VS Code extension ignores Bash permission allow rules from settings.json

[WisdomPatienceHappy]

Description

The VS Code extension does not enforce Bash(...) allow rules defined in ~/.claude/settings.json and ~/.claude/settings.local.json. Every Bash command prompts for permission, even when explicitly allowed.

The CLI respects these rules perfectly — same config files, same machine, same commands. Only the extension ignores them.

Reproduction

1. Add Bash allow rules to ~/.claude/settings.json:

{
  "permissions": {
    "allow": [
      "Bash(ls *)",
      "Bash(git status*)",
      "Bash(git log*)"
    ]
  }
}

2. Run claude in terminal → ls -la ~/some/path executes without prompting ✅
3. Use the VS Code extension → same command prompts for permission ❌

Expected behavior

The VS Code extension should enforce the same Bash(...) allow/deny rules from settings.json that the CLI does. Users shouldn't have to approve the same safe commands hundreds of times per session.

Environment

• macOS 15 (Darwin 25.3.0)
• Cursor (VS Code fork) — but the issue is with the Claude Code extension, not Cursor specifically
• Claude Code CLI works correctly with the same settings
• Both ~/.claude/settings.json and ~/.claude/settings.local.json tested

Impact

Heavy users with comprehensive allow lists (100+ Bash patterns) get no benefit from them in the extension. This makes the extension significantly less usable for power users who have carefully curated their permission rules. The constant prompting interrupts flow and slows down work considerably.

But all good. Thank you. The tool is amazing. Deeply appreciate you guys and all the work you've done!

[github-actions]

Found 3 possible duplicate issues:

1. permissions.allow in project .claude/settings.json is ignored by VS Code extension #43787
2. [BUG] VSCode Extension: .claude/settings.local.json permissions not respected for Bash/Write/Edit operations (even with bypassPermissions mode) #15921
3. [BUG] global/local settings.json allow permissions are not respected by Claude Code #13340

This issue will be automatically closed as a duplicate in 3 days.

• If your issue is a duplicate, please close it and 👍 the existing issue instead
• To prevent auto-closure, add a comment or 👎 this comment

🤖 Generated with Claude Code

[bcherny]

Thanks for the report. This is a duplicate of #15921 — consolidating tracking there.

[github-actions]

Closing for now — inactive for too long. Please open a new issue if this is still relevant.

[github-actions]

This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.