@intentius/chant-lexicon-otel 0.102.0 → 0.104.1

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "otel",
-  "version": "0.102.0",
+  "version": "0.104.1",
   "chantVersion": ">=0.1.0",
   "namespace": "OTel",
   "intrinsics": [],

package/dist/metric-names.d.ts

@@ -117,5 +117,34 @@ type Declared = {
 export declare function spanMetricsNames(connector: SpanMetricsNamingConfig | Declared, exporter?: PrometheusNaming | {
     props?: PrometheusNaming;
 }): SpanMetricsNames;
+/** The prefix of every metric the `servicegraph` connector emits; the connector takes no namespace. */
+export declare const SERVICEGRAPH_NAMESPACE = "traces_service_graph";
+/** The parts of a servicegraph config the metric labels depend on. */
+export interface ServiceGraphNamingConfig {
+    dimensions?: string[];
+    virtual_node_extra_label?: boolean;
+}
+/** The metrics one `servicegraph` connector emits. */
+export interface ServiceGraphNames {
+    /** Requests per edge. */
+    requests: CollectorMetric;
+    /** Failed requests per edge. */
+    failed: CollectorMetric;
+    /** Server-side request duration histogram, in seconds. */
+    serverDuration: CollectorMetric;
+    /** Client-side request duration histogram, in seconds. */
+    clientDuration: CollectorMetric;
+}
+/**
+ * The Prometheus names of the metrics a `servicegraph` connector emits at
+ * `COLLECTOR_PIN`, with its default feature gates: latency in seconds, under
+ * `_request_server` and `_request_client`. Every metric carries `client`,
+ * `server`, `connection_type` and `failed`, `client_<d>` and `server_<d>` for
+ * each configured dimension, and `virtual_node` when
+ * `virtual_node_extra_label` is set (connector/servicegraphconnector/connector.go).
+ */
+export declare function serviceGraphNames(connector: ServiceGraphNamingConfig | Declared, exporter?: PrometheusNaming | {
+    props?: PrometheusNaming;
+}): ServiceGraphNames;
 export {};
 //# sourceMappingURL=metric-names.d.ts.map

package/dist/metric-names.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"metric-names.d.ts","sourceRoot":"","sources":["../src/metric-names.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,oGAAoG;AACpG,MAAM,WAAW,eAAe;IAC9B,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,gGAAgG;IAChG,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,KAAK,GAAG,WAAW,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uGAAuG;IACvG,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,mGAAmG;AACnG,eAAO,MAAM,8BAA8B,EAAE,SAAS,MAAM,EAA6E,CAAC;AAE1I,8DAA8D;AAC9D,eAAO,MAAM,6BAA6B,wBAAwB,CAAC;AAEnE,qGAAqG;AACrG,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAYrD,0EAA0E;AAC1E,MAAM,WAAW,gBAAgB;IAC/B,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,iFAAiF;AACjF,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,GAAE,gBAAqB,GAAG,MAAM,CAQlI;AAED,oEAAoE;AACpE,MAAM,WAAW,uBAAuB;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrC,gBAAgB,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3C,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,SAAS,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,IAAI,GAAG,GAAG,CAAC;QAAC,UAAU,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IAC3F,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;CACtE;AAED,6FAA6F;AAC7F,MAAM,WAAW,gBAAgB;IAC/B,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,KAAK,EAAE,eAAe,CAAC;IACvB,uEAAuE;IACvE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,mEAAmE;IACnE,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB;;;OAGG;IACH,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,KAAK,QAAQ,GAAG;IAAE,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAW7D;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,uBAAuB,GAAG,QAAQ,EAC7C,QAAQ,CAAC,EAAE,gBAAgB,GAAG;IAAE,KAAK,CAAC,EAAE,gBAAgB,CAAA;CAAE,GACzD,gBAAgB,CAsClB"}
+{"version":3,"file":"metric-names.d.ts","sourceRoot":"","sources":["../src/metric-names.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,oGAAoG;AACpG,MAAM,WAAW,eAAe;IAC9B,4BAA4B;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,gGAAgG;IAChG,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,KAAK,GAAG,WAAW,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uGAAuG;IACvG,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,mGAAmG;AACnG,eAAO,MAAM,8BAA8B,EAAE,SAAS,MAAM,EAA6E,CAAC;AAE1I,8DAA8D;AAC9D,eAAO,MAAM,6BAA6B,wBAAwB,CAAC;AAEnE,qGAAqG;AACrG,eAAO,MAAM,iBAAiB,sBAAsB,CAAC;AAYrD,0EAA0E;AAC1E,MAAM,WAAW,gBAAgB;IAC/B,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uFAAuF;IACvF,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,iFAAiF;AACjF,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,GAAG,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,GAAE,gBAAqB,GAAG,MAAM,CAQlI;AAED,oEAAoE;AACpE,MAAM,WAAW,uBAAuB;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrC,gBAAgB,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3C,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,SAAS,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,IAAI,GAAG,GAAG,CAAC;QAAC,UAAU,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IAC3F,MAAM,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,UAAU,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;CACtE;AAED,6FAA6F;AAC7F,MAAM,WAAW,gBAAgB;IAC/B,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,KAAK,EAAE,eAAe,CAAC;IACvB,uEAAuE;IACvE,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,mEAAmE;IACnE,MAAM,CAAC,EAAE,eAAe,CAAC;IACzB;;;OAGG;IACH,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxF,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,KAAK,QAAQ,GAAG;IAAE,aAAa,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAW7D;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,uBAAuB,GAAG,QAAQ,EAC7C,QAAQ,CAAC,EAAE,gBAAgB,GAAG;IAAE,KAAK,CAAC,EAAE,gBAAgB,CAAA;CAAE,GACzD,gBAAgB,CAsClB;AAED,uGAAuG;AACvG,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAE7D,sEAAsE;AACtE,MAAM,WAAW,wBAAwB;IACvC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,wBAAwB,CAAC,EAAE,OAAO,CAAC;CACpC;AAED,sDAAsD;AACtD,MAAM,WAAW,iBAAiB;IAChC,yBAAyB;IACzB,QAAQ,EAAE,eAAe,CAAC;IAC1B,gCAAgC;IAChC,MAAM,EAAE,eAAe,CAAC;IACxB,0DAA0D;IAC1D,cAAc,EAAE,eAAe,CAAC;IAChC,0DAA0D;IAC1D,cAAc,EAAE,eAAe,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAC/B,SAAS,EAAE,wBAAwB,GAAG,QAAQ,EAC9C,QAAQ,CAAC,EAAE,gBAAgB,GAAG;IAAE,KAAK,CAAC,EAAE,gBAAgB,CAAA;CAAE,GACzD,iBAAiB,CA6BnB"}

package/dist/model.d.ts

@@ -69,4 +69,28 @@ export declare function isComponentId(id: string): boolean;
 export declare function pipelineSignal(pipelineId: string): string;
 /** True when a parsed document has the shape of a collector config. */
 export declare function looksLikeCollectorConfig(value: unknown): value is CollectorConfig;
+/**
+ * A built-in type the collector renamed, keeping the old name as a
+ * deprecated alias. `type` is the new name and `builtin` the name chant's
+ * class declares and emits. `since` is the first release of `repo` whose
+ * `metadata.yaml` for the component lists `builtin` as `deprecated_type`.
+ */
+export interface ComponentTypeAlias {
+    kind: ComponentKind;
+    type: string;
+    builtin: string;
+    since: string;
+    repo: "core" | "contrib";
+}
+/**
+ * The renamed built-ins. chant emits `builtin`, which the pinned collector
+ * (`COLLECTOR_PIN`, v0.130.0) knows and newer ones still accept. A config
+ * written for a newer collector may use `type`, so code that reads a config
+ * (the importer, the checks, the k8s composites) accepts both.
+ */
+export declare const COMPONENT_TYPE_ALIASES: readonly ComponentTypeAlias[];
+/** The type chant declares for `kind` + `type`: the old name of a renamed built-in, otherwise `type` itself. */
+export declare function canonicalComponentType(kind: ComponentKind, type: string): string;
+/** The type of component id `id`, with a renamed built-in's new name read as the old one: `span_metrics/genai` is `spanmetrics`. */
+export declare function canonicalTypeOf(kind: ComponentKind, id: string): string;
 //# sourceMappingURL=model.d.ts.map

package/dist/model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,wDAAwD;AACxD,eAAO,MAAM,OAAO,YAAI,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AAC9D,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,eAAe,YAAI,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AACxG,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,wDAAwD;AACxD,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,GAAG,YAAY,CAAC;AAEtG,oEAAoE;AACpE,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAM9D,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAC;IAC1B,EAAE,EAAE,MAAM,GAAG,UAAU,CAAC;CACzB;AAED,iFAAiF;AACjF,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AAEjC;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC5C;AAED,+FAA+F;AAC/F,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACjE,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAKD,sEAAsE;AACtE,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAEpE;AAED,iGAAiG;AACjG,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAIxF;AAED,4DAA4D;AAC5D,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,0EAA0E;AAC1E,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED,uEAAuE;AACvE,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAQjF"}
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,wDAAwD;AACxD,eAAO,MAAM,OAAO,YAAI,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AAC9D,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9C;;;;GAIG;AACH,eAAO,MAAM,eAAe,YAAI,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AACxG,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,wDAAwD;AACxD,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,YAAY,GAAG,YAAY,CAAC;AAEtG,oEAAoE;AACpE,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAM9D,CAAC;AAEF;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAC;IAC1B,EAAE,EAAE,MAAM,GAAG,UAAU,CAAC;CACzB;AAED,iFAAiF;AACjF,MAAM,MAAM,WAAW,GAAG,MAAM,CAAC;AAEjC;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;CAC5C;AAED,+FAA+F;AAC/F,MAAM,WAAW,eAAe;IAC9B,SAAS,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACjE,SAAS,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAChE,UAAU,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACjE,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAKD,sEAAsE;AACtE,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,WAAW,CAEpE;AAED,iGAAiG;AACjG,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAIxF;AAED,4DAA4D;AAC5D,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,0EAA0E;AAC1E,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED,uEAAuE;AACvE,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAQjF;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,aAAa,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B;AAED;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,kBAAkB,EAa/D,CAAC;AAIF,gHAAgH;AAChH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEhF;AAED,oIAAoI;AACpI,wBAAgB,eAAe,CAAC,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,CAGvE"}

package/dist/okf/index.md

@@ -61,3 +61,13 @@ okf_version: '0.2'
 * [OTEL115](/rules/OTEL115.md) - A routing connector routes to a pipeline that does not receive from it
 * [OTEL116](/rules/OTEL116.md) - A connector splits metrics by a high-cardinality GenAI attribute
 * [OTEL117](/rules/OTEL117.md) - Two components the collector starts listen on the same address
+* [OTEL118](/rules/OTEL118.md) - A pipeline processor can remove or replace a resource attribute chant's telemetry attribution stamps
+* [OTEL119](/rules/OTEL119.md) - A collector config sets a field deprecated at or before the pinned release
+* [OTEL120](/rules/OTEL120.md) - A component in the collector config holds a literal credential
+* [OTEL121](/rules/OTEL121.md) - An exporter sends a credential over plaintext
+* [OTEL122](/rules/OTEL122.md) - zpages or pprof listens on a non-loopback address
+* [OTEL123](/rules/OTEL123.md) - A debug exporter at verbosity detailed shares a pipeline with a real exporter
+* [OTEL124](/rules/OTEL124.md) - A remote exporter has its sending queue or retries turned off
+* [OTEL125](/rules/OTEL125.md) - A pipeline sends to a remote otlp or otlphttp exporter without batching
+* [OTEL126](/rules/OTEL126.md) - k8sattributes extracts a metadata field it does not support
+* [OTEL127](/rules/OTEL127.md) - resourcedetection lists a detector that does not exist

package/dist/okf/rules/OTEL118.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: OTEL118
+description: A pipeline processor can remove or replace a resource attribute chant's telemetry attribution stamps
+id: OTEL118
+severity: error
+category: post-synth
+lexicon: otel
+docs: https://intentius.io/chant/lexicons/otel/rules/
+---
+A pipeline processor can remove or replace a resource attribute chant's telemetry attribution stamps

package/dist/okf/rules/OTEL119.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: OTEL119
+description: A collector config sets a field deprecated at or before the pinned release
+id: OTEL119
+severity: error
+category: post-synth
+lexicon: otel
+docs: https://intentius.io/chant/lexicons/otel/rules/
+---
+A collector config sets a field deprecated at or before the pinned release

package/dist/okf/rules/OTEL120.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: OTEL120
+description: A component in the collector config holds a literal credential
+id: OTEL120
+severity: error
+category: post-synth
+lexicon: otel
+docs: https://intentius.io/chant/lexicons/otel/rules/
+---
+A component in the collector config holds a literal credential

package/dist/okf/rules/OTEL121.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: OTEL121
+description: An exporter sends a credential over plaintext
+id: OTEL121
+severity: error
+category: post-synth
+lexicon: otel
+docs: https://intentius.io/chant/lexicons/otel/rules/
+---
+An exporter sends a credential over plaintext

package/dist/okf/rules/OTEL122.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: OTEL122
+description: zpages or pprof listens on a non-loopback address
+id: OTEL122
+severity: error
+category: post-synth
+lexicon: otel
+docs: https://intentius.io/chant/lexicons/otel/rules/
+---
+zpages or pprof listens on a non-loopback address

package/dist/okf/rules/OTEL123.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: OTEL123
+description: A debug exporter at verbosity detailed shares a pipeline with a real exporter
+id: OTEL123
+severity: error
+category: post-synth
+lexicon: otel
+docs: https://intentius.io/chant/lexicons/otel/rules/
+---
+A debug exporter at verbosity detailed shares a pipeline with a real exporter

package/dist/okf/rules/OTEL124.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: OTEL124
+description: A remote exporter has its sending queue or retries turned off
+id: OTEL124
+severity: error
+category: post-synth
+lexicon: otel
+docs: https://intentius.io/chant/lexicons/otel/rules/
+---
+A remote exporter has its sending queue or retries turned off

package/dist/okf/rules/OTEL125.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: OTEL125
+description: A pipeline sends to a remote otlp or otlphttp exporter without batching
+id: OTEL125
+severity: error
+category: post-synth
+lexicon: otel
+docs: https://intentius.io/chant/lexicons/otel/rules/
+---
+A pipeline sends to a remote otlp or otlphttp exporter without batching

package/dist/okf/rules/OTEL126.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: OTEL126
+description: k8sattributes extracts a metadata field it does not support
+id: OTEL126
+severity: error
+category: post-synth
+lexicon: otel
+docs: https://intentius.io/chant/lexicons/otel/rules/
+---
+k8sattributes extracts a metadata field it does not support

package/dist/okf/rules/OTEL127.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: OTEL127
+description: resourcedetection lists a detector that does not exist
+id: OTEL127
+severity: error
+category: post-synth
+lexicon: otel
+docs: https://intentius.io/chant/lexicons/otel/rules/
+---
+resourcedetection lists a detector that does not exist

package/dist/platform.d.ts

@@ -34,9 +34,11 @@ export interface CollectorPort {
     /** A name usable as a k8s port name: lowercase, `-` separated, at most 15 characters. */
     name: string;
     port: number;
+    /** Set when the listener is UDP. A port without it is TCP. */
+    protocol?: "UDP";
 }
 export interface CollectorEndpoints {
-    /** Ports the receivers listen on, in config order, one entry per port. */
+    /** Ports the receivers, then the exporters, listen on, in config order, one entry per port and protocol. */
     ports: CollectorPort[];
     /**
      * The `health_check` extension, when the service enables one and it listens
@@ -49,13 +51,14 @@ export interface CollectorEndpoints {
     };
 }
 /**
- * The ports a built collector config listens on: the endpoint of every
- * receiver that listens (otlp, zipkin, jaeger; the receivers OTEL117 knows),
- * named after the receiver and the protocol key above it (`otlp-grpc`,
- * `otlp-http`), and the `health_check` port if the service enables it. A
- * receiver whose `endpoint` is a server it connects to, such as
- * kubeletstats' kubelet, adds no port, and neither does a receiver type the
- * table doesn't list.
+ * The ports a built collector config listens on: the address every receiver
+ * and exporter that listens sets (the types OTEL117 knows: otlp, jaeger,
+ * statsd, syslog, the `prometheus` exporter's scrape endpoint and the rest),
+ * named after the component and the key above the address (`otlp-grpc`,
+ * `syslog-udp`), and the `health_check` port if the service enables it. A
+ * component whose `endpoint` is a server it connects to, such as
+ * kubeletstats' kubelet, adds no port, and neither does a type the table
+ * doesn't list. A UDP listener gets `protocol: "UDP"`.
  */
 export declare function collectorEndpoints(config: CollectorConfig): CollectorEndpoints;
 //# sourceMappingURL=platform.d.ts.map

package/dist/platform.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../src/platform.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC;AAM7D,OAAO,EAA6B,KAAK,eAAe,EAAE,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAGvF,4FAA4F;AAC5F,eAAO,MAAM,eAAe,QAAoF,CAAC;AAEjH,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAE7D,MAAM,WAAW,oBAAoB;IACnC,gFAAgF;IAChF,SAAS,CAAC,EAAE,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;IACrD,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,GAAE,oBAAyB,GAAG,UAAU,EAAE,CAoB9E;AAED,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,yFAAyF;IACzF,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,0EAA0E;IAC1E,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB;;;;OAIG;IACH,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9C;AA+BD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,eAAe,GAAG,kBAAkB,CA2B9E"}
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../src/platform.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC;AAM7D,OAAO,EAA6B,KAAK,eAAe,EAAE,KAAK,MAAM,EAAE,MAAM,SAAS,CAAC;AAGvF,4FAA4F;AAC5F,eAAO,MAAM,eAAe,QAAoF,CAAC;AAEjH,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAE7D,MAAM,WAAW,oBAAoB;IACnC,gFAAgF;IAChF,SAAS,CAAC,EAAE,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;IACrD,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,OAAO,GAAE,oBAAyB,GAAG,UAAU,EAAE,CAoB9E;AAED,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,yFAAyF;IACzF,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,KAAK,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,4GAA4G;IAC5G,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB;;;;OAIG;IACH,WAAW,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9C;AA+BD;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,eAAe,GAAG,kBAAkB,CAiC9E"}

package/dist/rules/literal-credential.ts

@@ -1,9 +1,8 @@
 import * as ts from "typescript";
 import type { LintRule, LintDiagnostic, LintContext } from "@intentius/chant/lint/rule";
 import { calleeName, COMPONENT_CLASS, literalText, position, propertyName } from "./otel-ast";
-
-/** Keys whose value is a credential. `*_file` keys name a path, which is fine. */
-const SECRET_KEY = /(authorization|api[-_]?key|password|passwd|secret|token|key_pem|x-honeycomb-team)/i;
+// Shared with OTEL120, which applies the same check to the emitted YAML.
+import { SECRET_KEY } from "../../config-hygiene";
 
 /**
  * OTEL002: a credential written as a literal in a component's config.

package/dist/rules/otel-helpers.ts

@@ -10,6 +10,7 @@ import type { Declarable } from "@intentius/chant/declarable";
 import { looksLikeCollectorConfig, type CollectorConfig } from "../../model";
 import { configMapCollectorConfigs, describeConfigMapConfig } from "../../configmap";
 import { validateCollectorConfig, validateCollectorEntities, type CollectorIssueCode, type CollectorIssue } from "../../validate-config";
+import { attributionIssues } from "../../attribution";
 
 /** Where a collector config was found in the build output. */
 export interface FoundCollectorConfig {
@@ -74,20 +75,30 @@ function toDiagnostic(issue: CollectorIssue, found?: Omit<FoundCollectorConfig,
 }
 
 /**
- * Every config-level diagnostic (OTEL101-OTEL106, OTEL112-OTEL117 and any later
+ * The config-level issues for one config. OTEL118 joins them only when the
+ * build stamps the telemetry attribution (`ctx.telemetry`), so a level-0
+ * project never sees it.
+ */
+function configIssues(ctx: PostSynthContext, config: CollectorConfig): CollectorIssue[] {
+  const issues = validateCollectorConfig(config);
+  return ctx.telemetry ? [...issues, ...attributionIssues(config)] : issues;
+}
+
+/**
+ * Every config-level diagnostic (OTEL101-OTEL106, OTEL112-OTEL127 and any later
  * config check) over the collector configs in the output. `configMapsOnly`
  * keeps the configs held in ConfigMaps, which is what WK8604 reads.
  */
 export function collectorConfigDiagnostics(ctx: PostSynthContext, opts: { configMapsOnly?: boolean } = {}): PostSynthDiagnostic[] {
   return collectorConfigs(ctx)
     .filter((found) => !opts.configMapsOnly || found.configMap)
-    .flatMap(({ config, ...found }) => validateCollectorConfig(config).map((i) => toDiagnostic(i, found)));
+    .flatMap(({ config, ...found }) => configIssues(ctx, config).map((i) => toDiagnostic(i, found)));
 }
 
-/** Diagnostics for one config-level code (OTEL101-OTEL106, OTEL112-OTEL117) across every collector config in the output. */
+/** Diagnostics for one config-level code (OTEL101-OTEL106, OTEL112-OTEL127) across every collector config in the output. */
 export function configDiagnostics(ctx: PostSynthContext, code: CollectorIssueCode): PostSynthDiagnostic[] {
   return collectorConfigs(ctx).flatMap(({ config, ...found }) =>
-    validateCollectorConfig(config)
+    configIssues(ctx, config)
       .filter((i) => i.code === code)
       .map((i) => toDiagnostic(i, found)),
   );

package/dist/rules/otel118.ts

@@ -0,0 +1,17 @@
+/**
+ * OTEL118: A pipeline processor can remove or replace a resource attribute chant's telemetry attribution stamps
+ *
+ * A workload built in a workspace, or with `telemetry.attribution: true`, carries `service.name`, `service.version`, `deployment.environment.name`, `vcs.ref.head.revision` and `chant.*` resource attributes. A `resource` processor that deletes, updates, upserts or hashes one, a `transform` statement that sets, deletes or fails to keep one, or a `resourcedetection` processor with `override` on and a detector that writes one undoes that. The `transform` case matches OTTL text. The check runs only when the build stamps the attribution, so a level-0 project sees nothing.
+ */
+
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+import { configDiagnostics } from "./otel-helpers";
+
+export const otel118: PostSynthCheck = {
+  id: "OTEL118",
+  description: "A pipeline processor can remove or replace a resource attribute chant's telemetry attribution stamps",
+
+  check(ctx: PostSynthContext): PostSynthDiagnostic[] {
+    return configDiagnostics(ctx, "OTEL118");
+  },
+};

package/dist/rules/otel119.ts

@@ -0,0 +1,17 @@
+/**
+ * OTEL119: A collector config sets a field deprecated at or before the pinned release
+ *
+ * `invert_match: true` in a `tail_sampling` policy (inverted decisions are deprecated in collector-contrib v0.126.0 for a `drop` policy), `service.telemetry.metrics.address` (deprecated in collector v0.111.0 for `readers`), and `dimensions_cache_size` on `spanmetrics` (deprecated in collector-contrib v0.125.0 for `aggregation_cardinality_limit`). The collector still reads each at v0.130.0, and a later release drops it.
+ */
+
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+import { configDiagnostics } from "./otel-helpers";
+
+export const otel119: PostSynthCheck = {
+  id: "OTEL119",
+  description: "A collector config sets a field deprecated at or before the pinned release",
+
+  check(ctx: PostSynthContext): PostSynthDiagnostic[] {
+    return configDiagnostics(ctx, "OTEL119");
+  },
+};

package/dist/rules/otel120.ts

@@ -0,0 +1,17 @@
+/**
+ * OTEL120: A component in the collector config holds a literal credential
+ *
+ * OTEL002's check over the emitted or imported config, with the same key pattern (`authorization`, `api-key`, `api_key`, `token`, `password`, `secret`, `key_pem`, `x-honeycomb-team`). A value containing `${` is a reference the collector expands at start-up, and a key ending in `_file` names a path. This catches what OTEL002 can't see: a config brought in by `chant import`, or one inside a ConfigMap.
+ */
+
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+import { configDiagnostics } from "./otel-helpers";
+
+export const otel120: PostSynthCheck = {
+  id: "OTEL120",
+  description: "A component in the collector config holds a literal credential",
+
+  check(ctx: PostSynthContext): PostSynthDiagnostic[] {
+    return configDiagnostics(ctx, "OTEL120");
+  },
+};

package/dist/rules/otel121.ts

@@ -0,0 +1,17 @@
+/**
+ * OTEL121: An exporter sends a credential over plaintext
+ *
+ * A started exporter sends a credential header (`authorization`, `api-key` and the other OTEL002 keys) or a credential key such as `api_key` or `token` to a non-loopback endpoint that is `http://`, or that has `tls.insecure: true` and isn't `https://`.
+ */
+
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+import { configDiagnostics } from "./otel-helpers";
+
+export const otel121: PostSynthCheck = {
+  id: "OTEL121",
+  description: "An exporter sends a credential over plaintext",
+
+  check(ctx: PostSynthContext): PostSynthDiagnostic[] {
+    return configDiagnostics(ctx, "OTEL121");
+  },
+};

package/dist/rules/otel122.ts

@@ -0,0 +1,17 @@
+/**
+ * OTEL122: zpages or pprof listens on a non-loopback address
+ *
+ * zpages serves span samples and pipeline internals, and pprof serves profiles, with no authentication. A started one bound to anything but loopback (`0.0.0.0`, a pod IP, an `${env:...}` host) is reachable by whoever reaches that address. `health_check` is not reported: it serves only a status, and a kubelet probe needs it on the pod IP.
+ */
+
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+import { configDiagnostics } from "./otel-helpers";
+
+export const otel122: PostSynthCheck = {
+  id: "OTEL122",
+  description: "zpages or pprof listens on a non-loopback address",
+
+  check(ctx: PostSynthContext): PostSynthDiagnostic[] {
+    return configDiagnostics(ctx, "OTEL122");
+  },
+};

package/dist/rules/otel123.ts

@@ -0,0 +1,17 @@
+/**
+ * OTEL123: A debug exporter at verbosity detailed shares a pipeline with a real exporter
+ *
+ * `verbosity: detailed` writes every record, attributes and bodies included, to the collector's log. In a pipeline that also sends to a backend, that copies the backend's data, sensitive values included, to wherever the collector's logs go.
+ */
+
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+import { configDiagnostics } from "./otel-helpers";
+
+export const otel123: PostSynthCheck = {
+  id: "OTEL123",
+  description: "A debug exporter at verbosity detailed shares a pipeline with a real exporter",
+
+  check(ctx: PostSynthContext): PostSynthDiagnostic[] {
+    return configDiagnostics(ctx, "OTEL123");
+  },
+};

package/dist/rules/otel124.ts

@@ -0,0 +1,17 @@
+/**
+ * OTEL124: A remote exporter has its sending queue or retries turned off
+ *
+ * A started exporter with a non-loopback endpoint and `sending_queue.enabled: false` blocks the pipeline when the backend is slow; with `retry_on_failure.enabled: false` it drops a failed request's data.
+ */
+
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+import { configDiagnostics } from "./otel-helpers";
+
+export const otel124: PostSynthCheck = {
+  id: "OTEL124",
+  description: "A remote exporter has its sending queue or retries turned off",
+
+  check(ctx: PostSynthContext): PostSynthDiagnostic[] {
+    return configDiagnostics(ctx, "OTEL124");
+  },
+};

package/dist/rules/otel125.ts

@@ -0,0 +1,17 @@
+/**
+ * OTEL125: A pipeline sends to a remote otlp or otlphttp exporter without batching
+ *
+ * No `batch` processor in the pipeline, and the `otlp` or `otlphttp` exporter (non-loopback endpoint) sets no `sending_queue.batch`. At v0.130.0 neither exporter batches by default, so each small request goes out on its own. Other exporters may batch themselves and are not checked.
+ */
+
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+import { configDiagnostics } from "./otel-helpers";
+
+export const otel125: PostSynthCheck = {
+  id: "OTEL125",
+  description: "A pipeline sends to a remote otlp or otlphttp exporter without batching",
+
+  check(ctx: PostSynthContext): PostSynthDiagnostic[] {
+    return configDiagnostics(ctx, "OTEL125");
+  },
+};

package/dist/rules/otel126.ts

@@ -0,0 +1,17 @@
+/**
+ * OTEL126: k8sattributes extracts a metadata field it does not support
+ *
+ * Each name in a `k8sattributes` processor's `extract.metadata` must be one `Config.Validate` accepts at collector-contrib v0.130.0 (`K8S_ATTRIBUTES_METADATA`); the collector refuses any other.
+ */
+
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+import { configDiagnostics } from "./otel-helpers";
+
+export const otel126: PostSynthCheck = {
+  id: "OTEL126",
+  description: "k8sattributes extracts a metadata field it does not support",
+
+  check(ctx: PostSynthContext): PostSynthDiagnostic[] {
+    return configDiagnostics(ctx, "OTEL126");
+  },
+};

package/dist/rules/otel127.ts

@@ -0,0 +1,17 @@
+/**
+ * OTEL127: resourcedetection lists a detector that does not exist
+ *
+ * Each name in a started `resourcedetection` processor's `detectors` must be one the processor registers at collector-contrib v0.130.0 (`RESOURCE_DETECTORS`); any other fails the processor's build and the collector exits.
+ */
+
+import type { PostSynthCheck, PostSynthContext, PostSynthDiagnostic } from "@intentius/chant/lint/post-synth";
+import { configDiagnostics } from "./otel-helpers";
+
+export const otel127: PostSynthCheck = {
+  id: "OTEL127",
+  description: "resourcedetection lists a detector that does not exist",
+
+  check(ctx: PostSynthContext): PostSynthDiagnostic[] {
+    return configDiagnostics(ctx, "OTEL127");
+  },
+};

package/dist/semconv.d.ts

@@ -5,7 +5,8 @@
  * A collector config has no metadata channel, so a config cannot say which
  * semconv version its attribute keys follow. What it can show is that it uses
  * a vocabulary: a `spanmetrics` dimension named `gen_ai.request.model`, an
- * OTTL statement deleting `gen_ai.input.messages`. `semconvUsage()` finds
+ * OTTL statement deleting `gen_ai.input.messages`, a `k8sattributes`
+ * processor extracting `k8s.pod.name`. `semconvUsage()` finds
  * those and pairs each vocabulary with the pin this package's keys follow, the
  * same way `collectorTopology()` pairs a component type with the pin of the
  * definition this process has. Reading a parsed YAML file and reading the

package/dist/semconv.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"semconv.d.ts","sourceRoot":"","sources":["../src/semconv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAqB,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AAC7D,OAAO,EAAc,KAAK,eAAe,EAAsB,MAAM,SAAS,CAAC;AAE/E,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IAChC,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,SAAS,CAAC;IACf,2EAA2E;IAC3E,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CACpC;AAKD,eAAO,MAAM,oBAAoB,EAAE,aAAa,CAAC,iBAAiB,CAEhE,CAAC;AAEH,mEAAmE;AACnE,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAWD,0GAA0G;AAC1G,wBAAgB,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,YAAY,EAAE,CAYpE"}
+{"version":3,"file":"semconv.d.ts","sourceRoot":"","sources":["../src/semconv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAkC,KAAK,SAAS,EAAE,MAAM,UAAU,CAAC;AAC1E,OAAO,EAAc,KAAK,eAAe,EAAsB,MAAM,SAAS,CAAC;AAE/E,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IAChC,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,SAAS,CAAC;IACf,2EAA2E;IAC3E,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CACpC;AAOD,eAAO,MAAM,oBAAoB,EAAE,aAAa,CAAC,iBAAiB,CAGhE,CAAC;AAEH,mEAAmE;AACnE,MAAM,WAAW,YAAa,SAAQ,SAAS;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAWD,0GAA0G;AAC1G,wBAAgB,YAAY,CAAC,MAAM,EAAE,eAAe,GAAG,YAAY,EAAE,CAYpE"}

package/dist/skills/chant-otel.md

@@ -78,10 +78,14 @@ It deletes prompt, completion, system-instruction and tool-call content from spa
 
 - Reference components by entity where you can. A string id (`"otlp/backend"`) is allowed for a component declared elsewhere, and OTEL101 fails the build if nothing declares it.
 - Put `memory_limiter` first in `processors` (OTEL105).
-- Never write a credential literally. Use `"${env:NAME}"` and the collector reads it at start-up (OTEL002).
+- Never write a credential literally. Use `"${env:NAME}"` and the collector reads it at start-up (OTEL002 in source, OTEL120 in the config). Don't send one over `http://` or `tls.insecure: true` (OTEL121).
 - Every pipeline needs at least one receiver and one exporter (OTEL102). A declared component no pipeline uses is a warning (OTEL103).
 - Don't split metrics by a per-request id (`gen_ai.conversation.id`, `gen_ai.response.id`, `gen_ai.tool.call.id`, `session.id`, `user.id`, `enduser.id`) or a content key: each value starts new time series (OTEL116).
 - Give every listener its own port. The collector's own metrics already use localhost:8888, so a `prometheus` exporter there makes it exit with "address already in use" (OTEL117).
+- Keep `zpages` and `pprof` on localhost (OTEL122). `health_check` may listen on 0.0.0.0 for probes.
+- Put `batch` in every pipeline that sends to a remote `otlp` or `otlphttp` exporter (OTEL125), and leave the exporter's `sending_queue` and `retry_on_failure` on (OTEL124).
+- Use a `drop` policy rather than `invert_match`, and `readers` rather than `service.telemetry.metrics.address` (OTEL119).
+- In a workspace, or with `telemetry.attribution: true`, leave `service.name`, `service.version`, `deployment.environment.name`, `vcs.ref.head.revision` and `chant.*` resource attributes alone: `insert` rather than `upsert`, and `override: false` on `resourcedetection` (OTEL118).
 - Declared extensions are enabled in declaration order unless a `Service` lists `extensions` itself.
 
 ## Starting from an existing config
@@ -97,4 +101,4 @@ The importer writes `receivers.ts`, `processors.ts`, `exporters.ts`, `connectors
 
 ## Reading the result
 
-`collectorTopologyOf(entities)` returns the pipelines, each component's endpoints and schema pin, for each exporter the signals it carries, the connector `edges` between pipelines, and under `semconv` the semantic-conventions version (`GENAI_SEMCONV_PIN`) the config's `gen_ai.` keys follow, as plain data.
+`collectorTopologyOf(entities)` returns the pipelines, each component's endpoints and schema pin, for each exporter the signals it carries, the connector `edges` between pipelines, and under `semconv` the semantic-conventions version the config's `gen_ai.` keys (`GENAI_SEMCONV_PIN`) and `k8s.` keys (`SEMCONV_PIN`) follow, as plain data.