@okx_ai/okx-trade-cli 1.2.9-beta.1 → 1.2.9-beta.2

package/dist/index.js

@@ -4,30 +4,25 @@
 import { createRequire as createRequire3 } from "module";
 
 // ../core/dist/index.js
-import { Agent, ProxyAgent } from "undici";
-import { unlink } from "fs/promises";
-import { execFile } from "child_process";
-import { access, constants } from "fs/promises";
-import { homedir } from "os";
-import { join } from "path";
+import { ProxyAgent } from "undici";
 import { createHmac } from "crypto";
 import fs from "fs";
 import path from "path";
 import os from "os";
 import { writeFileSync, renameSync, unlinkSync, mkdirSync } from "fs";
-import { join as join2, resolve, basename, sep } from "path";
+import { join, resolve, basename, sep } from "path";
 import { randomUUID } from "crypto";
 import yauzl from "yauzl";
 import { createWriteStream, mkdirSync as mkdirSync2 } from "fs";
 import { resolve as resolve2, dirname } from "path";
 import { readFileSync, existsSync } from "fs";
-import { join as join3 } from "path";
+import { join as join2 } from "path";
 import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync3, existsSync as existsSync2 } from "fs";
-import { join as join4, dirname as dirname2 } from "path";
-import { homedir as homedir2 } from "os";
+import { join as join3, dirname as dirname2 } from "path";
+import { homedir } from "os";
 import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, mkdirSync as mkdirSync4, existsSync as existsSync3 } from "fs";
-import { join as join5, dirname as dirname3 } from "path";
-import { homedir as homedir3 } from "os";
+import { join as join4, dirname as dirname3 } from "path";
+import { homedir as homedir2 } from "os";
 
 // ../../node_modules/.pnpm/smol-toml@1.6.0/node_modules/smol-toml/dist/error.js
 function getLineColFromPtr(string, ptr) {
@@ -857,66 +852,12 @@ function stringify(obj, { maxDepth = 1e3, numbersAsFloat = false } = {}) {
 
 // ../core/dist/index.js
 import { readFileSync as readFileSync4, writeFileSync as writeFileSync4, mkdirSync as mkdirSync5, existsSync as existsSync4 } from "fs";
-import { join as join6 } from "path";
-import { homedir as homedir4 } from "os";
+import { join as join5 } from "path";
+import { homedir as homedir3 } from "os";
 import * as fs3 from "fs";
 import * as path3 from "path";
 import * as os3 from "os";
 import { execFileSync } from "child_process";
-var EXEC_TIMEOUT_MS = 15e3;
-var DOH_BIN_DIR = join(homedir(), ".okx", "bin");
-var DOH_CACHE_FILE = join(homedir(), ".okx", ".doh-cache.json");
-function getDohBinaryPath() {
-  if (process.env.OKX_DOH_BINARY_PATH) {
-    return process.env.OKX_DOH_BINARY_PATH;
-  }
-  const ext = process.platform === "win32" ? ".exe" : "";
-  return join(DOH_BIN_DIR, `okx-doh-resolver${ext}`);
-}
-function getDohCachePath() {
-  return DOH_CACHE_FILE;
-}
-async function dohBinaryExists() {
-  try {
-    const flag = process.platform === "win32" ? constants.F_OK : constants.X_OK;
-    await access(getDohBinaryPath(), flag);
-    return true;
-  } catch {
-    return false;
-  }
-}
-function execDohBinary(domain) {
-  const binPath = getDohBinaryPath();
-  return new Promise((resolve3) => {
-    execFile(
-      binPath,
-      ["--domain", domain],
-      { timeout: EXEC_TIMEOUT_MS, encoding: "utf-8" },
-      (error, stdout) => {
-        if (error) {
-          resolve3(null);
-          return;
-        }
-        try {
-          const result = JSON.parse(stdout);
-          if (result.code === 0 && result.data) {
-            resolve3(result.data);
-          } else {
-            resolve3(null);
-          }
-        } catch {
-          resolve3(null);
-        }
-      }
-    );
-  });
-}
-async function resolveDoh(domain) {
-  if (!await dohBinaryExists()) {
-    return null;
-  }
-  return execDohBinary(domain);
-}
 function getNow() {
   return (/* @__PURE__ */ new Date()).toISOString();
 }
@@ -1135,80 +1076,12 @@ var OkxRestClient = class _OkxRestClient {
   config;
   rateLimiter;
   dispatcher;
-  // DoH proxy state (lazy-resolved on first request)
-  dohResolverFn;
-  dohResolved = false;
-  dohNode = null;
-  dohAgent = null;
-  dohBaseUrl = null;
-  /**
-   * @param config - OKX API client configuration
-   * @param options - Optional overrides (e.g. custom DoH resolver for testing).
-   *                  Pass `{ resolveDoh: null }` to disable DoH entirely.
-   */
-  constructor(config, options) {
+  constructor(config) {
     this.config = config;
     this.rateLimiter = new RateLimiter(3e4, config.verbose);
     if (config.proxyUrl) {
       this.dispatcher = new ProxyAgent(config.proxyUrl);
     }
-    this.dohResolverFn = options?.resolveDoh !== void 0 ? options.resolveDoh : resolveDoh;
-  }
-  /**
-   * Lazily resolve the DoH proxy node on the first request.
-   * Skipped entirely when the user has configured proxy_url or DoH is disabled.
-   * On failure, silently falls back to direct connection.
-   */
-  async ensureDoh() {
-    if (this.dohResolved || this.dispatcher || !this.dohResolverFn) return;
-    this.dohResolved = true;
-    try {
-      const { hostname, protocol } = new URL(this.config.baseUrl);
-      const node = await this.dohResolverFn(hostname);
-      if (!node) return;
-      if (node.ip === hostname) {
-        if (this.config.verbose) {
-          vlog(`DoH: resolved ip matches hostname (${hostname}), using direct connection`);
-        }
-        return;
-      }
-      this.dohNode = node;
-      this.dohBaseUrl = `${protocol}//${node.host}`;
-      this.dohAgent = new Agent({
-        connect: {
-          lookup: (_hostname, options, callback) => {
-            if (options?.all) {
-              callback(null, [{ address: node.ip, family: 4 }]);
-            } else {
-              callback(null, node.ip, 4);
-            }
-          }
-        }
-      });
-      if (this.config.verbose) {
-        vlog(`DoH proxy active: ${hostname} \u2192 ${node.host} (${node.ip}), ttl=${node.ttl}s`);
-      }
-    } catch (err) {
-      if (this.config.verbose) {
-        const cause = err instanceof Error ? err.message : String(err);
-        vlog(`DoH resolution failed, falling back to direct: ${cause}`);
-      }
-    }
-  }
-  /**
-   * Invalidate DoH state and delete the binary's cache file so the next
-   * resolution performs a fresh lookup.  Called on network-level failures
-   * when a DoH proxy node was in use.
-   */
-  async invalidateDoh() {
-    this.dohNode = null;
-    this.dohAgent = null;
-    this.dohBaseUrl = null;
-    this.dohResolved = false;
-    try {
-      await unlink(getDohCachePath());
-    } catch {
-    }
   }
   logRequest(method, url, auth) {
     if (!this.config.verbose) return;
@@ -1379,18 +1252,13 @@ var OkxRestClient = class _OkxRestClient {
    * Security: validates Content-Type and enforces maxBytes limit.
    */
   async privatePostBinary(path42, body, opts) {
-    await this.ensureDoh();
     const maxBytes = opts?.maxBytes ?? _OkxRestClient.DEFAULT_MAX_BYTES;
     const expectedCT = opts?.expectedContentType ?? "application/octet-stream";
     const bodyJson = body ? JSON.stringify(body) : "";
     const endpoint = `POST ${path42}`;
-    const baseUrl = this.dohNode ? this.dohBaseUrl : this.config.baseUrl;
-    this.logRequest("POST", `${baseUrl}${path42}`, "private");
+    this.logRequest("POST", `${this.config.baseUrl}${path42}`, "private");
     const reqConfig = { method: "POST", path: path42, auth: "private" };
     const headers = this.buildHeaders(reqConfig, path42, bodyJson, getNow());
-    if (this.dohNode) {
-      headers.set("User-Agent", "OKX/2.7.2");
-    }
     const t0 = Date.now();
     const response = await this.fetchBinary(path42, endpoint, headers, bodyJson, t0);
     const elapsed = Date.now() - t0;
@@ -1420,19 +1288,14 @@ var OkxRestClient = class _OkxRestClient {
   /** Execute fetch for binary endpoint, wrapping network errors. */
   async fetchBinary(path42, endpoint, headers, bodyJson, t0) {
     try {
-      const baseUrl = this.dohNode ? this.dohBaseUrl : this.config.baseUrl;
       const fetchOptions = {
         method: "POST",
         headers,
         body: bodyJson || void 0,
         signal: AbortSignal.timeout(this.config.timeoutMs)
       };
-      if (this.dispatcher) {
-        fetchOptions.dispatcher = this.dispatcher;
-      } else if (this.dohAgent) {
-        fetchOptions.dispatcher = this.dohAgent;
-      }
-      return await fetch(`${baseUrl}${path42}`, fetchOptions);
+      if (this.dispatcher) fetchOptions.dispatcher = this.dispatcher;
+      return await fetch(`${this.config.baseUrl}${path42}`, fetchOptions);
     } catch (error) {
       if (this.config.verbose) {
         vlog(`\u2717 NetworkError after ${Date.now() - t0}ms: ${error instanceof Error ? error.message : String(error)}`);
@@ -1463,11 +1326,9 @@ var OkxRestClient = class _OkxRestClient {
   // JSON request
   // ---------------------------------------------------------------------------
   async request(reqConfig) {
-    await this.ensureDoh();
     const queryString = buildQueryString(reqConfig.query);
     const requestPath = queryString.length > 0 ? `${reqConfig.path}?${queryString}` : reqConfig.path;
-    const baseUrl = this.dohNode ? this.dohBaseUrl : this.config.baseUrl;
-    const url = `${baseUrl}${requestPath}`;
+    const url = `${this.config.baseUrl}${requestPath}`;
     const bodyJson = reqConfig.body ? JSON.stringify(reqConfig.body) : "";
     const timestamp = getNow();
     this.logRequest(reqConfig.method, url, reqConfig.auth);
@@ -1475,9 +1336,6 @@ var OkxRestClient = class _OkxRestClient {
       await this.rateLimiter.consume(reqConfig.rateLimit);
     }
     const headers = this.buildHeaders(reqConfig, requestPath, bodyJson, timestamp);
-    if (this.dohNode) {
-      headers.set("User-Agent", "OKX/2.7.2");
-    }
     const t0 = Date.now();
     let response;
     try {
@@ -1489,18 +1347,9 @@ var OkxRestClient = class _OkxRestClient {
       };
       if (this.dispatcher) {
         fetchOptions.dispatcher = this.dispatcher;
-      } else if (this.dohAgent) {
-        fetchOptions.dispatcher = this.dohAgent;
       }
       response = await fetch(url, fetchOptions);
     } catch (error) {
-      if (this.dohNode) {
-        if (this.config.verbose) {
-          vlog(`DoH request failed, invalidating cache and retrying: ${error instanceof Error ? error.message : String(error)}`);
-        }
-        await this.invalidateDoh();
-        return this.request(reqConfig);
-      }
       if (this.config.verbose) {
         const elapsed2 = Date.now() - t0;
         const cause = error instanceof Error ? error.message : String(error);
@@ -2342,6 +2191,59 @@ function registerAccountTools() {
     }
   ];
 }
+async function resolveQuoteCcySz(instId, sz, tgtCcy, instType, client) {
+  if (tgtCcy !== "quote_ccy") {
+    return { sz, tgtCcy, conversionNote: void 0 };
+  }
+  const [instrumentsRes, tickerRes] = await Promise.all([
+    client.publicGet("/api/v5/public/instruments", {
+      instType,
+      instId
+    }),
+    client.publicGet("/api/v5/market/ticker", { instId })
+  ]);
+  const instruments = Array.isArray(instrumentsRes.data) ? instrumentsRes.data : [];
+  if (instruments.length === 0) {
+    throw new Error(
+      `Failed to fetch instrument info for ${instId}: empty instrument list. Cannot determine ctVal for quote_ccy conversion.`
+    );
+  }
+  const ctValStr = String(instruments[0].ctVal ?? "");
+  const ctVal = parseFloat(ctValStr);
+  if (!isFinite(ctVal) || ctVal <= 0) {
+    throw new Error(
+      `Invalid ctVal "${ctValStr}" for ${instId}. ctVal must be a positive number for quote_ccy conversion.`
+    );
+  }
+  const tickers = Array.isArray(tickerRes.data) ? tickerRes.data : [];
+  if (tickers.length === 0) {
+    throw new Error(
+      `Failed to fetch ticker price for ${instId}: empty ticker response. Cannot determine last price for quote_ccy conversion.`
+    );
+  }
+  const lastStr = String(tickers[0].last ?? "");
+  const lastPx = parseFloat(lastStr);
+  if (!isFinite(lastPx) || lastPx <= 0) {
+    throw new Error(
+      `Invalid last price "${lastStr}" for ${instId}. Last price must be a positive number for quote_ccy conversion.`
+    );
+  }
+  const usdtAmount = parseFloat(sz);
+  const contractValue = ctVal * lastPx;
+  const contracts = Math.floor(usdtAmount / contractValue);
+  if (contracts <= 0) {
+    const minUsdt = contractValue.toFixed(2);
+    throw new Error(
+      `sz=${sz} USDT is too small to buy even 1 contract of ${instId}. Minimum amount required is at least ${minUsdt} USDT (ctVal=${ctValStr}, lastPx=${lastStr}, 1 contract = ${minUsdt} USDT).`
+    );
+  }
+  const conversionNote = `Converting ${sz} USDT \u2192 ${contracts} contracts (ctVal=${ctValStr}, lastPx=${lastStr}, formula: floor(${sz} / (${ctValStr} \xD7 ${lastStr})) = ${contracts})`;
+  return {
+    sz: String(contracts),
+    tgtCcy: void 0,
+    conversionNote
+  };
+}
 function registerAlgoTradeTools() {
   return [
     {
@@ -2437,6 +2339,13 @@ function registerAlgoTradeTools() {
       handler: async (rawArgs, context) => {
         const args = asRecord(rawArgs);
         const reduceOnly = args.reduceOnly;
+        const resolved = await resolveQuoteCcySz(
+          requireString(args, "instId"),
+          requireString(args, "sz"),
+          readString(args, "tgtCcy"),
+          "SWAP",
+          context.client
+        );
         const response = await context.client.privatePost(
           "/api/v5/trade/order-algo",
           compactObject({
@@ -2445,8 +2354,8 @@ function registerAlgoTradeTools() {
             side: requireString(args, "side"),
             posSide: readString(args, "posSide"),
             ordType: requireString(args, "ordType"),
-            sz: requireString(args, "sz"),
-            tgtCcy: readString(args, "tgtCcy"),
+            sz: resolved.sz,
+            tgtCcy: resolved.tgtCcy,
             tpTriggerPx: readString(args, "tpTriggerPx"),
             tpOrdPx: readString(args, "tpOrdPx"),
             tpTriggerPxType: readString(args, "tpTriggerPxType"),
@@ -2462,7 +2371,11 @@ function registerAlgoTradeTools() {
           }),
           privateRateLimit("swap_place_algo_order", 20)
         );
-        return normalizeResponse(response);
+        const result = normalizeResponse(response);
+        if (resolved.conversionNote) {
+          result._conversion = resolved.conversionNote;
+        }
+        return result;
       }
     },
     {
@@ -2770,6 +2683,13 @@ function registerFuturesAlgoTools() {
       handler: async (rawArgs, context) => {
         const args = asRecord(rawArgs);
         const reduceOnly = args.reduceOnly;
+        const resolved = await resolveQuoteCcySz(
+          requireString(args, "instId"),
+          requireString(args, "sz"),
+          readString(args, "tgtCcy"),
+          "FUTURES",
+          context.client
+        );
         const response = await context.client.privatePost(
           "/api/v5/trade/order-algo",
           compactObject({
@@ -2778,8 +2698,8 @@ function registerFuturesAlgoTools() {
             side: requireString(args, "side"),
             posSide: readString(args, "posSide"),
             ordType: requireString(args, "ordType"),
-            sz: requireString(args, "sz"),
-            tgtCcy: readString(args, "tgtCcy"),
+            sz: resolved.sz,
+            tgtCcy: resolved.tgtCcy,
             tpTriggerPx: readString(args, "tpTriggerPx"),
             tpOrdPx: readString(args, "tpOrdPx"),
             tpTriggerPxType: readString(args, "tpTriggerPxType"),
@@ -2795,7 +2715,11 @@ function registerFuturesAlgoTools() {
           }),
           privateRateLimit("futures_place_algo_order", 20)
         );
-        return normalizeResponse(response);
+        const result = normalizeResponse(response);
+        if (resolved.conversionNote) {
+          result._conversion = resolved.conversionNote;
+        }
+        return result;
       }
     },
     {
@@ -3126,7 +3050,7 @@ function safeWriteFile(targetDir, fileName, data) {
     throw new Error(`Invalid file name: "${fileName}"`);
   }
   const resolvedDir = resolve(targetDir);
-  const filePath = join2(resolvedDir, safeName);
+  const filePath = join(resolvedDir, safeName);
   const resolvedPath = resolve(filePath);
   if (!resolvedPath.startsWith(resolvedDir + sep)) {
     throw new Error(`Path traversal detected: "${fileName}" resolves outside target directory`);
@@ -3242,7 +3166,7 @@ async function extractSkillZip(zipPath, targetDir, limits) {
   });
 }
 function readMetaJson(contentDir) {
-  const metaPath = join3(contentDir, "_meta.json");
+  const metaPath = join2(contentDir, "_meta.json");
   if (!existsSync(metaPath)) {
     throw new Error(`_meta.json not found in ${contentDir}. Invalid skill package.`);
   }
@@ -3268,12 +3192,12 @@ function readMetaJson(contentDir) {
   };
 }
 function validateSkillMdExists(contentDir) {
-  const skillMdPath = join3(contentDir, "SKILL.md");
+  const skillMdPath = join2(contentDir, "SKILL.md");
   if (!existsSync(skillMdPath)) {
     throw new Error(`SKILL.md not found in ${contentDir}. Invalid skill package.`);
   }
 }
-var DEFAULT_REGISTRY_PATH = join4(homedir2(), ".okx", "skills", "registry.json");
+var DEFAULT_REGISTRY_PATH = join3(homedir(), ".okx", "skills", "registry.json");
 function readRegistry(registryPath = DEFAULT_REGISTRY_PATH) {
   if (!existsSync2(registryPath)) {
     return { version: 1, skills: {} };
@@ -3360,7 +3284,7 @@ function registerSkillsTools() {
     {
       name: "skills_download",
       module: "skills",
-      description: "Download a skill zip file from OKX Skills Marketplace to a local directory. Always call skills_search first to confirm the skill name exists. Downloads the latest approved version. NOTE: This only downloads the zip \u2014 it does NOT install to agents. For full installation use CLI: okx skill add <name>. Use when the user wants to inspect or manually install a skill package.",
+      description: "Download a skill zip file from OKX Skills Marketplace to a local directory. Always call skills_search first to confirm the skill name exists. Downloads the latest approved version. NOTE: Downloads third-party developer content as a zip \u2014 does NOT install to agents. For full installation use CLI: okx skill add <name>. Use when the user wants to inspect or manually install a skill package.",
       inputSchema: {
         type: "object",
         properties: {
@@ -4881,6 +4805,13 @@ function buildContractTradeTools(cfg) {
         const args = asRecord(rawArgs);
         const reduceOnly = args.reduceOnly;
         const attachAlgoOrds = buildAttachAlgoOrds(args);
+        const resolved = await resolveQuoteCcySz(
+          requireString(args, "instId"),
+          requireString(args, "sz"),
+          readString(args, "tgtCcy"),
+          defaultType,
+          context.client
+        );
         const response = await context.client.privatePost(
           "/api/v5/trade/order",
           compactObject({
@@ -4889,8 +4820,8 @@ function buildContractTradeTools(cfg) {
             side: requireString(args, "side"),
             posSide: readString(args, "posSide"),
             ordType: requireString(args, "ordType"),
-            sz: requireString(args, "sz"),
-            tgtCcy: readString(args, "tgtCcy"),
+            sz: resolved.sz,
+            tgtCcy: resolved.tgtCcy,
             px: readString(args, "px"),
             reduceOnly: typeof reduceOnly === "boolean" ? String(reduceOnly) : void 0,
             clOrdId: readString(args, "clOrdId"),
@@ -4899,7 +4830,11 @@ function buildContractTradeTools(cfg) {
           }),
           privateRateLimit(n("place_order"), 60)
         );
-        return normalizeResponse(response);
+        const result = normalizeResponse(response);
+        if (resolved.conversionNote) {
+          result._conversion = resolved.conversionNote;
+        }
+        return result;
       }
     },
     // ── cancel_order ─────────────────────────────────────────────────────────
@@ -5974,7 +5909,7 @@ function registerOptionAlgoTools() {
           tgtCcy: {
             type: "string",
             enum: ["base_ccy", "quote_ccy"],
-            description: "Size unit. base_ccy(default): sz in contracts, quote_ccy: sz in USDT (may not be supported for options)"
+            description: "Size unit. base_ccy(default): sz in contracts, quote_ccy: sz in USDT (auto-converted to contracts)"
           },
           reduceOnly: {
             type: "boolean",
@@ -5990,6 +5925,13 @@ function registerOptionAlgoTools() {
       handler: async (rawArgs, context) => {
         const args = asRecord(rawArgs);
         const reduceOnly = readBoolean(args, "reduceOnly");
+        const resolved = await resolveQuoteCcySz(
+          requireString(args, "instId"),
+          requireString(args, "sz"),
+          readString(args, "tgtCcy"),
+          "OPTION",
+          context.client
+        );
         const response = await context.client.privatePost(
           "/api/v5/trade/order-algo",
           compactObject({
@@ -5997,8 +5939,8 @@ function registerOptionAlgoTools() {
             tdMode: requireString(args, "tdMode"),
             side: requireString(args, "side"),
             ordType: requireString(args, "ordType"),
-            sz: requireString(args, "sz"),
-            tgtCcy: readString(args, "tgtCcy"),
+            sz: resolved.sz,
+            tgtCcy: resolved.tgtCcy,
             tpTriggerPx: readString(args, "tpTriggerPx"),
             tpOrdPx: readString(args, "tpOrdPx"),
             tpTriggerPxType: readString(args, "tpTriggerPxType"),
@@ -7405,7 +7347,7 @@ function createToolRunner(client, config) {
   };
 }
 function configFilePath() {
-  return join5(homedir3(), ".okx", "config.toml");
+  return join4(homedir2(), ".okx", "config.toml");
 }
 function readFullConfig() {
   const path42 = configFilePath();
@@ -7556,7 +7498,7 @@ function loadConfig(cli) {
     verbose: cli.verbose ?? false
   };
 }
-var CACHE_FILE = join6(homedir4(), ".okx", "update-check.json");
+var CACHE_FILE = join5(homedir3(), ".okx", "update-check.json");
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 function readCache() {
   try {
@@ -7569,7 +7511,7 @@ function readCache() {
 }
 function writeCache(cache) {
   try {
-    mkdirSync5(join6(homedir4(), ".okx"), { recursive: true });
+    mkdirSync5(join5(homedir3(), ".okx"), { recursive: true });
     writeFileSync4(CACHE_FILE, JSON.stringify(cache, null, 2), "utf-8");
   } catch {
   }
@@ -8399,7 +8341,7 @@ async function cmdDiagnoseMcp(options = {}) {
 
 // src/commands/diagnose.ts
 var CLI_VERSION = readCliVersion();
-var GIT_HASH = true ? "53b8eb6" : "dev";
+var GIT_HASH = true ? "5f833a2" : "dev";
 function maskKey2(key) {
   if (!key) return "(not set)";
   if (key.length <= 8) return "****";
@@ -8697,12 +8639,12 @@ async function runCliChecks(config, profile, outputPath) {
 // src/commands/upgrade.ts
 import { spawnSync as spawnSync2 } from "child_process";
 import { readFileSync as readFileSync6, writeFileSync as writeFileSync6, mkdirSync as mkdirSync7 } from "fs";
-import { dirname as dirname5, join as join8 } from "path";
-import { homedir as homedir6 } from "os";
+import { dirname as dirname5, join as join7 } from "path";
+import { homedir as homedir5 } from "os";
 var PACKAGES = ["@okx_ai/okx-trade-mcp", "@okx_ai/okx-trade-cli"];
-var CACHE_FILE2 = join8(homedir6(), ".okx", "last_check");
+var CACHE_FILE2 = join7(homedir5(), ".okx", "last_check");
 var THROTTLE_MS = 12 * 60 * 60 * 1e3;
-var NPM_BIN = join8(dirname5(process.execPath), process.platform === "win32" ? "npm.cmd" : "npm");
+var NPM_BIN = join7(dirname5(process.execPath), process.platform === "win32" ? "npm.cmd" : "npm");
 function readLastCheck() {
   try {
     return parseInt(readFileSync6(CACHE_FILE2, "utf-8").trim(), 10) || 0;
@@ -8712,7 +8654,7 @@ function readLastCheck() {
 }
 function writeLastCheck() {
   try {
-    mkdirSync7(join8(homedir6(), ".okx"), { recursive: true });
+    mkdirSync7(join7(homedir5(), ".okx"), { recursive: true });
     writeFileSync6(CACHE_FILE2, String(Math.floor(Date.now() / 1e3)), "utf-8");
   } catch {
   }
@@ -12411,16 +12353,17 @@ async function cmdDcdQuoteAndBuy(run, opts) {
 }
 
 // src/commands/skill.ts
-import { tmpdir, homedir as homedir8 } from "os";
-import { join as join10, dirname as dirname6 } from "path";
+import { tmpdir, homedir as homedir7 } from "os";
+import { join as join9, dirname as dirname6 } from "path";
 import { mkdirSync as mkdirSync8, rmSync, existsSync as existsSync7, copyFileSync as copyFileSync2 } from "fs";
 import { execFileSync as execFileSync2 } from "child_process";
 import { randomUUID as randomUUID2 } from "crypto";
 function resolveNpx() {
-  const sibling = join10(dirname6(process.execPath), "npx");
+  const sibling = join9(dirname6(process.execPath), "npx");
   if (existsSync7(sibling)) return sibling;
   return "npx";
 }
+var THIRD_PARTY_INSTALL_NOTICE = "Note: This skill was created by a third-party developer, not by OKX. Review SKILL.md before use.";
 async function cmdSkillSearch(run, opts) {
   const args = {};
   if (opts.keyword) args.keyword = opts.keyword;
@@ -12470,13 +12413,13 @@ async function cmdSkillCategories(run, json) {
   outputLine("");
 }
 async function cmdSkillAdd(name, config, json) {
-  const tmpBase = join10(tmpdir(), `okx-skill-${randomUUID2()}`);
+  const tmpBase = join9(tmpdir(), `okx-skill-${randomUUID2()}`);
   mkdirSync8(tmpBase, { recursive: true });
   try {
     outputLine(`Downloading ${name}...`);
     const client = new OkxRestClient(config);
     const zipPath = await downloadSkillZip(client, name, tmpBase);
-    const contentDir = await extractSkillZip(zipPath, join10(tmpBase, "content"));
+    const contentDir = await extractSkillZip(zipPath, join9(tmpBase, "content"));
     const meta = readMetaJson(contentDir);
     validateSkillMdExists(contentDir);
     outputLine("Installing to detected agents...");
@@ -12486,7 +12429,7 @@ async function cmdSkillAdd(name, config, json) {
         timeout: 6e4
       });
     } catch (e) {
-      const savedZip = join10(process.cwd(), `${name}.zip`);
+      const savedZip = join9(process.cwd(), `${name}.zip`);
       try {
         copyFileSync2(zipPath, savedZip);
       } catch {
@@ -12496,11 +12439,7 @@ async function cmdSkillAdd(name, config, json) {
       throw e;
     }
     upsertSkillRecord(meta);
-    if (json) {
-      outputLine(JSON.stringify({ name: meta.name, version: meta.version, status: "installed" }, null, 2));
-    } else {
-      outputLine(`\u2713 Skill "${meta.name}" v${meta.version} installed`);
-    }
+    printSkillInstallResult(meta, json);
   } finally {
     rmSync(tmpBase, { recursive: true, force: true });
   }
@@ -12529,7 +12468,7 @@ function cmdSkillRemove(name, json) {
       timeout: 6e4
     });
   } catch {
-    const agentsPath = join10(homedir8(), ".agents", "skills", name);
+    const agentsPath = join9(homedir7(), ".agents", "skills", name);
     try {
       rmSync(agentsPath, { recursive: true, force: true });
     } catch {
@@ -12593,11 +12532,19 @@ function cmdSkillList(json) {
   outputLine("");
   outputLine(`${skills.length} skills installed.`);
 }
+function printSkillInstallResult(meta, json) {
+  if (json) {
+    outputLine(JSON.stringify({ name: meta.name, version: meta.version, status: "installed" }, null, 2));
+  } else {
+    outputLine(`\u2713 Skill "${meta.name}" v${meta.version} installed`);
+    outputLine(`  ${THIRD_PARTY_INSTALL_NOTICE}`);
+  }
+}
 
 // src/index.ts
 var _require3 = createRequire3(import.meta.url);
 var CLI_VERSION2 = _require3("../package.json").version;
-var GIT_HASH2 = true ? "53b8eb6" : "dev";
+var GIT_HASH2 = true ? "5f833a2" : "dev";
 function handleConfigCommand(action, rest, json, lang, force) {
   if (action === "init") return cmdConfigInit(lang === "zh" ? "zh" : "en");
   if (action === "show") return cmdConfigShow(json);