Updates

vendor/agent-harness/agent-workspace/TOOLS.md

@@ -15,7 +15,16 @@ Local notes for this Jarvis session. This file is guidance, not an allowlist.
 ## Shell
 
 - `run_terminal_cmd` is a local user shell, not root.
-- Public HTTP via curl or wget is blocked. Use `web_search` / `web_fetch` instead.
+- Public HTTP via curl or wget is blocked. Use `web_search` / `web_fetch` in the Jarvis Chromium window.
+
+## Browser
+
+- Search, fetch, and `browser` share one headed Playwright Chromium window.
+- `web_search` finds links. `fetch_page` reads a public page.
+- Cookie walls, forms, leftover challenges: call `browser`. `read_file` `skills/browser/SKILL.md` for the playbook.
+- `browser` actions: `navigate` + `url`, `snapshot`, `click`/`type` with `ref` from the last snapshot, `press` + `key`, `scroll` + `dy`, `wait` + `ms`.
+- Snapshot or navigate before every click or type. Refs go stale after a click.
+- Do not use `cu_observe` or the shell for websites.
 
 ## Desktop
 
@@ -23,6 +32,12 @@ Local notes for this Jarvis session. This file is guidance, not an allowlist.
 - After a grant, `cu_observe` reads the live ScreenCast frame. Do not screenshot.
 - Never ask for passwords.
 
+## Camera
+
+- Press Settings → Camera → Allow now.
+- Then call `webcam`. The still is attached for that turn. Do not speak the path.
+- Do not use `cu_observe` for the user webcam.
+
 ## Don’t
 
 - Don’t treat the git checkout or host secrets as this workspace unless file access is widened in Settings.