export interface SessionInfo {
    sessionId: string;
    userId: string;
    createdAt: Date;
    ipAddress?: string;
    userAgent?: string;
}
export interface SessionLimitConfig {
    maxConcurrentSessions: number;
    strategy: 'deny_new' | 'revoke_oldest';
}
/** Enforce concurrent session limits, returning sessions to revoke if any. */
export declare function enforceSessionLimits(activeSessions: SessionInfo[], config: SessionLimitConfig): {
    allowed: boolean;
    sessionsToRevoke: string[];
};
//# sourceMappingURL=session-limits.d.ts.map