# TOOLS.md

Local notes for this Jarvis session. This file is guidance, not an allowlist.

## Home

- Workspace: the directory named in the system prompt.
- Relative tool paths start there.

## Skills

- Playbooks: `skills/<name>/SKILL.md`. Read the matching file before improvising.
- See `skills/skill-creator/SKILL.md` to add your own.

## Shell

- `run_terminal_cmd` is a local user shell, not root.
- Public HTTP via curl or wget is blocked. Use `browser` in the Jarvis Chromium window.

## Browser

- `browser` is the only web tool. It drives one headed Playwright Chromium window.
- `web_search`, `google_search`, `fetch_page`, `web_fetch`, `wiki_search`, `hn_search`, and `code_search` are removed. Do not call them.
- To search, `navigate` to `https://duckduckgo.com/?q=QUERY` or a Google search url, then `click` a result ref.
- `navigate` and `snapshot` return page `text`. Read it, then decide the next action.
- Cookie walls, forms, leftover challenges: `read_file` `skills/browser/SKILL.md` for the playbook.
- `browser` actions: `navigate` + `url`, `snapshot`, `click`/`type` with `ref` from the last snapshot, `press` + `key`, `scroll` + `dy`, `wait` + `ms`.
- Snapshot or navigate before every click or type. Refs go stale after a click.
- Do not use `cu_observe` or the shell for websites.

## Desktop

- Computer use needs an explicit grant from Settings or the tray.
- After a grant, `cu_observe` reads the live ScreenCast frame. Do not screenshot.
- Never ask for passwords.

## Camera

- Press Settings → Camera → Allow now.
- Then call `webcam`. The still is attached for that turn. Do not speak the path.
- Do not use `cu_observe` for the user webcam.

## Don’t

- Don’t treat the git checkout or host secrets as this workspace unless file access is widened in Settings.
- Don’t skip `SOUL.md` / `AGENTS.md`.