Skip to content

refactor(db): extract reminder delivery store - #6787

Closed
TheSentinel454 wants to merge 1 commit into
codex/issue-12-allowlist-storefrom
codex/issue-13-reminder-store
Closed

refactor(db): extract reminder delivery store#6787
TheSentinel454 wants to merge 1 commit into
codex/issue-12-allowlist-storefrom
codex/issue-13-reminder-store

Conversation

@TheSentinel454

@TheSentinel454 TheSentinel454 commented Aug 25, 2026

Copy link
Copy Markdown
Contributor

Current reconstructed head

Exact base: codex/issue-12-allowlist-store at 7ae63f6be2f3f1265b976f37756f3ca0caaffa59
Exact head: codex/issue-13-reminder-store at 9ca2f893f7c23d972cb90c163672b2e5bbbf5e1b

This current head removes crates/buzz-db/tests/store_ownership.rs; no replacement path-sensitive ownership test is introduced. Apart from removing that complete test-file diff, the production patch is byte-for-byte identical to the previously reviewed slice. This remains part of tracker #2 and the #17/#19 acceptance work.

Independent exact-head review from a separate clean Blox workstation found no issues. Current-head evidence passed formatting, strict buzz-db clippy, 111 non-PostgreSQL library tests with 200 PostgreSQL tests ignored, the observability source test, relay consumer compilation, exact ownership/unique-span review checks, and 4 reminder PostgreSQL tests on native PostgreSQL where applicable.

Why

Complete the reminder-delivery slice of tracker #2 and domain issue #13 while keeping event insertion/materialization separate from reminder scheduling. This child stacks on the authentication-allowlist extraction in #6784.

What

  • Add a dedicated reminder.rs owner for DueReminder, due-reminder querying, atomic claim/claim-with-stamp/release SQL, Db methods, focused PostgreSQL tests, and datastore spans
  • Preserve the existing Db signatures and buzz_db::event::{DueReminder, query_due_reminders, claim_due_reminder, claim_due_reminder_with_stamp, release_due_reminder} paths with compatibility re-exports
  • Add the canonical crate-root DueReminder export
  • Preserve event-table storage, latest-per-address ordering, archived-community exclusion, claim stamp semantics, and cross-community isolation
  • Keep extract_not_before and its four parser tests in event.rs, beside general event insertion materialization

Stack

Non-goals

  • No SQL, schema, ordering, retry, timeout, transaction, or client-visible behavior changes
  • No movement of event insertion or not_before materialization out of event.rs
  • No reminder scheduler/relay behavior change
  • No store traits, domain-handle redesign, broad PgExecutor migration, raw pool accessor, new crate, or directory-wide reorganization
  • No changes to, retargeting of, or merge action on parent PRs or PR Add database pressure observability #6700

Risk Assessment

Low. This is a direct ownership move. SQL and bind order are unchanged, public Db and prior event module paths remain compatible, and the moved PostgreSQL tests cover latest-due tenant identity, cross-pod claim exclusion, matching-stamp release, and cross-community isolation.

Blox Verification

Author workstation: buzz-tornquist-issue-2-store-stack (2046520), exact head 52b7bb6cba2a0d09877cc8a1b3a561eb537256da.

  • cargo fmt --all --check — passed
  • cargo clippy -p buzz-db -p buzz-relay --all-targets -- -D warnings — passed
  • Native PostgreSQL: DATABASE_URL=postgres://buzz:…@localhost:5432/buzz cargo test -p buzz-db reminder::tests:: -- --ignored --test-threads=1 — 4 passed
  • cargo test -p buzz-relay --lib -- --test-threads=1 — 909 passed, 48 ignored
  • git diff --check and commit-time formatting, sadscan, attribution, and sign-off hooks — passed

Independent exact-head review: buzz-tornquist-pr-6787-review (2049679) checked detached head 52b7bb6cba2a0d09877cc8a1b3a561eb537256da over exact merge-base f30633fc37d9b44860db5644418e066a917dc113. No critical, important, or minor findings.

Generated with Codex

Superseded pre-comment restack verification

PR #6700 merged before publication completed. This layer was restacked onto current main through the exact parent named above; the final cumulative tip is 2ddcc8a. Cumulative author gates passed: formatting and diff checks; buzz-db and buzz-relay all-target clippy with -D warnings; DB lib 111 passed / 200 ignored; ownership 22/22; observability 1/1; the full isolated PostgreSQL domain matrix; and relay lib 910 passed / 49 ignored.

  • Workstation: buzz-tornquist-pr-6787-final-review (2057624), fresh shallow checkout
  • Base: b7347e78843d7b63e3cb383da7cbf5ffc956d4f0
  • Head: 35f3b66eae412d4aeea1500c9022681966b14a5f
  • Findings: none

Reviewed DueReminder, event-table reminder query/claim/release SQL, Db wrappers, tests, and spans moving to reminder.rs. Existing event-module function paths and crate-root type paths are re-exported. Claim stamps, cross-community isolation, concurrency semantics, and release predicates remain unchanged. General event insertion and extract_not_before remain event-owned, avoiding a reversed dependency.

Verification: format and diff checks passed; buzz-db --all-targets clippy passed with -D warnings; DB lib tests passed (111 passed, 200 PostgreSQL tests ignored); ownership (5/5) and observability (1/1) guards passed; all 4 reminder PostgreSQL lifecycle/isolation tests passed on native PostgreSQL 17 with migrations 1-32 successful; relay lib test target compiled successfully. Final worktree was detached at the exact head and clean.

Complete evidence archive SHA-256: 10e79e8829dc5f0a6adc2dbb6cae565ecbe947d0b328e02073d00173a5fb33c7.

Comment-addressed restack

Review follow-up on #6777 removed only the low-value replaceable ownership source test. This PR was restacked onto its rewritten parent; its production patch is unchanged.

  • Exact base: fa88a642a7aa10ce74f8cea692653e50b427f89e
  • Exact head: 888627a3d41b72c904d1546fe62492f01bdfdd3e
  • Final cumulative tip: 6fa2f104d42c6ba85bdf62e7ccb74ceaf4a84f67
  • Per-layer patch-ID and tree audits confirm this PR’s production diff is unchanged from its pre-comment head.
  • Cumulative Blox gate: formatting and diff checks; strict buzz-db/buzz-relay Clippy; DB lib 111 passed / 200 ignored; ownership 21/21; observability 1/1; every moved PostgreSQL test; relay lib 910 passed / 49 ignored.
  • Independent re-review at this exact head: no findings; fresh exact-parent/head Blox review passed fmt/diff, strict Clippy, DB lib 111 passed / 200 ignored, current ownership/observability guards, 4 reminder PostgreSQL tests, and relay compilation.

@TheSentinel454
TheSentinel454 force-pushed the codex/issue-13-reminder-store branch from 52b7bb6 to 35f3b66 Compare August 25, 2026 20:06
@TheSentinel454
TheSentinel454 force-pushed the codex/issue-13-reminder-store branch from 35f3b66 to 888627a Compare August 25, 2026 20:59
@TheSentinel454 TheSentinel454 changed the title db: extract reminder delivery store refactor(db): extract reminder delivery store Aug 26, 2026
@TheSentinel454
TheSentinel454 force-pushed the codex/issue-13-reminder-store branch 2 times, most recently from 1da846c to 9ca2f89 Compare August 26, 2026 15:53
@TheSentinel454
TheSentinel454 force-pushed the codex/issue-13-reminder-store branch from 9ca2f89 to 2be81ca Compare August 27, 2026 20:07
Signed-off-by: OpenAI Codex <codex@openai.com>
@TheSentinel454

Copy link
Copy Markdown
Contributor Author

🤖 Superseded by #6987, which consolidates the remaining issue #2 store-extraction stack onto merged #6782. #6987 is an open draft at the independently reviewed exact head, and all exact-head CI checks are green. This PR remains available for review history; please continue review on #6987.

TheSentinel454 added a commit that referenced this pull request Aug 28, 2026
## Summary

Finish the remaining database-store extraction tracked by
[TheSentinel454#2](TheSentinel454#2)
in one reviewable PR.

This consolidates the previously stacked domain slices after #6782
merged. It preserves the runtime/store boundary established by #6660,
#6668, #6700, and #6782 while separating database runtime infrastructure
from domain-owned persistence:

- `runtime/` owns pool construction and sizing, writer/reader routing,
read sessions and route proofs, transaction infrastructure,
observability primitives, replica fencing, health support, migrations,
and cross-cutting runtime tests.
- `store/` owns domain records, SQL, row parsing, locks and invariants,
`Db` domain methods, focused tests, and logical-operation datastore
spans.
- `lib.rs` remains a 57-line compatibility facade that preserves
existing crate-root paths and `Db` method signatures through re-exports.

Domain coverage includes API tokens, authentication allowlists,
reminders, event queries, threads, reactions, feeds, users and DMs,
push, workflows/runs/approvals, relay membership and invites, product
feedback, moderation/admin moderation, relay admin actions/operators,
git repositories, archived identities, usage, partition maintenance,
deletion, channel membership inherited from merged #6782, and the final
runtime/store layout.

The branch has been rebased onto current `main`. Database changes that
landed there were incorporated rather than overwritten:
`relay_admin_actions.rs` and `relay_operators.rs` now live under
`store/`, their 27 public `Db` wrappers and existing behavior remain
intact, and every wrapper has exactly one fixed-name datastore span.
Concurrent changes to migration, moderation, admin moderation, and error
handling are also retained.

### Exact base and head

- Base: `main` at `ed11c8d8bf0a17402be5cf243724f89471530d2f`
- Head: `codex/issue-2-store-extraction` at
`be24430472d1a87ac5c0d6026c620cd6caea3537`

### Related issue

- Structural tracker:
[TheSentinel454#2](TheSentinel454#2)
- Domain trackers:
[#6](TheSentinel454#6),
[#7](TheSentinel454#7),
[#12](TheSentinel454#12),
[#13](TheSentinel454#13)
- Acceptance trackers:
[#17](TheSentinel454#17),
[#19](TheSentinel454#19)

This supersedes #6783, #6784, #6787, #6788, #6789, #6792, #6820, #6794,
#6796, #6797, #6798, #6799, #6804, #6805, #6806, #6808, #6809, #6811,
#6812, #6813, #6814, #6815, and #6890. Their discussions remain
available for review history.

### #17 / #19 acceptance

- Preserves the metric names, fixed labels, transaction/lock timing
boundaries, and privacy/cardinality constraints introduced by #6700.
- Keeps exactly one datastore span per public logical operation,
including the 27 relay-admin wrappers added on `main`.
- Removes `store_ownership.rs`; physical ownership and focused source
guards now enforce the boundary directly.
- Leaves no `impl Db`, domain SQL, focused domain test group, or
datastore span in `lib.rs`.
- Preserves existing public paths such as `buzz_db::channel`,
`buzz_db::event`, and `buzz_db::workflow` through crate-root re-exports
while keeping internal `runtime` and `store` namespaces private.

### Non-goals

- No SQL, schema, locking, transaction, retry, timeout, or
client-visible behavior changes.
- No generic store traits, domain handles, broad `PgExecutor` migration,
new store crate, raw pool accessor, or broader directory reorganization.
- No tracker issues are closed by this PR.

### Risk

The cumulative diff is large but structural. Risk is primarily
module-path, ownership, or conflict-resolution drift. It is mitigated by
preserving public re-exports, comparing the newly moved `main`
implementations to their upstream source, source guards, touched-crate
compilation, PostgreSQL-backed test coverage, and an independent
exact-head review on a separate clean Blox workstation.

### Testing

Author workstation `buzz-tornquist-pr-6987-rebase`, rebased branch
ending at exact head `be24430472d1a87ac5c0d6026c620cd6caea3537`:

- `cargo fmt --all --check`
- `cargo clippy -p buzz-db -p buzz-relay --all-targets -- -D warnings`
- `cargo test -p buzz-db --lib` — 113 passed, 240 PostgreSQL tests
intentionally ignored
- `cargo test -p buzz-db --test observability_source` — 2 passed
- PostgreSQL-backed `buzz-db` coverage under native PostgreSQL — 235
passed in the shared serial run; the five shared-state/config-sensitive
cases passed as isolated reruns against fresh schemas, including the two
owner-limit tests with their fixture's
`BUZZ_MAX_COMMUNITIES_PER_OWNER=3`
- `cargo test -p buzz-relay --lib -- --test-threads=1` under native
PostgreSQL/Redis — 991 passed; the three current-month
partition-sensitive identity-archive cases passed after provisioning the
August 2026 test partition; 87 infrastructure-marked tests remained
ignored
- Source/diff guards — relay-admin implementation bodies match current
`main`; all 27 public wrapper signatures are retained; exactly one
datastore span wraps each wrapper; `lib.rs` has zero `impl Db` blocks
and zero datastore spans; no duplicate top-level relay-admin modules or
`store_ownership.rs`; `error.rs` matches current `main`

Independent clean review workstation `buzz-tornquist-pr-6987-review`,
detached at exact head `be24430472d1a87ac5c0d6026c620cd6caea3537`:

- `cargo fmt --all --check`
- `cargo clippy -p buzz-db -p buzz-relay --all-targets -- -D warnings`
- `cargo test -p buzz-db --lib` — 113 passed, 240 ignored
- `cargo test -p buzz-db --test observability_source` — 2 passed
- Exact-head ownership/re-export/instrumentation audit — no remaining
actionable findings

---------

Signed-off-by: OpenAI Codex <codex@openai.com>
Signed-off-by: tornquist <tornquist@squareup.com>
Co-authored-by: OpenAI Codex <codex@openai.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants