fix(cli): validate metadata.gatewayName type in normalizeSession

src/lib/onboard-session.test.ts

@@ -172,6 +172,17 @@ describe("onboard session", () => {
     expect(loaded.metadata.token).toBeUndefined();
   });
 
+  it("drops non-string gatewayName during normalization", () => {
+    fs.mkdirSync(path.dirname(session.SESSION_FILE), { recursive: true });
+    fs.writeFileSync(
+      session.SESSION_FILE,
+      JSON.stringify({ version: 1, metadata: { gatewayName: 123 } }),
+    );
+    const loaded = session.loadSession();
+    expect(loaded).not.toBeNull();
+    expect(loaded!.metadata.gatewayName).toBe("nemoclaw");
+  });
+
   it("returns null for corrupt session data", () => {
     fs.mkdirSync(path.dirname(session.SESSION_FILE), { recursive: true });
     fs.writeFileSync(session.SESSION_FILE, "not-json");

src/lib/onboard-session.ts

@@ -253,7 +253,9 @@ export function normalizeSession(data: unknown): Session | null {
     failure: sanitizeFailure(d.failure as Record<string, unknown> | null),
     metadata: isObject(d.metadata)
       ? ({
-          gatewayName: (d.metadata as Record<string, unknown>).gatewayName,
+          gatewayName: typeof (d.metadata as Record<string, unknown>).gatewayName === "string"
+            ? (d.metadata as Record<string, unknown>).gatewayName
+            : "nemoclaw",
           fromDockerfile: (d.metadata as Record<string, unknown>).fromDockerfile || null,
         } as SessionMetadata)
       : undefined,