From 0166f2f4e87fa8299008c04774e6532a3907e53e Mon Sep 17 00:00:00 2001 From: Tommaso Casaburi Date: Fri, 3 Jul 2026 13:58:35 +0700 Subject: [PATCH] fix(subagents): restrict read-only agent tools and remove machine-specific paths browser-check and profiler get an explicit read-only tools list mirroring the Codex sandbox_mode, and test-apk no longer hardcodes one contributor's ANDROID_HOME and project paths. --- .claude/agents/browser-check.md | 1 + .claude/agents/profiler.md | 1 + .claude/agents/test-apk.md | 4 ++-- .cursor/agents/browser-check.md | 1 + .cursor/agents/profiler.md | 1 + .cursor/agents/test-apk.md | 4 ++-- 6 files changed, 8 insertions(+), 4 deletions(-) diff --git a/.claude/agents/browser-check.md b/.claude/agents/browser-check.md index 15afc05a..42d6d6f6 100644 --- a/.claude/agents/browser-check.md +++ b/.claude/agents/browser-check.md @@ -1,6 +1,7 @@ --- name: browser-check model: haiku +tools: Bash, Read, Grep, Glob description: Verifies UI changes in the browser using playwright-cli across Blink, Gecko, and WebKit. Use after making visual or interaction changes to React components, CSS, layouts, or routing to confirm they render and behave correctly. --- diff --git a/.claude/agents/profiler.md b/.claude/agents/profiler.md index 1cbc40b2..a354a7f2 100644 --- a/.claude/agents/profiler.md +++ b/.claude/agents/profiler.md @@ -1,6 +1,7 @@ --- name: profiler model: haiku +tools: Bash, Read, Grep, Glob description: Performance profiler that browses 5chan routes via playwright-cli, collecting Web Vitals and React rerender data via react-scan. Returns a structured issues list for a batch of routes. Use proactively when profiling browsing performance, finding bottlenecks, or diagnosing excessive React rerenders. --- diff --git a/.claude/agents/test-apk.md b/.claude/agents/test-apk.md index 4f01c023..598bf7ae 100644 --- a/.claude/agents/test-apk.md +++ b/.claude/agents/test-apk.md @@ -8,8 +8,8 @@ You are an Android APK testing agent for the 5chan project. You run only the wor ## Environment -- ANDROID_HOME: /Users/Tommaso/Library/Android/sdk -- Project: /Users/Tommaso/Desktop/bitsocial/5chan +- ANDROID_HOME: use the contributor's local Android SDK path from the environment (commonly `~/Library/Android/sdk` on macOS); do not hardcode another machine's path +- Project root: the current repository root from `git rev-parse --show-toplevel` - Capacitor app (appId: fivechan.android) - AVD: fivechan-test-api35 (pixel_6, API 35, arm64-v8a) - PATH must include: $ANDROID_HOME/emulator, $ANDROID_HOME/platform-tools, $ANDROID_HOME/cmdline-tools/latest/bin diff --git a/.cursor/agents/browser-check.md b/.cursor/agents/browser-check.md index 80bc10c9..3050be7a 100644 --- a/.cursor/agents/browser-check.md +++ b/.cursor/agents/browser-check.md @@ -1,6 +1,7 @@ --- name: browser-check model: composer-2.5-fast +tools: Bash, Read, Grep, Glob description: Verifies UI changes in the browser using playwright-cli across Blink, Gecko, and WebKit. Use after making visual or interaction changes to React components, CSS, layouts, or routing to confirm they render and behave correctly. --- diff --git a/.cursor/agents/profiler.md b/.cursor/agents/profiler.md index ed528e28..c4da66c5 100644 --- a/.cursor/agents/profiler.md +++ b/.cursor/agents/profiler.md @@ -1,6 +1,7 @@ --- name: profiler model: composer-2.5-fast +tools: Bash, Read, Grep, Glob description: Performance profiler that browses 5chan routes via playwright-cli, collecting Web Vitals and React rerender data via react-scan. Returns a structured issues list for a batch of routes. Use proactively when profiling browsing performance, finding bottlenecks, or diagnosing excessive React rerenders. --- diff --git a/.cursor/agents/test-apk.md b/.cursor/agents/test-apk.md index 702a1efd..ac71e075 100644 --- a/.cursor/agents/test-apk.md +++ b/.cursor/agents/test-apk.md @@ -8,8 +8,8 @@ You are an Android APK testing agent for the 5chan project. You run only the wor ## Environment -- ANDROID_HOME: /Users/Tommaso/Library/Android/sdk -- Project: /Users/Tommaso/Desktop/bitsocial/5chan +- ANDROID_HOME: use the contributor's local Android SDK path from the environment (commonly `~/Library/Android/sdk` on macOS); do not hardcode another machine's path +- Project root: the current repository root from `git rev-parse --show-toplevel` - Capacitor app (appId: fivechan.android) - AVD: fivechan-test-api35 (pixel_6, API 35, arm64-v8a) - PATH must include: $ANDROID_HOME/emulator, $ANDROID_HOME/platform-tools, $ANDROID_HOME/cmdline-tools/latest/bin