diff --git a/packages/core/src/policy/config.ts b/packages/core/src/policy/config.ts
index 670c1601ec..4b683eb488 100644
--- a/packages/core/src/policy/config.ts
+++ b/packages/core/src/policy/config.ts
@@ -554,7 +554,7 @@ function findMatchingRule(
   criteria: {
     toolName: string;
     mcpName?: string;
-    commandPrefix?: string | string[];
+    commandPrefix?: string | string[] | string[][];
     argsPattern?: string;
   },
 ): TomlRule | undefined {
diff --git a/packages/core/src/policy/policy-updater.test.ts b/packages/core/src/policy/policy-updater.test.ts
index de6552ffa8..0a6aa1fa62 100644
--- a/packages/core/src/policy/policy-updater.test.ts
+++ b/packages/core/src/policy/policy-updater.test.ts
@@ -32,7 +32,7 @@ vi.mock('../utils/shell-utils.js', () => ({
 }));
 interface ParsedPolicy {
   rule?: Array<{
-    commandPrefix?: string | string[];
+    commandPrefix?: string | string[] | string[][];
     mcpName?: string;
     toolName?: string;
   }>;