fix: audit round 2 -- Go price corruption, Python docs, Price panic, FFI safety, SDK parity

Blocker:
- Go SDK priceToFloat() used wrong encoding, corrupting ALL prices.
  Now uses value * 10^(price_type - 10) matching Rust. Fixes #15.
- Python README + docs-site streaming examples used event["type"]
  instead of event["kind"]. Fixes #16.

Critical:
- Price::new() assert! -> debug_assert! + clamp(0,19) with warn!.
  Corrupt frames no longer crash production. Fixes #17.
- C++ FpssClient: added missing unsubscribe_quotes(). Fixes #18.

High:
- FFI FPSS: all 12 .lock().unwrap() -> .unwrap_or_else(poison recovery).
  Prevents UB on mutex poison across extern "C". Fixes #19.
- Python README: removed ghost methods is_authenticated/server_addr.
- Root README: "Stock (13)" -> "Stock (14)".

Medium:
- C++ MarketValueTick: 3 fields -> 7 (matches Go parity).
- C++ CalendarDay: added status field. InterestRateTick: added ms_of_day.
- Credentials.password: pub -> pub(crate) with accessor method.
- WS handler: added OPEN_INTEREST + FULL_TRADES dispatch.

Low:
- greeks.rs: removed shadowed start variable.
- Rebuilt mdBook from fixed sources.

Fixes #20.

160 tests, zero warnings, all doc-tests pass.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: userFRM

README.md

@@ -121,7 +121,7 @@ async fn main() -> Result<(), thetadatadx::Error> {
 
 61 typed methods covering all ThetaData MDDS endpoints (60 gRPC RPCs).
 
-### Stock (13 methods)
+### Stock (14 methods)
 
 | Category | Method | Description |
 |----------|--------|-------------|

crates/thetadatadx/src/auth/creds.rs

@@ -22,7 +22,7 @@ pub struct Credentials {
     /// Email address, lowercased and trimmed (matches Java `toLowerCase().trim()`).
     pub email: String,
     /// Password, trimmed.
-    pub password: String,
+    pub(crate) password: String,
 }
 
 impl std::fmt::Debug for Credentials {
@@ -87,6 +87,11 @@ impl Credentials {
         Ok(Self { email, password })
     }
 
+    /// Get the password.
+    pub fn password(&self) -> &str {
+        &self.password
+    }
+
     /// Construct credentials directly (e.g. from environment variables).
     pub fn new(email: impl Into<String>, password: impl Into<String>) -> Self {
         Self {

crates/thetadatadx/src/fpss/mod.rs

@@ -27,7 +27,7 @@
 //! # use thetadatadx::fpss::{FpssClient, FpssData, FpssEvent};
 //! # use thetadatadx::auth::Credentials;
 //! # fn example() -> Result<(), thetadatadx::error::Error> {
-//! let creds = Credentials { email: "user@example.com".into(), password: "pw".into() };
+//! let creds = Credentials::new("user@example.com", "pw");
 //! let client = FpssClient::connect(&creds, 4096, |event: &FpssEvent| {
 //!     // Runs on the Disruptor consumer thread -- keep it fast.
 //!     // Push to your own queue for heavy processing.

crates/thetadatadx/src/greeks.rs

@@ -320,7 +320,7 @@ fn iv_bisection(s: f64, x: f64, r: f64, q: f64, t: f64, o: f64, is_call: bool, o
     }
 
     let mut guess = 0.5;
-    let start = 0.0;
+    let mut start = 0.0;
     let mut end = guess;
     let mut changer = 0.2;
 
@@ -332,8 +332,6 @@ fn iv_bisection(s: f64, x: f64, r: f64, q: f64, t: f64, o: f64, is_call: bool, o
         }
         changer *= 2.0;
     }
-
-    let mut start = start;
     for _ in 0..MAX_TRIES {
         let v = value(s, x, guess, r, q, t, is_call);
         if (v - o).abs() < 0.001 {

crates/thetadatadx/src/types/price.rs

@@ -55,11 +55,22 @@ impl Price {
 
     #[inline]
     pub fn new(value: i32, price_type: i32) -> Self {
-        assert!(
+        debug_assert!(
             (0..20).contains(&price_type),
             "price_type must be 0..20, got {price_type}"
         );
-        Self { value, price_type }
+        let clamped = price_type.clamp(0, 19);
+        if clamped != price_type {
+            tracing::warn!(
+                price_type,
+                clamped,
+                "price_type out of range 0..20, clamping"
+            );
+        }
+        Self {
+            value,
+            price_type: clamped,
+        }
     }
 
     pub fn is_zero(&self) -> bool {

docs-site/book/404.html

@@ -36,7 +36,7 @@
             const path_to_root = "";
             const default_light_theme = "navy";
             const default_dark_theme = "coal";
-            window.path_to_searchindex_js = "searchindex-d9431649.js";
+            window.path_to_searchindex_js = "searchindex-dd8033fe.js";
         </script>
         <!-- Start loading toc.js asap -->
         <script src="toc-4b833958.js"></script>

docs-site/book/changelog.html

@@ -35,7 +35,7 @@
             const path_to_root = "";
             const default_light_theme = "navy";
             const default_dark_theme = "coal";
-            window.path_to_searchindex_js = "searchindex-d9431649.js";
+            window.path_to_searchindex_js = "searchindex-dd8033fe.js";
         </script>
         <!-- Start loading toc.js asap -->
         <script src="toc-4b833958.js"></script>

docs-site/book/cpp/api-reference.html

@@ -35,7 +35,7 @@
             const path_to_root = "../";
             const default_light_theme = "navy";
             const default_dark_theme = "coal";
-            window.path_to_searchindex_js = "../searchindex-d9431649.js";
+            window.path_to_searchindex_js = "../searchindex-dd8033fe.js";
         </script>
         <!-- Start loading toc.js asap -->
         <script src="../toc-4b833958.js"></script>

docs-site/book/cpp/getting-started.html

@@ -35,7 +35,7 @@
             const path_to_root = "../";
             const default_light_theme = "navy";
             const default_dark_theme = "coal";
-            window.path_to_searchindex_js = "../searchindex-d9431649.js";
+            window.path_to_searchindex_js = "../searchindex-dd8033fe.js";
         </script>
         <!-- Start loading toc.js asap -->
         <script src="../toc-4b833958.js"></script>

docs-site/book/cpp/historical.html

@@ -35,7 +35,7 @@
             const path_to_root = "../";
             const default_light_theme = "navy";
             const default_dark_theme = "coal";
-            window.path_to_searchindex_js = "../searchindex-d9431649.js";
+            window.path_to_searchindex_js = "../searchindex-dd8033fe.js";
         </script>
         <!-- Start loading toc.js asap -->
         <script src="../toc-4b833958.js"></script>