---
- name: Verify rendered Audita configuration
  hosts: localhost
  gather_facts: false
  tasks:
    - name: Read rendered configuration
      become: true
      ansible.builtin.slurp:
        src: /usr/local/etc/audita/config.yml
      register: audita_rendered_config_file

    - name: Check representative rendered configuration
      ansible.builtin.assert:
        that:
          - audita_rendered_config.version == 1
          - audita_rendered_config.pipeline.modules == ["glossary"]
          - audita_rendered_config.llm.proposal.base_url == "https://openrouter.ai/api/v1"
          - audita_rendered_config.llm.proposal.model == "openrouter/google/gemma-4-31b-it"
          - audita_rendered_config.llm.proposal.timeout == "10s"
          - audita_rendered_config.llm.proposal.max_retries == 0
          - audita_rendered_config.context.description == ""
          - audita_rendered_config.diagnostics.retention == "never"
          - audita_rendered_config.llm.validation is not defined
          - audita_rendered_config.output is not defined
          - audita_rendered_config.diagnostics.work_dir is not defined
      vars:
        audita_rendered_config: "{{ audita_rendered_config_file.content | b64decode | from_yaml }}"

    - name: Validate rendered configuration
      ansible.builtin.command:
        argv:
          - /usr/local/bin/audita
          - config
          - validate
          - --config
          - /usr/local/etc/audita/config.yml
      changed_when: false