Glob pattern ** works for Read but not Write/Edit in permissions.allow

Bug Description

Glob pattern ** in permissions.allow works correctly for Read but not for Write or Edit. Users are still prompted for Write/Edit operations despite having matching allow rules.

Steps to Reproduce

1. Add these permissions to ~/.claude/settings.json:

{
  "permissions": {
    "allow": [
      "Read(/Users/username/**)",
      "Write(/Users/username/**)",
      "Edit(/Users/username/**)"
    ]
  }
}

1. In Claude Code, read a file in a nested subdirectory (e.g., /Users/username/Documents/GitHub/project/.claude/runs/2026-01-03/file.md)

• Result: No prompt, works as expected ✓

1. Write or edit a file in the same nested subdirectory

• Expected: No prompt (matches allow rule)
• Actual: User is prompted for permission ✗

Environment

• macOS (Darwin 24.6.0)
• Claude Code (latest)

Additional Context

• Same glob pattern ** used for all three tools
• Read respects the pattern, Write/Edit do not
• Pattern should match any depth of subdirectories
• Tested with paths like /Users/username/Documents/GitHub/project/.claude/runs/2026-01-03-orchestration/code-review.md