Bash permission checks give new, more specific reasons for refusing wrapper commands

What

Before Claude runs a shell command, Claude Code checks whether it needs your permission. Some commands wrap another command, such as sudo or find -exec, and these are judged more carefully. The reasons given changed:

• Old table removed: the table that explained why parallel, script, su, runuser and sudo with no command of their own read commands from their input is gone. The same symbol is now a pattern that matches control characters.
• New refusal reasons: commands are now refused with a specific reason when they wrap a command in more than four layers of commands such as find -exec or parallel, when they use env -P with a relative directory, or when a shell wrapper (parallel, script, su, runuser, sudo/doas) is given no command of its own.

Why

When a wrapped command is refused or needs approval, the message now says which pattern triggered it, which makes it easier to understand and rewrite the command.