Permission bypass-mode check consolidated into one shared helper across three call sites
Three places in the code separately checked whether the current permission mode is bypassPermissions, or is plan mode with bypass permissions available. That duplicated logic has been consolidated into a single shared helper. As part of the change, one of the call sites dropped a check for whether the session is non-interactive, while a different call site gained that same check.
Consolidating the check into one place reduces the risk of the three call sites drifting out of sync, though the shift of the non-interactive check between call sites means the conditions under which bypass mode applies changed slightly at those two spots.
The finding does not say what effect the moved isNonInteractiveSession check has in practice at either call site.