@yielded/auth-persistence-drizzle 0.1.0-beta.0 → 0.1.0-beta.12

package/dist/Postgres.d.mts

@@ -1,4 +1,4 @@
-import { AuthTables, IdentityTables } from "./drizzle/model.mjs";
+import { ExternalIdentityTables, IdentityTables, SubjectProvisioningTables } from "./drizzle/model.mjs";
 import { PasskeyCredentialMapping, PasskeyEnrollmentContextMapping, PasskeyPersistenceMapping } from "./drizzle/passkey-model.mjs";
 import { OAuthAccountsMapping, OAuthRegistrationAuthority, OAuthRegistrationIntentMapping, OAuthRegistrationMapping, OAuthSignInMapping } from "./drizzle/oauth-model.mjs";
 import { OAuthConnectedMapping, OAuthConnectedRevocationMapping } from "./drizzle/oauth-connected-model.mjs";
@@ -12,44 +12,35 @@ import "./index.mjs";
 import { SuppliedService } from "./drizzle/SuppliedService.mjs";
 import { TotpCoordinatorError } from "./drizzle/totp-target.mjs";
 import { PhoneCoordinatorError } from "./drizzle/phone-target.mjs";
-import { coordinatePgAuthStoreTransaction, coordinatePgAuthTransaction, coordinatePgOAuthStateTransaction, makePgAuthStoreServices, makePgExternalIdentityServices, makePgOAuthStateServices, makePgSubjectProvisioningServices } from "./drizzle/pg.mjs";
+import { Database } from "./drizzle/pg-database.mjs";
 import { coordinatePgAuthenticationAuthority, coordinatePgPendingAuthentication, coordinatePgSessionStepUp, coordinatePgSignedSessionValidity, coordinatePgStatefulSessions, makePgAuthenticationAuthorityServices, makePgPendingAuthenticationServices, makePgSessionStepUpServices, makePgSignedSessionValidityServices, makePgStatefulSessionServices } from "./drizzle/pg-sessions.mjs";
 import { coordinatePgProofPersistence, makePgProofPersistenceServices } from "./drizzle/pg-proofs.mjs";
 import { coordinatePgPasswordPersistence, coordinatePgPasswordRegistration, makePgPasswordPersistenceServices, makePgPasswordRegistrationServices } from "./drizzle/pg-passwords.mjs";
 import { coordinatePgEmailAddress, coordinatePgEmailRegistration, makePgEmailAddressServices, makePgEmailRegistrationServices, makePgEmailSignInServices } from "./drizzle/pg-emails.mjs";
 import { coordinatePgPasswordPreparedPersistence, makePgPasswordPreparedPersistenceServices } from "./drizzle/pg-password-prepared.mjs";
-import { AnyRelations } from "drizzle-orm";
-import { Effect } from "effect";
+import { Effect, Layer } from "effect";
 import { AnyPgTable } from "drizzle-orm/pg-core";
 import { EffectPgDatabase } from "drizzle-orm/effect-postgres";
 //#region src/Postgres.d.ts
-export declare const commitMode: "interactive";
-export declare const makeAuthServices: <C extends AnyPgTable, R extends AnyPgTable, S extends AnyPgTable>(database: EffectPgDatabase<AnyRelations>, mapping: AuthTables<C, R, S>) => {
-  readonly authStore: {
-    readonly issueChallenge: (input: import("@yielded/auth/Schema").NewChallenge) => Effect.Effect<void, import("@yielded/auth/AuthStore").IssueChallengeError>;
-    readonly consumeChallenge: (input: import("@yielded/auth/Schema").ConsumeChallenge) => Effect.Effect<import("@yielded/auth/Schema").VerifiedEmail, import("@yielded/auth/AuthStore").EmailOtpRejected | import("@yielded/auth/Errors").AuthStoreError>;
-    readonly issueRegistration: (input: import("@yielded/auth/Schema").NewRegistration) => Effect.Effect<void, import("@yielded/auth/Errors").AuthStoreError>;
-    readonly inspectRegistration: (tokenDigest: import("@yielded/auth/Schema").TokenDigest) => Effect.Effect<import("@yielded/auth/Schema").PendingRegistration, import("@yielded/auth/Errors").InvalidRegistration | import("@yielded/auth/Errors").AuthStoreError>;
-    readonly consumeRegistration: (input: import("@yielded/auth/Schema").ConsumeRegistration) => Effect.Effect<void, import("@yielded/auth/Errors").InvalidRegistration | import("@yielded/auth/Errors").AuthStoreError>;
-  };
-  readonly oauthStateStore: {
-    readonly issue: (state: import("@yielded/auth/OAuth").OAuthState) => Effect.Effect<void, import("@yielded/auth/Errors").AuthStoreError>;
-    readonly consume: (stateDigest: import("@yielded/auth/Schema").TokenDigest) => Effect.Effect<import("@yielded/auth/OAuth").OAuthState, import("@yielded/auth/OAuth").InvalidOAuthState | import("@yielded/auth/Errors").AuthStoreError>;
+export declare const makeSubjectProvisioningServices: <Subject extends AnyPgTable, Identifier extends AnyPgTable, Request extends AnyPgTable, NativeId>(mapping: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>) => Effect.Effect<{
+  readonly subjectProvisioner: {
+    readonly provision: (input: import("@yielded/auth/Identity").SubjectProvisioningInput) => Effect.Effect<import("@yielded/auth/Identity").ProvisioningResult, import("@yielded/auth/Identity").IdentityConflict | import("@yielded/auth/Identity").IdentityUnavailable>;
   };
-  readonly decisions: {
-    readonly consumeChallenge: (input: import("@yielded/auth/Schema").ConsumeChallenge) => Effect.Effect<import("@yielded/auth/AuthStore").ChallengeConsumeDecision, import("@yielded/auth/Errors").AuthStoreError, never>;
-    readonly consumeRegistration: (input: import("@yielded/auth/Schema").ConsumeRegistration) => Effect.Effect<import("@yielded/auth/AuthStore").ConsumeDecision<void>, import("@yielded/auth/Errors").AuthStoreError, never>;
-    readonly consumeOAuthState: (digest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">) => Effect.Effect<import("@yielded/auth/AuthStore").ConsumeDecision<import("@yielded/auth/OAuth").OAuthState>, import("@yielded/auth/Errors").AuthStoreError, never>;
+}, never, Database>;
+export declare const makeExternalIdentityServices: <Subject extends AnyPgTable, External extends AnyPgTable, NativeId>(mapping: ExternalIdentityTables<Subject, External, NativeId>) => Effect.Effect<{
+  readonly externalIdentityMutation: {
+    readonly bind: (subjectId: import("@yielded/auth/Schema").SubjectId, identity: import("@yielded/auth/Identity").ExternalIdentity) => Effect.Effect<void, import("@yielded/auth/Identity").IdentityConflict | import("@yielded/auth/Identity").IdentityUnavailable>;
   };
-};
-export declare const makeIdentityServices: <Subject extends AnyPgTable, Identifier extends AnyPgTable, External extends AnyPgTable, Request extends AnyPgTable, NativeId>(database: EffectPgDatabase<AnyRelations>, mapping: IdentityTables<Subject, Identifier, External, Request, NativeId>) => {
+}, never, Database>;
+export declare const commitMode: "interactive";
+export declare const makeIdentityServices: <Subject extends AnyPgTable, Identifier extends AnyPgTable, External extends AnyPgTable, Request extends AnyPgTable, NativeId>(mapping: IdentityTables<Subject, Identifier, External, Request, NativeId>) => Effect.Effect<{
   subjectProvisioner: {
     readonly provision: (input: import("@yielded/auth/Identity").SubjectProvisioningInput) => Effect.Effect<import("@yielded/auth/Identity").ProvisioningResult, import("@yielded/auth/Identity").IdentityConflict | import("@yielded/auth/Identity").IdentityUnavailable>;
   };
   externalIdentityMutation: {
     readonly bind: (subjectId: import("@yielded/auth/Schema").SubjectId, identity: import("@yielded/auth/Identity").ExternalIdentity) => Effect.Effect<void, import("@yielded/auth/Identity").IdentityConflict | import("@yielded/auth/Identity").IdentityUnavailable>;
   };
-};
+}, never, Database>;
 export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
   dialect: "pg";
 }>, O extends AnyPgTable<{
@@ -64,7 +55,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
   dialect: "pg";
 }>, U extends AnyPgTable<{
   dialect: "pg";
-}>, N>(database: EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>) => Effect.Effect<{
+}>, N>(mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>) => Effect.Effect<{
   oauthAccountsPersistence: {
     readonly capture: (input: {
       readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
@@ -74,6 +65,8 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly flow: import("@yielded/auth/OAuth").OAuthLinkPendingFlow;
       readonly authorization: import("@yielded/auth/OAuth").OAuthActionAuthorization;
     }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
       readonly _tag: "Issued";
       readonly flow: {
         readonly context: {
@@ -88,6 +81,21 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
           readonly generation: number;
           readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
           readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+          readonly access?: {
+            readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+            readonly generation: number;
+            readonly issuance: "active" | "retired";
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly clientRegistrationId: string;
+            readonly scopes: readonly string[];
+            readonly resources: readonly string[];
+            readonly retention: "access-and-refresh" | "access-only";
+            readonly maximumAccessLifetimeMillis: number;
+            readonly maximumRefreshLifetimeMillis?: number | undefined;
+            readonly refreshAheadMillis: number;
+            readonly refresh: "confidential" | "rotating" | "unsupported";
+            readonly revocation: "cohort" | "unsupported";
+          } | undefined;
           readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
           readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
           readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
@@ -114,8 +122,6 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
         };
         readonly retentionUntilMillis: number;
       };
-    } | {
-      readonly _tag: "Rejected";
     }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
     readonly preflight: (input: import("@yielded/auth/OAuth").OAuthLinkAccess) => Effect.Effect<import("@yielded/auth/OAuth").OAuthLinkPendingFlow | undefined, import("@yielded/auth/OAuth").OAuthUnavailable>;
     readonly claim: <A>(input: {
@@ -141,6 +147,21 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
             readonly generation: number;
             readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
             readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+            readonly access?: {
+              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+              readonly generation: number;
+              readonly issuance: "active" | "retired";
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly clientRegistrationId: string;
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly retention: "access-and-refresh" | "access-only";
+              readonly maximumAccessLifetimeMillis: number;
+              readonly maximumRefreshLifetimeMillis?: number | undefined;
+              readonly refreshAheadMillis: number;
+              readonly refresh: "confidential" | "rotating" | "unsupported";
+              readonly revocation: "cohort" | "unsupported";
+            } | undefined;
             readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
             readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
             readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
@@ -184,6 +205,8 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly _tag: "Cancelled";
     } | {
       readonly _tag: "Ambiguous";
+    } | {
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Linked";
       readonly credential: {
@@ -205,8 +228,6 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
         };
       };
       readonly changed: boolean;
-    } | {
-      readonly _tag: "Conflict";
     }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
     readonly inspectUnlink: (input: {
       readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
@@ -284,7 +305,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly hasMore: boolean;
     }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
   };
-}, never, import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthSignInServices: <S extends AnyPgTable<{
+}, never, Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthSignInServices: <S extends AnyPgTable<{
   dialect: "pg";
 }>, O extends AnyPgTable<{
   dialect: "pg";
@@ -294,7 +315,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
   dialect: "pg";
 }>, F extends AnyPgTable<{
   dialect: "pg";
-}>, N>(database: EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthSignInMapping<S, O, C, AC, F, N>) => Effect.Effect<{
+}>, N>(mapping: OAuthSignInMapping<S, O, C, AC, F, N>) => Effect.Effect<{
   oauthSignInPersistence: {
     readonly issue: <A>(input: import("@yielded/auth/OAuth").OAuthPendingFlow, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthIssueDecision, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
     readonly claim: <A>(input: {
@@ -326,7 +347,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly hasMore: boolean;
     }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
   };
-}, never, import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthRegistrationIntentServices: <S extends AnyPgTable<{
+}, never, Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthRegistrationIntentServices: <S extends AnyPgTable<{
   dialect: "pg";
 }>, O extends AnyPgTable<{
   dialect: "pg";
@@ -340,7 +361,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
   dialect: "pg";
 }>, I extends AnyPgTable<{
   dialect: "pg";
-}>, N>(database: EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>) => Effect.Effect<{
+}>, N>(mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>) => Effect.Effect<{
   oauthRegistrationIntents: {
     readonly settle: <A>(input: {
       readonly claim: import("@yielded/auth/OAuth").OAuthClaim;
@@ -349,7 +370,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly nowMillis: number;
     }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthRegistrationSettlement, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
   };
-}, never, import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthRegistrationServices: <Registration, S extends AnyPgTable<{
+}, never, Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthRegistrationServices: <Registration, S extends AnyPgTable<{
   dialect: "pg";
 }>, O extends AnyPgTable<{
   dialect: "pg";
@@ -363,9 +384,9 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
   dialect: "pg";
 }>, R extends AnyPgTable<{
   dialect: "pg";
-}>, N>(database: EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthRegistrationMapping<Registration, S, O, C, AC, TA, I, R, N>) => Effect.Effect<{
+}>, N>(mapping: OAuthRegistrationMapping<Registration, S, O, C, AC, TA, I, R, N>) => Effect.Effect<{
   registrationAuthority: OAuthRegistrationAuthority<Registration>;
-}, never, import("@yielded/auth/Hooks").LifecycleHooks>, coordinateOAuthRegistration: {
+}, never, Database | import("@yielded/auth/Hooks").LifecycleHooks>, coordinateOAuthRegistration: {
   <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, TargetId, Registration, S extends AnyPgTable<{
     dialect: "pg";
   }>, O extends AnyPgTable<{
@@ -537,8 +558,100 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
   dialect: "pg";
 }>, N, J extends AnyPgTable<{
   dialect: "pg";
-}> = never>(database: EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J>) => Effect.Effect<{
+}> = never>(mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J>) => Effect.Effect<{
   oauthConnectedPersistence: {
+    readonly claimSignIn: <A>(input: {
+      readonly claim: import("@yielded/auth/OAuth").OAuthClaim;
+      readonly configuration: import("@yielded/auth/OAuth").OAuthConnectedConfiguration;
+    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthSignInAccessClaim, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
+    readonly inspectSignIn: (input: {
+      readonly reservation: import("@yielded/auth/OAuth").OAuthSignInAccessClaim;
+      readonly credential: import("@yielded/auth/OAuth").OAuthCredentialSnapshot;
+      readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+    }) => Effect.Effect<import("@yielded/auth/OAuth").OAuthSignInAccessInspection, import("@yielded/auth/OAuth").OAuthUnavailable>;
+    readonly settleSignIn: <A>(input: {
+      readonly reservation: import("@yielded/auth/OAuth").OAuthSignInAccessClaim;
+      readonly outcome: import("@yielded/auth/OAuth").OAuthSignInAccessOutcome;
+    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Cancelled";
+    } | {
+      readonly _tag: "Ambiguous";
+    } | {
+      readonly _tag: "Connected";
+      readonly grant: {
+        readonly context: {
+          readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
+          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+          readonly identity: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly subject: string;
+          };
+          readonly configuration: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly protocol: "oauth" | "oidc";
+            readonly configurationGeneration: number;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly responseIssuerMode: "required" | "unsupported";
+            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+            readonly profile: {
+              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+              readonly generation: number;
+              readonly issuance: "active" | "retired";
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly clientRegistrationId: string;
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly retention: "access-and-refresh" | "access-only";
+              readonly maximumAccessLifetimeMillis: number;
+              readonly maximumRefreshLifetimeMillis?: number | undefined;
+              readonly refreshAheadMillis: number;
+              readonly refresh: "confidential" | "rotating" | "unsupported";
+              readonly revocation: "cohort" | "unsupported";
+            };
+          };
+          readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+          readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly metadata: {
+            readonly scopes: readonly string[];
+            readonly resources: readonly string[];
+            readonly accessExpiresAtMillis?: number | undefined;
+            readonly refreshExpiresAtMillis?: number | undefined;
+            readonly useUntilMillis: number;
+            readonly refreshUseUntilMillis?: number | undefined;
+            readonly obtainedAtMillis: number;
+            readonly profile?: {
+              readonly displayName?: string | undefined;
+              readonly handle?: string | undefined;
+              readonly avatarUrl?: string | undefined;
+              readonly profileUrl?: string | undefined;
+              readonly email?: string | undefined;
+              readonly emailVerified?: boolean | undefined;
+              readonly providerData?: {
+                readonly [x: string]: import("effect/Schema").Json;
+              } | undefined;
+            } | undefined;
+          };
+        };
+        readonly sealed: {
+          readonly format: "oauth-connected-xchacha20poly1305-v1";
+          readonly keyId: string;
+          readonly nonce: string;
+          readonly ciphertext: import("effect/Redacted").Redacted<string>;
+        };
+      };
+    } | {
+      readonly _tag: "Conflict";
+    } | {
+      readonly _tag: "Busy";
+    }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
     readonly capture: (input: {
       readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
       readonly subjectId: import("@yielded/auth/Schema").SubjectId;
@@ -567,6 +680,21 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
           readonly generation: number;
           readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
           readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+          readonly access?: {
+            readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+            readonly generation: number;
+            readonly issuance: "active" | "retired";
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly clientRegistrationId: string;
+            readonly scopes: readonly string[];
+            readonly resources: readonly string[];
+            readonly retention: "access-and-refresh" | "access-only";
+            readonly maximumAccessLifetimeMillis: number;
+            readonly maximumRefreshLifetimeMillis?: number | undefined;
+            readonly refreshAheadMillis: number;
+            readonly refresh: "confidential" | "rotating" | "unsupported";
+            readonly revocation: "cohort" | "unsupported";
+          } | undefined;
           readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
           readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
           readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
@@ -669,6 +797,21 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
             readonly generation: number;
             readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
             readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+            readonly access?: {
+              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+              readonly generation: number;
+              readonly issuance: "active" | "retired";
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly clientRegistrationId: string;
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly retention: "access-and-refresh" | "access-only";
+              readonly maximumAccessLifetimeMillis: number;
+              readonly maximumRefreshLifetimeMillis?: number | undefined;
+              readonly refreshAheadMillis: number;
+              readonly refresh: "confidential" | "rotating" | "unsupported";
+              readonly revocation: "cohort" | "unsupported";
+            } | undefined;
             readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
             readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
             readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
@@ -781,13 +924,12 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly _tag: "Cancelled";
     } | {
       readonly _tag: "Ambiguous";
-    } | {
-      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Connected";
       readonly grant: {
         readonly context: {
           readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
           readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
           readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
           readonly identity: {
@@ -851,6 +993,8 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
           readonly ciphertext: import("effect/Redacted").Redacted<string>;
         };
       };
+    } | {
+      readonly _tag: "Conflict";
     } | {
       readonly _tag: "Busy";
     }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
@@ -898,6 +1042,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly grant: {
         readonly context: {
           readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
           readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
           readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
           readonly identity: {
@@ -1010,6 +1155,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly grant: {
         readonly context: {
           readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
           readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
           readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
           readonly identity: {
@@ -1094,6 +1240,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
         readonly grant: {
           readonly context: {
             readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+            readonly exchangeOrder: string;
             readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
             readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
             readonly identity: {
@@ -1157,6 +1304,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
             readonly ciphertext: import("effect/Redacted").Redacted<string>;
           };
         };
+        readonly order: string;
         readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
         readonly claimedAtMillis: number;
         readonly claimExpiresAtMillis: number;
@@ -1176,6 +1324,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly grant: {
         readonly context: {
           readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly exchangeOrder: string;
           readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
           readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
           readonly identity: {
@@ -1265,7 +1414,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly hasMore: boolean;
     }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
   };
-}, never, import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthConnectedRevocationServices: <T extends AnyPgTable<{
+}, never, Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthConnectedRevocationServices: <T extends AnyPgTable<{
   dialect: "pg";
 }>, O extends AnyPgTable<{
   dialect: "pg";
@@ -1279,7 +1428,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
   dialect: "pg";
 }>, J extends AnyPgTable<{
   dialect: "pg";
-}>, N>(database: EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthConnectedRevocationMapping<T, O, F, G, C, H, J, N>) => Effect.Effect<{
+}>, N>(mapping: OAuthConnectedRevocationMapping<T, O, F, G, C, H, J, N>) => Effect.Effect<{
   oauthConnectedRevocations: {
     readonly claim: <A>(input: {
       readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
@@ -1294,6 +1443,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
             readonly jobId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
             readonly token: {
               readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+              readonly exchangeOrder: string;
               readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
               readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
               readonly identity: {
@@ -1372,7 +1522,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
       readonly settled: boolean;
     }, A>) => Effect.Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
   };
-}, never, import("@yielded/auth/Hooks").LifecycleHooks>, coordinateOAuthConnected: {
+}, never, Database | import("@yielded/auth/Hooks").LifecycleHooks>, coordinateOAuthConnected: {
   <D extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
     dialect: "pg";
   }>, AC extends AnyPgTable<{
@@ -1467,7 +1617,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
     } ? Parameters<Parameters<D["transaction"]>[0]>[0] : never>, TxShape>;
   }, body: Effect.Effect<A, E, R>): Effect.Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/OAuth").OAuthConnectedRevocations>>;
 };
-export declare const makePasskeyCredentialServices: <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+export declare const makePasskeyCredentialServices: <S extends AnyPgTable<{
   dialect: "pg";
 }>, C extends AnyPgTable<{
   dialect: "pg";
@@ -1477,7 +1627,7 @@ export declare const makePasskeyCredentialServices: <Database extends EffectPgDa
   dialect: "pg";
 }>, H extends AnyPgTable<{
   dialect: "pg";
-}>, N, RSetup = never>(database: Database, mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyCredentialMapping<S, C, F, O, H, N>, RSetup>) => Effect.Effect<import("@yielded/auth-persistence/Adapter").PasskeyCredentialServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, RSetup>, makePasskeyPersistenceServices: <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+}>, N, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyCredentialMapping<S, C, F, O, H, N>, RSetup>) => Effect.Effect<import("@yielded/auth-persistence/Adapter").PasskeyCredentialServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, Database | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, makePasskeyPersistenceServices: <S extends AnyPgTable<{
   dialect: "pg";
 }>, C extends AnyPgTable<{
   dialect: "pg";
@@ -1495,7 +1645,7 @@ export declare const makePasskeyCredentialServices: <Database extends EffectPgDa
   dialect: "pg";
 }>, Charge extends AnyPgTable<{
   dialect: "pg";
-}>, N, RSetup = never>(database: Database, mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, Flow, Admission, Charge, N>, RSetup>) => Effect.Effect<import("@yielded/auth-persistence/Adapter").PasskeyPersistenceServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, makePasskeyEnrollmentContextServices: <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+}>, N, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, Flow, Admission, Charge, N>, RSetup>) => Effect.Effect<import("@yielded/auth-persistence/Adapter").PasskeyPersistenceServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, makePasskeyEnrollmentContextServices: <S extends AnyPgTable<{
   dialect: "pg";
 }>, C extends AnyPgTable<{
   dialect: "pg";
@@ -1507,7 +1657,7 @@ export declare const makePasskeyCredentialServices: <Database extends EffectPgDa
   dialect: "pg";
 }>, M extends AnyPgTable<{
   dialect: "pg";
-}>, N, RSetup = never>(database: Database, mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyEnrollmentContextMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, N>, RSetup>) => Effect.Effect<import("@yielded/auth-persistence/Adapter").PasskeyEnrollmentContextServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, RSetup>, makePasskeyRegistrationCeremonyServices: <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, M extends AnyPgTable<{
+}>, N, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyEnrollmentContextMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, N>, RSetup>) => Effect.Effect<import("@yielded/auth-persistence/Adapter").PasskeyEnrollmentContextServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, Database | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, makePasskeyRegistrationCeremonyServices: <M extends AnyPgTable<{
   dialect: "pg";
 }>, Flow extends AnyPgTable<{
   dialect: "pg";
@@ -1519,7 +1669,7 @@ export declare const makePasskeyCredentialServices: <Database extends EffectPgDa
   dialect: "pg";
 }>, H extends AnyPgTable<{
   dialect: "pg";
-}>, RSetup = never>(database: Database, mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H>, RSetup>) => Effect.Effect<import("@yielded/auth-persistence/Adapter").PasskeyRegistrationCeremonyServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, coordinatePasskeyPersistence: {
+}>, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H>, RSetup>) => Effect.Effect<import("@yielded/auth-persistence/Adapter").PasskeyRegistrationCeremonyServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, coordinatePasskeyPersistence: {
   <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
     dialect: "pg";
   }>, C extends AnyPgTable<{
@@ -1601,7 +1751,7 @@ export declare const makePasskeyCredentialServices: <Database extends EffectPgDa
       readonly transaction: (...args: any[]) => any;
     } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
   }, body: Effect.Effect<A, E, R>): Effect.Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/Passkey").PasskeyPersistence>>;
-}, makePasskeyManagementServices: <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+}, makePasskeyManagementServices: <S extends AnyPgTable<{
   dialect: "pg";
 }>, C extends AnyPgTable<{
   dialect: "pg";
@@ -1621,7 +1771,7 @@ export declare const makePasskeyCredentialServices: <Database extends EffectPgDa
   dialect: "pg";
 }>, Command extends AnyPgTable<{
   dialect: "pg";
-}>, N, RSetup = never>(database: Database, mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyManagementMapping<S, C, F, O, H, M, Flow, Admission, Charge, Command, N>, RSetup>) => Effect.Effect<import("@yielded/auth-persistence/Adapter").PasskeyManagementServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, makePasskeyRegistrationServices: <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+}>, N, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyManagementMapping<S, C, F, O, H, M, Flow, Admission, Charge, Command, N>, RSetup>) => Effect.Effect<import("@yielded/auth-persistence/Adapter").PasskeyManagementServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, makePasskeyRegistrationServices: <S extends AnyPgTable<{
   dialect: "pg";
 }>, C extends AnyPgTable<{
   dialect: "pg";
@@ -1641,7 +1791,7 @@ export declare const makePasskeyCredentialServices: <Database extends EffectPgDa
   dialect: "pg";
 }>, Intent extends AnyPgTable<{
   dialect: "pg";
-}>, N, Value, RSetup = never>(database: Database, mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, O, H, M, Flow, Admission, Charge, Intent, N, Value>, RSetup>) => Effect.Effect<import("@yielded/auth-persistence/Adapter").PasskeyRegistrationServices<Value>, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, coordinatePasskeyManagement: {
+}>, N, Value, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, O, H, M, Flow, Admission, Charge, Intent, N, Value>, RSetup>) => Effect.Effect<import("@yielded/auth-persistence/Adapter").PasskeyRegistrationServices<Value>, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, coordinatePasskeyManagement: {
   <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
     dialect: "pg";
   }>, C extends AnyPgTable<{
@@ -1746,13 +1896,13 @@ export declare const makePasskeyCredentialServices: <Database extends EffectPgDa
     } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
   }, body: Effect.Effect<A, E, R>): Effect.Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, AuthorityId | TxId | import("@yielded/auth/Passkey").PasskeyPersistence>>;
 };
-export declare const makeTotpPersistenceServices: <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+export declare const makeTotpPersistenceServices: <S extends AnyPgTable<{
   dialect: "pg";
 }>, F extends AnyPgTable<{
   dialect: "pg";
 }>, C extends AnyPgTable<{
   dialect: "pg";
-}>, N, RSetup = never>(database: Database, mapping: TotpMappingSource<TotpMapping<S, F, C, N>, RSetup>) => Effect.Effect<TotpPersistenceServices, import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/Totp").TotpConfigurationError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, coordinateTotpPersistence: {
+}>, N, RSetup = never>(mapping: TotpMappingSource<TotpMapping<S, F, C, N>, RSetup>) => Effect.Effect<TotpPersistenceServices, import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/Totp").TotpConfigurationError, Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, coordinateTotpPersistence: {
   <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
     dialect: "pg";
   }>, F extends AnyPgTable<{
@@ -1776,7 +1926,7 @@ export declare const makeTotpPersistenceServices: <Database extends EffectPgData
     } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
   }, body: Effect.Effect<A, E, R>): Effect.Effect<A, DatabaseError | TotpCoordinatorError<E>, DatabaseRequirements | RSetup | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/Totp").TotpPersistence>>;
 };
-export declare const makePhonePersistenceServices: <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+export declare const makePhonePersistenceServices: <S extends AnyPgTable<{
   dialect: "pg";
 }>, I extends AnyPgTable<{
   dialect: "pg";
@@ -1784,7 +1934,7 @@ export declare const makePhonePersistenceServices: <Database extends EffectPgDat
   dialect: "pg";
 }>, C extends AnyPgTable<{
   dialect: "pg";
-}>, N, RSetup = never>(database: Database, mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N>, RSetup>) => Effect.Effect<PhonePersistenceServices, import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/PhoneOtp").PhoneConfigurationError, RSetup | import("@yielded/auth/Hooks").LifecycleHooks>, coordinatePhonePersistence: {
+}>, N, RSetup = never>(mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N>, RSetup>) => Effect.Effect<PhonePersistenceServices, import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/PhoneOtp").PhoneConfigurationError, Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, coordinatePhonePersistence: {
   <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
     dialect: "pg";
   }>, I extends AnyPgTable<{
@@ -1814,8 +1964,10 @@ export declare const makePhonePersistenceServices: <Database extends EffectPgDat
 };
 export declare const AuthPersistence: {
   make: <C extends import("@yielded/auth-persistence/Adapter").ClaimsCodec, const Id extends string, const A extends import("@yielded/auth-persistence/Adapter").Definition<C, Id>>(auth: A & import("@yielded/auth-persistence/Adapter").Definition<C, Id>) => import("@yielded/auth-persistence/Adapter").BoundPersistence<import("drizzle-orm/pg-core").PgTable<import("drizzle-orm/pg-core").TableConfig>, import("@effect/sql-pg/PgClient").PgClient, C, Id, A>;
-  migrationsLayer: (options: import("drizzle-orm/migrator").MigrationConfig) => import("effect/Layer").Layer<never, import("drizzle-orm/effect-core").EffectDrizzleQueryError | import("drizzle-orm/effect-core").MigratorInitError | import("@yielded/auth-persistence/Adapter").PersistenceConfigurationError | import("effect/unstable/sql/SqlError").SqlError, import("@effect/sql-pg/PgClient").PgClient>;
+  migrationsLayer: (options: import("drizzle-orm/migrator").MigrationConfig) => Layer.Layer<never, import("drizzle-orm/effect-core").EffectDrizzleQueryError | import("drizzle-orm/effect-core").MigratorInitError | import("@yielded/auth-persistence/Adapter").PersistenceConfigurationError | import("effect/sql/SqlError").SqlError, import("@effect/sql-pg/PgClient").PgClient>;
 };
+/** Construct Drizzle from the driver's SQL-client Layer. */
+export declare const databaseLayer: Layer.Layer<Database, never, import("@effect/sql-pg/PgClient").PgClient>;
 //#endregion
-export { coordinatePgAuthStoreTransaction as coordinateAuthStoreTransaction, coordinatePgAuthTransaction as coordinateAuthTransaction, coordinatePgAuthenticationAuthority as coordinateAuthenticationAuthority, coordinatePgEmailAddress as coordinateEmailAddress, coordinatePgEmailRegistration as coordinateEmailRegistration, coordinatePgOAuthStateTransaction as coordinateOAuthStateTransaction, coordinatePgPasswordPersistence as coordinatePasswordPersistence, coordinatePgPasswordPreparedPersistence as coordinatePasswordPreparedPersistence, coordinatePgPasswordRegistration as coordinatePasswordRegistration, coordinatePgPendingAuthentication as coordinatePendingAuthentication, coordinatePgProofPersistence as coordinateProofPersistence, coordinatePgSessionStepUp as coordinateSessionStepUp, coordinatePgSignedSessionValidity as coordinateSignedSessionValidity, coordinatePgStatefulSessions as coordinateStatefulSessions, makePgAuthStoreServices as makeAuthStoreServices, makePgAuthenticationAuthorityServices as makeAuthenticationAuthorityServices, makePgEmailAddressServices as makeEmailAddressServices, makePgEmailRegistrationServices as makeEmailRegistrationServices, makePgEmailSignInServices as makeEmailSignInServices, makePgExternalIdentityServices as makeExternalIdentityServices, makePgOAuthStateServices as makeOAuthStateServices, makePgPasswordPersistenceServices as makePasswordPersistenceServices, makePgPasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices, makePgPasswordRegistrationServices as makePasswordRegistrationServices, makePgPendingAuthenticationServices as makePendingAuthenticationServices, makePgProofPersistenceServices as makeProofPersistenceServices, makePgSessionStepUpServices as makeSessionStepUpServices, makePgSignedSessionValidityServices as makeSignedSessionValidityServices, makePgStatefulSessionServices as makeStatefulSessionServices, makePgSubjectProvisioningServices as makeSubjectProvisioningServices, passwordPreparedPersistenceLayer };
+export { Database, coordinatePgAuthenticationAuthority as coordinateAuthenticationAuthority, coordinatePgEmailAddress as coordinateEmailAddress, coordinatePgEmailRegistration as coordinateEmailRegistration, coordinatePgPasswordPersistence as coordinatePasswordPersistence, coordinatePgPasswordPreparedPersistence as coordinatePasswordPreparedPersistence, coordinatePgPasswordRegistration as coordinatePasswordRegistration, coordinatePgPendingAuthentication as coordinatePendingAuthentication, coordinatePgProofPersistence as coordinateProofPersistence, coordinatePgSessionStepUp as coordinateSessionStepUp, coordinatePgSignedSessionValidity as coordinateSignedSessionValidity, coordinatePgStatefulSessions as coordinateStatefulSessions, makePgAuthenticationAuthorityServices as makeAuthenticationAuthorityServices, makePgEmailAddressServices as makeEmailAddressServices, makePgEmailRegistrationServices as makeEmailRegistrationServices, makePgEmailSignInServices as makeEmailSignInServices, makePgPasswordPersistenceServices as makePasswordPersistenceServices, makePgPasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices, makePgPasswordRegistrationServices as makePasswordRegistrationServices, makePgPendingAuthenticationServices as makePendingAuthenticationServices, makePgProofPersistenceServices as makeProofPersistenceServices, makePgSessionStepUpServices as makeSessionStepUpServices, makePgSignedSessionValidityServices as makeSignedSessionValidityServices, makePgStatefulSessionServices as makeStatefulSessionServices, passwordPreparedPersistenceLayer };
 //# sourceMappingURL=Postgres.d.mts.map