Using services within an `HttpApiMiddleware` can be tricky due to type constraints. The error you...

export class Authorization extends HttpApiMiddleware.Tag<Authorization>()(
  'Authorization',
  {
    failure: Schema.Union(
      InvalidToken,
      Unauthorized,
      Forbidden,
      InternalServerError,
    ),
    provides: ZitadelToken,
    security: {
      bearer: HttpApiSecurity.bearer,
    },
  },
) {}

export class ZitadelToken extends Context.Tag('ZitadelToken')<
  ZitadelToken,
  jose.JWTVerifyResult & jose.ResolvedKey
>() {}

export const BackendUserProfile = Schema.Struct({
  id: Schema.UUID,
  username: Schema.String,
});

export class CurrentProfile extends Context.Tag('Profile')<
  CurrentProfile,
  {
    profile: typeof BackendUserProfile.Type;
  }
>() {}

export class ProfileRequired extends HttpApiMiddleware.Tag<ProfileRequired>()('ProfileRequired',
{
 failure: Schema.Union(Forbidden, InternalServerError),
 provides: CurrentProfile,
},
) {}

Type 'Effect<{ profile: { id: string; username: string; }; }, never, ZitadelToken | UserService>' is not assignable to type 'Effect<{ profile: { readonly id: string; readonly username: string; }; }, Forbidden | InternalServerError, Provided>' with 'exactOptionalPropertyTypes: true'
Type 'ZitadelToken | UserService' is not assignable to type 'Provided'.

export const ProfileRequiredLive = Layer.effect(
 ProfileRequired,
 Effect.gen(function* () {
  return Effect.gen(function* () {
   const token = yield* ZitadelToken;
   const userService = yield* UserService;
   return {
    profile: {
     id: 'test',
     username: 'test',
    },
   };
  });
 }),
);