@intentius/chant-lexicon-prometheus 0.102.0 → 0.104.0

package/README.md

@@ -38,7 +38,9 @@ Types follow Prometheus `v3.15.0` and Alertmanager `v0.34.1` (`PROMETHEUS_PIN`).
 
 ## Checks
 
-PROM001 to PROM003 run on source (literal credentials, PromQL syntax in literals, `Slo` objective, window and SLI literals). PROM101 to PROM107 run over the built rule file: unique group names, duplicate rules, durations, PromQL syntax, rule shape, severity labels and summaries. PROM201 to PROM210 run over `alertmanager.yml`: receivers and time intervals that exist, every alert severity routed (PROM202, one build root at a time), root route shape, matcher syntax, unused receivers, durations, and each of the 18 receiver integrations checked as Alertmanager checks it (a missing destination or credential, settings it rejects).
+PROM001 to PROM003 run on source (literal credentials, PromQL syntax in literals, `Slo` objective, window and SLI literals). PROM101 to PROM107 run over the built rule file: unique group names, duplicate rules, durations, PromQL syntax, rule shape, severity labels and summaries. PROM201 to PROM210 run over `alertmanager.yml`: receivers and time intervals that exist, every alert severity routed (PROM202, one build root at a time), root route shape, matcher syntax, unused receivers, durations, and each of the 18 receiver integrations checked as Alertmanager checks it (a missing destination or credential, settings it rejects). PROM301 reads the rule file against the collector configs in the same build, and reports a spanmetrics, servicegraph or GenAI metric no collector emits, or a `by` label that is not a declared dimension.
+
+PROM211 to PROM219 also run over the rule file. They report alerts with no `for`, no comparison, or a template label the expression drops, and an `alertname` label set by hand. They also report `rate` over a name that is not a counter's, `histogram_quantile` without `_bucket` or `le`, recording rule names not in `level:metric:operations` form, and regex matchers that need no regex. PROM212, an alert with no `runbook_url`, is opt-in through the `all` lint preset. PROM220 to PROM224 run over `alertmanager.yml`: TLS verification turned off, SMTP or HTTP credentials sent without TLS, a `repeat_interval` under `group_interval`, and an inhibit rule with no `equal` whose two sides can match one alert.
 
 PromQL is parsed with `@prometheus-io/lezer-promql`, the Prometheus project's own grammar. `promtoolCheckRules` and `amtoolCheckConfig` run the upstream tools when they are installed.
 

package/dist/collector-metrics.d.ts

@@ -0,0 +1,58 @@
+/**
+ * The metric names the collector configs in a build emit through their
+ * `spanmetrics`, `servicegraph`, `sum` and `signaltometrics` connectors (the
+ * last two are how the otel GenAI preset counts tokens and derives the
+ * conventions' client metrics), and the PromQL that reads under those
+ * connectors' namespaces without matching one of them (PROM301).
+ *
+ * Grafana's GRAF118 runs `collectorMetricIssues` over panel queries; the
+ * prometheus lexicon runs it over rule files. Names follow the otel lexicon's
+ * `metric-names.ts`, with each config's `prometheus` and
+ * `prometheusremotewrite` exporters' `namespace` and `add_metric_suffixes`.
+ * A component under a renamed type (`span_metrics`, `service_graph`,
+ * `signal_to_metrics`) is read as the built-in it names, through the otel
+ * lexicon's `canonicalTypeOf`.
+ *
+ * Collector configs come from two places. `chant build` gives a lexicon's
+ * checks only that lexicon's output, but every entity in the build, so the
+ * otel lexicon's own config is rebuilt from the build's otel entities with
+ * `buildCollectorConfig`. Any output document shaped like a collector config,
+ * or a Kubernetes ConfigMap holding one, is read as well.
+ */
+import type { PostSynthContext } from "@intentius/chant/lint/post-synth";
+import { type CollectorConfig } from "@intentius/chant-lexicon-otel/model";
+/** One metric a collector config emits, as Prometheus sees it. */
+export interface EmittedMetric {
+    /** The connector that emits it, e.g. `spanmetrics/genai`. */
+    connector: string;
+    /** The labels a series of it can carry; undefined when the exporter adds every resource attribute. */
+    labels?: Set<string>;
+}
+/** What the collector configs in a build emit. */
+export interface CollectorMetrics {
+    /** The name prefixes the connectors own, e.g. `traces_span_metrics_`. */
+    namespaces: string[];
+    /** Every emitted Prometheus name. A histogram is its `_bucket`, `_sum` and `_count` series. */
+    metrics: Map<string, EmittedMetric[]>;
+}
+/** Every collector config in the build: rebuilt from its otel entities, and found in its output. */
+export declare function buildCollectorConfigs(ctx: PostSynthContext): CollectorConfig[];
+/** The metrics the collector configs emit; undefined when there are none. */
+export declare function collectorMetrics(configs: CollectorConfig[]): CollectorMetrics | undefined;
+export interface CollectorMetricIssue {
+    kind: "name" | "label";
+    metric: string;
+    label?: string;
+    message: string;
+}
+/**
+ * What a PromQL expression reads under the build's connector namespaces and
+ * the build does not emit: a metric name no connector writes, and a
+ * `by (...)` label none of the aggregated metrics carries. A name outside
+ * every namespace is not read. An aggregation is checked only when every
+ * series under it is an emitted metric and nothing under it adds a label
+ * (`label_replace`, `label_join`). Selectors come from the lexicon's
+ * `promql-analysis.ts`.
+ */
+export declare function collectorMetricIssues(expr: string, emitted: CollectorMetrics): CollectorMetricIssue[];
+//# sourceMappingURL=collector-metrics.d.ts.map

package/dist/collector-metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collector-metrics.d.ts","sourceRoot":"","sources":["../src/collector-metrics.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAezE,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,qCAAqC,CAAC;AAM5F,kEAAkE;AAClE,MAAM,WAAW,aAAa;IAC5B,6DAA6D;IAC7D,SAAS,EAAE,MAAM,CAAC;IAClB,sGAAsG;IACtG,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;CACtB;AAED,kDAAkD;AAClD,MAAM,WAAW,gBAAgB;IAC/B,yEAAyE;IACzE,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,+FAA+F;IAC/F,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;CACvC;AA+BD,oGAAoG;AACpG,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,gBAAgB,GAAG,eAAe,EAAE,CAK9E;AAED,6EAA6E;AAC7E,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,gBAAgB,GAAG,SAAS,CA6FzF;AAyBD,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,oBAAoB,EAAE,CA8BrG"}

package/dist/index.d.ts

@@ -7,7 +7,7 @@ export { buildRuleFile, buildAlertmanagerConfig, ruleFileYaml, alertmanagerYaml,
 export { isValidDuration, durationMs, formatDuration } from "./duration.js";
 export { parseMatchers, matcherMatches, matcher, type Matcher, type MatchOp, type ParsedMatchers } from "./matchers.js";
 export { checkPromql, PROMQL_GRAMMAR, type PromqlCheck } from "./promql.js";
-export { validateRuleFile, validateAlertmanagerConfig, validateSeverityRouting, alertSeverities, type PrometheusIssue, type PrometheusIssueCode, } from "./validate-config.js";
+export { validateRuleFile, validateRunbookUrls, validateAlertmanagerConfig, validateSeverityRouting, alertSeverities, type PrometheusIssue, type PrometheusIssueCode, } from "./validate-config.js";
 export { PROMETHEUS_PIN } from "./pin.js";
 export { promtoolCheckRules, promtoolTestRules, amtoolCheckConfig, hasTool, type ToolResult } from "./tools.js";
 export { Slo, sloMetrics, sloPropsProblem, sliExprProblem, DEFAULT_BURN_RATES, SLO_WINDOW_PLACEHOLDER, type SloProps, type SloSli, type SloAlerting, type SloAlertTier, type BurnRateWindow, type SloMembers, type SloInstance, type SloMetrics, type SloBurnRate, GenAiRules, genAiRuleMetrics, type GenAiRulesProps, type GenAiRulesMembers, type GenAiRulesInstance, type GenAiRuleMetrics, type GenAiPrice, type GenAiAlerting, type GenAiAlertOptions, type GenAiRatioAlert, type GenAiLatencyAlert, type GenAiBudget, type GenAiAlertInfo, type GenAiQuantileSeries, } from "./composites/index.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGvE,OAAO,EACL,SAAS,EACT,eAAe,EACf,WAAW,EACX,eAAe,EACf,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,IAAI,EACT,KAAK,aAAa,EAClB,KAAK,YAAY,GAClB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,KAAK,EACL,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,oBAAoB,EACpB,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,OAAO,EACP,UAAU,EACV,aAAa,EACb,cAAc,EACd,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,GAChC,MAAM,gBAAgB,CAAC;AAGxB,cAAc,SAAS,CAAC;AACxB,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,YAAY,EACZ,gBAAgB,EAChB,QAAQ,EACR,KAAK,aAAa,EAClB,KAAK,iBAAiB,GACvB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AACrH,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,UAAU,CAAC;AACzE,OAAO,EACL,gBAAgB,EAChB,0BAA0B,EAC1B,uBAAuB,EACvB,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,mBAAmB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAC;AAGvC,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAG7G,OAAO,EACL,GAAG,EACH,UAAU,EACV,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,KAAK,QAAQ,EACb,KAAK,MAAM,EACX,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,UAAU,EACV,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAGvE,OAAO,EACL,SAAS,EACT,eAAe,EACf,WAAW,EACX,eAAe,EACf,UAAU,EACV,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,IAAI,EACT,KAAK,aAAa,EAClB,KAAK,YAAY,GAClB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,KAAK,EACL,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,oBAAoB,EACpB,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,kBAAkB,EAClB,aAAa,EACb,OAAO,EACP,UAAU,EACV,aAAa,EACb,cAAc,EACd,sBAAsB,EACtB,oBAAoB,EACpB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,yBAAyB,EAC9B,KAAK,0BAA0B,GAChC,MAAM,gBAAgB,CAAC;AAGxB,cAAc,SAAS,CAAC;AACxB,OAAO,EACL,aAAa,EACb,uBAAuB,EACvB,YAAY,EACZ,gBAAgB,EAChB,QAAQ,EACR,KAAK,aAAa,EAClB,KAAK,iBAAiB,GACvB,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,YAAY,CAAC;AACrH,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,UAAU,CAAC;AACzE,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,0BAA0B,EAC1B,uBAAuB,EACvB,eAAe,EACf,KAAK,eAAe,EACpB,KAAK,mBAAmB,GACzB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,OAAO,CAAC;AAGvC,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,SAAS,CAAC;AAG7G,OAAO,EACL,GAAG,EACH,UAAU,EACV,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,KAAK,QAAQ,EACb,KAAK,MAAM,EACX,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,WAAW,EAChB,UAAU,EACV,gBAAgB,EAChB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,aAAa,EAClB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,cAAc,CAAC"}

package/dist/integrity.json

@@ -1,14 +1,14 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "3a08bda6be6a7f9af23c0f4b4219f29e5c51d45b822d40232bba4b5c377e7f35",
+    "manifest.json": "6dd07ad408d55335396f03486bd6fe114b8cf44e865d75141b97b4de096bd756",
     "meta.json": "6aeeb24f8a09f61582620870021cdb0d781690d4a9d0efebc729d054df3eaebb",
     "types/index.d.ts": "150d72287453a24a40cdeffb8cf3e9dc6e77ab58b342b48d01902dc58fb5f85d",
-    "rules/literal-credential.ts": "384c500ab33d9608b545b0743ed4a382c76f645175eda9b1628e00e24b87fbb7",
+    "rules/literal-credential.ts": "1ea8b768e9dc4a6d7b133a52923ce2e8cb815584d3eeb1854f77af34d50f8257",
     "rules/prom-ast.ts": "6de6f83cfa81505efeb2c55aa1e9872ead9b09695a400c92bec8fa11059a551f",
     "rules/promql-literal.ts": "c734b6d9f0949ac7529edd6e687f7a5a1e62f37e614492f0e92e7062260e85db",
     "rules/slo-literal.ts": "13f86da17d11939ebbcf64be38b092b602f6c9e95876e1615c00a032638d75b1",
-    "rules/prom-helpers.ts": "a35368d0d33772ba3b100f2c36edd3507e509ace552600f3e37f0f37540344c5",
+    "rules/prom-helpers.ts": "7e79dcdbdd9274c5c5988861c970f44e558f6fb26db1298b37869ba9c60d078a",
     "rules/prom101.ts": "f153c2b0b5f43b51e15053d732f27321aeb33c76683416b47982a95986704935",
     "rules/prom102.ts": "d40d7d4690ada12efcf50c471739b2254376cbd382c1d8c547bbadca3205a1fa",
     "rules/prom103.ts": "7801469c838023083ef3c196fffc6ab71b05270dba439fc19cb1dc383a6a8f64",
@@ -26,9 +26,24 @@
     "rules/prom208.ts": "7806675771732014956dc66e010d0b1ae4cdca11468632d2431a3bab263e1295",
     "rules/prom209.ts": "b33524371960cf3d1c207eba6971731685dd04daeaaa8e522ffee43af35cc1b6",
     "rules/prom210.ts": "0b98f92b9f78aee6664dab0d261660035a54dcc59a7d596cc80f8f972297a0ec",
+    "rules/prom211.ts": "e9212c375f489188dc5d328d63f5084a36cd50d0b156d216d40a3474345d4058",
+    "rules/prom212.ts": "10f0de5407332045d0040107aa3410fa26aa5fff87440472b7846c8258c25041",
+    "rules/prom213.ts": "5d2ed2ac68d7abfb70c66b1419711b44f6cb879be6ee8b2440a6b94f5a68acb6",
+    "rules/prom214.ts": "d6b15469cc47da26eaf9c68dba77b799e44a574094b5fc570af1dfbd2a29104c",
+    "rules/prom215.ts": "e65d90373879d2e9ed4d2738d9f681bc3c1cee1a99fb4736501b97fe8f3dfb62",
+    "rules/prom216.ts": "6d13a425f894817e9b6300a3271a223e67de1fc19d68d3dcb0783d09bdb6f105",
+    "rules/prom217.ts": "9b52d59e6004a792f059ae579080b0ac365ebe37b01e9ad17794ede2d5fc3d03",
+    "rules/prom218.ts": "33eb54bf60cc9eee3a4aac15ce81922abfbae6b664eaf1985c649e6420261fe7",
+    "rules/prom219.ts": "a50e0a24d6bbae2f11f394fb8b844a56a3bc7e1d4bb617ebf060e160eb736295",
+    "rules/prom220.ts": "75001ec27cd8a7591f028cd23814c2a67a941ad7e80d224738b383c83194d81f",
+    "rules/prom221.ts": "d314ed016d08ba2facab4d50da22adf70fce9d74887adb395b25a4b3fbe232b1",
+    "rules/prom222.ts": "fe5cdf757a9d714462e1a1e884c8995e3c2afb5fd39bace2a53001a981a94e31",
+    "rules/prom223.ts": "6fe7c4c33b8f4e617be851875b4d4bc365c071b4561bc42b6b3885bf5b9b3af6",
+    "rules/prom224.ts": "7ebb892f9158da33fcc7f8c6ddef14d72675a7f14c9cfb9c5d7336974546c42e",
+    "rules/prom301.ts": "2574209407b9cf8d1157540db0d99632e8e16df69306fe8f4453a6689a518557",
     "skills/chant-prometheus.md": "842db9fa6329b486b95987aa93e1542af52436aa326c02275854e64b51946edb",
     "skills/chant-prometheus-alertmanager.md": "4c4a22bea6147653d09d7d3f55f81c4927963d4e2f50b2e430fbb9023e99570b",
     "skills/chant-prometheus-kubernetes.md": "cca016857891f4cabf1feb6f9db83c220a2e6ece200cd89e635851079f8070a8"
   },
-  "composite": "f531d65e35b832fded42925aa74bf12dd9b405ae3eca545071965f9967e98d84"
+  "composite": "8d324a969da4588e9b601194bb74fd3cb09818e2ee6b8006d0a21b2e372e5054"
 }

package/dist/lint/audit-catalog.d.ts

@@ -10,4 +10,6 @@
  */
 import { type RuleMeta } from "@intentius/chant/audit/catalog";
 export declare const prometheusAuditCatalog: Record<string, RuleMeta>;
+/** Post-synth checks the `recommended` lint preset leaves out (#3363); see `prometheusPlugin.lintPresets()`. */
+export declare const OPT_IN_CHECKS: ReadonlySet<string>;
 //# sourceMappingURL=audit-catalog.d.ts.map

package/dist/lint/audit-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-catalog.d.ts","sourceRoot":"","sources":["../../src/lint/audit-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAA2B,KAAK,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAiBxF,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAsG3D,CAAC"}
+{"version":3,"file":"audit-catalog.d.ts","sourceRoot":"","sources":["../../src/lint/audit-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAA2B,KAAK,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAiBxF,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAyM3D,CAAC;AAEF,gHAAgH;AAChH,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,MAAM,CAAwB,CAAC"}

package/dist/lint/audit-lineage.d.ts

@@ -21,12 +21,33 @@
  *   configurable "this label or annotation must exist" checks that pint ships
  *   with nothing enabled, so they overlap PROM106 and PROM107 and no more.
  *
+ * The PROM211-PROM219 rule-file checks (#3363), against the same list:
+ * - alerts/comparison and promql/regexp are the same checks as PROM213 and
+ *   PROM218, so those are equivalent.
+ * - rule/for enforces a configured minimum `for`, and alerts/annotation a
+ *   configured annotation; with `for` required and runbook_url named they
+ *   are PROM211 and PROM212. alerts/for is not credited: it rejects bad
+ *   values and a redundant `for: 0s`, not a missing `for`.
+ * - alerts/template covers PROM214's dropped label and checks template
+ *   syntax besides. promql/rate reads the metric type from a live
+ *   Prometheus's metadata; PROM215 has only the name to go on. rule/name
+ *   is a configured name regex; PROM217 fixes it to level:metric:operations.
+ *   All three overlap.
+ *
  * Deliberately without a credit from these tools:
  * - PROM001 and PROM003: a literal credential in TypeScript source, and the
  *   Slo objective/window model. Neither tool reads either.
  * - PROM202 (severity not routed) and PROM207 (receiver never routed to):
  *   check-config accepts both, and `amtool config routes test` answers a
  *   different question (where one given label set goes).
+ * - PROM216 (histogram_quantile without _bucket or le) and PROM219
+ *   (alertname set by hand): no pint check reports either, and promtool's
+ *   rulefmt accepts both.
+ * - PROM220-PROM224: check-config accepts insecure_skip_verify, SMTP auth
+ *   without TLS, credentials over http://, a repeat_interval under
+ *   group_interval, and an inhibit rule without equal.
+ * - PROM301: no tool here reads a rule file together with the collector
+ *   config that produces its metrics.
  */
 import type { Lineage } from "@intentius/chant/audit/catalog";
 export declare const prometheusAuditLineage: Record<string, Lineage[]>;

package/dist/lint/audit-lineage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit-lineage.d.ts","sourceRoot":"","sources":["../../src/lint/audit-lineage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAC;AAY9D,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CA0B5D,CAAC"}
+{"version":3,"file":"audit-lineage.d.ts","sourceRoot":"","sources":["../../src/lint/audit-lineage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkDG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gCAAgC,CAAC;AAY9D,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,CAiC5D,CAAC"}

package/dist/lint/post-synth/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAmBvE,eAAO,MAAM,eAAe,EAAE,cAAc,EAkB3C,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/index.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAkCvE,eAAO,MAAM,eAAe,EAAE,cAAc,EAiC3C,CAAC"}

package/dist/lint/post-synth/prom-helpers.d.ts

@@ -24,10 +24,17 @@ export interface FoundDocs {
 }
 /** Every rule file and Alertmanager config in the output. Parsed with js-yaml rather than `ctx.docs`, which keeps block scalars and flow lists as strings. */
 export declare function prometheusDocs(ctx: PostSynthContext): FoundDocs;
-/** Diagnostics for one rule-file code (PROM101-PROM107) across every rule file in the output. */
+/** Diagnostics for one rule-file code (PROM101-PROM107, PROM211, PROM213-PROM219) across every rule file in the output. */
 export declare function ruleFileDiagnostics(ctx: PostSynthContext, code: PrometheusIssueCode): PostSynthDiagnostic[];
-/** Diagnostics for one Alertmanager code (PROM201, PROM203-PROM210) across every `alertmanager.yml` in the output. */
+/** Diagnostics for one Alertmanager code (PROM201, PROM203-PROM210, PROM220-PROM224) across every `alertmanager.yml` in the output. */
 export declare function alertmanagerDiagnostics(ctx: PostSynthContext, code: PrometheusIssueCode): PostSynthDiagnostic[];
+/** PROM212 across every rule file in the output. Opt-in: the lexicon's `recommended` lint preset leaves it out (see ../../plugin.ts). */
+export declare function runbookDiagnostics(ctx: PostSynthContext): PostSynthDiagnostic[];
+/**
+ * PROM301: every rule expression in the output against the metrics the
+ * build's collector configs emit. Silent when the build has none.
+ */
+export declare function collectorMetricDiagnostics(ctx: PostSynthContext): PostSynthDiagnostic[];
 /** PROM202: joins every rule file in the output against every Alertmanager config in it. Silent when either is absent. */
 export declare function routingDiagnostics(ctx: PostSynthContext): PostSynthDiagnostic[];
 //# sourceMappingURL=prom-helpers.d.ts.map

package/dist/lint/post-synth/prom-helpers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"prom-helpers.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAG9F,OAAO,EAAkD,KAAK,kBAAkB,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAC3H,OAAO,EAKL,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;IAC7D,YAAY,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAA;KAAE,CAAC,CAAC;CACrE;AAED,8JAA8J;AAC9J,wBAAgB,cAAc,CAAC,GAAG,EAAE,gBAAgB,GAAG,SAAS,CAsB/D;AAYD,iGAAiG;AACjG,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,mBAAmB,GAAG,mBAAmB,EAAE,CAM3G;AAED,sHAAsH;AACtH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,mBAAmB,GAAG,mBAAmB,EAAE,CAM/G;AAED,0HAA0H;AAC1H,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CAK/E"}
+{"version":3,"file":"prom-helpers.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAI9F,OAAO,EAAkD,KAAK,kBAAkB,EAAE,KAAK,cAAc,EAAE,MAAM,aAAa,CAAC;AAC3H,OAAO,EAML,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,cAAc,CAAA;KAAE,CAAC,CAAC;IAC7D,YAAY,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,kBAAkB,CAAA;KAAE,CAAC,CAAC;CACrE;AAED,8JAA8J;AAC9J,wBAAgB,cAAc,CAAC,GAAG,EAAE,gBAAgB,GAAG,SAAS,CAsB/D;AAYD,2HAA2H;AAC3H,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,mBAAmB,GAAG,mBAAmB,EAAE,CAM3G;AAED,uIAAuI;AACvI,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,mBAAmB,GAAG,mBAAmB,EAAE,CAM/G;AAED,yIAAyI;AACzI,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CAE/E;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CA0BvF;AAED,0HAA0H;AAC1H,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,gBAAgB,GAAG,mBAAmB,EAAE,CAK/E"}

package/dist/lint/post-synth/prom211.d.ts

@@ -0,0 +1,12 @@
+/**
+ * PROM211: An alerting rule has no for, or for: 0s
+ *
+ * The alert fires on the first evaluation that matches, so one bad scrape
+ * pages. Left alone when the expression reads no series (vector(1), a dead
+ * man's switch) or already spans a window: every selector read through a
+ * *_over_time function, or two conditions joined by and (the multi-window
+ * burn-rate form, where the short window does what for would).
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const prom211: PostSynthCheck;
+//# sourceMappingURL=prom211.d.ts.map

package/dist/lint/post-synth/prom211.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom211.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom211.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,OAAO,EAAE,cAOrB,CAAC"}

package/dist/lint/post-synth/prom212.d.ts

@@ -0,0 +1,9 @@
+/**
+ * PROM212: An alerting rule has no runbook_url annotation (opt-in)
+ *
+ * Off unless enabled: the lint preset all, or a lint.rules entry for PROM212,
+ * turns it on. See validateRunbookUrls.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const prom212: PostSynthCheck;
+//# sourceMappingURL=prom212.d.ts.map

package/dist/lint/post-synth/prom212.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom212.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom212.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,OAAO,EAAE,cAOrB,CAAC"}

package/dist/lint/post-synth/prom213.d.ts

@@ -0,0 +1,11 @@
+/**
+ * PROM213: An alert expression has no comparison
+ *
+ * Every series the expression returns is an alert, so an expression with no
+ * comparison fires for all of them. absent(), absent_over_time() and unless
+ * count as a condition; a comparison with bool does not. An expression that
+ * reads no series (vector(1), a dead man's switch) is left alone.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const prom213: PostSynthCheck;
+//# sourceMappingURL=prom213.d.ts.map

package/dist/lint/post-synth/prom213.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom213.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom213.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,OAAO,EAAE,cAOrB,CAAC"}

package/dist/lint/post-synth/prom214.d.ts

@@ -0,0 +1,9 @@
+/**
+ * PROM214: An alert template reads a label the expression aggregates away
+ *
+ * A $labels.x whose x the expression's by (...) leaves out, or its without
+ * (...) names, renders empty. Labels the rule or its group set are left alone.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const prom214: PostSynthCheck;
+//# sourceMappingURL=prom214.d.ts.map

package/dist/lint/post-synth/prom214.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom214.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom214.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,OAAO,EAAE,cAOrB,CAAC"}

package/dist/lint/post-synth/prom215.d.ts

@@ -0,0 +1,9 @@
+/**
+ * PROM215: rate, irate or increase over a name that is not a counter's
+ *
+ * These functions treat every drop as a counter reset. A name not ending in
+ * _total, _count, _sum or _bucket is read as a gauge.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const prom215: PostSynthCheck;
+//# sourceMappingURL=prom215.d.ts.map

package/dist/lint/post-synth/prom215.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom215.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom215.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,OAAO,EAAE,cAOrB,CAAC"}

package/dist/lint/post-synth/prom216.d.ts

@@ -0,0 +1,10 @@
+/**
+ * PROM216: histogram_quantile over a series without _bucket, or without le
+ *
+ * A classic histogram's quantile needs its _bucket series with the le label
+ * kept. A native histogram has no _bucket series, so this check does not apply
+ * to one.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const prom216: PostSynthCheck;
+//# sourceMappingURL=prom216.d.ts.map

package/dist/lint/post-synth/prom216.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom216.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom216.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,OAAO,EAAE,cAOrB,CAAC"}

package/dist/lint/post-synth/prom217.d.ts

@@ -0,0 +1,9 @@
+/**
+ * PROM217: A recording rule name is not in level:metric:operations form
+ *
+ * Prometheus's naming convention for recorded series, e.g.
+ * job:http_requests:rate5m.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const prom217: PostSynthCheck;
+//# sourceMappingURL=prom217.d.ts.map

package/dist/lint/post-synth/prom217.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom217.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom217.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,OAAO,EAAE,cAOrB,CAAC"}

package/dist/lint/post-synth/prom218.d.ts

@@ -0,0 +1,10 @@
+/**
+ * PROM218: A regex matcher needs no regex, or is anchored
+ *
+ * A =~ or !~ with no regex metacharacters is an equality matcher written the
+ * slow way. Prometheus anchors every regex, so a leading ^ or trailing $ does
+ * nothing.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const prom218: PostSynthCheck;
+//# sourceMappingURL=prom218.d.ts.map

package/dist/lint/post-synth/prom218.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom218.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom218.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,OAAO,EAAE,cAOrB,CAAC"}

package/dist/lint/post-synth/prom219.d.ts

@@ -0,0 +1,9 @@
+/**
+ * PROM219: An alerting rule sets the alertname label
+ *
+ * Prometheus sets alertname to the rule's name after applying the rule's
+ * labels, so the value is overwritten.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const prom219: PostSynthCheck;
+//# sourceMappingURL=prom219.d.ts.map

package/dist/lint/post-synth/prom219.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom219.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom219.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,OAAO,EAAE,cAOrB,CAAC"}

package/dist/lint/post-synth/prom220.d.ts

@@ -0,0 +1,9 @@
+/**
+ * PROM220: A receiver turns off TLS certificate verification
+ *
+ * tls_config.insecure_skip_verify: true on a receiver, or in global, accepts
+ * any certificate the endpoint presents.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const prom220: PostSynthCheck;
+//# sourceMappingURL=prom220.d.ts.map

package/dist/lint/post-synth/prom220.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom220.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom220.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,OAAO,EAAE,cAOrB,CAAC"}

package/dist/lint/post-synth/prom221.d.ts

@@ -0,0 +1,10 @@
+/**
+ * PROM221: SMTP credentials sent with require_tls false
+ *
+ * An email receiver with SMTP auth and require_tls false (its own, or
+ * global.smtp_require_tls) can send the credentials in clear text. Implicit
+ * TLS is left alone.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const prom221: PostSynthCheck;
+//# sourceMappingURL=prom221.d.ts.map

package/dist/lint/post-synth/prom221.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom221.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom221.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,OAAO,EAAE,cAOrB,CAAC"}

package/dist/lint/post-synth/prom222.d.ts

@@ -0,0 +1,9 @@
+/**
+ * PROM222: Credentials sent to an http:// receiver URL
+ *
+ * An integration whose URL is http:// and whose request carries a credential:
+ * user info in the URL, http_config auth, or a key or token field.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const prom222: PostSynthCheck;
+//# sourceMappingURL=prom222.d.ts.map

package/dist/lint/post-synth/prom222.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom222.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom222.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,OAAO,EAAE,cAOrB,CAAC"}

package/dist/lint/post-synth/prom223.d.ts

@@ -0,0 +1,10 @@
+/**
+ * PROM223: repeat_interval is shorter than group_interval
+ *
+ * Alertmanager resends only when it flushes a group, every group_interval, so
+ * a shorter repeat_interval never takes effect. Intervals are inherited down
+ * the routing tree from Alertmanager's defaults.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const prom223: PostSynthCheck;
+//# sourceMappingURL=prom223.d.ts.map

package/dist/lint/post-synth/prom223.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom223.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom223.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,OAAO,EAAE,cAOrB,CAAC"}

package/dist/lint/post-synth/prom224.d.ts

@@ -0,0 +1,9 @@
+/**
+ * PROM224: An inhibit rule matches one alert as source and target, with no equal
+ *
+ * With no equal, any alert matching the source mutes every alert matching the
+ * target. When one alert can match both, alerts of that kind mute each other.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const prom224: PostSynthCheck;
+//# sourceMappingURL=prom224.d.ts.map

package/dist/lint/post-synth/prom224.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom224.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom224.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,OAAO,EAAE,cAOrB,CAAC"}

package/dist/lint/post-synth/prom301.d.ts

@@ -0,0 +1,14 @@
+/**
+ * PROM301: A rule reads a connector metric no collector in the build emits
+ *
+ * For each selector in a rule whose name falls under a namespace the build's
+ * spanmetrics, servicegraph or GenAI connectors own (spanmetrics' and
+ * servicegraph's defaults included), reports a name no collector config in
+ * the build emits, and a by (...) label that is not a dimension the config
+ * declares for the metrics aggregated. Silent for names outside those
+ * namespaces, and when the build has no collector config. See
+ * ../../collector-metrics.ts.
+ */
+import type { PostSynthCheck } from "@intentius/chant/lint/post-synth";
+export declare const prom301: PostSynthCheck;
+//# sourceMappingURL=prom301.d.ts.map

package/dist/lint/post-synth/prom301.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prom301.d.ts","sourceRoot":"","sources":["../../../src/lint/post-synth/prom301.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAyC,MAAM,kCAAkC,CAAC;AAG9G,eAAO,MAAM,OAAO,EAAE,cAOrB,CAAC"}

package/dist/lint/rules/literal-credential.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"literal-credential.d.ts","sourceRoot":"","sources":["../../../src/lint/rules/literal-credential.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAA+B,MAAM,4BAA4B,CAAC;AAGxF;;;GAGG;AACH,eAAO,MAAM,aAAa,aA8BxB,CAAC;AAYH;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,EAAE,QA4DnC,CAAC"}
+{"version":3,"file":"literal-credential.d.ts","sourceRoot":"","sources":["../../../src/lint/rules/literal-credential.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAA+B,MAAM,4BAA4B,CAAC;AAIxF;;;GAGG;AACH,eAAO,MAAM,aAAa,aA8BxB,CAAC;AAYH;;;;;;;;;GASG;AACH,eAAO,MAAM,qBAAqB,EAAE,QA+DnC,CAAC"}

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "prometheus",
-  "version": "0.102.0",
+  "version": "0.104.0",
   "chantVersion": ">=0.1.0",
   "namespace": "Prometheus",
   "intrinsics": [],

package/dist/okf/index.md

@@ -33,3 +33,18 @@ okf_version: '0.2'
 * [PROM208](/rules/PROM208.md) - An Alertmanager duration is not a duration
 * [PROM209](/rules/PROM209.md) - A receiver integration is missing its destination or credential
 * [PROM210](/rules/PROM210.md) - A receiver integration or global setting is one Alertmanager rejects
+* [PROM211](/rules/PROM211.md) - An alerting rule has no for, or for: 0s
+* [PROM212](/rules/PROM212.md) - An alerting rule has no runbook_url annotation (opt-in)
+* [PROM213](/rules/PROM213.md) - An alert expression has no comparison
+* [PROM214](/rules/PROM214.md) - An alert template reads a label the expression aggregates away
+* [PROM215](/rules/PROM215.md) - rate, irate or increase over a name that is not a counter's
+* [PROM216](/rules/PROM216.md) - histogram_quantile over a series without _bucket, or without le
+* [PROM217](/rules/PROM217.md) - A recording rule name is not in level:metric:operations form
+* [PROM218](/rules/PROM218.md) - A regex matcher needs no regex, or is anchored
+* [PROM219](/rules/PROM219.md) - An alerting rule sets the alertname label
+* [PROM220](/rules/PROM220.md) - A receiver turns off TLS certificate verification
+* [PROM221](/rules/PROM221.md) - SMTP credentials sent with require_tls false
+* [PROM222](/rules/PROM222.md) - Credentials sent to an http:// receiver URL
+* [PROM223](/rules/PROM223.md) - repeat_interval is shorter than group_interval
+* [PROM224](/rules/PROM224.md) - An inhibit rule matches one alert as source and target, with no equal
+* [PROM301](/rules/PROM301.md) - A rule reads a connector metric no collector in the build emits

package/dist/okf/rules/PROM211.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: PROM211
+description: 'An alerting rule has no for, or for: 0s'
+id: PROM211
+severity: error
+category: post-synth
+lexicon: prometheus
+docs: https://intentius.io/chant/lexicons/prometheus/rules/
+---
+An alerting rule has no for, or for: 0s

package/dist/okf/rules/PROM212.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: PROM212
+description: An alerting rule has no runbook_url annotation (opt-in)
+id: PROM212
+severity: error
+category: post-synth
+lexicon: prometheus
+docs: https://intentius.io/chant/lexicons/prometheus/rules/
+---
+An alerting rule has no runbook_url annotation (opt-in)

package/dist/okf/rules/PROM213.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: PROM213
+description: An alert expression has no comparison
+id: PROM213
+severity: error
+category: post-synth
+lexicon: prometheus
+docs: https://intentius.io/chant/lexicons/prometheus/rules/
+---
+An alert expression has no comparison

package/dist/okf/rules/PROM214.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: PROM214
+description: An alert template reads a label the expression aggregates away
+id: PROM214
+severity: error
+category: post-synth
+lexicon: prometheus
+docs: https://intentius.io/chant/lexicons/prometheus/rules/
+---
+An alert template reads a label the expression aggregates away

package/dist/okf/rules/PROM215.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: PROM215
+description: rate, irate or increase over a name that is not a counter's
+id: PROM215
+severity: error
+category: post-synth
+lexicon: prometheus
+docs: https://intentius.io/chant/lexicons/prometheus/rules/
+---
+rate, irate or increase over a name that is not a counter's

package/dist/okf/rules/PROM216.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: PROM216
+description: histogram_quantile over a series without _bucket, or without le
+id: PROM216
+severity: error
+category: post-synth
+lexicon: prometheus
+docs: https://intentius.io/chant/lexicons/prometheus/rules/
+---
+histogram_quantile over a series without _bucket, or without le

package/dist/okf/rules/PROM217.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: PROM217
+description: A recording rule name is not in level:metric:operations form
+id: PROM217
+severity: error
+category: post-synth
+lexicon: prometheus
+docs: https://intentius.io/chant/lexicons/prometheus/rules/
+---
+A recording rule name is not in level:metric:operations form

package/dist/okf/rules/PROM218.md

@@ -0,0 +1,11 @@
+---
+type: post-synth-check
+title: PROM218
+description: A regex matcher needs no regex, or is anchored
+id: PROM218
+severity: error
+category: post-synth
+lexicon: prometheus
+docs: https://intentius.io/chant/lexicons/prometheus/rules/
+---
+A regex matcher needs no regex, or is anchored