bypassPermissions mode silently downgrades to acceptEdits after approving a suspicious path prompt

Description

When running Claude Code in bypassPermissions mode (via --dangerously-skip-permissions), if a "suspicious path pattern" prompt appears and the user selects option 2 ("Yes, and always allow access to ... from this project"), the permission mode silently downgrades from bypassPermissions to acceptEdits.

Steps to Reproduce

1. Start Claude Code with --dangerously-skip-permissions (or alias claude='claude --dangerously-skip-permissions')
2. Confirm the mode is bypassPermissions in the status bar
3. Run a task that creates a directory with an underscore in the path (e.g., mkdir -p "/path/to/NFLX-Netflix_ Inc.")
4. Claude Code shows a permission prompt: "contains a suspicious Windows path pattern that requires manual approval"
5. Select option 2: "Yes, and always allow access to ... from this project"
6. Observe: the mode has changed from bypassPermissions to acceptEdits

Expected Behavior

After approving the prompt, the mode should remain bypassPermissions. The user explicitly chose bypass mode and only interacted with the prompt because the system forced it — this should not change the overall permission mode.

Actual Behavior

The mode silently downgrades to acceptEdits. The user has to press Shift+Tab multiple times to cycle back to bypassPermissions.

Environment

• macOS (Darwin 25.0.0)
• Claude Code CLI
• ~/.zshrc alias: alias claude='claude --dangerously-skip-permissions'
• settings.json: {"skipDangerousModePermissionPrompt": true}