1 files changed, 15 insertions, 7 deletions
diff --git a/services/api/src/trading_api/routers/portfolio.py b/services/api/src/trading_api/routers/portfolio.py
index d76d85d..56bee7c 100644
--- a/services/api/src/trading_api/routers/portfolio.py
+++ b/services/api/src/trading_api/routers/portfolio.py
@@ -2,9 +2,11 @@
 
 import logging
 
-from fastapi import APIRouter, HTTPException, Request
-from shared.sa_models import PositionRow
+from fastapi import APIRouter, HTTPException, Query, Request
 from sqlalchemy import select
+from sqlalchemy.exc import OperationalError
+
+from shared.sa_models import PositionRow
 
 logger = logging.getLogger(__name__)
 
@@ -29,13 +31,16 @@ async def get_positions(request: Request):
                 }
                 for r in rows
             ]
+    except OperationalError as exc:
+        logger.error("Database error fetching positions: %s", exc)
+        raise HTTPException(status_code=503, detail="Database unavailable") from exc
     except Exception as exc:
-        logger.error("Failed to get positions: %s", exc)
-        raise HTTPException(status_code=500, detail="Failed to retrieve positions")
+        logger.error("Failed to get positions: %s", exc, exc_info=True)
+        raise HTTPException(status_code=500, detail="Failed to retrieve positions") from exc
 
 
 @router.get("/snapshots")
-async def get_snapshots(request: Request, days: int = 30):
+async def get_snapshots(request: Request, days: int = Query(30, ge=1, le=365)):
     """Get portfolio snapshots for the last N days."""
     try:
         db = request.app.state.db
@@ -49,6 +54,9 @@ async def get_snapshots(request: Request, days: int = 30):
             }
             for s in snapshots
         ]
+    except OperationalError as exc:
+        logger.error("Database error fetching snapshots: %s", exc)
+        raise HTTPException(status_code=503, detail="Database unavailable") from exc
     except Exception as exc:
-        logger.error("Failed to get snapshots: %s", exc)
-        raise HTTPException(status_code=500, detail="Failed to retrieve snapshots")
+        logger.error("Failed to get snapshots: %s", exc, exc_info=True)
+        raise HTTPException(status_code=500, detail="Failed to retrieve snapshots") from exc