Claude Code puts staff bypass requests in Accept edits

Employee sessions that ask Claude Code for bypass mode, where the agent skips permission prompts, start in Accept edits instead, according to RuntimeWire’s October 18 inspection of the publicly distributed Claude Code JavaScript. The behavior sits in a separate session-start handler for employee accounts.

The same client keeps two error paths apart. One refuses staff sessions with unapproved security controls, the other flags outdated clients. RuntimeWire traced the API-error parser to its staff-facing messages and preserved the files’ bytes and SHA-256 hashes.

The evidence is the client code alone. No live API response was observed, and RuntimeWire says it couldn’t independently reproduce the finding.