From 100c406e100a9757ed0d07b1818fae15ff77f22a Mon Sep 17 00:00:00 2001
From: Garry Tan <garrytan@gmail.com>
Date: Mon, 6 Apr 2026 00:34:34 -0700
Subject: [PATCH] feat: add --domain flag to pair-agent CLI for domain
 restrictions

Allows passing --domain to pair-agent to restrict the remote agent's
navigation to specific domains (comma-separated).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 browse/src/cli.ts | 11 +++++++++--
 1 file changed, 9 insertions(+), 2 deletions(-)

diff --git a/browse/src/cli.ts b/browse/src/cli.ts
index 5a7a8f2b..26be2136 100644
--- a/browse/src/cli.ts
+++ b/browse/src/cli.ts
@@ -589,6 +589,7 @@ function hasFlag(args: string[], flag: string): boolean {
 
 async function handlePairAgent(state: ServerState, args: string[]): Promise<void> {
   const clientName = parseFlag(args, '--client') || `remote-${Date.now()}`;
+  const domains = parseFlag(args, '--domain')?.split(',').map(d => d.trim());
   const admin = hasFlag(args, '--admin');
   const localHost = parseFlag(args, '--local');
 
@@ -600,6 +601,8 @@ async function handlePairAgent(state: ServerState, args: string[]): Promise<void
       'Authorization': `Bearer ${state.token}`,
     },
     body: JSON.stringify({
+      domains,
+
       clientId: clientName,
       admin,
     }),
@@ -844,7 +847,9 @@ Refs:           After 'snapshot', use @e1, @e2... as selectors:
           'Content-Type': 'application/json',
           'Authorization': `Bearer ${newState.token}`,
         },
-        body: JSON.stringify({ command: 'status', args: [] }),
+        body: JSON.stringify({
+      domains,
+ command: 'status', args: [] }),
         signal: AbortSignal.timeout(5000),
       });
       const status = await resp.text();
@@ -918,7 +923,9 @@ Refs:           After 'snapshot', use @e1, @e2... as selectors:
           'Content-Type': 'application/json',
           'Authorization': `Bearer ${existingState.token}`,
         },
-        body: JSON.stringify({ command: 'disconnect', args: [] }),
+        body: JSON.stringify({
+      domains,
+ command: 'disconnect', args: [] }),
         signal: AbortSignal.timeout(3000),
       });
       if (resp.ok) {