Claude Code bug makes Bash prompt for approval even when allow-list rules should match
amirkedar · ghdev · 2026-07-20
A GitHub issue against anthropics/claude-code reports that the Bash tool still prompts for approval even when permissions.defaultMode is set to bypassPermissions and matching allow rules are present.
The bug appears in the Claude Code VSCode extension on Windows 10. The reporter says the problem reproduces across multiple sessions and with several already-allowed command shapes, including pytest, git checkout, gh issue create, and even plain ls. One clue is that changing .claude/settings.json and starting a brand-new session temporarily makes commands run without prompts, suggesting permissions may be loaded only at session start rather than hot-reloaded.
The issue asks whether defaultMode / allow are read once at session or tool-registration time, whether there is a supported reload path, and whether there are matching nuances such as quoting, absolute vs relative paths, or working-directory context.
More from coding & agent
- Gergely Orosz: Shipping 10x PRs With AI Agents, Sites Fill With Small Regressions — ducha_aiki · 2026-09-11
- Same Echo Maze prompt, three frontier models: all passed visually but shipped the same hidden bug — eyishazyer · 2026-09-11
- Astra storyboards plus Minimax H3 per-shot generation boost video success rates — Hailuo_AI · 2026-09-11
- Codex tip: use Sol with Astra and Luna sub-agents to save usage — pvncher · 2026-09-11
- agents-best-practices: a provider-neutral Agent Skill for designing and auditing agentic harnesses — tom_doerr · 2026-09-11
- Cognition's SWE-2 uses a KKT duality argument in RL to shift the effort Pareto curve — YouJiacheng · 2026-09-11