@haus-tech/haus-workflow 5.12.0 → 5.12.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +6 -0
- package/dist/cli.js +10 -1
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,11 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## [5.12.1](https://github.com/WeAreHausTech/haus-workflow/compare/v5.12.0...v5.12.1) (2026-10-08)
|
|
4
|
+
|
|
5
|
+
### Bug Fixes
|
|
6
|
+
|
|
7
|
+
- **security:** allow the desktop app's auto-merge tool ([#646](https://github.com/WeAreHausTech/haus-workflow/issues/646)) ([cc29b3e](https://github.com/WeAreHausTech/haus-workflow/commit/cc29b3e18f63e72766839c06d398007a199b22c0))
|
|
8
|
+
|
|
3
9
|
## [5.12.0](https://github.com/WeAreHausTech/haus-workflow/compare/v5.11.0...v5.12.0) (2026-10-08)
|
|
4
10
|
|
|
5
11
|
### Bug Fixes
|
package/dist/cli.js
CHANGED
|
@@ -4669,11 +4669,20 @@ var ALLOWED_COMMANDS = [
|
|
|
4669
4669
|
"gh search prs",
|
|
4670
4670
|
"gh search issues"
|
|
4671
4671
|
];
|
|
4672
|
+
var ALLOWED_TOOLS = [
|
|
4673
|
+
// The Claude desktop Code tab's auto-merge switch. The auto mode classifier blocked it
|
|
4674
|
+
// after `gh pr merge` itself was allowed. It reaches the same outcome as
|
|
4675
|
+
// `gh pr merge --auto`, which `Bash(gh pr merge:*)` already carries, and GitHub only
|
|
4676
|
+
// enables auto-merge where required checks exist, so branch protection stays the gate.
|
|
4677
|
+
// Outside the desktop app no such tool exists and the rule matches nothing.
|
|
4678
|
+
"mcp__ccd_pr__set_auto_merge"
|
|
4679
|
+
];
|
|
4672
4680
|
function buildAllowRules() {
|
|
4673
4681
|
return [
|
|
4674
4682
|
.../* @__PURE__ */ new Set([
|
|
4675
4683
|
...ALLOWED_SUBCOMMANDS.map((sub) => `Bash(haus ${sub}:*)`),
|
|
4676
|
-
...ALLOWED_COMMANDS.map((command) => `Bash(${command}:*)`)
|
|
4684
|
+
...ALLOWED_COMMANDS.map((command) => `Bash(${command}:*)`),
|
|
4685
|
+
...ALLOWED_TOOLS
|
|
4677
4686
|
])
|
|
4678
4687
|
];
|
|
4679
4688
|
}
|