OptionaldeploymentOptionalnotifyNotification transport for SLA escalations — threaded to SweepSLAOptions.notify. The alarm handler awaits the complete maintenance duty, so transports need no request-scoped keep-alive here.
OptionalqueueOptional audit export queue.
The deployment approval store.
OptionalstreamLive-stream fan-out sink for SLA escalations — the BARE hub-publish thunk
(event) => createHubTopology(env.HUB, env.DEPLOYMENT_IDENTITY_SECRET).publish(event), NOT wrapped in a
request-scoped waitUntil. A maintenance alarm directly awaits
runSlaSweepMaintenance, which collects each publish promise into its
pendingSends and awaits the terminal Promise.all. Undefined means no live
escalation fan-out.
maintenancePrincipal(systemPrincipalId). Typed as merely automated, not
vouched: the sweep derives no authority from the principal (the
deployment store is supplied only by the host), so demanding the trust
brand here would ask for a token nothing on this path reads.
The maintenance duty name, used only for log correlation.
Infrastructure-verified deployment tag for audit attribution.