@intentius/chant-lexicon-gcp 0.124.31 → 0.124.33

package/dist/composites/catalog.js

@@ -0,0 +1,1251 @@
+export const compositeCatalog = [
+    {
+        "name": "CloudFunctionWithTrigger",
+        "lexicon": "gcp",
+        "description": "CloudFunctionWithTrigger composite — CloudFunction + source bucket + optional PubSub/HTTP trigger + invoker IAM.",
+        "bundles": [
+            "CloudFunction",
+            "IAMPolicyMember",
+            "StorageBucket"
+        ],
+        "params": [
+            {
+                "name": "name",
+                "type": "string",
+                "required": true,
+                "description": "Function name."
+            },
+            {
+                "name": "runtime",
+                "type": "string",
+                "required": true,
+                "description": "Runtime (e.g., \"nodejs20\", \"python312\")."
+            },
+            {
+                "name": "entryPoint",
+                "type": "string",
+                "required": true,
+                "description": "Entry point function name."
+            },
+            {
+                "name": "region",
+                "type": "string",
+                "required": false,
+                "description": "GCP region."
+            },
+            {
+                "name": "availableMemoryMb",
+                "type": "string",
+                "required": false,
+                "description": "Available memory (default: \"256M\")."
+            },
+            {
+                "name": "timeout",
+                "type": "number",
+                "required": false,
+                "description": "Timeout in seconds (default: 60)."
+            },
+            {
+                "name": "triggerType",
+                "type": "\"http\" | \"pubsub\"",
+                "required": false,
+                "description": "Trigger type (default: \"http\")."
+            },
+            {
+                "name": "triggerTopic",
+                "type": "string",
+                "required": false,
+                "description": "PubSub topic name (required if triggerType is \"pubsub\")."
+            },
+            {
+                "name": "publicAccess",
+                "type": "boolean",
+                "required": false,
+                "description": "Allow unauthenticated HTTP invocations (default: false)."
+            },
+            {
+                "name": "environmentVariables",
+                "type": "Record<string, string>",
+                "required": false,
+                "description": "Environment variables."
+            },
+            {
+                "name": "labels",
+                "type": "Record<string, string>",
+                "required": false,
+                "description": "Additional labels."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for all resources."
+            },
+            {
+                "name": "defaults",
+                "type": "{ function?: Partial<ConstructorParameters<typeof CloudFunctionResource>[0]>; sourceBucket?: Partial<ConstructorParam...",
+                "required": false,
+                "description": "Per-member defaults for customizing individual resources."
+            }
+        ]
+    },
+    {
+        "name": "CloudRunServiceComposite",
+        "lexicon": "gcp",
+        "description": "Create a CloudRunService composite.",
+        "bundles": [
+            "CloudRunService",
+            "IAMPolicyMember"
+        ],
+        "params": [
+            {
+                "name": "name",
+                "type": "string",
+                "required": true,
+                "description": "Service name."
+            },
+            {
+                "name": "image",
+                "type": "string",
+                "required": true,
+                "description": "Container image."
+            },
+            {
+                "name": "location",
+                "type": "string",
+                "required": false,
+                "description": "GCP region (default: GCP.Region, resolved from GCP_REGION at build)."
+            },
+            {
+                "name": "projectId",
+                "type": "string",
+                "required": false,
+                "description": "GCP project the service runs in, as `projectRef.external` (default: GCP.ProjectId, resolved from GCP_PROJECT_ID at build)."
+            },
+            {
+                "name": "port",
+                "type": "number",
+                "required": false,
+                "description": "Port the container listens on (default: 8080)."
+            },
+            {
+                "name": "cpuLimit",
+                "type": "string",
+                "required": false,
+                "description": "CPU limit (default: \"1000m\")."
+            },
+            {
+                "name": "memoryLimit",
+                "type": "string",
+                "required": false,
+                "description": "Memory limit (default: \"512Mi\")."
+            },
+            {
+                "name": "maxInstanceRequestConcurrency",
+                "type": "number",
+                "required": false,
+                "description": "Maximum concurrent requests per instance (default: 80)."
+            },
+            {
+                "name": "minInstanceCount",
+                "type": "number",
+                "required": false,
+                "description": "Minimum instances (default: 0)."
+            },
+            {
+                "name": "maxInstanceCount",
+                "type": "number",
+                "required": false,
+                "description": "Maximum instances (default: 100)."
+            },
+            {
+                "name": "publicAccess",
+                "type": "boolean",
+                "required": false,
+                "description": "Enable public (unauthenticated) access (default: false)."
+            },
+            {
+                "name": "env",
+                "type": "Array<{ name: string; value: string }>",
+                "required": false,
+                "description": "Environment variables."
+            },
+            {
+                "name": "labels",
+                "type": "Record<string, string>",
+                "required": false,
+                "description": "Additional labels."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for all resources."
+            },
+            {
+                "name": "defaults",
+                "type": "{ service?: Partial<ConstructorParameters<typeof CloudRunServiceResource>[0]>; publicIam?: Partial<ConstructorParamet...",
+                "required": false,
+                "description": "Per-member defaults for customizing individual resources."
+            }
+        ]
+    },
+    {
+        "name": "CloudSqlInstance",
+        "lexicon": "gcp",
+        "description": "Create a CloudSqlInstance composite.",
+        "bundles": [
+            "SQLDatabase",
+            "SQLInstance",
+            "SQLUser"
+        ],
+        "params": [
+            {
+                "name": "name",
+                "type": "string",
+                "required": true,
+                "description": "Instance name."
+            },
+            {
+                "name": "databaseVersion",
+                "type": "string",
+                "required": false,
+                "description": "Database version (default: \"POSTGRES_15\")."
+            },
+            {
+                "name": "tier",
+                "type": "string",
+                "required": false,
+                "description": "Machine tier (default: \"db-f1-micro\")."
+            },
+            {
+                "name": "region",
+                "type": "string",
+                "required": false,
+                "description": "GCP region."
+            },
+            {
+                "name": "databaseName",
+                "type": "string",
+                "required": false,
+                "description": "Database name to create (default: same as instance name)."
+            },
+            {
+                "name": "userName",
+                "type": "string",
+                "required": false,
+                "description": "User name (default: \"admin\")."
+            },
+            {
+                "name": "diskSize",
+                "type": "number",
+                "required": false,
+                "description": "Disk size in GB (default: 10)."
+            },
+            {
+                "name": "diskAutoresize",
+                "type": "boolean",
+                "required": false,
+                "description": "Disk autoresize (default: true)."
+            },
+            {
+                "name": "backupEnabled",
+                "type": "boolean",
+                "required": false,
+                "description": "Enable backups (default: true)."
+            },
+            {
+                "name": "highAvailability",
+                "type": "boolean",
+                "required": false,
+                "description": "Enable high availability (default: false)."
+            },
+            {
+                "name": "labels",
+                "type": "Record<string, string>",
+                "required": false,
+                "description": "Additional labels."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for all resources."
+            },
+            {
+                "name": "defaults",
+                "type": "{ instance?: Partial<ConstructorParameters<typeof SQLInstance>[0]>; database?: Partial<ConstructorParameters<typeof S...",
+                "required": false,
+                "description": "Per-member defaults for customizing individual resources."
+            }
+        ]
+    },
+    {
+        "name": "GcsBucket",
+        "lexicon": "gcp",
+        "description": "Create a GcsBucket composite.",
+        "bundles": [
+            "StorageBucket"
+        ],
+        "params": [
+            {
+                "name": "name",
+                "type": "string",
+                "required": true,
+                "description": "Bucket name."
+            },
+            {
+                "name": "location",
+                "type": "string",
+                "required": false,
+                "description": "GCS location (default: \"US\")."
+            },
+            {
+                "name": "storageClass",
+                "type": "\"STANDARD\" | \"NEARLINE\" | \"COLDLINE\" | \"ARCHIVE\"",
+                "required": false,
+                "description": "Storage class (default: \"STANDARD\")."
+            },
+            {
+                "name": "uniformBucketLevelAccess",
+                "type": "boolean",
+                "required": false,
+                "description": "Enable uniform bucket-level access (default: true)."
+            },
+            {
+                "name": "versioning",
+                "type": "boolean",
+                "required": false,
+                "description": "Enable versioning (default: false)."
+            },
+            {
+                "name": "kmsKeyName",
+                "type": "string",
+                "required": false,
+                "description": "KMS key name for encryption."
+            },
+            {
+                "name": "lifecycleDeleteAfterDays",
+                "type": "number",
+                "required": false,
+                "description": "Lifecycle rule: delete objects older than N days."
+            },
+            {
+                "name": "lifecycleNearlineAfterDays",
+                "type": "number",
+                "required": false,
+                "description": "Lifecycle rule: transition to Nearline after N days."
+            },
+            {
+                "name": "labels",
+                "type": "Record<string, string>",
+                "required": false,
+                "description": "Additional labels."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for all resources."
+            },
+            {
+                "name": "defaults",
+                "type": "{ bucket?: Partial<ConstructorParameters<typeof StorageBucket>[0]>; }",
+                "required": false,
+                "description": "Per-member defaults for customizing individual resources."
+            }
+        ]
+    },
+    {
+        "name": "GkeCluster",
+        "lexicon": "gcp",
+        "description": "Create a GkeCluster composite — returns declarable instances for a ContainerCluster and ContainerNodePool.",
+        "bundles": [
+            "GKECluster",
+            "NodePool"
+        ],
+        "params": [
+            {
+                "name": "name",
+                "type": "string",
+                "required": true,
+                "description": "Cluster name."
+            },
+            {
+                "name": "projectId",
+                "type": "string",
+                "required": true,
+                "description": "GCP project ID for the workload identity pool."
+            },
+            {
+                "name": "location",
+                "type": "string",
+                "required": false,
+                "description": "GCP region for regional cluster (default: uses GCP.Region)."
+            },
+            {
+                "name": "initialNodeCount",
+                "type": "number",
+                "required": false,
+                "description": "Initial node count per zone (default: 1)."
+            },
+            {
+                "name": "machineType",
+                "type": "string",
+                "required": false,
+                "description": "Machine type for nodes (default: \"e2-medium\")."
+            },
+            {
+                "name": "minNodeCount",
+                "type": "number",
+                "required": false,
+                "description": "Minimum nodes for autoscaling (default: 1)."
+            },
+            {
+                "name": "maxNodeCount",
+                "type": "number",
+                "required": false,
+                "description": "Maximum nodes for autoscaling (default: 5)."
+            },
+            {
+                "name": "workloadIdentity",
+                "type": "boolean",
+                "required": false,
+                "description": "Enable workload identity (default: true)."
+            },
+            {
+                "name": "diskSizeGb",
+                "type": "number",
+                "required": false,
+                "description": "Disk size in GB for nodes (default: 100)."
+            },
+            {
+                "name": "diskType",
+                "type": "string",
+                "required": false,
+                "description": "Boot disk type for nodes (default: \"pd-standard\")."
+            },
+            {
+                "name": "network",
+                "type": "string",
+                "required": false,
+                "description": "VPC network name (if omitted, uses default network)."
+            },
+            {
+                "name": "subnetwork",
+                "type": "string",
+                "required": false,
+                "description": "Subnetwork name for the cluster nodes."
+            },
+            {
+                "name": "privateNodes",
+                "type": "boolean",
+                "required": false,
+                "description": "Enable private nodes — nodes have only internal IPs, no external IPs."
+            },
+            {
+                "name": "masterCidr",
+                "type": "string",
+                "required": false,
+                "description": "CIDR block for the master's private endpoint (e.g. \"172.16.0.0/28\")."
+            },
+            {
+                "name": "nodeLocations",
+                "type": "string[]",
+                "required": false,
+                "description": "Restrict node pools to specific zones within the region."
+            },
+            {
+                "name": "releaseChannel",
+                "type": "\"RAPID\" | \"REGULAR\" | \"STABLE\"",
+                "required": false,
+                "description": "GKE release channel (default: \"REGULAR\")."
+            },
+            {
+                "name": "labels",
+                "type": "Record<string, string>",
+                "required": false,
+                "description": "Additional labels."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for all resources."
+            },
+            {
+                "name": "defaults",
+                "type": "{ cluster?: Partial<ConstructorParameters<typeof GKECluster>[0]>; nodePool?: Partial<ConstructorParameters<typeof Nod...",
+                "required": false,
+                "description": "Per-member defaults for customizing individual resources."
+            }
+        ]
+    },
+    {
+        "name": "GkeCrdbRegion",
+        "lexicon": "gcp",
+        "description": "Create a GkeCrdbRegion composite.",
+        "bundles": [
+            "DNSManagedZone",
+            "GCPServiceAccount",
+            "GKECluster",
+            "IAMPolicyMember",
+            "NodePool"
+        ],
+        "params": [
+            {
+                "name": "region",
+                "type": "string",
+                "required": true,
+                "description": "GCP region (e.g. \"us-east4\")."
+            },
+            {
+                "name": "clusterName",
+                "type": "string",
+                "required": true,
+                "description": "GKE cluster name (e.g. \"gke-crdb-east\")."
+            },
+            {
+                "name": "network",
+                "type": "string",
+                "required": true,
+                "description": "VPC network resource name."
+            },
+            {
+                "name": "subnetwork",
+                "type": "string",
+                "required": true,
+                "description": "Node subnet resource name for the cluster."
+            },
+            {
+                "name": "domain",
+                "type": "string",
+                "required": true,
+                "description": "Public DNS domain for this region (e.g. \"east.crdb.example.com\")."
+            },
+            {
+                "name": "project",
+                "type": "string",
+                "required": true,
+                "description": "GCP project ID for Workload Identity pool and service account names."
+            },
+            {
+                "name": "crdbNamespace",
+                "type": "string",
+                "required": true,
+                "description": "K8s namespace where CockroachDB pods run (e.g. \"crdb-east\")."
+            },
+            {
+                "name": "crdbK8sSa",
+                "type": "string",
+                "required": false,
+                "description": "K8s ServiceAccount name for CockroachDB pods (default: \"cockroachdb\")."
+            },
+            {
+                "name": "masterCidr",
+                "type": "string",
+                "required": false,
+                "description": "CIDR block for the GKE master's private endpoint (e.g. \"172.16.0.0/28\")."
+            },
+            {
+                "name": "nodeConfig",
+                "type": "GkeCrdbRegionNodeConfig",
+                "required": false,
+                "description": "Node pool configuration."
+            },
+            {
+                "name": "releaseChannel",
+                "type": "\"RAPID\" | \"REGULAR\" | \"STABLE\"",
+                "required": false,
+                "description": "GCP release channel for cluster upgrades (default: \"REGULAR\")."
+            },
+            {
+                "name": "backupBucket",
+                "type": "string",
+                "required": false,
+                "description": "Optional backup bucket name to grant CRDB GSA storage.objectAdmin access."
+            },
+            {
+                "name": "labels",
+                "type": "Record<string, string>",
+                "required": false,
+                "description": "Additional labels for all resources."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for Config Connector resources."
+            }
+        ]
+    },
+    {
+        "name": "GovernanceFoundation",
+        "lexicon": "gcp",
+        "description": "Security / Infrastructure / Sandbox / Workloads folders with `disable-sa-key-creation` and `skip-default-network` enforced at the organization root.",
+        "bundles": [
+            "OrgpolicyPolicy",
+            "ResourcemanagerFolder"
+        ],
+        "params": [
+            {
+                "name": "orgId",
+                "type": "string",
+                "required": true,
+                "description": "The organization to hang the foundation off (\"123456789012\" or \"organizations/123456789012\")."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for all resources."
+            }
+        ]
+    },
+    {
+        "name": "GpuNodePool",
+        "lexicon": "gcp",
+        "description": "Create a GpuNodePool composite — a scale-to-zero ContainerNodePool with GPU accelerators, tainted so only pods with a matching toleration land there.",
+        "bundles": [
+            "NodePool"
+        ],
+        "params": [
+            {
+                "name": "name",
+                "type": "string",
+                "required": true,
+                "description": "Node pool name."
+            },
+            {
+                "name": "clusterRef",
+                "type": "Record<string, unknown>",
+                "required": true,
+                "description": "Reference to the GKE cluster this pool attaches to, e.g. `{ name: \"my-cluster\" }`."
+            },
+            {
+                "name": "location",
+                "type": "string",
+                "required": true,
+                "description": "GCP region or zone of the cluster."
+            },
+            {
+                "name": "machineType",
+                "type": "string",
+                "required": false,
+                "description": "Machine type for GPU nodes (default: \"n1-standard-8\")."
+            },
+            {
+                "name": "acceleratorType",
+                "type": "string",
+                "required": false,
+                "description": "Accelerator type, e.g. \"nvidia-tesla-t4\", \"nvidia-l4\", \"nvidia-tesla-a100\" (default: \"nvidia-tesla-t4\")."
+            },
+            {
+                "name": "acceleratorCount",
+                "type": "number",
+                "required": false,
+                "description": "Number of accelerators per node (default: 1)."
+            },
+            {
+                "name": "minNodeCount",
+                "type": "number",
+                "required": false,
+                "description": "Minimum nodes for autoscaling — 0 enables scale-to-zero (default: 0)."
+            },
+            {
+                "name": "maxNodeCount",
+                "type": "number",
+                "required": false,
+                "description": "Maximum nodes for autoscaling (default: 4)."
+            },
+            {
+                "name": "diskSizeGb",
+                "type": "number",
+                "required": false,
+                "description": "Boot disk size in GB (default: 200)."
+            },
+            {
+                "name": "diskType",
+                "type": "string",
+                "required": false,
+                "description": "Boot disk type (default: \"pd-ssd\")."
+            },
+            {
+                "name": "taint",
+                "type": "GpuNodePoolTaint[]",
+                "required": false,
+                "description": "Node taints — only pods with a matching toleration are scheduled here."
+            },
+            {
+                "name": "workloadMetadata",
+                "type": "boolean",
+                "required": false,
+                "description": "Enable GKE metadata server workload identity mode on nodes (default: true)."
+            },
+            {
+                "name": "gpuSharingConfig",
+                "type": "Record<string, unknown>",
+                "required": false,
+                "description": "GPU time-sharing configuration, e.g. `{ maxSharedClientsPerGpu: 2, gpuSharingStrategy: \"TIME_SHARING\" }`."
+            },
+            {
+                "name": "gpuPartitionSize",
+                "type": "string",
+                "required": false,
+                "description": "Multi-instance GPU (MIG) partition size, e.g. \"1g.5gb\"."
+            },
+            {
+                "name": "labels",
+                "type": "Record<string, string>",
+                "required": false,
+                "description": "Additional labels."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for the node pool resource."
+            },
+            {
+                "name": "defaults",
+                "type": "{ nodePool?: Partial<ConstructorParameters<typeof NodePool>[0]>; }",
+                "required": false,
+                "description": "Per-member defaults for customizing the underlying resource."
+            }
+        ]
+    },
+    {
+        "name": "LocationRestriction",
+        "lexicon": "gcp",
+        "description": "Bundles OrgpolicyPolicy.",
+        "bundles": [
+            "OrgpolicyPolicy"
+        ],
+        "params": [
+            {
+                "name": "orgId",
+                "type": "string",
+                "required": true,
+                "description": "The organization the policy binds to."
+            },
+            {
+                "name": "locations",
+                "type": "string[]",
+                "required": true,
+                "description": "The only locations resources may be created in (value groups like \"in:eu-locations\" work)."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for all resources."
+            }
+        ]
+    },
+    {
+        "name": "ManagedCertificate",
+        "lexicon": "gcp",
+        "description": "ManagedCertificate composite — ManagedSslCertificate + optional TargetHttpsProxy + UrlMap.",
+        "bundles": [
+            "ManagedSSLCertificate",
+            "TargetHTTPSProxy",
+            "URLMap"
+        ],
+        "params": [
+            {
+                "name": "name",
+                "type": "string",
+                "required": true,
+                "description": "Certificate name."
+            },
+            {
+                "name": "domains",
+                "type": "string[]",
+                "required": true,
+                "description": "Domains for the managed SSL certificate."
+            },
+            {
+                "name": "createProxy",
+                "type": "boolean",
+                "required": false,
+                "description": "Create a TargetHttpsProxy and UrlMap (default: false)."
+            },
+            {
+                "name": "backendServiceName",
+                "type": "string",
+                "required": false,
+                "description": "Backend service name (required if createProxy is true)."
+            },
+            {
+                "name": "labels",
+                "type": "Record<string, string>",
+                "required": false,
+                "description": "Additional labels."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for all resources."
+            },
+            {
+                "name": "defaults",
+                "type": "{ certificate?: Partial<ConstructorParameters<typeof ManagedSSLCertificate>[0]>; targetHttpsProxy?: Partial<Construct...",
+                "required": false,
+                "description": "Per-member defaults for customizing individual resources."
+            }
+        ]
+    },
+    {
+        "name": "MemorystoreRedis",
+        "lexicon": "gcp",
+        "description": "Create a MemorystoreRedis composite.",
+        "bundles": [
+            "RedisInstance"
+        ],
+        "params": [
+            {
+                "name": "name",
+                "type": "string",
+                "required": true,
+                "description": "Instance name."
+            },
+            {
+                "name": "purpose",
+                "type": "\"persistent\" | \"cache\"",
+                "required": true,
+                "description": "Purpose drives the maxmemory-policy default."
+            },
+            {
+                "name": "tier",
+                "type": "string",
+                "required": true,
+                "description": "Memorystore tier (e.g. \"BASIC\", \"STANDARD_HA\")."
+            },
+            {
+                "name": "memorySizeGb",
+                "type": "number",
+                "required": true,
+                "description": "Memory size in GB."
+            },
+            {
+                "name": "region",
+                "type": "string",
+                "required": true,
+                "description": "GCP region."
+            },
+            {
+                "name": "networkRef",
+                "type": "string",
+                "required": true,
+                "description": "authorizedNetworkRef.name — the VPC network to authorize."
+            },
+            {
+                "name": "redisVersion",
+                "type": "string",
+                "required": false,
+                "description": "Redis version (default: \"REDIS_7_0\")."
+            },
+            {
+                "name": "authEnabled",
+                "type": "boolean",
+                "required": false,
+                "description": "Enable AUTH (default: true)."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for all resources."
+            },
+            {
+                "name": "labels",
+                "type": "Record<string, string>",
+                "required": false,
+                "description": "Additional labels."
+            },
+            {
+                "name": "defaults",
+                "type": "{ instance?: Partial<Record<string, unknown>>; }",
+                "required": false,
+                "description": "Per-member defaults for customizing individual resources."
+            }
+        ]
+    },
+    {
+        "name": "MultiRegionVpc",
+        "lexicon": "gcp",
+        "description": "Create a MultiRegionVpc composite — one VPC with subnets, Cloud NAT, and an allow-internal firewall for every region in the array.",
+        "bundles": [
+            "Firewall",
+            "Router",
+            "RouterNAT",
+            "Subnetwork",
+            "VPCNetwork"
+        ],
+        "params": [
+            {
+                "name": "name",
+                "type": "string",
+                "required": true,
+                "description": "VPC network name."
+            },
+            {
+                "name": "regions",
+                "type": "MultiRegionVpcRegion[]",
+                "required": true,
+                "description": "One entry per GCP region."
+            },
+            {
+                "name": "enableFlowLogs",
+                "type": "boolean",
+                "required": false,
+                "description": "Enable VPC flow logs on all subnets (default: false)."
+            },
+            {
+                "name": "labels",
+                "type": "Record<string, string>",
+                "required": false,
+                "description": "Additional labels for all resources."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for Config Connector resources."
+            }
+        ]
+    },
+    {
+        "name": "OrganizationAuditConfig",
+        "lexicon": "gcp",
+        "description": "Bundles IAMAuditConfig.",
+        "bundles": [
+            "IAMAuditConfig"
+        ],
+        "params": [
+            {
+                "name": "orgId",
+                "type": "string",
+                "required": true,
+                "description": "The organization audit logging is enabled on."
+            },
+            {
+                "name": "service",
+                "type": "string",
+                "required": false,
+                "description": "Defaults to \"allServices\"."
+            },
+            {
+                "name": "logTypes",
+                "type": "string[]",
+                "required": false,
+                "description": "Defaults to ADMIN_READ / DATA_READ / DATA_WRITE."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for all resources."
+            }
+        ]
+    },
+    {
+        "name": "PrivateService",
+        "lexicon": "gcp",
+        "description": "PrivateService composite — GlobalAddress + ServiceNetworkingConnection + optional DNS.",
+        "bundles": [
+            "ComputeAddress",
+            "DNSManagedZone",
+            "ServicenetworkingConnection"
+        ],
+        "params": [
+            {
+                "name": "name",
+                "type": "string",
+                "required": true,
+                "description": "Service name."
+            },
+            {
+                "name": "networkName",
+                "type": "string",
+                "required": true,
+                "description": "VPC network name to peer with."
+            },
+            {
+                "name": "prefixLength",
+                "type": "number",
+                "required": false,
+                "description": "IP address prefix length (default: 16)."
+            },
+            {
+                "name": "addressType",
+                "type": "string",
+                "required": false,
+                "description": "Address type (default: \"INTERNAL\")."
+            },
+            {
+                "name": "purpose",
+                "type": "string",
+                "required": false,
+                "description": "Purpose (default: \"VPC_PEERING\")."
+            },
+            {
+                "name": "enableDns",
+                "type": "boolean",
+                "required": false,
+                "description": "Enable a DNS zone for the private service (default: false)."
+            },
+            {
+                "name": "dnsZoneName",
+                "type": "string",
+                "required": false,
+                "description": "DNS zone name (default: \"{name}-dns\")."
+            },
+            {
+                "name": "dnsSuffix",
+                "type": "string",
+                "required": false,
+                "description": "DNS name suffix (default: \"internal.\")."
+            },
+            {
+                "name": "labels",
+                "type": "Record<string, string>",
+                "required": false,
+                "description": "Additional labels."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for all resources."
+            },
+            {
+                "name": "defaults",
+                "type": "{ globalAddress?: Partial<ConstructorParameters<typeof ComputeAddress>[0]>; serviceConnection?: Partial<ConstructorPa...",
+                "required": false,
+                "description": "Per-member defaults for customizing individual resources."
+            }
+        ]
+    },
+    {
+        "name": "PubSubPipeline",
+        "lexicon": "gcp",
+        "description": "PubSubPipeline composite — Topic + Subscription + optional DLQ topic + subscriber IAM binding.",
+        "bundles": [
+            "IAMPolicyMember",
+            "PubSubSubscription",
+            "PubSubTopic"
+        ],
+        "params": [
+            {
+                "name": "name",
+                "type": "string",
+                "required": true,
+                "description": "Pipeline name."
+            },
+            {
+                "name": "ackDeadlineSeconds",
+                "type": "number",
+                "required": false,
+                "description": "Subscription ack deadline in seconds (default: 10)."
+            },
+            {
+                "name": "messageRetentionDuration",
+                "type": "string",
+                "required": false,
+                "description": "Message retention duration (default: \"604800s\" = 7 days)."
+            },
+            {
+                "name": "enableDeadLetterQueue",
+                "type": "boolean",
+                "required": false,
+                "description": "Enable dead-letter queue (default: false)."
+            },
+            {
+                "name": "maxDeliveryAttempts",
+                "type": "number",
+                "required": false,
+                "description": "Max delivery attempts before sending to DLQ (default: 5)."
+            },
+            {
+                "name": "subscriberServiceAccount",
+                "type": "string",
+                "required": false,
+                "description": "Service account email for subscriber IAM binding."
+            },
+            {
+                "name": "labels",
+                "type": "Record<string, string>",
+                "required": false,
+                "description": "Additional labels."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for all resources."
+            },
+            {
+                "name": "defaults",
+                "type": "{ topic?: Partial<ConstructorParameters<typeof PubSubTopic>[0]>; subscription?: Partial<ConstructorParameters<typeof ...",
+                "required": false,
+                "description": "Per-member defaults for customizing individual resources."
+            }
+        ]
+    },
+    {
+        "name": "SecureProject",
+        "lexicon": "gcp",
+        "description": "SecureProject composite — Project + IAMAuditConfig + Service enablement + owner IAM + LoggingSink.",
+        "bundles": [
+            "IAMAuditConfig",
+            "IAMPolicyMember",
+            "LogSink",
+            "ResourcemanagerProject",
+            "ServiceusageService"
+        ],
+        "params": [
+            {
+                "name": "name",
+                "type": "string",
+                "required": true,
+                "description": "Project name (also used as project ID)."
+            },
+            {
+                "name": "orgId",
+                "type": "string",
+                "required": false,
+                "description": "Organization ID or folder ID for the parent."
+            },
+            {
+                "name": "folderId",
+                "type": "string",
+                "required": false,
+                "description": "Folder ID for the parent (alternative to orgId)."
+            },
+            {
+                "name": "billingAccountRef",
+                "type": "string",
+                "required": false,
+                "description": "Billing account ID."
+            },
+            {
+                "name": "owner",
+                "type": "string",
+                "required": false,
+                "description": "Owner email (IAM member format, e.g., \"user:admin@example.com\")."
+            },
+            {
+                "name": "enabledApis",
+                "type": "string[]",
+                "required": false,
+                "description": "GCP APIs to enable (default: common APIs)."
+            },
+            {
+                "name": "loggingSinkDestination",
+                "type": "string",
+                "required": false,
+                "description": "Logging sink destination (e.g., BigQuery dataset or Cloud Storage bucket)."
+            },
+            {
+                "name": "loggingSinkFilter",
+                "type": "string",
+                "required": false,
+                "description": "Logging sink filter (default: all audit logs)."
+            },
+            {
+                "name": "labels",
+                "type": "Record<string, string>",
+                "required": false,
+                "description": "Additional labels."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for all resources."
+            },
+            {
+                "name": "defaults",
+                "type": "{ project?: Partial<ConstructorParameters<typeof ResourcemanagerProject>[0]>; auditConfig?: Partial<ConstructorParame...",
+                "required": false,
+                "description": "Per-member defaults for customizing individual resources."
+            }
+        ]
+    },
+    {
+        "name": "VpcNetwork",
+        "lexicon": "gcp",
+        "description": "Create a VpcNetwork composite.",
+        "bundles": [
+            "Firewall",
+            "Router",
+            "RouterNAT",
+            "Subnetwork",
+            "VPCNetwork"
+        ],
+        "params": [
+            {
+                "name": "name",
+                "type": "string",
+                "required": true,
+                "description": "Network name."
+            },
+            {
+                "name": "autoCreateSubnetworks",
+                "type": "boolean",
+                "required": false,
+                "description": "Auto-create subnetworks (default: false — custom mode)."
+            },
+            {
+                "name": "subnets",
+                "type": "VpcSubnet[]",
+                "required": false,
+                "description": "Subnets to create in custom mode."
+            },
+            {
+                "name": "enableNat",
+                "type": "boolean",
+                "required": false,
+                "description": "Enable Cloud NAT for outbound internet access (default: false)."
+            },
+            {
+                "name": "natRegion",
+                "type": "string",
+                "required": false,
+                "description": "NAT region (required if enableNat is true)."
+            },
+            {
+                "name": "allowInternalTraffic",
+                "type": "boolean",
+                "required": false,
+                "description": "Allow internal traffic firewall rule (default: true)."
+            },
+            {
+                "name": "allowIapSsh",
+                "type": "boolean",
+                "required": false,
+                "description": "Allow SSH from IAP (default: false)."
+            },
+            {
+                "name": "labels",
+                "type": "Record<string, string>",
+                "required": false,
+                "description": "Additional labels."
+            },
+            {
+                "name": "namespace",
+                "type": "string",
+                "required": false,
+                "description": "Namespace for all resources."
+            },
+            {
+                "name": "defaults",
+                "type": "{ network?: Partial<ConstructorParameters<typeof VPCNetwork>[0]>; router?: Partial<ConstructorParameters<typeof Route...",
+                "required": false,
+                "description": "Per-member defaults for customizing individual resources."
+            }
+        ]
+    }
+];