Function normalize_endpoint_ports

crates/openshell-supervisor-network/src/opa.rs:770–812

Normalize endpoint port/ports in JSON data. YAML policies may use `port: N` (single) or `ports: [N, M]` (multi). This normalizes all endpoints to have a `ports` array so Rego rules only need to reference `endpoint.ports[_]`.

(data: &mut serde_json::Value)

/// This normalizes all endpoints to have a `ports` array so Rego rules
/// only need to reference `endpoint.ports[_]`.
fn normalize_endpoint_ports(data: &mut serde_json::Value) {
    let Some(policies) = data
        .get_mut("network_policies")
        .and_then(|v| v.as_object_mut())
    else {
        return;
    };

    for (_name, policy) in policies.iter_mut() {
        let Some(endpoints) = policy.get_mut("endpoints").and_then(|v| v.as_array_mut()) else {
            continue;
        };

        for ep in endpoints.iter_mut() {
            let Some(ep_obj) = ep.as_object_mut() else {
                continue;
            };

            // If "ports" already exists and is non-empty, keep it.
            let has_ports = ep_obj
                .get("ports")
                .and_then(|v| v.as_array())
                .is_some_and(|a| !a.is_empty());

            if !has_ports {
                // Promote scalar "port" to "ports" array.
                let port = ep_obj
                    .get("port")
                    .and_then(serde_json::Value::as_u64)
                    .unwrap_or(0);
                if port > 0 {
                    ep_obj.insert(
                        "ports".to_string(),
                        serde_json::Value::Array(vec![serde_json::json!(port)]),
                    );
                }
            }

            // Remove scalar "port" — Rego only uses "ports".
            ep_obj.remove("port");
        }
    }
}

fn normalize_l7_config_aliases(data: &mut serde_json::Value) -> Vec<String> {
    let mut errors = Vec::new();