Read outside working directory offers no 'allow once' option
Status Open
Maintainer reply None cached
Activity 0 comments · opened Sep 14, 2026
Summary
When Claude Code asks permission to Read a file outside the working directories (here a plugin job log under ~/.claude/plugins/data/codex-openai-codex/state/.../jobs/<job>.log), the prompt offers only deny or allow-always. There is no "allow once".
Expected
The same "allow once" choice that Bash and other permission prompts offer, so a single read can be granted without permanently widening the read scope.
Actual
The user must either reject the read or grant it permanently. The user rejected it.
Context
- Claude Code CLI, Linux (cachyos), model claude-opus-5
- Trigger: Read tool on an absolute path outside the project working directory
- Prompt text shown to the model on rejection: "The user did not allow this read outside the working directories"
Filed on behalf of the user from within a Claude Code session.