IAM tech spec: Auth and access management current state and proposed

changes.

Workspace support:
- Support for separate workspaces
- Addition of workspace CLI support for test purposes
- Massive test update
- Remove many 'user' references in services - workspace now provides
  the same separation
- Update API

tests/unit/test_knowledge_graph/conftest.py

@@ -29,10 +29,9 @@ class Triple:
         self.o = o
 
 class Metadata:
-    def __init__(self, id, user, collection, root=""):
+    def __init__(self, id, collection, root=""):
         self.id = id
         self.root = root
-        self.user = user
         self.collection = collection
 
 class Triples:
@@ -108,7 +107,6 @@ def sample_triples(sample_triple):
     """Sample Triples batch object"""
     metadata = Metadata(
         id="test-doc-123",
-        user="test_user",
         collection="test_collection",
     )
     
@@ -123,7 +121,6 @@ def sample_chunk():
     """Sample text chunk for processing"""
     metadata = Metadata(
         id="test-chunk-456",
-        user="test_user",
         collection="test_collection",
     )
     

tests/unit/test_knowledge_graph/test_agent_extraction.py

@@ -322,7 +322,6 @@ This is not JSON at all
         assert isinstance(sent_triples, Triples)
         # Check metadata fields individually since implementation creates new Metadata object
         assert sent_triples.metadata.id == sample_metadata.id
-        assert sent_triples.metadata.user == sample_metadata.user
         assert sent_triples.metadata.collection == sample_metadata.collection
         assert len(sent_triples.triples) == 1
         assert sent_triples.triples[0].s.iri == "test:subject"
@@ -346,7 +345,6 @@ This is not JSON at all
         assert isinstance(sent_contexts, EntityContexts)
         # Check metadata fields individually since implementation creates new Metadata object
         assert sent_contexts.metadata.id == sample_metadata.id
-        assert sent_contexts.metadata.user == sample_metadata.user
         assert sent_contexts.metadata.collection == sample_metadata.collection
         assert len(sent_contexts.entities) == 1
         assert sent_contexts.entities[0].entity.iri == "test:entity"

tests/unit/test_knowledge_graph/test_object_extraction_logic.py

@@ -311,8 +311,7 @@ class TestObjectExtractionBusinessLogic:
         """Test ExtractedObject creation and properties"""
         # Arrange
         metadata = Metadata(
-            id="test-extraction-001",
-            user="test_user", 
+            id="test-extraction-001", 
             collection="test_collection",
         )
         
@@ -337,7 +336,6 @@ class TestObjectExtractionBusinessLogic:
         assert extracted_obj.values[0]["customer_id"] == "CUST001"
         assert extracted_obj.confidence == 0.95
         assert "John Doe" in extracted_obj.source_span
-        assert extracted_obj.metadata.user == "test_user"
 
     def test_config_parsing_error_handling(self):
         """Test configuration parsing with invalid JSON"""

tests/unit/test_knowledge_graph/test_triple_construction.py

@@ -371,7 +371,6 @@ class TestTripleConstructionLogic:
 
         metadata = Metadata(
             id="test-doc-123",
-            user="test_user",
             collection="test_collection",
         )
 
@@ -384,7 +383,6 @@ class TestTripleConstructionLogic:
         # Assert
         assert isinstance(triples_batch, Triples)
         assert triples_batch.metadata.id == "test-doc-123"
-        assert triples_batch.metadata.user == "test_user"
         assert triples_batch.metadata.collection == "test_collection"
         assert len(triples_batch.triples) == 2