This note was generated from the following request, preserved verbatim so a future iteration (different model, different prompt, different research depth) can do a better job:
If you look at https://github.com/anomalyco/opencode, kitlangton joined and pretty quickly started transitioning opencode to effect. I think his commit history would be a pretty good case study on how to do incremental adoption of effect in an existing codebase. Could you study his commits and walk me through how he approached this? I want to learn about effect and how to introduce it.
- Cloned
anomalyco/opencodeto a temp directory. - Identified Kit Langton's commits via
git rev-list --all --author=Langton(1,578 commits;git logwas silently truncating to 50 in this environment, which initially produced a wrong answer — verify counts withrev-list). - Sorted his commits chronologically and grepped subjects for
effect,Layer,Schema,Context,Service,migrateto find the introduction arc. - Read the actual diffs and full file contents at key commits: the migration
plan he committed (
f725961), the first service conversion (refactor(auth): effectify AuthService, #17212), theserviceUseproxy helper, and theit.instancetest harness migration. - Auth was chosen as the worked end-to-end example because the plan itself calls it the "trivial win to prove the pattern" and it's small enough to fit in one note.
Reference note distilled from Kit Langton's commit history on anomalyco/opencode
(~1,578 commits, second-most in the repo). He introduced Effect into a large,
live TypeScript codebase one domain at a time over Jan–May 2026. Two
artifacts worth keeping: his written migration plan, and a complete
before/after of one bounded service (Auth).
- Prove it off to the side first (Feb 14). First idiomatic-Effect work was
the peripheral
discordbot, not the core product. Built fluency at low risk. - Write a plan + lay foundations (Mar 11–13): branded core IDs through
Schema(pure types, no behavior change); an Effect logger compatibility layer; an effect-to-zod bridge soSchemaand existing Zod interop. Zod stays permanently at the public plugin boundary. - Convert one bounded service per PR, easiest first (Mar 16–17 wave): Auth →
Question → Permission → file-watcher → vcs → format → skill → snapshot →
truncation. Each its own
refactor(X): effectify XServicePR. - Boundary-first with a temporary facade:
service.tsholds the Effect-native service;index.tskeeps a promise-facing namespace wrappingruntime.runPromise(Service.use(...)). Callers migrate off the facade over time; the shared runtime bridge is designed to shrink, not centralize. - Don't redesign ambient state early:
Instance(AsyncLocalStorage) stays; wrap it in an adapter, expose a narrow Effect interface above it. - Keep legacy tests green; migrate the harness last (May): the big
it.instance/ effect-fixtures test migration happened at the end, after services were already Effect-native. Rule: never rewrite test wiring in the same PR as a domain extraction. - Swap homegrown utilities for Effect primitives last: Bus→PubSub, Scheduler→Schedule, mutate-then-publish→SubscriptionRef, state Maps→Ref, try/finally→Scope/acquireRelease, shell-outs→ChildProcess. Only once enough consumers are Effect-native.
serviceUseaccessor proxy: a generic helper turningTag.use(s => s.m())intoService.use.m(), typed to inject the tag into theRchannel. Added per service asexport const use = serviceUse(Service), then centralized into thecorepackage.- Typed tagged errors at the boundary: replace inline
new Error(...)withSchema.TaggedErrorClassso failures arecatchTag-matchable and appear in theEchannel. Decode once at the edge; delete redundant inner re-decodes.
- Build fluency on a peripheral service before touching the core.
- Write a migration plan: principles, tiered candidate ranking by feasibility×payoff, explicit "avoid early" list.
- Foundations first: branded types via Schema + interop shims (logging, Zod↔Schema).
- One bounded service per PR, easiest first.
- Boundary-first: Effect-native core, thin promise facade at the edge, built to be deleted.
- Treat ambient/scoped state as an adapter problem; wrap, don't rewrite.
- Keep legacy tests passing; migrate the test harness only after services settle.
- Swap homegrown utilities for Effect primitives last.
Kit's code uses newer Effect APIs that differ from older tutorials and from some Claude Code skills:
ServiceMap.Service<Self, Shape>()("@scope/Name")— the current service pattern; supersedes the olderContext.Tag/Effect.Servicesplit.Schema.TaggedErrorClass<Self>()("Name", { ... })— class-style variant ofSchema.TaggedError, gives you a constructable error with the tag baked in.Effect.fn("Service.method")(function* (...) { ... })— names the function for tracing; prefer this over plainEffect.genfor service methods.Schema.Class<Self>("Name")({ ... })for value objects you might want as a class with methods/equality;Schema.Structfor plain data.Layer.effect(Tag, Effect.gen(function* () { ... return Tag.of({...}) }))— build the layer inside an Effect.gen so internal helpers can close over yielded dependencies.
If a tutorial shows Context.Tag, mentally translate to ServiceMap.Service.
If it shows Schema.TaggedError, the class form is Schema.TaggedErrorClass.
Auth was the chosen reference conversion precisely because it's trivial: 74 lines, file CRUD, zero ambient state, one dependency (Filesystem). The plan calls it the "trivial win to prove the pattern beyond account."
import path from "path"
import { Global } from "../global"
import z from "zod"
import { Filesystem } from "../util/filesystem"
export const OAUTH_DUMMY_KEY = "opencode-oauth-dummy-key"
export namespace Auth {
export const Oauth = z
.object({
type: z.literal("oauth"),
refresh: z.string(),
access: z.string(),
expires: z.number(),
accountId: z.string().optional(),
enterpriseUrl: z.string().optional(),
})
.meta({ ref: "OAuth" })
export const Api = z
.object({ type: z.literal("api"), key: z.string() })
.meta({ ref: "ApiAuth" })
export const WellKnown = z
.object({ type: z.literal("wellknown"), key: z.string(), token: z.string() })
.meta({ ref: "WellKnownAuth" })
export const Info = z.discriminatedUnion("type", [Oauth, Api, WellKnown]).meta({ ref: "Auth" })
export type Info = z.infer<typeof Info>
const filepath = path.join(Global.Path.data, "auth.json")
export async function get(providerID: string) {
const auth = await all()
return auth[providerID]
}
export async function all(): Promise<Record<string, Info>> {
const data = await Filesystem.readJson<Record<string, unknown>>(filepath).catch(() => ({}))
return Object.entries(data).reduce(
(acc, [key, value]) => {
const parsed = Info.safeParse(value)
if (!parsed.success) return acc
acc[key] = parsed.data
return acc
},
{} as Record<string, Info>,
)
}
export async function set(key: string, info: Info) {
const normalized = key.replace(/\/+$/, "")
const data = await all()
if (normalized !== key) delete data[key]
delete data[normalized + "/"]
await Filesystem.writeJson(filepath, { ...data, [normalized]: info }, 0o600)
}
export async function remove(key: string) {
const normalized = key.replace(/\/+$/, "")
const data = await all()
delete data[key]
delete data[normalized]
await Filesystem.writeJson(filepath, data, 0o600)
}
}Note: Schema.Class replaces Zod objects, a TaggedErrorClass gives a typed
error in the E channel, the service is a ServiceMap.Service with a Layer,
methods are Effect.fn(...) (named for tracing), and Effect.tryPromise wraps
the still-promise Filesystem calls at the edge.
import path from "path"
import { Effect, Layer, Record, Result, Schema, ServiceMap } from "effect"
import { Global } from "../global"
import { Filesystem } from "../util/filesystem"
export const OAUTH_DUMMY_KEY = "opencode-oauth-dummy-key"
export class Oauth extends Schema.Class<Oauth>("OAuth")({
type: Schema.Literal("oauth"),
refresh: Schema.String,
access: Schema.String,
expires: Schema.Number,
accountId: Schema.optional(Schema.String),
enterpriseUrl: Schema.optional(Schema.String),
}) {}
export class Api extends Schema.Class<Api>("ApiAuth")({
type: Schema.Literal("api"),
key: Schema.String,
}) {}
export class WellKnown extends Schema.Class<WellKnown>("WellKnownAuth")({
type: Schema.Literal("wellknown"),
key: Schema.String,
token: Schema.String,
}) {}
export const Info = Schema.Union([Oauth, Api, WellKnown])
export type Info = Schema.Schema.Type<typeof Info>
export class AuthServiceError extends Schema.TaggedErrorClass<AuthServiceError>()("AuthServiceError", {
message: Schema.String,
cause: Schema.optional(Schema.Defect),
}) {}
const file = path.join(Global.Path.data, "auth.json")
const fail = (message: string) => (cause: unknown) => new AuthServiceError({ message, cause })
export namespace AuthService {
export interface Service {
readonly get: (providerID: string) => Effect.Effect<Info | undefined, AuthServiceError>
readonly all: () => Effect.Effect<Record<string, Info>, AuthServiceError>
readonly set: (key: string, info: Info) => Effect.Effect<void, AuthServiceError>
readonly remove: (key: string) => Effect.Effect<void, AuthServiceError>
}
}
export class AuthService extends ServiceMap.Service<AuthService, AuthService.Service>()("@opencode/Auth") {
static readonly layer = Layer.effect(
AuthService,
Effect.gen(function* () {
const decode = Schema.decodeUnknownOption(Info)
const all = Effect.fn("AuthService.all")(() =>
Effect.tryPromise({
try: async () => {
const data = await Filesystem.readJson<Record<string, unknown>>(file).catch(() => ({}))
return Record.filterMap(data, (value) => Result.fromOption(decode(value), () => undefined))
},
catch: fail("Failed to read auth data"),
}),
)
const get = Effect.fn("AuthService.get")(function* (providerID: string) {
return (yield* all())[providerID]
})
const set = Effect.fn("AuthService.set")(function* (key: string, info: Info) {
const norm = key.replace(/\/+$/, "")
const data = yield* all()
if (norm !== key) delete data[key]
delete data[norm + "/"]
yield* Effect.tryPromise({
try: () => Filesystem.writeJson(file, { ...data, [norm]: info }, 0o600),
catch: fail("Failed to write auth data"),
})
})
const remove = Effect.fn("AuthService.remove")(function* (key: string) {
const norm = key.replace(/\/+$/, "")
const data = yield* all()
delete data[key]
delete data[norm]
yield* Effect.tryPromise({
try: () => Filesystem.writeJson(file, data, 0o600),
catch: fail("Failed to write auth data"),
})
})
return AuthService.of({ get, all, set, remove })
}),
)
static readonly defaultLayer = AuthService.layer
}The public surface is unchanged (still Auth.get, returns a Promise, still
exports Zod schemas for the plugin boundary), but the body now delegates into the
Effect service via the shared runtime. This facade is deliberately disposable:
once all callers move to the Effect API, this file deletes.
import { Effect } from "effect"
import z from "zod"
import { runtime } from "@/effect/runtime"
import * as S from "./service"
export { OAUTH_DUMMY_KEY } from "./service"
function runPromise<A>(f: (service: S.AuthService.Service) => Effect.Effect<A, S.AuthServiceError>) {
return runtime.runPromise(S.AuthService.use(f))
}
export namespace Auth {
export const Oauth = z
.object({
type: z.literal("oauth"),
refresh: z.string(),
access: z.string(),
expires: z.number(),
accountId: z.string().optional(),
enterpriseUrl: z.string().optional(),
})
.meta({ ref: "OAuth" })
export const Api = z.object({ type: z.literal("api"), key: z.string() }).meta({ ref: "ApiAuth" })
export const WellKnown = z
.object({ type: z.literal("wellknown"), key: z.string(), token: z.string() })
.meta({ ref: "WellKnownAuth" })
export const Info = z.discriminatedUnion("type", [Oauth, Api, WellKnown]).meta({ ref: "Auth" })
export type Info = z.infer<typeof Info>
export async function get(providerID: string) {
return runPromise((service) => service.get(providerID))
}
export async function all(): Promise<Record<string, Info>> {
return runPromise((service) => service.all())
}
export async function set(key: string, info: Info) {
return runPromise((service) => service.set(key, info))
}
export async function remove(key: string) {
return runPromise((service) => service.remove(key))
}
}Committed by Kit Langton on 2026-03-12 into packages/opencode/, later removed once it had served its purpose. Reproduced verbatim.
# Effect migration
Practical path for adopting Effect in opencode.
## Aim
Move `packages/opencode` toward Effect one domain at a time. Treat the migration as successful when the core path for a domain is Effect-based, even if temporary promise wrappers still exist at the edges.
---
## Decide
Use these defaults unless a domain gives us a good reason not to.
- Migrate one module or domain at a time
- Preserve compatibility mainly at boundaries, not throughout internals
- Prefer adapter-layer-first work for mutable or request-scoped systems
- Treat CLI, server, and jobs as runtime boundaries
- Use the shared managed runtime only as a bridge during migration
This keeps the work incremental and lets us remove compatibility code later instead of freezing it into every layer.
---
## Slice work
Pick migration units that can own a clear service boundary and a small runtime story.
Good early candidates:
- CRUD-like domains with stable storage and HTTP boundaries
- Modules that already have a natural service shape
- Areas where a promise facade can stay temporarily at the public edge
Harder candidates:
- `Instance`-like systems with async local state
- Request-scoped mutable state
- Modules that implicitly depend on ambient context or lifecycle ordering
---
## Start at boundaries
Begin by extracting an Effect service behind the existing module boundary. Keep old call sites working by adding a thin promise facade only where needed.
Current example:
- `packages/opencode/src/account/service.ts` holds the Effect-native service
- `packages/opencode/src/account/index.ts` keeps a promise-facing facade
- `packages/opencode/src/cli/cmd/account.ts` already uses `AccountService` directly
- `packages/opencode/src/config/config.ts` and `packages/opencode/src/share/share-next.ts` still use the facade
This is the preferred first move for most domains.
---
## Bridge runtime
Use a shared app runtime only to help mixed code coexist while we migrate. Do not treat it as the final architecture by default.
Current bridge:
- `packages/opencode/src/effect/runtime.ts`
Near-term rule:
- Effect-native entrypoints can run effects directly
- Legacy promise namespaces can call into the shared runtime
- New domains should not depend on broad global runtime access unless they are explicitly boundary adapters
As more boundaries become Effect-native, the shared runtime should shrink instead of becoming more central.
---
## Handle state
Treat async local state and mutable contextual systems as adapter problems first. Do not force `Instance`-style behavior directly into pure domain services on the first pass.
Recommended approach:
- Keep current mutable/contextual machinery behind a small adapter
- Expose a narrower Effect service above that adapter
- Move ambient reads and writes to the edge of the module
- Delay deeper context redesign until the boundary is stable
For `Instance`-like code, the first win is usually isolating state access, not eliminating it.
---
## Wrap `Instance`
Keep `Instance` backed by AsyncLocalStorage for now. Do not force a full ALS replacement before we have a clearer service boundary.
- Add an Effect-facing interface over the current ALS-backed implementation first
- Point new Effect code at that interface
- Let untouched legacy code keep using raw `Instance`
We may split mutable state from read-only context as the design settles. If that happens, state can migrate on its own path and then depend on the Effect-facing context version instead of raw ALS directly.
**Instance.state** - Most modules use `Instance.state()` for scoped mutable state, so we should not try to replace `Instance` itself too early. Start by wrapping it in an adapter and exposing an Effect service above the current machinery. Over time, state should move onto an Effectful abstraction of our own, with `ScopedCache` as the most likely fit for per-instance state that needs keyed lookup and cleanup. It can stay scoped by the current instance key during transition, usually the directory today, while domains can still add finer keys like `SessionID` inside their own state where needed.
This keeps the first step small, lowers risk, and avoids redesigning request context too early.
---
## Shape APIs
Prefer an Effect-first core and a compatibility shell at the edge.
Guidance:
- Name the service after the domain, like `AccountService`
- Keep methods small and domain-shaped, not transport-shaped
- Return `Effect` from the core service
- Use promise helpers only in legacy namespaces or boundary adapters
- Keep error types explicit when the domain already has stable error shapes
Small pattern:
```ts
export class FooService extends ServiceMap.Service<FooService, FooService.Service>()("@opencode/Foo") {
static readonly layer = Layer.effect(
FooService,
Effect.gen(function* () {
return FooService.of({
get: Effect.fn("FooService.get")(function* (id: FooID) {
return yield* ...
}),
})
}),
)
}Temporary facade pattern:
function runPromise<A>(f: (service: FooService.Service) => Effect.Effect<A, FooError>) {
return runtime.runPromise(FooService.use(f))
}
export namespace Foo {
export function get(id: FooID) {
return runPromise((service) => service.get(id))
}
}A Repo layer is often useful, but it should stay a tool, not a rule.
Tradeoffs:
Repohelps when storage concerns are real and reusableRepocan clarify error mapping and persistence boundariesRepocan also add ceremony for thin modules or one-step workflows
Current leaning:
- Use a
Repowhen it simplifies storage-heavy domains - Skip it when a direct service implementation stays clearer
- Revisit consistency after a few more migrations, not before
packages/opencode/src/account/repo.ts is a reasonable pattern for storage-backed domains, but it should not become mandatory yet.
Keep tests stable while internals move. Prefer preserving current test surfaces until a domain has fully crossed its main boundary.
Practical guidance:
- Keep existing promise-based tests passing first
- Add focused tests for new service behavior where it reduces risk
- Move boundary tests later, after the internal service shape settles
- Avoid rewriting test helpers and runtime wiring in the same PR as a domain extraction
This lowers risk and makes the migration easier to review.
Use a phased roadmap.
Set conventions and prove the boundary pattern.
- Keep
accountas the reference example, but not the template for every case - Document the temporary runtime bridge and when to use it
- Prefer one or two more CRUD-like domains next
Migrate easy and medium domains one at a time.
- Extract service
- Keep boundary facade if needed
- Convert one runtime entrypoint to direct Effect use
- Collapse internal promise plumbing inside the domain
Tackle context-heavy systems with adapters first.
- Isolate async local state behind Effect-facing adapters
- Move lifecycle and mutable state reads to runtime edges
- Convert core domain logic before trying to redesign shared context
Reduce bridges and compatibility surfaces.
- Remove facades that no longer serve external callers
- Narrow the shared runtime bridge
- Standardize remaining service and error shapes where it now feels earned
Use these signals to judge whether a domain is really migrated.
A domain is in good shape when:
- Its core logic runs through an Effect service
- Internal callers prefer the Effect API
- Compatibility wrappers exist only at real boundaries
- CLI, server, or job entrypoints can run the Effect path directly
- The shared runtime is only a temporary connector, not the center of the design
A domain is not done just because it has an Effect service somewhere in the stack.
Ranked by feasibility and payoff. Account is already migrated and serves as the reference.
| # | Module | Lines | Shape | Why |
|---|---|---|---|---|
| 1 | Auth | 74 | File CRUD (get/set/remove) | Zero ambient state, zero deps besides Filesystem. Trivial win to prove the pattern beyond account. |
| 2 | Question | 168 | ask/reply/reject + Instance.state Map | Clean service boundary, single pending Map. Nearly identical to Permission but simpler. |
| 3 | Permission | 210 | ask/respond/list + session-scoped Maps | Pending + approved Maps, already uses branded IDs. Session-scoped state maps to Effect context. |
| 4 | Scheduler | 62 | register/unregister tasks with timers | Effect.repeat / Effect.schedule is a natural fit. Tiny surface area. |
| # | Module | Lines | Shape | Why |
|---|---|---|---|---|
| 5 | Pty | 318 | Session lifecycle (create/remove/resize/write) | Process + subscriber cleanup maps to Effect.acquireRelease. Buffer/subscriber state is instance-scoped. |
| 6 | Bus | 106 | Pub/sub with instance-scoped subscriptions | Fiber-based subscription cleanup would eliminate manual off() patterns throughout the codebase. |
| 7 | Snapshot | 417 | Git snapshot/patch/restore | Heavy subprocess I/O. Effect error handling and retry would help. No ambient state. |
| 8 | Worktree | 673 | Git worktree create/remove/reset | Stateless, all subprocess-based. Good Effect.fn candidate but larger surface. |
| 9 | Installation | 304 | Version check + upgrade across package managers | Multiple fallback paths (npm/brew/choco/scoop). Effect's error channel shines here. |
| # | Module | Lines | Shape | Why |
|---|---|---|---|---|
| 10 | File | 655 | File ops with cache state | Background fetch side-effects would benefit from Fiber management. Mutable cache (files/dirs Maps) adds complexity. |
| 11 | LSP | 487 | Client lifecycle: spawning → connected → broken | Effect resource management fits, but multi-state transitions are tricky. |
| 12 | MCP | 981 | Client lifecycle + OAuth flows | Largest single module. OAuth state spans multiple functions (startAuth → finishAuth). High payoff but highest risk. |
These are too large, too foundational, or too pervasive to migrate without significant prior experience:
- Provider (~1400 lines) — provider-specific branching, AI SDK abstractions, complex model selection
- Session (~900 lines) — complex relational queries, branching logic, many dependents
- Config — pervasive dependency across codebase, complex precedence rules
- Project / Instance — foundational bootstrap, async local state, everything depends on it
Instance.state — Most modules use Instance.state() for scoped mutable state. Don't try to replace Instance itself early; wrap it in an adapter that exposes an Effect service above the existing machinery.
Bus.subscribe + manual off() — Pervasive throughout the codebase. Migrating Bus (candidate #6) unlocks Fiber-based cleanup everywhere, but it's infrastructure, not a domain win. Consider it after a few domain migrations prove the pattern.
Database.use / Database.transaction — Already resembles Effect context (provide/use pattern). Could become an Effect Layer, but this is infrastructure work best deferred until multiple domains are Effect-native.
Process subprocess patterns — Snapshot, Worktree, Installation all shell out to git or package managers. These are natural Effect.tryPromise / Effect.fn targets with error mapping.
Effect already provides battle-tested replacements for several homegrown patterns. Prefer these over custom code as domains migrate.
PubSub provides bounded/unbounded pub/sub with backpressure strategies. Subscriptions are scoped — cleanup is automatic when the subscriber's Scope closes, eliminating every manual off() call.
const pubsub = yield * PubSub.unbounded<Event>()
yield * PubSub.publish(pubsub, event)
// subscriber — automatically cleaned up when scope ends
const dequeue = yield * PubSub.subscribe(pubsub)
const event = yield * Queue.take(dequeue)Don't migrate Bus first. Migrate domain modules, then swap Bus once there are enough Effect-native consumers.
The custom 62-line Scheduler reinvents Effect.repeat. Effect's Schedule is composable and supports spaced intervals, exponential backoff, cron expressions, and more.
yield * effect.pipe(Effect.repeat(Schedule.spaced("30 seconds")))Several modules follow the pattern: mutate Instance.state, then Bus.publish to notify listeners. SubscriptionRef is a Ref that emits changes as a Stream, combining both in one primitive.
const ref = yield * SubscriptionRef.make(initialState)
// writer
yield * SubscriptionRef.update(ref, (s) => ({ ...s, count: s.count + 1 }))
// reader — stream of every state change
yield * SubscriptionRef.changes(ref).pipe(Stream.runForEach(handleUpdate))Ref<A> provides atomic read/write/update for concurrent-safe state. SynchronizedRef adds mutual exclusion for complex multi-step updates. Use these inside Effect services instead of raw mutable Maps.
Pty sessions, LSP clients, and MCP clients all have manual try/finally cleanup. Effect.acquireRelease ties resource lifecycle to Scope, making cleanup declarative and leak-proof.
const pty = yield * Effect.acquireRelease(createPty(options), (session) => destroyPty(session))Effect's ChildProcess provides type-safe subprocess execution with template literals and stream-based stdout/stderr. Useful for Snapshot, Worktree, and Installation modules.
const result = yield * ChildProcess.make`git diff --stat`.pipe(ChildProcess.spawn, ChildProcess.string)Note: in effect/unstable/process — API may shift.
Cross-platform file I/O with stream support. Available via effect/FileSystem with a NodeFileSystem layer.
Abstracted key-value storage with file, memory, and browser backends. Auth's 74-line file CRUD could become a one-liner with KeyValueStore.
Available via effect/unstable/persistence — API may shift.
Full HTTP client with typed errors, request builders, and platform-aware layers. Useful when migrating Share and ControlPlane modules.
Available via effect/unstable/http — API may shift.
Effect's HttpApi provides schema-driven HTTP APIs with OpenAPI generation, type-safe routing, and middleware. Long-term candidate to replace the Hono server layer entirely. This is a larger lift — defer until multiple domain services are Effect-native and the boundary pattern is well-proven.
Available via effect/unstable/httpapi — API may shift.
Effect's Schema provides encoding/decoding, validation, and type derivation deeply integrated with Effect. Internal code can migrate to Schema as domains move to Effect services. However, the plugin API (@opencode-ai/plugin) uses Zod and must continue to accept Zod schemas at the boundary. Keep Zod-to-Schema bridges at plugin/SDK edges.
The File module maintains mutable Maps (files/dirs) with a fetching flag for deduplication. Cache provides memoization with TTL and automatic deduplication, replacing this pattern.
LSP client management (spawning/connected/broken state machine) could benefit from Pool for automatic acquisition, health checking, and release.
Recommended medium-term order:
- Continue with CRUD-like or storage-backed modules
- Convert boundary entrypoints in CLI, server, and jobs as services become available
- Move into
Instance-adjacent systems with adapter layers, not direct rewrites - Remove promise facades after direct callers have moved
This keeps momentum while reserving the hardest context work for when the team has a clearer house style.