What
When Claude Code statically analyzes a bash command to decide on permissions, its 'simple command' parsing result now includes two new fields: argvSourceLiteral, which indicates whether all the command's arguments came purely from literal text, and carveOutMayDesyncQuoteScan. Both are computed from counters that increase whenever the parser encounters arithmetic expansion, simple expansion, or herestring redirects (shell features that compute or substitute values rather than using plain text).
Why
This gives the permission-checking logic more precise information about whether a command's arguments are trustworthy literal text or come from potentially dynamic shell expansions, which affects how safely the command's permissions can be evaluated.