fix: give every default HTTP client a connect/total timeout

src/bridge/client.rs

@@ -61,7 +61,15 @@ impl Client {
         headers.insert("Accept", HeaderValue::from_static("*/*"));
         headers.insert("Connection", HeaderValue::from_static("keep-alive"));
         headers.insert("Content-Type", HeaderValue::from_static("application/json"));
-        let client = ReqwestClient::builder().default_headers(headers).build()?;
+        // reqwest ships with no default timeout, so a single hung TCP
+        // connection blocks the caller indefinitely. 30s total / 10s connect
+        // is far above any healthy response from these APIs while still
+        // guaranteeing the caller gets control back.
+        let client = ReqwestClient::builder()
+            .default_headers(headers)
+            .connect_timeout(std::time::Duration::from_secs(10))
+            .timeout(std::time::Duration::from_secs(30))
+            .build()?;
 
         Ok(Self {
             host: Url::parse(host)?,

src/clob/client.rs

@@ -1491,7 +1491,15 @@ impl Client<Unauthenticated> {
         headers.insert("Connection", HeaderValue::from_static("keep-alive"));
         headers.insert("Content-Type", HeaderValue::from_static("application/json"));
 
-        let client = ReqwestClient::builder().default_headers(headers).build()?;
+        // reqwest ships with no default timeout, so a single hung TCP
+        // connection blocks the caller indefinitely. 30s total / 10s connect
+        // is far above any healthy response from these APIs while still
+        // guaranteeing the caller gets control back.
+        let client = ReqwestClient::builder()
+            .default_headers(headers)
+            .connect_timeout(std::time::Duration::from_secs(10))
+            .timeout(std::time::Duration::from_secs(30))
+            .build()?;
 
         let geoblock_host = Url::parse(
             config

src/data/client.rs

@@ -93,7 +93,15 @@ impl Client {
         headers.insert("Accept", HeaderValue::from_static("*/*"));
         headers.insert("Connection", HeaderValue::from_static("keep-alive"));
         headers.insert("Content-Type", HeaderValue::from_static("application/json"));
-        let client = ReqwestClient::builder().default_headers(headers).build()?;
+        // reqwest ships with no default timeout, so a single hung TCP
+        // connection blocks the caller indefinitely. 30s total / 10s connect
+        // is far above any healthy response from these APIs while still
+        // guaranteeing the caller gets control back.
+        let client = ReqwestClient::builder()
+            .default_headers(headers)
+            .connect_timeout(std::time::Duration::from_secs(10))
+            .timeout(std::time::Duration::from_secs(30))
+            .build()?;
 
         Ok(Self {
             host: Url::parse(host)?,

src/gamma/client.rs

@@ -105,7 +105,15 @@ impl Client {
         headers.insert("Accept", HeaderValue::from_static("*/*"));
         headers.insert("Connection", HeaderValue::from_static("keep-alive"));
         headers.insert("Content-Type", HeaderValue::from_static("application/json"));
-        let client = ReqwestClient::builder().default_headers(headers).build()?;
+        // reqwest ships with no default timeout, so a single hung TCP
+        // connection blocks the caller indefinitely. 30s total / 10s connect
+        // is far above any healthy response from these APIs while still
+        // guaranteeing the caller gets control back.
+        let client = ReqwestClient::builder()
+            .default_headers(headers)
+            .connect_timeout(std::time::Duration::from_secs(10))
+            .timeout(std::time::Duration::from_secs(30))
+            .build()?;
 
         Ok(Self {
             host: Url::parse(host)?,