permissions.ask list is ignored when defaultMode is "bypassPermissions"`

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

When defaultMode is set to "bypassPermissions" in ~/.claude/settings.json, commands listed in permissions.ask are executed without prompting for confirmation. The ask list should act as an override — commands that still require approval even when everything else is auto-approved.

What Should Happen?

Commands in the ask list should always prompt for confirmation, regardless of defaultMode. The deny list is correctly respected under bypassPermissions — the ask list should be too.

Relevant settings:

 {
    "permissions": {
      "defaultMode": "bypassPermissions",
      "ask": [
        "Bash(git status)"
      ]
    }
  }

Error Messages/Logs

Steps to Reproduce

1. Set defaultMode to "bypassPermissions" in ~/.claude/settings.json
2. Add "Bash(git status)" to the permissions.ask array
3. Ask Claude Code to run git status
4. Observe: the command runs without asking for confirmation

Claude Model

Opus

Is this a regression?

No, this never worked

Last Working Version

_No response_

Claude Code Version

2.1.39

Platform

Anthropic API

Operating System

macOS

Terminal/Shell

iTerm2

Additional Information

_No response_