@yielded/auth-persistence-drizzle 0.1.0-beta.0 → 0.1.0-beta.12

package/dist/Mysql2.d.mts

@@ -1,4 +1,4 @@
-import { AuthTables, IdentityTables } from "./drizzle/model.mjs";
+import { ExternalIdentityTables, IdentityTables, SubjectProvisioningTables } from "./drizzle/model.mjs";
 import { PasskeyCredentialMapping, PasskeyEnrollmentContextMapping, PasskeyPersistenceMapping } from "./drizzle/passkey-model.mjs";
 import { OAuthAccountsMapping, OAuthRegistrationAuthority, OAuthRegistrationIntentMapping, OAuthRegistrationMapping, OAuthSignInMapping } from "./drizzle/oauth-model.mjs";
 import { OAuthConnectedMapping, OAuthConnectedRevocationMapping } from "./drizzle/oauth-connected-model.mjs";
@@ -12,44 +12,35 @@ import "./index.mjs";
 import { SuppliedService } from "./drizzle/SuppliedService.mjs";
 import { TotpCoordinatorError } from "./drizzle/totp-target.mjs";
 import { PhoneCoordinatorError } from "./drizzle/phone-target.mjs";
-import { coordinateMysqlAuthStoreTransaction, coordinateMysqlAuthTransaction, coordinateMysqlOAuthStateTransaction, makeMysqlAuthStoreServices, makeMysqlOAuthStateServices } from "./drizzle/mysql.mjs";
-import { makeMysqlExternalIdentityServices, makeMysqlSubjectProvisioningServices } from "./drizzle/mysql-identity.mjs";
+import { Database } from "./drizzle/mysql-database.mjs";
 import { coordinateMysqlAuthenticationAuthority, coordinateMysqlPendingAuthentication, coordinateMysqlSessionStepUp, coordinateMysqlSignedSessionValidity, coordinateMysqlStatefulSessions, makeMysqlAuthenticationAuthorityServices, makeMysqlPendingAuthenticationServices, makeMysqlSessionStepUpServices, makeMysqlSignedSessionValidityServices, makeMysqlStatefulSessionServices } from "./drizzle/mysql-sessions.mjs";
 import { coordinateMysqlProofPersistence, makeMysqlProofPersistenceServices } from "./drizzle/mysql-proofs.mjs";
 import { coordinateMysqlPasswordPersistence, coordinateMysqlPasswordRegistration, makeMysqlPasswordPersistenceServices, makeMysqlPasswordRegistrationServices } from "./drizzle/mysql-passwords.mjs";
 import { coordinateMysqlEmailAddress, coordinateMysqlEmailRegistration, makeMysqlEmailAddressServices, makeMysqlEmailRegistrationServices, makeMysqlEmailSignInServices } from "./drizzle/mysql-emails.mjs";
 import { coordinateMySqlPasswordPreparedPersistence, makeMySqlPasswordPreparedPersistenceServices } from "./drizzle/mysql-password-prepared.mjs";
-import { AnyRelations } from "drizzle-orm";
+import { Layer } from "effect";
 import { EffectMysql2Database } from "drizzle-orm/effect-mysql2";
 import { AnyMySqlTable } from "drizzle-orm/mysql-core";
 //#region src/Mysql2.d.ts
-export declare const commitMode: "interactive";
-export declare const makeAuthServices: <C extends AnyMySqlTable, R extends AnyMySqlTable, S extends AnyMySqlTable>(database: EffectMysql2Database<AnyRelations>, mapping: AuthTables<C, R, S>) => {
-  readonly authStore: {
-    readonly issueChallenge: (input: import("@yielded/auth/Schema").NewChallenge) => import("effect/Effect").Effect<void, import("@yielded/auth/AuthStore").IssueChallengeError>;
-    readonly consumeChallenge: (input: import("@yielded/auth/Schema").ConsumeChallenge) => import("effect/Effect").Effect<import("@yielded/auth/Schema").VerifiedEmail, import("@yielded/auth/AuthStore").EmailOtpRejected | import("@yielded/auth/Errors").AuthStoreError>;
-    readonly issueRegistration: (input: import("@yielded/auth/Schema").NewRegistration) => import("effect/Effect").Effect<void, import("@yielded/auth/Errors").AuthStoreError>;
-    readonly inspectRegistration: (tokenDigest: import("@yielded/auth/Schema").TokenDigest) => import("effect/Effect").Effect<import("@yielded/auth/Schema").PendingRegistration, import("@yielded/auth/Errors").InvalidRegistration | import("@yielded/auth/Errors").AuthStoreError>;
-    readonly consumeRegistration: (input: import("@yielded/auth/Schema").ConsumeRegistration) => import("effect/Effect").Effect<void, import("@yielded/auth/Errors").InvalidRegistration | import("@yielded/auth/Errors").AuthStoreError>;
-  };
-  readonly oauthStateStore: {
-    readonly issue: (state: import("@yielded/auth/OAuth").OAuthState) => import("effect/Effect").Effect<void, import("@yielded/auth/Errors").AuthStoreError>;
-    readonly consume: (stateDigest: import("@yielded/auth/Schema").TokenDigest) => import("effect/Effect").Effect<import("@yielded/auth/OAuth").OAuthState, import("@yielded/auth/OAuth").InvalidOAuthState | import("@yielded/auth/Errors").AuthStoreError>;
+export declare const makeSubjectProvisioningServices: <Subject extends AnyMySqlTable, Identifier extends AnyMySqlTable, Request extends AnyMySqlTable, NativeId>(mapping: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>) => import("effect/Effect").Effect<{
+  readonly subjectProvisioner: {
+    readonly provision: (input: import("@yielded/auth/Identity").SubjectProvisioningInput) => import("effect/Effect").Effect<import("@yielded/auth/Identity").ProvisioningResult, import("@yielded/auth/Identity").IdentityConflict | import("@yielded/auth/Identity").IdentityUnavailable>;
   };
-  readonly decisions: {
-    readonly consumeChallenge: (input: import("@yielded/auth/Schema").ConsumeChallenge) => import("effect/Effect").Effect<import("@yielded/auth/AuthStore").ChallengeConsumeDecision, import("@yielded/auth/Errors").AuthStoreError, never>;
-    readonly consumeRegistration: (input: import("@yielded/auth/Schema").ConsumeRegistration) => import("effect/Effect").Effect<import("@yielded/auth/AuthStore").ConsumeDecision<void>, import("@yielded/auth/Errors").AuthStoreError, never>;
-    readonly consumeOAuthState: (digest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">) => import("effect/Effect").Effect<import("@yielded/auth/AuthStore").ConsumeDecision<import("@yielded/auth/OAuth").OAuthState>, import("@yielded/auth/Errors").AuthStoreError, never>;
+}, never, Database>;
+export declare const makeExternalIdentityServices: <Subject extends AnyMySqlTable, External extends AnyMySqlTable, NativeId>(mapping: ExternalIdentityTables<Subject, External, NativeId>) => import("effect/Effect").Effect<{
+  readonly externalIdentityMutation: {
+    readonly bind: (subjectId: import("@yielded/auth/Schema").SubjectId, identity: import("@yielded/auth/Identity").ExternalIdentity) => import("effect/Effect").Effect<void, import("@yielded/auth/Identity").IdentityConflict | import("@yielded/auth/Identity").IdentityUnavailable>;
   };
-};
-export declare const makeIdentityServices: <Subject extends AnyMySqlTable, Identifier extends AnyMySqlTable, External extends AnyMySqlTable, Request extends AnyMySqlTable, NativeId>(database: EffectMysql2Database<AnyRelations>, mapping: IdentityTables<Subject, Identifier, External, Request, NativeId>) => {
+}, never, Database>;
+export declare const commitMode: "interactive";
+export declare const makeIdentityServices: <Subject extends AnyMySqlTable, Identifier extends AnyMySqlTable, External extends AnyMySqlTable, Request extends AnyMySqlTable, NativeId>(mapping: IdentityTables<Subject, Identifier, External, Request, NativeId>) => import("effect/Effect").Effect<{
   subjectProvisioner: {
     readonly provision: (input: import("@yielded/auth/Identity").SubjectProvisioningInput) => import("effect/Effect").Effect<import("@yielded/auth/Identity").ProvisioningResult, import("@yielded/auth/Identity").IdentityConflict | import("@yielded/auth/Identity").IdentityUnavailable>;
   };
   externalIdentityMutation: {
     readonly bind: (subjectId: import("@yielded/auth/Schema").SubjectId, identity: import("@yielded/auth/Identity").ExternalIdentity) => import("effect/Effect").Effect<void, import("@yielded/auth/Identity").IdentityConflict | import("@yielded/auth/Identity").IdentityUnavailable>;
   };
-};
+}, never, Database>;
 export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, O extends AnyMySqlTable<{
@@ -64,7 +55,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, U extends AnyMySqlTable<{
   dialect: "mysql";
-}>, N>(database: EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>) => import("effect/Effect").Effect<{
+}>, N>(mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>) => import("effect/Effect").Effect<{
   oauthAccountsPersistence: {
     readonly capture: (input: {
       readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
@@ -74,8 +65,6 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
       readonly flow: import("@yielded/auth/OAuth").OAuthLinkPendingFlow;
       readonly authorization: import("@yielded/auth/OAuth").OAuthActionAuthorization;
     }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
       readonly _tag: "Issued";
       readonly flow: {
         readonly context: {
@@ -90,6 +79,21 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
           readonly generation: number;
           readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
           readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+          readonly access?: {
+            readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+            readonly generation: number;
+            readonly issuance: "active" | "retired";
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly clientRegistrationId: string;
+            readonly scopes: readonly string[];
+            readonly resources: readonly string[];
+            readonly retention: "access-and-refresh" | "access-only";
+            readonly maximumAccessLifetimeMillis: number;
+            readonly maximumRefreshLifetimeMillis?: number | undefined;
+            readonly refreshAheadMillis: number;
+            readonly refresh: "confidential" | "rotating" | "unsupported";
+            readonly revocation: "cohort" | "unsupported";
+          } | undefined;
           readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
           readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
           readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
@@ -116,6 +120,8 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
         };
         readonly retentionUntilMillis: number;
       };
+    } | {
+      readonly _tag: "Rejected";
     }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
     readonly preflight: (input: import("@yielded/auth/OAuth").OAuthLinkAccess) => import("effect/Effect").Effect<import("@yielded/auth/OAuth").OAuthLinkPendingFlow | undefined, import("@yielded/auth/OAuth").OAuthUnavailable>;
     readonly claim: <A>(input: {
@@ -141,6 +147,21 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
             readonly generation: number;
             readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
             readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+            readonly access?: {
+              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+              readonly generation: number;
+              readonly issuance: "active" | "retired";
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly clientRegistrationId: string;
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly retention: "access-and-refresh" | "access-only";
+              readonly maximumAccessLifetimeMillis: number;
+              readonly maximumRefreshLifetimeMillis?: number | undefined;
+              readonly refreshAheadMillis: number;
+              readonly refresh: "confidential" | "rotating" | "unsupported";
+              readonly revocation: "cohort" | "unsupported";
+            } | undefined;
             readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
             readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
             readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
@@ -180,8 +201,6 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
       readonly nowMillis: number;
     }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Cancelled";
     } | {
@@ -207,6 +226,8 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
         };
       };
       readonly changed: boolean;
+    } | {
+      readonly _tag: "Conflict";
     }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
     readonly inspectUnlink: (input: {
       readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
@@ -284,7 +305,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
       readonly hasMore: boolean;
     }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
   };
-}, never, import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthSignInServices: <S extends AnyMySqlTable<{
+}, never, Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthSignInServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, O extends AnyMySqlTable<{
   dialect: "mysql";
@@ -294,7 +315,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, F extends AnyMySqlTable<{
   dialect: "mysql";
-}>, N>(database: EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthSignInMapping<S, O, C, AC, F, N>) => import("effect/Effect").Effect<{
+}>, N>(mapping: OAuthSignInMapping<S, O, C, AC, F, N>) => import("effect/Effect").Effect<{
   oauthSignInPersistence: {
     readonly issue: <A>(input: import("@yielded/auth/OAuth").OAuthPendingFlow, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthIssueDecision, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
     readonly claim: <A>(input: {
@@ -326,7 +347,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
       readonly hasMore: boolean;
     }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
   };
-}, never, import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthRegistrationIntentServices: <S extends AnyMySqlTable<{
+}, never, Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthRegistrationIntentServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, O extends AnyMySqlTable<{
   dialect: "mysql";
@@ -340,7 +361,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, I extends AnyMySqlTable<{
   dialect: "mysql";
-}>, N>(database: EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>) => import("effect/Effect").Effect<{
+}>, N>(mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>) => import("effect/Effect").Effect<{
   oauthRegistrationIntents: {
     readonly settle: <A>(input: {
       readonly claim: import("@yielded/auth/OAuth").OAuthClaim;
@@ -349,7 +370,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
       readonly nowMillis: number;
     }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthRegistrationSettlement, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
   };
-}, never, import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthRegistrationServices: <Registration, S extends AnyMySqlTable<{
+}, never, Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthRegistrationServices: <Registration, S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, O extends AnyMySqlTable<{
   dialect: "mysql";
@@ -363,9 +384,9 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, R extends AnyMySqlTable<{
   dialect: "mysql";
-}>, N>(database: EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthRegistrationMapping<Registration, S, O, C, AC, TA, I, R, N>) => import("effect/Effect").Effect<{
+}>, N>(mapping: OAuthRegistrationMapping<Registration, S, O, C, AC, TA, I, R, N>) => import("effect/Effect").Effect<{
   registrationAuthority: OAuthRegistrationAuthority<Registration>;
-}, never, import("@yielded/auth/Hooks").LifecycleHooks>, coordinateOAuthRegistration: {
+}, never, Database | import("@yielded/auth/Hooks").LifecycleHooks>, coordinateOAuthRegistration: {
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, TargetId, Registration, S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, O extends AnyMySqlTable<{
@@ -537,8 +558,100 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, N, J extends AnyMySqlTable<{
   dialect: "mysql";
-}> = never>(database: EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J>) => import("effect/Effect").Effect<{
+}> = never>(mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J>) => import("effect/Effect").Effect<{
   oauthConnectedPersistence: {
+    readonly claimSignIn: <A>(input: {
+      readonly claim: import("@yielded/auth/OAuth").OAuthClaim;
+      readonly configuration: import("@yielded/auth/OAuth").OAuthConnectedConfiguration;
+    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthSignInAccessClaim, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
+    readonly inspectSignIn: (input: {
+      readonly reservation: import("@yielded/auth/OAuth").OAuthSignInAccessClaim;
+      readonly credential: import("@yielded/auth/OAuth").OAuthCredentialSnapshot;
+      readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+    }) => import("effect/Effect").Effect<import("@yielded/auth/OAuth").OAuthSignInAccessInspection, import("@yielded/auth/OAuth").OAuthUnavailable>;
+    readonly settleSignIn: <A>(input: {
+      readonly reservation: import("@yielded/auth/OAuth").OAuthSignInAccessClaim;
+      readonly outcome: import("@yielded/auth/OAuth").OAuthSignInAccessOutcome;
+    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Cancelled";
+    } | {
+      readonly _tag: "Ambiguous";
+    } | {
+      readonly _tag: "Conflict";
+    } | {
+      readonly _tag: "Connected";
+      readonly grant: {
+        readonly context: {
+          readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
+          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+          readonly identity: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly subject: string;
+          };
+          readonly configuration: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly protocol: "oauth" | "oidc";
+            readonly configurationGeneration: number;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly responseIssuerMode: "required" | "unsupported";
+            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+            readonly profile: {
+              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+              readonly generation: number;
+              readonly issuance: "active" | "retired";
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly clientRegistrationId: string;
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly retention: "access-and-refresh" | "access-only";
+              readonly maximumAccessLifetimeMillis: number;
+              readonly maximumRefreshLifetimeMillis?: number | undefined;
+              readonly refreshAheadMillis: number;
+              readonly refresh: "confidential" | "rotating" | "unsupported";
+              readonly revocation: "cohort" | "unsupported";
+            };
+          };
+          readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+          readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly metadata: {
+            readonly scopes: readonly string[];
+            readonly resources: readonly string[];
+            readonly accessExpiresAtMillis?: number | undefined;
+            readonly refreshExpiresAtMillis?: number | undefined;
+            readonly useUntilMillis: number;
+            readonly refreshUseUntilMillis?: number | undefined;
+            readonly obtainedAtMillis: number;
+            readonly profile?: {
+              readonly displayName?: string | undefined;
+              readonly handle?: string | undefined;
+              readonly avatarUrl?: string | undefined;
+              readonly profileUrl?: string | undefined;
+              readonly email?: string | undefined;
+              readonly emailVerified?: boolean | undefined;
+              readonly providerData?: {
+                readonly [x: string]: import("effect/Schema").Json;
+              } | undefined;
+            } | undefined;
+          };
+        };
+        readonly sealed: {
+          readonly format: "oauth-connected-xchacha20poly1305-v1";
+          readonly keyId: string;
+          readonly nonce: string;
+          readonly ciphertext: import("effect/Redacted").Redacted<string>;
+        };
+      };
+    } | {
+      readonly _tag: "Busy";
+    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
     readonly capture: (input: {
       readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
       readonly subjectId: import("@yielded/auth/Schema").SubjectId;
@@ -567,6 +680,21 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
           readonly generation: number;
           readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
           readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+          readonly access?: {
+            readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+            readonly generation: number;
+            readonly issuance: "active" | "retired";
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly clientRegistrationId: string;
+            readonly scopes: readonly string[];
+            readonly resources: readonly string[];
+            readonly retention: "access-and-refresh" | "access-only";
+            readonly maximumAccessLifetimeMillis: number;
+            readonly maximumRefreshLifetimeMillis?: number | undefined;
+            readonly refreshAheadMillis: number;
+            readonly refresh: "confidential" | "rotating" | "unsupported";
+            readonly revocation: "cohort" | "unsupported";
+          } | undefined;
           readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
           readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
           readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
@@ -669,6 +797,21 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
             readonly generation: number;
             readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
             readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+            readonly access?: {
+              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+              readonly generation: number;
+              readonly issuance: "active" | "retired";
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly clientRegistrationId: string;
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly retention: "access-and-refresh" | "access-only";
+              readonly maximumAccessLifetimeMillis: number;
+              readonly maximumRefreshLifetimeMillis?: number | undefined;
+              readonly refreshAheadMillis: number;
+              readonly refresh: "confidential" | "rotating" | "unsupported";
+              readonly revocation: "cohort" | "unsupported";
+            } | undefined;
             readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
             readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
             readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
@@ -761,14 +904,14 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
       };
     }) => import("effect/Effect").Effect<{
       readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Target";
       readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
     } | {
       readonly _tag: "Quarantine";
       readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-    } | {
-      readonly _tag: "Conflict";
     }, import("@yielded/auth/OAuth").OAuthUnavailable>;
     readonly settle: <A>(input: {
       readonly claim: import("@yielded/auth/OAuth").OAuthConnectedClaim;
@@ -777,17 +920,18 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
       readonly nowMillis: number;
     }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
       readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Cancelled";
     } | {
       readonly _tag: "Ambiguous";
+    } | {
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Connected";
       readonly grant: {
         readonly context: {
           readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
           readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
           readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
           readonly identity: {
@@ -898,6 +1042,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
       readonly grant: {
         readonly context: {
           readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
           readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
           readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
           readonly identity: {
@@ -1010,6 +1155,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
       readonly grant: {
         readonly context: {
           readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
           readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
           readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
           readonly identity: {
@@ -1094,6 +1240,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
         readonly grant: {
           readonly context: {
             readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+            readonly exchangeOrder: string;
             readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
             readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
             readonly identity: {
@@ -1157,6 +1304,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
             readonly ciphertext: import("effect/Redacted").Redacted<string>;
           };
         };
+        readonly order: string;
         readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
         readonly claimedAtMillis: number;
         readonly claimExpiresAtMillis: number;
@@ -1176,6 +1324,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
       readonly grant: {
         readonly context: {
           readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
           readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
           readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
           readonly identity: {
@@ -1265,7 +1414,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
       readonly hasMore: boolean;
     }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
   };
-}, never, import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthConnectedRevocationServices: <T extends AnyMySqlTable<{
+}, never, Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthConnectedRevocationServices: <T extends AnyMySqlTable<{
   dialect: "mysql";
 }>, O extends AnyMySqlTable<{
   dialect: "mysql";
@@ -1279,7 +1428,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, J extends AnyMySqlTable<{
   dialect: "mysql";
-}>, N>(database: EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthConnectedRevocationMapping<T, O, F, G, C, H, J, N>) => import("effect/Effect").Effect<{
+}>, N>(mapping: OAuthConnectedRevocationMapping<T, O, F, G, C, H, J, N>) => import("effect/Effect").Effect<{
   oauthConnectedRevocations: {
     readonly claim: <A>(input: {
       readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
@@ -1294,6 +1443,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
             readonly jobId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
             readonly token: {
               readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+              readonly exchangeOrder: string;
               readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
               readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
               readonly identity: {
@@ -1372,7 +1522,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
       readonly settled: boolean;
     }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
   };
-}, never, import("@yielded/auth/Hooks").LifecycleHooks>, coordinateOAuthConnected: {
+}, never, Database | import("@yielded/auth/Hooks").LifecycleHooks>, coordinateOAuthConnected: {
   <D extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, AC extends AnyMySqlTable<{
@@ -1467,7 +1617,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
     } ? Parameters<Parameters<D["transaction"]>[0]>[0] : never>, TxShape>;
   }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/OAuth").OAuthConnectedRevocations>>;
 };
-export declare const makePasskeyCredentialServices: <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
+export declare const makePasskeyCredentialServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, C extends AnyMySqlTable<{
   dialect: "mysql";
@@ -1477,7 +1627,7 @@ export declare const makePasskeyCredentialServices: <Database extends EffectMysq
   dialect: "mysql";
 }>, H extends AnyMySqlTable<{
   dialect: "mysql";
-}>, N, RSetup = never>(database: Database, mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyCredentialMapping<S, C, F, O, H, N>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyCredentialServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, RSetup>, makePasskeyPersistenceServices: <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
+}>, N, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyCredentialMapping<S, C, F, O, H, N>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyCredentialServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, Database | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, makePasskeyPersistenceServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, C extends AnyMySqlTable<{
   dialect: "mysql";
@@ -1495,7 +1645,7 @@ export declare const makePasskeyCredentialServices: <Database extends EffectMysq
   dialect: "mysql";
 }>, Charge extends AnyMySqlTable<{
   dialect: "mysql";
-}>, N, RSetup = never>(database: Database, mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, Flow, Admission, Charge, N>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyPersistenceServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, makePasskeyEnrollmentContextServices: <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
+}>, N, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, Flow, Admission, Charge, N>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyPersistenceServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, makePasskeyEnrollmentContextServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, C extends AnyMySqlTable<{
   dialect: "mysql";
@@ -1507,7 +1657,7 @@ export declare const makePasskeyCredentialServices: <Database extends EffectMysq
   dialect: "mysql";
 }>, M extends AnyMySqlTable<{
   dialect: "mysql";
-}>, N, RSetup = never>(database: Database, mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyEnrollmentContextMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, N>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyEnrollmentContextServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, RSetup>, makePasskeyRegistrationCeremonyServices: <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, M extends AnyMySqlTable<{
+}>, N, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyEnrollmentContextMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, N>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyEnrollmentContextServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, Database | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, makePasskeyRegistrationCeremonyServices: <M extends AnyMySqlTable<{
   dialect: "mysql";
 }>, Flow extends AnyMySqlTable<{
   dialect: "mysql";
@@ -1519,7 +1669,7 @@ export declare const makePasskeyCredentialServices: <Database extends EffectMysq
   dialect: "mysql";
 }>, H extends AnyMySqlTable<{
   dialect: "mysql";
-}>, RSetup = never>(database: Database, mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyRegistrationCeremonyServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, coordinatePasskeyPersistence: {
+}>, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyRegistrationCeremonyServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, coordinatePasskeyPersistence: {
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, C extends AnyMySqlTable<{
@@ -1601,7 +1751,7 @@ export declare const makePasskeyCredentialServices: <Database extends EffectMysq
       readonly transaction: (...args: any[]) => any;
     } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
   }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/Passkey").PasskeyPersistence>>;
-}, makePasskeyManagementServices: <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
+}, makePasskeyManagementServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, C extends AnyMySqlTable<{
   dialect: "mysql";
@@ -1621,7 +1771,7 @@ export declare const makePasskeyCredentialServices: <Database extends EffectMysq
   dialect: "mysql";
 }>, Command extends AnyMySqlTable<{
   dialect: "mysql";
-}>, N, RSetup = never>(database: Database, mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyManagementMapping<S, C, F, O, H, M, Flow, Admission, Charge, Command, N>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyManagementServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, makePasskeyRegistrationServices: <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
+}>, N, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyManagementMapping<S, C, F, O, H, M, Flow, Admission, Charge, Command, N>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyManagementServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, makePasskeyRegistrationServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, C extends AnyMySqlTable<{
   dialect: "mysql";
@@ -1641,7 +1791,7 @@ export declare const makePasskeyCredentialServices: <Database extends EffectMysq
   dialect: "mysql";
 }>, Intent extends AnyMySqlTable<{
   dialect: "mysql";
-}>, N, Value, RSetup = never>(database: Database, mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, O, H, M, Flow, Admission, Charge, Intent, N, Value>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyRegistrationServices<Value>, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, coordinatePasskeyManagement: {
+}>, N, Value, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, O, H, M, Flow, Admission, Charge, Intent, N, Value>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyRegistrationServices<Value>, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, coordinatePasskeyManagement: {
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, C extends AnyMySqlTable<{
@@ -1746,13 +1896,13 @@ export declare const makePasskeyCredentialServices: <Database extends EffectMysq
     } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
   }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, AuthorityId | TxId | import("@yielded/auth/Passkey").PasskeyPersistence>>;
 };
-export declare const makeTotpPersistenceServices: <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
+export declare const makeTotpPersistenceServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, F extends AnyMySqlTable<{
   dialect: "mysql";
 }>, C extends AnyMySqlTable<{
   dialect: "mysql";
-}>, N, RSetup = never>(database: Database, mapping: TotpMappingSource<TotpMapping<S, F, C, N>, RSetup>) => import("effect/Effect").Effect<TotpPersistenceServices, import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/Totp").TotpConfigurationError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, coordinateTotpPersistence: {
+}>, N, RSetup = never>(mapping: TotpMappingSource<TotpMapping<S, F, C, N>, RSetup>) => import("effect/Effect").Effect<TotpPersistenceServices, import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/Totp").TotpConfigurationError, Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, coordinateTotpPersistence: {
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, F extends AnyMySqlTable<{
@@ -1776,7 +1926,7 @@ export declare const makeTotpPersistenceServices: <Database extends EffectMysql2
     } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
   }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | TotpCoordinatorError<E>, DatabaseRequirements | RSetup | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/Totp").TotpPersistence>>;
 };
-export declare const makePhonePersistenceServices: <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
+export declare const makePhonePersistenceServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, I extends AnyMySqlTable<{
   dialect: "mysql";
@@ -1784,7 +1934,7 @@ export declare const makePhonePersistenceServices: <Database extends EffectMysql
   dialect: "mysql";
 }>, C extends AnyMySqlTable<{
   dialect: "mysql";
-}>, N, RSetup = never>(database: Database, mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N>, RSetup>) => import("effect/Effect").Effect<PhonePersistenceServices, import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/PhoneOtp").PhoneConfigurationError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, coordinatePhonePersistence: {
+}>, N, RSetup = never>(mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N>, RSetup>) => import("effect/Effect").Effect<PhonePersistenceServices, import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/PhoneOtp").PhoneConfigurationError, Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, coordinatePhonePersistence: {
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, I extends AnyMySqlTable<{
@@ -1812,6 +1962,8 @@ export declare const makePhonePersistenceServices: <Database extends EffectMysql
     } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
   }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PhoneCoordinatorError<E>, DatabaseRequirements | RSetup | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/PhoneOtp").PhoneAdmission | import("@yielded/auth/PhoneOtp").PhonePersistence | import("@yielded/auth/PhoneOtp").PhoneSignInTargets>>;
 };
+/** Construct Drizzle from the driver's SQL-client Layer. */
+export declare const databaseLayer: Layer.Layer<Database, never, import("@effect/sql-mysql2/MysqlClient").MysqlClient>;
 //#endregion
-export { coordinateMysqlAuthStoreTransaction as coordinateAuthStoreTransaction, coordinateMysqlAuthTransaction as coordinateAuthTransaction, coordinateMysqlAuthenticationAuthority as coordinateAuthenticationAuthority, coordinateMysqlEmailAddress as coordinateEmailAddress, coordinateMysqlEmailRegistration as coordinateEmailRegistration, coordinateMysqlOAuthStateTransaction as coordinateOAuthStateTransaction, coordinateMysqlPasswordPersistence as coordinatePasswordPersistence, coordinateMySqlPasswordPreparedPersistence as coordinatePasswordPreparedPersistence, coordinateMysqlPasswordRegistration as coordinatePasswordRegistration, coordinateMysqlPendingAuthentication as coordinatePendingAuthentication, coordinateMysqlProofPersistence as coordinateProofPersistence, coordinateMysqlSessionStepUp as coordinateSessionStepUp, coordinateMysqlSignedSessionValidity as coordinateSignedSessionValidity, coordinateMysqlStatefulSessions as coordinateStatefulSessions, makeMysqlAuthStoreServices as makeAuthStoreServices, makeMysqlAuthenticationAuthorityServices as makeAuthenticationAuthorityServices, makeMysqlEmailAddressServices as makeEmailAddressServices, makeMysqlEmailRegistrationServices as makeEmailRegistrationServices, makeMysqlEmailSignInServices as makeEmailSignInServices, makeMysqlExternalIdentityServices as makeExternalIdentityServices, makeMysqlOAuthStateServices as makeOAuthStateServices, makeMysqlPasswordPersistenceServices as makePasswordPersistenceServices, makeMySqlPasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices, makeMysqlPasswordRegistrationServices as makePasswordRegistrationServices, makeMysqlPendingAuthenticationServices as makePendingAuthenticationServices, makeMysqlProofPersistenceServices as makeProofPersistenceServices, makeMysqlSessionStepUpServices as makeSessionStepUpServices, makeMysqlSignedSessionValidityServices as makeSignedSessionValidityServices, makeMysqlStatefulSessionServices as makeStatefulSessionServices, makeMysqlSubjectProvisioningServices as makeSubjectProvisioningServices, passwordPreparedPersistenceLayer };
+export { Database, coordinateMysqlAuthenticationAuthority as coordinateAuthenticationAuthority, coordinateMysqlEmailAddress as coordinateEmailAddress, coordinateMysqlEmailRegistration as coordinateEmailRegistration, coordinateMysqlPasswordPersistence as coordinatePasswordPersistence, coordinateMySqlPasswordPreparedPersistence as coordinatePasswordPreparedPersistence, coordinateMysqlPasswordRegistration as coordinatePasswordRegistration, coordinateMysqlPendingAuthentication as coordinatePendingAuthentication, coordinateMysqlProofPersistence as coordinateProofPersistence, coordinateMysqlSessionStepUp as coordinateSessionStepUp, coordinateMysqlSignedSessionValidity as coordinateSignedSessionValidity, coordinateMysqlStatefulSessions as coordinateStatefulSessions, makeMysqlAuthenticationAuthorityServices as makeAuthenticationAuthorityServices, makeMysqlEmailAddressServices as makeEmailAddressServices, makeMysqlEmailRegistrationServices as makeEmailRegistrationServices, makeMysqlEmailSignInServices as makeEmailSignInServices, makeMysqlPasswordPersistenceServices as makePasswordPersistenceServices, makeMySqlPasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices, makeMysqlPasswordRegistrationServices as makePasswordRegistrationServices, makeMysqlPendingAuthenticationServices as makePendingAuthenticationServices, makeMysqlProofPersistenceServices as makeProofPersistenceServices, makeMysqlSessionStepUpServices as makeSessionStepUpServices, makeMysqlSignedSessionValidityServices as makeSignedSessionValidityServices, makeMysqlStatefulSessionServices as makeStatefulSessionServices, passwordPreparedPersistenceLayer };
 //# sourceMappingURL=Mysql2.d.mts.map