# Opt-in two-tool profile over the shipped Web composition. The default native
# model surface is exactly persistent `bash` plus `str_replace_editor`; the
# Web host, browser shell, workspace, persistence, and permission stack remain.

# Disable every model-facing consumer in the base/Web tree. plan-mode owns the
# always-registered exit_plan_mode tool even while the session is not planning.
- id: tool-bash
  disabled: true

- id: tool-tasks
  disabled: true

- id: tool-fs
  disabled: true

- id: tool-fs-search
  disabled: true

- id: tool-skill
  disabled: true

- id: plan-mode
  disabled: true

- id: tool-subagent
  disabled: true

- id: tool-subagent-fork
  disabled: true

- id: tool-workflow
  disabled: true

- id: tool-todo
  disabled: true

# The matching browser controls must not offer host tools that this profile
# omits. ui-question's host half owns the ask_user_question registration.
- id: ui-plan
  disabled: true

- id: ui-question
  disabled: true

- insert:
    - id: pty
      name: '@deepseek-ai/dsh-pty'

    # This backend consumes the existing Web sandbox and permission policy.
    # An open persistent shell fences permission-mode changes until it closes.
    - id: pty-local
      name: '@deepseek-ai/dsh-pty-local'
      config:
        timeoutMs: 300000

    - id: persistent-bash
      name: '@deepseek-ai/dsh-tool-bash-persistent'
      config:
        timeoutMs: 300000

    # The editor consumes the Web fs-sandbox provider and therefore retains
    # the selected session permission mode.
    - id: str-replace-editor
      name: '@deepseek-ai/dsh-tool-str-replace-editor'
      config:
        maxOutputChars: 16000