Function TestDeleteUserData

internal/identity/user_data_rights_test.go:174–239

TestDeleteUserData verifies the right-of-deletion flow does the full cascade and reports per-table counts. After deletion, the user record must be gone and orphan rows must not exist for any of: domains, agents, messages, api_keys, sessions, usage events/summaries.

(t *testing.T)

// must be gone and orphan rows must not exist for any of: domains,
// agents, messages, api_keys, sessions, usage events/summaries.
func TestDeleteUserData(t *testing.T) {
	pool := testutil.TestDB(t)
	store := identity.NewStore(pool)
	ctx := context.Background()

	user := seedUserData(t, store, ctx, "deleter")

	res, err := store.DeleteUserData(ctx, user.ID)
	if err != nil {
		t.Fatalf("DeleteUserData: %v", err)
	}

	if !res.UserDeleted {
		t.Error("UserDeleted should be true")
	}
	if res.DomainsDeleted != 1 {
		t.Errorf("DomainsDeleted = %d, want 1", res.DomainsDeleted)
	}
	if res.AgentsDeleted != 1 {
		t.Errorf("AgentsDeleted = %d, want 1", res.AgentsDeleted)
	}
	if res.MessagesDeleted != 2 {
		t.Errorf("MessagesDeleted = %d, want 2", res.MessagesDeleted)
	}
	if res.APIKeysDeleted != 2 {
		t.Errorf("APIKeysDeleted = %d, want 2", res.APIKeysDeleted)
	}
	if res.SessionsDeleted != 1 {
		t.Errorf("SessionsDeleted = %d, want 1", res.SessionsDeleted)
	}

	// Verify the user row itself is gone.
	var exists bool
	if err := pool.QueryRow(ctx,
		`SELECT EXISTS(SELECT 1 FROM users WHERE id = $1)`, user.ID,
	).Scan(&exists); err != nil {
		t.Fatalf("post-delete user exists: %v", err)
	}
	if exists {
		t.Error("user row still exists after DeleteUserData")
	}

	// Verify no orphan rows in any user-scoped table. The cascade is in
	// the schema (ON DELETE CASCADE), but a regression that drops a
	// cascade clause would leak rows — checking explicitly catches it.
	checks := []struct {
		name  string
		query string
	}{
		{"domains", `SELECT count(*) FROM domains WHERE user_id = $1`},
		{"agents", `SELECT count(*) FROM agent_identities WHERE user_id = $1`},
		{"api_keys", `SELECT count(*) FROM api_keys WHERE user_id = $1`},
		{"sessions", `SELECT count(*) FROM user_sessions WHERE user_id = $1`},
		{"usage_events", `SELECT count(*) FROM usage_events WHERE user_id = $1`},
		{"usage_summaries", `SELECT count(*) FROM usage_summaries WHERE user_id = $1`},
	}
	for _, c := range checks {
		var n int