feat(gateway): approval queue tray in web UI sidebar

[serrrfirat]

Summary

Adds a cross-thread approval queue tray to the web gateway sidebar that provides visibility into all pending tool approval gates — not just those in the active thread. Companion to #2267 (thread-scoped approvals), which fixes correctness but creates a visibility gap for background threads.

Problem

When a background routine, heartbeat, or non-active thread triggers a tool approval gate, the user has no way to see it without manually switching to that thread. Gates from inactive threads are silently blocked.

Solution

Three-layer non-intrusive design that adds zero UI surface when no gates are pending:

• Sidebar tray — "Awaiting" section appears between the assistant-item and thread list only when gates exist. Each item shows tool name, source thread, description, and inline approve/always/deny buttons. Collapsible with a chevron.
• Tab badge — Small amber pill on the Chat tab shows pending count; pulses 3x on new arrivals.
• Thread gate dots — Pulsing amber dot on thread items that have pending approvals, visible even when the tray is collapsed.

Features

• Batch approve-all / deny-all (visible on header hover)
• Click tray item body to jump to its owning thread
• Spring animations for item entry/exit
• Full dark + light theme support
• Touch-friendly targets on coarse pointer devices
• Tray auto-hides when all gates are resolved

Screenshot

Dark theme showing 3 pending gates across main, routine, and heartbeat threads

Changes

• index.html — approval tray skeleton + tab badge span
• style.css — ~270 lines of tray styles, animations, light theme overrides
• app.js — pendingGates Map, tray CRUD functions, wired into existing approval_needed event + sendApprovalAction

Test plan

• Open web gateway, trigger a tool approval → verify inline card AND tray item appear
• Trigger approval in a background thread → verify tray shows it, active chat does not
• Approve from tray → verify both tray item and inline card resolve
• Approve from inline card → verify tray item also resolves
• Resolve all gates → verify tray disappears, badge disappears
• Toggle tray collapse/expand
• Test batch approve-all / deny-all
• Verify dark and light themes
• Verify sidebar collapsed state hides tray

🤖 Generated with Claude Code

[serrrfirat]

Screenshot (dark theme)

The approval queue tray sits in the sidebar between the assistant item and thread list. It shows pending gates from all threads with inline approve/deny controls.

Screenshot attached below:

[serrrfirat]

Screenshot

Note: For a live interactive preview, open the prototype file locally. The screenshot below shows the sidebar tray with 3 pending gates across main, routine, and heartbeat threads.

[gemini-code-assist]

Code Review

This pull request introduces several significant enhancements and fixes across the codebase. Key changes include: the addition of a 'DB MIGRATION' label and corresponding automation in the labeler and setup scripts; improvements to the Telegram channel's message splitting logic to correctly handle UTF-16 character limits; the implementation of a 'sendVoice' feature for Telegram; and the addition of cross-channel approval authorization logic, which includes a new database column 'source_channel' for conversations. Additionally, the pull request expands the GitHub tool's capabilities to include repository creation, code search, branch management, file operations, and release management, along with corresponding schema updates and regression tests. Configuration resolution logic has been updated to prioritize database settings over environment variables, and the sandbox worker now supports per-job MCP server filtering. I have no feedback to provide as all changes appear well-implemented and covered by tests.

[serrrfirat]

Closing: branch was rebased onto staging. Replaced by new PR.