pangea-cloudflare 0.1.0

data/lib/pangea/resources/cloudflare_tiered_cache/types.rb

@@ -0,0 +1,74 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module Cloudflare
+      module Types
+        # Tiered cache toggle enum
+        CloudflareTieredCacheValue = Dry::Types['strict.string'].enum(
+          'on',
+          'off'
+        )
+
+        # Type-safe attributes for Cloudflare Tiered Cache
+        #
+        # Smart Tiered Cache topology configuration for improved cache hit ratios.
+        # Uses Cloudflare's network topology to serve cached content from optimal locations.
+        #
+        # Replaces deprecated tiered_caching attribute in cloudflare_argo resource.
+        #
+        # @example Enable Smart Tiered Cache
+        #   TieredCacheAttributes.new(
+        #     zone_id: "023e105f4ecef8ad9ca31a8372d0c353",
+        #     value: "on"
+        #   )
+        #
+        # @example Disable Smart Tiered Cache
+        #   TieredCacheAttributes.new(
+        #     zone_id: "023e105f4ecef8ad9ca31a8372d0c353",
+        #     value: "off"
+        #   )
+        class TieredCacheAttributes < Dry::Struct
+          transform_keys(&:to_sym)
+
+          # @!attribute zone_id
+          #   @return [String] The zone ID
+          attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+
+          # @!attribute value
+          #   @return [String] Enable or disable Smart Tiered Cache ("on" or "off")
+          attribute :value, CloudflareTieredCacheValue
+
+          # Check if Tiered Cache is enabled
+          # @return [Boolean] true if enabled
+          def enabled?
+            value == 'on'
+          end
+
+          # Check if Tiered Cache is disabled
+          # @return [Boolean] true if disabled
+          def disabled?
+            value == 'off'
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/cloudflare_total_tls/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_total_tls/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareTotalTls
+    def cloudflare_total_tls(name, attributes = {})
+      attrs = Cloudflare::Types::TotalTlsAttributes.new(attributes)
+      resource(:cloudflare_total_tls, name) do
+        zone_id attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_total_tls',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_total_tls.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareTotalTls
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_total_tls/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class TotalTlsAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+  end
+end

data/lib/pangea/resources/cloudflare_turnstile_widget/resource.rb

@@ -0,0 +1,34 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_turnstile_widget/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareTurnstileWidget
+    def cloudflare_turnstile_widget(name, attributes = {})
+      attrs = Cloudflare::Types::TurnstileWidgetAttributes.new(attributes)
+      resource(:cloudflare_turnstile_widget, name) do
+        account_id attrs.account_id
+        name attrs.name
+        domains attrs.domains
+        mode attrs.mode
+        region attrs.region if attrs.region
+        offlabel attrs.offlabel if attrs.offlabel
+      end
+      ResourceReference.new(
+        type: 'cloudflare_turnstile_widget',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: {
+          id: "${cloudflare_turnstile_widget.#{name}.id}",
+          secret: "${cloudflare_turnstile_widget.#{name}.secret}"
+        }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareTurnstileWidget
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_turnstile_widget/types.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class TurnstileWidgetAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId
+    attribute :name, Dry::Types['strict.string']
+    attribute :domains, Dry::Types['strict.array'].of(Dry::Types['strict.string'])
+    attribute :mode, Dry::Types['strict.string']
+    attribute :region, Dry::Types['strict.string'].optional.default(nil)
+    attribute :offlabel, Dry::Types['strict.bool'].optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_url_normalization_settings/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_url_normalization_settings/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareURLNormalizationSettings
+    def cloudflare_url_normalization_settings(name, attributes = {})
+      attrs = Cloudflare::Types::URLNormalizationSettingsAttributes.new(attributes)
+      resource(:cloudflare_url_normalization_settings, name) do
+        zone_id attrs.zone_id if attrs.zone_id
+        account_id attrs.account_id if attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_url_normalization_settings',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_url_normalization_settings.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareURLNormalizationSettings
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_url_normalization_settings/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class URLNormalizationSettingsAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_user/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_user/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareUser
+    def cloudflare_user(name, attributes = {})
+      attrs = Cloudflare::Types::UserAttributes.new(attributes)
+      resource(:cloudflare_user, name) do
+        account_id attrs.account_id if attrs.account_id
+        zone_id attrs.zone_id if attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_user',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_user.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareUser
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_user/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class UserAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_user_agent_blocking_rule/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_user_agent_blocking_rule/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareUserAgentBlockingRule
+    def cloudflare_user_agent_blocking_rule(name, attributes = {})
+      attrs = Cloudflare::Types::UserAgentBlockingRuleAttributes.new(attributes)
+      resource(:cloudflare_user_agent_blocking_rule, name) do
+        zone_id attrs.zone_id if attrs.zone_id
+        account_id attrs.account_id if attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_user_agent_blocking_rule',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_user_agent_blocking_rule.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareUserAgentBlockingRule
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_user_agent_blocking_rule/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class UserAgentBlockingRuleAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_waiting_room/resource.rb

@@ -0,0 +1,122 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_waiting_room/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    # Cloudflare Waiting Room resource module that self-registers
+    module CloudflareWaitingRoom
+      # Create a Cloudflare Waiting Room
+      #
+      # Manage traffic surges by queueing excess visitors in a customizable
+      # waiting room before allowing them to proceed to your application.
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] Waiting room attributes
+      # @option attributes [String] :zone_id Zone ID (required)
+      # @option attributes [String] :host Domain for waiting room (required)
+      # @option attributes [String] :name Waiting room identifier (required)
+      # @option attributes [Integer] :new_users_per_minute Rate limit (200-60,000, required)
+      # @option attributes [Integer] :total_active_users Max concurrent users (200-1,000,000, required)
+      # @option attributes [String] :path URL path to protect
+      # @option attributes [Boolean] :queue_all Queue all traffic
+      # @option attributes [String] :queueing_method Queue type (fifo/random/passthrough/reject)
+      # @option attributes [String] :description Description
+      # @option attributes [Integer] :session_duration Session duration in minutes
+      # @option attributes [Boolean] :disable_session_renewal Disable session renewal
+      # @option attributes [Boolean] :suspended Suspend waiting room
+      # @option attributes [String] :custom_page_html Custom HTML
+      # @option attributes [Hash] :cookie_attributes Cookie configuration
+      #
+      # @return [ResourceReference] Reference object with outputs
+      #
+      # @example Basic waiting room
+      #   cloudflare_waiting_room(:shop, {
+      #     zone_id: "023e105f4ecef8ad9ca31a8372d0c353",
+      #     host: "shop.example.com",
+      #     name: "shop_queue",
+      #     new_users_per_minute: 200,
+      #     total_active_users: 300
+      #   })
+      #
+      # @example Advanced waiting room with path
+      #   cloudflare_waiting_room(:checkout, {
+      #     zone_id: "023e105f4ecef8ad9ca31a8372d0c353",
+      #     host: "shop.example.com",
+      #     path: "/checkout",
+      #     name: "checkout_queue",
+      #     new_users_per_minute: 500,
+      #     total_active_users: 1000,
+      #     queueing_method: "fifo",
+      #     session_duration: 10
+      #   })
+      def cloudflare_waiting_room(name, attributes = {})
+        # Validate attributes using dry-struct
+        wr_attrs = Cloudflare::Types::WaitingRoomAttributes.new(attributes)
+
+        # Generate terraform resource block via terraform-synthesizer
+        resource(:cloudflare_waiting_room, name) do
+          zone_id wr_attrs.zone_id
+          host wr_attrs.host
+          name wr_attrs.name
+          new_users_per_minute wr_attrs.new_users_per_minute
+          total_active_users wr_attrs.total_active_users
+
+          path wr_attrs.path if wr_attrs.path
+          queue_all wr_attrs.queue_all if wr_attrs.queue_all
+          queueing_method wr_attrs.queueing_method if wr_attrs.queueing_method
+          description wr_attrs.description if wr_attrs.description
+          session_duration wr_attrs.session_duration if wr_attrs.session_duration
+          disable_session_renewal wr_attrs.disable_session_renewal unless wr_attrs.disable_session_renewal.nil?
+          suspended wr_attrs.suspended if wr_attrs.suspended
+          custom_page_html wr_attrs.custom_page_html if wr_attrs.custom_page_html
+          default_template_language wr_attrs.default_template_language if wr_attrs.default_template_language
+          json_response_enabled wr_attrs.json_response_enabled if wr_attrs.json_response_enabled
+          queueing_status_code wr_attrs.queueing_status_code if wr_attrs.queueing_status_code
+
+          if wr_attrs.cookie_attributes
+            cookie_attributes do
+              samesite wr_attrs.cookie_attributes.samesite if wr_attrs.cookie_attributes.samesite
+              secure wr_attrs.cookie_attributes.secure if wr_attrs.cookie_attributes.secure
+            end
+          end
+        end
+
+        # Return resource reference with available outputs
+        ResourceReference.new(
+          type: 'cloudflare_waiting_room',
+          name: name,
+          resource_attributes: wr_attrs.to_h,
+          outputs: {
+            id: "${cloudflare_waiting_room.#{name}.id}"
+          }
+        )
+      end
+    end
+
+    # Maintain backward compatibility by extending Cloudflare module
+    module Cloudflare
+      include CloudflareWaitingRoom
+    end
+  end
+end
+
+# Auto-register this module when it's loaded
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_waiting_room/types.rb

@@ -0,0 +1,171 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module Cloudflare
+      module Types
+        # Queueing method enum for waiting rooms
+        CloudflareWaitingRoomQueueingMethod = Dry::Types['strict.string'].enum(
+          'fifo',        # First-in-first-out
+          'random',      # Random selection
+          'passthrough', # Let all through
+          'reject'       # Reject all
+        )
+
+        # Cookie SameSite attribute enum
+        CloudflareCookieSameSite = Dry::Types['strict.string'].enum(
+          'auto',
+          'lax',
+          'none',
+          'strict'
+        )
+
+        # Cookie Secure attribute enum
+        CloudflareCookieSecure = Dry::Types['strict.string'].enum(
+          'auto',
+          'always',
+          'never'
+        )
+
+        # Cookie attributes configuration
+        class WaitingRoomCookieAttributes < Dry::Struct
+          transform_keys(&:to_sym)
+
+          # @!attribute samesite
+          #   @return [String, nil] Cookie SameSite attribute
+          attribute :samesite, CloudflareCookieSameSite.optional.default(nil)
+
+          # @!attribute secure
+          #   @return [String, nil] Cookie Secure attribute
+          attribute :secure, CloudflareCookieSecure.optional.default(nil)
+        end
+
+        # Type-safe attributes for Cloudflare Waiting Room
+        #
+        # Manage traffic surges by queueing excess visitors in a
+        # customizable waiting room before allowing them to proceed.
+        #
+        # @example Basic waiting room
+        #   WaitingRoomAttributes.new(
+        #     zone_id: "023e105f4ecef8ad9ca31a8372d0c353",
+        #     host: "shop.example.com",
+        #     name: "shop_queue",
+        #     new_users_per_minute: 200,
+        #     total_active_users: 300
+        #   )
+        class WaitingRoomAttributes < Dry::Struct
+          transform_keys(&:to_sym)
+
+          # @!attribute zone_id
+          #   @return [String] The zone ID
+          attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+
+          # @!attribute host
+          #   @return [String] The domain for the waiting room
+          attribute :host, Dry::Types['strict.string'].constrained(min_size: 1)
+
+          # @!attribute name
+          #   @return [String] Unique waiting room name
+          attribute :name, Dry::Types['strict.string'].constrained(min_size: 1)
+
+          # @!attribute new_users_per_minute
+          #   @return [Integer] Rate limit for new users entering from queue
+          attribute :new_users_per_minute, Dry::Types['coercible.integer'].constrained(gteq: 200, lteq: 60_000)
+
+          # @!attribute total_active_users
+          #   @return [Integer] Maximum concurrent active users
+          attribute :total_active_users, Dry::Types['coercible.integer'].constrained(gteq: 200, lteq: 1_000_000)
+
+          # @!attribute path
+          #   @return [String, nil] Path to enable waiting room on
+          attribute :path, Dry::Types['strict.string'].optional.default(nil)
+
+          # @!attribute queue_all
+          #   @return [Boolean, nil] Queue all traffic
+          attribute :queue_all, ::Pangea::Resources::Types::Bool.optional.default(nil)
+
+          # @!attribute queueing_method
+          #   @return [String, nil] Queueing method
+          attribute :queueing_method, CloudflareWaitingRoomQueueingMethod.optional.default(nil)
+
+          # @!attribute description
+          #   @return [String, nil] Description
+          attribute :description, Dry::Types['strict.string'].optional.default(nil)
+
+          # @!attribute session_duration
+          #   @return [Integer, nil] Session duration in minutes
+          attribute :session_duration, Dry::Types['coercible.integer']
+            .constrained(gteq: 1, lteq: 43_200)
+            .optional
+            .default(nil)
+
+          # @!attribute disable_session_renewal
+          #   @return [Boolean, nil] Disable session renewal
+          attribute :disable_session_renewal, ::Pangea::Resources::Types::Bool.optional.default(nil)
+
+          # @!attribute suspended
+          #   @return [Boolean, nil] Suspend waiting room
+          attribute :suspended, ::Pangea::Resources::Types::Bool.optional.default(nil)
+
+          # @!attribute custom_page_html
+          #   @return [String, nil] Custom HTML for waiting page
+          attribute :custom_page_html, Dry::Types['strict.string'].optional.default(nil)
+
+          # @!attribute default_template_language
+          #   @return [String, nil] Default language for template
+          attribute :default_template_language, Dry::Types['strict.string'].optional.default(nil)
+
+          # @!attribute cookie_attributes
+          #   @return [WaitingRoomCookieAttributes, nil] Cookie configuration
+          attribute :cookie_attributes, WaitingRoomCookieAttributes.optional.default(nil)
+
+          # @!attribute json_response_enabled
+          #   @return [Boolean, nil] Enable JSON responses
+          attribute :json_response_enabled, ::Pangea::Resources::Types::Bool.optional.default(nil)
+
+          # @!attribute queueing_status_code
+          #   @return [Integer, nil] HTTP status code for queueing
+          attribute :queueing_status_code, Dry::Types['coercible.integer']
+            .constrained(included_in: [200, 202, 429])
+            .optional
+            .default(nil)
+
+          # Check if waiting room queues all traffic
+          # @return [Boolean] true if queuing all
+          def queues_all?
+            queue_all == true
+          end
+
+          # Check if FIFO queueing
+          # @return [Boolean] true if FIFO
+          def fifo_queueing?
+            queueing_method == 'fifo'
+          end
+
+          # Check if random queueing
+          # @return [Boolean] true if random
+          def random_queueing?
+            queueing_method == 'random'
+          end
+        end
+      end
+    end
+  end
+end