[shahednasser]

• Lists the agent's denied tool calls in each update job's run summary, so missing allowlist rules are easy to spot
• Publishes only the denied commands (capped at 200 characters), not the full transcript

🤖 Generated with Claude Code

[changeset-bot]

⚠️ No Changeset found

Latest commit: 0137f60

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[medusa-os-bot]

Thanks for the contribution! Initial automated review looks good.

Verdict: Looks good for a final review by the team.

Adds a "Show denied tool calls" step to the update job that reads the Claude Code execution output from $RUNNER_TEMP and appends any permission-denied entries (capped at 200 characters each, backticks escaped) to the GitHub step summary, making missing allowlist rules easier to spot.

Checked: security (no tainted inputs — KEY is pre-validated to ^(patch|minor|major-[a-z0-9-)]+$ by the plan job; execution output is runner-internal), correctness (missing-file guard and optional jq operator ? handle absent data), conventions.

Triggered by: new PR opened