harness-tools/docs/fast-browser-origin-defaults.md

Unrestricted web-origin defaults

User decision

The user requested no default website restriction. Origin policy is now intended to be optional, not a mandatory permission dialog or fixed test-origin list.

• Omitted allowedOrigins defaults to "*": any valid HTTP(S) website.
• Explicit allowedOrigins: "*" selects unrestricted web origins at a particular configuration scope.
• A nonempty array retains the existing exact-origin allowlist behavior. Projects and individual runs can opt into restrictions.
• Empty arrays and partial hostname wildcards are not alternate spellings for unrestricted access.
• Internal browser URLs, local file URLs, malformed URLs and credential-bearing URLs remain unsupported.
• A session created with an explicit restricted policy cannot be widened by a later run. An unrestricted session can be narrowed for one call.

Unrestricted origin policy does not authorize unrelated actions: the initiating user's task, bounded steps, mutation verification and no-blind-retry behavior still apply. It also does not add tab management: multiple eligible web tabs remain an explicit ambiguity rather than permission to choose an arbitrary tab.

Retired demo environment

The active Pi process had inherited four variables from .pi/fast-browser-demo/start-pi.sh: a fixed CDP endpoint, the old localhost fixture origin, a pinned Python interpreter and the Luna auxiliary model.

At the user's request:

• Removed the four exports from that ignored helper and explicitly unset inherited copies before its exec pi.
• Moved the useful Python interpreter and model settings into global fast-browser.json, with reasoning off, preserving existing settings and credential references.
• Did not migrate the fixture origin or fixed CDP endpoint.
• Did not delete browser profiles, the pinned Python environment, or provider credentials.
• Verified the helper with an offline stub Pi executable: all four variables were absent in the new process.

A child shell cannot unset its parent Pi process's environment. A clean restart through the updated helper, rather than /reload alone, is needed to remove values already inherited by the current process. Deliberately configured environment defaults remain supported after this cleanup.

Verification

Passed bun run test:fast-browser (126 TypeScript tests and 23 Python tests), bun run typecheck, bun run test:packages, bun run test, and git diff --check.

Coverage includes missing/unrestricted/restricted policies across config, native settings, session lifecycle, TypeScript bridge and Python worker. Restricted sessions cannot be widened, non-web/credential-bearing/wildcard-host URLs remain unsupported, and the settings view exposes default provenance. Tests isolate agent directories and project paths instead of reading the user's real global configuration or provider keys.

A read-only configuration check with the four legacy variables removed confirmed the actual project resolves origins to "*" from defaults, Python/model from global JSON, and retains its harness-test profile. No browser was launched or external login attempted.