feat(audit): M5.5 per-channel retention overrides via purge-role bounded delete (T3)

tests/ZB.MOM.WW.ScadaBridge.AuditLog.Tests/Central/AuditLogIngestActorTests.cs

@@ -216,6 +216,10 @@ public class AuditLogIngestActorTests : TestKit, IClassFixture<MsSqlMigrationFix
         public Task<long> SwitchOutPartitionAsync(DateTime monthBoundary, CancellationToken ct = default) =>
             _inner.SwitchOutPartitionAsync(monthBoundary, ct);
 
+        public Task<long> PurgeChannelOlderThanAsync(
+            string channel, DateTime threshold, int batchSize, CancellationToken ct = default) =>
+            _inner.PurgeChannelOlderThanAsync(channel, threshold, batchSize, ct);
+
         public Task<IReadOnlyList<DateTime>> GetPartitionBoundariesOlderThanAsync(
             DateTime threshold, CancellationToken ct = default) =>
             _inner.GetPartitionBoundariesOlderThanAsync(threshold, ct);

tests/ZB.MOM.WW.ScadaBridge.AuditLog.Tests/Central/AuditLogPurgeActorTests.cs

@@ -51,6 +51,12 @@ public class AuditLogPurgeActorTests : TestKit, IClassFixture<MsSqlMigrationFixt
         public DateTime? ThrowOnBoundary { get; set; }
         public Exception? BoundaryException { get; set; }
 
+        // M5.5 (T3): records every per-channel purge call as
+        // (channel, threshold, batchSize) so tests can assert which channels the
+        // actor chose to purge and with what window.
+        public List<(string Channel, DateTime Threshold, int BatchSize)> ChannelPurges { get; } = new();
+        public Func<string, long> RowsPerChannel { get; set; } = _ => 0L;
+
         // The actor enumerator returns whichever list is configured here.
         // Mutating this between ticks lets tests simulate "no longer
         // eligible" boundaries on the second tick.
@@ -80,6 +86,13 @@ public class AuditLogPurgeActorTests : TestKit, IClassFixture<MsSqlMigrationFixt
             return Task.FromResult<IReadOnlyList<DateTime>>(Boundaries.ToArray());
         }
 
+        public Task<long> PurgeChannelOlderThanAsync(
+            string channel, DateTime threshold, int batchSize, CancellationToken ct = default)
+        {
+            ChannelPurges.Add((channel, threshold, batchSize));
+            return Task.FromResult(RowsPerChannel(channel));
+        }
+
         public Task<ZB.MOM.WW.ScadaBridge.Commons.Types.AuditLogKpiSnapshot> GetKpiSnapshotAsync(
             TimeSpan window, DateTime? nowUtc = null, CancellationToken ct = default) =>
             Task.FromResult(new ZB.MOM.WW.ScadaBridge.Commons.Types.AuditLogKpiSnapshot(0L, 0L, 0L, nowUtc ?? DateTime.UtcNow));
@@ -381,4 +394,90 @@ public class AuditLogPurgeActorTests : TestKit, IClassFixture<MsSqlMigrationFixt
             Math.Abs((threshold - expected).TotalMinutes) < 1.0,
             $"threshold {threshold:o} should be within 1 minute of {expected:o}");
     }
+
+    // ---------------------------------------------------------------------
+    // 8. PerChannelOverride_ShorterThanGlobal_TriggersChannelPurge (M5.5 T3)
+    // ---------------------------------------------------------------------
+
+    [Fact]
+    public void PerChannelOverride_ShorterThanGlobal_TriggersChannelPurge()
+    {
+        // ApiOutbound has a 30-day override under a 365-day global window — strictly
+        // shorter, so the actor must run a per-channel purge with a threshold of
+        // ~today-30d and the configured batch size.
+        var repo = new RecordingRepo { Boundaries = new List<DateTime>() };
+        var purgeOptions = FastTickOptions();
+        purgeOptions.ChannelPurgeBatchSizeConfigured = 1234;
+
+        // Build the options OUTSIDE the Props expression tree — a collection/dictionary
+        // initializer is not legal inside an expression-tree lambda (CS8074).
+        var auditOptions = Options.Create(new AuditLogOptions
+        {
+            RetentionDays = 365,
+            PerChannelRetentionDays = new Dictionary<string, int> { ["ApiOutbound"] = 30 },
+        });
+        var purgeOptionsWrapped = Options.Create(purgeOptions);
+
+        var sp = BuildScopedProvider(repo);
+        Sys.ActorOf(Props.Create(() => new AuditLogPurgeActor(
+            sp,
+            purgeOptionsWrapped,
+            auditOptions,
+            NullLogger<AuditLogPurgeActor>.Instance)));
+
+        AwaitAssert(
+            () => Assert.Contains(repo.ChannelPurges, p => p.Channel == "ApiOutbound"),
+            duration: TimeSpan.FromSeconds(3),
+            interval: TimeSpan.FromMilliseconds(50));
+
+        var purge = repo.ChannelPurges.First(p => p.Channel == "ApiOutbound");
+        Assert.Equal(1234, purge.BatchSize);
+
+        var expected = DateTime.UtcNow - TimeSpan.FromDays(30);
+        Assert.True(
+            Math.Abs((purge.Threshold - expected).TotalMinutes) < 1.0,
+            $"channel threshold {purge.Threshold:o} should be within 1 minute of {expected:o}");
+    }
+
+    // ---------------------------------------------------------------------
+    // 9. PerChannelOverride_EqualOrLongerThanGlobal_SkipsChannelPurge (M5.5 T3)
+    // ---------------------------------------------------------------------
+
+    [Fact]
+    public void PerChannelOverride_EqualOrLongerThanGlobal_SkipsChannelPurge()
+    {
+        // DbOutbound = 365 (== global) and Notification = 400 (> global, validator would
+        // normally reject this but the actor must defensively skip it too). Neither is
+        // SHORTER than the global window, so the actor must NOT issue a channel purge —
+        // the global partition switch-out already governs those rows.
+        var repo = new RecordingRepo { Boundaries = new List<DateTime>() };
+
+        // Build the options OUTSIDE the Props expression tree (CS8074).
+        var auditOptions = Options.Create(new AuditLogOptions
+        {
+            RetentionDays = 365,
+            PerChannelRetentionDays = new Dictionary<string, int>
+            {
+                ["DbOutbound"] = 365,
+                ["Notification"] = 400,
+            },
+        });
+        var purgeOptions = Options.Create(FastTickOptions());
+
+        var sp = BuildScopedProvider(repo);
+        Sys.ActorOf(Props.Create(() => new AuditLogPurgeActor(
+            sp,
+            purgeOptions,
+            auditOptions,
+            NullLogger<AuditLogPurgeActor>.Instance)));
+
+        // Wait for at least one tick (visible via the enumerator call), then assert no
+        // channel purge was issued.
+        AwaitAssert(
+            () => Assert.True(repo.ThresholdQueries.Count >= 1),
+            duration: TimeSpan.FromSeconds(3),
+            interval: TimeSpan.FromMilliseconds(50));
+
+        Assert.Empty(repo.ChannelPurges);
+    }
 }

tests/ZB.MOM.WW.ScadaBridge.AuditLog.Tests/Central/CentralAuditWriteFailuresTests.cs

@@ -44,6 +44,9 @@ public class CentralAuditWriteFailuresTests : TestKit
             Task.FromResult<IReadOnlyList<AuditEvent>>(Array.Empty<AuditEvent>());
         public Task<long> SwitchOutPartitionAsync(DateTime monthBoundary, CancellationToken ct = default) =>
             Task.FromResult(0L);
+        public Task<long> PurgeChannelOlderThanAsync(
+            string channel, DateTime threshold, int batchSize, CancellationToken ct = default) =>
+            Task.FromResult(0L);
         public Task<IReadOnlyList<DateTime>> GetPartitionBoundariesOlderThanAsync(
             DateTime threshold, CancellationToken ct = default) =>
             Task.FromResult<IReadOnlyList<DateTime>>(Array.Empty<DateTime>());

tests/ZB.MOM.WW.ScadaBridge.AuditLog.Tests/Central/SiteAuditReconciliationActorTests.cs

@@ -89,6 +89,10 @@ public class SiteAuditReconciliationActorTests : TestKit, IClassFixture<MsSqlMig
         public Task<long> SwitchOutPartitionAsync(DateTime monthBoundary, CancellationToken ct = default) =>
             Task.FromResult(0L);
 
+        public Task<long> PurgeChannelOlderThanAsync(
+            string channel, DateTime threshold, int batchSize, CancellationToken ct = default) =>
+            Task.FromResult(0L);
+
         public Task<IReadOnlyList<DateTime>> GetPartitionBoundariesOlderThanAsync(
             DateTime threshold, CancellationToken ct = default) =>
             Task.FromResult<IReadOnlyList<DateTime>>(Array.Empty<DateTime>());