refactor(db): extract domain stores from database runtime

crates/buzz-db/src/migration.rs → crates/buzz-db/src/runtime/migration.rs

@@ -897,7 +897,7 @@ mod tests {
         assert!(migrations[32].sql.as_str().contains("kind = 30179"));
         assert!(migrations[32].sql.as_str().contains("search_tsv"));
         assert!(!migrations[0].sql.as_str().contains("30179"));
-        assert!(include_str!("../../../schema/schema.sql")
+        assert!(include_str!("../../../../schema/schema.sql")
             .contains("kind IN (1059, 30179, 30300, 30350, 30622, 44100, 44101, 44200)"));
 
         // Public push-gateway authority is intentionally deployment-global and
@@ -1040,7 +1040,7 @@ mod tests {
             .contains("CREATE INDEX relay_invites_expires_at_idx ON relay_invites (expires_at)"));
         assert!(!relay_invites.contains("_operator_global_tables"));
 
-        let desired_schema = include_str!("../../../schema/schema.sql");
+        let desired_schema = include_str!("../../../../schema/schema.sql");
         assert!(
             desired_schema.contains("CREATE TABLE join_policy_acceptances"),
             "desired-state schema must include join-policy evidence used by invite claims",
@@ -1156,7 +1156,7 @@ mod tests {
         // parameters. Its post-apply reconciliation must restore and verify
         // both parts of the live heartbeat contract for fresh bootstraps.
         let pgschema_reconciliation =
-            include_str!("../../../scripts/reconcile-schema-after-pgschema.sql");
+            include_str!("../../../../scripts/reconcile-schema-after-pgschema.sql");
         assert!(pgschema_reconciliation
             .contains("ALTER TABLE replica_heartbeat SET (vacuum_truncate = false)"));
         assert!(pgschema_reconciliation.contains("INSERT INTO replica_heartbeat (id) VALUES (1)"));
@@ -1309,7 +1309,7 @@ mod tests {
             .sql
             .as_str()
             .contains("error_code"));
-        assert!(include_str!("../../../schema/schema.sql").contains("error_code          TEXT"));
+        assert!(include_str!("../../../../schema/schema.sql").contains("error_code          TEXT"));
     }
 
     #[test]
@@ -1480,7 +1480,7 @@ mod tests {
         let migrator_run_to = ["MIGRATOR", ".run_to("].concat();
 
         let manifest_dir = std::path::Path::new(env!("CARGO_MANIFEST_DIR"));
-        let this_file = manifest_dir.join("src/migration.rs");
+        let this_file = manifest_dir.join("src/runtime/migration.rs");
         let crates_dir = manifest_dir.parent().expect("workspace crates dir");
         // The push gateway migrates its own dedicated authority database; it
         // never holds relay tenant tables, so it is exempt from the relay

crates/buzz-db/src/replica_fence.rs → crates/buzz-db/src/runtime/replica_fence.rs

@@ -19,13 +19,13 @@
 //!    observes `token >= M` on its own connection has, by WAL/storage replay
 //!    order, also replayed every commit that preceded M's commit; every
 //!    transaction then partitions into exactly three buckets:
-//!      (a) finished before the activity scan — its commit precedes `M`'s
-//!          commit, so the replica session has replayed it;
-//!      (b) open at the activity scan — represented by `xact_start`, so it is
-//!          bounded by the `oldest_xact_start` term;
-//!      (c) started after the activity scan — its deferred floor guard runs
-//!          after `S`, so it cannot commit a row with
-//!          `created_at < S - floor`.
+//!    (a) finished before the activity scan — its commit precedes `M`'s
+//!    commit, so the replica session has replayed it;
+//!    (b) open at the activity scan — represented by `xact_start`, so it is
+//!    bounded by the `oldest_xact_start` term;
+//!    (c) started after the activity scan — its deferred floor guard runs
+//!    after `S`, so it cannot commit a row with
+//!    `created_at < S - floor`.
 //!    There is no fourth bucket. Each committed token `M` therefore proves a
 //!    **fence wall** of `min(oldest_xact_start, S) - floor - clock_margin`:
 //!    every channel-window row with `created_at <= fence_wall(M)` is present