pangea-cloudflare 0.1.0

data/lib/pangea/resources/cloudflare_api_token/resource.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_api_token/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareApiToken
+    def cloudflare_api_token(name, attributes = {})
+      attrs = Cloudflare::Types::ApiTokenAttributes.new(attributes)
+      resource(:cloudflare_api_token, name) do
+        name attrs.name
+        policy attrs.policy
+        condition attrs.condition if attrs.condition
+        expires_on attrs.expires_on if attrs.expires_on
+        not_before attrs.not_before if attrs.not_before
+      end
+      ResourceReference.new(
+        type: 'cloudflare_api_token',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: {
+          id: "${cloudflare_api_token.#{name}.id}",
+          value: "${cloudflare_api_token.#{name}.value}"
+        }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareApiToken
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_api_token/types.rb

@@ -0,0 +1,14 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ApiTokenAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :name, Dry::Types['strict.string']
+    attribute :policy, Dry::Types['strict.array']
+    attribute :condition, Dry::Types['strict.hash'].optional.default(nil)
+    attribute :expires_on, Dry::Types['strict.string'].optional.default(nil)
+    attribute :not_before, Dry::Types['strict.string'].optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_argo/resource.rb

@@ -0,0 +1,91 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_argo/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    # Cloudflare Argo resource module that self-registers
+    module CloudflareArgo
+      # Configure Cloudflare Argo features for a zone
+      #
+      # Enables Argo Smart Routing (optimized traffic routing) and
+      # Argo Tiered Caching (improved cache efficiency).
+      #
+      # NOTE: tiered_caching is deprecated. Use cloudflare_tiered_cache resource instead.
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] Argo configuration attributes
+      # @option attributes [String] :zone_id Zone ID (required)
+      # @option attributes [String] :smart_routing Enable Smart Routing ("on" or "off")
+      # @option attributes [String] :tiered_caching Enable Tiered Caching ("on" or "off", deprecated)
+      #
+      # @return [ResourceReference] Reference object with outputs
+      #
+      # @example Enable Smart Routing only
+      #   cloudflare_argo(:smart_routing, {
+      #     zone_id: "023e105f4ecef8ad9ca31a8372d0c353",
+      #     smart_routing: "on"
+      #   })
+      #
+      # @example Enable both features
+      #   cloudflare_argo(:argo_all, {
+      #     zone_id: "023e105f4ecef8ad9ca31a8372d0c353",
+      #     smart_routing: "on",
+      #     tiered_caching: "on"
+      #   })
+      #
+      # @example Disable all Argo features
+      #   cloudflare_argo(:argo_disabled, {
+      #     zone_id: "023e105f4ecef8ad9ca31a8372d0c353",
+      #     smart_routing: "off",
+      #     tiered_caching: "off"
+      #   })
+      def cloudflare_argo(name, attributes = {})
+        # Validate attributes using dry-struct
+        argo_attrs = Cloudflare::Types::ArgoAttributes.new(attributes)
+
+        # Generate terraform resource block via terraform-synthesizer
+        resource(:cloudflare_argo, name) do
+          zone_id argo_attrs.zone_id
+          smart_routing argo_attrs.smart_routing if argo_attrs.smart_routing
+          tiered_caching argo_attrs.tiered_caching if argo_attrs.tiered_caching
+        end
+
+        # Return resource reference with available outputs
+        ResourceReference.new(
+          type: 'cloudflare_argo',
+          name: name,
+          resource_attributes: argo_attrs.to_h,
+          outputs: {
+            id: "${cloudflare_argo.#{name}.id}"
+          }
+        )
+      end
+    end
+
+    # Maintain backward compatibility by extending Cloudflare module
+    module Cloudflare
+      include CloudflareArgo
+    end
+  end
+end
+
+# Auto-register this module when it's loaded
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_argo/types.rb

@@ -0,0 +1,92 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module Cloudflare
+      module Types
+        # Argo feature toggle enum
+        CloudflareArgoToggle = Dry::Types['strict.string'].enum(
+          'on',
+          'off'
+        )
+
+        # Type-safe attributes for Cloudflare Argo
+        #
+        # Enables Argo Smart Routing and Tiered Caching for a zone.
+        # Smart Routing optimizes traffic routing, Tiered Caching improves cache efficiency.
+        #
+        # NOTE: tiered_caching is deprecated in favor of cloudflare_tiered_cache resource.
+        #
+        # @example Enable Smart Routing
+        #   ArgoAttributes.new(
+        #     zone_id: "023e105f4ecef8ad9ca31a8372d0c353",
+        #     smart_routing: "on"
+        #   )
+        #
+        # @example Enable both features
+        #   ArgoAttributes.new(
+        #     zone_id: "023e105f4ecef8ad9ca31a8372d0c353",
+        #     smart_routing: "on",
+        #     tiered_caching: "on"
+        #   )
+        class ArgoAttributes < Dry::Struct
+          transform_keys(&:to_sym)
+
+          # @!attribute zone_id
+          #   @return [String] The zone ID
+          attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+
+          # @!attribute smart_routing
+          #   @return [String, nil] Enable Argo Smart Routing ("on" or "off")
+          attribute :smart_routing, CloudflareArgoToggle.optional.default(nil)
+
+          # @!attribute tiered_caching
+          #   @return [String, nil] Enable Argo Tiered Caching ("on" or "off")
+          #   @deprecated Use cloudflare_tiered_cache resource instead
+          attribute :tiered_caching, CloudflareArgoToggle.optional.default(nil)
+
+          # Check if Smart Routing is enabled
+          # @return [Boolean] true if enabled
+          def smart_routing_enabled?
+            smart_routing == 'on'
+          end
+
+          # Check if Tiered Caching is enabled
+          # @return [Boolean] true if enabled
+          def tiered_caching_enabled?
+            tiered_caching == 'on'
+          end
+
+          # Check if any Argo feature is enabled
+          # @return [Boolean] true if any feature enabled
+          def any_enabled?
+            smart_routing_enabled? || tiered_caching_enabled?
+          end
+
+          # Check if all Argo features are enabled
+          # @return [Boolean] true if all features enabled
+          def all_enabled?
+            smart_routing_enabled? && tiered_caching_enabled?
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/cloudflare_authenticated_origin_pulls/resource.rb

@@ -0,0 +1,29 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_authenticated_origin_pulls/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareAuthenticatedOriginPulls
+    def cloudflare_authenticated_origin_pulls(name, attributes = {})
+      attrs = Cloudflare::Types::AuthenticatedOriginPullsAttributes.new(attributes)
+      resource(:cloudflare_authenticated_origin_pulls, name) do
+        zone_id attrs.zone_id
+        enabled attrs.enabled
+        authenticated_origin_pulls_certificate attrs.authenticated_origin_pulls_certificate if attrs.authenticated_origin_pulls_certificate
+        hostname attrs.hostname if attrs.hostname
+      end
+      ResourceReference.new(
+        type: 'cloudflare_authenticated_origin_pulls',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_authenticated_origin_pulls.#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareAuthenticatedOriginPulls
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_authenticated_origin_pulls/types.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class AuthenticatedOriginPullsAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+    attribute :enabled, Dry::Types['strict.bool']
+    attribute :authenticated_origin_pulls_certificate, Dry::Types['strict.string'].optional.default(nil)
+    attribute :hostname, Dry::Types['strict.string'].optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_authenticated_origin_pulls_certificate/resource.rb

@@ -0,0 +1,33 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_authenticated_origin_pulls_certificate/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareAuthenticatedOriginPullsCertificate
+    def cloudflare_authenticated_origin_pulls_certificate(name, attributes = {})
+      attrs = Cloudflare::Types::AuthenticatedOriginPullsCertificateAttributes.new(attributes)
+      resource(:cloudflare_authenticated_origin_pulls_certificate, name) do
+        zone_id attrs.zone_id
+        certificate attrs.certificate
+        private_key attrs.private_key
+        type attrs.type if attrs.type
+      end
+      ResourceReference.new(
+        type: 'cloudflare_authenticated_origin_pulls_certificate',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: {
+          id: "${cloudflare_authenticated_origin_pulls_certificate.#{name}.id}",
+          status: "${cloudflare_authenticated_origin_pulls_certificate.#{name}.status}",
+          expires_on: "${cloudflare_authenticated_origin_pulls_certificate.#{name}.expires_on}"
+        }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareAuthenticatedOriginPullsCertificate
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_authenticated_origin_pulls_certificate/types.rb

@@ -0,0 +1,13 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class AuthenticatedOriginPullsCertificateAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+    attribute :certificate, Dry::Types['strict.string']
+    attribute :private_key, Dry::Types['strict.string']
+    attribute :type, Dry::Types['strict.string'].enum('per-zone', 'per-hostname').optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_authenticated_origin_pulls_settings/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_authenticated_origin_pulls_settings/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareAuthenticatedOriginPullsSettings
+    def cloudflare_authenticated_origin_pulls_settings(name, attributes = {})
+      attrs = Cloudflare::Types::AuthenticatedOriginPullsSettingsAttributes.new(attributes)
+      resource(:cloudflare_authenticated_origin_pulls_settings, name) do
+        zone_id attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_authenticated_origin_pulls_settings',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_authenticated_origin_pulls_settings.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareAuthenticatedOriginPullsSettings
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_authenticated_origin_pulls_settings/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class AuthenticatedOriginPullsSettingsAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+  end
+end

data/lib/pangea/resources/cloudflare_bot_management/resource.rb

@@ -0,0 +1,31 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_bot_management/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareBotManagement
+    def cloudflare_bot_management(name, attributes = {})
+      attrs = Cloudflare::Types::BotManagementAttributes.new(attributes)
+      resource(:cloudflare_bot_management, name) do
+        zone_id attrs.zone_id
+        enable_js attrs.enable_js if !attrs.enable_js.nil?
+        fight_mode attrs.fight_mode if !attrs.fight_mode.nil?
+        suppress_session_score attrs.suppress_session_score if !attrs.suppress_session_score.nil?
+        auto_update_model attrs.auto_update_model if !attrs.auto_update_model.nil?
+        optimize_wordpress attrs.optimize_wordpress if !attrs.optimize_wordpress.nil?
+      end
+      ResourceReference.new(
+        type: 'cloudflare_bot_management',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_bot_management.#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareBotManagement
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_bot_management/types.rb

@@ -0,0 +1,15 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class BotManagementAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+    attribute :enable_js, Dry::Types['strict.bool'].optional.default(nil)
+    attribute :fight_mode, Dry::Types['strict.bool'].optional.default(nil)
+    attribute :suppress_session_score, Dry::Types['strict.bool'].optional.default(nil)
+    attribute :auto_update_model, Dry::Types['strict.bool'].optional.default(nil)
+    attribute :optimize_wordpress, Dry::Types['strict.bool'].optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_byo_ip_prefix/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_byo_ip_prefix/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareByoIpPrefix
+    def cloudflare_byo_ip_prefix(name, attributes = {})
+      attrs = Cloudflare::Types::ByoIpPrefixAttributes.new(attributes)
+      resource(:cloudflare_byo_ip_prefix, name) do
+        zone_id attrs.zone_id if attrs.zone_id
+        account_id attrs.account_id if attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_byo_ip_prefix',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_byo_ip_prefix.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareByoIpPrefix
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_byo_ip_prefix/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class ByoIpPrefixAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_calls_sfu_app/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_calls_sfu_app/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareCallsSfuApp
+    def cloudflare_calls_sfu_app(name, attributes = {})
+      attrs = Cloudflare::Types::CallsSfuAppAttributes.new(attributes)
+      resource(:cloudflare_calls_sfu_app, name) do
+        account_id attrs.account_id if attrs.account_id
+        zone_id attrs.zone_id if attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_calls_sfu_app',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_calls_sfu_app.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareCallsSfuApp
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_calls_sfu_app/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class CallsSfuAppAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_calls_turn_app/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_calls_turn_app/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareCallsTurnApp
+    def cloudflare_calls_turn_app(name, attributes = {})
+      attrs = Cloudflare::Types::CallsTurnAppAttributes.new(attributes)
+      resource(:cloudflare_calls_turn_app, name) do
+        account_id attrs.account_id if attrs.account_id
+        zone_id attrs.zone_id if attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_calls_turn_app',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_calls_turn_app.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareCallsTurnApp
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_calls_turn_app/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class CallsTurnAppAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_certificate_pack/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_certificate_pack/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareCertificatePack
+    def cloudflare_certificate_pack(name, attributes = {})
+      attrs = Cloudflare::Types::CertificatePackAttributes.new(attributes)
+      resource(:cloudflare_certificate_pack, name) do
+        zone_id attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_certificate_pack',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_certificate_pack.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareCertificatePack
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_certificate_pack/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class CertificatePackAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+  end
+end

data/lib/pangea/resources/cloudflare_cloud_connector_rules/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_cloud_connector_rules/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareCloudConnectorRules
+    def cloudflare_cloud_connector_rules(name, attributes = {})
+      attrs = Cloudflare::Types::CloudConnectorRulesAttributes.new(attributes)
+      resource(:cloudflare_cloud_connector_rules, name) do
+        zone_id attrs.zone_id if attrs.zone_id
+        account_id attrs.account_id if attrs.account_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_cloud_connector_rules',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_cloud_connector_rules.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareCloudConnectorRules
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_cloud_connector_rules/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class CloudConnectorRulesAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_cloudforce_one_request/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_cloudforce_one_request/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareCloudforceOneRequest
+    def cloudflare_cloudforce_one_request(name, attributes = {})
+      attrs = Cloudflare::Types::CloudforceOneRequestAttributes.new(attributes)
+      resource(:cloudflare_cloudforce_one_request, name) do
+        account_id attrs.account_id if attrs.account_id
+        zone_id attrs.zone_id if attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_cloudforce_one_request',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_cloudforce_one_request.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareCloudforceOneRequest
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_cloudforce_one_request/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class CloudforceOneRequestAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+  end
+end