fix: resolve format/build failures

src/agents/bash-tools.exec.ts

@@ -495,7 +495,7 @@ export function createExecTool(
           )) as { decision?: string } | null;
           const decision =
             decisionResult && typeof decisionResult === "object"
-              ? decisionResult.decision ?? null
+              ? (decisionResult.decision ?? null)
               : null;
 
           if (decision === "deny") {
@@ -506,9 +506,7 @@ export function createExecTool(
               approvedByAsk = true;
             } else if (askFallback === "allowlist") {
               if (!allowlistMatch) {
-                throw new Error(
+                throw new Error("exec denied: approval required (approval UI not available)");
-                  "exec denied: approval required (approval UI not available)",
-                );
               }
               approvedByAsk = true;
             } else {
@@ -624,7 +622,7 @@ export function createExecTool(
           )) as { decision?: string } | null;
           const decision =
             decisionResult && typeof decisionResult === "object"
-              ? decisionResult.decision ?? null
+              ? (decisionResult.decision ?? null)
               : null;
 
           if (decision === "deny") {
@@ -635,9 +633,7 @@ export function createExecTool(
               approvedByAsk = true;
             } else if (askFallback === "allowlist") {
               if (!allowlistMatch) {
-                throw new Error(
+                throw new Error("exec denied: approval required (approval UI not available)");
-                  "exec denied: approval required (approval UI not available)",
-                );
               }
               approvedByAsk = true;
             } else {

src/commands/agents.commands.identity.ts

@@ -55,7 +55,9 @@ function resolveAgentIdByWorkspace(
 ): string[] {
   const list = listAgentEntries(cfg);
   const ids =
-    list.length > 0 ? list.map((entry) => normalizeAgentId(entry.id)) : [resolveDefaultAgentId(cfg)];
+    list.length > 0
+      ? list.map((entry) => normalizeAgentId(entry.id))
+      : [resolveDefaultAgentId(cfg)];
   const normalizedTarget = normalizeWorkspacePath(workspaceDir);
   return ids.filter(
     (id) => normalizeWorkspacePath(resolveAgentWorkspaceDir(cfg, id)) === normalizedTarget,
@@ -134,10 +136,7 @@ export async function agentsSetIdentityCommand(
   }
 
   const fileTheme =
-    identityFromFile?.theme ??
+    identityFromFile?.theme ?? identityFromFile?.creature ?? identityFromFile?.vibe ?? undefined;
-    identityFromFile?.creature ??
-    identityFromFile?.vibe ??
-    undefined;
   const incomingIdentity: IdentityConfig = {
     ...(nameRaw || identityFromFile?.name ? { name: nameRaw ?? identityFromFile?.name } : {}),
     ...(emojiRaw || identityFromFile?.emoji ? { emoji: emojiRaw ?? identityFromFile?.emoji } : {}),

src/commands/agents.config.ts

@@ -79,11 +79,7 @@ export function parseIdentityMarkdown(content: string): AgentIdentity {
     const cleaned = line.trim().replace(/^\s*-\s*/, "");
     const colonIndex = cleaned.indexOf(":");
     if (colonIndex === -1) continue;
-    const label = cleaned
+    const label = cleaned.slice(0, colonIndex).replace(/[*_]/g, "").trim().toLowerCase();
-      .slice(0, colonIndex)
-      .replace(/[*_]/g, "")
-      .trim()
-      .toLowerCase();
     const value = cleaned
       .slice(colonIndex + 1)
       .replace(/^[*_]+|[*_]+$/g, "")

src/commands/agents.identity.test.ts

@@ -93,7 +93,12 @@ describe("agents set-identity command", () => {
     configMocks.readConfigFileSnapshot.mockResolvedValue({
       ...baseSnapshot,
       config: {
-        agents: { list: [{ id: "main", workspace }, { id: "ops", workspace }] },
+        agents: {
+          list: [
+            { id: "main", workspace },
+            { id: "ops", workspace },
+          ],
+        },
       },
     });
 

src/config/types.clawdbot.ts

@@ -4,7 +4,12 @@ import type { LoggingConfig, SessionConfig, WebConfig } from "./types.base.js";
 import type { BrowserConfig } from "./types.browser.js";
 import type { ChannelsConfig } from "./types.channels.js";
 import type { CronConfig } from "./types.cron.js";
-import type { CanvasHostConfig, DiscoveryConfig, GatewayConfig, TalkConfig } from "./types.gateway.js";
+import type {
+  CanvasHostConfig,
+  DiscoveryConfig,
+  GatewayConfig,
+  TalkConfig,
+} from "./types.gateway.js";
 import type { HooksConfig } from "./types.hooks.js";
 import type {
   AudioConfig,

src/config/types.gateway.ts

@@ -113,7 +113,6 @@ export type GatewayHttpConfig = {
   endpoints?: GatewayHttpEndpointsConfig;
 };
 
-
 export type GatewayConfig = {
   /** Single multiplexed port for Gateway WS + HTTP (default: 18789). */
   port?: number;

src/config/zod-schema.ts

@@ -231,12 +231,7 @@ export const ClawdbotSchema = z
         port: z.number().int().positive().optional(),
         mode: z.union([z.literal("local"), z.literal("remote")]).optional(),
         bind: z
-          .union([
+          .union([z.literal("auto"), z.literal("lan"), z.literal("loopback"), z.literal("custom")])
-            z.literal("auto"),
-            z.literal("lan"),
-            z.literal("loopback"),
-            z.literal("custom"),
-          ])
           .optional(),
         controlUi: z
           .object({

src/gateway/call.ts

@@ -136,10 +136,7 @@ export async function callGateway<T = unknown>(opts: CallGatewayOptions): Promis
   });
   const url = connectionDetails.url;
   const useLocalTls =
-    config.gateway?.tls?.enabled === true &&
+    config.gateway?.tls?.enabled === true && !urlOverride && !remoteUrl && url.startsWith("wss://");
-    !urlOverride &&
-    !remoteUrl &&
-    url.startsWith("wss://");
   const tlsRuntime = useLocalTls ? await loadGatewayTlsRuntime(config.gateway?.tls) : undefined;
   const tlsFingerprint = tlsRuntime?.enabled ? tlsRuntime.fingerprintSha256 : undefined;
   const token =

src/gateway/client.ts

@@ -93,22 +93,14 @@ export class GatewayClient {
       wsOptions.checkServerIdentity = (_host: string, cert: CertMeta) => {
         const fingerprintValue =
           typeof cert === "object" && cert && "fingerprint256" in cert
-            ? (cert as { fingerprint256?: string }).fingerprint256 ?? ""
+            ? ((cert as { fingerprint256?: string }).fingerprint256 ?? "")
             : "";
         const fingerprint = normalizeFingerprint(
           typeof fingerprintValue === "string" ? fingerprintValue : "",
         );
         const expected = normalizeFingerprint(this.opts.tlsFingerprint ?? "");
-        if (!expected) {
+        if (!expected || !fingerprint) return false;
-          return new Error("gateway tls fingerprint missing");
+        return fingerprint === expected;
-        }
-        if (!fingerprint) {
-          return new Error("gateway tls fingerprint unavailable");
-        }
-        if (fingerprint !== expected) {
-          return new Error("gateway tls fingerprint mismatch");
-        }
-        return undefined;
       };
     }
     this.ws = new WebSocket(url, wsOptions);

src/gateway/exec-approval-manager.ts

@@ -45,7 +45,10 @@ export class ExecApprovalManager {
     return record;
   }
 
-  async waitForDecision(record: ExecApprovalRecord, timeoutMs: number): Promise<ExecApprovalDecision | null> {
+  async waitForDecision(
+    record: ExecApprovalRecord,
+    timeoutMs: number,
+  ): Promise<ExecApprovalDecision | null> {
     return await new Promise<ExecApprovalDecision | null>((resolve, reject) => {
       const timer = setTimeout(() => {
         this.pending.delete(record.id);

src/gateway/node-registry.ts

@@ -45,7 +45,7 @@ export class NodeRegistry {
     const nodeId = connect.device?.id ?? connect.client.id;
     const caps = Array.isArray(connect.caps) ? connect.caps : [];
     const commands = Array.isArray((connect as { commands?: string[] }).commands)
-      ? (connect as { commands?: string[] }).commands ?? []
+      ? ((connect as { commands?: string[] }).commands ?? [])
       : [];
     const permissions =
       typeof (connect as { permissions?: Record<string, boolean> }).permissions === "object"

src/gateway/server-methods/exec-approval.ts

@@ -9,9 +9,7 @@ import {
 } from "../protocol/index.js";
 import type { GatewayRequestHandlers } from "./types.js";
 
-export function createExecApprovalHandlers(
+export function createExecApprovalHandlers(manager: ExecApprovalManager): GatewayRequestHandlers {
-  manager: ExecApprovalManager,
-): GatewayRequestHandlers {
   return {
     "exec.approval.request": async ({ params, respond, context }) => {
       if (!validateExecApprovalRequestParams(params)) {
@@ -61,12 +59,16 @@ export function createExecApprovalHandlers(
         { dropIfSlow: true },
       );
       const decision = await manager.waitForDecision(record, timeoutMs);
-      respond(true, {
+      respond(
+        true,
+        {
           id: record.id,
           decision,
           createdAtMs: record.createdAtMs,
           expiresAtMs: record.expiresAtMs,
-      }, undefined);
+        },
+        undefined,
+      );
     },
     "exec.approval.resolve": async ({ params, respond, client, context }) => {
       if (!validateExecApprovalResolveParams(params)) {

src/gateway/server-methods/nodes.ts

@@ -453,14 +453,10 @@ export const nodeHandlers: GatewayRequestHandlers = {
         loadGatewayModelCatalog: context.loadGatewayModelCatalog,
         logGateway: { warn: context.logGateway.warn },
       };
-      await handleNodeEvent(
+      await handleNodeEvent(nodeContext, "node", {
-        nodeContext,
-        "node",
-        {
         event: p.event,
         payloadJSON,
-        },
+      });
-      );
       respond(true, { ok: true }, undefined);
     });
   },

src/gateway/server-node-events.ts

@@ -11,11 +11,7 @@ import type { NodeEvent, NodeEventContext } from "./server-node-events-types.js"
 import { loadSessionEntry } from "./session-utils.js";
 import { formatForLog } from "./ws-log.js";
 
-export const handleNodeEvent = async (
+export const handleNodeEvent = async (ctx: NodeEventContext, nodeId: string, evt: NodeEvent) => {
-  ctx: NodeEventContext,
-  nodeId: string,
-  evt: NodeEvent,
-) => {
   switch (evt.event) {
     case "voice.transcript": {
       if (!evt.payloadJSON) return;

src/gateway/server-runtime-config.ts

@@ -1,4 +1,9 @@
-import type { GatewayAuthConfig, GatewayBindMode, GatewayTailscaleConfig, loadConfig } from "../config/config.js";
+import type {
+  GatewayAuthConfig,
+  GatewayBindMode,
+  GatewayTailscaleConfig,
+  loadConfig,
+} from "../config/config.js";
 import {
   assertGatewayAuthConfigured,
   type ResolvedGatewayAuth,

src/gateway/server-startup-log.ts

@@ -22,7 +22,9 @@ export function logGatewayStartup(params: {
     consoleMessage: `agent model: ${chalk.whiteBright(modelRef)}`,
   });
   const scheme = params.tlsEnabled ? "wss" : "ws";
-  params.log.info(`listening on ${scheme}://${params.bindHost}:${params.port} (PID ${process.pid})`);
+  params.log.info(
+    `listening on ${scheme}://${params.bindHost}:${params.port} (PID ${process.pid})`,
+  );
   params.log.info(`log file: ${getResolvedLoggerSettings().file}`);
   if (params.isNixMode) {
     params.log.info("gateway: running in Nix mode (config managed externally)");

src/gateway/server.models-voicewake.test.ts

@@ -260,5 +260,4 @@ describe("gateway server models + voicewake", () => {
     ws.close();
     await server.close();
   });
-
 });

src/gateway/server/ws-connection/message-handler.ts

@@ -499,7 +499,9 @@ export function attachGatewayWsMessageHandler(params: {
             commands: nodeSession.commands,
             cfg: loadConfig(),
           }).catch((err) =>
-            logGateway.warn(`remote bin probe failed for ${nodeSession.nodeId}: ${formatForLog(err)}`),
+            logGateway.warn(
+              `remote bin probe failed for ${nodeSession.nodeId}: ${formatForLog(err)}`,
+            ),
           );
           void loadVoiceWakeConfig()
             .then((cfg) => {

src/gateway/test-helpers.mocks.ts

@@ -13,7 +13,6 @@ import type { PluginRegistry } from "../plugins/registry.js";
 import { setActivePluginRegistry } from "../plugins/runtime.js";
 import { DEFAULT_ACCOUNT_ID } from "../routing/session-key.js";
 
-
 type StubChannelOptions = {
   id: ChannelPlugin["id"];
   label: string;

src/infra/device-identity.ts

@@ -27,11 +27,7 @@ function ensureDir(filePath: string) {
 const ED25519_SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
 
 function base64UrlEncode(buf: Buffer): string {
-  return buf
+  return buf.toString("base64").replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/g, "");
-    .toString("base64")
-    .replaceAll("+", "-")
-    .replaceAll("/", "_")
-    .replace(/=+$/g, "");
 }
 
 function base64UrlDecode(input: string): Buffer {

src/node-host/runner.ts

@@ -26,10 +26,7 @@ import { getMachineDisplayName } from "../infra/machine-name.js";
 import { loadOrCreateDeviceIdentity } from "../infra/device-identity.js";
 import { loadConfig } from "../config/config.js";
 import { VERSION } from "../version.js";
-import {
+import { GATEWAY_CLIENT_MODES, GATEWAY_CLIENT_NAMES } from "../utils/message-channel.js";
-  GATEWAY_CLIENT_MODES,
-  GATEWAY_CLIENT_NAMES,
-} from "../utils/message-channel.js";
 
 import { ensureNodeHostConfig, saveNodeHostConfig, type NodeHostGatewayConfig } from "./config.js";
 import { GatewayClient } from "../gateway/client.js";
@@ -804,8 +801,7 @@ function coerceNodeInvokePayload(payload: unknown): NodeInvokeRequestPayload | n
         ? JSON.stringify(obj.params)
         : null;
   const timeoutMs = typeof obj.timeoutMs === "number" ? obj.timeoutMs : null;
-  const idempotencyKey =
+  const idempotencyKey = typeof obj.idempotencyKey === "string" ? obj.idempotencyKey : null;
-    typeof obj.idempotencyKey === "string" ? obj.idempotencyKey : null;
   return {
     id,
     nodeId,
@@ -840,11 +836,7 @@ async function sendInvokeResult(
   }
 }
 
-async function sendNodeEvent(
+async function sendNodeEvent(client: GatewayClient, event: string, payload: unknown) {
-  client: GatewayClient,
-  event: string,
-  payload: unknown,
-) {
   try {
     await client.request("node.event", {
       event,