Skip to content

fix: tighten cross-app escape hatch + guard empty fuzzy match#7292

Merged
Jasonnnz merged 1 commit into
feature/qa-video-automationfrom
fix/7281-escape-hatch-and-fuzzy
Feb 23, 2026
Merged

fix: tighten cross-app escape hatch + guard empty fuzzy match#7292
Jasonnnz merged 1 commit into
feature/qa-video-automationfrom
fix/7281-escape-hatch-and-fuzzy

Conversation

@Jasonnnz
Copy link
Copy Markdown
Contributor

@Jasonnnz Jasonnnz commented Feb 23, 2026

Summary

  • Replace overly broad cross-app escape hatch regex patterns with app-name-aware detection that requires two distinct known app names to be mentioned in the task text
  • Guard fuzzy app matching against empty normalized input to prevent arbitrary app activation when input like "---" normalizes to an empty string

Addresses feedback on #7281.

Test plan

  • Verify "switch to dark mode" no longer triggers cross-app escape hatch
  • Verify "move the file to trash" no longer triggers cross-app escape hatch
  • Verify "copy from Chrome and paste into Slack" still triggers cross-app escape hatch
  • Verify openApp with input "---" does not activate the first running app

🤖 Generated with Claude Code


Open with Devin

Replace overly broad regex patterns in taskExplicitlyRequestsCrossApp()
with app-name-aware detection that requires two distinct known app names
to be mentioned. The old patterns matched single-app actions like
"switch to dark mode" or "move the file to trash".

Guard fuzzy app matching against empty normalized input to prevent
String.contains("") from matching the first running app arbitrarily
when input like "---" normalizes to an empty string.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@Jasonnnz Jasonnnz self-assigned this Feb 23, 2026
@Jasonnnz Jasonnnz merged commit 56ec446 into feature/qa-video-automation Feb 23, 2026
0 of 2 checks passed
@Jasonnnz Jasonnnz deleted the fix/7281-escape-hatch-and-fuzzy branch February 23, 2026 23:42
Jasonnnz added a commit that referenced this pull request Feb 23, 2026
Replace overly broad regex patterns in taskExplicitlyRequestsCrossApp()
with app-name-aware detection that requires two distinct known app names
to be mentioned. The old patterns matched single-app actions like
"switch to dark mode" or "move the file to trash".

Guard fuzzy app matching against empty normalized input to prevent
String.contains("") from matching the first running app arbitrarily
when input like "---" normalizes to an empty string.

Co-authored-by: Vellum Assistant <assistant@vellum.ai>
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 6bef78675f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread assistant/src/daemon/computer-use-session.ts
Copy link
Copy Markdown
Contributor

@devin-ai-integration devin-ai-integration Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 potential issue.

View 3 additional findings in Devin Review.

Open in Devin Review

Comment thread assistant/src/daemon/computer-use-session.ts
@Jasonnnz
Copy link
Copy Markdown
Contributor Author

Addressed in #7409

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant