[BUG] Exclude patterns in permissions.json not enforced for nested glob patterns

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

Files matching exclude patterns in .claude/permissions.json are accessible without permission prompts.
## Environment

• Claude Code version: 2.0.69
• OS: macOS (Darwin 25.2.0)
• Platform: darwin

## Configuration
permissions.json exclude field includes: "workspaces/**/.claude/**"

This is a security/privacy issue that should be addressed.

What Should Happen?

Claude Code should prompt for permission or block access entirely for files matching exclude patterns.

Error Messages/Logs

> read workspaces/test-project/.claude/test.txt 

⏺ I'll read that file for you.

⏺ Read(workspaces/test-project/.claude/test.txt)
  ⎿  Read 2 lines

⏺ The file workspaces/test-project/.claude/test.txt contains:
  test

  It's a simple text file with just the word "test" on the first line.

Steps to Reproduce

1. Add exclude pattern to .claude/permissions.json: "workspaces/**/.claude/**"
2. Attempt to read a file matching that pattern: workspaces/test-project/.claude/test.txt
3. File is read without permission prompt

Claude Model

Sonnet (default)

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

2.0.69

Platform

Anthropic API

Operating System

macOS

Terminal/Shell

Terminal.app (macOS)

Additional Information

_No response_