fix(profile): allow Claude Code UID-suffixed tmp dirs and skills (#12)

* fix(profile): allow Claude Code UID-suffixed tmp dirs and skills

Claude Code writes session data to /private/tmp/claude-501/ (with UID
suffix) rather than /private/tmp/claude/. The previous literal path
caused sandbox denials on file-write-create, making Claude hang when
executing API calls (e.g. `sx online claude -- claude -p "prompt"`).

Changes:
- Use glob /private/tmp/claude* to match UID-suffixed directories
- Add ~/.agents to allow_read for Claude skills/plugins access

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix(profile): remove ~/.agents from claude profile

Not directly related to Claude Code — addressing PR review feedback.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

Author: stefandeml

profiles/claude.toml

@@ -9,14 +9,14 @@ allow_read = [
     "~/.local/share/claude",
     "~/.local/bin/claude",
     "~/.CFUserTextEncoding",
-    "/private/tmp/claude",
+    "/private/tmp/claude*", # claude-UID directories (e.g. claude-501)
     "/private/tmp/zsh*", # When claude use zsh in bash it create dynamic tmp file
 ]
 allow_write = [
     "~/.claude",
     "~/.claude.json",
     "~/Library/Caches/claude-cli-nodejs/",
-    "/private/tmp/claude",
+    "/private/tmp/claude*", # claude-UID directories (e.g. claude-501)
     "/private/tmp/zsh*", # When claude use zsh in bash it create dynamic tmp file
 ]