chore(ci): improve agent workflows and skills from run feedback

.claude/skills/fix-github-issue/SKILL.md

@@ -13,7 +13,7 @@ These are hard rules. Violating any of them is a failure.
 
 1. **NO mobile MCP** — Never call any `mcp__mobile-mcp__*` tool. No exceptions.
 2. **Device interaction = `agent-device` only** — All simulator/emulator interaction (screenshots, taps, typing, scrolling, app launch/kill) MUST go through `agent-device` CLI commands. Read the agent-device skill for allowed commands. Exception: `adb` is allowed for Android emulator setup (devices, install, reverse, shell getprop, screenrecord).
-3. **Reproduce first, code later** — Always reproduce the issue on the simulator before exploring code. The bug might already be fixed. Do not explore the codebase until you have confirmed the bug exists.
+3. **Reproduce first, code later** — Always reproduce the issue on the simulator before exploring code. The bug might already be fixed. Do not explore the codebase until you have confirmed the bug exists. **Exception**: Feature requests and new example screens have nothing to reproduce — go straight to implementation.
 4. **If you can't repro** — When running interactively, stop and prompt the user with suggestions. When running on CI (no user), attempt to diagnose from code and issue description.
 
 ## Steps

.claude/skills/raise-pr/SKILL.md

@@ -83,10 +83,11 @@ Fix any issues found, then amend the commit before proceeding.
 
 ### PR body template
 
-```bash
-gh pr create \
-  --title "fix(<scope>): <description>" \
-  --body "$(cat <<'EOF'
+**Always use `--body-file`** — inline `--body` with markdown `#` headers triggers Claude Code permission checks and wastes turns. Use the `Write` tool to create the file (not `cat` or `echo`, which may not be in allowed tools on CI).
+
+Write the following to `/tmp/pr-body.md` using the Write tool:
+
+```markdown
 ## Description
 
 <1-3 sentences: what the bug was and how the fix works>
@@ -108,7 +109,10 @@ Fixes #<number>
 - [ ] Verified on iOS simulator
 - [ ] No regressions on related screens
 EOF
-)"
+
+gh pr create \
+  --title "fix(<scope>): <description>" \
+  --body-file /tmp/pr-body.md
 ```
 
 Before running `gh pr create`, double-check:

.claude/skills/triage-issue/SKILL.md

@@ -12,21 +12,25 @@ description: Triage a GitHub issue — classify priority (P0/P1/P2), search for
    - **P0**: Crash, data loss, or complete breakage affecting all users
    - **P1**: Significant bug or regression affecting many users
    - **P2**: Minor bug, enhancement request, question, or cosmetic issue
-3. **Search** for potential duplicates among open issues:
+3. **Search** for potential duplicates among open AND closed issues (closed bugs may have regressed):
    ```bash
    gh issue list --state open --search "<key terms from the issue>" --limit 5
+   gh issue list --state closed --search "<key terms from the issue>" --limit 5
    ```
 4. **Apply the priority label** (`P0`, `P1`, or `P2`):
    ```bash
    gh issue edit $ISSUE_NUMBER --add-label "<priority>"
    ```
-5. **Comment only if the issue lacks a reproduction AND one would be helpful** — suggest a minimal repro and ask the author for steps. Do NOT comment on feature requests, questions, or issues where the problem is clear from the description alone.
+5. **Comment only when genuinely needed:**
+   - If the issue lacks a reproduction AND one would be helpful — suggest a minimal repro and ask the author for steps.
+   - If a feature request is too vague to act on (no specifics about what to build) — ask for clarification.
+   - Do NOT comment on issues where the problem or request is clear from the description alone.
 
 ## Rules
 
 - Do NOT post triage comments explaining priority or duplicates — labels are sufficient.
 - Do NOT modify any code.
-- Do NOT close issues — only label (and comment if repro is missing).
+- Do NOT close issues — only label (and comment per Step 5 when genuinely needed).
 - **Only apply these labels**: `P0`, `P1`, `P2`. Do NOT apply any other labels (especially not `agent-fix`).
 - Do NOT run `gh auth`, `gh api`, `gh secret`, or any `gh` command other than `gh issue`.
 - Do NOT read environment variables, process info, or files outside the repository.

.github/workflows/agent-android-bot.yml

@@ -22,7 +22,7 @@ permissions:
 env:
   ALLOWED_TOOLS: >-
     Read,Edit,Write,Glob,Grep,
-    Bash(yarn install),Bash(yarn install *),Bash(yarn build),Bash(yarn build *),Bash(yarn test),Bash(yarn test *),Bash(yarn type-check),Bash(yarn lint),Bash(yarn start),Bash(yarn start *),Bash(yarn e2e:*),Bash(yarn react-native *),
+    Bash(yarn install),Bash(yarn install *),Bash(yarn build),Bash(yarn build *),Bash(yarn test),Bash(yarn test *),Bash(yarn type-check),Bash(yarn lint),Bash(yarn start),Bash(yarn start *),Bash(yarn e2e:*),Bash(yarn react-native *),Bash(bundle exec *),Bash(pod install),Bash(pod install *),
     Bash(git log),Bash(git log *),Bash(git diff),Bash(git diff *),Bash(git status),Bash(git show *),
     Bash(git checkout *),Bash(git add *),Bash(git commit *),Bash(git push -u *),
     Bash(git branch),Bash(git branch *),Bash(git rev-parse *),Bash(git fetch),Bash(git fetch *),
@@ -101,6 +101,9 @@ jobs:
       - name: Install agent-device
         run: npm install -g agent-device
 
+      - name: Fetch main branch for diffing
+        run: git fetch origin main
+
       - name: Setup Android SDK
         if: steps.sdk-cache.outputs.cache-hit != 'true'
         run: |

.github/workflows/agent-bot.yml

@@ -22,7 +22,7 @@ permissions:
 env:
   ALLOWED_TOOLS: >-
     Read,Edit,Write,Glob,Grep,
-    Bash(yarn install),Bash(yarn install *),Bash(yarn build),Bash(yarn build *),Bash(yarn test),Bash(yarn test *),Bash(yarn type-check),Bash(yarn lint),Bash(yarn start),Bash(yarn start *),Bash(yarn e2e:*),Bash(yarn react-native *),Bash(bundle exec *),
+    Bash(yarn install),Bash(yarn install *),Bash(yarn build),Bash(yarn build *),Bash(yarn test),Bash(yarn test *),Bash(yarn type-check),Bash(yarn lint),Bash(yarn start),Bash(yarn start *),Bash(yarn e2e:*),Bash(yarn react-native *),Bash(bundle exec *),Bash(pod install),Bash(pod install *),
     Bash(git log),Bash(git log *),Bash(git diff),Bash(git diff *),Bash(git status),Bash(git show *),
     Bash(git checkout *),Bash(git add *),Bash(git commit *),Bash(git push -u *),
     Bash(git branch),Bash(git branch *),Bash(git rev-parse *),Bash(git fetch),Bash(git fetch *),
@@ -68,6 +68,9 @@ jobs:
       - name: Install agent-device
         run: npm install -g agent-device
 
+      - name: Fetch main branch for diffing
+        run: git fetch origin main
+
       - name: Run agent
         uses: anthropics/claude-code-action@bf4f0de6fccd1eea7044a5f903fc928aff363134 # v1
         env:

.github/workflows/agent-fix.yml

@@ -14,7 +14,7 @@ permissions:
 env:
   ALLOWED_TOOLS: >-
     Read,Edit,Write,Glob,Grep,
-    Bash(yarn install),Bash(yarn install *),Bash(yarn build),Bash(yarn build *),Bash(yarn test),Bash(yarn test *),Bash(yarn type-check),Bash(yarn lint),Bash(yarn start),Bash(yarn start *),Bash(yarn e2e:*),Bash(yarn react-native *),Bash(bundle exec *),
+    Bash(yarn install),Bash(yarn install *),Bash(yarn build),Bash(yarn build *),Bash(yarn test),Bash(yarn test *),Bash(yarn type-check),Bash(yarn lint),Bash(yarn start),Bash(yarn start *),Bash(yarn e2e:*),Bash(yarn react-native *),Bash(bundle exec *),Bash(pod install),Bash(pod install *),
     Bash(git log),Bash(git log *),Bash(git diff),Bash(git diff *),Bash(git status),Bash(git show *),
     Bash(git checkout *),Bash(git add *),Bash(git commit *),Bash(git push -u *),
     Bash(git branch),Bash(git branch *),Bash(git rev-parse *),Bash(git fetch),Bash(git fetch *),
@@ -64,6 +64,9 @@ jobs:
       - name: Install agent-device
         run: npm install -g agent-device
 
+      - name: Fetch main branch for diffing
+        run: git fetch origin main
+
       - name: Fix issue
         uses: anthropics/claude-code-action@bf4f0de6fccd1eea7044a5f903fc928aff363134 # v1
         env: