When restoring a session whose saved permission mode was bypassPermissions, Claude Code now checks whether the current session was launched with --dangerously-skip-permissions (or the mode is allowed by settings/policy). If not, it falls back to default and logs a warning.
Details
- Previously, a restored session could silently inherit dangerous permissions from a prior session
- The warning logged: "[externalMetadataToAppState] Refusing restored mode 'bypassPermissions' (disabled by settings/policy or session not launched with --dangerously-skip-permissions); falling back to 'default'"
Evidence
Permission mode restore guard (search for "Refusing restored mode 'bypassPermissions'")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.