@intentius/chant-lexicon-fly 0.102.0 → 0.104.0

package/dist/codegen/docs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"docs.d.ts","sourceRoot":"","sources":["../../src/codegen/docs.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAiB5D;AA0ED;;GAEG;AACH,wBAAsB,YAAY,CAAC,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBjF"}
+{"version":3,"file":"docs.d.ts","sourceRoot":"","sources":["../../src/codegen/docs.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAQH;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAiB5D;AA0FD;;GAEG;AACH,wBAAsB,YAAY,CAAC,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBjF"}

package/dist/components/fly-release.d.ts

@@ -18,7 +18,10 @@
  *    `APP_REVISION` env var (#2834, as chud's fly-site.mjs set it), so the
  *    app's own `/health` can report it. A caller's `env.APP_REVISION`
  *    overrides it. `fly-rollback` restores it for free: it puts back the
- *    whole recorded config, env included;
+ *    whole recorded config, env included. A Machine the build stamped with
+ *    telemetry attribution (#3060) also gets the release's `service.version`
+ *    and `vcs.ref.head.revision` in its `OTEL_RESOURCE_ATTRIBUTES` (#3061,
+ *    ws-081; see {@link releaseResourceAttributes});
  * 2. migrate: each migration runs inside the Machine once per environment,
  *    witnessed by a receipt in chant's lifecycle receipt store
  *    (`@intentius/chant/op/lifecycle-receipt-store`), then the Machine restarts
@@ -45,6 +48,7 @@ import type { ReceiptStore, EffectReceiptRef } from "@intentius/chant/op/receipt
 import { type MachineFile, type MachineRelease } from "../op/activities/machine-release.js";
 import { type FlyHttp, type WaitOpts } from "../op/activities/fly-apply.js";
 import type { MachineConfigStore } from "../release-store.js";
+import { type ReleaseIdentity } from "@intentius/chant/telemetry-attribution";
 /** One migration, run inside the Machine once per environment. */
 export interface FlyMigration {
     /** Its name: the receipt is named after it, so a name fires once. */
@@ -179,6 +183,18 @@ export declare function migrationReceipt(app: string, migration: FlyMigration):
     ref: EffectReceiptRef;
     expectation: string;
 };
+/**
+ * A stamped Machine's `OTEL_RESOURCE_ATTRIBUTES` with the release's attributes
+ * (#3061, ws-081), or undefined when the build did not stamp it (no
+ * `chant.decl` key) or the release knows neither attribute.
+ *
+ * A Machine's env values are literal, so the deploy writes the full value in
+ * place of a `CHANT_RELEASE_ATTRIBUTES` reference the platform would expand.
+ * The release's keys replace the same keys in the declared value, as the
+ * suffix appended last does on Compose and Kubernetes: a digest-pinned image
+ * gave the build a `service.version`, and the release may run another image.
+ */
+export declare function releaseResourceAttributes(declared: unknown, release: ReleaseIdentity): string | undefined;
 /** Build the `fly-release` capability. */
 export declare function createFlyReleaseCapability(deps?: FlyReleaseDeps): Capability<FlyReleaseInput, FlyReleaseOutput>;
 /** Build the `fly-rollback` capability. */

package/dist/components/fly-release.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fly-release.d.ts","sourceRoot":"","sources":["../../src/components/fly-release.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACxF,OAAO,EAUL,KAAK,WAAW,EAChB,KAAK,cAAc,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAA8C,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AACrH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAG3D,kEAAkE;AAClE,MAAM,WAAW,YAAY;IAC3B,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC3B,4HAA4H;IAC5H,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,mDAAmD;AACnD,MAAM,WAAW,SAAS;IACxB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6FAA6F;IAC7F,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;CAC1B;AAED,8GAA8G;AAC9G,eAAO,MAAM,kBAAkB,QAAc,CAAC;AAkB9C,kGAAkG;AAClG,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAW5G;AAID,6CAA6C;AAC7C,MAAM,WAAW,SAAS;IACxB,2FAA2F;IAC3F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kHAAkH;IAClH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,4BAA4B;IAC5B,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,+DAA+D;IAC/D,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,yEAAyE;IACzE,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,qDAAqD;IACrD,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACrD;AAED,gGAAgG;AAChG,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uFAAuF;IACvF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;;;OAKG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,+BAA+B;IAC/B,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;CACjC;AAED,oGAAoG;AACpG,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,gGAAgG;IAChG,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACvF,qFAAqF;IACrF,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC5E,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAmBD,qDAAqD;AACrD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,GAAG;IAAE,GAAG,EAAE,gBAAgB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAMrH;AASD,0CAA0C;AAC1C,wBAAgB,0BAA0B,CAAC,IAAI,GAAE,cAAmB,GAAG,UAAU,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAsHnH;AAED,2CAA2C;AAC3C,wBAAgB,2BAA2B,CAAC,IAAI,GAAE,cAAmB,GAAG,UAAU,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CA4DtH;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAWrH;AAED,4CAA4C;AAC5C,eAAO,MAAM,oBAAoB,+CAA+B,CAAC;AACjE,6CAA6C;AAC7C,eAAO,MAAM,qBAAqB,iDAAgC,CAAC"}
+{"version":3,"file":"fly-release.d.ts","sourceRoot":"","sources":["../../src/components/fly-release.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAGH,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,wCAAwC,CAAC;AACxF,OAAO,KAAK,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AACxF,OAAO,EAUL,KAAK,WAAW,EAChB,KAAK,cAAc,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAA8C,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAE,MAAM,4BAA4B,CAAC;AACrH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,OAAO,EAA2B,KAAK,eAAe,EAAE,MAAM,wCAAwC,CAAC;AAEvG,kEAAkE;AAClE,MAAM,WAAW,YAAY;IAC3B,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC3B,4HAA4H;IAC5H,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,mDAAmD;AACnD,MAAM,WAAW,SAAS;IACxB,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6FAA6F;IAC7F,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;CAC1B;AAED,8GAA8G;AAC9G,eAAO,MAAM,kBAAkB,QAAc,CAAC;AAkB9C,kGAAkG;AAClG,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC,CAW5G;AAID,6CAA6C;AAC7C,MAAM,WAAW,SAAS;IACxB,2FAA2F;IAC3F,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,yBAAyB;IACzB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,eAAe;IAC9B,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qCAAqC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kHAAkH;IAClH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;;;;;OAKG;IACH,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,4BAA4B;IAC5B,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5B,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,WAAW,gBAAgB;IAC/B,+DAA+D;IAC/D,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,yEAAyE;IACzE,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,qDAAqD;IACrD,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;CACrD;AAED,gGAAgG;AAChG,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAEzD,MAAM,WAAW,gBAAgB;IAC/B,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uFAAuF;IACvF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ;;;;;OAKG;IACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,+BAA+B;IAC/B,QAAQ,EAAE,cAAc,GAAG,IAAI,CAAC;CACjC;AAED,oGAAoG;AACpG,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,gGAAgG;IAChG,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACvF,qFAAqF;IACrF,YAAY,CAAC,EAAE,CAAC,GAAG,EAAE,aAAa,KAAK,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC5E,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACnC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAmBD,qDAAqD;AACrD,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,GAAG;IAAE,GAAG,EAAE,gBAAgB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAMrH;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CASzG;AASD,0CAA0C;AAC1C,wBAAgB,0BAA0B,CAAC,IAAI,GAAE,cAAmB,GAAG,UAAU,CAAC,eAAe,EAAE,gBAAgB,CAAC,CA8HnH;AAED,2CAA2C;AAC3C,wBAAgB,2BAA2B,CAAC,IAAI,GAAE,cAAmB,GAAG,UAAU,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CA4DtH;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAWrH;AAED,4CAA4C;AAC5C,eAAO,MAAM,oBAAoB,+CAA+B,CAAC;AACjE,6CAA6C;AAC7C,eAAO,MAAM,qBAAqB,iDAAgC,CAAC"}

package/dist/integrity.json

@@ -1,7 +1,7 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "363a62d02554474befdfdd8a165f45bc7395ec35d65658ff129b3c4187c66b97",
+    "manifest.json": "ef9f817ff0937f9a6c5c361f2c5e576dfc98ba16aa041c931c19dc8bfa54f03d",
     "meta.json": "273f2a523b66f08ca91642dba2592c44765ab59ddf7329998884a0b08c6c3f24",
     "types/index.d.ts": "2f01714e1aa5f5695d68416e143f281584efb84457138c93825fea34e2f3fa0a",
     "rules/guest-sizing.ts": "bc749d218df8f3cc3d8fbe388205ae96e6b204ae0d6d77e8bf82cb936cc53ff6",
@@ -15,5 +15,5 @@
     "skills/chant-fly-ops.md": "44102f1fdf611b9262c04457258990e44026e83f9e5b19ae86b69322f3a37620",
     "skills/chant-fly-sprites.md": "3d100680422151b58d082c3a7b30a286edfc52faa4887995c9ad5553873bab95"
   },
-  "composite": "08ed005777ae230eeefed6862869eb086998f0fe7b40808a0457532bffc5342b"
+  "composite": "ef6351e922f997eed3658b3bb4b94d06ee4af897d6bc2445ff0b110f73a9179e"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "fly",
-  "version": "0.102.0",
+  "version": "0.104.0",
   "chantVersion": ">=0.1.0",
   "namespace": "Fly"
 }

package/dist/serializer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"serializer.d.ts","sourceRoot":"","sources":["../src/serializer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAoB,MAAM,6BAA6B,CAAC;AAwHhF;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,UAiJ3B,CAAC"}
+{"version":3,"file":"serializer.d.ts","sourceRoot":"","sources":["../src/serializer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAoB,MAAM,6BAA6B,CAAC;AA0JhF;;GAEG;AACH,eAAO,MAAM,aAAa,EAAE,UAwJ3B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-fly",
-  "version": "0.102.0",
+  "version": "0.104.0",
   "type": "module",
   "files": [
     "src/",
@@ -69,7 +69,7 @@
     "zod": "^4.3.6"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.102.0",
+    "@intentius/chant": "^0.104.0",
     "typescript": "^5.9.3",
     "zod": "^4.3.6"
   },

package/src/codegen/docs.ts

@@ -90,6 +90,22 @@ Each declared resource becomes a single flaps request keyed by its logical name:
 
 Every serialized machine carries the \`managed-by: chant\` ownership marker in \`config.metadata\`, which the owned-only prune reads back.
 
+## Telemetry attribution
+
+Inside a workspace, the fly lexicon adds two variables to each Machine's \`config.env\`, so that its spans name the declaration that produced them ([#3060](https://github.com/INTENTIUS/chant/issues/3060), [ws-060](https://github.com/INTENTIUS/chant/blob/main/docs/design/decisions/ws-060-telemetry-attribution.md)).
+
+\`\`\`json
+"env": {
+  "PORT": "8080",
+  "OTEL_SERVICE_NAME": "notes",
+  "OTEL_RESOURCE_ATTRIBUTES": "chant.workspace=acme,chant.member=svc,chant.decl=web"
+}
+\`\`\`
+
+\`OTEL_SERVICE_NAME\` is the name of the Machine's app on Fly, or the Machine's export name when the build can't tell which app owns it. \`chant.decl\` is the Machine's export name. \`deployment.environment.name\` is added when the build has an environment (\`--env\` or \`ownership.env\`), and an image pinned by digest adds \`service.version\`. A value the Machine already sets is kept, and only the missing attributes are added. An \`App\` has no env, so only Machines are stamped. A project with no \`chant.workspace.json\` builds the same plan as before unless \`telemetry.attribution: true\` opts it in, and \`telemetry.attribution: false\` turns stamping off inside a workspace.
+
+A Machine's env values are literal strings, so the plan carries no reference to \`CHANT_RELEASE_ATTRIBUTES\` ([ws-081](https://github.com/INTENTIUS/chant/blob/main/docs/design/decisions/ws-081-release-attributes-at-deploy.md)). The \`fly-release\` step writes the release into the Machine it serves instead: on a stamped Machine, \`OTEL_RESOURCE_ATTRIBUTES\` gets \`service.version\` (the release's digest) and \`vcs.ref.head.revision\` (its commit), the same release its metadata names. A plain apply of the plan carries no release.
+
 ## Applying
 
 The output is applied against flaps directly (or the mudflaps emulator offline). Endpoint and auth come from \`FLY_FLAPS_BASE_URL\` and \`FLY_API_TOKEN\`.

package/src/components/fly-release.test.ts

@@ -128,6 +128,42 @@ describe("fly-release", () => {
     expect((m.config.env as Record<string, string>).APP_REVISION).toBe("aaaaaaa");
   });
 
+  /** The plan with a Machine the build stamped with telemetry attribution (#3060). */
+  function stampedPlan(attributes: string) {
+    const web = PLAN.web;
+    writeFileSync(
+      planPath,
+      JSON.stringify({
+        ...PLAN,
+        web: { ...web, body: { ...web.body, config: { ...web.body.config, env: { PORT: "8080", OTEL_SERVICE_NAME: "shop", OTEL_RESOURCE_ATTRIBUTES: attributes } } } },
+      }),
+    );
+  }
+
+  test("a stamped Machine's resource attributes name the release's digest and commit (#3061, ws-081)", async () => {
+    stampedPlan("chant.workspace=acme,chant.decl=web,service.version=sha256%3Aold");
+    const s = setup();
+    await s.release.run(CTX, input("sha256:aaaaaaaaaaaa"));
+    const env = s.fake.machine("shop", "web")!.config.env as Record<string, string>;
+    expect(env.OTEL_RESOURCE_ATTRIBUTES).toBe("chant.workspace=acme,chant.decl=web,service.version=sha256%3Aaaaaaaaaaaaa,vcs.ref.head.revision=aaaaaaa");
+    expect(env.PORT).toBe("8080");
+    // A rollback puts back the attributes of the release it restores.
+    await s.release.run(CTX, input("sha256:bbbbbbbbbbbb"));
+    await s.rollback.run(CTX, { plan: planPath, endpoint: ENDPOINT, wait: NO_WAIT, verify: { intervalMs: 1, timeoutMs: 20 } });
+    expect((s.fake.machine("shop", "web")!.config.env as Record<string, string>).OTEL_RESOURCE_ATTRIBUTES).toContain("service.version=sha256%3Aaaaaaaaaaaaa");
+  });
+
+  test("a Machine the build did not stamp, or a caller's own value, gets no release attributes", async () => {
+    stampedPlan("team=core");
+    const s = setup();
+    await s.release.run(CTX, input("sha256:aaaaaaaaaaaa"));
+    expect((s.fake.machine("shop", "web")!.config.env as Record<string, string>).OTEL_RESOURCE_ATTRIBUTES).toBe("team=core");
+
+    stampedPlan("chant.decl=web");
+    await s.release.run(CTX, input("sha256:bbbbbbbbbbbb", { env: { OTEL_RESOURCE_ATTRIBUTES: "mine=1" } }));
+    expect((s.fake.machine("shop", "web")!.config.env as Record<string, string>).OTEL_RESOURCE_ATTRIBUTES).toBe("mine=1");
+  });
+
   test("each migration fires once per environment, then the Machine restarts", async () => {
     const s = setup();
     const migrations = [

package/src/components/fly-release.ts

@@ -18,7 +18,10 @@
  *    `APP_REVISION` env var (#2834, as chud's fly-site.mjs set it), so the
  *    app's own `/health` can report it. A caller's `env.APP_REVISION`
  *    overrides it. `fly-rollback` restores it for free: it puts back the
- *    whole recorded config, env included;
+ *    whole recorded config, env included. A Machine the build stamped with
+ *    telemetry attribution (#3060) also gets the release's `service.version`
+ *    and `vcs.ref.head.revision` in its `OTEL_RESOURCE_ATTRIBUTES` (#3061,
+ *    ws-081; see {@link releaseResourceAttributes});
  * 2. migrate: each migration runs inside the Machine once per environment,
  *    witnessed by a receipt in chant's lifecycle receipt store
  *    (`@intentius/chant/op/lifecycle-receipt-store`), then the Machine restarts
@@ -60,6 +63,7 @@ import {
 import { defaultFlyHttp, parsePlan, resolveEndpoint, type FlyHttp, type WaitOpts } from "../op/activities/fly-apply";
 import type { MachineConfigStore } from "../release-store";
 import { readFileSync } from "node:fs";
+import { releaseAttributesSuffix, type ReleaseIdentity } from "@intentius/chant/telemetry-attribution";
 
 /** One migration, run inside the Machine once per environment. */
 export interface FlyMigration {
@@ -244,6 +248,28 @@ export function migrationReceipt(app: string, migration: FlyMigration): { ref: E
   };
 }
 
+/**
+ * A stamped Machine's `OTEL_RESOURCE_ATTRIBUTES` with the release's attributes
+ * (#3061, ws-081), or undefined when the build did not stamp it (no
+ * `chant.decl` key) or the release knows neither attribute.
+ *
+ * A Machine's env values are literal, so the deploy writes the full value in
+ * place of a `CHANT_RELEASE_ATTRIBUTES` reference the platform would expand.
+ * The release's keys replace the same keys in the declared value, as the
+ * suffix appended last does on Compose and Kubernetes: a digest-pinned image
+ * gave the build a `service.version`, and the release may run another image.
+ */
+export function releaseResourceAttributes(declared: unknown, release: ReleaseIdentity): string | undefined {
+  if (typeof declared !== "string") return undefined;
+  const pairs = declared.split(",").filter((kv) => kv !== "");
+  const key = (kv: string) => kv.split("=")[0]!.trim();
+  if (!pairs.some((kv) => key(kv) === "chant.decl")) return undefined;
+  const added = releaseAttributesSuffix(release).split(",").filter((kv) => kv !== "");
+  if (added.length === 0) return undefined;
+  const replaced = new Set(added.map(key));
+  return [...pairs.filter((kv) => !replaced.has(key(kv))), ...added].join(",");
+}
+
 function loadTarget(planPath: string, machine?: string) {
   const plan = parsePlan(readFileSync(planPath, "utf8"));
   return { plan, target: releaseTarget(plan, machine) };
@@ -280,7 +306,7 @@ export function createFlyReleaseCapability(deps: FlyReleaseDeps = {}): Capabilit
     async run(ctx, input) {
       if (!input.digest) throw new Error("fly-release: a release needs its digest");
       const http = httpFor();
-      const { plan } = loadTarget(input.plan, input.machine);
+      const { plan, target } = loadTarget(input.plan, input.machine);
       const gitSha = input.gitSha ?? (await (deps.headCommit ?? defaultHeadCommit)());
       const configs = await (deps.configStore ?? defaultConfigStore)(ctx);
       // The tree is checked against its digest before the Machine changes.
@@ -289,7 +315,15 @@ export function createFlyReleaseCapability(deps: FlyReleaseDeps = {}): Capabilit
       // APP_REVISION carries the commit into the Machine's env, as chud's
       // fly-site.mjs did (chant#2834), so the app's own /health can report
       // it. A caller's own APP_REVISION (input.env) wins over the commit.
-      const env = { APP_REVISION: gitSha, ...(input.env ?? {}) };
+      // A stamped Machine's resource attributes name the same release as its
+      // metadata (#3061, ws-081), unless the caller sets its own.
+      const declaredEnv = (target.request.body.config as { env?: Record<string, unknown> } | undefined)?.env;
+      const attributes = releaseResourceAttributes(declaredEnv?.OTEL_RESOURCE_ATTRIBUTES, { version: input.digest, revision: gitSha });
+      const env = {
+        APP_REVISION: gitSha,
+        ...(attributes !== undefined ? { OTEL_RESOURCE_ATTRIBUTES: attributes } : {}),
+        ...(input.env ?? {}),
+      };
 
       const released = await flyMachineRelease(
         {

package/src/serializer-telemetry.test.ts

@@ -0,0 +1,80 @@
+/**
+ * Telemetry attribution in the fly serializer (#3060): each Machine's
+ * `config.env` gets `OTEL_SERVICE_NAME` and `OTEL_RESOURCE_ATTRIBUTES` when the
+ * build hands it `context.telemetry`, and nothing changes without it.
+ */
+import { describe, expect, it } from "vitest";
+import type { Declarable } from "@intentius/chant";
+import { flySerializer } from "./serializer";
+import { App, Machine, MachineConfig } from "./generated/index";
+
+const telemetry = { workspace: "acme", member: "svc", environment: "prod" };
+
+function stack(...entries: Array<[string, unknown]>): Map<string, Declarable> {
+  return new Map(entries as Array<[string, Declarable]>);
+}
+
+const site = (config: Record<string, unknown>) =>
+  stack(["app", new App({ name: "notes", org_slug: "acme" })], ["web", new Machine({ name: "web", config: new MachineConfig(config) })]);
+
+const build = (entities: Map<string, Declarable>, withTelemetry = true) =>
+  JSON.parse(flySerializer.serialize(entities, undefined, withTelemetry ? { telemetry } : undefined) as string);
+
+describe("fly telemetry attribution (#3060)", () => {
+  it("stamps each Machine with the app's name and the Machine's declaration id", () => {
+    const out = build(site({ image: "node:22-slim", env: { PORT: "8080" } }));
+    expect(out.web.body.config.env).toEqual({
+      PORT: "8080",
+      OTEL_SERVICE_NAME: "notes",
+      OTEL_RESOURCE_ATTRIBUTES: "chant.workspace=acme,chant.member=svc,chant.decl=web,deployment.environment.name=prod",
+    });
+    // The App's create body has no env.
+    expect(out.app.body).toEqual({ app_name: "notes", org_slug: "acme" });
+  });
+
+  it("adds an env to a Machine that declares none", () => {
+    const out = build(site({ image: "node:22-slim" }));
+    expect(out.web.body.config.env.OTEL_SERVICE_NAME).toBe("notes");
+  });
+
+  it("keeps the values a Machine sets and appends the missing attributes", () => {
+    const out = build(
+      site({
+        image: "node:22-slim",
+        env: { OTEL_SERVICE_NAME: "notes-web", OTEL_RESOURCE_ATTRIBUTES: "chant.member=team-a,team=core" },
+      }),
+    );
+    expect(out.web.body.config.env).toEqual({
+      OTEL_SERVICE_NAME: "notes-web",
+      OTEL_RESOURCE_ATTRIBUTES: "chant.member=team-a,team=core,chant.workspace=acme,chant.decl=web,deployment.environment.name=prod",
+    });
+  });
+
+  it("gives service.version from an image pinned by digest", () => {
+    const digest = "sha256:" + "a".repeat(64);
+    const out = build(site({ image: `registry.fly.io/notes@${digest}` }));
+    expect(out.web.body.config.env.OTEL_RESOURCE_ATTRIBUTES).toBe(
+      `chant.workspace=acme,chant.member=svc,chant.decl=web,deployment.environment.name=prod,service.version=${encodeURIComponent(digest)}`,
+    );
+  });
+
+  it("names the Machine's app when the stack has several, and falls back to the export name when none is resolved", () => {
+    const out = build(
+      stack(
+        ["a", new App({ name: "alpha" })],
+        ["b", new App({ name: "beta" })],
+        ["worker", new Machine({ app: "beta", config: new MachineConfig({ image: "x" }) })],
+        ["loose", new Machine({ config: new MachineConfig({ image: "x" }) })],
+      ),
+    );
+    expect(out.worker.body.config.env.OTEL_SERVICE_NAME).toBe("beta");
+    expect(out.loose.body.config.env.OTEL_SERVICE_NAME).toBe("loose");
+  });
+
+  it("writes the same bytes as before without context.telemetry", () => {
+    const entities = site({ image: "node:22-slim", env: { PORT: "8080" } });
+    const plain = flySerializer.serialize(entities) as string;
+    expect(plain).not.toContain("OTEL_");
+    expect(flySerializer.serialize(entities, undefined, {})).toBe(plain);
+  });
+});

package/src/serializer.ts

@@ -36,6 +36,7 @@ import type { LexiconOutput } from "@intentius/chant/lexicon-output";
 import { ownershipEntries, OWNERSHIP_MANAGED_BY_VALUE } from "@intentius/chant/ownership";
 import { walkValue, type SerializerVisitor } from "@intentius/chant/serializer-walker";
 import { INTRINSIC_MARKER } from "@intentius/chant/intrinsic";
+import { mergeResourceAttributes, telemetryEnvironment, type TelemetryAttribution } from "@intentius/chant/telemetry-attribution";
 import { FLY_METADATA_OWNERSHIP_KEYS } from "./ownership";
 
 const APP_ENTITY_TYPE = "Fly::Machines::App";
@@ -151,6 +152,39 @@ function appName(entity: Declarable, entityName: string): string {
   return typeof name === "string" ? name : entityName;
 }
 
+// ── Telemetry attribution (#3060, D22) ────────────────────────────
+
+/** The digest of an image reference pinned with `@sha256:...`, or undefined. */
+function imageDigest(image: unknown): string | undefined {
+  if (typeof image !== "string") return undefined;
+  const at = image.lastIndexOf("@");
+  return at === -1 ? undefined : image.slice(at + 1);
+}
+
+/**
+ * Stamp one Machine's attributes as `OTEL_SERVICE_NAME` and
+ * `OTEL_RESOURCE_ATTRIBUTES` in its `config.env`, the env the Machine's
+ * process gets. `service` is the owning app's name on Fly, `decl` the
+ * Machine's declaration id. A value the Machine already sets is kept: its own
+ * `OTEL_SERVICE_NAME` wins, and its own resource attributes keep their keys
+ * while the missing ones are appended.
+ *
+ * Machine env values are literal strings, so there is no reference to the
+ * release attributes here: `fly-release` writes them into the value it
+ * deploys (#3061, ws-081).
+ */
+function stampTelemetry(config: Record<string, unknown>, service: string, decl: string, telemetry: TelemetryAttribution): void {
+  const version = imageDigest(config.image);
+  const vars = telemetryEnvironment(telemetry, { service, decl, ...(version ? { version } : {}) });
+  const env: Record<string, unknown> =
+    config.env && typeof config.env === "object" && !Array.isArray(config.env) ? { ...(config.env as Record<string, unknown>) } : {};
+  if (!("OTEL_SERVICE_NAME" in env)) env.OTEL_SERVICE_NAME = vars.OTEL_SERVICE_NAME;
+  const own = env.OTEL_RESOURCE_ATTRIBUTES;
+  if (own === undefined) env.OTEL_RESOURCE_ATTRIBUTES = vars.OTEL_RESOURCE_ATTRIBUTES;
+  else if (typeof own === "string") env.OTEL_RESOURCE_ATTRIBUTES = mergeResourceAttributes(own, vars.OTEL_RESOURCE_ATTRIBUTES);
+  config.env = env;
+}
+
 /**
  * fly flaps serializer.
  */
@@ -242,8 +276,15 @@ export const flySerializer: Serializer = {
         }
         body.config = config;
 
+        // Telemetry attribution (#3060): service.name is the app's name on
+        // Fly, or the Machine's export name when no app is resolved.
+        const owningApp = resolveOwningApp(entity);
+        if (context?.telemetry) {
+          stampTelemetry(config, owningApp === "{app}" ? name : owningApp, name, context.telemetry);
+        }
+
         requests[name] = {
-          endpoint: `/v1/apps/${resolveOwningApp(entity)}/machines`,
+          endpoint: `/v1/apps/${owningApp}/machines`,
           method: "POST",
           body,
         };

package/src/telemetry-build.test.ts

@@ -0,0 +1,75 @@
+/**
+ * Telemetry attribution through a real fly build (#3060): inside a workspace
+ * each Machine's env names the workspace and the member,
+ * `telemetry.attribution: false` turns that off, and outside a workspace
+ * nothing is stamped unless `telemetry.attribution: true` opts in.
+ */
+import { afterAll, describe, expect, test } from "vitest";
+import { mkdirSync, mkdtempSync, readFileSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { buildCommand } from "@intentius/chant/cli/commands/build";
+import { loadPlugins, resolveProjectLexicons } from "@intentius/chant/cli";
+
+const repoRoot = resolve(dirname(fileURLToPath(import.meta.url)), "../../..");
+const made: string[] = [];
+afterAll(() => {
+  for (const dir of made) rmSync(dir, { recursive: true, force: true });
+});
+
+const APP = `import { App, Machine, MachineConfig } from "@intentius/chant-lexicon-fly";
+
+export const app = new App({ name: "notes", org_slug: "acme" });
+
+export const web = new Machine({
+  name: "web",
+  region: "iad",
+  config: new MachineConfig({ image: "node:22-slim", env: { PORT: "8080" } }),
+});
+`;
+
+/** A fly project, inside a one-member workspace or on its own, built to its flaps plan. */
+async function build(options: { workspace: boolean; attribution?: boolean }): Promise<Record<string, { body: { config?: { env?: Record<string, string> } } }>> {
+  const root = mkdtempSync(join(tmpdir(), "chant-3060-"));
+  made.push(root);
+  mkdirSync(join(root, ".git"));
+  const project = options.workspace ? join(root, "svc") : root;
+  mkdirSync(join(project, "src"), { recursive: true });
+  if (options.workspace) {
+    writeFileSync(
+      join(root, "chant.workspace.json"),
+      JSON.stringify({ name: "acme", schema: 1, members: [{ name: "svc", dir: "svc", kind: "chant" }] }, null, 2),
+    );
+  }
+  const telemetry = options.attribution === undefined ? "" : `  telemetry: { attribution: ${options.attribution} },\n`;
+  writeFileSync(join(project, "chant.config.ts"), `export default {\n  lexicons: ["fly"],\n${telemetry}};\n`);
+  writeFileSync(join(project, "src", "app.ts"), APP);
+  symlinkSync(join(repoRoot, "node_modules"), join(project, "node_modules"), "dir");
+
+  const src = join(project, "src");
+  const plugins = await loadPlugins(await resolveProjectLexicons(src));
+  const serializers = plugins.map((p) => p.serializer).filter((s) => s.name === "fly");
+  const output = join(project, "fly.json");
+  const result = await buildCommand({ path: src, output, format: "json", serializers, plugins });
+  expect(result.success, result.errors.join("\n")).toBe(true);
+  return JSON.parse(readFileSync(output, "utf-8"));
+}
+
+describe("telemetry attribution in a fly build (#3060)", () => {
+  test("inside a workspace the Machine names the workspace, the member and the declaration", async () => {
+    const env = (await build({ workspace: true })).web.body.config!.env!;
+    expect(env.OTEL_SERVICE_NAME).toBe("notes");
+    expect(env.OTEL_RESOURCE_ATTRIBUTES).toBe("chant.workspace=acme,chant.member=svc,chant.decl=web");
+  });
+
+  test("telemetry.attribution false turns it off inside a workspace", async () => {
+    expect(JSON.stringify(await build({ workspace: true, attribution: false }))).not.toContain("OTEL_");
+  });
+
+  test("outside a workspace nothing is stamped, and telemetry.attribution true opts in without workspace or member", async () => {
+    expect(JSON.stringify(await build({ workspace: false }))).not.toContain("OTEL_");
+    const env = (await build({ workspace: false, attribution: true })).web.body.config!.env!;
+    expect(env.OTEL_RESOURCE_ATTRIBUTES).toBe("chant.decl=web");
+  });
+});