Claude Code bug makes Bash prompt for approval even when allow-list rules should match
amirkedar · ghdev · 2026-07-20
A GitHub issue against anthropics/claude-code reports that the Bash tool still prompts for approval even when permissions.defaultMode is set to bypassPermissions and matching allow rules are present.
The bug appears in the Claude Code VSCode extension on Windows 10. The reporter says the problem reproduces across multiple sessions and with several already-allowed command shapes, including pytest, git checkout, gh issue create, and even plain ls. One clue is that changing .claude/settings.json and starting a brand-new session temporarily makes commands run without prompts, suggesting permissions may be loaded only at session start rather than hot-reloaded.
The issue asks whether defaultMode / allow are read once at session or tool-registration time, whether there is a supported reload path, and whether there are matching nuances such as quoting, absolute vs relative paths, or working-directory context.
More from coding & agent
- Reticle builds a verification layer that lets AI coding agents check their own generated code — Scobleizer · 2026-10-27
- Trust your agent, but read its logs: Claude managed agents tips — brada · 2026-10-27
- Dev training a guard model to block prompt injection, tool and memory poisoning — gnukeith · 2026-10-27
- Dev trains a ~4GB-VRAM sentinel model to guard against prompt injection and poisoned memory — gnukeith · 2026-10-27
- Superset rebrands as Paradev, raises $11.5M seed led by USV — massimosgrelli · 2026-10-27
- Ex-Big Tech managers may thrive in the AI era: manage agents like you managed teams — lxfater · 2026-10-27