Automated tool-call approval for DeepSeek Harness

Key features

• Automated tool-call approval for DeepSeek Harness: an auto tier for the approval policy that classifies every tool call as allow / deny (fully autonomous — no human in the loop, uncertain calls are denied).
• The chip next to the composer shows the run state (AA on / AA off)
• A monorepo of two packages
• hover for cumulative stats, click for a dialog with the on/off switch, config summary and the recent-decisions table.
• The demo coversfile read/write and ls whitelisted and dispatched directly, a harmless command allowed by the L1 classifier, and dangerous commands rejected by deny rules / legacy-ask rules (now denying) / the self-kill guard.