fix(web): return effective enabled state from toolset toggle endpoint

hermes_cli/web_server.py

@@ -5881,7 +5881,9 @@ async def toggle_toolset(name: str, body: ToolsetToggle):
     else:
         enabled.discard(name)
     _save_platform_tools(config, "cli", enabled)
-    return {"ok": True, "name": name, "enabled": body.enabled}
+    config_after = load_config()
+    effective = set(_get_platform_tools(config_after, "cli", include_default_mcp_servers=False))
+    return {"ok": True, "name": name, "enabled": name in effective}
 
 
 @app.get("/api/tools/toolsets/{name}/config")

tests/hermes_cli/test_web_server.py

@@ -1748,6 +1748,24 @@ def test_select_toolset_provider_unknown_toolset_returns_400(self):
         )
         assert resp.status_code == 400
 
+    def test_toggle_toolset_platform_restricted_returns_actual_state(self):
+        """PUT for a platform-restricted toolset must return enabled=false.
+
+        discord_admin is restricted to the 'discord' platform.
+        _save_platform_tools silently drops it for the 'cli' platform, so the
+        response must reflect what was actually persisted — not the requested state.
+        Closes #37609.
+        """
+        resp = self.client.put("/api/tools/toolsets/discord_admin", json={"enabled": True})
+        assert resp.status_code == 200
+        body = resp.json()
+        assert body["ok"] is True
+        assert body["name"] == "discord_admin"
+        assert body["enabled"] is False
+
+        listing = {t["name"]: t for t in self.client.get("/api/tools/toolsets").json()}
+        assert listing["discord_admin"]["enabled"] is False
+
     def test_config_raw_get(self):
         resp = self.client.get("/api/config/raw")
         assert resp.status_code == 200