Under the hood
Overly complex bash commands now skip permission-rule matching entirely instead of being reasoned about
What
Before Claude Code splits a bash command into subcommands to match it against permission rules, it now runs a new complexity-and-length check first. If the command trips this check, Claude Code stops and declines to reason about it further, rather than attempting to split and match it.
Why
This avoids Claude Code trying to apply permission logic to bash commands too complex to analyze reliably, likely reducing the chance of a permission rule being matched incorrectly against a convoluted command.