namespace ErsatzTV.Application.Auth;

/// <summary>
///     Rotates the local admin security stamp, revoking every outstanding local session server-side (their
///     cookies carry the old stamp and fail <c>OnValidatePrincipal</c> on their next request). Used by logout
///     so signing out actually ends the session server-side, not just client-side. A no-op when no local
///     admin is configured. OIDC sessions are unaffected (they carry no stamp).
/// </summary>
public record RotateLocalAdminSecurityStamp : IRequest<Unit>;