Skip to content

fix: resolve type incompatibilities across zksolbridge docs server#40

Open
Dexploarer wants to merge 1 commit intoJejuNetwork:developfrom
Dexploarer:codex/pr-bridge-docs-typecheck
Open

fix: resolve type incompatibilities across zksolbridge docs server#40
Dexploarer wants to merge 1 commit intoJejuNetwork:developfrom
Dexploarer:codex/pr-bridge-docs-typecheck

Conversation

@Dexploarer
Copy link
Contributor

@Dexploarer Dexploarer commented Feb 18, 2026

Summary

  • Export @jejunetwork/zksolbridge/tee types from source in workspace environments.
  • Replace @elysiajs/cors usage in documentation A2A server with local CORS middleware to avoid duplicate elysia type mismatch.
  • Update A2A unit test to assert explicit CORS headers.

Validation

  • bun run --cwd packages/bridge typecheck
  • bun run --cwd apps/documentation typecheck
  • bunx pyright packages/training/python apps/dws/api (pre-existing unrelated errors remain)

Copy link

@chatgpt-codex-connector chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: b408d78a90

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

if (!allowedOrigin) return
set.headers['Access-Control-Allow-Origin'] = allowedOrigin
set.headers['Access-Control-Allow-Credentials'] = 'true'
set.headers['Access-Control-Allow-Headers'] = 'Content-Type'

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Allow SDK auth headers in CORS preflight

The custom CORS handler now hard-codes Access-Control-Allow-Headers to only Content-Type, which blocks browser preflight for clients that send the standard SDK auth headers (x-jeju-address, x-jeju-timestamp, x-jeju-signature in buildAuthHeaders at packages/sdk/src/a2a/index.ts). In that scenario, requests from otherwise allowed origins are rejected by the browser before POST /api/a2a executes, so this change breaks cross-origin SDK usage of the documentation A2A endpoint.

Useful? React with 👍 / 👎.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant