From 803e02d8dfd3985d2df9d94608f7148714c3d0ef Mon Sep 17 00:00:00 2001
From: Peter Steinberger <steipete@gmail.com>
Date: Tue, 24 Feb 2026 04:20:24 +0000
Subject: [PATCH] fix: adapt landed fixups to current type and approval
 constraints

---
 src/config/io.eacces.test.ts                        | 2 +-
 src/gateway/node-invoke-system-run-approval.test.ts | 3 +++
 src/telegram/bot/delivery.ts                        | 2 +-
 3 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/src/config/io.eacces.test.ts b/src/config/io.eacces.test.ts
index f22b9d890..ab56e27a6 100644
--- a/src/config/io.eacces.test.ts
+++ b/src/config/io.eacces.test.ts
@@ -19,7 +19,7 @@ function makeEaccesFs(configPath: string) {
       writeFile: () => Promise.resolve(),
       appendFile: () => Promise.resolve(),
     },
-  } as unknown as typeof import("node:fs").default;
+  } as unknown as typeof import("node:fs");
 }
 
 describe("config io EACCES handling", () => {
diff --git a/src/gateway/node-invoke-system-run-approval.test.ts b/src/gateway/node-invoke-system-run-approval.test.ts
index 653f0d478..196b5947f 100644
--- a/src/gateway/node-invoke-system-run-approval.test.ts
+++ b/src/gateway/node-invoke-system-run-approval.test.ts
@@ -145,6 +145,7 @@ describe("sanitizeSystemRunParamsForForwarding", () => {
     const record = approvalManager.create(
       {
         host: "node",
+        nodeId: "node-1",
         command: "echo SAFE",
         cwd: null,
         agentId: null,
@@ -170,6 +171,7 @@ describe("sanitizeSystemRunParamsForForwarding", () => {
     };
 
     const first = sanitizeSystemRunParamsForForwarding({
+      nodeId: "node-1",
       rawParams: params,
       client,
       execApprovalManager: approvalManager,
@@ -178,6 +180,7 @@ describe("sanitizeSystemRunParamsForForwarding", () => {
     expectAllowOnceForwardingResult(first);
 
     const second = sanitizeSystemRunParamsForForwarding({
+      nodeId: "node-1",
       rawParams: params,
       client,
       execApprovalManager: approvalManager,
diff --git a/src/telegram/bot/delivery.ts b/src/telegram/bot/delivery.ts
index 019f42ced..5e0cfb2ea 100644
--- a/src/telegram/bot/delivery.ts
+++ b/src/telegram/bot/delivery.ts
@@ -40,7 +40,7 @@ const TELEGRAM_MEDIA_SSRF_POLICY = {
   // resolution maps to private/internal ranges in restricted networks.
   allowedHostnames: ["api.telegram.org"],
   allowRfc2544BenchmarkRange: true,
-} as const;
+};
 
 export async function deliverReplies(params: {
   replies: ReplyPayload[];