fix error coment

Author: Brite

.github/workflows/contract-ci.yml

@@ -2,15 +2,15 @@ name: Contract CI
 
 on:
   push:
-    branches: [ main, develop ]
+    branches: [main, develop]
     paths:
-      - 'apps/onchain/**'
-      - '.github/workflows/contract-ci.yml'
+      - "apps/onchain/**"
+      - ".github/workflows/contract-ci.yml"
   pull_request:
-    branches: [ main, develop ]
+    branches: [main, develop]
     paths:
-      - 'apps/onchain/**'
-      - '.github/workflows/contract-ci.yml'
+      - "apps/onchain/**"
+      - ".github/workflows/contract-ci.yml"
 
 jobs:
   test:
@@ -28,8 +28,12 @@ jobs:
         uses: dtolnay/rust-toolchain@stable
         with:
           toolchain: stable
+          components: rustfmt, clippy
           targets: wasm32-unknown-unknown
 
+      - name: Add wasm target
+        run: rustup target add wasm32-unknown-unknown
+
       - name: Cache dependencies
         uses: Swatinem/rust-cache@v2
         with:

apps/backend/src/gateways/escrow.gateway.ts

@@ -13,16 +13,27 @@ interface EscrowEventData {
   [key: string]: unknown;
 }
 
+interface JwtPayload {
+  sub?: string;
+  userId?: string;
+  id?: string;
+}
+
+interface ClientAuthPayload {
+  token?: string;
+}
+
 @WebSocketGateway({
   namespace: '/events',
   cors: {
-    origin: process.env.FRONTEND_URL?.split(',') || ['http://localhost:3001'],
+    origin: (typeof process !== 'undefined' &&
+      process.env.FRONTEND_URL?.split(',')) || ['http://localhost:3001'],
     credentials: true,
   },
 })
 export class EventsGateway implements OnGatewayConnection, OnGatewayDisconnect {
   @WebSocketServer()
-  server: Server;
+  server!: Server;
 
   private readonly logger = new Logger(EventsGateway.name);
   private readonly userSocketMap = new Map<string, Set<string>>();
@@ -31,11 +42,23 @@ export class EventsGateway implements OnGatewayConnection, OnGatewayDisconnect {
 
   constructor(private readonly jwtService: JwtService) {}
 
+  private extractToken(client: Socket): string | undefined {
+    const authPayload = client.handshake.auth as ClientAuthPayload | undefined;
+    const authorizationHeader = client.handshake.headers.authorization as
+      | string
+      | undefined;
+
+    if (authPayload?.token) {
+      return authPayload.token;
+    }
+
+    const parts = authorizationHeader?.split(' ') ?? [];
+    return parts[1];
+  }
+
   async handleConnection(client: Socket): Promise<void> {
     try {
-      const token =
-        (client.handshake.auth?.token as string) ||
-        (client.handshake.headers.authorization as string)?.split(' ')[1];
+      const token = this.extractToken(client);
 
       if (!token) {
         this.logger.warn(
@@ -45,12 +68,27 @@ export class EventsGateway implements OnGatewayConnection, OnGatewayDisconnect {
         return;
       }
 
-      const decoded = this.jwtService.verify(token) as {
-        sub?: string;
-        userId?: string;
-        id?: string;
-      };
-      const userId = decoded?.sub || decoded?.userId || decoded?.id;
+      let decoded: unknown;
+      try {
+        decoded = this.jwtService.verify(token);
+      } catch {
+        this.logger.warn(`Connection rejected: invalid token (${client.id})`);
+        client.disconnect();
+        return;
+      }
+
+      if (
+        !decoded ||
+        typeof decoded !== 'object' ||
+        !('sub' in decoded || 'userId' in decoded || 'id' in decoded)
+      ) {
+        this.logger.warn(`Connection rejected: invalid token (${client.id})`);
+        client.disconnect();
+        return;
+      }
+
+      const payload = decoded as JwtPayload;
+      const userId = payload.sub || payload.userId || payload.id;
 
       if (!userId) {
         this.logger.warn(`Connection rejected: invalid token (${client.id})`);
@@ -201,6 +239,10 @@ export class EventsGateway implements OnGatewayConnection, OnGatewayDisconnect {
     return (this.userSocketMap.get(userId)?.size || 0) > 0;
   }
 
+  isHealthy(): boolean {
+    return this.server !== undefined;
+  }
+
   private emitToEscrowRoom(
     eventName: string,
     escrowId: string,

apps/backend/tsconfig.json

@@ -20,6 +20,7 @@
     "noImplicitAny": false,
     "strictBindCallApply": false,
     "noFallthroughCasesInSwitch": false,
+    "types": ["node"],
     "lib": ["es2021"]
   }
 }

apps/onchain/src/lib.rs

@@ -399,9 +399,9 @@ pub enum Error {
 const DEFAULT_FEE_BPS: i128 = 50;
 const BPS_DENOMINATOR: i128 = 10000;
 const FEE_TIERS: &[(i128, i128)] = &[
-    (1000, 50),   // 0-1,000 XLM => 50 bps
-    (5000, 30),   // 1,001-5,000 XLM => 30 bps
-    (10000, 20),  // 5,001-10,000 XLM => 20 bps
+    (1000, 50),      // 0-1,000 XLM => 50 bps
+    (5000, 30),      // 1,001-5,000 XLM => 30 bps
+    (10000, 20),     // 5,001-10,000 XLM => 20 bps
     (i128::MAX, 10), // 10,001+ XLM => 10 bps
 ];
 const MAX_BATCH_SIZE: u32 = 20;