Module claims 

NHI JWT claims.

Structs

ActorClaim

RFC 8693 §4.1 actor claim: identifies the party that is acting on behalf of the subject. In a delegation chain, sub stays the human principal and act holds the agent identity. Nested act claims represent multi-hop delegation (agent A delegates to agent B: A is in act, B is in act.act).

NhiClaims

Claims carried by an AgentVisor AI NHI token.

Enums

Audience

The aud claim per RFC 7519 §4.1.3: “a StringOrURI value or an array of StringOrURI”. Mainstream IdPs (Okta, Auth0, Azure AD, Cognito) emit the array form for multi-audience apps ("aud": ["agentvisor", "some-other-svc"]). Accepting only the string form silently locks the operator out at go-live with an invalid type: sequence, expected string error deep inside jsonwebtoken::decode, before our validator’s aud check runs.

Constants

MAX_TTL_SECS

Hard TTL ceiling for NHI tokens: 15 minutes (brief Module D).