[TEST] Encina.Audit.Marten integration tests — real Marten store end-to-end

[dlrivada]

Test Category

• Unit Tests
• Integration Tests (Docker/Testcontainers)
• Property-Based Tests (FsCheck)
• Contract Tests
• Guard Clause Tests
• Load Tests (NBomber)
• Benchmark Tests (BenchmarkDotNet)
• Coverage Gap (below 85% target)

Description

Encina.Audit.Marten currently has no integration tests — the folder tests/Encina.IntegrationTests/AuditMarten/ does not exist. This gap allowed #949 (IServiceProvider rejected by JasperFx projection validator) to ship undetected: every unit test bypassed Marten's projection graph, so ConfigureMartenAuditProjections.Configure(StoreOptions) was never actually invoked end-to-end in CI.

The fix for #949 added a unit test (Configure_ValidOptions_RegistersAuditProjections) that exercises the StoreOptions.Projections.Add(...) path on a plain StoreOptions instance, which is sufficient to regression-lock the InvalidProjectionException. However, the full async projection daemon, temporal key lookup via IDocumentOperations, and crypto-shredding lifecycle have never been exercised against a real PostgreSQL-backed Marten store.

This issue tracks building that integration coverage.

Packages / Providers Affected

• Package(s): Encina.Audit.Marten
• Provider(s): Marten (PostgreSQL)

Current Coverage

Package	Test Types Present	Missing
Encina.Audit.Marten	Unit (124), Guard (83)	Integration (0)

Per CLAUDE.md database test policy: "For database-related milestones, DO NOT create .md justification files for IntegrationTests — create real IntegrationTests using Docker/Testcontainers. The whole point of database features is to interact with real databases."

Infrastructure Required

• Docker / Testcontainers
• Real database — PostgreSQL (via existing postgres:17-alpine service in docker-compose.yml)
• Message broker
• NBomber load testing framework
• BenchmarkDotNet
• None (pure unit tests)

A MartenAuditFixture needs to be created following the same pattern as EFCorePostgreSqlFixture: a collection fixture that boots Marten against the shared PostgreSQL container and runs ClearAllDataAsync() between tests (dropping the mt_doc_audit_entry_read_model, mt_doc_read_audit_entry_read_model, mt_doc_temporal_key_document, mt_doc_temporal_key_destroyed_marker, and mt_events tables).

Test Plan

Tests to Implement

Store registration & boot

• AddEncinaAuditMarten_BootsMartenStore_WithoutThrowing — regression test for [BUG] Marten audit projections unregisterable: IServiceProvider parameter rejected by JasperFx validation #949 against a real store (not just StoreOptions)
• AddEncinaAuditMarten_WithCustomShreddedPlaceholder_RegistersProjections
• AddEncinaAuditMarten_WithAddHealthCheckTrue_RegistersHealthCheck
• AddEncinaAuditMarten_WithEnableAutoPurgeTrue_RegistersHostedService

Write path (MartenAuditStore)

• AddAsync_PersistsEncryptedEntry_AndAppendsAuditEntryRecordedEvent
• AddAsync_MultipleEntries_SameTemporalPeriod_ReuseSameKey
• AddAsync_EntriesInDifferentPeriods_CreateSeparateKeys

Read path (MartenReadAuditStore)

• AddReadAsync_PersistsEncryptedReadEntry

Async projection daemon (AuditEntryProjection.Create)

• DaemonRebuild_ProjectsAllEventsIntoAuditEntryReadModel_WithDecryptedPii — starts the async daemon, waits for high-water-mark catch-up, then asserts the AuditEntryReadModel documents match the events with decrypted PII fields
• DaemonRebuild_WithDestroyedTemporalKey_ProjectsShreddedPlaceholder — creates events, destroys the key via DestroyKeysBeforeAsync, rebuilds projection, asserts IsShredded == true and UserId == \"[SHREDDED]\"
• DaemonRebuild_WithCustomPlaceholder_ProjectsCustomPlaceholder — verifies MartenAuditOptions.ShreddedPlaceholder is wired through the projection constructor

Read audit projection (ReadAuditEntryProjection.Create)

• DaemonRebuild_ProjectsAllReadEvents_WithDecryptedPii
• DaemonRebuild_ReadEvent_WithDestroyedKey_ProjectsShreddedPlaceholder

Temporal key lifecycle

• DestroyKeysBeforeAsync_RemovesKeyDocuments_AndStoresDestroyedMarker
• DestroyKeysBeforeAsync_IdempotentForAlreadyDestroyedPeriods
• GetOrCreateKeyAsync_AfterDestruction_ReturnsKeyNotFoundError

Retention service (MartenAuditRetentionService)

• MartenAuditRetentionService_CrossesRetentionBoundary_DestroysExpiredKeys

Success Criteria

• All new tests pass
• Encina.Audit.Marten reaches ≥85% line coverage on the integration flag
• Regression-locks [BUG] Marten audit projections unregisterable: IServiceProvider parameter rejected by JasperFx validation #949: Configure_ValidOptions_RegistersProjectionsAndIndexes runs against a booted Marten store
• No flaky tests introduced (container startup contention should use the existing PostgreSqlFixture collection pattern)
• Tests run within acceptable time limits (target: <60s for the full AuditMarten integration class under parallel execution)

Collection Fixture (Integration Tests Only)

• Collection: Marten-AuditMarten (new — per-package collection since Marten audit has its own document schema)
• Fixture: MartenAuditFixture (new) — reuses the existing shared PostgreSQL container via the postgres docker-compose service, but scopes the Marten document store to a dedicated schema (encina_audit_test) to avoid collisions with other Marten integration tests

Alternatively, this could use the EFCorePostgreSqlFixture connection string with a unique DatabaseSchemaName — evaluate which approach minimizes containers during implementation.

Related Issues

• [BUG] Marten audit projections unregisterable: IServiceProvider parameter rejected by JasperFx validation #949 — [BUG] Marten audit projections unregisterable (the regression this suite would have caught)
• [BUG] Marten AggregateStreamAsync does not set AggregateBase.Version, causing SaveAsync concurrency failures #801 — [BUG] Marten AggregateStreamAsync doesn't set Version (adjacent integration gap in Encina.Marten)
• [FEATURE] Add Encina.Audit.Marten — event-sourced IAuditStore with temporal crypto-shredding for compliance-grade audit trails #800 — [FEATURE] Add Encina.Audit.Marten (original feature that shipped without integration tests)
• [EPIC] v0.13.4 — Critical Bugs & Quality Debt #871 — [EPIC] v0.13.4 — Critical Bugs & Quality Debt

Dependencies

• Depends on: [BUG] Marten audit projections unregisterable: IServiceProvider parameter rejected by JasperFx validation #949 being merged (otherwise the projection registration tests fail immediately)
• Blocks: none — this is a regression-lock, not a feature gate