pangea-cloudflare 0.1.0

data/lib/pangea/resources/cloudflare_email_routing_rule/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_email_routing_rule/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareEmailRoutingRule
+    def cloudflare_email_routing_rule(name, attributes = {})
+      attrs = Cloudflare::Types::EmailRoutingRuleAttributes.new(attributes)
+      resource(:cloudflare_email_routing_rule, name) do
+        zone_id attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_email_routing_rule',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_email_routing_rule.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareEmailRoutingRule
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_email_routing_rule/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class EmailRoutingRuleAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+  end
+end

data/lib/pangea/resources/cloudflare_email_routing_settings/resource.rb

@@ -0,0 +1,26 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_email_routing_settings/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareEmailRoutingSettings
+    def cloudflare_email_routing_settings(name, attributes = {})
+      attrs = Cloudflare::Types::EmailRoutingSettingsAttributes.new(attributes)
+      resource(:cloudflare_email_routing_settings, name) do
+        zone_id attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_email_routing_settings',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_email_routing_settings.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareEmailRoutingSettings
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_email_routing_settings/types.rb

@@ -0,0 +1,10 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class EmailRoutingSettingsAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+  end
+end

data/lib/pangea/resources/cloudflare_email_security_block_sender/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_email_security_block_sender/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareEmailSecurityBlockSender
+    def cloudflare_email_security_block_sender(name, attributes = {})
+      attrs = Cloudflare::Types::EmailSecurityBlockSenderAttributes.new(attributes)
+      resource(:cloudflare_email_security_block_sender, name) do
+        account_id attrs.account_id if attrs.account_id
+        zone_id attrs.zone_id if attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_email_security_block_sender',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_email_security_block_sender.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareEmailSecurityBlockSender
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_email_security_block_sender/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class EmailSecurityBlockSenderAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_email_security_impersonation_registry/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_email_security_impersonation_registry/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareEmailSecurityImpersonationRegistry
+    def cloudflare_email_security_impersonation_registry(name, attributes = {})
+      attrs = Cloudflare::Types::EmailSecurityImpersonationRegistryAttributes.new(attributes)
+      resource(:cloudflare_email_security_impersonation_registry, name) do
+        account_id attrs.account_id if attrs.account_id
+        zone_id attrs.zone_id if attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_email_security_impersonation_registry',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_email_security_impersonation_registry.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareEmailSecurityImpersonationRegistry
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_email_security_impersonation_registry/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class EmailSecurityImpersonationRegistryAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_email_security_trusted_domains/resource.rb

@@ -0,0 +1,27 @@
+# frozen_string_literal: true
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_email_security_trusted_domains/types'
+require 'pangea/resource_registry'
+
+module Pangea::Resources
+  module CloudflareEmailSecurityTrustedDomains
+    def cloudflare_email_security_trusted_domains(name, attributes = {})
+      attrs = Cloudflare::Types::EmailSecurityTrustedDomainsAttributes.new(attributes)
+      resource(:cloudflare_email_security_trusted_domains, name) do
+        account_id attrs.account_id if attrs.account_id
+        zone_id attrs.zone_id if attrs.zone_id
+      end
+      ResourceReference.new(
+        type: 'cloudflare_email_security_trusted_domains',
+        name: name,
+        resource_attributes: attrs.to_h,
+        outputs: { id: "${cloudflare_email_security_trusted_domains.\#{name}.id}" }
+      )
+    end
+  end
+  module Cloudflare
+    include CloudflareEmailSecurityTrustedDomains
+  end
+end
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_email_security_trusted_domains/types.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea::Resources::Cloudflare::Types
+  class EmailSecurityTrustedDomainsAttributes < Dry::Struct
+    transform_keys(&:to_sym)
+    attribute :account_id, ::Pangea::Resources::Types::CloudflareAccountId.optional.default(nil)
+    attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId.optional.default(nil)
+  end
+end

data/lib/pangea/resources/cloudflare_filter/resource.rb

@@ -0,0 +1,64 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_filter/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    # Cloudflare Filter resource module
+    module CloudflareFilter
+      # Create a Cloudflare Filter with type-safe attributes
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] Filter attributes
+      # @return [ResourceReference] Reference object with outputs and computed properties
+      def cloudflare_filter(name, attributes = {})
+        # Validate attributes using dry-struct
+        filter_attrs = Cloudflare::Types::FilterAttributes.new(attributes)
+
+        # Generate terraform resource block via terraform-synthesizer
+        resource(:cloudflare_filter, name) do
+          zone_id filter_attrs.zone_id
+          expression filter_attrs.expression
+          description filter_attrs.description if filter_attrs.description
+          ref filter_attrs.ref if filter_attrs.ref
+          paused filter_attrs.paused
+        end
+
+        # Return resource reference with available outputs
+        ResourceReference.new(
+          type: 'cloudflare_filter',
+          name: name,
+          resource_attributes: filter_attrs.to_h,
+          outputs: {
+            id: "${cloudflare_filter.#{name}.id}"
+          }
+        )
+      end
+    end
+
+    # Extend Cloudflare module
+    module Cloudflare
+      include CloudflareFilter
+    end
+  end
+end
+
+# Auto-register this module when it's loaded
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_filter/types.rb

@@ -0,0 +1,54 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module Cloudflare
+      module Types
+        # Cloudflare Filter resource attributes with validation
+        class FilterAttributes < Dry::Struct
+          transform_keys(&:to_sym)
+
+          attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+          attribute :expression, ::Pangea::Resources::Types::CloudflareFilterExpression
+          attribute :description, ::Pangea::Resources::Types::String.optional.default(nil)
+          attribute :ref, ::Pangea::Resources::Types::String.optional.default(nil)
+          attribute :paused, ::Pangea::Resources::Types::Bool.default(false)
+
+          # Computed properties
+          def is_active?
+            !paused
+          end
+
+          def is_paused?
+            paused
+          end
+
+          def has_description?
+            !description.nil?
+          end
+
+          def expression_length
+            expression.length
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/cloudflare_firewall_rule/resource.rb

@@ -0,0 +1,70 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_firewall_rule/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    # Cloudflare Firewall Rule resource module
+    module CloudflareFirewallRule
+      # Create a Cloudflare Firewall Rule with type-safe attributes
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] Firewall rule attributes
+      # @return [ResourceReference] Reference object with outputs and computed properties
+      def cloudflare_firewall_rule(name, attributes = {})
+        # Validate attributes using dry-struct
+        rule_attrs = Cloudflare::Types::FirewallRuleAttributes.new(attributes)
+
+        # Generate terraform resource block via terraform-synthesizer
+        resource(:cloudflare_firewall_rule, name) do
+          zone_id rule_attrs.zone_id
+          filter_id rule_attrs.filter_id
+          action rule_attrs.action
+          description rule_attrs.description if rule_attrs.description
+          priority rule_attrs.priority if rule_attrs.priority
+          paused rule_attrs.paused
+
+          # Add products for bypass action
+          if rule_attrs.products.any?
+            products rule_attrs.products
+          end
+        end
+
+        # Return resource reference with available outputs
+        ResourceReference.new(
+          type: 'cloudflare_firewall_rule',
+          name: name,
+          resource_attributes: rule_attrs.to_h,
+          outputs: {
+            id: "${cloudflare_firewall_rule.#{name}.id}"
+          }
+        )
+      end
+    end
+
+    # Extend Cloudflare module
+    module Cloudflare
+      include CloudflareFirewallRule
+    end
+  end
+end
+
+# Auto-register this module when it's loaded
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)

data/lib/pangea/resources/cloudflare_firewall_rule/types.rb

@@ -0,0 +1,64 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'dry-struct'
+require 'pangea/resources/types'
+
+module Pangea
+  module Resources
+    module Cloudflare
+      module Types
+        # Cloudflare Firewall Rule resource attributes with validation
+        class FirewallRuleAttributes < Dry::Struct
+          transform_keys(&:to_sym)
+
+          attribute :zone_id, ::Pangea::Resources::Types::CloudflareZoneId
+          attribute :filter_id, ::Pangea::Resources::Types::String
+          attribute :action, ::Pangea::Resources::Types::CloudflareFirewallAction
+          attribute :description, ::Pangea::Resources::Types::String.optional.default(nil)
+          attribute :priority, ::Pangea::Resources::Types::Integer.optional.default(nil)
+          attribute :paused, ::Pangea::Resources::Types::Bool.default(false)
+          attribute :products, ::Pangea::Resources::Types::Array.of(::Pangea::Resources::Types::String).default([].freeze)
+
+          # Computed properties
+          def is_active?
+            !paused
+          end
+
+          def is_blocking?
+            action == 'block'
+          end
+
+          def is_allowing?
+            action == 'allow'
+          end
+
+          def is_challenging?
+            %w[challenge js_challenge managed_challenge].include?(action)
+          end
+
+          def is_logging_only?
+            action == 'log'
+          end
+
+          def bypasses_products?
+            action == 'bypass' && products.any?
+          end
+        end
+      end
+    end
+  end
+end

data/lib/pangea/resources/cloudflare_healthcheck/resource.rb

@@ -0,0 +1,139 @@
+# frozen_string_literal: true
+# Copyright 2025 The Pangea Authors
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+
+require 'pangea/resources/base'
+require 'pangea/resources/reference'
+require 'pangea/resources/cloudflare_healthcheck/types'
+require 'pangea/resource_registry'
+
+module Pangea
+  module Resources
+    # Cloudflare Healthcheck resource module that self-registers
+    module CloudflareHealthcheck
+      # Create a Cloudflare standalone health check
+      #
+      # Monitors origin server health independent of load balancers.
+      # Perfect for monitoring, alerting, and visibility into origin health.
+      #
+      # @param name [Symbol] The resource name
+      # @param attributes [Hash] Health check attributes
+      # @option attributes [String] :zone_id Zone ID (required)
+      # @option attributes [String] :name Health check name (required)
+      # @option attributes [String] :address Hostname or IP to monitor (required)
+      # @option attributes [String] :type Check type: HTTPS, HTTP, TCP (default: HTTPS)
+      # @option attributes [Integer] :interval Check interval in seconds (30-3600, default: 60)
+      # @option attributes [Integer] :timeout Check timeout in seconds (1-10, default: 5)
+      # @option attributes [Integer] :retries Retries before unhealthy (0-5, default: 2)
+      # @option attributes [Integer] :consecutive_fails Failures to mark unhealthy
+      # @option attributes [Integer] :consecutive_successes Successes to mark healthy
+      # @option attributes [Array<String>] :check_regions Regions to check from
+      # @option attributes [Boolean] :notification_suspended Suspend notifications
+      # @option attributes [Array<String>] :notification_email_addresses Email addresses
+      # @option attributes [String] :description Description
+      # @option attributes [String] :path Path to check (HTTP/HTTPS)
+      # @option attributes [Integer] :port Port to check
+      # @option attributes [String] :method HTTP method (GET, HEAD)
+      # @option attributes [String] :expected_codes Expected HTTP codes
+      # @option attributes [String] :expected_body Expected body substring
+      # @option attributes [Boolean] :follow_redirects Follow redirects
+      # @option attributes [Boolean] :allow_insecure Allow insecure HTTPS
+      #
+      # @return [ResourceReference] Reference object with outputs
+      #
+      # @example Basic HTTPS health check
+      #   cloudflare_healthcheck(:api_health, {
+      #     zone_id: "023e105f4ecef8ad9ca31a8372d0c353",
+      #     name: "api-server-health",
+      #     address: "api.example.com",
+      #     type: "HTTPS"
+      #   })
+      #
+      # @example Advanced HTTP check with notifications
+      #   cloudflare_healthcheck(:web_health, {
+      #     zone_id: "023e105f4ecef8ad9ca31a8372d0c353",
+      #     name: "web-health-check",
+      #     address: "www.example.com",
+      #     type: "HTTP",
+      #     path: "/health",
+      #     method: "GET",
+      #     expected_codes: "200",
+      #     expected_body: "OK",
+      #     interval: 30,
+      #     notification_email_addresses: ["ops@example.com"]
+      #   })
+      #
+      # @example TCP health check
+      #   cloudflare_healthcheck(:db_health, {
+      #     zone_id: "023e105f4ecef8ad9ca31a8372d0c353",
+      #     name: "database-health",
+      #     address: "db.example.com",
+      #     type: "TCP",
+      #     port: 5432,
+      #     interval: 60
+      #   })
+      def cloudflare_healthcheck(name, attributes = {})
+        # Validate attributes using dry-struct
+        hc_attrs = Cloudflare::Types::HealthcheckAttributes.new(attributes)
+
+        # Generate terraform resource block via terraform-synthesizer
+        resource(:cloudflare_healthcheck, name) do
+          zone_id hc_attrs.zone_id
+          name hc_attrs.name
+          address hc_attrs.address
+          type hc_attrs.type
+          interval hc_attrs.interval if hc_attrs.interval
+          timeout hc_attrs.timeout if hc_attrs.timeout
+          retries hc_attrs.retries if hc_attrs.retries
+          consecutive_fails hc_attrs.consecutive_fails if hc_attrs.consecutive_fails
+          consecutive_successes hc_attrs.consecutive_successes if hc_attrs.consecutive_successes
+          check_regions hc_attrs.check_regions if hc_attrs.check_regions
+          notification_suspended hc_attrs.notification_suspended if hc_attrs.notification_suspended
+          notification_email_addresses hc_attrs.notification_email_addresses if hc_attrs.notification_email_addresses
+          description hc_attrs.description if hc_attrs.description
+          path hc_attrs.path if hc_attrs.path
+          port hc_attrs.port if hc_attrs.port
+          # method is a Kernel method, must use hash access and method_missing
+          method_missing(:method, hc_attrs[:method]) if hc_attrs[:method]
+          expected_codes hc_attrs.expected_codes if hc_attrs.expected_codes
+          expected_body hc_attrs.expected_body if hc_attrs.expected_body
+          follow_redirects hc_attrs.follow_redirects if hc_attrs.follow_redirects
+          allow_insecure hc_attrs.allow_insecure if hc_attrs.allow_insecure
+        end
+
+        # Return resource reference with available outputs
+        ResourceReference.new(
+          type: 'cloudflare_healthcheck',
+          name: name,
+          resource_attributes: hc_attrs.to_h,
+          outputs: {
+            id: "${cloudflare_healthcheck.#{name}.id}",
+            healthcheck_id: "${cloudflare_healthcheck.#{name}.id}",
+            status: "${cloudflare_healthcheck.#{name}.status}",
+            failure_reason: "${cloudflare_healthcheck.#{name}.failure_reason}"
+          }
+        )
+      end
+    end
+
+    # Maintain backward compatibility by extending Cloudflare module
+    module Cloudflare
+      include CloudflareHealthcheck
+    end
+  end
+end
+
+# Auto-register this module when it's loaded
+Pangea::ResourceRegistry.register_module(Pangea::Resources::Cloudflare)