package auth

// Principal is the verified identity from a JWT (never trust body-only agent_id).
type Principal struct {
	Sub     string   `json:"sub"`
	AgentID string   `json:"agent_id"`
	Roles   []string `json:"roles,omitempty"`
	Scopes  []string `json:"scopes,omitempty"`
}
