[BUG] Tool calls (Bash mkdir and Write) executed without prompting for approval despite the user selecting manual approval mode for the session.

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

After working on an implementation plan, Claude asked me if I wanted to auto accept changes, manually approve changes, or other. I selected Manual mode. The changes were auto accepted and I was not able to interact with the tool as needed.

What Should Happen?

User inputs must be respected.

Error Messages/Logs

Steps to Reproduce

1. Create an implementation plan
2. Select manual approval of changes
3. Observe Claude auto-implement plan

Claude Model

Opus

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

2.1.109

Platform

Anthropic API

Operating System

macOS

Terminal/Shell

Other

Additional Information

_No response_