v1alpha1

type ReferenceGrant struct {
	metav1.TypeMeta `json:",inline"`

	// metadata is a standard object metadata
	// +optional
	metav1.ObjectMeta `json:"metadata,omitzero"`

	// spec defines the desired state of ReferenceGrant
	// +required
	Spec ReferenceGrantSpec `json:"spec"`

	// status defines the observed state of ReferenceGrant
	// +optional
	Status ReferenceGrantStatus `json:"status,omitzero"`
}

type ReferenceGrantFrom struct {
	// Group is the API group of the referencing object (e.g., "bubustack.io").
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	Group string `json:"group"`

	// Kind is the Kubernetes kind of the referencing object (e.g., "StoryRun").
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	Kind string `json:"kind"`

	// Namespace is the namespace of the referencing object.
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	// +kubebuilder:validation:Pattern=^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
	Namespace string `json:"namespace"`
}

type ReferenceGrantList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitzero"`
	Items           []ReferenceGrant `json:"items"`
}

type ReferenceGrantSpec struct {
	// From lists which resources are allowed to reference into this namespace.
	// +kubebuilder:validation:MinItems=1
	From []ReferenceGrantFrom `json:"from"`

	// To lists the target resource kinds (and optionally names) that can be referenced.
	// +kubebuilder:validation:MinItems=1
	To []ReferenceGrantTo `json:"to"`
}

type ReferenceGrantStatus struct {

	// conditions represent the current state of the ReferenceGrant resource.
	// Each condition has a unique type and reflects the status of a specific aspect of the resource.
	//
	// Standard condition types include:
	// - "Available": the resource is fully functional
	// - "Progressing": the resource is being created or updated
	// - "Degraded": the resource failed to reach or maintain its desired state
	//
	// The status of each condition is one of True, False, or Unknown.
	// +listType=map
	// +listMapKey=type
	// +optional
	Conditions []metav1.Condition `json:"conditions,omitempty"`
}

type ReferenceGrantTo struct {
	// Group is the API group of the target object (e.g., "bubustack.io").
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=253
	Group string `json:"group"`

	// Kind is the Kubernetes kind of the target object (e.g., "Engram").
	// +kubebuilder:validation:Required
	// +kubebuilder:validation:MinLength=1
	// +kubebuilder:validation:MaxLength=63
	Kind string `json:"kind"`

	// Name optionally restricts the grant to a specific resource name.
	// +optional
	// +kubebuilder:validation:MaxLength=253
	// +kubebuilder:validation:Pattern=^[a-z0-9]([-a-z0-9]*[a-z0-9])?$
	Name *string `json:"name,omitempty"`
}