Merge pull request #8 from ai-workspace-infra/codex/fix-macos-native-deployment

[codex] Fix native macOS deployment

deploy_QMD.yml

@@ -9,3 +9,4 @@
   roles:
     - role: roles/vhosts/qmd/
       tags: [qmd]
+      when: ansible_os_family != "Darwin"

deploy_xworkmate_bridge_vhosts.yml

@@ -9,11 +9,16 @@
   roles:
     - role: roles/vhosts/acp_server_codex/
       tags: [acp_codex]
+      when: ansible_os_family != "Darwin"
     - role: roles/vhosts/acp_server_opencode/
       tags: [acp_opencode]
+      when: ansible_os_family != "Darwin"
     - role: roles/vhosts/acp_server_gemini/
       tags: [acp_gemini]
+      when: ansible_os_family != "Darwin"
     - role: roles/vhosts/acp_server_hermes/
       tags: [acp_hermes]
+      when: ansible_os_family != "Darwin"
     - role: roles/vhosts/xworkmate_bridge/
       tags: [xworkmate_bridge]
+      when: ansible_os_family != "Darwin"

roles/ai_agent_runtime/tasks/verify.yml

@@ -42,14 +42,18 @@
   register: ai_agent_runtime_pandoc_version
   changed_when: false
   check_mode: false
-  when: ai_agent_runtime_docs_enabled | bool
+  when:
+    - ansible_facts.os_family == "Debian"
+    - ai_agent_runtime_docs_enabled | bool
 
 - name: Check xelatex version
   ansible.builtin.command: xelatex --version
   register: ai_agent_runtime_xelatex_version
   changed_when: false
   check_mode: false
-  when: ai_agent_runtime_docs_enabled | bool
+  when:
+    - ansible_facts.os_family == "Debian"
+    - ai_agent_runtime_docs_enabled | bool
 
 - name: Check Chinese font inventory
   ansible.builtin.command: fc-list :lang=zh family
@@ -57,6 +61,7 @@
   changed_when: false
   check_mode: false
   when:
+    - ansible_facts.os_family == "Debian"
     - ai_agent_runtime_fonts_enabled | bool
     - ai_agent_runtime_verify_chinese_fonts | bool
 
@@ -66,6 +71,7 @@
       - ai_agent_runtime_chinese_fonts.stdout | length > 0
     fail_msg: "No Chinese fonts were discovered by fontconfig."
   when:
+    - ansible_facts.os_family == "Debian"
     - ai_agent_runtime_fonts_enabled | bool
     - ai_agent_runtime_verify_chinese_fonts | bool
 

roles/vhosts/gateway_openclaw/defaults/main.yml

@@ -37,7 +37,7 @@ gateway_openclaw_config_path: "{{ gateway_openclaw_home }}/.openclaw/openclaw.js
 gateway_openclaw_workspace_path: "{{ gateway_openclaw_home }}/.openclaw/workspace"
 gateway_openclaw_workspace_mode: "0775"
 gateway_openclaw_compile_cache_dir: /var/tmp/openclaw-compile-cache
-gateway_openclaw_service_path: "{{ gateway_openclaw_home }}/.nix-profile/bin:{{ gateway_openclaw_home }}/.local/bin:{{ gateway_openclaw_home }}/.npm-global/bin:{{ gateway_openclaw_home }}/bin:/usr/local/bin:/usr/bin:/bin"
+gateway_openclaw_service_path: "{{ gateway_openclaw_home }}/.nix-profile/bin:{{ gateway_openclaw_home }}/.local/bin:{{ gateway_openclaw_home }}/.npm-global/bin:{{ gateway_openclaw_home }}/bin:/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin:/usr/local/sbin:/usr/bin:/bin"
 gateway_openclaw_extension_backup_dir: "{{ gateway_openclaw_home }}/.openclaw/backups/extensions"
 
 gateway_openclaw_upstream_host: 127.0.0.1

roles/vhosts/gateway_openclaw/tasks/main.yml

@@ -18,11 +18,11 @@
       {{
         gateway_openclaw_gateway_token
         if (gateway_openclaw_gateway_token | trim | length > 0)
-        else (
+        else ((
           (
             gateway_openclaw_existing_config_raw.content | default('') | b64decode | from_json
           ).gateway.auth.token | default('')
-        )
+        ) if (gateway_openclaw_existing_config_raw.content | default('') | length > 0) else '')
       }}
   no_log: true
 

setup-ai-workspace-runtime.yml

@@ -27,3 +27,4 @@
   gather_facts: false
   roles:
     - role: roles/vhosts/validation
+      when: ansible_os_family | default("") != "Darwin"

setup-litellm.yaml

@@ -9,3 +9,4 @@
   roles:
     - role: roles/vhosts/litellm/
       tags: [litellm]
+      when: ansible_os_family != "Darwin"

setup-postgres-standalone.yaml

@@ -9,3 +9,4 @@
   roles:
     - role: roles/vhosts/postgres
       tags: [postgresql]
+      when: ansible_os_family != "Darwin"

setup-vault.yaml

@@ -9,3 +9,4 @@
   roles:
     - role: roles/vhosts/vault/
       tags: [vault]
+      when: ansible_os_family != "Darwin"

setup-xfce-xrdp.yaml

@@ -12,6 +12,7 @@
     - name: Include XFCE desktop runtime role
       ansible.builtin.include_role:
         name: roles/vhosts/xfce_desktop_minimal_runtime
+      when: ansible_os_family != "Darwin"
 
     - name: Include XRDP server role when enabled
       ansible.builtin.include_role:
@@ -23,4 +24,6 @@
         xfce_user_groups:
           - sudo
           - docker
-      when: xworkspace_console_enable_xrdp | bool
+      when:
+        - ansible_os_family != "Darwin"
+        - xworkspace_console_enable_xrdp | bool