SignInternDaemonResponse - OpenRouter

Headers the CLI copies onto the daemon request so the sidecar can verify who is asking.

Fields

Field	Type	Required	Description
`XOriInvokeNonce`	`*string`	➖	Present with `x-ori-invoke-signature-v2`: the single-use id that proof is bound to.
`XOriInvokeSignature`	`string`	✅	Base64 Ed25519 signature over the intern id, timestamp, user and body digest.
`XOriInvokeSignatureV2`	`*string`	➖	Present when the request named a `route`: Base64 Ed25519 signature over the intern id, timestamp, nonce, user, method, path and body digest. The intern accepts it once.
`XOriInvokeTimestamp`	`string`	✅	Unix seconds at signing; the daemon refuses proofs older than its window.
`XOriInvokeUser`	`string`	✅	The verified OAuth subject the proof names. Never taken from the request.