@investoday/investoday-api 1.8.7 → 1.8.9

package/README.md

@@ -16,9 +16,16 @@ Configure the API key once:
 investoday-api init
 ```
 
+Enable or disable background auto update during initialization:
+
+```bash
+investoday-api init --auto-update
+investoday-api init --no-auto-update
+```
+
 Get an API key from:
 
-- https://data-api.investoday.net/login
+- https://data-api.investoday.net/user/api-key
 
 ## Usage
 
@@ -26,6 +33,14 @@ Get an API key from:
 investoday-api --help
 investoday-api init
 investoday-api config status
+investoday-api config path
+investoday-api config remove
+investoday-api update status
+investoday-api update run
+investoday-api update enable
+investoday-api update disable
+investoday-api update register
+investoday-api update unregister
 investoday-api list
 investoday-api list 沪深京数据
 investoday-api search-api query=违规处罚 tool_ids=list_stock_violation_penalt
@@ -48,11 +63,61 @@ investoday-api search key=贵州茅台 type=11
 investoday-api fund/daily-quotes --method POST fundCode=000001 beginDate=2024-01-01 endDate=2024-12-31
 ```
 
+## Background updates
+
+`investoday-api` can periodically update the CLI package and installed skills after user authorization.
+
+```bash
+# Show task registration status, last run, errors, next run, and local/remote versions
+investoday-api update status
+
+# Run one update immediately; skips when auto update is disabled
+investoday-api update run
+
+# Enable auto update and register the user-level scheduled task
+investoday-api update enable
+
+# Disable auto update and unregister the scheduled task
+investoday-api update disable
+
+# Register or repair the scheduled task without changing the enabled flag
+investoday-api update register
+
+# Unregister only the scheduled task without changing the enabled flag
+investoday-api update unregister
+```
+
+The default manifest URL is:
+
+```text
+https://storage.txyun.investoday.net/application/skill-store/configs/investoday-api.manifest.json
+```
+
+For debugging, staging, or private deployments, override it with:
+
+```bash
+INVESTODAY_API_UPDATE_MANIFEST_URL=https://example.com/investoday-api.manifest.json investoday-api update status
+```
+
+## Config commands
+
+```bash
+# Show whether the API key is configured and where it is loaded from
+investoday-api config status
+
+# Print the local config file path
+investoday-api config path
+
+# Remove the local config and legacy credential files
+investoday-api config remove
+```
+
 ## Notes
 
-- Uses the local encrypted config created by `investoday-api init`
+- Uses the local JSON config created by `investoday-api init`
 - Only calls `https://data-api.investoday.net/data`
 - Bundles endpoint metadata for `list` and `search-api`
 - `search-api` defaults to JSON output and includes params, response fields, and `exampleCommand`; use `--text` for a human-readable summary
 - `search-api` only accepts structured inputs such as `query=` and `tool_ids=`; `query=` accepts one value and supports comma-separated keywords
+- Background update settings are stored in the local JSON config and can be inspected with `investoday-api update status`
 - Prints the API response `data` field as formatted JSON

package/data/openapi.json

@@ -6326,6 +6326,127 @@
         ]
       }
     },
+    "/stock/finance/financial-strength": {
+      "get": {
+        "tags": [
+          "股票财务实力的最新指标"
+        ],
+        "summary": "股票财务实力的最新指标",
+        "description": "通过股票代码获取指定股票的财务实力最新指标，包括现金负债比率、股东权益比率、利息保障倍数等核心财务指标的当前值（TTM）及对应行业排名、历史行业排名，还有基本面趋势F分数、两年破产风险Z分数、财务造假嫌疑M分数、财务实力综合得分，以及股票代码和名称，可用于评估公司财务健康状况、开展个股财务分析等场景。",
+        "operationId": "get_stock_finance_strength",
+        "parameters": [
+          {
+            "name": "stockCode",
+            "in": "query",
+            "description": "股票代码",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "成功响应",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object",
+                  "properties": {
+                    "f2190": {
+                      "type": "string",
+                      "description": "现金负债率当前值(TTM)",
+                      "example": ""
+                    },
+                    "f2190Rk": {
+                      "type": "string",
+                      "description": "现金负债率行业排名",
+                      "example": ""
+                    },
+                    "f2190RkHist": {
+                      "type": "string",
+                      "description": "现金负债率历史行业排名",
+                      "example": ""
+                    },
+                    "f2200": {
+                      "type": "string",
+                      "description": "股东权益比率当前值(TTM)",
+                      "example": ""
+                    },
+                    "f2200Rk": {
+                      "type": "string",
+                      "description": "股东权益比率行业排名",
+                      "example": ""
+                    },
+                    "f2200RkHist": {
+                      "type": "string",
+                      "description": "股东权益比率历史行业排名",
+                      "example": ""
+                    },
+                    "f2210": {
+                      "type": "string",
+                      "description": "利息保障倍数当前值(TTM)",
+                      "example": ""
+                    },
+                    "f2210Rk": {
+                      "type": "string",
+                      "description": "利息保障倍数行业排名【0-100】",
+                      "example": ""
+                    },
+                    "f2210RkHist": {
+                      "type": "string",
+                      "description": "利息保障倍数历史行业排名【0-100】",
+                      "example": ""
+                    },
+                    "f2220": {
+                      "type": "string",
+                      "description": "基本面趋势（F分数）当前值(TTM)",
+                      "example": ""
+                    },
+                    "f2230": {
+                      "type": "string",
+                      "description": "两年破产风险（Z分数）当前值(TTM)",
+                      "example": ""
+                    },
+                    "f2240": {
+                      "type": "string",
+                      "description": "财务造假嫌疑（M分数）当前值(TTM)",
+                      "example": ""
+                    },
+                    "f2520": {
+                      "type": "string",
+                      "description": "财务实力综合得分",
+                      "example": ""
+                    },
+                    "stockCode": {
+                      "type": "string",
+                      "description": "股票代码",
+                      "example": ""
+                    },
+                    "stockName": {
+                      "type": "string",
+                      "description": "股票名称",
+                      "example": ""
+                    }
+                  }
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "无效请求"
+          },
+          "500": {
+            "description": "服务器内部错误"
+          }
+        },
+        "security": [
+          {
+            "ApiKeyAuth": []
+          }
+        ]
+      }
+    },
     "/stock/finance/financial-strength-ht": {
       "get": {
         "tags": [

package/data/tree.json

@@ -1842,6 +1842,20 @@
                           "apiAccessLevel": "L2",
                           "apiMethod": "GET"
                         },
+                        {
+                          "apiId": 10250,
+                          "apiName": "股票财务实力的最新指标",
+                          "apiType": "PROXY",
+                          "apiStatus": "release",
+                          "groupId": 1072,
+                          "remarks": null,
+                          "toolName": "get_stk_fin_strength",
+                          "toolId": "get_stock_finance_strength",
+                          "apiPath": "stock/finance/financial-strength",
+                          "enabled": 1,
+                          "apiAccessLevel": "L2",
+                          "apiMethod": "GET"
+                        },
                         {
                           "apiId": 10251,
                           "apiName": "股票财务实力的历史指标",

package/lib/call-api.js

@@ -9,6 +9,7 @@ const {
   saveCredentials,
 } = require("./config");
 const { version: PACKAGE_VERSION } = require("../package.json");
+const { runUpdateCommand } = require("./update");
 
 const BASE_URL = "https://data-api.investoday.net/data";
 const REQUEST_TIMEOUT = 30_000;
@@ -36,6 +37,7 @@ function printHelp() {
     "Usage:\n" +
     "  investoday-api init\n" +
     "  investoday-api config status|path|remove\n" +
+    "  investoday-api update run|status|enable|disable|register|unregister\n" +
     "  investoday-api <endpoint> [key=value ...] [--method GET|POST]\n" +
     "  investoday-api list [group-or-subgroup]\n" +
     "  investoday-api search-api query=<query> [tool_ids=<tool_id,...>] [--text]\n" +
@@ -43,7 +45,8 @@ function printHelp() {
     "  investoday-api --help\n\n" +
     "Commands:\n" +
     "  init     Initialize local InvestToday API key configuration\n" +
-    "  config   Show, locate, or remove the local encrypted credentials\n" +
+    "  config   Show, locate, or remove the local configuration\n" +
+    "  update   Manage background updates for investoday-api and installed skills\n" +
     "  list     List available groups, subgroups, or endpoints from bundled metadata\n" +
     "  search-api Search endpoints and return method, params, response fields, and example command\n\n" +
     "Examples:\n" +
@@ -74,9 +77,12 @@ function printInitHelp() {
     "Usage:\n" +
     "  investoday-api init\n\n" +
     "Default flow:\n" +
-    "  Prompt for InvestToday API Key, verify it, then save it to local encrypted config.\n\n" +
+    "  Prompt for InvestToday API Key, verify it, then save it to local JSON config.\n" +
+    `  Get your API Key from: ${API_KEY_MANAGE_URL}\n\n` +
     "Options:\n" +
-    "  --skip-verify  Save without validating the API key first\n\n" +
+    "  --skip-verify     Save without validating the API key first\n" +
+    "  --auto-update     Enable background auto update without prompting\n" +
+    "  --no-auto-update  Disable background auto update without prompting\n\n" +
     `Local config: ${getCredentialsPath()}\n`
   );
 }
@@ -101,6 +107,7 @@ async function resolveInitApiKey(args) {
     exitWithError("ERROR: Interactive input is unavailable. Run 'investoday-api init' in an interactive terminal.");
   }
 
+  process.stderr.write(`请访问 ${API_KEY_MANAGE_URL} 获取 API Key。\n`);
   const apiKey = await askInput("InvestToday API Key: ");
   if (!String(apiKey || "").trim()) {
     exitWithError("ERROR: API key cannot be empty.");
@@ -122,18 +129,86 @@ async function verifyApiKey(apiKey) {
     if (apiKey && message.includes(apiKey)) {
       message = message.replaceAll(apiKey, "***");
     }
-    throw new Error(`verification request failed: ${message}`);
+    const errorName = String(error.name || "");
+    const errorCode = String(error.code || error.cause && error.cause.code || "");
+    const errorType = errorName === "TimeoutError" || errorName === "AbortError" || errorCode.includes("TIMEOUT")
+      ? "network_timeout"
+      : "network_unreachable";
+    return {
+      ok: false,
+      errorType,
+      serverConnected: false,
+      message: errorType === "network_timeout"
+        ? "连接今日投资数据服务超时，请检查网络或代理后重试。"
+        : `无法连接今日投资数据服务，请检查网络、DNS、TLS 或代理后重试。${message ? ` ${message}` : ""}`.slice(0, 500),
+    };
   }
 
   if (!response.ok) {
     const body = await response.text().catch(() => "");
-    throw new Error(`HTTP ${response.status}${body ? `: ${body.slice(0, 500)}` : ""}`);
+    let serverMessage = body.slice(0, 500);
+    try {
+      const payload = JSON.parse(body);
+      serverMessage = payload.message || payload.error || serverMessage;
+    } catch {
+      // keep plain text body
+    }
+    if (apiKey && serverMessage.includes(apiKey)) {
+      serverMessage = serverMessage.replaceAll(apiKey, "***");
+    }
+    return {
+      ok: false,
+      errorType: response.status >= 500 ? "server_error" : "invalid_api_key",
+      serverConnected: true,
+      message: serverMessage || `HTTP ${response.status}`,
+    };
   }
 
   const result = await response.json().catch(() => null);
+  if (!result) {
+    return {
+      ok: false,
+      errorType: "unexpected_response",
+      serverConnected: true,
+      message: "服务返回异常：响应不是合法 JSON。",
+    };
+  }
   if (!result || result.code !== 0) {
-    throw new Error(result && result.message ? result.message : "invalid response");
+    let message = result && result.message ? result.message : "API Key 无效或无接口权限。";
+    if (apiKey && message.includes(apiKey)) {
+      message = message.replaceAll(apiKey, "***");
+    }
+    return {
+      ok: false,
+      errorType: "invalid_api_key",
+      serverConnected: true,
+      message,
+    };
   }
+  return { ok: true, errorType: null, serverConnected: true, message: result.message || "success" };
+}
+
+async function resolveAutoUpdateChoice(args) {
+  const enableArg = hasArg(args, "--auto-update");
+  const disableArg = hasArg(args, "--no-auto-update");
+  if (enableArg && disableArg) {
+    exitWithError("ERROR: --auto-update and --no-auto-update cannot be used together.");
+  }
+  if (enableArg) {
+    return true;
+  }
+  if (disableArg) {
+    return false;
+  }
+
+  const answer = await askInput(
+    "\n是否启用自动更新？\n" +
+    "启用后将后台定时更新 investoday-api 及 skill，以保障您能及时获取到我们最新的 API。\n" +
+    "默认：是\n" +
+    "[Y/n]: "
+  );
+  const normalized = String(answer || "").trim().toLowerCase();
+  return normalized !== "n" && normalized !== "no";
 }
 
 async function runInitCommand(args) {
@@ -142,7 +217,7 @@ async function runInitCommand(args) {
     return;
   }
 
-  const allowed = new Set(["--skip-verify"]);
+  const allowed = new Set(["--skip-verify", "--auto-update", "--no-auto-update"]);
   for (const arg of args) {
     if (!allowed.has(arg)) {
       exitWithError(`ERROR: Unknown init option '${arg}'`);
@@ -152,12 +227,12 @@ async function runInitCommand(args) {
   const apiKey = await resolveInitApiKey(args);
   if (!hasArg(args, "--skip-verify")) {
     process.stderr.write("Verifying InvestToday API key...\n");
-    try {
-      await verifyApiKey(apiKey);
-    } catch (error) {
+    const verification = await verifyApiKey(apiKey);
+    if (!verification.ok) {
       exitWithError(
         `InvestToday API Key verification failed.\n` +
-        `Error: ${error.message}\n` +
+        `Error type: ${verification.errorType}\n` +
+        `Error: ${verification.message}\n` +
         `请登录 ${API_KEY_MANAGE_URL} 确认您的apiKey正确。`
       );
     }
@@ -169,10 +244,22 @@ async function runInitCommand(args) {
     exitWithError(`ERROR: Failed to save credentials: ${error.message}`);
   }
 
-  process.stdout.write(
-    "InvestToday API key 配置成功\n\n" +
-    "初始化完成 ✅\n"
-  );
+  process.stdout.write("InvestToday API key 配置成功\n");
+
+  const autoUpdateEnabled = await resolveAutoUpdateChoice(args);
+  if (autoUpdateEnabled) {
+    const enableResult = await runUpdateCommand(["enable"], { stdout: process.stdout, stderr: process.stderr });
+    if (enableResult && enableResult.ok) {
+      const runResult = await runUpdateCommand(["run"], { stdout: process.stdout, stderr: process.stderr });
+      if (runResult && runResult.ok === false) {
+        process.stderr.write("自动更新首次执行失败，可稍后运行 `investoday-api update status` 查看详情。\n");
+      }
+    }
+  } else {
+    await runUpdateCommand(["disable"], { stdout: process.stdout, stderr: process.stderr });
+  }
+
+  process.stdout.write("\n初始化完成 ✅\n");
 }
 
 function runConfigCommand(args) {
@@ -195,7 +282,7 @@ function runConfigCommand(args) {
 
   if (action === "remove") {
     removeCredentials();
-    process.stdout.write("InvestToday local credentials removed.\n");
+    process.stdout.write("InvestToday local configuration removed.\n");
     return;
   }
 
@@ -208,7 +295,7 @@ function runConfigCommand(args) {
         localConfig: localConfigured ? "configured" : "missing",
         activeSource,
         configDir: getConfigDir(),
-        credentialsFile: getCredentialsPath(),
+        configFile: getCredentialsPath(),
       }, null, 2) + "\n"
     );
     return;
@@ -755,6 +842,14 @@ async function main(argv = process.argv.slice(2)) {
     return;
   }
 
+  if (argv[0] === "update") {
+    const result = await runUpdateCommand(argv.slice(1), { stdout: process.stdout, stderr: process.stderr });
+    if (result && result.ok === false) {
+      process.exitCode = 1;
+    }
+    return;
+  }
+
   if (argv[0] === "list") {
     runListCommand(argv.slice(1));
     return;

package/lib/config.js

@@ -1,13 +1,12 @@
-const crypto = require("node:crypto");
 const fs = require("node:fs");
 const os = require("node:os");
 const path = require("node:path");
 
 const CONFIG_DIR_ENV = "INVESTODAY_API_CONFIG_DIR";
 const API_KEY_ENV = "INVESTODAY_API_KEY";
-const CREDENTIALS_FILE = "credentials.enc";
-const KEY_FILE = ".encryption_key";
-const CIPHER_ALGORITHM = "aes-256-gcm";
+const CONFIG_FILE = "investoday-api.config.json";
+const LEGACY_CREDENTIALS_FILE = "credentials.enc";
+const LEGACY_KEY_FILE = ".encryption_key";
 
 function getConfigDir(env = process.env) {
   if (env[CONFIG_DIR_ENV]) {
@@ -18,11 +17,15 @@ function getConfigDir(env = process.env) {
 }
 
 function getCredentialsPath(env = process.env) {
-  return path.join(getConfigDir(env), CREDENTIALS_FILE);
+  return path.join(getConfigDir(env), CONFIG_FILE);
 }
 
-function getEncryptionKeyPath(env = process.env) {
-  return path.join(getConfigDir(env), KEY_FILE);
+function getLegacyCredentialsPath(env = process.env) {
+  return path.join(getConfigDir(env), LEGACY_CREDENTIALS_FILE);
+}
+
+function getLegacyKeyPath(env = process.env) {
+  return path.join(getConfigDir(env), LEGACY_KEY_FILE);
 }
 
 function ensureConfigDir(env = process.env) {
@@ -44,69 +47,16 @@ function atomicWriteFile(filePath, contents, mode = 0o600) {
   fs.renameSync(tempPath, filePath);
 }
 
-function loadOrCreateEncryptionKey(env = process.env) {
-  ensureConfigDir(env);
-  const keyPath = getEncryptionKeyPath(env);
-  if (fs.existsSync(keyPath)) {
-    const encoded = fs.readFileSync(keyPath, "utf8").trim();
-    const key = Buffer.from(encoded, "base64");
-    if (key.length !== 32) {
-      throw new Error(`Invalid encryption key at ${keyPath}`);
-    }
-    return key;
-  }
-
-  const key = crypto.randomBytes(32);
-  atomicWriteFile(keyPath, key.toString("base64"));
-  return key;
+function saveConfig(config, env = process.env) {
+  atomicWriteFile(getCredentialsPath(env), `${JSON.stringify(config || {}, null, 2)}\n`);
 }
 
-function loadEncryptionKey(env = process.env) {
-  const keyPath = getEncryptionKeyPath(env);
-  if (!fs.existsSync(keyPath)) {
-    return null;
-  }
-
-  const encoded = fs.readFileSync(keyPath, "utf8").trim();
-  const key = Buffer.from(encoded, "base64");
-  if (key.length !== 32) {
-    return null;
-  }
-  return key;
-}
-
-function encryptJson(value, key) {
-  const iv = crypto.randomBytes(12);
-  const cipher = crypto.createCipheriv(CIPHER_ALGORITHM, key, iv);
-  const plaintext = Buffer.from(JSON.stringify(value), "utf8");
-  const encrypted = Buffer.concat([cipher.update(plaintext), cipher.final()]);
-  const tag = cipher.getAuthTag();
-
-  return {
-    version: 1,
-    algorithm: CIPHER_ALGORITHM,
-    iv: iv.toString("base64"),
-    tag: tag.toString("base64"),
-    data: encrypted.toString("base64"),
-  };
-}
-
-function decryptJson(payload, key) {
-  if (!payload || payload.algorithm !== CIPHER_ALGORITHM) {
-    throw new Error("Unsupported credentials format");
+function removeLegacyCredentials(env = process.env) {
+  for (const filePath of [getLegacyCredentialsPath(env), getLegacyKeyPath(env)]) {
+    if (fs.existsSync(filePath)) {
+      fs.rmSync(filePath, { force: true });
+    }
   }
-
-  const decipher = crypto.createDecipheriv(
-    CIPHER_ALGORITHM,
-    key,
-    Buffer.from(payload.iv, "base64")
-  );
-  decipher.setAuthTag(Buffer.from(payload.tag, "base64"));
-  const decrypted = Buffer.concat([
-    decipher.update(Buffer.from(payload.data, "base64")),
-    decipher.final(),
-  ]);
-  return JSON.parse(decrypted.toString("utf8"));
 }
 
 function saveCredentials(apiKey, env = process.env) {
@@ -115,35 +65,48 @@ function saveCredentials(apiKey, env = process.env) {
     throw new Error("API key cannot be empty");
   }
 
-  const key = loadOrCreateEncryptionKey(env);
-  const payload = encryptJson({
-    apiKey: trimmedKey,
-    createdAt: new Date().toISOString(),
-  }, key);
-  atomicWriteFile(getCredentialsPath(env), `${JSON.stringify(payload, null, 2)}\n`);
+  const existing = readConfig(env);
+  const payload = {
+    ...(existing || {}),
+    [API_KEY_ENV]: trimmedKey,
+  };
+  saveConfig(payload, env);
+  removeLegacyCredentials(env);
 }
 
-function readCredentials(env = process.env) {
-  const credentialsPath = getCredentialsPath(env);
-  const key = loadEncryptionKey(env);
-  if (!key || !fs.existsSync(credentialsPath)) {
+function readConfig(env = process.env) {
+  const configPath = getCredentialsPath(env);
+  if (!fs.existsSync(configPath)) {
     return null;
   }
 
   try {
-    const payload = JSON.parse(fs.readFileSync(credentialsPath, "utf8"));
-    return decryptJson(payload, key);
+    return JSON.parse(fs.readFileSync(configPath, "utf8"));
   } catch {
     return null;
   }
 }
 
+function readCredentials(env = process.env) {
+  const config = readConfig(env);
+  if (!config) {
+    return null;
+  }
+
+  const apiKey = String(config[API_KEY_ENV] || "").trim();
+  if (!apiKey) {
+    return null;
+  }
+
+  return { apiKey };
+}
+
 function removeCredentials(env = process.env) {
-  for (const filePath of [getCredentialsPath(env), getEncryptionKeyPath(env)]) {
-    if (fs.existsSync(filePath)) {
-      fs.rmSync(filePath, { force: true });
-    }
+  const configPath = getCredentialsPath(env);
+  if (fs.existsSync(configPath)) {
+    fs.rmSync(configPath, { force: true });
   }
+  removeLegacyCredentials(env);
 }
 
 function resolveApiKey(env = process.env) {
@@ -162,14 +125,20 @@ function resolveApiKey(env = process.env) {
 
 module.exports = {
   API_KEY_ENV,
+  CONFIG_FILE,
   CONFIG_DIR_ENV,
-  CREDENTIALS_FILE,
-  KEY_FILE,
+  CREDENTIALS_FILE: CONFIG_FILE,
+  LEGACY_CREDENTIALS_FILE,
+  LEGACY_KEY_FILE,
   getConfigDir,
   getCredentialsPath,
-  getEncryptionKeyPath,
+  getLegacyCredentialsPath,
+  getLegacyKeyPath,
+  removeLegacyCredentials,
+  readConfig,
   readCredentials,
   removeCredentials,
   resolveApiKey,
+  saveConfig,
   saveCredentials,
 };