Allowing `Bash(*)` or `Bash(*:*)` doesn't seem to work

Environment

• Platform (select one):
• [x] Anthropic API
• [ ] AWS Bedrock
• [ ] Google Vertex AI
• [ ] Other: <!-- specify -->
• Claude CLI version: 0.2.38 (Claude Code)
• Operating System: MacOS
• Terminal: Alacritty

Bug Description

Should adding Bash(*) or Bash(*:*) to allowedTools tell Claude to not ask for Bash(ls:*)?

It doesn't seem to:

│   Bash(*:*)                                                                                                                                                                                                       
│ ❯ Bash(ls:*)                                                                                                                                                                                                      
│   Done (esc)

Also — is it allowedTools vs /approved-tools? Seems like we're using both?

TY!