improvement(desktop): remove per-task website approval prompts

[waleedlatif1]

Summary

• Remove per-task website approval prompts from desktop browser links, redirects, and restored pages.
• Delete the origin-grant cache, pending prompt state, timers, and support handshake. Preserve URL/DNS checks and microphone/camera consent.
• Keep the legacy bridge contract and renderer fallback for installed older shells. The change takes effect after a desktop upgrade; the new shell never emits site requests.

Type of Change

• Improvement

Testing

• 1,601 desktop unit tests and all 26 workspace type checks passed.
• Five Electron browser tests passed, including a link followed by a cross-origin redirect without a website prompt.
• Cleanup, lint, all 46 repository audits (including strict API validation), and docs manifest checks passed.

Checklist

• Code follows project style guidelines
• Self-reviewed my changes
• Tests added/updated and passing
• No new warnings introduced
• I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Sep 15, 2026 1:50am UTC

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge; the previously reported restore-timeout issue is resolved and no new actionable failure was established.

Summary

The PR removes per-task website approval prompts from the desktop agent browser while preserving URL/DNS restrictions, media consent, and compatibility with older installed shells. It also corrects foreground restore timing raised in the previous review.

• Removes site-origin grants, pending prompt state, timers, native prompt fallback, and renderer support handshakes.
• Allows checked links, redirects, popups, and restored pages to navigate without website prompts.
• Retains private and reserved network blocking for top-level and subframe navigation.
• Preserves legacy bridge types and retired action handling for mixed shell/renderer versions.
• Resets a promoted background restore’s deadline from promotion time and prevents repeated promotions from extending it again.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    Request[Desktop browser navigation] --> Scheme{HTTP or HTTPS?}
    Scheme -->|No| Block[Block navigation]
    Scheme -->|Yes| Guard[DNS-aware URL guard]
    Guard -->|Private, reserved, or unresolved| Block
    Guard -->|Public or allowed loopback| Load[Load without website prompt]
    Load --> Media{Camera or microphone requested?}
    Media -->|Yes| Consent[Keep document-scoped media consent]
    Media -->|No| Page[Continue page load]
    Consent --> Page

Loading

_{Reviews (2) · Last reviewed commit: "fix(desktop): preserve the foreground re..."}

[waleedlatif1]

@greptile

[waleedlatif1]

@cubic-dev-ai review this PR

[cubic-dev-ai]

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.