@posthog/agent 2.3.73 → 2.3.80

package/dist/agent.js

@@ -281,7 +281,7 @@ import { v7 as uuidv7 } from "uuid";
 // package.json
 var package_default = {
   name: "@posthog/agent",
-  version: "2.3.73",
+  version: "2.3.80",
   repository: "https://github.com/PostHog/code",
   description: "TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog",
   exports: {
@@ -2512,8 +2512,37 @@ function handlePlanFileException(context) {
     updatedInput: toolInput
   };
 }
+function extractDomainFromUrl(url) {
+  try {
+    return new URL(url).hostname;
+  } catch {
+    return null;
+  }
+}
+function isDomainAllowed(hostname, allowedDomains) {
+  return allowedDomains.some((pattern) => {
+    if (pattern.startsWith("*.")) {
+      const suffix = pattern.slice(1);
+      return hostname === pattern.slice(2) || hostname.endsWith(suffix);
+    }
+    return hostname === pattern;
+  });
+}
 async function canUseTool(context) {
-  const { toolName, toolInput, session } = context;
+  const { toolName, toolInput, session, allowedDomains } = context;
+  if (allowedDomains && allowedDomains.length > 0) {
+    if (toolName === "WebFetch" || toolName === "WebSearch") {
+      const url = toolInput.url;
+      if (url) {
+        const hostname = extractDomainFromUrl(url);
+        if (hostname && !isDomainAllowed(hostname, allowedDomains)) {
+          const message = `Domain "${hostname}" is not in the allowed list: ${allowedDomains.join(", ")}`;
+          await emitToolDenial(context, message);
+          return { behavior: "deny", message, interrupt: false };
+        }
+      }
+    }
+  }
   if (isToolAllowedForMode(toolName, session.permissionMode)) {
     return {
       behavior: "allow",
@@ -2843,6 +2872,7 @@ function buildSessionOptions(params) {
   const tools = params.userProvidedOptions?.tools ?? (params.disableBuiltInTools ? [] : { type: "preset", preset: "claude_code" });
   const options = {
     ...params.userProvidedOptions,
+    betas: ["context-1m-2025-08-07"],
     systemPrompt: params.systemPrompt ?? buildSystemPrompt(),
     settingSources: ["user", "project", "local"],
     stderr: (err) => params.logger.error(err),
@@ -3680,7 +3710,7 @@ var ClaudeAcpAgent = class extends BaseAcpAgent {
       cwd,
       mcpServers,
       permissionMode,
-      canUseTool: this.createCanUseTool(sessionId),
+      canUseTool: this.createCanUseTool(sessionId, meta?.allowedDomains),
       logger: this.logger,
       systemPrompt,
       userProvidedOptions: meta?.claudeCode?.options,
@@ -3810,7 +3840,7 @@ var ClaudeAcpAgent = class extends BaseAcpAgent {
     );
     return { sessionId, modes, models, configOptions };
   }
-  createCanUseTool(sessionId) {
+  createCanUseTool(sessionId, allowedDomains) {
     return async (toolName, toolInput, { suggestions, toolUseID, signal }) => canUseTool({
       session: this.session,
       toolName,
@@ -3822,7 +3852,8 @@ var ClaudeAcpAgent = class extends BaseAcpAgent {
       sessionId,
       fileContentCache: this.fileContentCache,
       logger: this.logger,
-      updateConfigOption: (configId, value) => this.updateConfigOption(configId, value)
+      updateConfigOption: (configId, value) => this.updateConfigOption(configId, value),
+      allowedDomains
     });
   }
   createOnModeChange() {