Inconsistent Command Execution Permission with $(nproc) Substitution

Bug Description
Bash(make -C build -j$(nproc) -s)" is in .claude/settings.local.json but when running THIS EXACT COMMAND claude asks for permission to execute, claude does not ask for permission when executing make -C build -j8 -s so obviously there is some problem with the substitutions that is not immediately obvious.

Environment Info

• Platform: linux
• Terminal: gnome-terminal
• Version: 1.0.72
• Feedback ID: c2f34f37-eb07-45ab-bbf0-3d0e3b9a1621

Errors

here are my permissions, I

[]

"permissions": {
"allow": [
"Bash(git add:*)",
"Bash(git commit:*)",
"Bash(git push:*)",
"Bash(git status:*)",
"mcp__gdb__gdb_set_breakpoint",
"mcp__gdb__gdb_command",
"mcp__gdb__gdb_print",
"mcp__gdb__gdb_continue",
"mcp__gdb__gdb_step",
"mcp__gdb__gdb_next",
"mcp__gdb__gdb_start",
"mcp__gdb__gdb_load",
"mcp__gdb__gdb_terminate",
"mcp__gdb__gdb_backtrace",
"Bash(python:*)",
"Bash(grep:*)",
"Bash(uv run: *)",
"Bash(ls:*)",
"Bash(make:*)",
"Bash(./build/headless:*)",
"Bash(true)",
"Bash(./build/viewer:*)",
"Bash(uv run:*)",
"Bash(uv pip install -e .)",
"Bash(find:*)",
"Bash(/opt/cmake/bin/cmake -B build)",
"Bash(make -C build -j$(nproc) -s)",
"Bash(source:*)",
"WebFetch(domain:nanobind.readthedocs.io)",
"Bash(./tests/quick_test.sh:*)",
"WebFetch(domain:raw.githubusercontent.com)",
"mcp__serena__get_symbols_overview",
"mcp__serena__find_symbol",
"mcp__serena__search_for_pattern",
"mcp__python-debugger-mcp__send_pdb_command",
"mcp__python-debugger-mcp__end_debug",
"mcp__python-debugger-mcp__restart_debug",
"mcp__python-debugger-mcp__start_debug",
"mcp__python-debugger-mcp__set_breakpoint",
"Bash(git -C external/madrona status)"
],

I think this should be quite trivial to reproduce.. were unable to find anything explaining this behavior in the docs