Claude Code bug makes Bash prompt for approval even when allow-list rules should match
amirkedar · ghdev · 2026-07-20
A GitHub issue against anthropics/claude-code reports that the Bash tool still prompts for approval even when permissions.defaultMode is set to bypassPermissions and matching allow rules are present.
The bug appears in the Claude Code VSCode extension on Windows 10. The reporter says the problem reproduces across multiple sessions and with several already-allowed command shapes, including pytest, git checkout, gh issue create, and even plain ls. One clue is that changing .claude/settings.json and starting a brand-new session temporarily makes commands run without prompts, suggesting permissions may be loaded only at session start rather than hot-reloaded.
The issue asks whether defaultMode / allow are read once at session or tool-registration time, whether there is a supported reload path, and whether there are matching nuances such as quoting, absolute vs relative paths, or working-directory context.
More from coding & agent
- NVIDIA says Nemotron 3 Ultra hit 97.1% on agentic RTL chip-design tasks — NVIDIAAI · 2026-07-27
- Tokyo Agent Forge hackathon shipped production-ready AI agents in one day — DavidBennett__ · 2026-07-27
- Long-running agents will need immutable event logs, this thread argues — sebpaquet · 2026-07-27
- Agentic Data Science in Practice: Agents Write Code but Answer Wrong Questions — hugobowne · 2026-07-27
- A VS Code extension adds Markdown-style highlighting to Alchemy string templates — samgoodwin89 · 2026-07-27
- Claude’s Stripe MCP connector is being called unusable after repeated disconnects — evielync · 2026-07-27