pangea-cloudflare 0.1.0

data/lib/pangea/resources/cloudflare_queue_consumer/resource.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_queue_consumer/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareQueueConsumer
+    def cloudflare_queue_consumer(name, attributes = {})
+      attrs = Cloudflare::Types::QueueConsumerAttributes.new(attributes)
+      resource(:cloudflare_queue_consumer, name) do
+        account_id attrs.account_id
+        queue_id attrs.queue_id
+        script_name attrs.script_name
+        batch_size attrs.batch_size if attrs.batch_size
+        max_retries attrs.max_retries if attrs.max_retries
+        max_wait_time_ms attrs.max_wait_time_ms if attrs.max_wait_time_ms
+      end
+      ResourceReference.new(
+        type: 'cloudflare_queue_consumer',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_queue_consumer.#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareQueueConsumer
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_queue_consumer/types.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class QueueConsumerAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId
+    attribute :queue_id, Dry::Types['strict.string']
+    attribute :script_name, Dry::Types['strict.string']
+    attribute :batch_size, Dry::Types['coercible.integer'].optional.default(nil)
+    attribute :max_retries, Dry::Types['coercible.integer'].optional.default(nil)
+    attribute :max_wait_time_ms, Dry::Types['coercible.integer'].optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_r2_bucket/resource.rb

@@ -0,0 +1,91 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_r2_bucket/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    # Cloudflare R2 Bucket resource module that self-registers
+    module CloudflareR2Bucket
+      # Create a Cloudflare R2 Bucket
+      #
+      # R2 is Cloudflare's S3-compatible object storage with zero egress fees.
+      # Perfect for storing images, videos, backups, and static assets.
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] Bucket attributes
+      # @option attributes [String] :account_id Cloudflare account ID (required)
+      # @option attributes [String] :name Bucket name (required, 3-63 chars)
+      # @option attributes [String] :location Location hint (optional: apac, eeur, enam, weur, wnam, oc)
+      #
+      # @return [ResourceReference] Reference object with outputs
+      #
+      # @example Create a media assets bucket
+      #   r2_bucket(:media, {
+      #     account_id: "a" * 32,
+      #     name: "media-assets",
+      #     location: "wnam"
+      #   })
+      #
+      # @example Create a backup bucket in Europe
+      #   r2_bucket(:backups, {
+      #     account_id: "a" * 32,
+      #     name: "db-backups",
+      #     location: "weur"
+      #   })
+      #
+      # @example Create bucket with automatic location
+      #   r2_bucket(:logs, {
+      #     account_id: "a" * 32,
+      #     name: "application-logs"
+      #   })
+      def cloudflare_r2_bucket(name, attributes = {})
+        # Validate attributes using dry-struct
+        bucket_attrs = Cloudflare::Types::R2BucketAttributes.new(attributes)
+
+        # Generate terraform resource block via terraform-synthesizer
+        resource(:cloudflare_r2_bucket, name) do
+          account_id bucket_attrs.account_id
+          name bucket_attrs.name
+          location bucket_attrs.location if bucket_attrs.location
+        end
+
+        # Return resource reference with available outputs
+        ResourceReference.new(
+          type: 'cloudflare_r2_bucket',
+          name: name,
+          resource_attributes: bucket_attrs.to_h,
+          outputs: {
+            id: "${cloudflare_r2_bucket.#{name}.id}",
+            bucket_name: "${cloudflare_r2_bucket.#{name}.name}",
+            location: "${cloudflare_r2_bucket.#{name}.location}"
+          }
+        )
+      end
+    end
+
+    # Maintain backward compatibility by extending Cloudflare module
+    module Cloudflare
+      include CloudflareR2Bucket
+    end
+  end
+end
+
+# Auto-register this module when it's loaded
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_r2_bucket/types.rb

@@ -0,0 +1,101 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module Cloudflare
+      module Types
+        # R2 bucket location hint enum
+        CloudflareR2Location = Dry::Types['strict.string'].enum(
+          'apac',  # Asia-Pacific
+          'eeur',  # Eastern Europe
+          'enam',  # Eastern North America
+          'weur',  # Western Europe
+          'wnam',  # Western North America
+          'oc'     # Oceania
+        )
+
+        # Type-safe attributes for Cloudflare R2 Bucket
+        #
+        # R2 is Cloudflare's S3-compatible object storage with zero egress fees.
+        # Buckets are containers for objects with optional location hints.
+        #
+        # @example Create an R2 bucket
+        #   R2BucketAttributes.new(
+        #     account_id: "a" * 32,
+        #     name: "media-assets",
+        #     location: "wnam"
+        #   )
+        class R2BucketAttributes < Dry::Struct
+          transform_keys(&:to_sym)
+
+          # @!attribute account_id
+          #   @return [String] The Cloudflare account ID
+          attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId
+
+          # @!attribute name
+          #   @return [String] Bucket name (must be globally unique within account)
+          attribute :name, Dry::Types['strict.string'].constrained(
+            format: /\A[a-z0-9][a-z0-9-]{1,61}[a-z0-9]\z/,
+            min_size: 3,
+            max_size: 63
+          )
+
+          # @!attribute location
+          #   @return [String, nil] Location hint for bucket data
+          attribute :location, CloudflareR2Location.optional.default(nil)
+
+          # Get the full region name from location code
+          # @return [String, nil] Human-readable region name
+          def region_name
+            case location
+            when 'apac'
+              'Asia-Pacific'
+            when 'eeur'
+              'Eastern Europe'
+            when 'enam'
+              'Eastern North America'
+            when 'weur'
+              'Western Europe'
+            when 'wnam'
+              'Western North America'
+            when 'oc'
+              'Oceania'
+            else
+              'Automatic'
+            end
+          end
+
+          # Check if bucket name follows S3 naming conventions
+          # @return [Boolean] true if follows S3 best practices
+          def s3_compatible_name?
+            # Must not contain uppercase, must not end with dash
+            name.match?(/\A[a-z0-9][a-z0-9-]*[a-z0-9]\z/) && !name.include?('..')
+          end
+
+          # Generate S3-compatible endpoint URL pattern
+          # @return [String] S3 endpoint pattern
+          def s3_endpoint
+            "<account_id>.r2.cloudflarestorage.com"
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/cloudflare_r2_bucket_cors/resource.rb

@@ -0,0 +1,130 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_r2_bucket_cors/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    # Cloudflare R2 Bucket CORS resource module that self-registers
+    module CloudflareR2BucketCors
+      # Create Cloudflare R2 Bucket CORS configuration
+      #
+      # CORS (Cross-Origin Resource Sharing) controls which origins can
+      # access R2 bucket objects from web browsers. Configure allowed
+      # origins, methods, headers, and preflight caching.
+      #
+      # Origin format must be scheme://host[:port] without path components.
+      # Use "*" for wildcard origins (public access).
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] R2 bucket CORS attributes
+      # @option attributes [String] :account_id Account ID (required)
+      # @option attributes [String] :bucket_name Bucket name (required)
+      # @option attributes [Array<Hash>] :rules CORS rules (required)
+      #
+      # @return [ResourceReference] Reference object with outputs
+      #
+      # @example Basic CORS for specific origin
+      #   cloudflare_r2_bucket_cors(:app_cors, {
+      #     account_id: "a" * 32,
+      #     bucket_name: "my-bucket",
+      #     rules: [{
+      #       allowed: {
+      #         origins: ["https://app.example.com"],
+      #         methods: ["GET", "HEAD"]
+      #       },
+      #       max_age_seconds: 3600
+      #     }]
+      #   })
+      #
+      # @example Public CORS with wildcard
+      #   cloudflare_r2_bucket_cors(:public_cors, {
+      #     account_id: "a" * 32,
+      #     bucket_name: "public-assets",
+      #     rules: [{
+      #       allowed: {
+      #         origins: ["*"],
+      #         methods: ["GET"],
+      #         headers: ["*"]
+      #       },
+      #       max_age_seconds: 86400
+      #     }]
+      #   })
+      #
+      # @example Multiple CORS rules with exposed headers
+      #   cloudflare_r2_bucket_cors(:multi_cors, {
+      #     account_id: "a" * 32,
+      #     bucket_name: "api-bucket",
+      #     rules: [
+      #       {
+      #         id: "production",
+      #         allowed: {
+      #           origins: ["https://app.example.com"],
+      #           methods: ["GET", "POST", "PUT", "DELETE"],
+      #           headers: ["Content-Type", "Authorization"]
+      #         },
+      #         max_age_seconds: 3600,
+      #         expose_headers: ["ETag", "Content-Length"]
+      #       },
+      #       {
+      #         id: "staging",
+      #         allowed: {
+      #           origins: ["https://staging.example.com"],
+      #           methods: ["GET", "POST"]
+      #         },
+      #         max_age_seconds: 1800
+      #       }
+      #     ]
+      #   })
+      def cloudflare_r2_bucket_cors(name, attributes = {})
+        # Validate attributes using dry-struct
+        cors_attrs = Cloudflare::Types::R2BucketCorsAttributes.new(attributes)
+
+        # Generate terraform resource block via terraform-synthesizer
+        resource(:cloudflare_r2_bucket_cors, name) do
+          account_id cors_attrs.account_id
+          bucket_name cors_attrs.bucket_name
+
+          # CORS rules as array (terraform-synthesizer handles array → blocks conversion)
+          if cors_attrs.rules.any?
+            rules cors_attrs.rules.map { |r| r.to_h }
+          end
+        end
+
+        # Return resource reference with available outputs
+        ResourceReference.new(
+          type: 'cloudflare_r2_bucket_cors',
+          name: name,
+          resource_attributes: cors_attrs.to_h,
+          outputs: {
+            id: "${cloudflare_r2_bucket_cors.#{name}.id}"
+          }
+        )
+      end
+    end
+
+    # Maintain backward compatibility by extending Cloudflare module
+    module Cloudflare
+      include CloudflareR2BucketCors
+    end
+  end
+end
+
+# Auto-register this module when it's loaded
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_r2_bucket_cors/types/attributes.rb

@@ -0,0 +1,105 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Pangea
+  module Resources
+    module Cloudflare
+      module Types
+        # Type-safe attributes for Cloudflare R2 Bucket CORS
+        #
+        # CORS (Cross-Origin Resource Sharing) configuration allows web
+        # applications to make requests to R2 buckets from different origins.
+        #
+        # Origin format must be scheme://host[:port] without path components.
+        # MaxAgeSeconds can be up to 86400 (24 hours).
+        #
+        # @example Basic CORS configuration
+        #   R2BucketCorsAttributes.new(
+        #     account_id: "a" * 32,
+        #     bucket_name: "my-bucket",
+        #     rules: [{
+        #       allowed: {
+        #         origins: ["https://example.com"],
+        #         methods: ["GET", "HEAD"]
+        #       },
+        #       max_age_seconds: 3600
+        #     }]
+        #   )
+        #
+        # @example Wildcard CORS for public bucket
+        #   R2BucketCorsAttributes.new(
+        #     account_id: "a" * 32,
+        #     bucket_name: "public-assets",
+        #     rules: [{
+        #       allowed: {
+        #         origins: ["*"],
+        #         methods: ["GET"],
+        #         headers: ["*"]
+        #       },
+        #       max_age_seconds: 86400
+        #     }]
+        #   )
+        class R2BucketCorsAttributes < Dry::Struct
+          transform_keys(&:to_sym)
+
+          # @!attribute account_id
+          #   @return [String] The account ID
+          attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId
+
+          # @!attribute bucket_name
+          #   @return [String] R2 bucket name
+          attribute :bucket_name, Dry::Types['strict.string'].constrained(min_size: 1)
+
+          # @!attribute rules
+          #   @return [Array<R2CorsRule>] CORS rules
+          attribute :rules, Dry::Types['strict.array']
+            .of(R2CorsRule)
+            .constrained(min_size: 1)
+
+          # Check if any rule allows wildcard origins
+          # @return [Boolean] true if any rule has wildcard origin
+          def has_wildcard_origin?
+            rules.any? { |rule| rule.allowed.wildcard_origin? }
+          end
+
+          # Check if any rule allows GET
+          # @return [Boolean] true if any rule allows GET
+          def allows_get?
+            rules.any?(&:allows_get?)
+          end
+
+          # Check if multiple rules configured
+          # @return [Boolean] true if more than one rule
+          def multiple_rules?
+            rules.length > 1
+          end
+
+          # Get all unique origins across rules
+          # @return [Array<String>] all configured origins
+          def all_origins
+            rules.flat_map { |rule| rule.allowed.origins }.uniq
+          end
+
+          # Get all unique methods across rules
+          # @return [Array<String>] all configured methods
+          def all_methods
+            rules.flat_map { |rule| rule.allowed[:methods] }.uniq
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/cloudflare_r2_bucket_cors/types/cors_allowed.rb

@@ -0,0 +1,59 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Pangea
+  module Resources
+    module Cloudflare
+      module Types
+        # Allowed configuration for CORS rule
+        class R2CorsAllowed < Dry::Struct
+          transform_keys(&:to_sym)
+
+          # @!attribute origins
+          #   @return [Array<String>] Allowed origins (scheme://host[:port])
+          attribute :origins, Dry::Types['strict.array']
+            .of(Dry::Types['strict.string'])
+            .constrained(min_size: 1)
+
+          # @!attribute methods
+          #   @return [Array<String>] Allowed HTTP methods
+          attribute :methods, Dry::Types['strict.array']
+            .of(CloudflareR2CorsMethod)
+            .constrained(min_size: 1)
+
+          # @!attribute headers
+          #   @return [Array<String>, nil] Allowed request headers
+          attribute :headers, Dry::Types['strict.array']
+            .of(Dry::Types['strict.string'])
+            .optional
+            .default(nil)
+
+          # Check if wildcard origin
+          # @return [Boolean] true if allows all origins
+          def wildcard_origin?
+            origins.include?('*')
+          end
+
+          # Check if wildcard headers
+          # @return [Boolean] true if allows all headers
+          def wildcard_headers?
+            headers&.include?('*') || false
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/cloudflare_r2_bucket_cors/types/cors_method.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Pangea
+  module Resources
+    module Cloudflare
+      module Types
+        # HTTP methods for CORS
+        CloudflareR2CorsMethod = Dry::Types['strict.string'].enum(
+          'GET',
+          'HEAD',
+          'POST',
+          'PUT',
+          'DELETE',
+          'PATCH',
+          'OPTIONS'
+        )
+      end
+    end
+  end
+end

data/lib/pangea/resources/cloudflare_r2_bucket_cors/types/cors_rule.rb

@@ -0,0 +1,74 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+module Pangea
+  module Resources
+    module Cloudflare
+      module Types
+        # CORS rule for R2 bucket
+        class R2CorsRule < Dry::Struct
+          transform_keys(&:to_sym)
+
+          # @!attribute allowed
+          #   @return [R2CorsAllowed] Allowed origins, methods, headers
+          attribute :allowed, R2CorsAllowed
+
+          # @!attribute id
+          #   @return [String, nil] Rule identifier
+          attribute :id, Dry::Types['strict.string'].optional.default(nil)
+
+          # @!attribute max_age_seconds
+          #   @return [Integer, nil] Preflight cache duration (max 86400)
+          attribute :max_age_seconds, Dry::Types['coercible.integer']
+            .constrained(gteq: 0, lteq: 86400)
+            .optional
+            .default(nil)
+
+          # @!attribute expose_headers
+          #   @return [Array<String>, nil] Headers exposed to JavaScript
+          attribute :expose_headers, Dry::Types['strict.array']
+            .of(Dry::Types['strict.string'])
+            .optional
+            .default(nil)
+
+          # Check if GET requests allowed
+          # @return [Boolean] true if GET in methods
+          def allows_get?
+            allowed[:methods].include?('GET')
+          end
+
+          # Check if POST requests allowed
+          # @return [Boolean] true if POST in methods
+          def allows_post?
+            allowed[:methods].include?('POST')
+          end
+
+          # Check if has preflight caching
+          # @return [Boolean] true if max_age_seconds configured
+          def has_preflight_caching?
+            !max_age_seconds.nil? && max_age_seconds > 0
+          end
+
+          # Check if exposes headers
+          # @return [Boolean] true if expose_headers configured
+          def exposes_headers?
+            !expose_headers.nil? && !expose_headers.empty?
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/cloudflare_r2_bucket_cors/types.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+require 'dry-struct'
+require 'pangea/resources/types'
+require_relative 'types/cors_method'
+require_relative 'types/cors_allowed'
+require_relative 'types/cors_rule'
+require_relative 'types/attributes'