Bash tool: ZodError in permission system blocks git commands

Description

The Bash tool fails with a ZodError when attempting to run git add or git commit commands. The permission prompt never appears — the tool call is rejected immediately with an internal validation error.

Error

Tool permission request failed: ZodError: [
  {
    "code": "invalid_union",
    "errors": [
      [
        {
          "expected": "array",
          "code": "invalid_type",
          "path": ["updatedPermissions", 0, "rules"],
          "message": "Invalid input: expected array, received undefined"
        },
        {
          "code": "invalid_value",
          "values": ["allow", "deny", "ask"],
          "path": ["updatedPermissions", 0, "behavior"],
          "message": "Invalid option: expected one of \"allow\"|\"deny\"|\"ask\""
        }
      ],
      [
        {
          "code": "invalid_value",
          "values": ["deny"],
          "path": ["behavior"],
          "message": "Invalid input: expected \"deny\""
        },
        {
          "expected": "string",
          "code": "invalid_type",
          "path": ["message"],
          "message": "Invalid input: expected string, received undefined"
        }
      ]
    ],
    "path": [],
    "message": "Invalid input"
  }
]

Reproduction

1. Start a Claude Code session in a git repository
2. Have the agent attempt to run git add <files> via the Bash tool
3. The permission request fails with the ZodError above — no prompt is shown to the user
4. Retrying the same command produces the same error consistently
5. Other Bash commands (e.g., cargo check, cargo test) work fine in the same session

Expected behavior

The permission prompt should appear, allowing the user to approve or deny the git command.

Environment

• Platform: Linux (Ubuntu, kernel 6.17)
• Claude Code model: claude-opus-4-6
• The error persists across multiple attempts in the same session
• Non-git Bash commands work fine (e.g., cargo build, cargo test)

Workaround

Run git commands manually in a separate terminal.