Two invariants, both red on the base: _switch_model hands the live agent's enabled/disabled toolsets to the rebuild, and _make_agent keeps passed toolsets verbatim while a fresh session still derives them from config. Distilled from the regression tests carried in #75722 and #104474.