fix(B03): preauthorize full access and replace composer with active approval

scripts/input-composition-regression.ts

@@ -26,6 +26,7 @@ for (const kind of ['question', 'approval', 'plan', 'mcp'] as const) {
     running: true
   })
   assert.equal(result.interaction?.kind, kind)
+  assert.equal(result.input.visible, kind !== 'approval', 'only actual approval replaces normal input')
   assert.equal(result.input.blockedByInteraction, true)
   assert.equal(result.input.destination, 'blocked')
   assert.equal(result.input.preservesDraft, true, 'takeover never clears the draft')
@@ -46,6 +47,7 @@ result = composeComposer({
   queueCount: 2
 })
 assert.equal(result.interaction, null, 'settled interactions no longer take over')
+assert.equal(result.input.visible, true)
 assert.equal(result.queue.visible, true)
 assert.deepEqual(result.stack.beforeQueue.map(panel => panel.kind), ['task'])
 assert.equal(result.stack.queue?.kind, 'queue')