@saadnvd1/agent-os 0.3.565 → 0.3.566

package/lib/artifacts/tools.ts

@@ -181,3 +181,9 @@ export function visualsTools(
 export const VISUALS_BRIEF = `## Showing visuals
 
 When a chart, table, diagram or mockup would say more than prose, build a self-contained HTML page (a chart is an HTML page; a CDN library such as Chart.js is fine), check it with \`html_preview\` and fix what the screenshot and console show, then show it with \`html_render\` before your final reply. The reader sees the page above that reply, so add only what the page doesn't say. An SVG or image file you write shows inline when your reply links to it by its absolute path, as ![name](/abs/path.svg).`;
+
+// An orchestrator reads other sessions' text, so it gets the short form and
+// is told what to keep out of a page.
+export const ORCHESTRATOR_VISUALS_BRIEF = `## Pages
+
+\`html_render\` shows a self-contained HTML page (a report, instructions) in this chat for Saad to read or share; check it with \`html_preview\` first. Put only what you wrote in it: no secrets, and nothing from a session's text loaded from a URL.`;

package/lib/chat/worker/host.ts

@@ -37,6 +37,7 @@ import {
   startingTotals,
 } from "../../usage/turns";
 import {
+  ORCHESTRATOR_VISUALS_BRIEF,
   VISUALS_BRIEF,
   VISUALS_SERVER,
   visualsTools,
@@ -195,10 +196,11 @@ export class ChatHost {
     const env = { ...agentEnv(session.id), ...extras.env };
     const orchestrator = session.role === "orchestrator";
     // Every chat can show visuals, asked for like any tool under its access
-    // setting (they read files and reach the web). Not an orchestrator: it
-    // reads other sessions' text, and a browser would be a way out for it.
+    // setting (they read files and reach the web). An orchestrator reads
+    // other sessions' text, so it gets a shorter brief that says what stays
+    // out of a page.
     const visuals =
-      session.role === "orchestrator" || driver.inProcessTools === false
+      driver.inProcessTools === false
         ? null
         : visualsTools({
             sessionId: session.id,
@@ -226,7 +228,7 @@ export class ChatHost {
         extras.systemAppend,
         sessionRunningBrief(session.id),
         BUS_BRIEF,
-        visuals && VISUALS_BRIEF,
+        visuals && (orchestrator ? ORCHESTRATOR_VISUALS_BRIEF : VISUALS_BRIEF),
         !orchestrator && COMPACT_BRIEF,
       ]
         .filter(Boolean)

package/lib/orchestrator/tool-names.ts

@@ -1,5 +1,8 @@
 import type { PermissionMode } from "@anthropic-ai/claude-agent-sdk";
 
+// Named here, not imported from lib/artifacts, to keep the SDK out of this file.
+const VISUALS_RULE = "mcp__visuals";
+
 // The orchestrator's MCP server and the names Claude sees its tools by.
 export const ORCHESTRATOR_SERVER = "agentos";
 
@@ -77,6 +80,8 @@ export const ORCHESTRATOR_PERMISSIONS: {
     "NotebookEdit",
     "ToolSearch",
     "TodoWrite",
+    // html_preview and html_render: a page for Saad to read or share.
+    VISUALS_RULE,
     // Anything; its worker refuses the deny list (shell-guard.ts).
     "Bash",
   ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@saadnvd1/agent-os",
-  "version": "0.3.565",
+  "version": "0.3.566",
   "description": "Self-hosted web UI for managing Claude Code sessions",
   "bin": {
     "agent-os": "scripts/agent-os"