@effect-auth/core 0.1.0-alpha.10 → 0.1.0-alpha.13

package/dist/EffectQbSqliteStorage.d.ts

@@ -1,14 +1,20 @@
 import { Layer } from "effect";
 import { Executor, Query, Scalar, Table } from "effect-qb/sqlite";
+import { AuditLogStore } from "./AuditLog.js";
+import type { AuditLogStoreService, AuthAuditEvent } from "./AuditLog.js";
 import { ApiKeyStore } from "./ApiKey.js";
 import type { ApiKeyMarkUsedInput, ApiKeyRecord, ApiKeyRevokeInput, ApiKeyStoreService } from "./ApiKey.js";
+import { DomainVerificationStore } from "./DomainVerification.js";
+import type { DomainVerificationRecord, DomainVerificationStoreMarkVerifiedInput, DomainVerificationStoreRevokeInput, DomainVerificationStoreService } from "./DomainVerification.js";
 import { UnixMillis } from "./Identifiers.js";
 import { JwtRevocationStore } from "./Jwt.js";
 import type { JwtRevocationRecord, JwtRevocationStoreService } from "./Jwt.js";
 import { LoginApprovalReviewStore } from "./LoginApproval.js";
 import type { LoginApprovalReviewRecord, LoginApprovalReviewStoreService, LoginApprovalReviewerId } from "./LoginApproval.js";
-import { OAuthAccountStore, OAuthProviderTokenVault } from "./OAuth.js";
-import type { OAuthAccountRecord, OAuthAccountStoreService, OAuthAccountUnlinkInput, OAuthProviderTokenVaultMarkRevokedInput, OAuthProviderTokenVaultRecord, OAuthProviderTokenVaultService } from "./OAuth.js";
+import { LoginRiskHistory } from "./LoginRisk.js";
+import type { LoginRiskHistoryRecordInput, LoginRiskHistoryService } from "./LoginRisk.js";
+import { OAuthAccountStore, OAuthAuthorizationCodeStore, OAuthClientStore, OAuthConsentStore, OAuthClientSecretStore, OAuthProviderModeTokenStore, OAuthProviderTokenVault } from "./OAuth.js";
+import type { OAuthAccountRecord, OAuthAccountStoreService, OAuthAccountUnlinkInput, OAuthAuthorizationCodeRecord, OAuthAuthorizationCodeStoreMarkConsumedInput, OAuthAuthorizationCodeStoreService, OAuthClientRecord, OAuthClientStoreService, OAuthConsentRecord, OAuthConsentRevokeInput, OAuthConsentStoreService, OAuthClientSecretRecord, OAuthClientSecretStoreMarkUsedInput, OAuthClientSecretStoreRevokeInput, OAuthClientSecretStoreService, OAuthProviderModeTokenRecord, OAuthProviderModeTokenStoreRevokeInput, OAuthProviderModeTokenStoreRotateInput, OAuthProviderModeTokenStoreService, OAuthProviderTokenVaultMarkRevokedInput, OAuthProviderTokenVaultRecord, OAuthProviderTokenVaultService } from "./OAuth.js";
 import { PasskeyCredentialStore } from "./Passkey.js";
 import type { PasskeyCredentialRecord, PasskeyCredentialRevokeInput, PasskeyCredentialStoreService, PasskeyCredentialUpdateSignCountInput } from "./Passkey.js";
 import { RecoveryCodeStore } from "./RecoveryCode.js";
@@ -24,6 +30,8 @@ import { TotpFactorStore } from "./Totp.js";
 import type { TotpFactorConfirmInput, TotpFactorMarkUsedInput, TotpFactorRecord, TotpFactorRevokeInput, TotpFactorStoreService } from "./Totp.js";
 import { TrustedDeviceStore } from "./TrustedDevice.js";
 import type { TrustedDeviceRecord, TrustedDeviceStoreService, TrustedDeviceStoreUpsertInput } from "./TrustedDevice.js";
+import { WebhookOutboxStore, WebhookReplayStore } from "./Webhook.js";
+import type { WebhookOutboxMarkDeadLetteredInput, WebhookOutboxMarkDeliveredInput, WebhookOutboxMarkFailedInput, WebhookOutboxRecord, WebhookOutboxStoreService, WebhookReplayClaimInput, WebhookReplayStoreService } from "./Webhook.js";
 export interface D1EffectQbResult<Row extends Readonly<Record<string, unknown>> = Readonly<Record<string, unknown>>> {
     readonly success?: boolean;
     readonly error?: string;
@@ -88,6 +96,17 @@ export interface EffectQbAuthVerificationSelectedRow {
     readonly metadata: unknown;
     readonly consumedAt: number | null;
 }
+export interface EffectQbAuthAuditLogSelectedRow {
+    readonly id: string | null;
+    readonly type: string;
+    readonly userId: string | null;
+    readonly actorUserId: string | null;
+    readonly occurredAt: number;
+    readonly requestIpHash: string | null;
+    readonly requestUserAgentHash: string | null;
+    readonly event: unknown;
+    readonly createdAt: number;
+}
 export interface EffectQbAuthLoginApprovalReviewSelectedRow {
     readonly approvalChallengeId: string;
     readonly flowId: string;
@@ -106,6 +125,24 @@ export interface EffectQbAuthLoginApprovalReviewSelectedRow {
     readonly metadata: unknown;
     readonly reviewMetadata: unknown;
 }
+export interface EffectQbAuthLoginRiskHistorySelectedRow {
+    readonly id: string;
+    readonly userId: string;
+    readonly occurredAt: number;
+    readonly outcome: string;
+    readonly method: string;
+    readonly amr: string | readonly AuthMethodReference[];
+    readonly aal: string;
+    readonly deviceStatus: string;
+    readonly deviceKey: string | null;
+    readonly locationKey: string | null;
+    readonly country: string | null;
+    readonly region: string | null;
+    readonly latitudeMicro: number | null;
+    readonly longitudeMicro: number | null;
+    readonly riskLevel: string | null;
+    readonly createdAt: number;
+}
 export interface EffectQbAuthTrustedDeviceSelectedRow {
     readonly userId: string;
     readonly tokenHash: string;
@@ -208,6 +245,84 @@ export interface EffectQbAuthOAuthProviderTokenVaultSelectedRow {
     readonly revokedAt: number | null;
     readonly revocationReason: string | null;
 }
+export interface EffectQbAuthOAuthClientSelectedRow {
+    readonly id: string;
+    readonly type: string;
+    readonly status: string;
+    readonly name: string | null;
+    readonly redirectUris: unknown;
+    readonly allowedGrantTypes: unknown;
+    readonly allowedResponseTypes: unknown;
+    readonly allowedScopes: unknown;
+    readonly createdAt: number | null;
+    readonly updatedAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthOAuthConsentSelectedRow {
+    readonly id: string;
+    readonly userId: string;
+    readonly clientId: string;
+    readonly scopes: unknown;
+    readonly grantedAt: number;
+    readonly expiresAt: number | null;
+    readonly revokedAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthOAuthAuthorizationCodeSelectedRow {
+    readonly codeHash: string;
+    readonly clientId: string;
+    readonly subject: string;
+    readonly redirectUri: string;
+    readonly scopes: unknown;
+    readonly codeChallenge: string | null;
+    readonly codeChallengeMethod: string | null;
+    readonly issuedAt: number;
+    readonly expiresAt: number;
+    readonly consumedAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthOAuthClientSecretSelectedRow {
+    readonly prefix: string;
+    readonly clientId: string;
+    readonly secretHash: string;
+    readonly authenticationMethods: unknown;
+    readonly createdAt: number;
+    readonly expiresAt: number | null;
+    readonly lastUsedAt: number | null;
+    readonly revokedAt: number | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthOAuthProviderModeTokenSelectedRow {
+    readonly tokenHash: string;
+    readonly tokenType: string;
+    readonly clientId: string;
+    readonly subject: string;
+    readonly scopes: unknown;
+    readonly issuedAt: number;
+    readonly expiresAt: number;
+    readonly issuer: string | null;
+    readonly audience: unknown;
+    readonly jwtId: string | null;
+    readonly revokedAt: number | null;
+    readonly revocationReason: string | null;
+    readonly rotatedAt: number | null;
+    readonly replacedByTokenHash: string | null;
+    readonly metadata: unknown;
+}
+export interface EffectQbAuthDomainVerificationSelectedRow {
+    readonly id: string;
+    readonly ownerId: string;
+    readonly domain: string;
+    readonly proofMethod: string;
+    readonly proofToken: string;
+    readonly status: string;
+    readonly createdAt: number;
+    readonly expiresAt: number;
+    readonly verifiedAt: number | null;
+    readonly revokedAt: number | null;
+    readonly lastCheckedAt: number | null;
+    readonly metadata: unknown;
+}
 export interface EffectQbAuthSecurityTimelineSelectedRow {
     readonly id: string;
     readonly userId: string;
@@ -220,13 +335,32 @@ export interface EffectQbAuthSecurityTimelineSelectedRow {
     readonly request: unknown;
     readonly metadata: unknown;
 }
+export interface EffectQbAuthWebhookOutboxSelectedRow {
+    readonly id: string;
+    readonly endpointKey: string;
+    readonly event: unknown;
+    readonly status: string;
+    readonly attempts: number;
+    readonly nextAttemptAt: number;
+    readonly createdAt: number;
+    readonly updatedAt: number;
+    readonly deliveredAt: number | null;
+    readonly lastError: string | null;
+}
+export interface EffectQbAuthWebhookReplaySelectedRow {
+    readonly id: string;
+    readonly expiresAt: number;
+    readonly createdAt: number;
+}
 declare const authSqliteTablesTypeId: unique symbol;
 export interface AuthSqliteTableNames {
     readonly user?: string;
     readonly credential?: string;
     readonly session?: string;
     readonly verification?: string;
+    readonly auditLog?: string;
     readonly loginApprovalReview?: string;
+    readonly loginRiskHistory?: string;
     readonly trustedDevice?: string;
     readonly passkeyCredential?: string;
     readonly totpFactor?: string;
@@ -235,8 +369,16 @@ export interface AuthSqliteTableNames {
     readonly refreshToken?: string;
     readonly jwtRevocation?: string;
     readonly oauthAccount?: string;
+    readonly oauthClient?: string;
+    readonly oauthConsent?: string;
+    readonly oauthAuthorizationCode?: string;
+    readonly oauthClientSecret?: string;
+    readonly oauthProviderModeToken?: string;
     readonly oauthProviderTokenVault?: string;
+    readonly domainVerification?: string;
     readonly securityTimeline?: string;
+    readonly webhookOutbox?: string;
+    readonly webhookReplay?: string;
 }
 type EffectQbSqliteTable = Table.AnyTable;
 type EffectQbInsertInput<TableValue extends EffectQbSqliteTable> = Query.MutationInputOf<Table.InsertOf<TableValue>>;
@@ -317,6 +459,22 @@ export interface EffectQbAuthVerificationTable<TableValue extends EffectQbSqlite
     readonly consume: (input: VerificationConsumeInput) => EffectQbUpdateInput<TableValue>;
     readonly decode?: (row: EffectQbAuthVerificationSelectedRow) => VerificationRow;
 }
+export interface EffectQbAuthAuditLogTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly type: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly actorUserId: EffectQbSqliteExpression;
+        readonly occurredAt: EffectQbSqliteExpression;
+        readonly requestIpHash: EffectQbSqliteExpression;
+        readonly requestUserAgentHash: EffectQbSqliteExpression;
+        readonly event: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+    };
+    readonly insert: (event: AuthAuditEvent, createdAt: UnixMillis) => EffectQbInsertInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthAuditLogSelectedRow) => AuthAuditEvent;
+}
 export interface EffectQbAuthLoginApprovalReviewTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
     readonly table: TableValue;
     readonly select: EffectQbSelection & {
@@ -351,6 +509,33 @@ export interface EffectQbAuthLoginApprovalReviewTable<TableValue extends EffectQ
     }) => EffectQbUpdateInput<TableValue>;
     readonly decode?: (row: EffectQbAuthLoginApprovalReviewSelectedRow) => LoginApprovalReviewRecord;
 }
+export interface EffectQbAuthLoginRiskHistoryTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly occurredAt: EffectQbSqliteExpression;
+        readonly outcome: EffectQbSqliteExpression;
+        readonly method: EffectQbSqliteExpression;
+        readonly amr: EffectQbSqliteExpression;
+        readonly aal: EffectQbSqliteExpression;
+        readonly deviceStatus: EffectQbSqliteExpression;
+        readonly deviceKey: EffectQbSqliteExpression;
+        readonly locationKey: EffectQbSqliteExpression;
+        readonly country: EffectQbSqliteExpression;
+        readonly region: EffectQbSqliteExpression;
+        readonly latitudeMicro: EffectQbSqliteExpression;
+        readonly longitudeMicro: EffectQbSqliteExpression;
+        readonly riskLevel: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+    };
+    readonly insert: (row: LoginRiskHistoryRecordInput & {
+        readonly createdAt: UnixMillis;
+    }) => EffectQbInsertInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthLoginRiskHistorySelectedRow) => LoginRiskHistoryRecordInput & {
+        readonly createdAt: UnixMillis;
+    };
+}
 export interface EffectQbAuthTrustedDeviceTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
     readonly table: TableValue;
     readonly select: EffectQbSelection & {
@@ -516,6 +701,128 @@ export interface EffectQbAuthOAuthProviderTokenVaultTable<TableValue extends Eff
     readonly markRevoked: (input: OAuthProviderTokenVaultMarkRevokedInput) => EffectQbUpdateInput<TableValue>;
     readonly decode?: (row: EffectQbAuthOAuthProviderTokenVaultSelectedRow) => OAuthProviderTokenVaultRecord;
 }
+export interface EffectQbAuthOAuthClientTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly type: EffectQbSqliteExpression;
+        readonly status: EffectQbSqliteExpression;
+        readonly name: EffectQbSqliteExpression;
+        readonly redirectUris: EffectQbSqliteExpression;
+        readonly allowedGrantTypes: EffectQbSqliteExpression;
+        readonly allowedResponseTypes: EffectQbSqliteExpression;
+        readonly allowedScopes: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly updatedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (record: OAuthClientRecord) => EffectQbInsertInput<TableValue>;
+    readonly update: (record: OAuthClientRecord) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthOAuthClientSelectedRow) => OAuthClientRecord;
+}
+export interface EffectQbAuthOAuthConsentTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly userId: EffectQbSqliteExpression;
+        readonly clientId: EffectQbSqliteExpression;
+        readonly scopes: EffectQbSqliteExpression;
+        readonly grantedAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (record: OAuthConsentRecord) => EffectQbInsertInput<TableValue>;
+    readonly update: (record: OAuthConsentRecord) => EffectQbUpdateInput<TableValue>;
+    readonly revoke: (input: OAuthConsentRevokeInput, row: OAuthConsentRecord) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthOAuthConsentSelectedRow) => OAuthConsentRecord;
+}
+export interface EffectQbAuthOAuthAuthorizationCodeTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly codeHash: EffectQbSqliteExpression;
+        readonly clientId: EffectQbSqliteExpression;
+        readonly subject: EffectQbSqliteExpression;
+        readonly redirectUri: EffectQbSqliteExpression;
+        readonly scopes: EffectQbSqliteExpression;
+        readonly codeChallenge: EffectQbSqliteExpression;
+        readonly codeChallengeMethod: EffectQbSqliteExpression;
+        readonly issuedAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly consumedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (record: OAuthAuthorizationCodeRecord) => EffectQbInsertInput<TableValue>;
+    readonly update: (record: OAuthAuthorizationCodeRecord) => EffectQbUpdateInput<TableValue>;
+    readonly markConsumed: (input: OAuthAuthorizationCodeStoreMarkConsumedInput) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthOAuthAuthorizationCodeSelectedRow) => OAuthAuthorizationCodeRecord;
+}
+export interface EffectQbAuthOAuthClientSecretTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly prefix: EffectQbSqliteExpression;
+        readonly clientId: EffectQbSqliteExpression;
+        readonly secretHash: EffectQbSqliteExpression;
+        readonly authenticationMethods: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly lastUsedAt: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (record: OAuthClientSecretRecord) => EffectQbInsertInput<TableValue>;
+    readonly update: (record: OAuthClientSecretRecord) => EffectQbUpdateInput<TableValue>;
+    readonly markUsed: (input: OAuthClientSecretStoreMarkUsedInput) => EffectQbUpdateInput<TableValue>;
+    readonly revoke: (input: OAuthClientSecretStoreRevokeInput, row: OAuthClientSecretRecord) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthOAuthClientSecretSelectedRow) => OAuthClientSecretRecord;
+}
+export interface EffectQbAuthOAuthProviderModeTokenTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly tokenHash: EffectQbSqliteExpression;
+        readonly tokenType: EffectQbSqliteExpression;
+        readonly clientId: EffectQbSqliteExpression;
+        readonly subject: EffectQbSqliteExpression;
+        readonly scopes: EffectQbSqliteExpression;
+        readonly issuedAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly issuer: EffectQbSqliteExpression;
+        readonly audience: EffectQbSqliteExpression;
+        readonly jwtId: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly revocationReason: EffectQbSqliteExpression;
+        readonly rotatedAt: EffectQbSqliteExpression;
+        readonly replacedByTokenHash: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (record: OAuthProviderModeTokenRecord) => EffectQbInsertInput<TableValue>;
+    readonly update: (record: OAuthProviderModeTokenRecord) => EffectQbUpdateInput<TableValue>;
+    readonly revoke: (input: OAuthProviderModeTokenStoreRevokeInput, row: OAuthProviderModeTokenRecord) => EffectQbUpdateInput<TableValue>;
+    readonly rotate: (input: OAuthProviderModeTokenStoreRotateInput) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthOAuthProviderModeTokenSelectedRow) => OAuthProviderModeTokenRecord;
+}
+export interface EffectQbAuthDomainVerificationTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly ownerId: EffectQbSqliteExpression;
+        readonly domain: EffectQbSqliteExpression;
+        readonly proofMethod: EffectQbSqliteExpression;
+        readonly proofToken: EffectQbSqliteExpression;
+        readonly status: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly verifiedAt: EffectQbSqliteExpression;
+        readonly revokedAt: EffectQbSqliteExpression;
+        readonly lastCheckedAt: EffectQbSqliteExpression;
+        readonly metadata: EffectQbSqliteExpression;
+    };
+    readonly insert: (record: DomainVerificationRecord) => EffectQbInsertInput<TableValue>;
+    readonly update: (record: DomainVerificationRecord) => EffectQbUpdateInput<TableValue>;
+    readonly markVerified: (input: DomainVerificationStoreMarkVerifiedInput) => EffectQbUpdateInput<TableValue>;
+    readonly revoke: (input: DomainVerificationStoreRevokeInput, row: DomainVerificationRecord) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthDomainVerificationSelectedRow) => DomainVerificationRecord;
+}
 export interface EffectQbAuthSecurityTimelineTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
     readonly table: TableValue;
     readonly select: EffectQbSelection & {
@@ -533,12 +840,55 @@ export interface EffectQbAuthSecurityTimelineTable<TableValue extends EffectQbSq
     readonly insert: (event: SecurityTimelineEvent) => EffectQbInsertInput<TableValue>;
     readonly decode?: (row: EffectQbAuthSecurityTimelineSelectedRow) => SecurityTimelineEvent;
 }
+export interface EffectQbAuthWebhookOutboxTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly endpointKey: EffectQbSqliteExpression;
+        readonly event: EffectQbSqliteExpression;
+        readonly status: EffectQbSqliteExpression;
+        readonly attempts: EffectQbSqliteExpression;
+        readonly nextAttemptAt: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+        readonly updatedAt: EffectQbSqliteExpression;
+        readonly deliveredAt: EffectQbSqliteExpression;
+        readonly lastError: EffectQbSqliteExpression;
+    };
+    readonly insert: (record: WebhookOutboxRecord) => EffectQbInsertInput<TableValue>;
+    readonly markDelivered: (input: WebhookOutboxMarkDeliveredInput & {
+        readonly deliveredAt: UnixMillis;
+    }) => EffectQbUpdateInput<TableValue>;
+    readonly markFailed: (input: WebhookOutboxMarkFailedInput & {
+        readonly failedAt: UnixMillis;
+        readonly attempts: number;
+    }) => EffectQbUpdateInput<TableValue>;
+    readonly markDeadLettered: (input: WebhookOutboxMarkDeadLetteredInput & {
+        readonly deadLetteredAt: UnixMillis;
+    }) => EffectQbUpdateInput<TableValue>;
+    readonly decode?: (row: EffectQbAuthWebhookOutboxSelectedRow) => WebhookOutboxRecord;
+}
+export interface EffectQbAuthWebhookReplayTable<TableValue extends EffectQbSqliteTable = EffectQbSqliteTable> {
+    readonly table: TableValue;
+    readonly select: EffectQbSelection & {
+        readonly id: EffectQbSqliteExpression;
+        readonly expiresAt: EffectQbSqliteExpression;
+        readonly createdAt: EffectQbSqliteExpression;
+    };
+    readonly insert: (input: WebhookReplayClaimInput & {
+        readonly now: UnixMillis;
+    }) => EffectQbInsertInput<TableValue>;
+    readonly update: (input: WebhookReplayClaimInput & {
+        readonly now: UnixMillis;
+    }) => EffectQbUpdateInput<TableValue>;
+}
 export interface EffectQbAuthTablesInput {
     readonly user: EffectQbAuthUserTable;
     readonly credential: EffectQbAuthCredentialTable;
     readonly session: EffectQbAuthSessionTable;
     readonly verification: EffectQbAuthVerificationTable;
+    readonly auditLog: EffectQbAuthAuditLogTable;
     readonly loginApprovalReview: EffectQbAuthLoginApprovalReviewTable;
+    readonly loginRiskHistory: EffectQbAuthLoginRiskHistoryTable;
     readonly trustedDevice: EffectQbAuthTrustedDeviceTable;
     readonly passkeyCredential: EffectQbAuthPasskeyCredentialTable;
     readonly totpFactor: EffectQbAuthTotpFactorTable;
@@ -547,21 +897,38 @@ export interface EffectQbAuthTablesInput {
     readonly refreshToken: EffectQbAuthRefreshTokenTable;
     readonly jwtRevocation: EffectQbAuthJwtRevocationTable;
     readonly oauthAccount: EffectQbAuthOAuthAccountTable;
+    readonly oauthClient: EffectQbAuthOAuthClientTable;
+    readonly oauthConsent: EffectQbAuthOAuthConsentTable;
+    readonly oauthAuthorizationCode: EffectQbAuthOAuthAuthorizationCodeTable;
+    readonly oauthClientSecret: EffectQbAuthOAuthClientSecretTable;
+    readonly oauthProviderModeToken: EffectQbAuthOAuthProviderModeTokenTable;
     readonly oauthProviderTokenVault: EffectQbAuthOAuthProviderTokenVaultTable;
+    readonly domainVerification: EffectQbAuthDomainVerificationTable;
     readonly securityTimeline: EffectQbAuthSecurityTimelineTable;
+    readonly webhookOutbox: EffectQbAuthWebhookOutboxTable;
+    readonly webhookReplay: EffectQbAuthWebhookReplayTable;
 }
 export interface AuthSqliteTables extends EffectQbAuthTablesInput {
     readonly [authSqliteTablesTypeId]: typeof authSqliteTablesTypeId;
 }
+export interface EffectQbSqliteLoginRiskHistoryOptions {
+    readonly recentWindowMillis?: number;
+    readonly historyWindowMillis?: number;
+    readonly impossibleTravelWindowMillis?: number;
+    readonly impossibleTravelKmh?: number;
+}
 export interface EffectQbSqliteAuthStorageOptions {
     readonly tables?: AuthSqliteTables;
+    readonly loginRiskHistory?: EffectQbSqliteLoginRiskHistoryOptions;
 }
 export interface EffectQbSqliteStorageStores {
     readonly userStore: UserStoreService;
     readonly credentialStore: CredentialStoreService;
     readonly sessionStore: SessionStoreService;
     readonly verificationStore: VerificationStoreService;
+    readonly auditLogStore: AuditLogStoreService;
     readonly loginApprovalReviewStore: LoginApprovalReviewStoreService;
+    readonly loginRiskHistoryStore: LoginRiskHistoryService;
     readonly trustedDeviceStore: TrustedDeviceStoreService;
     readonly passkeyCredentialStore: PasskeyCredentialStoreService;
     readonly totpFactorStore: TotpFactorStoreService;
@@ -570,8 +937,16 @@ export interface EffectQbSqliteStorageStores {
     readonly refreshTokenStore: RefreshTokenStoreService;
     readonly jwtRevocationStore: JwtRevocationStoreService;
     readonly oauthAccountStore: OAuthAccountStoreService;
+    readonly oauthClientStore: OAuthClientStoreService;
+    readonly oauthConsentStore: OAuthConsentStoreService;
+    readonly oauthAuthorizationCodeStore: OAuthAuthorizationCodeStoreService;
+    readonly oauthClientSecretStore: OAuthClientSecretStoreService;
+    readonly oauthProviderModeTokenStore: OAuthProviderModeTokenStoreService;
     readonly oauthProviderTokenVault: OAuthProviderTokenVaultService;
+    readonly domainVerificationStore: DomainVerificationStoreService;
     readonly securityTimelineStore: SecurityTimelineStoreService;
+    readonly webhookOutboxStore: WebhookOutboxStoreService;
+    readonly webhookReplayStore: WebhookReplayStoreService;
 }
 type EffectQbSqliteExecutor = Executor.QueryExecutor<never>;
 export declare const defineEffectQbAuthTables: <const Tables extends EffectQbAuthTablesInput>(tables: Tables) => AuthSqliteTables & Tables;
@@ -581,7 +956,9 @@ export declare const makeEffectQbSqliteUserStore: (executor: EffectQbSqliteExecu
 export declare const makeEffectQbSqliteCredentialStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => CredentialStoreService;
 export declare const makeEffectQbSqliteSessionStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => SessionStoreService;
 export declare const makeEffectQbSqliteVerificationStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => VerificationStoreService;
+export declare const makeEffectQbSqliteAuditLogStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => AuditLogStoreService;
 export declare const makeEffectQbSqliteLoginApprovalReviewStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => LoginApprovalReviewStoreService;
+export declare const makeEffectQbSqliteLoginRiskHistoryStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => LoginRiskHistoryService;
 export declare const makeEffectQbSqliteTrustedDeviceStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => TrustedDeviceStoreService;
 export declare const makeEffectQbSqlitePasskeyCredentialStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => PasskeyCredentialStoreService;
 export declare const makeEffectQbSqliteTotpFactorStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => TotpFactorStoreService;
@@ -590,11 +967,19 @@ export declare const makeEffectQbSqliteApiKeyStore: (executor: EffectQbSqliteExe
 export declare const makeEffectQbSqliteRefreshTokenStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => RefreshTokenStoreService;
 export declare const makeEffectQbSqliteJwtRevocationStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => JwtRevocationStoreService;
 export declare const makeEffectQbSqliteOAuthAccountStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => OAuthAccountStoreService;
+export declare const makeEffectQbSqliteOAuthClientStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => OAuthClientStoreService;
+export declare const makeEffectQbSqliteOAuthConsentStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => OAuthConsentStoreService;
+export declare const makeEffectQbSqliteOAuthAuthorizationCodeStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => OAuthAuthorizationCodeStoreService;
+export declare const makeEffectQbSqliteOAuthClientSecretStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => OAuthClientSecretStoreService;
+export declare const makeEffectQbSqliteOAuthProviderModeTokenStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => OAuthProviderModeTokenStoreService;
 export declare const makeEffectQbSqliteOAuthProviderTokenVault: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => OAuthProviderTokenVaultService;
+export declare const makeEffectQbSqliteDomainVerificationStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => DomainVerificationStoreService;
 export declare const makeEffectQbSqliteSecurityTimelineStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => SecurityTimelineStoreService;
+export declare const makeEffectQbSqliteWebhookOutboxStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => WebhookOutboxStoreService;
+export declare const makeEffectQbSqliteWebhookReplayStore: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => WebhookReplayStoreService;
 export declare const makeEffectQbSqliteStorage: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => EffectQbSqliteStorageStores;
-export declare const EffectQbSqliteAuthStorageLive: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => Layer.Layer<ApiKeyStore | UserStore | CredentialStore | SessionStore | VerificationStore | LoginApprovalReviewStore | TrustedDeviceStore | PasskeyCredentialStore | RefreshTokenStore | JwtRevocationStore | OAuthProviderTokenVault | OAuthAccountStore | RecoveryCodeStore | SecurityTimelineStore | TotpFactorStore, never, never>;
+export declare const EffectQbSqliteAuthStorageLive: (executor: EffectQbSqliteExecutor, options?: EffectQbSqliteAuthStorageOptions) => Layer.Layer<ApiKeyStore | RefreshTokenStore | UserStore | CredentialStore | SessionStore | VerificationStore | LoginRiskHistory | LoginApprovalReviewStore | TrustedDeviceStore | PasskeyCredentialStore | AuditLogStore | JwtRevocationStore | OAuthClientStore | OAuthConsentStore | OAuthClientSecretStore | OAuthAuthorizationCodeStore | OAuthProviderModeTokenStore | OAuthProviderTokenVault | OAuthAccountStore | RecoveryCodeStore | SecurityTimelineStore | TotpFactorStore | DomainVerificationStore | WebhookOutboxStore | WebhookReplayStore, never, never>;
 export declare const makeD1EffectQbSqliteExecutor: (database: D1EffectQbDatabaseLike) => EffectQbSqliteExecutor;
-export declare const D1EffectQbSqliteAuthStorageLive: (database: D1EffectQbDatabaseLike, options?: EffectQbSqliteAuthStorageOptions) => Layer.Layer<ApiKeyStore | UserStore | CredentialStore | SessionStore | VerificationStore | LoginApprovalReviewStore | TrustedDeviceStore | PasskeyCredentialStore | RefreshTokenStore | JwtRevocationStore | OAuthProviderTokenVault | OAuthAccountStore | RecoveryCodeStore | SecurityTimelineStore | TotpFactorStore, never, never>;
+export declare const D1EffectQbSqliteAuthStorageLive: (database: D1EffectQbDatabaseLike, options?: EffectQbSqliteAuthStorageOptions) => Layer.Layer<ApiKeyStore | RefreshTokenStore | UserStore | CredentialStore | SessionStore | VerificationStore | LoginRiskHistory | LoginApprovalReviewStore | TrustedDeviceStore | PasskeyCredentialStore | AuditLogStore | JwtRevocationStore | OAuthClientStore | OAuthConsentStore | OAuthClientSecretStore | OAuthAuthorizationCodeStore | OAuthProviderModeTokenStore | OAuthProviderTokenVault | OAuthAccountStore | RecoveryCodeStore | SecurityTimelineStore | TotpFactorStore | DomainVerificationStore | WebhookOutboxStore | WebhookReplayStore, never, never>;
 export {};
 //# sourceMappingURL=EffectQbSqliteStorage.d.ts.map