Read outside working directory offers no 'allow once' option

## Summary
When Claude Code asks permission to Read a file outside the working directories (here a plugin job log under `~/.claude/plugins/data/codex-openai-codex/state/.../jobs/.log`), the prompt offers only deny or allow-always. There is no "allow once".

## Expected
The same "allow once" choice that Bash and other permission prompts offer, so a single read can be granted without permanently widening the read scope.

## Actual
The user must either reject the read or grant it permanently. The user rejected it.

## Context
- Claude Code CLI, Linux (cachyos), model claude-opus-5
- Trigger: Read tool on an absolute path outside the project working directory
- Prompt text shown to the model on rejection: "The user did not allow this read outside the working directories"

Filed on behalf of the user from within a Claude Code session.