[Bug] Auto mode still prompts for grep tool authorization despite being in Auto Mode

Bug Description
i keep on having authorization request for tools despite being in auto mode.
New behavior, it wasn't the case yesterday
This is quite annoying, it keeps on stopping the agent

grep on 'GxAccessClient.ts' after a cd would search a directory that cannot be determined here, and a Read() deny rule is configured; only you can approve running it anyway.

Detail Error
```

Bash command · from the general-purpose agent

cd /Users/xav/src/temporal/gx-access && grep -n -E "transaction|BEGIN|COMMIT|ROLLBACK|rollback|commit|retry|readOnly|assertReadOnly|readOnlySqlGuard|class |export (async )?function|interface GxAccess|interface GxTx" GxAccessClient.ts | head -50; echo "--- readOnlySqlGuard"; sed -n '1,40p' readOnlySqlGuard.ts
Inspect GX access client transaction and read-only guard

grep on 'GxAccessClient.ts' after a cd would search a directory that cannot be determined here, and a Read() deny rule is configured; only you can approve running it anyway.

**Hint**

Looking at the changelog of [2.1.259](https://code.claude.com/docs/en/changelog#2-1-259), I highly suspect this modification to be the root cause : 

> Fixed Bash Read() deny rules not covering files given as option values (--ignore-revs-file=.env, -f.env, @file), git diff/git grep file operands, or cd DIR && cat FILE compounds; grep -r/cp -r over a directory holding a denied file now asks


I **do have** some paths in the deny list to prevent Claude from accessing some files in the repo.

**Environment Info**
- Platform: darwin
- Terminal: Apple_Terminal
- Version: 2.1.259
- Feedback ID: 97c3b642-bc38-43bf-b319-69111371d8f7

**Errors**
```json
[]