Bash tool executed `brew install` without prompting user for approval

Bug

A Bash(brew install kubeconform) command executed successfully without prompting the user for approval, despite no matching allow rule in the user's permission configuration.

Expected behavior

The permission system should have prompted the user before executing brew install, since no allowlist pattern matches it.

Actual behavior

The command ran to completion and installed the package without any user prompt.

Relevant config

• User settings (~/.claude/settings.json): only allows gh pr view/diff/checks/list/status
• Project settings (.claude/settings.json): only allows scoped pnpm --filter, git log/diff/status
• Project local settings (.claude/settings.local.json): only allows WebFetch for specific domains
• No Bash(brew *) or Bash(*) wildcard present in any config

Environment

• Claude Code running inside VSCode extension (v2.1.109)
• Helm v4.0.0
• macOS (Darwin 25.3.0)