models.go

package cloudflare

import (
	"encoding/json"
	"fmt"
	"net/netip"
	"strings"
	"time"

	"github.com/libdns/libdns"
)

type cfZone struct {
	ID                  string    `json:"id"`
	Name                string    `json:"name"`
	DevelopmentMode     int       `json:"development_mode"`
	OriginalNameServers []string  `json:"original_name_servers"`
	OriginalRegistrar   string    `json:"original_registrar"`
	OriginalDnshost     string    `json:"original_dnshost"`
	CreatedOn           time.Time `json:"created_on"`
	ModifiedOn          time.Time `json:"modified_on"`
	ActivatedOn         time.Time `json:"activated_on"`
	Account             struct {
		ID   string `json:"id"`
		Name string `json:"name"`
	} `json:"account"`
	Permissions []string `json:"permissions"`
	Plan        struct {
		ID           string `json:"id"`
		Name         string `json:"name"`
		Price        int    `json:"price"`
		Currency     string `json:"currency"`
		Frequency    string `json:"frequency"`
		LegacyID     string `json:"legacy_id"`
		IsSubscribed bool   `json:"is_subscribed"`
		CanSubscribe bool   `json:"can_subscribe"`
	} `json:"plan"`
	PlanPending struct {
		ID           string `json:"id"`
		Name         string `json:"name"`
		Price        int    `json:"price"`
		Currency     string `json:"currency"`
		Frequency    string `json:"frequency"`
		LegacyID     string `json:"legacy_id"`
		IsSubscribed bool   `json:"is_subscribed"`
		CanSubscribe bool   `json:"can_subscribe"`
	} `json:"plan_pending"`
	Status      string   `json:"status"`
	Paused      bool     `json:"paused"`
	Type        string   `json:"type"`
	NameServers []string `json:"name_servers"`
}

type cfDNSRecord struct {
	ID         string    `json:"id,omitempty"`
	Type       string    `json:"type,omitempty"`
	Name       string    `json:"name,omitempty"`
	Content    string    `json:"content,omitempty"`
	Priority   uint16    `json:"priority,omitempty"`
	Proxiable  bool      `json:"proxiable,omitempty"`
	Proxied    bool      `json:"proxied,omitempty"`
	TTL        int       `json:"ttl,omitempty"` // seconds
	Locked     bool      `json:"locked,omitempty"`
	ZoneID     string    `json:"zone_id,omitempty"`
	ZoneName   string    `json:"zone_name,omitempty"`
	CreatedOn  time.Time `json:"created_on,omitempty"`
	ModifiedOn time.Time `json:"modified_on,omitempty"`
	Data       struct {
		// LOC
		LatDegrees    int    `json:"lat_degrees,omitempty"`
		LatMinutes    int    `json:"lat_minutes,omitempty"`
		LatSeconds    int    `json:"lat_seconds,omitempty"`
		LatDirection  string `json:"lat_direction,omitempty"`
		LongDegrees   int    `json:"long_degrees,omitempty"`
		LongMinutes   int    `json:"long_minutes,omitempty"`
		LongSeconds   int    `json:"long_seconds,omitempty"`
		LongDirection string `json:"long_direction,omitempty"`
		Altitude      int    `json:"altitude,omitempty"`
		Size          int    `json:"size,omitempty"`
		PrecisionHorz int    `json:"precision_horz,omitempty"`
		PrecisionVert int    `json:"precision_vert,omitempty"`

		// SRV, HTTPS
		Service  string `json:"service,omitempty"`
		Proto    string `json:"proto,omitempty"`
		Name     string `json:"name,omitempty"`
		Priority uint16 `json:"priority,omitempty"`
		Weight   uint16 `json:"weight,omitempty"`
		Port     uint16 `json:"port,omitempty"`
		Target   string `json:"target,omitempty"`

		// CAA, SRV, HTTPS
		Value string `json:"value,omitempty"`

		// CAA
		Tag string `json:"tag"`

		// CAA, DNSKEY
		Flags *int `json:"flags,omitempty"`
		// DNSKEY
		Protocol  int `json:"protocol,omitempty"`
		Algorithm int `json:"algorithm,omitempty"`

		// DS
		KeyTag     int `json:"key_tag,omitempty"`
		DigestType int `json:"digest_type,omitempty"`

		// TLSA
		Usage        int `json:"usage,omitempty"`
		Selector     int `json:"selector,omitempty"`
		MatchingType int `json:"matching_type,omitempty"`

		// URI
		Content string `json:"content,omitempty"`
	} `json:"data,omitempty"`
	Meta *struct {
		AutoAdded    bool   `json:"auto_added,omitempty"`
		Source       string `json:"source,omitempty"`
		EmailRouting bool   `json:"email_routing,omitempty"`
		ReadOnly     bool   `json:"read_only,omitempty"`
	} `json:"meta,omitempty"`
}

// ensureTrailingDot adds a trailing dot if not present
func ensureTrailingDot(s string) string {
	if s != "" && !strings.HasSuffix(s, ".") {
		return s + "."
	}
	return s
}

func (r cfDNSRecord) libdnsRecord(zone string) (libdns.Record, error) {
	name := libdns.RelativeName(r.Name, zone)
	ttl := time.Duration(r.TTL) * time.Second
	switch r.Type {
	case "A", "AAAA":
		addr, err := netip.ParseAddr(r.Content)
		if err != nil {
			return libdns.Address{}, fmt.Errorf("invalid IP address %q: %v", r.Content, err)
		}
		return libdns.Address{
			Name: name,
			TTL:  ttl,
			IP:   addr,
		}, nil
	case "CAA":
		// NOTE: CAA records from Cloudflare have a `r.Content` that can be
		// parsed by [libdns.RR.Parse], but all the data we need is already sent
		// to us in a structured format by Cloudflare, so we use that instead.
		flags := uint8(0)
		if r.Data.Flags != nil {
			flags = uint8(*r.Data.Flags)
		}
		return libdns.CAA{
			Name:  name,
			TTL:   ttl,
			Flags: flags,
			Tag:   r.Data.Tag,
			Value: r.Data.Value,
		}, nil
	case "CNAME":
		// Cloudflare treats all CNAME targets as FQDNs and adds trailing dots during DNS resolution.
		// We need to add the trailing dot here to match what actually gets resolved in DNS.
		target := ensureTrailingDot(r.Content)
		return libdns.CNAME{
			Name:   name,
			TTL:    ttl,
			Target: target,
		}, nil
	case "MX":
		target := ensureTrailingDot(r.Content)
		return libdns.MX{
			Name:       name,
			TTL:        ttl,
			Preference: r.Priority,
			Target:     target,
		}, nil
	case "NS":
		target := ensureTrailingDot(r.Content)
		return libdns.NS{
			Name:   name,
			TTL:    ttl,
			Target: target,
		}, nil
	case "SRV":
		// NOTE: Cloudflare's Content field for SRV records is incomplete - it only contains
		// "weight port target" and omits the priority field. We construct the complete
		// data string from structured fields and use libdns's built-in parsing.
		target := ensureTrailingDot(r.Data.Target)
		data := fmt.Sprintf("%d %d %d %s", r.Data.Priority, r.Data.Weight, r.Data.Port, target)

		// Use libdns's built-in parsing
		rr := libdns.RR{
			Name: name,
			TTL:  ttl,
			Type: "SRV",
			Data: data,
		}
		return rr.Parse()
	case "TXT":
		// unwrap the quotes from the content
		unwrappedContent := unwrapContent(r.Content)
		return libdns.TXT{
			Name: name,
			TTL:  ttl,
			Text: unwrappedContent,
		}, nil
	// NOTE: HTTPS records from Cloudflare have a `r.Content` that can be
	// parsed by [libdns.RR.Parse] so that is what we do here. While we are
	// provided with structured data, it still requires a bit of parsing
	// that would end up duplicating the code from libdns anyways.
	// case "HTTPS", "SVCB":
	// 	fallthrough
	default:
		return libdns.RR{
			Name: name,
			TTL:  ttl,
			Type: r.Type,
			Data: r.Content,
		}.Parse()
	}
}

func cloudflareRecord(r libdns.Record) (cfDNSRecord, error) {
	// Super annoyingly, the Cloudflare API says that a "Content"
	// field can contain the record data as a string, and that the
	// individual component fields are optional (this would be
	// ideal so we don't have to parse every single record type
	// into a separate struct, we can just submit the Content
	// string like what the RR struct has for us); yet when I try
	// to submit records using the Content field, I get errors
	// saying that the individual data components are required,
	// despite the docs saying they're optional.
	// So, instead of a 5-line function, we have a much bigger
	// more complicated and error prone function here.
	// And of course there's no real good venue to file a bug report:
	// https://community.cloudflare.com/t/creating-srv-record-with-content-string-instead-of-individual-component-fields/781178?u=mholt
	rr := r.RR()
	content := rr.Data
	// Cloudflare API is inconsistent with trailing dots:
	// - It ACCEPTS targets with trailing dots when creating
	// - It RETURNS targets with trailing dots when fetching
	// - But it DOESN'T MATCH them for deletion if we send trailing dots
	// So we must strip them when sending to the API
	if rr.Type == "CNAME" || rr.Type == "NS" || rr.Type == "MX" {
		content = strings.TrimSuffix(content, ".")
	}
	cfRec := cfDNSRecord{
		// ID:   r.ID,
		Name:    rr.Name,
		Type:    rr.Type,
		TTL:     int(rr.TTL.Seconds()),
		Content: content,
	}
	switch rec := r.(type) {
	case libdns.CAA:
		flags := int(rec.Flags)
		cfRec.Data.Flags = &flags
		cfRec.Data.Tag = rec.Tag
		cfRec.Data.Value = rec.Value
		// Use RR().Data which properly formats the content field
		cfRec.Content = rec.RR().Data
	case libdns.MX:
		cfRec.Priority = rec.Preference
		// Content should be just the target, not include priority
		// Must strip trailing dot for Cloudflare API
		cfRec.Content = strings.TrimSuffix(rec.Target, ".")
	case libdns.SRV:
		cfRec.Data.Service = "_" + rec.Service
		cfRec.Data.Priority = rec.Priority
		cfRec.Data.Weight = rec.Weight
		cfRec.Data.Proto = "_" + rec.Transport
		cfRec.Data.Name = rec.Name
		cfRec.Data.Port = rec.Port
		cfRec.Data.Target = rec.Target
		// Use the RR.Name() which already constructs the proper format
		cfRec.Name = rec.RR().Name
		// Note: We don't set Content field for SRV as Cloudflare uses structured data fields
		// and doesn't seem to support content.exact filtering for SRV records anyway
		// for the same reason we can avoid dealing with dots in Target
	case libdns.ServiceBinding:
		// Get the RR representation which handles name construction
		rr := rec.RR()
		cfRec.Name = rr.Name
		cfRec.Type = rr.Type // This will be either "HTTPS" or "SVCB"
		cfRec.Data.Priority = rec.Priority
		cfRec.Data.Target = rec.Target
		cfRec.Data.Value = rec.Params.String()
		// Note: We don't set Content field for HTTPS/SVCB as Cloudflare uses structured data fields
		// and doesn't seem to support content.exact filtering for these record types anyway
		// for the same reason we can avoid dealing with dots in Target
	}
	if rr.Type == "CNAME" && strings.HasSuffix(cfRec.Content, ".cfargotunnel.com") {
		cfRec.Proxied = true
	}
	if rr.Type == "TXT" {
		// wrap the content in quotes
		cfRec.Content = wrapContent(cfRec.Content)
	}
	return cfRec, nil
}

// All API responses have this structure.
type cfResponse struct {
	Result  json.RawMessage `json:"result,omitempty"`
	Success bool            `json:"success"`
	Errors  []struct {
		Code       int    `json:"code"`
		Message    string `json:"message"`
		ErrorChain []struct {
			Code    int    `json:"code"`
			Message string `json:"message"`
		} `json:"error_chain,omitempty"`
	} `json:"errors,omitempty"`
	Messages   []any         `json:"messages,omitempty"`
	ResultInfo *cfResultInfo `json:"result_info,omitempty"`
}

type cfResultInfo struct {
	Page       int `json:"page"`
	PerPage    int `json:"per_page"`
	Count      int `json:"count"`
	TotalCount int `json:"total_count"`
}