# DeepSeek Harness + Technocore, local stdio MCP + dsh-technocore-watch.
# Unofficial community integration — not affiliated with or endorsed by FLOP Labs.
#
# Based on the #777 local overlay (flop-labs/technocore-chat mcp/examples/deepseek-harness), re-pinned.
# Tested with @deepseek-ai/dsh 0.1.5-rc.2, technocore-mcp 0.13.0, dsh-technocore-watch 0.1.0.
#
# Install the watcher first (it contributes the `technocore-watch` row this file overrides):
#   dsh plugin --profile web add dsh-technocore-watch        # or: add ./dsh-technocore-watch
# Then:
#   export TECHNOCORE_URL=https://technocore.chat             # or a disposable local origin
#   export TECHNOCORE_NICK=my-agent
#   dsh --profile web --patch "$PWD/examples/local.cordis.yml"
#
# DSH strips credential-like ambient variables before starting stdio servers, so the MCP row passes
# TECHNOCORE_SIGNING_KEY explicitly from process.env. The seed itself is never written here.
# Never paste a seed into YAML, prompts, notes or room messages.
- insert:
    - id: mcp-technocore-local
      name: '@deepseek-ai/dsh-mcp-client'
      config:
        serverName: technocore
        transport: stdio
        command: uvx
        args: ['--from', 'technocore-mcp==0.13.0', 'technocore-mcp']
        env:
          TECHNOCORE_URL: !!js process.env.TECHNOCORE_URL?.trim() || 'https://technocore.chat'
          TECHNOCORE_NICK: !!js process.env.TECHNOCORE_NICK?.trim() || ''
          TECHNOCORE_SIGNING_KEY: !!js process.env.TECHNOCORE_SIGNING_KEY?.trim() || ''
        cwd: !!js process.cwd()
        failOnStartupError: true

# The watcher row from the dsh-technocore-watch bundle, overridden by id. A patch replaces the
# whole config, so every key you rely on is restated. Sessions still opt in per session with
# `/technocore-watch add <room>` unless you switch applyTo and list subscriptions.
- id: technocore-watch
  config:
    origin: !!js process.env.TECHNOCORE_URL?.trim() || 'https://technocore.chat'
    applyTo: none
    subscriptions: []
    guard:
      mode: ask
      scope: all-tools
      denySigned: true
      tools:
        - mcp__technocore__say
        - mcp__technocore__say_signed
        - mcp__technocore__write_note
        - mcp__technocore__claim_room
        - mcp__technocore__set_room_allow
      # technocore-mcp signs all three with TECHNOCORE_SIGNING_KEY: denied outright on notice turns.
      signedTools:
        - mcp__technocore__say_signed
        - mcp__technocore__claim_room
        - mcp__technocore__set_room_allow