archive_session shows an Allow prompt in bypassPermissions mode but the call is refused regardless — misleading false positive

Summary

In bypassPermissions (unsupervised / auto) mode, the mcp__ccd_session_mgmt__archive_session tool surfaces an Allow/Deny permission prompt to the user — but approving it has no effect: the tool call still returns

This tool requires user approval and is unavailable in unsupervised mode.

The prompt is a false positive. It implies that clicking Allow will let the action proceed, when in fact the call is categorically refused in this mode regardless of the user's choice. The only way to make it succeed is to switch the session to a supervised permission mode — which the prompt never communicates.

Repro

1. Run a session with bypassPermissions as the default permission mode.
2. Ask Claude to archive one or more completed sessions (e.g. stale scheduled-routine runs).
3. Claude fires archive_session calls. CCD shows an Allow/Deny prompt for each.
4. Click Allow.
5. Observed: the tool call still errors with This tool requires user approval and is unavailable in unsupervised mode. Nothing is archived. Re-running after re-approving makes no difference.
6. Switch to a supervised permission mode and re-run the same calls → they now prompt and succeed.

Expected

One of:

• Suppress the prompt entirely in bypass mode and fail fast with an actionable message, e.g. "archive_session is unavailable in bypassPermissions mode — switch to a supervised mode to archive," OR
• Make the Allow click in the prompt actually authorize the call (treat the explicit per-call approval as sufficient consent even under bypass), OR
• At minimum, have the prompt itself state that approving will not work in the current mode and explain the required mode switch.

The current behavior — showing an approval UI whose approval is silently ignored — is misleading and makes the failure look like a transient error the user can retry past, when it is actually a mode gate.

Notes

• The tool's own description acknowledges it "ALWAYS prompts for confirmation and is unavailable in unsupervised (auto / bypass-permissions) mode." The bug is not that it's gated in bypass mode — it's that the prompt is still shown in that mode despite the gate, with no indication that approval is a no-op.
• Related but distinct: #62154 (bulk archive forces per-session prompts; requests batch/allowlist). That issue notes in passing that bypassPermissions "actively disables" the tool but treats it as by-design and does not report this show-prompt-then-refuse false positive.

Environment

• Claude Code desktop app, macOS (Darwin 25.5.0)