model

type ReasonDetails struct {
	ReasonCode  string   `json:"reason_code,omitempty"`
	Action      string   `json:"action,omitempty"`
	MissingKeys []string `json:"missing_keys,omitempty"`
}

type Resource struct {
	Type string `json:"type"`
	// AltTypes are other resource types that may manage the same object,
	// such as the type's name in an older provider version or in another
	// provider for the same platform. State under any of them counts.
	AltTypes []string `json:"alt_types,omitempty"`
	// AltIdentity overrides Identity for an alternative type whose state
	// keys the same object differently.
	AltIdentity map[string]map[string]any `json:"-"`
	Identity    map[string]any            `json:"identity"`
	DisplayName string                    `json:"display_name"`
	// BaseName, when set, is the object's own name where DisplayName adds
	// to it ("web" for "web (pve1)"): import addresses and ignore rules by
	// name use it.
	BaseName string `json:"-"`
	// TagName is the object's Name tag, read for adopt -names-from-tags:
	// it names the import address before BaseName and DisplayName.
	TagName string `json:"-"`
	// ScopeName says for people where the object lives: "zone example.com",
	// "project my-project".
	ScopeName string `json:"scope,omitempty"`
	// Target says, without secrets, where the object was found when the
	// source has no scope of its own: the host (and port) of the Vault or
	// Proxmox server. A baseline never calls a finding known when it came
	// from another target.
	Target string `json:"target,omitempty"`
	// ImportID is an optional legacy import ID. When set, generated import
	// blocks use `id` instead of `identity`.
	ImportID string `json:"import_id"`
	// RequiredKeys lists identity attributes that must be present and equal
	// in state for the resource to count as managed. Nil means all keys.
	RequiredKeys []string `json:"-"`
	// AttributeKeys are the RequiredKeys that are also resource attributes,
	// checked against state that has no identity; nil means the primary
	// keys are derived from RequiredKeys (or "id", or all keys).
	AttributeKeys []string `json:"-"`
	// Provider is the local provider name used to list the resource, when it
	// is not implied by the type prefix (import blocks then need it).
	Provider string `json:"provider"`
	// ProviderSource is the address of the provider that listed the
	// resource (registry.terraform.io/hashicorp/aws), "" when unknown (a
	// plugin that does not say). State of another provider never manages
	// it, except under AltTypes.
	ProviderSource string `json:"provider_source"`
	// UndeclaredProvider is the provider address when the root module does
	// not declare the provider at all (only child modules do).
	UndeclaredProvider string `json:"undeclared_provider"`
	// ImportNote is a comment for the resource's import block.
	ImportNote string `json:"-"`
	// Attributes are the resource's attributes that were asked for
	// (-include-attrs, or attr. conditions of ignore rules).
	Attributes map[string]any `json:"attributes,omitempty"`
	// ListAddress is the list block that found it (terraform query only).
	ListAddress string `json:"list_address"`
	// Scope restricts which state instances may manage the object, for
	// providers whose state does not record where an object lives (the
	// Proxmox cluster). Nil means no restriction.
	Scope *Scope `json:"-"`
	// Source is the root module directory or plugin that reported it.
	Source   string `json:"source"`
	Baseline string `json:"baseline,omitempty"`
}

type ResponseError struct{ Err error }

type Scope struct {
	// Attrs maps resource types to the state attribute holding the
	// location, such as a Proxmox node.
	Attrs map[string]string
	// Values are the locations of the scanned place (its nodes).
	Values map[string]bool
	// Unverifiable marks objects whose state carries no location at all.
	Unverifiable bool
	// Trusted is the user's statement that every state given belongs to
	// the scanned place. Locations in state only rule instances out (a node
	// the place does not have); they cannot prove that an instance belongs,
	// since node names repeat across clusters. Without Trusted, matches are
	// unverified.
	Trusted bool
	// Also is the scope of another copy of the same object (JoinScope):
	// both must hold.
	Also *Scope
}