Auto mode classifier denies an explicitly authorized Bash command, with no manual approval prompt

Preflight Checklist

• [x] I have searched existing issues for similar behavior reports
• [x] This report does NOT contain sensitive information (API keys, passwords, etc.)

Type of Behavior Issue

Other unexpected behavior

What You Asked Claude to Do

A Bash command explicitly authorized in writing by the user: a controlled release (a DB migration plus a fast-forward git push of one commit), with its own confirmation phrase and fail-stop checks.

What Claude Actually Did

1. The auto mode classifier denied the command with "judged this action dangerous (it gave no explanation)".
2. Retried once, same command and tool: denied with "Reason: [Auto-Mode Bypass]".
3. The user switched the Code-tab mode selector to Manual; the command was presented once more and was denied again with "[Auto-Mode Bypass]". No approval prompt was shown.

Nothing was executed after the denials; no alternative tool was used.

Expected Behavior

Either show a manual approval prompt for this single command, or explain the reason for the denial and how to get an approval for it.

Files Affected

Permission Mode

Accept Edits was ON (auto-accepting changes)

Can You Reproduce This?

Yes, every time with the same prompt

Steps to Reproduce

_No response_

Claude Model

Sonnet

Relevant Conversation

Impact

Low - Minor inconvenience

Claude Code Version

claude --version

Platform

Anthropic API

Additional Context

Claude Code desktop app (Code tab), Windows 11. Bundled version folder: 2.1.197 (exact version not available from the app) Related: #100255 (similar symptom: authorized Bash command denied by the classifier with no approval prompt, but with reason [Production Reads] and a matching allow rule; here the reason is [Auto-Mode Bypass], there is no allow rule, and the denial persisted after switching the selector to Manual).