@okx_ai/okx-trade-cli 1.3.5 → 1.3.6-beta.2

package/dist/index.js

@@ -4,6 +4,7 @@
 import { createRequire as createRequire3 } from "module";
 
 // ../core/dist/index.js
+import { EnvHttpProxyAgent, setGlobalDispatcher } from "undici";
 import { ProxyAgent } from "undici";
 import { isIP } from "net";
 import { lookup as dnsLookup } from "dns";
@@ -33,16 +34,22 @@ import os from "os";
 import { writeFileSync as writeFileSync2, renameSync as renameSync2, unlinkSync as unlinkSync2, mkdirSync as mkdirSync2 } from "fs";
 import { join as join4, resolve, basename, sep } from "path";
 import { randomUUID } from "crypto";
+import { createHash } from "crypto";
+import { readFileSync as readFileSync2, readdirSync, statSync } from "fs";
+import { join as join5 } from "path";
+import { createHash as createHash2, createPublicKey, verify as cryptoVerify } from "crypto";
+import { readFileSync as readFileSync3 } from "fs";
+import { join as join6, resolve as resolve2, sep as sep2 } from "path";
 import yauzl from "yauzl";
 import { createWriteStream, mkdirSync as mkdirSync3 } from "fs";
-import { resolve as resolve2, dirname as dirname2 } from "path";
-import { readFileSync as readFileSync2, existsSync } from "fs";
-import { join as join5 } from "path";
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, mkdirSync as mkdirSync4, existsSync as existsSync2 } from "fs";
-import { join as join6, dirname as dirname3 } from "path";
+import { resolve as resolve3, dirname as dirname2 } from "path";
+import { readFileSync as readFileSync4, existsSync } from "fs";
+import { join as join7 } from "path";
+import { readFileSync as readFileSync5, writeFileSync as writeFileSync3, mkdirSync as mkdirSync4, existsSync as existsSync2 } from "fs";
+import { join as join8, dirname as dirname3 } from "path";
 import { homedir as homedir4 } from "os";
-import { readFileSync as readFileSync4, writeFileSync as writeFileSync4, mkdirSync as mkdirSync5, existsSync as existsSync3 } from "fs";
-import { join as join7, dirname as dirname4 } from "path";
+import { readFileSync as readFileSync6, writeFileSync as writeFileSync4, mkdirSync as mkdirSync5, existsSync as existsSync3 } from "fs";
+import { join as join9, dirname as dirname4 } from "path";
 import { homedir as homedir5 } from "os";
 
 // ../../node_modules/.pnpm/smol-toml@1.6.0/node_modules/smol-toml/dist/error.js
@@ -120,7 +127,7 @@ function skipVoid(str, ptr, banNewLines, banComments) {
     ptr++;
   return banComments || c !== "#" ? ptr : skipVoid(str, skipComment(str, ptr), banNewLines);
 }
-function skipUntil(str, ptr, sep2, end, banNewLines = false) {
+function skipUntil(str, ptr, sep3, end, banNewLines = false) {
   if (!end) {
     ptr = indexOfNewline(str, ptr);
     return ptr < 0 ? str.length : ptr;
@@ -129,7 +136,7 @@ function skipUntil(str, ptr, sep2, end, banNewLines = false) {
     let c = str[i];
     if (c === "#") {
       i = indexOfNewline(str, i);
-    } else if (c === sep2) {
+    } else if (c === sep3) {
       return i + 1;
     } else if (c === end || banNewLines && (c === "\n" || c === "\r" && str[i + 1] === "\n")) {
       return i;
@@ -872,8 +879,8 @@ function stringify(obj, { maxDepth = 1e3, numbersAsFloat = false } = {}) {
 }
 
 // ../core/dist/index.js
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync5, mkdirSync as mkdirSync6, existsSync as existsSync4 } from "fs";
-import { join as join8 } from "path";
+import { readFileSync as readFileSync7, writeFileSync as writeFileSync5, mkdirSync as mkdirSync6, existsSync as existsSync4 } from "fs";
+import { join as join10 } from "path";
 import { homedir as homedir6 } from "os";
 import fs2 from "fs";
 import path2 from "path";
@@ -890,24 +897,37 @@ import {
   renameSync as renameSync4
 } from "fs";
 import { homedir as homedir9, platform as platform2 } from "os";
-import { join as join11, dirname as dirname7 } from "path";
+import { join as join13, dirname as dirname7 } from "path";
 import { createWriteStream as createWriteStream2, unlinkSync as unlinkSync3 } from "fs";
 import { get as httpsGet } from "https";
 import { get as httpGet } from "http";
 import {
-  readFileSync as readFileSync7,
+  readFileSync as readFileSync9,
   mkdirSync as mkdirSync8,
   chmodSync,
   existsSync as existsSync6,
   unlinkSync as unlinkSync4,
   renameSync as renameSync3
 } from "fs";
-import { createHash } from "crypto";
+import { createHash as createHash3 } from "crypto";
 import { homedir as homedir8, platform, arch } from "os";
-import { join as join10, dirname as dirname6 } from "path";
-import { readFileSync as readFileSync8, writeFileSync as writeFileSync7, mkdirSync as mkdirSync10, unlinkSync as unlinkSync6, existsSync as existsSync8 } from "fs";
-import { join as join12 } from "path";
+import { join as join12, dirname as dirname6 } from "path";
+import { readFileSync as readFileSync10, writeFileSync as writeFileSync7, mkdirSync as mkdirSync10, unlinkSync as unlinkSync6, existsSync as existsSync8 } from "fs";
+import { join as join14 } from "path";
 import { homedir as homedir10 } from "os";
+function hasProxyEnv(env = process.env) {
+  return Boolean(
+    env.HTTPS_PROXY || env.https_proxy || env.HTTP_PROXY || env.http_proxy
+  );
+}
+function installEnvProxyDispatcher(deps = {}) {
+  const env = deps.env ?? process.env;
+  if (!hasProxyEnv(env)) return false;
+  const register = deps.register ?? (() => setGlobalDispatcher(new EnvHttpProxyAgent()));
+  register();
+  return true;
+}
+installEnvProxyDispatcher();
 var EXEC_TIMEOUT_MS = 3e4;
 var ALLOWED_DOMAIN_RE = /^[\w.-]+\.okx\.com$/;
 var PILOT_BIN_DIR = join(homedir(), ".okx", "bin");
@@ -930,25 +950,25 @@ function execPilotBinary(domain, exclude = [], userAgent) {
   if (userAgent) {
     args.push("--user-agent", userAgent);
   }
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     execFile(
       binPath,
       args,
       { timeout: EXEC_TIMEOUT_MS, encoding: "utf-8" },
       (error, stdout) => {
         if (error) {
-          resolve3(null);
+          resolve4(null);
           return;
         }
         try {
           const result = JSON.parse(stdout);
           if (result.code === 0 && result.data) {
-            resolve3(result.data);
+            resolve4(result.data);
           } else {
-            resolve3(null);
+            resolve4(null);
           }
         } catch {
-          resolve3(null);
+          resolve4(null);
         }
       }
     );
@@ -1282,7 +1302,7 @@ var EXIT_CODES = {
   NOT_LOGGED_IN: 2,
   REFRESH_FAILED: 3
 };
-function finalizeToken(code, token, resolve3, reject) {
+function finalizeToken(code, token, resolve4, reject) {
   if (code === EXIT_CODES.SUCCESS) {
     if (!token) {
       reject(new AuthenticationError(
@@ -1291,7 +1311,7 @@ function finalizeToken(code, token, resolve3, reject) {
       ));
       return;
     }
-    resolve3(token);
+    resolve4(token);
     return;
   }
   if (code === EXIT_CODES.NOT_LOGGED_IN) {
@@ -1328,7 +1348,7 @@ function defaultWindowsPipeName() {
   return WIN_PIPE_PREFIX + randomBytes(32).toString("hex");
 }
 function execAuthTokenWindows(binPath, makePipeName = defaultWindowsPipeName) {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     const pipeName = makePipeName();
     const server = createServer();
     const chunks = [];
@@ -1348,7 +1368,7 @@ function execAuthTokenWindows(binPath, makePipeName = defaultWindowsPipeName) {
     const tryFinalize = () => {
       if (!pipeClosed || exitCode === void 0) return;
       const token = Buffer.concat(chunks).toString("utf-8").trim();
-      settle(() => finalizeToken(exitCode, token, resolve3, reject));
+      settle(() => finalizeToken(exitCode, token, resolve4, reject));
     };
     server.on("connection", (socket) => {
       connectionMade = true;
@@ -1395,7 +1415,7 @@ function execAuthToken() {
   return process.platform === "win32" ? execAuthTokenWindows(binPath) : execAuthTokenUnix(binPath);
 }
 function execAuthTokenUnix(binPath) {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     const child = spawn2(binPath, ["token"], {
       stdio: ["ignore", "ignore", "inherit", "pipe"]
       //       stdin    stdout    stderr     fd3 (pipe)
@@ -1408,35 +1428,35 @@ function execAuthTokenUnix(binPath) {
     });
     child.on("close", (code) => {
       const token = Buffer.concat(chunks).toString("utf-8").trim();
-      finalizeToken(code, token, resolve3, reject);
+      finalizeToken(code, token, resolve4, reject);
     });
   });
 }
 function execAuthStatus() {
   const binPath = getAuthBinaryPath();
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     execFile2(
       binPath,
       ["status", "--json"],
       { timeout: EXEC_TIMEOUT_MS2, encoding: "utf-8" },
       (error, stdout) => {
         if (error) {
-          resolve3(null);
+          resolve4(null);
           return;
         }
         try {
           const result = JSON.parse(stdout);
-          resolve3(result);
+          resolve4(result);
         } catch {
-          resolve3(null);
+          resolve4(null);
         }
       }
     );
   });
 }
 function sleep(ms) {
-  return new Promise((resolve3) => {
-    setTimeout(resolve3, ms);
+  return new Promise((resolve4) => {
+    setTimeout(resolve4, ms);
   });
 }
 var RateLimiter = class {
@@ -2506,6 +2526,7 @@ function registerIndicatorTools() {
   return [
     {
       name: "market_get_indicator",
+      title: "Get Technical Indicator",
       module: "market",
       description: "Get technical indicator values for an instrument. Common indicators: ma, ema, rsi, macd, bb (Bollinger), kdj, supertrend, ahr999. Call market_list_indicators first to see all valid names. No credentials required.",
       isWrite: false,
@@ -2579,6 +2600,7 @@ function registerIndicatorTools() {
     },
     {
       name: "market_list_indicators",
+      title: "List Technical Indicators",
       module: "market",
       description: "List all supported technical indicator names and descriptions. Call this before market_get_indicator to discover valid indicator names. No credentials required.",
       isWrite: false,
@@ -2665,6 +2687,7 @@ function registerAccountTools() {
   return [
     {
       name: "account_get_balance",
+      title: "Get Trading Account Balance",
       module: "account",
       description: "Get account balance for trading account. Returns balances for all currencies or a specific one.",
       isWrite: false,
@@ -2689,9 +2712,11 @@ function registerAccountTools() {
     },
     {
       name: "account_transfer",
+      title: "Transfer Between Accounts",
       module: "account",
       description: "Transfer funds between accounts (trading, funding, etc.). [CAUTION] Moves real funds.",
       isWrite: true,
+      destructiveHint: false,
       inputSchema: {
         type: "object",
         properties: {
@@ -2746,6 +2771,7 @@ function registerAccountTools() {
     },
     {
       name: "account_get_max_size",
+      title: "Get Max Order Size",
       module: "account",
       description: "Get max buy/sell order size for a SWAP/FUTURES instrument given current balance and leverage. Useful before placing orders.",
       isWrite: false,
@@ -2793,6 +2819,7 @@ function registerAccountTools() {
     },
     {
       name: "account_get_asset_balance",
+      title: "Get Funding Account Balance",
       module: "account",
       description: "Get funding account balance (asset account). Different from account_get_balance which queries the trading account. Optionally includes total asset valuation across all account types (trading, funding, earn, etc.).",
       isWrite: false,
@@ -2856,6 +2883,7 @@ function registerAccountTools() {
     },
     {
       name: "account_get_bills",
+      title: "Get Account Bills",
       module: "account",
       description: "Get account ledger: fees paid, funding charges, realized PnL, transfers, etc. Default 20 records (last 7 days), max 100.",
       isWrite: false,
@@ -2922,6 +2950,7 @@ function registerAccountTools() {
     },
     {
       name: "account_get_positions_history",
+      title: "Get Closed Positions History",
       module: "account",
       description: "Get closed position history for SWAP or FUTURES. Default 20 records, max 100.",
       isWrite: false,
@@ -2983,6 +3012,7 @@ function registerAccountTools() {
     },
     {
       name: "account_get_trade_fee",
+      title: "Get Trade Fee Tier",
       module: "account",
       description: "Get maker/taker fee rates for the account. Useful to understand your fee tier before trading.",
       isWrite: false,
@@ -3015,6 +3045,7 @@ function registerAccountTools() {
     },
     {
       name: "account_get_config",
+      title: "Get Account Configuration",
       module: "account",
       description: "Get account configuration: position mode (net vs hedge), account level, auto-loan settings, etc. Note: `settleCcy` is the current settlement currency for USDS-margined contracts. `settleCcyList` is the list of available settlement currencies to choose from. These fields only apply to USDS-margined contracts and can be ignored for standard USDT/coin-margined trading.",
       isWrite: false,
@@ -3033,6 +3064,7 @@ function registerAccountTools() {
     },
     {
       name: "account_get_max_withdrawal",
+      title: "Get Max Withdrawable Amount",
       module: "account",
       description: "Get maximum withdrawable amount for a currency from the trading account. Useful before initiating a transfer or withdrawal.",
       isWrite: false,
@@ -3057,6 +3089,7 @@ function registerAccountTools() {
     },
     {
       name: "account_get_max_avail_size",
+      title: "Get Max Available Position Size",
       module: "account",
       description: "Get maximum available size for opening or reducing a position. Different from account_get_max_size which calculates new order size.",
       isWrite: false,
@@ -3101,6 +3134,7 @@ function registerAccountTools() {
     },
     {
       name: "account_get_positions",
+      title: "Get Current Positions",
       module: "account",
       description: "Get current open positions across all instrument types (MARGIN, SWAP, FUTURES, OPTION, EVENTS). Use swap_get_positions for SWAP/FUTURES-only queries.",
       isWrite: false,
@@ -3136,6 +3170,7 @@ function registerAccountTools() {
     },
     {
       name: "account_get_bills_archive",
+      title: "Get Archived Account Bills",
       module: "account",
       description: "Get archived account ledger (bills older than 7 days, up to 3 months). Use account_get_bills for recent 7-day records. Default 20 records, max 100.",
       isWrite: false,
@@ -3202,9 +3237,11 @@ function registerAccountTools() {
     },
     {
       name: "account_set_position_mode",
+      title: "Set Position Mode",
       module: "account",
       description: "Switch between net position mode and long/short hedge mode. net: one position per instrument (default). long_short_mode: separate long and short positions. [CAUTION] Requires no open positions or pending orders.",
       isWrite: true,
+      idempotentHint: true,
       inputSchema: {
         type: "object",
         properties: {
@@ -3344,6 +3381,8 @@ function registerAlgoTradeTools() {
   return [
     {
       name: "swap_place_algo_order",
+      title: "Perpetual Futures Place Algo Order",
+      destructiveHint: false,
       module: "swap",
       description: "Place a SWAP/FUTURES algo order. [CAUTION] Executes real trades. conditional: single TP, single SL, or both on one order. oco: TP+SL simultaneously - first trigger cancels the other. move_order_stop: trailing stop (callbackRatio or callbackSpread). trigger: pending order activated when triggerPx is hit (provide triggerPx + orderPx). chase: smart-follow best bid/ask. iceberg: split large order into child orders at intervals. twap: time-weighted average price order splitting.",
       isWrite: true,
@@ -3492,6 +3531,8 @@ function registerAlgoTradeTools() {
     },
     {
       name: "swap_place_move_stop_order",
+      title: "Perpetual Futures Place Move-Stop Order",
+      destructiveHint: false,
       module: "swap",
       description: "[DEPRECATED] Use swap_place_algo_order with ordType='move_order_stop' instead. Place a SWAP/FUTURES trailing stop order. [CAUTION] Executes real trades. Specify callbackRatio (e.g. '0.01'=1%) or callbackSpread (fixed price distance), not both. Optionally set activePx so tracking starts once market reaches that price.",
       isWrite: true,
@@ -3569,6 +3610,8 @@ function registerAlgoTradeTools() {
     },
     {
       name: "swap_cancel_algo_orders",
+      title: "Perpetual Futures Cancel Algo Orders",
+      idempotentHint: true,
       module: "swap",
       description: "Cancel one or more pending SWAP/FUTURES algo orders (TP/SL). Accepts a list of {algoId, instId} objects.",
       isWrite: true,
@@ -3612,6 +3655,7 @@ function registerAlgoTradeTools() {
     },
     {
       name: "swap_get_algo_orders",
+      title: "Perpetual Futures Get Algo Orders",
       module: "swap",
       description: "Query pending or completed SWAP/FUTURES algo orders (TP/SL, OCO, trailing stop).",
       isWrite: false,
@@ -3704,6 +3748,8 @@ function registerFuturesAlgoTools() {
   return [
     {
       name: "futures_place_algo_order",
+      title: "Futures Place Algo Order",
+      destructiveHint: false,
       module: "futures",
       description: "Place a FUTURES delivery algo order. [CAUTION] Executes real trades. conditional: single TP, single SL, or both on one order. oco: TP+SL simultaneously - first trigger cancels the other. move_order_stop: trailing stop (callbackRatio or callbackSpread). trigger: pending order activated when triggerPx is hit (provide triggerPx + orderPx). chase: smart-follow best bid/ask. iceberg: split large order into child orders at intervals. twap: time-weighted average price order splitting.",
       isWrite: true,
@@ -3852,6 +3898,8 @@ function registerFuturesAlgoTools() {
     },
     {
       name: "futures_place_move_stop_order",
+      title: "Futures Place Move-Stop Order",
+      destructiveHint: false,
       module: "futures",
       description: "[DEPRECATED] Use futures_place_algo_order with ordType='move_order_stop' instead. Place a FUTURES delivery trailing stop order. [CAUTION] Executes real trades.",
       isWrite: true,
@@ -3929,6 +3977,8 @@ function registerFuturesAlgoTools() {
     },
     {
       name: "futures_amend_algo_order",
+      title: "Futures Amend Algo Order",
+      idempotentHint: true,
       module: "futures",
       description: "Amend a pending FUTURES delivery algo order (modify TP/SL prices or size). Also covers TP/SL orders attached when placing the main order - look up algoId via futures_get_algo_orders first.",
       isWrite: true,
@@ -3965,6 +4015,8 @@ function registerFuturesAlgoTools() {
     },
     {
       name: "futures_cancel_algo_orders",
+      title: "Futures Cancel Algo Orders",
+      idempotentHint: true,
       module: "futures",
       description: "Cancel one or more pending FUTURES delivery algo orders (TP/SL). Accepts a list of {algoId, instId} objects.",
       isWrite: true,
@@ -4002,6 +4054,7 @@ function registerFuturesAlgoTools() {
     },
     {
       name: "futures_get_algo_orders",
+      title: "Futures Get Algo Orders",
       module: "futures",
       description: "Query pending or completed FUTURES delivery algo orders (TP/SL, OCO, trailing stop).",
       isWrite: false,
@@ -4123,6 +4176,7 @@ function registerAuditTools() {
     {
       name: "trade_get_history",
       module: "account",
+      title: "Get Tool-Call Audit Log",
       description: "Query local audit log of tool calls made through this MCP server. Returns recent operations with timestamps, duration, params, and results. Use to review what trades or queries were executed in this session or past sessions.",
       isWrite: false,
       inputSchema: {
@@ -4228,6 +4282,223 @@ async function downloadSkillZip(client, name, targetDir, format = "zip") {
   const filePath = safeWriteFile(targetDir, fileName, result.data);
   return filePath;
 }
+function listFilesRecursive(dir, base = "") {
+  const results = [];
+  for (const entry of readdirSync(dir)) {
+    const fullPath = join5(dir, entry);
+    const relPath = base ? `${base}/${entry}` : entry;
+    if (statSync(fullPath).isDirectory()) {
+      results.push(...listFilesRecursive(fullPath, relPath));
+    } else {
+      results.push(relPath);
+    }
+  }
+  return results;
+}
+function computeFileHashes(contentDir) {
+  const hashes = {};
+  for (const relPath of listFilesRecursive(contentDir)) {
+    if (relPath === "_meta.json") continue;
+    const bytes = readFileSync2(join5(contentDir, relPath));
+    hashes[relPath] = "sha256:" + createHash("sha256").update(bytes).digest("hex");
+  }
+  return hashes;
+}
+async function getPublicKey(client, keyId) {
+  try {
+    const query = {};
+    if (keyId !== void 0) query.keyId = keyId;
+    const result = await client.privateGet(
+      "/api/v5/skill/signing-key",
+      query
+    );
+    if (!result.data || result.data.status !== "active") return null;
+    return result.data.publicKey;
+  } catch (e) {
+    if (e instanceof ConfigError) throw e;
+    return null;
+  }
+}
+var ED25519_SPKI_HEADER = Buffer.from("302a300506032b6570032100", "hex");
+function parseSSHPublicKey(base64) {
+  try {
+    const buf = Buffer.from(base64, "base64");
+    let offset = 0;
+    if (buf.length < 4) return null;
+    const algLen = buf.readUInt32BE(offset);
+    offset += 4;
+    if (offset + algLen + 4 > buf.length) return null;
+    if (buf.subarray(offset, offset + algLen).toString("ascii") !== "ssh-ed25519") return null;
+    offset += algLen;
+    const keyLen = buf.readUInt32BE(offset);
+    offset += 4;
+    if (keyLen !== 32 || offset + keyLen > buf.length) return null;
+    return buf.subarray(offset, offset + keyLen);
+  } catch {
+    return null;
+  }
+}
+async function verifySkillSignature(contentDir, signing, opts) {
+  if (!signing) {
+    const fallback = await tryServerFallback(contentDir, opts);
+    if (fallback?.status === "verified_by_server") return fallback;
+    return {
+      status: "failed",
+      error: fallback?.error ?? "Skill is not signed",
+      ...fallback?.mismatched?.length && { mismatched: fallback.mismatched }
+    };
+  }
+  const publicKeyBase64 = opts?.fetchPublicKey ? await opts.fetchPublicKey(signing.public_key_id) ?? "" : "";
+  if (!publicKeyBase64) {
+    return localFail(
+      contentDir,
+      opts,
+      `Unknown signing key: ${signing.public_key_id}. Please update CLI.`,
+      "Unknown signing key \u2014 consider updating CLI"
+    );
+  }
+  const rawKey = parseSSHPublicKey(publicKeyBase64);
+  if (!rawKey) {
+    return localFail(
+      contentDir,
+      opts,
+      `Malformed public key for key ID: ${signing.public_key_id}`,
+      "Malformed public key from server \u2014 consider updating CLI",
+      signing.public_key_id
+    );
+  }
+  if (!ed25519Verify(signing, rawKey)) {
+    return localFail(
+      contentDir,
+      opts,
+      "Invalid signature",
+      "Signature mismatch \u2014 key may be outdated or file was modified",
+      signing.public_key_id
+    );
+  }
+  const bindingError = checkNameVersionBinding(signing, opts);
+  if (bindingError) {
+    return { status: "failed", error: bindingError, publicKeyId: signing.public_key_id };
+  }
+  const integrityFailure = await checkFileIntegrity(signing, contentDir, opts);
+  if (integrityFailure) return integrityFailure;
+  const signedFiles = new Set(Object.keys(signing.files));
+  const extraFiles = listFilesRecursive(contentDir).filter(
+    (f) => f !== "_meta.json" && !signedFiles.has(f)
+  );
+  return { status: "verified", publicKeyId: signing.public_key_id, filesChecked: signedFiles.size, extraFiles };
+}
+async function localFail(contentDir, opts, localError, serverHint, keyId) {
+  const fallback = await tryServerFallback(contentDir, opts);
+  if (fallback?.status === "verified_by_server") {
+    return { ...fallback, error: serverHint };
+  }
+  return {
+    status: "failed",
+    error: localError,
+    ...keyId && { publicKeyId: keyId },
+    ...fallback?.mismatched?.length && { mismatched: fallback.mismatched }
+  };
+}
+function ed25519Verify(signing, rawKey) {
+  const payloadObj = { files: signing.files, public_key_id: signing.public_key_id };
+  if (signing.name !== void 0) payloadObj.name = signing.name;
+  if (signing.version !== void 0) payloadObj.version = signing.version;
+  const message = Buffer.from(canonicalize(payloadObj), "utf-8");
+  const sig = Buffer.from(signing.signature, "base64");
+  const spkiKey = Buffer.concat([ED25519_SPKI_HEADER, rawKey]);
+  const keyObj = createPublicKey({ key: spkiKey, format: "der", type: "spki" });
+  return cryptoVerify(null, message, keyObj, sig);
+}
+function checkNameVersionBinding(signing, opts) {
+  if (signing.name !== void 0 && opts?.skillName !== void 0 && signing.name !== opts.skillName) {
+    return `Skill name mismatch: signature binds "${signing.name}" but installing as "${opts.skillName}"`;
+  }
+  if (signing.version !== void 0 && opts?.skillVersion !== void 0 && signing.version !== opts.skillVersion) {
+    return `Skill version mismatch: signature binds "${signing.version}" but package declares "${opts.skillVersion}"`;
+  }
+  return null;
+}
+async function checkFileIntegrity(signing, contentDir, opts) {
+  const resolvedContentDir = resolve2(contentDir);
+  for (const [filename, expectedHash] of Object.entries(signing.files)) {
+    const resolvedPath = resolve2(join6(contentDir, filename));
+    if (!resolvedPath.startsWith(resolvedContentDir + sep2)) {
+      return { status: "failed", error: `Path traversal detected in signing manifest: ${filename}`, publicKeyId: signing.public_key_id };
+    }
+    let bytes;
+    try {
+      bytes = readFileSync3(resolvedPath);
+    } catch {
+      return { status: "failed", error: `File missing: ${filename}`, publicKeyId: signing.public_key_id };
+    }
+    const actual = "sha256:" + createHash2("sha256").update(bytes).digest("hex");
+    if (actual !== expectedHash) {
+      return localFail(
+        contentDir,
+        opts,
+        `File integrity check failed: ${filename}`,
+        "_meta.json may be corrupted",
+        signing.public_key_id
+      );
+    }
+  }
+  return null;
+}
+async function tryServerFallback(contentDir, opts) {
+  if (!opts?.serverSideVerify || !opts.skillName) return null;
+  const fileHashes = computeFileHashes(contentDir);
+  const result = await opts.serverSideVerify(
+    opts.skillName,
+    opts.skillVersion,
+    fileHashes
+  );
+  if (!result) return null;
+  if (result.verified) {
+    return {
+      status: "verified_by_server",
+      filesChecked: Object.keys(fileHashes).length,
+      serverVersion: result.version
+    };
+  }
+  return {
+    status: "failed",
+    filesChecked: Object.keys(fileHashes).length,
+    mismatched: result.mismatched,
+    ...result.message && { error: result.message }
+  };
+}
+function canonicalize(obj) {
+  return JSON.stringify(deepSortKeys(obj));
+}
+function compareKeys(a, b) {
+  if (a < b) return -1;
+  if (a > b) return 1;
+  return 0;
+}
+function deepSortKeys(val) {
+  if (val === null || typeof val !== "object") return val;
+  if (Array.isArray(val)) return val.map(deepSortKeys);
+  const sorted = {};
+  for (const key of Object.keys(val).sort(compareKeys)) {
+    sorted[key] = deepSortKeys(val[key]);
+  }
+  return sorted;
+}
+async function serverSideVerify(client, skillName, version, files) {
+  try {
+    const body = { skillName, files };
+    if (version !== void 0) body.version = version;
+    const result = await client.privatePost(
+      "/api/v5/skill/verify",
+      body
+    );
+    return result.data;
+  } catch (e) {
+    if (e instanceof ConfigError) throw e;
+    return null;
+  }
+}
 var DEFAULT_MAX_TOTAL_BYTES = 100 * 1024 * 1024;
 var DEFAULT_MAX_FILES = 1e3;
 var DEFAULT_MAX_COMPRESSION_RATIO = 100;
@@ -4266,7 +4537,7 @@ async function extractSkillZip(zipPath, targetDir, limits) {
   const maxTotalBytes = limits?.maxTotalBytes ?? DEFAULT_MAX_TOTAL_BYTES;
   const maxFiles = limits?.maxFiles ?? DEFAULT_MAX_FILES;
   const maxCompressionRatio = limits?.maxCompressionRatio ?? DEFAULT_MAX_COMPRESSION_RATIO;
-  const resolvedTarget = resolve2(targetDir);
+  const resolvedTarget = resolve3(targetDir);
   mkdirSync3(resolvedTarget, { recursive: true });
   return new Promise((resolvePromise, reject) => {
     yauzl.open(zipPath, { lazyEntries: true }, (err, zipfile) => {
@@ -4306,11 +4577,11 @@ async function extractSkillZip(zipPath, targetDir, limits) {
   });
 }
 function readMetaJson(contentDir) {
-  const metaPath = join5(contentDir, "_meta.json");
+  const metaPath = join7(contentDir, "_meta.json");
   if (!existsSync(metaPath)) {
     throw new Error(`_meta.json not found in ${contentDir}. Invalid skill package.`);
   }
-  const raw = readFileSync2(metaPath, "utf-8");
+  const raw = readFileSync4(metaPath, "utf-8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -4328,22 +4599,49 @@ function readMetaJson(contentDir) {
     name: String(meta.name),
     version: String(meta.version),
     title: typeof meta.title === "string" ? meta.title : "",
-    description: typeof meta.description === "string" ? meta.description : ""
+    description: typeof meta.description === "string" ? meta.description : "",
+    signing: parseSigningBlock(meta.signing)
+  };
+}
+function tryReadMetaJson(contentDir) {
+  try {
+    return readMetaJson(contentDir);
+  } catch {
+    return null;
+  }
+}
+function parseSigningBlock(raw) {
+  if (!raw || typeof raw !== "object") return void 0;
+  const s = raw;
+  if (typeof s.signature !== "string" || typeof s.public_key_id !== "string" || !s.files) {
+    return void 0;
+  }
+  const rawFiles = s.files;
+  const files = {};
+  for (const [key, value] of Object.entries(rawFiles)) {
+    if (typeof value === "string") files[key] = value;
+  }
+  return {
+    signature: s.signature,
+    public_key_id: s.public_key_id,
+    files,
+    ...typeof s.name === "string" && { name: s.name },
+    ...typeof s.version === "string" && { version: s.version }
   };
 }
 function validateSkillMdExists(contentDir) {
-  const skillMdPath = join5(contentDir, "SKILL.md");
+  const skillMdPath = join7(contentDir, "SKILL.md");
   if (!existsSync(skillMdPath)) {
     throw new Error(`SKILL.md not found in ${contentDir}. Invalid skill package.`);
   }
 }
-var DEFAULT_REGISTRY_PATH = join6(homedir4(), ".okx", "skills", "registry.json");
+var DEFAULT_REGISTRY_PATH = join8(homedir4(), ".okx", "skills", "registry.json");
 function readRegistry(registryPath = DEFAULT_REGISTRY_PATH) {
   if (!existsSync2(registryPath)) {
     return { version: 1, skills: {} };
   }
   try {
-    const raw = readFileSync3(registryPath, "utf-8");
+    const raw = readFileSync5(registryPath, "utf-8");
     return JSON.parse(raw);
   } catch {
     return { version: 1, skills: {} };
@@ -4353,7 +4651,7 @@ function writeRegistry(registry, registryPath = DEFAULT_REGISTRY_PATH) {
   mkdirSync4(dirname3(registryPath), { recursive: true });
   writeFileSync3(registryPath, JSON.stringify(registry, null, 2) + "\n", "utf-8");
 }
-function upsertSkillRecord(meta, registryPath = DEFAULT_REGISTRY_PATH) {
+function upsertSkillRecord(meta, registryPath = DEFAULT_REGISTRY_PATH, verification) {
   const registry = readRegistry(registryPath);
   const now = (/* @__PURE__ */ new Date()).toISOString();
   const existing = registry.skills[meta.name];
@@ -4363,7 +4661,8 @@ function upsertSkillRecord(meta, registryPath = DEFAULT_REGISTRY_PATH) {
     description: meta.description,
     installedAt: existing?.installedAt ?? now,
     updatedAt: now,
-    source: "marketplace"
+    source: "marketplace",
+    ...verification !== void 0 && { verification }
   };
   writeRegistry(registry, registryPath);
 }
@@ -4383,6 +4682,7 @@ function registerSkillsTools() {
     {
       name: "skills_get_categories",
       module: "skills",
+      title: "Skills Marketplace List Categories",
       description: "List all available skill categories in OKX Skills Marketplace. Use the returned categoryId as input to skills_search for category filtering. Do NOT use for searching or downloading skills - use skills_search or skills_download.",
       inputSchema: {
         type: "object",
@@ -4395,6 +4695,7 @@ function registerSkillsTools() {
     {
       name: "skills_search",
       module: "skills",
+      title: "Skills Marketplace Search",
       description: "Search for skills in OKX Skills Marketplace by keyword or category. To get valid category IDs, call skills_get_categories first. Returns skill names for use with skills_download. Do NOT use for downloading - use skills_download.",
       inputSchema: {
         type: "object",
@@ -4424,6 +4725,7 @@ function registerSkillsTools() {
     {
       name: "skills_download",
       module: "skills",
+      title: "Skills Marketplace Download",
       description: "Download a skill package from OKX Skills Marketplace to a local directory. Always call skills_search first to confirm the skill name exists. Downloads the latest approved version. NOTE: Downloads third-party developer content - does NOT install to agents. For full installation use CLI: okx skill add <name>. Use when the user wants to inspect or manually install a skill package.",
       inputSchema: {
         type: "object",
@@ -4446,6 +4748,8 @@ function registerSkillsTools() {
         additionalProperties: false
       },
       isWrite: true,
+      destructiveHint: false,
+      idempotentHint: true,
       handler: handleDownload
     }
   ];
@@ -4509,6 +4813,7 @@ function registerGridTools() {
   return [
     {
       name: "grid_get_orders",
+      title: "Grid Bot List Orders",
       module: "bot.grid",
       description: "List grid bots. status='active' for running; 'history' for stopped.",
       isWrite: false,
@@ -4555,6 +4860,7 @@ function registerGridTools() {
     },
     {
       name: "grid_get_order_details",
+      title: "Grid Bot Get Detail",
       module: "bot.grid",
       description: "Get grid bot detail by algo ID. Returns config, status, PnL, and position.",
       isWrite: false,
@@ -4585,6 +4891,7 @@ function registerGridTools() {
     },
     {
       name: "grid_get_sub_orders",
+      title: "Grid Bot Get Sub-Orders",
       module: "bot.grid",
       description: "Query sub-orders (grid trades) of a bot. type='filled' for executed; 'live' for pending.",
       isWrite: false,
@@ -4629,9 +4936,11 @@ function registerGridTools() {
     },
     {
       name: "grid_create_order",
+      title: "Grid Bot Create",
       module: "bot.grid",
       description: "Create grid bot (spot, USDT-margined, or coin-margined contract). [CAUTION] Locks funds. Spot: quoteSz|baseSz. Contract: direction+lever+sz.",
       isWrite: true,
+      destructiveHint: false,
       inputSchema: {
         type: "object",
         properties: {
@@ -4704,7 +5013,9 @@ function registerGridTools() {
     },
     {
       name: "grid_amend_order",
+      title: "Grid Bot Amend",
       module: "bot.grid",
+      idempotentHint: true,
       description: "Amend a running grid bot. [CAUTION] Modifies a running bot. Use grid_list_orders to confirm the bot is running and obtain the algoId before calling.\nSupports two modes, which can be combined in a single call:\n\u2022 Price-range mode (maxPx+minPx+gridNum): change upper/lower price boundary and grid count. Contract grid: if new range requires more margin, pass topUpAmt; omit to auto-use the minimum required. Spot grid: topUpAmt is not supported.\n\u2022 TP/SL mode (instId + any of tpTriggerPx/slTriggerPx/tpRatio/slRatio): update take-profit and/or stop-loss. Pass '-1' to explicitly clear an existing TP or SL. tpTriggerPx/slTriggerPx are absolute prices; tpRatio/slRatio are profit ratios (e.g. '0.1' = 10%).\nWhen both sets of params are provided, both APIs are called sequentially.\nDo NOT use to create a new grid bot - use grid_create_order instead. Do NOT use to stop a grid bot - use grid_stop_order instead.",
       isWrite: true,
       inputSchema: {
@@ -4827,7 +5138,9 @@ function registerGridTools() {
     },
     {
       name: "grid_stop_order",
+      title: "Grid Bot Stop",
       module: "bot.grid",
+      idempotentHint: true,
       description: "[CAUTION] Stop a grid bot or close its remaining open position \u2014 real trades, irreversible. Workflow: (1) If the user has not specified which bot to stop, call grid_get_orders first and ask the user to confirm which bot before proceeding. (2) Call grid_get_order_details to check the current 'state' field. (3) If state='running' \u2192 call this tool: stopType='1' (default, clean exit) \u2014 spot grid sells all base assets back to quote; contract grid market-closes all positions. stopType='2' (keep assets) \u2014 spot grid keeps base assets as-is; contract grid cancels grid orders but leaves the position open. (4) If state='no_close_position' \u2192 call this tool with stopType='1' to close the remaining open position.",
       isWrite: true,
       inputSchema: {
@@ -4927,9 +5240,11 @@ function registerDcaTools() {
   return [
     {
       name: "dca_create_order",
+      title: "Martingale Bot Create",
       module: "bot.dca",
       description: "Create a DCA (Martingale) bot. [CAUTION] Real trades. contract_dca requires lever; spot_dca must be long. If maxSafetyOrds>0: need safetyOrdAmt, pxSteps.",
       isWrite: true,
+      destructiveHint: false,
       inputSchema: {
         type: "object",
         properties: {
@@ -5005,7 +5320,9 @@ function registerDcaTools() {
     },
     {
       name: "dca_stop_order",
+      title: "Martingale Bot Stop",
       module: "bot.dca",
+      idempotentHint: true,
       description: "[CAUTION] Stop a DCA bot or close its remaining open position \u2014 real trades, irreversible. Workflow: (1) If the user has not specified which bot to stop, call dca_get_orders first and ask the user to confirm which bot before proceeding. (2) Call dca_get_order_details to check the current 'state' field. (3) If state='running' \u2192 call this tool. (4) If state='no_close_position' \u2192 call this tool with stopType='1' to close the remaining open position. spot_dca requires stopType: 1=sell all tokens, 2=keep tokens.",
       isWrite: true,
       inputSchema: {
@@ -5038,6 +5355,7 @@ function registerDcaTools() {
     },
     {
       name: "dca_get_orders",
+      title: "Martingale Bot List Orders",
       module: "bot.dca",
       description: "List DCA bots. Default: active (running). Use status=history for stopped.",
       isWrite: false,
@@ -5076,6 +5394,7 @@ function registerDcaTools() {
     },
     {
       name: "dca_get_order_details",
+      title: "Martingale Bot Get Detail",
       module: "bot.dca",
       description: "Get DCA bot position details (avgPx, upl, liqPx, etc).",
       isWrite: false,
@@ -5101,6 +5420,7 @@ function registerDcaTools() {
     },
     {
       name: "dca_get_sub_orders",
+      title: "Martingale Bot Get Sub-Orders",
       module: "bot.dca",
       description: "Get DCA cycles or orders in a cycle. Omit cycleId=cycle list; with cycleId=orders.",
       isWrite: false,
@@ -5160,8 +5480,9 @@ function registerEarnTools() {
   return [
     {
       name: "earn_get_savings_balance",
+      title: "Get Simple Earn Balance",
       module: "earn.savings",
-      description: "Get Simple Earn (savings/flexible earn) balance. Returns current holdings for all currencies or a specific one. To show market rates alongside balance (\u5E02\u573A\u5747\u5229\u7387), call earn_get_lending_rate_history. earn_get_lending_rate_history also returns fixed-term (\u5B9A\u671F) product offers, so one call gives a complete view of both flexible and fixed options. Do NOT use for fixed-term (\u5B9A\u671F) order queries - use earn_get_fixed_order_list instead.",
+      description: "Get Simple Earn (savings/flexible earn) balance. Returns current holdings for all currencies or a specific one. To show market rates alongside balance, call earn_get_lending_rate_history. To browse available fixed-term products with quota info, use earn_get_fixed_earn_products. Do NOT use for fixed-term order queries \u2014 use earn_get_fixed_order_list instead.",
       isWrite: false,
       inputSchema: {
         type: "object",
@@ -5184,6 +5505,7 @@ function registerEarnTools() {
     },
     {
       name: "earn_get_fixed_order_list",
+      title: "Get Fixed-Term Earn Orders",
       module: "earn.savings",
       description: "Get Simple Earn Fixed (\u5B9A\u671F\u8D5A\u5E01) lending order list. Returns orders sorted by creation time descending. Use this to check status of fixed-term lending orders (pending/earning/expired/settled/cancelled). Do NOT use for flexible earn balance - use earn_get_savings_balance instead. If the result is empty, do NOT display any fixed-term section in the output.",
       isWrite: false,
@@ -5221,9 +5543,11 @@ function registerEarnTools() {
     },
     {
       name: "earn_savings_purchase",
+      title: "Subscribe Simple Earn",
       module: "earn.savings",
       description: "Purchase Simple Earn (savings/flexible earn). [CAUTION] Moves real funds into earn product.",
       isWrite: true,
+      destructiveHint: false,
       inputSchema: {
         type: "object",
         properties: {
@@ -5259,9 +5583,11 @@ function registerEarnTools() {
     },
     {
       name: "earn_savings_redeem",
+      title: "Redeem Simple Earn",
       module: "earn.savings",
       description: "Redeem Simple Earn (savings/flexible earn). [CAUTION] Withdraws funds from earn product.",
       isWrite: true,
+      destructiveHint: false,
       inputSchema: {
         type: "object",
         properties: {
@@ -5292,9 +5618,11 @@ function registerEarnTools() {
     },
     {
       name: "earn_set_lending_rate",
+      title: "Set Lending Rate",
       module: "earn.savings",
       description: "Set lending rate for Simple Earn. [CAUTION] Changes your lending rate preference.",
       isWrite: true,
+      idempotentHint: true,
       inputSchema: {
         type: "object",
         properties: {
@@ -5324,6 +5652,7 @@ function registerEarnTools() {
     },
     {
       name: "earn_get_lending_history",
+      title: "Get Lending History",
       module: "earn.savings",
       description: "Get personal lending records for Simple Earn (your own lending history). NOT for market rate queries. Returns your lending records with amount, rate, and earnings data.",
       isWrite: false,
@@ -5365,9 +5694,11 @@ function registerEarnTools() {
     },
     {
       name: "earn_fixed_purchase",
+      title: "Subscribe Fixed-Term Earn",
       module: "earn.savings",
-      description: "Purchase Simple Earn Fixed (\u5B9A\u671F) product, two-step flow. First call (confirm omitted or false): returns purchase preview with product details and risk warning. Preview offer fields: lendQuota = remaining quota (\u5269\u4F59\u989D\u5EA6), soldOut = whether product is sold out (lendQuota is 0). YOU MUST display the 'warning' field from the preview response to the user VERBATIM before asking for confirmation - do NOT omit or summarize it. Second call (confirm=true): executes the purchase. Only proceed after the user explicitly confirms. IMPORTANT: Orders in 'pending' (\u5339\u914D\u4E2D) state can still be cancelled via earn_fixed_redeem; once the status changes to 'earning' (\u8D5A\u5E01\u4E2D), funds are LOCKED until maturity - no early redemption allowed.",
+      description: "Purchase Simple Earn Fixed (\u5B9A\u671F) product, two-step flow. First call (confirm omitted or false): returns purchase preview with product details and risk warning. Preview offer fields: lendQuota = remaining quota, soldOut = whether product is sold out (lendQuota is 0). YOU MUST display the 'warning' field from the preview response to the user VERBATIM before asking for confirmation \u2014 do NOT omit or summarize it. Second call (confirm=true): executes the purchase. Only proceed after the user explicitly confirms. IMPORTANT: Orders in 'pending' (\u5339\u914D\u4E2D) state can still be cancelled via earn_fixed_redeem; once the status changes to 'earning' (\u8D5A\u5E01\u4E2D), funds are LOCKED until maturity - no early redemption allowed.",
       isWrite: true,
+      destructiveHint: false,
       inputSchema: {
         type: "object",
         properties: {
@@ -5439,9 +5770,11 @@ function registerEarnTools() {
     },
     {
       name: "earn_fixed_redeem",
+      title: "Redeem Fixed-Term Earn",
       module: "earn.savings",
       description: "Redeem Simple Earn Fixed (\u5B9A\u671F\u8D5A\u5E01) order. [CAUTION] Redeems a fixed-term lending order. Always redeems the full order amount. Only orders in 'pending' (\u5339\u914D\u4E2D) state can be redeemed - orders in 'earning' state are locked until maturity and cannot be redeemed early. Do NOT use for flexible earn redemption - use earn_savings_redeem instead.",
       isWrite: true,
+      destructiveHint: false,
       inputSchema: {
         type: "object",
         properties: {
@@ -5467,8 +5800,9 @@ function registerEarnTools() {
     },
     {
       name: "earn_get_lending_rate_history",
+      title: "Get Lending Rates & Offers",
       module: "earn.savings",
-      description: "Query Simple Earn lending rates and fixed-term offers. Use this tool when the user asks about Simple Earn products, current or historical lending rates, or when displaying savings balance with market rate context (\u5E02\u573A\u5747\u5229\u7387). Returns lending rate history (lendingRate field, newest-first) AND available fixed-term (\u5B9A\u671F) offers with APR, term, min amount, and quota - one call gives a complete view of both flexible and fixed options. In fixedOffers: lendQuota = remaining quota (\u5269\u4F59\u989D\u5EA6), soldOut = whether product is sold out (lendQuota is 0). To get current flexible APY: use limit=1 and read lendingRate.",
+      description: "Query Simple Earn lending rates and fixed-term offers. Use this tool when the user asks about Simple Earn products, current or historical lending rates, or when displaying savings balance with market rate context (\u5E02\u573A\u5747\u5229\u7387). Returns lending rate history (lendingRate field, newest-first) AND available fixed-term (\u5B9A\u671F) offers with APR, term, min amount, and quota \u2014 one call gives a complete view of both flexible and fixed options. In fixedOffers: lendQuota = remaining quota, soldOut = whether product is sold out (lendQuota is 0). For dedicated fixed-term product queries, use earn_get_fixed_earn_products. To get current flexible APY: use limit=1 and read lendingRate.",
       isWrite: false,
       inputSchema: {
         type: "object",
@@ -5527,6 +5861,37 @@ function registerEarnTools() {
           fixedOffers
         };
       }
+    },
+    {
+      name: "earn_get_fixed_earn_products",
+      title: "Get Fixed-Term Earn Products",
+      module: "earn.savings",
+      description: "Query available Simple Earn Fixed-term products. Returns fixed-term offers with APR, term, min investment, and remaining quota. Use to check available products and quota before purchasing. Do NOT use for querying your own orders \u2014 use earn_get_fixed_order_list instead. Do NOT use just for current flexible APY -- use earn_get_lending_rate_history with limit=1 instead.",
+      isWrite: false,
+      inputSchema: {
+        type: "object",
+        properties: {
+          ccy: {
+            type: "string",
+            description: "e.g. USDT. Omit for all currencies."
+          }
+        }
+      },
+      handler: async (rawArgs, context) => {
+        const args = asRecord(rawArgs);
+        const response = await context.client.privateGet(
+          "/api/v5/finance/simple-earn-fixed/offers",
+          compactObject({ ccy: readString(args, "ccy") }),
+          privateRateLimit("earn_get_fixed_earn_products", 2)
+        );
+        const result = normalizeResponse(response);
+        const allOffers = Array.isArray(result["data"]) ? result["data"] : [];
+        result["data"] = allOffers.map(({ borrowingOrderQuota: _, ...rest }) => ({
+          ...rest,
+          soldOut: rest["lendQuota"] === "0"
+        }));
+        return result;
+      }
     }
   ];
 }
@@ -5537,6 +5902,7 @@ function registerOnchainEarnTools() {
     // -------------------------------------------------------------------------
     {
       name: "onchain_earn_get_offers",
+      title: "On-chain Earn List Offers",
       module: "earn.onchain",
       description: "List staking/DeFi products with APY, terms, and limits. Always show protocol name (protocol field) and earnings currency (earningData[].ccy) when presenting results.",
       isWrite: false,
@@ -5576,9 +5942,11 @@ function registerOnchainEarnTools() {
     // -------------------------------------------------------------------------
     {
       name: "onchain_earn_purchase",
+      title: "On-chain Earn Subscribe",
       module: "earn.onchain",
       description: "Invest in a staking/DeFi product. [CAUTION] Moves real funds.",
       isWrite: true,
+      destructiveHint: false,
       inputSchema: {
         type: "object",
         properties: {
@@ -5629,9 +5997,11 @@ function registerOnchainEarnTools() {
     // -------------------------------------------------------------------------
     {
       name: "onchain_earn_redeem",
+      title: "On-chain Earn Redeem",
       module: "earn.onchain",
       description: "Redeem a staking/DeFi investment. [CAUTION] Some products have lock periods, early redemption may incur penalties.",
       isWrite: true,
+      destructiveHint: false,
       inputSchema: {
         type: "object",
         properties: {
@@ -5669,9 +6039,11 @@ function registerOnchainEarnTools() {
     // -------------------------------------------------------------------------
     {
       name: "onchain_earn_cancel",
+      title: "On-chain Earn Cancel Order",
       module: "earn.onchain",
       description: "Cancel a pending staking/DeFi purchase order. [CAUTION]",
       isWrite: true,
+      idempotentHint: true,
       inputSchema: {
         type: "object",
         properties: {
@@ -5704,6 +6076,7 @@ function registerOnchainEarnTools() {
     // -------------------------------------------------------------------------
     {
       name: "onchain_earn_get_active_orders",
+      title: "On-chain Earn Active Orders",
       module: "earn.onchain",
       description: "List current active staking/DeFi investments.",
       isWrite: false,
@@ -5748,6 +6121,7 @@ function registerOnchainEarnTools() {
     // -------------------------------------------------------------------------
     {
       name: "onchain_earn_get_order_history",
+      title: "On-chain Earn Order History",
       module: "earn.onchain",
       description: "List past staking/DeFi orders including redeemed ones.",
       isWrite: false,
@@ -5846,6 +6220,7 @@ function registerDcdTools() {
   return [
     {
       name: "dcd_get_currency_pairs",
+      title: "Dual Investment List Currency Pairs",
       module: "earn.dcd",
       description: "Get available DCD currency pairs.",
       isWrite: false,
@@ -5863,6 +6238,7 @@ function registerDcdTools() {
     },
     {
       name: "dcd_get_products",
+      title: "Dual Investment List Products",
       module: "earn.dcd",
       description: "Get DCD products with yield and quota info. Yields in response are decimal fractions, not percentages.",
       isWrite: false,
@@ -5893,6 +6269,7 @@ function registerDcdTools() {
     },
     {
       name: "dcd_get_order_state",
+      title: "Dual Investment Get Order State",
       module: "earn.dcd",
       description: "Check DCD order state after subscription (returns ordId + state only). For full order details (productId, strike, yield, settlement info), use dcd_get_orders instead.",
       isWrite: false,
@@ -5917,6 +6294,7 @@ function registerDcdTools() {
     },
     {
       name: "dcd_get_orders",
+      title: "Dual Investment Get Order History",
       module: "earn.dcd",
       description: "Get DCD order history. Yields in response are decimal fractions, not percentages.",
       isWrite: false,
@@ -5961,9 +6339,11 @@ function registerDcdTools() {
     },
     {
       name: "dcd_subscribe",
+      title: "Dual Investment Subscribe",
       module: "earn.dcd",
       description: "Subscribe to a DCD product: get quote and execute atomically. Confirm product, amount, and currency with user before calling. Optional minAnnualizedYield rejects the order if quote yield falls below threshold. Returns order result with quote snapshot (minAnnualizedYield is in percent; response yields are decimal fractions).",
       isWrite: true,
+      destructiveHint: false,
       inputSchema: {
         type: "object",
         properties: {
@@ -6046,9 +6426,11 @@ function registerDcdTools() {
     },
     {
       name: "dcd_redeem",
+      title: "Dual Investment Redeem",
       module: "earn.dcd",
       description: "Early redemption of a DCD order, two-step flow. First call (no quoteId): returns redemption quote for user confirmation. Second call (with quoteId): executes redemption. If the quote expired, auto-refreshes and executes; response includes autoRefreshedQuote: true.",
       isWrite: true,
+      destructiveHint: false,
       inputSchema: {
         type: "object",
         properties: {
@@ -6123,9 +6505,11 @@ function registerAutoEarnTools() {
   return [
     {
       name: "earn_auto_set",
+      title: "Set Auto-Earn Configuration",
       module: "earn.autoearn",
       description: "Enable or disable auto-earn for a currency. earnType='0' for auto-lend+stake (most currencies); earnType='1' for USDG earn (USDG, BUIDL). Use account_get_balance first: if autoLendStatus or autoStakingStatus != 'unsupported', use earnType='0'; for USDG/BUIDL use earnType='1'. [CAUTION] Cannot disable within 24h of enabling.",
       isWrite: true,
+      idempotentHint: true,
       inputSchema: {
         type: "object",
         properties: {
@@ -6175,6 +6559,7 @@ function registerFlashEarnTools() {
   return [
     {
       name: "earn_get_flash_earn_projects",
+      title: "Flash Earn List Projects",
       module: "earn.flash",
       description: "Get Flash Earn projects. Use this to browse upcoming or in-progress Flash Earn opportunities. Do NOT use for purchase or redeem actions - Flash Earn is query-only in this module.",
       isWrite: false,
@@ -6597,6 +6982,7 @@ function registerEventContractTools() {
     // -----------------------------------------------------------------------
     {
       name: "event_browse",
+      title: "Event Contracts Browse Active",
       module: "event",
       description: "Browse currently active (in-progress) event contracts. Call when user asks what event contracts are available to trade. Returns only in-progress contracts (floorStrike set). If a live quote field px is present, it is the event contract price (0.01-0.99), not the underlying asset price; it reflects the market-implied probability when actively trading. Grouped by settlement type and underlying. Do NOT use for querying contracts within a specific series - use event_get_markets with seriesId instead.",
       isWrite: false,
@@ -6637,6 +7023,7 @@ function registerEventContractTools() {
     },
     {
       name: "event_get_series",
+      title: "Event Contracts List Series",
       module: "event",
       description: "List event contract series. Returns all available series with settlement type and underlying. Use event_browse to see currently active contracts.",
       isWrite: false,
@@ -6661,6 +7048,7 @@ function registerEventContractTools() {
     },
     {
       name: "event_get_events",
+      title: "Event Contracts List Events",
       module: "event",
       description: "List expiry periods within a series. state: preopen|live|settling|expired. expTime is pre-formatted UTC+8.",
       isWrite: false,
@@ -6716,6 +7104,7 @@ function registerEventContractTools() {
     },
     {
       name: "event_get_markets",
+      title: "Event Contracts List Markets",
       module: "event",
       description: "List tradeable contracts within a series. state=live for active contracts, state=expired for settlement results. floorStrike=strike price; px (when present) is the event contract price (0.01-0.99), not the underlying asset price - reflects the market-implied probability when actively trading; outcome pre-translated (pending/YES/NO/UP/DOWN); timestamps UTC+8. Do NOT use for discovering what series are available across all underlyings - use event_browse instead.",
       isWrite: false,
@@ -6797,6 +7186,7 @@ function registerEventContractTools() {
     },
     {
       name: "event_get_orders",
+      title: "Event Contracts Get Orders",
       module: "event",
       description: "Query event contract orders (open, 7d history, or 3-month archive). outcome pre-translated (YES/NO/UP/DOWN). Do NOT use for trade executions - use event_get_fills for fill records and settlement outcomes.",
       isWrite: false,
@@ -6855,6 +7245,7 @@ function registerEventContractTools() {
     },
     {
       name: "event_get_fills",
+      title: "Event Contracts Get Fills",
       module: "event",
       description: "Get event contract fill history (trade executions and settlement payouts). archive=true for up to 3mo, false (default) for last 3d. outcome pre-translated (YES/NO/UP/DOWN). Each record includes a 'type' field: 'fill' (opening trade) or 'settlement' (expiry payout with settlementResult win/loss and pnl). Do NOT use for order status - use event_get_orders instead.",
       isWrite: false,
@@ -6902,6 +7293,8 @@ function registerEventContractTools() {
     // -----------------------------------------------------------------------
     {
       name: "event_place_order",
+      title: "Event Contracts Place Order",
+      destructiveHint: false,
       module: "event",
       description: `Place an event contract order. [CAUTION] Places a real order. Before placing, call event_get_markets(seriesId, state=live) to obtain the instId of the target contract.
 - outcome: UP/YES (bet price goes up/condition met) or DOWN/NO (bet price goes down/condition not met)
@@ -6977,6 +7370,8 @@ function registerEventContractTools() {
     },
     {
       name: "event_amend_order",
+      title: "Event Contracts Amend Order",
+      idempotentHint: true,
       module: "event",
       description: "Amend a pending event contract order (change price or size). [CAUTION] Modifies a real order. Before amending, call event_get_orders(status=open) to obtain the ordId and confirm the order is still pending. Only limit/post_only orders can be amended.",
       isWrite: true,
@@ -7008,6 +7403,8 @@ function registerEventContractTools() {
     },
     {
       name: "event_cancel_order",
+      title: "Event Contracts Cancel Order",
+      idempotentHint: true,
       module: "event",
       description: "Cancel a pending event contract order. [CAUTION] Cancels a real order. Before cancelling, call event_get_orders(status=open) to obtain the ordId and confirm the order is still pending. instId must be the full event contract instrument ID (e.g. BTC-ABOVE-DAILY-260224-1600-69700), NOT a spot trading pair.",
       isWrite: true,
@@ -7416,6 +7813,7 @@ function registerSmartmoneyTools() {
     /* ---------- T1. Top traders (leaderboard rank) ---------- */
     {
       name: "smartmoney_get_traders_by_filter",
+      title: "Smart Money Leaderboard",
       module: "smartmoney",
       description: "Leaderboard ranking of OKX smart-money traders, filtered by pool conditions and ranked by `sortBy`. Use when: discovering top performers by criteria (PnL / win-rate / drawdown / AUM). See also: `smartmoney_get_performance_by_trader` (lookup by ID), `smartmoney_search_trader` (lookup by nickname). Note: `updateTime` is 12-digit `yyyyMMddHHmm` UTC+8, different from signal tools' 10-digit UTC `asOfTime`/`dataVersion` - do not cross-pass.",
       isWrite: false,
@@ -7482,6 +7880,7 @@ function registerSmartmoneyTools() {
     /* ---------- T2. Trader performance (by authorIds) ---------- */
     {
       name: "smartmoney_get_performance_by_trader",
+      title: "Smart Money Trader Performance",
       module: "smartmoney",
       description: "PnL / win-rate / drawdown profile for one or more traders looked up by `authorIds`. Use when: caller already has trader IDs and needs their performance metrics. See also: `smartmoney_search_trader` (resolve nickname -> authorId), `smartmoney_get_traders_by_filter` (criteria-based discovery). Note: response `updateTime` is 12-digit `yyyyMMddHHmm` UTC+8 - do not pass to signal-side tools' `asOfTime` (10-digit UTC).",
       isWrite: false,
@@ -7552,6 +7951,7 @@ function registerSmartmoneyTools() {
     /* ---------- T3. Trader current positions ---------- */
     {
       name: "smartmoney_get_trader_positions",
+      title: "Smart Money Trader Current Positions",
       module: "smartmoney",
       description: "Currently-open positions held by a single trader (direction, size, leverage, entry, conviction). Use when: inspecting what a top trader is holding RIGHT NOW. See also: `smartmoney_get_trader_positions_history` (closed positions), `smartmoney_search_trader` (nickname -> authorId), `smartmoney_get_traders_by_filter` (discover trader).",
       isWrite: false,
@@ -7633,6 +8033,7 @@ function registerSmartmoneyTools() {
     /* ---------- T4. Trader closed-position history ---------- */
     {
       name: "smartmoney_get_trader_positions_history",
+      title: "Smart Money Trader Position History",
       module: "smartmoney",
       description: "Closed-position history of a single trader, paginated by `posId` cursor. Use when: studying realized PnL pattern, holding duration, win/loss streaks, or how positions ended (closed vs liquidated). See also: `smartmoney_get_trader_positions` (currently-open), `smartmoney_search_trader` (nickname -> authorId), `smartmoney_get_traders_by_filter` (discover trader).",
       isWrite: false,
@@ -7770,6 +8171,7 @@ function registerSmartmoneyTools() {
     /* ---------- T5. Trader order history ---------- */
     {
       name: "smartmoney_get_trader_orders_history",
+      title: "Smart Money Trader Order History",
       module: "smartmoney",
       description: "Recent orders/fills placed by a single trader (direction, size, price, leverage), paginated by `ordId` cursor. Aligned with the cross-module `*_get_orders` family. Use when: tracking a top trader's latest trade activity. See also: `smartmoney_search_trader` (nickname -> authorId), `smartmoney_get_traders_by_filter` (discover trader).",
       isWrite: false,
@@ -7888,6 +8290,7 @@ function registerSmartmoneyTools() {
     /* ---------- T6. Search top traders by nickname keyword ---------- */
     {
       name: "smartmoney_search_trader",
+      title: "Search Smart Money Top Traders",
       module: "smartmoney",
       description: "Search Top Traders by nickname keyword, ranked by OKX-platform follower count DESC. Returns up to 10 matches; intersects KOL full-text recall with the Top Trader set. Use when: resolving a nickname or partial name to `authorId`(s) before calling other `smartmoney_get_trader_*` tools. See also: `smartmoney_get_traders_by_filter` (discover top performers by criteria), `smartmoney_get_performance_by_trader` (lookup by known authorId).",
       isWrite: false,
@@ -7938,6 +8341,7 @@ function registerSmartmoneyTools() {
     /* ---------- S1. Signal overview by filter (multi-asset, tier-filtered pool) ---------- */
     {
       name: "smartmoney_get_signal_overview_by_filter",
+      title: "Smart Money Consensus Signals by Filter",
       module: "smartmoney",
       description: "Multi-asset smart-money consensus signals (long/short ratio, weighted entry, capital flow, deltas vs 1h/24h/7d), aggregated over a tier-filtered trader pool (PnL / win-rate / drawdown / AUM). Pick instruments via `topInstruments` OR `instCcyList` - exactly one. Snapshot time auto-resolved to current hour. **Linear (USDT/USDS-margined) contracts only - coin-margined (`-USD-SWAP` / `-USD-DELIVERY`) positions are excluded by upstream and silently omitted from the aggregation.** Use when: latest cross-asset consensus from a criteria-defined pool. See also: `smartmoney_get_signal_overview_by_trader` (restrict pool to specific traders), `smartmoney_get_signal_trend_by_filter` (time-series instead of latest snapshot).",
       isWrite: false,
@@ -7998,6 +8402,7 @@ function registerSmartmoneyTools() {
     /* ---------- S2. Signal overview by trader (multi-asset, authorIds-restricted) ---------- */
     {
       name: "smartmoney_get_signal_overview_by_trader",
+      title: "Smart Money Consensus Signals by Trader",
       module: "smartmoney",
       description: "Multi-asset smart-money signals aggregated over a hand-picked set of traders (`authorIds`). Pick instruments via `topInstruments` OR `instCcyList`. Capability tier filters (pnlTier / winRateTier / etc.) not exposed - backend uses defaults for direct-lookup scenarios. **Linear (USDT/USDS-margined) contracts only - a trader's coin-margined (`-USD-SWAP` / `-USD-DELIVERY`) positions are silently excluded from the aggregation, even when those positions are large.** Use `smartmoney_get_trader_positions` if the full position book is needed. Use when: caller already knows which traders to follow and wants their cross-asset consensus at the latest hour. See also: `smartmoney_get_signal_overview_by_filter` (criteria-defined pool), `smartmoney_get_signal_trend_by_trader` (time-series), `smartmoney_get_traders_by_filter` / `smartmoney_search_trader` (discover authorIds).",
       isWrite: false,
@@ -8080,6 +8485,7 @@ function registerSmartmoneyTools() {
     /* ---------- S3. Signal trend by filter (single-asset, tier-filtered pool, asOfTime anchor) ---------- */
     {
       name: "smartmoney_get_signal_trend_by_filter",
+      title: "Smart Money Signal Trend by Filter",
       module: "smartmoney",
       description: "Time-series of single-asset smart-money signal across hourly/daily buckets, aggregated over a tier-filtered trader pool. Returns the latest `limit` buckets ending at `asOfTime` (defaults to current UTC hour). **Linear (USDT/USDS-margined) contracts only - coin-margined (`-USD-SWAP` / `-USD-DELIVERY`) positions are excluded by upstream and silently omitted.** Use when: tracking how long/short conviction and capital evolve over time (smart money adding exposure or retreating). See also: `smartmoney_get_signal_overview_by_filter` (latest snapshot only), `smartmoney_get_signal_trend_by_trader` (restrict to specific traders). Note: `asOfTime` is 10-digit `yyyyMMddHH` UTC, different from leaderboard tools' 12-digit UTC+8 `updateTime` - do not cross-pass.",
       isWrite: false,
@@ -8152,6 +8558,7 @@ function registerSmartmoneyTools() {
     /* ---------- S4. Signal trend by trader (single-asset, authorIds-restricted) ---------- */
     {
       name: "smartmoney_get_signal_trend_by_trader",
+      title: "Smart Money Signal Trend by Trader",
       module: "smartmoney",
       description: "Time-series of single-asset smart-money signal aggregated over a hand-picked set of traders (`authorIds`). Returns the latest `limit` buckets ending at `asOfTime` (defaults to current UTC hour). Capability tier filters (pnlTier / winRateTier / etc.) not exposed - backend uses defaults for direct-lookup scenarios. **Linear (USDT/USDS-margined) contracts only - a trader's coin-margined (`-USD-SWAP` / `-USD-DELIVERY`) positions on the requested base ccy are silently excluded from each bucket.** Use `smartmoney_get_trader_positions` to inspect the full position book. Use when: tracking how a specific group of traders has evolved their long/short consensus over time on one coin. See also: `smartmoney_get_signal_trend_by_filter` (criteria-defined pool), `smartmoney_get_signal_overview_by_trader` (latest snapshot only), `smartmoney_get_traders_by_filter` / `smartmoney_search_trader` (discover authorIds). Note: `asOfTime` is 10-digit `yyyyMMddHH` UTC, different from leaderboard tools' 12-digit UTC+8 `updateTime` - do not cross-pass.",
       isWrite: false,
@@ -8246,7 +8653,7 @@ function registerSmartmoneyTools() {
   return tools;
 }
 function buildContractTradeTools(cfg) {
-  const { prefix, module, label, instTypes, instIdExample } = cfg;
+  const { prefix, module, label, instTypes, instIdExample, titleLabel } = cfg;
   const [defaultType, otherType] = instTypes;
   const instTypeDesc = `${defaultType} (default) or ${otherType}`;
   const n = (suffix) => `${prefix}_${suffix}`;
@@ -8254,6 +8661,8 @@ function buildContractTradeTools(cfg) {
     // ── place_order ──────────────────────────────────────────────────────────
     {
       name: n("place_order"),
+      title: `${titleLabel} Place Order`,
+      destructiveHint: false,
       module,
       description: `Place ${label} order. Attach TP/SL via tpTriggerPx/slTriggerPx. Before placing, use market_get_instruments to get ctVal (contract face value) - do NOT assume contract sizes. [CAUTION] Executes real trades.`,
       isWrite: true,
@@ -8350,6 +8759,8 @@ function buildContractTradeTools(cfg) {
     // ── cancel_order ─────────────────────────────────────────────────────────
     {
       name: n("cancel_order"),
+      title: `${titleLabel} Cancel Order`,
+      idempotentHint: true,
       module,
       description: `Cancel an unfilled ${label} order.`,
       isWrite: true,
@@ -8379,6 +8790,7 @@ function buildContractTradeTools(cfg) {
     // ── get_order ─────────────────────────────────────────────────────────────
     {
       name: n("get_order"),
+      title: `${titleLabel} Get Order`,
       module,
       description: `Get details of a single ${label} order by ordId or clOrdId.`,
       isWrite: false,
@@ -8408,6 +8820,7 @@ function buildContractTradeTools(cfg) {
     // ── get_orders ───────────────────────────────────────────────────────────
     {
       name: n("get_orders"),
+      title: `${titleLabel} Get Orders`,
       module,
       description: `Query ${label} open orders, history (last 7 days), or archive (up to 3 months).`,
       isWrite: false,
@@ -8466,6 +8879,7 @@ function buildContractTradeTools(cfg) {
     // ── get_positions ────────────────────────────────────────────────────────
     {
       name: n("get_positions"),
+      title: `${titleLabel} Get Positions`,
       module,
       description: `Get current ${label} positions.`,
       isWrite: false,
@@ -8500,6 +8914,7 @@ function buildContractTradeTools(cfg) {
     // ── get_fills ────────────────────────────────────────────────────────────
     {
       name: n("get_fills"),
+      title: `${titleLabel} Get Fills`,
       module,
       description: `Get ${label} fill details. archive=false (default): last 3 days; archive=true: up to 3 months.`,
       isWrite: false,
@@ -8550,6 +8965,8 @@ function buildContractTradeTools(cfg) {
     // ── close_position ───────────────────────────────────────────────────────
     {
       name: n("close_position"),
+      title: `${titleLabel} Close Position`,
+      idempotentHint: true,
       module,
       description: `[CAUTION] Close entire ${label} position at market.`,
       isWrite: true,
@@ -8592,6 +9009,8 @@ function buildContractTradeTools(cfg) {
     // ── set_leverage ─────────────────────────────────────────────────────────
     {
       name: n("set_leverage"),
+      title: `${titleLabel} Set Leverage`,
+      idempotentHint: true,
       module,
       description: `Set leverage for a ${label} instrument or position. [CAUTION] Changes risk parameters.
 Scenarios (SWAP/FUTURES only):
@@ -8654,6 +9073,7 @@ Not supported: PORTFOLIO MARGIN accounts cannot adjust cross leverage for SWAP/F
     // ── get_leverage ─────────────────────────────────────────────────────────
     {
       name: n("get_leverage"),
+      title: `${titleLabel} Get Leverage`,
       module,
       description: `Get current leverage for a ${label} instrument.`,
       isWrite: false,
@@ -8681,6 +9101,8 @@ Not supported: PORTFOLIO MARGIN accounts cannot adjust cross leverage for SWAP/F
     // ── batch_amend ──────────────────────────────────────────────────────────
     {
       name: n("batch_amend"),
+      title: `${titleLabel} Batch Amend Orders`,
+      idempotentHint: true,
       module,
       description: `[CAUTION] Batch amend up to 20 unfilled ${label} orders.`,
       isWrite: true,
@@ -8712,6 +9134,8 @@ Not supported: PORTFOLIO MARGIN accounts cannot adjust cross leverage for SWAP/F
     // ── batch_cancel ─────────────────────────────────────────────────────────
     {
       name: n("batch_cancel"),
+      title: `${titleLabel} Batch Cancel Orders`,
+      idempotentHint: true,
       module,
       description: `[CAUTION] Batch cancel up to 20 ${label} orders.`,
       isWrite: true,
@@ -8747,6 +9171,7 @@ function registerFuturesTools() {
     prefix: "futures",
     module: "futures",
     label: "FUTURES delivery",
+    titleLabel: "Futures",
     instTypes: ["FUTURES", "SWAP"],
     instIdExample: "e.g. BTC-USDT-240329"
   });
@@ -8756,6 +9181,8 @@ function registerFuturesTools() {
     // Unique to futures: amend a regular (non-algo) unfilled order.
     {
       name: "futures_amend_order",
+      title: "Futures Amend Order",
+      idempotentHint: true,
       module: "futures",
       description: "Amend an unfilled FUTURES delivery order (modify price and/or size). To modify attached TP/SL, use futures_amend_algo_order with the algoId from futures_get_algo_orders.",
       isWrite: true,
@@ -8790,6 +9217,8 @@ function registerFuturesTools() {
     // Unique to futures: batch place only (no cancel/amend action dispatch).
     {
       name: "futures_batch_orders",
+      title: "Futures Batch Place Orders",
+      destructiveHint: false,
       module: "futures",
       description: "[CAUTION] Batch place up to 20 FUTURES delivery orders.",
       isWrite: true,
@@ -8849,6 +9278,7 @@ function registerMarketTools() {
   return [
     {
       name: "market_get_ticker",
+      title: "Get Ticker",
       module: "market",
       description: "Get ticker data for a single instrument.",
       isWrite: false,
@@ -8876,6 +9306,7 @@ function registerMarketTools() {
     },
     {
       name: "market_get_tickers",
+      title: "Get All Tickers",
       module: "market",
       description: "Get ticker data for all instruments of a given type.",
       isWrite: false,
@@ -8915,6 +9346,7 @@ function registerMarketTools() {
     },
     {
       name: "market_get_orderbook",
+      title: "Get Order Book",
       module: "market",
       description: "Get the order book (bids/asks) for an instrument.",
       isWrite: false,
@@ -8949,6 +9381,7 @@ function registerMarketTools() {
     },
     {
       name: "market_get_candles",
+      title: "Get Candlesticks",
       module: "market",
       description: "Get candlestick (OHLCV) data for an instrument. Automatically retrieves historical data (back to 2021) when requesting older time ranges. Use the `after` parameter to paginate back in time (the old `history` parameter has been removed). IMPORTANT: Before fetching with `after`/`before`, estimate the number of candles: time_range_ms / bar_interval_ms. If the estimate exceeds ~500 candles, inform the user of the estimated count and ask for confirmation before proceeding.",
       isWrite: false,
@@ -9005,6 +9438,7 @@ function registerMarketTools() {
     },
     {
       name: "market_get_instruments",
+      title: "List Instruments",
       module: "market",
       description: "Get tradable instruments for a given type. Returns contract specs: min order size, lot size, tick size, contract value, settlement currency, listing/expiry time. Essential before placing orders.",
       isWrite: false,
@@ -9049,6 +9483,7 @@ function registerMarketTools() {
     },
     {
       name: "market_get_funding_rate",
+      title: "Get Funding Rate",
       module: "market",
       description: "Get funding rate for a perpetual SWAP instrument. IMPORTANT: instId must end with -SWAP (e.g. BTC-USDT-SWAP). Spot IDs like BTC-USDT are NOT valid. history=false (default): current rate + next estimated rate; history=true: historical rates.",
       isWrite: false,
@@ -9110,6 +9545,7 @@ function registerMarketTools() {
     },
     {
       name: "market_get_mark_price",
+      title: "Get Mark Price",
       module: "market",
       description: "Get mark price for SWAP, FUTURES, or MARGIN instruments. Used for liquidation calculations and unrealized PnL.",
       isWrite: false,
@@ -9153,6 +9589,7 @@ function registerMarketTools() {
     },
     {
       name: "market_get_trades",
+      title: "Get Recent Trades",
       module: "market",
       description: "Get recent trades for an instrument. Default 20 records, max 500.",
       isWrite: false,
@@ -9187,6 +9624,7 @@ function registerMarketTools() {
     },
     {
       name: "market_get_index_ticker",
+      title: "Get Index Ticker",
       module: "market",
       description: "Get index ticker data (e.g. BTC-USD, ETH-USD index prices). Independent of any single exchange.",
       isWrite: false,
@@ -9220,6 +9658,7 @@ function registerMarketTools() {
     },
     {
       name: "market_get_index_candles",
+      title: "Get Index Candlesticks",
       module: "market",
       description: "Get candlestick data for an index (e.g. BTC-USD index). history=false: recent up to 1440 bars; history=true: older data.",
       isWrite: false,
@@ -9276,6 +9715,7 @@ function registerMarketTools() {
     },
     {
       name: "market_get_price_limit",
+      title: "Get Price Limit",
       module: "market",
       description: "Get the current price limit (upper and lower bands) for a SWAP or FUTURES instrument. Orders outside these limits will be rejected.",
       isWrite: false,
@@ -9303,6 +9743,7 @@ function registerMarketTools() {
     },
     {
       name: "market_get_open_interest",
+      title: "Get Open Interest",
       module: "market",
       description: "Get open interest for SWAP, FUTURES, or OPTION instruments. Useful for gauging market sentiment and positioning.",
       isWrite: false,
@@ -9346,6 +9787,7 @@ function registerMarketTools() {
     },
     {
       name: "market_get_stock_tokens",
+      title: "List Stock Tokens",
       module: "market",
       description: '[Deprecated: use market_get_instruments_by_category with instCategory="3" instead] Get all stock token instruments (instCategory=3). Stock tokens track real-world stock prices on OKX (e.g. AAPL-USDT-SWAP).',
       isWrite: false,
@@ -9382,6 +9824,7 @@ function registerMarketTools() {
     },
     {
       name: "market_get_instruments_by_category",
+      title: "List Instruments by Category",
       module: "market",
       description: "Discover tradeable instruments by asset category. Stock tokens (instCategory=3, e.g. AAPL-USDT-SWAP, TSLA-USDT-SWAP), Metals (4, e.g. XAUUSDT-USDT-SWAP for gold), Commodities (5, e.g. OIL-USDT-SWAP for crude oil), Forex (6, e.g. EURUSDT-USDT-SWAP for EUR/USD), Bonds (7, e.g. US30Y-USDT-SWAP for crude oil). Use this to find instIds before querying prices or placing orders. Filters client-side by instCategory.",
       isWrite: false,
@@ -9432,6 +9875,7 @@ function registerMarketFilterTools() {
     // ─────────────────────────────────────────────────────────────────────────
     {
       name: "market_filter",
+      title: "Screen Instruments",
       module: "market",
       description: "Screen / rank instruments across SPOT, SWAP, or FUTURES by multi-dimensional criteria: price range, 24h change %, market cap, 24h volume (USD), funding rate (SWAP), open interest (USD), listing time. Returns ranked rows with full ticker snapshot. Use to find top movers, high-OI contracts, newly listed tokens, etc. No credentials required. Do NOT use to get OI change rankings across contracts - use market_filter_oi_change instead. Do NOT use to get OI time series for a single instrument - use market_get_oi_history instead.",
       isWrite: false,
@@ -9569,6 +10013,7 @@ function registerMarketFilterTools() {
     // ─────────────────────────────────────────────────────────────────────────
     {
       name: "market_get_oi_history",
+      title: "Get Open Interest History",
       module: "market",
       description: "Get open interest (OI) history time series for a single SWAP or FUTURES instrument. Returns per-bar OI in contracts, base currency and USD, plus bar-over-bar delta and delta %. Useful for tracking how OI evolves around price moves. No credentials required. Do NOT use to compare OI changes across multiple contracts - use market_filter_oi_change instead. Do NOT use to screen instruments by current OI level - use market_filter instead.",
       isWrite: false,
@@ -9616,6 +10061,7 @@ function registerMarketFilterTools() {
     // ─────────────────────────────────────────────────────────────────────────
     {
       name: "market_filter_oi_change",
+      title: "Find Open Interest Change Instruments",
       module: "market",
       description: "Find SWAP or FUTURES instruments with significant open interest changes over a given bar window. Returns ranked rows with current OI (USD), previous OI (USD), OI delta (USD and %), price change %, 24h volume and funding rate. Ideal for spotting unusual accumulation/distribution or confirming trend momentum. No credentials required. Do NOT use to get OI time series for a single instrument - use market_get_oi_history instead. Do NOT use to screen by current OI absolute level or other non-OI metrics - use market_filter instead.",
       isWrite: false,
@@ -9688,6 +10134,7 @@ function registerMarketFilterTools() {
     // ─────────────────────────────────────────────────────────────────────────
     {
       name: "market_get_pair_spread",
+      title: "Get Pair Spread",
       module: "market",
       description: "Compute spread statistics between two instruments over a lookback window. Returns absolute and ratio spread (mean / stdDev / median / min / max) plus an optional realtime spread snapshot. Use to size pairs trades, detect mean-reversion setups, or compare cross-listed contracts. Results are cached ~60s per (pair, bar, window) tuple. Read-only, no credentials required.\nDo NOT use to fetch raw candles (use market_get_candles) or single-instrument OI/funding (use market_get_oi_history / market_filter_oi_change).",
       isWrite: false,
@@ -9980,6 +10427,7 @@ function registerNewsTools() {
     // -----------------------------------------------------------------------
     {
       name: "news_get_latest",
+      title: "Get Latest Crypto News",
       module: "news",
       description: "Get crypto news sorted by time. For broad browsing ('what happened recently', 'latest news', 'any big news today'), pass importance='low' to include both high and low importance. Server default (when importance omitted) returns only high-importance news. For coin-specific news, use news_get_by_coin instead.",
       isWrite: false,
@@ -10025,6 +10473,7 @@ function registerNewsTools() {
     },
     {
       name: "news_get_by_coin",
+      title: "Get News by Coin",
       module: "news",
       description: "Get news for specific coins or tokens. Use when user mentions a coin: 'BTC news', 'any SOL updates'. Supports multiple coins (comma-separated). For general browsing without a coin filter, use news_get_latest.",
       isWrite: false,
@@ -10068,6 +10517,7 @@ function registerNewsTools() {
     },
     {
       name: "news_search",
+      title: "Search News",
       module: "news",
       description: "Search crypto news by keyword with optional filters. Use when user provides specific search terms: 'SEC ETF news', 'stablecoin regulation'. Keyword is optional - pass sentiment alone to browse by sentiment direction. For coin-only queries prefer news_get_by_coin.",
       isWrite: false,
@@ -10125,6 +10575,7 @@ function registerNewsTools() {
     },
     {
       name: "news_get_detail",
+      title: "Get News Article",
       module: "news",
       description: "Get full article content by news ID (returns title + summary + full original text). Use when user says 'show full article', 'read more', or provides a specific news ID from a previous result.",
       isWrite: false,
@@ -10156,6 +10607,7 @@ function registerNewsTools() {
     },
     {
       name: "news_get_domains",
+      title: "List News Sources",
       module: "news",
       description: "List available news source domains (e.g. coindesk, cointelegraph). Use when user asks what news sources are available or which platforms are covered.",
       isWrite: false,
@@ -10178,6 +10630,7 @@ function registerNewsTools() {
     // -----------------------------------------------------------------------
     {
       name: "news_get_coin_sentiment",
+      title: "Get Coin Sentiment",
       module: "news",
       description: "Get sentiment snapshot or time-series trend for coins. Returns bullish/bearish ratios and mention counts. Pass trendPoints for trend data (1h->24 points, 4h->6, 24h->7). Use when user asks about coin sentiment, sentiment trend, or how bullish/bearish a coin is. For ranking all coins by sentiment, use news_get_sentiment_ranking instead.",
       isWrite: false,
@@ -10219,6 +10672,7 @@ function registerNewsTools() {
     },
     {
       name: "news_get_sentiment_ranking",
+      title: "Get Sentiment Ranking",
       module: "news",
       description: "Get coin ranking by social hotness or sentiment direction. Use when user asks which coins are trending, most bullish/bearish coins. Sort by hot (mention count), bullish, or bearish. For sentiment data on a specific coin, use news_get_coin_sentiment instead.",
       isWrite: false,
@@ -10258,6 +10712,7 @@ function registerNewsTools() {
     // -----------------------------------------------------------------------
     {
       name: "news_list_calendar_regions",
+      title: "List Calendar Regions",
       module: "news",
       description: "List all valid region values for the economic calendar. Returns a string array of snake_case region codes. Call this when economic-calendar returns empty results to verify the region value, or to help the user pick a valid region. Do NOT use to list news source platforms - use news_get_domains instead.",
       isWrite: false,
@@ -10266,6 +10721,7 @@ function registerNewsTools() {
     },
     {
       name: "news_get_economic_calendar",
+      title: "Get Economic Calendar",
       module: "news",
       description: "Get macro-economic calendar data (GDP, CPI, NFP, interest rate decisions, PMI, etc.). Returns scheduled and released economic events with forecast, previous, and actual values. Use when user asks about economic calendar, macro data, or specific indicators like NFP/CPI/GDP/FOMC. Do NOT use for news articles or sentiment - use news_get_latest or news_search instead.",
       isWrite: false,
@@ -10326,6 +10782,8 @@ function registerOptionAlgoTools() {
   return [
     {
       name: "option_place_algo_order",
+      title: "Option Place Algo Order",
+      destructiveHint: false,
       module: "option",
       description: "Place OPTION TP/SL algo order (conditional/oco). [CAUTION] Executes real trades. conditional=single TP/SL; oco=TP+SL pair. -1=market.",
       isWrite: true,
@@ -10432,6 +10890,8 @@ function registerOptionAlgoTools() {
     },
     {
       name: "option_amend_algo_order",
+      title: "Option Amend Algo Order",
+      idempotentHint: true,
       module: "option",
       description: "Amend a pending OPTION algo order (modify TP/SL prices or size). Also covers TP/SL orders attached when placing the main order - look up algoId via option_get_algo_orders first.",
       isWrite: true,
@@ -10468,6 +10928,8 @@ function registerOptionAlgoTools() {
     },
     {
       name: "option_cancel_algo_orders",
+      title: "Option Cancel Algo Orders",
+      idempotentHint: true,
       module: "option",
       description: "Cancel OPTION algo orders (TP/SL). Each item: {algoId, instId}.",
       isWrite: true,
@@ -10511,6 +10973,7 @@ function registerOptionAlgoTools() {
     },
     {
       name: "option_get_algo_orders",
+      title: "Option Get Algo Orders",
       module: "option",
       description: "Query pending or completed OPTION algo orders (TP/SL, OCO).",
       isWrite: false,
@@ -10595,6 +11058,8 @@ function registerOptionTools() {
   return [
     {
       name: "option_place_order",
+      title: "Option Place Order",
+      destructiveHint: false,
       module: "option",
       description: "Place OPTION order. instId: {uly}-{expiry}-{strike}-C/P, e.g. BTC-USD-241227-50000-C. Before placing, use market_get_instruments to get ctVal (contract face value) - do NOT assume contract sizes. [CAUTION] Executes real trades.",
       isWrite: true,
@@ -10698,6 +11163,8 @@ function registerOptionTools() {
     },
     {
       name: "option_cancel_order",
+      title: "Option Cancel Order",
+      idempotentHint: true,
       module: "option",
       description: "Cancel an unfilled OPTION order. Provide ordId or clOrdId.",
       isWrite: true,
@@ -10726,6 +11193,8 @@ function registerOptionTools() {
     },
     {
       name: "option_batch_cancel",
+      title: "Option Batch Cancel Orders",
+      idempotentHint: true,
       module: "option",
       description: "[CAUTION] Batch cancel up to 20 OPTION orders.",
       isWrite: true,
@@ -10756,6 +11225,8 @@ function registerOptionTools() {
     },
     {
       name: "option_amend_order",
+      title: "Option Amend Order",
+      idempotentHint: true,
       module: "option",
       description: "Amend an unfilled OPTION order (price and/or size). Provide ordId or clOrdId. To modify attached TP/SL, use option_amend_algo_order with the algoId from option_get_algo_orders.",
       isWrite: true,
@@ -10788,6 +11259,7 @@ function registerOptionTools() {
     },
     {
       name: "option_get_order",
+      title: "Option Get Order",
       module: "option",
       description: "Get details of a single OPTION order by ordId or clOrdId.",
       isWrite: false,
@@ -10816,6 +11288,7 @@ function registerOptionTools() {
     },
     {
       name: "option_get_orders",
+      title: "Option Get Orders",
       module: "option",
       description: "List OPTION orders. status: live=pending (default), history=7d, archive=3mo.",
       isWrite: false,
@@ -10870,6 +11343,7 @@ function registerOptionTools() {
     },
     {
       name: "option_get_positions",
+      title: "Option Get Positions with Greeks",
       module: "option",
       description: "Get current OPTION positions including Greeks (delta, gamma, theta, vega).",
       isWrite: false,
@@ -10896,6 +11370,7 @@ function registerOptionTools() {
     },
     {
       name: "option_get_fills",
+      title: "Option Get Fills",
       module: "option",
       description: "Get OPTION fill history. archive=false: last 3 days (default); archive=true: up to 3 months.",
       isWrite: false,
@@ -10938,6 +11413,7 @@ function registerOptionTools() {
     },
     {
       name: "option_get_instruments",
+      title: "Option List Instruments (Chain)",
       module: "option",
       description: "List available OPTION contracts for a given underlying (option chain). Use to find valid instIds before placing orders.",
       isWrite: false,
@@ -10971,6 +11447,7 @@ function registerOptionTools() {
     },
     {
       name: "option_get_greeks",
+      title: "Option Get Greeks",
       module: "option",
       description: "Get implied volatility and Greeks (delta, gamma, theta, vega) for OPTION contracts by underlying.",
       isWrite: false,
@@ -11007,6 +11484,8 @@ function registerSpotTradeTools() {
   return [
     {
       name: "spot_place_order",
+      title: "Spot Place Order",
+      destructiveHint: false,
       module: "spot",
       description: "Place a spot order. Attach TP/SL via tpTriggerPx/slTriggerPx. [CAUTION] Executes real trades.",
       isWrite: true,
@@ -11101,6 +11580,8 @@ function registerSpotTradeTools() {
     },
     {
       name: "spot_cancel_order",
+      title: "Spot Cancel Order",
+      idempotentHint: true,
       module: "spot",
       description: "Cancel an unfilled spot order.",
       isWrite: true,
@@ -11136,6 +11617,8 @@ function registerSpotTradeTools() {
     },
     {
       name: "spot_amend_order",
+      title: "Spot Amend Order",
+      idempotentHint: true,
       module: "spot",
       description: "Amend an unfilled spot order (modify price or size). To modify attached TP/SL, use the corresponding algo amend tool: spot_amend_algo_order (spot), swap_amend_algo_order (swap), futures_amend_algo_order (futures), option_amend_algo_order (option). Use spot_get_algo_orders to find the algoId for spot orders.",
       isWrite: true,
@@ -11186,6 +11669,7 @@ function registerSpotTradeTools() {
     },
     {
       name: "spot_get_orders",
+      title: "Spot Get Orders",
       module: "spot",
       description: "Query spot orders. status: open(active)|history(7d)|archive(3mo).",
       isWrite: false,
@@ -11254,6 +11738,8 @@ function registerSpotTradeTools() {
     },
     {
       name: "spot_place_algo_order",
+      title: "Spot Place Algo Order",
+      destructiveHint: false,
       module: "spot",
       description: "Place a spot algo order. [CAUTION] Executes real trades. conditional: single TP/SL. oco: TP+SL pair. move_order_stop: trailing stop. trigger: pending order at triggerPx. chase: follow best bid/ask. iceberg: split large order into child orders. twap: time-weighted split.",
       isWrite: true,
@@ -11369,6 +11855,8 @@ function registerSpotTradeTools() {
     },
     {
       name: "spot_amend_algo_order",
+      title: "Spot Amend Algo Order",
+      idempotentHint: true,
       module: "spot",
       description: "Amend a pending spot algo order (modify TP/SL prices or size). Also covers TP/SL orders attached when placing the main order - look up algoId via spot_get_algo_orders first.",
       isWrite: true,
@@ -11405,6 +11893,8 @@ function registerSpotTradeTools() {
     },
     {
       name: "spot_cancel_algo_order",
+      title: "Spot Cancel Algo Order",
+      idempotentHint: true,
       module: "spot",
       description: "Cancel a spot algo order (TP/SL).",
       isWrite: true,
@@ -11438,6 +11928,7 @@ function registerSpotTradeTools() {
     },
     {
       name: "spot_get_algo_orders",
+      title: "Spot Get Algo Orders",
       module: "spot",
       description: "Query spot algo orders (TP/SL) - pending or history.",
       isWrite: false,
@@ -11515,6 +12006,7 @@ function registerSpotTradeTools() {
     },
     {
       name: "spot_get_fills",
+      title: "Spot Get Fills",
       module: "spot",
       description: "Get spot transaction fills. archive=false(3d, default)|true(up to 3mo).",
       isWrite: false,
@@ -11578,6 +12070,7 @@ function registerSpotTradeTools() {
     },
     {
       name: "spot_batch_orders",
+      title: "Spot Batch Orders",
       module: "spot",
       description: "[CAUTION] Batch place/cancel/amend up to 20 spot orders. action: place|cancel|amend.",
       isWrite: true,
@@ -11636,6 +12129,7 @@ function registerSpotTradeTools() {
     },
     {
       name: "spot_get_order",
+      title: "Spot Get Order",
       module: "spot",
       description: "Get details of a single spot order.",
       isWrite: false,
@@ -11673,6 +12167,8 @@ function registerSpotTradeTools() {
     },
     {
       name: "spot_batch_amend",
+      title: "Spot Batch Amend Orders",
+      idempotentHint: true,
       module: "spot",
       description: "[CAUTION] Batch amend up to 20 unfilled spot orders.",
       isWrite: true,
@@ -11703,6 +12199,8 @@ function registerSpotTradeTools() {
     },
     {
       name: "spot_batch_cancel",
+      title: "Spot Batch Cancel Orders",
+      idempotentHint: true,
       module: "spot",
       description: "[CAUTION] Batch cancel up to 20 spot orders.",
       isWrite: true,
@@ -11740,6 +12238,8 @@ function registerSpotTradeTools() {
     // Not applicable: posSide (spot has no long/short hedge).
     {
       name: "spot_set_leverage",
+      title: "Spot Set Leverage",
+      idempotentHint: true,
       module: "spot",
       description: "Set leverage for SPOT margin trading. Provide exactly ONE of instId (pair-level) or ccy (currency-level cross, requires borrow-enabled account / multi-ccy / portfolio margin). [CAUTION] Changes risk parameters.\nScenarios:\n  \u2022 instId + mgnMode=isolated -> pair-level isolated margin\n  \u2022 instId + mgnMode=cross    -> pair-level cross margin (contract-mode account)\n  \u2022 ccy    + mgnMode=cross    -> currency-level cross margin (spot-with-borrow / multi-ccy / portfolio margin)\nWhen ccy is supplied, mgnMode MUST be cross. posSide is never applicable to spot margin.",
       isWrite: true,
@@ -11814,6 +12314,7 @@ function registerSwapTradeTools() {
     prefix: "swap",
     module: "swap",
     label: "SWAP/FUTURES",
+    titleLabel: "Perpetual Futures",
     instTypes: ["SWAP", "FUTURES"],
     instIdExample: "e.g. BTC-USDT-SWAP"
   });
@@ -11823,6 +12324,8 @@ function registerSwapTradeTools() {
     // Unique to swap: amend a pending TP/SL algo order attached to a position.
     {
       name: "swap_amend_algo_order",
+      title: "Perpetual Futures Amend Algo Order",
+      idempotentHint: true,
       module: "swap",
       description: "Amend a pending SWAP/FUTURES algo order (modify TP/SL prices or size). Also covers TP/SL orders attached when placing the main order - look up algoId via swap_get_algo_orders first.",
       isWrite: true,
@@ -11861,6 +12364,7 @@ function registerSwapTradeTools() {
     // Unique to swap: 3-in-1 batch tool (place / cancel / amend via action param).
     {
       name: "swap_batch_orders",
+      title: "Perpetual Futures Batch Orders",
       module: "swap",
       description: "[CAUTION] Batch place/cancel/amend SWAP/FUTURES orders (max 20). action=place|cancel|amend.",
       isWrite: true,
@@ -11954,12 +12458,12 @@ function createToolRunner(client, config) {
   };
 }
 function configFilePath() {
-  return join7(homedir5(), ".okx", "config.toml");
+  return join9(homedir5(), ".okx", "config.toml");
 }
 function readFullConfig() {
   const path42 = configFilePath();
   if (!existsSync3(path42)) return { profiles: {} };
-  const raw = readFileSync4(path42, "utf-8");
+  const raw = readFileSync6(path42, "utf-8");
   try {
     return parse(raw);
   } catch (err) {
@@ -12109,7 +12613,7 @@ async function loadConfig(cli) {
     verbose: cli.verbose ?? false
   };
 }
-var CACHE_FILE = join8(homedir6(), ".okx", "update-check.json");
+var CACHE_FILE = join10(homedir6(), ".okx", "update-check.json");
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
 var NEGATIVE_CHECK_INTERVAL_MS = 60 * 60 * 1e3;
 var DEFAULT_REGISTRY = "https://registry.npmjs.org/";
@@ -12117,7 +12621,7 @@ var FETCH_TIMEOUT_MS = 3e3;
 function readCache2() {
   try {
     if (existsSync4(CACHE_FILE)) {
-      return JSON.parse(readFileSync5(CACHE_FILE, "utf-8"));
+      return JSON.parse(readFileSync7(CACHE_FILE, "utf-8"));
     }
   } catch {
   }
@@ -12125,7 +12629,7 @@ function readCache2() {
 }
 function writeCache2(cache) {
   try {
-    mkdirSync6(join8(homedir6(), ".okx"), { recursive: true });
+    mkdirSync6(join10(homedir6(), ".okx"), { recursive: true });
     writeFileSync5(CACHE_FILE, JSON.stringify(cache, null, 2), "utf-8");
   } catch {
   }
@@ -12155,13 +12659,13 @@ function buildNpmrcCandidates() {
   let dir = process.cwd();
   const root = dir.startsWith("/") ? "/" : dir.slice(0, 3);
   while (true) {
-    add(join8(dir, ".npmrc"));
+    add(join10(dir, ".npmrc"));
     if (dir === root) break;
-    const parent = join8(dir, "..");
+    const parent = join10(dir, "..");
     if (parent === dir) break;
     dir = parent;
   }
-  add(join8(homedir6(), ".npmrc"));
+  add(join10(homedir6(), ".npmrc"));
   if (process.platform !== "win32") {
     add("/etc/npmrc");
   }
@@ -12170,7 +12674,7 @@ function buildNpmrcCandidates() {
 function readNpmrcRegistry(filePath) {
   try {
     if (!existsSync4(filePath)) return null;
-    const lines = readFileSync5(filePath, "utf-8").split(/\r?\n/);
+    const lines = readFileSync7(filePath, "utf-8").split(/\r?\n/);
     for (const line of lines) {
       const trimmed = line.trim();
       if (trimmed.startsWith("#") || !trimmed.includes("=")) continue;
@@ -12497,6 +13001,14 @@ function runSetup(options) {
 `);
   }
 }
+var HttpStatusError = class extends Error {
+  statusCode;
+  constructor(statusCode) {
+    super(`HTTP ${statusCode}`);
+    this.name = "HttpStatusError";
+    this.statusCode = statusCode;
+  }
+};
 function isRedirect(statusCode) {
   return statusCode !== void 0 && statusCode >= 300 && statusCode < 400;
 }
@@ -12511,7 +13023,7 @@ function validateRedirect(res, requestUrl, redirectCount, maxRedirects) {
   return location;
 }
 function fetchResponse(url, timeoutMs) {
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     let redirects = 0;
     const maxRedirects = 5;
     function doRequest(requestUrl) {
@@ -12529,10 +13041,14 @@ function fetchResponse(url, timeoutMs) {
           return;
         }
         if (res.statusCode !== 200) {
-          reject(new Error(`HTTP ${res.statusCode ?? "unknown"}`));
+          if (res.statusCode === void 0) {
+            reject(new Error("HTTP unknown"));
+          } else {
+            reject(new HttpStatusError(res.statusCode));
+          }
           return;
         }
-        resolve3(res);
+        resolve4(res);
       });
       req.on("error", reject);
       req.on("timeout", () => {
@@ -12545,10 +13061,10 @@ function fetchResponse(url, timeoutMs) {
 }
 function download(url, destPath, timeoutMs) {
   return fetchResponse(url, timeoutMs).then(
-    (res) => new Promise((resolve3, reject) => {
+    (res) => new Promise((resolve4, reject) => {
       const file = createWriteStream2(destPath);
       res.pipe(file);
-      file.on("finish", () => file.close(() => resolve3()));
+      file.on("finish", () => file.close(() => resolve4()));
       file.on("error", (err) => {
         try {
           unlinkSync3(destPath);
@@ -12561,10 +13077,10 @@ function download(url, destPath, timeoutMs) {
 }
 function downloadText(url, timeoutMs) {
   return fetchResponse(url, timeoutMs).then(
-    (res) => new Promise((resolve3, reject) => {
+    (res) => new Promise((resolve4, reject) => {
       const chunks = [];
       res.on("data", (chunk) => chunks.push(chunk));
-      res.on("end", () => resolve3(Buffer.concat(chunks).toString("utf8")));
+      res.on("end", () => resolve4(Buffer.concat(chunks).toString("utf8")));
       res.on("error", reject);
     })
   );
@@ -12593,10 +13109,10 @@ function getBinaryName() {
   return platform() === "win32" ? "okx-pilot.exe" : "okx-pilot";
 }
 function hashFile(filePath) {
-  const buf = readFileSync7(filePath);
+  const buf = readFileSync9(filePath);
   return {
     size: buf.byteLength,
-    sha256: createHash("sha256").update(buf).digest("hex")
+    sha256: createHash3("sha256").update(buf).digest("hex")
   };
 }
 function getPilotStatus(binaryPath, opts) {
@@ -12711,7 +13227,7 @@ async function installPilotBinary(destPath, sources = CDN_SOURCES, onProgress) {
   if (earlyResult) return earlyResult;
   const platformDir = getPlatformDir();
   const binaryName = getBinaryName();
-  const resolvedDest = destPath ?? join10(homedir8(), ".okx", "bin", binaryName);
+  const resolvedDest = destPath ?? join12(homedir8(), ".okx", "bin", binaryName);
   const tmpPath = resolvedDest + ".tmp";
   mkdirSync8(dirname6(resolvedDest), { recursive: true });
   const localHash = existsSync6(resolvedDest) ? hashFile(resolvedDest) : null;
@@ -12763,9 +13279,41 @@ function removePilotBinary(binaryPath) {
   }
 }
 var AUTH_CDN_PATH_PREFIX = "/upgradeapp/tools/oauth";
+var LINUX_ARM64_FALLBACK_DIR = "linux-x64";
 function getAuthBinaryName() {
   return platform2() === "win32" ? "okx-auth.exe" : "okx-auth";
 }
+async function _resolveAuthPlatformFromNative(native, sources, timeoutMs) {
+  if (native !== "linux-arm64") {
+    return native;
+  }
+  const checksumPath = `${AUTH_CDN_PATH_PREFIX}/linux-arm64/checksum.json`;
+  let got404 = false;
+  for (const { host, protocol } of sources) {
+    const url = `${protocol}://${host}${checksumPath}`;
+    try {
+      await downloadText(url, timeoutMs);
+      return "linux-arm64";
+    } catch (err) {
+      if (err instanceof HttpStatusError && err.statusCode === 404) {
+        got404 = true;
+        break;
+      }
+    }
+  }
+  if (got404) {
+    console.warn(
+      "[okx-auth] Native linux-arm64 binary not yet on CDN. Falling back to linux-x64 binary \u2014 x86_64 emulation (binfmt_misc/Rosetta) required."
+    );
+    return LINUX_ARM64_FALLBACK_DIR;
+  }
+  return "linux-arm64";
+}
+async function resolveAuthPlatformDir(sources = CDN_SOURCES, timeoutMs = DOWNLOAD_TIMEOUT_MS) {
+  const native = getPlatformDir();
+  if (!native) return null;
+  return _resolveAuthPlatformFromNative(native, sources, timeoutMs);
+}
 function getAuthStatus(binaryPath, opts) {
   const resolvedPath = binaryPath ?? getAuthBinaryPath();
   const platformDir = getPlatformDir();
@@ -12779,7 +13327,7 @@ function getAuthStatus(binaryPath, opts) {
   return { binaryPath: resolvedPath, exists: true, platform: platformDir, fileSize: size, sha256 };
 }
 async function fetchAuthCdnChecksum(sources = CDN_SOURCES, timeoutMs = DOWNLOAD_TIMEOUT_MS) {
-  const platformDir = getPlatformDir();
+  const platformDir = await resolveAuthPlatformDir(sources, timeoutMs);
   if (!platformDir) return null;
   const checksumPath = `${AUTH_CDN_PATH_PREFIX}/${platformDir}/checksum.json`;
   for (const { host, protocol } of sources) {
@@ -12848,12 +13396,51 @@ function installPreChecks2(destPath, sources) {
 function isLocalUpToDate2(localHash, checksum) {
   return localHash !== null && localHash.size === checksum.size && localHash.sha256 === checksum.sha256;
 }
+async function tryInstallFromOneSource(ctx) {
+  const { host, protocol, platformDir, checksumPath, binaryPath, tmpPath, resolvedDest, localHash, onProgress } = ctx;
+  try {
+    const checksum = await fetchAndValidateChecksum2(
+      host,
+      protocol,
+      checksumPath,
+      platformDir,
+      DOWNLOAD_TIMEOUT_MS,
+      onProgress
+    );
+    if (isLocalUpToDate2(localHash, checksum)) {
+      onProgress?.("Already up to date (checksum match)");
+      return { kind: "done", result: { status: "up-to-date", source: host } };
+    }
+    await downloadAndVerify2(host, protocol, binaryPath, tmpPath, checksum, DOWNLOAD_TIMEOUT_MS, onProgress);
+    atomicReplace2(tmpPath, resolvedDest);
+    onProgress?.(`Downloaded and verified from ${host}`);
+    return { kind: "done", result: { status: "installed", source: host } };
+  } catch (err) {
+    try {
+      unlinkSync5(tmpPath);
+    } catch {
+    }
+    const errObj = err instanceof Error ? err : new Error(String(err));
+    onProgress?.(`${host} failed: ${errObj.message}`);
+    return { kind: "next", err: errObj };
+  }
+}
+function buildInstallFailureResult(errors) {
+  const formatted = errors.map(({ host, err }) => `${host}: ${err.message}`).join("\n");
+  const allHttpErrors = errors.length > 0 && errors.every(({ err }) => err instanceof HttpStatusError);
+  const prefix = allHttpErrors ? "okx-auth binary not available on CDN for this platform" : "All CDN sources failed";
+  return { status: "failed", error: `${prefix}:
+${formatted}` };
+}
 async function installAuthBinary(destPath, sources = CDN_SOURCES, onProgress) {
   const earlyResult = installPreChecks2(destPath, sources);
   if (earlyResult) return earlyResult;
-  const platformDir = getPlatformDir();
+  const platformDir = await resolveAuthPlatformDir(sources);
+  if (!platformDir) {
+    return { status: "failed", error: "Unsupported platform" };
+  }
   const binaryName = getAuthBinaryName();
-  const resolvedDest = destPath ?? join11(homedir9(), ".okx", "bin", binaryName);
+  const resolvedDest = destPath ?? join13(homedir9(), ".okx", "bin", binaryName);
   const tmpPath = resolvedDest + ".tmp";
   mkdirSync9(dirname7(resolvedDest), { recursive: true });
   const localHash = existsSync7(resolvedDest) ? hashFile(resolvedDest) : null;
@@ -12861,35 +13448,21 @@ async function installAuthBinary(destPath, sources = CDN_SOURCES, onProgress) {
   const binaryPath = `${AUTH_CDN_PATH_PREFIX}/${platformDir}/${binaryName}`;
   const errors = [];
   for (const { host, protocol } of sources) {
-    try {
-      const checksum = await fetchAndValidateChecksum2(
-        host,
-        protocol,
-        checksumPath,
-        platformDir,
-        DOWNLOAD_TIMEOUT_MS,
-        onProgress
-      );
-      if (isLocalUpToDate2(localHash, checksum)) {
-        onProgress?.("Already up to date (checksum match)");
-        return { status: "up-to-date", source: host };
-      }
-      await downloadAndVerify2(host, protocol, binaryPath, tmpPath, checksum, DOWNLOAD_TIMEOUT_MS, onProgress);
-      atomicReplace2(tmpPath, resolvedDest);
-      onProgress?.(`Downloaded and verified from ${host}`);
-      return { status: "installed", source: host };
-    } catch (err) {
-      try {
-        unlinkSync5(tmpPath);
-      } catch {
-      }
-      const msg = err instanceof Error ? err.message : String(err);
-      errors.push(`${host}: ${msg}`);
-      onProgress?.(`${host} failed: ${msg}`);
-    }
+    const attempt = await tryInstallFromOneSource({
+      host,
+      protocol,
+      platformDir,
+      checksumPath,
+      binaryPath,
+      tmpPath,
+      resolvedDest,
+      localHash,
+      onProgress
+    });
+    if (attempt.kind === "done") return attempt.result;
+    errors.push({ host, err: attempt.err });
   }
-  return { status: "failed", error: `All CDN sources failed:
-${errors.join("\n")}` };
+  return buildInstallFailureResult(errors);
 }
 function removeAuthBinary(binaryPath) {
   const resolvedPath = binaryPath ?? getAuthBinaryPath();
@@ -12904,12 +13477,12 @@ function removeAuthBinary(binaryPath) {
     throw new Error(`Failed to remove ${resolvedPath}: ${msg}`);
   }
 }
-var CACHE_PATH = join12(homedir10(), ".okx", "auth-binary-check.json");
+var CACHE_PATH = join14(homedir10(), ".okx", "auth-binary-check.json");
 var CHECK_INTERVAL_MS2 = 2 * 60 * 60 * 1e3;
 function readCache3() {
   try {
     if (!existsSync8(CACHE_PATH)) return null;
-    const data = JSON.parse(readFileSync8(CACHE_PATH, "utf-8"));
+    const data = JSON.parse(readFileSync10(CACHE_PATH, "utf-8"));
     if (typeof data.cdnSha256 !== "string" || typeof data.checkedAt !== "number") return null;
     return { cdnSha256: data.cdnSha256, checkedAt: data.checkedAt };
   } catch {
@@ -12918,7 +13491,7 @@ function readCache3() {
 }
 function writeCache3(cdnSha256) {
   try {
-    mkdirSync10(join12(homedir10(), ".okx"), { recursive: true });
+    mkdirSync10(join14(homedir10(), ".okx"), { recursive: true });
     writeFileSync7(CACHE_PATH, JSON.stringify({ cdnSha256, checkedAt: Date.now() }, null, 2), "utf-8");
   } catch {
   }
@@ -13053,7 +13626,7 @@ function markFailedIfSCodeError(data) {
 // src/commands/auth.ts
 function runOkxAuth(args) {
   const binPath = getAuthBinaryPath();
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     const child = spawn3(binPath, args, {
       stdio: "inherit"
     });
@@ -13061,13 +13634,13 @@ function runOkxAuth(args) {
       reject(new Error(`Failed to spawn okx-auth: ${err.message}`));
     });
     child.on("close", (code) => {
-      resolve3(code ?? 1);
+      resolve4(code ?? 1);
     });
   });
 }
 function runOkxAuthCapture(args) {
   const binPath = getAuthBinaryPath();
-  return new Promise((resolve3, reject) => {
+  return new Promise((resolve4, reject) => {
     const child = spawn3(binPath, args, {
       stdio: ["inherit", "pipe", "inherit"]
     });
@@ -13077,7 +13650,7 @@ function runOkxAuthCapture(args) {
       reject(new Error(`Failed to spawn okx-auth: ${err.message}`));
     });
     child.on("close", (code) => {
-      resolve3({
+      resolve4({
         code: code ?? 1,
         stdout: Buffer.concat(chunks).toString("utf-8")
       });
@@ -13282,14 +13855,14 @@ async function confirmRemoval(force, binaryPath) {
   return true;
 }
 function askConfirmation(prompt2) {
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     const rl = readline.createInterface({
       input: process.stdin,
       output: process.stdout
     });
     rl.question(prompt2, (answer) => {
       rl.close();
-      resolve3(answer.trim().toLowerCase() === "y");
+      resolve4(answer.trim().toLowerCase() === "y");
     });
   });
 }
@@ -13346,26 +13919,26 @@ var Report = class {
     this.lines.push({ key, value });
   }
   print() {
-    const sep2 = "\u2500".repeat(52);
+    const sep3 = "\u2500".repeat(52);
     outputLine("");
-    outputLine(`  \u2500\u2500 Diagnostic Report (copy & share) ${sep2.slice(35)}`);
+    outputLine(`  \u2500\u2500 Diagnostic Report (copy & share) ${sep3.slice(35)}`);
     for (const { key, value } of this.lines) {
       outputLine(`  ${key.padEnd(14)} ${value}`);
     }
-    outputLine(`  ${sep2}`);
+    outputLine(`  ${sep3}`);
     outputLine("");
   }
   /** Write report to a file path, returns true on success. */
   writeToFile(filePath) {
     try {
-      const sep2 = "\u2500".repeat(52);
+      const sep3 = "\u2500".repeat(52);
       const lines = [
-        `\u2500\u2500 Diagnostic Report (copy & share) ${sep2.slice(35)}`
+        `\u2500\u2500 Diagnostic Report (copy & share) ${sep3.slice(35)}`
       ];
       for (const { key, value } of this.lines) {
         lines.push(`${key.padEnd(14)} ${value}`);
       }
-      lines.push(sep2, "");
+      lines.push(sep3, "");
       fs4.writeFileSync(filePath, lines.join("\n"), "utf8");
       return true;
     } catch (_e) {
@@ -13741,13 +14314,13 @@ async function checkStdioHandshake(entryPath, report) {
       clientInfo: { name: "okx-diagnose", version: "1.0" }
     }
   });
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     let settled = false;
     const settle = (passed) => {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
-      resolve3(passed);
+      resolve4(passed);
     };
     const child = spawn4(process.execPath, [entryPath], {
       stdio: ["pipe", "pipe", "pipe"],
@@ -13868,7 +14441,7 @@ async function cmdDiagnoseMcp(options = {}) {
 
 // src/commands/diagnose.ts
 var CLI_VERSION = readCliVersion();
-var GIT_HASH = true ? "c34b282c" : "dev";
+var GIT_HASH = true ? "e5abc21f" : "dev";
 function maskKey2(key) {
   if (!key) return "(not set)";
   if (key.length <= 8) return "****";
@@ -13885,7 +14458,7 @@ async function checkDns(hostname) {
 }
 async function checkSocket(createFn, successEvent, timeoutMs) {
   const t0 = Date.now();
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     const socket = createFn();
     const cleanup = () => {
       socket.removeAllListeners();
@@ -13893,15 +14466,15 @@ async function checkSocket(createFn, successEvent, timeoutMs) {
     };
     socket.once(successEvent, () => {
       cleanup();
-      resolve3({ ok: true, ms: Date.now() - t0 });
+      resolve4({ ok: true, ms: Date.now() - t0 });
     });
     socket.once("timeout", () => {
       cleanup();
-      resolve3({ ok: false, ms: Date.now() - t0, error: `timed out after ${timeoutMs}ms` });
+      resolve4({ ok: false, ms: Date.now() - t0, error: `timed out after ${timeoutMs}ms` });
     });
     socket.once("error", (err) => {
       cleanup();
-      resolve3({ ok: false, ms: Date.now() - t0, error: err.message });
+      resolve4({ ok: false, ms: Date.now() - t0, error: err.message });
     });
   });
 }
@@ -14229,23 +14802,23 @@ function suggestSubcommand(action, knownActions, knownPaths = []) {
 
 // src/commands/upgrade.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import { readFileSync as readFileSync9, writeFileSync as writeFileSync8, mkdirSync as mkdirSync11 } from "fs";
-import { dirname as dirname8, join as join13 } from "path";
+import { readFileSync as readFileSync11, writeFileSync as writeFileSync8, mkdirSync as mkdirSync11 } from "fs";
+import { dirname as dirname8, join as join15 } from "path";
 import { homedir as homedir11 } from "os";
 var PACKAGES = ["@okx_ai/okx-trade-mcp", "@okx_ai/okx-trade-cli"];
-var CACHE_FILE2 = join13(homedir11(), ".okx", "last_check");
+var CACHE_FILE2 = join15(homedir11(), ".okx", "last_check");
 var THROTTLE_MS = 12 * 60 * 60 * 1e3;
-var NPM_BIN = join13(dirname8(process.execPath), process.platform === "win32" ? "npm.cmd" : "npm");
+var NPM_BIN = join15(dirname8(process.execPath), process.platform === "win32" ? "npm.cmd" : "npm");
 function readLastCheck() {
   try {
-    return parseInt(readFileSync9(CACHE_FILE2, "utf-8").trim(), 10) || 0;
+    return parseInt(readFileSync11(CACHE_FILE2, "utf-8").trim(), 10) || 0;
   } catch {
     return 0;
   }
 }
 function writeLastCheck() {
   try {
-    mkdirSync11(join13(homedir11(), ".okx"), { recursive: true });
+    mkdirSync11(join15(homedir11(), ".okx"), { recursive: true });
     writeFileSync8(CACHE_FILE2, String(Math.floor(Date.now() / 1e3)), "utf-8");
   } catch {
   }
@@ -14932,6 +15505,11 @@ var CLI_REGISTRY = {
             usage: "okx earn savings rate-history [--ccy <ccy>] [--limit <n>]",
             description: "Query Simple Earn lending rates and fixed-term offers (requires auth)"
           },
+          "fixed-products": {
+            toolName: "earn_get_fixed_earn_products",
+            usage: "okx earn savings fixed-products [--ccy <ccy>]",
+            description: "List available fixed-term earn products with APR, term, and remaining quota"
+          },
           "fixed-orders": {
             toolName: "earn_get_fixed_order_list",
             usage: "okx earn savings fixed-orders [--ccy <ccy>] [--state <pending|earning|expired|settled|cancelled>]",
@@ -14944,7 +15522,7 @@ var CLI_REGISTRY = {
           },
           "fixed-redeem": {
             toolName: "earn_fixed_redeem",
-            usage: "okx earn savings fixed-redeem <reqId>",
+            usage: "okx earn savings fixed-redeem --reqId <reqId>",
             description: "Redeem a fixed-term earn order (full amount)"
           }
         }
@@ -18247,7 +18825,7 @@ Config saved to ${p}
   }
 };
 function prompt(rl, question) {
-  return new Promise((resolve3) => rl.question(question, resolve3));
+  return new Promise((resolve4) => rl.question(question, resolve4));
 }
 function cmdConfigShow(json) {
   const config = readFullConfig();
@@ -18659,13 +19237,24 @@ async function cmdEarnLendingRateHistory(run, opts) {
     printTable(fixedOffers.map((r) => ({
       ccy: r["ccy"],
       term: r["term"],
-      rate: r["rate"],
+      apr: r["apr"],
       minLend: r["minLend"],
       remainingQuota: r["lendQuota"],
       soldOut: r["soldOut"] ? "Yes" : "No"
     })));
   }
 }
+async function cmdEarnFixedProducts(run, opts) {
+  const data = extractData(await run("earn_get_fixed_earn_products", { ccy: opts.ccy }));
+  printDataList(data, opts.json, "No fixed earn products available", (r) => ({
+    ccy: r["ccy"],
+    term: r["term"],
+    apr: r["apr"],
+    minLend: r["minLend"],
+    remainingQuota: r["lendQuota"],
+    soldOut: r["soldOut"] ? "Yes" : "No"
+  }));
+}
 function extractFixedOffers(result) {
   if (result && typeof result === "object") {
     const offers = result["fixedOffers"];
@@ -19659,18 +20248,21 @@ async function cmdDcdQuoteAndBuy(run, opts) {
 
 // src/commands/skill.ts
 import { tmpdir, homedir as homedir13 } from "os";
-import { join as join15, dirname as dirname9 } from "path";
+import { join as join17, dirname as dirname9 } from "path";
 import { mkdirSync as mkdirSync12, rmSync, existsSync as existsSync10, copyFileSync as copyFileSync2 } from "fs";
 import { execFileSync as execFileSync2 } from "child_process";
 import { randomUUID as randomUUID2 } from "crypto";
 function resolveNpx() {
-  const sibling = join15(dirname9(process.execPath), "npx");
+  const sibling = join17(dirname9(process.execPath), "npx");
   if (existsSync10(sibling)) return sibling;
   return "npx";
 }
 function npxEnv() {
   return { ...process.env, NO_COLOR: "1", FORCE_COLOR: "0" };
 }
+function getSkillContentDir(name) {
+  return join17(homedir13(), ".agents", "skills", name);
+}
 var THIRD_PARTY_INSTALL_NOTICE = "Note: This skill was created by a third-party developer, not by OKX. Review SKILL.md before use.";
 async function cmdSkillSearch(run, opts) {
   const args = {};
@@ -19720,16 +20312,56 @@ async function cmdSkillCategories(run, json) {
   }
   outputLine("");
 }
-async function cmdSkillAdd(name, config, json, exec = execFileSync2) {
-  const tmpBase = join15(tmpdir(), `okx-skill-${randomUUID2()}`);
+async function wrapVerify(fn) {
+  try {
+    return await fn();
+  } catch (e) {
+    if (e instanceof ConfigError) {
+      throw new Error(
+        `Signature verification requires authentication \u2014 run \`okx auth login\` first, or use --force to bypass.`
+      );
+    }
+    throw e;
+  }
+}
+async function cmdSkillAdd(name, config, json, force = false, exec = execFileSync2, _deps) {
+  const _download = _deps?.download ?? downloadSkillZip;
+  const _extract = _deps?.extract ?? extractSkillZip;
+  const tmpBase = join17(tmpdir(), `okx-skill-${randomUUID2()}`);
   mkdirSync12(tmpBase, { recursive: true });
   try {
     outputLine(`Downloading ${name}...`);
     const client = new OkxRestClient(config);
-    const zipPath = await downloadSkillZip(client, name, tmpBase);
-    const contentDir = await extractSkillZip(zipPath, join15(tmpBase, "content"));
+    const zipPath = await _download(client, name, tmpBase);
+    const contentDir = await _extract(zipPath, join17(tmpBase, "content"));
     const meta = readMetaJson(contentDir);
     validateSkillMdExists(contentDir);
+    outputLine("Verifying signature...");
+    const verifyResult = await wrapVerify(
+      () => verifySkillSignature(contentDir, meta.signing, {
+        fetchPublicKey: (keyId) => getPublicKey(client, keyId),
+        serverSideVerify: (sName, version, files) => serverSideVerify(client, sName, version, files),
+        skillName: meta.name,
+        skillVersion: meta.version
+      })
+    );
+    if (verifyResult.status === "failed") {
+      if (!force) {
+        throw new Error(`Signature verification failed: ${verifyResult.error ?? "unknown error"}. Use --force to install anyway.`);
+      }
+      process.stderr.write(`WARNING: Signature verification failed \u2014 ${verifyResult.error ?? "unknown"}. Installing anyway (--force).
+`);
+    } else if (verifyResult.status === "verified_by_server") {
+      if (!json) {
+        outputLine(`  Verified by server (v${verifyResult.serverVersion ?? "?"})`);
+        if (verifyResult.error) outputLine(`  Note: ${verifyResult.error}`);
+      }
+    } else if (!json) {
+      outputLine(`  Signature verified (key: ${verifyResult.publicKeyId}, files: ${verifyResult.filesChecked})`);
+      if (verifyResult.extraFiles?.length) {
+        outputLine(`  Note: ${verifyResult.extraFiles.length} extra unsigned file(s) present`);
+      }
+    }
     outputLine("Installing to detected agents...");
     try {
       exec(resolveNpx(), ["skills", "add", contentDir, "-y", "-g"], {
@@ -19738,7 +20370,7 @@ async function cmdSkillAdd(name, config, json, exec = execFileSync2) {
         env: npxEnv()
       });
     } catch (e) {
-      const savedZip = join15(process.cwd(), `${name}.zip`);
+      const savedZip = join17(process.cwd(), `${name}.zip`);
       try {
         copyFileSync2(zipPath, savedZip);
       } catch {
@@ -19747,7 +20379,8 @@ async function cmdSkillAdd(name, config, json, exec = execFileSync2) {
       errorLine(`You can manually install from: ${savedZip}`);
       throw e;
     }
-    upsertSkillRecord(meta);
+    const registryStatus = verifyResult.status === "failed" && force ? "bypassed" : verifyResult.status;
+    upsertSkillRecord(meta, void 0, registryStatus);
     printSkillInstallResult(meta, json);
   } finally {
     rmSync(tmpBase, { recursive: true, force: true });
@@ -19778,7 +20411,7 @@ function cmdSkillRemove(name, json, exec = execFileSync2) {
       env: npxEnv()
     });
   } catch {
-    const agentsPath = join15(homedir13(), ".agents", "skills", name);
+    const agentsPath = getSkillContentDir(name);
     try {
       rmSync(agentsPath, { recursive: true, force: true });
     } catch {
@@ -19842,6 +20475,59 @@ function cmdSkillList(json) {
   outputLine("");
   outputLine(`${skills.length} skills installed.`);
 }
+async function cmdSkillVerify(name, config, json) {
+  const record = getSkillRecord(name);
+  if (!record) {
+    errorLine(`Skill "${name}" is not installed.`);
+    process.exitCode = 1;
+    return;
+  }
+  const contentDir = getSkillContentDir(name);
+  if (!existsSync10(contentDir)) {
+    errorLine(`Skill content directory not found: ${contentDir}`);
+    errorLine(`Try reinstalling with: okx skill add ${name}`);
+    process.exitCode = 1;
+    return;
+  }
+  const meta = tryReadMetaJson(contentDir);
+  const client = new OkxRestClient(config);
+  let result;
+  try {
+    result = await wrapVerify(
+      () => verifySkillSignature(contentDir, meta?.signing, {
+        fetchPublicKey: (keyId) => getPublicKey(client, keyId),
+        serverSideVerify: (sName, version, files) => serverSideVerify(client, sName, version, files),
+        skillName: name,
+        skillVersion: meta?.version
+      })
+    );
+  } catch (e) {
+    errorLine(e instanceof Error ? e.message : String(e));
+    process.exitCode = 1;
+    return;
+  }
+  if (meta) {
+    upsertSkillRecord(meta, void 0, result.status);
+  }
+  if (result.status === "failed") {
+    process.exitCode = 1;
+  }
+  if (json) {
+    outputLine(JSON.stringify(result, null, 2));
+    return;
+  }
+  if (result.status === "verified") {
+    outputLine(`\u2713 ${name}: signature verified (key: ${result.publicKeyId}, files: ${result.filesChecked})`);
+    if (result.extraFiles?.length) {
+      outputLine(`  Note: ${result.extraFiles.length} extra unsigned file(s) present`);
+    }
+  } else if (result.status === "verified_by_server") {
+    outputLine(`\u2713 ${name}: verified by server (v${result.serverVersion ?? "?"})`);
+    if (result.error) outputLine(`  Note: ${result.error}`);
+  } else if (result.status === "failed") {
+    errorLine(`\u2717 ${name}: verification failed \u2014 ${result.error ?? "unknown"}`);
+  }
+}
 function printSkillInstallResult(meta, json) {
   if (json) {
     outputLine(JSON.stringify({ name: meta.name, version: meta.version, status: "installed" }, null, 2));
@@ -19992,14 +20678,14 @@ function formatBytes2(bytes) {
   return `${(bytes / (1024 * 1024)).toFixed(2)} MB`;
 }
 function askConfirmation2(prompt2) {
-  return new Promise((resolve3) => {
+  return new Promise((resolve4) => {
     const rl = readline2.createInterface({
       input: process.stdin,
       output: process.stdout
     });
     rl.question(prompt2, (answer) => {
       rl.close();
-      resolve3(answer.trim().toLowerCase() === "y");
+      resolve4(answer.trim().toLowerCase() === "y");
     });
   });
 }
@@ -20462,7 +21148,7 @@ async function cmdEventCancel(run, opts) {
 // src/index.ts
 var _require3 = createRequire3(import.meta.url);
 var CLI_VERSION2 = _require3("../package.json").version;
-var GIT_HASH2 = true ? "c34b282c" : "dev";
+var GIT_HASH2 = true ? "e5abc21f" : "dev";
 function handlePilotCommand(action, json, force, binaryPath) {
   if (action === "status") return cmdPilotStatus(json, binaryPath);
   if (action === "install") return cmdPilotInstall(json, binaryPath);
@@ -21656,6 +22342,7 @@ function handleEarnSavingsCommand(run, action, rest, v, json) {
   if (action === "set-rate") return cmdEarnSetLendingRate(run, { ccy: v.ccy, rate: v.rate, json });
   if (action === "lending-history") return cmdEarnLendingHistory(run, { ccy: v.ccy, limit, json });
   if (action === "rate-history") return cmdEarnLendingRateHistory(run, { ccy: v.ccy, limit, json });
+  if (action === "fixed-products") return cmdEarnFixedProducts(run, { ccy: v.ccy, json });
   if (action === "fixed-orders") return cmdEarnFixedOrderList(run, { ccy: v.ccy, state: v.state, json });
   if (action === "fixed-purchase") return cmdEarnFixedPurchase(run, { ccy: v.ccy, amt: v.amt, term: v.term, confirm: v.confirm ?? false, json });
   if (action === "fixed-redeem") return cmdEarnFixedRedeem(run, { reqId: v.reqId, json });
@@ -21773,9 +22460,13 @@ function requireSkillName(rest, usage) {
   }
   return name;
 }
-function handleSkillAdd(rest, config, json) {
+function handleSkillAdd(rest, v, config, json) {
   const n = requireSkillName(rest, "Usage: okx skill add <name>");
-  if (n) return cmdSkillAdd(n, config, json);
+  if (n) return cmdSkillAdd(n, config, json, v.force ?? false);
+}
+function handleSkillVerify(rest, config, json) {
+  const n = requireSkillName(rest, "Usage: okx skill verify <name>");
+  if (n) return cmdSkillVerify(n, config, json);
 }
 function handleSkillDownload(rest, v, config, json) {
   const n = requireSkillName(rest, "Usage: okx skill download <name> [--dir <path>] [--format zip|skill]");
@@ -21794,12 +22485,13 @@ function handleSkillCommand(run, action, rest, v, json, config) {
   if (action === "search") return cmdSkillSearch(run, { keyword: rest[0] ?? v.keyword, categories: v.categories, page: v.page, limit: v.limit, json });
   if (action === "categories") return cmdSkillCategories(run, json);
   if (action === "list") return cmdSkillList(json);
-  if (action === "add") return handleSkillAdd(rest, config, json);
+  if (action === "add") return handleSkillAdd(rest, v, config, json);
   if (action === "download") return handleSkillDownload(rest, v, config, json);
   if (action === "remove") return handleSkillRemove(rest, json);
   if (action === "check") return handleSkillCheck(run, rest, json);
+  if (action === "verify") return handleSkillVerify(rest, config, json);
   errorLine(`Unknown skill command: ${action}`);
-  errorLine("Valid: search, categories, add, download, remove, check, list");
+  errorLine("Valid: search, categories, add, download, remove, check, list, verify");
   process.exitCode = 1;
 }
 function handleEventCommand(run, action, rest, v, json) {