---
- name: Require explicit confirmation and selected services
  ansible.builtin.assert:
    that:
      - service_reconcile_confirm | bool
      - service_reconcile_targets | length > 0
    fail_msg: >-
      This operation can recreate containers. Supply
      service_reconcile_confirm=true and a non-empty
      service_reconcile_targets list after reviewing the change.

- name: Require a host-specific reconciliation policy
  ansible.builtin.assert:
    that:
      - service_reconcile_services is defined
    fail_msg: "No reconciliation policy is defined for {{ inventory_hostname }}."

- name: Validate selected services are allowed on this host
  ansible.builtin.assert:
    that:
      - item in service_reconcile_services
    fail_msg: "{{ item }} is not an allowed reconciliation target on {{ inventory_hostname }}."
  loop: "{{ service_reconcile_targets }}"

- name: Validate optional Traefik restart scope
  ansible.builtin.assert:
    that:
      - >-
        not (service_reconcile_restart_traefik | bool) or
        (service_reconcile_targets
         | select('in', service_reconcile_traefik_restart_targets | default([]))
         | list | length > 0)
    fail_msg: >-
      Traefik may only be restarted as the explicit post-reconcile action for
      an inventory-approved service on this host.

- name: Reconcile approved Compose services
  ansible.builtin.command:
    argv: >-
      {{ ['docker', 'compose', '--project-directory', compose_project_dir, 'up', '-d']
         + service_reconcile_services[item].compose_args
         + ([] if item == 'all' else [item]) }}
  loop: "{{ service_reconcile_targets }}"
  register: service_reconcile_result
  changed_when: true
  loop_control:
    label: "{{ item }}"

- name: Restart Traefik after approved reconciliation when requested
  ansible.builtin.command:
    argv: [docker, restart, traefik]
  when: service_reconcile_restart_traefik | bool
  changed_when: true

- name: Report reconciled Compose state
  ansible.builtin.command:
    argv:
      - docker
      - compose
      - --project-directory
      - "{{ compose_project_dir }}"
      - ps
      - --all
  changed_when: false
  register: service_reconcile_ps

- name: Display reconciled Compose state
  ansible.builtin.debug:
    var: service_reconcile_ps.stdout_lines