shinchan-zhai 6911bc3e2b fix: prevent panics from unsafe type assertions in trading code + add request body limit ...

Security & Reliability:
- Add requestBodyLimitMiddleware (1MB) to prevent OOM from oversized API payloads
- Fix defer resp.Body.Close() inside loop in getPublicIPFromAPI (connection leak)
- Add posFloat64/posString safe helpers for position map access

Panic Prevention (critical for trading):
- Convert 30+ unsafe type assertions (pos["key"].(type)) to safe comma-ok
  pattern across all exchange traders: OKX, Hyperliquid, Aster, Bybit,
  KuCoin, Gate, Bitget, Binance
- Fix auto_trader_risk.go: drawdown monitor could panic and silently stop
  monitoring, leaving positions unprotected
- Fix auto_trader_decision.go & auto_trader_loop.go: core trading loop
  position parsing now crash-proof
- All trader/ code now has zero unsafe type assertions

Frontend:
- Fix config.ts: rejected promise cached forever on network error (never retries)

2026-03-25 01:05:54 +08:00

..

agent_routes.go

security: configurable CORS origins, limit sentinel response body

2026-03-25 01:05:54 +08:00

crypto_handler.go

feat: add TRANSPORT_ENCRYPTION toggle for easier deployment

2025-12-09 18:04:42 +08:00

errors.go

fix: sanitize API error messages to prevent sensitive info exposure

2026-01-03 13:11:15 +08:00

handler_ai_cost.go

security: sanitize internal error messages in API responses

2026-03-25 01:05:54 +08:00

handler_ai_model.go

feat: update default MiniMax model to M2.7 (#1428)

2026-03-24 08:37:00 +08:00

handler_competition.go

refactor: restructure project directories for better modularity

2026-03-11 23:58:13 +08:00

handler_exchange.go

refactor: restructure project directories for better modularity

2026-03-11 23:58:13 +08:00

handler_klines.go

refactor: propagate request context in kline handlers, extract MessageRenderer component

2026-03-25 01:05:54 +08:00

handler_order.go

refactor: restructure project directories for better modularity

2026-03-11 23:58:13 +08:00

handler_telegram.go

refactor: restructure project directories for better modularity

2026-03-11 23:58:13 +08:00

handler_trader_config.go

refactor: split large files and clean up project structure

2026-03-12 12:53:57 +08:00

handler_trader_status.go

refactor: split large files and clean up project structure

2026-03-12 12:53:57 +08:00

handler_trader.go

security: sanitize internal error messages in API responses

2026-03-25 01:05:54 +08:00

handler_user.go

security: login rate limiting, fix health endpoint, harden error handling

2026-03-25 01:05:54 +08:00

handler_wallet.go

feat: AI cost tracking, pre-launch balance check, low balance alerts

2026-03-21 12:31:20 +08:00

rate_limiter.go

reliability: wrap all 27 bare goroutines with safe.Go/GoNamed panic recovery

2026-03-25 01:05:54 +08:00

route_registry.go

feat: Claw402 x402 payment provider + Telegram agent + x402 refactoring (#1409)

2026-03-11 16:01:42 +08:00

server_test.go

refactor: standardize code comments

2025-12-08 01:43:22 +08:00

server.go

fix: prevent panics from unsafe type assertions in trading code + add request body limit

2026-03-25 01:05:54 +08:00

strategy.go

refactor: remove BlockRun provider, retain Claw402 as sole x402 payment provider

2026-03-24 01:44:54 +08:00

traderid_test.go

refactor: standardize code comments

2025-12-08 01:43:22 +08:00

utils_test.go

refactor: standardize code comments

2025-12-08 01:43:22 +08:00

utils.go

refactor: standardize code comments

2025-12-08 01:43:22 +08:00