Auto mode classifier blocks user-approved posts to my own account, and a permission rule is treated as a bypass

What happened

In the Claude desktop app (Code tab) with the Claude in Chrome extension, I asked Claude to publish drafts that I had read and approved in chat to a members-only online community I belong to, using my own logged-in account.

• Replies under existing posts and direct messages went through.
• Creating a new post, and editing my own existing post, were refused by the auto mode classifier ("External System Writes"), even with my explicit approval in chat and the session in bypass permissions mode.
• The denial message says the user can add a permission rule to allow the action. I added mcp__claude-in-chrome__computer and mcp__claude-in-chrome__file_upload to permissions.allow in ~/.claude/settings.json. The next attempt was refused as "Auto-Mode Bypass".

What I'd like

1. A supported way to pre-approve publishing specific content to sites and accounts I own, for example a per-site allowlist, or a confirmation prompt in the app that shows me the exact text and attachments and lets me click "approve" once per post.
2. Consistent guidance: the denial message points to a permission rule, but adding that rule is then treated as a bypass attempt. Please say clearly what, if anything, the user can do to allow the action.

Environment

Claude desktop app (Code tab) on macOS, Claude in Chrome extension, model claude-opus-5-5, October 2026.