Global permission rules not matching paths under ~/Code/ and Bash commands #15421

  **Description:**

  Global permission rules in `~/.claude/settings.json` are not being applied correctly. Commands that should be auto-approved based
  on configured rules are still prompting for confirmation.

  **Environment:**
  - OS: macOS (Darwin 25.2.0)
  - Claude Code version: 2.0.61

  **Steps to Reproduce:**

  1. Configure `~/.claude/settings.json` with these permissions:
  ```json
  {
    "permissions": {
      "allow": [
        "Write(~/Code/**)",
        "Write(.claude/**)",
        "Bash(mkdir:*)",
        "Bash(touch:*)"
      ]
    }
  }
  ```

  2. Navigate to a project under `~/Code/`, e.g., `~/Code/browsery/`

  3. Ask Claude Code to create a todo file at `.claude/todo.md`

  **Expected Behavior:**

  The following operations should proceed without prompting:
  - `Write(.claude/todo.md)` — matches `Write(.claude/**)`
  - `mkdir -p ~/Code/browsery/.claude` — matches `Bash(mkdir:*)`
  - `touch ~/Code/browsery/.claude/todo.md` — matches `Bash(touch:*)`

  Additionally, `~/Code/browsery/.claude/todo.md` should match `Write(~/Code/**)`.

  **Actual Behavior:**

  All three operations prompt for user confirmation:
  ```
  Bash command
     mkdir -p /Users/username/Code/browsery/.claude
   Do you want to proceed?
  ```

  ```
  Bash command
     touch /Users/username/Code/browsery/.claude/todo.md
   Do you want to proceed?
  ```

  **Additional Context:**

  - The `.claude/` directory already existed when `mkdir -p` was attempted
  - The full absolute path `/Users/username/Code/browsery/.claude/todo.md` should match the glob pattern `~/Code/**`
  - Unclear if this is a tilde expansion issue, glob matching issue, or both