@yielded/auth 0.1.0-beta.1

package/dist/DrizzlePglite.d.mts

@@ -0,0 +1,1808 @@
+import { ConsumeChallenge, ConsumeRegistration, NewChallenge, NewRegistration, PendingRegistration, SubjectId, TokenDigest, VerifiedEmail } from "./Schema.mjs";
+import { ExternalIdentity, IdentityConflict, IdentityUnavailable, ProvisioningResult } from "./identity/models.mjs";
+import { LifecycleHooks } from "./hooks/LifecycleHooks.mjs";
+import { PreparedCommit } from "./hooks/commit.mjs";
+import { RequestBindingFlowId } from "./operations/requestBindingModels.mjs";
+import "./Operations.mjs";
+import { SessionInvalidationWindow } from "./sessions/invalidation.mjs";
+import "./Hooks.mjs";
+import "./Sessions.mjs";
+import { AuthStoreError, InvalidRegistration } from "./Errors.mjs";
+import { ConsumeDecision } from "./auth/ConsumeDecision.mjs";
+import { ChallengeConsumeDecision } from "./internal/AuthStoreDecisions.mjs";
+import { EmailOtpRejected, IssueChallengeError } from "./AuthStore.mjs";
+import { SubjectProvisioningInput } from "./identity/SubjectProvisioner.mjs";
+import { InvalidOAuthState } from "./oauth/errors.mjs";
+import { OAuthProviderKey, OAuthState } from "./oauth/schema.mjs";
+import { AuthTables, DrizzleMappingError, IdentityTables } from "./drizzle/model.mjs";
+import "./Identity.mjs";
+import { PasskeyConfigurationError } from "./passkey/errors.mjs";
+import { PasskeyPersistence } from "./passkey/PasskeyPersistence.mjs";
+import { PasskeyCredentialMapping, PasskeyCredentialServices, PasskeyEnrollmentContextMapping, PasskeyEnrollmentContextServices, PasskeyMappingSource, PasskeyPersistenceMapping, PasskeyPersistenceServices } from "./drizzle/passkey-model.mjs";
+import { OAuthRegistrationIntent } from "./oauth/registrationModels.mjs";
+import { OAuthUnavailable } from "./oauth/signInErrors.mjs";
+import { OAuthClaim, OAuthClaimDecision, OAuthCleanupInput, OAuthCredentialSnapshot, OAuthIssueDecision, OAuthPendingFlow, OAuthSettlementDecision, OAuthVerifiedExternalIdentity } from "./oauth/signInModels.mjs";
+import { OAuthSignInPersistence, PrepareOAuthCommit } from "./oauth/OAuthSignInPersistence.mjs";
+import { OAuthAccountRevision, OAuthActionAuthorization, OAuthLinkAccess, OAuthLinkClaim, OAuthLinkOutcome, OAuthLinkPendingFlow } from "./oauth/accountsModels.mjs";
+import { OAuthAccountsMapping, OAuthRegistrationAuthority, OAuthRegistrationIntentMapping, OAuthRegistrationMapping, OAuthSignInMapping } from "./drizzle/oauth-model.mjs";
+import { OAuthConnectedAccess, OAuthConnectedActionAuthorization, OAuthConnectedClaim, OAuthConnectedDisconnectGrant, OAuthConnectedOutcome, OAuthConnectedPendingFlow, OAuthConnectedRefreshClaim, OAuthConnectedRefreshOutcome, OAuthConnectedRevocationJob, OAuthConnectedStoredGrant, OAuthConnectedTarget, OAuthConnectedUseAuthorization } from "./oauth/connectedModels.mjs";
+import { OAuthConnectedMapping, OAuthConnectedRevocationMapping } from "./drizzle/oauth-connected-model.mjs";
+import { PasskeyRegistrationCeremonyMapping, PasskeyRegistrationCeremonyServices } from "./drizzle/passkey-registration-ceremony-model.mjs";
+import { OAuthAccountsPersistence } from "./oauth/OAuthAccountsPersistence.mjs";
+import { OAuthConnectedPersistence } from "./oauth/OAuthConnectedPersistence.mjs";
+import { OAuthConnectedRevocationClaim, OAuthConnectedRevocations } from "./oauth/OAuthConnectedRevocations.mjs";
+import { OAuthRegistrationIntents, OAuthRegistrationSettlement } from "./oauth/OAuthRegistrationIntents.mjs";
+import "./OAuth.mjs";
+import { OAuthCoordinatorError } from "./drizzle/oauth-target.mjs";
+import { passwordPreparedPersistenceLayer } from "./drizzle/password-prepared-target.mjs";
+import { TotpConfigurationError } from "./totp/errors.mjs";
+import { TotpPersistence } from "./totp/TotpPersistence.mjs";
+import { TotpMapping, TotpMappingSource, TotpPersistenceServices } from "./drizzle/totp-model.mjs";
+import { PasskeyManagementPersistence } from "./passkey/PasskeyManagementPersistence.mjs";
+import { PasskeyManagementMapping, PasskeyManagementServices, PasskeyRegistrationMapping, PasskeyRegistrationServices, PasskeyRegistrationWriter } from "./drizzle/passkey-write-model.mjs";
+import { PasskeyCoordinatorError } from "./drizzle/passkey-target.mjs";
+import { PhoneConfigurationError } from "./phone/lifecycleModels.mjs";
+import { PhoneAdmission } from "./phone/PhoneAdmission.mjs";
+import { PhonePersistence } from "./phone/PhonePersistence.mjs";
+import { PhoneSignInTargets } from "./phone/PhoneSignInTargets.mjs";
+import { PhoneMapping, PhoneMappingSource, PhonePersistenceServices } from "./drizzle/phone-model.mjs";
+import "./Drizzle.mjs";
+import "./Totp.mjs";
+import { SuppliedService } from "./drizzle/SuppliedService.mjs";
+import { TotpCoordinatorError } from "./drizzle/totp-target.mjs";
+import "./Passkey.mjs";
+import "./PhoneOtp.mjs";
+import { PhoneCoordinatorError } from "./drizzle/phone-target.mjs";
+import { coordinatePgAuthStoreTransaction, coordinatePgAuthTransaction, coordinatePgOAuthStateTransaction, makePgAuthStoreServices, makePgExternalIdentityServices, makePgOAuthStateServices, makePgSubjectProvisioningServices } from "./drizzle/pg.mjs";
+import { coordinatePgAuthenticationAuthority, coordinatePgPendingAuthentication, coordinatePgSessionStepUp, coordinatePgSignedSessionValidity, coordinatePgStatefulSessions, makePgAuthenticationAuthorityServices, makePgPendingAuthenticationServices, makePgSessionStepUpServices, makePgSignedSessionValidityServices, makePgStatefulSessionServices } from "./drizzle/pg-sessions.mjs";
+import { coordinatePgProofPersistence, makePgProofPersistenceServices } from "./drizzle/pg-proofs.mjs";
+import { coordinatePgPasswordPersistence, coordinatePgPasswordRegistration, makePgPasswordPersistenceServices, makePgPasswordRegistrationServices } from "./drizzle/pg-passwords.mjs";
+import { coordinatePgEmailAddress, coordinatePgEmailRegistration, makePgEmailAddressServices, makePgEmailRegistrationServices, makePgEmailSignInServices } from "./drizzle/pg-emails.mjs";
+import { coordinatePgPasswordPreparedPersistence, makePgPasswordPreparedPersistenceServices } from "./drizzle/pg-password-prepared.mjs";
+import { AnyRelations } from "drizzle-orm";
+import { AnyPgTable } from "drizzle-orm/pg-core";
+import { EffectPgDatabase } from "drizzle-orm/effect-pglite";
+//#region src/DrizzlePglite.d.ts
+declare const commitMode: "interactive";
+declare const makeAuthServices: <C extends AnyPgTable, R extends AnyPgTable, S extends AnyPgTable>(database: EffectPgDatabase<AnyRelations>, mapping: AuthTables<C, R, S>) => {
+  readonly authStore: {
+    readonly issueChallenge: (input: NewChallenge) => import("effect/Effect").Effect<void, IssueChallengeError>;
+    readonly consumeChallenge: (input: ConsumeChallenge) => import("effect/Effect").Effect<VerifiedEmail, EmailOtpRejected | AuthStoreError>;
+    readonly issueRegistration: (input: NewRegistration) => import("effect/Effect").Effect<void, AuthStoreError>;
+    readonly inspectRegistration: (tokenDigest: TokenDigest) => import("effect/Effect").Effect<PendingRegistration, InvalidRegistration | AuthStoreError>;
+    readonly consumeRegistration: (input: ConsumeRegistration) => import("effect/Effect").Effect<void, InvalidRegistration | AuthStoreError>;
+  };
+  readonly oauthStateStore: {
+    readonly issue: (state: OAuthState) => import("effect/Effect").Effect<void, AuthStoreError>;
+    readonly consume: (stateDigest: TokenDigest) => import("effect/Effect").Effect<OAuthState, InvalidOAuthState | AuthStoreError>;
+  };
+  readonly decisions: {
+    readonly consumeChallenge: (input: ConsumeChallenge) => import("effect/Effect").Effect<ChallengeConsumeDecision, AuthStoreError, never>;
+    readonly consumeRegistration: (input: ConsumeRegistration) => import("effect/Effect").Effect<ConsumeDecision<void>, AuthStoreError, never>;
+    readonly consumeOAuthState: (digest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">) => import("effect/Effect").Effect<ConsumeDecision<OAuthState>, AuthStoreError, never>;
+  };
+};
+declare const makeIdentityServices: <Subject extends AnyPgTable, Identifier extends AnyPgTable, External extends AnyPgTable, Request extends AnyPgTable, NativeId>(database: EffectPgDatabase<AnyRelations>, mapping: IdentityTables<Subject, Identifier, External, Request, NativeId>) => {
+  subjectProvisioner: {
+    readonly provision: (input: SubjectProvisioningInput) => import("effect/Effect").Effect<ProvisioningResult, IdentityConflict | IdentityUnavailable>;
+  };
+  externalIdentityMutation: {
+    readonly bind: (subjectId: SubjectId, identity: ExternalIdentity) => import("effect/Effect").Effect<void, IdentityConflict | IdentityUnavailable>;
+  };
+};
+declare const makeOAuthAccountsServices: <S extends AnyPgTable<{
+  dialect: "pg";
+}>, O extends AnyPgTable<{
+  dialect: "pg";
+}>, C extends AnyPgTable<{
+  dialect: "pg";
+}>, AC extends AnyPgTable<{
+  dialect: "pg";
+}>, F extends AnyPgTable<{
+  dialect: "pg";
+}>, TA extends AnyPgTable<{
+  dialect: "pg";
+}>, U extends AnyPgTable<{
+  dialect: "pg";
+}>, N>(database: EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>) => import("effect/Effect").Effect<{
+  oauthAccountsPersistence: {
+    readonly capture: (input: {
+      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+      readonly subjectId: SubjectId;
+    }) => import("effect/Effect").Effect<OAuthAccountRevision | undefined, OAuthUnavailable>;
+    readonly issue: <A>(input: {
+      readonly flow: OAuthLinkPendingFlow;
+      readonly authorization: OAuthActionAuthorization;
+    }, prepare: PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Issued";
+      readonly flow: {
+        readonly context: {
+          readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+          readonly protocol: "oauth" | "oidc";
+          readonly configurationGeneration: number;
+          readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+          readonly responseIssuerMode: "required" | "unsupported";
+          readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+          readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+          readonly generation: number;
+          readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
+          readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+          readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
+          readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+          readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+          readonly requestBindingExpiresAtMillis: number;
+          readonly issuedAtMillis: number;
+          readonly expiresAtMillis: number;
+          readonly claimLifetimeMillis: number;
+          readonly namespace: "effect-auth/oauth-link-context/v1";
+          readonly revision: {
+            readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+            readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+            readonly credentials: readonly {
+              readonly credentialId: string;
+              readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+            }[];
+          };
+          readonly maximumEvidenceAgeMillis: number;
+        };
+        readonly sealed: {
+          readonly format: "oauth-xchacha20poly1305-v1";
+          readonly keyId: string;
+          readonly nonce: string;
+          readonly ciphertext: import("effect/Redacted").Redacted<string>;
+        };
+        readonly retentionUntilMillis: number;
+      };
+    }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable>;
+    readonly preflight: (input: OAuthLinkAccess) => import("effect/Effect").Effect<OAuthLinkPendingFlow | undefined, OAuthUnavailable>;
+    readonly claim: <A>(input: {
+      readonly access: OAuthLinkAccess;
+      readonly flow: OAuthLinkPendingFlow;
+      readonly claimId: OAuthLinkClaim["claimId"];
+      readonly authorization: OAuthActionAuthorization;
+    }, prepare: PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Claimed";
+      readonly claim: {
+        readonly flow: {
+          readonly context: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly protocol: "oauth" | "oidc";
+            readonly configurationGeneration: number;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly responseIssuerMode: "required" | "unsupported";
+            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+            readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+            readonly generation: number;
+            readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
+            readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+            readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
+            readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+            readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+            readonly requestBindingExpiresAtMillis: number;
+            readonly issuedAtMillis: number;
+            readonly expiresAtMillis: number;
+            readonly claimLifetimeMillis: number;
+            readonly namespace: "effect-auth/oauth-link-context/v1";
+            readonly revision: {
+              readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+              readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+              readonly credentials: readonly {
+                readonly credentialId: string;
+                readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+              }[];
+            };
+            readonly maximumEvidenceAgeMillis: number;
+          };
+          readonly sealed: {
+            readonly format: "oauth-xchacha20poly1305-v1";
+            readonly keyId: string;
+            readonly nonce: string;
+            readonly ciphertext: import("effect/Redacted").Redacted<string>;
+          };
+          readonly retentionUntilMillis: number;
+        };
+        readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
+        readonly claimedAtMillis: number;
+        readonly claimExpiresAtMillis: number;
+      };
+    }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable>;
+    readonly settle: <A>(input: {
+      readonly claim: OAuthLinkClaim;
+      readonly outcome: OAuthLinkOutcome;
+      readonly authorization: OAuthActionAuthorization;
+      readonly invalidation: SessionInvalidationWindow;
+      readonly nowMillis: number;
+    }, prepare: PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
+    } | {
+      readonly _tag: "Cancelled";
+    } | {
+      readonly _tag: "Ambiguous";
+    } | {
+      readonly _tag: "Linked";
+      readonly credential: {
+        readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+        readonly identity: {
+          readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+          readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+          readonly subject: string;
+        };
+        readonly credentialId: string;
+        readonly credentialRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+        readonly revision: {
+          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+          readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly credentials: readonly {
+            readonly credentialId: string;
+            readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          }[];
+        };
+      };
+      readonly changed: boolean;
+    }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable>;
+    readonly inspectUnlink: (input: {
+      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+      readonly subjectId: SubjectId;
+      readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+      readonly credentialId: string;
+    }) => import("effect/Effect").Effect<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
+    } | {
+      readonly _tag: "Target";
+      readonly credential: {
+        readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+        readonly identity: {
+          readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+          readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+          readonly subject: string;
+        };
+        readonly credentialId: string;
+        readonly credentialRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+        readonly revision: {
+          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+          readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly credentials: readonly {
+            readonly credentialId: string;
+            readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          }[];
+        };
+      };
+    } | {
+      readonly _tag: "Replay";
+      readonly result: {
+        readonly _tag: "Unlinked";
+        readonly credentialId: string;
+        readonly invalidation: {
+          readonly trigger: "all-session-revocation" | "credential-change" | "factor-reset" | "identifier-change" | "password-reset" | "subject-delete" | "subject-disable";
+          readonly existingSessions: "immediate" | "original-absolute-expiry";
+          readonly maximumExposureMillis: number;
+          readonly oldAuthenticationEvidence: "rejected";
+        };
+      };
+    }, OAuthUnavailable>;
+    readonly unlink: <A>(input: {
+      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+      readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+      readonly credential: OAuthCredentialSnapshot;
+      readonly authorization: OAuthActionAuthorization;
+      readonly invalidation: SessionInvalidationWindow;
+      readonly nowMillis: number;
+      readonly retentionUntilMillis: number;
+    }, prepare: PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
+    } | {
+      readonly _tag: "Unlinked";
+      readonly result: {
+        readonly _tag: "Unlinked";
+        readonly credentialId: string;
+        readonly invalidation: {
+          readonly trigger: "all-session-revocation" | "credential-change" | "factor-reset" | "identifier-change" | "password-reset" | "subject-delete" | "subject-disable";
+          readonly existingSessions: "immediate" | "original-absolute-expiry";
+          readonly maximumExposureMillis: number;
+          readonly oldAuthenticationEvidence: "rejected";
+        };
+      };
+      readonly replayed: boolean;
+    } | {
+      readonly _tag: "LastSignInMethod";
+    }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable>;
+    readonly cleanup: <A>(input: OAuthCleanupInput, prepare: PrepareOAuthCommit<{
+      readonly terminalized: number;
+      readonly removed: number;
+      readonly hasMore: boolean;
+    }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable>;
+  };
+}, never, LifecycleHooks>, makeOAuthSignInServices: <S extends AnyPgTable<{
+  dialect: "pg";
+}>, O extends AnyPgTable<{
+  dialect: "pg";
+}>, C extends AnyPgTable<{
+  dialect: "pg";
+}>, AC extends AnyPgTable<{
+  dialect: "pg";
+}>, F extends AnyPgTable<{
+  dialect: "pg";
+}>, N>(database: EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthSignInMapping<S, O, C, AC, F, N>) => import("effect/Effect").Effect<{
+  oauthSignInPersistence: {
+    readonly issue: <A>(input: OAuthPendingFlow, prepare: PrepareOAuthCommit<OAuthIssueDecision, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable>;
+    readonly claim: <A>(input: {
+      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+      readonly generation: number;
+      readonly flowId: RequestBindingFlowId;
+      readonly provider: OAuthProviderKey;
+      readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+      readonly stateDigest: TokenDigest;
+      readonly requestBindingVerifier: TokenDigest;
+      readonly requestBindingExpiresAtMillis: number;
+      readonly responseIssuer?: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+      readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
+      readonly nowMillis: number;
+    }, prepare: PrepareOAuthCommit<OAuthClaimDecision, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable>;
+    readonly settle: <A>(input: {
+      readonly claim: OAuthClaim;
+      readonly outcome: {
+        readonly _tag: "Verified";
+        readonly identity: OAuthVerifiedExternalIdentity;
+      } | {
+        readonly _tag: "Cancelled" | "Rejected" | "Ambiguous";
+      };
+      readonly nowMillis: number;
+    }, prepare: PrepareOAuthCommit<OAuthSettlementDecision, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable>;
+    readonly cleanup: <A>(input: OAuthCleanupInput, prepare: PrepareOAuthCommit<{
+      readonly terminalized: number;
+      readonly removed: number;
+      readonly hasMore: boolean;
+    }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable>;
+  };
+}, never, LifecycleHooks>, makeOAuthRegistrationIntentServices: <S extends AnyPgTable<{
+  dialect: "pg";
+}>, O extends AnyPgTable<{
+  dialect: "pg";
+}>, C extends AnyPgTable<{
+  dialect: "pg";
+}>, AC extends AnyPgTable<{
+  dialect: "pg";
+}>, F extends AnyPgTable<{
+  dialect: "pg";
+}>, TA extends AnyPgTable<{
+  dialect: "pg";
+}>, I extends AnyPgTable<{
+  dialect: "pg";
+}>, N>(database: EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>) => import("effect/Effect").Effect<{
+  oauthRegistrationIntents: {
+    readonly settle: <A>(input: {
+      readonly claim: OAuthClaim;
+      readonly identity: OAuthVerifiedExternalIdentity;
+      readonly intent?: OAuthRegistrationIntent;
+      readonly nowMillis: number;
+    }, prepare: PrepareOAuthCommit<OAuthRegistrationSettlement, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable>;
+  };
+}, never, LifecycleHooks>, makeOAuthRegistrationServices: <Registration, S extends AnyPgTable<{
+  dialect: "pg";
+}>, O extends AnyPgTable<{
+  dialect: "pg";
+}>, C extends AnyPgTable<{
+  dialect: "pg";
+}>, AC extends AnyPgTable<{
+  dialect: "pg";
+}>, TA extends AnyPgTable<{
+  dialect: "pg";
+}>, I extends AnyPgTable<{
+  dialect: "pg";
+}>, R extends AnyPgTable<{
+  dialect: "pg";
+}>, N>(database: EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthRegistrationMapping<Registration, S, O, C, AC, TA, I, R, N>) => import("effect/Effect").Effect<{
+  registrationAuthority: OAuthRegistrationAuthority<Registration>;
+}, never, LifecycleHooks>, coordinateOAuthRegistration: {
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, TargetId, Registration, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, AC extends AnyPgTable<{
+    dialect: "pg";
+  }>, TA extends AnyPgTable<{
+    dialect: "pg";
+  }>, I extends AnyPgTable<{
+    dialect: "pg";
+  }>, Rq extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, TA, I, Rq, N>;
+    readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | LifecycleHooks | Exclude<R, TargetId>>;
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, TargetId, Registration, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, AC extends AnyPgTable<{
+    dialect: "pg";
+  }>, TA extends AnyPgTable<{
+    dialect: "pg";
+  }>, I extends AnyPgTable<{
+    dialect: "pg";
+  }>, Rq extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: OAuthRegistrationMapping<NoInfer<Registration>, S, O, C, AC, TA, I, Rq, N>;
+    readonly target: SuppliedService<TargetId, OAuthRegistrationAuthority<Registration>>;
+    readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
+      readonly transaction: (...args: any[]) => any;
+    } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | LifecycleHooks | Exclude<R, TargetId | TxId>>;
+}, coordinateOAuthSignIn: {
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, AC extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | LifecycleHooks | Exclude<R, OAuthSignInPersistence>>;
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, AC extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: OAuthSignInMapping<S, O, C, AC, F, N>;
+    readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
+      readonly transaction: (...args: any[]) => any;
+    } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | LifecycleHooks | Exclude<R, TxId | OAuthSignInPersistence>>;
+}, coordinateOAuthRegistrationIntents: {
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, AC extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, TA extends AnyPgTable<{
+    dialect: "pg";
+  }>, I extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | LifecycleHooks | Exclude<R, OAuthRegistrationIntents>>;
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, AC extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, TA extends AnyPgTable<{
+    dialect: "pg";
+  }>, I extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: OAuthRegistrationIntentMapping<S, O, C, AC, F, TA, I, N>;
+    readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
+      readonly transaction: (...args: any[]) => any;
+    } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | LifecycleHooks | Exclude<R, TxId | OAuthRegistrationIntents>>;
+}, coordinateOAuthAccounts: {
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, AC extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, TA extends AnyPgTable<{
+    dialect: "pg";
+  }>, U extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | LifecycleHooks | Exclude<R, OAuthAccountsPersistence>>;
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, AC extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, TA extends AnyPgTable<{
+    dialect: "pg";
+  }>, U extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: OAuthAccountsMapping<S, O, C, AC, F, TA, U, N>;
+    readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
+      readonly transaction: (...args: any[]) => any;
+    } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | LifecycleHooks | Exclude<R, TxId | OAuthAccountsPersistence>>;
+}, makeOAuthConnectedServices: <S extends AnyPgTable<{
+  dialect: "pg";
+}>, AC extends AnyPgTable<{
+  dialect: "pg";
+}>, T extends AnyPgTable<{
+  dialect: "pg";
+}>, O extends AnyPgTable<{
+  dialect: "pg";
+}>, F extends AnyPgTable<{
+  dialect: "pg";
+}>, G extends AnyPgTable<{
+  dialect: "pg";
+}>, C extends AnyPgTable<{
+  dialect: "pg";
+}>, H extends AnyPgTable<{
+  dialect: "pg";
+}>, UA extends AnyPgTable<{
+  dialect: "pg";
+}>, DC extends AnyPgTable<{
+  dialect: "pg";
+}>, N, J extends AnyPgTable<{
+  dialect: "pg";
+}> = never>(database: EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J>) => import("effect/Effect").Effect<{
+  oauthConnectedPersistence: {
+    readonly capture: (input: {
+      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+      readonly subjectId: SubjectId;
+      readonly grantId?: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+    }) => import("effect/Effect").Effect<{
+      readonly revision: OAuthAccountRevision;
+      readonly target?: OAuthConnectedTarget;
+    } | undefined, OAuthUnavailable>;
+    readonly issue: <A>(input: {
+      readonly flow: OAuthConnectedPendingFlow;
+      readonly authorization: OAuthConnectedActionAuthorization;
+    }, prepare: PrepareOAuthCommit<{
+      readonly _tag: "Issued";
+      readonly flow: {
+        readonly context: {
+          readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+          readonly protocol: "oauth" | "oidc";
+          readonly configurationGeneration: number;
+          readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+          readonly responseIssuerMode: "required" | "unsupported";
+          readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+          readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+          readonly generation: number;
+          readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
+          readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+          readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
+          readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+          readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+          readonly requestBindingExpiresAtMillis: number;
+          readonly issuedAtMillis: number;
+          readonly expiresAtMillis: number;
+          readonly claimLifetimeMillis: number;
+          readonly namespace: "effect-auth/oauth-connected-context/v1";
+          readonly revision: {
+            readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+            readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+            readonly credentials: readonly {
+              readonly credentialId: string;
+              readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+            }[];
+          };
+          readonly profile: {
+            readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+            readonly generation: number;
+            readonly issuance: "active" | "retired";
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly clientRegistrationId: string;
+            readonly scopes: readonly string[];
+            readonly resources: readonly string[];
+            readonly retention: "access-and-refresh" | "access-only";
+            readonly maximumAccessLifetimeMillis: number;
+            readonly maximumRefreshLifetimeMillis?: number | undefined;
+            readonly refreshAheadMillis: number;
+            readonly refresh: "confidential" | "rotating" | "unsupported";
+            readonly revocation: "cohort" | "unsupported";
+          };
+          readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+          readonly reconnect?: {
+            readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+            readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+            readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+            readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+            readonly identity: {
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+              readonly subject: string;
+            };
+            readonly configuration: {
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly protocol: "oauth" | "oidc";
+              readonly configurationGeneration: number;
+              readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+              readonly responseIssuerMode: "required" | "unsupported";
+              readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+              readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+              readonly profile: {
+                readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+                readonly generation: number;
+                readonly issuance: "active" | "retired";
+                readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+                readonly clientRegistrationId: string;
+                readonly scopes: readonly string[];
+                readonly resources: readonly string[];
+                readonly retention: "access-and-refresh" | "access-only";
+                readonly maximumAccessLifetimeMillis: number;
+                readonly maximumRefreshLifetimeMillis?: number | undefined;
+                readonly refreshAheadMillis: number;
+                readonly refresh: "confidential" | "rotating" | "unsupported";
+                readonly revocation: "cohort" | "unsupported";
+              };
+            };
+          } | undefined;
+          readonly maximumEvidenceAgeMillis: number;
+        };
+        readonly sealed: {
+          readonly format: "oauth-xchacha20poly1305-v1";
+          readonly keyId: string;
+          readonly nonce: string;
+          readonly ciphertext: import("effect/Redacted").Redacted<string>;
+        };
+        readonly retentionUntilMillis: number;
+      };
+    } | {
+      readonly _tag: "Rejected";
+    }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable, never>;
+    readonly preflight: (input: OAuthConnectedAccess) => import("effect/Effect").Effect<OAuthConnectedPendingFlow | undefined, OAuthUnavailable>;
+    readonly claim: <A>(input: {
+      readonly access: OAuthConnectedAccess;
+      readonly flow: OAuthConnectedPendingFlow;
+      readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
+      readonly authorization: OAuthConnectedActionAuthorization;
+    }, prepare: PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Claimed";
+      readonly claim: {
+        readonly flow: {
+          readonly context: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly protocol: "oauth" | "oidc";
+            readonly configurationGeneration: number;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly responseIssuerMode: "required" | "unsupported";
+            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+            readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+            readonly generation: number;
+            readonly flowId: string & import("effect/Brand").Brand<"effect-auth/RequestBindingFlowId">;
+            readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+            readonly returnTarget: string & import("effect/Brand").Brand<"effect-auth/OAuthReturnTarget">;
+            readonly stateDigest: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+            readonly requestBindingVerifier: string & import("effect/Brand").Brand<"effect-auth/TokenDigest">;
+            readonly requestBindingExpiresAtMillis: number;
+            readonly issuedAtMillis: number;
+            readonly expiresAtMillis: number;
+            readonly claimLifetimeMillis: number;
+            readonly namespace: "effect-auth/oauth-connected-context/v1";
+            readonly revision: {
+              readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+              readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+              readonly credentials: readonly {
+                readonly credentialId: string;
+                readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+              }[];
+            };
+            readonly profile: {
+              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+              readonly generation: number;
+              readonly issuance: "active" | "retired";
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly clientRegistrationId: string;
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly retention: "access-and-refresh" | "access-only";
+              readonly maximumAccessLifetimeMillis: number;
+              readonly maximumRefreshLifetimeMillis?: number | undefined;
+              readonly refreshAheadMillis: number;
+              readonly refresh: "confidential" | "rotating" | "unsupported";
+              readonly revocation: "cohort" | "unsupported";
+            };
+            readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+            readonly reconnect?: {
+              readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+              readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+              readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+              readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+              readonly identity: {
+                readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+                readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+                readonly subject: string;
+              };
+              readonly configuration: {
+                readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+                readonly protocol: "oauth" | "oidc";
+                readonly configurationGeneration: number;
+                readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+                readonly responseIssuerMode: "required" | "unsupported";
+                readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+                readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+                readonly profile: {
+                  readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+                  readonly generation: number;
+                  readonly issuance: "active" | "retired";
+                  readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+                  readonly clientRegistrationId: string;
+                  readonly scopes: readonly string[];
+                  readonly resources: readonly string[];
+                  readonly retention: "access-and-refresh" | "access-only";
+                  readonly maximumAccessLifetimeMillis: number;
+                  readonly maximumRefreshLifetimeMillis?: number | undefined;
+                  readonly refreshAheadMillis: number;
+                  readonly refresh: "confidential" | "rotating" | "unsupported";
+                  readonly revocation: "cohort" | "unsupported";
+                };
+              };
+            } | undefined;
+            readonly maximumEvidenceAgeMillis: number;
+          };
+          readonly sealed: {
+            readonly format: "oauth-xchacha20poly1305-v1";
+            readonly keyId: string;
+            readonly nonce: string;
+            readonly ciphertext: import("effect/Redacted").Redacted<string>;
+          };
+          readonly retentionUntilMillis: number;
+        };
+        readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
+        readonly claimedAtMillis: number;
+        readonly claimExpiresAtMillis: number;
+        readonly order: string;
+      };
+    }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable, never>;
+    readonly inspectGrant: (input: {
+      readonly claim: OAuthConnectedClaim;
+      readonly identity: {
+        readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+        readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+        readonly subject: string;
+      };
+    }) => import("effect/Effect").Effect<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Target";
+      readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+    } | {
+      readonly _tag: "Quarantine";
+      readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+    } | {
+      readonly _tag: "Conflict";
+    }, OAuthUnavailable>;
+    readonly settle: <A>(input: {
+      readonly claim: OAuthConnectedClaim;
+      readonly outcome: OAuthConnectedOutcome;
+      readonly authorization: OAuthConnectedActionAuthorization;
+      readonly nowMillis: number;
+    }, prepare: PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
+    } | {
+      readonly _tag: "Cancelled";
+    } | {
+      readonly _tag: "Ambiguous";
+    } | {
+      readonly _tag: "Connected";
+      readonly grant: {
+        readonly context: {
+          readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+          readonly identity: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly subject: string;
+          };
+          readonly configuration: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly protocol: "oauth" | "oidc";
+            readonly configurationGeneration: number;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly responseIssuerMode: "required" | "unsupported";
+            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+            readonly profile: {
+              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+              readonly generation: number;
+              readonly issuance: "active" | "retired";
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly clientRegistrationId: string;
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly retention: "access-and-refresh" | "access-only";
+              readonly maximumAccessLifetimeMillis: number;
+              readonly maximumRefreshLifetimeMillis?: number | undefined;
+              readonly refreshAheadMillis: number;
+              readonly refresh: "confidential" | "rotating" | "unsupported";
+              readonly revocation: "cohort" | "unsupported";
+            };
+          };
+          readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+          readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly metadata: {
+            readonly scopes: readonly string[];
+            readonly resources: readonly string[];
+            readonly accessExpiresAtMillis?: number | undefined;
+            readonly refreshExpiresAtMillis?: number | undefined;
+            readonly useUntilMillis: number;
+            readonly refreshUseUntilMillis?: number | undefined;
+            readonly obtainedAtMillis: number;
+            readonly profile?: {
+              readonly displayName?: string | undefined;
+              readonly handle?: string | undefined;
+            } | undefined;
+          };
+        };
+        readonly sealed: {
+          readonly format: "oauth-connected-xchacha20poly1305-v1";
+          readonly keyId: string;
+          readonly nonce: string;
+          readonly ciphertext: import("effect/Redacted").Redacted<string>;
+        };
+      };
+    } | {
+      readonly _tag: "Busy";
+    }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable, never>;
+    readonly list: (input: {
+      readonly authorization: OAuthConnectedUseAuthorization;
+      readonly limit: number;
+      readonly cursor?: string;
+    }) => import("effect/Effect").Effect<{
+      readonly items: readonly {
+        readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+        readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+        readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+        readonly profileKey: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+        readonly status: "Active" | "Disconnected" | "ReauthorizationRequired" | "Refreshing";
+        readonly scopes: readonly string[];
+        readonly accessExpiresAtMillis?: number | undefined;
+        readonly useUntilMillis: number;
+        readonly profile?: {
+          readonly displayName?: string | undefined;
+          readonly handle?: string | undefined;
+        } | undefined;
+        readonly remoteRevocation: "Confirmed" | "Pending" | "Unknown" | "Unsupported";
+      }[];
+      readonly cursor?: string | undefined;
+    }, OAuthUnavailable>;
+    readonly inspectDisconnect: (input: {
+      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+      readonly subjectId: SubjectId;
+      readonly authorization: OAuthConnectedUseAuthorization;
+      readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+      readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+    }) => import("effect/Effect").Effect<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
+    } | {
+      readonly _tag: "Target";
+      readonly grant: {
+        readonly context: {
+          readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+          readonly identity: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly subject: string;
+          };
+          readonly configuration: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly protocol: "oauth" | "oidc";
+            readonly configurationGeneration: number;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly responseIssuerMode: "required" | "unsupported";
+            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+            readonly profile: {
+              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+              readonly generation: number;
+              readonly issuance: "active" | "retired";
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly clientRegistrationId: string;
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly retention: "access-and-refresh" | "access-only";
+              readonly maximumAccessLifetimeMillis: number;
+              readonly maximumRefreshLifetimeMillis?: number | undefined;
+              readonly refreshAheadMillis: number;
+              readonly refresh: "confidential" | "rotating" | "unsupported";
+              readonly revocation: "cohort" | "unsupported";
+            };
+          };
+          readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+          readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly metadata: {
+            readonly scopes: readonly string[];
+            readonly resources: readonly string[];
+            readonly accessExpiresAtMillis?: number | undefined;
+            readonly refreshExpiresAtMillis?: number | undefined;
+            readonly useUntilMillis: number;
+            readonly refreshUseUntilMillis?: number | undefined;
+            readonly obtainedAtMillis: number;
+            readonly profile?: {
+              readonly displayName?: string | undefined;
+              readonly handle?: string | undefined;
+            } | undefined;
+          };
+        };
+        readonly sealed?: {
+          readonly format: "oauth-connected-xchacha20poly1305-v1";
+          readonly keyId: string;
+          readonly nonce: string;
+          readonly ciphertext: import("effect/Redacted").Redacted<string>;
+        } | undefined;
+      };
+      readonly revision: {
+        readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+        readonly securityRevision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+        readonly credentials: readonly {
+          readonly credentialId: string;
+          readonly revision: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+        }[];
+      };
+    } | {
+      readonly _tag: "Replay";
+      readonly result: {
+        readonly _tag: "Disconnected";
+        readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+        readonly remoteRevocation: "Confirmed" | "Pending" | "Unknown" | "Unsupported";
+        readonly affectedGrantCount: number;
+        readonly replayed: boolean;
+      };
+    }, OAuthUnavailable>;
+    readonly disconnect: <A>(input: {
+      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+      readonly commandId: string & import("effect/Brand").Brand<"effect-auth/OAuthCommandId">;
+      readonly grant: OAuthConnectedDisconnectGrant;
+      readonly authorization: OAuthConnectedActionAuthorization;
+      readonly revocation?: OAuthConnectedRevocationJob;
+      readonly retentionUntilMillis: number;
+    }, prepare: PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Conflict";
+    } | {
+      readonly _tag: "Disconnected";
+      readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+      readonly remoteRevocation: "Confirmed" | "Pending" | "Unknown" | "Unsupported";
+      readonly affectedGrantCount: number;
+      readonly replayed: boolean;
+    }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable, never>;
+    readonly inspectAccess: (input: {
+      readonly authorization: OAuthConnectedUseAuthorization;
+      readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+      readonly profileKey: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+    }) => import("effect/Effect").Effect<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Busy";
+    } | {
+      readonly _tag: "Target";
+      readonly grant: {
+        readonly context: {
+          readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+          readonly identity: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly subject: string;
+          };
+          readonly configuration: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly protocol: "oauth" | "oidc";
+            readonly configurationGeneration: number;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly responseIssuerMode: "required" | "unsupported";
+            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+            readonly profile: {
+              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+              readonly generation: number;
+              readonly issuance: "active" | "retired";
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly clientRegistrationId: string;
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly retention: "access-and-refresh" | "access-only";
+              readonly maximumAccessLifetimeMillis: number;
+              readonly maximumRefreshLifetimeMillis?: number | undefined;
+              readonly refreshAheadMillis: number;
+              readonly refresh: "confidential" | "rotating" | "unsupported";
+              readonly revocation: "cohort" | "unsupported";
+            };
+          };
+          readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+          readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly metadata: {
+            readonly scopes: readonly string[];
+            readonly resources: readonly string[];
+            readonly accessExpiresAtMillis?: number | undefined;
+            readonly refreshExpiresAtMillis?: number | undefined;
+            readonly useUntilMillis: number;
+            readonly refreshUseUntilMillis?: number | undefined;
+            readonly obtainedAtMillis: number;
+            readonly profile?: {
+              readonly displayName?: string | undefined;
+              readonly handle?: string | undefined;
+            } | undefined;
+          };
+        };
+        readonly sealed: {
+          readonly format: "oauth-connected-xchacha20poly1305-v1";
+          readonly keyId: string;
+          readonly nonce: string;
+          readonly ciphertext: import("effect/Redacted").Redacted<string>;
+        };
+      };
+    } | {
+      readonly _tag: "ReauthorizationRequired";
+    }, OAuthUnavailable>;
+    readonly claimRefresh: <A>(input: {
+      readonly grant: OAuthConnectedStoredGrant;
+      readonly authorization: OAuthConnectedUseAuthorization;
+      readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
+      readonly nextTokenVersion: OAuthConnectedRefreshClaim["nextTokenVersion"];
+      readonly lifetimeMillis: number;
+    }, prepare: PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Busy";
+    } | {
+      readonly _tag: "ReauthorizationRequired";
+    } | {
+      readonly _tag: "Claimed";
+      readonly claim: {
+        readonly grant: {
+          readonly context: {
+            readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+            readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+            readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+            readonly identity: {
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+              readonly subject: string;
+            };
+            readonly configuration: {
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly protocol: "oauth" | "oidc";
+              readonly configurationGeneration: number;
+              readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+              readonly responseIssuerMode: "required" | "unsupported";
+              readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+              readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+              readonly profile: {
+                readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+                readonly generation: number;
+                readonly issuance: "active" | "retired";
+                readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+                readonly clientRegistrationId: string;
+                readonly scopes: readonly string[];
+                readonly resources: readonly string[];
+                readonly retention: "access-and-refresh" | "access-only";
+                readonly maximumAccessLifetimeMillis: number;
+                readonly maximumRefreshLifetimeMillis?: number | undefined;
+                readonly refreshAheadMillis: number;
+                readonly refresh: "confidential" | "rotating" | "unsupported";
+                readonly revocation: "cohort" | "unsupported";
+              };
+            };
+            readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+            readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+            readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+            readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+            readonly metadata: {
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly accessExpiresAtMillis?: number | undefined;
+              readonly refreshExpiresAtMillis?: number | undefined;
+              readonly useUntilMillis: number;
+              readonly refreshUseUntilMillis?: number | undefined;
+              readonly obtainedAtMillis: number;
+              readonly profile?: {
+                readonly displayName?: string | undefined;
+                readonly handle?: string | undefined;
+              } | undefined;
+            };
+          };
+          readonly sealed: {
+            readonly format: "oauth-connected-xchacha20poly1305-v1";
+            readonly keyId: string;
+            readonly nonce: string;
+            readonly ciphertext: import("effect/Redacted").Redacted<string>;
+          };
+        };
+        readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
+        readonly claimedAtMillis: number;
+        readonly claimExpiresAtMillis: number;
+        readonly nextTokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+      };
+    }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable, never>;
+    readonly settleRefresh: <A>(input: {
+      readonly claim: OAuthConnectedRefreshClaim;
+      readonly authorization: OAuthConnectedUseAuthorization;
+      readonly outcome: OAuthConnectedRefreshOutcome;
+    }, prepare: PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "ReauthorizationRequired";
+    } | {
+      readonly _tag: "Refreshed";
+      readonly grant: {
+        readonly context: {
+          readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+          readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+          readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+          readonly identity: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly subject: string;
+          };
+          readonly configuration: {
+            readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+            readonly protocol: "oauth" | "oidc";
+            readonly configurationGeneration: number;
+            readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+            readonly responseIssuerMode: "required" | "unsupported";
+            readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+            readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+            readonly profile: {
+              readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+              readonly generation: number;
+              readonly issuance: "active" | "retired";
+              readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+              readonly clientRegistrationId: string;
+              readonly scopes: readonly string[];
+              readonly resources: readonly string[];
+              readonly retention: "access-and-refresh" | "access-only";
+              readonly maximumAccessLifetimeMillis: number;
+              readonly maximumRefreshLifetimeMillis?: number | undefined;
+              readonly refreshAheadMillis: number;
+              readonly refresh: "confidential" | "rotating" | "unsupported";
+              readonly revocation: "cohort" | "unsupported";
+            };
+          };
+          readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+          readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+          readonly metadata: {
+            readonly scopes: readonly string[];
+            readonly resources: readonly string[];
+            readonly accessExpiresAtMillis?: number | undefined;
+            readonly refreshExpiresAtMillis?: number | undefined;
+            readonly useUntilMillis: number;
+            readonly refreshUseUntilMillis?: number | undefined;
+            readonly obtainedAtMillis: number;
+            readonly profile?: {
+              readonly displayName?: string | undefined;
+              readonly handle?: string | undefined;
+            } | undefined;
+          };
+        };
+        readonly sealed: {
+          readonly format: "oauth-connected-xchacha20poly1305-v1";
+          readonly keyId: string;
+          readonly nonce: string;
+          readonly ciphertext: import("effect/Redacted").Redacted<string>;
+        };
+      };
+    }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable, never>;
+    readonly admitUse: <A>(input: {
+      readonly grant: OAuthConnectedStoredGrant;
+      readonly authorization: OAuthConnectedUseAuthorization;
+      readonly admissionId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
+      readonly lifetimeMillis: number;
+    }, prepare: PrepareOAuthCommit<{
+      readonly _tag: "Rejected";
+    } | {
+      readonly _tag: "Busy";
+    } | {
+      readonly _tag: "ReauthorizationRequired";
+    } | {
+      readonly _tag: "Admitted";
+      readonly admissionId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
+      readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+      readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+      readonly admittedAtMillis: number;
+      readonly expiresAtMillis: number;
+    }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable, never>;
+    readonly cleanup: <A>(input: OAuthCleanupInput, prepare: PrepareOAuthCommit<{
+      readonly terminalized: number;
+      readonly removed: number;
+      readonly hasMore: boolean;
+    }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable, never>;
+  };
+}, never, LifecycleHooks>, makeOAuthConnectedRevocationServices: <T extends AnyPgTable<{
+  dialect: "pg";
+}>, O extends AnyPgTable<{
+  dialect: "pg";
+}>, F extends AnyPgTable<{
+  dialect: "pg";
+}>, G extends AnyPgTable<{
+  dialect: "pg";
+}>, C extends AnyPgTable<{
+  dialect: "pg";
+}>, H extends AnyPgTable<{
+  dialect: "pg";
+}>, J extends AnyPgTable<{
+  dialect: "pg";
+}>, N>(database: EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, mapping: OAuthConnectedRevocationMapping<T, O, F, G, C, H, J, N>) => import("effect/Effect").Effect<{
+  oauthConnectedRevocations: {
+    readonly claim: <A>(input: {
+      readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+      readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
+      readonly lifetimeMillis: number;
+    }, prepare: PrepareOAuthCommit<{
+      readonly _tag: "Claimed";
+      readonly claim: {
+        readonly job: {
+          readonly context: {
+            readonly namespace: "effect-auth/oauth-connected-revocation-context/v1";
+            readonly jobId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
+            readonly token: {
+              readonly namespace: "effect-auth/oauth-connected-token-context/v1";
+              readonly moduleId: string & import("effect/Brand").Brand<"effect-auth/OAuthModuleId">;
+              readonly subjectId: string & import("effect/Brand").Brand<"effect-auth/SubjectId">;
+              readonly identity: {
+                readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+                readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+                readonly subject: string;
+              };
+              readonly configuration: {
+                readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+                readonly protocol: "oauth" | "oidc";
+                readonly configurationGeneration: number;
+                readonly issuer: string & import("effect/Brand").Brand<"effect-auth/OAuthIssuer">;
+                readonly responseIssuerMode: "required" | "unsupported";
+                readonly callbackId: string & import("effect/Brand").Brand<"effect-auth/OAuthCallbackId">;
+                readonly redirectUri: string & import("effect/Brand").Brand<"effect-auth/OAuthRedirectUri">;
+                readonly profile: {
+                  readonly key: string & import("effect/Brand").Brand<"effect-auth/OAuthPermissionProfileKey">;
+                  readonly generation: number;
+                  readonly issuance: "active" | "retired";
+                  readonly provider: string & import("effect/Brand").Brand<"effect-auth/OAuthProviderKey">;
+                  readonly clientRegistrationId: string;
+                  readonly scopes: readonly string[];
+                  readonly resources: readonly string[];
+                  readonly retention: "access-and-refresh" | "access-only";
+                  readonly maximumAccessLifetimeMillis: number;
+                  readonly maximumRefreshLifetimeMillis?: number | undefined;
+                  readonly refreshAheadMillis: number;
+                  readonly refresh: "confidential" | "rotating" | "unsupported";
+                  readonly revocation: "cohort" | "unsupported";
+                };
+              };
+              readonly grantId: string & import("effect/Brand").Brand<"effect-auth/OAuthGrantId">;
+              readonly grantVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+              readonly tokenVersion: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+              readonly cohortGeneration: string & import("effect/Brand").Brand<"effect-auth/SecurityRevision">;
+              readonly metadata: {
+                readonly scopes: readonly string[];
+                readonly resources: readonly string[];
+                readonly accessExpiresAtMillis?: number | undefined;
+                readonly refreshExpiresAtMillis?: number | undefined;
+                readonly useUntilMillis: number;
+                readonly refreshUseUntilMillis?: number | undefined;
+                readonly obtainedAtMillis: number;
+                readonly profile?: {
+                  readonly displayName?: string | undefined;
+                  readonly handle?: string | undefined;
+                } | undefined;
+              };
+            };
+          };
+          readonly sealed: {
+            readonly format: "oauth-connected-xchacha20poly1305-v1";
+            readonly keyId: string;
+            readonly nonce: string;
+            readonly ciphertext: import("effect/Redacted").Redacted<string>;
+          };
+        };
+        readonly claimId: string & import("effect/Brand").Brand<"effect-auth/OAuthClaimId">;
+        readonly claimedAtMillis: number;
+        readonly claimExpiresAtMillis: number;
+      };
+    } | {
+      readonly _tag: "Empty";
+    }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable>;
+    readonly settle: <A>(input: {
+      readonly claim: OAuthConnectedRevocationClaim;
+      readonly outcome: "Confirmed" | "Unknown";
+    }, prepare: PrepareOAuthCommit<{
+      readonly settled: boolean;
+    }, A>) => import("effect/Effect").Effect<PreparedCommit<A>, OAuthUnavailable>;
+  };
+}, never, LifecycleHooks>, coordinateOAuthConnected: {
+  <D extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, AC extends AnyPgTable<{
+    dialect: "pg";
+  }>, T extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, G extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, H extends AnyPgTable<{
+    dialect: "pg";
+  }>, UA extends AnyPgTable<{
+    dialect: "pg";
+  }>, DC extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, J extends AnyPgTable<{
+    dialect: "pg";
+  }>, A, E, R, DatabaseError, DatabaseRequirements>(acquire: import("effect/Effect").Effect<D, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | LifecycleHooks | Exclude<R, OAuthConnectedPersistence>>;
+  <D extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, AC extends AnyPgTable<{
+    dialect: "pg";
+  }>, T extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, G extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, H extends AnyPgTable<{
+    dialect: "pg";
+  }>, UA extends AnyPgTable<{
+    dialect: "pg";
+  }>, DC extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, J extends AnyPgTable<{
+    dialect: "pg";
+  }>, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: import("effect/Effect").Effect<D, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: OAuthConnectedMapping<S, AC, T, O, F, G, C, H, UA, DC, N, J>;
+    readonly transaction: SuppliedService<TxId, NoInfer<D extends {
+      readonly transaction: (...args: any[]) => any;
+    } ? Parameters<Parameters<D["transaction"]>[0]>[0] : never>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | LifecycleHooks | Exclude<R, TxId | OAuthConnectedPersistence>>;
+}, coordinateOAuthConnectedRevocations: {
+  <D extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, T extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, G extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, H extends AnyPgTable<{
+    dialect: "pg";
+  }>, J extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, DatabaseError, DatabaseRequirements>(acquire: import("effect/Effect").Effect<D, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: OAuthConnectedRevocationMapping<T, O, F, G, C, H, J, N>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | LifecycleHooks | Exclude<R, OAuthConnectedRevocations>>;
+  <D extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, T extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, G extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, H extends AnyPgTable<{
+    dialect: "pg";
+  }>, J extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, DatabaseError, DatabaseRequirements, TxId, TxShape>(acquire: import("effect/Effect").Effect<D, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: OAuthConnectedRevocationMapping<T, O, F, G, C, H, J, N>;
+    readonly transaction: SuppliedService<TxId, NoInfer<D extends {
+      readonly transaction: (...args: any[]) => any;
+    } ? Parameters<Parameters<D["transaction"]>[0]>[0] : never>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | OAuthCoordinatorError<E>, DatabaseRequirements | LifecycleHooks | Exclude<R, TxId | OAuthConnectedRevocations>>;
+};
+declare const makePasskeyCredentialServices: <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+  dialect: "pg";
+}>, C extends AnyPgTable<{
+  dialect: "pg";
+}>, F extends AnyPgTable<{
+  dialect: "pg";
+}>, O extends AnyPgTable<{
+  dialect: "pg";
+}>, H extends AnyPgTable<{
+  dialect: "pg";
+}>, N, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyCredentialMapping<S, C, F, O, H, N>, RSetup>) => import("effect/Effect").Effect<PasskeyCredentialServices, DrizzleMappingError | PasskeyConfigurationError, RSetup>, makePasskeyPersistenceServices: <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+  dialect: "pg";
+}>, C extends AnyPgTable<{
+  dialect: "pg";
+}>, F extends AnyPgTable<{
+  dialect: "pg";
+}>, O extends AnyPgTable<{
+  dialect: "pg";
+}>, H extends AnyPgTable<{
+  dialect: "pg";
+}>, M extends AnyPgTable<{
+  dialect: "pg";
+}>, Flow extends AnyPgTable<{
+  dialect: "pg";
+}>, Admission extends AnyPgTable<{
+  dialect: "pg";
+}>, Charge extends AnyPgTable<{
+  dialect: "pg";
+}>, N, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, Flow, Admission, Charge, N>, RSetup>) => import("effect/Effect").Effect<PasskeyPersistenceServices, DrizzleMappingError | PasskeyConfigurationError, RSetup | LifecycleHooks>, makePasskeyEnrollmentContextServices: <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+  dialect: "pg";
+}>, C extends AnyPgTable<{
+  dialect: "pg";
+}>, F extends AnyPgTable<{
+  dialect: "pg";
+}>, O extends AnyPgTable<{
+  dialect: "pg";
+}>, H extends AnyPgTable<{
+  dialect: "pg";
+}>, M extends AnyPgTable<{
+  dialect: "pg";
+}>, N, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyEnrollmentContextMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, N>, RSetup>) => import("effect/Effect").Effect<PasskeyEnrollmentContextServices, DrizzleMappingError | PasskeyConfigurationError, RSetup>, makePasskeyRegistrationCeremonyServices: <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, M extends AnyPgTable<{
+  dialect: "pg";
+}>, Flow extends AnyPgTable<{
+  dialect: "pg";
+}>, Admission extends AnyPgTable<{
+  dialect: "pg";
+}>, Charge extends AnyPgTable<{
+  dialect: "pg";
+}>, Intent extends AnyPgTable<{
+  dialect: "pg";
+}>, H extends AnyPgTable<{
+  dialect: "pg";
+}>, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H>, RSetup>) => import("effect/Effect").Effect<PasskeyRegistrationCeremonyServices, DrizzleMappingError | PasskeyConfigurationError, RSetup | LifecycleHooks>, coordinatePasskeyPersistence: {
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, H extends AnyPgTable<{
+    dialect: "pg";
+  }>, M extends AnyPgTable<{
+    dialect: "pg";
+  }>, Flow extends AnyPgTable<{
+    dialect: "pg";
+  }>, Admission extends AnyPgTable<{
+    dialect: "pg";
+  }>, Charge extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, Flow, Admission, Charge, N>, RSetup>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | LifecycleHooks | Exclude<R, PasskeyPersistence>>;
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, H extends AnyPgTable<{
+    dialect: "pg";
+  }>, M extends AnyPgTable<{
+    dialect: "pg";
+  }>, Flow extends AnyPgTable<{
+    dialect: "pg";
+  }>, Admission extends AnyPgTable<{
+    dialect: "pg";
+  }>, Charge extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, TxId, TxShape, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: PasskeyMappingSource<PasskeyPersistenceMapping<PasskeyCredentialMapping<S, C, F, O, H, N>, M, Flow, Admission, Charge, N>, RSetup>;
+    readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
+      readonly transaction: (...args: any[]) => any;
+    } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | LifecycleHooks | Exclude<R, TxId | PasskeyPersistence>>;
+}, coordinatePasskeyRegistrationCeremony: {
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, M extends AnyPgTable<{
+    dialect: "pg";
+  }>, Flow extends AnyPgTable<{
+    dialect: "pg";
+  }>, Admission extends AnyPgTable<{
+    dialect: "pg";
+  }>, Charge extends AnyPgTable<{
+    dialect: "pg";
+  }>, Intent extends AnyPgTable<{
+    dialect: "pg";
+  }>, H extends AnyPgTable<{
+    dialect: "pg";
+  }>, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H>, RSetup>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | LifecycleHooks | Exclude<R, PasskeyPersistence>>;
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, M extends AnyPgTable<{
+    dialect: "pg";
+  }>, Flow extends AnyPgTable<{
+    dialect: "pg";
+  }>, Admission extends AnyPgTable<{
+    dialect: "pg";
+  }>, Charge extends AnyPgTable<{
+    dialect: "pg";
+  }>, Intent extends AnyPgTable<{
+    dialect: "pg";
+  }>, H extends AnyPgTable<{
+    dialect: "pg";
+  }>, A, E, R, TxId, TxShape, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: PasskeyMappingSource<PasskeyRegistrationCeremonyMapping<M, Flow, Admission, Charge, Intent, H>, RSetup>;
+    readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
+      readonly transaction: (...args: any[]) => any;
+    } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | LifecycleHooks | Exclude<R, TxId | PasskeyPersistence>>;
+}, makePasskeyManagementServices: <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+  dialect: "pg";
+}>, C extends AnyPgTable<{
+  dialect: "pg";
+}>, F extends AnyPgTable<{
+  dialect: "pg";
+}>, O extends AnyPgTable<{
+  dialect: "pg";
+}>, H extends AnyPgTable<{
+  dialect: "pg";
+}>, M extends AnyPgTable<{
+  dialect: "pg";
+}>, Flow extends AnyPgTable<{
+  dialect: "pg";
+}>, Admission extends AnyPgTable<{
+  dialect: "pg";
+}>, Charge extends AnyPgTable<{
+  dialect: "pg";
+}>, Command extends AnyPgTable<{
+  dialect: "pg";
+}>, N, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyManagementMapping<S, C, F, O, H, M, Flow, Admission, Charge, Command, N>, RSetup>) => import("effect/Effect").Effect<PasskeyManagementServices, DrizzleMappingError | PasskeyConfigurationError, RSetup | LifecycleHooks>, makePasskeyRegistrationServices: <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+  dialect: "pg";
+}>, C extends AnyPgTable<{
+  dialect: "pg";
+}>, F extends AnyPgTable<{
+  dialect: "pg";
+}>, O extends AnyPgTable<{
+  dialect: "pg";
+}>, H extends AnyPgTable<{
+  dialect: "pg";
+}>, M extends AnyPgTable<{
+  dialect: "pg";
+}>, Flow extends AnyPgTable<{
+  dialect: "pg";
+}>, Admission extends AnyPgTable<{
+  dialect: "pg";
+}>, Charge extends AnyPgTable<{
+  dialect: "pg";
+}>, Intent extends AnyPgTable<{
+  dialect: "pg";
+}>, N, Value, RSetup = never>(database: Database, mapping: PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, O, H, M, Flow, Admission, Charge, Intent, N, Value>, RSetup>) => import("effect/Effect").Effect<PasskeyRegistrationServices<Value>, DrizzleMappingError | PasskeyConfigurationError, RSetup | LifecycleHooks>, coordinatePasskeyManagement: {
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, H extends AnyPgTable<{
+    dialect: "pg";
+  }>, M extends AnyPgTable<{
+    dialect: "pg";
+  }>, Flow extends AnyPgTable<{
+    dialect: "pg";
+  }>, Admission extends AnyPgTable<{
+    dialect: "pg";
+  }>, Charge extends AnyPgTable<{
+    dialect: "pg";
+  }>, Command extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: PasskeyMappingSource<PasskeyManagementMapping<S, C, F, O, H, M, Flow, Admission, Charge, Command, N>, RSetup>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | LifecycleHooks | Exclude<R, PasskeyManagementPersistence | PasskeyPersistence>>;
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, H extends AnyPgTable<{
+    dialect: "pg";
+  }>, M extends AnyPgTable<{
+    dialect: "pg";
+  }>, Flow extends AnyPgTable<{
+    dialect: "pg";
+  }>, Admission extends AnyPgTable<{
+    dialect: "pg";
+  }>, Charge extends AnyPgTable<{
+    dialect: "pg";
+  }>, Command extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, TxId, TxShape, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: PasskeyMappingSource<PasskeyManagementMapping<S, C, F, O, H, M, Flow, Admission, Charge, Command, N>, RSetup>;
+    readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
+      readonly transaction: (...args: any[]) => any;
+    } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | LifecycleHooks | Exclude<R, TxId | PasskeyManagementPersistence | PasskeyPersistence>>;
+}, coordinatePasskeyRegistration: {
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, H extends AnyPgTable<{
+    dialect: "pg";
+  }>, M extends AnyPgTable<{
+    dialect: "pg";
+  }>, Flow extends AnyPgTable<{
+    dialect: "pg";
+  }>, Admission extends AnyPgTable<{
+    dialect: "pg";
+  }>, Charge extends AnyPgTable<{
+    dialect: "pg";
+  }>, Intent extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, Value, A, E, R, AuthorityId, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, O, H, M, Flow, Admission, Charge, Intent, N, Value>, RSetup>;
+    readonly authority: import("effect/Context").Key<AuthorityId, PasskeyRegistrationWriter<Value>>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | LifecycleHooks | Exclude<R, AuthorityId | PasskeyPersistence>>;
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, O extends AnyPgTable<{
+    dialect: "pg";
+  }>, H extends AnyPgTable<{
+    dialect: "pg";
+  }>, M extends AnyPgTable<{
+    dialect: "pg";
+  }>, Flow extends AnyPgTable<{
+    dialect: "pg";
+  }>, Admission extends AnyPgTable<{
+    dialect: "pg";
+  }>, Charge extends AnyPgTable<{
+    dialect: "pg";
+  }>, Intent extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, Value, A, E, R, AuthorityId, TxId, TxShape, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: PasskeyMappingSource<PasskeyRegistrationMapping<S, C, F, O, H, M, Flow, Admission, Charge, Intent, N, Value>, RSetup>;
+    readonly authority: import("effect/Context").Key<AuthorityId, PasskeyRegistrationWriter<Value>>;
+    readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
+      readonly transaction: (...args: any[]) => any;
+    } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PasskeyCoordinatorError<E>, DatabaseRequirements | RSetup | LifecycleHooks | Exclude<R, AuthorityId | TxId | PasskeyPersistence>>;
+};
+declare const makeTotpPersistenceServices: <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+  dialect: "pg";
+}>, F extends AnyPgTable<{
+  dialect: "pg";
+}>, C extends AnyPgTable<{
+  dialect: "pg";
+}>, N, RSetup = never>(database: Database, mapping: TotpMappingSource<TotpMapping<S, F, C, N>, RSetup>) => import("effect/Effect").Effect<TotpPersistenceServices, DrizzleMappingError | TotpConfigurationError, RSetup | LifecycleHooks>, coordinateTotpPersistence: {
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: TotpMappingSource<TotpMapping<S, F, C, N>, RSetup>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | TotpCoordinatorError<E>, DatabaseRequirements | RSetup | LifecycleHooks | Exclude<R, TotpPersistence>>;
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, TxId, TxShape, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: TotpMappingSource<TotpMapping<S, F, C, N>, RSetup>;
+    readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
+      readonly transaction: (...args: any[]) => any;
+    } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | TotpCoordinatorError<E>, DatabaseRequirements | RSetup | LifecycleHooks | Exclude<R, TxId | TotpPersistence>>;
+};
+declare const makePhonePersistenceServices: <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+  dialect: "pg";
+}>, I extends AnyPgTable<{
+  dialect: "pg";
+}>, F extends AnyPgTable<{
+  dialect: "pg";
+}>, C extends AnyPgTable<{
+  dialect: "pg";
+}>, N, RSetup = never>(database: Database, mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N>, RSetup>) => import("effect/Effect").Effect<PhonePersistenceServices, DrizzleMappingError | PhoneConfigurationError, RSetup | LifecycleHooks>, coordinatePhonePersistence: {
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, I extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N>, RSetup>;
+    readonly transaction?: never;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PhoneCoordinatorError<E>, DatabaseRequirements | RSetup | LifecycleHooks | Exclude<R, PhoneAdmission | PhonePersistence | PhoneSignInTargets>>;
+  <Database extends EffectPgDatabase<import("drizzle-orm").TablesRelationalConfig>, S extends AnyPgTable<{
+    dialect: "pg";
+  }>, I extends AnyPgTable<{
+    dialect: "pg";
+  }>, F extends AnyPgTable<{
+    dialect: "pg";
+  }>, C extends AnyPgTable<{
+    dialect: "pg";
+  }>, N, A, E, R, TxId, TxShape, RSetup = never, DatabaseError = never, DatabaseRequirements = never>(acquire: import("effect/Effect").Effect<Database, DatabaseError, DatabaseRequirements>, options: {
+    readonly mapping: PhoneMappingSource<PhoneMapping<S, I, C, F, N>, RSetup>;
+    readonly transaction: SuppliedService<TxId, NoInfer<Database extends {
+      readonly transaction: (...args: any[]) => any;
+    } ? Parameters<Parameters<Database["transaction"]>[0]>[0] : never>, TxShape>;
+  }, body: import("effect/Effect").Effect<A, E, R>): import("effect/Effect").Effect<A, DatabaseError | PhoneCoordinatorError<E>, DatabaseRequirements | RSetup | LifecycleHooks | Exclude<R, TxId | PhoneAdmission | PhonePersistence | PhoneSignInTargets>>;
+};
+//#endregion
+export { commitMode, coordinatePgAuthStoreTransaction as coordinateAuthStoreTransaction, coordinatePgAuthTransaction as coordinateAuthTransaction, coordinatePgAuthenticationAuthority as coordinateAuthenticationAuthority, coordinatePgEmailAddress as coordinateEmailAddress, coordinatePgEmailRegistration as coordinateEmailRegistration, coordinateOAuthAccounts, coordinateOAuthConnected, coordinateOAuthConnectedRevocations, coordinateOAuthRegistration, coordinateOAuthRegistrationIntents, coordinateOAuthSignIn, coordinatePgOAuthStateTransaction as coordinateOAuthStateTransaction, coordinatePasskeyManagement, coordinatePasskeyPersistence, coordinatePasskeyRegistration, coordinatePasskeyRegistrationCeremony, coordinatePgPasswordPersistence as coordinatePasswordPersistence, coordinatePgPasswordPreparedPersistence as coordinatePasswordPreparedPersistence, coordinatePgPasswordRegistration as coordinatePasswordRegistration, coordinatePgPendingAuthentication as coordinatePendingAuthentication, coordinatePhonePersistence, coordinatePgProofPersistence as coordinateProofPersistence, coordinatePgSessionStepUp as coordinateSessionStepUp, coordinatePgSignedSessionValidity as coordinateSignedSessionValidity, coordinatePgStatefulSessions as coordinateStatefulSessions, coordinateTotpPersistence, makeAuthServices, makePgAuthStoreServices as makeAuthStoreServices, makePgAuthenticationAuthorityServices as makeAuthenticationAuthorityServices, makePgEmailAddressServices as makeEmailAddressServices, makePgEmailRegistrationServices as makeEmailRegistrationServices, makePgEmailSignInServices as makeEmailSignInServices, makePgExternalIdentityServices as makeExternalIdentityServices, makeIdentityServices, makeOAuthAccountsServices, makeOAuthConnectedRevocationServices, makeOAuthConnectedServices, makeOAuthRegistrationIntentServices, makeOAuthRegistrationServices, makeOAuthSignInServices, makePgOAuthStateServices as makeOAuthStateServices, makePasskeyCredentialServices, makePasskeyEnrollmentContextServices, makePasskeyManagementServices, makePasskeyPersistenceServices, makePasskeyRegistrationCeremonyServices, makePasskeyRegistrationServices, makePgPasswordPersistenceServices as makePasswordPersistenceServices, makePgPasswordPreparedPersistenceServices as makePasswordPreparedPersistenceServices, makePgPasswordRegistrationServices as makePasswordRegistrationServices, makePgPendingAuthenticationServices as makePendingAuthenticationServices, makePhonePersistenceServices, makePgProofPersistenceServices as makeProofPersistenceServices, makePgSessionStepUpServices as makeSessionStepUpServices, makePgSignedSessionValidityServices as makeSignedSessionValidityServices, makePgStatefulSessionServices as makeStatefulSessionServices, makePgSubjectProvisioningServices as makeSubjectProvisioningServices, makeTotpPersistenceServices, passwordPreparedPersistenceLayer };
+//# sourceMappingURL=DrizzlePglite.d.mts.map