✨ Convert firewall network field to typed resource reference

network string → network() gcp.project.computeService.network
Enables MQL traversal like firewall.network.name instead of raw URL.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: tas50

providers/gcp/resources/compute.go

@@ -975,6 +975,18 @@ func (g *mqlGcpProjectComputeService) disks() ([]any, error) {
 	return res, result
 }
 
+type mqlGcpProjectComputeServiceFirewallInternal struct {
+	cacheNetworkUrl string
+}
+
+func (g *mqlGcpProjectComputeServiceFirewall) network() (*mqlGcpProjectComputeServiceNetwork, error) {
+	if g.cacheNetworkUrl == "" {
+		g.Network.State = plugin.StateIsNull | plugin.StateIsSet
+		return nil, nil
+	}
+	return getNetworkByUrl(g.cacheNetworkUrl, g.MqlRuntime)
+}
+
 func (g *mqlGcpProjectComputeServiceFirewall) id() (string, error) {
 	if g.Id.Error != nil {
 		return "", g.Id.Error
@@ -1098,13 +1110,13 @@ func (g *mqlGcpProjectComputeService) firewalls() ([]any, error) {
 				"denied":                llx.ArrayData(deniedDict, types.Dict),
 				"targetTags":            llx.ArrayData(convert.SliceAnyToInterface(firewall.TargetTags), types.String),
 				"loggingEnabled":        llx.BoolData(firewall.LogConfig != nil && firewall.LogConfig.Enable),
-				"network":               llx.StringData(firewall.Network),
 			})
 			if err != nil {
 				return err
-			} else {
-				res = append(res, mqlFirewall)
 			}
+			mqlFw := mqlFirewall.(*mqlGcpProjectComputeServiceFirewall)
+			mqlFw.cacheNetworkUrl = firewall.Network
+			res = append(res, mqlFirewall)
 		}
 		return nil
 	}); err != nil {

providers/gcp/resources/gcp.lr

@@ -1112,8 +1112,8 @@ private gcp.project.computeService.firewall @defaults("name") {
   targetTags []string
   // Whether firewall logging is enabled for this rule
   loggingEnabled bool
-  // URL of the network resource for this firewall rule
-  network string
+  // Network resource for this firewall rule
+  network() gcp.project.computeService.network
 }
 
 // Google Cloud (GCP) Compute VPC network resource