[Bug] Plan Mode does not restrict Bash/shell execution, destructive commands run without gating

Bug Description
Claude Code executed destructive shell commands (pkill, kill -9) while Plan Mode was active. Plan Mode is supposed to restrict Claude to read-only actions, but Bash tool calls are not being blocked — only file edits appear to be gated. Claude acknowledged the mistake after the fact but the commands had already run.

Steps to Reproduce

1. Enter Plan Mode (e.g. via /plan)
2. Ask Claude to perform a task that involves shell execution (e.g. "kill all processes running X")
3. Claude executes the Bash tool without restriction

Expected Behavior
Plan Mode should prevent all side-effectful tool calls (Bash, file writes, etc.), not just file edits.

Actual Behavior
Bash commands executed successfully during Plan Mode. Claude self-corrected in text but the damage was already done.

Environment Info

• Platform: darwin
• Terminal: ghostty
• Version: 2.1.69
• Feedback ID: 14b67e99-9dee-4a25-b0eb-ec58cc094616