Unclear It is unclear whether deny and ask rules written with (*) or () are now also treated as covering the whole tool.
What
Permission rules tell Claude Code which tools it may use without asking. A rule written as a tool name followed by (*) or () is read as a rule for the whole tool.
Before, Claude Code read rules this way only when they were allow rules and an extra internal check passed. The code that does this no longer looks at what kind of rule it is or at that extra check.
Why
If you use rules written with (*) or (), the way they are matched may differ from before.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
It is unclear whether deny and ask rules written with `(*)` or `()` are now also treated as covering the whole tool.