pangea 0.0.45 → 0.0.46

data/lib/pangea/resources/aws_codepipeline_webhook/resource.rb

@@ -1,94 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'pangea/resources/base'
-require 'pangea/resources/reference'
-require 'pangea/resources/aws_codepipeline_webhook/types'
-require 'pangea/resource_registry'
-
-module Pangea
-  module Resources
-    module AWS
-      # Create an AWS CodePipeline Webhook with type-safe attributes
-      #
-      # @param name [Symbol] The resource name
-      # @param attributes [Hash] CodePipeline webhook attributes
-      # @return [ResourceReference] Reference object with outputs and computed properties
-      def aws_codepipeline_webhook(name, attributes = {})
-        # Validate attributes using dry-struct
-        webhook_attrs = Types::CodePipelineWebhookAttributes.new(attributes)
-        
-        # Generate terraform resource block via terraform-synthesizer
-        resource(:aws_codepipeline_webhook, name) do
-          # Basic configuration
-          name webhook_attrs.name
-          target_pipeline webhook_attrs.target_pipeline
-          target_action webhook_attrs.target_action
-          authentication webhook_attrs.authentication
-          
-          # Authentication configuration
-          if webhook_attrs.authentication_configuration.any?
-            authentication_configuration do
-              secret_token webhook_attrs.authentication_configuration[:secret_token] if webhook_attrs.authentication_configuration[:secret_token]
-              allowed_ip_range webhook_attrs.authentication_configuration[:allowed_ip_range] if webhook_attrs.authentication_configuration[:allowed_ip_range]
-            end
-          end
-          
-          # Filters
-          webhook_attrs.filters.each do |filter_config|
-            filter do
-              json_path filter_config[:json_path]
-              match_equals filter_config[:match_equals] if filter_config[:match_equals]
-            end
-          end
-          
-          # Apply tags
-          if webhook_attrs.tags.any?
-            tags do
-              webhook_attrs.tags.each do |key, value|
-                public_send(key, value)
-              end
-            end
-          end
-        end
-        
-        # Return resource reference with available outputs
-        ResourceReference.new(
-          type: 'aws_codepipeline_webhook',
-          name: name,
-          resource_attributes: webhook_attrs.to_h,
-          outputs: {
-            id: "${aws_codepipeline_webhook.#{name}.id}",
-            arn: "${aws_codepipeline_webhook.#{name}.arn}",
-            url: "${aws_codepipeline_webhook.#{name}.url}"
-          },
-          computed: {
-            github_authentication: webhook_attrs.github_authentication?,
-            ip_authentication: webhook_attrs.ip_authentication?,
-            unauthenticated: webhook_attrs.unauthenticated?,
-            filter_count: webhook_attrs.filter_count,
-            has_secret: webhook_attrs.has_secret?,
-            filter_descriptions: webhook_attrs.filter_descriptions,
-            security_level: webhook_attrs.security_level
-          }
-        )
-      end
-    end
-  end
-end
-
-# Auto-register this module when it's loaded
-Pangea::ResourceRegistry.register(:aws, Pangea::Resources::AWS)

data/lib/pangea/resources/aws_codepipeline_webhook/types.rb

@@ -1,134 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'dry-struct'
-require 'pangea/resources/types'
-
-module Pangea
-  module Resources
-    module AWS
-      module Types
-      # Type-safe attributes for AWS CodePipeline Webhook resources
-      class CodePipelineWebhookAttributes < Dry::Struct
-        transform_keys(&:to_sym)
-
-        # Webhook name (required)
-        attribute :name, Resources::Types::String.constrained(
-          format: /\A[A-Za-z0-9][A-Za-z0-9\-_]*\z/,
-          min_size: 1,
-          max_size: 100
-        )
-
-        # Target pipeline (required)
-        attribute :target_pipeline, Resources::Types::String
-
-        # Target action (required)
-        attribute :target_action, Resources::Types::String
-
-        # Authentication type
-        attribute :authentication, Resources::Types::String.enum('GITHUB_HMAC', 'IP', 'UNAUTHENTICATED').default('GITHUB_HMAC')
-
-        # Authentication configuration
-        attribute :authentication_configuration, Resources::Types::Hash.schema(
-          secret_token?: Resources::Types::String.optional,
-          allowed_ip_range?: Resources::Types::String.optional
-        ).default({})
-
-        # Filters
-        attribute :filters, Resources::Types::Array.of(
-          Resources::Types::Hash.schema(
-            json_path: Resources::Types::String,
-            match_equals?: Resources::Types::String.optional
-          )
-        ).constrained(min_size: 1)
-
-        # Tags
-        attribute :tags, Resources::Types::AwsTags.default({})
-
-        # Custom validation
-        def self.new(attributes = {})
-          attrs = super(attributes)
-
-          # Validate authentication configuration
-          case attrs.authentication
-          when 'GITHUB_HMAC'
-            if attrs.authentication_configuration[:secret_token].nil?
-              raise Dry::Struct::Error, "GITHUB_HMAC authentication requires secret_token"
-            end
-          when 'IP'
-            if attrs.authentication_configuration[:allowed_ip_range].nil?
-              raise Dry::Struct::Error, "IP authentication requires allowed_ip_range"
-            end
-          when 'UNAUTHENTICATED'
-            if attrs.authentication_configuration.any?
-              raise Dry::Struct::Error, "UNAUTHENTICATED cannot have authentication_configuration"
-            end
-          end
-
-          # Validate filters have valid JSON paths
-          attrs.filters.each do |filter|
-            unless filter[:json_path].start_with?('$')
-              raise Dry::Struct::Error, "JSON path must start with '$': #{filter[:json_path]}"
-            end
-          end
-
-          attrs
-        end
-
-        # Helper methods
-        def github_authentication?
-          authentication == 'GITHUB_HMAC'
-        end
-
-        def ip_authentication?
-          authentication == 'IP'
-        end
-
-        def unauthenticated?
-          authentication == 'UNAUTHENTICATED'
-        end
-
-        def filter_count
-          filters.size
-        end
-
-        def has_secret?
-          authentication_configuration[:secret_token].present?
-        end
-
-        def filter_descriptions
-          filters.map do |filter|
-            if filter[:match_equals]
-              "#{filter[:json_path]} equals '#{filter[:match_equals]}'"
-            else
-              "#{filter[:json_path]} exists"
-            end
-          end
-        end
-
-        def security_level
-          case authentication
-          when 'GITHUB_HMAC' then 'High (HMAC signature)'
-          when 'IP' then 'Medium (IP allowlist)'
-          when 'UNAUTHENTICATED' then 'Low (no authentication)'
-          end
-        end
-      end
-    end
-      end
-    end
-  end
-end

data/lib/pangea/resources/aws_codepipeline_webhook.rbs

@@ -1,10 +0,0 @@
-# frozen_string_literal: true
-
-module Pangea
-  module Resources
-    module AWS
-      # Create AWS CodePipeline Webhook resource
-      def aws_codepipeline_webhook: (Symbol name, Hash[Symbol, untyped] attributes) -> ResourceReference
-    end
-  end
-end

data/lib/pangea/resources/aws_codestar_connection/CLAUDE.md

@@ -1,55 +0,0 @@
-# CodeStar Connection Resource Implementation
-
-This resource implements AWS CodeStar Connections for secure third-party source control provider integration with comprehensive validation and CI/CD integration patterns.
-
-## Key Features
-
-### Multi-Provider Support
-- **GitHub Cloud**: Native integration with GitHub.com repositories
-- **GitHub Enterprise**: Support for self-hosted GitHub Enterprise Server instances
-- **Bitbucket Cloud**: Integration with Bitbucket.org repositories
-- **GitLab**: Connection to GitLab.com repositories
-
-### CI/CD Integration
-- **CodePipeline Source**: Direct integration as source actions in CI/CD pipelines
-- **CodeBuild Projects**: Webhook-enabled builds triggered by repository events
-- **Automated Webhooks**: Automatic webhook configuration for event-driven workflows
-- **Branch Filtering**: Support for branch-based pipeline triggering
-
-### Security and Access Control
-- **OAuth Integration**: Secure OAuth-based authentication with source providers
-- **IAM Integration**: AWS IAM policies for connection usage permissions
-- **Connection Status Monitoring**: Built-in status tracking and alerting capabilities
-- **Scoped Access**: Granular permission scoping based on provider capabilities
-
-## Implementation Details
-
-### Provider Validation
-- Comprehensive provider type enumeration with supported values
-- Host ARN requirement validation for self-hosted providers
-- Host ARN exclusion validation for cloud providers
-- Connection name format validation according to AWS requirements
-
-### Provider Capabilities
-- Automatic detection of provider-specific features (webhooks, pull requests, etc.)
-- OAuth scope identification for proper authorization setup
-- Webhook filter type enumeration for event-driven architectures
-- Branch pattern recognition for common development workflows
-
-### Integration Analysis
-- Provider type classification (cloud vs self-hosted)
-- Feature support detection (webhooks, pull requests, etc.)
-- Cost analysis (connections are free, usage-based costs)
-- Configuration command generation for different scenarios
-
-## Source Control Integration Architecture
-
-This resource enables sophisticated source control integration architectures:
-
-1. **Multi-Provider Strategy**: Support for multiple source control providers within single infrastructure
-2. **Security Control**: OAuth-based secure authentication with fine-grained permission control
-3. **Event-Driven CI/CD**: Webhook-enabled automated build and deployment workflows
-4. **Enterprise Integration**: Support for both cloud and self-hosted source control systems
-5. **Team Collaboration**: Provider-specific connections for different teams or projects
-
-The resource supports both simple single-provider scenarios and complex multi-provider, multi-environment CI/CD architectures with sophisticated webhook and branch-based triggering strategies.

data/lib/pangea/resources/aws_codestar_connection/resource.rb

@@ -1,136 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'pangea/resources/base'
-require 'pangea/resources/reference'
-require 'pangea/resources/aws_codestar_connection/types'
-require 'pangea/resource_registry'
-
-module Pangea
-  module Resources
-    module AWS
-      # Create an AWS CodeStar Connection with type-safe attributes
-      #
-      # @param name [Symbol] The resource name
-      # @param attributes [Hash] CodeStar Connection attributes
-      # @option attributes [String] :name The name of the connection
-      # @option attributes [String] :provider_type The provider type (GitHub, Bitbucket, GitHubEnterpriseServer, GitLab)
-      # @option attributes [String] :host_arn The host ARN (required for GitHubEnterpriseServer)
-      # @option attributes [Hash] :tags Tags to apply to the connection
-      # @return [ResourceReference] Reference object with outputs and computed properties
-      #
-      # @example GitHub connection
-      #   github_conn = aws_codestar_connection(:github, {
-      #     name: "github-connection",
-      #     provider_type: "GitHub",
-      #     tags: {
-      #       Provider: "GitHub",
-      #       Usage: "ci-cd"
-      #     }
-      #   })
-      #
-      # @example Bitbucket connection
-      #   bitbucket_conn = aws_codestar_connection(:bitbucket, {
-      #     name: "bitbucket-connection",
-      #     provider_type: "Bitbucket",
-      #     tags: {
-      #       Provider: "Bitbucket",
-      #       Team: "development"
-      #     }
-      #   })
-      #
-      # @example GitHub Enterprise Server connection
-      #   github_enterprise = aws_codestar_connection(:github_enterprise, {
-      #     name: "github-enterprise-connection",
-      #     provider_type: "GitHubEnterpriseServer",
-      #     host_arn: github_host.arn,
-      #     tags: {
-      #       Provider: "GitHubEnterprise",
-      #       Environment: "production"
-      #     }
-      #   })
-      #
-      # @example GitLab connection
-      #   gitlab_conn = aws_codestar_connection(:gitlab, {
-      #     name: "gitlab-connection",
-      #     provider_type: "GitLab", 
-      #     tags: {
-      #       Provider: "GitLab",
-      #       Usage: "source-control"
-      #     }
-      #   })
-      def aws_codestar_connection(name, attributes = {})
-        # Validate attributes using dry-struct
-        conn_attrs = Types::Types::CodeStarConnectionAttributes.new(attributes)
-        
-        # Generate terraform resource block via terraform-synthesizer
-        resource(:aws_codestar_connections_connection, name) do
-          # Connection name
-          name conn_attrs.name
-          
-          # Provider type
-          provider_type conn_attrs.provider_type
-          
-          # Host ARN for self-hosted providers
-          host_arn conn_attrs.host_arn if conn_attrs.host_arn
-          
-          # Apply tags if present
-          if conn_attrs.tags.any?
-            tags do
-              conn_attrs.tags.each do |key, value|
-                public_send(key, value)
-              end
-            end
-          end
-        end
-        
-        # Return resource reference with available outputs
-        ResourceReference.new(
-          type: 'aws_codestar_connections_connection',
-          name: name,
-          resource_attributes: conn_attrs.to_h,
-          outputs: {
-            arn: "${aws_codestar_connections_connection.#{name}.arn}",
-            connection_status: "${aws_codestar_connections_connection.#{name}.connection_status}",
-            name: "${aws_codestar_connections_connection.#{name}.name}",
-            provider_type: "${aws_codestar_connections_connection.#{name}.provider_type}",
-            host_arn: "${aws_codestar_connections_connection.#{name}.host_arn}",
-            tags_all: "${aws_codestar_connections_connection.#{name}.tags_all}"
-          },
-          computed_properties: {
-            is_github_cloud: conn_attrs.is_github_cloud?,
-            is_github_enterprise: conn_attrs.is_github_enterprise?,
-            is_bitbucket_cloud: conn_attrs.is_bitbucket_cloud?,
-            is_gitlab: conn_attrs.is_gitlab?,
-            is_cloud_provider: conn_attrs.is_cloud_provider?,
-            is_self_hosted_provider: conn_attrs.is_self_hosted_provider?,
-            requires_host_arn: conn_attrs.requires_host_arn?,
-            supports_webhooks: conn_attrs.supports_webhooks?,
-            supports_pull_requests: conn_attrs.supports_pull_requests?,
-            webhook_filter_types: conn_attrs.webhook_filter_types,
-            default_branch_patterns: conn_attrs.default_branch_patterns,
-            oauth_scopes: conn_attrs.oauth_scopes,
-            estimated_monthly_cost: conn_attrs.estimated_monthly_cost,
-            connection_url_template: conn_attrs.connection_url_template
-          }
-        )
-      end
-    end
-  end
-end
-
-# Auto-register this module when it's loaded
-Pangea::ResourceRegistry.register(:aws, Pangea::Resources::AWS)

data/lib/pangea/resources/aws_codestar_connection/types.rb

@@ -1,191 +0,0 @@
-# frozen_string_literal: true
-# Copyright 2025 The Pangea Authors
-#
-# Licensed under the Apache License, Version 2.0 (the "License");
-# you may not use this file except in compliance with the License.
-# You may obtain a copy of the License at
-#
-#     http://www.apache.org/licenses/LICENSE-2.0
-#
-# Unless required by applicable law or agreed to in writing, software
-# distributed under the License is distributed on an "AS IS" BASIS,
-# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-# See the License for the specific language governing permissions and
-# limitations under the License.
-
-
-require 'dry-struct'
-require 'pangea/resources/types'
-
-module Pangea
-  module Resources
-    module AWS
-      module Types
-        # CodeStar Connection resource attributes with validation
-        class CodeStarConnectionAttributes < Dry::Struct
-          transform_keys(&:to_sym)
-          
-          # Required attributes
-          attribute :name, Resources::Types::String
-          attribute :provider_type, Resources::Types::String.enum(
-            'Bitbucket', 
-            'GitHub', 
-            'GitHubEnterpriseServer',
-            'GitLab'
-          )
-          
-          # Optional attributes
-          attribute :host_arn, Resources::Types::String.optional.default(nil)
-          attribute :tags, Resources::Types::AwsTags
-          
-          # Validate attributes
-          def self.new(attributes)
-            attrs = attributes.is_a?(Hash) ? attributes : {}
-            
-            # Validate connection name
-            if attrs[:name]
-              name = attrs[:name]
-              unless name.match?(/^[a-zA-Z0-9][a-zA-Z0-9\-_]{0,31}$/)
-                raise Dry::Struct::Error, "name must be 1-32 characters, start with alphanumeric, contain only letters, numbers, hyphens, underscores"
-              end
-              
-              if name.length < 1 || name.length > 32
-                raise Dry::Struct::Error, "name must be between 1 and 32 characters"
-              end
-            end
-            
-            # Validate host_arn requirement for GitHub Enterprise Server
-            if attrs[:provider_type] == 'GitHubEnterpriseServer'
-              unless attrs[:host_arn]
-                raise Dry::Struct::Error, "host_arn is required when provider_type is GitHubEnterpriseServer"
-              end
-            end
-            
-            # Validate host_arn format if provided
-            if attrs[:host_arn] && !attrs[:host_arn].empty?
-              host_arn = attrs[:host_arn]
-              unless host_arn.match?(/^arn:aws[a-z\-]*:codestar-connections:/) || host_arn.match?(/^\$\{/)
-                raise Dry::Struct::Error, "host_arn must be a valid CodeStar Connections host ARN or terraform reference"
-              end
-            end
-            
-            # Validate host_arn not used with cloud providers
-            if attrs[:host_arn] && %w[GitHub Bitbucket GitLab].include?(attrs[:provider_type])
-              raise Dry::Struct::Error, "host_arn should not be specified for cloud-based providers (#{attrs[:provider_type]})"
-            end
-            
-            super(attrs)
-          end
-          
-          # Computed properties
-          def is_github_cloud?
-            provider_type == 'GitHub'
-          end
-          
-          def is_github_enterprise?
-            provider_type == 'GitHubEnterpriseServer'
-          end
-          
-          def is_bitbucket_cloud?
-            provider_type == 'Bitbucket'
-          end
-          
-          def is_gitlab?
-            provider_type == 'GitLab'
-          end
-          
-          def is_cloud_provider?
-            %w[GitHub Bitbucket GitLab].include?(provider_type)
-          end
-          
-          def is_self_hosted_provider?
-            %w[GitHubEnterpriseServer].include?(provider_type)
-          end
-          
-          def requires_host_arn?
-            is_self_hosted_provider?
-          end
-          
-          def supports_webhooks?
-            true  # All providers support webhooks
-          end
-          
-          def supports_pull_requests?
-            true  # All providers support pull requests
-          end
-          
-          def webhook_filter_types
-            case provider_type
-            when 'GitHub', 'GitHubEnterpriseServer'
-              %w[PUSH PULL_REQUEST_CREATED PULL_REQUEST_UPDATED PULL_REQUEST_MERGED]
-            when 'Bitbucket'
-              %w[PUSH PULL_REQUEST_CREATED PULL_REQUEST_UPDATED PULL_REQUEST_MERGED]
-            when 'GitLab'
-              %w[PUSH PULL_REQUEST_CREATED PULL_REQUEST_UPDATED PULL_REQUEST_MERGED]
-            else
-              []
-            end
-          end
-          
-          def default_branch_patterns
-            case provider_type
-            when 'GitHub', 'GitHubEnterpriseServer'
-              ['main', 'master', 'develop']
-            when 'Bitbucket'
-              ['main', 'master', 'develop']
-            when 'GitLab'
-              ['main', 'master', 'develop']
-            else
-              ['main']
-            end
-          end
-          
-          def oauth_scopes
-            case provider_type
-            when 'GitHub', 'GitHubEnterpriseServer'
-              ['repo', 'read:user', 'user:email']
-            when 'Bitbucket'
-              ['account', 'repositories']
-            when 'GitLab'
-              ['read_user', 'read_repository', 'read_api']
-            else
-              []
-            end
-          end
-          
-          def estimated_monthly_cost
-            # CodeStar Connections are free, but consider pipeline usage
-            0.0
-          end
-          
-          def connection_url_template
-            case provider_type
-            when 'GitHub'
-              'https://github.com'
-            when 'GitHubEnterpriseServer'
-              '${var.github_enterprise_url}'
-            when 'Bitbucket'
-              'https://bitbucket.org'
-            when 'GitLab'
-              'https://gitlab.com'
-            else
-              'unknown'
-            end
-          end
-          
-          def to_h
-            hash = {
-              name: name,
-              provider_type: provider_type,
-              tags: tags
-            }
-            
-            hash[:host_arn] = host_arn if host_arn
-            
-            hash.compact
-          end
-        end
-      end
-    end
-  end
-end