3 Commits

Author	SHA1	Message	Date
shinchan-zhai	b94b64a305	robustness: add HTTP status code checks to market data & provider APIs ... - market/api_client.go: check StatusCode for exchangeInfo, klines, price endpoints + add truncateBody helper for safe error messages - market/data.go: check StatusCode for openInterest and premiumIndex - provider/coinank: check StatusCode for GET and POST requests - provider/twelvedata: check StatusCode for time series and quote APIs - Prevents confusing JSON unmarshal errors when APIs return 429/500/etc	2026-03-25 01:05:54 +08:00
shinchan-zhai	456570c37c	security: add safe.ReadAllLimited — bound all HTTP response body reads to 10MB ... - Created safe/io.go with ReadAllLimited helper (default 10MB limit) - Replaced 62 unbounded io.ReadAll(resp.Body) calls across 32 files - Covers all exchange traders (Hyperliquid, Bybit, Binance, OKX, Aster, KuCoin, Gate, Bitget, Lighter, Indodax), providers (CoinAnk, Alpaca, TwelveData), MCP client/x402, market data, wallet, telegram, kernel - Prevents OOM from malicious/buggy exchange API responses - Previously fixed: brain.go, sentinel.go already had manual LimitReader	2026-03-25 01:05:54 +08:00
wqqqqqq	24cd329f3d	feat: implement coinank free kline api and kline websocket (#1281) ... - implement coinank free kline api in coinank_api.Kline - implement coinank free kline ws in coinank_api.KlineWs. if needKline is true, kline data read from KlineCh. if needTicker is true, tickers data read from TickersCh.	2025-12-27 01:54:44 +08:00