OptionalattributeOptionalauditEvery ingest is audited through this (accepted + rejected). Absent ⇒ no audit (wire one).
OptionalbaseRoute prefix. Default '/api/threads'.
OptionalmaxMax ingest payload size in bytes. Must be a nonnegative safe integer; zero denies every non-empty body. Default 16384 (16 KiB).
OptionalratePer-tenant rate cap. Absent ⇒ unmetered.
Authenticate, validate the tenant ID, and bind it; undefined means 401.
OptionalrolesWho may signal. Default RUN_START_ROLES (operator/admin) — reviewers/viewers are read-only.
The sanctioned reach into a thread DO — stamps the tenant header, 404s a foreign threadId.
The attribute KEYS a signal body may carry. When set, an attributes object naming any key outside it is 400'd (defense-in-depth over core's own name validation). Absent ⇒ attributes pass through (the host opted out).