@okx_ai/okx-trade-cli 1.3.2-beta.5 → 1.3.2-beta.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@okx_ai/okx-trade-cli",
-  "version": "1.3.2-beta.5",
+  "version": "1.3.2-beta.6",
   "description": "OKX CLI - Command line tool for OKX exchange",
   "type": "module",
   "license": "MIT",
@@ -16,6 +16,14 @@
   "publishConfig": {
     "access": "public"
   },
+  "scripts": {
+    "build": "tsup && node -e \"const fs=require('fs');fs.mkdirSync('scripts',{recursive:true});fs.copyFileSync('../../scripts/postinstall-notice.js','scripts/postinstall.js')\"",
+    "typecheck": "tsc --noEmit",
+    "clean": "rm -rf dist scripts",
+    "postinstall": "node scripts/postinstall.js || exit 0",
+    "test:unit": "node --import tsx/esm --test test/*.test.ts",
+    "test:coverage": "c8 --reporter=lcov --reporter=text --src=src node --import tsx/esm --test test/*.test.ts"
+  },
   "engines": {
     "node": ">=18"
   },
@@ -35,13 +43,5 @@
     "tsup": "^8.5.1",
     "tsx": "^4.19.3",
     "typescript": "^5.9.3"
-  },
-  "scripts": {
-    "build": "tsup && node -e \"const fs=require('fs');fs.mkdirSync('scripts',{recursive:true});fs.copyFileSync('../../scripts/postinstall-notice.js','scripts/postinstall.js')\"",
-    "typecheck": "tsc --noEmit",
-    "clean": "rm -rf dist scripts",
-    "postinstall": "node scripts/postinstall.js || exit 0",
-    "test:unit": "node --import tsx/esm --test test/*.test.ts",
-    "test:coverage": "c8 --reporter=lcov --reporter=text --src=src node --import tsx/esm --test test/*.test.ts"
   }
-}
+}

package/scripts/postinstall.js

@@ -43,7 +43,7 @@ function getPlatformDir() {
   const map = {
     'darwin-arm64': 'darwin-arm64',
     'darwin-x64':   'darwin-x64',
-    'linux-arm64':  'linux-arm64',
+    'linux-arm64':  'linux-x64',
     'linux-x64':    'linux-x64',
     'win32-arm64':  'win32-x64',    // fallback: x64 binary via WoW64 emulation
     'win32-x64':    'win32-x64',
@@ -216,3 +216,80 @@ async function downloadPilotBinary() {
 downloadPilotBinary().catch(() => {
   // Never block npm install
 });
+
+// ---------------------------------------------------------------------------
+// okx-auth binary download (best-effort, never blocks npm install)
+// ---------------------------------------------------------------------------
+
+const AUTH_CDN_PATH_PREFIX = '/upgradeapp/tools/oauth';
+
+function getAuthBinaryName() {
+  return platform() === 'win32' ? 'okx-auth.exe' : 'okx-auth';
+}
+
+async function downloadOkxAuthBinary() {
+  if (process.env.OKX_AUTH_BIN) return;
+
+  const platformDir = getPlatformDir();
+  if (!platformDir) return;
+
+  const binaryName = getAuthBinaryName();
+  const destPath = join(BIN_DIR, binaryName);
+  const tmpPath = destPath + '.auth.tmp';
+
+  mkdirSync(BIN_DIR, { recursive: true });
+
+  const checksumPath = `${AUTH_CDN_PATH_PREFIX}/${platformDir}/checksum.json`;
+  const binaryPath = `${AUTH_CDN_PATH_PREFIX}/${platformDir}/${binaryName}`;
+
+  for (const { host, protocol } of CDN_SOURCES) {
+    try {
+      const checksumUrl = `${protocol}://${host}${checksumPath}`;
+      const raw = await downloadText(checksumUrl, DOWNLOAD_TIMEOUT_MS);
+      const checksum = JSON.parse(raw);
+
+      if (!checksum.sha256 || !checksum.size || !checksum.target) {
+        throw new Error('Invalid checksum.json: missing sha256, size, or target');
+      }
+
+      if (checksum.target !== platformDir) {
+        throw new Error(`Target mismatch: expected ${platformDir}, got ${checksum.target}`);
+      }
+
+      if (existsSync(destPath) && verifyBinary(destPath, checksum, platformDir)) {
+        process.stderr.write('  ✓ okx-auth up to date (checksum match)\n');
+        return;
+      }
+
+      const binaryUrl = `${protocol}://${host}${binaryPath}`;
+      await download(binaryUrl, tmpPath, DOWNLOAD_TIMEOUT_MS);
+
+      const actual = hashFile(tmpPath);
+      if (actual.size !== checksum.size) {
+        throw new Error(`Size mismatch: expected ${checksum.size}, got ${actual.size}`);
+      }
+      if (actual.sha256 !== checksum.sha256) {
+        throw new Error(`SHA-256 mismatch: expected ${checksum.sha256}, got ${actual.sha256}`);
+      }
+
+      try { unlinkSync(destPath); } catch { /* ignore */ }
+      renameSync(tmpPath, destPath);
+
+      if (platform() !== 'win32') {
+        chmodSync(destPath, 0o755);
+      }
+
+      process.stderr.write(`  ✓ okx-auth downloaded and verified (${host})\n`);
+      return;
+    } catch (err) {
+      try { unlinkSync(tmpPath); } catch { /* ignore */ }
+      process.stderr.write(`  [okx-auth] ${host} failed: ${err instanceof Error ? err.message : err}\n`);
+    }
+  }
+
+  process.stderr.write('  ⓘ okx-auth not available (download failed). Set OKX_AUTH_BIN to provide a custom path, or re-run npm install to retry.\n');
+}
+
+downloadOkxAuthBinary().catch(() => {
+  // Never block npm install
+});

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2026 OKX
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/scripts/postinstall-download.js

@@ -1,152 +0,0 @@
-#!/usr/bin/env node
-/**
- * postinstall-download.js
- *
- * Downloads the platform-specific okx-doh-resolver binary from OKX CDN
- * to ~/.okx/bin/.  Two-layer CDN fallback:
- *   1. static.okx.com   (HTTPS, overseas)
- *   2. pcdoh.qcxex.com  (HTTP, domestic)
- *
- * This script MUST NOT block npm install — all errors are silently swallowed.
- * If the binary cannot be downloaded the SDK falls back to direct connection.
- */
-
-import { createWriteStream, mkdirSync, chmodSync, existsSync, unlinkSync } from 'node:fs';
-import { homedir, platform, arch } from 'node:os';
-import { join } from 'node:path';
-import { get as httpsGet } from 'node:https';
-import { get as httpGet } from 'node:http';
-
-// ---------------------------------------------------------------------------
-// Config
-// ---------------------------------------------------------------------------
-
-const CDN_SOURCES = [
-  { host: 'static.okx.com',  protocol: 'https' },
-  { host: 'pcdoh.qcxex.com', protocol: 'http'  },
-];
-const CDN_PATH_PREFIX = '/upgradeapp/doh/prepub';
-const DOWNLOAD_TIMEOUT_MS = 30_000;
-const BIN_DIR = join(homedir(), '.okx', 'bin');
-
-// ---------------------------------------------------------------------------
-// Platform detection
-// ---------------------------------------------------------------------------
-
-function getPlatformDir() {
-  const p = platform();
-  const a = arch();
-
-  const map = {
-    'darwin-arm64': 'darwin-arm64',
-    'darwin-x64':   'darwin-x64',
-    'linux-x64':    'linux-x64',
-    'win32-x64':    'win32-x64',
-  };
-
-  const key = `${p}-${a}`;
-  return map[key] ?? null;
-}
-
-function getBinaryName() {
-  return platform() === 'win32' ? 'okx-doh-resolver.exe' : 'okx-doh-resolver';
-}
-
-// ---------------------------------------------------------------------------
-// Download helper (follows up to 5 redirects)
-// ---------------------------------------------------------------------------
-
-function download(url, destPath, timeoutMs) {
-  return new Promise((resolve, reject) => {
-    let redirects = 0;
-    const maxRedirects = 5;
-    const getter = url.startsWith('https') ? httpsGet : httpGet;
-
-    function doRequest(requestUrl) {
-      const reqFn = requestUrl.startsWith('https') ? httpsGet : getter;
-      const req = reqFn(requestUrl, { timeout: timeoutMs }, (res) => {
-        // Follow redirects
-        if (res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
-          redirects++;
-          if (redirects > maxRedirects) {
-            reject(new Error(`Too many redirects (${maxRedirects})`));
-            return;
-          }
-          doRequest(res.headers.location);
-          return;
-        }
-
-        if (res.statusCode !== 200) {
-          reject(new Error(`HTTP ${res.statusCode}`));
-          return;
-        }
-
-        const file = createWriteStream(destPath);
-        res.pipe(file);
-        file.on('finish', () => file.close(resolve));
-        file.on('error', (err) => {
-          try { unlinkSync(destPath); } catch { /* ignore */ }
-          reject(err);
-        });
-      });
-
-      req.on('error', reject);
-      req.on('timeout', () => {
-        req.destroy();
-        reject(new Error('Download timed out'));
-      });
-    }
-
-    doRequest(url);
-  });
-}
-
-// ---------------------------------------------------------------------------
-// Main
-// ---------------------------------------------------------------------------
-
-async function main() {
-  // Skip if OKX_DOH_BINARY_PATH is set (user manages their own binary)
-  if (process.env.OKX_DOH_BINARY_PATH) return;
-
-  const platformDir = getPlatformDir();
-  if (!platformDir) {
-    // Unsupported platform — silently skip
-    return;
-  }
-
-  const binaryName = getBinaryName();
-  const destPath = join(BIN_DIR, binaryName);
-
-  // Skip if binary already exists
-  if (existsSync(destPath)) return;
-
-  // Ensure target directory exists
-  mkdirSync(BIN_DIR, { recursive: true });
-
-  const urlPath = `${CDN_PATH_PREFIX}/${platformDir}/${binaryName}`;
-
-  for (const { host, protocol } of CDN_SOURCES) {
-    const url = `${protocol}://${host}${urlPath}`;
-    try {
-      await download(url, destPath, DOWNLOAD_TIMEOUT_MS);
-      // Make executable on Unix
-      if (platform() !== 'win32') {
-        chmodSync(destPath, 0o755);
-      }
-      process.stderr.write(`  ✓ DoH resolver downloaded from ${host}\n`);
-      return;
-    } catch {
-      // Remove partial download
-      try { unlinkSync(destPath); } catch { /* ignore */ }
-      // Try next CDN source
-    }
-  }
-
-  // All CDN hosts failed — silently degrade
-  process.stderr.write('  ⓘ DoH resolver not available (download failed), using direct connection.\n');
-}
-
-main().catch(() => {
-  // Never block npm install
-});