---
- name: Validate provider_metrics output from agent360 (extracting JSON from noisy output)
  hosts: all
  gather_facts: false
  vars:
    expected_types:
      firewall_up: int
      http_response_code: int
      http_response_time_ms: float
      imunify360_and_fail2ban: int
      imunify360_license: int
      imunify360_services: int
      imunify360_underlicensed: int
      iptables_entries: int
      kcare_status: int
      litespeed_nginx_parallel: int
      litespeed_running_ok: int
      monitoring360_ip_dropped: int
      mysql_free_connections: int
      mysql_iptables_drop: int
      mysql_response_time_ms: float
      oom_kills_since_reboot: int
      queue_size: int
      ram_upgrade_required: int
      recent_oom_kills: int
      smtp_response_time_ms: float
      ssh_port_checksum_ok: int
      time_sync_enabled: int

  tasks:
    - name: Run agent360 test provider_metrics
      ansible.builtin.shell: |
        /usr/bin/agent360 test provider_metrics 2>&1
      register: metrics_output
      changed_when: false

    - name: DEBUG - Show raw command output
      ansible.builtin.debug:
        var: metrics_output.stdout

    - name: Extract JSON blob from output (first { to last } across lines)
      ansible.builtin.set_fact:
        json_blob: >-
          {{
            (
              metrics_output.stdout |
              regex_findall('\\{[\\s\\S]*\\}')
            ) | first | trim if (
              metrics_output.stdout |
              regex_findall('\\{[\\s\\S]*\\}') | length > 0
            ) else ''
          }}

    - name: DEBUG - Extracted JSON blob (may be empty)
      ansible.builtin.debug:
        var: json_blob

    - name: Fail if no JSON blob found
      ansible.builtin.fail:
        msg: |
          ❌ No JSON object found in agent360 output. Command may have failed or output format changed.
          Raw output:
          {{ metrics_output.stdout | indent(10) }}
      when: json_blob == ""

    - name: Parse extracted JSON
      ansible.builtin.set_fact:
        metrics_json: "{{ json_blob | from_json }}"
      ignore_errors: yes
      register: parse_result

    - name: Fail if JSON parsing failed
      ansible.builtin.fail:
        msg: |
          ❌ Extracted blob is not valid JSON:
          {{ json_blob }}
      when: parse_result is failed

    - name: Initialize list for type mismatches
      ansible.builtin.set_fact:
        type_mismatches: []

    - name: Check each key against expected type
      ansible.builtin.set_fact:
        type_mismatches: >-
          {{
            type_mismatches + [{
              'key': item,
              'expected': expected_types[item],
              'actual_type': metrics_json[item] | type_debug,
              'actual_value': metrics_json[item]
            }]
          }}
      when:
        - metrics_json[item] is defined
        - (expected_types[item] == 'int' and metrics_json[item] | type_debug != 'int') or
          (expected_types[item] == 'float' and metrics_json[item] | type_debug not in ['float', 'int'])
      loop: "{{ expected_types.keys() | list }}"

    - name: Display mismatches if any
      ansible.builtin.debug:
        msg: |
          ⚠️ Type mismatch found:
          Key: {{ item.key }}
          Expected: {{ item.expected }}
          Actual Type: {{ item.actual_type }}
          Actual Value: {{ item.actual_value | to_nice_json }}
      loop: "{{ type_mismatches }}"
      when: type_mismatches | length > 0
      loop_control:
        label: "{{ item.key }}"

    - name: Fail if any mismatches found
      ansible.builtin.fail:
        msg: "❌ Found {{ type_mismatches | length }} type mismatch(es) in provider_metrics output."
      when: type_mismatches | length > 0

    - name: Success message if all OK
      ansible.builtin.debug:
        msg: "✅ All metrics have correct types. Output is valid."
      when: type_mismatches | length == 0