[Bug] Plan mode executes write operations without user approval

Bug Description
Title: Plan mode executes tools without asking for permission

Description:
When entering plan mode, Claude Code should be restricted to read-only operations (Read, Glob, Grep, etc.) and
should ask for permission before executing any write operations. However, Claude is executing Bash, Edit, and
Write tools without prompting for approval while in plan mode.

Expected behavior:

• In plan mode, Claude should only explore/research using read-only tools
• Any write operations should require explicit user approval
• Plan mode should be a safe "thinking/planning" state

Actual behavior:

• Claude executes write operations (Edit, Bash) without asking for permission
• User has no opportunity to approve or deny actions during planning phase

Environment:

• OS: macOS (Darwin 25.0.0)
• Claude Code version: [run claude --version to get this]

Steps to reproduce:

1. Start Claude Code
2. Enter plan mode (or have Claude enter plan mode for a task)
3. Observe that Claude executes tools without permission prompts

Environment Info

• Platform: darwin
• Terminal: ghostty
• Version: 2.0.65
• Feedback ID: af82ff62-384c-40d2-8151-86c7e919f48f