 alsk1992andClaude Opus 4.5
|
c1a1072fc6
|
Security hardening: fix all audit findings
- Replace Math.random() IDs with crypto.randomBytes (21 files)
- Disable sandbox and canvas eval by default
- Fix task runner shell injection (execFile + validation)
- Add HTML escaping to canvas components (XSS fix)
- Fix CORS credentials with wildcard origin
- Add IP rate limiting (100 req/min default)
- Add security headers (HSTS, X-Frame-Options, etc)
- Add WebSocket message validation + size limits
- Fix Dockerfile (Node 22, remove Python deps, add healthcheck)
- Update security docs and changelog
New env vars:
- CLODDS_IP_RATE_LIMIT
- CLODDS_FORCE_HTTPS
- CLODDS_HSTS_ENABLED
- CANVAS_ALLOW_JS_EVAL
- ALLOW_UNSAFE_SANDBOX
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
2026-02-02 12:39:50 +00:00 |
|
|
alsk1992andClaude Opus 4.5
|
ab2c057853
|
Major update: 9 prediction markets, 5 trading platforms, x402 payments, arbitrage
## Prediction Markets (9 platforms)
- Polymarket: Full trading + WebSocket
- Kalshi: Full trading + WebSocket
- Betfair: NEW - Full sports exchange with back/lay orders
- Smarkets: NEW - Full exchange with 2% fees
- Drift: NEW - Complete Solana trading
- Manifold: Data feed
- Metaculus: Data feed
- PredictIt: Data feed
## Trading & Execution
- Native TypeScript order execution
- Limit, market, maker orders
- Back/lay for betting exchanges
- Portfolio tracking with PnL
- Trade history
## Cross-Platform Arbitrage
- Real-time price comparison
- Automatic opportunity detection
- Question similarity matching
- Alert notifications
## x402 Payments
- HTTP 402 machine-to-machine payments
- Base (EVM) + Solana support
- Client: Auto-pay for APIs
- Server: Paywall middleware
- Fee-free via Coinbase facilitator
## Crypto Price Feeds
- 10 assets: BTC, ETH, SOL, XRP, DOGE, ADA, AVAX, MATIC, DOT, LINK
- Binance WebSocket real-time
- 24h stats (change, high, low, volume)
- Fallbacks: Coinbase, CoinGecko
## AI & Agents
- 6 LLM providers (Claude, GPT-4, Gemini, Groq, Together, Fireworks)
- 4 specialized agents (Main, Trading, Research, Alerts)
- 19+ tools (browser, SQL, git, docker, etc.)
- Multi-agent routing
- Semantic memory with embeddings
## Channels (14+)
- Telegram, Discord, Slack, WhatsApp, Teams, Matrix, Signal
- Google Chat, Line, iMessage, Mattermost, Nostr, Twitch
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
|
2026-01-29 14:26:26 +00:00 |
|