namespace ErsatzTV.Application.Auth;

/// <summary>
///     The current local-admin security stamp, or <c>None</c> if no local admin is configured. The cookie
///     <c>OnValidatePrincipal</c> compares this to the principal's stamp claim on every request; a mismatch
///     (i.e. the password was changed) rejects the session.
/// </summary>
public record GetLocalAdminSecurityStamp : IRequest<Option<string>>;