feat: TargetNamespaced support in graph indexer (#30)

* feat: support TargetNamespaced in graph indexer for cluster-scoped targets

* test: add integration test for cluster-scoped target edges

* refactor: remove unused deferredEdges from graph engine

* chore: bump plugin-sdk to v0.4.0 for TargetNamespaced support

Author: joshuapare

backend/pkg/plugin/resource/graph/graph.go

@@ -15,7 +15,6 @@ type RelationshipGraph struct {
 	declarations  map[declMapKey][]resource.RelationshipDescriptor
 	pluginDecls   map[string][]declMapKey
 	selectorCache map[string]map[string]string
-	deferredEdges map[string][]deferredEdge
 	strings       *stringInterner
 }
 
@@ -26,7 +25,6 @@ func NewRelationshipGraph() *RelationshipGraph {
 		declarations:  make(map[declMapKey][]resource.RelationshipDescriptor),
 		pluginDecls:   make(map[string][]declMapKey),
 		selectorCache: make(map[string]map[string]string),
-		deferredEdges: make(map[string][]deferredEdge),
 		strings:       newStringInterner(),
 	}
 }

backend/pkg/plugin/resource/graph/graph_indexer.go

@@ -87,12 +87,17 @@ func (gi *GraphIndexer) extractFieldPath(source GraphNode, entry registry.Resour
 	}
 
 	for _, targetID := range targetIDs {
+		targetNS := entry.Namespace
+		if decl.TargetNamespaced != nil && !*decl.TargetNamespaced {
+			targetNS = ""
+		}
+
 		target := GraphNode{
 			PluginID:     entry.PluginID,
 			ConnectionID: entry.ConnectionID,
 			ResourceKey:  decl.TargetResourceKey,
 			ID:           targetID,
-			Namespace:    entry.Namespace,
+			Namespace:    targetNS,
 		}
 
 		// EdgeIncoming reverses edge direction (used for ownership)

backend/pkg/plugin/resource/graph/graph_indexer_test.go

@@ -381,3 +381,77 @@ func TestGraphIndexer_LabelSelector_LabelUpdateBreaksMatch(t *testing.T) {
 		t.Fatalf("expected 0 edges after pod label change, got %d: %v", len(edges), edges)
 	}
 }
+
+// TestGraphIndexer_FieldPath_ClusterScopedTarget — TargetNamespaced=false gives empty namespace.
+func TestGraphIndexer_FieldPath_ClusterScopedTarget(t *testing.T) {
+	g, _, idx := setupIndexer()
+
+	clusterScoped := false
+	g.SetDeclarations("k8s", "core::v1::Pod", []resource.RelationshipDescriptor{
+		{
+			Type:              resource.RelRunsOn,
+			TargetResourceKey: "core::v1::Node",
+			Label:             "runs on",
+			TargetNamespaced:  &clusterScoped,
+			Extractor: &resource.RelationshipExtractor{
+				Method:    "fieldPath",
+				FieldPath: "spec.nodeName",
+			},
+		},
+	})
+
+	pod := makeEntry("core::v1::Pod", "default", "nginx")
+	raw := json.RawMessage(`{"spec":{"nodeName":"worker-1"}}`)
+
+	idx.OnAdd(pod, raw)
+
+	podNode := GraphNode{
+		PluginID: "k8s", ConnectionID: "c1",
+		ResourceKey: "core::v1::Pod", ID: "nginx", Namespace: "default",
+	}
+	edges := g.EdgesFrom(podNode.Key())
+	if len(edges) != 1 {
+		t.Fatalf("expected 1 edge, got %d", len(edges))
+	}
+	e := edges[0]
+	if e.Target.Namespace != "" {
+		t.Errorf("expected empty namespace for cluster-scoped target, got %q", e.Target.Namespace)
+	}
+	if e.Target.ID != "worker-1" {
+		t.Errorf("expected target ID 'worker-1', got %q", e.Target.ID)
+	}
+}
+
+// TestGraphIndexer_FieldPath_NamespacedTargetDefault — nil TargetNamespaced inherits source namespace.
+func TestGraphIndexer_FieldPath_NamespacedTargetDefault(t *testing.T) {
+	g, _, idx := setupIndexer()
+
+	g.SetDeclarations("k8s", "core::v1::Pod", []resource.RelationshipDescriptor{
+		{
+			Type:              resource.RelUses,
+			TargetResourceKey: "core::v1::ConfigMap",
+			Label:             "uses",
+			Extractor: &resource.RelationshipExtractor{
+				Method:    "fieldPath",
+				FieldPath: "spec.volumes.0.configMap.name",
+			},
+		},
+	})
+
+	pod := makeEntry("core::v1::Pod", "production", "app-pod")
+	raw := json.RawMessage(`{"spec":{"volumes":[{"configMap":{"name":"app-config"}}]}}`)
+
+	idx.OnAdd(pod, raw)
+
+	podNode := GraphNode{
+		PluginID: "k8s", ConnectionID: "c1",
+		ResourceKey: "core::v1::Pod", ID: "app-pod", Namespace: "production",
+	}
+	edges := g.EdgesFrom(podNode.Key())
+	if len(edges) != 1 {
+		t.Fatalf("expected 1 edge, got %d", len(edges))
+	}
+	if edges[0].Target.Namespace != "production" {
+		t.Errorf("expected namespace 'production', got %q", edges[0].Target.Namespace)
+	}
+}

backend/pkg/plugin/resource/graph/types.go

@@ -56,12 +56,3 @@ type DependencyNode struct {
 	Edge     GraphEdge        `json:"edge"`
 	Children []DependencyNode `json:"children"`
 }
-
-type deferredEdge struct {
-	Source    GraphNode
-	Type      RelationshipType
-	Label     string
-	TargetKey string
-	TargetID  string
-	TargetNS  string
-}

backend/pkg/plugin/resource/graph_integration_test.go

@@ -168,6 +168,66 @@ func TestIntegration_OwnershipChain(t *testing.T) {
 	}
 }
 
+func TestIntegration_ClusterScopedTarget(t *testing.T) {
+	store := registry.NewMemoryStore()
+	g := graph.NewRelationshipGraph()
+	graphIdx := graph.NewGraphIndexer(g, store)
+	disp := indexer.NewDispatcher([]indexer.ResourceIndexer{graphIdx})
+	disp.Start()
+	defer disp.Stop()
+
+	ctrl, _ := newTestControllerWithEmitter(t)
+	ctrl.registryStore = store
+	ctrl.dispatcher = disp
+	ctrl.graph = g
+
+	sink := &engineWatchSink{
+		pluginID: "k8s", ctrl: ctrl,
+		store: store, dispatcher: disp,
+	}
+
+	clusterScoped := false
+	g.SetDeclarations("k8s", "core::v1::PersistentVolumeClaim", []sdkresource.RelationshipDescriptor{
+		{
+			Type:              sdkresource.RelUses,
+			TargetResourceKey: "core::v1::PersistentVolume",
+			Label:             "uses",
+			TargetNamespaced:  &clusterScoped,
+			Extractor: &sdkresource.RelationshipExtractor{
+				Method:    "fieldPath",
+				FieldPath: "spec.volumeName",
+			},
+		},
+	})
+
+	sink.OnAdd(sdkresource.WatchAddPayload{
+		Key: "core::v1::PersistentVolumeClaim", Connection: "c1",
+		ID: "data-pvc", Namespace: "default",
+		Metadata: sdkresource.ResourceMetadata{UID: "pvc-uid-1"},
+		Data:     json.RawMessage(`{"spec":{"volumeName":"pv-0001"}}`),
+	})
+
+	disp.Flush()
+
+	pvcNode := graph.GraphNode{
+		PluginID: "k8s", ConnectionID: "c1",
+		ResourceKey: "core::v1::PersistentVolumeClaim", ID: "data-pvc", Namespace: "default",
+	}
+	edges, err := g.GetRelated(pvcNode, graph.Outgoing, nil)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if len(edges) != 1 {
+		t.Fatalf("expected 1 edge, got %d", len(edges))
+	}
+	if edges[0].Target.Namespace != "" {
+		t.Errorf("expected empty namespace for PV target, got %q", edges[0].Target.Namespace)
+	}
+	if edges[0].Target.ID != "pv-0001" {
+		t.Errorf("expected target pv-0001, got %s", edges[0].Target.ID)
+	}
+}
+
 func TestIntegration_ConnectionTeardown(t *testing.T) {
 	store := registry.NewMemoryStore()
 	g := graph.NewRelationshipGraph()

go.mod

@@ -12,7 +12,7 @@ require (
 	github.com/hashicorp/go-hclog v1.6.3
 	github.com/hashicorp/go-plugin v1.7.0
 	github.com/nxadm/tail v1.4.11
-	github.com/omniviewdev/plugin-sdk v0.3.1
+	github.com/omniviewdev/plugin-sdk v0.4.0
 	github.com/omniviewdev/registry v0.2.1
 	github.com/stretchr/testify v1.11.1
 	github.com/tidwall/gjson v1.18.0

go.sum

@@ -131,8 +131,8 @@ github.com/nxadm/tail v1.4.11 h1:8feyoE3OzPrcshW5/MJ4sGESc5cqmGkGCWlco4l0bqY=
 github.com/nxadm/tail v1.4.11/go.mod h1:OTaG3NK980DZzxbRq6lEuzgU+mug70nY11sMd4JXXHc=
 github.com/oklog/run v1.1.0 h1:GEenZ1cK0+q0+wsJew9qUg/DyD8k3JzYsZAi5gYi2mA=
 github.com/oklog/run v1.1.0/go.mod h1:sVPdnTZT1zYwAJeCMu2Th4T21pA3FPOQRfWjQlk7DVU=
-github.com/omniviewdev/plugin-sdk v0.3.1 h1:VccZy6l8P05qay5Gut3NxgWr3xuFJidIC+qH8BT9bx0=
-github.com/omniviewdev/plugin-sdk v0.3.1/go.mod h1:7EL5BfctDEQdflClkZMhgvSAGkDff79UteN7rcuBUho=
+github.com/omniviewdev/plugin-sdk v0.4.0 h1:0W9HTWTUYHv5s0yhU6KpxcPdEqLG7JfpkNjcGDllXmA=
+github.com/omniviewdev/plugin-sdk v0.4.0/go.mod h1:7EL5BfctDEQdflClkZMhgvSAGkDff79UteN7rcuBUho=
 github.com/omniviewdev/registry v0.2.1 h1:4CsiBZmlftBZV/3LyQNiI2plRkMAqgFD8Q4zffFCVYk=
 github.com/omniviewdev/registry v0.2.1/go.mod h1:/IZABypY6iIaHo2Gw5g5Ll4SIbUhEm5/02spR/svl3Q=
 github.com/onsi/ginkgo/v2 v2.22.0 h1:Yed107/8DjTr0lKCNt7Dn8yQ6ybuDRQoMGrNFKzMfHg=