# feat\(server\): honor withheld agent browser access in the v2 runtime · pingdotgg/t3code

[View on GitCafe](https://git.cafe/pingdotgg/t3code/commit/98558f65b7c6a06e2c9057dfede5cb335b0031e2)

Repository: [pingdotgg/t3code](https://git.cafe/pingdotgg/t3code)

Visibility: public

Requested revision: 98558f65b7c6a06e2c9057dfede5cb335b0031e2

Requested commit: 98558f65b7c6a06e2c9057dfede5cb335b0031e2

Commit: 98558f65b7c6a06e2c9057dfede5cb335b0031e2

Tree: f0d6b67f3173c93d7730de13f1f9a203391fe460

Author: Julius Marminge

Committer: Julius Marminge

## Message

```
feat(server): honor withheld agent browser access in the v2 runtime

Ports #7083 into the v2 session path, which replaced the v1
ProviderService where main's gate lives. Instead of withholding the whole
t3-code MCP credential — on this branch it also carries the thread
orchestration and worktree toolkits — the credential is minted without
the "preview" capability when enableAgentBrowserAccess is off, so every
preview tool call rejects while orchestration stays available.

ProviderSessionManager reads the setting at prepare time (deny on an
unreadable settings file, matching main), rotates a reused credential
whose capability set no longer reflects the setting, and the session
config now carries browserToolsAvailable so the Codex adapter keeps its
developer instructions truthful via main's parameterized instruction
builders instead of the removed constants.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

```

## Parents

- [82272f770b8a4a492fcf42b740e88c02bc5ef687](https://git.cafe/pingdotgg/t3code/commit/82272f770b8a4a492fcf42b740e88c02bc5ef687?format=markdown)

[Source at this commit](https://git.cafe/pingdotgg/t3code/tree/98558f65b7c6a06e2c9057dfede5cb335b0031e2?format=markdown)