[eric] outputs: POST /outputs/create honours the workspace_id its request model advertises; the route dropped it and an API-created app had no workspace

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01C9zwUaHucUgrdxvK8FvjYT

backend/apps/outputs/outputs.py

@@ -671,6 +671,8 @@ async def create_output(body: OutputCreate):
         input_schema=body.input_schema,
         files=body.files,
         thumbnail=body.thumbnail,
+        # The request model has carried this since the workspace era; the route dropped it, so an API caller's app had no workspace and its card said the files were missing.
+        workspace_id=body.workspace_id,
         created_at=now,
         updated_at=now,
     )

backend/tests/test_output_create_workspace.py

@@ -0,0 +1,12 @@
+"""`POST /api/outputs/create` advertises `workspace_id` in its request model and used to drop it on the
+floor: an API caller's app had no workspace, its card said the files were missing, and the Windows
+CI round trip exported an empty app before it ever reached the importer (2026-09-04)."""
+
+import inspect
+
+from backend.apps.outputs import outputs
+
+
+def test_create_carries_the_workspace_id_into_the_record():
+    src = inspect.getsource(outputs.create_output)
+    assert "workspace_id=body.workspace_id" in src