@intentius/chant-lexicon-fly 0.124.63 → 0.124.64

package/dist/op/activities/machine-release.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"machine-release.d.ts","sourceRoot":"","sources":["../../../src/op/activities/machine-release.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAaL,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,OAAO,EACZ,KAAK,OAAO,EACZ,KAAK,QAAQ,EACd,MAAM,aAAa,CAAC;AAGrB,OAAO,EAA2C,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE1H,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACxG,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,uDAAuD;AACvD,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,aAAa,CAoB5E;AAID,gGAAgG;AAChG,wBAAsB,WAAW,CAC/B,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAGnC;AAWD,6DAA6D;AAC7D,MAAM,WAAW,WAAW;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,MAAM,WAAW,qBAAsB,SAAQ,WAAW;IACxD,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,OAAO,EAAE,cAAc,CAAC;IACxB,oGAAoG;IACpG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;;;;OAIG;IACH,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IACtB,sGAAsG;IACtG,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,yEAAyE;AACzE,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,yCAAyC;IACzC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,0CAA0C;IAC1C,OAAO,EAAE,cAAc,CAAC;IACxB,mFAAmF;IACnF,MAAM,EAAE,aAAa,CAAC;IACtB,qGAAqG;IACrG,QAAQ,EAAE;QAAE,OAAO,CAAC,EAAE,cAAc,CAAC;QAAC,MAAM,EAAE,aAAa,CAAA;KAAE,GAAG,IAAI,CAAC;CACtE;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,OAAoC,GACzC,OAAO,CAAC,uBAAuB,CAAC,CA2ClC;AASD,MAAM,WAAW,kBAAmB,SAAQ,WAAW;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC3B,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,kBAAkB,EACxB,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,OAAoC,GACzC,OAAO,CAAC,oBAAoB,CAAC,CAkB/B;AAID,MAAM,WAAW,mBAAoB,SAAQ,WAAW;IACtD,GAAG,EAAE,MAAM,CAAC;IACZ,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAoBD,gHAAgH;AAChH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,mBAAmB,EACzB,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,OAAoC,GACzC,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAExC;AAED,kHAAkH;AAClH,wBAAsB,cAAc,CAClC,IAAI,EAAE,mBAAmB,EACzB,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,OAAoC,GACzC,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAExC;AAID,MAAM,WAAW,oBAAqB,SAAQ,WAAW;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,oBAAoB,EAC1B,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,OAAoC,EAC1C,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC,CAoClD;AAID,MAAM,WAAW,qBAAsB,SAAQ,WAAW;IACxD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,iGAAiG;IACjG,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,OAAoC,GACzC,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,cAAc,CAAA;CAAE,CAAC,CAgBnD"}
+{"version":3,"file":"machine-release.d.ts","sourceRoot":"","sources":["../../../src/op/activities/machine-release.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAeL,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,YAAY,EACjB,KAAK,OAAO,EACZ,KAAK,OAAO,EACZ,KAAK,QAAQ,EACd,MAAM,aAAa,CAAC;AAGrB,OAAO,EAA2C,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE1H,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AACxG,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,uDAAuD;AACvD,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,oEAAoE;IACpE,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;CACvB;AAED,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,aAAa,EAAE,CAW3D;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,aAAa,CAW5E;AAID,gGAAgG;AAChG,wBAAsB,WAAW,CAC/B,GAAG,EAAE,QAAQ,EACb,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,OAAO,EACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAGnC;AAWD,6DAA6D;AAC7D,MAAM,WAAW,WAAW;IAC1B,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,MAAM,WAAW,qBAAsB,SAAQ,WAAW;IACxD,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,OAAO,EAAE,cAAc,CAAC;IACxB,oGAAoG;IACpG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B;;;;OAIG;IACH,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IACtB,sGAAsG;IACtG,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACxB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED,yEAAyE;AACzE,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACtC,yCAAyC;IACzC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;IACvC,0CAA0C;IAC1C,OAAO,EAAE,cAAc,CAAC;IACxB,mFAAmF;IACnF,MAAM,EAAE,aAAa,CAAC;IACtB,qGAAqG;IACrG,QAAQ,EAAE;QAAE,OAAO,CAAC,EAAE,cAAc,CAAC;QAAC,MAAM,EAAE,aAAa,CAAA;KAAE,GAAG,IAAI,CAAC;IACrE,yGAAyG;IACzG,UAAU,EAAE,OAAO,CAAC;IACpB;;;OAGG;IACH,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,CAAC;QAAC,UAAU,EAAE,OAAO,CAAC;QAAC,QAAQ,EAAE,aAAa,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;CAC3I;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,OAAoC,GACzC,OAAO,CAAC,uBAAuB,CAAC,CA4ElC;AASD,MAAM,WAAW,kBAAmB,SAAQ,WAAW;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IAC3B,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,IAAI,EAAE,kBAAkB,EACxB,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,OAAoC,GACzC,OAAO,CAAC,oBAAoB,CAAC,CAkB/B;AAID,MAAM,WAAW,mBAAoB,SAAQ,WAAW;IACtD,GAAG,EAAE,MAAM,CAAC;IACZ,gCAAgC;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAoBD,gHAAgH;AAChH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,mBAAmB,EACzB,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,OAAoC,GACzC,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAExC;AAED,kHAAkH;AAClH,wBAAsB,cAAc,CAClC,IAAI,EAAE,mBAAmB,EACzB,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,OAAoC,GACzC,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAExC;AAID,MAAM,WAAW,oBAAqB,SAAQ,WAAW;IACvD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sCAAsC;IACtC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,oBAAoB,EAC1B,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,OAAoC,EAC1C,SAAS,GAAE,OAAO,KAAa,GAC9B,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC,CAsClD;AAID,MAAM,WAAW,qBAAsB,SAAQ,WAAW;IACxD,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,iGAAiG;IACjG,MAAM,EAAE,aAAa,CAAC;IACtB,IAAI,CAAC,EAAE,QAAQ,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,qBAAqB,EAC3B,MAAM,CAAC,EAAE,WAAW,EACpB,IAAI,GAAE,OAAoC,GACzC,OAAO,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,cAAc,CAAA;CAAE,CAAC,CAmBnD"}

package/dist/op/activities/machine-release.js

@@ -16,7 +16,10 @@
  *
  * - {@link flyMachineRelease}: upload and start. Apply the declared plan with
  *   the Machine serving the release (its image or env overridden when the
- *   release says so), and report the release and config it replaced.
+ *   release says so), and report the release and config it replaced. A
+ *   scheduled Machine (`config.schedule`, #4696) is updated without starting:
+ *   it runs on its schedule. The plan's other Machines can take images of
+ *   their own (`images`).
  * - {@link flyMachineExec}: run a command inside the Machine (a migration).
  * - {@link flyMachineRestart}, {@link flyMachineStop}: under a lease, then
  *   wait for the Machine to settle.
@@ -29,33 +32,37 @@
  * (`FLY_FLAPS_BASE_URL`, `FLY_API_TOKEN`), so the same code reaches mudflaps
  * or a real Fly org, and an injectable `http` for tests (./machines-fake.ts).
  */
-import { appNameFromRequest, defaultFlyHttp, flyApply, isAppRequest, isMachineRequest, listMachines, machineAppSegment, resolveApp, resolveEndpoint, waitForMachine, withLease, LEASE_NONCE_HEADER, } from "./fly-apply.js";
+import { appNameFromRequest, defaultFlyHttp, flyApply, isAppRequest, isMachineRequest, listMachines, machineAppSegment, resolveApp, resolveEndpoint, skipsLaunch, waitForMachine, waitForUnlaunched, withLease, LEASE_NONCE_HEADER, } from "./fly-apply.js";
 import { parsePlan } from "./fly-apply.js";
 import { readFileSync } from "node:fs";
 import { readMachineRelease, withReleaseMetadata } from "../../release-metadata.js";
 export { RELEASE_METADATA_KEYS, readMachineRelease, withReleaseMetadata } from "../../release-metadata.js";
-/**
- * The Machine a release targets: the plan's one Machine, or the one `machine`
- * names (an entity name or a Machine name). Pure.
- */
-export function releaseTarget(plan, machine) {
+/** Every Machine the plan declares, with its App resolved. Pure. */
+export function planMachines(plan) {
     const appNames = Object.values(plan).filter(isAppRequest).map(appNameFromRequest);
     const soleApp = appNames.length === 1 ? appNames[0] : undefined;
-    const machines = Object.entries(plan)
+    return Object.entries(plan)
         .filter(([, req]) => isMachineRequest(req))
         .map(([entity, request]) => ({
+        app: resolveApp(machineAppSegment(request.endpoint), soleApp),
         entity,
         request,
         name: typeof request.body.name === "string" && request.body.name ? request.body.name : entity,
     }));
+}
+/**
+ * The Machine a release targets: the plan's one Machine, or the one `machine`
+ * names (an entity name or a Machine name). Pure.
+ */
+export function releaseTarget(plan, machine) {
+    const machines = planMachines(plan);
     const picked = machine ? machines.filter((m) => m.entity === machine || m.name === machine) : machines;
     if (picked.length !== 1) {
         throw new Error(machine
             ? `the fly plan declares no Machine named "${machine}" (declared: ${machines.map((m) => m.entity).join(", ") || "none"})`
             : `the fly plan declares ${machines.length} Machines (${machines.map((m) => m.entity).join(", ")}): name the one that serves the release`);
     }
-    const [m] = picked;
-    return { app: resolveApp(machineAppSegment(m.request.endpoint), soleApp), entity: m.entity, name: m.name, request: m.request };
+    return picked[0];
 }
 const TERMINAL = new Set(["destroyed", "destroying"]);
 /** The live Machine named `name` (or with id `name`) in `app`; undefined when there is none. */
@@ -76,6 +83,11 @@ const machinePath = (ctx, app, id) => `${ctx.base}/v1/apps/${encodeURIComponent(
  * under a lease, so the release serves from here on. A Machine that already
  * serves this release keeps the `previousDigest` it shipped with, so running a
  * release twice never makes it its own predecessor.
+ *
+ * A scheduled Machine (its config has a `schedule`, #4696), the target or
+ * another in the plan, is created or updated with `skip_launch` and left
+ * unstarted: Fly starts it on its schedule. Fly counts the interval from the
+ * update, so each release pushes the next run back by up to one interval.
  */
 export async function flyMachineRelease(args, signal, http = defaultFlyHttp(args.token)) {
     const plan = args.plan ?? parsePlan(readFileSync(requirePlanPath(args.planPath), "utf8"));
@@ -100,16 +112,46 @@ export async function flyMachineRelease(args, signal, http = defaultFlyHttp(args
         ...(cmd ? { init: { ...(declared.init ?? {}), cmd } } : {}),
     }, release);
     const request = { ...target.request, body: { ...target.request.body, config } };
-    const applied = await flyApply({ plan: { ...plan, [target.entity]: request }, endpoint: args.endpoint, token: args.token, wait: args.wait }, signal, http);
-    const action = applied.machines.find((m) => m.app === target.app && m.name === target.name)?.action ?? "noop";
+    // The plan's other Machines, each with its own image when `images` names it.
+    const others = planMachines(plan).filter((m) => m.entity !== target.entity);
+    const images = { ...(args.images ?? {}) };
+    const overrides = {};
+    for (const m of others) {
+        const image = images[m.entity] ?? images[m.name];
+        delete images[m.entity];
+        delete images[m.name];
+        if (image === undefined)
+            continue;
+        const declaredOther = (m.request.body.config ?? {});
+        overrides[m.entity] = { ...m.request, body: { ...m.request.body, config: { ...declaredOther, image } } };
+    }
+    const unknown = Object.keys(images);
+    if (unknown.length > 0) {
+        throw new Error(`images names ${unknown.map((n) => `"${n}"`).join(", ")}, which the fly plan declares as no Machine other than the one that serves (others: ${others.map((m) => m.entity).join(", ") || "none"}); the serving Machine's image is \`image\``);
+    }
+    const before = new Map();
+    for (const m of others) {
+        const found = await findMachine(ctx, m.app, m.name, http, signal).catch(() => undefined);
+        before.set(m.entity, found ? (found.config ?? {}) : null);
+    }
+    const applied = await flyApply({ plan: { ...plan, ...overrides, [target.entity]: request }, endpoint: args.endpoint, token: args.token, wait: args.wait }, signal, http);
+    const actionOf = (app, name) => applied.machines.find((m) => m.app === app && m.name === name)?.action ?? "noop";
     const now = await mustFindMachine(ctx, target.app, target.name, http, signal);
     return {
         app: target.app,
         machine: { id: now.id, name: target.name },
-        action,
+        action: actionOf(target.app, target.name),
         release,
         config,
         previous: live ? { ...(liveRelease ? { release: liveRelease } : {}), config: liveConfig ?? {} } : null,
+        unlaunched: skipsLaunch(request.body),
+        others: others.map((m) => ({
+            name: m.name,
+            app: m.app,
+            action: actionOf(m.app, m.name),
+            unlaunched: skipsLaunch((overrides[m.entity] ?? m.request).body),
+            previous: before.get(m.entity) ?? null,
+        })),
     };
 }
 function requirePlanPath(planPath) {
@@ -164,8 +206,9 @@ export async function flyMachineStop(args, signal, http = defaultFlyHttp(args.to
     return transition(args, "stop", signal, http);
 }
 /**
- * The Machine is started and its metadata names release `digest`. Given a
- * `url`, its health endpoint answers 2xx too, and when that answer is JSON
+ * The Machine is started and its metadata names release `digest`. A scheduled
+ * Machine (#4696) may also be resting unstarted (`created`, `stopped` or
+ * `suspended`) between runs. Given a `url`, its health endpoint answers 2xx too, and when that answer is JSON
  * naming a `revision` or `digest`, it is this release's (the commit or the
  * digest). Retries until `timeoutMs`, then throws the last reason.
  */
@@ -179,7 +222,9 @@ export async function flyMachineVerify(args, signal, http = defaultFlyHttp(args.
             throw new Error("flyMachineVerify aborted");
         try {
             const m = await mustFindMachine(ctx, args.app, args.machine, http, signal);
-            if (m.state !== "started")
+            const scheduled = skipsLaunch({ config: m.config });
+            const resting = scheduled && ["created", "stopped", "suspended"].includes(m.state);
+            if (m.state !== "started" && !resting)
                 throw new Error(`machine ${args.app}/${m.id} is ${m.state}`);
             const release = readMachineRelease(m.config?.metadata);
             if (release?.digest !== args.digest) {
@@ -216,11 +261,15 @@ export async function flyMachineVerify(args, signal, http = defaultFlyHttp(args.
  * Put a recorded Machine config back: update the Machine to exactly `config`
  * under a lease and wait for it to be started. Used on a failed release (the
  * config it replaced) and by a rollback (the config an earlier release applied).
+ * A scheduled config (#4696) goes back with `skip_launch`, and the wait is for
+ * the Machine to rest unstarted.
  */
 export async function flyMachineRestore(args, signal, http = defaultFlyHttp(args.token)) {
     const ctx = { base: resolveEndpoint(args) };
     const m = await mustFindMachine(ctx, args.app, args.machine, http, signal);
-    const res = await withLease(ctx, args.app, m.id, http, signal, (nonce) => http("POST", machinePath(ctx, args.app, m.id), { name: m.name, config: args.config }, { [LEASE_NONCE_HEADER]: nonce }, signal));
+    const unlaunched = skipsLaunch({ config: args.config });
+    const body = { name: m.name, config: args.config, ...(unlaunched ? { skip_launch: true } : {}) };
+    const res = await withLease(ctx, args.app, m.id, http, signal, (nonce) => http("POST", machinePath(ctx, args.app, m.id), body, { [LEASE_NONCE_HEADER]: nonce }, signal));
     if (res.status >= 300)
         throw new Error(`restore of machine ${args.app}/${m.id} failed (${res.status}): ${res.text}`);
     let instance = "";
@@ -230,7 +279,10 @@ export async function flyMachineRestore(args, signal, http = defaultFlyHttp(args
     catch {
         instance = "";
     }
-    await waitForMachine(ctx, args.app, m.id, instance, http, signal, args.wait ?? {});
+    if (unlaunched)
+        await waitForUnlaunched(ctx, args.app, m.id, instance, http, signal, args.wait ?? {});
+    else
+        await waitForMachine(ctx, args.app, m.id, instance, http, signal, args.wait ?? {});
     const release = readMachineRelease(args.config.metadata);
     return { id: m.id, ...(release ? { release } : {}) };
 }

package/dist/op/activities/machines-fake.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"machines-fake.d.ts","sourceRoot":"","sources":["../../../src/op/activities/machines-fake.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,kCAAkC;AAClC,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;CACzE;AAED,gEAAgE;AAChE,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACrC,2DAA2D;IAC3D,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7B,qEAAqE;IACrE,KAAK,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAC7D,wDAAwD;IACxD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,sDAAsD;IACtD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;CAC7D;AAED,MAAM,WAAW,mBAAmB;IAClC,gIAAgI;IAChI,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1G,4EAA4E;IAC5E,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,MAAM,CAAC;CAC3C;AAID,kFAAkF;AAClF,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,eAAO,MAAM,aAAa,MAAM,CAAC;AAWjC;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,mBAAwB,GAAG,YAAY,CA+JlF"}
+{"version":3,"file":"machines-fake.d.ts","sourceRoot":"","sources":["../../../src/op/activities/machines-fake.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAE3C,kCAAkC;AAClC,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;CACzE;AAED,gEAAgE;AAChE,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACrC,2DAA2D;IAC3D,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7B,qEAAqE;IACrE,KAAK,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAC7D,wDAAwD;IACxD,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,sDAAsD;IACtD,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;CAC7D;AAED,MAAM,WAAW,mBAAmB;IAClC,gIAAgI;IAChI,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1G,4EAA4E;IAC5E,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,WAAW,KAAK,MAAM,CAAC;CAC3C;AAID,kFAAkF;AAClF,eAAO,MAAM,iBAAiB,KAAK,CAAC;AACpC,eAAO,MAAM,aAAa,MAAM,CAAC;AAWjC;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,mBAAwB,GAAG,YAAY,CAkKlF"}

package/dist/op/activities/machines-fake.js

@@ -84,7 +84,8 @@ export function createMachinesFake(options = {}) {
                         instance_id: nextId("I"),
                         config: structuredClone((b.config ?? {})),
                     };
-                    m.state = settle(m);
+                    // skip_launch: the Machine is created and not booted (#4696).
+                    m.state = b.skip_launch === true ? "created" : settle(m);
                     machines.set(app, [...list(app), m]);
                     return json(200, m);
                 }
@@ -98,7 +99,9 @@ export function createMachinesFake(options = {}) {
                 if (method === "POST") {
                     m.config = structuredClone((b.config ?? {}));
                     m.instance_id = nextId("I");
-                    m.state = settle(m);
+                    // skip_launch: the new config isn't started (#4696). A Machine that
+                    // never ran stays created; one that ran is stopped.
+                    m.state = b.skip_launch === true ? (m.state === "created" ? "created" : "stopped") : settle(m);
                     return json(200, m);
                 }
                 if (method === "DELETE") {

package/dist/rules/fly012-machine-schedule.ts

@@ -0,0 +1,39 @@
+/**
+ * FLY012: a Machine's `schedule` is one the Machines API runs (#4696).
+ *
+ * Fly runs a scheduled Machine `hourly`, `daily`, `weekly` or `monthly`, and
+ * rejects anything else when the Machine is created or updated. A cron
+ * expression is the usual mistake, so name the four values at build time
+ * rather than at the first release.
+ */
+
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+import { readProps, entityTypeOf } from "./fly-helpers";
+
+const SCHEDULES = ["hourly", "daily", "weekly", "monthly"];
+
+export const fly012: PostSynthCheck = {
+  id: "FLY012",
+  description: "Machine schedule must be hourly, daily, weekly or monthly",
+
+  check(ctx: PostSynthContext): PostSynthDiagnostic[] {
+    const diagnostics: PostSynthDiagnostic[] = [];
+    for (const [name, entity] of ctx.entities) {
+      if (entityTypeOf(entity) !== "Fly::Machines::Machine") continue;
+      const config = readProps(entity).config;
+      if (!config) continue;
+      const schedule = readProps(config).schedule;
+      if (schedule === undefined) continue;
+      if (typeof schedule !== "string" || !SCHEDULES.includes(schedule)) {
+        diagnostics.push({
+          checkId: "FLY012",
+          severity: "error",
+          message: `Machine "${name}" has schedule ${JSON.stringify(schedule)}; Fly runs a Machine ${SCHEDULES.join(", ")}`,
+          entity: name,
+          lexicon: "fly",
+        });
+      }
+    }
+    return diagnostics;
+  },
+};

package/dist/skills/chant-fly-ops.md

@@ -31,6 +31,8 @@ If a machine never reaches `started`:
 | Wait fails with a non-408 status | flaps rejected the machine (bad config the build check did not catch, or an org-side limit) | Read the error body; fix the config and re-apply |
 | Wait times out at the deadline | The machine cannot reach `started` in time | Inspect the machine directly on the org, then re-apply once the cause is fixed |
 
+A scheduled machine is the exception: it isn't started, so the applier polls the machine until it rests `created` or `stopped` at its new config instead (see "A scheduled Machine" below).
+
 ## Lease conflicts
 
 Mutating an existing machine (update or destroy) is gated behind a Machines API lease. `flyApply` acquires a lease, echoes the nonce in the `fly-machine-lease-nonce` header on the mutation, and releases the lease afterward. A leaked lease expires on its own TTL, so release is best-effort.
@@ -161,3 +163,48 @@ export default Op({
 ```
 
 A rollback's own ledger record is not counted as a release, so running the Op again plans the same rollback, leaves the Machine as it is and records nothing. `to: "sha256:..."` on `releaseRollbackPlan` picks another release. Migrations are not undone.
+
+### A scheduled Machine
+
+A Machine with a `schedule` in its config runs once an hour, day, week or month (`hourly`, `daily`, `weekly`, `monthly`; FLY012 refuses anything else, a cron expression included) and is stopped between runs. A backup or a dump is the usual case. Declare it beside the Machine that serves, with no process group of its own:
+
+```ts
+import { App, Machine, MachineConfig } from "@intentius/chant-lexicon-fly";
+
+export const platform = new App({ name: "platform", org_slug: "acme" });
+
+export const web = new Machine({
+  name: "web",
+  region: "iad",
+  config: new MachineConfig({ image: "registry.fly.io/platform:declared" }),
+});
+
+export const dump = new Machine({
+  name: "platform-dump",
+  region: "iad",
+  config: new MachineConfig({
+    image: "registry.fly.io/platform:dump-declared",
+    schedule: "hourly",
+    metadata: { role: "platform-dump" },
+  }),
+});
+```
+
+`flyApply` creates and updates a scheduled Machine with `skip_launch: true`, so an apply or a release moves it to its new config and image and never starts it. The next run is Fly's. Set `skip_launch: false` on the Machine to have each apply start it as well. Fly counts the interval from the Machine's last update, so each apply that changes it pushes the next run back by up to one interval: under `daily`, releases less than a day apart can keep it from ever running. `hourly`, with the job skipping a run when its last output is recent enough, keeps a daily job daily.
+
+`fly-release` releases the Machine named by `machine` and applies the rest of the plan with it. `images` gives the plan's other Machines images of their own, by entity or Machine name; a name that is no other Machine in the plan is refused before anything changes:
+
+```ts
+{
+  kind: "fly-release",
+  plan: "dist/fly.json",
+  machine: "web",
+  digest: "@Publish.digest",
+  image: "@Publish.uri",
+  images: { dump: "@PublishDump.uri" },
+}
+```
+
+The serving Machine is started and verified as usual. The scheduled one is updated and left stopped. If the release fails after the Machines changed, the serving Machine goes back to what it served and the scheduled Machine goes back to its old config, still stopped. Only the serving Machine's configs are recorded, so `fly-rollback` and the step's saga rollback put back the serving Machine alone.
+
+A scheduled Machine can be the one released, too (`machine: "platform-dump"`, or the plan's only Machine). It's updated and left stopped, its metadata names the release, and verify accepts it stopped, or started in the middle of a run, as long as it names this release. Such a release takes no `migrations` and no `verify.url`, since nothing runs in the Machine between runs to exec into or answer a health check; either is refused before the Machine changes. A restore or rollback puts its old config back without starting it.

package/dist/skills/chant-fly.md

@@ -73,6 +73,7 @@ Build synthesizes the flaps plan and runs the lint rules before anything reaches
 | FLY004 | A secret value written inline in machine config |
 | FLY010 | A machine config with no `image` |
 | FLY011 | A machine mount that references a `Volume` not declared in the stack (checked across files) |
+| FLY012 | A machine `schedule` other than `hourly`, `daily`, `weekly` or `monthly` |
 
 Fix every reported violation before applying. Secret values belong in a `Secret` or a reference, never inline (FLY004).
 
@@ -81,6 +82,7 @@ Fix every reported violation before applying. Secret values belong in a `Secret`
 `flyApply` reads the serialized plan and applies it to flaps in dependency order: app, then volumes, then machines, then IPs, certificates, and secrets. Per machine it does a GET-then-create or update, then waits.
 
 - Create or update: POST the machine, then poll `GET .../wait` until it reaches `started` at its new `instance_id`. flaps caps its own long-poll at 60 seconds and answers 408 on expiry, so the client re-polls until its deadline (default 300 seconds).
+- A scheduled machine (`config.schedule`) is created and updated with `skip_launch: true`, and the wait is for it to rest unstarted (`created` or `stopped`) at its new `instance_id`. Fly starts it on its schedule. `skip_launch: false` on the Machine starts it like any other.
 - No-op on no drift: a re-apply of an unchanged machine (config structurally equal to live) does nothing.
 - Leases: mutating an existing machine goes through the Machines API lease protocol. `flyApply` acquires a lease, echoes the nonce in the `fly-machine-lease-nonce` header on the mutation, and re-acquires and retries once if the lease was lost. Concurrent operators stay out of each other's way.
 
@@ -112,7 +114,7 @@ export default flyDeploy({ app: "local-fly-demo" });
 
 | Command | Description |
 |---------|-------------|
-| `chant build src/` | Synthesize the flaps plan and run lint (FLY001/FLY002/FLY004/FLY010/FLY011) |
+| `chant build src/` | Synthesize the flaps plan and run lint (FLY001/FLY002/FLY004/FLY010/FLY011/FLY012) |
 | `chant run fly` | Run the deploy Op (boot, build, apply, verify, teardown) |
 | `FLY_FLAPS_BASE_URL=...` | Point the same code at mudflaps or a real Fly org |
 | `FLY_API_TOKEN=...` | Bearer token for a real Fly org (mudflaps ignores it) |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-fly",
-  "version": "0.124.63",
+  "version": "0.124.64",
   "type": "module",
   "files": [
     "src/",
@@ -58,7 +58,7 @@
     "build": "../../scripts/tsc7.sh -p tsconfig.build.json --sourceMap false && tsc-alias -p tsconfig.build.json"
   },
   "dependencies": {
-    "@intentius/chant-lexicon-otel": "^0.124.63",
+    "@intentius/chant-lexicon-otel": "^0.124.64",
     "ws": "^8.18.0"
   },
   "devDependencies": {
@@ -69,7 +69,7 @@
     "zod": "^4.3.6"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.124.63",
+    "@intentius/chant": "^0.124.64",
     "zod": "^4.3.6"
   },
   "description": "Fly.io Machines lexicon for chant — declarative IaC in TypeScript",

package/src/components/fly-release.test.ts

@@ -412,3 +412,82 @@ describe("fly-rollback with a source tree (#2800)", () => {
     await expect(s.rollback.run(CTX, rollbackInput("sha256:aaaaaaaaaaaa", src(a)))).rejects.toThrow("fly-rollback: no recorded Machine config for sha256:aaaaaaaaaaaa on shop/web");
   });
 });
+
+/**
+ * #4696: a scheduled Machine, stopped between runs, is moved to the release
+ * without being started, whether it sits beside the Machine that serves or is
+ * the one released.
+ */
+describe("fly-release with a scheduled Machine (#4696)", () => {
+  const DUMP = {
+    endpoint: "/v1/apps/shop/machines",
+    method: "POST",
+    body: { name: "shop-dump", config: { image: "shop:dump-declared", schedule: "hourly", metadata: { "managed-by": "chant", role: "dump" } } },
+  };
+  const writePlan = (plan: Record<string, unknown>) => writeFileSync(planPath, JSON.stringify(plan));
+
+  test("beside the serving Machine: it takes its image from images and stays stopped", async () => {
+    writePlan({ ...PLAN, dump: DUMP });
+    const s = setup();
+    await s.release.run(CTX, input("sha256:aaaaaaaaaaaa", { machine: "web", image: "shop:1", images: { dump: "shop:dump-1" } }));
+    expect(s.fake.machine("shop", "web")).toMatchObject({ state: "started", config: { image: "shop:1" } });
+    expect(s.fake.machine("shop", "shop-dump")).toMatchObject({ state: "created", config: { image: "shop:dump-1", schedule: "hourly" } });
+    expect(s.lines).toContain("fly-release: shop/shop-dump created, stopped until its schedule starts it");
+
+    s.fake.machine("shop", "shop-dump")!.state = "stopped"; // it ran once, on its schedule
+    // By Machine name as well as by entity name.
+    await s.release.run(CTX, input("sha256:bbbbbbbbbbbb", { machine: "web", image: "shop:2", images: { "shop-dump": "shop:dump-2" } }));
+    expect(s.fake.machine("shop", "shop-dump")).toMatchObject({ state: "stopped", config: { image: "shop:dump-2" } });
+    expect(s.fake.calls.filter((c) => c.includes("/machines/") && /\/(start|restart)$/.test(c))).toEqual([]);
+  });
+
+  test("an images entry that names no other Machine is refused before anything changes", async () => {
+    writePlan({ ...PLAN, dump: DUMP });
+    const s = setup();
+    await expect(s.release.run(CTX, input("sha256:aaaaaaaaaaaa", { machine: "web", images: { dmp: "x" } }))).rejects.toThrow(/images names "dmp"/);
+    await expect(s.release.run(CTX, input("sha256:aaaaaaaaaaaa", { machine: "web", images: { web: "x" } }))).rejects.toThrow(/serving Machine's image is `image`/);
+    expect(s.fake.calls.some((c) => c.startsWith("POST /v1/apps/shop/machines"))).toBe(false);
+  });
+
+  test("a failed release puts the scheduled Machine back on its old config, still stopped", async () => {
+    writePlan({ ...PLAN, dump: DUMP });
+    const fake = createMachinesFake({ exec: (_a, _m, cmd) => (cmd.join(" ").includes("boom") ? { exit_code: 1, stderr: "boom" } : { exit_code: 0 }) });
+    const s = setup(fake);
+    await s.release.run(CTX, input("sha256:aaaaaaaaaaaa", { machine: "web", image: "shop:1", images: { dump: "shop:dump-1" } }));
+    fake.machine("shop", "shop-dump")!.state = "stopped";
+    const before = structuredClone(fake.machine("shop", "shop-dump")!.config);
+    await expect(
+      s.release.run(CTX, input("sha256:bbbbbbbbbbbb", { machine: "web", image: "shop:2", images: { dump: "shop:dump-2" }, migrations: [{ name: "5.sql", command: "boom" }] })),
+    ).rejects.toThrow(/exited 1/);
+    expect(fake.machine("shop", "shop-dump")).toMatchObject({ state: "stopped", config: before });
+    expect(s.lines).toContain("fly-release: restored shop/shop-dump to its previous config");
+  });
+
+  test("released itself: updated, verified and recorded while stopped", async () => {
+    writePlan({ shop: PLAN.shop, dump: DUMP });
+    const s = setup();
+    const out = await s.release.run(CTX, input("sha256:aaaaaaaaaaaa", { image: "shop:dump-1" }));
+    expect(out.uri).toBe("fly://shop/shop-dump");
+    const m = s.fake.machine("shop", "shop-dump")!;
+    expect(m).toMatchObject({ state: "created", config: { image: "shop:dump-1", schedule: "hourly" } });
+    expect(readMachineRelease(m.config.metadata)?.digest).toBe("sha256:aaaaaaaaaaaa");
+    expect(s.lines[0]).toBe("fly-release: shop/shop-dump created, serving sha256:aaaaaaaaaaaa, stopped until its schedule starts it");
+
+    m.state = "stopped";
+    const second = await s.release.run(CTX, input("sha256:bbbbbbbbbbbb", { image: "shop:dump-2" }));
+    expect(s.fake.machine("shop", "shop-dump")).toMatchObject({ state: "stopped", config: { image: "shop:dump-2" } });
+    // Its saga rollback puts the earlier config back, still stopped.
+    await s.release.rollback!(CTX, input("sha256:bbbbbbbbbbbb", { image: "shop:dump-2" }), second);
+    expect(s.fake.machine("shop", "shop-dump")).toMatchObject({ state: "stopped", config: { image: "shop:dump-1" } });
+  });
+
+  test("released itself, it takes no migrations and no health URL: nothing runs in it between runs", async () => {
+    writePlan({ shop: PLAN.shop, dump: DUMP });
+    const s = setup();
+    await expect(s.release.run(CTX, input("sha256:aaaaaaaaaaaa", { migrations: [{ name: "1", command: "x" }] }))).rejects.toThrow(
+      /shop\/shop-dump is scheduled \(hourly\) and stays stopped between runs, so no migration can run in it/,
+    );
+    await expect(s.release.run(CTX, input("sha256:aaaaaaaaaaaa", { verify: { url: "https://shop.example.com" } }))).rejects.toThrow(/no health endpoint/);
+    expect(s.fake.calls.some((c) => c.startsWith("POST"))).toBe(false);
+  });
+});

package/src/components/fly-release.ts

@@ -32,6 +32,14 @@
  *    goes back (or, on a first release, the Machine is stopped), and the step
  *    fails.
  *
+ * A scheduled Machine (`config.schedule`, #4696) is released without being
+ * started, whether it is the one that serves or another Machine in the plan:
+ * its config and image change, and Fly starts it on its schedule. Verify
+ * accepts it stopped between runs. A scheduled Machine that serves takes no
+ * migrations and no health URL, since nothing runs in it between runs. The
+ * plan's other Machines take their images from `images`; one the release
+ * updated goes back to its old config when the release fails.
+ *
  * Its output carries `uri` and `digest`, so `chant run --components` records
  * the release in the ledger, and the Machine's metadata carries the same
  * digest, which `chant components status --live` compares with it.
@@ -57,10 +65,11 @@ import {
   flyMachineVerify,
   readMachineRelease,
   releaseTarget,
+  type FlyMachineReleaseResult,
   type MachineFile,
   type MachineRelease,
 } from "../op/activities/machine-release";
-import { defaultFlyHttp, parsePlan, resolveEndpoint, type FlyHttp, type WaitOpts } from "../op/activities/fly-apply";
+import { defaultFlyHttp, machineSchedule, parsePlan, resolveEndpoint, skipsLaunch, type FlyHttp, type WaitOpts } from "../op/activities/fly-apply";
 import type { MachineConfigStore } from "../release-store";
 import { readFileSync } from "node:fs";
 import { releaseAttributesSuffix, type ReleaseIdentity } from "@intentius/chant/telemetry-attribution";
@@ -147,6 +156,12 @@ export interface FlyReleaseInput {
   release?: string;
   /** An image to run in place of the declared one. */
   image?: string;
+  /**
+   * Images for the plan's other Machines, by entity or Machine name (#4696),
+   * such as a scheduled Machine built from the same commit. Each is applied
+   * with the release; a scheduled one is left stopped.
+   */
+  images?: Record<string, string>;
   /** Env added to the declared Machine's env, over `APP_REVISION` (the commit, #2834) unless this names its own. */
   env?: Record<string, string>;
   /**
@@ -282,6 +297,19 @@ export function createFlyReleaseCapability(deps: FlyReleaseDeps = {}): Capabilit
   const log = deps.log ?? ((line: string) => console.error(line));
   const httpFor = () => deps.http ?? defaultFlyHttp();
 
+  /** On a failed release, put the plan's other Machines it updated back on their old configs. */
+  async function restoreOthers(released: FlyMachineReleaseResult, input: FlyReleaseInput, http: FlyHttp): Promise<void> {
+    for (const other of released.others) {
+      if (other.action !== "updated" || !other.previous) continue;
+      try {
+        await flyMachineRestore({ app: other.app, machine: other.name, config: other.previous, endpoint: input.endpoint, wait: input.wait }, undefined, http);
+        log(`fly-release: restored ${other.app}/${other.name} to its previous config`);
+      } catch (restoreErr) {
+        log(`fly-release: restore of ${other.app}/${other.name} failed: ${restoreErr instanceof Error ? restoreErr.message : String(restoreErr)}`);
+      }
+    }
+  }
+
   async function rollBack(ctx: DeployContext, input: FlyReleaseInput, output?: FlyReleaseOutput): Promise<void> {
     if (!output) return;
     const http = httpFor();
@@ -307,6 +335,12 @@ export function createFlyReleaseCapability(deps: FlyReleaseDeps = {}): Capabilit
       if (!input.digest) throw new Error("fly-release: a release needs its digest");
       const http = httpFor();
       const { plan, target } = loadTarget(input.plan, input.machine);
+      // A scheduled Machine is stopped between runs: nothing can exec in it or answer a health check.
+      if (skipsLaunch(target.request.body)) {
+        const why = `${target.app}/${target.name} is scheduled (${machineSchedule(target.request.body.config) ?? "skip_launch"}) and stays stopped between runs`;
+        if (input.migrations?.length) throw new Error(`fly-release: ${why}, so no migration can run in it`);
+        if (input.verify?.url) throw new Error(`fly-release: ${why}, so it has no health endpoint to verify at ${input.verify.url}`);
+      }
       const gitSha = input.gitSha ?? (await (deps.headCommit ?? defaultHeadCommit)());
       const configs = await (deps.configStore ?? defaultConfigStore)(ctx);
       // The tree is checked against its digest before the Machine changes.
@@ -331,6 +365,7 @@ export function createFlyReleaseCapability(deps: FlyReleaseDeps = {}): Capabilit
           machine: input.machine,
           release: { digest: input.digest, gitSha, ...(input.release ? { release: input.release } : {}) },
           image: input.image,
+          ...(input.images ? { images: input.images } : {}),
           env,
           ...(source ? { files: source.files, cmd: source.cmd } : {}),
           endpoint: input.endpoint,
@@ -340,7 +375,10 @@ export function createFlyReleaseCapability(deps: FlyReleaseDeps = {}): Capabilit
         http,
       );
       const where = { app: released.app, machine: released.machine.name, endpoint: input.endpoint };
-      log(`fly-release: ${released.app}/${released.machine.name} ${released.action}, serving ${input.digest}`);
+      log(`fly-release: ${released.app}/${released.machine.name} ${released.action}, serving ${input.digest}${released.unlaunched ? ", stopped until its schedule starts it" : ""}`);
+      for (const other of released.others) {
+        if (other.action !== "noop") log(`fly-release: ${other.app}/${other.name} ${other.action}${other.unlaunched ? ", stopped until its schedule starts it" : ""}`);
+      }
 
       // The config the Machine served before is kept too, so a Machine
       // released before chant recorded configs can still be rolled back to.
@@ -388,6 +426,7 @@ export function createFlyReleaseCapability(deps: FlyReleaseDeps = {}): Capabilit
         } catch (restoreErr) {
           log(`fly-release: restore failed: ${restoreErr instanceof Error ? restoreErr.message : String(restoreErr)}`);
         }
+        await restoreOthers(released, input, http);
         throw err;
       }
 

package/src/lint/audit-catalog.ts

@@ -2,7 +2,7 @@
  * The fly lexicon's chant audit catalog — metadata for the FLY post-synth
  * checks, contributed via `flyPlugin.auditCatalog()` (#687).
  *
- * Both entries carry `yamlBased: false`: each check reads the chant model
+ * Every entry carries `yamlBased: false`: each check reads the chant model
  * (`ctx.entities`) rather than the emitted manifest, because what they need —
  * whether a mount's volume is declared in the same stack — lives in the typed
  * graph and is gone by the time `fly.toml` exists. So they fire on
@@ -45,6 +45,13 @@ export const flyAuditCatalog: Record<string, RuleMeta> = {
     "Machine mount references an undeclared volume",
     "Declare the Volume in the same stack, or point the mount at one that is.",
   ),
+  FLY012: rule(
+    "FLY012",
+    "merge-worthy",
+    "correctness",
+    "Machine schedule is not one Fly runs",
+    "Set `config.schedule` to `hourly`, `daily`, `weekly` or `monthly`; the Machines API takes no cron expression.",
+  ),
 };
 
 // Prior art credits live beside the rules in ./audit-lineage.ts (see core audit/prior-art.ts).

package/src/lint/audit-lineage.ts

@@ -11,4 +11,7 @@ export const flyAuditLineage: Record<string, Lineage[]> = {
   FLY010: [
     { tool: "fly-docs", rule: "Create a Machine: config.image required", url: "https://fly.io/docs/machines/api/machines-resource/#create-a-machine", relation: "overlaps" },
   ],
+  FLY012: [
+    { tool: "fly-docs", rule: "Machine config: schedule is hourly, daily, weekly or monthly", url: "https://fly.io/docs/machines/api/machines-resource/#machine-config-object-properties", relation: "overlaps" },
+  ],
 };

package/src/lint/post-synth/fly012-machine-schedule.test.ts

@@ -0,0 +1,30 @@
+import { describe, test, expect } from "vitest";
+import type { Declarable } from "@intentius/chant";
+import type { PostSynthContext } from "@intentius/chant/lint/post-synth";
+import { fly012 } from "./fly012-machine-schedule";
+import { Machine, MachineConfig } from "../../generated/index";
+
+function ctx(...entries: Array<[string, unknown]>): PostSynthContext {
+  const entities = new Map(entries as Array<[string, Declarable]>);
+  return {
+    outputs: new Map(),
+    entities,
+    buildResult: { outputs: new Map(), entities, warnings: [], errors: [], sourceFileCount: 1 },
+  };
+}
+
+describe("FLY012: machine schedule", () => {
+  test("passes each schedule Fly runs, and a Machine with none", () => {
+    for (const schedule of ["hourly", "daily", "weekly", "monthly"]) {
+      expect(fly012.check(ctx(["dump", new Machine({ config: new MachineConfig({ image: "x", schedule }) })]))).toEqual([]);
+    }
+    expect(fly012.check(ctx(["web", new Machine({ config: new MachineConfig({ image: "x" }) })]))).toEqual([]);
+  });
+
+  test("flags a cron expression", () => {
+    const diags = fly012.check(ctx(["dump", new Machine({ config: new MachineConfig({ image: "x", schedule: "0 * * * *" }) })]));
+    expect(diags).toHaveLength(1);
+    expect(diags[0]).toMatchObject({ checkId: "FLY012", severity: "error", entity: "dump" });
+    expect(diags[0].message).toContain("hourly, daily, weekly, monthly");
+  });
+});