refactor(db): extract reminder delivery store - #6787
Closed
TheSentinel454 wants to merge 1 commit into
Closed
Conversation
TheSentinel454
force-pushed
the
codex/issue-13-reminder-store
branch
from
August 25, 2026 20:06
52b7bb6 to
35f3b66
Compare
TheSentinel454
force-pushed
the
codex/issue-13-reminder-store
branch
from
August 25, 2026 20:59
35f3b66 to
888627a
Compare
TheSentinel454
force-pushed
the
codex/issue-13-reminder-store
branch
2 times, most recently
from
August 26, 2026 15:53
1da846c to
9ca2f89
Compare
TheSentinel454
force-pushed
the
codex/issue-13-reminder-store
branch
from
August 27, 2026 20:07
9ca2f89 to
2be81ca
Compare
Signed-off-by: OpenAI Codex <codex@openai.com>
TheSentinel454
force-pushed
the
codex/issue-13-reminder-store
branch
from
August 28, 2026 14:55
2be81ca to
1b732ef
Compare
Contributor
Author
TheSentinel454
added a commit
that referenced
this pull request
Aug 28, 2026
## Summary Finish the remaining database-store extraction tracked by [TheSentinel454#2](TheSentinel454#2) in one reviewable PR. This consolidates the previously stacked domain slices after #6782 merged. It preserves the runtime/store boundary established by #6660, #6668, #6700, and #6782 while separating database runtime infrastructure from domain-owned persistence: - `runtime/` owns pool construction and sizing, writer/reader routing, read sessions and route proofs, transaction infrastructure, observability primitives, replica fencing, health support, migrations, and cross-cutting runtime tests. - `store/` owns domain records, SQL, row parsing, locks and invariants, `Db` domain methods, focused tests, and logical-operation datastore spans. - `lib.rs` remains a 57-line compatibility facade that preserves existing crate-root paths and `Db` method signatures through re-exports. Domain coverage includes API tokens, authentication allowlists, reminders, event queries, threads, reactions, feeds, users and DMs, push, workflows/runs/approvals, relay membership and invites, product feedback, moderation/admin moderation, relay admin actions/operators, git repositories, archived identities, usage, partition maintenance, deletion, channel membership inherited from merged #6782, and the final runtime/store layout. The branch has been rebased onto current `main`. Database changes that landed there were incorporated rather than overwritten: `relay_admin_actions.rs` and `relay_operators.rs` now live under `store/`, their 27 public `Db` wrappers and existing behavior remain intact, and every wrapper has exactly one fixed-name datastore span. Concurrent changes to migration, moderation, admin moderation, and error handling are also retained. ### Exact base and head - Base: `main` at `ed11c8d8bf0a17402be5cf243724f89471530d2f` - Head: `codex/issue-2-store-extraction` at `be24430472d1a87ac5c0d6026c620cd6caea3537` ### Related issue - Structural tracker: [TheSentinel454#2](TheSentinel454#2) - Domain trackers: [#6](TheSentinel454#6), [#7](TheSentinel454#7), [#12](TheSentinel454#12), [#13](TheSentinel454#13) - Acceptance trackers: [#17](TheSentinel454#17), [#19](TheSentinel454#19) This supersedes #6783, #6784, #6787, #6788, #6789, #6792, #6820, #6794, #6796, #6797, #6798, #6799, #6804, #6805, #6806, #6808, #6809, #6811, #6812, #6813, #6814, #6815, and #6890. Their discussions remain available for review history. ### #17 / #19 acceptance - Preserves the metric names, fixed labels, transaction/lock timing boundaries, and privacy/cardinality constraints introduced by #6700. - Keeps exactly one datastore span per public logical operation, including the 27 relay-admin wrappers added on `main`. - Removes `store_ownership.rs`; physical ownership and focused source guards now enforce the boundary directly. - Leaves no `impl Db`, domain SQL, focused domain test group, or datastore span in `lib.rs`. - Preserves existing public paths such as `buzz_db::channel`, `buzz_db::event`, and `buzz_db::workflow` through crate-root re-exports while keeping internal `runtime` and `store` namespaces private. ### Non-goals - No SQL, schema, locking, transaction, retry, timeout, or client-visible behavior changes. - No generic store traits, domain handles, broad `PgExecutor` migration, new store crate, raw pool accessor, or broader directory reorganization. - No tracker issues are closed by this PR. ### Risk The cumulative diff is large but structural. Risk is primarily module-path, ownership, or conflict-resolution drift. It is mitigated by preserving public re-exports, comparing the newly moved `main` implementations to their upstream source, source guards, touched-crate compilation, PostgreSQL-backed test coverage, and an independent exact-head review on a separate clean Blox workstation. ### Testing Author workstation `buzz-tornquist-pr-6987-rebase`, rebased branch ending at exact head `be24430472d1a87ac5c0d6026c620cd6caea3537`: - `cargo fmt --all --check` - `cargo clippy -p buzz-db -p buzz-relay --all-targets -- -D warnings` - `cargo test -p buzz-db --lib` — 113 passed, 240 PostgreSQL tests intentionally ignored - `cargo test -p buzz-db --test observability_source` — 2 passed - PostgreSQL-backed `buzz-db` coverage under native PostgreSQL — 235 passed in the shared serial run; the five shared-state/config-sensitive cases passed as isolated reruns against fresh schemas, including the two owner-limit tests with their fixture's `BUZZ_MAX_COMMUNITIES_PER_OWNER=3` - `cargo test -p buzz-relay --lib -- --test-threads=1` under native PostgreSQL/Redis — 991 passed; the three current-month partition-sensitive identity-archive cases passed after provisioning the August 2026 test partition; 87 infrastructure-marked tests remained ignored - Source/diff guards — relay-admin implementation bodies match current `main`; all 27 public wrapper signatures are retained; exactly one datastore span wraps each wrapper; `lib.rs` has zero `impl Db` blocks and zero datastore spans; no duplicate top-level relay-admin modules or `store_ownership.rs`; `error.rs` matches current `main` Independent clean review workstation `buzz-tornquist-pr-6987-review`, detached at exact head `be24430472d1a87ac5c0d6026c620cd6caea3537`: - `cargo fmt --all --check` - `cargo clippy -p buzz-db -p buzz-relay --all-targets -- -D warnings` - `cargo test -p buzz-db --lib` — 113 passed, 240 ignored - `cargo test -p buzz-db --test observability_source` — 2 passed - Exact-head ownership/re-export/instrumentation audit — no remaining actionable findings --------- Signed-off-by: OpenAI Codex <codex@openai.com> Signed-off-by: tornquist <tornquist@squareup.com> Co-authored-by: OpenAI Codex <codex@openai.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Current reconstructed head
Exact base:
codex/issue-12-allowlist-storeat7ae63f6be2f3f1265b976f37756f3ca0caaffa59Exact head:
codex/issue-13-reminder-storeat9ca2f893f7c23d972cb90c163672b2e5bbbf5e1bThis current head removes
crates/buzz-db/tests/store_ownership.rs; no replacement path-sensitive ownership test is introduced. Apart from removing that complete test-file diff, the production patch is byte-for-byte identical to the previously reviewed slice. This remains part of tracker #2 and the #17/#19 acceptance work.Independent exact-head review from a separate clean Blox workstation found no issues. Current-head evidence passed formatting, strict
buzz-dbclippy, 111 non-PostgreSQL library tests with 200 PostgreSQL tests ignored, the observability source test, relay consumer compilation, exact ownership/unique-span review checks, and 4 reminder PostgreSQL tests on native PostgreSQL where applicable.Why
Complete the reminder-delivery slice of tracker #2 and domain issue #13 while keeping event insertion/materialization separate from reminder scheduling. This child stacks on the authentication-allowlist extraction in #6784.
What
reminder.rsowner forDueReminder, due-reminder querying, atomic claim/claim-with-stamp/release SQL,Dbmethods, focused PostgreSQL tests, and datastore spansDbsignatures andbuzz_db::event::{DueReminder, query_due_reminders, claim_due_reminder, claim_due_reminder_with_stamp, release_due_reminder}paths with compatibility re-exportsDueReminderexportextract_not_beforeand its four parser tests inevent.rs, beside general event insertion materializationStack
Non-goals
not_beforematerialization out ofevent.rsPgExecutormigration, raw pool accessor, new crate, or directory-wide reorganizationRisk Assessment
Low. This is a direct ownership move. SQL and bind order are unchanged, public
Dband prioreventmodule paths remain compatible, and the moved PostgreSQL tests cover latest-due tenant identity, cross-pod claim exclusion, matching-stamp release, and cross-community isolation.Blox Verification
Author workstation:
buzz-tornquist-issue-2-store-stack(2046520), exact head52b7bb6cba2a0d09877cc8a1b3a561eb537256da.cargo fmt --all --check— passedcargo clippy -p buzz-db -p buzz-relay --all-targets -- -D warnings— passedDATABASE_URL=postgres://buzz:…@localhost:5432/buzz cargo test -p buzz-db reminder::tests:: -- --ignored --test-threads=1— 4 passedcargo test -p buzz-relay --lib -- --test-threads=1— 909 passed, 48 ignoredgit diff --checkand commit-time formatting, sadscan, attribution, and sign-off hooks — passedIndependent exact-head review:
buzz-tornquist-pr-6787-review(2049679) checked detached head52b7bb6cba2a0d09877cc8a1b3a561eb537256daover exact merge-basef30633fc37d9b44860db5644418e066a917dc113. No critical, important, or minor findings.Generated with Codex
Superseded pre-comment restack verification
PR #6700 merged before publication completed. This layer was restacked onto current main through the exact parent named above; the final cumulative tip is 2ddcc8a. Cumulative author gates passed: formatting and diff checks; buzz-db and buzz-relay all-target clippy with -D warnings; DB lib 111 passed / 200 ignored; ownership 22/22; observability 1/1; the full isolated PostgreSQL domain matrix; and relay lib 910 passed / 49 ignored.
buzz-tornquist-pr-6787-final-review(2057624), fresh shallow checkoutb7347e78843d7b63e3cb383da7cbf5ffc956d4f035f3b66eae412d4aeea1500c9022681966b14a5fReviewed
DueReminder, event-table reminder query/claim/release SQL,Dbwrappers, tests, and spans moving toreminder.rs. Existing event-module function paths and crate-root type paths are re-exported. Claim stamps, cross-community isolation, concurrency semantics, and release predicates remain unchanged. General event insertion andextract_not_beforeremain event-owned, avoiding a reversed dependency.Verification: format and diff checks passed;
buzz-db --all-targetsclippy passed with-D warnings; DB lib tests passed (111 passed, 200 PostgreSQL tests ignored); ownership (5/5) and observability (1/1) guards passed; all 4 reminder PostgreSQL lifecycle/isolation tests passed on native PostgreSQL 17 with migrations 1-32 successful; relay lib test target compiled successfully. Final worktree was detached at the exact head and clean.Complete evidence archive SHA-256:
10e79e8829dc5f0a6adc2dbb6cae565ecbe947d0b328e02073d00173a5fb33c7.Comment-addressed restack
Review follow-up on #6777 removed only the low-value replaceable ownership source test. This PR was restacked onto its rewritten parent; its production patch is unchanged.
fa88a642a7aa10ce74f8cea692653e50b427f89e888627a3d41b72c904d1546fe62492f01bdfdd3e6fa2f104d42c6ba85bdf62e7ccb74ceaf4a84f67buzz-db/buzz-relayClippy; DB lib 111 passed / 200 ignored; ownership 21/21; observability 1/1; every moved PostgreSQL test; relay lib 910 passed / 49 ignored.