After Claude changes working directory it starts asking permissions for accessing `..`, even if it was initially spawned from `..`

When Claude is launched with claude --dangerously-skip-permissions --add-dir . it still asks for permission to read the contents of the current working directory, this happens when Claude changes working directory, it then forgets it had access to the parent directory.