Function spawn_approval_level 

pub fn spawn_approval_level(
    provider: &str,
    mode: SessionMode,
) -> Option<ApprovalLevel>

Approval level for a spawn, when auto-permit must deviate from the FullAuto default: claude’s ACP agent offers no bypassPermissions under root, so FullAuto would fail the spawn; Unmanaged starts it and the node then switches to its auto mode and approves every permission request itself.