Plan mode transitions to auto mode instead of bypassPermissions when launched with --dangerously-skip-permissions

Bug

When Claude Code is launched with --dangerously-skip-permissions and the user toggles to plan mode, approving a plan transitions to auto mode instead of returning to bypassPermissions. This causes execution to fail when the auto mode classifier is unavailable.

Steps to reproduce

1. Launch with claude --dangerously-skip-permissions (starts in bypassPermissions mode)
2. Toggle to plan mode via Shift+Tab
3. Give a task, review the plan, approve it
4. Observe: mode transitions to auto instead of bypassPermissions
5. Tool calls fail with: Error: The auto mode classifier is temporarily unavailable, so Bash cannot be used right now.

Expected behavior

After approving a plan, execution should return to bypassPermissions — the mode the session was started with via --dangerously-skip-permissions.

Additional context

• settings.json has "defaultMode": "bypassPermissions" — this is also not respected
• The error message includes dacEnabled=n/a, hasExtraBody=false
• Read-only tools (Read, Grep, Glob) continue to work; only tools requiring classification (Bash, Edit, Write) are blocked
• Workaround: manually toggle back to bypassPermissions via Shift+Tab after plan approval, before execution begins