---
- name: Ensure core workstation development tools are installed
  community.general.pacman:
    name:
      # Build essentials
      - git
      - base-devel
      # CLI tools (infra.standards.md §4)
      - ripgrep
      - ripgrep-all
      - fd
      - jq
      - bat
      - eza
      - zoxide
      - fzf
      - gum
      - dust
      - bottom
      - scrot
      - shellcheck
      - shfmt
      # Git providers CLI
      - github-cli
      - tea
      - glab
      # Python toolchain
      - ruff
      - uv
      # DevOps & IaC
      - ansible
      - terraform
      - docker
      - docker-buildx
      - docker-compose
      - podman
      - cmake
      # Security & supply chain
      - cosign
      - syft
      - trivy
      - certbot
      # Container inspection
      - dive
      # Email CLI
      - himalaya
      # Document toolchain (markdown-to-pdf skill)
      - typst
      - pandoc
      # WordPress CLI
      - wp-cli
      # C/C++ toolchain (cpp skill)
      - clang
      # CalDAV tools (caldav-webcal skill)
      - khal
      - vdirsyncer
      # 3D/CAD tools (openscad, freecad, f3d skills)
      - openscad
      - freecad
      - f3d
      # Terminal
      - kitty
    state: present

- name: Ensure Node.js global CLI tools are installed
  become: true
  become_user: "{{ system_user }}"
  command: pnpm add -g @marp-team/marp-cli
  changed_when: false
  tags: [nodejs, marp]

- name: Ensure Python CLI tools are installed via pipx
  become: true
  become_user: "{{ system_user }}"
  command: "pipx install {{ item }}"
  loop:
    - semgrep
    - huggingface_hub[cli]
  changed_when: false
  tags: [python, pipx]

- name: Ensure redundant and non-core software is removed
  community.general.pacman:
    name:
      - firefox-developer-edition
      - audacity
      - kdenlive
      - obs-studio
      - shotcut
      - qgis
      - tipp10
      - xournalpp
      - bleachbit
      - reiserfsprogs
      - dmraid
      - onlyoffice-desktopeditors
      - virt-manager
      - guvcview
      - helvum
      - qpwgraph
      - glmark2
      - act-git
      - oha
      - unetbootin
      - ventoy
    state: absent

- name: Ensure legacy editor packages are removed
  community.general.pacman:
    name:
      - code
      - code-oss
      - code-marketplace
    state: absent

- name: Configure Chrome flags for WebGPU
  copy:
    dest: "/home/{{ system_user }}/.config/chrome-flags.conf"
    content: |
      --enable-unsafe-webgpu
      --enable-vulkan
      --enable-features=Vulkan
      --ignore-gpu-blocklist
    owner: "{{ system_user }}"
    group: "{{ system_user }}"
    mode: '0644'
  tags: [chrome, webgpu]