@yielded/auth-persistence-drizzle 0.1.0-beta.25 → 0.1.0-beta.26

package/dist/Mysql2.d.mts

@@ -1,29 +1,106 @@
+import { EmailAddressMapping, EmailRegistrationMapping, EmailSignInMapping } from "./drizzle/email-model.mjs";
+import { PasswordPersistenceMapping, PasswordRegistrationMapping } from "./drizzle/password-model.mjs";
+import { ProofPersistenceMapping } from "./drizzle/proof-model.mjs";
 import { ExternalIdentityTables, IdentityTables, SubjectProvisioningTables } from "./drizzle/model.mjs";
-import { PasskeyCredentialMapping, PasskeyEnrollmentContextMapping, PasskeyPersistenceMapping } from "./drizzle/passkey-model.mjs";
+import { AuthenticationAuthorityMapping, PendingAuthenticationMapping, SessionCleanupMapping, SignedSessionValidityMapping, StatefulSessionMapping } from "./drizzle/session-model.mjs";
+import { PasskeyCredentialMapping, PasskeyPersistenceMapping } from "./drizzle/passkey-model.mjs";
+import { SessionStepUpMapping } from "./drizzle/step-up-model.mjs";
 import { OAuthAccountsMapping, OAuthRegistrationIntentMapping, OAuthRegistrationMapping, OAuthSignInMapping } from "./drizzle/oauth-model.mjs";
 import { OAuthConnectedMapping, OAuthConnectedRevocationMapping } from "./drizzle/oauth-connected-model.mjs";
 import { PasskeyRegistrationCeremonyMapping } from "./drizzle/passkey-registration-ceremony-model.mjs";
-import { passwordPreparedPersistenceLayer } from "./drizzle/password-prepared-target.mjs";
-import { TotpMapping, TotpMappingSource, TotpPersistenceServices } from "./drizzle/totp-model.mjs";
+import { NativeDatabase } from "./drizzle/native-database.mjs";
+import { D1BatchStatements } from "./drizzle/D1BatchStatements.mjs";
+import { OAuthCoordinatorError } from "./drizzle/oauth-target.mjs";
+import { TotpMapping } from "./drizzle/totp-model.mjs";
 import { PasskeyManagementMapping, PasskeyRegistrationMapping } from "./drizzle/passkey-write-model.mjs";
-import { PhoneMapping, PhoneMappingSource, PhonePersistenceServices } from "./drizzle/phone-model.mjs";
+import { PasskeyCoordinatorError } from "./drizzle/passkey/target.mjs";
+import { PhoneMapping } from "./drizzle/phone-model.mjs";
 import "./index.mjs";
+import { NativeDriverTransaction } from "./drizzle/driver-types.mjs";
 import { SuppliedService } from "./drizzle/SuppliedService.mjs";
-import { TotpCoordinatorError } from "./drizzle/totp-target.mjs";
-import { PhoneCoordinatorError } from "./drizzle/phone-target.mjs";
+import "./D1.mjs";
 import { Database } from "./drizzle/mysql-database.mjs";
-import { coordinateMysqlAuthenticationAuthority, coordinateMysqlPendingAuthentication, coordinateMysqlSessionStepUp, coordinateMysqlSignedSessionValidity, coordinateMysqlStatefulSessions, makeMysqlAuthenticationAuthorityServices, makeMysqlPendingAuthenticationServices, makeMysqlSessionStepUpServices, makeMysqlSignedSessionValidityServices, makeMysqlStatefulSessionServices } from "./drizzle/mysql-sessions.mjs";
-import { coordinateMysqlProofPersistence, makeMysqlProofPersistenceServices } from "./drizzle/mysql-proofs.mjs";
-import { coordinateMysqlPasswordPersistence, coordinateMysqlPasswordRegistration, makeMysqlPasswordPersistenceServices, makeMysqlPasswordRegistrationServices } from "./drizzle/mysql-passwords.mjs";
-import { coordinateMysqlEmailAddress, coordinateMysqlEmailRegistration, makeMysqlEmailAddressServices, makeMysqlEmailRegistrationServices, makeMysqlEmailSignInServices } from "./drizzle/mysql-emails.mjs";
-import { coordinateMySqlPasswordPreparedPersistence, makeMySqlPasswordPreparedPersistenceServices } from "./drizzle/mysql-password-prepared.mjs";
 import { Layer } from "effect";
 import { AnyMySqlTable } from "drizzle-orm/mysql-core";
 import { EffectMysql2Database } from "drizzle-orm/effect-mysql2";
 //#region src/Mysql2.d.ts
+export declare const coordinateProofPersistence: {
+  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, Proof extends import("drizzle-orm").Table, Subject extends import("drizzle-orm").Table, NativeId, A, E, R, DE, DR>(acquire: import("effect/Effect").Effect<Database, DE, DR>, options: {
+    readonly mapping: ProofPersistenceMapping<Proof, Subject, NativeId>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Proofs").ProofUnavailable, DR | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/Proofs").ProofPersistence>>;
+  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, Proof extends import("drizzle-orm").Table, Subject extends import("drizzle-orm").Table, NativeId, A, E, R, DE, DR, TxId, TxShape>(acquire: import("effect/Effect").Effect<Database, DE, DR>, options: {
+    readonly mapping: ProofPersistenceMapping<Proof, Subject, NativeId>;
+    readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<Database>>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Proofs").ProofUnavailable, DR | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/Proofs").ProofPersistence>>;
+}, makeProofPersistenceServices: <Proof extends import("drizzle-orm").Table, Subject extends import("drizzle-orm").Table, NativeId>(mapping: ProofPersistenceMapping<Proof, Subject, NativeId>) => import("effect/Effect").Effect<{
+  readonly proofPersistence: import("@yielded/auth/Proofs").ProofPersistence["Service"];
+}, import("@yielded/auth/Proofs").ProofUnavailable, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks>;
+export declare const coordinatePasswordPersistence: {
+  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends import("drizzle-orm").Table, I extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, AC extends import("drizzle-orm").Table, N, Proof extends import("drizzle-orm").Table, PS extends import("drizzle-orm").Table, PN, A, E, R, DE, DR>(acquire: import("effect/Effect").Effect<Database, DE, DR>, options: {
+    readonly mapping: PasswordPersistenceMapping<S, I, C, AC, N>;
+    readonly transaction?: never;
+  } & {
+    readonly proofMapping?: ProofPersistenceMapping<Proof, PS, PN>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Password").PasswordUnavailable, DR | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/Password").PasswordPersistence>>;
+  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends import("drizzle-orm").Table, I extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, AC extends import("drizzle-orm").Table, N, Proof extends import("drizzle-orm").Table, PS extends import("drizzle-orm").Table, PN, A, E, R, DE, DR, TxId, TxShape>(acquire: import("effect/Effect").Effect<Database, DE, DR>, options: {
+    readonly mapping: PasswordPersistenceMapping<S, I, C, AC, N>;
+    readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<Database>>, TxShape>;
+  } & {
+    readonly proofMapping?: ProofPersistenceMapping<Proof, PS, PN>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Password").PasswordUnavailable, DR | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/Password").PasswordPersistence>>;
+}, coordinatePasswordRegistration: {
+  <TargetId, Registration, Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends import("drizzle-orm").Table, I extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, AC extends import("drizzle-orm").Table, N, A, E, R, DE, DR>(acquire: import("effect/Effect").Effect<Database, DE, DR>, options: {
+    readonly mapping: PasswordRegistrationMapping<NoInfer<Registration>, S, I, C, AC, N>;
+    readonly target: SuppliedService<TargetId, import("@yielded/auth-persistence/Adapter").PasswordRegistrationAuthority<Registration>>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Password").PasswordUnavailable, DR | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TargetId>>;
+  <TargetId, Registration, Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends import("drizzle-orm").Table, I extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, AC extends import("drizzle-orm").Table, N, A, E, R, DE, DR, TxId, TxShape>(acquire: import("effect/Effect").Effect<Database, DE, DR>, options: {
+    readonly mapping: PasswordRegistrationMapping<NoInfer<Registration>, S, I, C, AC, N>;
+    readonly target: SuppliedService<TargetId, import("@yielded/auth-persistence/Adapter").PasswordRegistrationAuthority<Registration>>;
+    readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<Database>>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Password").PasswordUnavailable, DR | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TargetId | TxId>>;
+}, makePasswordPersistenceServices: <S extends import("drizzle-orm").Table, I extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, AC extends import("drizzle-orm").Table, N, Proof extends import("drizzle-orm").Table, PS extends import("drizzle-orm").Table, PN>(mapping: PasswordPersistenceMapping<S, I, C, AC, N>, proofMapping?: ProofPersistenceMapping<Proof, PS, PN> | undefined) => import("effect/Effect").Effect<{
+  readonly passwordPersistence: import("@yielded/auth/Password").PasswordPersistence["Service"];
+}, import("@yielded/auth/Password").PasswordUnavailable, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks>, makePasswordRegistrationServices: <Registration, S extends import("drizzle-orm").Table, I extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, AC extends import("drizzle-orm").Table, N>(mapping: PasswordRegistrationMapping<Registration, S, I, C, AC, N>) => import("effect/Effect").Effect<{
+  readonly registrationAuthority: import("@yielded/auth-persistence/Adapter").PasswordRegistrationAuthority<Registration>;
+}, import("@yielded/auth/Password").PasswordUnavailable, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks>;
+export declare const makeEmailSignInServices: <S extends import("drizzle-orm").Table, I extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, AC extends import("drizzle-orm").Table, N>(mapping: EmailSignInMapping<S, I, C, AC, N>) => import("effect/Effect").Effect<{
+  readonly emailSignInTargets: import("@yielded/auth/Email").EmailSignInTargets["Service"];
+}, import("@yielded/auth/Email").EmailUnavailable, Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeEmailAddressServices: <S extends import("drizzle-orm").Table, I extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, AC extends import("drizzle-orm").Table, N, Proof extends import("drizzle-orm").Table, PS extends import("drizzle-orm").Table, PN>(mapping: EmailAddressMapping<S, I, C, AC, N>, proofMapping?: ProofPersistenceMapping<Proof, PS, PN> | undefined) => import("effect/Effect").Effect<{
+  readonly emailAddressPersistence: import("@yielded/auth/Email").EmailAddressPersistence["Service"];
+}, import("@yielded/auth/Email").EmailUnavailable, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeEmailRegistrationServices: <Registration, Proof extends import("drizzle-orm").Table, PS extends import("drizzle-orm").Table, PN, S extends import("drizzle-orm").Table, I extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, AC extends import("drizzle-orm").Table, N>(mapping: EmailRegistrationMapping<Registration, S, I, C, AC, N>, proofs: ProofPersistenceMapping<Proof, PS, PN>) => import("effect/Effect").Effect<{
+  readonly registrationAuthority: import("@yielded/auth-persistence/Adapter").EmailRegistrationAuthority<Registration>;
+}, import("@yielded/auth/Email").EmailUnavailable, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks>, coordinateEmailAddress: {
+  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends import("drizzle-orm").Table, I extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, AC extends import("drizzle-orm").Table, N, Proof extends import("drizzle-orm").Table, PS extends import("drizzle-orm").Table, PN, A, E, R, DE, DR>(acquire: import("effect/Effect").Effect<Database, DE, DR>, options: {
+    readonly mapping: EmailAddressMapping<S, I, C, AC, N>;
+    readonly transaction?: never;
+  } & {
+    readonly proofMapping?: ProofPersistenceMapping<Proof, PS, PN>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Email").EmailUnavailable, DR | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/Email").EmailAddressPersistence>>;
+  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends import("drizzle-orm").Table, I extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, AC extends import("drizzle-orm").Table, N, Proof extends import("drizzle-orm").Table, PS extends import("drizzle-orm").Table, PN, A, E, R, DE, DR, TxId, TxShape>(acquire: import("effect/Effect").Effect<Database, DE, DR>, options: {
+    readonly mapping: EmailAddressMapping<S, I, C, AC, N>;
+    readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<Database>>, TxShape>;
+  } & {
+    readonly proofMapping?: ProofPersistenceMapping<Proof, PS, PN>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Email").EmailUnavailable, DR | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/Email").EmailAddressPersistence>>;
+}, coordinateEmailRegistration: {
+  <TargetId, Registration, Proof extends import("drizzle-orm").Table, PS extends import("drizzle-orm").Table, PN, Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends import("drizzle-orm").Table, I extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, AC extends import("drizzle-orm").Table, N, A, E, R, DE, DR>(acquire: import("effect/Effect").Effect<Database, DE, DR>, options: {
+    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, N>;
+    readonly proofMapping: ProofPersistenceMapping<Proof, PS, PN>;
+    readonly target: SuppliedService<TargetId, import("@yielded/auth-persistence/Adapter").EmailRegistrationAuthority<Registration>>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Email").EmailUnavailable, DR | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TargetId>>;
+  <TargetId, Registration, Proof extends import("drizzle-orm").Table, PS extends import("drizzle-orm").Table, PN, Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends import("drizzle-orm").Table, I extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, AC extends import("drizzle-orm").Table, N, A, E, R, DE, DR, TxId, TxShape>(acquire: import("effect/Effect").Effect<Database, DE, DR>, options: {
+    readonly mapping: EmailRegistrationMapping<NoInfer<Registration>, S, I, C, AC, N>;
+    readonly proofMapping: ProofPersistenceMapping<Proof, PS, PN>;
+    readonly target: SuppliedService<TargetId, import("@yielded/auth-persistence/Adapter").EmailRegistrationAuthority<Registration>>;
+    readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<Database>>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Email").EmailUnavailable, DR | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TargetId | TxId>>;
+};
 export declare const makeSubjectProvisioningServices: <Subject extends AnyMySqlTable, Identifier extends AnyMySqlTable, Request extends AnyMySqlTable, NativeId>(mapping: SubjectProvisioningTables<Subject, Identifier, Request, NativeId>) => import("effect/Effect").Effect<{
   readonly subjectProvisioner: {
-    readonly provision: (input: import("@yielded/auth/Identity").SubjectProvisioningInput) => import("effect/Effect").Effect<import("@yielded/auth/Identity").ProvisioningResult, import("@yielded/auth/Identity").IdentityConflict | import("@yielded/auth/Identity").IdentityUnavailable>;
+    readonly provision: (input: import("@yielded/auth/Identity").SubjectProvisioningInput) => import("effect/Effect").Effect<import("@yielded/auth/Identity").SubjectProvisioned, import("@yielded/auth/Identity").IdentityConflict | import("@yielded/auth/Identity").IdentityUnavailable>;
   };
 }, import("@yielded/auth/Identity").IdentityUnavailable, Database>;
 export declare const makeExternalIdentityServices: <Subject extends AnyMySqlTable, External extends AnyMySqlTable, NativeId>(mapping: ExternalIdentityTables<Subject, External, NativeId>) => import("effect/Effect").Effect<{
@@ -31,10 +108,9 @@ export declare const makeExternalIdentityServices: <Subject extends AnyMySqlTabl
     readonly bind: (subjectId: import("@yielded/auth/Schema").SubjectId, identity: import("@yielded/auth/Identity").ExternalIdentity) => import("effect/Effect").Effect<void, import("@yielded/auth/Identity").IdentityConflict | import("@yielded/auth/Identity").IdentityUnavailable>;
   };
 }, import("@yielded/auth/Identity").IdentityUnavailable, Database>;
-export declare const commitMode: "interactive";
 export declare const makeIdentityServices: <Subject extends AnyMySqlTable, Identifier extends AnyMySqlTable, External extends AnyMySqlTable, Request extends AnyMySqlTable, NativeId>(mapping: IdentityTables<Subject, Identifier, External, Request, NativeId>) => import("effect/Effect").Effect<{
   subjectProvisioner: {
-    readonly provision: (input: import("@yielded/auth/Identity").SubjectProvisioningInput) => import("effect/Effect").Effect<import("@yielded/auth/Identity").ProvisioningResult, import("@yielded/auth/Identity").IdentityConflict | import("@yielded/auth/Identity").IdentityUnavailable>;
+    readonly provision: (input: import("@yielded/auth/Identity").SubjectProvisioningInput) => import("effect/Effect").Effect<import("@yielded/auth/Identity").SubjectProvisioned, import("@yielded/auth/Identity").IdentityConflict | import("@yielded/auth/Identity").IdentityUnavailable>;
   };
   externalIdentityMutation: {
     readonly bind: (subjectId: import("@yielded/auth/Schema").SubjectId, identity: import("@yielded/auth/Identity").ExternalIdentity) => import("effect/Effect").Effect<void, import("@yielded/auth/Identity").IdentityConflict | import("@yielded/auth/Identity").IdentityUnavailable>;
@@ -50,260 +126,8 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, F extends AnyMySqlTable<{
   dialect: "mysql";
-}>, TA extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, U extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, N>(mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>) => import("effect/Effect").Effect<{
-  oauthAccountsPersistence: {
-    readonly capture: (input: {
-      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-      readonly subjectId: import("@yielded/auth/Schema").SubjectId;
-    }) => import("effect/Effect").Effect<import("@yielded/auth/OAuth").OAuthAccountRevision | undefined, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly issue: <A>(input: {
-      readonly flow: import("@yielded/auth/OAuth").OAuthLinkPendingFlow;
-      readonly authorization: import("@yielded/auth/OAuth").OAuthActionAuthorization;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Issued";
-      readonly flow: {
-        readonly context: {
-          readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-          readonly protocol: "oauth" | "oidc";
-          readonly configurationGeneration: number;
-          readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-          readonly responseIssuerMode: "required" | "unsupported";
-          readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
-          readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
-          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-          readonly generation: number;
-          readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
-          readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
-          readonly access?: {
-            readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-            readonly generation: number;
-            readonly issuance: "active" | "retired";
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly clientRegistrationId: string;
-            readonly scopes: readonly string[];
-            readonly resources: readonly string[];
-            readonly retention: "access-and-refresh" | "access-only";
-            readonly maximumAccessLifetimeMillis: number;
-            readonly maximumRefreshLifetimeMillis?: number;
-            readonly refreshAheadMillis: number;
-            readonly refresh: "confidential" | "rotating" | "unsupported";
-            readonly revocation: "cohort" | "unsupported";
-          };
-          readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
-          readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
-          readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
-          readonly requestBindingExpiresAtMillis: number;
-          readonly issuedAtMillis: number;
-          readonly expiresAtMillis: number;
-          readonly claimLifetimeMillis: number;
-          readonly namespace: "effect-auth/oauth-link-context/v1";
-          readonly revision: {
-            readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-            readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-            readonly credentials: readonly {
-              readonly credentialId: string;
-              readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-            }[];
-          };
-          readonly maximumEvidenceAgeMillis: number;
-        };
-        readonly sealed: {
-          readonly format: "oauth-xchacha20poly1305-v1";
-          readonly keyId: string;
-          readonly nonce: string;
-          readonly ciphertext: import("effect/Redacted").Redacted<string>;
-        };
-        readonly retentionUntilMillis: number;
-      };
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly preflight: (input: import("@yielded/auth/OAuth").OAuthLinkAccess) => import("effect/Effect").Effect<import("@yielded/auth/OAuth").OAuthLinkPendingFlow | undefined, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly claim: <A>(input: {
-      readonly access: import("@yielded/auth/OAuth").OAuthLinkAccess;
-      readonly flow: import("@yielded/auth/OAuth").OAuthLinkPendingFlow;
-      readonly claimId: import("@yielded/auth/OAuth").OAuthLinkClaim["claimId"];
-      readonly authorization: import("@yielded/auth/OAuth").OAuthActionAuthorization;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Claimed";
-      readonly claim: {
-        readonly flow: {
-          readonly context: {
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly protocol: "oauth" | "oidc";
-            readonly configurationGeneration: number;
-            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-            readonly responseIssuerMode: "required" | "unsupported";
-            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
-            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
-            readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-            readonly generation: number;
-            readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
-            readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
-            readonly access?: {
-              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-              readonly generation: number;
-              readonly issuance: "active" | "retired";
-              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-              readonly clientRegistrationId: string;
-              readonly scopes: readonly string[];
-              readonly resources: readonly string[];
-              readonly retention: "access-and-refresh" | "access-only";
-              readonly maximumAccessLifetimeMillis: number;
-              readonly maximumRefreshLifetimeMillis?: number;
-              readonly refreshAheadMillis: number;
-              readonly refresh: "confidential" | "rotating" | "unsupported";
-              readonly revocation: "cohort" | "unsupported";
-            };
-            readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
-            readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
-            readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
-            readonly requestBindingExpiresAtMillis: number;
-            readonly issuedAtMillis: number;
-            readonly expiresAtMillis: number;
-            readonly claimLifetimeMillis: number;
-            readonly namespace: "effect-auth/oauth-link-context/v1";
-            readonly revision: {
-              readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-              readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-              readonly credentials: readonly {
-                readonly credentialId: string;
-                readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-              }[];
-            };
-            readonly maximumEvidenceAgeMillis: number;
-          };
-          readonly sealed: {
-            readonly format: "oauth-xchacha20poly1305-v1";
-            readonly keyId: string;
-            readonly nonce: string;
-            readonly ciphertext: import("effect/Redacted").Redacted<string>;
-          };
-          readonly retentionUntilMillis: number;
-        };
-        readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
-        readonly claimedAtMillis: number;
-        readonly claimExpiresAtMillis: number;
-      };
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly settle: <A>(input: {
-      readonly claim: import("@yielded/auth/OAuth").OAuthLinkClaim;
-      readonly outcome: import("@yielded/auth/OAuth").OAuthLinkOutcome;
-      readonly authorization: import("@yielded/auth/OAuth").OAuthActionAuthorization;
-      readonly invalidation: import("@yielded/auth/Sessions").SessionInvalidationWindow;
-      readonly nowMillis: number;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Ambiguous";
-    } | {
-      readonly _tag: "Cancelled";
-    } | {
-      readonly _tag: "Linked";
-      readonly credential: {
-        readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-        readonly identity: {
-          readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-          readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-          readonly subject: string;
-        };
-        readonly credentialId: string;
-        readonly credentialRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-        readonly revision: {
-          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-          readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly credentials: readonly {
-            readonly credentialId: string;
-            readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          }[];
-        };
-      };
-      readonly changed: boolean;
-    } | {
-      readonly _tag: "Conflict";
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly inspectUnlink: (input: {
-      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-      readonly subjectId: import("@yielded/auth/Schema").SubjectId;
-      readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
-      readonly credentialId: string;
-    }) => import("effect/Effect").Effect<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Conflict";
-    } | {
-      readonly _tag: "Target";
-      readonly credential: {
-        readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-        readonly identity: {
-          readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-          readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-          readonly subject: string;
-        };
-        readonly credentialId: string;
-        readonly credentialRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-        readonly revision: {
-          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-          readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly credentials: readonly {
-            readonly credentialId: string;
-            readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          }[];
-        };
-      };
-    } | {
-      readonly _tag: "Replay";
-      readonly result: {
-        readonly _tag: "Unlinked";
-        readonly credentialId: string;
-        readonly invalidation: {
-          readonly trigger: "all-session-revocation" | "credential-change" | "factor-reset" | "identifier-change" | "password-reset" | "subject-delete" | "subject-disable";
-          readonly existingSessions: "cache-expiry" | "immediate" | "original-absolute-expiry";
-          readonly maximumExposureMillis: number;
-          readonly oldAuthenticationEvidence: "rejected";
-        };
-      };
-    }, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly unlink: <A>(input: {
-      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-      readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
-      readonly credential: import("@yielded/auth/OAuth").OAuthCredentialSnapshot;
-      readonly authorization: import("@yielded/auth/OAuth").OAuthActionAuthorization;
-      readonly invalidation: import("@yielded/auth/Sessions").SessionInvalidationWindow;
-      readonly nowMillis: number;
-      readonly retentionUntilMillis: number;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Conflict";
-    } | {
-      readonly _tag: "Unlinked";
-      readonly result: {
-        readonly _tag: "Unlinked";
-        readonly credentialId: string;
-        readonly invalidation: {
-          readonly trigger: "all-session-revocation" | "credential-change" | "factor-reset" | "identifier-change" | "password-reset" | "subject-delete" | "subject-disable";
-          readonly existingSessions: "cache-expiry" | "immediate" | "original-absolute-expiry";
-          readonly maximumExposureMillis: number;
-          readonly oldAuthenticationEvidence: "rejected";
-        };
-      };
-      readonly replayed: boolean;
-    } | {
-      readonly _tag: "LastSignInMethod";
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly cleanup: <A>(input: import("@yielded/auth/OAuth").OAuthCleanupInput, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly terminalized: number;
-      readonly removed: number;
-      readonly hasMore: boolean;
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
-  };
+}>, N>(mapping: OAuthAccountsMapping<S, O, C, AC, F, N>) => import("effect/Effect").Effect<{
+  readonly oauthAccountsPersistence: import("@yielded/auth/OAuth").OAuthAccountsPersistence["Service"];
 }, import("@yielded/auth/OAuth").OAuthUnavailable, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthSignInServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, O extends AnyMySqlTable<{
@@ -315,60 +139,13 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
 }>, F extends AnyMySqlTable<{
   dialect: "mysql";
 }>, N>(mapping: OAuthSignInMapping<S, O, C, AC, F, N>) => import("effect/Effect").Effect<{
-  oauthSignInPersistence: {
-    readonly issue: <A>(input: import("@yielded/auth/OAuth").OAuthPendingFlow, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthIssueDecision, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly claim: <A>(input: {
-      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-      readonly generation: number;
-      readonly flowId: import("@yielded/auth/Operations").RequestBindingFlowId;
-      readonly provider: import("@yielded/auth/OAuth").OAuthProviderKey;
-      readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
-      readonly stateDigest: import("@yielded/auth/Schema").TokenDigest;
-      readonly requestBindingVerifier: import("@yielded/auth/Schema").TokenDigest;
-      readonly requestBindingExpiresAtMillis: number;
-      readonly responseIssuer?: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-      readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
-      readonly nowMillis: number;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthClaimDecision, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly settle: <A>(input: {
-      readonly claim: import("@yielded/auth/OAuth").OAuthClaim;
-      readonly outcome: {
-        readonly _tag: "Verified";
-        readonly identity: import("@yielded/auth/OAuth").OAuthVerifiedExternalIdentity;
-      } | {
-        readonly _tag: "Cancelled" | "Rejected" | "Ambiguous";
-      };
-      readonly nowMillis: number;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthSettlementDecision, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly cleanup: <A>(input: import("@yielded/auth/OAuth").OAuthCleanupInput, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly terminalized: number;
-      readonly removed: number;
-      readonly hasMore: boolean;
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
-  };
-}, import("@yielded/auth/OAuth").OAuthUnavailable, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthRegistrationIntentServices: <S extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, O extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, C extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, AC extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, F extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, TA extends AnyMySqlTable<{
+  readonly oauthSignInPersistence: import("@yielded/auth/OAuth").OAuthSignInPersistence["Service"];
+}, import("@yielded/auth/OAuth").OAuthUnavailable, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthRegistrationIntentServices: <O extends AnyMySqlTable<{
   dialect: "mysql";
 }>, I extends AnyMySqlTable<{
   dialect: "mysql";
-}>, N>(mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>) => import("effect/Effect").Effect<{
-  oauthRegistrationIntents: {
-    readonly settle: <A>(input: {
-      readonly claim: import("@yielded/auth/OAuth").OAuthClaim;
-      readonly identity: import("@yielded/auth/OAuth").OAuthVerifiedExternalIdentity;
-      readonly intent?: import("@yielded/auth/OAuth").OAuthRegistrationIntent;
-      readonly nowMillis: number;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthRegistrationSettlement, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
-  };
+}>, N>(mapping: OAuthRegistrationIntentMapping<O, I, N>) => import("effect/Effect").Effect<{
+  readonly oauthRegistrationIntents: import("@yielded/auth/OAuth").OAuthRegistrationIntents["Service"];
 }, import("@yielded/auth/OAuth").OAuthUnavailable, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthRegistrationServices: <Registration, S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, O extends AnyMySqlTable<{
@@ -377,14 +154,10 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, AC extends AnyMySqlTable<{
   dialect: "mysql";
-}>, TA extends AnyMySqlTable<{
-  dialect: "mysql";
 }>, I extends AnyMySqlTable<{
   dialect: "mysql";
-}>, R extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, N>(mapping: OAuthRegistrationMapping<Registration, S, O, C, AC, TA, I, R, N>) => import("effect/Effect").Effect<{
-  registrationAuthority: import("@yielded/auth-persistence/Adapter").OAuthRegistrationAuthority<Registration>;
+}>, N>(mapping: OAuthRegistrationMapping<Registration, S, O, C, AC, I, N>) => import("effect/Effect").Effect<{
+  readonly registrationAuthority: import("@yielded/auth-persistence/Adapter").OAuthRegistrationAuthority<Registration>;
 }, import("@yielded/auth/OAuth").OAuthUnavailable, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks>, coordinateOAuthRegistration: {
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, TargetId, Registration, S extends AnyMySqlTable<{
     dialect: "mysql";
@@ -394,17 +167,13 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, AC extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, TA extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, I extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, Rq extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, TA, I, Rq, N>;
+    readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, I, N>;
     readonly target: SuppliedService<TargetId, import("@yielded/auth-persistence/Adapter").OAuthRegistrationAuthority<Registration>>;
     readonly transaction?: never;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TargetId>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TargetId>>;
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, TargetId, Registration, S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, O extends AnyMySqlTable<{
@@ -413,19 +182,15 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, AC extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, TA extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, I extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, Rq extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, N, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, TA, I, Rq, N>;
+    readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, I, N>;
     readonly target: SuppliedService<TargetId, import("@yielded/auth-persistence/Adapter").OAuthRegistrationAuthority<Registration>>;
     readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
       readonly transaction: (...args: any[]) => any;
     } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TargetId | TxId>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TargetId | TxId>>;
 }, coordinateOAuthSignIn: {
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
@@ -440,7 +205,7 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
   }>, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
     readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N>;
     readonly transaction?: never;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/OAuth").OAuthSignInPersistence>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/OAuth").OAuthSignInPersistence>>;
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, O extends AnyMySqlTable<{
@@ -456,46 +221,26 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
     readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
       readonly transaction: (...args: any[]) => any;
     } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/OAuth").OAuthSignInPersistence>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/OAuth").OAuthSignInPersistence>>;
 }, coordinateOAuthRegistrationIntents: {
-  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, O extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, C extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, AC extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, F extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, TA extends AnyMySqlTable<{
+  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, O extends AnyMySqlTable<{
     dialect: "mysql";
   }>, I extends AnyMySqlTable<{
     dialect: "mysql";
   }>, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>;
+    readonly mapping: OAuthRegistrationIntentMapping<O, I, N>;
     readonly transaction?: never;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/OAuth").OAuthRegistrationIntents>>;
-  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, O extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, C extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, AC extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, F extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, TA extends AnyMySqlTable<{
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/OAuth").OAuthRegistrationIntents>>;
+  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, O extends AnyMySqlTable<{
     dialect: "mysql";
   }>, I extends AnyMySqlTable<{
     dialect: "mysql";
   }>, N, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>;
+    readonly mapping: OAuthRegistrationIntentMapping<O, I, N>;
     readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
       readonly transaction: (...args: any[]) => any;
     } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/OAuth").OAuthRegistrationIntents>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/OAuth").OAuthRegistrationIntents>>;
 }, coordinateOAuthAccounts: {
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
@@ -507,14 +252,10 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, F extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, TA extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, U extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>;
+    readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, N>;
     readonly transaction?: never;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/OAuth").OAuthAccountsPersistence>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/OAuth").OAuthAccountsPersistence>>;
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, O extends AnyMySqlTable<{
@@ -525,1210 +266,92 @@ export declare const makeOAuthAccountsServices: <S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, F extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, TA extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, U extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, N, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>;
+    readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, N>;
     readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
       readonly transaction: (...args: any[]) => any;
     } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/OAuth").OAuthAccountsPersistence>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/OAuth").OAuthAccountsPersistence>>;
 }, makeOAuthConnectedServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, AC extends AnyMySqlTable<{
   dialect: "mysql";
-}>, T extends AnyMySqlTable<{
-  dialect: "mysql";
 }>, O extends AnyMySqlTable<{
   dialect: "mysql";
 }>, F extends AnyMySqlTable<{
   dialect: "mysql";
 }>, G extends AnyMySqlTable<{
   dialect: "mysql";
-}>, C extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, H extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, UA extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, DC extends AnyMySqlTable<{
-  dialect: "mysql";
 }>, N, J extends AnyMySqlTable<{
   dialect: "mysql";
-}> = never>(mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J>) => import("effect/Effect").Effect<{
-  oauthConnectedPersistence: {
-    readonly claimSignIn: <A>(input: {
-      readonly claim: import("@yielded/auth/OAuth").OAuthClaim;
-      readonly configuration: import("@yielded/auth/OAuth").OAuthConnectedConfiguration;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<import("@yielded/auth/OAuth").OAuthSignInAccessClaim, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
-    readonly inspectSignIn: (input: {
-      readonly reservation: import("@yielded/auth/OAuth").OAuthSignInAccessClaim;
-      readonly credential: import("@yielded/auth/OAuth").OAuthCredentialSnapshot;
-      readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-    }) => import("effect/Effect").Effect<import("@yielded/auth/OAuth").OAuthSignInAccessInspection, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly settleSignIn: <A>(input: {
-      readonly reservation: import("@yielded/auth/OAuth").OAuthSignInAccessClaim;
-      readonly outcome: import("@yielded/auth/OAuth").OAuthSignInAccessOutcome;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Ambiguous";
-    } | {
-      readonly _tag: "Cancelled";
-    } | {
-      readonly _tag: "Conflict";
-    } | {
-      readonly _tag: "Connected";
-      readonly grant: {
-        readonly context: {
-          readonly namespace: "effect-auth/oauth-connected-token-context/v1";
-          readonly exchangeOrder: string;
-          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-          readonly identity: {
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-            readonly subject: string;
-          };
-          readonly configuration: {
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly protocol: "oauth" | "oidc";
-            readonly configurationGeneration: number;
-            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-            readonly responseIssuerMode: "required" | "unsupported";
-            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
-            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
-            readonly profile: {
-              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-              readonly generation: number;
-              readonly issuance: "active" | "retired";
-              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-              readonly clientRegistrationId: string;
-              readonly scopes: readonly string[];
-              readonly resources: readonly string[];
-              readonly retention: "access-and-refresh" | "access-only";
-              readonly maximumAccessLifetimeMillis: number;
-              readonly maximumRefreshLifetimeMillis?: number;
-              readonly refreshAheadMillis: number;
-              readonly refresh: "confidential" | "rotating" | "unsupported";
-              readonly revocation: "cohort" | "unsupported";
-            };
-          };
-          readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-          readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly metadata: {
-            readonly scopes: readonly string[];
-            readonly resources: readonly string[];
-            readonly accessExpiresAtMillis?: number;
-            readonly refreshExpiresAtMillis?: number;
-            readonly useUntilMillis: number;
-            readonly refreshUseUntilMillis?: number;
-            readonly obtainedAtMillis: number;
-            readonly profile?: {
-              readonly displayName?: string;
-              readonly handle?: string;
-              readonly avatarUrl?: string;
-              readonly profileUrl?: string;
-              readonly email?: string;
-              readonly emailVerified?: boolean;
-              readonly providerData?: {
-                readonly [x: string]: import("effect/Schema").Json;
-              };
-            };
-          };
-        };
-        readonly sealed: {
-          readonly format: "oauth-connected-xchacha20poly1305-v1";
-          readonly keyId: string;
-          readonly nonce: string;
-          readonly ciphertext: import("effect/Redacted").Redacted<string>;
-        };
-      };
-    } | {
-      readonly _tag: "Busy";
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
-    readonly capture: (input: {
-      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-      readonly subjectId: import("@yielded/auth/Schema").SubjectId;
-      readonly grantId?: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-    }) => import("effect/Effect").Effect<{
-      readonly revision: import("@yielded/auth/OAuth").OAuthAccountRevision;
-      readonly target?: import("@yielded/auth/OAuth").OAuthConnectedTarget;
-    } | undefined, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly issue: <A>(input: {
-      readonly flow: import("@yielded/auth/OAuth").OAuthConnectedPendingFlow;
-      readonly authorization: import("@yielded/auth/OAuth").OAuthConnectedActionAuthorization;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Issued";
-      readonly flow: {
-        readonly context: {
-          readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-          readonly protocol: "oauth" | "oidc";
-          readonly configurationGeneration: number;
-          readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-          readonly responseIssuerMode: "required" | "unsupported";
-          readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
-          readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
-          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-          readonly generation: number;
-          readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
-          readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
-          readonly access?: {
-            readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-            readonly generation: number;
-            readonly issuance: "active" | "retired";
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly clientRegistrationId: string;
-            readonly scopes: readonly string[];
-            readonly resources: readonly string[];
-            readonly retention: "access-and-refresh" | "access-only";
-            readonly maximumAccessLifetimeMillis: number;
-            readonly maximumRefreshLifetimeMillis?: number;
-            readonly refreshAheadMillis: number;
-            readonly refresh: "confidential" | "rotating" | "unsupported";
-            readonly revocation: "cohort" | "unsupported";
-          };
-          readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
-          readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
-          readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
-          readonly requestBindingExpiresAtMillis: number;
-          readonly issuedAtMillis: number;
-          readonly expiresAtMillis: number;
-          readonly claimLifetimeMillis: number;
-          readonly namespace: "effect-auth/oauth-connected-context/v1";
-          readonly revision: {
-            readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-            readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-            readonly credentials: readonly {
-              readonly credentialId: string;
-              readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-            }[];
-          };
-          readonly profile: {
-            readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-            readonly generation: number;
-            readonly issuance: "active" | "retired";
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly clientRegistrationId: string;
-            readonly scopes: readonly string[];
-            readonly resources: readonly string[];
-            readonly retention: "access-and-refresh" | "access-only";
-            readonly maximumAccessLifetimeMillis: number;
-            readonly maximumRefreshLifetimeMillis?: number;
-            readonly refreshAheadMillis: number;
-            readonly refresh: "confidential" | "rotating" | "unsupported";
-            readonly revocation: "cohort" | "unsupported";
-          };
-          readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-          readonly reconnect?: {
-            readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-            readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-            readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-            readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-            readonly identity: {
-              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-              readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-              readonly subject: string;
-            };
-            readonly configuration: {
-              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-              readonly protocol: "oauth" | "oidc";
-              readonly configurationGeneration: number;
-              readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-              readonly responseIssuerMode: "required" | "unsupported";
-              readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
-              readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
-              readonly profile: {
-                readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-                readonly generation: number;
-                readonly issuance: "active" | "retired";
-                readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-                readonly clientRegistrationId: string;
-                readonly scopes: readonly string[];
-                readonly resources: readonly string[];
-                readonly retention: "access-and-refresh" | "access-only";
-                readonly maximumAccessLifetimeMillis: number;
-                readonly maximumRefreshLifetimeMillis?: number;
-                readonly refreshAheadMillis: number;
-                readonly refresh: "confidential" | "rotating" | "unsupported";
-                readonly revocation: "cohort" | "unsupported";
-              };
-            };
-          };
-          readonly maximumEvidenceAgeMillis: number;
-        };
-        readonly sealed: {
-          readonly format: "oauth-xchacha20poly1305-v1";
-          readonly keyId: string;
-          readonly nonce: string;
-          readonly ciphertext: import("effect/Redacted").Redacted<string>;
-        };
-        readonly retentionUntilMillis: number;
-      };
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
-    readonly prepare: <A>(input: {
-      readonly flow: import("@yielded/auth/OAuth").OAuthConnectedPendingFlow;
-      readonly authorization: import("@yielded/auth/OAuth").OAuthConnectedUseAuthorization;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Issued";
-      readonly flow: {
-        readonly context: {
-          readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-          readonly protocol: "oauth" | "oidc";
-          readonly configurationGeneration: number;
-          readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-          readonly responseIssuerMode: "required" | "unsupported";
-          readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
-          readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
-          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-          readonly generation: number;
-          readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
-          readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
-          readonly access?: {
-            readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-            readonly generation: number;
-            readonly issuance: "active" | "retired";
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly clientRegistrationId: string;
-            readonly scopes: readonly string[];
-            readonly resources: readonly string[];
-            readonly retention: "access-and-refresh" | "access-only";
-            readonly maximumAccessLifetimeMillis: number;
-            readonly maximumRefreshLifetimeMillis?: number;
-            readonly refreshAheadMillis: number;
-            readonly refresh: "confidential" | "rotating" | "unsupported";
-            readonly revocation: "cohort" | "unsupported";
-          };
-          readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
-          readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
-          readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
-          readonly requestBindingExpiresAtMillis: number;
-          readonly issuedAtMillis: number;
-          readonly expiresAtMillis: number;
-          readonly claimLifetimeMillis: number;
-          readonly namespace: "effect-auth/oauth-connected-context/v1";
-          readonly revision: {
-            readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-            readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-            readonly credentials: readonly {
-              readonly credentialId: string;
-              readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-            }[];
-          };
-          readonly profile: {
-            readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-            readonly generation: number;
-            readonly issuance: "active" | "retired";
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly clientRegistrationId: string;
-            readonly scopes: readonly string[];
-            readonly resources: readonly string[];
-            readonly retention: "access-and-refresh" | "access-only";
-            readonly maximumAccessLifetimeMillis: number;
-            readonly maximumRefreshLifetimeMillis?: number;
-            readonly refreshAheadMillis: number;
-            readonly refresh: "confidential" | "rotating" | "unsupported";
-            readonly revocation: "cohort" | "unsupported";
-          };
-          readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-          readonly reconnect?: {
-            readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-            readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-            readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-            readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-            readonly identity: {
-              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-              readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-              readonly subject: string;
-            };
-            readonly configuration: {
-              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-              readonly protocol: "oauth" | "oidc";
-              readonly configurationGeneration: number;
-              readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-              readonly responseIssuerMode: "required" | "unsupported";
-              readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
-              readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
-              readonly profile: {
-                readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-                readonly generation: number;
-                readonly issuance: "active" | "retired";
-                readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-                readonly clientRegistrationId: string;
-                readonly scopes: readonly string[];
-                readonly resources: readonly string[];
-                readonly retention: "access-and-refresh" | "access-only";
-                readonly maximumAccessLifetimeMillis: number;
-                readonly maximumRefreshLifetimeMillis?: number;
-                readonly refreshAheadMillis: number;
-                readonly refresh: "confidential" | "rotating" | "unsupported";
-                readonly revocation: "cohort" | "unsupported";
-              };
-            };
-          };
-          readonly maximumEvidenceAgeMillis: number;
-        };
-        readonly sealed: {
-          readonly format: "oauth-xchacha20poly1305-v1";
-          readonly keyId: string;
-          readonly nonce: string;
-          readonly ciphertext: import("effect/Redacted").Redacted<string>;
-        };
-        readonly retentionUntilMillis: number;
-      };
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
-    readonly inspectPrepared: (input: import("@yielded/auth/OAuth").OAuthConnectedPreparedAccess) => import("effect/Effect").Effect<import("@yielded/auth/OAuth").OAuthConnectedPendingFlow | undefined, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly preflight: (input: import("@yielded/auth/OAuth").OAuthConnectedAccess) => import("effect/Effect").Effect<import("@yielded/auth/OAuth").OAuthConnectedPendingFlow | undefined, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly claim: <A>(input: {
-      readonly access: import("@yielded/auth/OAuth").OAuthConnectedAccess;
-      readonly flow: import("@yielded/auth/OAuth").OAuthConnectedPendingFlow;
-      readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
-      readonly authorization: import("@yielded/auth/OAuth").OAuthConnectedActionAuthorization;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Claimed";
-      readonly claim: {
-        readonly flow: {
-          readonly context: {
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly protocol: "oauth" | "oidc";
-            readonly configurationGeneration: number;
-            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-            readonly responseIssuerMode: "required" | "unsupported";
-            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
-            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
-            readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-            readonly generation: number;
-            readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
-            readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
-            readonly access?: {
-              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-              readonly generation: number;
-              readonly issuance: "active" | "retired";
-              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-              readonly clientRegistrationId: string;
-              readonly scopes: readonly string[];
-              readonly resources: readonly string[];
-              readonly retention: "access-and-refresh" | "access-only";
-              readonly maximumAccessLifetimeMillis: number;
-              readonly maximumRefreshLifetimeMillis?: number;
-              readonly refreshAheadMillis: number;
-              readonly refresh: "confidential" | "rotating" | "unsupported";
-              readonly revocation: "cohort" | "unsupported";
-            };
-            readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
-            readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
-            readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
-            readonly requestBindingExpiresAtMillis: number;
-            readonly issuedAtMillis: number;
-            readonly expiresAtMillis: number;
-            readonly claimLifetimeMillis: number;
-            readonly namespace: "effect-auth/oauth-connected-context/v1";
-            readonly revision: {
-              readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-              readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-              readonly credentials: readonly {
-                readonly credentialId: string;
-                readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-              }[];
-            };
-            readonly profile: {
-              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-              readonly generation: number;
-              readonly issuance: "active" | "retired";
-              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-              readonly clientRegistrationId: string;
-              readonly scopes: readonly string[];
-              readonly resources: readonly string[];
-              readonly retention: "access-and-refresh" | "access-only";
-              readonly maximumAccessLifetimeMillis: number;
-              readonly maximumRefreshLifetimeMillis?: number;
-              readonly refreshAheadMillis: number;
-              readonly refresh: "confidential" | "rotating" | "unsupported";
-              readonly revocation: "cohort" | "unsupported";
-            };
-            readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-            readonly reconnect?: {
-              readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-              readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-              readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-              readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-              readonly identity: {
-                readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-                readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-                readonly subject: string;
-              };
-              readonly configuration: {
-                readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-                readonly protocol: "oauth" | "oidc";
-                readonly configurationGeneration: number;
-                readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-                readonly responseIssuerMode: "required" | "unsupported";
-                readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
-                readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
-                readonly profile: {
-                  readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-                  readonly generation: number;
-                  readonly issuance: "active" | "retired";
-                  readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-                  readonly clientRegistrationId: string;
-                  readonly scopes: readonly string[];
-                  readonly resources: readonly string[];
-                  readonly retention: "access-and-refresh" | "access-only";
-                  readonly maximumAccessLifetimeMillis: number;
-                  readonly maximumRefreshLifetimeMillis?: number;
-                  readonly refreshAheadMillis: number;
-                  readonly refresh: "confidential" | "rotating" | "unsupported";
-                  readonly revocation: "cohort" | "unsupported";
-                };
-              };
-            };
-            readonly maximumEvidenceAgeMillis: number;
-          };
-          readonly sealed: {
-            readonly format: "oauth-xchacha20poly1305-v1";
-            readonly keyId: string;
-            readonly nonce: string;
-            readonly ciphertext: import("effect/Redacted").Redacted<string>;
-          };
-          readonly retentionUntilMillis: number;
-        };
-        readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
-        readonly claimedAtMillis: number;
-        readonly claimExpiresAtMillis: number;
-        readonly order: string;
-      };
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
-    readonly inspectGrant: (input: {
-      readonly claim: import("@yielded/auth/OAuth").OAuthConnectedClaim;
-      readonly identity: {
-        readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-        readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-        readonly subject: string;
-      };
-    }) => import("effect/Effect").Effect<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Conflict";
-    } | {
-      readonly _tag: "Target";
-      readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-    } | {
-      readonly _tag: "Quarantine";
-      readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-    }, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly settle: <A>(input: {
-      readonly claim: import("@yielded/auth/OAuth").OAuthConnectedClaim;
-      readonly outcome: import("@yielded/auth/OAuth").OAuthConnectedOutcome;
-      readonly authorization: import("@yielded/auth/OAuth").OAuthConnectedActionAuthorization;
-      readonly nowMillis: number;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Ambiguous";
-    } | {
-      readonly _tag: "Cancelled";
-    } | {
-      readonly _tag: "Conflict";
-    } | {
-      readonly _tag: "Connected";
-      readonly grant: {
-        readonly context: {
-          readonly namespace: "effect-auth/oauth-connected-token-context/v1";
-          readonly exchangeOrder: string;
-          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-          readonly identity: {
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-            readonly subject: string;
-          };
-          readonly configuration: {
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly protocol: "oauth" | "oidc";
-            readonly configurationGeneration: number;
-            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-            readonly responseIssuerMode: "required" | "unsupported";
-            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
-            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
-            readonly profile: {
-              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-              readonly generation: number;
-              readonly issuance: "active" | "retired";
-              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-              readonly clientRegistrationId: string;
-              readonly scopes: readonly string[];
-              readonly resources: readonly string[];
-              readonly retention: "access-and-refresh" | "access-only";
-              readonly maximumAccessLifetimeMillis: number;
-              readonly maximumRefreshLifetimeMillis?: number;
-              readonly refreshAheadMillis: number;
-              readonly refresh: "confidential" | "rotating" | "unsupported";
-              readonly revocation: "cohort" | "unsupported";
-            };
-          };
-          readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-          readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly metadata: {
-            readonly scopes: readonly string[];
-            readonly resources: readonly string[];
-            readonly accessExpiresAtMillis?: number;
-            readonly refreshExpiresAtMillis?: number;
-            readonly useUntilMillis: number;
-            readonly refreshUseUntilMillis?: number;
-            readonly obtainedAtMillis: number;
-            readonly profile?: {
-              readonly displayName?: string;
-              readonly handle?: string;
-              readonly avatarUrl?: string;
-              readonly profileUrl?: string;
-              readonly email?: string;
-              readonly emailVerified?: boolean;
-              readonly providerData?: {
-                readonly [x: string]: import("effect/Schema").Json;
-              };
-            };
-          };
-        };
-        readonly sealed: {
-          readonly format: "oauth-connected-xchacha20poly1305-v1";
-          readonly keyId: string;
-          readonly nonce: string;
-          readonly ciphertext: import("effect/Redacted").Redacted<string>;
-        };
-      };
-    } | {
-      readonly _tag: "Busy";
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
-    readonly list: (input: {
-      readonly authorization: import("@yielded/auth/OAuth").OAuthConnectedUseAuthorization;
-      readonly limit: number;
-      readonly cursor?: string;
-    }) => import("effect/Effect").Effect<{
-      readonly items: readonly {
-        readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-        readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-        readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-        readonly profileKey: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-        readonly status: "Active" | "Disconnected" | "ReauthorizationRequired" | "Refreshing";
-        readonly scopes: readonly string[];
-        readonly accessExpiresAtMillis?: number;
-        readonly useUntilMillis: number;
-        readonly profile?: {
-          readonly displayName?: string;
-          readonly handle?: string;
-          readonly avatarUrl?: string;
-          readonly profileUrl?: string;
-          readonly email?: string;
-          readonly emailVerified?: boolean;
-          readonly providerData?: {
-            readonly [x: string]: import("effect/Schema").Json;
-          };
-        };
-        readonly remoteRevocation: "Confirmed" | "Pending" | "Unknown" | "Unsupported";
-      }[];
-      readonly cursor?: string;
-    }, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly inspectDisconnect: (input: {
-      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-      readonly subjectId: import("@yielded/auth/Schema").SubjectId;
-      readonly authorization: import("@yielded/auth/OAuth").OAuthConnectedUseAuthorization;
-      readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
-      readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-    }) => import("effect/Effect").Effect<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Conflict";
-    } | {
-      readonly _tag: "Target";
-      readonly grant: {
-        readonly context: {
-          readonly namespace: "effect-auth/oauth-connected-token-context/v1";
-          readonly exchangeOrder: string;
-          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-          readonly identity: {
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-            readonly subject: string;
-          };
-          readonly configuration: {
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly protocol: "oauth" | "oidc";
-            readonly configurationGeneration: number;
-            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-            readonly responseIssuerMode: "required" | "unsupported";
-            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
-            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
-            readonly profile: {
-              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-              readonly generation: number;
-              readonly issuance: "active" | "retired";
-              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-              readonly clientRegistrationId: string;
-              readonly scopes: readonly string[];
-              readonly resources: readonly string[];
-              readonly retention: "access-and-refresh" | "access-only";
-              readonly maximumAccessLifetimeMillis: number;
-              readonly maximumRefreshLifetimeMillis?: number;
-              readonly refreshAheadMillis: number;
-              readonly refresh: "confidential" | "rotating" | "unsupported";
-              readonly revocation: "cohort" | "unsupported";
-            };
-          };
-          readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-          readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly metadata: {
-            readonly scopes: readonly string[];
-            readonly resources: readonly string[];
-            readonly accessExpiresAtMillis?: number;
-            readonly refreshExpiresAtMillis?: number;
-            readonly useUntilMillis: number;
-            readonly refreshUseUntilMillis?: number;
-            readonly obtainedAtMillis: number;
-            readonly profile?: {
-              readonly displayName?: string;
-              readonly handle?: string;
-              readonly avatarUrl?: string;
-              readonly profileUrl?: string;
-              readonly email?: string;
-              readonly emailVerified?: boolean;
-              readonly providerData?: {
-                readonly [x: string]: import("effect/Schema").Json;
-              };
-            };
-          };
-        };
-        readonly sealed?: {
-          readonly format: "oauth-connected-xchacha20poly1305-v1";
-          readonly keyId: string;
-          readonly nonce: string;
-          readonly ciphertext: import("effect/Redacted").Redacted<string>;
-        };
-      };
-      readonly revision: {
-        readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-        readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-        readonly credentials: readonly {
-          readonly credentialId: string;
-          readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-        }[];
-      };
-    } | {
-      readonly _tag: "Replay";
-      readonly result: {
-        readonly _tag: "Disconnected";
-        readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-        readonly remoteRevocation: "Confirmed" | "Pending" | "Unknown" | "Unsupported";
-        readonly affectedGrantCount: number;
-        readonly replayed: boolean;
-      };
-    }, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly disconnect: <A>(input: {
-      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-      readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
-      readonly grant: import("@yielded/auth/OAuth").OAuthConnectedDisconnectGrant;
-      readonly authorization: import("@yielded/auth/OAuth").OAuthConnectedActionAuthorization;
-      readonly revocation?: import("@yielded/auth/OAuth").OAuthConnectedRevocationJob;
-      readonly retentionUntilMillis: number;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Conflict";
-    } | {
-      readonly _tag: "Disconnected";
-      readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-      readonly remoteRevocation: "Confirmed" | "Pending" | "Unknown" | "Unsupported";
-      readonly affectedGrantCount: number;
-      readonly replayed: boolean;
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
-    readonly inspectAccess: (input: {
-      readonly authorization: import("@yielded/auth/OAuth").OAuthConnectedUseAuthorization;
-      readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-      readonly profileKey: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-    }) => import("effect/Effect").Effect<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Busy";
-    } | {
-      readonly _tag: "Target";
-      readonly grant: {
-        readonly context: {
-          readonly namespace: "effect-auth/oauth-connected-token-context/v1";
-          readonly exchangeOrder: string;
-          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-          readonly identity: {
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-            readonly subject: string;
-          };
-          readonly configuration: {
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly protocol: "oauth" | "oidc";
-            readonly configurationGeneration: number;
-            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-            readonly responseIssuerMode: "required" | "unsupported";
-            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
-            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
-            readonly profile: {
-              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-              readonly generation: number;
-              readonly issuance: "active" | "retired";
-              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-              readonly clientRegistrationId: string;
-              readonly scopes: readonly string[];
-              readonly resources: readonly string[];
-              readonly retention: "access-and-refresh" | "access-only";
-              readonly maximumAccessLifetimeMillis: number;
-              readonly maximumRefreshLifetimeMillis?: number;
-              readonly refreshAheadMillis: number;
-              readonly refresh: "confidential" | "rotating" | "unsupported";
-              readonly revocation: "cohort" | "unsupported";
-            };
-          };
-          readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-          readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly metadata: {
-            readonly scopes: readonly string[];
-            readonly resources: readonly string[];
-            readonly accessExpiresAtMillis?: number;
-            readonly refreshExpiresAtMillis?: number;
-            readonly useUntilMillis: number;
-            readonly refreshUseUntilMillis?: number;
-            readonly obtainedAtMillis: number;
-            readonly profile?: {
-              readonly displayName?: string;
-              readonly handle?: string;
-              readonly avatarUrl?: string;
-              readonly profileUrl?: string;
-              readonly email?: string;
-              readonly emailVerified?: boolean;
-              readonly providerData?: {
-                readonly [x: string]: import("effect/Schema").Json;
-              };
-            };
-          };
-        };
-        readonly sealed: {
-          readonly format: "oauth-connected-xchacha20poly1305-v1";
-          readonly keyId: string;
-          readonly nonce: string;
-          readonly ciphertext: import("effect/Redacted").Redacted<string>;
-        };
-      };
-    } | {
-      readonly _tag: "ReauthorizationRequired";
-    }, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly claimRefresh: <A>(input: {
-      readonly grant: import("@yielded/auth/OAuth").OAuthConnectedStoredGrant;
-      readonly authorization: import("@yielded/auth/OAuth").OAuthConnectedUseAuthorization;
-      readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
-      readonly nextTokenVersion: import("@yielded/auth/OAuth").OAuthConnectedRefreshClaim["nextTokenVersion"];
-      readonly lifetimeMillis: number;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Busy";
-    } | {
-      readonly _tag: "ReauthorizationRequired";
-    } | {
-      readonly _tag: "Claimed";
-      readonly claim: {
-        readonly grant: {
-          readonly context: {
-            readonly namespace: "effect-auth/oauth-connected-token-context/v1";
-            readonly exchangeOrder: string;
-            readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-            readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-            readonly identity: {
-              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-              readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-              readonly subject: string;
-            };
-            readonly configuration: {
-              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-              readonly protocol: "oauth" | "oidc";
-              readonly configurationGeneration: number;
-              readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-              readonly responseIssuerMode: "required" | "unsupported";
-              readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
-              readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
-              readonly profile: {
-                readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-                readonly generation: number;
-                readonly issuance: "active" | "retired";
-                readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-                readonly clientRegistrationId: string;
-                readonly scopes: readonly string[];
-                readonly resources: readonly string[];
-                readonly retention: "access-and-refresh" | "access-only";
-                readonly maximumAccessLifetimeMillis: number;
-                readonly maximumRefreshLifetimeMillis?: number;
-                readonly refreshAheadMillis: number;
-                readonly refresh: "confidential" | "rotating" | "unsupported";
-                readonly revocation: "cohort" | "unsupported";
-              };
-            };
-            readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-            readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-            readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-            readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-            readonly metadata: {
-              readonly scopes: readonly string[];
-              readonly resources: readonly string[];
-              readonly accessExpiresAtMillis?: number;
-              readonly refreshExpiresAtMillis?: number;
-              readonly useUntilMillis: number;
-              readonly refreshUseUntilMillis?: number;
-              readonly obtainedAtMillis: number;
-              readonly profile?: {
-                readonly displayName?: string;
-                readonly handle?: string;
-                readonly avatarUrl?: string;
-                readonly profileUrl?: string;
-                readonly email?: string;
-                readonly emailVerified?: boolean;
-                readonly providerData?: {
-                  readonly [x: string]: import("effect/Schema").Json;
-                };
-              };
-            };
-          };
-          readonly sealed: {
-            readonly format: "oauth-connected-xchacha20poly1305-v1";
-            readonly keyId: string;
-            readonly nonce: string;
-            readonly ciphertext: import("effect/Redacted").Redacted<string>;
-          };
-        };
-        readonly order: string;
-        readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
-        readonly claimedAtMillis: number;
-        readonly claimExpiresAtMillis: number;
-        readonly nextTokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-      };
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
-    readonly settleRefresh: <A>(input: {
-      readonly claim: import("@yielded/auth/OAuth").OAuthConnectedRefreshClaim;
-      readonly authorization: import("@yielded/auth/OAuth").OAuthConnectedUseAuthorization;
-      readonly outcome: import("@yielded/auth/OAuth").OAuthConnectedRefreshOutcome;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "ReauthorizationRequired";
-    } | {
-      readonly _tag: "Refreshed";
-      readonly grant: {
-        readonly context: {
-          readonly namespace: "effect-auth/oauth-connected-token-context/v1";
-          readonly exchangeOrder: string;
-          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-          readonly identity: {
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-            readonly subject: string;
-          };
-          readonly configuration: {
-            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-            readonly protocol: "oauth" | "oidc";
-            readonly configurationGeneration: number;
-            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-            readonly responseIssuerMode: "required" | "unsupported";
-            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
-            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
-            readonly profile: {
-              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-              readonly generation: number;
-              readonly issuance: "active" | "retired";
-              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-              readonly clientRegistrationId: string;
-              readonly scopes: readonly string[];
-              readonly resources: readonly string[];
-              readonly retention: "access-and-refresh" | "access-only";
-              readonly maximumAccessLifetimeMillis: number;
-              readonly maximumRefreshLifetimeMillis?: number;
-              readonly refreshAheadMillis: number;
-              readonly refresh: "confidential" | "rotating" | "unsupported";
-              readonly revocation: "cohort" | "unsupported";
-            };
-          };
-          readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-          readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-          readonly metadata: {
-            readonly scopes: readonly string[];
-            readonly resources: readonly string[];
-            readonly accessExpiresAtMillis?: number;
-            readonly refreshExpiresAtMillis?: number;
-            readonly useUntilMillis: number;
-            readonly refreshUseUntilMillis?: number;
-            readonly obtainedAtMillis: number;
-            readonly profile?: {
-              readonly displayName?: string;
-              readonly handle?: string;
-              readonly avatarUrl?: string;
-              readonly profileUrl?: string;
-              readonly email?: string;
-              readonly emailVerified?: boolean;
-              readonly providerData?: {
-                readonly [x: string]: import("effect/Schema").Json;
-              };
-            };
-          };
-        };
-        readonly sealed: {
-          readonly format: "oauth-connected-xchacha20poly1305-v1";
-          readonly keyId: string;
-          readonly nonce: string;
-          readonly ciphertext: import("effect/Redacted").Redacted<string>;
-        };
-      };
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
-    readonly admitUse: <A>(input: {
-      readonly grant: import("@yielded/auth/OAuth").OAuthConnectedStoredGrant;
-      readonly authorization: import("@yielded/auth/OAuth").OAuthConnectedUseAuthorization;
-      readonly admissionId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
-      readonly lifetimeMillis: number;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Rejected";
-    } | {
-      readonly _tag: "Busy";
-    } | {
-      readonly _tag: "ReauthorizationRequired";
-    } | {
-      readonly _tag: "Admitted";
-      readonly admissionId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
-      readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-      readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-      readonly admittedAtMillis: number;
-      readonly expiresAtMillis: number;
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
-    readonly cleanup: <A>(input: import("@yielded/auth/OAuth").OAuthCleanupInput, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly terminalized: number;
-      readonly removed: number;
-      readonly hasMore: boolean;
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable, never>;
-  };
-}, import("@yielded/auth/OAuth").OAuthUnavailable, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthConnectedRevocationServices: <T extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, O extends AnyMySqlTable<{
+}> = never>(mapping: OAuthConnectedMapping<S, AC, O, F, G, N, J>) => import("effect/Effect").Effect<{
+  readonly oauthConnectedPersistence: import("@yielded/auth/OAuth").OAuthConnectedPersistence["Service"];
+}, import("@yielded/auth/OAuth").OAuthUnavailable, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeOAuthConnectedRevocationServices: <O extends AnyMySqlTable<{
   dialect: "mysql";
 }>, F extends AnyMySqlTable<{
   dialect: "mysql";
-}>, G extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, C extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, H extends AnyMySqlTable<{
-  dialect: "mysql";
 }>, J extends AnyMySqlTable<{
   dialect: "mysql";
-}>, N>(mapping: OAuthConnectedRevocationMapping<T, O, F, G, C, H, J, N>) => import("effect/Effect").Effect<{
-  oauthConnectedRevocations: {
-    readonly claim: <A>(input: {
-      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-      readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
-      readonly lifetimeMillis: number;
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly _tag: "Claimed";
-      readonly claim: {
-        readonly job: {
-          readonly context: {
-            readonly namespace: "effect-auth/oauth-connected-revocation-context/v1";
-            readonly jobId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
-            readonly token: {
-              readonly namespace: "effect-auth/oauth-connected-token-context/v1";
-              readonly exchangeOrder: string;
-              readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
-              readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
-              readonly identity: {
-                readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-                readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-                readonly subject: string;
-              };
-              readonly configuration: {
-                readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-                readonly protocol: "oauth" | "oidc";
-                readonly configurationGeneration: number;
-                readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
-                readonly responseIssuerMode: "required" | "unsupported";
-                readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
-                readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
-                readonly profile: {
-                  readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
-                  readonly generation: number;
-                  readonly issuance: "active" | "retired";
-                  readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
-                  readonly clientRegistrationId: string;
-                  readonly scopes: readonly string[];
-                  readonly resources: readonly string[];
-                  readonly retention: "access-and-refresh" | "access-only";
-                  readonly maximumAccessLifetimeMillis: number;
-                  readonly maximumRefreshLifetimeMillis?: number;
-                  readonly refreshAheadMillis: number;
-                  readonly refresh: "confidential" | "rotating" | "unsupported";
-                  readonly revocation: "cohort" | "unsupported";
-                };
-              };
-              readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
-              readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-              readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-              readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
-              readonly metadata: {
-                readonly scopes: readonly string[];
-                readonly resources: readonly string[];
-                readonly accessExpiresAtMillis?: number;
-                readonly refreshExpiresAtMillis?: number;
-                readonly useUntilMillis: number;
-                readonly refreshUseUntilMillis?: number;
-                readonly obtainedAtMillis: number;
-                readonly profile?: {
-                  readonly displayName?: string;
-                  readonly handle?: string;
-                  readonly avatarUrl?: string;
-                  readonly profileUrl?: string;
-                  readonly email?: string;
-                  readonly emailVerified?: boolean;
-                  readonly providerData?: {
-                    readonly [x: string]: import("effect/Schema").Json;
-                  };
-                };
-              };
-            };
-          };
-          readonly sealed: {
-            readonly format: "oauth-connected-xchacha20poly1305-v1";
-            readonly keyId: string;
-            readonly nonce: string;
-            readonly ciphertext: import("effect/Redacted").Redacted<string>;
-          };
-        };
-        readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
-        readonly claimedAtMillis: number;
-        readonly claimExpiresAtMillis: number;
-      };
-    } | {
-      readonly _tag: "Empty";
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
-    readonly settle: <A>(input: {
-      readonly claim: import("@yielded/auth/OAuth").OAuthConnectedRevocationClaim;
-      readonly outcome: "Confirmed" | "Unknown";
-    }, prepare: import("@yielded/auth/OAuth").PrepareOAuthCommit<{
-      readonly settled: boolean;
-    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/OAuth").OAuthUnavailable>;
-  };
-}, import("@yielded/auth/OAuth").OAuthUnavailable, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks>, coordinateOAuthConnected: {
+}>, N>(mapping: OAuthConnectedRevocationMapping<O, F, J, N>) => import("effect/Effect").Effect<{
+  readonly oauthConnectedRevocations: import("@yielded/auth/OAuth").OAuthConnectedRevocations["Service"];
+}, import("@yielded/auth/OAuth").OAuthUnavailable, Database | import("@yielded/auth/Hooks").LifecycleHooks>, coordinateOAuthConnected: {
   <D extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, AC extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, T extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, O extends AnyMySqlTable<{
     dialect: "mysql";
   }>, F extends AnyMySqlTable<{
     dialect: "mysql";
   }>, G extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, C extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, H extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, UA extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, DC extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, N, J extends AnyMySqlTable<{
     dialect: "mysql";
   }>, A, E, R, DatabaseError, DatabaseRequirements>(acquire: import("effect/Effect").Effect<D, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J>;
+    readonly mapping: OAuthConnectedMapping<S, AC, O, F, G, N, J>;
     readonly transaction?: never;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/OAuth").OAuthConnectedPersistence>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/OAuth").OAuthConnectedPersistence>>;
   <D extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, AC extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, T extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, O extends AnyMySqlTable<{
     dialect: "mysql";
   }>, F extends AnyMySqlTable<{
     dialect: "mysql";
   }>, G extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, C extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, H extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, UA extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, DC extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, N, J extends AnyMySqlTable<{
     dialect: "mysql";
   }>, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: import("effect/Effect").Effect<D, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J>;
+    readonly mapping: OAuthConnectedMapping<S, AC, O, F, G, N, J>;
     readonly transaction: SuppliedService<TxId, NoInfer<D extends {
       readonly transaction: (...args: any[]) => any;
     } ? Parameters<Parameters<D["transaction"]>[0]>[0] : never>, TxShape>;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/OAuth").OAuthConnectedPersistence>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/OAuth").OAuthConnectedPersistence>>;
 }, coordinateOAuthConnectedRevocations: {
-  <D extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, T extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, O extends AnyMySqlTable<{
+  <D extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, O extends AnyMySqlTable<{
     dialect: "mysql";
   }>, F extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, G extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, C extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, H extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, J extends AnyMySqlTable<{
     dialect: "mysql";
   }>, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: import("effect/Effect").Effect<D, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: OAuthConnectedRevocationMapping<T, O, F, G, C, H, J, N>;
+    readonly mapping: OAuthConnectedRevocationMapping<O, F, J, N>;
     readonly transaction?: never;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/OAuth").OAuthConnectedRevocations>>;
-  <D extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, T extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, O extends AnyMySqlTable<{
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/OAuth").OAuthConnectedRevocations>>;
+  <D extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, O extends AnyMySqlTable<{
     dialect: "mysql";
   }>, F extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, G extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, C extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, H extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, J extends AnyMySqlTable<{
     dialect: "mysql";
   }>, N, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: import("effect/Effect").Effect<D, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: OAuthConnectedRevocationMapping<T, O, F, G, C, H, J, N>;
+    readonly mapping: OAuthConnectedRevocationMapping<O, F, J, N>;
     readonly transaction: SuppliedService<TxId, NoInfer<D extends {
       readonly transaction: (...args: any[]) => any;
     } ? Parameters<Parameters<D["transaction"]>[0]>[0] : never>, TxShape>;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/OAuth").OAuthConnectedRevocations>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/OAuth").OAuthConnectedRevocations>>;
 };
 export declare const makePasskeyCredentialServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
@@ -1736,225 +359,252 @@ export declare const makePasskeyCredentialServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, F extends AnyMySqlTable<{
   dialect: "mysql";
-}>, O extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, H extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, N, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyCredentialMapping<S, C, F, O, H, N>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyCredentialServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, import("effect/Crypto").Crypto | Database | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, makePasskeyPersistenceServices: <S extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, C extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, F extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, O extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, H extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, M extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, Flow extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, Admission extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, Charge extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, N, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, Flow, Admission, Charge, N>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyPersistenceServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, makePasskeyEnrollmentContextServices: <S extends AnyMySqlTable<{
+}>, N, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyCredentialMapping<S, C, F, N>, RSetup>) => import("effect/Effect").Effect<{
+  passkeyCredentials: {
+    readonly listForSubject: (input: {
+      readonly moduleId: string;
+      readonly rpId: string;
+      readonly subjectId: import("@yielded/auth/Schema").SubjectId;
+    }) => import("effect/Effect").Effect<import("@yielded/auth/Passkey").PasskeyEnrollmentSnapshot | undefined, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly lookup: (input: {
+      readonly rpId: string;
+      readonly protocolCredentialId: import("@yielded/auth/Passkey").PasskeyProtocolCredentialId;
+    }) => import("effect/Effect").Effect<import("@yielded/auth/Passkey").PasskeyCredential | undefined, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+  };
+}, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, import("effect/Crypto").Crypto | Database | Exclude<RSetup, NativeDatabase>>, makePasskeyPersistenceServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, C extends AnyMySqlTable<{
   dialect: "mysql";
 }>, F extends AnyMySqlTable<{
   dialect: "mysql";
-}>, O extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, H extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, M extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, N, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyEnrollmentContextMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, N>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyEnrollmentContextServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, import("effect/Crypto").Crypto | Database | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, makePasskeyRegistrationCeremonyServices: <M extends AnyMySqlTable<{
-  dialect: "mysql";
 }>, Flow extends AnyMySqlTable<{
   dialect: "mysql";
-}>, Admission extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, Charge extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, Intent extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, H extends AnyMySqlTable<{
+}>, N, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, N>, Flow, N>, RSetup>) => import("effect/Effect").Effect<{
+  passkeyPersistence: {
+    readonly issue: <A>(input: {
+      readonly ceremony: import("@yielded/auth/Passkey").PasskeyCeremony;
+    }, prepare: import("@yielded/auth/Passkey").PreparePasskeyCommit<import("@yielded/auth/Passkey").PasskeyIssueDecision, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly context: (input: import("@yielded/auth/Passkey").PasskeyAccess) => import("effect/Effect").Effect<import("@yielded/auth/Passkey").PasskeyCeremony | undefined, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly consume: <A>(input: {
+      readonly access: import("@yielded/auth/Passkey").PasskeyAccess;
+      readonly ceremony: import("@yielded/auth/Passkey").PasskeyCeremony;
+      readonly credential: import("@yielded/auth/Passkey").PasskeyCredential;
+      readonly assertion: import("@yielded/auth/Passkey").PasskeyAssertionVerified;
+    }, prepare: import("@yielded/auth/Passkey").PreparePasskeyCommit<import("@yielded/auth/Passkey").PasskeyConsumeDecision, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly cleanup: <A>(input: {
+      readonly moduleId: string;
+      readonly limit: import("@yielded/auth/Persistence").CleanupLimit;
+    }, prepare: import("@yielded/auth/Passkey").PreparePasskeyCommit<import("@yielded/auth/Persistence").CleanupResult, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+  };
+}, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, NativeDatabase>>, makePasskeyRegistrationCeremonyServices: <Flow extends AnyMySqlTable<{
   dialect: "mysql";
-}>, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyRegistrationCeremonyServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, coordinatePasskeyPersistence: {
+}>, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<Flow>, RSetup>) => import("effect/Effect").Effect<{
+  passkeyPersistence: {
+    readonly issue: <A>(input: {
+      readonly ceremony: import("@yielded/auth/Passkey").PasskeyCeremony;
+    }, prepare: import("@yielded/auth/Passkey").PreparePasskeyCommit<import("@yielded/auth/Passkey").PasskeyIssueDecision, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly context: (input: import("@yielded/auth/Passkey").PasskeyAccess) => import("effect/Effect").Effect<import("@yielded/auth/Passkey").PasskeyCeremony | undefined, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly consume: <A>(input: {
+      readonly access: import("@yielded/auth/Passkey").PasskeyAccess;
+      readonly ceremony: import("@yielded/auth/Passkey").PasskeyCeremony;
+      readonly credential: import("@yielded/auth/Passkey").PasskeyCredential;
+      readonly assertion: import("@yielded/auth/Passkey").PasskeyAssertionVerified;
+    }, prepare: import("@yielded/auth/Passkey").PreparePasskeyCommit<import("@yielded/auth/Passkey").PasskeyConsumeDecision, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly cleanup: <A>(input: {
+      readonly moduleId: string;
+      readonly limit: import("@yielded/auth/Persistence").CleanupLimit;
+    }, prepare: import("@yielded/auth/Passkey").PreparePasskeyCommit<import("@yielded/auth/Persistence").CleanupResult, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+  };
+  capabilities: {
+    purposes: readonly ["registration"];
+    issue: "registration-authority";
+    assertionConsumption: false;
+  };
+}, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, NativeDatabase>>, coordinatePasskeyPersistence: {
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, C extends AnyMySqlTable<{
     dialect: "mysql";
   }>, F extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, O extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, H extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, M extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, Flow extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, Admission extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Charge extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, N, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, Flow, Admission, Charge, N>, RSetup>;
+    readonly mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, N>, Flow, N>, RSetup>;
     readonly transaction?: never;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/Passkey").PasskeyPersistence>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/Passkey").PasskeyPersistence>>;
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, C extends AnyMySqlTable<{
     dialect: "mysql";
   }>, F extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, O extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, H extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, M extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, Flow extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, Admission extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Charge extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, N, A, E, R, TxId, TxShape, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, Flow, Admission, Charge, N>, RSetup>;
+    readonly mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, N>, Flow, N>, RSetup>;
     readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
       readonly transaction: (...args: any[]) => any;
     } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/Passkey").PasskeyPersistence>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/Passkey").PasskeyPersistence>>;
 }, coordinatePasskeyRegistrationCeremony: {
-  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, M extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Flow extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Admission extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Charge extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Intent extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, H extends AnyMySqlTable<{
+  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, Flow extends AnyMySqlTable<{
     dialect: "mysql";
   }>, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H>, RSetup>;
+    readonly mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<Flow>, RSetup>;
     readonly transaction?: never;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/Passkey").PasskeyPersistence>>;
-  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, M extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Flow extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Admission extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Charge extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Intent extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, H extends AnyMySqlTable<{
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/Passkey").PasskeyPersistence>>;
+  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, Flow extends AnyMySqlTable<{
     dialect: "mysql";
   }>, A, E, R, TxId, TxShape, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H>, RSetup>;
+    readonly mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<Flow>, RSetup>;
     readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
       readonly transaction: (...args: any[]) => any;
     } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/Passkey").PasskeyPersistence>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/Passkey").PasskeyPersistence>>;
 }, makePasskeyManagementServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, C extends AnyMySqlTable<{
   dialect: "mysql";
 }>, F extends AnyMySqlTable<{
   dialect: "mysql";
-}>, O extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, H extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, M extends AnyMySqlTable<{
-  dialect: "mysql";
 }>, Flow extends AnyMySqlTable<{
   dialect: "mysql";
-}>, Admission extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, Charge extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, Command extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, N, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyManagementMapping<S, C, F, O, H, M, Flow, Admission, Charge, Command, N>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyManagementServices, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, makePasskeyRegistrationServices: <S extends AnyMySqlTable<{
+}>, N, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyManagementMapping<S, C, F, Flow, N>, RSetup>) => import("effect/Effect").Effect<{
+  passkeyManagementPersistence: {
+    readonly list: (input: {
+      readonly moduleId: string;
+      readonly subjectId: import("@yielded/auth/Schema").SubjectId;
+      readonly cursor?: string;
+      readonly limit: number;
+    }) => import("effect/Effect").Effect<{
+      readonly credentials: ReadonlyArray<import("@yielded/auth/Passkey").PasskeyCredentialSummary>;
+      readonly cursor?: string;
+    }, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly completeEnrollment: <A>(input: {
+      readonly access: import("@yielded/auth/Passkey").PasskeyAccess;
+      readonly ceremony: import("@yielded/auth/Passkey").PasskeyCeremony;
+      readonly verified: import("@yielded/auth/Passkey").PasskeyRegistrationVerified;
+      readonly management: import("@yielded/auth/Passkey").PasskeyManagementPolicy;
+    }, prepare: import("@yielded/auth/Passkey").PreparePasskeyCommit<{
+      readonly _tag: "Enrolled";
+      readonly credential: import("@yielded/auth/Passkey").PasskeyCredentialSummary;
+    } | {
+      readonly _tag: "Rejected";
+    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly inspectRemove: (input: {
+      readonly moduleId: string;
+      readonly subjectId: import("@yielded/auth/Schema").SubjectId;
+      readonly credentialId: string;
+    }) => import("effect/Effect").Effect<{
+      readonly _tag: "Target";
+      readonly credential: import("@yielded/auth/Passkey").PasskeyCredential;
+    } | {
+      readonly _tag: "Rejected";
+    }, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly remove: <A>(input: {
+      readonly moduleId: string;
+      readonly commandId: string;
+      readonly credential: import("@yielded/auth/Passkey").PasskeyCredential;
+      readonly authorization: import("@yielded/auth/Passkey").PasskeyActionAuthorization;
+      readonly management: import("@yielded/auth/Passkey").PasskeyManagementPolicy;
+      readonly invalidation: import("@yielded/auth/Sessions").SessionInvalidationWindow;
+    }, prepare: import("@yielded/auth/Passkey").PreparePasskeyCommit<{
+      readonly _tag: "Removed";
+      readonly result: {
+        readonly credentialId: string;
+        readonly invalidation: {
+          readonly trigger: "all-session-revocation" | "credential-change" | "factor-reset" | "identifier-change" | "password-reset" | "subject-delete" | "subject-disable";
+          readonly existingSessions: "cache-expiry" | "immediate" | "original-absolute-expiry";
+          readonly maximumExposureMillis: number;
+          readonly oldAuthenticationEvidence: "rejected";
+        };
+      };
+    } | {
+      readonly _tag: "Rejected" | "LastSignInMethod";
+    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly rename: <A>(input: {
+      readonly moduleId: string;
+      readonly subjectId: import("@yielded/auth/Schema").SubjectId;
+      readonly commandId: string;
+      readonly credentialId: string;
+      readonly name: string;
+    }, prepare: import("@yielded/auth/Passkey").PreparePasskeyCommit<{
+      readonly _tag: "Renamed";
+      readonly credential: import("@yielded/auth/Passkey").PasskeyCredentialSummary;
+    } | {
+      readonly _tag: "Rejected";
+    }, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+  };
+  passkeyPersistence: {
+    readonly issue: <A>(input: {
+      readonly ceremony: import("@yielded/auth/Passkey").PasskeyCeremony;
+    }, prepare: import("@yielded/auth/Passkey").PreparePasskeyCommit<import("@yielded/auth/Passkey").PasskeyIssueDecision, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly context: (input: import("@yielded/auth/Passkey").PasskeyAccess) => import("effect/Effect").Effect<import("@yielded/auth/Passkey").PasskeyCeremony | undefined, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly consume: <A>(input: {
+      readonly access: import("@yielded/auth/Passkey").PasskeyAccess;
+      readonly ceremony: import("@yielded/auth/Passkey").PasskeyCeremony;
+      readonly credential: import("@yielded/auth/Passkey").PasskeyCredential;
+      readonly assertion: import("@yielded/auth/Passkey").PasskeyAssertionVerified;
+    }, prepare: import("@yielded/auth/Passkey").PreparePasskeyCommit<import("@yielded/auth/Passkey").PasskeyConsumeDecision, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly cleanup: <A>(input: {
+      readonly moduleId: string;
+      readonly limit: import("@yielded/auth/Persistence").CleanupLimit;
+    }, prepare: import("@yielded/auth/Passkey").PreparePasskeyCommit<import("@yielded/auth/Persistence").CleanupResult, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+  };
+}, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, NativeDatabase>>, makePasskeyRegistrationServices: <S extends AnyMySqlTable<{
   dialect: "mysql";
 }>, C extends AnyMySqlTable<{
   dialect: "mysql";
 }>, F extends AnyMySqlTable<{
   dialect: "mysql";
-}>, O extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, H extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, M extends AnyMySqlTable<{
-  dialect: "mysql";
 }>, Flow extends AnyMySqlTable<{
   dialect: "mysql";
-}>, Admission extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, Charge extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, Intent extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, N, Value, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, O, H, M, Flow, Admission, Charge, Intent, N, Value>, RSetup>) => import("effect/Effect").Effect<import("@yielded/auth-persistence/Adapter").PasskeyRegistrationServices<Value>, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, coordinatePasskeyManagement: {
+}>, N, Value, RSetup = never>(mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, Flow, N, Value>, RSetup>) => import("effect/Effect").Effect<{
+  passkeyRegistrationAuthority: import("@yielded/auth-persistence/Adapter").PasskeyRegistrationWriter<Value>;
+  passkeyPersistence: {
+    readonly issue: <A>(input: {
+      readonly ceremony: import("@yielded/auth/Passkey").PasskeyCeremony;
+    }, prepare: import("@yielded/auth/Passkey").PreparePasskeyCommit<import("@yielded/auth/Passkey").PasskeyIssueDecision, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly context: (input: import("@yielded/auth/Passkey").PasskeyAccess) => import("effect/Effect").Effect<import("@yielded/auth/Passkey").PasskeyCeremony | undefined, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly consume: <A>(input: {
+      readonly access: import("@yielded/auth/Passkey").PasskeyAccess;
+      readonly ceremony: import("@yielded/auth/Passkey").PasskeyCeremony;
+      readonly credential: import("@yielded/auth/Passkey").PasskeyCredential;
+      readonly assertion: import("@yielded/auth/Passkey").PasskeyAssertionVerified;
+    }, prepare: import("@yielded/auth/Passkey").PreparePasskeyCommit<import("@yielded/auth/Passkey").PasskeyConsumeDecision, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+    readonly cleanup: <A>(input: {
+      readonly moduleId: string;
+      readonly limit: import("@yielded/auth/Persistence").CleanupLimit;
+    }, prepare: import("@yielded/auth/Passkey").PreparePasskeyCommit<import("@yielded/auth/Persistence").CleanupResult, A>) => import("effect/Effect").Effect<import("@yielded/auth/Hooks").PreparedCommit<A>, import("@yielded/auth/Passkey").PasskeyUnavailable>;
+  };
+}, import("@yielded/auth/Passkey").PasskeyConfigurationError | import("@yielded/auth-persistence/Adapter").PersistenceMappingError, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, NativeDatabase>>, coordinatePasskeyManagement: {
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, C extends AnyMySqlTable<{
     dialect: "mysql";
   }>, F extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, O extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, H extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, M extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, Flow extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, Admission extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Charge extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Command extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, N, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyManagementMapping<S, C, F, O, H, M, Flow, Admission, Charge, Command, N>, RSetup>;
+    readonly mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyManagementMapping<S, C, F, Flow, N>, RSetup>;
     readonly transaction?: never;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/Passkey").PasskeyManagementPersistence | import("@yielded/auth/Passkey").PasskeyPersistence>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/Passkey").PasskeyManagementPersistence | import("@yielded/auth/Passkey").PasskeyPersistence>>;
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, C extends AnyMySqlTable<{
     dialect: "mysql";
   }>, F extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, O extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, H extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, M extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, Flow extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, Admission extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Charge extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Command extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, N, A, E, R, TxId, TxShape, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyManagementMapping<S, C, F, O, H, M, Flow, Admission, Charge, Command, N>, RSetup>;
+    readonly mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyManagementMapping<S, C, F, Flow, N>, RSetup>;
     readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
       readonly transaction: (...args: any[]) => any;
     } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/Passkey").PasskeyManagementPersistence | import("@yielded/auth/Passkey").PasskeyPersistence>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/Passkey").PasskeyManagementPersistence | import("@yielded/auth/Passkey").PasskeyPersistence>>;
 }, coordinatePasskeyRegistration: {
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
@@ -1962,121 +612,125 @@ export declare const makePasskeyCredentialServices: <S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, F extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, O extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, H extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, M extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, Flow extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, Admission extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Charge extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Intent extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, N, Value, A, E, R, AuthorityId, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, O, H, M, Flow, Admission, Charge, Intent, N, Value>, RSetup>;
+    readonly mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, Flow, N, Value>, RSetup>;
     readonly authority: import("effect/Context").Key<AuthorityId, import("@yielded/auth-persistence/Adapter").PasskeyRegistrationWriter<Value>>;
     readonly transaction?: never;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, AuthorityId | import("@yielded/auth/Passkey").PasskeyPersistence>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, AuthorityId | import("@yielded/auth/Passkey").PasskeyPersistence>>;
   <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
     dialect: "mysql";
   }>, C extends AnyMySqlTable<{
     dialect: "mysql";
   }>, F extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, O extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, H extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, M extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, Flow extends AnyMySqlTable<{
     dialect: "mysql";
-  }>, Admission extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Charge extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, Intent extends AnyMySqlTable<{
-    dialect: "mysql";
   }>, N, Value, A, E, R, AuthorityId, TxId, TxShape, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, O, H, M, Flow, Admission, Charge, Intent, N, Value>, RSetup>;
+    readonly mapping: import("@yielded/auth-persistence/Adapter").PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, Flow, N, Value>, RSetup>;
     readonly authority: import("effect/Context").Key<AuthorityId, import("@yielded/auth-persistence/Adapter").PasskeyRegistrationWriter<Value>>;
     readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
       readonly transaction: (...args: any[]) => any;
     } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | import("@yielded/auth-persistence/Adapter").PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, AuthorityId | TxId | import("@yielded/auth/Passkey").PasskeyPersistence>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, AuthorityId | TxId | import("@yielded/auth/Passkey").PasskeyPersistence>>;
 };
-export declare const makeTotpPersistenceServices: <S extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, F extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, C extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, N, RSetup = never>(mapping: TotpMappingSource<TotpMapping<S, F, C, N>, RSetup>) => import("effect/Effect").Effect<TotpPersistenceServices, import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/Totp").TotpConfigurationError, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, coordinateTotpPersistence: {
-  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, F extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, C extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, N, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: TotpMappingSource<TotpMapping<S, F, C, N>, RSetup>;
+export declare const makePhonePersistenceServices: <Subject extends import("drizzle-orm").Table, Identifier extends import("drizzle-orm").Table, Credential extends import("drizzle-orm").Table, Proof extends import("drizzle-orm").Table, NativeId>(mapping: PhoneMapping<Subject, Identifier, Credential, Proof, NativeId>) => import("effect/Effect").Effect<{
+  readonly phonePersistence: import("@yielded/auth/PhoneOtp").PhonePersistence["Service"];
+  readonly phoneSignInTargets: import("@yielded/auth/PhoneOtp").PhoneSignInTargets["Service"];
+}, import("@yielded/auth/PhoneOtp").PhoneConfigurationError | import("@yielded/auth/PhoneOtp").PhoneOtpUnavailable, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks>, coordinatePhonePersistence: {
+  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, Subject extends import("drizzle-orm").Table, Identifier extends import("drizzle-orm").Table, Credential extends import("drizzle-orm").Table, Proof extends import("drizzle-orm").Table, NativeId, A, E, R, DE, DR>(acquire: import("effect/Effect").Effect<Database, DE, DR>, options: {
+    readonly mapping: PhoneMapping<Subject, Identifier, Credential, Proof, NativeId>;
     readonly transaction?: never;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | TotpCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/Totp").TotpPersistence>>;
-  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, F extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, C extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, N, A, E, R, TxId, TxShape, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: TotpMappingSource<TotpMapping<S, F, C, N>, RSetup>;
-    readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
-      readonly transaction: (...args: any[]) => any;
-    } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | TotpCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/Totp").TotpPersistence>>;
-};
-export declare const makePhonePersistenceServices: <S extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, I extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, F extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, C extends AnyMySqlTable<{
-  dialect: "mysql";
-}>, N, RSetup = never>(mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N>, RSetup>) => import("effect/Effect").Effect<PhonePersistenceServices, import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/PhoneOtp").PhoneConfigurationError, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RSetup, import("@yielded/auth-persistence/Adapter").NativeDatabase>>, coordinatePhonePersistence: {
-  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, I extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, F extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, C extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, N, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N>, RSetup>;
-    readonly transaction?: never;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PhoneCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/PhoneOtp").PhoneAdmission | import("@yielded/auth/PhoneOtp").PhonePersistence | import("@yielded/auth/PhoneOtp").PhoneSignInTargets>>;
-  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, I extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, F extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, C extends AnyMySqlTable<{
-    dialect: "mysql";
-  }>, N, A, E, R, TxId, TxShape, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
-    readonly mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N>, RSetup>;
-    readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
-      readonly transaction: (...args: any[]) => any;
-    } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
-  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PhoneCoordinatorError<E>, DatabaseRequirements | RSetup | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/PhoneOtp").PhoneAdmission | import("@yielded/auth/PhoneOtp").PhonePersistence | import("@yielded/auth/PhoneOtp").PhoneSignInTargets>>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/PhoneOtp").PhoneConfigurationError | import("@yielded/auth/PhoneOtp").PhoneOtpUnavailable, DR | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/PhoneOtp").PhonePersistence | import("@yielded/auth/PhoneOtp").PhoneSignInTargets>>;
+  <Database extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, Subject extends import("drizzle-orm").Table, Identifier extends import("drizzle-orm").Table, Credential extends import("drizzle-orm").Table, Proof extends import("drizzle-orm").Table, NativeId, A, E, R, DE, DR, TxId, TxShape>(acquire: import("effect/Effect").Effect<Database, DE, DR>, options: {
+    readonly mapping: PhoneMapping<Subject, Identifier, Credential, Proof, NativeId>;
+    readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<Database>>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/PhoneOtp").PhoneConfigurationError | import("@yielded/auth/PhoneOtp").PhoneOtpUnavailable, DR | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/PhoneOtp").PhonePersistence | import("@yielded/auth/PhoneOtp").PhoneSignInTargets>>;
 };
 /** Construct Drizzle from the driver's SQL-client Layer. */
 export declare const databaseLayer: Layer.Layer<Database, never, import("@effect/sql-mysql2/MysqlClient").MysqlClient>;
+export declare const coordinateAuthenticationAuthority: {
+  <DB extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, Claims, S extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, P extends import("drizzle-orm").Table, N, A, E, R, DE, DR>(acquire: import("effect/Effect").Effect<DB, DE, DR>, options: {
+    readonly mapping: AuthenticationAuthorityMapping<Claims, S, C, P, N>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Sessions").SessionUnavailable, DR | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, import("@yielded/auth/Sessions").AuthenticationAuthority>>;
+  <DB extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, Claims, S extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, P extends import("drizzle-orm").Table, N, A, E, R, DE, DR, TxId, TxShape>(acquire: import("effect/Effect").Effect<DB, DE, DR>, options: {
+    readonly mapping: AuthenticationAuthorityMapping<Claims, S, C, P, N>;
+    readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<DB>>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Sessions").SessionUnavailable, DR | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | import("@yielded/auth/Sessions").AuthenticationAuthority>>;
+}, coordinatePendingAuthentication: {
+  <DB extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, Id, Claims, S extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, P extends import("drizzle-orm").Table, N, A, E, R, DE, DR>(acquire: import("effect/Effect").Effect<DB, DE, DR>, options: {
+    readonly mapping: PendingAuthenticationMapping<NoInfer<Claims>, S, C, P, N>;
+    readonly target: SuppliedService<Id, import("@yielded/auth/Sessions").PendingAuthentication<Claims>>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Sessions").SessionUnavailable, DR | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, Id>>;
+  <DB extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, Id, Claims, S extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, P extends import("drizzle-orm").Table, N, A, E, R, DE, DR, TxId, TxShape>(acquire: import("effect/Effect").Effect<DB, DE, DR>, options: {
+    readonly mapping: PendingAuthenticationMapping<NoInfer<Claims>, S, C, P, N>;
+    readonly target: SuppliedService<Id, import("@yielded/auth/Sessions").PendingAuthentication<Claims>>;
+    readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<DB>>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Sessions").SessionUnavailable, DR | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, Id | TxId>>;
+}, coordinateSignedSessionValidity: {
+  <DB extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, Id, S extends import("drizzle-orm").Table, T extends import("drizzle-orm").Table, N, NS, A, E, R, DE, DR>(acquire: import("effect/Effect").Effect<DB, DE, DR>, options: {
+    readonly mapping: SignedSessionValidityMapping<S, T, N, NS>;
+    readonly target: SuppliedService<Id, import("@yielded/auth/Sessions").SignedSessionValidity>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Sessions").SessionUnavailable, DR | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, Id>>;
+  <DB extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, Id, S extends import("drizzle-orm").Table, T extends import("drizzle-orm").Table, N, NS, A, E, R, DE, DR, TxId, TxShape>(acquire: import("effect/Effect").Effect<DB, DE, DR>, options: {
+    readonly mapping: SignedSessionValidityMapping<S, T, N, NS>;
+    readonly target: SuppliedService<Id, import("@yielded/auth/Sessions").SignedSessionValidity>;
+    readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<DB>>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Sessions").SessionUnavailable, DR | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, Id | TxId>>;
+}, coordinateStatefulSessions: {
+  <DB extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, Id, RepositoryId, Claims, S extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, Session extends import("drizzle-orm").Table, P extends import("drizzle-orm").Table, N, NS, A, E, R, DE, DR>(acquire: import("effect/Effect").Effect<DB, DE, DR>, options: {
+    readonly mapping: StatefulSessionMapping<NoInfer<Claims>, S, C, Session, P, N, NS>;
+    readonly persistence: SuppliedService<Id, import("@yielded/auth/Sessions").StatefulSessionPersistence<Claims>>;
+    readonly repository: SuppliedService<RepositoryId, import("@yielded/auth/Sessions").SessionRepository>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Sessions").SessionUnavailable, DR | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, Id | RepositoryId>>;
+  <DB extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, Id, RepositoryId, Claims, S extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, Session extends import("drizzle-orm").Table, P extends import("drizzle-orm").Table, N, NS, A, E, R, DE, DR, TxId, TxShape>(acquire: import("effect/Effect").Effect<DB, DE, DR>, options: {
+    readonly mapping: StatefulSessionMapping<NoInfer<Claims>, S, C, Session, P, N, NS>;
+    readonly persistence: SuppliedService<Id, import("@yielded/auth/Sessions").StatefulSessionPersistence<Claims>>;
+    readonly repository: SuppliedService<RepositoryId, import("@yielded/auth/Sessions").SessionRepository>;
+    readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<DB>>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Sessions").SessionUnavailable, DR | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, Id | RepositoryId | TxId>>;
+}, makeAuthenticationAuthorityServices: <Claims, S extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, P extends import("drizzle-orm").Table, N>(mapping: AuthenticationAuthorityMapping<Claims, S, C, P, N>) => import("effect/Effect").Effect<{
+  readonly authenticationAuthority: import("@yielded/auth/Sessions").AuthenticationAuthority["Service"];
+}, import("@yielded/auth/Sessions").SessionUnavailable, Database | import("@yielded/auth/Hooks").LifecycleHooks>, makePendingAuthenticationServices: <Claims, S extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, P extends import("drizzle-orm").Table, N>(mapping: PendingAuthenticationMapping<Claims, S, C, P, N>) => import("effect/Effect").Effect<{
+  readonly pendingAuthentication: import("@yielded/auth/Sessions").PendingAuthentication<Claims>;
+}, import("@yielded/auth/Sessions").SessionUnavailable, Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeSignedSessionValidityServices: <S extends import("drizzle-orm").Table, T extends import("drizzle-orm").Table, N, NS>(mapping: SignedSessionValidityMapping<S, T, N, NS>) => import("effect/Effect").Effect<{
+  readonly signedSessionValidity: import("@yielded/auth/Sessions").SignedSessionValidity;
+}, import("@yielded/auth/Sessions").SessionUnavailable, Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeStatefulSessionServices: <Claims, S extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, Session extends import("drizzle-orm").Table, P extends import("drizzle-orm").Table, N, NS>(mapping: StatefulSessionMapping<Claims, S, C, Session, P, N, NS>) => import("effect/Effect").Effect<{
+  readonly statefulSessionPersistence: import("@yielded/auth/Sessions").StatefulSessionPersistence<Claims>;
+  readonly sessionRepository: import("@yielded/auth/Sessions").SessionRepository;
+}, import("@yielded/auth/Sessions").SessionUnavailable, Database | import("@yielded/auth/Hooks").LifecycleHooks>, makeSessionStepUpServices: <Claims, S extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, P extends import("drizzle-orm").Table, Session extends import("drizzle-orm").Table, T extends import("drizzle-orm").Table, N, NS, Id>(mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, P, Session, T, N, NS>, target: import("effect/Context").Service<Id, import("@yielded/auth/Sessions").SessionStepUpPersistence<Claims>>) => import("effect/Effect").Effect<{
+  sessionStepUpPersistence: import("@yielded/auth/Sessions").SessionStepUpPersistence<Claims>;
+}, import("@yielded/auth/Sessions").SessionUnavailable, Database | import("@yielded/auth/Hooks").LifecycleHooks>, coordinateSessionStepUp: {
+  <DB extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, Id, Claims, S extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, P extends import("drizzle-orm").Table, Session extends import("drizzle-orm").Table, T extends import("drizzle-orm").Table, N, NS, A, E, R, DE, DR>(acquire: import("effect/Effect").Effect<DB, DE, DR>, options: {
+    readonly mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, P, Session, T, N, NS>;
+    readonly target: SuppliedService<Id, import("@yielded/auth/Sessions").SessionStepUpPersistence<Claims>>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Sessions").SessionUnavailable, DR | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, Id>>;
+  <DB extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, Id, Claims, S extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, P extends import("drizzle-orm").Table, Session extends import("drizzle-orm").Table, T extends import("drizzle-orm").Table, N, NS, A, E, R, DE, DR, TxId, TxShape>(acquire: import("effect/Effect").Effect<DB, DE, DR>, options: {
+    readonly mapping: SessionStepUpMapping<NoInfer<Claims>, S, C, P, Session, T, N, NS>;
+    readonly target: SuppliedService<Id, import("@yielded/auth/Sessions").SessionStepUpPersistence<Claims>>;
+    readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<DB>>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth/Sessions").SessionUnavailable, DR | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, Id | TxId>>;
+}, makeSessionCleanupServices: <P extends import("drizzle-orm").Table, T extends import("drizzle-orm").Table, N, NS>(mapping: SessionCleanupMapping<P, T, N, NS>) => import("effect/Effect").Effect<{
+  readonly sessionCleanup: import("@yielded/auth/Sessions").SessionCleanup;
+}, never, Database | import("@yielded/auth/Hooks").LifecycleHooks>;
+export declare const makeTotpPersistenceServices: <S extends import("drizzle-orm").Table, F extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, N, P extends import("drizzle-orm").Table = import("drizzle-orm").Table<import("drizzle-orm").TableConfig<import("drizzle-orm").Columns>>, RS = never>(source: import("@yielded/auth-persistence/Adapter").TotpMappingSource<TotpMapping<S, F, C, N, P>, RS>) => import("effect/Effect").Effect<{
+  readonly totpPersistence: import("@yielded/auth/Totp").TotpPersistence["Service"];
+}, import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/Totp").TotpConfigurationError, import("effect/Crypto").Crypto | Database | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<RS, NativeDatabase>>, coordinateTotpPersistence: {
+  <DB extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends import("drizzle-orm").Table, F extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, N, P extends import("drizzle-orm").Table, A, E, R, DE, DR, RS = never>(acquire: import("effect/Effect").Effect<DB, DE, DR>, options: {
+    readonly mapping: import("@yielded/auth-persistence/Adapter").TotpMappingSource<TotpMapping<S, F, C, N, P>, RS>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/Totp").TotpConfigurationError | import("@yielded/auth/Totp").TotpUnavailable, DR | RS | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, D1BatchStatements | import("@yielded/auth/Totp").TotpPersistence>>;
+  <DB extends EffectMysql2Database<import("drizzle-orm").TablesRelationalConfig>, S extends import("drizzle-orm").Table, F extends import("drizzle-orm").Table, C extends import("drizzle-orm").Table, N, P extends import("drizzle-orm").Table, A, E, R, DE, DR, TxId, TxShape, RS = never>(acquire: import("effect/Effect").Effect<DB, DE, DR>, options: {
+    readonly mapping: import("@yielded/auth-persistence/Adapter").TotpMappingSource<TotpMapping<S, F, C, N, P>, RS>;
+    readonly transaction: SuppliedService<TxId, NoInfer<NativeDriverTransaction<DB>>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DE | E | import("@yielded/auth-persistence/Adapter").PersistenceMappingError | import("@yielded/auth/Totp").TotpConfigurationError | import("@yielded/auth/Totp").TotpUnavailable, DR | RS | import("effect/Crypto").Crypto | import("@yielded/auth/Hooks").LifecycleHooks | Exclude<R, TxId | D1BatchStatements | import("@yielded/auth/Totp").TotpPersistence>>;
+};
 //#endregion
-export { Database, coordinateMysqlAuthenticationAuthority as coordinateAuthenticationAuthority, coordinateMysqlEmailAddress as coordinateEmailAddress, coordinateMysqlEmailRegistration as coordinateEmailRegistration, coordinateMysqlPasswordPersistence as coordinatePasswordPersistence, coordinateMySqlPasswordPreparedPersistence as coordinatePasswordPreparedPersistence, coordinateMysqlPasswordRegistration as coordinatePasswordRegistration, coordinateMysqlPendingAuthentication as coordinatePendingAuthentication, coordinateMysqlProofPersistence as coordinateProofPersistence, coordinateMysqlSessionStepUp as coordinateSessionStepUp, coordinateMysqlSignedSessionValidity as coordinateSignedSessionValidity, coordinateMysqlStatefulSessions as coordinateStatefulSessions, makeMysqlAuthenticationAuthorityServices as makeAuthenticationAuthorityServices, makeMysqlEmailAddressServices as makeEmailAddressServices, makeMysqlEmailRegistrationServices as makeEmailRegistrationServices, makeMysqlEmailSignInServices as makeEmailSignInServices, makeMysqlPasswordPersistenceServices as makePasswordPersistenceServices, makeMySqlPasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices, makeMysqlPasswordRegistrationServices as makePasswordRegistrationServices, makeMysqlPendingAuthenticationServices as makePendingAuthenticationServices, makeMysqlProofPersistenceServices as makeProofPersistenceServices, makeMysqlSessionStepUpServices as makeSessionStepUpServices, makeMysqlSignedSessionValidityServices as makeSignedSessionValidityServices, makeMysqlStatefulSessionServices as makeStatefulSessionServices, passwordPreparedPersistenceLayer };
+export { Database };
 //# sourceMappingURL=Mysql2.d.mts.map