Claude Code bug makes Bash prompt for approval even when allow-list rules should match
amirkedar · ghdev · 2026-07-20
A GitHub issue against anthropics/claude-code reports that the Bash tool still prompts for approval even when permissions.defaultMode is set to bypassPermissions and matching allow rules are present.
The bug appears in the Claude Code VSCode extension on Windows 10. The reporter says the problem reproduces across multiple sessions and with several already-allowed command shapes, including pytest, git checkout, gh issue create, and even plain ls. One clue is that changing .claude/settings.json and starting a brand-new session temporarily makes commands run without prompts, suggesting permissions may be loaded only at session start rather than hot-reloaded.
The issue asks whether defaultMode / allow are read once at session or tool-registration time, whether there is a supported reload path, and whether there are matching nuances such as quoting, absolute vs relative paths, or working-directory context.
More from coding & agent
- Shopify design lead on AI-era workflow: designers are becoming full-stack editors — KlausCodes · 2026-10-26
- Ultrametric open-sources Open Startup Repo to let AI agents run startup operations — garrytan · 2026-10-26
- MCP fault injection study: agent task scores drop 60% under realistic tool failures, scale doesn't help — dair_ai · 2026-10-26
- General agents burn ~140M tokens/month on LinkedIn outreach; scripts do it 60x cheaper — ChrisHarpon2 · 2026-10-26
- OpenAI upgrades Decisions API: 400 questions per call, native voice and image support — OpenAIDevs · 2026-10-26
- NLI alone rejects 5/6 new agent memories; a 0.45 similarity gate fixes it all — Alternative_Pin9598 · 2026-10-26