* feat(agents): add runtime tool-approval orchestrator with approvals.tools config

- Add approvals.tools config types + zod schema (enabled, mode, timeoutMs, policy, routing, classifier)
- Create tool-approval orchestrator module (decision engine, param redaction, gateway integration)
- Integrate orchestrator into before-tool-call wrapper path (runs after plugin hooks, before execution)
- Add ToolApprovalBlockedError with stable machine-readable error shape
- Add 90 tests covering all mode/decision/risk branches
- Backward-compatible: no behavior change when approvals.tools is missing or disabled

* feat: upgrade /approve and Discord handler to canonical tool approvals

- /approve now queries tool.approvals.get for canonical records and resolves
  via tool.approval.resolve (with requestHash); falls back to legacy
  exec.approval.resolve when no canonical record is found
- Discord handler listens for tool.approval.requested/resolved events and
  renders generic tool approval embeds for non-exec tools
- resolveApproval prefers tool.approval.resolve when requestHash is cached,
  keeping legacy exec path for backward compatibility
- Updated command description to 'tool approval requests'
- Added shouldHandleToolApproval for canonical event filtering
- Extended tests with canonical, legacy-fallback, and gateway-error scenarios

* refactor: rename .clawdbrain → .openclaw and fix repo/domain references

- Settings dir: ~/.clawdbrain → ~/.openclaw
- Repo references: openclaw/clawdbrain → dgarson/clawdbrain
- Domain: clawdbrain.bot → openclaw.ai
- CLI command: clawdbrain login → openclaw login
- 48 files changed across src/, docs/, apps/web/, ui/

* cron timeout fixes

* feat(agents): wire tool approval context from config into tool creation path

- Inject approvals.tools config into wrapToolWithBeforeToolCallHook context
- Populate channel field from messageProvider via resolveGatewayMessageChannel
- Wire callGatewayTool as the gateway call adapter for approval requests
- Approval context is only constructed when approvals.tools exists and is enabled

* fix: address review gaps in tool approval handler

- Exec dedup: store canonical request for exec tools and defer embed
  creation by 200ms so the legacy mirror gets first shot; if the mirror
  never arrives, fall back to a generic tool embed (future-proofs against
  legacy event removal)
- Extract sendToolApprovalEmbed to eliminate code duplication
- Add buildApprovalCustomId / parseApprovalData generic aliases (same
  wire format, clearer naming for non-exec tool code paths)
- Add alias identity tests

* fix: minor tool approval request fixes

* auto-reply/approval integration fix

* include exec approval doc

* fix: agent-runner-execution integration into auto-reply, executor/kernel fixes

* more work on agent runner and memory/heartbeta integration

* lots of tests resulting from unification of exec kernel; refactored

* Redact arrays in approval helper

* lancedb fixes

* more fixes/test updates

---------

Co-authored-by: Claude <noreply@anthropic.com>

…bug Timeline (HIGH)

- Scrubable playback timeline with event markers, play/pause/speed controls (1×/2×/5×/10×)
- Event list: user, assistant, tool_call, tool_result, context_shift, error, system types
- Gap annotations between events (>500ms)
- Event inspector: detail / raw JSON / context tabs
- Tool I/O panel: input/output diff, duration, success/fail indicator
- Context window panel: before/after token counts, compaction savings
- Stats strip: live event/tool/error/token counts at scrub position
- Filter chips per event type
- 3 rich mock debug sessions (luis main, xavier review, piper subagent)
- 0 TS errors, strict types, no any, no replaceAll

fix(heartbeat): prevent false process_lost failures on queued and non-child-process runs

fix(slack): preserve thread context in auto-replies

fix(slack): preserve thread context in auto-replies

…o-accented (tulgey openclaw#251) (#18)

Without speechConfig.languageCode, Gemini TTS infers the spoken language
from the text's script: Arabic -> Persian (Farsi correct), but Latin
defaults to English, so Latin-script Spanish was read with an English
accent. Add an optional, omit-when-absent languageCode to the shared
generateContent body and resolve it per turn by precedence:
directive/talk override > operator config > Spanish auto-detection > omit.

Omit-when-absent preserves Gemini's script-based auto-selection (the
Arabic-script -> Persian path Farsi relies on). The auto-detector abstains
unless it is confident the text is Spanish (stopword scorer + inverted
punctuation; never touches non-Latin scripts and strips the audio-profile
wrapper before scoring), so Farsi keeps its Persian voice and English stays
English. Default detected locale es-MX; operators can pin a locale via
config/`[[tts:language=...]]` or disable detection with detectLanguage:false.

Refs tulgey openclaw#247 / ADR 0024.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>