# feat\(server\): honor withheld agent browser access in the v2 runtime · pingdotgg/t3code

[View on GitCafe](https://git.cafe/pingdotgg/t3code/commit/e0d72006803cc468d0893b36e3e396501e4cdf79)

Repository: [pingdotgg/t3code](https://git.cafe/pingdotgg/t3code)

Visibility: public

Requested revision: e0d72006803cc468d0893b36e3e396501e4cdf79

Requested commit: e0d72006803cc468d0893b36e3e396501e4cdf79

Commit: e0d72006803cc468d0893b36e3e396501e4cdf79

Tree: a010a5ed045e12533906f15a0c44b5c9a5008b2d

Author: Julius Marminge

Committer: Julius Marminge

## Message

```
feat(server): honor withheld agent browser access in the v2 runtime

Ports #7083 into the v2 session path, which replaced the v1
ProviderService where main's gate lives. Instead of withholding the whole
t3-code MCP credential — on this branch it also carries the thread
orchestration and worktree toolkits — the credential is minted without
the "preview" capability when enableAgentBrowserAccess is off, so every
preview tool call rejects while orchestration stays available.

ProviderSessionManager reads the setting at prepare time (deny on an
unreadable settings file, matching main), rotates a reused credential
whose capability set no longer reflects the setting, and the session
config now carries browserToolsAvailable so the Codex adapter keeps its
developer instructions truthful via main's parameterized instruction
builders instead of the removed constants.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

```

## Parents

- [3da587497acf0f71762d9ce401276bfa80aab593](https://git.cafe/pingdotgg/t3code/commit/3da587497acf0f71762d9ce401276bfa80aab593?format=markdown)

[Source at this commit](https://git.cafe/pingdotgg/t3code/tree/e0d72006803cc468d0893b36e3e396501e4cdf79?format=markdown)