shinchan-zhai f28f0e340c security: login rate limiting, fix health endpoint, harden error handling ...

- Fix health endpoint returning null time (use time.Now() instead of context value)
- Add LoginRateLimiter: 5 attempts per 15min window, 5min block on brute-force
- Apply rate limiting to login/register endpoints
- Move reset-password to authenticated routes (was unauthenticated — critical vuln)
- Limit response body sizes on proxy/external API calls (prevent memory exhaustion)
- Sanitize error messages in agent chat endpoint (don't leak internal errors)
- Record login success/failure for rate limiting tracking

2026-03-25 01:05:54 +08:00

..

agent.go

fix: enforce tool-based data only — Agent can no longer fabricate prices

2026-03-25 01:05:54 +08:00

brain.go

security: login rate limiting, fix health endpoint, harden error handling

2026-03-25 01:05:54 +08:00

history.go

feat: add multi-turn conversation memory to Agent

2026-03-25 01:05:54 +08:00

i18n.go

refactor: delete router.go — LLM is the brain, not regex

2026-03-25 01:05:54 +08:00

onboard.go

fix: Agent answers questions first, setup only when asked

2026-03-25 01:05:54 +08:00

scheduler.go

fix: enforce tool-based data only — Agent can no longer fabricate prices

2026-03-25 01:05:54 +08:00

sentinel.go

fix: prevent Agent from fabricating position/balance data

2026-03-25 01:05:54 +08:00

stock.go

security: login rate limiting, fix health endpoint, harden error handling

2026-03-25 01:05:54 +08:00

tools.go

feat: dynamic stock search via Sina suggest API

2026-03-25 01:05:54 +08:00

trade.go

feat(agent): LLM tool-calling for auto trade execution

2026-03-25 01:05:54 +08:00

web.go

security: login rate limiting, fix health endpoint, harden error handling

2026-03-25 01:05:54 +08:00