Complex shell commands may now ask before running when rm cannot be ruled out

Claude Code checks shell commands for a dangerous rm (the command that deletes files). Some commands contain other commands inside them. When Claude Code cannot check all of those inner pieces, it now asks for your approval instead of letting the command through.

For commands with more than 64 of these inner pieces, it now blocks whenever a further test matches, not only when rm appears in the text. The reasons it gives now start with "not ruled out".