"use strict";

Object.defineProperty(exports, "__esModule", {
  value: true
});
exports.getIdentifierRuntimeMapping = void 0;
/*
 * Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
 * or more contributor license agreements. Licensed under the Elastic License
 * 2.0; you may not use this file except in compliance with the Elastic License
 * 2.0.
 */

/**
 * Creates the `asset_identifier` runtime field with the value of either
 * `account.cloud.id` or `cluster.id` based on the value of `rule.benchmark.posture_type`
 */
const getIdentifierRuntimeMapping = () => ({
  asset_identifier: {
    type: 'keyword',
    script: {
      source: `
        def postureTypeAvailable = doc.containsKey("rule.benchmark.posture_type") &&
          !doc["rule.benchmark.posture_type"].empty;
        def orchestratorIdAvailable = doc.containsKey("orchestrator.cluster.id") &&
          !doc["orchestrator.cluster.id"].empty;

        if (!postureTypeAvailable) {
          def identifier = orchestratorIdAvailable ?
            doc["orchestrator.cluster.id"].value : doc["cluster_id"].value;
          emit(identifier);
        } else {
          def policy_template_type = doc["rule.benchmark.posture_type"].value;

          if (policy_template_type == "cspm") {
            emit(doc["cloud.account.id"].value);
          } else if (policy_template_type == "kspm") {
            def identifier = orchestratorIdAvailable ?
              doc["orchestrator.cluster.id"].value : doc["cluster_id"].value;
            emit(identifier);
          } else {
            // Default behaviour when policy_template_type is unknown
            def identifier = orchestratorIdAvailable ?
              doc["orchestrator.cluster.id"].value : doc["cluster_id"].value;
            emit(identifier);
          }
        }
      `
    }
  }
});
exports.getIdentifierRuntimeMapping = getIdentifierRuntimeMapping;