---
# roles/pfsense_upgrade/tasks/main.yml

- name: Include pre-flight checks
  ansible.builtin.import_tasks: preflight.yml
  tags: [always, preflight, check]

- name: Include version detection
  ansible.builtin.import_tasks: version_detect.yml
  tags: [always, check]

- name: Include update check
  ansible.builtin.import_tasks: update_check.yml
  tags: [always, check]

# --- CARP/HA PRE-UPGRADE LOGIC (before upgrade) ---
- name: Include CARP/HA pre-upgrade logic
  ansible.builtin.import_tasks: carp.yml
  tags: [always, check, carp]
  when: 
    - ha_peer is defined
    - ha_peer | length > 0

# --- UPGRADE EXECUTION ---
- name: Include upgrade execution
  ansible.builtin.import_tasks: upgrade.yml
  tags: [upgrade]
  when: 
    - perform_upgrade | bool
    - upgrade_available | bool

# --- CARP/HA POST-UPGRADE RESTORE (after upgrade) ---
- name: Include CARP/HA post-upgrade restore
  ansible.builtin.import_tasks: carp.yml
  tags: [upgrade, carp]
  when:
    - ha_peer is defined
    - ha_peer | length > 0
    - perform_upgrade | bool

- name: Include post-upgrade verification
  ansible.builtin.import_tasks: verify.yml
  tags: [upgrade, verify]
  when: perform_upgrade | bool