familia 2.0.0.pre5 → 2.0.0.pre7

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: familia
 version: !ruby/object:Gem::Version
-  version: 2.0.0.pre5
+  version: 2.0.0.pre7
 platform: ruby
 authors:
 - Delano Mandelbaum
@@ -121,6 +121,8 @@ extensions: []
 extra_rdoc_files: []
 files:
 - ".github/workflows/ci.yml"
+- ".github/workflows/claude-code-review.yml"
+- ".github/workflows/claude.yml"
 - ".github/workflows/docs.yml"
 - ".gitignore"
 - ".pre-commit-config.yaml"
@@ -132,15 +134,25 @@ files:
 - Gemfile.lock
 - LICENSE.txt
 - README.md
-- TEST_COVERAGE.md
 - bin/irb
 - docs/connection_pooling.md
 - docs/overview.md
 - docs/wiki/API-Reference.md
+- docs/wiki/Connection-Pooling-Guide.md
 - docs/wiki/Encrypted-Fields-Overview.md
+- docs/wiki/Expiration-Feature-Guide.md
+- docs/wiki/Feature-System-Guide.md
+- docs/wiki/Features-System-Developer-Guide.md
+- docs/wiki/Field-System-Guide.md
 - docs/wiki/Home.md
 - docs/wiki/Implementation-Guide.md
+- docs/wiki/Quantization-Feature-Guide.md
+- docs/wiki/Relationships-Guide.md
 - docs/wiki/Security-Model.md
+- docs/wiki/Transient-Fields-Guide.md
+- examples/bit_encoding_integration.rb
+- examples/redis_command_validation_example.rb
+- examples/relationships_basic.rb
 - familia.gemspec
 - lib/familia.rb
 - lib/familia/base.rb
@@ -149,12 +161,15 @@ files:
 - lib/familia/data_type.rb
 - lib/familia/data_type/commands.rb
 - lib/familia/data_type/serialization.rb
+- lib/familia/data_type/types/counter.rb
 - lib/familia/data_type/types/hashkey.rb
 - lib/familia/data_type/types/list.rb
+- lib/familia/data_type/types/lock.rb
 - lib/familia/data_type/types/sorted_set.rb
 - lib/familia/data_type/types/string.rb
 - lib/familia/data_type/types/unsorted_set.rb
 - lib/familia/encryption.rb
+- lib/familia/encryption/encrypted_data.rb
 - lib/familia/encryption/manager.rb
 - lib/familia/encryption/provider.rb
 - lib/familia/encryption/providers/aes_gcm_provider.rb
@@ -165,10 +180,19 @@ files:
 - lib/familia/errors.rb
 - lib/familia/features.rb
 - lib/familia/features/encrypted_fields.rb
+- lib/familia/features/encrypted_fields/concealed_string.rb
 - lib/familia/features/encrypted_fields/encrypted_field_type.rb
 - lib/familia/features/expiration.rb
 - lib/familia/features/quantization.rb
-- lib/familia/features/relatable_objects.rb
+- lib/familia/features/relationships.rb
+- lib/familia/features/relationships/cascading.rb
+- lib/familia/features/relationships/indexing.rb
+- lib/familia/features/relationships/membership.rb
+- lib/familia/features/relationships/permission_management.rb
+- lib/familia/features/relationships/querying.rb
+- lib/familia/features/relationships/redis_operations.rb
+- lib/familia/features/relationships/score_encoding.rb
+- lib/familia/features/relationships/tracking.rb
 - lib/familia/features/safe_dump.rb
 - lib/familia/features/transient_fields.rb
 - lib/familia/features/transient_fields/redacted_string.rb
@@ -176,44 +200,76 @@ files:
 - lib/familia/features/transient_fields/transient_field_type.rb
 - lib/familia/field_type.rb
 - lib/familia/horreum.rb
-- lib/familia/horreum/connection.rb
-- lib/familia/horreum/database_commands.rb
-- lib/familia/horreum/definition_methods.rb
-- lib/familia/horreum/management_methods.rb
-- lib/familia/horreum/related_fields_management.rb
-- lib/familia/horreum/serialization.rb
-- lib/familia/horreum/settings.rb
-- lib/familia/horreum/utils.rb
+- lib/familia/horreum/core.rb
+- lib/familia/horreum/core/connection.rb
+- lib/familia/horreum/core/database_commands.rb
+- lib/familia/horreum/core/serialization.rb
+- lib/familia/horreum/core/utils.rb
+- lib/familia/horreum/shared/settings.rb
+- lib/familia/horreum/subclass/definition.rb
+- lib/familia/horreum/subclass/management.rb
+- lib/familia/horreum/subclass/related_fields_management.rb
 - lib/familia/logging.rb
 - lib/familia/multi_result.rb
 - lib/familia/refinements.rb
 - lib/familia/secure_identifier.rb
 - lib/familia/settings.rb
 - lib/familia/utils.rb
+- lib/familia/validation.rb
+- lib/familia/validation/command_recorder.rb
+- lib/familia/validation/expectations.rb
+- lib/familia/validation/test_helpers.rb
+- lib/familia/validation/validator.rb
 - lib/familia/version.rb
 - lib/middleware/database_middleware.rb
 - try/configuration/scenarios_try.rb
 - try/core/base_enhancements_try.rb
 - try/core/connection_try.rb
+- try/core/create_method_try.rb
+- try/core/database_consistency_try.rb
 - try/core/errors_try.rb
 - try/core/extensions_try.rb
 - try/core/familia_extended_try.rb
 - try/core/familia_try.rb
 - try/core/middleware_try.rb
+- try/core/persistence_operations_try.rb
 - try/core/pools_try.rb
 - try/core/secure_identifier_try.rb
 - try/core/settings_try.rb
 - try/core/tools_try.rb
 - try/core/utils_try.rb
 - try/data_types/boolean_try.rb
+- try/data_types/counter_try.rb
 - try/data_types/datatype_base_try.rb
 - try/data_types/hash_try.rb
 - try/data_types/list_try.rb
+- try/data_types/lock_try.rb
 - try/data_types/set_try.rb
 - try/data_types/sorted_set_try.rb
 - try/data_types/string_try.rb
 - try/debugging/README.md
 - try/debugging/cache_behavior_tracer.rb
+- try/debugging/debug_aad_process.rb
+- try/debugging/debug_concealed_internal.rb
+- try/debugging/debug_concealed_reveal.rb
+- try/debugging/debug_context_aad.rb
+- try/debugging/debug_context_simple.rb
+- try/debugging/debug_cross_context.rb
+- try/debugging/debug_database_load.rb
+- try/debugging/debug_encrypted_json_check.rb
+- try/debugging/debug_encrypted_json_step_by_step.rb
+- try/debugging/debug_exists_lifecycle.rb
+- try/debugging/debug_field_decrypt.rb
+- try/debugging/debug_fresh_cross_context.rb
+- try/debugging/debug_load_path.rb
+- try/debugging/debug_method_definition.rb
+- try/debugging/debug_method_resolution.rb
+- try/debugging/debug_minimal.rb
+- try/debugging/debug_provider.rb
+- try/debugging/debug_secure_behavior.rb
+- try/debugging/debug_string_class.rb
+- try/debugging/debug_test.rb
+- try/debugging/debug_test_design.rb
 - try/debugging/encryption_method_tracer.rb
 - try/debugging/provider_diagnostics.rb
 - try/edge_cases/empty_identifiers_try.rb
@@ -231,11 +287,13 @@ files:
 - try/encryption/providers/xchacha20_poly1305_provider_try.rb
 - try/encryption/roundtrip_validation_try.rb
 - try/encryption/secure_memory_handling_try.rb
+- try/features/categorical_permissions_try.rb
 - try/features/encrypted_fields_core_try.rb
 - try/features/encrypted_fields_integration_try.rb
 - try/features/encrypted_fields_no_cache_security_try.rb
 - try/features/encrypted_fields_security_try.rb
 - try/features/encryption_fields/aad_protection_try.rb
+- try/features/encryption_fields/concealed_string_core_try.rb
 - try/features/encryption_fields/context_isolation_try.rb
 - try/features/encryption_fields/error_conditions_try.rb
 - try/features/encryption_fields/fresh_key_derivation_try.rb
@@ -244,12 +302,19 @@ files:
 - try/features/encryption_fields/memory_security_try.rb
 - try/features/encryption_fields/missing_current_key_version_try.rb
 - try/features/encryption_fields/nonce_uniqueness_try.rb
+- try/features/encryption_fields/secure_by_default_behavior_try.rb
 - try/features/encryption_fields/thread_safety_try.rb
+- try/features/encryption_fields/universal_serialization_safety_try.rb
 - try/features/expiration_try.rb
 - try/features/feature_dependencies_try.rb
 - try/features/quantization_try.rb
 - try/features/real_feature_integration_try.rb
-- try/features/relatable_objects_try.rb
+- try/features/relationships_edge_cases_try.rb
+- try/features/relationships_performance_minimal_try.rb
+- try/features/relationships_performance_simple_try.rb
+- try/features/relationships_performance_try.rb
+- try/features/relationships_performance_working_try.rb
+- try/features/relationships_try.rb
 - try/features/safe_dump_advanced_try.rb
 - try/features/safe_dump_try.rb
 - try/features/transient_fields/redacted_string_try.rb
@@ -296,6 +361,10 @@ files:
 - try/prototypes/pooling/lib/visualize_stress_results.rb
 - try/prototypes/pooling/pool_siege.rb
 - try/prototypes/pooling/run_stress_tests.rb
+- try/validation/atomic_operations_try.rb.disabled
+- try/validation/command_validation_try.rb.disabled
+- try/validation/performance_validation_try.rb.disabled
+- try/validation/real_world_scenarios_try.rb.disabled
 homepage: https://github.com/delano/familia
 licenses:
 - MIT

data/TEST_COVERAGE.md

@@ -1,40 +0,0 @@
-# Encryption Test Coverage
-
-## Summary
-- **149/150 tests passing** (99.3%)
-- **12 test files**, 281ms execution
-- **1 failing test** in integration suite
-
-## Test Distribution
-
-| Category | Files | Tests | Status |
-|----------|-------|-------|---------|
-| Core Encryption | 6 | 77 | ✅ All Pass |
-| Providers | 2 | 39 | ✅ All Pass |
-| Encrypted Fields | 4 | 53 | ⚠️ 1 Failure |
-
-## Key Test Areas
-
-### Security Testing (59 tests)
-- No key caching (22 tests)
-- AAD tampering detection (15 tests)
-- Memory wiping verification (11 tests)
-- Context isolation (11 tests)
-
-### Provider Testing (39 tests)
-- XChaCha20-Poly1305: 19 tests
-- AES-GCM: 20 tests
-- Round-trip encryption/decryption
-- Nonce uniqueness and tampering detection
-
-### Integration Testing (53 tests)
-- Mixed field types with encryption
-- Provider selection and algorithm handling
-- Full model initialization workflows
-
-## Action Items
-- [ ] Fix failing integration test in `encrypted_fields_integration_try.rb:186`
-- [x] All security properties validated
-- [x] Both encryption providers fully tested
-
-## Coverage Assessment: **Production Ready**

data/lib/familia/features/relatable_objects.rb

@@ -1,125 +0,0 @@
-# apps/api/v2/models/features/relatable_object.rb
-
-module V2
-  module Features
-    class RelatableObjectError < Familia::Problem; end
-
-    # RelatableObject
-    #
-    # Provides the standard core object fields and methods.
-    #
-    module RelatableObject
-      def self.included(base)
-        base.class_sorted_set :relatable_objids
-        base.class_hashkey :owners
-
-        # NOTE: we do not automatically assign the objid field as the
-        # main identifier field. That's up to the implementing class.
-        base.field :objid
-        base.field :extid
-        base.field :api_version
-
-        base.extend(ClassMethods)
-
-        # prepend ensures our methods execute BEFORE field-generated accessors
-        # include would place them AFTER, but they'd never execute because
-        # attr_reader doesn't call super - it just returns the instance variable
-        #
-        # Method lookup chain:
-        #   prepend:  [InstanceMethods] → [Field Methods] → [Parent]
-        #   include:  [Field Methods] → [InstanceMethods] → [Parent]
-        #              (stops here, no super)    (never reached)
-        #
-        base.prepend(InstanceMethods)
-      end
-
-      module InstanceMethods
-        # We lazily generate the object ID and external ID when they are first
-        # accessed so that we can instantiate and load existing objects, without
-        # eagerly generating them, only to be overridden by the storage layer.
-        #
-        def init
-          super if defined?(super) # Only call if parent has init
-
-          @api_version ||= 'v2'
-        end
-
-        def objid
-          @objid ||= begin # lazy loader
-            generated_id = self.class.generate_objid
-            # Using the attr_writer method ensures any future Familia
-            # enhancements to the setter are properly invoked (as opposed
-            # to directly assigning @objid).
-            self.objid   = generated_id
-          end
-        end
-        alias relatable_objid objid
-
-        def extid
-          @extid ||= begin # lazy loader
-            generated_id = self.class.generate_extid
-            self.extid   = generated_id
-          end
-        end
-        alias external_identifier extid
-
-        # Check if the given customer is the owner of this domain
-        #
-        # @param cust [V2::Customer, String] The customer object or customer ID to check
-        # @return [Boolean] true if the customer is the owner, false otherwise
-        def owner?(related_object)
-          self.class.relatable?(related_object) do
-            # Check the hash (our objid => related_object's objid)
-            owner_objid = self.class.owners.get(objid).to_s
-            return false if owner_objid.empty?
-
-            owner_objid.eql?(related_object.objid)
-          end
-        end
-
-        def owned?
-          # We can only have an owner if we are relatable ourselves.
-          return false unless is_a?(RelatableObject)
-
-          # If our object identifier is present, we have an owner
-          self.class.owners.key?(objid)
-        end
-      end
-
-      module ClassMethods
-        def relatable?(obj, &)
-          is_relatable = obj.is_a?(RelatableObject)
-          err_klass = V2::Features::RelatableObjectError
-          raise err_klass, 'Not relatable object' unless is_relatable
-          raise err_klass, 'No self-ownership' if obj.class == self
-
-          block_given? ? yield : is_relatable
-        end
-
-        def find_by_objid(objid)
-          return nil if objid.to_s.empty?
-
-          if Familia.debug?
-            reference = caller(1..1).first
-            Familia.trace :FIND_BY_OBJID, Familia.dbclient(uri), objkey, reference
-          end
-
-          find_by_key objkey
-        end
-
-        def generate_objid
-          SecureRandom.uuid_v7
-        end
-
-        # Guaranteed length of 54
-        def generate_extid
-          format('ext_%s', Familia.generate_id)
-        end
-      end
-      extend ClassMethods
-
-      # Self-register the kids for martial arts classes
-      Familia::Base.add_feature self, :relatable_object
-    end
-  end
-end