fix: require tool approval by default

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

src/renderer/App.tsx

@@ -21,6 +21,7 @@ import {
   normalizePatternModels,
   resolveReasoningEffort,
 } from '@shared/domain/models';
+import { createDefaultToolApprovalPolicy } from '@shared/domain/approval';
 import { syncPatternGraph, type PatternDefinition } from '@shared/domain/pattern';
 import { isScratchpadProject, SCRATCHPAD_PROJECT_ID } from '@shared/domain/project';
 import { applyScratchpadSessionConfig } from '@shared/domain/session';
@@ -37,6 +38,7 @@ function createDraftPattern(defaultModelId: string, defaultReasoningEffort: Patt
     mode: 'single',
     availability: 'available',
     maxIterations: 1,
+    approvalPolicy: createDefaultToolApprovalPolicy(),
     agents: [
       {
         id: createId('agent'),

src/renderer/components/PatternEditor.tsx

@@ -198,7 +198,7 @@ export function PatternEditor({
     updateApprovalPolicy((current) => {
       const otherRules = (current?.rules ?? []).filter((r) => r.kind !== kind);
       if (!enabled) {
-        return otherRules.length > 0 ? { rules: otherRules } : undefined;
+        return { rules: otherRules };
       }
       return { rules: [...otherRules, { kind }] };
     });