v0.198.0

This release lets an agent keep a domain's tools inside the subagent that owns it, draws paired remotes once on the org chart, and fixes two agent_browser form cases found in live testing.

Subagent-only tools (ADR 0117)

• New tools.subagent_only setting: the named tools are taken off the lead agent. Its model is never offered them, a direct call is blocked with a pointer to task, and neither search_tools, execute_code's bridge nor the operator MCP can surface them.
• Any subagent whose allowlist names them still gets them, in the foreground (task) or the background (run_in_background). The lead's prompt loses those schemas, and the domain's tool output stays in the subagent's context.
• tools.disabled still wins. The console's Tools list marks held tools "Subagents only" (subagent_only: true in /api/tools) and leaves them out of the lead's tool count.

Org chart

• A remote you add as a delegate from its fleet row (the hub-proxy address) and the same remote's fleet-member entry are now one node with a delegate edge, not two nodes for the same agent.
• This also covers local fleet members that delegate to the remote through the hub. When an agent has both a direct and a proxied delegate to the same remote, the direct one's health is shown.

agent_browser

• browser_select on an intl-tel-input v23+ phone picker reads the selected country's name back instead of failing on the "+1" dial code.
• browser_upload and browser_form_read handle a file field that removes its input after attaching, confirming the upload from the filename the widget leaves behind.

Upgrade notes

• Agent self-config (set_config, when tools.self_config_enabled is on) now refuses subagents.<name>.tools: a subagent's tool allowlist is a permission only the operator changes. A subagent's model and max_turns stay writable.

What's Changed

• feat: agent_browser: browser_upload + browser_form_read handle a file input the widget REMOVES after attach, leaving only a filename chip (#4032 live re-test, blocker) by @mabry1985 in #4064
• feat: agent_browser: browser_select on the live intl-tel-input (v23+ markup) reads back the country from .iti__selected-country's title, not "+1" — root resolved to the wrapper that owns the selected-country button (#4032 live re-test, bug 2) by @mabry1985 in #4065
• docs(readme): hero GIF and Watch-it tiles for launch by @mabry1985 in #4066
• docs(readme): fill the lane B tile with the board clip by @mabry1985 in #4067
• fix(orgchart): a hub-proxy delegate and its fleet member are one node by @mabry1985 in #4068
• feat(tools): tools.subagent_only keeps a domain's tools inside the subagent that owns it (ADR 0117) by @mabry1985 in #4069

Full Changelog: v0.197.0...v0.198.0