feat(tenancy): implement workspace isolation

tests/unit_tests/box/test_workspace.py

@@ -7,6 +7,7 @@ from unittest.mock import AsyncMock, Mock
 
 import pytest
 
+from langbot.pkg.api.http.context import ExecutionContext
 from langbot.pkg.box.workspace import (
     BoxWorkspaceSession,
     classify_python_workspace,
@@ -16,6 +17,13 @@ from langbot.pkg.box.workspace import (
 )
 
 
+_CONTEXT = ExecutionContext(
+    instance_uuid='instance-a',
+    workspace_uuid='workspace-a',
+    placement_generation=1,
+)
+
+
 def test_rewrite_mounted_path_translates_host_prefix():
     result = rewrite_mounted_path('/tmp/demo/project/app.py', '/tmp/demo/project')
     assert result == '/workspace/app.py'
@@ -66,6 +74,7 @@ async def test_workspace_session_execute_for_query_uses_session_payload():
     box_service = SimpleNamespace(execute_spec_payload=AsyncMock(return_value={'ok': True}))
     workspace = BoxWorkspaceSession(
         box_service,
+        _CONTEXT,
         'skill-person_123-demo',
         host_path='/tmp/project',
         host_path_mode='rw',
@@ -94,6 +103,7 @@ async def test_workspace_session_start_managed_process_rewrites_command_and_args
     box_service = SimpleNamespace(start_managed_process=AsyncMock(return_value={'status': 'running'}))
     workspace = BoxWorkspaceSession(
         box_service,
+        _CONTEXT,
         'mcp-u1',
         host_path='/tmp/project',
         host_path_mode='ro',
@@ -106,8 +116,10 @@ async def test_workspace_session_start_managed_process_rewrites_command_and_args
     )
 
     assert result == {'status': 'running'}
-    session_id = box_service.start_managed_process.await_args.args[0]
-    payload = box_service.start_managed_process.await_args.args[1]
+    execution_context = box_service.start_managed_process.await_args.args[0]
+    session_id = box_service.start_managed_process.await_args.args[1]
+    payload = box_service.start_managed_process.await_args.args[2]
+    assert execution_context == _CONTEXT
     assert session_id == 'mcp-u1'
     assert payload == {
         'command': 'python',
@@ -118,9 +130,39 @@ async def test_workspace_session_start_managed_process_rewrites_command_and_args
     }
 
 
+@pytest.mark.asyncio
+async def test_workspace_session_relay_connection_keeps_execution_context():
+    box_service = SimpleNamespace(
+        get_managed_process_websocket_connection=AsyncMock(
+            return_value=(
+                'ws://box/relay',
+                {'X-LangBot-Placement-Generation': '1'},
+            )
+        )
+    )
+    workspace = BoxWorkspaceSession(
+        box_service,
+        _CONTEXT,
+        'mcp-shared',
+    )
+
+    connection = await workspace.get_managed_process_websocket_connection('server-a')
+
+    assert connection == (
+        'ws://box/relay',
+        {'X-LangBot-Placement-Generation': '1'},
+    )
+    box_service.get_managed_process_websocket_connection.assert_awaited_once_with(
+        _CONTEXT,
+        'mcp-shared',
+        'server-a',
+    )
+
+
 def test_workspace_session_build_session_payload_keeps_generic_workspace_shape():
     workspace = BoxWorkspaceSession(
         Mock(),
+        _CONTEXT,
         'workspace-1',
         host_path='/tmp/project',
         host_path_mode='rw',