feat(code): classifier-backed Auto approval mode

libs/code/deepagents_code/_cli_context.py

@@ -39,6 +39,8 @@ class CLIContextSchema:
 
     model_context_limit: int | None = None
 
+    approval_mode: str = "manual"
+
     auto_approve: bool = False
 
     approval_mode_key: str | None = None
@@ -73,14 +75,11 @@ class CLIContext(TypedDict, total=False):
     model_context_limit: int | None
     """Effective context-window limit for profile-aware middleware."""
 
-    auto_approve: bool
-    """Whether gated tool calls should skip the human-approval interrupt.
+    approval_mode: str
+    """`manual`, classifier-backed `auto`, or unrestricted `yolo`."""
 
-    Sourced from the client session (not graph state) so the model cannot
-    self-approve by writing state. The `interrupt_on` `when` predicate reads
-    this to suppress interrupts at the source when "approve always" is on,
-    avoiding the interrupt-then-auto-resolve round-trip.
-    """
+    auto_approve: bool
+    """Compatibility snapshot for clients predating the typed mode field."""
 
     approval_mode_key: str | None
     """Store key for the live approval-mode control record.