zeekay 97ba736ff0 unify FI assets into ListAssets — one endpoint for all asset classes ...

ListAssets now fetches Alpaca FI treasuries + corporates alongside
equities and crypto. Maps CUSIP as symbol, bond_status as tradable
filter. Corporates 403 (not subscribed) silently skipped.
ATS registerMarketsFromBroker picks them up automatically.

2026-04-16 21:07:02 -07:00

..

accounts

security: fix IDOR, SSRF, HMAC replay, JWT iss/aud, SOR injection

2026-04-07 19:52:17 -07:00

admin

security: bcrypt admin auth, JWKS per-kid cache, gRPC reflection dev-only, audit bounded+rand IDs, credential hashing

2026-04-07 20:14:39 -07:00

api

security: fix IDOR, SSRF, HMAC replay, JWT iss/aud, SOR injection

2026-04-07 19:52:17 -07:00

audit

security: bcrypt admin auth, JWKS per-kid cache, gRPC reflection dev-only, audit bounded+rand IDs, credential hashing

2026-04-07 20:14:39 -07:00

auth

security: require JWT aud, add key_hash migration column, remove stale gRPC comment

2026-04-07 22:24:44 -07:00

compliance

security: bcrypt admin auth, JWKS per-kid cache, gRPC reflection dev-only, audit bounded+rand IDs, credential hashing

2026-04-07 20:14:39 -07:00

custody

fix: use query-param format for crypto bars (sandbox single path 404s)

2025-12-24 00:57:08 -07:00

db

security: require JWT aud, add key_hash migration column, remove stale gRPC comment

2026-04-07 22:24:44 -07:00

funding

test: boost coverage — accounts resolver, frontend API, funding (+820 lines)

2025-12-20 12:46:39 -07:00

marketdata

fix: use query-param format for crypto bars (sandbox single path 404s)

2025-12-24 00:57:08 -07:00

provider

unify FI assets into ListAssets — one endpoint for all asset classes

2026-04-16 21:07:02 -07:00

risk

test: add comprehensive unit tests for auth, risk, alpaca, types, router

2025-11-28 22:18:34 -08:00

router

security: remove gRPC (use ZAP), fix TWAP race, harden Alpaca provider

2026-04-07 22:20:04 -07:00

settlement

feat: add prefunding pool and instant settlement engine

2025-12-11 14:23:51 -08:00

taskqueue

feat: taskqueue client + 20 webhook tests + prefix filtering + org isolation

2026-04-07 15:50:36 -07:00

types

feat(types): asset_class constants for ch_*, ae_*, eu_* (MiCA taxonomy)

2026-04-13 12:25:57 -07:00

venue

fix: use query-param format for crypto bars (sandbox single path 404s)

2025-12-24 00:57:08 -07:00

webhook

security: fix IDOR, SSRF, HMAC replay, JWT iss/aud, SOR injection

2026-04-07 19:52:17 -07:00

ws

fix: remove wildcard CORS from SSE endpoint

2025-12-24 00:57:16 -07:00