opensearch

type Client struct {
	// contains filtered or unexported fields
}

type Config struct {
	// URL is the OpenSearch server URL (e.g., https://localhost:9200)
	URL string
	// Username for basic auth
	Username string
	// Password for basic auth
	Password string
	// InsecureSkipVerify skips TLS certificate verification (for development)
	InsecureSkipVerify bool
}

type IndexSettings struct {
	NumberOfShards   int32
	NumberOfReplicas int32
}

type PermissionTuple struct {
	// User is the subject of the permission (e.g., "user:alice" or "role:admin#assignee")
	User string `json:"user"`
	// Relation is the permission type (e.g., "member", "owner", "viewer")
	Relation string `json:"relation"`
	// Object is the target object (typically matches the document ID)
	Object string `json:"object"`
}

type ResourceDocument struct {
	// Core resource identification
	ID        string `json:"id"`        // Unique document ID
	Kind      string `json:"kind"`      // Resource kind
	Name      string `json:"name"`      // Resource name
	Namespace string `json:"namespace"` // Resource namespace

	// API version info
	APIGroup   string `json:"api_group"`
	APIVersion string `json:"api_version"`

	// PM context
	ClusterName      string `json:"cluster_name"`
	WorkspacePath    string `json:"workspace_path"`
	OrganizationID   string `json:"organization_id,omitempty"`
	OrganizationName string `json:"organization_name,omitempty"`
	AccountID        string `json:"account_id,omitempty"`
	AccountName      string `json:"account_name,omitempty"`

	// FGAObject is the unique FGA object name for this document
	FGAObject string `json:"fga_object,omitempty"`

	// OpenFGA Permission Tuples for this resource
	Permissions []PermissionTuple `json:"permissions,omitempty"`

	// Resource metadata
	Labels      map[string]string `json:"labels,omitempty"`
	Annotations map[string]string `json:"annotations,omitempty"`

	// Resource spec and status (arbitrary nested maps from the unstructured object)
	Spec   map[string]interface{} `json:"spec,omitempty"`
	Status map[string]interface{} `json:"status,omitempty"`

	// CustomFields holds fields from the unstructured resource that are listed in
	// the SearchIndex's DefaultFields. These are propagated directly from the resource.
	CustomFields map[string]any `json:"custom_fields,omitempty"`

	// Timestamps
	CreatedAt time.Time `json:"created_at,omitempty"`
	UpdatedAt time.Time `json:"updated_at"`

	// Full raw object payload serialized as JSON, stored but not indexed.
	PayloadRawJSON string `json:"payload_raw_json,omitempty"`

	// Full serialized object payload for full-text search.
	PayloadText string `json:"payload_text,omitempty"`
}

type WorkspaceDocument struct {
	// Core workspace/account fields
	ID   string `json:"id"`   // Document ID (typically the cluster name)
	Name string `json:"name"` // Human-readable name
	Type string `json:"type"` // "workspace", "account", or "organization"

	// KCP-specific fields
	ClusterName string `json:"cluster_name"` // Logical cluster name
	Path        string `json:"path"`         // Full path in the KCP hierarchy

	// Organization context (for permission scoping)
	OrganizationID   string `json:"organization_id,omitempty"`
	OrganizationName string `json:"organization_name,omitempty"`

	// Account context (if applicable)
	AccountID   string `json:"account_id,omitempty"`
	AccountName string `json:"account_name,omitempty"`

	// FGAObject is the unique FGA object name for this document (e.g. "core_platform-mesh_io_account:ID/name")
	FGAObject string `json:"fga_object,omitempty"`

	// OpenFGA Permission Tuples for this resource
	Permissions []PermissionTuple `json:"permissions,omitempty"`

	// Timestamps
	CreatedAt time.Time `json:"created_at,omitempty"`
	UpdatedAt time.Time `json:"updated_at"`

	// Additional metadata
	Labels      map[string]string `json:"labels,omitempty"`
	Annotations map[string]string `json:"annotations,omitempty"`
}