RequestUser: UserInstance & RequestUserWebFields

Authenticated user object exposed by Passport. Combines the DAL-derived UserInstance shape with web-only enrichments populated during request handling.