#!/usr/bin/env bash
# =============================================================================
#  run_once_00-install-bootstrap-tools.sh.tmpl
#  Install age, curl, ca-certificates, git — needed before anything else.
#  Idempotent: skips if already installed.
# =============================================================================
set -euo pipefail

log() { printf '\033[1;34m[bootstrap]\033[0m %s\n' "$*"; }
die() { printf '\033[1;31m[bootstrap ERROR]\033[0m %s\n' "$*" >&2; exit 1; }

[[ "$(id -u)" -ne 0 ]] && die "must run as root or via sudo"

{{ if eq .os_family "arch" -}}
log "pacman-sync"
pacman -Sy --noconfirm

log "install base tools (arch)"
PACMAN_PKGS=(age curl ca-certificates git base-devel wget)
pacman -S --needed --noconfirm "${PACMAN_PKGS[@]}"

{{ else if eq .os_family "debian" -}}
export DEBIAN_FRONTEND=noninteractive
log "apt-update"
apt-get update -y
log "apt-upgrade"
apt-get upgrade -y

log "install base tools (debian)"
APT_PKGS=(age curl ca-certificates git wget gnupg)
apt-get install -y --no-install-recommends "${APT_PKGS[@]}"

{{ else -}}
die "unsupported os_family: {{ .os_family }} (this script supports arch or debian)"
{{ end -}}

log "bootstrap tools installed"
command -v age && age --version
command -v git && git --version