Bash commands auto-approved despite not being in allowedTools

Summary

Bash tool calls are executing without user approval prompts despite no Bash permission being granted in any configuration file.

Configuration

.claude/settings.local.json (project-level):

{
  "permissions": {
    "allow": [
      "WebSearch",
      "WebFetch(domain:rustic.cli.rs)",
      "WebFetch(domain:github.com)",
      "WebFetch(domain:docs.bluebubbles.app)"
    ]
  }
}

~/.claude.json project entry: "allowedTools": []

~/.claude/settings.json: No permissions block at all.

Expected behavior

Bash commands should require user approval since Bash is not in any allow list.

Actual behavior

Bash commands (e.g. du -sh, df -h, echo "test") execute immediately with no approval prompt.

Environment

• macOS (Darwin 24.6.0)
• Claude Code CLI