@intentius/chant-lexicon-prometheus 0.98.0 → 0.100.0

package/dist/model.d.ts

@@ -12,6 +12,7 @@
  * so a declaration reads the same as the file it produces and the upstream
  * docs apply word for word.
  */
+import { type DiscordConfig, type EmailConfig, type HttpClientConfig, type IncidentioConfig, type JiraConfig, type MattermostConfig, type MSTeamsConfig, type MSTeamsV2Config, type OpsGenieConfig, type PagerDutyConfig, type PushoverConfig, type ReceiverIntegration, type RocketchatConfig, type SlackConfig, type SNSConfig, type TelegramConfig, type TlsConfig, type VictorOpsConfig, type WebexConfig, type WebhookConfig, type WechatConfig } from "./integrations.js";
 /** Labels or annotations: string keys to string values. */
 export type LabelSet = Record<string, string>;
 /** A recording rule: evaluates `expr` and stores the result as the series `record`. */
@@ -60,128 +61,30 @@ export declare function isRecordingRuleConfig(rule: unknown): rule is RecordingR
 export declare function isAlertingRuleConfig(rule: unknown): rule is AlertingRuleConfig;
 /** The rule's name: `record` for a recording rule, `alert` for an alerting rule. */
 export declare function ruleName(rule: RuleConfig): string;
-/** HTTP client settings shared by the receivers that make HTTP calls. */
-export interface HttpClientConfig {
-    basic_auth?: {
-        username?: string;
-        username_file?: string;
-        password?: string;
-        password_file?: string;
-    };
-    authorization?: {
-        type?: string;
-        credentials?: string;
-        credentials_file?: string;
-    };
-    bearer_token?: string;
-    bearer_token_file?: string;
-    oauth2?: Record<string, unknown>;
-    proxy_url?: string;
-    follow_redirects?: boolean;
-    enable_http2?: boolean;
-    tls_config?: {
-        ca_file?: string;
-        cert_file?: string;
-        key_file?: string;
-        server_name?: string;
-        insecure_skip_verify?: boolean;
-        min_version?: string;
-    };
-}
-interface NotifierBase {
-    /** Whether to notify about resolved alerts too. */
-    send_resolved?: boolean;
-}
-export interface WebhookConfig extends NotifierBase {
-    /** Where alerts are POSTed. Set this or `url_file`. */
-    url?: string;
-    url_file?: string;
-    http_config?: HttpClientConfig;
-    /** Most alerts per message; 0 sends them all. */
-    max_alerts?: number;
-    timeout?: string;
-}
-export interface EmailConfig extends NotifierBase {
-    to: string;
-    from?: string;
-    /** `host:port` of the SMTP server. Falls back to `global.smtp_smarthost`. */
-    smarthost?: string;
-    hello?: string;
-    auth_username?: string;
-    auth_password?: string;
-    auth_password_file?: string;
-    auth_secret?: string;
-    auth_secret_file?: string;
-    auth_identity?: string;
-    require_tls?: boolean;
-    tls_config?: HttpClientConfig["tls_config"];
-    html?: string;
-    text?: string;
-    headers?: Record<string, string>;
-}
-export interface SlackConfig extends NotifierBase {
-    /** The incoming-webhook URL. It is a credential: prefer `api_url_file`. */
-    api_url?: string;
-    api_url_file?: string;
-    channel?: string;
-    username?: string;
-    color?: string;
-    title?: string;
-    title_link?: string;
-    pretext?: string;
-    text?: string;
-    footer?: string;
-    fallback?: string;
-    icon_emoji?: string;
-    icon_url?: string;
-    link_names?: boolean;
-    short_fields?: boolean;
-    mrkdwn_in?: string[];
-    fields?: Array<{
-        title: string;
-        value: string;
-        short?: boolean;
-    }>;
-    actions?: Array<Record<string, unknown>>;
-    http_config?: HttpClientConfig;
-}
-export interface PagerDutyConfig extends NotifierBase {
-    /** Events API v2 integration key. A credential: prefer `routing_key_file`. */
-    routing_key?: string;
-    routing_key_file?: string;
-    /** Events API v1 integration key. A credential: prefer `service_key_file`. */
-    service_key?: string;
-    service_key_file?: string;
-    url?: string;
-    client?: string;
-    client_url?: string;
-    description?: string;
-    severity?: string;
-    class?: string;
-    component?: string;
-    group?: string;
-    source?: string;
-    details?: Record<string, string>;
-    links?: Array<{
-        href: string;
-        text?: string;
-    }>;
-    images?: Array<{
-        src: string;
-        alt?: string;
-        href?: string;
-    }>;
-    http_config?: HttpClientConfig;
-}
+export * from "./integrations.js";
 /** One entry under `receivers:`. */
 export interface ReceiverConfig {
     name: string;
     /** Labels on the receiver, exposed to notification templates. */
     labels?: LabelSet;
-    webhook_configs?: WebhookConfig[];
+    discord_configs?: DiscordConfig[];
     email_configs?: EmailConfig[];
-    slack_configs?: SlackConfig[];
+    incidentio_configs?: IncidentioConfig[];
     pagerduty_configs?: PagerDutyConfig[];
+    slack_configs?: SlackConfig[];
+    webhook_configs?: WebhookConfig[];
+    opsgenie_configs?: OpsGenieConfig[];
+    wechat_configs?: WechatConfig[];
+    pushover_configs?: PushoverConfig[];
+    victorops_configs?: VictorOpsConfig[];
+    sns_configs?: SNSConfig[];
+    telegram_configs?: TelegramConfig[];
+    webex_configs?: WebexConfig[];
+    msteams_configs?: MSTeamsConfig[];
+    msteamsv2_configs?: MSTeamsV2Config[];
+    jira_configs?: JiraConfig[];
+    rocketchat_configs?: RocketchatConfig[];
+    mattermost_configs?: MattermostConfig[];
 }
 /** A route in the routing tree. The top-level `route:` is the root. */
 export interface RouteConfig {
@@ -234,12 +137,18 @@ export interface TimeIntervalConfig {
     name: string;
     time_intervals: TimePeriodConfig[];
 }
-/** `global:` settings. */
+/**
+ * `global:` settings: defaults the receivers fall back to. Credentials with
+ * a `*_file` sibling are best set through it; PROM001 flags a literal.
+ */
 export interface AlertmanagerGlobalConfig {
+    /** How long an alert that stops being updated stays firing. */
     resolve_timeout?: string;
+    http_config?: HttpClientConfig;
+    jira_api_url?: string;
     smtp_from?: string;
-    smtp_smarthost?: string;
     smtp_hello?: string;
+    smtp_smarthost?: string;
     smtp_auth_username?: string;
     smtp_auth_password?: string;
     smtp_auth_password_file?: string;
@@ -247,11 +156,38 @@ export interface AlertmanagerGlobalConfig {
     smtp_auth_secret_file?: string;
     smtp_auth_identity?: string;
     smtp_require_tls?: boolean;
+    smtp_tls_config?: TlsConfig;
+    smtp_force_implicit_tls?: boolean;
     slack_api_url?: string;
     slack_api_url_file?: string;
+    slack_app_token?: string;
+    slack_app_token_file?: string;
+    slack_app_url?: string;
     pagerduty_url?: string;
-    http_config?: HttpClientConfig;
-}
+    opsgenie_api_url?: string;
+    opsgenie_api_key?: string;
+    opsgenie_api_key_file?: string;
+    wechat_api_url?: string;
+    wechat_api_secret?: string;
+    wechat_api_secret_file?: string;
+    wechat_api_corp_id?: string;
+    victorops_api_url?: string;
+    victorops_api_key?: string;
+    victorops_api_key_file?: string;
+    telegram_api_url?: string;
+    telegram_bot_token?: string;
+    telegram_bot_token_file?: string;
+    webex_api_url?: string;
+    rocketchat_api_url?: string;
+    rocketchat_token?: string;
+    rocketchat_token_file?: string;
+    rocketchat_token_id?: string;
+    rocketchat_token_id_file?: string;
+    mattermost_webhook_url?: string;
+    mattermost_webhook_url_file?: string;
+}
+/** Every `global:` field, as a list, for code that reads a parsed file. */
+export declare const ALERTMANAGER_GLOBAL_FIELDS: readonly (keyof AlertmanagerGlobalConfig)[];
 /** `tracing:` settings: where Alertmanager sends its own traces. */
 export interface AlertmanagerTracingConfig {
     client_type?: "grpc" | "http";
@@ -261,7 +197,7 @@ export interface AlertmanagerTracingConfig {
     headers?: Record<string, string>;
     compression?: string;
     timeout?: string;
-    tls_config?: HttpClientConfig["tls_config"];
+    tls_config?: TlsConfig;
 }
 /** A whole `alertmanager.yml`, the file `amtool check-config` reads. */
 export interface AlertmanagerConfig {
@@ -273,11 +209,10 @@ export interface AlertmanagerConfig {
     time_intervals?: TimeIntervalConfig[];
     tracing?: AlertmanagerTracingConfig;
 }
-/** The four receiver integrations this lexicon types. */
-export declare const RECEIVER_INTEGRATIONS: readonly ["webhook_configs", "email_configs", "slack_configs", "pagerduty_configs"];
+/** The receiver integrations, every one Alertmanager defines. */
+export declare const RECEIVER_INTEGRATIONS: readonly ReceiverIntegration[];
 /** True when a parsed document has the shape of a Prometheus rule file. */
 export declare function looksLikeRuleFile(value: unknown): value is RuleFileConfig;
 /** True when a parsed document has the shape of an `alertmanager.yml`. */
 export declare function looksLikeAlertmanagerConfig(value: unknown): value is AlertmanagerConfig;
-export {};
 //# sourceMappingURL=model.d.ts.map

package/dist/model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,2DAA2D;AAC3D,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE9C,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,MAAM,CAAC,EAAE,QAAQ,CAAC;CACnB;AAED,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,oFAAoF;IACpF,WAAW,CAAC,EAAE,QAAQ,CAAC;CACxB;AAED,MAAM,MAAM,UAAU,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;AAElE,qGAAqG;AACrG,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oGAAoG;IACpG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAED,4FAA4F;AAC5F,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,mBAAmB,CAEhF;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,kBAAkB,CAE9E;AAED,oFAAoF;AACpF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAEjD;AAID,yEAAyE;AACzE,MAAM,WAAW,gBAAgB;IAC/B,UAAU,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACtG,aAAa,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,UAAU,CAAC,EAAE;QACX,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC;CACH;AAED,UAAU,YAAY;IACpB,mDAAmD;IACnD,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,aAAc,SAAQ,YAAY;IACjD,uDAAuD;IACvD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,iDAAiD;IACjD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,WAAY,SAAQ,YAAY;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,WAAY,SAAQ,YAAY;IAC/C,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAClE,OAAO,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACzC,WAAW,CAAC,EAAE,gBAAgB,CAAC;CAChC;AAED,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8EAA8E;IAC9E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,WAAW,CAAC,EAAE,gBAAgB,CAAC;CAChC;AAED,oCAAoC;AACpC,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC;IAClC,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC;IAC9B,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC;IAC9B,iBAAiB,CAAC,EAAE,eAAe,EAAE,CAAC;CACvC;AAED,uEAAuE;AACvE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC;;;OAGG;IACH,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;CACxB;AAED,wCAAwC;AACxC,MAAM,WAAW,iBAAiB;IAChC,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,eAAe,EAAE,CAAC;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,wBAAwB;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,wBAAwB;IACxB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,yCAAyC;AACzC,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,gBAAgB,EAAE,CAAC;CACpC;AAED,0BAA0B;AAC1B,MAAM,WAAW,wBAAwB;IACvC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,gBAAgB,CAAC;CAChC;AAED,oEAAoE;AACpE,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,gBAAgB,CAAC,YAAY,CAAC,CAAC;CAC7C;AAED,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,aAAa,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACpC,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACtC,OAAO,CAAC,EAAE,yBAAyB,CAAC;CACrC;AAED,yDAAyD;AACzD,eAAO,MAAM,qBAAqB,qFAAsF,CAAC;AAEzH,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAOzE;AAED,0EAA0E;AAC1E,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CASvF"}
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAChB,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,YAAY,EAClB,MAAM,gBAAgB,CAAC;AAExB,2DAA2D;AAC3D,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAE9C,uFAAuF;AACvF,MAAM,WAAW,mBAAmB;IAClC,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;IACf,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,MAAM,CAAC,EAAE,QAAQ,CAAC;CACnB;AAED,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,oFAAoF;IACpF,WAAW,CAAC,EAAE,QAAQ,CAAC;CACxB;AAED,MAAM,MAAM,UAAU,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;AAElE,qGAAqG;AACrG,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,sFAAsF;IACtF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uEAAuE;IACvE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oGAAoG;IACpG,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,KAAK,EAAE,UAAU,EAAE,CAAC;CACrB;AAED,4FAA4F;AAC5F,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,eAAe,EAAE,CAAC;CAC3B;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,mBAAmB,CAEhF;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,kBAAkB,CAE9E;AAED,oFAAoF;AACpF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAEjD;AAID,cAAc,gBAAgB,CAAC;AAE/B,oCAAoC;AACpC,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC;IAClC,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC;IAC9B,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACxC,iBAAiB,CAAC,EAAE,eAAe,EAAE,CAAC;IACtC,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC;IAC9B,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC;IAClC,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC;IACpC,cAAc,CAAC,EAAE,YAAY,EAAE,CAAC;IAChC,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC;IACpC,iBAAiB,CAAC,EAAE,eAAe,EAAE,CAAC;IACtC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC;IAC1B,gBAAgB,CAAC,EAAE,cAAc,EAAE,CAAC;IACpC,aAAa,CAAC,EAAE,WAAW,EAAE,CAAC;IAC9B,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC;IAClC,iBAAiB,CAAC,EAAE,eAAe,EAAE,CAAC;IACtC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAC;IAC5B,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACxC,kBAAkB,CAAC,EAAE,gBAAgB,EAAE,CAAC;CACzC;AAED,uEAAuE;AACvE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,2FAA2F;IAC3F,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC;;;OAGG;IACH,MAAM,CAAC,EAAE,QAAQ,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC;CACxB;AAED,wCAAwC;AACxC,MAAM,WAAW,iBAAiB;IAChC,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,eAAe,EAAE,CAAC;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,wBAAwB;IACxB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,kCAAkC;IAClC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,wBAAwB;IACxB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,yCAAyC;AACzC,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,gBAAgB,EAAE,CAAC;CACpC;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,+DAA+D;IAC/D,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,eAAe,CAAC,EAAE,SAAS,CAAC;IAC5B,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,2BAA2B,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,2EAA2E;AAC3E,eAAO,MAAM,0BAA0B,EA2CuB,SAAS,CAAC,MAAM,wBAAwB,CAAC,EAAE,CAAC;AAE1G,oEAAoE;AACpE,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,SAAS,CAAC;CACxB;AAED,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,wBAAwB,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,aAAa,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACpC,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAC7B,cAAc,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACtC,OAAO,CAAC,EAAE,yBAAyB,CAAC;CACrC;AAED,iEAAiE;AACjE,eAAO,MAAM,qBAAqB,EAA8C,SAAS,mBAAmB,EAAE,CAAC;AAE/G,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAczE;AAED,0EAA0E;AAC1E,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,kBAAkB,CASvF"}

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AA8B9D;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,EAAE,aAqG9B,CAAC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AA+B9D;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,EAAE,aAyG9B,CAAC"}

package/dist/rules/literal-credential.ts

@@ -7,20 +7,47 @@ import { calleeName, constInitializers, CREDENTIAL_CLASS, literalText, position,
  * reads it from a mounted file instead.
  */
 export const SECRET_FIELDS = new Set([
-  "api_url", // slack_configs: the incoming-webhook URL is the credential
-  "slack_api_url",
-  "routing_key",
+  "api_url", // slack_configs only: the incoming-webhook URL is the credential (see SECRET_ONLY_IN)
+  "webhook_url", // discord, msteams, msteamsv2 and mattermost
+  "app_token",
+  "routing_key", // pagerduty (victorops' routing_key names a route, see SECRET_ONLY_IN)
   "service_key",
+  "api_key",
+  "api_secret",
+  "bot_token",
+  "token",
+  "token_id",
+  "user_key",
+  "alert_source_token",
   "auth_password",
   "auth_secret",
   "smtp_auth_password",
   "smtp_auth_secret",
+  "slack_api_url",
+  "slack_app_token",
+  "opsgenie_api_key",
+  "wechat_api_secret",
+  "victorops_api_key",
+  "telegram_bot_token",
+  "rocketchat_token",
+  "rocketchat_token_id",
+  "mattermost_webhook_url",
   "password",
   "credentials",
   "bearer_token",
   "client_secret",
 ]);
 
+/**
+ * Fields that are a secret in one integration and plain elsewhere: `api_url`
+ * is Slack's webhook credential but only an endpoint for the others, and a
+ * VictorOps `routing_key` names a route.
+ */
+const SECRET_ONLY_IN: Record<string, string> = {
+  api_url: "slack_configs",
+  routing_key: "pagerduty_configs",
+};
+
 /**
  * PROM001: a credential written as a literal in a `Receiver` or
  * `AlertmanagerSettings`.
@@ -46,16 +73,20 @@ export const literalCredentialRule: LintRule = {
 
     // A value is followed to the const it names, so a list lifted out of the
     // constructor (`email_configs: heartbeatEmail`) is scanned where it is used.
-    const scanValue = (key: string | undefined, value: ts.Expression) => {
+    // `integration` is the `*_configs` list a value sits in, when that is known.
+    const scanValue = (key: string | undefined, value: ts.Expression, integration?: string) => {
       const init = resolveConst(value, consts);
+      const within = key?.endsWith("_configs") ? key : integration;
       if (ts.isObjectLiteralExpression(init) || ts.isArrayLiteralExpression(init)) {
         if (scanned.has(init)) return;
         scanned.add(init);
-        if (ts.isObjectLiteralExpression(init)) scan(init);
-        else for (const el of init.elements) scanValue(undefined, el);
+        if (ts.isObjectLiteralExpression(init)) scan(init, within);
+        else for (const el of init.elements) scanValue(undefined, el, within);
         return;
       }
       if (!key || !SECRET_FIELDS.has(key)) return;
+      const only = SECRET_ONLY_IN[key];
+      if (only && integration !== undefined && integration !== only) return;
       const text = literalText(init);
       if (text === undefined || text === "") return;
       diagnostics.push({
@@ -67,11 +98,11 @@ export const literalCredentialRule: LintRule = {
       });
     };
 
-    const scan = (obj: ts.ObjectLiteralExpression) => {
+    const scan = (obj: ts.ObjectLiteralExpression, integration?: string) => {
       for (const prop of obj.properties) {
-        if (ts.isPropertyAssignment(prop)) scanValue(propertyName(prop), prop.initializer);
-        else if (ts.isShorthandPropertyAssignment(prop)) scanValue(prop.name.text, prop.name);
-        else if (ts.isSpreadAssignment(prop)) scanValue(undefined, prop.expression);
+        if (ts.isPropertyAssignment(prop)) scanValue(propertyName(prop), prop.initializer, integration);
+        else if (ts.isShorthandPropertyAssignment(prop)) scanValue(prop.name.text, prop.name, integration);
+        else if (ts.isSpreadAssignment(prop)) scanValue(undefined, prop.expression, integration);
       }
     };
 

package/dist/skills/chant-prometheus-alertmanager.md

@@ -49,7 +49,7 @@ export const pageMutesTicket = new InhibitRule({
 
 ## Starting from an existing alertmanager.yml
 
-Import it rather than retyping it: `chant import alertmanager.yml --output src` (with `--lexicon prometheus` outside a chant project). The importer writes `receivers.ts`, `time-intervals.ts`, `routes.ts` (the root `Route`, children as `RouteProps` that reference receivers and time intervals by variable), `inhibit-rules.ts` and `settings.ts`. `*_file` paths and Go templates are kept as written; a literal credential is imported as found and PROM001 reports it, so offer to move it to the `*_file` field. Integrations the lexicon doesn't type (`opsgenie_configs`, `msteams_configs`, ...) are spread in from an untyped const. `match`/`match_re` and the top-level `mute_time_intervals` come back in their current spelling (`matchers`, `time_intervals`), and `chant import` prints a warning for each.
+Import it rather than retyping it: `chant import alertmanager.yml --output src` (with `--lexicon prometheus` outside a chant project). The importer writes `receivers.ts`, `time-intervals.ts`, `routes.ts` (the root `Route`, children as `RouteProps` that reference receivers and time intervals by variable), `inhibit-rules.ts` and `settings.ts`. `*_file` paths and Go templates are kept as written; a literal credential is imported as found and PROM001 reports it, so offer to move it to the `*_file` field. Every integration comes back typed (`OpsGenieConfig[]`, `MSTeamsV2Config[]`, ...); a receiver or `global` key Alertmanager doesn't define is spread in from an untyped const, with a warning. `match`/`match_re` and the top-level `mute_time_intervals` come back in their current spelling (`matchers`, `time_intervals`), and `chant import` prints a warning for each.
 
 ## What the checks hold you to
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-prometheus",
-  "version": "0.98.0",
+  "version": "0.100.0",
   "description": "Prometheus lexicon for chant — typed recording and alerting rule groups and Alertmanager routing, serialized to a rule file and alertmanager.yml",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -71,7 +71,7 @@
     "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.98.0",
+    "@intentius/chant": "^0.100.0",
     "typescript": "^5.9.3"
   }
 }

package/src/import/embedded.test.ts

@@ -0,0 +1,56 @@
+import { describe, expect, test } from "vitest";
+import { embeddedDocument, type EmbeddedContent } from "@intentius/chant/import/embedded";
+import { prometheusPlugin } from "../plugin";
+import { ruleGroupsImporter } from "./embedded";
+
+const GROUPS = [
+  { name: "api", rules: [{ alert: "ApiDown", expr: "up{job=\"api\"} == 0", for: "5m" }] },
+  { name: "recording", rules: [{ record: "job:up:sum", expr: "sum by (job) (up)" }] },
+];
+
+const RULE_FILE = `groups:
+  - name: api
+    rules:
+      - alert: ApiDown
+        expr: up{job="api"} == 0
+        for: 5m
+`;
+
+const site = (over: Partial<EmbeddedContent>): EmbeddedContent => ({
+  host: "k8s",
+  hostType: "K8s::Monitoring::PrometheusRule",
+  location: "PrometheusRule api spec.groups",
+  directory: "api",
+  ...over,
+});
+
+describe("rule groups embedded in another lexicon's resource (#2962)", () => {
+  test("the plugin registers the importer", () => {
+    expect(prometheusPlugin.embeddedImporters?.()).toEqual([ruleGroupsImporter]);
+  });
+
+  test("matches a PrometheusRule's groups and a rule file held as text; not an alertmanager.yml", () => {
+    expect(ruleGroupsImporter.matches(site({ document: { groups: GROUPS }, select: "groups" }))).toBe(true);
+    expect(ruleGroupsImporter.matches(site({ text: RULE_FILE, document: embeddedDocument(RULE_FILE) }))).toBe(true);
+    const am = "route:\n  receiver: x\nreceivers:\n  - name: x\n";
+    expect(ruleGroupsImporter.matches(site({ text: am, document: embeddedDocument(am) }))).toBe(false);
+  });
+
+  test("spec.groups becomes the list of declared groups, in the source's order", () => {
+    const out = ruleGroupsImporter.import(site({ document: { groups: GROUPS }, select: "groups" }));
+    expect(out.files.map((f) => f.path)).toEqual(["rules.ts"]);
+    expect(out.value).toEqual({
+      bindings: [
+        { from: "rules.ts", name: "api" },
+        { from: "rules.ts", name: "recording" },
+      ],
+      shape: "list",
+    });
+  });
+
+  test("a rule file held as text goes through ruleFileYaml", () => {
+    const out = ruleGroupsImporter.import(site({ text: RULE_FILE, document: embeddedDocument(RULE_FILE) }));
+    expect(out.value.through).toEqual({ from: "@intentius/chant-lexicon-prometheus", name: "ruleFileYaml" });
+    expect(out.value.bindings).toEqual([{ from: "rules.ts", name: "api" }]);
+  });
+});

package/src/import/embedded.ts

@@ -0,0 +1,44 @@
+/**
+ * Rule groups embedded in another lexicon's resource, for `chant import`
+ * (#2962): a k8s `PrometheusRule`'s `spec.groups`, or a rule file held as
+ * text in a ConfigMap.
+ *
+ * The groups are imported exactly as `chant import rules.yml` would import
+ * them, into a directory of its own. `spec.groups` becomes the list of the
+ * declared groups (an `Slo`'s by its `rules` member), which the k8s
+ * serializer renders as the same groups; a rule file becomes
+ * `ruleFileYaml([...])`, the text the prometheus serializer writes.
+ */
+
+import type { EmbeddedContentImporter, EmbeddedImport } from "@intentius/chant/import/embedded";
+import { looksLikeRuleFile } from "../model";
+import { parsePrometheusYaml } from "./parser";
+import { generateRuleFile } from "./generator";
+
+const PACKAGE = "@intentius/chant-lexicon-prometheus";
+
+export const ruleGroupsImporter: EmbeddedContentImporter = {
+  what: "Prometheus rule groups",
+
+  matches(content) {
+    if (!looksLikeRuleFile(content.document)) return false;
+    return content.select === "groups" || (content.select === undefined && typeof content.text === "string");
+  },
+
+  import(content): EmbeddedImport {
+    // JSON is YAML: the document goes through the same parser a rule file does.
+    const source = content.select === undefined ? content.text! : JSON.stringify(content.document);
+    const parsed = parsePrometheusYaml(source);
+    if (parsed.kind !== "rules") throw new Error("this is not a Prometheus rule file");
+    const { files, groups } = generateRuleFile(parsed.file);
+    const bindings = groups.map((g) => ({ from: g.path, name: g.name, ...(g.member ? { member: g.member } : {}) }));
+    return {
+      files,
+      value:
+        content.select === undefined
+          ? { bindings, shape: "list", through: { from: PACKAGE, name: "ruleFileYaml" } }
+          : { bindings, shape: "list" },
+      warnings: parsed.warnings,
+    };
+  },
+};

package/src/import/generated-types.e2e.test.ts

@@ -50,6 +50,7 @@ describe("the generated source type-checks against the lexicon's types", () => {
     const projects: Record<string, Files> = {
       rulesFull: generate(read("rules-full.yml")),
       alertmanagerFull: generate(read("alertmanager-full.yml")),
+      alertmanagerIntegrations: generate(read("alertmanager-integrations.yml")),
       ...Object.fromEntries(UPSTREAM.map((f) => [f, generate(read("upstream", f))])),
       ...Object.fromEntries(sloOutputs().map((o) => [o.name, generate(o.yaml)])),
       ...Object.fromEntries((await exampleOutputs()).map((o) => [o.name, generate(o.yaml)])),
@@ -67,9 +68,10 @@ describe("the generated source type-checks against the lexicon's types", () => {
       "      - channel: '#alerts'",
       "        api_url_file: /etc/alertmanager/slack-url",
       "        message_text: '{{ .CommonLabels.alertname }}'",
+      "        mesage_txt: typo",
       "",
     ].join("\n");
     const errors = typeErrors({ slack: generate(yaml) });
-    expect(errors).toEqual([expect.stringMatching(/^slack\/receivers\.ts: .*'message_text' does not exist in type 'SlackConfig'/)]);
+    expect(errors).toEqual([expect.stringMatching(/^slack\/receivers\.ts: .*'mesage_txt' does not exist in type 'SlackConfig'/)]);
   }, 120_000);
 });

package/src/import/generator.test.ts

@@ -81,17 +81,34 @@ describe("alertmanager.yml", () => {
     expect(files["routes.ts"]).toContain("const root = new Route({ receiver: fallback, routes: rootChildren });");
   });
 
-  test("an integration the lexicon does not type is spread in from an untyped const, with a comment", () => {
+  test("every integration Alertmanager defines is declared with its type", () => {
     const files = byPath(
-      generateAlertmanagerFiles({ receivers: [{ name: "ops", opsgenie_configs: [{ api_key_file: "/k" }] } as never] }),
+      generateAlertmanagerFiles({
+        receivers: [{ name: "ops", opsgenie_configs: [{ api_key_file: "/k", priority: "P1" }], msteamsv2_configs: [{ webhook_url_file: "/t" }] }],
+      }),
+    );
+    expect(files["receivers.ts"]).toContain('const opsOpsgenie: OpsGenieConfig[] = [{ api_key_file: "/k", priority: "P1" }];');
+    expect(files["receivers.ts"]).toContain('const opsMsteamsv2: MSTeamsV2Config[] = [{ webhook_url_file: "/t" }];');
+    expect(files["receivers.ts"]).not.toContain("Untyped");
+  });
+
+  test("a receiver or global key Alertmanager doesn't define is spread in from an untyped const, with a comment", () => {
+    const files = byPath(
+      generateAlertmanagerFiles({
+        global: { resolve_timeout: "5m", pigeon_loft: "roof" } as never,
+        receivers: [{ name: "ops", pigeon_configs: [{ loft: "roof" }] } as never],
+      }),
     );
     expect(files["receivers.ts"]).toContain(
       [
-        '// Receiver "ops": opsgenie_configs is not typed by this lexicon, so it is carried as data.',
-        'const opsUntyped = { opsgenie_configs: [{ api_key_file: "/k" }] };',
+        '// Receiver "ops": pigeon_configs is not a field Alertmanager v0.34.1 defines, so it is carried as',
+        "// data, untyped.",
+        'const opsUntyped = { pigeon_configs: [{ loft: "roof" }] };',
         'const ops = new Receiver({ name: "ops", ...opsUntyped });',
       ].join("\n"),
     );
+    expect(files["settings.ts"]).toContain("// global: pigeon_loft is not a field Alertmanager v0.34.1 defines");
+    expect(files["settings.ts"]).toContain("...globalUntyped,");
   });
 });