@intentius/chant-lexicon-gcp 0.46.0 → 0.50.0

package/dist/composites/gpu-node-pool.d.ts

@@ -0,0 +1,83 @@
+/**
+ * GpuNodePool composite — ContainerNodePool with GPU accelerators.
+ *
+ * Promoted from the hand-wired `gpuNodePool` in the ray-kuberay-gke example
+ * (examples/ray-kuberay-gke/src/infra/cluster.ts). Attaches to an existing
+ * GKE cluster (e.g. one created by `GkeCluster`) and adds a separate,
+ * scale-to-zero pool for GPU-tainted workloads.
+ *
+ * NOTE: GKE auto-installs the nvidia-device-plugin DaemonSet when a node
+ * pool has accelerators. Do NOT emit it as a K8s manifest — it will
+ * conflict with the GKE-managed version.
+ */
+import { NodePool } from "../generated/index.js";
+export interface GpuNodePoolTaint {
+    key: string;
+    value: string;
+    effect: string;
+}
+export interface GpuNodePoolProps {
+    /** Node pool name. */
+    name: string;
+    /** Reference to the GKE cluster this pool attaches to, e.g. `{ name: "my-cluster" }`. */
+    clusterRef: Record<string, unknown>;
+    /** GCP region or zone of the cluster. */
+    location: string;
+    /** Machine type for GPU nodes (default: "n1-standard-8"). */
+    machineType?: string;
+    /** Accelerator type, e.g. "nvidia-tesla-t4", "nvidia-l4", "nvidia-tesla-a100" (default: "nvidia-tesla-t4"). */
+    acceleratorType?: string;
+    /** Number of accelerators per node (default: 1). */
+    acceleratorCount?: number;
+    /** Minimum nodes for autoscaling — 0 enables scale-to-zero (default: 0). */
+    minNodeCount?: number;
+    /** Maximum nodes for autoscaling (default: 4). */
+    maxNodeCount?: number;
+    /** Boot disk size in GB (default: 200). */
+    diskSizeGb?: number;
+    /** Boot disk type (default: "pd-ssd"). */
+    diskType?: string;
+    /**
+     * Node taints — only pods with a matching toleration are scheduled here.
+     * Default: `nvidia.com/gpu=present:NO_SCHEDULE`. Pass an empty array to omit tainting.
+     */
+    taint?: GpuNodePoolTaint[];
+    /** Enable GKE metadata server workload identity mode on nodes (default: true). */
+    workloadMetadata?: boolean;
+    /**
+     * GPU time-sharing configuration, e.g.
+     * `{ maxSharedClientsPerGpu: 2, gpuSharingStrategy: "TIME_SHARING" }`.
+     */
+    gpuSharingConfig?: Record<string, unknown>;
+    /** Multi-instance GPU (MIG) partition size, e.g. "1g.5gb". */
+    gpuPartitionSize?: string;
+    /** Additional labels. */
+    labels?: Record<string, string>;
+    /** Namespace for the node pool resource. */
+    namespace?: string;
+    /** Per-member defaults for customizing the underlying resource. */
+    defaults?: {
+        nodePool?: Partial<ConstructorParameters<typeof NodePool>[0]>;
+    };
+}
+/**
+ * Create a GpuNodePool composite — a scale-to-zero ContainerNodePool with
+ * GPU accelerators, tainted so only pods with a matching toleration land there.
+ *
+ * @example
+ * ```ts
+ * import { GpuNodePool } from "@intentius/chant-lexicon-gcp";
+ *
+ * const { nodePool } = GpuNodePool({
+ *   name: "ray-gke-gpu",
+ *   clusterRef: { name: "ray-gke" },
+ *   location: "us-central1",
+ *   acceleratorType: "nvidia-tesla-t4",
+ *   maxNodeCount: 4,
+ * });
+ * ```
+ */
+export declare const GpuNodePool: import("@intentius/chant").CompositeDefinition<GpuNodePoolProps, {
+    nodePool: import("@intentius/chant").Declarable & Record<string, string>;
+}>;
+//# sourceMappingURL=gpu-node-pool.d.ts.map

package/dist/composites/gpu-node-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gpu-node-pool.d.ts","sourceRoot":"","sources":["../../src/composites/gpu-node-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAGH,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,sBAAsB;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,yFAAyF;IACzF,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+GAA+G;IAC/G,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,KAAK,CAAC,EAAE,gBAAgB,EAAE,CAAC;IAC3B,kFAAkF;IAClF,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;OAGG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,4CAA4C;IAC5C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC/D,CAAC;CACH;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,WAAW;;EA6DP,CAAC"}

package/dist/composites/index.d.ts

@@ -26,4 +26,6 @@ export { MultiRegionVpc } from "./multi-region-vpc.js";
 export type { MultiRegionVpcConfig, MultiRegionVpcRegion } from "./multi-region-vpc.js";
 export { GkeCrdbRegion } from "./gke-crdb-region.js";
 export type { GkeCrdbRegionConfig, GkeCrdbRegionNodeConfig } from "./gke-crdb-region.js";
+export { GpuNodePool } from "./gpu-node-pool.js";
+export type { GpuNodePoolProps, GpuNodePoolTaint } from "./gpu-node-pool.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/composites/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/composites/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACpG,YAAY,EACV,yBAAyB,EACzB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,YAAY,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,YAAY,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,YAAY,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,YAAY,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,YAAY,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/composites/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACpG,YAAY,EACV,yBAAyB,EACzB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,YAAY,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,YAAY,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,YAAY,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,YAAY,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,YAAY,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACtF,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/index.d.ts

@@ -1,3 +1,4 @@
+export { gcpApply, gcpDelete, flociGcpUp, flociGcpDown } from "./op/builders.js";
 export { gcpSerializer } from "./serializer.js";
 export { gcpPlugin } from "./plugin.js";
 export { defaultLabels, defaultAnnotations, isDefaultLabels, isDefaultAnnotations } from "./default-labels.js";
@@ -5,8 +6,8 @@ export { DEFAULT_LABELS_MARKER, DEFAULT_ANNOTATIONS_MARKER } from "./default-lab
 export { GCP, ProjectId, Region, Zone } from "./pseudo.js";
 export { GcpAnnotations } from "./variables.js";
 export * from "./generated/index.js";
-export { GkeCluster, CloudRunServiceComposite, CloudSqlInstance, GcsBucket, VpcNetwork, PubSubPipeline, CloudFunctionWithTrigger, PrivateService, ManagedCertificate, SecureProject, MemorystoreRedis, MultiRegionVpc, GkeCrdbRegion, GovernanceFoundation, LocationRestriction, OrganizationAuditConfig, } from "./composites/index.js";
-export type { GkeClusterProps, CloudRunServiceProps, CloudSqlInstanceProps, GcsBucketProps, VpcNetworkProps, VpcSubnet, PubSubPipelineProps, CloudFunctionWithTriggerProps, PrivateServiceProps, ManagedCertificateProps, SecureProjectProps, MemorystoreRedisProps, MultiRegionVpcConfig, MultiRegionVpcRegion, GkeCrdbRegionConfig, GkeCrdbRegionNodeConfig, GovernanceFoundationProps, LocationRestrictionProps, OrganizationAuditConfigProps, } from "./composites/index.js";
+export { GkeCluster, CloudRunServiceComposite, CloudSqlInstance, GcsBucket, VpcNetwork, PubSubPipeline, CloudFunctionWithTrigger, PrivateService, ManagedCertificate, SecureProject, MemorystoreRedis, MultiRegionVpc, GkeCrdbRegion, GpuNodePool, GovernanceFoundation, LocationRestriction, OrganizationAuditConfig, } from "./composites/index.js";
+export type { GkeClusterProps, CloudRunServiceProps, CloudSqlInstanceProps, GcsBucketProps, VpcNetworkProps, VpcSubnet, PubSubPipelineProps, CloudFunctionWithTriggerProps, PrivateServiceProps, ManagedCertificateProps, SecureProjectProps, MemorystoreRedisProps, MultiRegionVpcConfig, MultiRegionVpcRegion, GkeCrdbRegionConfig, GkeCrdbRegionNodeConfig, GpuNodePoolProps, GpuNodePoolTaint, GovernanceFoundationProps, LocationRestrictionProps, OrganizationAuditConfigProps, } from "./composites/index.js";
 export { landingZoneConfig, resourceLocationRestriction, DISABLE_SA_KEY_CREATION, SKIP_DEFAULT_NETWORK, AUDIT_ALL_SERVICES, FOUNDATION_FOLDERS, } from "./governance.js";
 export type { GcpGovernanceConfig, LandingZoneConfigProps, FolderConfig, OrgPolicyConfig, ProjectConfig } from "./governance.js";
 export { StorageRoles, ComputeRoles, ContainerRoles, IAMRoles, SQLRoles, RunRoles, PubSubRoles } from "./actions/index.js";

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGrC,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAGrF,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAGxD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAI7C,cAAc,mBAAmB,CAAC;AAGlC,OAAO,EACL,UAAU,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,SAAS,EAAE,UAAU,EAC7E,cAAc,EAAE,wBAAwB,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAC3F,gBAAgB,EAAE,cAAc,EAAE,aAAa,EAC/C,oBAAoB,EAAE,mBAAmB,EAAE,uBAAuB,GACnE,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,EACd,eAAe,EAAE,SAAS,EAC1B,mBAAmB,EACnB,6BAA6B,EAC7B,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EAAE,oBAAoB,EAC1C,mBAAmB,EAAE,uBAAuB,EAC5C,yBAAyB,EAAE,wBAAwB,EAAE,4BAA4B,GAClF,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EACL,iBAAiB,EAAE,2BAA2B,EAC9C,uBAAuB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,kBAAkB,GACtF,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG9H,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAGxH,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC1G,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGrI,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGvE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAG9E,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG7C,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAGrC,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC5G,OAAO,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAGrF,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,UAAU,CAAC;AAGxD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAI7C,cAAc,mBAAmB,CAAC;AAGlC,OAAO,EACL,UAAU,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,SAAS,EAAE,UAAU,EAC7E,cAAc,EAAE,wBAAwB,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAC3F,gBAAgB,EAAE,cAAc,EAAE,aAAa,EAAE,WAAW,EAC5D,oBAAoB,EAAE,mBAAmB,EAAE,uBAAuB,GACnE,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,EACd,eAAe,EAAE,SAAS,EAC1B,mBAAmB,EACnB,6BAA6B,EAC7B,mBAAmB,EACnB,uBAAuB,EACvB,kBAAkB,EAClB,qBAAqB,EACrB,oBAAoB,EAAE,oBAAoB,EAC1C,mBAAmB,EAAE,uBAAuB,EAC5C,gBAAgB,EAAE,gBAAgB,EAClC,yBAAyB,EAAE,wBAAwB,EAAE,4BAA4B,GAClF,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EACL,iBAAiB,EAAE,2BAA2B,EAC9C,uBAAuB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,kBAAkB,GACtF,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG9H,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAGxH,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACrF,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAC1G,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGrI,OAAO,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACnE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGvE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC"}

package/dist/integrity.json

@@ -1,7 +1,7 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "ffc31c443c2f2d8d6b693ba3213af935d3b3342ff7198445ff39fb3e7842b140",
+    "manifest.json": "ed246ac3b74e491648ab0fe551472acafbae7f5ec4dcd09f4cfca817effe4eea",
     "meta.json": "475f10909854d059a2e2d4fb541c058803422e38b9c64bd4d6858c0623eedb8c",
     "types/index.d.ts": "5433b54c04b57d6fda8f3d81ef92ed0aca87f7e8e5dd3ea92d8de6e62a3ccfab",
     "rules/hardcoded-project.ts": "228631d3159e1ffcce2359c66073d4ae59bb0285f378e46e446f416aec50481c",
@@ -35,10 +35,10 @@
     "rules/wgc501.ts": "bf99d8dc97537687fdfe9a8d5eb420172bf3279a4147311037f9c1d1f5fd4c85",
     "rules/wgc502.ts": "6460a028f73ef31a66653954e67142079130112b70fa01a79f80464968a1b9f6",
     "rules/wgc503.ts": "44dc51efbf9f9384b61a4e19b173b4c182557143cb59fbaf4da087e70a38f916",
-    "skills/chant-gcp.md": "8e1897fbc859f735b9540e794c111b66e765bba457d77ddd71ac9049a8df5f4d",
+    "skills/chant-gcp.md": "46a5e711ac59086d9f59ef645085aa54e8b1953afb76a0d93158b7288edf362e",
     "skills/chant-gcp-security.md": "39a1c97b7425ed43b081257132449d11ce9d12f2d4755fc30d8b14bbc38f60bd",
     "skills/chant-gcp-patterns.md": "4c6809fc7c37fa1879379ad4c0e2d114dec9497bc6eb9d1bca4e79fddea4f509",
     "skills/chant-gcp-gke.md": "be277019da9a722c851e47cd2dfb9c9536668948c3535fb20db7697e934c4e2b"
   },
-  "composite": "27d05f872628d1a86663bf62392f79fbc29647c171a944a0163fa50a66611565"
+  "composite": "d82d01c89efe07eb6159d280987dae5435443c5f5696f5d1044d8812f87a0f31"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "gcp",
-  "version": "0.46.0",
+  "version": "0.50.0",
   "chantVersion": ">=0.1.0",
   "namespace": "GCP",
   "intrinsics": [],

package/dist/op/builders.d.ts

@@ -0,0 +1,45 @@
+/**
+ * Typed step-builder wrappers for this lexicon's activities (chant #1288
+ * Stage 2). See `lexicons/k8s/src/op/builders.ts`'s module doc for why these
+ * live beside their `*Args` interfaces rather than in core or the temporal
+ * barrel. `opts`'s type in each wrapper below IS the activity's own `*Args`
+ * interface (via `Omit`/`WithStepRefs`) — never restated. `core`'s own
+ * `gcpApply`/`gcpDelete`/`flociGcpUp`/`flociGcpDown` are unchanged and
+ * produce byte-identical `ActivityStep` output; these are purely additive.
+ */
+import { type ActivityStep, type NamedActivityStep, type WithStepRefs } from "@intentius/chant/op";
+import type { GcpApplyArgs } from "./activities/gcp-apply.js";
+import type { FlociGcpUpArgs, FlociGcpDownArgs } from "./activities/floci-gcp.js";
+/** Extra opts every wrapper below accepts alongside its activity's own fields. */
+type StepOpts = {
+    profile?: ActivityStep["profile"];
+    id?: string;
+};
+/**
+ * Apply built GCP (CNRM) resources directly to their GCP REST APIs — the
+ * fully typed twin of core's `gcpApply`. `opts` is {@link GcpApplyArgs}
+ * itself, minus the positional `manifestPath`. Defaults to the `longInfra`
+ * profile.
+ */
+export declare const gcpApply: (manifestPath: string, opts?: WithStepRefs<Omit<GcpApplyArgs, "manifestPath">> & StepOpts) => NamedActivityStep;
+/**
+ * Delete the GCP (CNRM) resources in a built manifest — the inverse of
+ * {@link gcpApply}, fully typed twin of core's `gcpDelete`. `opts` is
+ * {@link GcpApplyArgs} itself (the activity reuses it), minus the positional
+ * `manifestPath`. Defaults to the `longInfra` profile.
+ */
+export declare const gcpDelete: (manifestPath: string, opts?: WithStepRefs<Omit<GcpApplyArgs, "manifestPath">> & StepOpts) => NamedActivityStep;
+/**
+ * Boot a local floci-gcp (GCP emulator) — the fully typed twin of core's
+ * `flociGcpUp`. `opts` is {@link FlociGcpUpArgs} itself. Defaults to the
+ * `longInfra` profile.
+ */
+export declare const flociGcpUp: (opts?: WithStepRefs<FlociGcpUpArgs> & StepOpts) => NamedActivityStep;
+/**
+ * Stop and remove the local floci-gcp container — the fully typed twin of
+ * core's `flociGcpDown`. `opts` is {@link FlociGcpDownArgs} itself. Defaults
+ * to the `fastIdempotent` profile.
+ */
+export declare const flociGcpDown: (opts?: WithStepRefs<FlociGcpDownArgs> & StepOpts) => NamedActivityStep;
+export {};
+//# sourceMappingURL=builders.d.ts.map

package/dist/op/builders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"builders.d.ts","sourceRoot":"","sources":["../../src/op/builders.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE/E,kFAAkF;AAClF,KAAK,QAAQ,GAAG;IAAE,OAAO,CAAC,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnE;;;;;GAKG;AACH,eAAO,MAAM,QAAQ,GACnB,cAAc,MAAM,EACpB,OAAO,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,GAAG,QAAQ,KACjE,iBAGF,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,SAAS,GACpB,cAAc,MAAM,EACpB,OAAO,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,GAAG,QAAQ,KACjE,iBAGF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,UAAU,GAAI,OAAO,YAAY,CAAC,cAAc,CAAC,GAAG,QAAQ,KAAG,iBAG3E,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,YAAY,GAAI,OAAO,YAAY,CAAC,gBAAgB,CAAC,GAAG,QAAQ,KAAG,iBAG/E,CAAC"}

package/dist/skills/chant-gcp.md

@@ -201,6 +201,7 @@ Composites group related Config Connector resources with secure defaults. Each r
 | `PrivateService` | ComputeGlobalAddress + ServiceNetworkingConnection | RFC 1918 range, automatic peering |
 | `ManagedCertificate` | ComputeManagedSslCertificate | Auto-renewal via Google-managed cert |
 | `SecureProject` | Project + IAMAuditConfig + essential Service resources | Audit logging, required APIs enabled, org policy constraints |
+| `GpuNodePool` | ContainerNodePool with GPU accelerators | Scale-to-zero, nvidia.com/gpu taint, GKE metadata workload identity |
 
 ### Example: GKE cluster with secure defaults
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-gcp",
-  "version": "0.46.0",
+  "version": "0.50.0",
   "description": "Google Cloud lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -68,7 +68,7 @@
   },
   "dependencies": {
     "fflate": "^0.8.2",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.3.1",
     "@types/js-yaml": "^4.0.9"
   },
   "devDependencies": {
@@ -76,7 +76,7 @@
     "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.46.0",
+    "@intentius/chant": "^0.50.0",
     "typescript": "^5.9.3"
   }
 }

package/src/composites/composites.test.ts

@@ -9,6 +9,7 @@ import { CloudFunctionWithTrigger } from "./cloud-function";
 import { PrivateService } from "./private-service";
 import { ManagedCertificate } from "./managed-certificate";
 import { SecureProject } from "./secure-project";
+import { GpuNodePool } from "./gpu-node-pool";
 
 /** Helper to extract props from a Declarable member. */
 function p(member: unknown): Record<string, any> {
@@ -462,3 +463,150 @@ describe("SecureProject", () => {
     expect(result.loggingSink).toBeUndefined();
   });
 });
+
+// ── GpuNodePool ────────────────────────────────────────────────────
+
+describe("GpuNodePool", () => {
+  test("returns a node pool", () => {
+    const result = GpuNodePool({
+      name: "ray-gke-gpu",
+      clusterRef: { name: "ray-gke" },
+      location: "us-central1",
+    });
+    expect(result.nodePool).toBeDefined();
+  });
+
+  test("scales to zero by default", () => {
+    const result = GpuNodePool({
+      name: "gpu-pool",
+      clusterRef: { name: "c" },
+      location: "us-central1",
+    });
+    expect(p(result.nodePool).initialNodeCount).toBe(0);
+    expect(p(result.nodePool).autoscaling.minNodeCount).toBe(0);
+    expect(p(result.nodePool).autoscaling.maxNodeCount).toBe(4);
+  });
+
+  test("defaults to a single nvidia-tesla-t4 accelerator", () => {
+    const result = GpuNodePool({
+      name: "gpu-pool",
+      clusterRef: { name: "c" },
+      location: "us-central1",
+    });
+    expect(p(result.nodePool).nodeConfig.guestAccelerator).toEqual([
+      { count: 1, type: "nvidia-tesla-t4" },
+    ]);
+  });
+
+  test("respects acceleratorType and acceleratorCount", () => {
+    const result = GpuNodePool({
+      name: "gpu-pool",
+      clusterRef: { name: "c" },
+      location: "us-central1",
+      acceleratorType: "nvidia-l4",
+      acceleratorCount: 2,
+    });
+    expect(p(result.nodePool).nodeConfig.guestAccelerator).toEqual([
+      { count: 2, type: "nvidia-l4" },
+    ]);
+  });
+
+  test("defaults to the nvidia.com/gpu NoSchedule taint", () => {
+    const result = GpuNodePool({
+      name: "gpu-pool",
+      clusterRef: { name: "c" },
+      location: "us-central1",
+    });
+    expect(p(result.nodePool).nodeConfig.taint).toEqual([
+      { key: "nvidia.com/gpu", value: "present", effect: "NO_SCHEDULE" },
+    ]);
+  });
+
+  test("omits taint when an empty array is passed", () => {
+    const result = GpuNodePool({
+      name: "gpu-pool",
+      clusterRef: { name: "c" },
+      location: "us-central1",
+      taint: [],
+    });
+    expect(p(result.nodePool).nodeConfig.taint).toBeUndefined();
+  });
+
+  test("does not emit a device-plugin manifest — GKE auto-installs it", () => {
+    const result = GpuNodePool({
+      name: "gpu-pool",
+      clusterRef: { name: "c" },
+      location: "us-central1",
+    });
+    expect(Object.keys(result)).toEqual(["nodePool"]);
+  });
+
+  test("enables GKE_METADATA workload identity mode by default", () => {
+    const result = GpuNodePool({
+      name: "gpu-pool",
+      clusterRef: { name: "c" },
+      location: "us-central1",
+    });
+    expect(p(result.nodePool).nodeConfig.workloadMetadataConfig).toEqual({ mode: "GKE_METADATA" });
+  });
+
+  test("supports GPU time-sharing config", () => {
+    const result = GpuNodePool({
+      name: "gpu-pool",
+      clusterRef: { name: "c" },
+      location: "us-central1",
+      gpuSharingConfig: { maxSharedClientsPerGpu: 2, gpuSharingStrategy: "TIME_SHARING" },
+    });
+    expect(p(result.nodePool).nodeConfig.guestAccelerator[0].gpuSharingConfig).toEqual({
+      maxSharedClientsPerGpu: 2,
+      gpuSharingStrategy: "TIME_SHARING",
+    });
+  });
+
+  test("supports MIG partition size", () => {
+    const result = GpuNodePool({
+      name: "gpu-pool",
+      clusterRef: { name: "c" },
+      location: "us-central1",
+      gpuPartitionSize: "1g.5gb",
+    });
+    expect(p(result.nodePool).nodeConfig.guestAccelerator[0].gpuPartitionSize).toBe("1g.5gb");
+  });
+
+  test("references the target cluster", () => {
+    const result = GpuNodePool({
+      name: "gpu-pool",
+      clusterRef: { name: "ray-gke" },
+      location: "us-central1",
+    });
+    expect(p(result.nodePool).clusterRef).toEqual({ name: "ray-gke" });
+  });
+
+  test("matches the hand-wired ray-kuberay-gke example config", () => {
+    const result = GpuNodePool({
+      name: "ray-gke-gpu",
+      clusterRef: { name: "ray-gke" },
+      location: "us-central1",
+      machineType: "n1-standard-8",
+      acceleratorType: "nvidia-tesla-t4",
+      acceleratorCount: 1,
+      minNodeCount: 0,
+      maxNodeCount: 4,
+      diskSizeGb: 200,
+      diskType: "pd-ssd",
+    });
+    const spec = p(result.nodePool);
+    expect(spec.initialNodeCount).toBe(0);
+    expect(spec.autoscaling).toEqual({ minNodeCount: 0, maxNodeCount: 4, locationPolicy: "ANY" });
+    expect(spec.nodeConfig).toEqual({
+      machineType: "n1-standard-8",
+      diskSizeGb: 200,
+      diskType: "pd-ssd",
+      guestAccelerator: [{ count: 1, type: "nvidia-tesla-t4" }],
+      taint: [{ key: "nvidia.com/gpu", value: "present", effect: "NO_SCHEDULE" }],
+      workloadMetadataConfig: { mode: "GKE_METADATA" },
+      oauthScopes: ["https://www.googleapis.com/auth/cloud-platform"],
+    });
+    expect(spec.management).toEqual({ autoRepair: true, autoUpgrade: true });
+  });
+});

package/src/composites/gpu-node-pool.ts

@@ -0,0 +1,150 @@
+/**
+ * GpuNodePool composite — ContainerNodePool with GPU accelerators.
+ *
+ * Promoted from the hand-wired `gpuNodePool` in the ray-kuberay-gke example
+ * (examples/ray-kuberay-gke/src/infra/cluster.ts). Attaches to an existing
+ * GKE cluster (e.g. one created by `GkeCluster`) and adds a separate,
+ * scale-to-zero pool for GPU-tainted workloads.
+ *
+ * NOTE: GKE auto-installs the nvidia-device-plugin DaemonSet when a node
+ * pool has accelerators. Do NOT emit it as a K8s manifest — it will
+ * conflict with the GKE-managed version.
+ */
+
+import { Composite, mergeDefaults } from "@intentius/chant";
+import { NodePool } from "../generated";
+
+export interface GpuNodePoolTaint {
+  key: string;
+  value: string;
+  effect: string;
+}
+
+export interface GpuNodePoolProps {
+  /** Node pool name. */
+  name: string;
+  /** Reference to the GKE cluster this pool attaches to, e.g. `{ name: "my-cluster" }`. */
+  clusterRef: Record<string, unknown>;
+  /** GCP region or zone of the cluster. */
+  location: string;
+  /** Machine type for GPU nodes (default: "n1-standard-8"). */
+  machineType?: string;
+  /** Accelerator type, e.g. "nvidia-tesla-t4", "nvidia-l4", "nvidia-tesla-a100" (default: "nvidia-tesla-t4"). */
+  acceleratorType?: string;
+  /** Number of accelerators per node (default: 1). */
+  acceleratorCount?: number;
+  /** Minimum nodes for autoscaling — 0 enables scale-to-zero (default: 0). */
+  minNodeCount?: number;
+  /** Maximum nodes for autoscaling (default: 4). */
+  maxNodeCount?: number;
+  /** Boot disk size in GB (default: 200). */
+  diskSizeGb?: number;
+  /** Boot disk type (default: "pd-ssd"). */
+  diskType?: string;
+  /**
+   * Node taints — only pods with a matching toleration are scheduled here.
+   * Default: `nvidia.com/gpu=present:NO_SCHEDULE`. Pass an empty array to omit tainting.
+   */
+  taint?: GpuNodePoolTaint[];
+  /** Enable GKE metadata server workload identity mode on nodes (default: true). */
+  workloadMetadata?: boolean;
+  /**
+   * GPU time-sharing configuration, e.g.
+   * `{ maxSharedClientsPerGpu: 2, gpuSharingStrategy: "TIME_SHARING" }`.
+   */
+  gpuSharingConfig?: Record<string, unknown>;
+  /** Multi-instance GPU (MIG) partition size, e.g. "1g.5gb". */
+  gpuPartitionSize?: string;
+  /** Additional labels. */
+  labels?: Record<string, string>;
+  /** Namespace for the node pool resource. */
+  namespace?: string;
+  /** Per-member defaults for customizing the underlying resource. */
+  defaults?: {
+    nodePool?: Partial<ConstructorParameters<typeof NodePool>[0]>;
+  };
+}
+
+const DEFAULT_TAINT: GpuNodePoolTaint[] = [
+  { key: "nvidia.com/gpu", value: "present", effect: "NO_SCHEDULE" },
+];
+
+/**
+ * Create a GpuNodePool composite — a scale-to-zero ContainerNodePool with
+ * GPU accelerators, tainted so only pods with a matching toleration land there.
+ *
+ * @example
+ * ```ts
+ * import { GpuNodePool } from "@intentius/chant-lexicon-gcp";
+ *
+ * const { nodePool } = GpuNodePool({
+ *   name: "ray-gke-gpu",
+ *   clusterRef: { name: "ray-gke" },
+ *   location: "us-central1",
+ *   acceleratorType: "nvidia-tesla-t4",
+ *   maxNodeCount: 4,
+ * });
+ * ```
+ */
+export const GpuNodePool = Composite((props: GpuNodePoolProps) => {
+  const {
+    name,
+    clusterRef,
+    location,
+    machineType = "n1-standard-8",
+    acceleratorType = "nvidia-tesla-t4",
+    acceleratorCount = 1,
+    minNodeCount = 0,
+    maxNodeCount = 4,
+    diskSizeGb = 200,
+    diskType = "pd-ssd",
+    taint = DEFAULT_TAINT,
+    workloadMetadata = true,
+    gpuSharingConfig,
+    gpuPartitionSize,
+    labels: extraLabels = {},
+    namespace,
+    defaults: defs,
+  } = props;
+
+  const commonLabels: Record<string, string> = {
+    "app.kubernetes.io/name": name,
+    "app.kubernetes.io/managed-by": "chant",
+    ...extraLabels,
+  };
+
+  const guestAccelerator: Record<string, unknown> = {
+    count: acceleratorCount,
+    type: acceleratorType,
+    ...(gpuSharingConfig && { gpuSharingConfig }),
+    ...(gpuPartitionSize && { gpuPartitionSize }),
+  };
+
+  const nodePool = new NodePool(mergeDefaults({
+    metadata: {
+      name,
+      ...(namespace && { namespace }),
+      labels: { ...commonLabels, "app.kubernetes.io/component": "gpu-node-pool" },
+    },
+    clusterRef,
+    location,
+    initialNodeCount: 0,
+    autoscaling: {
+      minNodeCount,
+      maxNodeCount,
+      locationPolicy: "ANY",
+    },
+    nodeConfig: {
+      machineType,
+      diskSizeGb,
+      diskType,
+      guestAccelerator: [guestAccelerator],
+      ...(taint.length > 0 && { taint }),
+      ...(workloadMetadata && { workloadMetadataConfig: { mode: "GKE_METADATA" } }),
+      oauthScopes: ["https://www.googleapis.com/auth/cloud-platform"],
+    },
+    management: { autoRepair: true, autoUpgrade: true },
+  } as Record<string, unknown>, defs?.nodePool));
+
+  return { nodePool };
+}, "GpuNodePool");

package/src/composites/index.ts

@@ -30,3 +30,5 @@ export { MultiRegionVpc } from "./multi-region-vpc";
 export type { MultiRegionVpcConfig, MultiRegionVpcRegion } from "./multi-region-vpc";
 export { GkeCrdbRegion } from "./gke-crdb-region";
 export type { GkeCrdbRegionConfig, GkeCrdbRegionNodeConfig } from "./gke-crdb-region";
+export { GpuNodePool } from "./gpu-node-pool";
+export type { GpuNodePoolProps, GpuNodePoolTaint } from "./gpu-node-pool";

package/src/index.ts

@@ -1,3 +1,11 @@
+// Typed Op step-builder wrappers (chant #1288 Stage 2) — gcpApply/gcpDelete/
+// flociGcpUp/flociGcpDown with authoring-time types derived from this
+// lexicon's own *Args interfaces (see ./op/builders.ts's module doc for why
+// these live here rather than in core or the temporal barrel). Opt-in:
+// `@intentius/chant-lexicon-temporal`'s same-named exports are core's
+// original untyped builders, unchanged.
+export { gcpApply, gcpDelete, flociGcpUp, flociGcpDown } from "./op/builders";
+
 // Serializer
 export { gcpSerializer } from "./serializer";
 
@@ -22,7 +30,7 @@ export * from "./generated/index";
 export {
   GkeCluster, CloudRunServiceComposite, CloudSqlInstance, GcsBucket, VpcNetwork,
   PubSubPipeline, CloudFunctionWithTrigger, PrivateService, ManagedCertificate, SecureProject,
-  MemorystoreRedis, MultiRegionVpc, GkeCrdbRegion,
+  MemorystoreRedis, MultiRegionVpc, GkeCrdbRegion, GpuNodePool,
   GovernanceFoundation, LocationRestriction, OrganizationAuditConfig,
 } from "./composites/index";
 export type {
@@ -39,6 +47,7 @@ export type {
   MemorystoreRedisProps,
   MultiRegionVpcConfig, MultiRegionVpcRegion,
   GkeCrdbRegionConfig, GkeCrdbRegionNodeConfig,
+  GpuNodePoolProps, GpuNodePoolTaint,
   GovernanceFoundationProps, LocationRestrictionProps, OrganizationAuditConfigProps,
 } from "./composites/index";
 

package/src/op/builders.test.ts

@@ -0,0 +1,58 @@
+/**
+ * Typed step-builder wrappers (chant #1288 Stage 2) — see
+ * `lexicons/k8s/src/op/builders.test.ts`'s module doc for what's asserted
+ * and why.
+ */
+
+import { describe, test, expect } from "vitest";
+import {
+  gcpApply as gcpApplyOld,
+  gcpDelete as gcpDeleteOld,
+  flociGcpUp as flociGcpUpOld,
+  flociGcpDown as flociGcpDownOld,
+  stepOutput,
+  type StepOutputRef,
+} from "@intentius/chant/op";
+import { gcpApply, gcpDelete, flociGcpUp, flociGcpDown } from "./builders";
+
+describe("gcp typed step builders (#1288 Stage 2)", () => {
+  test("gcpApply: identical ActivityStep to core's original for a minimal call", () => {
+    expect(gcpApply("dist/manifest.yaml")).toEqual(gcpApplyOld("dist/manifest.yaml"));
+  });
+
+  test("gcpApply: identical ActivityStep with opts", () => {
+    const opts = { project: "my-project", prune: true };
+    expect(gcpApply("dist/manifest.yaml", opts)).toEqual(gcpApplyOld("dist/manifest.yaml", opts));
+  });
+
+  test("gcpDelete: identical ActivityStep to core's original", () => {
+    expect(gcpDelete("dist/manifest.yaml")).toEqual(gcpDeleteOld("dist/manifest.yaml"));
+  });
+
+  test("flociGcpUp/flociGcpDown: identical ActivityStep to core's original", () => {
+    expect(flociGcpUp()).toEqual(flociGcpUpOld());
+    expect(flociGcpDown()).toEqual(flociGcpDownOld());
+  });
+
+  test("gcpApply: accepts a StepOutputRef in a typed slot", () => {
+    const ref = stepOutput("resolve-project", "project");
+    const step = gcpApply("dist/manifest.yaml", { project: ref });
+    expect(step.args?.project).toBe(ref);
+  });
+
+  test("gcpApply: .out is reachable when an id is given", () => {
+    const step = gcpApply("dist/manifest.yaml", { id: "apply" });
+    const ref: StepOutputRef = step.out.applied;
+    expect(ref.step).toBe("apply");
+  });
+});
+
+// ── Compile-time-only: authoring-time type errors (never executed) ──────────
+function _typeChecksOnly(): void {
+  // @ts-expect-error — "projectId" is not a key of GcpApplyArgs (the field is `project`).
+  gcpApply("dist/manifest.yaml", { projectId: "my-project" });
+
+  // @ts-expect-error — prune must be a boolean.
+  gcpApply("dist/manifest.yaml", { prune: "true" });
+}
+void _typeChecksOnly;

package/src/op/builders.ts

@@ -0,0 +1,70 @@
+/**
+ * Typed step-builder wrappers for this lexicon's activities (chant #1288
+ * Stage 2). See `lexicons/k8s/src/op/builders.ts`'s module doc for why these
+ * live beside their `*Args` interfaces rather than in core or the temporal
+ * barrel. `opts`'s type in each wrapper below IS the activity's own `*Args`
+ * interface (via `Omit`/`WithStepRefs`) — never restated. `core`'s own
+ * `gcpApply`/`gcpDelete`/`flociGcpUp`/`flociGcpDown` are unchanged and
+ * produce byte-identical `ActivityStep` output; these are purely additive.
+ */
+
+import {
+  activity,
+  takeProfileAndId,
+  type ActivityStep,
+  type NamedActivityStep,
+  type WithStepRefs,
+} from "@intentius/chant/op";
+import type { GcpApplyArgs } from "./activities/gcp-apply";
+import type { FlociGcpUpArgs, FlociGcpDownArgs } from "./activities/floci-gcp";
+
+/** Extra opts every wrapper below accepts alongside its activity's own fields. */
+type StepOpts = { profile?: ActivityStep["profile"]; id?: string };
+
+/**
+ * Apply built GCP (CNRM) resources directly to their GCP REST APIs — the
+ * fully typed twin of core's `gcpApply`. `opts` is {@link GcpApplyArgs}
+ * itself, minus the positional `manifestPath`. Defaults to the `longInfra`
+ * profile.
+ */
+export const gcpApply = (
+  manifestPath: string,
+  opts?: WithStepRefs<Omit<GcpApplyArgs, "manifestPath">> & StepOpts,
+): NamedActivityStep => {
+  const { args, profile, id } = takeProfileAndId(opts as Record<string, unknown> | undefined);
+  return activity("gcpApply", { manifestPath, ...args }, { profile: profile ?? "longInfra", ...(id ? { id } : {}) });
+};
+
+/**
+ * Delete the GCP (CNRM) resources in a built manifest — the inverse of
+ * {@link gcpApply}, fully typed twin of core's `gcpDelete`. `opts` is
+ * {@link GcpApplyArgs} itself (the activity reuses it), minus the positional
+ * `manifestPath`. Defaults to the `longInfra` profile.
+ */
+export const gcpDelete = (
+  manifestPath: string,
+  opts?: WithStepRefs<Omit<GcpApplyArgs, "manifestPath">> & StepOpts,
+): NamedActivityStep => {
+  const { args, profile, id } = takeProfileAndId(opts as Record<string, unknown> | undefined);
+  return activity("gcpDelete", { manifestPath, ...args }, { profile: profile ?? "longInfra", ...(id ? { id } : {}) });
+};
+
+/**
+ * Boot a local floci-gcp (GCP emulator) — the fully typed twin of core's
+ * `flociGcpUp`. `opts` is {@link FlociGcpUpArgs} itself. Defaults to the
+ * `longInfra` profile.
+ */
+export const flociGcpUp = (opts?: WithStepRefs<FlociGcpUpArgs> & StepOpts): NamedActivityStep => {
+  const { args, profile, id } = takeProfileAndId(opts as Record<string, unknown> | undefined);
+  return activity("flociGcpUp", args, { profile: profile ?? "longInfra", ...(id ? { id } : {}) });
+};
+
+/**
+ * Stop and remove the local floci-gcp container — the fully typed twin of
+ * core's `flociGcpDown`. `opts` is {@link FlociGcpDownArgs} itself. Defaults
+ * to the `fastIdempotent` profile.
+ */
+export const flociGcpDown = (opts?: WithStepRefs<FlociGcpDownArgs> & StepOpts): NamedActivityStep => {
+  const { args, profile, id } = takeProfileAndId(opts as Record<string, unknown> | undefined);
+  return activity("flociGcpDown", args, { profile: profile ?? "fastIdempotent", ...(id ? { id } : {}) });
+};

package/src/skills/chant-gcp.md

@@ -201,6 +201,7 @@ Composites group related Config Connector resources with secure defaults. Each r
 | `PrivateService` | ComputeGlobalAddress + ServiceNetworkingConnection | RFC 1918 range, automatic peering |
 | `ManagedCertificate` | ComputeManagedSslCertificate | Auto-renewal via Google-managed cert |
 | `SecureProject` | Project + IAMAuditConfig + essential Service resources | Audit logging, required APIs enabled, org policy constraints |
+| `GpuNodePool` | ContainerNodePool with GPU accelerators | Scale-to-zero, nvidia.com/gpu taint, GKE metadata workload identity |
 
 ### Example: GKE cluster with secure defaults