JARVISandClaude Opus 5.5
be7d4a4378
Agents get `op` so op:// references resolve at command time and secret values stay out of prompts and transcripts. Installed per 1Password's apt instructions (signed-by keyring, debsig policy + keyring, 1password-cli), with the key fingerprint-checked before it is trusted; EL via their yum repo. multica_op_version pins, "" tracks the repo. Tag: multica_op. Optional, default-off hook writes OP_SERVICE_ACCOUNT_TOKEN from the playbook (ansible-vault) to a 0600 file owned by the daemon user. It is deliberately not wired into the daemon environment: the user unit belongs to the multica CLI, and the delivery design is pending. Rolled out with --tags multica_op to haunted-mansion and spaceship-earth; second run changed=0, op 2.41.1 as multica, debsig verifies the .deb. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
63 lines
1.7 KiB
YAML
63 lines
1.7 KiB
YAML
---
|
|
- name: Preflight
|
|
ansible.builtin.import_tasks: preflight.yml
|
|
# Prerequisite for every other block: always runs, even under a --tags subset.
|
|
tags: [always]
|
|
|
|
- name: Service account
|
|
ansible.builtin.import_tasks: user.yml
|
|
# Builds _multica_uid / _multica_user_env, which every later become_user task
|
|
# needs; creating an existing user is a no-op.
|
|
tags: [always]
|
|
|
|
- name: Workspaces root
|
|
ansible.builtin.import_tasks: workspaces_root.yml
|
|
tags: [multica, multica_workspaces]
|
|
|
|
- name: Node.js
|
|
ansible.builtin.import_tasks: node.yml
|
|
when: _multica_node_required | bool
|
|
tags: [multica, multica_node]
|
|
|
|
- name: Multica CLI
|
|
ansible.builtin.import_tasks: multica_cli.yml
|
|
tags: [multica, multica_cli]
|
|
|
|
- name: Agent CLIs
|
|
ansible.builtin.import_tasks: agent_clis.yml
|
|
tags: [multica, multica_agents]
|
|
|
|
- name: Claude Code settings
|
|
ansible.builtin.import_tasks: claude_settings.yml
|
|
when:
|
|
- "'claude' in multica_agent_clis"
|
|
- multica_claude_settings | length > 0
|
|
tags: [multica, multica_agents, multica_claude_settings]
|
|
|
|
- name: 1Password CLI
|
|
ansible.builtin.import_tasks: op_cli.yml
|
|
when: multica_op_install | bool
|
|
tags: [multica, multica_op]
|
|
|
|
- name: 1Password service account token
|
|
ansible.builtin.import_tasks: op_token.yml
|
|
when: multica_op_deliver_token | bool
|
|
tags: [multica, multica_op]
|
|
|
|
- name: CLI configuration
|
|
ansible.builtin.import_tasks: config.yml
|
|
tags: [multica, multica_config]
|
|
|
|
- name: Authentication
|
|
ansible.builtin.import_tasks: auth.yml
|
|
tags: [multica, multica_auth]
|
|
|
|
- name: Daemon
|
|
ansible.builtin.import_tasks: daemon.yml
|
|
tags: [multica, multica_daemon]
|
|
|
|
- name: Verify
|
|
ansible.builtin.import_tasks: verify.yml
|
|
when: multica_verify | bool
|
|
tags: [multica, multica_verify]
|