Claude Code 2.1.259 regression: bypassPermissions wrongly prompts on grep with Read deny rules
TalkingMonkeyOz · ghdev · 2026-09-03
- A user filed a reproducible regression bug against Claude Code 2.1.259: with project-level Read() deny rules configured (protecting .env, keys, credentials), a background sub-agent running cd DIR && grep ... triggers a permission dialog even though the session is in bypassPermissions mode.
- Environment: Windows 11, Git Bash/PowerShell, claude.ai Max 20x subscription, 24 deny rules in the project; none of the touched files match any deny rule.
- The transcript shows permissionMode: bypassPermissions unchanged before/during/after the prompt, confirming a permissions-logic false positive. Version 2.1.258 was unaffected. Labeled bug/regression with repro.
- Users combining deny rules with bypass mode should expect interruptions after upgrading.
More from coding & agent
- Open models below 4-bit struggle at self-iterating 3D asset generation, HF dev finds — mervenoyann · 2026-10-21
- Developer Moves AI Agents to a Dedicated Linux Workstation Using Incus System Containers — kevinkern · 2026-10-21
- Motion Launches a General Video Agent That Edits Footage and Mimics Any Reference Style — mhdfaran · 2026-10-21
- MCP Platform NitroStack Wins Product Hunt Product of the Day, Focuses on Retention — EstablishmentFun4373 · 2026-10-21
- CodeRabbit Ships 5,000 PRs a Week With a Tiny Team, Hires by Strategy-Game Hours — omojumiller · 2026-10-21
- LukeW maps the five UI problems every AI-native company faces with agents — LukeW · 2026-10-21