feat: add agent-device tooling for AI simulator control#30302
Conversation
- Added `agent-device` package to `package.json` with version `0.14.8`. - Updated `yarn.lock` to include the new dependency and its metadata. - Created configuration files for `agent-device` in `.claude/settings.json`, `.codex/config.toml`, and `.cursor/mcp.json` to define command and arguments for MCP servers. This change enables the integration of the `agent-device` functionality into the project.
|
CLA Signature Action: All authors have signed the CLA. You may need to manually re-run the blocking PR check if it doesn't pass in a few minutes. |
# Conflicts: # .claude/settings.json
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
|
All alerts resolved. Learn more about Socket for GitHub. This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. Ignoring alerts on:
|
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: cec2d37c24
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
|
@SocketSecurity ignore npm/agent-device@0.14.8 Discussed internally with the security team (Craig Scheets, Michal Ogrodniczak). Key findings:
|
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 2d86efd. Configure here.
…d in CLI and MCP server
…entation, update depcheck to ignore agent-device
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 06449054cd
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #30302 +/- ##
==========================================
+ Coverage 81.98% 82.03% +0.05%
==========================================
Files 5447 5444 -3
Lines 145537 145287 -250
Branches 33248 33212 -36
==========================================
- Hits 119312 119187 -125
+ Misses 18094 17974 -120
+ Partials 8131 8126 -5 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
🔍 Smart E2E Test Selection
click to see 🤖 AI reasoning detailsE2E Test Selection:
No app source code, controllers, UI components, navigation, E2E test infrastructure, or test configurations were modified. This is a purely additive developer tooling change with zero impact on app behavior, user flows, or test execution. No E2E tests need to run to validate this change. Performance Test Selection: |
|




Description
Adds agent-device as a dev dependency, exposing it as a CLI for AI agents to control iOS/Android simulators during development.
Device control (opening the app, navigating screens, taking snapshots, interacting with UI elements, capturing visual evidence) runs through:
The package is installed locally so no global install is required. Version is pinned to an exact version (
0.14.8, no semver range) as recommended by the security team — combined with Yarn's lockfile checksum, this prevents undetected same-tag re-deployments.Ideally to be used with the simulator-control skill
Changelog
CHANGELOG entry: null
Related issues
Fixes: https://consensyssoftware.atlassian.net/browse/MCWP-450
Manual testing steps
Screenshots/Recordings
Before
N/A
After
Pre-merge author checklist
Performance checks (if applicable)
Pre-merge reviewer checklist
Note
Low Risk
Low risk: adds a pinned dev-only CLI dependency plus lockfile updates and documentation, with no runtime/app logic changes; main concern is install friction due to
agent-device's Node engine declaration.Overview
Adds the
agent-devicepackage (pinned to0.14.8) as a dev dependency to provide a localyarn agent-deviceCLI for controlling iOS/Android simulators.Updates
yarn.lockfor the new dependency and related transitive bumps (notablyfast-xml-parser/fast-xml-builder), addsagent-deviceto.depcheckrc.ymlignores since it’s CLI-only, and documents usage indocs/readme/agent-device.mdincluding the Node engine note.Reviewed by Cursor Bugbot for commit 7c9637f. Bugbot is set up for automated code reviews on this repo. Configure here.