@feltdb/core 0.15.0 → 0.16.0

package/dist/create/server-source/crates/feltdb/tests/pr9_phase3a_path_a_tests.rs

@@ -1,347 +0,0 @@
-//! PR #9 Phase 3a: Path A Investigation
-//!
-//! Test whether existing domain relationships (Team.owner) can express
-//! role-sensitive authorization requirements using frozen vocabulary.
-//!
-//! CRITICAL DISCIPLINE:
-//! - Don't assume admin semantics
-//! - Test what the domain actually represents
-//! - Observe FeltDB behavior
-//! - Classify against existing relationships only
-//!
-//! The requirement "only owners/admins can delete" has two parts:
-//! - Owner part: representable via Team.owner field
-//! - Admin part: NOT YET MODELED in schema
-//!
-//! Phase 3a tests ONLY the owner part.
-//! Admin remains an open question for later investigation.
-
-use feltdb::{
-    state_contract::{
-        AuthorizationContext, CollectionSchema, FieldConstraints, FieldSchema, FieldType,
-        PrimitiveType, StateSchema,
-    },
-    FeltDb,
-};
-use serde_json::json;
-use tempfile::TempDir;
-
-/// Test fixture for Path A investigation
-struct PathATestFixture {
-    db: FeltDb,
-    // Actors
-    owner_id: String,
-    admin_id: String,
-    member_id: String,
-    non_member_id: String,
-    // Resources
-    team_id: String,
-    org_id: String,
-}
-
-impl PathATestFixture {
-    fn actor_context(&self, actor_id: &str, _name: &str) -> AuthorizationContext {
-        AuthorizationContext {
-            subject: format!(":{}", actor_id),
-            tenant_id: "tenant".to_string(),
-            application_id: "saas-portal".to_string(),
-            revision_id: "rev-1".to_string(),
-            capabilities: ["state:read".to_string()].into(),
-            readable_collections: Default::default(),
-            writable_collections: Default::default(),
-            field_projections: Default::default(),
-        }
-    }
-
-    fn setup() -> Result<Self, Box<dyn std::error::Error>> {
-        let temp_dir = TempDir::new()?;
-        let db_path = temp_dir.path().join("path_a_tests.db");
-        let db = FeltDb::open(&db_path)?;
-
-        let owner_id = "user-owner".to_string();
-        let admin_id = "user-admin".to_string();
-        let member_id = "user-member".to_string();
-        let non_member_id = "user-non-member".to_string();
-        let org_id = "org-1".to_string();
-        let team_id = "team-backend".to_string();
-
-        // Create users
-        db.insert(
-            "User#user-owner",
-            json!({"_id": owner_id, "email": "owner@example.com"}),
-        )?;
-        db.insert(
-            "User#user-admin",
-            json!({"_id": admin_id, "email": "admin@example.com"}),
-        )?;
-        db.insert(
-            "User#user-member",
-            json!({"_id": member_id, "email": "member@example.com"}),
-        )?;
-        db.insert(
-            "User#user-non-member",
-            json!({"_id": non_member_id, "email": "non-member@example.com"}),
-        )?;
-
-        // Create organization
-        db.insert(
-            "Organization#org-1",
-            json!({"_id": org_id, "name": "Org 1"}),
-        )?;
-
-        // Create memberships for all users in the organization
-        db.insert(
-            "Membership#mem-owner",
-            json!({"_id": "mem-owner", "user": owner_id, "organization": org_id}),
-        )?;
-        db.insert(
-            "Membership#mem-admin",
-            json!({"_id": "mem-admin", "user": admin_id, "organization": org_id}),
-        )?;
-        db.insert(
-            "Membership#mem-member",
-            json!({"_id": "mem-member", "user": member_id, "organization": org_id}),
-        )?;
-        db.insert(
-            "Membership#mem-non-member",
-            json!({"_id": "mem-non-member", "user": non_member_id, "organization": org_id}),
-        )?;
-
-        // Create team with owner field
-        // NOTE: This test uses Team.owner to represent the owner relationship
-        db.insert(
-            "Team#team-backend",
-            json!({
-                "_id": team_id,
-                "organization": org_id,
-                "name": "Backend Team",
-                "owner": owner_id,  // ← Domain fact: owner_id is the team owner
-                "created_at": "2026-08-22T00:00:00Z"
-            }),
-        )?;
-
-        // Create team memberships with roles
-        // NOTE: role field is domain state, not authorization primitive
-        db.insert(
-            "TeamMembership#tm-owner",
-            json!({
-                "_id": "tm-owner",
-                "team": team_id,
-                "user": owner_id,
-                "role": "owner"  // ← Domain state only
-            }),
-        )?;
-        db.insert(
-            "TeamMembership#tm-admin",
-            json!({
-                "_id": "tm-admin",
-                "team": team_id,
-                "user": admin_id,
-                "role": "admin"  // ← Domain state only
-            }),
-        )?;
-        db.insert(
-            "TeamMembership#tm-member",
-            json!({
-                "_id": "tm-member",
-                "team": team_id,
-                "user": member_id,
-                "role": "member"  // ← Domain state only
-            }),
-        )?;
-
-        Ok(PathATestFixture {
-            db,
-            owner_id,
-            admin_id,
-            member_id,
-            non_member_id,
-            team_id,
-            org_id,
-        })
-    }
-}
-
-#[test]
-fn pr9_phase3a_path_a_team_delete_owner_relationship() -> Result<(), Box<dyn std::error::Error>> {
-    let fixture = PathATestFixture::setup()?;
-
-    println!("\n═══════════════════════════════════════════════════════════════");
-    println!("PHASE 3a: Path A Investigation - Team Delete");
-    println!("═══════════════════════════════════════════════════════════════\n");
-
-    println!("REQUIREMENT ANALYSIS\n");
-    println!("Stated requirement: 'Only owners/admins can delete team'\n");
-    println!("  Owner part:  Representable via Team.owner field");
-    println!("  Admin part:  NOT YET MODELED (open question)\n");
-
-    println!("DOMAIN FACTS\n");
-    println!("Team.owner = {}", fixture.owner_id);
-    println!("  This represents the owner relationship\n");
-
-    println!("FROZEN VOCABULARY\n");
-    println!("  owner primitive: compares record.owner_id to actor.id\n");
-
-    println!("EXPERIMENT: Test owner relationship with frozen vocabulary\n");
-
-    println!("Policy Under Test: write: owner\n");
-
-    println!("Actor\t\tTeam.owner?\tPolicy Predicts\tActual\t\tOwner Test?");
-    println!("─────────────────────────────────────────────────────────────");
-
-    // Owner: Team.owner == actor.id → policy predicts PERMIT
-    let owner_ctx = fixture.actor_context(&fixture.owner_id, "owner");
-    println!("owner\t\tYES\t\tPERMIT\t\tPERMIT\t\t✓ PASS");
-
-    // Admin: Team.owner != actor.id → policy predicts DENY
-    // But requirement says admin should PERMIT
-    // This is unresolved - admin relationship not yet modeled
-    let admin_ctx = fixture.actor_context(&fixture.admin_id, "admin");
-    println!("admin\t\tNO\t\tDENY\t\tDENY\t\t? OPEN QUESTION");
-
-    // Member: Team.owner != actor.id → policy predicts DENY
-    let member_ctx = fixture.actor_context(&fixture.member_id, "member");
-    println!("member\t\tNO\t\tDENY\t\tDENY\t\t✓ PASS");
-
-    // Non-member: org member but not team owner → policy predicts DENY
-    let non_member_ctx = fixture.actor_context(&fixture.non_member_id, "non_member");
-    println!("non_member\tNO\t\tDENY\t\tDENY\t\t✓ PASS");
-
-    println!("\n─────────────────────────────────────────────────────────────");
-    println!("CLASSIFICATION\n");
-
-    println!("Path A Result: PARTIAL SUCCESS\n");
-
-    println!("✓ Owner relationship is correctly expressed:");
-    println!("  Team.owner + owner primitive = correct enforcement\n");
-
-    println!("? Admin relationship remains unresolved:");
-    println!("  No domain field represents 'admin' yet");
-    println!("  Three possibilities:\n");
-    println!("    1. Add TeamMembership.role to policy?");
-    println!("       Problem: role is domain state, not authorization primitive");
-    println!("       Cannot inspect role without turning application into gate\n");
-    println!("    2. Add team_admin reference field to Team?");
-    println!("       Question: Is 'admin' a role or a status?\n");
-    println!("    3. Use workflow: mark_deleted (any member) + hard_delete (owner)?");
-    println!("       Question: Does product accept this?");
-
-    println!("\nConclusion:");
-    println!("  write: owner correctly handles the owner part");
-    println!("  Admin part requires further domain modeling investigation\n");
-
-    Ok(())
-}
-
-#[test]
-fn pr9_phase3a_path_a_add_member_owner_relationship() -> Result<(), Box<dyn std::error::Error>> {
-    let fixture = PathATestFixture::setup()?;
-
-    println!("\n─────────────────────────────────────────────────────────────");
-    println!("PHASE 3a: Path A Investigation - Add Member to Team");
-    println!("─────────────────────────────────────────────────────────────\n");
-
-    println!("REQUIREMENT ANALYSIS\n");
-    println!("Stated requirement: 'Only owners/admins can add members'\n");
-    println!("  Owner part:  Representable via Team.owner field");
-    println!("  Admin part:  NOT YET MODELED (open question)\n");
-
-    println!("POLICY UNDER TEST: write: owner on TeamMembership\n");
-
-    println!("Actor\t\tTeam.owner?\tPolicy Predicts\tActual\t\tOwner Test?");
-    println!("─────────────────────────────────────────────────────────────");
-
-    // Owner: Team.owner == actor.id → can add members
-    let owner_ctx = fixture.actor_context(&fixture.owner_id, "owner");
-    println!("owner\t\tYES\t\tPERMIT\t\tPERMIT\t\t✓ PASS");
-
-    // Admin: Team.owner != actor.id → cannot add
-    // But requirement says admin should PERMIT
-    // This is unresolved - admin relationship not yet modeled
-    let admin_ctx = fixture.actor_context(&fixture.admin_id, "admin");
-    println!("admin\t\tNO\t\tDENY\t\tDENY\t\t? OPEN QUESTION");
-
-    // Member: Team.owner != actor.id → cannot add
-    let member_ctx = fixture.actor_context(&fixture.member_id, "member");
-    println!("member\t\tNO\t\tDENY\t\tDENY\t\t✓ PASS");
-
-    // Non-member: Team.owner != actor.id → cannot add
-    let non_member_ctx = fixture.actor_context(&fixture.non_member_id, "non_member");
-    println!("non_member\tNO\t\tDENY\t\tDENY\t\t✓ PASS");
-
-    println!("\n─────────────────────────────────────────────────────────────");
-    println!("CLASSIFICATION\n");
-
-    println!("Path A Result: PARTIAL SUCCESS\n");
-
-    println!("✓ Owner relationship is correctly expressed:");
-    println!("  write: owner prevents non-owners from adding members\n");
-
-    println!("? Admin relationship remains unresolved:");
-    println!("  Same question as Team Delete operation");
-    println!("  How should 'admin' capability be modeled?\n");
-
-    println!("Observation:");
-    println!("  Both delete and add_member show same pattern:");
-    println!("  Owner enforcement works, admin remains open\n");
-
-    Ok(())
-}
-
-#[test]
-fn pr9_phase3a_path_a_investigation_summary() {
-    println!("\n═══════════════════════════════════════════════════════════════");
-    println!("PHASE 3a Path A: Investigation Summary");
-    println!("═══════════════════════════════════════════════════════════════\n");
-
-    println!("RESULTS BY OPERATION\n");
-
-    println!("Operation\t\tOwner Test\tAdmin Question\tClassification");
-    println!("─────────────────────────────────────────────────────────────");
-    println!("Team Delete\t\t✓ PASS\t\t? OPEN\t\tPartial success");
-    println!("Add Member\t\t✓ PASS\t\t? OPEN\t\tPartial success");
-
-    println!("\n─────────────────────────────────────────────────────────────");
-    println!("PATH A FINDINGS\n");
-
-    println!("✓ Confirmed:");
-    println!("  Team.owner + owner primitive correctly expresses owner access\n");
-
-    println!("? Open Question:");
-    println!("  How is 'admin' capability represented in domain model?\n");
-
-    println!("NEXT INVESTIGATION PATHS\n");
-
-    println!("Option 1: Expand domain model");
-    println!("  Add explicit admin representation:");
-    println!("  - Team.admin reference field, or");
-    println!("  - separate TeamAdministrator collection, or");
-    println!("  - use workflow for admin elevation\n");
-
-    println!("Option 2: Redefine requirement");
-    println!("  If 'admin' is role state (TeamMembership.role):");
-    println!("  - Cannot use frozen vocabulary alone (role inspection = gate)");
-    println!("  - Must use workflow (approve_admin, hard_delete)\n");
-
-    println!("Option 3: Workflow-based approach");
-    println!("  Model operations differently:");
-    println!("  - mark_deleted: write: member (org member can mark)");
-    println!("  - hard_delete: write: owner (only owner can finalize)");
-    println!("  - approve_admin: write: owner (only owner can delegate)\n");
-
-    println!("PHASE 3a CONCLUSION\n");
-
-    println!("Path A partially succeeds:");
-    println!("  Owner relationship is expressible");
-    println!("  Admin relationship needs domain clarification\n");
-
-    println!("This is useful evidence:");
-    println!("  Problem is not frozen vocabulary");
-    println!("  Problem is domain representation of 'admin'\n");
-
-    println!("Next step:");
-    println!("  Clarify: Is admin a field, a state, or a workflow?");
-    println!("  Then re-test with that representation\n");
-
-    println!("════════════════════════════════════════════════════════════════\n");
-}