[BUG] Claude Code security blocks full paths when they contain spaces

Environment

• Platform (select one):
• [X] Anthropic API
• [ ] AWS Bedrock
• [ ] Google Vertex AI
• [ ] Other: <!-- specify -->
• Claude CLI version: v1.0.77
• Operating System: MacOS 15.6
• Terminal: wezterm

Bug Description

Claude code security check not properly handling bash commands when the path contains a space

Steps to Reproduce

1. Create a session in a path that contains a space
2. Trigger claude to read a file in the path
3. Claude generates an absolute path containing an escaped space
4. Observe security blocks access to the incomplete path name, ignoring the escape character

Expected Behavior

Command should complete without being blocked

Actual Behavior

Command access is blocked

Additional Context

Bash(find /Volumes/External\ Drive/Dev/Project -name "*.js" -type f 2>/dev/null | head -10)
  ⎿  Error: find in '/Volumes/External' was blocked. For security, Claude Code may only search files in the allowed working directories for this session:
     '/Volumes/External Drive/Dev/Project'.