@posthog/agent 2.3.74 → 2.3.81

package/dist/agent.js

@@ -281,7 +281,7 @@ import { v7 as uuidv7 } from "uuid";
 // package.json
 var package_default = {
   name: "@posthog/agent",
-  version: "2.3.74",
+  version: "2.3.81",
   repository: "https://github.com/PostHog/code",
   description: "TypeScript agent framework wrapping Claude Agent SDK with Git-based task execution for PostHog",
   exports: {
@@ -2512,8 +2512,37 @@ function handlePlanFileException(context) {
     updatedInput: toolInput
   };
 }
+function extractDomainFromUrl(url) {
+  try {
+    return new URL(url).hostname;
+  } catch {
+    return null;
+  }
+}
+function isDomainAllowed(hostname, allowedDomains) {
+  return allowedDomains.some((pattern) => {
+    if (pattern.startsWith("*.")) {
+      const suffix = pattern.slice(1);
+      return hostname === pattern.slice(2) || hostname.endsWith(suffix);
+    }
+    return hostname === pattern;
+  });
+}
 async function canUseTool(context) {
-  const { toolName, toolInput, session } = context;
+  const { toolName, toolInput, session, allowedDomains } = context;
+  if (allowedDomains && allowedDomains.length > 0) {
+    if (toolName === "WebFetch" || toolName === "WebSearch") {
+      const url = toolInput.url;
+      if (url) {
+        const hostname = extractDomainFromUrl(url);
+        if (hostname && !isDomainAllowed(hostname, allowedDomains)) {
+          const message = `Domain "${hostname}" is not in the allowed list: ${allowedDomains.join(", ")}`;
+          await emitToolDenial(context, message);
+          return { behavior: "deny", message, interrupt: false };
+        }
+      }
+    }
+  }
   if (isToolAllowedForMode(toolName, session.permissionMode)) {
     return {
       behavior: "allow",
@@ -2603,6 +2632,13 @@ var GATEWAY_TO_SDK_MODEL = {
 function toSdkModelId(modelId) {
   return GATEWAY_TO_SDK_MODEL[modelId] ?? modelId;
 }
+var MODELS_WITH_1M_CONTEXT = /* @__PURE__ */ new Set([
+  "claude-opus-4-6",
+  "claude-sonnet-4-6"
+]);
+function supports1MContext(modelId) {
+  return MODELS_WITH_1M_CONTEXT.has(modelId);
+}
 var MODELS_WITH_EFFORT = /* @__PURE__ */ new Set([
   "claude-opus-4-5",
   "claude-opus-4-6",
@@ -3681,7 +3717,7 @@ var ClaudeAcpAgent = class extends BaseAcpAgent {
       cwd,
       mcpServers,
       permissionMode,
-      canUseTool: this.createCanUseTool(sessionId),
+      canUseTool: this.createCanUseTool(sessionId, meta?.allowedDomains),
       logger: this.logger,
       systemPrompt,
       userProvidedOptions: meta?.claudeCode?.options,
@@ -3773,6 +3809,9 @@ var ClaudeAcpAgent = class extends BaseAcpAgent {
     if (!isResume && resolvedSdkModel !== DEFAULT_MODEL) {
       await this.session.query.setModel(resolvedSdkModel);
     }
+    if (supports1MContext(resolvedModelId)) {
+      options.betas = ["context-1m-2025-08-07"];
+    }
     const availableModes2 = getAvailableModes();
     const modes = {
       currentModeId: permissionMode,
@@ -3811,7 +3850,7 @@ var ClaudeAcpAgent = class extends BaseAcpAgent {
     );
     return { sessionId, modes, models, configOptions };
   }
-  createCanUseTool(sessionId) {
+  createCanUseTool(sessionId, allowedDomains) {
     return async (toolName, toolInput, { suggestions, toolUseID, signal }) => canUseTool({
       session: this.session,
       toolName,
@@ -3823,7 +3862,8 @@ var ClaudeAcpAgent = class extends BaseAcpAgent {
       sessionId,
       fileContentCache: this.fileContentCache,
       logger: this.logger,
-      updateConfigOption: (configId, value) => this.updateConfigOption(configId, value)
+      updateConfigOption: (configId, value) => this.updateConfigOption(configId, value),
+      allowedDomains
     });
   }
   createOnModeChange() {