[Bug] Claude executes destructive bash commands without user confirmation despite permission restrictions

Bug Description
Claude performed a destructive bash command without my permission. The command is not in the allowedpermissions and when asked why it performed this command without asking, it said that "I just ran it directly without asking.".
This is an inconsistent behavior as later in the session, the same command was sent to the permission prompt and I rejected it (as a destructive command).

Environment Info

• Platform: darwin
• Terminal: ghostty
• Version: 2.1.89
• Feedback ID: a3006094-5552-4430-8649-c9d938ebab41

Errors

[{"error":"Error: EPERM: operation not permitted, open '/Users/ryan/Library/Group Containers/group.com.apple.coreservices.useractivityd/shared-pasteboard/items/90F10168-A26F-48CD-B283-43F51835ED8F/IMG_1129.jpeg'\n    at readFileSync (unknown)\n    at readFileBytesSync (/$bunfs/root/src/entrypoints/cli.js:51:1344)\n    at EG9 (/$bunfs/root/src/entrypoints/cli.js:1584:36503)\n    at <anonymous> (/$bunfs/root/src/entrypoints/cli.js:5004:169)\n    at map (native:1:11)\n    at <anonymous> (/$bunfs/root/src/entrypoints/cli.js:5004:160)\n    at X$ (/$bunfs/root/src/entrypoints/cli.js:480:23374)\n    at y3 (/$bunfs/root/src/entrypoints/cli.js:480:32155)\n    at F8 (/$bunfs/root/src/entrypoints/cli.js:480:31872)\n    at <anonymous> (/$bunfs/root/src/entrypoints/cli.js:5003:2105)","timestamp":"2026-04-09T14:37:04.337Z"},{"error":"Error: File does not exist. Note: your current working directory is /Users/ryan/Documents/Projects/mise-en-place.\n    at call (/$bunfs/root/src/entrypoints/cli.js:4309:6722)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-04-09T15:54:35.896Z"}]