From b807914aab993cd6b9ea2a3b3c5cb2f05a3a875a Mon Sep 17 00:00:00 2001
From: Keith Schaab <keithsc@google.com>
Date: Fri, 3 Apr 2026 20:32:38 +0000
Subject: [PATCH] Fixing missed cases allowing for positional character
 sequences

---
 packages/core/src/policy/config.ts              | 2 +-
 packages/core/src/policy/policy-updater.test.ts | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/core/src/policy/config.ts b/packages/core/src/policy/config.ts
index 670c1601ec..4b683eb488 100644
--- a/packages/core/src/policy/config.ts
+++ b/packages/core/src/policy/config.ts
@@ -554,7 +554,7 @@ function findMatchingRule(
   criteria: {
     toolName: string;
     mcpName?: string;
-    commandPrefix?: string | string[];
+    commandPrefix?: string | string[] | string[][];
     argsPattern?: string;
   },
 ): TomlRule | undefined {
diff --git a/packages/core/src/policy/policy-updater.test.ts b/packages/core/src/policy/policy-updater.test.ts
index de6552ffa8..0a6aa1fa62 100644
--- a/packages/core/src/policy/policy-updater.test.ts
+++ b/packages/core/src/policy/policy-updater.test.ts
@@ -32,7 +32,7 @@ vi.mock('../utils/shell-utils.js', () => ({
 }));
 interface ParsedPolicy {
   rule?: Array<{
-    commandPrefix?: string | string[];
+    commandPrefix?: string | string[] | string[][];
     mcpName?: string;
     toolName?: string;
   }>;