interface Session {
  /** Unique session identifier (e.g., "ses_abc123") */
  id: string;

  /** Whether the session is currently valid */
  active: boolean;

  /** ISO 8601 expiry timestamp */
  expiresAt: string;

  /** ISO 8601 timestamp when the session was created */
  authenticatedAt: string;

  /** ISO 8601 timestamp when the session was last used */
  issuedAt: string;

  /** MFA assurance level */
  authenticatorAssuranceLevel: "aal1" | "aal2";

  /** The authenticated user */
  identity: Identity;

  /** Devices associated with this session */
  devices: DeviceInfo[];

  /** Authentication methods used in this session */
  authenticationMethods: AuthMethod[];
}

interface Identity {
  id: string;
  email: string;
  emailVerified: boolean;
  phone: string | null;
  phoneVerified: boolean;
  name: { first: string; last: string } | null;
  avatarUrl: string | null;
  locale: string | null;
  timezone: string | null;
  organizationId: string | null;
  metadata: { public: Record<string, unknown> };
  createdAt: string;
  updatedAt: string;
  verifiedAt: string | null;
}

interface AuthMethod {
  method: "password" | "webauthn" | "totp" | "recovery_code" | "oidc" | "code" | "link";
  aal: "aal1" | "aal2";
  completedAt: string;
  provider?: string;  // For OIDC: "google", "github", etc.
}

interface DeviceInfo {
  id: string;
  userAgent: string;         // "Chrome 120 on macOS"
  ipAddress: string;         // "203.0.113.42"
  location: string | null;   // "San Francisco, CA, US"
  lastActiveAt: string;
}

interface SessionList {
  sessions: Session[];
  nextPageToken: string | null;
  totalSize: number;
}