Tianyi Cui
b2187cabf6
The opt-in `core-web.cordis.yml` profile promises "exactly persistent `bash` plus `str_replace_editor`" (its header comment and `apps/cli/ README.md`), but the base registration of `tool-subagent-list-agents` (added with the durable child catalog) was not disabled by the overlay, so the profile actually exposed `bash`, `str_replace_editor`, and `list_agents`. The assembled snapshot was updated to accept the third tool, which ratified the contract break instead of fixing it. Disable `tool-subagent-list-agents` in the overlay and restore the snapshot's expected tool registry to the documented two tools.
90 lines
2.2 KiB
YAML
90 lines
2.2 KiB
YAML
# Opt-in two-tool profile over the shipped Web composition. The default native
|
|
# model surface is exactly persistent `bash` plus `str_replace_editor`; the
|
|
# Web host, browser shell, workspace, persistence, and permission stack remain.
|
|
|
|
# Disable every model-facing consumer in the base/Web tree. plan-mode owns the
|
|
# always-registered exit_plan_mode tool even while the session is not planning.
|
|
- id: tool-bash
|
|
disabled: true
|
|
|
|
- id: tool-tasks
|
|
disabled: true
|
|
|
|
- id: tool-fs
|
|
disabled: true
|
|
|
|
- id: tool-fs-search
|
|
disabled: true
|
|
|
|
- id: tool-web
|
|
disabled: true
|
|
|
|
- id: tool-skill
|
|
disabled: true
|
|
|
|
- id: plan-mode
|
|
disabled: true
|
|
|
|
- id: tool-subagent-control
|
|
disabled: true
|
|
|
|
- id: tool-subagent-list-agents
|
|
disabled: true
|
|
|
|
- id: tool-subagent
|
|
disabled: true
|
|
|
|
- id: tool-subagent-fork
|
|
disabled: true
|
|
|
|
- id: tool-workflow
|
|
disabled: true
|
|
|
|
- id: tool-todo
|
|
disabled: true
|
|
|
|
# These consumers are shared defaults on the ordinary shipped surfaces, but
|
|
# this opt-in profile keeps exactly its two named tools.
|
|
- id: tool-goal
|
|
disabled: true
|
|
|
|
- id: tool-ralph
|
|
disabled: true
|
|
|
|
- id: tool-str-replace-editor
|
|
disabled: true
|
|
|
|
# The matching browser controls must not offer host tools that this profile
|
|
# omits. ui-question's host half owns the ask_user_question registration.
|
|
- id: ui-plan
|
|
disabled: true
|
|
|
|
- id: ui-question
|
|
disabled: true
|
|
|
|
- insert:
|
|
- id: pty
|
|
name: '@deepseek-ai/dsh-pty'
|
|
|
|
# This backend consumes the existing Web sandbox and permission policy.
|
|
# It loads only on Linux/macOS; Windows and other platforms fail at boot.
|
|
# Its 300s send wait matches the persistent Bash command timeout instead of
|
|
# pty-local's 30s default. An open persistent shell fences permission-mode
|
|
# changes until it closes.
|
|
- id: pty-local
|
|
name: '@deepseek-ai/dsh-pty-local'
|
|
config:
|
|
timeoutMs: 300000
|
|
|
|
- id: persistent-bash
|
|
name: '@deepseek-ai/dsh-tool-bash-persistent'
|
|
config:
|
|
timeoutMs: 300000
|
|
|
|
# The editor consumes the Web fs-sandbox provider and therefore retains
|
|
# the selected session permission mode.
|
|
- id: str-replace-editor
|
|
name: '@deepseek-ai/dsh-tool-str-replace-editor'
|
|
config:
|
|
maxOutputChars: 16000
|