improvement(computer-use): allow every app by default, protect sensitive apps, and make per-app approval optional by waleedlatif1 · Pull Request #9980 · simstudioai/sim

waleedlatif1 · 2026-11-13T04:17:10Z

Summary

Computer Use no longer asks before every app: once it is on and Accessibility + Screen Recording are granted, Sim can use any app except Sim itself, System Settings, password managers (Keychain Access, Passwords, 1Password, Bitwarden, KeePassXC, LastPass, Enpass, Proton Pass, Strongbox) and terminals (Terminal, iTerm, Warp, Ghostty — shell access stays behind the separate Terminal control). The helper refuses those apps; bundle IDs match case-insensitively
Approving each app's first use is now an opt-in Ask before using a new app setting (computerUseAskForApps, new computer-use:set-ask-for-apps channel with the same gates as set-enabled). Sign-out/deployment reset clears it with the opt-in and approvals
Settings → Desktop → Computer Use is trimmed to the switch, one line on what is excluded, the two macOS permission rows (shown once it is on, with an Allow button), the ask toggle, and Approved apps only in ask mode
Docs and desktop README describe the new model
Compatibility: an older desktop shell reports no askForApps, so new web keeps its approval list and it keeps prompting as before. Existing users move to allow-all on upgrade (computer use was org-limited until v0.9.55). A self-hosted deployment running older web with this shell keeps the old "each app requires your approval" line until web updates

Type of Change

Improvement

Testing

apps/desktop: computer-use service + IPC suites (100 tests); new default-mode test fails without the change
apps/sim: settings desktop + computer-use component suites
lint, check:client-boundary, check:test-patterns, check:comment-hygiene, check:api-validation:strict; full gate in CI

Checklist

Code follows project style guidelines
Self-reviewed my changes
Tests added/updated and passing (new tests pass the test-audit authoring gate)
No new warnings introduced
I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA)

… managers, make per-app approval optional, and trim the settings Turning Computer Use on and granting Accessibility and Screen Recording now covers every app except Sim, System Settings and password managers. Approving each app's first use becomes an opt-in setting, and the settings section keeps only the switch, the two macOS permissions and the optional approvals.

…-insensitively, and remember unlisted app names

vercel · 2026-11-13T04:17:15Z

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Nov 13, 2026 4:45am UTC

cubic-dev-ai

All reported issues were addressed across 12 files

_{Reply with feedback, questions, or to request a fix.

Turn on auto-fix | Re-trigger cubic}

greptile-apps · 2026-11-13T04:20:27Z

Confidence Score: 5/5

[High impact] The PR appears safe to merge; no new actionable issues were found.

Summary

Computer Use allows unprotected apps by default and makes first-use approval optional.

Computer Use opens ordinary apps by default and keeps sensitive apps blocked.
Computer Use settings show permissions and approvals only when they apply.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart TD
  Request[Authorized app request] --> Mode{Ask mode enabled?}
  Mode -->|No| Guard
  Mode -->|Yes| Approval{Saved or task approval?}
  Approval -->|Yes| Guard
  Approval -->|No| Prompt[Ask the user]
  Prompt -->|Allowed| Guard
  Prompt -->|Denied| Stop[Reject request]
  Guard{Protected app?} -->|Yes| Stop
  Guard -->|No| App[Observe or control app]

_{Reviews (3) · Last reviewed commit: "fix(computer-use): describe ask mode in ..." · Reviewed by Greptile}

…rd, and keep the approval copy for older shells

waleedlatif1 · 2026-11-13T04:36:54Z

@greptile

waleedlatif1 · 2026-11-13T04:36:55Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-11-13T04:37:00Z

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

All reported issues were addressed across 13 files

_{Reply with feedback, questions, or to request a fix.

Turn on auto-fix | Re-trigger cubic}

…e protected apps in the helper README

waleedlatif1 · 2026-11-13T04:46:13Z

@greptile

waleedlatif1 · 2026-11-13T04:46:14Z

@cubic-dev-ai review this PR

cubic-dev-ai · 2026-11-13T04:46:19Z

@cubic-dev-ai review this PR

@waleedlatif1 I have started the AI code review. It will take a few minutes to complete.

cubic-dev-ai

No issues found across 14 files

Confidence score: 5/5

Automated review surfaced no issues in the provided summaries.
No files require special attention.

_{Turn on auto-fix | Re-trigger cubic}

waleedlatif1 added 2 commits November 12, 2026 20:12

fix(computer-use): protect terminals, match protected bundle IDs case…

855a607

…-insensitively, and remember unlisted app names

cubic-dev-ai Bot reviewed Nov 13, 2026

View reviewed changes

Comment thread apps/desktop/native/computer-use/ComputerUse.swift Resolved

Comment thread apps/sim/app/workspace/[workspaceId]/settings/components/desktop/computer-use.tsx Resolved

greptile-apps Bot reviewed Nov 13, 2026

View reviewed changes

Comment thread apps/sim/app/workspace/[workspaceId]/settings/components/desktop/computer-use.tsx Resolved

Comment thread apps/desktop/native/computer-use/ComputerUse.swift Resolved

vercel Bot deployed to Preview November 13, 2026 04:23

View deployment

fix(computer-use): protect more terminals, test the protected-app gua…

a327762

…rd, and keep the approval copy for older shells

cubic-dev-ai Bot reviewed Nov 13, 2026

View reviewed changes

Comment thread apps/sim/app/workspace/[workspaceId]/settings/components/desktop/computer-use.tsx Resolved

Comment thread apps/desktop/native/computer-use/ComputerUse.swift Resolved

vercel Bot deployed to Preview November 13, 2026 04:40

View deployment

fix(computer-use): describe ask mode in the settings line and list th…

963b06b

…e protected apps in the helper README

vercel Bot temporarily deployed to Preview November 13, 2026 04:45 Inactive

cubic-dev-ai Bot reviewed Nov 13, 2026

View reviewed changes

waleedlatif1 merged commit e09144a into staging Nov 13, 2026
71 checks passed

waleedlatif1 deleted the feat/computer-use-app-access branch November 13, 2026 04:48

Conversation

waleedlatif1 commented Nov 13, 2026

Summary

Type of Change

Testing

Checklist

Uh oh!

vercel Bot commented Nov 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

greptile-apps Bot commented Nov 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Confidence Score: 5/5

Summary

Diagram

Uh oh!

Uh oh!

Uh oh!

waleedlatif1 commented Nov 13, 2026

Uh oh!

waleedlatif1 commented Nov 13, 2026

Uh oh!

cubic-dev-ai Bot commented Nov 13, 2026

Uh oh!

cubic-dev-ai Bot left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

waleedlatif1 commented Nov 13, 2026

Uh oh!

waleedlatif1 commented Nov 13, 2026

Uh oh!

cubic-dev-ai Bot commented Nov 13, 2026

Uh oh!

cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

This branch was previously deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

vercel Bot commented Nov 13, 2026 •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading

greptile-apps Bot commented Nov 13, 2026 •

edited

Loading

cubic-dev-ai Bot left a comment •

edited

Loading