Permission mode reverts to dangerously-skip-permissions after user switches to normal mode

Bug

When Claude Code is launched with --dangerously-skip-permissions, and the user manually switches to normal permission mode during the session, the permission mode can silently revert back to bypass-permissions mode.

Steps to reproduce

1. Launch Claude Code with --dangerously-skip-permissions
2. During the session, switch to normal permission mode (no auto-approvals)
3. Continue working — at some point the mode switches back to bypass permissions without user action

Expected behavior

Once the user switches to normal permission mode, it should stay in normal mode for the rest of the session unless the user explicitly changes it back.

Actual behavior

The permission mode reverts to dangerously-skip-permissions at some point, allowing tool calls to execute without user approval.