Skip to content

[dev] [Marfuen] mariano/cs-176-bug-when-adding-wix-as-a-vendor-the-agent-pulls-in-site-urls#2335

Merged
Marfuen merged 1 commit intomainfrom
mariano/cs-176-bug-when-adding-wix-as-a-vendor-the-agent-pulls-in-site-urls
Mar 18, 2026
Merged

[dev] [Marfuen] mariano/cs-176-bug-when-adding-wix-as-a-vendor-the-agent-pulls-in-site-urls#2335
Marfuen merged 1 commit intomainfrom
mariano/cs-176-bug-when-adding-wix-as-a-vendor-the-agent-pulls-in-site-urls

Conversation

@github-actions
Copy link
Copy Markdown
Contributor

@github-actions github-actions bot commented Mar 18, 2026

This is an automated pull request to merge mariano/cs-176-bug-when-adding-wix-as-a-vendor-the-agent-pulls-in-site-urls into dev.
It was created by the [Auto Pull Request] action.

@Marfuen @claude
fix(vendors): validate vendor research URLs belong to correct domain
ea0bca7 
Firecrawl agent was returning URLs from wrong domains (e.g., x.com
instead of wix.com). Added domain validation, seed URLs for common
legal/security paths, and prompt hardening to keep research on the
vendor's actual domain. Also fixes pre-existing TS2742 error in
update-policy.ts.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@linear
Copy link
Copy Markdown

linear bot commented Mar 18, 2026

CS-176 [Bug] - When adding Wix as a vendor, the agent pulls in site urls for x.com

@cursor
Copy link
Copy Markdown

cursor bot commented Mar 18, 2026 •
edited
Loading

PR Summary

Medium Risk
Changes Firecrawl vendor research prompts and post-processing to strictly constrain returned links to the vendor’s domain/subdomains, which may reduce false positives but could also drop previously accepted URLs and impact downstream assessments.

Overview
Tightens vendor risk assessment crawling/extraction to avoid pulling in URLs from unrelated domains. Both the Firecrawl agent and extract flow now derive a vendorDomain, explicitly instruct the model to only return on-domain links, and validate/filter any returned URLs that don’t match.

Adds url-validation.ts (with Jest tests) to normalize URLs, extract the vendor domain, and enforce domain/subdomain matching; the agent also seeds common legal/security paths to better anchor crawling. Separately, update-policy.ts stops exporting updatePolicyQueue (now file-local).

Written by Cursor Bugbot for commit ea0bca7. This will update automatically on new commits. Configure here.

@vercel
Copy link
Copy Markdown

vercel bot commented Mar 18, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
comp-api-test Ready Ready Preview, Comment Mar 18, 2026 5:51pm
2 Skipped Deployments
Project Deployment Actions Updated (UTC)
app Skipped Skipped Mar 18, 2026 5:51pm
portal Skipped Skipped Mar 18, 2026 5:51pm

Request Review

cursor[bot]
cursor bot reviewed Mar 18, 2026
View reviewed changes
Copy link
Copy Markdown

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

@Marfuen Marfuen merged commit 37a9813 into main Mar 18, 2026
11 checks passed
@Marfuen Marfuen deleted the mariano/cs-176-bug-when-adding-wix-as-a-vendor-the-agent-pulls-in-site-urls branch March 18, 2026 18:05
claudfuen pushed a commit that referenced this pull request Mar 19, 2026
@semantic-release-bot
chore(release): 3.10.0 [skip ci]
fec3ddd 
# [3.10.0](v3.9.0...v3.10.0) (2026-03-19)

### Bug Fixes

* **integrations:** filter GWS employee sync by organizational units ([#2336](#2336)) ([e3a9867](e3a9867))
* **portal:** show Company Forms section even when all tasks are completed ([#2334](#2334)) ([5661cd6](5661cd6))
* **vendors:** extract root domain from subdomain vendor websites ([#2337](#2337)) ([8c6865b](8c6865b))
* **vendors:** validate vendor research URLs belong to correct domain ([#2335](#2335)) ([37a9813](37a9813))

### Features

* **people:** add Agent Installed column and hide deactivated users by default ([#2331](#2331)) ([67041ab](67041ab))
@claudfuen
Copy link
Copy Markdown
Contributor

claudfuen commented Mar 19, 2026

🎉 This PR is included in version 3.10.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cursor cursor[bot] cursor[bot] left review comments

@Marfuen Marfuen Marfuen approved these changes

Assignees

No one assigned

Labels

automated-pr released

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@claudfuen @Marfuen