kappa
e4ccff9f87
feat: add Reddit search tool and security/performance improvements
New Features:
- Add reddit-tool.ts with search_reddit function (unofficial JSON API)
Security Fixes:
- Add timingSafeEqual for BOT_TOKEN/WEBHOOK_SECRET comparisons
- Add Optimistic Locking to domain registration balance deduction
- Add callback domain regex validation
- Sanitize error messages to prevent information disclosure
- Add timing-safe Bearer token comparison in api.ts
Performance Improvements:
- Parallelize Function Calling tool execution with Promise.all
- Parallelize domain registration API calls (check + price + balance)
- Parallelize domain info + nameserver queries
Reliability:
- Add in-memory fallback for KV rate limiting failures
- Add 10s timeout to Reddit API calls
- Add MAX_DEPOSIT_AMOUNT limit (100M KRW)
Testing:
- Skip stale test mocks pending vitest infrastructure update
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-26 16:20:17 +09:00
..
2026-01-26 16:20:17 +09:00
2026-01-26 16:20:17 +09:00
2026-01-19 15:36:17 +09:00
2026-01-24 21:01:38 +09:00