@intentius/chant-lexicon-otel 0.97.0 → 0.99.0

package/src/import/testdata/upstream/loadbalancing-agent.yaml

@@ -0,0 +1,38 @@
+# Vendored from opentelemetry-collector-contrib v0.130.0 (Apache-2.0), unchanged below this header:
+# https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/v0.130.0/exporter/loadbalancingexporter/example/otel-agent-config.yaml
+
+receivers:
+  fluentforward:
+    endpoint: 0.0.0.0:24224
+
+processors:
+  batch:
+
+exporters:
+  debug:
+    verbosity: detailed
+  loadbalancing:
+    protocol:
+      otlp:
+        timeout: 1s
+        tls:
+          insecure: true
+    resolver:
+      static:
+        hostnames:
+          - otel-collector-1:4317
+          - otel-collector-2:4317
+          - otel-collector-3:4317
+
+extensions:
+  health_check:
+  pprof:
+  zpages:
+
+service:
+  extensions: [pprof, zpages, health_check]
+  pipelines:
+    logs:
+      receivers: [fluentforward]
+      processors: [batch]
+      exporters: [loadbalancing, debug]

package/src/import/testdata/upstream/loadbalancing-backend.yaml

@@ -0,0 +1,27 @@
+# Vendored from opentelemetry-collector-contrib v0.130.0 (Apache-2.0), unchanged below this header:
+# https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/v0.130.0/exporter/loadbalancingexporter/example/otel-collector-config.yaml
+
+receivers:
+  otlp:
+    protocols:
+      grpc:
+
+processors:
+  batch:
+
+exporters:
+  debug:
+    verbosity: detailed
+
+extensions:
+  health_check:
+  pprof:
+  zpages:
+
+service:
+  extensions: [pprof, zpages, health_check]
+  pipelines:
+    logs:
+      receivers: [otlp]
+      processors: [batch]
+      exporters: [debug]

package/src/import/testdata/upstream/logline-filter-in.yaml

@@ -0,0 +1,20 @@
+# Vendored from opentelemetry-collector-contrib v0.130.0 (Apache-2.0), unchanged below this header:
+# https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/v0.130.0/examples/logline-filtering/otel-col-config-filter-in-logs.yaml
+
+receivers:
+  filelog:
+    include: [/var/log/busybox/simple.log]
+    operators:
+      - type: filter
+        expr: 'body not matches "^WARN:"'
+
+service:
+  pipelines:
+    logs:
+      receivers: [filelog]
+      exporters: [otlp/custom]
+      processors: []
+
+exporters:
+  otlp/custom:
+    endpoint: http://0.0.0.0:4242

package/src/import/testdata/upstream/logline-filter-out.yaml

@@ -0,0 +1,20 @@
+# Vendored from opentelemetry-collector-contrib v0.130.0 (Apache-2.0), unchanged below this header:
+# https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/v0.130.0/examples/logline-filtering/otel-col-config-filter-out-logs.yaml
+
+receivers:
+  filelog:
+    include: [/var/log/busybox/simple.log]
+    operators:
+      - type: filter
+        expr: 'body matches "^INFO:"'
+
+service:
+  pipelines:
+    logs:
+      receivers: [filelog]
+      exporters: [otlp/custom]
+      processors: []
+
+exporters:
+  otlp/custom:
+    endpoint: http://0.0.0.0:4242

package/src/import/testdata/upstream/secure-tracing.yaml

@@ -0,0 +1,26 @@
+# Vendored from opentelemetry-collector-contrib v0.130.0 (Apache-2.0), unchanged below this header:
+# https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/v0.130.0/examples/secure-tracing/otel-collector-config.yaml
+
+receivers:
+  otlp:
+    protocols:
+      grpc:
+        endpoint: 0.0.0.0:55690
+        tls:
+          cert_file: /etc/otel-collector.crt
+          key_file: /etc/otel-collector.key
+
+processors:
+  batch:
+
+exporters:
+  debug:
+    verbosity: detailed
+
+service:
+  pipelines:
+    traces:
+      receivers: [otlp]
+      processors: [batch]
+      exporters: [debug]
+

package/src/import/testdata/upstream/servicegraph-nop.yaml

@@ -0,0 +1,28 @@
+# Vendored from opentelemetry-collector-contrib v0.130.0 (Apache-2.0), unchanged below this header:
+# https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/v0.130.0/connector/servicegraphconnector/testdata/service-graph-connector-config.yaml
+
+receivers:
+  nop:
+
+exporters:
+  nop:
+
+connectors:
+  servicegraph:
+    latency_histogram_buckets: [1,2,3,4,5]
+    dimensions:
+      - dimension-1
+      - dimension-2
+    store:
+      ttl: 1s
+      max_items: 10
+    database_name_attributes: [db.name]
+
+service:
+  pipelines:
+    traces:
+      receivers: [nop]
+      exporters: [servicegraph]
+    metrics:
+      receivers: [servicegraph]
+      exporters: [nop]

package/src/lint/rules/literal-credential.ts

@@ -25,25 +25,54 @@ export const literalCredentialRule: LintRule = {
     const diagnostics: LintDiagnostic[] = [];
     const source = context.sourceFile;
 
+    // `const x = { ... }` (or `[...]`, or a string) anywhere in the file, so a
+    // config value lifted out of the constructor into a named const, the way
+    // COR001 asks, is scanned where it is used.
+    const consts = new Map<string, ts.Expression>();
+    const collect = (node: ts.Node) => {
+      if (ts.isVariableDeclarationList(node) && node.flags & ts.NodeFlags.Const) {
+        for (const d of node.declarations) {
+          if (ts.isIdentifier(d.name) && d.initializer) consts.set(d.name.text, d.initializer);
+        }
+      }
+      ts.forEachChild(node, collect);
+    };
+    collect(source);
+
+    const flag = (key: string, node: ts.Node) =>
+      diagnostics.push({
+        ruleId: "OTEL002",
+        severity: "error",
+        message: `\`${key}\` is a literal credential; write "\${env:NAME}" (or "\${file:/path}") and let the collector read it at start-up`,
+        file: context.filePath,
+        ...position(source, node),
+      });
+
+    const scanned = new Set<ts.Node>();
+    const scanValue = (key: string | undefined, value: ts.Expression) => {
+      let init: ts.Expression = value;
+      if (ts.isIdentifier(init)) {
+        const resolved = consts.get(init.text);
+        if (!resolved) return;
+        init = resolved;
+      }
+      if (ts.isObjectLiteralExpression(init) || ts.isArrayLiteralExpression(init)) {
+        if (scanned.has(init)) return;
+        scanned.add(init);
+        if (ts.isObjectLiteralExpression(init)) scan(init);
+        else for (const el of init.elements) scanValue(undefined, el as ts.Expression);
+        return;
+      }
+      if (!key || !SECRET_KEY.test(key) || /_file$/i.test(key)) return;
+      const text = literalText(init);
+      if (text === undefined || text === "" || text.includes("${")) return;
+      flag(key, value);
+    };
+
     const scan = (obj: ts.ObjectLiteralExpression) => {
       for (const prop of obj.properties) {
-        if (!ts.isPropertyAssignment(prop)) continue;
-        const key = propertyName(prop);
-        const init = prop.initializer;
-        if (ts.isObjectLiteralExpression(init)) {
-          scan(init);
-          continue;
-        }
-        if (!key || !SECRET_KEY.test(key) || /_file$/i.test(key)) continue;
-        const text = literalText(init);
-        if (text === undefined || text === "" || text.includes("${")) continue;
-        diagnostics.push({
-          ruleId: "OTEL002",
-          severity: "error",
-          message: `\`${key}\` is a literal credential; write "\${env:NAME}" (or "\${file:/path}") and let the collector read it at start-up`,
-          file: context.filePath,
-          ...position(source, init),
-        });
+        if (ts.isShorthandPropertyAssignment(prop)) scanValue(prop.name.text, prop.name);
+        else if (ts.isPropertyAssignment(prop)) scanValue(propertyName(prop), prop.initializer);
       }
     };
 

package/src/lint/rules/rules.test.ts

@@ -67,4 +67,20 @@ describe("OTEL002 literal credential", () => {
     );
     expect(diags).toEqual([]);
   });
+
+  test("follows config lifted into named consts, and looks inside lists", () => {
+    const diags = literalCredentialRule.check(
+      ctx(`
+        const headers: OtlpExporterConfig["headers"] = { authorization: "Bearer abc123" };
+        const safe = { authorization: "Bearer \${env:TOKEN}" };
+        const token = "literal";
+        const config = { scrape_configs: [{ job_name: "x", basic_auth: { username: "u", password: "p" } }] };
+        new OtlpExporter({ endpoint: "x:4317", headers });
+        new OtlpExporter({ name: "b", endpoint: "x:4317", headers: safe });
+        new SplunkHecExporter({ token, endpoint: "https://hec" });
+        new PrometheusReceiver({ config });
+      `),
+    );
+    expect(diags.map((d) => d.message.split("`")[1])).toEqual(["authorization", "token", "password"]);
+  });
 });

package/src/plugin.ts

@@ -9,6 +9,9 @@ import { otelAuditCatalog } from "./lint/audit-catalog";
 import { completions } from "./lsp/completions";
 import { hover } from "./lsp/hover";
 import { detectTemplate } from "./detect";
+import { OtelCollectorParser } from "./import/parser";
+import { OtelCollectorGenerator } from "./import/generator";
+import { collectorConfigImporter } from "./import/embedded";
 import { otelSkills } from "./skill-defs";
 import { BUILTIN_CATALOG } from "./catalog";
 import { COLLECTOR_PIN } from "./define";
@@ -96,6 +99,18 @@ export const otelPlugin: LexiconPlugin = {
     return detectTemplate(data);
   },
 
+  templateParser() {
+    return new OtelCollectorParser();
+  },
+
+  templateGenerator() {
+    return new OtelCollectorGenerator();
+  },
+
+  embeddedImporters() {
+    return [collectorConfigImporter];
+  },
+
   completionProvider(ctx: CompletionContext) {
     return completions(ctx);
   },

package/src/skills/chant-otel.md

@@ -78,6 +78,17 @@ It deletes prompt, completion, system-instruction and tool-call content from spa
 - Every pipeline needs at least one receiver and one exporter (OTEL102). A declared component no pipeline uses is a warning (OTEL103).
 - Declared extensions are enabled in declaration order unless a `Service` lists `extensions` itself.
 
+## Starting from an existing config
+
+When the user already has a collector config file, import it rather than retyping it:
+
+```bash
+chant import otel-collector-config.yaml --output src
+chant build src --lexicon otel -o collector.yaml   # the same config back
+```
+
+The importer writes `receivers.ts`, `processors.ts`, `exporters.ts`, `connectors.ts`, `extensions.ts`, `pipelines.ts`, and `service.ts` when extensions or telemetry need a `Service`. A component type with no built-in class lands in `custom-components.ts` as a `defineComponent` whose config is untyped data; offer to give it a config interface. Settings outside a built-in's config type still import and build, but `tsc` flags them. Read the warnings `chant import` prints: they name anything the lexicon has no place for.
+
 ## Reading the result
 
 `collectorTopologyOf(entities)` returns the pipelines, each component's endpoints and schema pin, for each exporter the signals it carries, the connector `edges` between pipelines, and under `semconv` the semantic-conventions version (`GENAI_SEMCONV_PIN`) the config's `gen_ai.` keys follow, as plain data.