{ inputs, ... }:
{
  imports = [
    inputs.devshell.flakeModule
  ];
  perSystem =
    { system, ... }:
    {
      devshells.default = {
        devshell = {
          packages = [
            # Local fix until upstream lands (patches/upstream-sd-card-secret-injection.patch):
            # `clan machines build --format sd-card` resolves the image via
            # image.filePath, skips secret injection for formats without
            # clan.core.image.<format>.addFilesScript, and stages the
            # injected tree apart from the sandbox output. The sd-card
            # addFilesScript itself is modules/nixos/sd-card-image.nix.
            (inputs.clan-core.packages.${system}.clan-cli.overrideAttrs (old: {
              patches = (old.patches or [ ]) ++ [ ./patches/clan-cli-image-filepath.patch ];
            }))
          ];
        };
      };
    };
}