Files

jgrusewski 265bd2441c fix(ml,ci): zero-dim guards on all 10 models, eliminate warnings, unblock CI parallelism

- Add dimension validation in DQN, PPO, Mamba2, TGGN, TLOB, Liquid,
  KAN, xLSTM, Diffusion constructors (fail-fast on zero-dim inputs
  that would cause CUDA_ERROR_INVALID_VALUE at runtime)
- Add num_unknown_features > 0 guard to TFT (temporal input required)
- Fix 12 dead-code/unused warnings in test compilation
- Remove opt-level=3 and codegen-units=1 from target rustflags
  (was forcing O3 + single-thread codegen on dev/test builds)
- Remove hardcoded jobs=16 cap (cargo now auto-detects CPU count)
- Switch linker to clang+lld (2-5x faster linking)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-26 17:38:43 +01:00

src

fix(ml,ci): zero-dim guards on all 10 models, eliminate warnings, unblock CI parallelism

2026-02-26 17:38:43 +01:00

build.rs

refactor: restructure repo — crates/, bin/, testing/ layout

2026-02-25 11:56:00 +01:00

Cargo.toml

refactor: restructure repo — crates/, bin/, testing/ layout

2026-02-25 11:56:00 +01:00

README.md

refactor: restructure repo — crates/, bin/, testing/ layout

2026-02-25 11:56:00 +01:00

README.md

web-gateway

REST and WebSocket gateway for the Foxhunt web dashboard. Built with Axum 0.7.9, it proxies HTTP requests to backend gRPC services and bridges gRPC streams to WebSocket clients.

Configuration

All settings are read from environment variables.

Variable	Default	Description
`GATEWAY_LISTEN_ADDR`	`0.0.0.0:3000`	HTTP listen address
`JWT_SECRET`	(required, min 32 chars)	HMAC key for JWT validation
`CORS_ORIGINS`	`http://localhost:5173`	Comma-separated allowed origins
`TRADING_SERVICE_URL`	`https://localhost:50051`	Trading gRPC upstream
`BACKTESTING_SERVICE_URL`	`https://localhost:50052`	Backtesting gRPC upstream
`ML_TRAINING_SERVICE_URL`	`https://localhost:50053`	ML training gRPC upstream

Routes

All API routes are under /api. Authentication is required unless noted.

Tier	Rate Limit	Endpoints
Public	10 req/min	`POST /api/auth/login`
Trading	200 req/min	`/api/trading/`, `/api/risk/`, `/api/ml/`, `/api/performance/`, `/api/config/*`
Compute	30 req/min	`/api/training/`, `/api/backtest/`, `/api/tune/*`
WebSocket	50 msg/min	`GET /api/ws` (JWT via `token` query param)
Health	none	`GET /health`, `GET /ready`

Security

JWT authentication middleware (32-character minimum secret enforced at startup)
Per-IP rate limiting across three tiers
1 MB request body size limit
CORS with explicit methods (GET, POST, PUT, DELETE) and headers (Authorization, Content-Type)
Response headers: HSTS, x-frame-options: DENY, x-content-type-options: nosniff, referrer-policy: strict-origin-when-cross-origin
WebSocket topic whitelist (8 valid topics), per-connection rate limit, max 20 subscriptions
X-Request-Id propagation (generated if absent, echoed on response)

Modules

Module	Purpose
`auth`	JWT validation and login handler
`config`	`GatewayConfig` loaded from environment
`error`	Unified error types and HTTP error responses
`grpc`	Tonic clients and gRPC stream bridges
`rate_limit`	Per-IP token-bucket rate limiter (3 tiers)
`routes`	Axum router construction and all HTTP handlers
`state`	`AppState` (gRPC channels, WS broadcast, config)
`ws`	WebSocket upgrade, topic subscriptions, keepalive

Running

export JWT_SECRET="your-secret-at-least-32-characters-long"
cargo run -p web-gateway