---
# description: Update the Steward host agent (refresh agent.py, its units, the maintenance helper and its packages, then restart) on hosts already running it.
# steward:category: host-agent
# Update an already-installed Steward host agent: refresh agent.py, its systemd
# units and the maintenance helper (#5766), then restart.
#
# Deliberately does NOT touch the registration token or /etc/steward-agent.conf
# — the host already has a working token, so an update leaves identity alone and
# only swaps the agent binary. Connects as the managed `steward` account (set
# globally as the SSH user); no bootstrap password or token injection needed.
#
# For a fresh host with no agent, use provision.yml (new host) or install.yml
# (already-provisioned host) instead — those mint and install the token.
- name: Update Steward host agent
  hosts: all
  become: true
  gather_facts: false
  vars:
    steward_url: ""
  tasks:
    - name: Require steward_url
      ansible.builtin.assert:
        that:
          - steward_url | length > 0
        fail_msg: "Pass steward_url as an extra-var (the Update action sets it)."

    - name: Confirm the agent is already installed
      ansible.builtin.stat:
        path: /usr/local/lib/steward-agent/agent.py
      register: agent_file

    - name: Fail clearly if the agent is missing
      ansible.builtin.fail:
        msg: "No agent at /usr/local/lib/steward-agent — provision or install this host first."
      when: not agent_file.stat.exists

    - name: Refresh agent.py
      ansible.builtin.get_url:
        url: "{{ steward_url }}/plugins/host_agent/agent.py"
        dest: /usr/local/lib/steward-agent/agent.py
        mode: "0755"
        force: true
      notify: restart steward-agent

    # The units and the maintenance helper come from Steward: one copy for
    # install.sh and every playbook (#5766). The agent may write only its
    # request directory; the helper and its results stay root's.
    - name: Create the maintenance directories
      ansible.builtin.file:
        path: "{{ item.path }}"
        state: directory
        owner: "{{ item.owner }}"
        group: "{{ item.owner }}"
        mode: "{{ item.mode }}"
      loop:
        - {path: /var/lib/steward-agent, owner: root, mode: "0755"}
        - {path: /var/lib/steward-agent/requests, owner: steward-agent, mode: "0700"}
        - {path: /var/lib/steward-maint, owner: root, mode: "0755"}
        - {path: /var/lib/steward-maint/results, owner: root, mode: "0755"}

    - name: Download the maintenance helper
      ansible.builtin.get_url:
        url: "{{ steward_url }}/plugins/host_agent/files/maint.py"
        dest: /usr/local/lib/steward-agent/maint.py
        owner: root
        mode: "0755"
        force: true

    # The helper's packages (smartctl for drive health, #5789), with whichever
    # package manager the host has. One that can't be installed is said, never
    # fatal: the host page then reads "smartctl not installed".
    - name: Download the dependency installer
      ansible.builtin.get_url:
        url: "{{ steward_url }}/plugins/host_agent/files/install-deps.sh"
        dest: /usr/local/lib/steward-agent/install-deps.sh
        owner: root
        mode: "0755"
        force: true

    - name: Install the helper's packages
      ansible.builtin.command: /usr/local/lib/steward-agent/install-deps.sh
      register: helper_deps
      changed_when: "'installed:' in helper_deps.stdout"

    - name: Say what couldn't be installed
      ansible.builtin.debug:
        msg: "{{ helper_deps.stdout_lines | select('search', 'WARNING') | list }}"
      when: "'WARNING' in helper_deps.stdout"

    - name: Install the agent and maintenance units
      ansible.builtin.get_url:
        url: "{{ steward_url }}/plugins/host_agent/files/{{ item }}"
        dest: "/etc/systemd/system/{{ item }}"
        owner: root
        mode: "0644"
        force: true
      loop: [steward-agent.service, steward-maint.service, steward-maint.path]
      notify: restart steward-agent

    - name: Watch for maintenance requests
      ansible.builtin.systemd:
        name: steward-maint.path
        enabled: true
        state: started
        daemon_reload: true

  handlers:
    - name: restart steward-agent
      ansible.builtin.systemd:
        name: steward-agent
        state: restarted
        daemon_reload: true