evot-agent 0.5.2 → 0.5.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "evot-agent",
-  "version": "0.5.2",
+  "version": "0.5.4",
   "type": "module",
   "description": "Local browser agent for evot — browses sites with Claude or Codex and appends results as cells.",
   "license": "MIT",

package/src/backends/claude.js

@@ -64,6 +64,32 @@ export async function runClaudeJob(job) {
       strictMcpConfig: true,
       // MCP 툴은 프롬프트 없이 실행되도록 자동 승인 유지.
       allowedTools: ["mcp__playwright"],
+      // 두 번째 겹: Playwright 외 툴 호출은 hook에서 거부한다. disallowedTools는 이름 목록이라
+      // SDK가 새 내장 툴(REPL·Monitor·Workflow 등)을 추가하면 그대로 뚫리고, bypassPermissions라
+      // 확인 없이 실행된다. hook은 permissionMode와 무관하게 돌고 툴 목록은 건드리지 않으므로
+      // tools:[] 때처럼 Playwright가 사라지는 회귀는 없다(허용 접두어는 allowedTools와 동일).
+      hooks: {
+        PreToolUse: [
+          {
+            hooks: [
+              async (input) => {
+                const name = typeof input?.tool_name === "string" ? input.tool_name : "";
+                if (name.startsWith("mcp__playwright__")) return { continue: true };
+                console.warn(`[evot-agent] blocked tool call: ${name || "(unknown)"}`);
+                return {
+                  continue: true,
+                  hookSpecificOutput: {
+                    hookEventName: "PreToolUse",
+                    permissionDecision: "deny",
+                    permissionDecisionReason:
+                      "evot-agent: only Playwright browser tools are allowed",
+                  },
+                };
+              },
+            ],
+          },
+        ],
+      },
     },
   })) {
     if (message.type === "assistant") {

package/src/backends/common.js

@@ -51,7 +51,12 @@ export const SYSTEM_APPEND = [
   "  each section is its description text followed by its image lines, each",
   "  exactly 'IMAGE: <url>' with a direct image URL you actually saw",
   "  (e.g. a pbs.twimg.com link or a URL ending in .jpg/.png). Max 10 images total.",
-  "- A 'Sources:' section at the end listing the URLs you used, one per line.",
+  "- Cite sources like an academic paper. Put [[src:N]] immediately after the claim it",
+  "  supports, where N is that URL's 1-based number in the Sources list below. Reuse the",
+  "  same N for the same URL, and only cite pages you actually opened.",
+  "- End with a 'Sources:' section listing each URL on its own line as '[N] <url>',",
+  "  numbered from 1 in the order first cited. Every N you used inline must appear here,",
+  "  and every listed URL must be one you actually visited.",
   "Do not include tool logs or meta commentary in the final answer.",
 ].join("\n");