Session

object type

One session — a sitting: the WHO rides parentId (a User for user sittings; an ApiKey for api; a Consumer for consumer; a Device for device; a Collaborator for collaborator; an AgentChannel for agent_platform), the WHEN rides createdAt/updatedAt. Deadlines, accounts, and credentials stay OFF the wire BY DESIGN.

Fields

Field	Type	Notes
`id`	ID `ID!`	No further notes.
`kind`	String `String!`	The session class: user \| api \| consumer \| device \| collaborator \| agent_platform.
`status`	String `String!`	active, expired, revoked, or doomed — terminals persist.
`parentId`	ID `ID!`	The principal the sitting belongs to — a User (user kind), ApiKey (api), Consumer (consumer), Device (device), Collaborator (collaborator), or AgentChannel (agent_platform); join it to the staff roster for the display name.
`orgId`	ID `ID!`	The organization the session acts in.
`createdAt`	String `String!`	The sign-in instant (ISO).
`updatedAt`	String `String!`	The last write instant (ISO) — activity rolls the idle deadline forward, so this approximates last-seen.