Repeated "would like to access data from other apps" macOS Automation prompt on headless claude -p runs, no persisted entry in System Settings

Type: <b>Bug</b>

Description: Running claude -p "<prompt>" headlessly via a macOS launchd job (every 30 min, invoked as /bin/bash wrapper.sh → claude -p ... with --permission-mode acceptEdits and a scoped --allowedTools list) triggers a recurring macOS Automation permission dialog: "2.1.121" would like to access data from other apps, with Allow/Don't Allow options. This recurs on effectively every run rather than being remembered after the first Allow. Checking System Settings → Privacy & Security → Automation shows no entry at all for this — nothing persisted to toggle, which isn't typical TCC behavior. The dialog appears non-blocking (runs complete successfully regardless), but it's a persistent, unexplained interruption. The requesting app name "2.1.121" looks like a version string rather than a proper app identity, which may point to a code-signing/bundle-identity issue with the CLI binary.

Environment: macOS, Claude Code CLI, headless -p mode invoked from a launchd LaunchAgent.

Extension version: 2.1.216
VS Code version: Code 1.129.1 (Universal) (8a7abeba6e03ea3af87bfbce9a1b7e48fed567b8, 2026-07-17T15:35:09Z)
OS version: Darwin arm64 25.5.0
Modes:

<details>
<summary>System Info</summary>

|Item|Value|
|---|---|
|CPUs|Apple M1 Pro (10 x 2400)|
|GPU Status|2d_canvas: enabled<br>GPU0: VENDOR= 0x106b [Google Inc. (Apple)], DEVICE=0x0000 [ANGLE (Apple, ANGLE Metal Renderer: Apple M1 Pro, Version 26.5.2 (Build 25F84))], DRIVER_VENDOR=Apple, DRIVER_VERSION=26.5.2 ACTIVE<br>Machine model name: MacBookPro<br>Machine model version: 18.1<br>direct_rendering_display_compositor: disabled_off_ok<br>gpu_compositing: enabled<br>multiple_raster_threads: enabled_on<br>opengl: enabled_on<br>rasterization: enabled<br>raw_draw: disabled_off_ok<br>skia_graphite: enabled_on<br>trees_in_viz: disabled_off<br>video_decode: enabled<br>video_encode: enabled<br>webgl: enabled<br>webgpu: enabled<br>webnn: disabled_off|
|Load (avg)|2, 3, 3|
|Memory (System)|16.00GB (0.07GB free)|
|Process Argv|--crash-reporter-id 45ef8a04-6ed1-48b6-8f52-7760322e738c|
|Screen Reader|no|
|VM|0%|
</details><details>
<summary>A/B Experiments</summary>

vsliv368cf:30146710
vswsl492:30256859
pythonvspyt551:31249599
binariesv615:30325510
nativeloc1:31344060
dwcopilot:31170013
dwoutputs:31242946
copilot_t_ci:31333650
e5gg6876:31282496
pythonrdcb7:31342333
6518g693:31463988
aj953862:31281341
6abeh943:31336334
envsactivate1:31551504
478i5457:31544283
cloudbuttont:31379625
3efgi100_wstrepl:31403338
ddidt:31399633
ec5jj548:31422691
cp_cls_t_966_ss:31526232
8hhj4413:31478653
38bie571_auto:31426784
cp_cls_c_1081:31454833
conptydll_true:31498968
e9c30283:31461165
test_treatment2:31471001
c9b86496:31447327
capico_b_098a3278:31551524
idci7584:31464702
e3e4d672:31494082
ei9d7968:31496641
chat:31457767
8hig5102:31480529
89g7j272:31518289
7e187181:31503455
i2gc6536:31499202
52612955:31516516
ghj88844:31499326
23c7c724:31520045
ddid_c:31478207
hmra_i5g22:31518061
7df3h592:31512476
cp_cls_t_1082:31535311
logging_enabled_new:31498466
db5d2638:31499441
jb_cp_cls_t_632:31543129
748c7209:31512887
32d76977:31512328
ha629193:31508444
cdk-lw-on:31524445
f9bf7985:31543584
a1ije391_t:31540920
8hfba999:31537718
jbcp_cls_pctr_t:31531130
61138546:31518536
cp_intellij_t_nes:31548657
gf14b233:31526830
nes-curr-leftover-1500:31538366
ahp-both-windows:31552051
h561g132:31533256
sessions_3:31532893
ihg5j128:31534457
f412h606:31551416
7g2b5551:31542111
max-result-50:31551153
sandbox-ui-on-2:31543161
nes-ex-cf-euporie-03:31542868
allow-none:31553854
6i51c363:31551401
nes-gb3-6k:31552337

</details>

<!-- generated by issue reporter -->