@@ -294,6 +323,16 @@ async def test_full_service_to_remote_runtime(tmp_path):
 
         mock_ap = SimpleNamespace(
             logger=_logger,
+            workspace_service=SimpleNamespace(
+                instance_uuid=_ACTION_CONTEXT.instance_uuid,
+                get_execution_binding=AsyncMock(
+                    return_value=SimpleNamespace(
+                        instance_uuid=_ACTION_CONTEXT.instance_uuid,
+                        workspace_uuid=_ACTION_CONTEXT.workspace_uuid,
+                        placement_generation=_ACTION_CONTEXT.placement_generation,
+                    )
+                ),
+            ),
             instance_config=SimpleNamespace(
                 data={
                     'box': {
@@ -313,7 +352,12 @@ async def test_full_service_to_remote_runtime(tmp_path):
         service = BoxService(mock_ap, client=client)
         await service.initialize()
 
-        query = pipeline_query.Query.model_construct(query_id=42)
+        query = pipeline_query.Query.model_construct(
+            query_id=42,
+            instance_uuid=_ACTION_CONTEXT.instance_uuid,
+            workspace_uuid=_ACTION_CONTEXT.workspace_uuid,
+            placement_generation=_ACTION_CONTEXT.placement_generation,
+        )
         result = await service.execute_tool(
             {'command': 'echo service-path'},
             query,