---
- name: "📌 Define OIDC plugin paths"
  ansible.builtin.set_fact:
    JOOMLA_OIDC_PLUGIN_HOST_DIR: "{{ role_path }}/files/joomla-oidc-plugin"
    JOOMLA_OIDC_PLUGIN_BUILD_DIR: "/tmp/plg_system_keycloak"
    JOOMLA_OIDC_PLUGIN_ZIP: "/tmp/plg_system_keycloak.zip"

- name: "♻️ Reset plugin build dir inside Joomla container"
  ansible.builtin.shell: > # nocheck: container-exec-resolver  runtime-resolved CID, delegated to the hosting node
    container exec {{ JOOMLA_LOCAL_CID | quote }} rm -rf {{ JOOMLA_OIDC_PLUGIN_BUILD_DIR | quote }}
  changed_when: false
  failed_when: false
  delegate_to: "{{ JOOMLA_HOST_NODE }}"

- name: "📋 Stream plugin source into Joomla container"
  ansible.builtin.shell: > # nocheck: container-exec-resolver  runtime-resolved CID, delegated to the hosting node
    base64 -d | container exec -i {{ JOOMLA_LOCAL_CID | quote }}
    sh -c 'mkdir -p {{ JOOMLA_OIDC_PLUGIN_BUILD_DIR }} && tar -xzf - -C {{ JOOMLA_OIDC_PLUGIN_BUILD_DIR }}'
  args:
    stdin: "{{ lookup('pipe', 'tar -C ' ~ ((JOOMLA_OIDC_PLUGIN_HOST_DIR ~ '/plg_system_keycloak') | quote) ~ ' -czf - . | base64') }}"
  changed_when: true
  delegate_to: "{{ JOOMLA_HOST_NODE }}"

- name: "📦 composer install (vendor jumbojett/openid-connect-php inside container)"
  ansible.builtin.shell: >
    container exec
    -e COMPOSER_HOME=/tmp/composer-home
    -e COMPOSER_ALLOW_SUPERUSER=1
    {{ JOOMLA_LOCAL_CID | quote }} composer install
    --working-dir={{ JOOMLA_OIDC_PLUGIN_BUILD_DIR | quote }}
    --no-dev --no-interaction --no-progress --prefer-dist --optimize-autoloader
  changed_when: true
  delegate_to: "{{ JOOMLA_HOST_NODE }}"

- name: "✅ Ensure Joomla cache directories are writable by the web user" # nocheck: container-exec-resolver  runtime-resolved CID, delegated to the hosting node
  ansible.builtin.shell: "container exec {{ JOOMLA_LOCAL_CID | quote }} bash -lc 'mkdir -p /var/www/html/administrator/cache /var/www/html/cache /var/www/html/tmp
    && chown -R {{ JOOMLA_WEB_USER }}:{{ JOOMLA_WEB_USER }} /var/www/html/administrator/cache /var/www/html/cache /var/www/html/tmp && chmod -R u+rwX /var/www/html/administrator/cache
    /var/www/html/cache /var/www/html/tmp'"
  changed_when: false
  delegate_to: "{{ JOOMLA_HOST_NODE }}"

- name: "🗜️ Package plugin into a ZIP for Joomla CLI install"
  ansible.builtin.shell: >
    container exec -i
    -e J_ZIP={{ JOOMLA_OIDC_PLUGIN_ZIP | quote }}
    -e J_BUILD_DIR={{ JOOMLA_OIDC_PLUGIN_BUILD_DIR | quote }}
    {{ JOOMLA_LOCAL_CID | quote }} php --
  args:
    stdin: "{{ lookup('file', role_path ~ '/files/php/package_plugin.php') }}"
  changed_when: true
  delegate_to: "{{ JOOMLA_HOST_NODE }}"

- name: "📦 Install plg_system_keycloak via Joomla CLI"
  ansible.builtin.shell: > # nocheck: container-exec-resolver  runtime-resolved CID, delegated to the hosting node
    container exec --user {{ JOOMLA_WEB_USER | quote }} {{ JOOMLA_LOCAL_CID | quote }}
    php -d memory_limit={{ JOOMLA_PHP_MEMORY_LIMIT }} {{ JOOMLA_CLI_FILE | quote }}
    extension:install --path={{ JOOMLA_OIDC_PLUGIN_ZIP | quote }}
  register: plugin_install
  changed_when: "'Extension installed successfully' in plugin_install.stdout"
  failed_when:
    - plugin_install.rc != 0
    - plugin_install.stdout | default('') is not search('already')
  delegate_to: "{{ JOOMLA_HOST_NODE }}"

- name: "🔍 Resolve plg_system_keycloak extension ID" # nocheck: container-exec-resolver  runtime-resolved CID, delegated to the hosting node
  ansible.builtin.shell: "container exec --user {{ JOOMLA_WEB_USER }} {{ JOOMLA_LOCAL_CID | quote }} php -d memory_limit={{ JOOMLA_PHP_MEMORY_LIMIT }} {{ JOOMLA_CLI_FILE
    }} extension:list | awk '/plg_system_keycloak/ {print $2; exit}'"
  register: plugin_id_lookup
  changed_when: false
  failed_when: plugin_id_lookup.stdout | trim | length == 0
  delegate_to: "{{ JOOMLA_HOST_NODE }}"

- name: "🟢 Enable plg_system_keycloak via Joomla CLI"
  ansible.builtin.shell: > # nocheck: container-exec-resolver  runtime-resolved CID, delegated to the hosting node
    container exec --user {{ JOOMLA_WEB_USER | quote }} {{ JOOMLA_LOCAL_CID | quote }}
    php -d memory_limit={{ JOOMLA_PHP_MEMORY_LIMIT }} {{ JOOMLA_CLI_FILE | quote }}
    extension:enable {{ plugin_id_lookup.stdout | trim | quote }}
  register: plugin_enable
  changed_when: "'has been enabled' in plugin_enable.stdout or 'enabled successfully' in plugin_enable.stdout"
  failed_when:
    - plugin_enable.rc != 0
    - plugin_enable.stdout | default('') is not search('already')
  delegate_to: "{{ JOOMLA_HOST_NODE }}"