# feat\(server\): honor withheld agent browser access in the v2 runtime · stienswout/t3code

[View on GitCafe](https://git.cafe/stienswout/t3code/commit/addfb44d94437d0b7cb1053522d22daff7552cf5)

Repository: [stienswout/t3code](https://git.cafe/stienswout/t3code)

Visibility: public

Requested revision: addfb44d94437d0b7cb1053522d22daff7552cf5

Requested commit: addfb44d94437d0b7cb1053522d22daff7552cf5

Commit: addfb44d94437d0b7cb1053522d22daff7552cf5

Tree: 4e0062e5db1b98e5911cdc9b54cbba61ecbe4710

Author: Julius Marminge

Committer: Julius Marminge

## Message

```
feat(server): honor withheld agent browser access in the v2 runtime

Ports #7083 into the v2 session path, which replaced the v1
ProviderService where main's gate lives. Instead of withholding the whole
t3-code MCP credential — on this branch it also carries the thread
orchestration and worktree toolkits — the credential is minted without
the "preview" capability when enableAgentBrowserAccess is off, so every
preview tool call rejects while orchestration stays available.

ProviderSessionManager reads the setting at prepare time (deny on an
unreadable settings file, matching main), rotates a reused credential
whose capability set no longer reflects the setting, and the session
config now carries browserToolsAvailable so the Codex adapter keeps its
developer instructions truthful via main's parameterized instruction
builders instead of the removed constants.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

```

## Parents

- [d7ffcdad3b0009cf1afd4d88af1edb3642c06c50](https://git.cafe/stienswout/t3code/commit/d7ffcdad3b0009cf1afd4d88af1edb3642c06c50?format=markdown)

[Source at this commit](https://git.cafe/stienswout/t3code/tree/addfb44d94437d0b7cb1053522d22daff7552cf5?format=markdown)