fix: reject unknown profile archive selectors

resources/profiles/coder.dcdl

@@ -2,12 +2,11 @@ slug = "coder";
 description = "Ticket implementation coder profile.";
 scope = "workspace_write";
 
-tool_enabled = {
-    bash = true;
-    read = true;
-    write = true;
-    edit = true;
-    grep = true;
-    glob = true;
-    memory = true;
+feature = {
+    task = { enabled = true; };
+    memory = { enabled = true; };
+    web = { enabled = true; };
+    workers = { enabled = false; };
+    ticket = { enabled = false; access = "lifecycle"; };
+    ticket_orchestration = { enabled = false; };
 };

resources/profiles/companion.dcdl

@@ -2,14 +2,11 @@ slug = "companion";
 description = "Workspace companion profile.";
 scope = "workspace_write";
 
-tool_enabled = {
-    bash = true;
-    read = true;
-    write = true;
-    edit = true;
-    grep = true;
-    glob = true;
-    web_search = true;
-    web_fetch = true;
-    memory = true;
+feature = {
+    task = { enabled = true; };
+    memory = { enabled = true; };
+    web = { enabled = true; };
+    workers = { enabled = true; };
+    ticket = { enabled = false; access = "lifecycle"; };
+    ticket_orchestration = { enabled = false; };
 };

resources/profiles/default.dcdl

@@ -1,21 +1,38 @@
 slug = "default";
-description = "General Yoi companion profile.";
+description = "Default Yoi coding profile.";
 scope = "workspace_write";
 
 model = {
-    scheme = "codex";
-    model_id = "gpt-5";
-    auth = { kind = "codex_oauth"; };
+    ref = "codex-oauth/gpt-5.5";
 };
 
-tool_enabled = {
-    bash = true;
-    read = true;
-    write = true;
-    edit = true;
-    grep = true;
-    glob = true;
-    web_search = true;
-    web_fetch = true;
-    memory = true;
+session = {
+    record_event_trace = true;
+};
+
+engine = {
+    reasoning = "high";
+};
+
+feature = {
+    task = { enabled = true; };
+    memory = { enabled = true; };
+    web = { enabled = true; };
+    workers = { enabled = true; };
+    ticket = { enabled = false; access = "lifecycle"; };
+    ticket_orchestration = { enabled = false; };
+};
+
+memory = {
+    extract_threshold = 50000;
+    consolidation_threshold_files = 5;
+    consolidation_threshold_bytes = 50000;
+};
+
+web = {
+    enabled = true;
+    search = {
+        provider = "brave";
+        api_key_secret = "web/brave/default";
+    };
 };

resources/profiles/intake.dcdl

@@ -2,12 +2,11 @@ slug = "intake";
 description = "Ticket intake profile.";
 scope = "workspace_write";
 
-tool_enabled = {
-    bash = true;
-    read = true;
-    write = true;
-    edit = true;
-    grep = true;
-    glob = true;
-    memory = true;
+feature = {
+    task = { enabled = false; };
+    memory = { enabled = true; };
+    web = { enabled = true; };
+    workers = { enabled = false; };
+    ticket = { enabled = true; access = "lifecycle"; };
+    ticket_orchestration = { enabled = false; };
 };

resources/profiles/orchestrator.dcdl

@@ -2,12 +2,11 @@ slug = "orchestrator";
 description = "Ticket orchestrator profile.";
 scope = "workspace_write";
 
-tool_enabled = {
-    bash = true;
-    read = true;
-    write = true;
-    edit = true;
-    grep = true;
-    glob = true;
-    memory = true;
+feature = {
+    task = { enabled = true; };
+    memory = { enabled = true; };
+    web = { enabled = true; };
+    workers = { enabled = true; };
+    ticket = { enabled = true; access = "lifecycle"; };
+    ticket_orchestration = { enabled = true; };
 };

resources/profiles/reviewer.dcdl

@@ -2,10 +2,11 @@ slug = "reviewer";
 description = "Ticket review profile.";
 scope = "workspace_read";
 
-tool_enabled = {
-    bash = true;
-    read = true;
-    grep = true;
-    glob = true;
-    memory = true;
+feature = {
+    task = { enabled = true; };
+    memory = { enabled = true; };
+    web = { enabled = true; };
+    workers = { enabled = false; };
+    ticket = { enabled = false; access = "lifecycle"; };
+    ticket_orchestration = { enabled = false; };
 };