---
# Stage one adapter instance into a provider's own build context.
#
# An Ansible role cannot be instantiated twice with different variables, and a
# single shared adapter would end up holding every provider's credential.
# Providers therefore include this file and run the adapter as a sidecar inside
# their own stack, which also gives the network isolation for free: the
# instance joins only its provider's network.
#
# Staging deliberately notifies nothing, which takes an explicit empty list:
# render_replicated_templates falls back to ['compose up'] for any entry that
# names no handler. The front-proxy step inside
# sys-stk-full flushes handlers before the backend has rendered the
# provider's compose file, so a notification raised here fires a compose up
# against a project that has no compose.yml yet. rebuild.yml raises it once
# both the context and the compose file exist.
#
# Param: mcp_adapter_instance_dir build context to stage into.
# Param: mcp_adapter_upstream_key whether the sidecar reads a captured
# credential from an env file.
- name: "🔑 Prepare the upstream credential of {{ application_id }}"
when: mcp_adapter_upstream_key | default(false) | bool
block:
- name: "📁 Create the MCP build context of {{ application_id }}"
ansible.builtin.file:
path: "{{ mcp_adapter_instance_dir }}"
state: directory
mode: "0755"
delegate_to: "{{ STACK_HOST }}"
become: true
- name: "📄 Create the upstream credential file of {{ application_id }}"
ansible.builtin.copy:
content: ""
dest: "{{ [mcp_adapter_instance_dir, 'upstream.env'] | path_join }}"
mode: "0600"
force: false
delegate_to: "{{ STACK_HOST }}"
become: true
- name: "📦 Stage the MCP adapter build context for {{ application_id }}"
ansible.builtin.include_tasks:
file: "{{ lookup('path_absolute', 'roles/sys-svc-compose/tasks/utils/render_replicated_templates.yml') }}"
vars:
role_templates:
- src: "{{ lookup('path_absolute', 'roles/svc-ai-mcp-adapter/files/Dockerfile') }}"
dest: "{{ [mcp_adapter_instance_dir, 'Dockerfile'] | path_join }}"
mode: "0644"
notify: []
- src: "{{ lookup('path_absolute', 'roles/svc-ai-mcp-adapter/files/python/policy.py') }}"
dest: "{{ [mcp_adapter_instance_dir, 'policy.py'] | path_join }}"
mode: "0644"
notify: []
- src: "{{ lookup('path_absolute', 'roles/svc-ai-mcp-adapter/files/python/passthrough.py') }}"
dest: "{{ [mcp_adapter_instance_dir, 'passthrough.py'] | path_join }}"
mode: "0644"
notify: []
- src: "{{ lookup('path_absolute', 'roles/svc-ai-mcp-adapter/files/python/server.py') }}"
dest: "{{ [mcp_adapter_instance_dir, 'server.py'] | path_join }}"
mode: "0644"
notify: []
- src: "{{ lookup('path_absolute', 'roles/svc-ai-mcp-adapter/files/python/sse.py') }}"
dest: "{{ [mcp_adapter_instance_dir, 'sse.py'] | path_join }}"
mode: "0644"
notify: []
