@okx_ai/okx-trade-cli 1.2.1 → 1.2.3-beta.1

package/dist/index.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 // src/index.ts
-import { createRequire } from "module";
+import { createRequire as createRequire2 } from "module";
 
 // ../core/dist/index.js
 import { createHmac } from "crypto";
@@ -933,8 +933,10 @@ function sleep(ms) {
 var RateLimiter = class {
   buckets = /* @__PURE__ */ new Map();
   maxWaitMs;
-  constructor(maxWaitMs = 3e4) {
+  verbose;
+  constructor(maxWaitMs = 3e4, verbose = false) {
     this.maxWaitMs = maxWaitMs;
+    this.verbose = verbose;
   }
   async consume(config, amount = 1) {
     const bucket = this.getBucket(config);
@@ -952,6 +954,10 @@ var RateLimiter = class {
         "Reduce tool call frequency or retry later."
       );
     }
+    if (this.verbose) {
+      process.stderr.write(`[verbose] \u23F3 rate-limit: waiting ${waitMs}ms for "${config.key}"
+`);
+    }
     await sleep(waitMs);
     this.refill(bucket);
     if (bucket.tokens < amount) {
@@ -1046,11 +1052,34 @@ function buildQueryString(query) {
   }
   return params.toString();
 }
+function maskKey(key) {
+  if (key.length <= 8) return "***";
+  return `${key.slice(0, 3)}***${key.slice(-3)}`;
+}
+function vlog(message) {
+  process.stderr.write(`[verbose] ${message}
+`);
+}
 var OkxRestClient = class {
   config;
-  rateLimiter = new RateLimiter();
+  rateLimiter;
   constructor(config) {
     this.config = config;
+    this.rateLimiter = new RateLimiter(3e4, config.verbose);
+  }
+  logRequest(method, url, auth) {
+    if (!this.config.verbose) return;
+    vlog(`\u2192 ${method} ${url}`);
+    const authInfo = auth === "private" && this.config.apiKey ? `auth=\u2713(${maskKey(this.config.apiKey)})` : `auth=${auth}`;
+    vlog(`  ${authInfo} demo=${this.config.demo} timeout=${this.config.timeoutMs}ms`);
+  }
+  logResponse(status, rawLen, elapsed, traceId, code, msg) {
+    if (!this.config.verbose) return;
+    if (code && code !== "0" && code !== "1") {
+      vlog(`\u2717 ${status} | code=${code} | msg=${msg ?? "-"} | ${rawLen}B | ${elapsed}ms | trace=${traceId ?? "-"}`);
+    } else {
+      vlog(`\u2190 ${status} | code=${code ?? "0"} | ${rawLen}B | ${elapsed}ms | trace=${traceId ?? "-"}`);
+    }
   }
   async publicGet(path4, query, rateLimit) {
     return this.request({
@@ -1079,126 +1108,146 @@ var OkxRestClient = class {
       rateLimit
     });
   }
-  async request(config) {
-    const queryString = buildQueryString(config.query);
-    const requestPath = queryString.length > 0 ? `${config.path}?${queryString}` : config.path;
-    const url = `${this.config.baseUrl}${requestPath}`;
-    const bodyJson = config.body ? JSON.stringify(config.body) : "";
-    const timestamp = getNow();
-    if (config.rateLimit) {
-      await this.rateLimiter.consume(config.rateLimit);
-    }
-    const headers = new Headers({
-      "Content-Type": "application/json",
-      Accept: "application/json"
-    });
-    if (this.config.userAgent) {
-      headers.set("User-Agent", this.config.userAgent);
-    }
-    if (config.auth === "private") {
-      if (!this.config.hasAuth) {
-        throw new ConfigError(
-          "Private endpoint requires API credentials.",
-          "Configure OKX_API_KEY, OKX_SECRET_KEY and OKX_PASSPHRASE."
-        );
-      }
-      if (!this.config.apiKey || !this.config.secretKey || !this.config.passphrase) {
-        throw new ConfigError(
-          "Invalid private API credentials state.",
-          "Ensure all OKX credentials are set."
-        );
-      }
-      const payload = `${timestamp}${config.method.toUpperCase()}${requestPath}${bodyJson}`;
-      const signature = signOkxPayload(payload, this.config.secretKey);
-      headers.set("OK-ACCESS-KEY", this.config.apiKey);
-      headers.set("OK-ACCESS-SIGN", signature);
-      headers.set("OK-ACCESS-PASSPHRASE", this.config.passphrase);
-      headers.set("OK-ACCESS-TIMESTAMP", timestamp);
+  setAuthHeaders(headers, method, requestPath, bodyJson, timestamp) {
+    if (!this.config.hasAuth) {
+      throw new ConfigError(
+        "Private endpoint requires API credentials.",
+        "Configure OKX_API_KEY, OKX_SECRET_KEY and OKX_PASSPHRASE."
+      );
     }
-    if (this.config.demo) {
-      headers.set("x-simulated-trading", "1");
+    if (!this.config.apiKey || !this.config.secretKey || !this.config.passphrase) {
+      throw new ConfigError(
+        "Invalid private API credentials state.",
+        "Ensure all OKX credentials are set."
+      );
     }
-    let response;
-    try {
-      response = await fetch(url, {
-        method: config.method,
-        headers,
-        body: config.method === "POST" ? bodyJson : void 0,
-        signal: AbortSignal.timeout(this.config.timeoutMs)
-      });
-    } catch (error) {
-      throw new NetworkError(
-        `Failed to call OKX endpoint ${config.method} ${requestPath}.`,
-        `${config.method} ${requestPath}`,
-        error
+    const payload = `${timestamp}${method.toUpperCase()}${requestPath}${bodyJson}`;
+    const signature = signOkxPayload(payload, this.config.secretKey);
+    headers.set("OK-ACCESS-KEY", this.config.apiKey);
+    headers.set("OK-ACCESS-SIGN", signature);
+    headers.set("OK-ACCESS-PASSPHRASE", this.config.passphrase);
+    headers.set("OK-ACCESS-TIMESTAMP", timestamp);
+  }
+  throwOkxError(code, msg, reqConfig, traceId) {
+    const message = msg || "OKX API request failed.";
+    const endpoint = `${reqConfig.method} ${reqConfig.path}`;
+    if (code === "50111" || code === "50112" || code === "50113") {
+      throw new AuthenticationError(
+        message,
+        "Check API key, secret, passphrase and permissions.",
+        endpoint,
+        traceId
       );
     }
-    const rawText = await response.text();
-    const traceId = extractTraceId(response.headers);
+    const behavior = OKX_CODE_BEHAVIORS[code];
+    const suggestion = behavior?.suggestion?.replace("{site}", this.config.site);
+    if (code === "50011" || code === "50061") {
+      throw new RateLimitError(message, suggestion, endpoint, traceId);
+    }
+    throw new OkxApiError(message, {
+      code,
+      endpoint,
+      suggestion,
+      traceId
+    });
+  }
+  processResponse(rawText, response, elapsed, traceId, reqConfig, requestPath) {
     let parsed;
     try {
       parsed = rawText ? JSON.parse(rawText) : {};
     } catch (error) {
+      this.logResponse(response.status, rawText.length, elapsed, traceId, "non-JSON");
       if (!response.ok) {
         const messagePreview = rawText.slice(0, 160).replace(/\s+/g, " ").trim();
         throw new OkxApiError(
           `HTTP ${response.status} from OKX: ${messagePreview || "Non-JSON response body"}`,
           {
             code: String(response.status),
-            endpoint: `${config.method} ${config.path}`,
+            endpoint: `${reqConfig.method} ${reqConfig.path}`,
             suggestion: "Verify endpoint path and request parameters.",
             traceId
           }
         );
       }
       throw new NetworkError(
-        `OKX returned non-JSON response for ${config.method} ${requestPath}.`,
-        `${config.method} ${requestPath}`,
+        `OKX returned non-JSON response for ${reqConfig.method} ${requestPath}.`,
+        `${reqConfig.method} ${requestPath}`,
         error
       );
     }
     if (!response.ok) {
+      this.logResponse(response.status, rawText.length, elapsed, traceId, parsed.code ?? "-", parsed.msg);
       throw new OkxApiError(
         `HTTP ${response.status} from OKX: ${parsed.msg ?? "Unknown error"}`,
         {
           code: String(response.status),
-          endpoint: `${config.method} ${config.path}`,
+          endpoint: `${reqConfig.method} ${reqConfig.path}`,
           suggestion: "Retry later or verify endpoint parameters.",
           traceId
         }
       );
     }
     const responseCode = parsed.code;
+    this.logResponse(response.status, rawText.length, elapsed, traceId, responseCode, parsed.msg);
     if (responseCode && responseCode !== "0" && responseCode !== "1") {
-      const message = parsed.msg || "OKX API request failed.";
-      const endpoint = `${config.method} ${config.path}`;
-      if (responseCode === "50111" || responseCode === "50112" || responseCode === "50113") {
-        throw new AuthenticationError(
-          message,
-          "Check API key, secret, passphrase and permissions.",
-          endpoint,
-          traceId
-        );
-      }
-      const behavior = OKX_CODE_BEHAVIORS[responseCode];
-      const suggestion = behavior?.suggestion?.replace("{site}", this.config.site);
-      if (responseCode === "50011" || responseCode === "50061") {
-        throw new RateLimitError(message, suggestion, endpoint, traceId);
-      }
-      throw new OkxApiError(message, {
-        code: responseCode,
-        endpoint,
-        suggestion,
-        traceId
-      });
+      this.throwOkxError(responseCode, parsed.msg, reqConfig, traceId);
     }
     return {
-      endpoint: `${config.method} ${config.path}`,
+      endpoint: `${reqConfig.method} ${reqConfig.path}`,
       requestTime: (/* @__PURE__ */ new Date()).toISOString(),
       data: parsed.data ?? null,
       raw: parsed
     };
   }
+  async request(reqConfig) {
+    const queryString = buildQueryString(reqConfig.query);
+    const requestPath = queryString.length > 0 ? `${reqConfig.path}?${queryString}` : reqConfig.path;
+    const url = `${this.config.baseUrl}${requestPath}`;
+    const bodyJson = reqConfig.body ? JSON.stringify(reqConfig.body) : "";
+    const timestamp = getNow();
+    this.logRequest(reqConfig.method, url, reqConfig.auth);
+    if (reqConfig.rateLimit) {
+      await this.rateLimiter.consume(reqConfig.rateLimit);
+    }
+    const headers = new Headers({
+      "Content-Type": "application/json",
+      Accept: "application/json"
+    });
+    if (this.config.userAgent) {
+      headers.set("User-Agent", this.config.userAgent);
+    }
+    if (reqConfig.auth === "private") {
+      this.setAuthHeaders(headers, reqConfig.method, requestPath, bodyJson, timestamp);
+    }
+    if (this.config.demo) {
+      headers.set("x-simulated-trading", "1");
+    }
+    const t0 = Date.now();
+    let response;
+    try {
+      response = await fetch(url, {
+        method: reqConfig.method,
+        headers,
+        body: reqConfig.method === "POST" ? bodyJson : void 0,
+        signal: AbortSignal.timeout(this.config.timeoutMs)
+      });
+    } catch (error) {
+      if (this.config.verbose) {
+        const elapsed2 = Date.now() - t0;
+        const cause = error instanceof Error ? error.message : String(error);
+        vlog(`\u2717 NetworkError after ${elapsed2}ms: ${cause}`);
+      }
+      throw new NetworkError(
+        `Failed to call OKX endpoint ${reqConfig.method} ${requestPath}.`,
+        `${reqConfig.method} ${requestPath}`,
+        error
+      );
+    }
+    const rawText = await response.text();
+    const elapsed = Date.now() - t0;
+    const traceId = extractTraceId(response.headers);
+    return this.processResponse(rawText, response, elapsed, traceId, reqConfig, requestPath);
+  }
 };
 var DEFAULT_SOURCE_TAG = "MCP";
 var OKX_SITES = {
@@ -1224,6 +1273,10 @@ var BOT_SUB_MODULE_IDS = [
   "bot.dca"
 ];
 var BOT_DEFAULT_SUB_MODULES = ["bot.grid"];
+var EARN_SUB_MODULE_IDS = [
+  "earn.savings",
+  "earn.onchain"
+];
 var MODULES = [
   "market",
   "spot",
@@ -1231,6 +1284,7 @@ var MODULES = [
   "futures",
   "option",
   "account",
+  ...EARN_SUB_MODULE_IDS,
   ...BOT_SUB_MODULE_IDS
 ];
 var DEFAULT_MODULES = ["spot", "swap", "option", "account", ...BOT_DEFAULT_SUB_MODULES];
@@ -1296,6 +1350,13 @@ function compactObject(object) {
   }
   return next;
 }
+function normalizeResponse(response) {
+  return {
+    endpoint: response.endpoint,
+    requestTime: response.requestTime,
+    data: response.data
+  };
+}
 var OKX_CANDLE_BARS = [
   "1m",
   "3m",
@@ -1335,6 +1396,14 @@ function privateRateLimit(key, rps = 10) {
     refillPerSecond: rps
   };
 }
+function assertNotDemo(config, endpoint) {
+  if (config.demo) {
+    throw new ConfigError(
+      `"${endpoint}" is not supported in simulated trading mode.`,
+      "Disable demo mode (remove OKX_DEMO=1 or --demo flag) to use this endpoint."
+    );
+  }
+}
 function normalize(response) {
   return {
     endpoint: response.endpoint,
@@ -2821,6 +2890,246 @@ function registerBotTools() {
     ...registerDcaTools()
   ];
 }
+function registerEarnTools() {
+  return [
+    {
+      name: "earn_get_savings_balance",
+      module: "earn.savings",
+      description: "Get Simple Earn (savings/flexible earn) balance. Returns current holdings for all currencies or a specific one. Private endpoint. Rate limit: 6 req/s.",
+      isWrite: false,
+      inputSchema: {
+        type: "object",
+        properties: {
+          ccy: {
+            type: "string",
+            description: "e.g. USDT or BTC. Omit for all."
+          }
+        }
+      },
+      handler: async (rawArgs, context) => {
+        const args = asRecord(rawArgs);
+        const response = await context.client.privateGet(
+          "/api/v5/finance/savings/balance",
+          compactObject({ ccy: readString(args, "ccy") }),
+          privateRateLimit("earn_get_savings_balance", 6)
+        );
+        return normalizeResponse(response);
+      }
+    },
+    {
+      name: "earn_savings_purchase",
+      module: "earn.savings",
+      description: "Purchase Simple Earn (savings/flexible earn). [CAUTION] Moves real funds into earn product. Not supported in demo/simulated trading mode. Private endpoint. Rate limit: 6 req/s.",
+      isWrite: true,
+      inputSchema: {
+        type: "object",
+        properties: {
+          ccy: {
+            type: "string",
+            description: "Currency to purchase, e.g. USDT"
+          },
+          amt: {
+            type: "string",
+            description: "Purchase amount"
+          },
+          rate: {
+            type: "string",
+            description: "Lending rate. Annual rate in decimal, e.g. 0.01 = 1%. Defaults to 0.01 (1%, minimum rate, easiest to match)."
+          }
+        },
+        required: ["ccy", "amt"]
+      },
+      handler: async (rawArgs, context) => {
+        assertNotDemo(context.config, "earn_savings_purchase");
+        const args = asRecord(rawArgs);
+        const response = await context.client.privatePost(
+          "/api/v5/finance/savings/purchase-redempt",
+          compactObject({
+            ccy: requireString(args, "ccy"),
+            amt: requireString(args, "amt"),
+            side: "purchase",
+            rate: readString(args, "rate") ?? "0.01"
+          }),
+          privateRateLimit("earn_savings_purchase", 6)
+        );
+        return normalizeResponse(response);
+      }
+    },
+    {
+      name: "earn_savings_redeem",
+      module: "earn.savings",
+      description: "Redeem Simple Earn (savings/flexible earn). [CAUTION] Withdraws funds from earn product. Not supported in demo/simulated trading mode. Private endpoint. Rate limit: 6 req/s.",
+      isWrite: true,
+      inputSchema: {
+        type: "object",
+        properties: {
+          ccy: {
+            type: "string",
+            description: "Currency to redeem, e.g. USDT"
+          },
+          amt: {
+            type: "string",
+            description: "Redemption amount"
+          }
+        },
+        required: ["ccy", "amt"]
+      },
+      handler: async (rawArgs, context) => {
+        assertNotDemo(context.config, "earn_savings_redeem");
+        const args = asRecord(rawArgs);
+        const response = await context.client.privatePost(
+          "/api/v5/finance/savings/purchase-redempt",
+          compactObject({
+            ccy: requireString(args, "ccy"),
+            amt: requireString(args, "amt"),
+            side: "redempt"
+          }),
+          privateRateLimit("earn_savings_redeem", 6)
+        );
+        return normalizeResponse(response);
+      }
+    },
+    {
+      name: "earn_set_lending_rate",
+      module: "earn.savings",
+      description: "Set lending rate for Simple Earn. [CAUTION] Changes your lending rate preference. Not supported in demo/simulated trading mode. Private endpoint. Rate limit: 6 req/s.",
+      isWrite: true,
+      inputSchema: {
+        type: "object",
+        properties: {
+          ccy: {
+            type: "string",
+            description: "Currency, e.g. USDT"
+          },
+          rate: {
+            type: "string",
+            description: "Lending rate. Annual rate in decimal, e.g. 0.01 = 1%"
+          }
+        },
+        required: ["ccy", "rate"]
+      },
+      handler: async (rawArgs, context) => {
+        assertNotDemo(context.config, "earn_set_lending_rate");
+        const args = asRecord(rawArgs);
+        const response = await context.client.privatePost(
+          "/api/v5/finance/savings/set-lending-rate",
+          {
+            ccy: requireString(args, "ccy"),
+            rate: requireString(args, "rate")
+          },
+          privateRateLimit("earn_set_lending_rate", 6)
+        );
+        return normalizeResponse(response);
+      }
+    },
+    {
+      name: "earn_get_lending_history",
+      module: "earn.savings",
+      description: "Get lending history for Simple Earn. Returns lending records with details like amount, rate, and earnings. Private endpoint. Rate limit: 6 req/s.",
+      isWrite: false,
+      inputSchema: {
+        type: "object",
+        properties: {
+          ccy: {
+            type: "string",
+            description: "e.g. USDT. Omit for all."
+          },
+          after: {
+            type: "string",
+            description: "Pagination: before this record ID"
+          },
+          before: {
+            type: "string",
+            description: "Pagination: after this record ID"
+          },
+          limit: {
+            type: "number",
+            description: "Max results (default 100)"
+          }
+        }
+      },
+      handler: async (rawArgs, context) => {
+        const args = asRecord(rawArgs);
+        const response = await context.client.privateGet(
+          "/api/v5/finance/savings/lending-history",
+          compactObject({
+            ccy: readString(args, "ccy"),
+            after: readString(args, "after"),
+            before: readString(args, "before"),
+            limit: readNumber(args, "limit")
+          }),
+          privateRateLimit("earn_get_lending_history", 6)
+        );
+        return normalizeResponse(response);
+      }
+    },
+    {
+      name: "earn_get_lending_rate_summary",
+      module: "earn.savings",
+      description: "Get market lending rate summary for Simple Earn. Public endpoint (no API key required). Returns current lending rates, estimated APY, and available amounts. Rate limit: 6 req/s.",
+      isWrite: false,
+      inputSchema: {
+        type: "object",
+        properties: {
+          ccy: {
+            type: "string",
+            description: "e.g. USDT. Omit for all."
+          }
+        }
+      },
+      handler: async (rawArgs, context) => {
+        const args = asRecord(rawArgs);
+        const response = await context.client.publicGet(
+          "/api/v5/finance/savings/lending-rate-summary",
+          compactObject({ ccy: readString(args, "ccy") }),
+          publicRateLimit("earn_get_lending_rate_summary", 6)
+        );
+        return normalizeResponse(response);
+      }
+    },
+    {
+      name: "earn_get_lending_rate_history",
+      module: "earn.savings",
+      description: "Get historical lending rates for Simple Earn. Public endpoint (no API key required). Returns past lending rate data for trend analysis. Rate limit: 6 req/s.",
+      isWrite: false,
+      inputSchema: {
+        type: "object",
+        properties: {
+          ccy: {
+            type: "string",
+            description: "e.g. USDT. Omit for all."
+          },
+          after: {
+            type: "string",
+            description: "Pagination: before this timestamp (ms)"
+          },
+          before: {
+            type: "string",
+            description: "Pagination: after this timestamp (ms)"
+          },
+          limit: {
+            type: "number",
+            description: "Max results (default 100)"
+          }
+        }
+      },
+      handler: async (rawArgs, context) => {
+        const args = asRecord(rawArgs);
+        const response = await context.client.publicGet(
+          "/api/v5/finance/savings/lending-rate-history",
+          compactObject({
+            ccy: readString(args, "ccy"),
+            after: readString(args, "after"),
+            before: readString(args, "before"),
+            limit: readNumber(args, "limit")
+          }),
+          publicRateLimit("earn_get_lending_rate_history", 6)
+        );
+        return normalizeResponse(response);
+      }
+    }
+  ];
+}
 var FUTURES_INST_TYPES = ["FUTURES", "SWAP"];
 function normalize5(response) {
   return {
@@ -3073,115 +3382,387 @@ function registerFuturesTools() {
           }),
           privateRateLimit("futures_get_orders", 20)
         );
-        return normalize5(response);
+        return normalize5(response);
+      }
+    },
+    {
+      name: "futures_get_positions",
+      module: "futures",
+      description: "Get current FUTURES delivery contract positions. Private endpoint. Rate limit: 10 req/s.",
+      isWrite: false,
+      inputSchema: {
+        type: "object",
+        properties: {
+          instType: {
+            type: "string",
+            enum: [...FUTURES_INST_TYPES],
+            description: "FUTURES (default) or SWAP"
+          },
+          instId: {
+            type: "string",
+            description: "e.g. BTC-USDT-240329"
+          },
+          posId: {
+            type: "string"
+          }
+        }
+      },
+      handler: async (rawArgs, context) => {
+        const args = asRecord(rawArgs);
+        const instType = readString(args, "instType") ?? "FUTURES";
+        assertEnum(instType, "instType", FUTURES_INST_TYPES);
+        const response = await context.client.privateGet(
+          "/api/v5/account/positions",
+          compactObject({
+            instType,
+            instId: readString(args, "instId"),
+            posId: readString(args, "posId")
+          }),
+          privateRateLimit("futures_get_positions", 10)
+        );
+        return normalize5(response);
+      }
+    },
+    {
+      name: "futures_get_fills",
+      module: "futures",
+      description: "Get FUTURES fill details. archive=false: last 3 days. archive=true: up to 3 months. Private. Rate limit: 20 req/s.",
+      isWrite: false,
+      inputSchema: {
+        type: "object",
+        properties: {
+          archive: {
+            type: "boolean",
+            description: "true=up to 3 months; false=last 3 days (default)"
+          },
+          instType: {
+            type: "string",
+            enum: [...FUTURES_INST_TYPES],
+            description: "FUTURES (default) or SWAP"
+          },
+          instId: {
+            type: "string",
+            description: "Instrument ID filter"
+          },
+          ordId: {
+            type: "string",
+            description: "Order ID filter"
+          },
+          after: {
+            type: "string",
+            description: "Pagination: before this bill ID"
+          },
+          before: {
+            type: "string",
+            description: "Pagination: after this bill ID"
+          },
+          begin: {
+            type: "string",
+            description: "Start time (ms)"
+          },
+          end: {
+            type: "string",
+            description: "End time (ms)"
+          },
+          limit: {
+            type: "number",
+            description: "Max results (default 100 or 20 for archive)"
+          }
+        }
+      },
+      handler: async (rawArgs, context) => {
+        const args = asRecord(rawArgs);
+        const archive = readBoolean(args, "archive") ?? false;
+        const instType = readString(args, "instType") ?? "FUTURES";
+        assertEnum(instType, "instType", FUTURES_INST_TYPES);
+        const path4 = archive ? "/api/v5/trade/fills-history" : "/api/v5/trade/fills";
+        const response = await context.client.privateGet(
+          path4,
+          compactObject({
+            instType,
+            instId: readString(args, "instId"),
+            ordId: readString(args, "ordId"),
+            after: readString(args, "after"),
+            before: readString(args, "before"),
+            begin: readString(args, "begin"),
+            end: readString(args, "end"),
+            limit: readNumber(args, "limit") ?? (archive ? 20 : void 0)
+          }),
+          privateRateLimit("futures_get_fills", 20)
+        );
+        return normalize5(response);
+      }
+    }
+  ];
+}
+function registerOnchainEarnTools() {
+  return [
+    // -------------------------------------------------------------------------
+    // Get Offers
+    // -------------------------------------------------------------------------
+    {
+      name: "onchain_earn_get_offers",
+      module: "earn.onchain",
+      description: "Get available on-chain earn (staking/DeFi) offers. Returns investment products with APY, terms, and limits. Private endpoint. Rate limit: 3 req/s.",
+      isWrite: false,
+      inputSchema: {
+        type: "object",
+        properties: {
+          productId: {
+            type: "string",
+            description: "Specific product ID to query. Omit for all offers."
+          },
+          protocolType: {
+            type: "string",
+            description: "Protocol type filter: staking, defi. Omit for all types."
+          },
+          ccy: {
+            type: "string",
+            description: "Currency filter, e.g. ETH. Omit for all currencies."
+          }
+        }
+      },
+      handler: async (rawArgs, context) => {
+        const args = asRecord(rawArgs);
+        const response = await context.client.privateGet(
+          "/api/v5/finance/staking-defi/offers",
+          compactObject({
+            productId: readString(args, "productId"),
+            protocolType: readString(args, "protocolType"),
+            ccy: readString(args, "ccy")
+          }),
+          privateRateLimit("onchain_earn_get_offers", 3)
+        );
+        return normalizeResponse(response);
+      }
+    },
+    // -------------------------------------------------------------------------
+    // Purchase
+    // -------------------------------------------------------------------------
+    {
+      name: "onchain_earn_purchase",
+      module: "earn.onchain",
+      description: "Purchase on-chain earn (staking/DeFi) product. [CAUTION] Moves real funds into staking/DeFi product. Not supported in demo/simulated trading mode. Private endpoint. Rate limit: 2 req/s.",
+      isWrite: true,
+      inputSchema: {
+        type: "object",
+        properties: {
+          productId: {
+            type: "string",
+            description: "Product ID to purchase"
+          },
+          investData: {
+            type: "array",
+            description: "Investment data array: [{ccy, amt}]. Each item specifies currency and amount.",
+            items: {
+              type: "object",
+              properties: {
+                ccy: { type: "string", description: "Currency, e.g. ETH" },
+                amt: { type: "string", description: "Amount to invest" }
+              },
+              required: ["ccy", "amt"]
+            }
+          },
+          term: {
+            type: "string",
+            description: "Investment term in days. Required for fixed-term products."
+          },
+          tag: {
+            type: "string",
+            description: "Order tag for tracking (optional)."
+          }
+        },
+        required: ["productId", "investData"]
+      },
+      handler: async (rawArgs, context) => {
+        assertNotDemo(context.config, "onchain_earn_purchase");
+        const args = asRecord(rawArgs);
+        const response = await context.client.privatePost(
+          "/api/v5/finance/staking-defi/purchase",
+          compactObject({
+            productId: requireString(args, "productId"),
+            investData: args.investData,
+            term: readString(args, "term"),
+            tag: readString(args, "tag")
+          }),
+          privateRateLimit("onchain_earn_purchase", 2)
+        );
+        return normalizeResponse(response);
+      }
+    },
+    // -------------------------------------------------------------------------
+    // Redeem
+    // -------------------------------------------------------------------------
+    {
+      name: "onchain_earn_redeem",
+      module: "earn.onchain",
+      description: "Redeem on-chain earn (staking/DeFi) investment. [CAUTION] Withdraws funds from staking/DeFi product. Some products may have lock periods. Not supported in demo mode. Private endpoint. Rate limit: 2 req/s.",
+      isWrite: true,
+      inputSchema: {
+        type: "object",
+        properties: {
+          ordId: {
+            type: "string",
+            description: "Order ID to redeem"
+          },
+          protocolType: {
+            type: "string",
+            description: "Protocol type: staking, defi"
+          },
+          allowEarlyRedeem: {
+            type: "boolean",
+            description: "Allow early redemption for fixed-term products (may incur penalties). Default false."
+          }
+        },
+        required: ["ordId", "protocolType"]
+      },
+      handler: async (rawArgs, context) => {
+        assertNotDemo(context.config, "onchain_earn_redeem");
+        const args = asRecord(rawArgs);
+        const response = await context.client.privatePost(
+          "/api/v5/finance/staking-defi/redeem",
+          compactObject({
+            ordId: requireString(args, "ordId"),
+            protocolType: requireString(args, "protocolType"),
+            allowEarlyRedeem: readBoolean(args, "allowEarlyRedeem")
+          }),
+          privateRateLimit("onchain_earn_redeem", 2)
+        );
+        return normalizeResponse(response);
+      }
+    },
+    // -------------------------------------------------------------------------
+    // Cancel
+    // -------------------------------------------------------------------------
+    {
+      name: "onchain_earn_cancel",
+      module: "earn.onchain",
+      description: "Cancel pending on-chain earn purchase. [CAUTION] Cancels a pending investment order. Not supported in demo mode. Private endpoint. Rate limit: 2 req/s.",
+      isWrite: true,
+      inputSchema: {
+        type: "object",
+        properties: {
+          ordId: {
+            type: "string",
+            description: "Order ID to cancel"
+          },
+          protocolType: {
+            type: "string",
+            description: "Protocol type: staking, defi"
+          }
+        },
+        required: ["ordId", "protocolType"]
+      },
+      handler: async (rawArgs, context) => {
+        assertNotDemo(context.config, "onchain_earn_cancel");
+        const args = asRecord(rawArgs);
+        const response = await context.client.privatePost(
+          "/api/v5/finance/staking-defi/cancel",
+          {
+            ordId: requireString(args, "ordId"),
+            protocolType: requireString(args, "protocolType")
+          },
+          privateRateLimit("onchain_earn_cancel", 2)
+        );
+        return normalizeResponse(response);
       }
     },
+    // -------------------------------------------------------------------------
+    // Get Active Orders
+    // -------------------------------------------------------------------------
     {
-      name: "futures_get_positions",
-      module: "futures",
-      description: "Get current FUTURES delivery contract positions. Private endpoint. Rate limit: 10 req/s.",
+      name: "onchain_earn_get_active_orders",
+      module: "earn.onchain",
+      description: "Get active on-chain earn orders. Returns current staking/DeFi investments. Private endpoint. Rate limit: 3 req/s.",
       isWrite: false,
       inputSchema: {
         type: "object",
         properties: {
-          instType: {
+          productId: {
             type: "string",
-            enum: [...FUTURES_INST_TYPES],
-            description: "FUTURES (default) or SWAP"
+            description: "Filter by product ID. Omit for all."
           },
-          instId: {
+          protocolType: {
             type: "string",
-            description: "e.g. BTC-USDT-240329"
+            description: "Filter by protocol type: staking, defi. Omit for all."
           },
-          posId: {
-            type: "string"
+          ccy: {
+            type: "string",
+            description: "Filter by currency, e.g. ETH. Omit for all."
+          },
+          state: {
+            type: "string",
+            description: "Filter by state: 8 (pending), 13 (cancelling), 9 (onchain), 1 (earning), 2 (redeeming). Omit for all."
           }
         }
       },
       handler: async (rawArgs, context) => {
         const args = asRecord(rawArgs);
-        const instType = readString(args, "instType") ?? "FUTURES";
-        assertEnum(instType, "instType", FUTURES_INST_TYPES);
         const response = await context.client.privateGet(
-          "/api/v5/account/positions",
+          "/api/v5/finance/staking-defi/orders-active",
           compactObject({
-            instType,
-            instId: readString(args, "instId"),
-            posId: readString(args, "posId")
+            productId: readString(args, "productId"),
+            protocolType: readString(args, "protocolType"),
+            ccy: readString(args, "ccy"),
+            state: readString(args, "state")
           }),
-          privateRateLimit("futures_get_positions", 10)
+          privateRateLimit("onchain_earn_get_active_orders", 3)
         );
-        return normalize5(response);
+        return normalizeResponse(response);
       }
     },
+    // -------------------------------------------------------------------------
+    // Get Order History
+    // -------------------------------------------------------------------------
     {
-      name: "futures_get_fills",
-      module: "futures",
-      description: "Get FUTURES fill details. archive=false: last 3 days. archive=true: up to 3 months. Private. Rate limit: 20 req/s.",
+      name: "onchain_earn_get_order_history",
+      module: "earn.onchain",
+      description: "Get on-chain earn order history. Returns past staking/DeFi investments including redeemed orders. Private endpoint. Rate limit: 3 req/s.",
       isWrite: false,
       inputSchema: {
         type: "object",
         properties: {
-          archive: {
-            type: "boolean",
-            description: "true=up to 3 months; false=last 3 days (default)"
-          },
-          instType: {
+          productId: {
             type: "string",
-            enum: [...FUTURES_INST_TYPES],
-            description: "FUTURES (default) or SWAP"
+            description: "Filter by product ID. Omit for all."
           },
-          instId: {
+          protocolType: {
             type: "string",
-            description: "Instrument ID filter"
+            description: "Filter by protocol type: staking, defi. Omit for all."
           },
-          ordId: {
+          ccy: {
             type: "string",
-            description: "Order ID filter"
+            description: "Filter by currency, e.g. ETH. Omit for all."
           },
           after: {
             type: "string",
-            description: "Pagination: before this bill ID"
+            description: "Pagination: return results before this order ID"
           },
           before: {
             type: "string",
-            description: "Pagination: after this bill ID"
-          },
-          begin: {
-            type: "string",
-            description: "Start time (ms)"
-          },
-          end: {
-            type: "string",
-            description: "End time (ms)"
+            description: "Pagination: return results after this order ID"
           },
           limit: {
-            type: "number",
-            description: "Max results (default 100 or 20 for archive)"
+            type: "string",
+            description: "Max results to return (default 100, max 100)"
           }
         }
       },
       handler: async (rawArgs, context) => {
         const args = asRecord(rawArgs);
-        const archive = readBoolean(args, "archive") ?? false;
-        const instType = readString(args, "instType") ?? "FUTURES";
-        assertEnum(instType, "instType", FUTURES_INST_TYPES);
-        const path4 = archive ? "/api/v5/trade/fills-history" : "/api/v5/trade/fills";
         const response = await context.client.privateGet(
-          path4,
+          "/api/v5/finance/staking-defi/orders-history",
           compactObject({
-            instType,
-            instId: readString(args, "instId"),
-            ordId: readString(args, "ordId"),
+            productId: readString(args, "productId"),
+            protocolType: readString(args, "protocolType"),
+            ccy: readString(args, "ccy"),
             after: readString(args, "after"),
             before: readString(args, "before"),
-            begin: readString(args, "begin"),
-            end: readString(args, "end"),
-            limit: readNumber(args, "limit") ?? (archive ? 20 : void 0)
+            limit: readString(args, "limit")
           }),
-          privateRateLimit("futures_get_fills", 20)
+          privateRateLimit("onchain_earn_get_order_history", 3)
         );
-        return normalize5(response);
+        return normalizeResponse(response);
       }
     }
   ];
@@ -5390,6 +5971,8 @@ function allToolSpecs() {
     ...registerAlgoTradeTools(),
     ...registerAccountTools(),
     ...registerBotTools(),
+    ...registerEarnTools(),
+    ...registerOnchainEarnTools(),
     ...registerAuditTools()
   ];
 }
@@ -5427,8 +6010,15 @@ function writeFullConfig(config) {
   writeFileSync(path4, stringify(config), "utf-8");
 }
 var BASE_MODULES = MODULES.filter(
-  (m) => !BOT_SUB_MODULE_IDS.includes(m)
+  (m) => !BOT_SUB_MODULE_IDS.includes(m) && !EARN_SUB_MODULE_IDS.includes(m)
 );
+function expandShorthand(moduleId) {
+  if (moduleId === "all") return [...BASE_MODULES, ...BOT_SUB_MODULE_IDS];
+  if (moduleId === "earn" || moduleId === "earn.all") return [...EARN_SUB_MODULE_IDS];
+  if (moduleId === "bot") return [...BOT_DEFAULT_SUB_MODULES];
+  if (moduleId === "bot.all") return [...BOT_SUB_MODULE_IDS];
+  return null;
+}
 function parseModuleList(rawModules) {
   if (!rawModules || rawModules.trim().length === 0) {
     return [...DEFAULT_MODULES];
@@ -5437,32 +6027,28 @@ function parseModuleList(rawModules) {
   if (trimmed === "all") {
     return [...BASE_MODULES, ...BOT_SUB_MODULE_IDS];
   }
-  const requested = trimmed.split(",").map((item) => item.trim()).filter((item) => item.length > 0);
+  const requested = trimmed.split(",").map((s) => s.trim()).filter(Boolean);
   if (requested.length === 0) {
     return [...DEFAULT_MODULES];
   }
   const deduped = /* @__PURE__ */ new Set();
   for (const moduleId of requested) {
-    if (moduleId === "bot") {
-      for (const sub of BOT_DEFAULT_SUB_MODULES) deduped.add(sub);
-      continue;
-    }
-    if (moduleId === "bot.all") {
-      for (const sub of BOT_SUB_MODULE_IDS) deduped.add(sub);
+    const expanded = expandShorthand(moduleId);
+    if (expanded) {
+      expanded.forEach((sub) => deduped.add(sub));
       continue;
     }
     if (!MODULES.includes(moduleId)) {
       throw new ConfigError(
         `Unknown module "${moduleId}".`,
-        `Use one of: ${MODULES.join(", ")}, "bot", "bot.all", or "all".`
+        `Use one of: ${MODULES.join(", ")}, "earn", "earn.all", "bot", "bot.all", or "all".`
       );
     }
     deduped.add(moduleId);
   }
   return Array.from(deduped);
 }
-function loadConfig(cli) {
-  const toml = readTomlProfile(cli.profile);
+function loadCredentials(toml) {
   const apiKey = process.env.OKX_API_KEY?.trim() ?? toml.api_key;
   const secretKey = process.env.OKX_SECRET_KEY?.trim() ?? toml.secret_key;
   const passphrase = process.env.OKX_PASSPHRASE?.trim() ?? toml.passphrase;
@@ -5474,23 +6060,34 @@ function loadConfig(cli) {
       "Set OKX_API_KEY, OKX_SECRET_KEY and OKX_PASSPHRASE together (env vars or config.toml profile)."
     );
   }
-  const demo = cli.demo || process.env.OKX_DEMO === "1" || process.env.OKX_DEMO === "true" || (toml.demo ?? false);
-  const rawSite = cli.site?.trim() ?? process.env.OKX_SITE?.trim() ?? toml.site ?? "global";
+  return { apiKey, secretKey, passphrase, hasAuth };
+}
+function resolveSite(cliSite, tomlSite) {
+  const rawSite = cliSite?.trim() ?? process.env.OKX_SITE?.trim() ?? tomlSite ?? "global";
   if (!SITE_IDS.includes(rawSite)) {
     throw new ConfigError(
       `Unknown site "${rawSite}".`,
       `Use one of: ${SITE_IDS.join(", ")}.`
     );
   }
-  const site = rawSite;
-  const rawBaseUrl = process.env.OKX_API_BASE_URL?.trim() ?? toml.base_url ?? OKX_SITES[site].apiBaseUrl;
+  return rawSite;
+}
+function resolveBaseUrl(site, tomlBaseUrl) {
+  const rawBaseUrl = process.env.OKX_API_BASE_URL?.trim() ?? tomlBaseUrl ?? OKX_SITES[site].apiBaseUrl;
   if (!rawBaseUrl.startsWith("http://") && !rawBaseUrl.startsWith("https://")) {
     throw new ConfigError(
       `Invalid base URL "${rawBaseUrl}".`,
       "OKX_API_BASE_URL must start with http:// or https://"
     );
   }
-  const baseUrl = rawBaseUrl.replace(/\/+$/, "");
+  return rawBaseUrl.replace(/\/+$/, "");
+}
+function loadConfig(cli) {
+  const toml = readTomlProfile(cli.profile);
+  const creds = loadCredentials(toml);
+  const demo = cli.demo || process.env.OKX_DEMO === "1" || process.env.OKX_DEMO === "true" || (toml.demo ?? false);
+  const site = resolveSite(cli.site, toml.site);
+  const baseUrl = resolveBaseUrl(site, toml.base_url);
   const rawTimeout = process.env.OKX_TIMEOUT_MS ? Number(process.env.OKX_TIMEOUT_MS) : toml.timeout_ms ?? 15e3;
   if (!Number.isFinite(rawTimeout) || rawTimeout <= 0) {
     throw new ConfigError(
@@ -5499,10 +6096,7 @@ function loadConfig(cli) {
     );
   }
   return {
-    apiKey,
-    secretKey,
-    passphrase,
-    hasAuth,
+    ...creds,
     baseUrl,
     timeoutMs: Math.floor(rawTimeout),
     modules: parseModuleList(cli.modules),
@@ -5510,7 +6104,8 @@ function loadConfig(cli) {
     demo,
     site,
     userAgent: cli.userAgent,
-    sourceTag: cli.sourceTag ?? DEFAULT_SOURCE_TAG
+    sourceTag: cli.sourceTag ?? DEFAULT_SOURCE_TAG,
+    verbose: cli.verbose ?? false
   };
 }
 var CACHE_FILE = join2(homedir2(), ".okx", "update-check.json");
@@ -5726,6 +6321,313 @@ function runSetup(options) {
   }
 }
 
+// src/commands/diagnose.ts
+import dns from "dns/promises";
+import net from "net";
+import os2 from "os";
+import tls from "tls";
+import { createRequire } from "module";
+var _require = createRequire(import.meta.url);
+function readCliVersion() {
+  for (const rel of ["../package.json", "../../package.json"]) {
+    try {
+      return _require(rel).version;
+    } catch (_err) {
+    }
+  }
+  return "0.0.0";
+}
+var CLI_VERSION = readCliVersion();
+var GIT_HASH = true ? "7777cc2" : "dev";
+var Report = class {
+  lines = [];
+  add(key, value) {
+    this.lines.push({ key, value });
+  }
+  print() {
+    const w = process.stdout.write.bind(process.stdout);
+    const sep = "\u2500".repeat(52);
+    w(`
+  \u2500\u2500 Diagnostic Report (copy & share) ${sep.slice(35)}
+`);
+    for (const { key, value } of this.lines) {
+      w(`  ${key.padEnd(14)} ${value}
+`);
+    }
+    w(`  ${sep}
+
+`);
+  }
+};
+function ok(label, detail) {
+  process.stdout.write(`  \u2713 ${label.padEnd(14)} ${detail}
+`);
+}
+function fail(label, detail, hints) {
+  process.stdout.write(`  \u2717 ${label.padEnd(14)} ${detail}
+`);
+  for (const hint of hints) {
+    process.stdout.write(`    \u2192 ${hint}
+`);
+  }
+}
+function section(title) {
+  process.stdout.write(`
+  ${title}
+`);
+}
+function maskKey2(key) {
+  if (!key) return "(not set)";
+  if (key.length <= 8) return "****";
+  return `${key.slice(0, 2)}****${key.slice(-2)}`;
+}
+async function checkDns(hostname) {
+  const t0 = Date.now();
+  try {
+    const addresses = await dns.resolve4(hostname);
+    return { ok: true, ip: addresses[0], ms: Date.now() - t0 };
+  } catch (e) {
+    return { ok: false, ms: Date.now() - t0, error: e instanceof Error ? e.message : String(e) };
+  }
+}
+async function checkSocket(createFn, successEvent, timeoutMs) {
+  const t0 = Date.now();
+  return new Promise((resolve) => {
+    const socket = createFn();
+    const cleanup = () => {
+      socket.removeAllListeners();
+      socket.destroy();
+    };
+    socket.once(successEvent, () => {
+      cleanup();
+      resolve({ ok: true, ms: Date.now() - t0 });
+    });
+    socket.once("timeout", () => {
+      cleanup();
+      resolve({ ok: false, ms: Date.now() - t0, error: `timed out after ${timeoutMs}ms` });
+    });
+    socket.once("error", (err) => {
+      cleanup();
+      resolve({ ok: false, ms: Date.now() - t0, error: err.message });
+    });
+  });
+}
+async function checkTcp(hostname, port, timeoutMs = 5e3) {
+  return checkSocket(
+    () => net.createConnection({ host: hostname, port, timeout: timeoutMs }),
+    "connect",
+    timeoutMs
+  );
+}
+async function checkTls(hostname, port, timeoutMs = 5e3) {
+  return checkSocket(
+    () => tls.connect({ host: hostname, port, timeout: timeoutMs, servername: hostname }),
+    "secureConnect",
+    timeoutMs
+  );
+}
+function checkProxyEnv(report) {
+  const httpProxy = process.env.HTTP_PROXY ?? process.env.http_proxy;
+  const httpsProxy = process.env.HTTPS_PROXY ?? process.env.https_proxy;
+  const noProxy = process.env.NO_PROXY ?? process.env.no_proxy;
+  if (httpProxy || httpsProxy) {
+    ok("HTTP_PROXY", httpProxy ?? "(not set)");
+    ok("HTTPS_PROXY", httpsProxy ?? "(not set)");
+    if (noProxy) ok("NO_PROXY", noProxy);
+    report.add("http_proxy", httpProxy ?? "-");
+    report.add("https_proxy", httpsProxy ?? "-");
+    if (noProxy) report.add("no_proxy", noProxy);
+  } else {
+    ok("Proxy", "(none)");
+    report.add("proxy", "none");
+  }
+}
+function checkEnvironment(report) {
+  let passed = true;
+  section("Environment");
+  const nodeVersion = process.version;
+  const nodeMajor = parseInt(nodeVersion.slice(1), 10);
+  if (nodeMajor >= 18) {
+    ok("Node.js", `${nodeVersion} (>= 18 required)`);
+  } else {
+    fail("Node.js", `${nodeVersion} (>= 18 required)`, ["Upgrade Node.js to v18 or later"]);
+    passed = false;
+  }
+  ok("CLI", `v${CLI_VERSION} (${GIT_HASH})`);
+  ok("OS", `${process.platform} ${process.arch}`);
+  ok("OS release", os2.release());
+  ok("Shell", process.env.SHELL ?? "(unknown)");
+  ok("Locale", `${process.env.LANG ?? process.env.LC_ALL ?? "(unknown)"}`);
+  ok("Timezone", Intl.DateTimeFormat().resolvedOptions().timeZone);
+  report.add("cli", `${CLI_VERSION} (${GIT_HASH})`);
+  report.add("node", `${nodeVersion} ${process.platform} ${process.arch}`);
+  const machine = typeof os2.machine === "function" ? os2.machine() : process.arch;
+  report.add("os", `${os2.type()} ${os2.release()} ${machine}`);
+  report.add("shell", process.env.SHELL ?? "-");
+  report.add("locale", process.env.LANG ?? process.env.LC_ALL ?? "-");
+  report.add("tz", Intl.DateTimeFormat().resolvedOptions().timeZone);
+  checkProxyEnv(report);
+  return passed;
+}
+function checkConfig(config, profile, report) {
+  let passed = true;
+  section(`Config (profile: ${profile})`);
+  if (config.hasAuth) {
+    ok("API key", maskKey2(config.apiKey));
+    ok("Secret", "****");
+    ok("Passphrase", "****");
+  } else {
+    fail("Credentials", "not configured", [
+      "Set OKX_API_KEY, OKX_SECRET_KEY, OKX_PASSPHRASE env vars",
+      "Or run: okx config init"
+    ]);
+    passed = false;
+  }
+  ok("Demo mode", String(config.demo));
+  ok("Site", config.site);
+  ok("Base URL", config.baseUrl);
+  ok("Timeout", `${config.timeoutMs}ms`);
+  report.add("profile", profile);
+  report.add("site", config.site);
+  report.add("base", config.baseUrl);
+  report.add("auth", config.hasAuth ? `true (key=${maskKey2(config.apiKey)})` : "false");
+  report.add("demo", String(config.demo));
+  report.add("timeout", `${config.timeoutMs}ms`);
+  return passed;
+}
+async function checkTcpTls(hostname, port, protocol, report) {
+  let passed = true;
+  const tcpResult = await checkTcp(hostname, port);
+  if (tcpResult.ok) {
+    ok("TCP connect", `port ${port} (${tcpResult.ms}ms)`);
+    report.add("tcp", `${port} OK (${tcpResult.ms}ms)`);
+  } else {
+    fail("TCP connect", `port ${port} \u2014 ${tcpResult.error}`, [
+      "Check firewall/proxy/VPN settings",
+      `Try: nc -zv ${hostname} ${port}`
+    ]);
+    report.add("tcp", `FAIL ${port} ${tcpResult.error} (${tcpResult.ms}ms)`);
+    return false;
+  }
+  if (protocol === "https:") {
+    const tlsResult = await checkTls(hostname, port);
+    if (tlsResult.ok) {
+      ok("TLS handshake", `(${tlsResult.ms}ms)`);
+      report.add("tls", `OK (${tlsResult.ms}ms)`);
+    } else {
+      fail("TLS handshake", tlsResult.error ?? "failed", [
+        "Check system certificates or proxy MITM settings"
+      ]);
+      passed = false;
+      report.add("tls", `FAIL ${tlsResult.error} (${tlsResult.ms}ms)`);
+    }
+  }
+  return passed;
+}
+async function checkNetwork(config, client, report) {
+  let passed = true;
+  section("Network");
+  const url = new URL(config.baseUrl);
+  const hostname = url.hostname;
+  const defaultPort = url.protocol === "https:" ? 443 : 80;
+  const port = url.port ? parseInt(url.port, 10) : defaultPort;
+  const dnsResult = await checkDns(hostname);
+  if (dnsResult.ok) {
+    ok("DNS resolve", `${hostname} \u2192 ${dnsResult.ip} (${dnsResult.ms}ms)`);
+    report.add("dns", `${hostname} \u2192 ${dnsResult.ip} (${dnsResult.ms}ms)`);
+  } else {
+    fail("DNS resolve", `${hostname} \u2014 ${dnsResult.error}`, [
+      "Check DNS settings or network connection",
+      `Try: nslookup ${hostname}`
+    ]);
+    passed = false;
+    report.add("dns", `FAIL ${hostname} ${dnsResult.error} (${dnsResult.ms}ms)`);
+  }
+  if (dnsResult.ok) {
+    const tcpTlsPassed = await checkTcpTls(hostname, port, url.protocol, report);
+    if (!tcpTlsPassed) passed = false;
+  }
+  const t0 = Date.now();
+  try {
+    await client.publicGet("/api/v5/public/time");
+    const ms = Date.now() - t0;
+    ok("API /public/time", `200 (${ms}ms)`);
+    report.add("api", `/public/time 200 (${ms}ms)`);
+  } catch (e) {
+    const ms = Date.now() - t0;
+    const msg = e instanceof Error ? e.message : String(e);
+    fail("API /public/time", msg, [
+      "OKX API may be down or blocked in your network",
+      `Try: curl ${config.baseUrl}/api/v5/public/time`
+    ]);
+    passed = false;
+    report.add("api", `FAIL /public/time ${msg} (${ms}ms)`);
+  }
+  return passed;
+}
+function getAuthHints(msg) {
+  if (msg.includes("50111") || msg.includes("Invalid OK-ACCESS-KEY")) {
+    return ["API key is invalid or expired", "Regenerate at https://www.okx.com/account/my-api"];
+  }
+  if (msg.includes("50112") || msg.includes("Invalid Sign")) {
+    return ["Secret key or passphrase may be wrong", "Regenerate API key at https://www.okx.com/account/my-api"];
+  }
+  if (msg.includes("50113")) {
+    return ["Passphrase is incorrect"];
+  }
+  if (msg.includes("50100")) {
+    return ["API key lacks required permissions", "Update permissions at https://www.okx.com/account/my-api"];
+  }
+  return ["Check API credentials and permissions"];
+}
+async function checkAuth(client, config, report) {
+  if (!config.hasAuth) {
+    report.add("auth_api", "skipped (no credentials)");
+    return true;
+  }
+  let passed = true;
+  section("Authentication");
+  const t1 = Date.now();
+  try {
+    await client.privateGet("/api/v5/account/balance");
+    const ms = Date.now() - t1;
+    ok("Account balance", `200 (${ms}ms)`);
+    if (config.demo) {
+      ok("Demo header", "x-simulated-trading: 1");
+    }
+    report.add("auth_api", `/account/balance 200 (${ms}ms)`);
+  } catch (e) {
+    const ms = Date.now() - t1;
+    const msg = e instanceof Error ? e.message : String(e);
+    const hints = getAuthHints(msg);
+    fail("Account balance", msg, hints);
+    passed = false;
+    report.add("auth_api", `FAIL /account/balance ${msg} (${ms}ms)`);
+  }
+  return passed;
+}
+async function cmdDiagnose(config, profile) {
+  process.stdout.write("\n  OKX Trade CLI Diagnostics\n");
+  process.stdout.write("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
+  const report = new Report();
+  report.add("ts", (/* @__PURE__ */ new Date()).toISOString());
+  const envPassed = checkEnvironment(report);
+  const cfgPassed = checkConfig(config, profile, report);
+  const client = new OkxRestClient(config);
+  const netPassed = await checkNetwork(config, client, report);
+  const authPassed = await checkAuth(client, config, report);
+  const allPassed = envPassed && cfgPassed && netPassed && authPassed;
+  process.stdout.write("\n");
+  if (allPassed) {
+    process.stdout.write("  Result: All checks passed \u2713\n");
+  } else {
+    process.stdout.write("  Result: Some checks failed \u2717\n");
+    process.exitCode = 1;
+  }
+  report.add("result", allPassed ? "PASS" : "FAIL");
+  report.print();
+}
+
 // src/config/loader.ts
 function loadProfileConfig(opts) {
   return loadConfig({
@@ -5735,7 +6637,8 @@ function loadProfileConfig(opts) {
     demo: opts.demo ?? false,
     site: opts.site,
     userAgent: opts.userAgent,
-    sourceTag: opts.sourceTag
+    sourceTag: opts.sourceTag,
+    verbose: opts.verbose
   });
 }
 
@@ -5894,8 +6797,8 @@ var HELP_TREE = {
         description: "Get trade fill history for spot orders"
       },
       place: {
-        usage: "okx spot place --instId <id> --side <buy|sell> --ordType <type> --sz <n> [--px <price>] [--tdMode <cash|cross|isolated>]",
-        description: "Place a new spot order"
+        usage: "okx spot place --instId <id> --side <buy|sell> --ordType <type> --sz <n> [--px <price>] [--tdMode <cash|cross|isolated>] [--tpTriggerPx <price>] [--tpOrdPx <price|-1>] [--slTriggerPx <price>] [--slOrdPx <price|-1>]",
+        description: "Place a new spot order (supports attached TP/SL)"
       },
       amend: {
         usage: "okx spot amend --instId <id> --ordId <id> [--newSz <n>] [--newPx <price>]",
@@ -5954,8 +6857,8 @@ var HELP_TREE = {
         description: "Get trade fill history for swap orders"
       },
       place: {
-        usage: "okx swap place --instId <id> --side <buy|sell> --ordType <type> --sz <n> [--posSide <side>] [--px <price>] [--tdMode <cross|isolated>]",
-        description: "Place a new perpetual swap order"
+        usage: "okx swap place --instId <id> --side <buy|sell> --ordType <type> --sz <n> [--posSide <side>] [--px <price>] [--tdMode <cross|isolated>] [--tpTriggerPx <price>] [--tpOrdPx <price|-1>] [--slTriggerPx <price>] [--slOrdPx <price|-1>]",
+        description: "Place a new perpetual swap order (supports attached TP/SL)"
       },
       cancel: {
         usage: "okx swap cancel <instId> --ordId <id>",
@@ -6026,8 +6929,8 @@ var HELP_TREE = {
         description: "Get trade fill history for futures orders"
       },
       place: {
-        usage: "okx futures place --instId <id> --side <buy|sell> --ordType <type> --sz <n>\n                 [--tdMode <cross|isolated>] [--posSide <net|long|short>] [--px <price>] [--reduceOnly]",
-        description: "Place a new futures order"
+        usage: "okx futures place --instId <id> --side <buy|sell> --ordType <type> --sz <n>\n                 [--tdMode <cross|isolated>] [--posSide <net|long|short>] [--px <price>] [--reduceOnly]\n                 [--tpTriggerPx <price>] [--tpOrdPx <price|-1>] [--slTriggerPx <price>] [--slOrdPx <price|-1>]",
+        description: "Place a new futures order (supports attached TP/SL)"
       },
       cancel: {
         usage: "okx futures cancel <instId> --ordId <id>",
@@ -6084,6 +6987,73 @@ var HELP_TREE = {
       }
     }
   },
+  earn: {
+    description: "Earn products \u2014 Simple Earn (savings/lending) and On-chain Earn (staking/DeFi)",
+    subgroups: {
+      savings: {
+        description: "Simple Earn \u2014 flexible savings and lending",
+        commands: {
+          balance: {
+            usage: "okx earn savings balance [<ccy>]",
+            description: "Get savings balance (optionally filter by currency)"
+          },
+          purchase: {
+            usage: "okx earn savings purchase --ccy <ccy> --amt <n> [--rate <rate>]",
+            description: "Purchase Simple Earn (flexible savings). Rate defaults to 0.01 (1%)"
+          },
+          redeem: {
+            usage: "okx earn savings redeem --ccy <ccy> --amt <n>",
+            description: "Redeem Simple Earn (flexible savings)"
+          },
+          "set-rate": {
+            usage: "okx earn savings set-rate --ccy <ccy> --rate <rate>",
+            description: "Set lending rate for a currency"
+          },
+          "lending-history": {
+            usage: "okx earn savings lending-history [--ccy <ccy>] [--limit <n>]",
+            description: "Get lending history"
+          },
+          "rate-summary": {
+            usage: "okx earn savings rate-summary [<ccy>]",
+            description: "Get market lending rate summary (public, no auth needed)"
+          },
+          "rate-history": {
+            usage: "okx earn savings rate-history [--ccy <ccy>] [--limit <n>]",
+            description: "Get historical lending rates (public, no auth needed)"
+          }
+        }
+      },
+      onchain: {
+        description: "On-chain Earn \u2014 staking and DeFi products",
+        commands: {
+          offers: {
+            usage: "okx earn onchain offers [--productId <id>] [--protocolType <type>] [--ccy <ccy>]",
+            description: "Browse available on-chain earn products (staking, DeFi)"
+          },
+          purchase: {
+            usage: "okx earn onchain purchase --productId <id> --ccy <ccy> --amt <n> [--term <term>] [--tag <tag>]",
+            description: "Purchase an on-chain earn product (stake/deposit)"
+          },
+          redeem: {
+            usage: "okx earn onchain redeem --ordId <id> --protocolType <type> [--allowEarlyRedeem]",
+            description: "Redeem an on-chain earn position"
+          },
+          cancel: {
+            usage: "okx earn onchain cancel --ordId <id> --protocolType <type>",
+            description: "Cancel a pending on-chain earn order"
+          },
+          orders: {
+            usage: "okx earn onchain orders [--productId <id>] [--protocolType <type>] [--ccy <ccy>] [--state <state>]",
+            description: "List active on-chain earn orders"
+          },
+          history: {
+            usage: "okx earn onchain history [--productId <id>] [--protocolType <type>] [--ccy <ccy>]",
+            description: "Get on-chain earn order history"
+          }
+        }
+      }
+    }
+  },
   bot: {
     description: "Trading bot strategies (grid, dca)",
     subgroups: {
@@ -6163,6 +7133,10 @@ var HELP_TREE = {
   setup: {
     description: "Set up client integrations (Cursor, Windsurf, Claude, etc.)",
     usage: `okx setup --client <${SUPPORTED_CLIENTS.join("|")}> [--profile <name>] [--modules <list>]`
+  },
+  diagnose: {
+    description: "Run network diagnostics (DNS, TCP, TLS, API, auth)",
+    usage: "okx diagnose [--profile <name>] [--demo]"
   }
 };
 function printGlobalHelp() {
@@ -6174,6 +7148,7 @@ function printGlobalHelp() {
     `  --profile <name>   Use a named profile from ${configFilePath()}`,
     "  --demo             Use simulated trading (demo) mode",
     "  --json             Output raw JSON",
+    "  --verbose          Show detailed network request/response info (stderr)",
     "  --version, -v      Show version",
     "  --help             Show this help",
     "",
@@ -6384,11 +7359,22 @@ var CLI_OPTIONS = {
   // batch
   action: { type: "string" },
   orders: { type: "string" },
+  // earn
+  rate: { type: "string" },
   // audit
   since: { type: "string" },
   tool: { type: "string" },
   // config profile
-  force: { type: "boolean", default: false }
+  force: { type: "boolean", default: false },
+  // onchain-earn
+  productId: { type: "string" },
+  protocolType: { type: "string" },
+  term: { type: "string" },
+  tag: { type: "string" },
+  allowEarlyRedeem: { type: "boolean", default: false },
+  state: { type: "string" },
+  // diagnostics
+  verbose: { type: "boolean", default: false }
 };
 function parseCli(argv) {
   const negated = /* @__PURE__ */ new Set();
@@ -6650,7 +7636,7 @@ async function cmdMarketCandles(run, instId, opts) {
 // src/commands/account.ts
 import * as fs4 from "fs";
 import * as path2 from "path";
-import * as os2 from "os";
+import * as os4 from "os";
 function getData2(result) {
   return result.data;
 }
@@ -6856,7 +7842,7 @@ function readAuditLogs(logDir, days = 7) {
   return entries;
 }
 function cmdAccountAudit(opts) {
-  const logDir = path2.join(os2.homedir(), ".okx", "logs");
+  const logDir = path2.join(os4.homedir(), ".okx", "logs");
   const limit = Math.min(Number(opts.limit) || 20, 100);
   let entries = readAuditLogs(logDir);
   if (opts.tool) entries = entries.filter((e) => e.tool === opts.tool);
@@ -6910,7 +7896,11 @@ async function cmdSpotPlace(run, opts) {
     side: opts.side,
     ordType: opts.ordType,
     sz: opts.sz,
-    px: opts.px
+    px: opts.px,
+    tpTriggerPx: opts.tpTriggerPx,
+    tpOrdPx: opts.tpOrdPx,
+    slTriggerPx: opts.slTriggerPx,
+    slOrdPx: opts.slOrdPx
   });
   const data = getData3(result);
   if (opts.json) return printJson(data);
@@ -7135,7 +8125,11 @@ async function cmdSwapPlace(run, opts) {
     ordType: opts.ordType,
     sz: opts.sz,
     posSide: opts.posSide,
-    px: opts.px
+    px: opts.px,
+    tpTriggerPx: opts.tpTriggerPx,
+    tpOrdPx: opts.tpOrdPx,
+    slTriggerPx: opts.slTriggerPx,
+    slOrdPx: opts.slOrdPx
   });
   const data = getData4(result);
   if (opts.json) return printJson(data);
@@ -7437,7 +8431,11 @@ async function cmdFuturesPlace(run, opts) {
     sz: opts.sz,
     posSide: opts.posSide,
     px: opts.px,
-    reduceOnly: opts.reduceOnly
+    reduceOnly: opts.reduceOnly,
+    tpTriggerPx: opts.tpTriggerPx,
+    tpOrdPx: opts.tpOrdPx,
+    slTriggerPx: opts.slTriggerPx,
+    slOrdPx: opts.slOrdPx
   });
   const data = getData5(result);
   if (opts.json) return printJson(data);
@@ -8007,6 +9005,101 @@ function cmdConfigUse(profileName) {
 `);
 }
 
+// src/commands/earn.ts
+function extractData(result) {
+  if (result && typeof result === "object") {
+    const data = result["data"];
+    if (Array.isArray(data)) return data;
+  }
+  return [];
+}
+function printDataList(data, json, emptyMsg, mapper) {
+  if (json) {
+    printJson(data);
+    return;
+  }
+  if (!data.length) {
+    process.stdout.write(emptyMsg + "\n");
+    return;
+  }
+  printTable(data.map(mapper));
+}
+async function cmdEarnSavingsBalance(run, ccy, json) {
+  const data = extractData(await run("earn_get_savings_balance", { ccy }));
+  printDataList(data, json, "No savings balance", (r) => ({
+    ccy: r["ccy"],
+    amt: r["amt"],
+    earnings: r["earnings"],
+    rate: r["rate"],
+    loanAmt: r["loanAmt"],
+    pendingAmt: r["pendingAmt"]
+  }));
+}
+async function cmdEarnSavingsPurchase(run, opts) {
+  const data = extractData(await run("earn_savings_purchase", { ccy: opts.ccy, amt: opts.amt, rate: opts.rate }));
+  if (opts.json) {
+    printJson(data);
+    return;
+  }
+  const r = data[0];
+  if (!r) {
+    process.stdout.write("No response data\n");
+    return;
+  }
+  printKv({ ccy: r["ccy"], amt: r["amt"], side: r["side"], rate: r["rate"] });
+}
+async function cmdEarnSavingsRedeem(run, opts) {
+  const data = extractData(await run("earn_savings_redeem", { ccy: opts.ccy, amt: opts.amt }));
+  if (opts.json) {
+    printJson(data);
+    return;
+  }
+  const r = data[0];
+  if (!r) {
+    process.stdout.write("No response data\n");
+    return;
+  }
+  printKv({ ccy: r["ccy"], amt: r["amt"], side: r["side"] });
+}
+async function cmdEarnSetLendingRate(run, opts) {
+  const data = extractData(await run("earn_set_lending_rate", { ccy: opts.ccy, rate: opts.rate }));
+  if (opts.json) {
+    printJson(data);
+    return;
+  }
+  const r = data[0];
+  process.stdout.write(`Lending rate set: ${r?.["ccy"]} \u2192 ${r?.["rate"]}
+`);
+}
+async function cmdEarnLendingHistory(run, opts) {
+  const data = extractData(await run("earn_get_lending_history", { ccy: opts.ccy, limit: opts.limit }));
+  printDataList(data, opts.json, "No lending history", (r) => ({
+    ccy: r["ccy"],
+    amt: r["amt"],
+    earnings: r["earnings"],
+    rate: r["rate"],
+    ts: new Date(Number(r["ts"])).toLocaleString()
+  }));
+}
+async function cmdEarnLendingRateSummary(run, ccy, json) {
+  const data = extractData(await run("earn_get_lending_rate_summary", { ccy }));
+  printDataList(data, json, "No rate summary data", (r) => ({
+    ccy: r["ccy"],
+    avgRate: r["avgRate"],
+    estRate: r["estRate"],
+    avgAmt: r["avgAmt"]
+  }));
+}
+async function cmdEarnLendingRateHistory(run, opts) {
+  const data = extractData(await run("earn_get_lending_rate_history", { ccy: opts.ccy, limit: opts.limit }));
+  printDataList(data, opts.json, "No rate history data", (r) => ({
+    ccy: r["ccy"],
+    lendingRate: r["lendingRate"],
+    rate: r["rate"],
+    ts: new Date(Number(r["ts"])).toLocaleString()
+  }));
+}
+
 // src/commands/bot.ts
 function getData7(result) {
   return result.data;
@@ -8238,10 +9331,56 @@ async function cmdDcaSubOrders(run, opts) {
   );
 }
 
+// src/commands/onchain-earn.ts
+function cmdOnchainEarnOffers(run, v) {
+  return run("onchain_earn_get_offers", {
+    productId: v.productId,
+    protocolType: v.protocolType,
+    ccy: v.ccy
+  });
+}
+function cmdOnchainEarnPurchase(run, v) {
+  const investData = v.ccy && v.amt ? [{ ccy: v.ccy, amt: v.amt }] : void 0;
+  return run("onchain_earn_purchase", {
+    productId: v.productId,
+    investData,
+    term: v.term,
+    tag: v.tag
+  });
+}
+function cmdOnchainEarnRedeem(run, v) {
+  return run("onchain_earn_redeem", {
+    ordId: v.ordId,
+    protocolType: v.protocolType,
+    allowEarlyRedeem: v.allowEarlyRedeem
+  });
+}
+function cmdOnchainEarnCancel(run, v) {
+  return run("onchain_earn_cancel", {
+    ordId: v.ordId,
+    protocolType: v.protocolType
+  });
+}
+function cmdOnchainEarnActiveOrders(run, v) {
+  return run("onchain_earn_get_active_orders", {
+    productId: v.productId,
+    protocolType: v.protocolType,
+    ccy: v.ccy,
+    state: v.state
+  });
+}
+function cmdOnchainEarnOrderHistory(run, v) {
+  return run("onchain_earn_get_order_history", {
+    productId: v.productId,
+    protocolType: v.protocolType,
+    ccy: v.ccy
+  });
+}
+
 // src/index.ts
-var _require = createRequire(import.meta.url);
-var CLI_VERSION = _require("../package.json").version;
-var GIT_HASH = true ? "c2ddd04" : "dev";
+var _require2 = createRequire2(import.meta.url);
+var CLI_VERSION2 = _require2("../package.json").version;
+var GIT_HASH2 = true ? "7777cc2" : "dev";
 function handleConfigCommand(action, rest, json, lang, force) {
   if (action === "init") return cmdConfigInit(lang === "zh" ? "zh" : "en");
   if (action === "show") return cmdConfigShow(json);
@@ -8413,6 +9552,10 @@ function handleSpotCommand(run, action, rest, v, json) {
       ordType: v.ordType,
       sz: v.sz,
       px: v.px,
+      tpTriggerPx: v.tpTriggerPx,
+      tpOrdPx: v.tpOrdPx,
+      slTriggerPx: v.slTriggerPx,
+      slOrdPx: v.slOrdPx,
       json
     });
   if (action === "cancel")
@@ -8509,6 +9652,10 @@ function handleSwapCommand(run, action, rest, v, json) {
       posSide: v.posSide,
       px: v.px,
       tdMode: v.tdMode ?? "cross",
+      tpTriggerPx: v.tpTriggerPx,
+      tpOrdPx: v.tpOrdPx,
+      slTriggerPx: v.slTriggerPx,
+      slOrdPx: v.slOrdPx,
       json
     });
   if (action === "cancel")
@@ -8603,6 +9750,10 @@ function handleFuturesCommand(run, action, rest, v, json) {
       posSide: v.posSide,
       px: v.px,
       reduceOnly: v.reduceOnly,
+      tpTriggerPx: v.tpTriggerPx,
+      tpOrdPx: v.tpOrdPx,
+      slTriggerPx: v.slTriggerPx,
+      slOrdPx: v.slOrdPx,
       json
     });
   if (action === "cancel")
@@ -8691,23 +9842,75 @@ function handleBotCommand(run, action, rest, v, json) {
   if (action === "grid") return handleBotGridCommand(run, v, rest, json);
   if (action === "dca") return handleBotDcaCommand(run, rest[0], v, json);
 }
+function handleEarnCommand(run, submodule, rest, v, json) {
+  const action = rest[0];
+  const innerRest = rest.slice(1);
+  if (submodule === "savings") return handleEarnSavingsCommand(run, action, innerRest, v, json);
+  if (submodule === "onchain") return handleEarnOnchainCommand(run, action, v, json);
+  process.stderr.write(`Unknown earn sub-module: ${submodule}
+Valid: savings, onchain
+`);
+  process.exitCode = 1;
+}
+function handleEarnSavingsCommand(run, action, rest, v, json) {
+  const limit = v.limit !== void 0 ? Number(v.limit) : void 0;
+  if (action === "balance") return cmdEarnSavingsBalance(run, rest[0] ?? v.ccy, json);
+  if (action === "purchase") return cmdEarnSavingsPurchase(run, { ccy: v.ccy, amt: v.amt, rate: v.rate, json });
+  if (action === "redeem") return cmdEarnSavingsRedeem(run, { ccy: v.ccy, amt: v.amt, json });
+  if (action === "set-rate") return cmdEarnSetLendingRate(run, { ccy: v.ccy, rate: v.rate, json });
+  if (action === "lending-history") return cmdEarnLendingHistory(run, { ccy: v.ccy, limit, json });
+  if (action === "rate-summary") return cmdEarnLendingRateSummary(run, rest[0] ?? v.ccy, json);
+  if (action === "rate-history") return cmdEarnLendingRateHistory(run, { ccy: v.ccy, limit, json });
+  process.stderr.write(`Unknown earn savings command: ${action}
+`);
+  process.exitCode = 1;
+}
+function handleEarnOnchainCommand(run, action, v, json) {
+  if (action === "offers") return cmdOnchainEarnOffers(run, v).then((r) => outputResult(r, json));
+  if (action === "purchase") return cmdOnchainEarnPurchase(run, v).then((r) => outputResult(r, json));
+  if (action === "redeem") return cmdOnchainEarnRedeem(run, v).then((r) => outputResult(r, json));
+  if (action === "cancel") return cmdOnchainEarnCancel(run, v).then((r) => outputResult(r, json));
+  if (action === "orders") return cmdOnchainEarnActiveOrders(run, v).then((r) => outputResult(r, json));
+  if (action === "history") return cmdOnchainEarnOrderHistory(run, v).then((r) => outputResult(r, json));
+  process.stderr.write(`Unknown earn onchain command: ${action}
+`);
+  process.exitCode = 1;
+}
+function outputResult(result, json) {
+  if (json) {
+    process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+  } else {
+    process.stdout.write(JSON.stringify(result.data, null, 2) + "\n");
+  }
+}
+function printHelpForLevel(positionals) {
+  const [module, subgroup] = positionals;
+  if (!module) printHelp();
+  else if (!subgroup) printHelp(module);
+  else printHelp(module, subgroup);
+}
+function printVerboseConfigSummary(config, profile) {
+  let authLabel = "\u2717";
+  if (config.hasAuth && config.apiKey) {
+    authLabel = `\u2713(${config.apiKey.slice(0, 3)}***${config.apiKey.slice(-3)})`;
+  } else if (config.hasAuth) {
+    authLabel = "\u2713";
+  }
+  process.stderr.write(
+    `[verbose] config: profile=${profile ?? "default"} site=${config.site} base=${config.baseUrl} auth=${authLabel} demo=${config.demo ? "on" : "off"} modules=${config.modules.join(",")}
+`
+  );
+}
 async function main() {
-  checkForUpdates("@okx_ai/okx-trade-cli", CLI_VERSION);
+  checkForUpdates("@okx_ai/okx-trade-cli", CLI_VERSION2);
   const { values, positionals } = parseCli(process.argv.slice(2));
   if (values.version) {
-    process.stdout.write(`${CLI_VERSION} (${GIT_HASH})
+    process.stdout.write(`${CLI_VERSION2} (${GIT_HASH2})
 `);
     return;
   }
   if (values.help || positionals.length === 0) {
-    const [module2, subgroup] = positionals;
-    if (!module2) {
-      printHelp();
-    } else if (!subgroup) {
-      printHelp(module2);
-    } else {
-      printHelp(module2, subgroup);
-    }
+    printHelpForLevel(positionals);
     return;
   }
   const [module, action, ...rest] = positionals;
@@ -8715,16 +9918,23 @@ async function main() {
   const json = v.json ?? false;
   if (module === "config") return handleConfigCommand(action, rest, json, v.lang, v.force);
   if (module === "setup") return handleSetupCommand(v);
-  const config = loadProfileConfig({ profile: v.profile, demo: v.demo, userAgent: `okx-trade-cli/${CLI_VERSION}`, sourceTag: "CLI" });
+  const config = loadProfileConfig({ profile: v.profile, demo: v.demo, verbose: v.verbose, userAgent: `okx-trade-cli/${CLI_VERSION2}`, sourceTag: "CLI" });
+  if (config.verbose) printVerboseConfigSummary(config, v.profile);
+  if (module === "diagnose") return cmdDiagnose(config, v.profile ?? "default");
   const client = new OkxRestClient(config);
   const run = createToolRunner(client, config);
-  if (module === "market") return handleMarketCommand(run, action, rest, v, json);
-  if (module === "account") return handleAccountCommand(run, action, rest, v, json);
-  if (module === "spot") return handleSpotCommand(run, action, rest, v, json);
-  if (module === "swap") return handleSwapCommand(run, action, rest, v, json);
-  if (module === "futures") return handleFuturesCommand(run, action, rest, v, json);
-  if (module === "option") return handleOptionCommand(run, action, rest, v, json);
-  if (module === "bot") return handleBotCommand(run, action, rest, v, json);
+  const moduleHandlers = {
+    market: () => handleMarketCommand(run, action, rest, v, json),
+    account: () => handleAccountCommand(run, action, rest, v, json),
+    spot: () => handleSpotCommand(run, action, rest, v, json),
+    swap: () => handleSwapCommand(run, action, rest, v, json),
+    futures: () => handleFuturesCommand(run, action, rest, v, json),
+    option: () => handleOptionCommand(run, action, rest, v, json),
+    bot: () => handleBotCommand(run, action, rest, v, json),
+    earn: () => handleEarnCommand(run, action, rest, v, json)
+  };
+  const handler = moduleHandlers[module];
+  if (handler) return handler();
   process.stderr.write(`Unknown command: ${module} ${action ?? ""}
 `);
   process.exitCode = 1;
@@ -8737,7 +9947,7 @@ main().catch((error) => {
 `);
   if (payload.suggestion) process.stderr.write(`Hint: ${payload.suggestion}
 `);
-  process.stderr.write(`Version: @okx_ai/okx-trade-cli@${CLI_VERSION}
+  process.stderr.write(`Version: @okx_ai/okx-trade-cli@${CLI_VERSION2}
 `);
   process.exitCode = 1;
 });
@@ -8747,6 +9957,7 @@ export {
   handleBotDcaCommand,
   handleBotGridCommand,
   handleConfigCommand,
+  handleEarnCommand,
   handleMarketCommand,
   handleMarketDataCommand,
   handleMarketPublicCommand,