mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 5
a423bde6cc
Every MCP role keeps its task tree under tasks/utils/ without numeric
prefixes, so a caller can reach any of them through include_role
tasks_from. utils/roles/mapping.py holds that path as the single source.
Ansible resolves a relative include against the including file's own
directory when that file was reached by path, but against tasks/ when it
was reached through tasks_from. The same file therefore loaded from its
own role and failed from a caller using tasks_from. Every nested include
now names {{ role_path }}/tasks/utils/..., which holds under both bases,
and a lint walks each tasks_from entrypoint transitively to keep it so.
The exec-gating lint learns the same form, otherwise it loses the include
chain and reports inherited IS_STACK_HOST gates as missing.
The expression resolving a provider's stored token appeared eighteen
times. plugins/lookup/mcp_credential.py replaces it, and mcp_probe_owner
disappears from eight roles: it was only ever a step towards the bearer
and no probe read it.
The Hermes and OpenClaw probes stop aborting the play while it is still
running. Roles deploy in dependency order, so a client probing during its
own role can run before a provider exists at all, and failing there
prevents that provider from ever deploying. The verdict moves to the
reconciliation pass, gated on MCP_RECONCILE_STRICT, which the reconciler
sets and group_vars declares so the readers need no default.
The sys-svc-mcp-reconcile role is added here; wiring it into a stage is a
separate change.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
23 lines
1.0 KiB
YAML
23 lines
1.0 KiB
YAML
---
|
|
- name: "🩺 Ask the MCP endpoint whether the stored app password authenticates"
|
|
ansible.builtin.shell: |
|
|
# nocheck: container-exec-resolver
|
|
container exec {{ NEXTCLOUD_PROXY_LOCAL_CID | quote }} \
|
|
{{ lookup('timeout', 30) | curl }} -o /dev/null -w '%{http_code}' -X POST \
|
|
-H 'Host: {{ NEXTCLOUD_DOMAIN }}' \
|
|
-H 'Authorization: Bearer {{ nextcloud_mcp_token }}' \
|
|
-H 'Accept: application/json, text/event-stream' \
|
|
-H 'Content-Type: application/json' \
|
|
--data '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-06-18","capabilities":{},"clientInfo":{"name":"infinito","version":"1"}}}' \
|
|
'http://127.0.0.1:{{ container_port }}{{ NEXTCLOUD_MCP_PATH }}'
|
|
args:
|
|
executable: /bin/bash
|
|
register: nextcloud_mcp_probe
|
|
retries: 30
|
|
delay: 10
|
|
until: nextcloud_mcp_probe.stdout in ['200', '401', '404']
|
|
changed_when: false
|
|
no_log: "{{ MASK_CREDENTIALS_IN_LOGS | bool }}"
|
|
delegate_to: "{{ NEXTCLOUD_PROXY_HOST_NODE }}"
|
|
run_once: true
|