# Keyless replay counterpart of session-sandbox-root.cordis.yml. Patches do not
# compose across nested includes, so the replay swap and the deliberately
# distinct sandbox fallback are applied together to the live tree.
- id: base
  name: '@cordisjs/plugin-include'
  config:
    path: ./cordis.yml
    patches:
      - id: llm-deepseek
        name: '@deepseek-ai/dsh-llm-deepseek'
        disabled: true
      - id: sandbox
        name: '@deepseek-ai/dsh-sandbox-local'
        config:
          runnerCommand:
            - bash
            - -c
            - while [ "$1" != "--" ]; do shift; done; shift; exec "$@"
            - passthrough-runner
          runnerFailureSignatures:
            - 'passthrough-runner: profile rejected'
      - id: sandbox-policy
        name: '@deepseek-ai/dsh-sandbox-policy'
        config:
          mode: danger-full-access
          workspaceRoot: /tmp
      - insert:
          - id: llm-replay
            name: '@deepseek-ai/dsh-llm-replay'
            config:
              providers:
                - id: deepseek
                  name: DeepSeek
                  models:
                    - id: deepseek-v4-flash
                    - id: deepseek-v4-pro