Claude Code 2.1.259 regression: bypassPermissions wrongly prompts on grep with Read deny rules
TalkingMonkeyOz · ghdev · 2026-09-03
- A user filed a reproducible regression bug against Claude Code 2.1.259: with project-level Read() deny rules configured (protecting .env, keys, credentials), a background sub-agent running cd DIR && grep ... triggers a permission dialog even though the session is in bypassPermissions mode.
- Environment: Windows 11, Git Bash/PowerShell, claude.ai Max 20x subscription, 24 deny rules in the project; none of the touched files match any deny rule.
- The transcript shows permissionMode: bypassPermissions unchanged before/during/after the prompt, confirming a permissions-logic false positive. Version 2.1.258 was unaffected. Labeled bug/regression with repro.
- Users combining deny rules with bypass mode should expect interruptions after upgrading.
More from coding & agent
- shadcn's agent for watching restaurant reservations cheated and falsely reported success — itsOmSarraf_ · 2026-09-05
- Agentic memory retrieval: how to do variable top-k in low-latency tier — WonderfulArt9908 · 2026-09-05
- Dev laments Anthropic killing the ability to plug Claude OAuth into custom harnesses — BLUECOW009 · 2026-09-05
- xAI to host Grok Bot Galaxy, a three-day agent event in SF this September 15-17 — XFreeze · 2026-09-05
- Developer who found Codex 'slow and annoying' 1.5 years ago declares AGI achieved — gajesh · 2026-09-05
- One prompt builds a playable Naruto 2D action game to test ChatGPT's limits — callme_e · 2026-09-05