@effect-auth/core 0.1.0-alpha.1 → 0.1.0-alpha.13

package/dist/EffectQbSqliteStorage.d.ts

@@ -0,0 +1,985 @@
+import { Layer } from "effect";
+import { Executor, Query, Scalar, Table } from "effect-qb/sqlite";
+import { AuditLogStore } from "./AuditLog.js";
+import type { AuditLogStoreService, AuthAuditEvent } from "./AuditLog.js";
+import { ApiKeyStore } from "./ApiKey.js";
+import type { ApiKeyMarkUsedInput, ApiKeyRecord, ApiKeyRevokeInput, ApiKeyStoreService } from "./ApiKey.js";
+import { DomainVerificationStore } from "./DomainVerification.js";
+import type { DomainVerificationRecord, DomainVerificationStoreMarkVerifiedInput, DomainVerificationStoreRevokeInput, DomainVerificationStoreService } from "./DomainVerification.js";
+import { UnixMillis } from "./Identifiers.js";
+import { JwtRevocationStore } from "./Jwt.js";
+import type { JwtRevocationRecord, JwtRevocationStoreService } from "./Jwt.js";
+import { LoginApprovalReviewStore } from "./LoginApproval.js";
+import type { LoginApprovalReviewRecord, LoginApprovalReviewStoreService, LoginApprovalReviewerId } from "./LoginApproval.js";
+import { LoginRiskHistory } from "./LoginRisk.js";
+import type { LoginRiskHistoryRecordInput, LoginRiskHistoryService } from "./LoginRisk.js";
+import { OAuthAccountStore, OAuthAuthorizationCodeStore, OAuthClientStore, OAuthConsentStore, OAuthClientSecretStore, OAuthProviderModeTokenStore, OAuthProviderTokenVault } from "./OAuth.js";
+import type { OAuthAccountRecord, OAuthAccountStoreService, OAuthAccountUnlinkInput, OAuthAuthorizationCodeRecord, OAuthAuthorizationCodeStoreMarkConsumedInput, OAuthAuthorizationCodeStoreService, OAuthClientRecord, OAuthClientStoreService, OAuthConsentRecord, OAuthConsentRevokeInput, OAuthConsentStoreService, OAuthClientSecretRecord, OAuthClientSecretStoreMarkUsedInput, OAuthClientSecretStoreRevokeInput, OAuthClientSecretStoreService, OAuthProviderModeTokenRecord, OAuthProviderModeTokenStoreRevokeInput, OAuthProviderModeTokenStoreRotateInput, OAuthProviderModeTokenStoreService, OAuthProviderTokenVaultMarkRevokedInput, OAuthProviderTokenVaultRecord, OAuthProviderTokenVaultService } from "./OAuth.js";
+import { PasskeyCredentialStore } from "./Passkey.js";
+import type { PasskeyCredentialRecord, PasskeyCredentialRevokeInput, PasskeyCredentialStoreService, PasskeyCredentialUpdateSignCountInput } from "./Passkey.js";
+import { RecoveryCodeStore } from "./RecoveryCode.js";
+import type { RecoveryCodeMarkUsedInput, RecoveryCodeRecord, RecoveryCodeRevokeInput, RecoveryCodeStoreService } from "./RecoveryCode.js";
+import { RefreshTokenStore } from "./RefreshToken.js";
+import type { RefreshTokenMarkReuseDetectedInput, RefreshTokenRecord, RefreshTokenRevokeFamilyInput, RefreshTokenRevokeInput, RefreshTokenRotateStoreInput, RefreshTokenStoreService } from "./RefreshToken.js";
+import { SecurityTimelineStore } from "./SecurityTimeline.js";
+import type { SecurityTimelineEvent, SecurityTimelineStoreService } from "./SecurityTimeline.js";
+import type { AuthMethodReference } from "./Sessions.js";
+import { CredentialStore, SessionStore, UserStore, VerificationStore } from "./Storage.js";
+import type { CredentialStoreService, NewPasswordCredentialRow, NewSessionRow, NewUserRow, NewVerificationRow, PasswordCredentialRow, PasswordCredentialUpdatePasswordInput, SessionRefreshStoreInput, SessionRevokeAllForUserStoreInput, SessionRevokeStoreInput, SessionRotateStoreInput, SessionRow, SessionStoreService, SessionUpdateClaimsStoreInput, UserMarkEmailVerifiedInput, UserRow, UserStoreService, VerificationConsumeInput, VerificationRow, VerificationStoreService } from "./Storage.js";
+import { TotpFactorStore } from "./Totp.js";
+import type { TotpFactorConfirmInput, TotpFactorMarkUsedInput, TotpFactorRecord, TotpFactorRevokeInput, TotpFactorStoreService } from "./Totp.js";
+import { TrustedDeviceStore } from "./TrustedDevice.js";
+import type { TrustedDeviceRecord, TrustedDeviceStoreService, TrustedDeviceStoreUpsertInput } from "./TrustedDevice.js";
+import { WebhookOutboxStore, WebhookReplayStore } from "./Webhook.js";
+import type { WebhookOutboxMarkDeadLetteredInput, WebhookOutboxMarkDeliveredInput, WebhookOutboxMarkFailedInput, WebhookOutboxRecord, WebhookOutboxStoreService, WebhookReplayClaimInput, WebhookReplayStoreService } from "./Webhook.js";
+export interface D1EffectQbResult<Row extends Readonly<Record<string, unknown>> = Readonly<Record<string, unknown>>> {
+    readonly success?: boolean;
+    readonly error?: string;
+    readonly results?: readonly Row[];
+}
+export interface D1EffectQbPreparedStatementLike {
+    readonly bind: (...values: readonly unknown[]) => D1EffectQbPreparedStatementLike;
+    readonly all: <Row extends Readonly<Record<string, unknown>> = Readonly<Record<string, unknown>>>() => Promise<D1EffectQbResult<Row>>;
+}
+export interface D1EffectQbDatabaseLike {
+    readonly prepare: (sql: string) => D1EffectQbPreparedStatementLike;
+}
+declare const D1EffectQbError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "D1EffectQbError";
+} & Readonly<A>;
+export declare class D1EffectQbError extends D1EffectQbError_base<{
+    readonly message: string;
+    readonly cause?: unknown;
+}> {
+}
+export interface EffectQbAuthUserSelectedRow {
+    readonly id: string;
+    readonly email: string;
+    readonly emailVerified: boolean | number | string | null;
+    readonly createdAt: number;
+    readonly updatedAt: number;
+    readonly disabledAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthCredentialSelectedRow {
+    readonly id: string;
+    readonly userId: string;
+    readonly type: string;
+    readonly passwordHash: string | null;
+    readonly createdAt: number;
+    readonly updatedAt: number;
+    readonly revokedAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthSessionSelectedRow {
+    readonly id: string;
+    readonly userId: string;
+    readonly secretHash: string;
+    readonly createdAt: number;
+    readonly expiresAt: number;
+    readonly authTime: number;
+    readonly aal: string;
+    readonly amr: string | readonly AuthMethodReference[];
+    readonly mfaVerifiedAt: number | null;
+    readonly metadata: unknown;
+    readonly revokedAt: number | null;
+    readonly lastSeenAt: number | null;
+    readonly rotatedAt: number | null;
+}
+export interface EffectQbAuthVerificationSelectedRow {
+    readonly id: string;
+    readonly type: string;
+    readonly subject: string;
+    readonly secretHash: string | null;
+    readonly createdAt: number;
+    readonly expiresAt: number;
+    readonly metadata: unknown;
+    readonly consumedAt: number | null;
+}
+export interface EffectQbAuthAuditLogSelectedRow {
+    readonly id: string | null;
+    readonly type: string;
+    readonly userId: string | null;
+    readonly actorUserId: string | null;
+    readonly occurredAt: number;
+    readonly requestIpHash: string | null;
+    readonly requestUserAgentHash: string | null;
+    readonly event: unknown;
+    readonly createdAt: number;
+}
+export interface EffectQbAuthLoginApprovalReviewSelectedRow {
+    readonly approvalChallengeId: string;
+    readonly flowId: string;
+    readonly userId: string;
+    readonly channel: string;
+    readonly reason: string;
+    readonly sessionBinding: string;
+    readonly sameDeviceRequired: boolean | number | string | null;
+    readonly status: string;
+    readonly createdAt: number;
+    readonly expiresAt: number;
+    readonly reviewedAt: number | null;
+    readonly reviewedBy: string | null;
+    readonly deniedReason: string | null;
+    readonly risk: unknown;
+    readonly metadata: unknown;
+    readonly reviewMetadata: unknown;
+}
+export interface EffectQbAuthLoginRiskHistorySelectedRow {
+    readonly id: string;
+    readonly userId: string;
+    readonly occurredAt: number;
+    readonly outcome: string;
+    readonly method: string;
+    readonly amr: string | readonly AuthMethodReference[];
+    readonly aal: string;
+    readonly deviceStatus: string;
+    readonly deviceKey: string | null;
+    readonly locationKey: string | null;
+    readonly country: string | null;
+    readonly region: string | null;
+    readonly latitudeMicro: number | null;
+    readonly longitudeMicro: number | null;
+    readonly riskLevel: string | null;
+    readonly createdAt: number;
+}
+export interface EffectQbAuthTrustedDeviceSelectedRow {
+    readonly userId: string;
+    readonly tokenHash: string;
+    readonly createdAt: number;
+    readonly lastSeenAt: number;
+    readonly expiresAt: number;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthPasskeyCredentialSelectedRow {
+    readonly id: string;
+    readonly userId: string;
+    readonly credentialId: string;
+    readonly publicKey: string;
+    readonly signCount: number;
+    readonly transports: unknown;
+    readonly backedUp: boolean | number | string | null;
+    readonly createdAt: number;
+    readonly lastUsedAt: number | null;
+    readonly revokedAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthTotpFactorSelectedRow {
+    readonly id: string;
+    readonly userId: string;
+    readonly secret: string;
+    readonly algorithm: string;
+    readonly digits: number;
+    readonly period: number;
+    readonly createdAt: number;
+    readonly confirmedAt: number | null;
+    readonly lastUsedAt: number | null;
+    readonly revokedAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthRecoveryCodeSelectedRow {
+    readonly id: string;
+    readonly userId: string;
+    readonly codeHash: string;
+    readonly createdAt: number;
+    readonly usedAt: number | null;
+    readonly revokedAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthApiKeySelectedRow {
+    readonly id: string;
+    readonly userId: string;
+    readonly prefix: string;
+    readonly secretHash: string;
+    readonly scopes: unknown;
+    readonly createdAt: number;
+    readonly expiresAt: number | null;
+    readonly lastUsedAt: number | null;
+    readonly revokedAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthRefreshTokenSelectedRow {
+    readonly id: string;
+    readonly familyId: string;
+    readonly userId: string;
+    readonly secretHash: string;
+    readonly createdAt: number;
+    readonly expiresAt: number;
+    readonly lastUsedAt: number | null;
+    readonly rotatedAt: number | null;
+    readonly replacedById: string | null;
+    readonly revokedAt: number | null;
+    readonly reuseDetectedAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthJwtRevocationSelectedRow {
+    readonly jwtId: string;
+    readonly revokedAt: number;
+    readonly expiresAt: number | null;
+    readonly reason: string | null;
+}
+export interface EffectQbAuthOAuthAccountSelectedRow {
+    readonly id: string;
+    readonly providerId: string;
+    readonly providerAccountId: string;
+    readonly userId: string;
+    readonly email: string | null;
+    readonly emailVerified: boolean | number | string | null;
+    readonly createdAt: number;
+    readonly updatedAt: number;
+    readonly unlinkedAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthOAuthProviderTokenVaultSelectedRow {
+    readonly accountId: string;
+    readonly userId: string;
+    readonly providerId: string;
+    readonly providerAccountId: string;
+    readonly accessTokenCiphertext: string;
+    readonly refreshTokenCiphertext: string | null;
+    readonly idTokenCiphertext: string | null;
+    readonly tokenType: string;
+    readonly scopes: unknown;
+    readonly expiresAt: number | null;
+    readonly updatedAt: number;
+    readonly revokedAt: number | null;
+    readonly revocationReason: string | null;
+}
+export interface EffectQbAuthOAuthClientSelectedRow {
+    readonly id: string;
+    readonly type: string;
+    readonly status: string;
+    readonly name: string | null;
+    readonly redirectUris: unknown;
+    readonly allowedGrantTypes: unknown;
+    readonly allowedResponseTypes: unknown;
+    readonly allowedScopes: unknown;
+    readonly createdAt: number | null;
+    readonly updatedAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthOAuthConsentSelectedRow {
+    readonly id: string;
+    readonly userId: string;
+    readonly clientId: string;
+    readonly scopes: unknown;
+    readonly grantedAt: number;
+    readonly expiresAt: number | null;
+    readonly revokedAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthOAuthAuthorizationCodeSelectedRow {
+    readonly codeHash: string;
+    readonly clientId: string;
+    readonly subject: string;
+    readonly redirectUri: string;
+    readonly scopes: unknown;
+    readonly codeChallenge: string | null;
+    readonly codeChallengeMethod: string | null;
+    readonly issuedAt: number;
+    readonly expiresAt: number;
+    readonly consumedAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthOAuthClientSecretSelectedRow {
+    readonly prefix: string;
+    readonly clientId: string;
+    readonly secretHash: string;
+    readonly authenticationMethods: unknown;
+    readonly createdAt: number;
+    readonly expiresAt: number | null;
+    readonly lastUsedAt: number | null;
+    readonly revokedAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthOAuthProviderModeTokenSelectedRow {
+    readonly tokenHash: string;
+    readonly tokenType: string;
+    readonly clientId: string;
+    readonly subject: string;
+    readonly scopes: unknown;
+    readonly issuedAt: number;
+    readonly expiresAt: number;
+    readonly issuer: string | null;
+    readonly audience: unknown;
+    readonly jwtId: string | null;
+    readonly revokedAt: number | null;
+    readonly revocationReason: string | null;
+    readonly rotatedAt: number | null;
+    readonly replacedByTokenHash: string | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthDomainVerificationSelectedRow {
+    readonly id: string;
+    readonly ownerId: string;
+    readonly domain: string;
+    readonly proofMethod: string;
+    readonly proofToken: string;
+    readonly status: string;
+    readonly createdAt: number;
+    readonly expiresAt: number;
+    readonly verifiedAt: number | null;
+    readonly revokedAt: number | null;
+    readonly lastCheckedAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthSecurityTimelineSelectedRow {
+    readonly id: string;
+    readonly userId: string;
+    readonly type: string;
+    readonly category: string;
+    readonly severity: string;
+    readonly occurredAt: number;
+    readonly summary: string;
+    readonly actor: unknown;
+    readonly request: unknown;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthWebhookOutboxSelectedRow {
+    readonly id: string;
+    readonly endpointKey: string;
+    readonly event: unknown;
+    readonly status: string;
+    readonly attempts: number;
+    readonly nextAttemptAt: number;
+    readonly createdAt: number;
+    readonly updatedAt: number;
+    readonly deliveredAt: number | null;
+    readonly lastError: string | null;
+}
+export interface EffectQbAuthWebhookReplaySelectedRow {
+    readonly id: string;
+    readonly expiresAt: number;
+    readonly createdAt: number;
+}
+declare const authSqliteTablesTypeId: unique symbol;
+export interface AuthSqliteTableNames {
+    readonly user?: string;
+    readonly credential?: string;
+    readonly session?: string;
+    readonly verification?: string;
+    readonly auditLog?: string;
+    readonly loginApprovalReview?: string;
+    readonly loginRiskHistory?: string;
+    readonly trustedDevice?: string;
+    readonly passkeyCredential?: string;
+    readonly totpFactor?: string;
+    readonly recoveryCode?: string;
+    readonly apiKey?: string;
+    readonly refreshToken?: string;
+    readonly jwtRevocation?: string;
+    readonly oauthAccount?: string;
+    readonly oauthClient?: string;
+    readonly oauthConsent?: string;
+    readonly oauthAuthorizationCode?: string;
+    readonly oauthClientSecret?: string;
+    readonly oauthProviderModeToken?: string;
+    readonly oauthProviderTokenVault?: string;
+    readonly domainVerification?: string;
+    readonly securityTimeline?: string;
+    readonly webhookOutbox?: string;
+    readonly webhookReplay?: string;
+}
+type EffectQbSqliteTable = Table.AnyTable;
+type EffectQbInsertInput<TableValue extends EffectQbSqliteTable> = Query.MutationInputOf<Table.InsertOf<TableValue>>;
+type EffectQbUpdateInput<TableValue extends EffectQbSqliteTable> = Query.MutationInputOf<Table.UpdateOf<TableValue>>;
+type EffectQbSqliteExpression = Scalar.Scalar<unknown, Scalar.DbType.Any & {
+    readonly dialect: "sqlite";
+}, Scalar.Nullability, "sqlite", Scalar.ScalarKind, Scalar.BindingId, string>;
+type EffectQbSelection = Readonly<Record<string, EffectQbSqliteExpression>>;
+export interface EffectQbAuthUserTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly email: EffectQbSqliteExpression;
+        readonly emailVerified: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly updatedAt: EffectQbSqliteExpression;
+        readonly disabledAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (row: NewUserRow) => EffectQbInsertInput<TableValue>;
+    readonly markEmailVerified: (input: UserMarkEmailVerifiedInput) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthUserSelectedRow) => UserRow;
+}
+export interface EffectQbAuthCredentialTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly type: EffectQbSqliteExpression;
+        readonly passwordHash: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly updatedAt: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insertPassword: (row: NewPasswordCredentialRow) => EffectQbInsertInput<TableValue>;
+    readonly updatePassword: (input: PasswordCredentialUpdatePasswordInput) => EffectQbUpdateInput<TableValue>;
+    readonly decodePassword?: (row: EffectQbAuthCredentialSelectedRow) => PasswordCredentialRow;
+}
+export type EffectQbSessionRevokeInput = SessionRevokeStoreInput | SessionRevokeAllForUserStoreInput;
+export interface EffectQbAuthSessionTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly secretHash: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly authTime: EffectQbSqliteExpression;
+        readonly aal: EffectQbSqliteExpression;
+        readonly amr: EffectQbSqliteExpression;
+        readonly mfaVerifiedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly lastSeenAt: EffectQbSqliteExpression;
+        readonly rotatedAt: EffectQbSqliteExpression;
+    };
+    readonly insert: (row: NewSessionRow) => EffectQbInsertInput<TableValue>;
+    readonly refresh: (input: SessionRefreshStoreInput) => EffectQbUpdateInput<TableValue>;
+    readonly rotate: (input: SessionRotateStoreInput) => EffectQbUpdateInput<TableValue>;
+    readonly updateClaims: (row: SessionRow, input: SessionUpdateClaimsStoreInput) => EffectQbUpdateInput<TableValue>;
+    readonly revoke: (input: EffectQbSessionRevokeInput) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthSessionSelectedRow) => SessionRow;
+}
+export interface EffectQbAuthVerificationTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly type: EffectQbSqliteExpression;
+        readonly subject: EffectQbSqliteExpression;
+        readonly secretHash: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+        readonly consumedAt: EffectQbSqliteExpression;
+    };
+    readonly insert: (row: NewVerificationRow) => EffectQbInsertInput<TableValue>;
+    readonly consume: (input: VerificationConsumeInput) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthVerificationSelectedRow) => VerificationRow;
+}
+export interface EffectQbAuthAuditLogTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly type: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly actorUserId: EffectQbSqliteExpression;
+        readonly occurredAt: EffectQbSqliteExpression;
+        readonly requestIpHash: EffectQbSqliteExpression;
+        readonly requestUserAgentHash: EffectQbSqliteExpression;
+        readonly event: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+    };
+    readonly insert: (event: AuthAuditEvent, createdAt: UnixMillis) => EffectQbInsertInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthAuditLogSelectedRow) => AuthAuditEvent;
+}
+export interface EffectQbAuthLoginApprovalReviewTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly approvalChallengeId: EffectQbSqliteExpression;
+        readonly flowId: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly channel: EffectQbSqliteExpression;
+        readonly reason: EffectQbSqliteExpression;
+        readonly sessionBinding: EffectQbSqliteExpression;
+        readonly sameDeviceRequired: EffectQbSqliteExpression;
+        readonly status: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly reviewedAt: EffectQbSqliteExpression;
+        readonly reviewedBy: EffectQbSqliteExpression;
+        readonly deniedReason: EffectQbSqliteExpression;
+        readonly risk: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+        readonly reviewMetadata: EffectQbSqliteExpression;
+    };
+    readonly insertPending: (row: LoginApprovalReviewRecord) => EffectQbInsertInput<TableValue>;
+    readonly approve: (input: {
+        readonly reviewedAt: UnixMillis;
+        readonly reviewedBy?: LoginApprovalReviewerId;
+        readonly metadata?: Readonly<Record<string, unknown>>;
+    }) => EffectQbUpdateInput<TableValue>;
+    readonly deny: (input: {
+        readonly reviewedAt: UnixMillis;
+        readonly reviewedBy?: LoginApprovalReviewerId;
+        readonly reason?: string;
+        readonly metadata?: Readonly<Record<string, unknown>>;
+    }) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthLoginApprovalReviewSelectedRow) => LoginApprovalReviewRecord;
+}
+export interface EffectQbAuthLoginRiskHistoryTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly occurredAt: EffectQbSqliteExpression;
+        readonly outcome: EffectQbSqliteExpression;
+        readonly method: EffectQbSqliteExpression;
+        readonly amr: EffectQbSqliteExpression;
+        readonly aal: EffectQbSqliteExpression;
+        readonly deviceStatus: EffectQbSqliteExpression;
+        readonly deviceKey: EffectQbSqliteExpression;
+        readonly locationKey: EffectQbSqliteExpression;
+        readonly country: EffectQbSqliteExpression;
+        readonly region: EffectQbSqliteExpression;
+        readonly latitudeMicro: EffectQbSqliteExpression;
+        readonly longitudeMicro: EffectQbSqliteExpression;
+        readonly riskLevel: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+    };
+    readonly insert: (row: LoginRiskHistoryRecordInput & {
+        readonly createdAt: UnixMillis;
+    }) => EffectQbInsertInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthLoginRiskHistorySelectedRow) => LoginRiskHistoryRecordInput & {
+        readonly createdAt: UnixMillis;
+    };
+}
+export interface EffectQbAuthTrustedDeviceTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly userId: EffectQbSqliteExpression;
+        readonly tokenHash: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly lastSeenAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (input: TrustedDeviceStoreUpsertInput, createdAt: UnixMillis) => EffectQbInsertInput<TableValue>;
+    readonly update: (input: TrustedDeviceStoreUpsertInput, existing: TrustedDeviceRecord) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthTrustedDeviceSelectedRow) => TrustedDeviceRecord;
+}
+export interface EffectQbAuthPasskeyCredentialTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly credentialId: EffectQbSqliteExpression;
+        readonly publicKey: EffectQbSqliteExpression;
+        readonly signCount: EffectQbSqliteExpression;
+        readonly transports: EffectQbSqliteExpression;
+        readonly backedUp: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly lastUsedAt: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (row: PasskeyCredentialRecord) => EffectQbInsertInput<TableValue>;
+    readonly updateSignCount: (input: PasskeyCredentialUpdateSignCountInput) => EffectQbUpdateInput<TableValue>;
+    readonly revoke: (input: PasskeyCredentialRevokeInput, row: PasskeyCredentialRecord) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthPasskeyCredentialSelectedRow) => PasskeyCredentialRecord;
+}
+export interface EffectQbAuthTotpFactorTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly secret: EffectQbSqliteExpression;
+        readonly algorithm: EffectQbSqliteExpression;
+        readonly digits: EffectQbSqliteExpression;
+        readonly period: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly confirmedAt: EffectQbSqliteExpression;
+        readonly lastUsedAt: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (row: TotpFactorRecord) => EffectQbInsertInput<TableValue>;
+    readonly confirm: (input: TotpFactorConfirmInput) => EffectQbUpdateInput<TableValue>;
+    readonly markUsed: (input: TotpFactorMarkUsedInput) => EffectQbUpdateInput<TableValue>;
+    readonly revoke: (input: TotpFactorRevokeInput, row: TotpFactorRecord) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthTotpFactorSelectedRow) => TotpFactorRecord;
+}
+export interface EffectQbAuthRecoveryCodeTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly codeHash: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly usedAt: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (row: RecoveryCodeRecord) => EffectQbInsertInput<TableValue>;
+    readonly markUsed: (input: RecoveryCodeMarkUsedInput) => EffectQbUpdateInput<TableValue>;
+    readonly revoke: (input: RecoveryCodeRevokeInput, row: RecoveryCodeRecord) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthRecoveryCodeSelectedRow) => RecoveryCodeRecord;
+}
+export interface EffectQbAuthApiKeyTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly prefix: EffectQbSqliteExpression;
+        readonly secretHash: EffectQbSqliteExpression;
+        readonly scopes: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly lastUsedAt: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (row: ApiKeyRecord) => EffectQbInsertInput<TableValue>;
+    readonly markUsed: (input: ApiKeyMarkUsedInput) => EffectQbUpdateInput<TableValue>;
+    readonly revoke: (input: ApiKeyRevokeInput, row: ApiKeyRecord) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthApiKeySelectedRow) => ApiKeyRecord;
+}
+export interface EffectQbAuthRefreshTokenTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly familyId: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly secretHash: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly lastUsedAt: EffectQbSqliteExpression;
+        readonly rotatedAt: EffectQbSqliteExpression;
+        readonly replacedById: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly reuseDetectedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (row: RefreshTokenRecord) => EffectQbInsertInput<TableValue>;
+    readonly rotate: (input: RefreshTokenRotateStoreInput) => EffectQbUpdateInput<TableValue>;
+    readonly markReuseDetected: (input: RefreshTokenMarkReuseDetectedInput) => EffectQbUpdateInput<TableValue>;
+    readonly revoke: (input: RefreshTokenRevokeInput, row: RefreshTokenRecord) => EffectQbUpdateInput<TableValue>;
+    readonly revokeFamily: (input: RefreshTokenRevokeFamilyInput, row: RefreshTokenRecord) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthRefreshTokenSelectedRow) => RefreshTokenRecord;
+}
+export interface EffectQbAuthJwtRevocationTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly jwtId: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly reason: EffectQbSqliteExpression;
+    };
+    readonly insert: (record: JwtRevocationRecord) => EffectQbInsertInput<TableValue>;
+    readonly update: (record: JwtRevocationRecord) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthJwtRevocationSelectedRow) => JwtRevocationRecord;
+}
+export interface EffectQbAuthOAuthAccountTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly providerId: EffectQbSqliteExpression;
+        readonly providerAccountId: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly email: EffectQbSqliteExpression;
+        readonly emailVerified: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly updatedAt: EffectQbSqliteExpression;
+        readonly unlinkedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (row: OAuthAccountRecord) => EffectQbInsertInput<TableValue>;
+    readonly unlink: (input: OAuthAccountUnlinkInput, row: OAuthAccountRecord) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthOAuthAccountSelectedRow) => OAuthAccountRecord;
+}
+export interface EffectQbAuthOAuthProviderTokenVaultTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly accountId: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly providerId: EffectQbSqliteExpression;
+        readonly providerAccountId: EffectQbSqliteExpression;
+        readonly accessTokenCiphertext: EffectQbSqliteExpression;
+        readonly refreshTokenCiphertext: EffectQbSqliteExpression;
+        readonly idTokenCiphertext: EffectQbSqliteExpression;
+        readonly tokenType: EffectQbSqliteExpression;
+        readonly scopes: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly updatedAt: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly revocationReason: EffectQbSqliteExpression;
+    };
+    readonly insert: (row: OAuthProviderTokenVaultRecord) => EffectQbInsertInput<TableValue>;
+    readonly update: (row: OAuthProviderTokenVaultRecord) => EffectQbUpdateInput<TableValue>;
+    readonly markRevoked: (input: OAuthProviderTokenVaultMarkRevokedInput) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthOAuthProviderTokenVaultSelectedRow) => OAuthProviderTokenVaultRecord;
+}
+export interface EffectQbAuthOAuthClientTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly type: EffectQbSqliteExpression;
+        readonly status: EffectQbSqliteExpression;
+        readonly name: EffectQbSqliteExpression;
+        readonly redirectUris: EffectQbSqliteExpression;
+        readonly allowedGrantTypes: EffectQbSqliteExpression;
+        readonly allowedResponseTypes: EffectQbSqliteExpression;
+        readonly allowedScopes: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly updatedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (record: OAuthClientRecord) => EffectQbInsertInput<TableValue>;
+    readonly update: (record: OAuthClientRecord) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthOAuthClientSelectedRow) => OAuthClientRecord;
+}
+export interface EffectQbAuthOAuthConsentTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly clientId: EffectQbSqliteExpression;
+        readonly scopes: EffectQbSqliteExpression;
+        readonly grantedAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (record: OAuthConsentRecord) => EffectQbInsertInput<TableValue>;
+    readonly update: (record: OAuthConsentRecord) => EffectQbUpdateInput<TableValue>;
+    readonly revoke: (input: OAuthConsentRevokeInput, row: OAuthConsentRecord) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthOAuthConsentSelectedRow) => OAuthConsentRecord;
+}
+export interface EffectQbAuthOAuthAuthorizationCodeTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly codeHash: EffectQbSqliteExpression;
+        readonly clientId: EffectQbSqliteExpression;
+        readonly subject: EffectQbSqliteExpression;
+        readonly redirectUri: EffectQbSqliteExpression;
+        readonly scopes: EffectQbSqliteExpression;
+        readonly codeChallenge: EffectQbSqliteExpression;
+        readonly codeChallengeMethod: EffectQbSqliteExpression;
+        readonly issuedAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly consumedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (record: OAuthAuthorizationCodeRecord) => EffectQbInsertInput<TableValue>;
+    readonly update: (record: OAuthAuthorizationCodeRecord) => EffectQbUpdateInput<TableValue>;
+    readonly markConsumed: (input: OAuthAuthorizationCodeStoreMarkConsumedInput) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthOAuthAuthorizationCodeSelectedRow) => OAuthAuthorizationCodeRecord;
+}
+export interface EffectQbAuthOAuthClientSecretTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly prefix: EffectQbSqliteExpression;
+        readonly clientId: EffectQbSqliteExpression;
+        readonly secretHash: EffectQbSqliteExpression;
+        readonly authenticationMethods: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly lastUsedAt: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (record: OAuthClientSecretRecord) => EffectQbInsertInput<TableValue>;
+    readonly update: (record: OAuthClientSecretRecord) => EffectQbUpdateInput<TableValue>;
+    readonly markUsed: (input: OAuthClientSecretStoreMarkUsedInput) => EffectQbUpdateInput<TableValue>;
+    readonly revoke: (input: OAuthClientSecretStoreRevokeInput, row: OAuthClientSecretRecord) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthOAuthClientSecretSelectedRow) => OAuthClientSecretRecord;
+}
+export interface EffectQbAuthOAuthProviderModeTokenTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly tokenHash: EffectQbSqliteExpression;
+        readonly tokenType: EffectQbSqliteExpression;
+        readonly clientId: EffectQbSqliteExpression;
+        readonly subject: EffectQbSqliteExpression;
+        readonly scopes: EffectQbSqliteExpression;
+        readonly issuedAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly issuer: EffectQbSqliteExpression;
+        readonly audience: EffectQbSqliteExpression;
+        readonly jwtId: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly revocationReason: EffectQbSqliteExpression;
+        readonly rotatedAt: EffectQbSqliteExpression;
+        readonly replacedByTokenHash: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (record: OAuthProviderModeTokenRecord) => EffectQbInsertInput<TableValue>;
+    readonly update: (record: OAuthProviderModeTokenRecord) => EffectQbUpdateInput<TableValue>;
+    readonly revoke: (input: OAuthProviderModeTokenStoreRevokeInput, row: OAuthProviderModeTokenRecord) => EffectQbUpdateInput<TableValue>;
+    readonly rotate: (input: OAuthProviderModeTokenStoreRotateInput) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthOAuthProviderModeTokenSelectedRow) => OAuthProviderModeTokenRecord;
+}
+export interface EffectQbAuthDomainVerificationTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly ownerId: EffectQbSqliteExpression;
+        readonly domain: EffectQbSqliteExpression;
+        readonly proofMethod: EffectQbSqliteExpression;
+        readonly proofToken: EffectQbSqliteExpression;
+        readonly status: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly verifiedAt: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly lastCheckedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (record: DomainVerificationRecord) => EffectQbInsertInput<TableValue>;
+    readonly update: (record: DomainVerificationRecord) => EffectQbUpdateInput<TableValue>;
+    readonly markVerified: (input: DomainVerificationStoreMarkVerifiedInput) => EffectQbUpdateInput<TableValue>;
+    readonly revoke: (input: DomainVerificationStoreRevokeInput, row: DomainVerificationRecord) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthDomainVerificationSelectedRow) => DomainVerificationRecord;
+}
+export interface EffectQbAuthSecurityTimelineTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly type: EffectQbSqliteExpression;
+        readonly category: EffectQbSqliteExpression;
+        readonly severity: EffectQbSqliteExpression;
+        readonly occurredAt: EffectQbSqliteExpression;
+        readonly summary: EffectQbSqliteExpression;
+        readonly actor: EffectQbSqliteExpression;
+        readonly request: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (event: SecurityTimelineEvent) => EffectQbInsertInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthSecurityTimelineSelectedRow) => SecurityTimelineEvent;
+}
+export interface EffectQbAuthWebhookOutboxTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly endpointKey: EffectQbSqliteExpression;
+        readonly event: EffectQbSqliteExpression;
+        readonly status: EffectQbSqliteExpression;
+        readonly attempts: EffectQbSqliteExpression;
+        readonly nextAttemptAt: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly updatedAt: EffectQbSqliteExpression;
+        readonly deliveredAt: EffectQbSqliteExpression;
+        readonly lastError: EffectQbSqliteExpression;
+    };
+    readonly insert: (record: WebhookOutboxRecord) => EffectQbInsertInput<TableValue>;
+    readonly markDelivered: (input: WebhookOutboxMarkDeliveredInput & {
+        readonly deliveredAt: UnixMillis;
+    }) => EffectQbUpdateInput<TableValue>;
+    readonly markFailed: (input: WebhookOutboxMarkFailedInput & {
+        readonly failedAt: UnixMillis;
+        readonly attempts: number;
+    }) => EffectQbUpdateInput<TableValue>;
+    readonly markDeadLettered: (input: WebhookOutboxMarkDeadLetteredInput & {
+        readonly deadLetteredAt: UnixMillis;
+    }) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthWebhookOutboxSelectedRow) => WebhookOutboxRecord;
+}
+export interface EffectQbAuthWebhookReplayTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+    };
+    readonly insert: (input: WebhookReplayClaimInput & {
+        readonly now: UnixMillis;
+    }) => EffectQbInsertInput<TableValue>;
+    readonly update: (input: WebhookReplayClaimInput & {
+        readonly now: UnixMillis;
+    }) => EffectQbUpdateInput<TableValue>;
+}
+export interface EffectQbAuthTablesInput {
+    readonly user: EffectQbAuthUserTable;
+    readonly credential: EffectQbAuthCredentialTable;
+    readonly session: EffectQbAuthSessionTable;
+    readonly verification: EffectQbAuthVerificationTable;
+    readonly auditLog: EffectQbAuthAuditLogTable;
+    readonly loginApprovalReview: EffectQbAuthLoginApprovalReviewTable;
+    readonly loginRiskHistory: EffectQbAuthLoginRiskHistoryTable;
+    readonly trustedDevice: EffectQbAuthTrustedDeviceTable;
+    readonly passkeyCredential: EffectQbAuthPasskeyCredentialTable;
+    readonly totpFactor: EffectQbAuthTotpFactorTable;
+    readonly recoveryCode: EffectQbAuthRecoveryCodeTable;
+    readonly apiKey: EffectQbAuthApiKeyTable;
+    readonly refreshToken: EffectQbAuthRefreshTokenTable;
+    readonly jwtRevocation: EffectQbAuthJwtRevocationTable;
+    readonly oauthAccount: EffectQbAuthOAuthAccountTable;
+    readonly oauthClient: EffectQbAuthOAuthClientTable;
+    readonly oauthConsent: EffectQbAuthOAuthConsentTable;
+    readonly oauthAuthorizationCode: EffectQbAuthOAuthAuthorizationCodeTable;
+    readonly oauthClientSecret: EffectQbAuthOAuthClientSecretTable;
+    readonly oauthProviderModeToken: EffectQbAuthOAuthProviderModeTokenTable;
+    readonly oauthProviderTokenVault: EffectQbAuthOAuthProviderTokenVaultTable;
+    readonly domainVerification: EffectQbAuthDomainVerificationTable;
+    readonly securityTimeline: EffectQbAuthSecurityTimelineTable;
+    readonly webhookOutbox: EffectQbAuthWebhookOutboxTable;
+    readonly webhookReplay: EffectQbAuthWebhookReplayTable;
+}
+export interface AuthSqliteTables extends EffectQbAuthTablesInput {
+    readonly [authSqliteTablesTypeId]: typeof authSqliteTablesTypeId;
+}
+export interface EffectQbSqliteLoginRiskHistoryOptions {
+    readonly recentWindowMillis?: number;
+    readonly historyWindowMillis?: number;
+    readonly impossibleTravelWindowMillis?: number;
+    readonly impossibleTravelKmh?: number;
+}
+export interface EffectQbSqliteAuthStorageOptions {
+    readonly tables?: AuthSqliteTables;
+    readonly loginRiskHistory?: EffectQbSqliteLoginRiskHistoryOptions;
+}
+export interface EffectQbSqliteStorageStores {
+    readonly userStore: UserStoreService;
+    readonly credentialStore: CredentialStoreService;
+    readonly sessionStore: SessionStoreService;
+    readonly verificationStore: VerificationStoreService;
+    readonly auditLogStore: AuditLogStoreService;
+    readonly loginApprovalReviewStore: LoginApprovalReviewStoreService;
+    readonly loginRiskHistoryStore: LoginRiskHistoryService;
+    readonly trustedDeviceStore: TrustedDeviceStoreService;
+    readonly passkeyCredentialStore: PasskeyCredentialStoreService;
+    readonly totpFactorStore: TotpFactorStoreService;
+    readonly recoveryCodeStore: RecoveryCodeStoreService;
+    readonly apiKeyStore: ApiKeyStoreService;
+    readonly refreshTokenStore: RefreshTokenStoreService;
+    readonly jwtRevocationStore: JwtRevocationStoreService;
+    readonly oauthAccountStore: OAuthAccountStoreService;
+    readonly oauthClientStore: OAuthClientStoreService;
+    readonly oauthConsentStore: OAuthConsentStoreService;
+    readonly oauthAuthorizationCodeStore: OAuthAuthorizationCodeStoreService;
+    readonly oauthClientSecretStore: OAuthClientSecretStoreService;
+    readonly oauthProviderModeTokenStore: OAuthProviderModeTokenStoreService;
+    readonly oauthProviderTokenVault: OAuthProviderTokenVaultService;
+    readonly domainVerificationStore: DomainVerificationStoreService;
+    readonly securityTimelineStore: SecurityTimelineStoreService;
+    readonly webhookOutboxStore: WebhookOutboxStoreService;
+    readonly webhookReplayStore: WebhookReplayStoreService;
+}
+type EffectQbSqliteExecutor = Executor.QueryExecutor<never>;
+export declare const defineEffectQbAuthTables: <const Tables extends EffectQbAuthTablesInput>(tables: Tables) => AuthSqliteTables & Tables;
+export declare const makeAuthSqliteTables: (names?: AuthSqliteTableNames) => AuthSqliteTables;
+export declare const authSqliteTables: AuthSqliteTables;
+export declare const makeEffectQbSqliteUserStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => UserStoreService;
+export declare const makeEffectQbSqliteCredentialStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => CredentialStoreService;
+export declare const makeEffectQbSqliteSessionStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => SessionStoreService;
+export declare const makeEffectQbSqliteVerificationStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => VerificationStoreService;
+export declare const makeEffectQbSqliteAuditLogStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => AuditLogStoreService;
+export declare const makeEffectQbSqliteLoginApprovalReviewStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => LoginApprovalReviewStoreService;
+export declare const makeEffectQbSqliteLoginRiskHistoryStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => LoginRiskHistoryService;
+export declare const makeEffectQbSqliteTrustedDeviceStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => TrustedDeviceStoreService;
+export declare const makeEffectQbSqlitePasskeyCredentialStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => PasskeyCredentialStoreService;
+export declare const makeEffectQbSqliteTotpFactorStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => TotpFactorStoreService;
+export declare const makeEffectQbSqliteRecoveryCodeStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => RecoveryCodeStoreService;
+export declare const makeEffectQbSqliteApiKeyStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => ApiKeyStoreService;
+export declare const makeEffectQbSqliteRefreshTokenStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => RefreshTokenStoreService;
+export declare const makeEffectQbSqliteJwtRevocationStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => JwtRevocationStoreService;
+export declare const makeEffectQbSqliteOAuthAccountStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => OAuthAccountStoreService;
+export declare const makeEffectQbSqliteOAuthClientStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => OAuthClientStoreService;
+export declare const makeEffectQbSqliteOAuthConsentStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => OAuthConsentStoreService;
+export declare const makeEffectQbSqliteOAuthAuthorizationCodeStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => OAuthAuthorizationCodeStoreService;
+export declare const makeEffectQbSqliteOAuthClientSecretStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => OAuthClientSecretStoreService;
+export declare const makeEffectQbSqliteOAuthProviderModeTokenStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => OAuthProviderModeTokenStoreService;
+export declare const makeEffectQbSqliteOAuthProviderTokenVault: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => OAuthProviderTokenVaultService;
+export declare const makeEffectQbSqliteDomainVerificationStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => DomainVerificationStoreService;
+export declare const makeEffectQbSqliteSecurityTimelineStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => SecurityTimelineStoreService;
+export declare const makeEffectQbSqliteWebhookOutboxStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => WebhookOutboxStoreService;
+export declare const makeEffectQbSqliteWebhookReplayStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => WebhookReplayStoreService;
+export declare const makeEffectQbSqliteStorage: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => EffectQbSqliteStorageStores;
+export declare const EffectQbSqliteAuthStorageLive: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => Layer.Layer<ApiKeyStore | RefreshTokenStore | UserStore | CredentialStore | SessionStore | VerificationStore | LoginRiskHistory | LoginApprovalReviewStore | TrustedDeviceStore | PasskeyCredentialStore | AuditLogStore | JwtRevocationStore | OAuthClientStore | OAuthConsentStore | OAuthClientSecretStore | OAuthAuthorizationCodeStore | OAuthProviderModeTokenStore | OAuthProviderTokenVault | OAuthAccountStore | RecoveryCodeStore | SecurityTimelineStore | TotpFactorStore | DomainVerificationStore | WebhookOutboxStore | WebhookReplayStore, never, never>;
+export declare const makeD1EffectQbSqliteExecutor: (database: D1EffectQbDatabaseLike) => EffectQbSqliteExecutor;
+export declare const D1EffectQbSqliteAuthStorageLive: (database: D1EffectQbDatabaseLike, options?: EffectQbSqliteAuthStorageOptions) => Layer.Layer<ApiKeyStore | RefreshTokenStore | UserStore | CredentialStore | SessionStore | VerificationStore | LoginRiskHistory | LoginApprovalReviewStore | TrustedDeviceStore | PasskeyCredentialStore | AuditLogStore | JwtRevocationStore | OAuthClientStore | OAuthConsentStore | OAuthClientSecretStore | OAuthAuthorizationCodeStore | OAuthProviderModeTokenStore | OAuthProviderTokenVault | OAuthAccountStore | RecoveryCodeStore | SecurityTimelineStore | TotpFactorStore | DomainVerificationStore | WebhookOutboxStore | WebhookReplayStore, never, never>;
+export {};
+//# sourceMappingURL=EffectQbSqliteStorage.d.ts.map