deepseek-harness/examples/acp-agent/image-text-route.cordis.snapshot.yml

# Keyless replay for the read-image refusal scenario: identical to the
# image.cordis.snapshot.yml overlay except the replay catalog leaves flash
# text-only, so the strict read_image gate refuses and no image ever enters
# the durable log.
- id: base
  name: '@deepseek-ai/cordis-plugin-include'
  config:
    path: ./cordis.yml
    patches:
      - id: llm-deepseek
        name: '@deepseek-ai/dsh-llm-deepseek'
        disabled: true
      - id: acp-agent
        name: '@deepseek-ai/dsh-acp-demo'
        config:
          provider: deepseek-official
          model: deepseek-v4-flash
          persistenceRoot: !!js process.env.DSH_SNAPSHOT_SESSIONS_ROOT ?? './.sessions'
          persistenceCompression: none
          workspaceContext:
            maxBytes: 65536
          persona: |
            You are a coding assistant powered by the {{model}} model. Your working directory is {{cwd}}. Your bash tool runs under a file sandbox — a `[sandbox: file access denied …]` result is policy, not a command bug.

            Verify your work by running the code or tests. Keep answers brief and factual.
      - insert:
          - id: attachment-local
            name: '@deepseek-ai/dsh-attachment-local'
          - id: llm-replay
            name: '@deepseek-ai/dsh-llm-replay'
            config:
              providers:
                - id: deepseek-official
                  name: DeepSeek
                  models:
                    - id: deepseek-v4-flash
                      inputModalities: [text]
                    - id: deepseek-v4-pro
                      inputModalities: [text]