SignInternDaemonResponse - OpenRouter

Headers the CLI copies onto the daemon request so the sidecar can verify who is asking.

Fields

Field	Type	Required	Description
`x_ori_invoke_nonce`	Optional[str]	➖	Present with `x-ori-invoke-signature-v2`: the single-use id that proof is bound to.
`x_ori_invoke_signature`	str	✅	Base64 Ed25519 signature over the intern id, timestamp, user and body digest.
`x_ori_invoke_signature_v2`	Optional[str]	➖	Present when the request named a `route`: Base64 Ed25519 signature over the intern id, timestamp, nonce, user, method, path and body digest. The intern accepts it once.
`x_ori_invoke_timestamp`	str	✅	Unix seconds at signing; the daemon refuses proofs older than its window.
`x_ori_invoke_user`	str	✅	The verified OAuth subject the proof names. Never taken from the request.