deepseek-harness/examples/headless-agent/subagent-inheritance.cordis.snapshot.yml

# Keyless real-Loader composition for the parent-only override inheritance
# snapshot. The deployment default stays WIDE (workspace-write) while the
# seeded parent session carries a session-scoped read-only override; the
# resumed parent delegates, and only the inheritance capture can confine the
# child — remove it and the child writes successfully under the deployment
# default, so this scenario is the assembled-app red/green anchor for the
# delegation bypass.

- id: persistence
  name: '@deepseek-ai/dsh-session-persistence-jsonl'
  config:
    root: './.sessions'
    compression: none

# file/override/childFiles all default to their DSH_SNAPSHOT_* env vars.
- id: replay
  name: '@deepseek-ai/dsh-llm-replay'

# The confining filesystem stack: the wide deployment default lives on the
# shared policy home; the seeded parent's read-only override must beat it
# INSIDE the child for the scenario to deny.
- id: sandbox-policy
  name: '@deepseek-ai/dsh-sandbox-policy'
  config:
    mode: workspace-write
    workspaceRoot: !!js process.cwd()

- id: fs-sandbox
  name: '@deepseek-ai/dsh-fs-sandbox'

- id: fs-policy
  name: '@deepseek-ai/dsh-fs-policy'

- id: tool-fs
  name: '@deepseek-ai/dsh-tool-fs'

# This scenario probes filesystem confinement only, so the bash stack is absent:
# without it the bundle's `toolBash: false` is required, because `tool-bash` would
# otherwise wait forever for a `bash` executor this tree never mounts.
- id: agent
  name: '@deepseek-ai/dsh-agent-spine-demo'
  config:
    agents: []
    workspaceContext: false
    skills:
      enabled: false
    toolBash: false
    toolTasks: false
    goals: false

- id: subagent
  name: '@deepseek-ai/dsh-subagent'

- id: subagent-spawn
  name: '@deepseek-ai/dsh-subagent-spawn'
  config:
    providerName: spawn

- id: tool-subagent
  name: '@deepseek-ai/dsh-tool-subagent'
  config:
    provider: spawn
    toolName: subagent
    maxDepth: 1

# Await the persisted resume before the headless driver inspects root agents.
- id: resumed-agent
  name: './tests/fixtures/subagent-inheritance-agent.ts'