Safe mode toggle writes permissionMode: "normal" instead of "safe" — approval modal never shown

Environment

• Claudian version: 1.3.64 (installed via BRAT)
• Obsidian version: latest desktop release
• OS: macOS Tahoe 26.3 beta
• Claude Code CLI: 2.1.19
• Authentication: API key (set via Environment → Custom variables)
• Node.js: v25.6.0

Bug Description

Toggling YOLO off in the chat input bar does not enable Safe mode. Write operations (file creation, editing) execute immediately without showing an approval modal, regardless of the YOLO toggle state.

Steps to Reproduce

1. Open Claudian settings or use the YOLO toggle in the chat input bar to turn YOLO off
2. Start a new Claudian session
3. Send: Create a test note called "Test.md" in the Inbox folder with the text "Testing safe mode."
4. Expected: An approval modal appears before the file is created
5. Actual: The file is created immediately with no approval prompt

Root Cause

Inspecting {vault}/.claude/claudian-settings.json after toggling YOLO off shows:

"permissionMode": "normal"

The value "normal" does not correspond to either of Claudian's documented permission modes ("safe" or "yolo"). It appears to be the Claude Code SDK's default permission mode, which does not trigger Claudian's approval modal.

Additional evidence

• Manually editing claudian-settings.json to set "permissionMode": "safe" and restarting Obsidian does not fix the issue — Claudian overwrites the value back to "normal" on launch.
• The toggle appears to have no effect on the persisted setting. The value remains "normal" whether YOLO is toggled on or off.
• ~/.claude/settings.json does not exist on this system, so the "Load user Claude settings" option is not a factor.

Expected Behavior

• YOLO toggle on → "permissionMode": "yolo" → no approval prompts
• YOLO toggle off → "permissionMode": "safe" → approval modal shown before each write operation, as documented in the README

Workaround

Currently using explicit prompt instructions ("Show me your plan and wait for approval before making changes") as a substitute for the missing approval modal. The command blocklist and vault confinement features are still functioning correctly.