Claude Code 2.1.260 fixes three permission-rule bugs that each left files writable or every edit broken.

Edit/Write/Read rules whose path contains parentheses were dropped as invalid and ignored by the Bash sandbox, so folders intended as read-only were writable. A single rule with an uncompilable pattern, such as an unclosed bracket, made every file edit fail with "Invalid regular expression." Bash permission checks auto-approved zsh commands hiding a command substitution inside a REPORTTIME, REPORTMEMORY or DIRSTACKSIZE assignment. It also reverts the 2.1.259 change applying Read() deny rules to Bash arguments, which had been denying npm run build under a Read(./**/build/**) rule in every mode. Re-read your deny rules for parentheses and brackets. Claude Code changelog