Description
D1, KV, Queues and Durable Objects metrics drop the database, namespace and queue identifiers on purpose to bound cardinality, which makes it impossible to see which resource is busy. R2 operations also lack the action type. Resource IDs should resolve to names via the read-only list endpoints and be capped.
Acceptance Criteria
- #1 D1 database, KV namespace, Queue and DO namespace attributes are emitted as names, under a documented per-metric resource cap with a remainder bucket
- #2 R2 operation metrics carry the action type
- #3 Name lookups are cached and read-only
- #4 Every new signal and attribute is declared in internal/semconv, listed in docs/signals.md, and has a panel in grafana/build_dashboard.py
- #5 Any new token permission is added to the token permission matrix in the docs
Definition of Done
- #1 just check (fmt-check, lint, vet, test, tidy-check, build, vuln)
- #2 just ci before a change that touches the Dockerfile, goreleaser or the image (adds snapshot + image)
- #3 Every new signal or attribute name declared in internal/semconv and listed in docs/signals.md
Implementation Plan
Loop16 E47D implements base metric resource names and R2 action type from verified GraphQL dimension descriptions and runtime list row shapes. Existing depth quantile selections remain unchanged. Domain-local one-hour successful/failed lookup caches use existing cfapi PageGetter, complete bounded pagination before publishing a map, and sticky per-metric admission of 49 normal label sets plus other remainder. Existing platform total cap remains. Preserve counter sums and max-gauge reduction. Request IDs never become metric attributes; root authorises updating affected metadata descriptions and tests that intentionally asserted old account-only selection, preserving ID-label prohibitions. Panels follow in DASH.
Implementation Notes
Loop16 source accepted on REV-E47D-R2 PASS 1ed715ba7f4aac838eaa1e68cd7d4bd96986e96c, preserved parent and root five-key wiring independently reviewed. Two implementations and one review-repair, zero infrastructure retries. Exact replay pushed65089d58a8068ea4fb7f3f22f80512489a617fc1 with green integrated gate, contract match and scans; all non-autoRC CI workflows success, R0 run37052805358 success. Names/action, sticky caps, read-only cache/paging, failed refresh and permission documentation checked. AC4 panels remain open; least privilege and deployed new code not claimed. Obsolete DO fixture and D1 fixture synchronization gaps logged separately.
Loop16 source panel AC4 landed ca207018dec85ab25e8a51ab32844e8e4bd26bc8 after fresh REV-DASH3-R1 PASS9508d0fd846911662f072ee3f504e2c7ae18738e. Bounded resource-name/action queries, real translator and independent-instance/reset/remainder/zero/absence Promtool fixtures passed; all prior panels preserved. Integrated gate/scans passed; exact CI/grafana-sync pending. TaskDone reflects all supported source criteria, not browser or live populated resource proof.