[Bug] Tool execution bypassing allowlist restrictions in settings.json

Bug Description
agent just executed bash rm without my permission and tool is not explictly allowed in settings*.json

Environment Info

• Platform: darwin
• Terminal: vscode
• Version: 2.0.37
• Feedback ID: 8547c7cc-4973-4060-8f19-caa3ec991f85

Errors

[{"error":"AxiosError: Request failed with status code 401\n    at ET (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:62:1137)\n    at IncomingMessage.<anonymous> (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:67:9858)\n    at IncomingMessage.emit (node:events:536:35)\n    at IncomingMessage.emit (node:domain:489:12)\n    at endReadableNT (node:internal/streams/readable:1698:12)\n    at process.processTicksAndRejections (node:internal/process/task_queues:90:21)\n    at xZA.request (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:69:2130)\n    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)\n    at async it2 (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:3775:33849)","timestamp":"2025-11-12T01:33:22.326Z"},{"error":"Error: Language not supported while highlighting code, falling back to markdown: \n    at xD (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:1278:4413)\n    at file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:1278:4141\n    at Array.map (<anonymous>)\n    at bC (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:1278:4132)\n    at n$Q (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:1672:15656)\n    at ow (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:105:19414)\n    at bt (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:107:42806)\n    at b9 (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:107:38347)\n    at Tp (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:107:38275)\n    at X$ (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:107:38129)","timestamp":"2025-11-12T01:39:05.882Z"},{"error":"Error: Language not supported while highlighting code, falling back to markdown: \n    at xD (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:1278:4413)\n    at file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:1278:4141\n    at Array.map (<anonymous>)\n    at bC (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:1278:4132)\n    at S$Q (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:1653:2875)\n    at ow (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:105:19414)\n    at bt (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:107:42806)\n    at b9 (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:107:38347)\n    at Tp (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:107:38275)\n    at X$ (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:107:38129)","timestamp":"2025-11-12T02:06:27.642Z"},{"error":"Error: Request was aborted.\n    at zi._createMessage (file:///Users/jamiethompson/.nvm/versions/node/v22.12.0/lib/node_modules/@anthropic-ai/claude-code/cli.js:235:4515)\n    at process.processTicksAndRejections (node:internal/process/task_queues:105:5)","timestamp":"2025-11-12T02:09:15.610Z"}]