state

type Store struct {
	Dir string
}

type VMSpec struct {
	Name string `yaml:"name"` // hostname = guest name = terraform key = inventory name

	// Type discriminates the guest kind: "" or "vm" == QEMU VM (back-compat with
	// existing declarations that omit it); "lxc" == LXC container.
	Type string `yaml:"type,omitempty"`

	Node       string `yaml:"node"`
	VMID       int    `yaml:"vmid"`
	Template   string `yaml:"template"`    // human-readable template name
	TemplateID int    `yaml:"template_id"` // source VM id to clone (VMs only)
	Storage    string `yaml:"storage"`
	Bridge     string `yaml:"bridge"`

	// LXC-only fields (ignored for VMs).
	TemplateFile string `yaml:"template_file,omitempty"` // vztmpl volid, e.g. local:vztmpl/debian-12-standard_...tar.zst
	OSType       string `yaml:"os_type,omitempty"`       // bpg operating_system.type: debian|ubuntu|alpine|...
	Unprivileged bool   `yaml:"unprivileged,omitempty"`
	Nesting      bool   `yaml:"nesting,omitempty"`
	SwapMB       int    `yaml:"swap_mb,omitempty"`
	// HostManagedNet: PVE 9.1+ — Proxmox writes the container's network config
	// itself. Required for static-IP CTs there, where the bpg default
	// (host-managed=0) means nobody configures the interface and the guest boots
	// with no IP.
	HostManagedNet bool `yaml:"host_managed_net,omitempty"`

	// CPUType is the QEMU CPU model (VMs only — a container shares the host
	// kernel). Empty means the Terraform default, a portable baseline chosen so a
	// VM can live-migrate between nodes with different host CPUs. Worth overriding
	// per cluster: the default exposes AES but NOT PCLMULQDQ, and a binary compiled
	// to require it dies at startup with SIGILL. Proxmox won't let a single flag be
	// added on top of a model (its `flags` field only takes a security/virt subset),
	// so the whole model has to change — e.g. `EPYC` on an all-AMD cluster.
	CPUType string `yaml:"cpu_type,omitempty"`

	Plan     string `yaml:"plan,omitempty"` // preconfigured plan name (e.g. "KVM2"/"micro"), empty = custom
	Cores    int    `yaml:"cores"`
	MemoryGB int    `yaml:"memory_gb"`           // VM memory (GB)
	MemoryMB int    `yaml:"memory_mb,omitempty"` // LXC memory (MB); sub-GB tiers need this
	DiskGB   int    `yaml:"disk_gb"`

	DHCP    bool     `yaml:"dhcp"`
	IPCIDR  string   `yaml:"ip_cidr,omitempty"`
	Gateway string   `yaml:"gateway,omitempty"`
	DNS     []string `yaml:"dns,omitempty"`

	Username    string   `yaml:"username"`
	SSHKeys     []string `yaml:"ssh_keys,omitempty"` // public key contents
	HasPassword bool     `yaml:"has_password"`       // secret stored separately

	// Dotfiles exists only for legacy-YAML migration: dotfiles is an ordinary
	// software-catalog entry now, but declarations written before that still say
	// `dotfiles: true`. This field must stay so Store.Load can read them (yaml.v3
	// silently drops unknown keys, so removing it would lose the selection);
	// Store.Load migrates a legacy `dotfiles: true` into Software ("dotfiles") and
	// zeroes this, so all downstream code reads only Software, and omitempty keeps
	// it out of newly-written declarations.
	Dotfiles bool     `yaml:"dotfiles,omitempty"`
	Software []string `yaml:"software,omitempty"` // catalog keys, e.g. ["docker","node"]
}