export interface JwtPayload {
  sub: string;       // User UUID
  phone?: string;
  email?: string;
  role: UserRole;
  kycLevel: number;
  iat?: number;
  exp?: number;
}

export interface JwtRefreshPayload {
  sub: string;
  tokenFamily: string;  // For refresh token rotation detection
  iat?: number;
  exp?: number;
}

export enum UserRole {
  USER = 'user',
  ISSUER = 'issuer',
  MARKET_MAKER = 'market_maker',
  ADMIN = 'admin',
}
