OptionalnowEpoch-ms clock, injectable for tests. Default Date.now.
OptionalrunREQUIRED for the 'run' channel; omitted for 'hub'.
The dedicated stream-ticket signing secret (STREAM_TICKET_SECRET).
The authenticated, previously validated tenant to which the ticket is bound.
OptionalttlTicket lifetime in seconds (exp = now + ttl). Default 60.
The authenticated actor — only
idandroleare carried.