Tym Rabchuk 2c12e7ae84 fix(acp): pass agent.disabled_toolsets to AIAgent — config-disabled tools stayed executable over ACP ...

The CLI (cli.py: CLI_CONFIG['agent'].get('disabled_toolsets')) and the
gateway (gateway/run.py) both read agent.disabled_toolsets from config
and pass it to AIAgent. The ACP adapter's _make_agent never did, so
state.agent.disabled_toolsets was always None and the ACP tool-registry
rebuild (acp_adapter/server.py -> get_tool_definitions) included every
tool in the enabled toolsets — a toolset the user disabled in config
(todo, browser, ...) remained fully executable in editor/ACP sessions.

Observed live: a 'todo' tool call executed from a profile whose config
lists todo in agent.disabled_toolsets.

Read agent.disabled_toolsets in _make_agent and pass it through,
mirroring the CLI and gateway paths.

Claude-Session: https://claude.ai/code/session_01YNvCUipheR7yx4VorUL2jW

2026-09-23 16:27:05 -07:00

..

__init__.py

…

__main__.py

…

auth.py

…

commands.py

fix(acp): block state-mutating commands while a turn is running

2026-09-20 12:55:37 -07:00

content.py

…

edit_approval.py

fix(acp): evaluate V4A multi-file patch paths individually for auto-approve

2026-09-20 10:26:06 -07:00

entry.py

fix(acp): warm numpy with the memory provider so hindsight is covered too (#58083)

2026-09-19 02:43:28 -07:00

events.py

fix(acp): honour the executor's is_error when closing a tool call

2026-09-18 10:33:54 -07:00

model_catalog.py

…

permissions.py

fix(acp): approval prompts wait approvals.timeout instead of a hardcoded 60 s

2026-09-19 02:36:56 -07:00

provenance.py

…

server.py

fix: ACP set_model no longer runs queued prompts inside the RPC (review follow-up)

2026-09-20 12:55:37 -07:00

session.py

fix(acp): pass agent.disabled_toolsets to AIAgent — config-disabled tools stayed executable over ACP

2026-09-23 16:27:05 -07:00

tools.py

fix(acp): honour the executor's is_error when closing a tool call

2026-09-18 10:33:54 -07:00