Environment: Windows, PowerShell shell
Description: Commands added to the Allow List only auto-approve when arguments are simple. When a command contains quoted arguments with special characters (backslashes, parentheses, commas, percent signs), the Allow List match fails and manual approval is required — even when the agent sets SafeToAutoRun: true.
Simple invocation of the same command (e.g. --version or --help) auto-approves correctly, confirming the Allow List entry itself is recognized.
Likely cause: The PowerShell tokenizer misparses arguments containing special characters, breaking the contiguous subsequence matching before it can match the command name.