---
# ============================================================================
# Package baseline
# ============================================================================

- name: Update apt cache (Debian family)
  ansible.builtin.apt:
    update_cache: true
    cache_valid_time: 3600
  when: ansible_os_family == "Debian"

- name: Install baseline packages (common)
  ansible.builtin.package:
    name: "{{ baseline_packages_common }}"
    state: present

- name: Install baseline packages (OS family)
  ansible.builtin.package:
    name: "{{ baseline_packages_family }}"
    state: present

- name: Install baseline packages (host extras)
  ansible.builtin.package:
    name: "{{ baseline_packages_extra }}"
    state: present
  when: baseline_packages_extra | length > 0

- name: Perform full system upgrade (opt-in)
  ansible.builtin.package:
    name: "*"
    state: latest  # noqa package-latest - intentional under feature flag
  when: baseline_features.full_upgrade | bool