@intentius/chant-lexicon-gcp 0.6.0 → 0.8.0

package/dist/actions/index.d.ts

@@ -0,0 +1,46 @@
+/**
+ * GCP IAM role constants for common patterns.
+ */
+export declare const StorageRoles: {
+    readonly Admin: "roles/storage.admin";
+    readonly ObjectAdmin: "roles/storage.objectAdmin";
+    readonly ObjectViewer: "roles/storage.objectViewer";
+    readonly ObjectCreator: "roles/storage.objectCreator";
+};
+export declare const ComputeRoles: {
+    readonly Admin: "roles/compute.admin";
+    readonly Viewer: "roles/compute.viewer";
+    readonly NetworkAdmin: "roles/compute.networkAdmin";
+    readonly InstanceAdmin: "roles/compute.instanceAdmin.v1";
+};
+export declare const ContainerRoles: {
+    readonly Admin: "roles/container.admin";
+    readonly Developer: "roles/container.developer";
+    readonly Viewer: "roles/container.viewer";
+    readonly ClusterAdmin: "roles/container.clusterAdmin";
+};
+export declare const IAMRoles: {
+    readonly Admin: "roles/iam.serviceAccountAdmin";
+    readonly User: "roles/iam.serviceAccountUser";
+    readonly TokenCreator: "roles/iam.serviceAccountTokenCreator";
+    readonly WorkloadIdentityUser: "roles/iam.workloadIdentityUser";
+};
+export declare const SQLRoles: {
+    readonly Admin: "roles/cloudsql.admin";
+    readonly Client: "roles/cloudsql.client";
+    readonly Editor: "roles/cloudsql.editor";
+    readonly Viewer: "roles/cloudsql.viewer";
+};
+export declare const RunRoles: {
+    readonly Admin: "roles/run.admin";
+    readonly Developer: "roles/run.developer";
+    readonly Invoker: "roles/run.invoker";
+    readonly Viewer: "roles/run.viewer";
+};
+export declare const PubSubRoles: {
+    readonly Admin: "roles/pubsub.admin";
+    readonly Publisher: "roles/pubsub.publisher";
+    readonly Subscriber: "roles/pubsub.subscriber";
+    readonly Viewer: "roles/pubsub.viewer";
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/actions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/actions/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,eAAO,MAAM,YAAY;;;;;CAKf,CAAC;AAEX,eAAO,MAAM,YAAY;;;;;CAKf,CAAC;AAEX,eAAO,MAAM,cAAc;;;;;CAKjB,CAAC;AAEX,eAAO,MAAM,QAAQ;;;;;CAKX,CAAC;AAEX,eAAO,MAAM,QAAQ;;;;;CAKX,CAAC;AAEX,eAAO,MAAM,QAAQ;;;;;CAKX,CAAC;AAEX,eAAO,MAAM,WAAW;;;;;CAKd,CAAC"}

package/dist/codegen/docs-cli.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env tsx
+export {};
+//# sourceMappingURL=docs-cli.d.ts.map

package/dist/codegen/docs-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs-cli.d.ts","sourceRoot":"","sources":["../../src/codegen/docs-cli.ts"],"names":[],"mappings":""}

package/dist/codegen/docs.d.ts

@@ -0,0 +1,12 @@
+/**
+ * GCP Config Connector documentation generator.
+ *
+ * Produces a standalone Starlight docs site at lexicons/gcp/docs/.
+ */
+/**
+ * Generate documentation for the GCP Config Connector lexicon.
+ */
+export declare function generateDocs(opts?: {
+    verbose?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=docs.d.ts.map

package/dist/codegen/docs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.d.ts","sourceRoot":"","sources":["../../src/codegen/docs.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA4FH;;GAEG;AACH,wBAAsB,YAAY,CAAC,IAAI,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAutB9E"}

package/dist/codegen/generate-cli.d.ts

@@ -0,0 +1,6 @@
+#!/usr/bin/env tsx
+/**
+ * CLI entry point for GCP lexicon generation.
+ */
+export {};
+//# sourceMappingURL=generate-cli.d.ts.map

package/dist/codegen/generate-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-cli.d.ts","sourceRoot":"","sources":["../../src/codegen/generate-cli.ts"],"names":[],"mappings":";AACA;;GAEG"}

package/dist/codegen/generate.d.ts

@@ -0,0 +1,15 @@
+/**
+ * GCP Config Connector generation pipeline — uses core generatePipeline
+ * with GCP-specific fetch, parse, naming, and generation callbacks.
+ */
+import { type GenerateOptions, type GenerateResult } from "@intentius/chant/codegen/generate";
+export type { GenerateOptions, GenerateResult };
+/**
+ * Run the full GCP generation pipeline.
+ */
+export declare function generate(opts?: GenerateOptions): Promise<GenerateResult>;
+/**
+ * Write generated artifacts to disk.
+ */
+export declare function writeGeneratedFiles(result: GenerateResult, baseDir: string): void;
+//# sourceMappingURL=generate.d.ts.map

package/dist/codegen/generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../src/codegen/generate.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAGL,KAAK,eAAe,EACpB,KAAK,cAAc,EAEpB,MAAM,mCAAmC,CAAC;AAU3C,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;AAoChD;;GAEG;AACH,wBAAsB,QAAQ,CAAC,IAAI,GAAE,eAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAElF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAgBjF"}

package/dist/codegen/naming.d.ts

@@ -0,0 +1,15 @@
+/**
+ * GCP-specific naming configuration for the core NamingStrategy.
+ *
+ * Maps Config Connector resource types to concise TypeScript class names.
+ */
+import { NamingStrategy as CoreNamingStrategy } from "@intentius/chant/codegen/naming";
+export { propertyTypeName, extractDefName } from "@intentius/chant/codegen/naming";
+import type { GcpParseResult } from "../spec/parse.js";
+/**
+ * GCP-specific NamingStrategy — wraps the core algorithm with GCP data tables.
+ */
+export declare class NamingStrategy extends CoreNamingStrategy {
+    constructor(results: GcpParseResult[]);
+}
+//# sourceMappingURL=naming.d.ts.map

package/dist/codegen/naming.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"naming.d.ts","sourceRoot":"","sources":["../../src/codegen/naming.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,cAAc,IAAI,kBAAkB,EAGrC,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAEnF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAuJpD;;GAEG;AACH,qBAAa,cAAe,SAAQ,kBAAkB;gBACxC,OAAO,EAAE,cAAc,EAAE;CAOtC"}

package/dist/codegen/package.d.ts

@@ -0,0 +1,11 @@
+/**
+ * GCP lexicon packaging — delegates to core packagePipeline
+ * with GCP-specific manifest building and skill collection.
+ */
+import { type PackageOptions, type PackageResult } from "@intentius/chant/codegen/package";
+export type { PackageOptions, PackageResult };
+/**
+ * Package the GCP lexicon into a distributable BundleSpec.
+ */
+export declare function packageLexicon(opts?: PackageOptions): Promise<PackageResult>;
+//# sourceMappingURL=package.d.ts.map

package/dist/codegen/package.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"package.d.ts","sourceRoot":"","sources":["../../src/codegen/package.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAMH,OAAO,EAGL,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,kCAAkC,CAAC;AAG1C,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;AAK9C;;GAEG;AACH,wBAAsB,cAAc,CAAC,IAAI,GAAE,cAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAmCtF"}

package/dist/composites/cloud-function.d.ts

@@ -0,0 +1,38 @@
+/**
+ * CloudFunctionWithTrigger composite — CloudFunction + source bucket + optional PubSub/HTTP trigger + invoker IAM.
+ */
+import { CloudFunction as CloudFunctionResource, StorageBucket, IAMPolicyMember } from "../generated/index.js";
+export interface CloudFunctionWithTriggerProps {
+    /** Function name. */
+    name: string;
+    /** Runtime (e.g., "nodejs20", "python312"). */
+    runtime: string;
+    /** Entry point function name. */
+    entryPoint: string;
+    /** GCP region. */
+    region?: string;
+    /** Available memory (default: "256M"). */
+    availableMemoryMb?: string;
+    /** Timeout in seconds (default: 60). */
+    timeout?: number;
+    /** Trigger type (default: "http"). */
+    triggerType?: "http" | "pubsub";
+    /** PubSub topic name (required if triggerType is "pubsub"). */
+    triggerTopic?: string;
+    /** Allow unauthenticated HTTP invocations (default: false). */
+    publicAccess?: boolean;
+    /** Environment variables. */
+    environmentVariables?: Record<string, string>;
+    /** Additional labels. */
+    labels?: Record<string, string>;
+    /** Namespace for all resources. */
+    namespace?: string;
+    /** Per-member defaults for customizing individual resources. */
+    defaults?: {
+        function?: Partial<ConstructorParameters<typeof CloudFunctionResource>[0]>;
+        sourceBucket?: Partial<ConstructorParameters<typeof StorageBucket>[0]>;
+        invokerIam?: Partial<ConstructorParameters<typeof IAMPolicyMember>[0]>;
+    };
+}
+export declare const CloudFunctionWithTrigger: import("@intentius/chant").CompositeDefinition<CloudFunctionWithTriggerProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=cloud-function.d.ts.map

package/dist/composites/cloud-function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-function.d.ts","sourceRoot":"","sources":["../../src/composites/cloud-function.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EACL,aAAa,IAAI,qBAAqB,EACtC,aAAa,EACb,eAAe,EAChB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,6BAA6B;IAC5C,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,wCAAwC;IACxC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sCAAsC;IACtC,WAAW,CAAC,EAAE,MAAM,GAAG,QAAQ,CAAC;IAChC,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,6BAA6B;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9C,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3E,YAAY,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACvE,UAAU,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACxE,CAAC;CACH;AAED,eAAO,MAAM,wBAAwB,4HAgFP,CAAC"}

package/dist/composites/cloud-run-service.d.ts

@@ -0,0 +1,56 @@
+/**
+ * CloudRunServiceComposite composite — RunService + optional IAMPolicyMember for public access.
+ */
+import { CloudRunService as CloudRunServiceResource, IAMPolicyMember } from "../generated/index.js";
+export interface CloudRunServiceProps {
+    /** Service name. */
+    name: string;
+    /** Container image. */
+    image: string;
+    /** GCP region. */
+    location?: string;
+    /** Port the container listens on (default: 8080). */
+    port?: number;
+    /** CPU limit (default: "1000m"). */
+    cpuLimit?: string;
+    /** Memory limit (default: "512Mi"). */
+    memoryLimit?: string;
+    /** Maximum concurrent requests per instance (default: 80). */
+    maxInstanceRequestConcurrency?: number;
+    /** Minimum instances (default: 0). */
+    minInstanceCount?: number;
+    /** Maximum instances (default: 100). */
+    maxInstanceCount?: number;
+    /** Enable public (unauthenticated) access (default: false). */
+    publicAccess?: boolean;
+    /** Environment variables. */
+    env?: Array<{
+        name: string;
+        value: string;
+    }>;
+    /** Additional labels. */
+    labels?: Record<string, string>;
+    /** Namespace for all resources. */
+    namespace?: string;
+    /** Per-member defaults for customizing individual resources. */
+    defaults?: {
+        service?: Partial<ConstructorParameters<typeof CloudRunServiceResource>[0]>;
+        publicIam?: Partial<ConstructorParameters<typeof IAMPolicyMember>[0]>;
+    };
+}
+/**
+ * Create a CloudRunService composite.
+ *
+ * @example
+ * ```ts
+ * import { CloudRunService } from "@intentius/chant-lexicon-gcp";
+ *
+ * const { service, publicIam } = CloudRunService({
+ *   name: "my-api",
+ *   image: "gcr.io/my-project/my-api:latest",
+ *   publicAccess: true,
+ * });
+ * ```
+ */
+export declare const CloudRunServiceComposite: import("@intentius/chant").CompositeDefinition<CloudRunServiceProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=cloud-run-service.d.ts.map

package/dist/composites/cloud-run-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-run-service.d.ts","sourceRoot":"","sources":["../../src/composites/cloud-run-service.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EACL,eAAe,IAAI,uBAAuB,EAC1C,eAAe,EAChB,MAAM,cAAc,CAAC;AAEtB,MAAM,WAAW,oBAAoB;IACnC,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,kBAAkB;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8DAA8D;IAC9D,6BAA6B,CAAC,EAAE,MAAM,CAAC;IACvC,sCAAsC;IACtC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,wCAAwC;IACxC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,+DAA+D;IAC/D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,6BAA6B;IAC7B,GAAG,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7C,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,SAAS,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACvE,CAAC;CACH;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,wBAAwB,mHAwEP,CAAC"}

package/dist/composites/cloud-sql-instance.d.ts

@@ -0,0 +1,52 @@
+/**
+ * CloudSqlInstance composite — SQLInstance + SQLDatabase + SQLUser.
+ */
+import { SQLInstance, SQLDatabase, SQLUser } from "../generated/index.js";
+export interface CloudSqlInstanceProps {
+    /** Instance name. */
+    name: string;
+    /** Database version (default: "POSTGRES_15"). */
+    databaseVersion?: string;
+    /** Machine tier (default: "db-f1-micro"). */
+    tier?: string;
+    /** GCP region. */
+    region?: string;
+    /** Database name to create (default: same as instance name). */
+    databaseName?: string;
+    /** User name (default: "admin"). */
+    userName?: string;
+    /** Disk size in GB (default: 10). */
+    diskSize?: number;
+    /** Disk autoresize (default: true). */
+    diskAutoresize?: boolean;
+    /** Enable backups (default: true). */
+    backupEnabled?: boolean;
+    /** Enable high availability (default: false). */
+    highAvailability?: boolean;
+    /** Additional labels. */
+    labels?: Record<string, string>;
+    /** Namespace for all resources. */
+    namespace?: string;
+    /** Per-member defaults for customizing individual resources. */
+    defaults?: {
+        instance?: Partial<ConstructorParameters<typeof SQLInstance>[0]>;
+        database?: Partial<ConstructorParameters<typeof SQLDatabase>[0]>;
+        user?: Partial<ConstructorParameters<typeof SQLUser>[0]>;
+    };
+}
+/**
+ * Create a CloudSqlInstance composite.
+ *
+ * @example
+ * ```ts
+ * import { CloudSqlInstance } from "@intentius/chant-lexicon-gcp";
+ *
+ * const { instance, database, user } = CloudSqlInstance({
+ *   name: "my-db",
+ *   databaseVersion: "POSTGRES_15",
+ *   tier: "db-custom-2-7680",
+ * });
+ * ```
+ */
+export declare const CloudSqlInstance: import("@intentius/chant").CompositeDefinition<CloudSqlInstanceProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=cloud-sql-instance.d.ts.map

package/dist/composites/cloud-sql-instance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-sql-instance.d.ts","sourceRoot":"","sources":["../../src/composites/cloud-sql-instance.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEjE,MAAM,WAAW,qBAAqB;IACpC,qBAAqB;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,iDAAiD;IACjD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6CAA6C;IAC7C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kBAAkB;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,qCAAqC;IACrC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,sCAAsC;IACtC,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,iDAAiD;IACjD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,QAAQ,CAAC,EAAE;QACT,QAAQ,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,QAAQ,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC1D,CAAC;CACH;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB,oHAuFP,CAAC"}

package/dist/composites/gcs-bucket.d.ts

@@ -0,0 +1,47 @@
+/**
+ * GcsBucket composite — StorageBucket with encryption, uniform access, and lifecycle.
+ */
+import { StorageBucket } from "../generated/index.js";
+export interface GcsBucketProps {
+    /** Bucket name. */
+    name: string;
+    /** GCS location (default: "US"). */
+    location?: string;
+    /** Storage class (default: "STANDARD"). */
+    storageClass?: "STANDARD" | "NEARLINE" | "COLDLINE" | "ARCHIVE";
+    /** Enable uniform bucket-level access (default: true). */
+    uniformBucketLevelAccess?: boolean;
+    /** Enable versioning (default: false). */
+    versioning?: boolean;
+    /** KMS key name for encryption. */
+    kmsKeyName?: string;
+    /** Lifecycle rule: delete objects older than N days. */
+    lifecycleDeleteAfterDays?: number;
+    /** Lifecycle rule: transition to Nearline after N days. */
+    lifecycleNearlineAfterDays?: number;
+    /** Additional labels. */
+    labels?: Record<string, string>;
+    /** Namespace for all resources. */
+    namespace?: string;
+    /** Per-member defaults for customizing individual resources. */
+    defaults?: {
+        bucket?: Partial<ConstructorParameters<typeof StorageBucket>[0]>;
+    };
+}
+/**
+ * Create a GcsBucket composite.
+ *
+ * @example
+ * ```ts
+ * import { GcsBucket } from "@intentius/chant-lexicon-gcp";
+ *
+ * const { bucket } = GcsBucket({
+ *   name: "my-data-bucket",
+ *   location: "US",
+ *   versioning: true,
+ *   lifecycleDeleteAfterDays: 365,
+ * });
+ * ```
+ */
+export declare const GcsBucket: import("@intentius/chant").CompositeDefinition<GcsBucketProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=gcs-bucket.d.ts.map

package/dist/composites/gcs-bucket.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gcs-bucket.d.ts","sourceRoot":"","sources":["../../src/composites/gcs-bucket.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,WAAW,cAAc;IAC7B,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,oCAAoC;IACpC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,YAAY,CAAC,EAAE,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;IAChE,0DAA0D;IAC1D,wBAAwB,CAAC,EAAE,OAAO,CAAC;IACnC,0CAA0C;IAC1C,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,mCAAmC;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,2DAA2D;IAC3D,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,QAAQ,CAAC,EAAE;QACT,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAClE,CAAC;CACH;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,SAAS,6GAiEP,CAAC"}

package/dist/composites/gke-cluster.d.ts

@@ -0,0 +1,80 @@
+/**
+ * GkeCluster composite — ContainerCluster + ContainerNodePool.
+ *
+ * Creates a GKE cluster with a default node pool configured for
+ * workload identity and autoscaling.
+ */
+import { GKECluster, NodePool } from "../generated/index.js";
+export interface GkeClusterProps {
+    /** Cluster name. */
+    name: string;
+    /** GCP project ID for workload identity pool. Falls back to GCP_PROJECT_ID env var. */
+    projectId?: string;
+    /** GCP region for regional cluster (default: uses GCP.Region). */
+    location?: string;
+    /** Initial node count per zone (default: 1). */
+    initialNodeCount?: number;
+    /** Machine type for nodes (default: "e2-medium"). */
+    machineType?: string;
+    /** Minimum nodes for autoscaling (default: 1). */
+    minNodeCount?: number;
+    /** Maximum nodes for autoscaling (default: 5). */
+    maxNodeCount?: number;
+    /** Enable workload identity (default: true). */
+    workloadIdentity?: boolean;
+    /** Disk size in GB for nodes (default: 100). */
+    diskSizeGb?: number;
+    /** Boot disk type for nodes (default: "pd-standard"). */
+    diskType?: string;
+    /** VPC network name (if omitted, uses default network). */
+    network?: string;
+    /** Subnetwork name for the cluster nodes. */
+    subnetwork?: string;
+    /**
+     * Enable private nodes — nodes have only internal IPs, no external IPs.
+     * Requires Cloud NAT for egress. Keeps master endpoint public so kubectl works from outside.
+     * Requires masterCidr when enabled.
+     */
+    privateNodes?: boolean;
+    /**
+     * CIDR block for the master's private endpoint (e.g. "172.16.0.0/28").
+     * Must be /28, unique per cluster, and not overlap with node/pod CIDRs.
+     * Required when privateNodes is true.
+     */
+    masterCidr?: string;
+    /**
+     * Restrict node pools to specific zones within the region.
+     * Useful when a region has capacity issues in some zones.
+     * E.g. ["us-east4-b"] to use only zone b of us-east4.
+     */
+    nodeLocations?: string[];
+    /** GKE release channel (default: "REGULAR"). */
+    releaseChannel?: "RAPID" | "REGULAR" | "STABLE";
+    /** Additional labels. */
+    labels?: Record<string, string>;
+    /** Namespace for all resources. */
+    namespace?: string;
+    /** Per-member defaults for customizing individual resources. */
+    defaults?: {
+        cluster?: Partial<ConstructorParameters<typeof GKECluster>[0]>;
+        nodePool?: Partial<ConstructorParameters<typeof NodePool>[0]>;
+        defaultPool?: Partial<ConstructorParameters<typeof NodePool>[0]>;
+    };
+}
+/**
+ * Create a GkeCluster composite — returns declarable instances for
+ * a ContainerCluster and ContainerNodePool.
+ *
+ * @example
+ * ```ts
+ * import { GkeCluster } from "@intentius/chant-lexicon-gcp";
+ *
+ * const { cluster, nodePool } = GkeCluster({
+ *   name: "my-cluster",
+ *   location: "us-central1",
+ *   maxNodeCount: 10,
+ * });
+ * ```
+ */
+export declare const GkeCluster: import("@intentius/chant").CompositeDefinition<GkeClusterProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=gke-cluster.d.ts.map

package/dist/composites/gke-cluster.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gke-cluster.d.ts","sourceRoot":"","sources":["../../src/composites/gke-cluster.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,WAAW,eAAe;IAC9B,oBAAoB;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gDAAgD;IAChD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,gDAAgD;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,gDAAgD;IAChD,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;IAChD,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,QAAQ,CAAC,EAAE;QACT,OAAO,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/D,QAAQ,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,WAAW,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAClE,CAAC;CACH;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,UAAU,8GAqHP,CAAC"}

package/dist/composites/gke-crdb-region.d.ts

@@ -0,0 +1,81 @@
+/**
+ * GkeCrdbRegion composite — GKE cluster + public DNS zone + per-region IAM for a CockroachDB region.
+ *
+ * Replaces the 2-file per-region GCP infra pattern (infra/cluster.ts + infra/dns.ts) with
+ * a single composite call. Handles the GKE cluster, the public DNS zone, and all per-region
+ * Workload Identity IAM bindings for both ExternalDNS and CockroachDB pods.
+ */
+export interface GkeCrdbRegionNodeConfig {
+    /** Machine type (default: "n2-standard-2"). */
+    machineType?: string;
+    /** Disk size per node in GB (default: 100). */
+    diskSizeGb?: number;
+    /** Initial/min node count (default: 1). */
+    nodeCount?: number;
+    /** Maximum node count for autoscaling (default: 3). */
+    maxNodeCount?: number;
+}
+export interface GkeCrdbRegionConfig {
+    /**
+     * GCP region (e.g. "us-east4").
+     * Used as both the cluster location and for NAT router naming.
+     */
+    region: string;
+    /** GKE cluster name (e.g. "gke-crdb-east"). Used as prefix for child resources. */
+    clusterName: string;
+    /** VPC network resource name. */
+    network: string;
+    /** Node subnet resource name for the cluster. */
+    subnetwork: string;
+    /** Public DNS domain for this region (e.g. "east.crdb.example.com"). */
+    domain: string;
+    /** GCP project ID for Workload Identity pool and service account names. */
+    project: string;
+    /**
+     * K8s namespace where CockroachDB pods run (e.g. "crdb-east").
+     * Used in the Workload Identity binding subject for CRDB pods.
+     */
+    crdbNamespace: string;
+    /**
+     * K8s ServiceAccount name for CockroachDB pods (default: "cockroachdb").
+     * Used in the Workload Identity binding subject.
+     */
+    crdbK8sSa?: string;
+    /**
+     * CIDR block for the GKE master's private endpoint (e.g. "172.16.0.0/28").
+     * Must be /28, unique per cluster, not overlapping with node/pod CIDRs.
+     */
+    masterCidr?: string;
+    /** Node pool configuration. */
+    nodeConfig?: GkeCrdbRegionNodeConfig;
+    /** GCP release channel for cluster upgrades (default: "REGULAR"). */
+    releaseChannel?: "RAPID" | "REGULAR" | "STABLE";
+    /** Optional backup bucket name to grant CRDB GSA storage.objectAdmin access. */
+    backupBucket?: string;
+    /** Additional labels for all resources. */
+    labels?: Record<string, string>;
+    /** Namespace for Config Connector resources. */
+    namespace?: string;
+}
+/**
+ * Create a GkeCrdbRegion composite — returns all GCP resources for one CockroachDB region:
+ * GKE cluster, public DNS zone, per-region GSAs, and Workload Identity IAM bindings.
+ *
+ * @example
+ * ```ts
+ * import { GkeCrdbRegion } from "@intentius/chant-lexicon-gcp";
+ *
+ * export const east = GkeCrdbRegion({
+ *   region: "us-east4",
+ *   clusterName: "gke-crdb-east",
+ *   network: "crdb-multi-region",
+ *   subnetwork: "crdb-multi-region-east-nodes",
+ *   domain: "east.crdb.example.com",
+ *   project: GCP_PROJECT_ID,
+ *   crdbNamespace: "crdb-east",
+ *   masterCidr: "172.16.0.0/28",
+ * });
+ * ```
+ */
+export declare const GkeCrdbRegion: import("@intentius/chant").CompositeDefinition<GkeCrdbRegionConfig, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=gke-crdb-region.d.ts.map

package/dist/composites/gke-crdb-region.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gke-crdb-region.d.ts","sourceRoot":"","sources":["../../src/composites/gke-crdb-region.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,MAAM,WAAW,uBAAuB;IACtC,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,2CAA2C;IAC3C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;IACf,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+BAA+B;IAC/B,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,qEAAqE;IACrE,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;IAChD,gFAAgF;IAChF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2CAA2C;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,aAAa,kHAiJP,CAAC"}

package/dist/composites/index.d.ts

@@ -0,0 +1,27 @@
+export { GkeCluster } from "./gke-cluster.js";
+export type { GkeClusterProps } from "./gke-cluster.js";
+export { CloudRunServiceComposite } from "./cloud-run-service.js";
+export type { CloudRunServiceProps } from "./cloud-run-service.js";
+export { CloudSqlInstance } from "./cloud-sql-instance.js";
+export type { CloudSqlInstanceProps } from "./cloud-sql-instance.js";
+export { GcsBucket } from "./gcs-bucket.js";
+export type { GcsBucketProps } from "./gcs-bucket.js";
+export { VpcNetwork } from "./vpc-network.js";
+export type { VpcNetworkProps, VpcSubnet } from "./vpc-network.js";
+export { PubSubPipeline } from "./pubsub-pipeline.js";
+export type { PubSubPipelineProps } from "./pubsub-pipeline.js";
+export { CloudFunctionWithTrigger } from "./cloud-function.js";
+export type { CloudFunctionWithTriggerProps } from "./cloud-function.js";
+export { PrivateService } from "./private-service.js";
+export type { PrivateServiceProps } from "./private-service.js";
+export { ManagedCertificate } from "./managed-certificate.js";
+export type { ManagedCertificateProps } from "./managed-certificate.js";
+export { SecureProject } from "./secure-project.js";
+export type { SecureProjectProps } from "./secure-project.js";
+export { MemorystoreRedis } from "./memorystore-redis.js";
+export type { MemorystoreRedisProps } from "./memorystore-redis.js";
+export { MultiRegionVpc } from "./multi-region-vpc.js";
+export type { MultiRegionVpcConfig, MultiRegionVpcRegion } from "./multi-region-vpc.js";
+export { GkeCrdbRegion } from "./gke-crdb-region.js";
+export type { GkeCrdbRegionConfig, GkeCrdbRegionNodeConfig } from "./gke-crdb-region.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/composites/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/composites/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,YAAY,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,YAAY,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,kBAAkB,CAAC;AAC5D,YAAY,EAAE,6BAA6B,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,YAAY,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,YAAY,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACjD,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,YAAY,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,YAAY,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/composites/managed-certificate.d.ts

@@ -0,0 +1,26 @@
+/**
+ * ManagedCertificate composite — ManagedSslCertificate + optional TargetHttpsProxy + UrlMap.
+ */
+import { ManagedSSLCertificate, TargetHTTPSProxy, URLMap } from "../generated/index.js";
+export interface ManagedCertificateProps {
+    /** Certificate name. */
+    name: string;
+    /** Domains for the managed SSL certificate. */
+    domains: string[];
+    /** Create a TargetHttpsProxy and UrlMap (default: false). */
+    createProxy?: boolean;
+    /** Backend service name (required if createProxy is true). */
+    backendServiceName?: string;
+    /** Additional labels. */
+    labels?: Record<string, string>;
+    /** Namespace for all resources. */
+    namespace?: string;
+    /** Per-member defaults for customizing individual resources. */
+    defaults?: {
+        certificate?: Partial<ConstructorParameters<typeof ManagedSSLCertificate>[0]>;
+        targetHttpsProxy?: Partial<ConstructorParameters<typeof TargetHTTPSProxy>[0]>;
+        urlMap?: Partial<ConstructorParameters<typeof URLMap>[0]>;
+    };
+}
+export declare const ManagedCertificate: import("@intentius/chant").CompositeDefinition<ManagedCertificateProps, import("@intentius/chant").CompositeMembers>;
+//# sourceMappingURL=managed-certificate.d.ts.map

package/dist/composites/managed-certificate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-certificate.d.ts","sourceRoot":"","sources":["../../src/composites/managed-certificate.ts"],"names":[],"mappings":"AAAA;;GAEG;AAGH,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAE/E,MAAM,WAAW,uBAAuB;IACtC,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,8DAA8D;IAC9D,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,mCAAmC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,QAAQ,CAAC,EAAE;QACT,WAAW,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,gBAAgB,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9E,MAAM,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KAC3D,CAAC;CACH;AAED,eAAO,MAAM,kBAAkB,sHAsDP,CAAC"}