@onebullex-group/cli 1.3.1 → 1.5.0

package/CHANGELOG.md

@@ -1,61 +1,123 @@
-# Changelog
-
-All notable changes to `@onebullex-group/cli` (formerly briefly published as `@onemore-group/cli`).
-
-## 1.1.2 — 2026-05-16
-
-Rename only — no functional changes from 1.1.1.
-
-- Package renamed from `@onebullex/cli` → `@onebullex-group/cli`. The
-  CLI binary remains `onebullex` (unchanged), the README still
-  describes "OneBullEx Open API V2" — only the npm package name moved.
-- A short-lived `@onemore-group/cli@1.1.2` was published earlier the
-  same day and has been unpublished. If you installed it, switch to
-  `@onebullex-group/cli@1.1.2` (identical contents).
-- Existing 1.1.0 / 1.1.1 were never published.
-
-## Unreleased
-
-- ci(cli): nightly `cli-e2e-nightly` job in `.gitlab-ci.yml`, runs the full
-  `tests/e2e/` suite when triggered by a Pipeline Schedule. Reads
-  `ONEBULLEX_E2E_API_KEY` / `_SECRET` from GitLab CI variables. Marked
-  `allow_failure: true` with one retry so testnet flakes don't block the
-  schedule.
-- test(cli): testnet write e2e suite covering all 20 V2 write endpoints,
-  organized into 4 business-flow blocks (configuration / limit orders /
-  plan + order-entrust / position + TP-SL). Gated on `ONEBULLEX_E2E=1`
-  with separate `ONEBULLEX_E2E_API_KEY` / `_SECRET` env vars. Default-
-  skipped. Each block has best-effort cleanup so consecutive runs leave
-  the testnet account state-clean.
-
-## 1.1.0 — 2026-05-15
-
-Adds Phase 2: 20 write operations covering order placement / cancellation,
-plan + TP/SL entrust management, and position margin / leverage / type changes.
-
-- 5 order write commands (create, create-batch, cancel, cancel-batch, cancel-all)
-- 7 entrust write commands (create-plan, create-profit, cancel-plan,
-  cancel-profit, update-profit, cancel-all-plan, cancel-all-profit)
-- 2 order-entrust write commands (cancel, cancel-all)
-- 6 position write commands (adjust-leverage, margin, auto-margin, close-all,
-  merge, change-type)
-- New `executeWrite` helper guards every write with a default dry-run; `--confirm`
-  is required for the actual POST. Dry-run preview goes to stdout, the
-  `--confirm` hint goes to stderr.
-- Drift-detection lint now covers all 60 V2 endpoints; the `PHASE1_DEFERRED`
-  whitelist is empty.
-- Adds 21 new write command integration tests verifying both the dry-run path
-  (no fetch, structured preview) and the confirm path (camelCase body shape).
-
-## 1.0.0 — 2026-05-15
-
-Initial release. Covers OneBullEx Open API V2:
-
-- 22 public endpoints (server time, symbol/ticker/depth/kline/funding/...)
-- 18 private read-only endpoints (balance/order/entrust/position/...)
-- HMAC-SHA256 auth aligned byte-for-byte with `SignatureUtilsV2.java`
-- 6 config commands with multi-profile support, `--stdin` enforcement on
-  api-key/secret, and 0600 file mode
-- Drift-detection lint comparing CLI registry against V2 markdown docs
-  (endpoint coverage + parameter coverage + write-safety)
-- 155 unit / integration tests + 5 testnet e2e smoke tests
+# Changelog
+
+All notable changes to `@onebullex-group/cli` (formerly briefly published as `@onemore-group/cli`).
+
+## 1.1.2 — 2026-05-16
+
+Rename only — no functional changes from 1.1.1.
+
+- Package renamed from `@onebullex/cli` → `@onebullex-group/cli`. The
+  CLI binary remains `onebullex` (unchanged), the README still
+  describes "OneBullEx Open API V2" — only the npm package name moved.
+- A short-lived `@onemore-group/cli@1.1.2` was published earlier the
+  same day and has been unpublished. If you installed it, switch to
+  `@onebullex-group/cli@1.1.2` (identical contents).
+- Existing 1.1.0 / 1.1.1 were never published.
+
+## 1.5.0 — 2026-10-07
+
+Syncs V2 doc updates since 1.4.0 (Java SDK: cursor bills, async position
+export, system user-info/download, public index-price). Registry 65 → 68.
+
+- `position history-async` — GET `/v2/position/history/async`. Returns
+  `downloadId`. Local 1-year range check so an over-wide request cannot burn
+  one of the 5 monthly export slots.
+- `system user-info` — GET `/v2/system/user/info`. New `system` command group.
+- `system download <downloadId>` — GET `/v2/system/download`. Writes the Excel
+  stream to disk (`--out` file or directory; default `~/.onebullex/downloads/`)
+  and prints `{path, bytes, downloadId}`. New `core/download.ts`.
+- `HttpClient.getPrivateBinary` — JSON business errors (`file_not_ready`, …)
+  still throw `OneBullExError`; a file stream is returned as bytes. Matches
+  Java `BaseClientV2.executeGetBytes`.
+- `balance bills` switched from `page`/`size` to cursor `id`/`direction`/`limit`
+  plus optional `--symbol`.
+- `index-price get` is public again (docs dropped the auth requirement).
+- Breaking: ticker commands renamed `--time-range` → required
+  `--time-range-type` (API field `timeRangeType`). The old flag name was never
+  sent as `timeRangeType` on the MCP path, so live calls got `invalid param`.
+- `HttpClient` upper-cases the `direction` query param before signing. The
+  server is case-sensitive (`next` → `invalid_direction`); done in the client so
+  MCP calls, which skip commander actions, get it too.
+- `depth get --level` and `order list-unfinished --direction` are now required
+  (the API already rejected the request without them).
+- `entrust create-plan --stop-price` is required (server always demanded it).
+- Help text: `positionSide` is LONG/SHORT (no BOTH/NET); plan trigger types
+  are MARK_PRICE/LATEST_PRICE; origQty is integer contracts.
+- Fix: `config init --yes --api-key/--secret/--base-url` silently dropped those
+  values (commander bound them to the same-named root options). Added
+  `--no-set-default` so a second profile can be added without changing the
+  default.
+- Docs: README "多个 API Key（多 profile）" section.
+- Coverage lint: CRLF-safe `parseDocParams` (Windows checkouts were silently
+  skipping the parameter lint); scoped `CLI_ONLY_PARAMS` (`--out`) and
+  positional aliases (`plan-get <id>` → `entrustId`).
+
+## 1.4.0 — 2026-08-26
+
+Syncs the three V2 endpoints added to the Java SDK since 1.3.1 (commits
+`566645a`, `f684e52`). Registry now covers 65 documented endpoints.
+
+- `balance funding` — GET `/v2/balance/funding`, funding (USDT) wallet balance.
+- `bot redeeming-info` — GET `/v2/bot/redeeming-info`, redemption queue summary.
+  Introduces a new top-level `bot` command group.
+- `balance transfer` — POST `/v2/balance/transfer`, moves funds between the
+  funding and contract wallets. **The first command in this CLI that moves real
+  money rather than trading state.** Default dry-run applies as with every write.
+- New `core/bill-no.ts` (exported as `@onebullex-group/cli/core/bill-no`):
+  generates the `obe-<uuid>` idempotency key that `balance transfer` requires.
+  `--bill-no` is therefore optional at the CLI boundary even though the API
+  marks it required. Retrying a transfer MUST reuse the original billNo — a
+  fresh one is treated as a second transfer by the exchange.
+- The coverage lint gained a scoped `CLI_DEFAULTED_PARAMS` exception so a
+  doc-required param may be a plain `--option` when the CLI defaults it. Scoped
+  per `METHOD path`; deliberately not added to `GLOBAL_FLAGS`, which would have
+  dropped billNo from the derived MCP input schema.
+- Docs: README endpoint counts corrected to the registry-derived 65
+  (21 public / 23 private read / 21 write). The previous "60" had been stale
+  since two endpoints were added without updating it.
+
+## Unreleased
+
+- ci(cli): nightly `cli-e2e-nightly` job in `.gitlab-ci.yml`, runs the full
+  `tests/e2e/` suite when triggered by a Pipeline Schedule. Reads
+  `ONEBULLEX_E2E_API_KEY` / `_SECRET` from GitLab CI variables. Marked
+  `allow_failure: true` with one retry so testnet flakes don't block the
+  schedule.
+- test(cli): testnet write e2e suite covering all 20 V2 write endpoints,
+  organized into 4 business-flow blocks (configuration / limit orders /
+  plan + order-entrust / position + TP-SL). Gated on `ONEBULLEX_E2E=1`
+  with separate `ONEBULLEX_E2E_API_KEY` / `_SECRET` env vars. Default-
+  skipped. Each block has best-effort cleanup so consecutive runs leave
+  the testnet account state-clean.
+
+## 1.1.0 — 2026-05-15
+
+Adds Phase 2: 20 write operations covering order placement / cancellation,
+plan + TP/SL entrust management, and position margin / leverage / type changes.
+
+- 5 order write commands (create, create-batch, cancel, cancel-batch, cancel-all)
+- 7 entrust write commands (create-plan, create-profit, cancel-plan,
+  cancel-profit, update-profit, cancel-all-plan, cancel-all-profit)
+- 2 order-entrust write commands (cancel, cancel-all)
+- 6 position write commands (adjust-leverage, margin, auto-margin, close-all,
+  merge, change-type)
+- New `executeWrite` helper guards every write with a default dry-run; `--confirm`
+  is required for the actual POST. Dry-run preview goes to stdout, the
+  `--confirm` hint goes to stderr.
+- Drift-detection lint now covers all 60 V2 endpoints; the `PHASE1_DEFERRED`
+  whitelist is empty.
+- Adds 21 new write command integration tests verifying both the dry-run path
+  (no fetch, structured preview) and the confirm path (camelCase body shape).
+
+## 1.0.0 — 2026-05-15
+
+Initial release. Covers OneBullEx Open API V2:
+
+- 22 public endpoints (server time, symbol/ticker/depth/kline/funding/...)
+- 18 private read-only endpoints (balance/order/entrust/position/...)
+- HMAC-SHA256 auth aligned byte-for-byte with `SignatureUtilsV2.java`
+- 6 config commands with multi-profile support, `--stdin` enforcement on
+  api-key/secret, and 0600 file mode
+- Drift-detection lint comparing CLI registry against V2 markdown docs
+  (endpoint coverage + parameter coverage + write-safety)
+- 155 unit / integration tests + 5 testnet e2e smoke tests