[BUG] Permission prompt defaults to "Always allow" instead of "Allow once" - dangerous UX regression

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

The permission prompt in Claude Code Desktop now defaults to "Always allow" instead of "Allow once". Users reflexively pressing Enter silently grant permanent permissions they never intended to give.

What Should Happen?

The default action should be "Allow once" (least-privilege). Additionally, a setting (e.g. defaultPermissionAction in settings.json) should allow users to configure which action is the default on the permission prompt.

Error Messages/Logs

Steps to Reproduce

Steps to Reproduce

Open Claude Code Desktop
Ask Claude to do anything that triggers a permission prompt (e.g. run a bash command)
Observe that "Always allow" is the pre-selected default action

Claude Model

None

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

Claude 1.2581.0 (f10398) 2026-04-14T17:16:40.000Z

Platform

Anthropic API

Operating System

Windows

Terminal/Shell

Windows Terminal

Additional Information

_No response_