[dev] [Marfuen] mariano/cs-176-bug-when-adding-wix-as-a-vendor-the-agent-pulls-in-site-urls

[github-actions]

This is an automated pull request to merge mariano/cs-176-bug-when-adding-wix-as-a-vendor-the-agent-pulls-in-site-urls into dev.
It was created by the [Auto Pull Request] action.

[linear]

CS-176 [Bug] - When adding Wix as a vendor, the agent pulls in site urls for x.com

[cursor]

PR Summary

Medium Risk
Changes Firecrawl vendor research prompts and post-processing to strictly constrain returned links to the vendor’s domain/subdomains, which may reduce false positives but could also drop previously accepted URLs and impact downstream assessments.

Overview
Tightens vendor risk assessment crawling/extraction to avoid pulling in URLs from unrelated domains. Both the Firecrawl agent and extract flow now derive a vendorDomain, explicitly instruct the model to only return on-domain links, and validate/filter any returned URLs that don’t match.

Adds url-validation.ts (with Jest tests) to normalize URLs, extract the vendor domain, and enforce domain/subdomain matching; the agent also seeds common legal/security paths to better anchor crawling. Separately, update-policy.ts stops exporting updatePolicyQueue (now file-local).

^{Written by Cursor Bugbot for commit ea0bca7. This will update automatically on new commits. Configure here.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
comp-api-test	Ready	Preview, Comment	Mar 18, 2026 5:51pm

2 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
app	Skipped		Mar 18, 2026 5:51pm
portal	Skipped		Mar 18, 2026 5:51pm

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}