@yielded/auth-persistence 0.1.0-beta.10 → 0.1.0-beta.12

package/src/internal/sql-persistence.ts

@@ -1,5 +1,5 @@
 import { Effect } from "effect";
-import { SqlClient } from "effect/unstable/sql";
+import { SqlClient } from "effect/sql";
 
 import { PersistenceConfigurationError, type PersistenceApi } from "./configuration";
 import { makeComposedPasskeys } from "./passkeys";
@@ -38,7 +38,7 @@ export const AuthPersistence: PersistenceApi<Table> & { readonly table: typeof t
           reason: "Use an explicit adapter for this SQL dialect",
         });
 
-      return makeSqlDatabase(sql, dialect);
+      return yield* makeSqlDatabase(dialect);
     }),
   }),
   table,

package/src/internal/sql-query.ts

@@ -1,6 +1,6 @@
 import { Effect, Predicate } from "effect";
-import type { SqlClient } from "effect/unstable/sql/SqlClient";
-import type { SqlError } from "effect/unstable/sql/SqlError";
+import { SqlClient } from "effect/sql/SqlClient";
+import type { SqlError } from "effect/sql/SqlError";
 
 import { PersistenceMappingError } from "./mapping-error";
 import type { QueryOperations } from "./query-operations";
@@ -213,7 +213,9 @@ const compile = (state: QueryState, compiler: Compiler): string => {
 };
 
 /** Captures one Effect SQL client. Its transaction service remains the physical owner. */
-export const makeSqlDatabase = (client: SqlClient, dialect: Dialect): SqlDatabase => {
+export const makeSqlDatabase = Effect.fnUntraced(function* (dialect: Dialect) {
+  const client = yield* SqlClient;
+
   const query = (state: QueryState): Query => {
     const execute = Effect.suspend(() => {
       const compiler: Compiler = { dialect, parameters: [] };
@@ -267,7 +269,7 @@ export const makeSqlDatabase = (client: SqlClient, dialect: Dialect): SqlDatabas
   };
 
   return database;
-};
+});
 
 interface Query extends Effect.Effect<Row[], SqlError> {
   toSQL(): { readonly sql: string; readonly params: ReadonlyArray<unknown> };

package/src/internal/standalone.ts

@@ -1,20 +1,18 @@
 import { type Context, Effect } from "effect";
-import type * as SqlClient from "effect/unstable/sql/SqlClient";
+import type * as SqlClient from "effect/sql/SqlClient";
 
 /** Standalone operations must observe their own durable commit. */
 export const requireStandalone = <Failure>(
   unavailable: () => Failure,
-  client?: {
-    readonly transactionService: Context.Key<
-      SqlClient.TransactionConnection,
-      SqlClient.TransactionConnection.Service
-    >;
-  },
+  transactionService?: Context.Key<
+    SqlClient.TransactionConnection,
+    SqlClient.TransactionConnection.Service
+  >,
 ): Effect.Effect<void, Failure> =>
   Effect.withFiber((fiber) => {
     const services = fiber.context.mapUnsafe;
 
-    if (client !== undefined && services.has(client.transactionService.key))
+    if (transactionService !== undefined && services.has(transactionService.key))
       return Effect.fail(unavailable());
 
     // rc.117 libSQL uses a private per-client marker that is not exposed through

package/src/internal/storage-validation.ts

@@ -1,5 +1,5 @@
 import { Effect, Schema } from "effect";
-import type { SqlClient } from "effect/unstable/sql/SqlClient";
+import { SqlClient } from "effect/sql/SqlClient";
 
 import { PersistenceConfigurationError } from "./configuration";
 import type { StorageTable } from "./storage-tables";
@@ -16,13 +16,14 @@ export const qualifiedTableName = (table: Pick<StorageTable, "name" | "schema">)
 
 /** Validate physical uniqueness before the first authentication operation. A
  * partial or expression index cannot establish these unconditional guarantees. */
-export const validateStorage = (
-  client: SqlClient,
-  dialect: "pg" | "sqlite",
-  table: StorageTable,
-  required: ReadonlyArray<ReadonlyArray<string>>,
-) =>
-  Effect.gen(function* () {
+export const validateStorage = Effect.fnUntraced(
+  function* (
+    dialect: "pg" | "sqlite",
+    table: StorageTable,
+    required: ReadonlyArray<ReadonlyArray<string>>,
+  ) {
+    const client = yield* SqlClient;
+
     const physicalKeys: ReadonlyArray<ReadonlyArray<string>> = yield* dialect === "sqlite"
       ? Effect.gen(function* () {
           if (table.schema !== undefined && table.schema !== "main")
@@ -106,12 +107,15 @@ export const validateStorage = (
           reason: `Missing unique key on ${table.name} (${keys.join(", ")})`,
         });
     }
-  }).pipe(
-    Effect.mapError((error) =>
-      Schema.is(PersistenceConfigurationError)(error)
-        ? error
-        : PersistenceConfigurationError.make({
-            reason: `Cannot validate SQL storage for ${table.name}`,
-          }),
+  },
+  (effect, _dialect, table) =>
+    effect.pipe(
+      Effect.mapError((error) =>
+        Schema.is(PersistenceConfigurationError)(error)
+          ? error
+          : PersistenceConfigurationError.make({
+              reason: `Cannot validate SQL storage for ${table.name}`,
+            }),
+      ),
     ),
-  );
+);

package/src/internal/transaction-execution-kernel.ts

@@ -8,12 +8,13 @@ import {
 /* oxlint-disable no-explicit-any -- existing storage kernels erase foreign table shapes; domain errors remain typed. */
 /* oxlint-disable no-explicit-any -- private execution bridge retains exact public driver wrappers. */
 import { Context, Effect } from "effect";
-import type * as SqlClient from "effect/unstable/sql/SqlClient";
-import type * as SqlError from "effect/unstable/sql/SqlError";
-import type { Statement } from "effect/unstable/sql/Statement";
+import type * as SqlClient from "effect/sql/SqlClient";
+import type * as SqlError from "effect/sql/SqlError";
+import type { Statement } from "effect/sql/Statement";
 
 import { requireStandalone } from "./standalone";
 import {
+  NativeDatabase,
   type TransactionNativeDatabase,
   type TransactionOwner,
   type makeTransactionKernel,
@@ -23,7 +24,10 @@ export interface TransactionTargetConfiguration<Failure> {
   readonly mode: "interactive" | "synchronous" | "batch";
   readonly dialect: "pg" | "mysql" | "sqlite";
   readonly locking: boolean;
-  readonly standaloneGuard: (database: any) => Effect.Effect<void, Failure>;
+  /** The captured database's transaction marker; batch drivers may omit it. */
+  readonly standaloneGuard: (
+    transactionService: SqlClient.SqlClient["transactionService"] | undefined,
+  ) => Effect.Effect<void, Failure>;
   readonly transaction?: <A, E, R>(
     database: any,
     body: (transaction: any) => Effect.Effect<A, E, R>,
@@ -65,19 +69,18 @@ export const makeTransactionExecutionKernel = (
 
   const sqlClientTransactionStandaloneGuard = <Failure>(
     unavailable: () => Failure,
-    database: {
-      readonly $client: Pick<SqlClient.SqlClient, "transactionService">;
-    },
-  ) => requireStandalone(unavailable, database.$client);
+    transactionService: SqlClient.SqlClient["transactionService"] | undefined,
+  ) => requireStandalone(unavailable, transactionService);
 
-  const makeTransactionExecution = <Failure, OwnerId>(
+  const makeTransactionExecution = Effect.fnUntraced(function* <Failure, OwnerId>(
     ownerTag: Context.Key<OwnerId, TransactionOwner<Failure>>,
-    database: TransactionNativeDatabase,
     configuration: TransactionTargetConfiguration<Failure>,
     unavailable: () => Failure,
     nonce: () => string,
     bound?: TransactionBound<Failure>,
-  ): TransactionExecution<Failure, OwnerId> => {
+  ): Effect.fn.Return<TransactionExecution<Failure, OwnerId>, never, NativeDatabase> {
+    const database = yield* NativeDatabase;
+
     const invariant: (value: unknown) => asserts value = (value) => {
       if (!value) throw unavailable();
     };
@@ -90,7 +93,7 @@ export const makeTransactionExecutionKernel = (
           ? Effect.suspend(() => (bound.active ? Effect.void : Effect.fail(unavailable())))
           : Effect.gen(function* () {
               if (yield* hasCommitScope) return yield* Effect.fail(unavailable());
-              yield* configuration.standaloneGuard(database);
+              yield* configuration.standaloneGuard(database.$client.transactionService);
             }),
       poison: () => {
         if (bound !== undefined) bound.poisoned = true;
@@ -144,7 +147,7 @@ export const makeTransactionExecutionKernel = (
                 )
               : Effect.gen(function* () {
                   if (yield* hasCommitScope) return yield* Effect.fail(unavailable());
-                  yield* configuration.standaloneGuard(database);
+                  yield* configuration.standaloneGuard(database.$client.transactionService);
                   const marker = nonce();
 
                   const result = yield* coordinateCommit(
@@ -193,7 +196,7 @@ export const makeTransactionExecutionKernel = (
         });
       },
     };
-  };
+  });
 
   const coordinateTransactionOwner = <
     Failure,
@@ -225,7 +228,7 @@ export const makeTransactionExecutionKernel = (
   > => {
     return Effect.gen(function* () {
       if (yield* hasCommitScope) return yield* Effect.fail(unavailable());
-      yield* configuration.standaloneGuard(database);
+      yield* configuration.standaloneGuard(database.$client.transactionService);
 
       // Allocation is independent of registration data and always precedes the physical owner.
       const resources = yield* allocate.pipe(
@@ -260,14 +263,13 @@ export const makeTransactionExecutionKernel = (
                 const value = yield* owner(
                   tx as Transaction,
                   services(
-                    makeTransactionExecution(
+                    yield* makeTransactionExecution(
                       ownerTag,
-                      tx,
                       configuration,
                       unavailable,
                       nonce,
                       bound,
-                    ),
+                    ).pipe(Effect.provideService(NativeDatabase, tx)),
                     resources,
                   ),
                   (statement) => {

package/src/internal/transaction-kernel.ts

@@ -1,10 +1,10 @@
 import { type CommitJournal, type PreparedCommit } from "@yielded/auth/Hooks";
 import { reportAuthFailure } from "@yielded/auth/Persistence";
 /* oxlint-disable no-explicit-any -- existing storage kernels erase foreign table shapes; domain errors remain typed. */
-import { Cause, Effect } from "effect";
-import type * as SqlClient from "effect/unstable/sql/SqlClient";
-import type { SqlError } from "effect/unstable/sql/SqlError";
-import type { Statement } from "effect/unstable/sql/Statement";
+import { Cause, Context, Effect } from "effect";
+import type * as SqlClient from "effect/sql/SqlClient";
+import type { SqlError } from "effect/sql/SqlError";
+import type { Statement } from "effect/sql/Statement";
 
 import type {
   SqlExpression as SQL,
@@ -31,6 +31,12 @@ export interface TransactionNativeDatabase {
   ) => Effect.Effect<A, E | SqlError, R>;
 }
 
+/** Root native database required only while constructing standalone services.
+ * Active transactions remain owned by their coordinator and journal. */
+export class NativeDatabase extends Context.Service<NativeDatabase, TransactionNativeDatabase>()(
+  "effect-auth/persistence/NativeDatabase",
+) {}
+
 export interface Observation {
   readonly table: Table;
   readonly where: SQL;

package/dist/internal/oauth-app.d.mts

@@ -1,11 +0,0 @@
-import { Layer } from "effect";
-import { SqlClient } from "effect/unstable/sql";
-import { OAuthUnavailable } from "@yielded/auth/OAuth";
-import { Persistence } from "@yielded/auth/OAuthApp";
-//#region src/internal/oauth-app.d.ts
-export declare const OAuthAppPersistence: {
-  layer: Layer.Layer<Persistence, OAuthUnavailable, SqlClient.SqlClient>;
-  migration: string;
-};
-//#endregion
-//# sourceMappingURL=oauth-app.d.mts.map

package/dist/internal/oauth-app.mjs

@@ -1,57 +0,0 @@
-import { requireStandalone } from "./standalone.mjs";
-import { Effect, Layer, Schema } from "effect";
-import { SqlClient } from "effect/unstable/sql";
-import { OAuthUnavailable } from "@yielded/auth/OAuth";
-import { Persistence, Record } from "@yielded/auth/OAuthApp";
-//#region src/internal/oauth-app.ts
-const codec = Schema.fromJsonString(Record);
-const Row = Schema.Struct({
-	payload: Schema.String,
-	version: Schema.String
-});
-const OAuthAppPersistence = {
-	layer: Layer.effect(Persistence, Effect.gen(function* () {
-		const sql = yield* SqlClient.SqlClient;
-		if (!sql.onDialectOrElse({
-			sqlite: () => true,
-			pg: () => true,
-			orElse: () => false
-		})) return yield* OAuthUnavailable.make({});
-		const noTransaction = requireStandalone(() => OAuthUnavailable.make({}), sql);
-		const failure = (effect) => effect.pipe(Effect.mapError(() => OAuthUnavailable.make({})));
-		return Persistence.of({
-			get: Effect.fn("OAuthAppPersistence.get")(function* (namespace, key) {
-				yield* noTransaction;
-				const rows = yield* sql`SELECT payload, version FROM yielded_oauth_app WHERE namespace = ${namespace} AND record_key = ${key}`;
-				if (rows.length === 0) return void 0;
-				if (rows.length !== 1) return yield* OAuthUnavailable.make({});
-				const row = yield* Schema.decodeEffect(Row)(rows[0]);
-				const value = yield* Schema.decodeEffect(codec)(row.payload);
-				if (value.version !== row.version) return yield* OAuthUnavailable.make({});
-				return value;
-			}, failure),
-			insert: Effect.fn("OAuthAppPersistence.insert")(function* (namespace, key, value) {
-				yield* noTransaction;
-				const payload = yield* Schema.encodeEffect(codec)(value);
-				return (yield* sql`INSERT INTO yielded_oauth_app (namespace, record_key, version, payload) VALUES (${namespace}, ${key}, ${value.version}, ${payload}) ON CONFLICT (namespace, record_key) DO NOTHING RETURNING version`).length === 1;
-			}, failure),
-			compareAndSet: Effect.fn("OAuthAppPersistence.compareAndSet")(function* (namespace, key, version, value) {
-				yield* noTransaction;
-				if (value.version === version) return yield* OAuthUnavailable.make({});
-				const payload = yield* Schema.encodeEffect(codec)(value);
-				return (yield* sql`UPDATE yielded_oauth_app SET version = ${value.version}, payload = ${payload} WHERE namespace = ${namespace} AND record_key = ${key} AND version = ${version} RETURNING version`).length === 1;
-			}, failure)
-		});
-	})),
-	migration: `CREATE TABLE yielded_oauth_app (
-  namespace TEXT NOT NULL,
-  record_key TEXT NOT NULL,
-  version TEXT NOT NULL,
-  payload TEXT NOT NULL,
-  PRIMARY KEY (namespace, record_key)
-)`
-};
-//#endregion
-export { OAuthAppPersistence };
-
-//# sourceMappingURL=oauth-app.mjs.map

package/dist/internal/oauth-app.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth-app.mjs","names":[],"sources":["../../src/internal/oauth-app.ts"],"sourcesContent":["import { OAuthUnavailable } from \"@yielded/auth/OAuth\";\nimport { Persistence, Record } from \"@yielded/auth/OAuthApp\";\nimport { Effect, Layer, Schema } from \"effect\";\nimport { SqlClient } from \"effect/unstable/sql\";\n\nimport { requireStandalone } from \"./standalone\";\n\nconst codec = Schema.fromJsonString(Record);\nconst Row = Schema.Struct({ payload: Schema.String, version: Schema.String });\n\n/** Apply with the application's migrations. SQLite (including D1) and PostgreSQL.\n * Each transition is one conditional statement, so D1 needs no interactive\n * transaction and parallel workers share the same refresh/code claim.\n */\nconst migration = `CREATE TABLE yielded_oauth_app (\n  namespace TEXT NOT NULL,\n  record_key TEXT NOT NULL,\n  version TEXT NOT NULL,\n  payload TEXT NOT NULL,\n  PRIMARY KEY (namespace, record_key)\n)`;\n\nconst layer = Layer.effect(\n  Persistence,\n  Effect.gen(function* () {\n    const sql = yield* SqlClient.SqlClient;\n\n    if (!sql.onDialectOrElse({ sqlite: () => true, pg: () => true, orElse: () => false }))\n      return yield* OAuthUnavailable.make({});\n\n    const noTransaction = requireStandalone(() => OAuthUnavailable.make({}), sql);\n\n    const failure = <A, E, R>(effect: Effect.Effect<A, E, R>) =>\n      effect.pipe(Effect.mapError(() => OAuthUnavailable.make({})));\n\n    return Persistence.of({\n      get: Effect.fn(\"OAuthAppPersistence.get\")(function* (namespace, key) {\n        yield* noTransaction;\n\n        const rows = yield* sql<{\n          payload: string;\n          version: string;\n        }>`SELECT payload, version FROM yielded_oauth_app WHERE namespace = ${namespace} AND record_key = ${key}`;\n\n        if (rows.length === 0) return undefined;\n        if (rows.length !== 1) return yield* OAuthUnavailable.make({});\n        const row = yield* Schema.decodeEffect(Row)(rows[0]);\n        const value = yield* Schema.decodeEffect(codec)(row.payload);\n\n        if (value.version !== row.version) return yield* OAuthUnavailable.make({});\n\n        return value;\n      }, failure),\n      insert: Effect.fn(\"OAuthAppPersistence.insert\")(function* (namespace, key, value) {\n        yield* noTransaction;\n        const payload = yield* Schema.encodeEffect(codec)(value);\n\n        const rows =\n          yield* sql`INSERT INTO yielded_oauth_app (namespace, record_key, version, payload) VALUES (${namespace}, ${key}, ${value.version}, ${payload}) ON CONFLICT (namespace, record_key) DO NOTHING RETURNING version`;\n\n        return rows.length === 1;\n      }, failure),\n      compareAndSet: Effect.fn(\"OAuthAppPersistence.compareAndSet\")(function* (\n        namespace,\n        key,\n        version,\n        value,\n      ) {\n        yield* noTransaction;\n        if (value.version === version) return yield* OAuthUnavailable.make({});\n        const payload = yield* Schema.encodeEffect(codec)(value);\n\n        const rows =\n          yield* sql`UPDATE yielded_oauth_app SET version = ${value.version}, payload = ${payload} WHERE namespace = ${namespace} AND record_key = ${key} AND version = ${version} RETURNING version`;\n\n        return rows.length === 1;\n      }, failure),\n    });\n  }),\n);\n\nexport const OAuthAppPersistence = { layer, migration };\n"],"mappings":";;;;;;AAOA,MAAM,QAAQ,OAAO,eAAe,MAAM;AAC1C,MAAM,MAAM,OAAO,OAAO;CAAE,SAAS,OAAO;CAAQ,SAAS,OAAO;AAAO,CAAC;AAyE5E,MAAa,sBAAsB;CAAE,OA3DvB,MAAM,OAClB,aACA,OAAO,IAAI,aAAa;EACtB,MAAM,MAAM,OAAO,UAAU;EAE7B,IAAI,CAAC,IAAI,gBAAgB;GAAE,cAAc;GAAM,UAAU;GAAM,cAAc;EAAM,CAAC,GAClF,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;EAExC,MAAM,gBAAgB,wBAAwB,iBAAiB,KAAK,CAAC,CAAC,GAAG,GAAG;EAE5E,MAAM,WAAoB,WACxB,OAAO,KAAK,OAAO,eAAe,iBAAiB,KAAK,CAAC,CAAC,CAAC,CAAC;EAE9D,OAAO,YAAY,GAAG;GACpB,KAAK,OAAO,GAAG,yBAAyB,CAAC,CAAC,WAAW,WAAW,KAAK;IACnE,OAAO;IAEP,MAAM,OAAO,OAAO,GAGlB,oEAAoE,UAAU,oBAAoB;IAEpG,IAAI,KAAK,WAAW,GAAG,OAAO,KAAA;IAC9B,IAAI,KAAK,WAAW,GAAG,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;IAC7D,MAAM,MAAM,OAAO,OAAO,aAAa,GAAG,CAAC,CAAC,KAAK,EAAE;IACnD,MAAM,QAAQ,OAAO,OAAO,aAAa,KAAK,CAAC,CAAC,IAAI,OAAO;IAE3D,IAAI,MAAM,YAAY,IAAI,SAAS,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;IAEzE,OAAO;GACT,GAAG,OAAO;GACV,QAAQ,OAAO,GAAG,4BAA4B,CAAC,CAAC,WAAW,WAAW,KAAK,OAAO;IAChF,OAAO;IACP,MAAM,UAAU,OAAO,OAAO,aAAa,KAAK,CAAC,CAAC,KAAK;IAKvD,QAAO,OAFE,GAAG,mFAAmF,UAAU,IAAI,IAAI,IAAI,MAAM,QAAQ,IAAI,QAAQ,oEAAA,CAEnI,WAAW;GACzB,GAAG,OAAO;GACV,eAAe,OAAO,GAAG,mCAAmC,CAAC,CAAC,WAC5D,WACA,KACA,SACA,OACA;IACA,OAAO;IACP,IAAI,MAAM,YAAY,SAAS,OAAO,OAAO,iBAAiB,KAAK,CAAC,CAAC;IACrE,MAAM,UAAU,OAAO,OAAO,aAAa,KAAK,CAAC,CAAC,KAAK;IAKvD,QAAO,OAFE,GAAG,0CAA0C,MAAM,QAAQ,cAAc,QAAQ,qBAAqB,UAAU,oBAAoB,IAAI,iBAAiB,QAAQ,oBAAA,CAE9J,WAAW;GACzB,GAAG,OAAO;EACZ,CAAC;CACH,CAAC,CAGkC;CAAO;;;;;;;AAAU"}

package/src/internal/oauth-app.ts

@@ -1,82 +0,0 @@
-import { OAuthUnavailable } from "@yielded/auth/OAuth";
-import { Persistence, Record } from "@yielded/auth/OAuthApp";
-import { Effect, Layer, Schema } from "effect";
-import { SqlClient } from "effect/unstable/sql";
-
-import { requireStandalone } from "./standalone";
-
-const codec = Schema.fromJsonString(Record);
-const Row = Schema.Struct({ payload: Schema.String, version: Schema.String });
-
-/** Apply with the application's migrations. SQLite (including D1) and PostgreSQL.
- * Each transition is one conditional statement, so D1 needs no interactive
- * transaction and parallel workers share the same refresh/code claim.
- */
-const migration = `CREATE TABLE yielded_oauth_app (
-  namespace TEXT NOT NULL,
-  record_key TEXT NOT NULL,
-  version TEXT NOT NULL,
-  payload TEXT NOT NULL,
-  PRIMARY KEY (namespace, record_key)
-)`;
-
-const layer = Layer.effect(
-  Persistence,
-  Effect.gen(function* () {
-    const sql = yield* SqlClient.SqlClient;
-
-    if (!sql.onDialectOrElse({ sqlite: () => true, pg: () => true, orElse: () => false }))
-      return yield* OAuthUnavailable.make({});
-
-    const noTransaction = requireStandalone(() => OAuthUnavailable.make({}), sql);
-
-    const failure = <A, E, R>(effect: Effect.Effect<A, E, R>) =>
-      effect.pipe(Effect.mapError(() => OAuthUnavailable.make({})));
-
-    return Persistence.of({
-      get: Effect.fn("OAuthAppPersistence.get")(function* (namespace, key) {
-        yield* noTransaction;
-
-        const rows = yield* sql<{
-          payload: string;
-          version: string;
-        }>`SELECT payload, version FROM yielded_oauth_app WHERE namespace = ${namespace} AND record_key = ${key}`;
-
-        if (rows.length === 0) return undefined;
-        if (rows.length !== 1) return yield* OAuthUnavailable.make({});
-        const row = yield* Schema.decodeEffect(Row)(rows[0]);
-        const value = yield* Schema.decodeEffect(codec)(row.payload);
-
-        if (value.version !== row.version) return yield* OAuthUnavailable.make({});
-
-        return value;
-      }, failure),
-      insert: Effect.fn("OAuthAppPersistence.insert")(function* (namespace, key, value) {
-        yield* noTransaction;
-        const payload = yield* Schema.encodeEffect(codec)(value);
-
-        const rows =
-          yield* sql`INSERT INTO yielded_oauth_app (namespace, record_key, version, payload) VALUES (${namespace}, ${key}, ${value.version}, ${payload}) ON CONFLICT (namespace, record_key) DO NOTHING RETURNING version`;
-
-        return rows.length === 1;
-      }, failure),
-      compareAndSet: Effect.fn("OAuthAppPersistence.compareAndSet")(function* (
-        namespace,
-        key,
-        version,
-        value,
-      ) {
-        yield* noTransaction;
-        if (value.version === version) return yield* OAuthUnavailable.make({});
-        const payload = yield* Schema.encodeEffect(codec)(value);
-
-        const rows =
-          yield* sql`UPDATE yielded_oauth_app SET version = ${value.version}, payload = ${payload} WHERE namespace = ${namespace} AND record_key = ${key} AND version = ${version} RETURNING version`;
-
-        return rows.length === 1;
-      }, failure),
-    });
-  }),
-);
-
-export const OAuthAppPersistence = { layer, migration };