Constant CONTROL_PROTOCOL_FLAG 

const CONTROL_PROTOCOL_FLAG: &str = "--permission-prompt-tool";

The flag a control-protocol (persistent) agent is launched with; its presence in the catalog args is what makes bypass become default.