[BUG] Computer use permission card renders with only "Deny" — no Allow option (macOS desktop, Cowork)

### Preflight Checklist

- [x] I have searched [existing issues](https://github.com/anthropics/claude-code/issues?q=is%3Aissue%20state%3Aopen%20label%3Abug) and this hasn't been reported yet
- [x] This is a single bug report (please file separate reports for different bugs)
- [x] I am using the latest version of Claude Code

### What's Wrong?

The computer-use permission card ("Claude quiere usar Calendar" / "Claude wants to use Calendar") renders **without any approve control**. The only button present is "Denegar" (Deny).

As a result, every `computer_request_access` call resolves immediately as rejected and no application permission can ever be granted. The user is never given an option to accept.

The card renders as:

- Title: "Claude quiere usar Calendar"
- App row: Calendar icon + "Calendar", with a **"Todo"** (All) badge right-aligned
- Body text: "Claude trabajará en estas aplicaciones en segundo plano mientras sigues usando tu Mac."
- Controls: **a single "Denegar" (⌘.) button. No Allow / Permitir button of any kind.**

The "Todo" badge is not actionable — clicking it highlights it visually but grants nothing and opens no menu.

Reproduced 4/4 attempts across roughly 30 minutes, before and after each troubleshooting step below.

**This is isolated to the approval card's rendering, not to device connectivity.** In the same session `computer_resolve_access` returns valid desktop-verified identities, and the built-in browser opens and reads pages normally.

### What Should Happen?

The permission card should offer an approve control alongside "Deny", as documented: "Claude asks for your permission before accessing each application. You'll see a prompt and must approve before Claude can interact with that app."
(https://support.claude.com/en/articles/14128542-let-claude-use-your-computer-in-cowork)

Clicking approve should add the app to the session allowlist so `computer_app_*` tools can act on it.

### Error Messages/Logs

```shell
computer_resolve_access(["Calendar"]) — resolves correctly:
{"apps":[{"bundleId":"com.apple.iCal","displayName":"Calendar","tier":"full","isSentinel":false}],
"alreadyGranted":[],
"preferredModeDefault":"background",
"screenshotFiltering":"native"}

computer_request_access(...) — returns, every time, with no user-facing accept option:
User rejected mcp__remote-devices__computer_request_access

computer_list_granted_applications() — confirms nothing is granted:
{"allowedApps":[],"grantFlags":{"clipboardRead":false,"clipboardWrite":false,"systemKeyCombos":false}}
```

### Steps to Reproduce

1. On macOS, open the Claude desktop app (Cowork) with a session linked to the local machine.
2. Confirm Settings -> Desktop app -> General -> Computer use (Beta) is fully enabled (see table below).
3. In a chat, ask Claude to access a local macOS app — in my case Apple Calendar (`com.apple.iCal`).
4. Claude calls `computer_resolve_access(["Calendar"])`, which resolves correctly.
5. Claude calls `computer_request_access(...)` with those entries verbatim.
6. The approval card appears in the chat — **with only a "Denegar" button and no approve control**.
7. There is no way to grant the permission. The call returns as rejected.

Settings verified before and after (all correct, nothing disabled):

| Setting | State |
|---|---|
| Enable computer use | On |
| Show apps when Claude finishes | On |
| How Claude uses allowed apps | Background |
| Denied apps | Empty |
| Accessibility (macOS) | Granted |
| Screen Recording (macOS) | Granted |

### Claude Model

Opus

### Is this a regression?

Yes, this worked in a previous version

### Last Working Version

Same desktop app build, working earlier the same morning (2026-09-09, before ~12:00 CEST)

### Claude Code Version

N/A - not the CLI. Claude desktop app (Cowork) for macOS, updated to the latest available version on 2026-09-09; bug present both before and after that update.

### Platform

Anthropic API

### Operating System

macOS

### Terminal/Shell

Terminal.app (macOS)

### Additional Information

## Regression context

This worked normally for months. On the morning of 2026-09-09 I granted app permissions without any issue in several other chats, in the same app and the same account. It then broke mid-morning with **no configuration change on my side** - the approve button simply disappeared from the card.

## Troubleshooting already performed (none of it fixed the issue)

1. Full quit (Cmd+Q) and relaunch - multiple times.
2. Updated the desktop app to the latest available version.
3. Full macOS TCC reset: System Settings -> Privacy & Security -> **Accessibility**, removed the Claude entry with "-" and re-added it with "+"; same for **Screen Recording & System Audio**; relaunched the app afterwards.
4. Re-verified every computer-use setting in the app (all enabled, denied-apps list empty).
5. Re-attempted the permission request after each of the above.

Behaviour was identical in every case: card renders with "Denegar" only.

## Notes for triage

- The device bridge is healthy in the same session: `computer_resolve_access` returns valid desktop-verified identities, and the built-in browser opens and reads pages normally. The failure is isolated to the approval card's rendering.
- The app is not in the denied-apps list.
- I could not find any existing public issue with this exact symptom.
- UI language is Spanish; the card reads "Denegar" where "Permitir" should also appear.

## Impact

Total block on macOS app access from Cowork - it affects any app, not just Calendar, since the failure is in the permission card itself. Recurring scheduled tasks that depend on this access are broken, and a full morning of work was lost with no user-side remedy available.

## Screenshots

(attaching: the permission card showing only "Denegar", captured at 12:25 and 12:37 CEST; and the Computer use settings panel showing all toggles enabled with Accessibility and Screen Recording granted)

Start by reproducing the macOS Cowork flow using computer_resolve_access(["Calendar"]) followed by computer_request_access(...), then verify the result with computer_list_granted_applications(). Trace the permission card entry point and compare the Spanish card's controls with the expected approve-and-deny flow; done means an approve control appears and the app is added to the session allowlist.

索引モデルが issue の本文から書いたものです。