[Bug] Command chaining skips permission checks for subsequent commands

Bug Description
when chaining commands it seems to only check permissions for the first command.

Environment Info

• Platform: linux
• Terminal: vscode
• Version: 2.1.9
• Feedback ID: 926e39aa-a76d-4e08-b761-861acd8b951a

Errors

[{"error":"Error: 127: Command failed with exit code 127: code --force --install-extension anthropic.claude-code code or code-insiders is not installed\n    at tB5 (file:///home/vscode/.npm-global/lib/node_modules/@anthropic-ai/claude-code/cli.js:1176:3963)\n    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)\n    at async rB5 (file:///home/vscode/.npm-global/lib/node_modules/@anthropic-ai/claude-code/cli.js:1176:1584)","timestamp":"2026-01-16T15:51:52.706Z"},{"error":"Error: Request was aborted.\n    at vP.makeRequest (file:///home/vscode/.npm-global/lib/node_modules/@anthropic-ai/claude-code/cli.js:1012:3940)\n    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)","timestamp":"2026-01-16T15:55:08.029Z"},{"error":"MaxFileReadTokenExceededError: File content (32036 tokens) exceeds maximum allowed tokens (25000). Please use offset and limit parameters to read specific portions of the file, or use the GrepTool to search for specific content.\n    at u62 (file:///home/vscode/.npm-global/lib/node_modules/@anthropic-ai/claude-code/cli.js:1629:13404)\n    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)\n    at async Object.call (file:///home/vscode/.npm-global/lib/node_modules/@anthropic-ai/claude-code/cli.js:1638:996)\n    at async vs5 (file:///home/vscode/.npm-global/lib/node_modules/@anthropic-ai/claude-code/cli.js:2775:19647)","timestamp":"2026-01-16T15:56:24.426Z"},{"error":"Error: Request was aborted.\n    at vP.makeRequest (file:///home/vscode/.npm-global/lib/node_modules/@anthropic-ai/claude-code/cli.js:1012:3940)\n    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)","timestamp":"2026-01-16T15:58:10.881Z"},{"error":"Error: Request was aborted.\n    at vP.makeRequest (file:///home/vscode/.npm-global/lib/node_modules/@anthropic-ai/claude-code/cli.js:1012:3940)\n    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)","timestamp":"2026-01-16T15:58:19.729Z"},{"error":"MaxFileReadTokenExceededError: File content (32238 tokens) exceeds maximum allowed tokens (25000). Please use offset and limit parameters to read specific portions of the file, or use the GrepTool to search for specific content.\n    at u62 (file:///home/vscode/.npm-global/lib/node_modules/@anthropic-ai/claude-code/cli.js:1629:13404)\n    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)\n    at async Object.call (file:///home/vscode/.npm-global/lib/node_modules/@anthropic-ai/claude-code/cli.js:1638:996)\n    at async file:///home/vscode/.npm-global/lib/node_modules/@anthropic-ai/claude-code/cli.js:4682:1551","timestamp":"2026-01-16T15:58:34.751Z"},{"error":"MaxFileReadTokenExceededError: File content (32238 tokens) exceeds maximum allowed tokens (25000). Please use offset and limit parameters to read specific portions of the file, or use the GrepTool to search for specific content.\n    at u62 (file:///home/vscode/.npm-global/lib/node_modules/@anthropic-ai/claude-code/cli.js:1629:13404)\n    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)\n    at async Object.call (file:///home/vscode/.npm-global/lib/node_modules/@anthropic-ai/claude-code/cli.js:1638:996)\n    at async file:///home/vscode/.npm-global/lib/node_modules/@anthropic-ai/claude-code/cli.js:4682:1551","timestamp":"2026-01-16T15:58:44.473Z"}]