---
# The WebUI bundle (a JMAP "Application" record) is staged locally in 00_core;
# point the record's resourceUrl at that file:// path and re-unpack.

- name: "📖 List Stalwart Application records"
  include_tasks: jmap_call.yml
  vars:
    stalwart_jmap_body: "{{ STALWART_JMAP_APPLICATION_GET }}"

- name: "🔍 Resolve the WebUI Application record"
  ansible.builtin.set_fact:
    stalwart_webui_apps: >-
      {{ stalwart_jmap.methodResponses[0][1].list
         | selectattr('description', 'equalto', STALWART_WEBUI_APP_DESCRIPTION)
         | list }}

- name: "✅ Ensure the WebUI Application record was found"
  ansible.builtin.assert:
    that:
      - stalwart_webui_apps | length > 0
    fail_msg: >-
      No Stalwart Application record with description
      '{{ STALWART_WEBUI_APP_DESCRIPTION }}' among the records this Stalwart
      reports:
      {{ stalwart_jmap.methodResponses[0][1].list | map(attribute='description') | list }}
    quiet: true

- name: "🔍 Resolve the WebUI Application id"
  ansible.builtin.set_fact:
    stalwart_webui_app_id: "{{ stalwart_webui_apps[0].id }}"

- name: "📖 List Stalwart OAuth clients"
  include_tasks: jmap_call.yml
  vars:
    stalwart_jmap_body: "{{ lookup('template', 'jmap/oauth_client/get.json.j2') }}"

- name: "🔍 Resolve the WebUI OAuth client"
  ansible.builtin.set_fact:
    stalwart_webui_oauth_client: "{{ lookup('template', 'jmap/oauth_client/webui.json.j2') | from_json }}"
    stalwart_webui_oauth_clients: >-
      {{ stalwart_jmap.methodResponses[0][1].list
         | selectattr('clientId', 'equalto', STALWART_WEBUI_OAUTH_CLIENT_ID)
         | list }}
  vars:
    stalwart_webui_url_prefixes: "{{ stalwart_webui_apps[0].urlPrefix | list }}"

- name: "📁 Register the WebUI OAuth client"
  include_tasks: jmap_call.yml
  vars:
    stalwart_jmap_body: "{{ lookup('template', 'jmap/oauth_client/create.json.j2') }}"
  when: stalwart_webui_oauth_clients | length == 0

- name: "🔄 Align the WebUI OAuth client with the origin the WebUI is served from"
  include_tasks: jmap_call.yml
  vars:
    stalwart_jmap_body: "{{ lookup('template', 'jmap/oauth_client/update.json.j2') }}"
  when:
    - stalwart_webui_oauth_clients | length > 0
    - >-
      (stalwart_webui_oauth_clients[0] | dict2items
       | selectattr('key', 'in', stalwart_webui_oauth_client) | items2dict)
      != stalwart_webui_oauth_client

- name: "🔗 Point the WebUI Application at the locally-staged bundle and its OAuth client"
  include_tasks: jmap_call.yml
  vars:
    stalwart_jmap_body: >-
      {{ {'using': ['urn:ietf:params:jmap:core', 'urn:stalwart:jmap'],
          'methodCalls': [['x:Application/set',
            {'update': {stalwart_webui_app_id: {'resourceUrl': STALWART_WEBUI_LOCAL_URL,
                                                'oauthClientId': STALWART_WEBUI_OAUTH_CLIENT_ID}}},
            'c0']]} | to_json }}

- name: "📦 Unpack the WebUI bundle from the local file"
  include_tasks: jmap_call.yml
  vars:
    stalwart_jmap_body: >-
      {{ {'using': ['urn:ietf:params:jmap:core', 'urn:stalwart:jmap'],
          'methodCalls': [['x:Action/set',
            {'create': {'a': {'@type': 'UpdateApps'}}},
            'c0']]} | to_json }}

- name: "🔧 Verify the WebAdmin is served after unpack"
  ansible.builtin.shell: >-
    container exec -i {{ STALWART_CONTAINER_ADDRESS }}
    {{ 30 | curl }} -sS -o /dev/null -w "%{http_code}" {{ STALWART_LOCAL_BASE_URL }}/
  register: stalwart_webui_probe
  changed_when: false
  retries: 6
  delay: 5
  until: stalwart_webui_probe.stdout in ['200', '301', '302']