Phase D

packages/auth/src/index.ts

@@ -15,11 +15,21 @@ export interface AuthenticatedUser {
   roles: UserRole[];
 }
 
+export interface SessionImpersonationContext {
+  isImpersonation: boolean;
+  source?: string;
+  externalServiceId?: string | null;
+  externalClientId?: string | null;
+  externalUserId?: string | null;
+  impersonatorLabel?: string;
+}
+
 export interface SessionContext {
   user: AuthenticatedUser;
   sessionId: string;
   issuedAt: Date;
   expiresAt: Date;
+  impersonation?: SessionImpersonationContext;
 }
 
 export interface AuthTokenPayload {