@onebullex-group/cli 1.4.0 → 1.5.0

package/CHANGELOG.md

@@ -14,6 +14,44 @@ Rename only — no functional changes from 1.1.1.
   `@onebullex-group/cli@1.1.2` (identical contents).
 - Existing 1.1.0 / 1.1.1 were never published.
 
+## 1.5.0 — 2026-10-07
+
+Syncs V2 doc updates since 1.4.0 (Java SDK: cursor bills, async position
+export, system user-info/download, public index-price). Registry 65 → 68.
+
+- `position history-async` — GET `/v2/position/history/async`. Returns
+  `downloadId`. Local 1-year range check so an over-wide request cannot burn
+  one of the 5 monthly export slots.
+- `system user-info` — GET `/v2/system/user/info`. New `system` command group.
+- `system download <downloadId>` — GET `/v2/system/download`. Writes the Excel
+  stream to disk (`--out` file or directory; default `~/.onebullex/downloads/`)
+  and prints `{path, bytes, downloadId}`. New `core/download.ts`.
+- `HttpClient.getPrivateBinary` — JSON business errors (`file_not_ready`, …)
+  still throw `OneBullExError`; a file stream is returned as bytes. Matches
+  Java `BaseClientV2.executeGetBytes`.
+- `balance bills` switched from `page`/`size` to cursor `id`/`direction`/`limit`
+  plus optional `--symbol`.
+- `index-price get` is public again (docs dropped the auth requirement).
+- Breaking: ticker commands renamed `--time-range` → required
+  `--time-range-type` (API field `timeRangeType`). The old flag name was never
+  sent as `timeRangeType` on the MCP path, so live calls got `invalid param`.
+- `HttpClient` upper-cases the `direction` query param before signing. The
+  server is case-sensitive (`next` → `invalid_direction`); done in the client so
+  MCP calls, which skip commander actions, get it too.
+- `depth get --level` and `order list-unfinished --direction` are now required
+  (the API already rejected the request without them).
+- `entrust create-plan --stop-price` is required (server always demanded it).
+- Help text: `positionSide` is LONG/SHORT (no BOTH/NET); plan trigger types
+  are MARK_PRICE/LATEST_PRICE; origQty is integer contracts.
+- Fix: `config init --yes --api-key/--secret/--base-url` silently dropped those
+  values (commander bound them to the same-named root options). Added
+  `--no-set-default` so a second profile can be added without changing the
+  default.
+- Docs: README "多个 API Key（多 profile）" section.
+- Coverage lint: CRLF-safe `parseDocParams` (Windows checkouts were silently
+  skipping the parameter lint); scoped `CLI_ONLY_PARAMS` (`--out`) and
+  positional aliases (`plan-get <id>` → `entrustId`).
+
 ## 1.4.0 — 2026-08-26
 
 Syncs the three V2 endpoints added to the Java SDK since 1.3.1 (commits

package/README.md

@@ -2,7 +2,7 @@
 
 OneBullEx Open API V2 的命令行工具。
 
-> 当前版本（1.4.0）覆盖 V2 文档的全部 65 个端点：21 个公开 + 23 个私有只读 + 21 个写。所有写命令默认 dry-run，需 `--confirm` 才真发请求。
+> 当前版本（1.5.0）覆盖 V2 文档的全部 68 个端点：22 个公开 + 25 个私有只读 + 21 个写。所有写命令默认 dry-run，需 `--confirm` 才真发请求。
 
 ---
 
@@ -50,24 +50,24 @@ onebullex position list
 
 完整命令列表跟 V2 文档逐项对齐，可用 `onebullex <group> --help` 查询。
 
-### 公开（21）
+### 公开（22）
 
 ```
 public time                    GET /v2/public/time
 symbol  list / get / coins / all
-ticker  get / list / agg / agg-list
-depth   get
+ticker  get / list / agg / agg-list   （`--time-range-type` 必填，如 H24 / UTC_P_8）
+depth   get                           （`--level` 必填，1–50）
 deal    list
 kline   list
 mark-price  list / get
-index-price list / get*       (* index-price get 需要认证)
+index-price list / get
 funding rate / history
 risk-balance list
 open-interest get
 leverage brackets-list / brackets-get
 ```
 
-### 私有只读（23）
+### 私有只读（25）
 
 ```
 listen-key get
@@ -77,7 +77,8 @@ order list-unfinished / list-unfinished-multi / list / list-by-ids /
       list-history / get / trades
 entrust plan-list / plan-history / plan-get / profit-list / profit-get
 order-entrust list
-position list
+position list / confs / history / history-async
+system  user-info / download
 ```
 
 ### 写操作（21）
@@ -99,11 +100,11 @@ position adjust-leverage / margin / auto-margin /
 ```bash
 # dry-run（默认，退出码 4，preview 在 stdout）
 onebullex order create --symbol btc_usdt --order-type LIMIT \
-  --order-side BUY --position-side LONG --orig-qty 0.001 --price 50000
+  --order-side BUY --position-side LONG --orig-qty 1 --price 50000
 
 # 真正下单
 onebullex order create --symbol btc_usdt --order-type LIMIT \
-  --order-side BUY --position-side LONG --orig-qty 0.001 --price 50000 \
+  --order-side BUY --position-side LONG --orig-qty 1 --price 50000 \
   --confirm
 ```
 
@@ -130,7 +131,7 @@ onebullex balance transfer --from FUNDING --to CONTRACT --amount 500 \
 ### 配置管理（6）
 
 ```
-config init           交互式向导
+config init           交互式向导；新增 profile，--no-set-default 不改默认
 config set <key>      仅 base-url / identify / env 可用 --value
                       api-key / secret 必须用 --stdin
 config show           [--reveal] 默认脱敏，加 --reveal 后明文（带 stderr 警告）
@@ -161,6 +162,46 @@ config remove <p>     删除 profile（防止删掉最后一个）
 
 可通过 `ONEBULLEX_CONFIG_PATH` 环境变量覆盖路径（脚本/CI 友好）。
 
+## 多个 API Key（多 profile）
+
+一个 profile 对应一套 API Key。同一台电脑要用多个 Key，就在同一个配置文件里建多个 profile，调用时选一个。
+
+**添加 profile**：每次 `config init` 新增（或覆盖同名）一个 profile，已有的 profile 保留。默认会把新 profile 设为默认，加 `--no-set-default` 则不改默认。
+
+```bash
+onebullex config init                    # 交互式：Profile name 填 alice，按提示填 key/secret
+onebullex config init --no-set-default   # 再加一个：Profile name 填 bob，默认仍是 alice
+onebullex config list-profiles           # 带 * 的是默认 profile
+```
+
+非交互（脚本）时，key/secret 建议用 `--stdin` 写入，不进 shell history：
+
+```bash
+onebullex config init --yes --no-set-default --name bob --env prod
+onebullex --profile bob config set api-key --stdin   # 粘贴后 Ctrl+D（Windows: Ctrl+Z 回车）
+onebullex --profile bob config set secret  --stdin
+```
+
+**选用 profile**（优先级从高到低）：
+
+```bash
+onebullex --profile bob balance list            # 单条命令临时切换，不改默认
+ONEBULLEX_PROFILE=bob onebullex balance list    # 当前 shell / 脚本内生效
+onebullex config use bob                        # 改默认 profile（影响之后所有未指定的调用）
+```
+
+多个终端或多个 Claude 会话同时跑时，**用 `--profile` 或 `ONEBULLEX_PROFILE`，不要靠 `config use` 来回切**：默认 profile 存在共享的配置文件里，一边切换，另一边下一次调用就会用错账户。
+
+需要完全隔离（例如每个账户一份文件、不同权限的机器用户）时，用 `ONEBULLEX_CONFIG_PATH` 指向不同的配置文件：
+
+```bash
+ONEBULLEX_CONFIG_PATH=~/.onebullex/alice.json onebullex balance list
+```
+
+profile 名写错时会报 `未找到 baseUrl 配置`，先用 `config list-profiles` 核对名字。
+
+MCP 场景下怎么同时连多个账户，见 [mcp/README.md](../mcp/README.md#多个-api-key多账户)。
+
 ## 优先级与全局 flag
 
 每次调用按以下顺序解析：

package/dist/{chunk-KS5FFAKW.js → chunk-NMW73ILO.js}

@@ -128,7 +128,7 @@ var REGISTRY = [
     method: "GET",
     path: "/v2/public/q/symbol-index-price",
     isWrite: false,
-    needsAuth: true,
+    needsAuth: false,
     implFile: "src/commands/index-price/get.ts"
   },
   {
@@ -356,6 +356,30 @@ var REGISTRY = [
     needsAuth: true,
     implFile: "src/commands/position/history.ts"
   },
+  {
+    command: "position history-async",
+    method: "GET",
+    path: "/v2/position/history/async",
+    isWrite: false,
+    needsAuth: true,
+    implFile: "src/commands/position/history-async.ts"
+  },
+  {
+    command: "system user-info",
+    method: "GET",
+    path: "/v2/system/user/info",
+    isWrite: false,
+    needsAuth: true,
+    implFile: "src/commands/system/user-info.ts"
+  },
+  {
+    command: "system download",
+    method: "GET",
+    path: "/v2/system/download",
+    isWrite: false,
+    needsAuth: true,
+    implFile: "src/commands/system/download.ts"
+  },
   // ───── Phase 2: write operations ─────
   {
     command: "balance transfer",

package/dist/chunk-SGLPG2FL.js

@@ -0,0 +1,39 @@
+#!/usr/bin/env node
+
+// src/core/download.ts
+import { existsSync, mkdirSync, statSync, writeFileSync } from "fs";
+import { homedir } from "os";
+import { dirname, join, resolve } from "path";
+var DOWNLOAD_PATH = "/v2/system/download";
+var DEFAULT_DOWNLOAD_DIR = join(homedir(), ".onebullex", "downloads");
+function defaultFilename(downloadId) {
+  return `position_history_${downloadId.replace(/[^\w.-]/g, "_")}.xlsx`;
+}
+function resolveTarget(out, filename, cwd = process.cwd()) {
+  if (!out) return join(DEFAULT_DOWNLOAD_DIR, filename);
+  const abs = resolve(cwd, out);
+  const looksLikeDir = /[\\/]$/.test(out) || existsSync(abs) && statSync(abs).isDirectory();
+  return looksLikeDir ? join(abs, filename) : abs;
+}
+async function downloadToFile(opts) {
+  const downloadId = opts.downloadId.trim();
+  if (!downloadId) throw new Error("downloadId is required");
+  const file = await opts.client.getPrivateBinary(DOWNLOAD_PATH, { downloadId });
+  const target = resolveTarget(opts.out, file.filename ?? defaultFilename(downloadId), opts.cwd);
+  mkdirSync(dirname(target), { recursive: true });
+  writeFileSync(target, file.bytes);
+  return {
+    downloadId,
+    path: target,
+    bytes: file.bytes.length,
+    contentType: file.contentType
+  };
+}
+
+export {
+  DOWNLOAD_PATH,
+  DEFAULT_DOWNLOAD_DIR,
+  defaultFilename,
+  resolveTarget,
+  downloadToFile
+};

package/dist/{chunk-3XZDH7DV.js → chunk-YE5LER6U.js}

@@ -3,12 +3,12 @@ import {
   generateNonce,
   sign
 } from "./chunk-LVNSFQXS.js";
-import {
-  OneBullExError
-} from "./chunk-JRUFIHU7.js";
 import {
   redactObject
 } from "./chunk-OOLZIYXS.js";
+import {
+  OneBullExError
+} from "./chunk-JRUFIHU7.js";
 
 // src/core/http-client.ts
 function flattenForSign(body) {
@@ -46,6 +46,37 @@ var HttpClient = class {
   async postPrivate(path, body) {
     return this.send("POST", path, void 0, body, true, false);
   }
+  /**
+   * 签名 GET，返回原始字节（用于 /v2/system/download 这类文件流接口）。
+   *
+   * 业务错误（文件未就绪、次数超限等）仍以 JSON 返回，此时按普通响应校验并
+   * 抛 OneBullExError；对齐 Java 端 BaseClientV2.executeWithRetryBytes。
+   */
+  async getPrivateBinary(path, query) {
+    return this.withRetry(async () => {
+      const res = await this.request("GET", path, query, void 0, true);
+      const bytes = new Uint8Array(await res.arrayBuffer());
+      const contentType = res.headers.get("content-type") ?? "";
+      if (isJsonBody(contentType, bytes)) {
+        const json = JSON.parse(new TextDecoder().decode(bytes));
+        this.unwrap(json, res.status, path);
+        throw new OneBullExError(
+          "Expected a file stream but the server returned a JSON success body",
+          "UNEXPECTED_JSON",
+          res.status,
+          path
+        );
+      }
+      if (this.cfg.debug) {
+        console.error("[debug response]", `${bytes.length} bytes (${contentType})`);
+      }
+      return {
+        bytes,
+        contentType,
+        filename: parseFilename(res.headers.get("content-disposition"))
+      };
+    });
+  }
   /**
    * GET 请求重试包装：网络错误最多重试 2 次（共 3 次尝试），延迟 300ms / 900ms。
    * OneBullExError（业务错误）不重试。
@@ -66,12 +97,34 @@ var HttpClient = class {
     throw lastErr;
   }
   async send(method, path, query, body, requireAuth, raw) {
+    const res = await this.request(method, path, query, body, requireAuth);
+    const json = await res.json();
+    if (this.cfg.debug) {
+      console.error("[debug response]", JSON.stringify(redactObject(json)));
+    }
+    if (raw) {
+      return json;
+    }
+    return this.unwrap(json, res.status, path);
+  }
+  /** Normalize: V2 API uses "code"/"msg"; some endpoints use "returnCode"/"msgInfo" */
+  unwrap(json, status, path) {
+    const returnCode = json.code ?? json.returnCode;
+    const msgInfo = json.msg ?? json.msgInfo ?? "";
+    if (returnCode !== 0 && returnCode !== "0") {
+      throw new OneBullExError(msgInfo, returnCode ?? "UNKNOWN", status, path);
+    }
+    return json.data;
+  }
+  /** 签名 + 发送，返回 HTTP 层成功（2xx）的 Response，由调用方决定如何解析 body。 */
+  async request(method, path, query, body, requireAuth) {
     const headers = {
       "Content-Type": "application/json",
       Accept: "application/json",
       "User-Agent": "@onebullex-group/cli"
     };
     let url = `${this.cfg.baseUrl}${path}`;
+    if (method === "GET") query = normalizeQuery(query);
     const params = method === "GET" ? { ...query ?? {} } : flattenForSign(body);
     if (requireAuth) {
       if (!this.cfg.apiKey || !this.cfg.secret) {
@@ -124,23 +177,37 @@ var HttpClient = class {
         path
       );
     }
-    const json = await res.json();
-    if (this.cfg.debug) {
-      console.error("[debug response]", JSON.stringify(redactObject(json)));
-    }
-    if (raw) {
-      return json;
-    }
-    const returnCode = json.code ?? json.returnCode;
-    const msgInfo = json.msg ?? json.msgInfo ?? "";
-    if (returnCode !== 0 && returnCode !== "0") {
-      throw new OneBullExError(msgInfo, returnCode ?? "UNKNOWN", res.status, path);
-    }
-    return json.data;
+    return res;
   }
 };
+function normalizeQuery(query) {
+  if (!query || typeof query.direction !== "string") return query;
+  return { ...query, direction: query.direction.toUpperCase() };
+}
+function isJsonBody(contentType, bytes) {
+  if (contentType.toLowerCase().includes("json")) return true;
+  let i = 0;
+  while (i < bytes.length && /\s/.test(String.fromCharCode(bytes[i] ?? 0))) i++;
+  return i < bytes.length && bytes[i] === 123;
+}
+function parseFilename(disposition) {
+  if (!disposition) return void 0;
+  const star = /filename\*\s*=\s*(?:[\w-]+'[^']*')?([^;]+)/i.exec(disposition);
+  const plain = /filename\s*=\s*"?([^";]+)"?/i.exec(disposition);
+  let name = star?.[1] ?? plain?.[1];
+  if (!name) return void 0;
+  try {
+    name = decodeURIComponent(name.trim());
+  } catch {
+    name = name.trim();
+  }
+  const base = name.split(/[\\/]/).pop()?.trim();
+  return base && base !== "." && base !== ".." ? base : void 0;
+}
 
 export {
   flattenForSign,
-  HttpClient
+  HttpClient,
+  normalizeQuery,
+  parseFilename
 };

package/dist/core/download.d.ts

@@ -0,0 +1,41 @@
+import { HttpClient } from './http-client.js';
+import './types.js';
+
+/**
+ * 异步导出文件下载（`GET /v2/system/download`）。
+ *
+ * 接口成功时返回文件流（Excel），未就绪/失败/超限时返回 JSON 错误。CLI 命令与
+ * MCP 工具共用这里的落盘逻辑：MCP 不能把二进制塞进 JSON 文本结果，只能写到本地
+ * 再把路径返回给 AI。
+ *
+ * 限制提醒：同一 downloadId 一小时内最多成功下载 5 次 —— 每次调用都会消耗额度，
+ * 不要用它来"轮询"任务是否完成。
+ */
+
+declare const DOWNLOAD_PATH = "/v2/system/download";
+/** `--out` 省略时的落盘目录 */
+declare const DEFAULT_DOWNLOAD_DIR: string;
+interface DownloadResult {
+    downloadId: string;
+    /** 实际写入的绝对路径 */
+    path: string;
+    bytes: number;
+    contentType: string;
+}
+/** 服务端未给出 Content-Disposition 时的文件名，与 Java 端 downloadToFile 一致 */
+declare function defaultFilename(downloadId: string): string;
+/**
+ * 解析最终落盘路径：
+ * - 未给 out → DEFAULT_DOWNLOAD_DIR/<filename>
+ * - out 是已存在的目录，或以 / \ 结尾 → out/<filename>
+ * - 否则 out 视为文件路径
+ */
+declare function resolveTarget(out: string | undefined, filename: string, cwd?: string): string;
+declare function downloadToFile(opts: {
+    client: HttpClient;
+    downloadId: string;
+    out?: string;
+    cwd?: string;
+}): Promise<DownloadResult>;
+
+export { DEFAULT_DOWNLOAD_DIR, DOWNLOAD_PATH, type DownloadResult, defaultFilename, downloadToFile, resolveTarget };

package/dist/core/download.js

@@ -0,0 +1,15 @@
+#!/usr/bin/env node
+import {
+  DEFAULT_DOWNLOAD_DIR,
+  DOWNLOAD_PATH,
+  defaultFilename,
+  downloadToFile,
+  resolveTarget
+} from "../chunk-SGLPG2FL.js";
+export {
+  DEFAULT_DOWNLOAD_DIR,
+  DOWNLOAD_PATH,
+  defaultFilename,
+  downloadToFile,
+  resolveTarget
+};

package/dist/core/http-client.d.ts

@@ -20,12 +20,43 @@ declare class HttpClient {
         raw?: boolean;
     }): Promise<T>;
     postPrivate<T>(path: string, body?: Record<string, unknown>): Promise<T>;
+    /**
+     * 签名 GET，返回原始字节（用于 /v2/system/download 这类文件流接口）。
+     *
+     * 业务错误（文件未就绪、次数超限等）仍以 JSON 返回，此时按普通响应校验并
+     * 抛 OneBullExError；对齐 Java 端 BaseClientV2.executeWithRetryBytes。
+     */
+    getPrivateBinary(path: string, query?: Query): Promise<BinaryResponse>;
     /**
      * GET 请求重试包装：网络错误最多重试 2 次（共 3 次尝试），延迟 300ms / 900ms。
      * OneBullExError（业务错误）不重试。
      */
     private withRetry;
     private send;
+    /** Normalize: V2 API uses "code"/"msg"; some endpoints use "returnCode"/"msgInfo" */
+    private unwrap;
+    /** 签名 + 发送，返回 HTTP 层成功（2xx）的 Response，由调用方决定如何解析 body。 */
+    private request;
+}
+/**
+ * GET query 归一化，在签名之前执行（签名与 URL 用同一份值）。
+ *
+ * `direction` 在所有 V2 GET 接口里都是大写枚举（游标 `NEXT`/`PREV`，
+ * listUnfinished 的 `BUY`/`SELL`），服务端区分大小写，`next` 会返回
+ * `invalid_direction`。放在这里而不是各命令里，是因为 MCP 路径不经过
+ * commander action。
+ */
+declare function normalizeQuery(query: Query | undefined): Query | undefined;
+interface BinaryResponse {
+    bytes: Uint8Array;
+    contentType: string;
+    /** 从 Content-Disposition 解析出的文件名；服务端未给出时为 undefined */
+    filename?: string;
 }
+/**
+ * 解析 `attachment; filename="x.xlsx"` / `filename*=UTF-8''x.xlsx`。
+ * 只取 basename，防止服务端给出 `../` 之类的路径。
+ */
+declare function parseFilename(disposition: string | null): string | undefined;
 
-export { type FetchFn, HttpClient, type Query, flattenForSign };
+export { type BinaryResponse, type FetchFn, HttpClient, type Query, flattenForSign, normalizeQuery, parseFilename };

package/dist/core/http-client.js

@@ -1,13 +1,17 @@
 #!/usr/bin/env node
 import {
   HttpClient,
-  flattenForSign
-} from "../chunk-3XZDH7DV.js";
+  flattenForSign,
+  normalizeQuery,
+  parseFilename
+} from "../chunk-YE5LER6U.js";
 import "../chunk-LVNSFQXS.js";
-import "../chunk-JRUFIHU7.js";
 import "../chunk-OOLZIYXS.js";
 import "../chunk-ZYO5P4DH.js";
+import "../chunk-JRUFIHU7.js";
 export {
   HttpClient,
-  flattenForSign
+  flattenForSign,
+  normalizeQuery,
+  parseFilename
 };

package/dist/index.js

@@ -14,20 +14,23 @@ import {
   resolveConfig,
   writeConfigFile
 } from "./chunk-AKGCHJPQ.js";
+import {
+  downloadToFile
+} from "./chunk-SGLPG2FL.js";
 import {
   HttpClient
-} from "./chunk-3XZDH7DV.js";
+} from "./chunk-YE5LER6U.js";
 import "./chunk-LVNSFQXS.js";
+import {
+  redactSecret
+} from "./chunk-OOLZIYXS.js";
+import "./chunk-ZYO5P4DH.js";
 import {
   ConfigError,
   DryRunInterception,
   EXIT,
   OneBullExError
 } from "./chunk-JRUFIHU7.js";
-import {
-  redactSecret
-} from "./chunk-OOLZIYXS.js";
-import "./chunk-ZYO5P4DH.js";
 
 // src/index.ts
 import { Command } from "commander";
@@ -116,11 +119,11 @@ function prune(o) {
   return out;
 }
 function registerTickerGet(parent, ctx) {
-  parent.command("get <symbol>").description("Get ticker for a symbol (GET /v2/public/q/ticker)").option("--time-range <type>", "time range type").action(async (symbol, opts) => {
+  parent.command("get <symbol>").description("Get ticker for a symbol (GET /v2/public/q/ticker)").requiredOption("--time-range-type <type>", "H24, or calendar-day window UTC_P_0..UTC_P_12 / UTC_N_1..UTC_N_12 (e.g. UTC_P_8)").action(async (symbol, opts) => {
     const c = ctx.http({ requireAuth: false });
     const data = await c.getPublic(
       "/v2/public/q/ticker",
-      prune({ symbol, timeRangeType: opts.timeRange })
+      prune({ symbol, timeRangeType: opts.timeRangeType })
     );
     const { render: render2, effectiveFormat: effectiveFormat2 } = await import("./output-UIZGG7EU.js");
     ctx.stdout(
@@ -141,11 +144,11 @@ function prune2(o) {
   return out;
 }
 function registerTickerList(parent, ctx) {
-  parent.command("list").description("List all tickers (GET /v2/public/q/tickers)").requiredOption("--time-range <type>", "time range type").action(async (opts) => {
+  parent.command("list").description("List all tickers (GET /v2/public/q/tickers)").requiredOption("--time-range-type <type>", "H24, or calendar-day window UTC_P_0..UTC_P_12 / UTC_N_1..UTC_N_12 (e.g. UTC_P_8)").action(async (opts) => {
     const c = ctx.http({ requireAuth: false });
     const data = await c.getPublic(
       "/v2/public/q/tickers",
-      prune2({ timeRangeType: opts.timeRange })
+      prune2({ timeRangeType: opts.timeRangeType })
     );
     const { render: render2, effectiveFormat: effectiveFormat2 } = await import("./output-UIZGG7EU.js");
     ctx.stdout(
@@ -166,11 +169,11 @@ function prune3(o) {
   return out;
 }
 function registerTickerAgg(parent, ctx) {
-  parent.command("agg <symbol>").description("Get aggregated ticker for a symbol (GET /v2/public/q/agg-ticker)").option("--time-range <type>", "time range type").action(async (symbol, opts) => {
+  parent.command("agg <symbol>").description("Get aggregated ticker for a symbol (GET /v2/public/q/agg-ticker)").requiredOption("--time-range-type <type>", "H24, or calendar-day window UTC_P_0..UTC_P_12 / UTC_N_1..UTC_N_12 (e.g. UTC_P_8)").action(async (symbol, opts) => {
     const c = ctx.http({ requireAuth: false });
     const data = await c.getPublic(
       "/v2/public/q/agg-ticker",
-      prune3({ symbol, timeRangeType: opts.timeRange })
+      prune3({ symbol, timeRangeType: opts.timeRangeType })
     );
     const { render: render2, effectiveFormat: effectiveFormat2 } = await import("./output-UIZGG7EU.js");
     ctx.stdout(
@@ -191,11 +194,11 @@ function prune4(o) {
   return out;
 }
 function registerTickerAggList(parent, ctx) {
-  parent.command("agg-list").description("List all aggregated tickers (GET /v2/public/q/agg-tickers)").requiredOption("--time-range <type>", "time range type").action(async (opts) => {
+  parent.command("agg-list").description("List all aggregated tickers (GET /v2/public/q/agg-tickers)").requiredOption("--time-range-type <type>", "H24, or calendar-day window UTC_P_0..UTC_P_12 / UTC_N_1..UTC_N_12 (e.g. UTC_P_8)").action(async (opts) => {
     const c = ctx.http({ requireAuth: false });
     const data = await c.getPublic(
       "/v2/public/q/agg-tickers",
-      prune4({ timeRangeType: opts.timeRange })
+      prune4({ timeRangeType: opts.timeRangeType })
     );
     const { render: render2, effectiveFormat: effectiveFormat2 } = await import("./output-UIZGG7EU.js");
     ctx.stdout(
@@ -216,7 +219,7 @@ function prune5(o) {
   return out;
 }
 function registerDepthGet(parent, ctx) {
-  parent.command("get <symbol>").description("Get order book depth (GET /v2/public/q/depth)").option("--level <level>", "depth level", parseInt).action(async (symbol, opts) => {
+  parent.command("get <symbol>").description("Get order book depth (GET /v2/public/q/depth)").requiredOption("--level <level>", "depth levels, 1-50", parseInt).action(async (symbol, opts) => {
     const c = ctx.http({ requireAuth: false });
     const data = await c.getPublic(
       "/v2/public/q/depth",
@@ -358,8 +361,8 @@ function registerIndexPriceList(parent, ctx) {
 // src/commands/index-price/get.ts
 function registerIndexPriceGet(parent, ctx) {
   parent.command("get <symbol>").description("Get index price for a symbol (GET /v2/public/q/symbol-index-price)").action(async (symbol) => {
-    const c = ctx.http({ requireAuth: true });
-    const data = await c.getPrivate("/v2/public/q/symbol-index-price", { symbol });
+    const c = ctx.http({ requireAuth: false });
+    const data = await c.getPublic("/v2/public/q/symbol-index-price", { symbol });
     const { render: render2, effectiveFormat: effectiveFormat2 } = await import("./output-UIZGG7EU.js");
     ctx.stdout(
       render2(data, {
@@ -548,18 +551,22 @@ function prune12(o) {
   return out;
 }
 function registerBalanceBills(parent, ctx) {
-  parent.command("bills").description("List balance bill records (GET /v2/balance/bills)").option("--coin <coin>", "filter by coin").option("--type <type>", "bill type").option("--start-time <ms>", "start time in milliseconds", parseInt).option("--end-time <ms>", "end time in milliseconds", parseInt).option("--page <page>", "page number", parseInt).option("--size <size>", "page size", parseInt).action(
+  parent.command("bills").description(
+    "List balance bill records, cursor-paginated (GET /v2/balance/bills). Pass the last item id as --id with --direction NEXT for the next page."
+  ).option("--coin <coin>", "filter by coin").option("--symbol <symbol>", "filter by trading pair").option("--type <type>", "bill type, e.g. EXCHANGE / FEE / FUND / CLOSE_POSITION").option("--start-time <ms>", "start time in milliseconds", parseInt).option("--end-time <ms>", "end time in milliseconds", parseInt).option("--id <id>", "cursor: bill id to page from").option("--direction <direction>", "cursor direction: NEXT | PREV (API default NEXT)").option("--limit <limit>", "records per page (API default 10)", parseInt).action(
     async (opts) => {
       const c = ctx.http({ requireAuth: true });
       const data = await c.getPrivate(
         "/v2/balance/bills",
         prune12({
           coin: opts.coin,
+          symbol: opts.symbol,
           type: opts.type,
           startTime: opts.startTime,
           endTime: opts.endTime,
-          page: opts.page,
-          size: opts.size
+          id: opts.id,
+          direction: opts.direction,
+          limit: opts.limit
         })
       );
       const { render: render2, effectiveFormat: effectiveFormat2 } = await import("./output-UIZGG7EU.js");
@@ -682,7 +689,7 @@ function prune13(o) {
   return out;
 }
 function registerOrderListUnfinished(parent, ctx) {
-  parent.command("list-unfinished <symbol>").description("List unfinished orders for a symbol (GET /v2/order/listUnfinished)").option("--direction <direction>", "order direction").action(async (symbol, opts) => {
+  parent.command("list-unfinished <symbol>").description("List unfinished orders for a symbol (GET /v2/order/listUnfinished)").requiredOption("--direction <direction>", "order side: BUY | SELL").action(async (symbol, opts) => {
     const c = ctx.http({ requireAuth: true });
     const data = await c.getPrivate(
       "/v2/order/listUnfinished",
@@ -769,7 +776,7 @@ function prune15(o) {
   return out;
 }
 function registerOrderListHistory(parent, ctx) {
-  parent.command("list-history").description("List order history (GET /v2/order/list-history)").option("--symbol <symbol>", "filter by symbol").option("--start-time <ms>", "start time in milliseconds", parseInt).option("--end-time <ms>", "end time in milliseconds", parseInt).option("--id <id>", "order ID cursor").option("--direction <direction>", "order direction").option("--limit <limit>", "number of records", parseInt).option("--force-close", "filter force-close orders").action(
+  parent.command("list-history").description("List order history (GET /v2/order/list-history)").option("--symbol <symbol>", "filter by symbol").option("--start-time <ms>", "start time in milliseconds", parseInt).option("--end-time <ms>", "end time in milliseconds", parseInt).option("--id <id>", "order ID cursor").option("--direction <direction>", "cursor direction: NEXT | PREV (API default NEXT)").option("--limit <limit>", "number of records", parseInt).option("--force-close", "filter force-close orders").action(
     async (opts) => {
       const c = ctx.http({ requireAuth: true });
       const data = await c.getPrivate(
@@ -878,7 +885,7 @@ function prune18(o) {
   return out;
 }
 function registerEntrustPlanHistory(parent, ctx) {
-  parent.command("plan-history").description("List plan entrust history (GET /v2/entrust/plan-list-history)").option("--symbol <symbol>", "filter by symbol").option("--start-time <ms>", "start time in milliseconds", parseInt).option("--end-time <ms>", "end time in milliseconds", parseInt).option("--id <id>", "cursor ID").option("--direction <direction>", "order direction").option("--limit <limit>", "number of records", parseInt).action(
+  parent.command("plan-history").description("List plan entrust history (GET /v2/entrust/plan-list-history)").option("--symbol <symbol>", "filter by symbol").option("--start-time <ms>", "start time in milliseconds", parseInt).option("--end-time <ms>", "end time in milliseconds", parseInt).option("--id <id>", "cursor ID").option("--direction <direction>", "cursor direction: NEXT | PREV (API default NEXT)").option("--limit <limit>", "number of records", parseInt).action(
     async (opts) => {
       const c = ctx.http({ requireAuth: true });
       const data = await c.getPrivate(
@@ -905,7 +912,9 @@ function registerEntrustPlanHistory(parent, ctx) {
 
 // src/commands/entrust/plan-get.ts
 function registerEntrustPlanGet(parent, ctx) {
-  parent.command("plan-get <id>").description("Get plan entrust detail (GET /v2/entrust/plan-detail)").action(async (id) => {
+  parent.command("plan-get <id>").description(
+    "Get plan entrust detail (GET /v2/entrust/plan-detail). Positional <id> is sent as entrustId."
+  ).action(async (id) => {
     const c = ctx.http({ requireAuth: true });
     const data = await c.getPrivate("/v2/entrust/plan-detail", { entrustId: id });
     const { render: render2, effectiveFormat: effectiveFormat2 } = await import("./output-UIZGG7EU.js");
@@ -945,7 +954,9 @@ function registerEntrustProfitList(parent, ctx) {
 
 // src/commands/entrust/profit-get.ts
 function registerEntrustProfitGet(parent, ctx) {
-  parent.command("profit-get <id>").description("Get TP/SL entrust detail (GET /v2/entrust/profit-detail)").action(async (id) => {
+  parent.command("profit-get <id>").description(
+    "Get TP/SL entrust detail (GET /v2/entrust/profit-detail). Positional <id> is sent as profitId."
+  ).action(async (id) => {
     const c = ctx.http({ requireAuth: true });
     const data = await c.getPrivate("/v2/entrust/profit-detail", { profitId: id });
     const { render: render2, effectiveFormat: effectiveFormat2 } = await import("./output-UIZGG7EU.js");
@@ -1057,7 +1068,9 @@ async function prompt(rl, q, def) {
   return ans.length === 0 && def !== void 0 ? def : ans;
 }
 function registerConfigInit(parent, ctx) {
-  parent.command("init").description("Initialize a new profile (interactive)").option("--name <name>", "profile name (skip prompt)").option("--env <env>", "environment: test | prod").option("--base-url <url>", "override base url").option("--api-key <key>", "API key (only allowed with --yes; prefer interactive)").option("--secret <secret>", "API secret (only allowed with --yes; prefer interactive)").option("--identify <id>", "sub-account identify header (optional)").option("--set-default", "mark this profile as default-profile", true).option("--yes", "non-interactive mode (use provided flags only)").action(async (flags) => {
+  parent.command("init").description("Initialize a new profile (interactive)").option("--name <name>", "profile name (skip prompt)").option("--env <env>", "environment: test | prod").option("--base-url <url>", "override base url").option("--api-key <key>", "API key (only allowed with --yes; prefer interactive)").option("--secret <secret>", "API secret (only allowed with --yes; prefer interactive)").option("--identify <id>", "sub-account identify header (optional)").option("--set-default", "mark this profile as default-profile (default)", true).option("--no-set-default", "add the profile without changing default-profile").option("--yes", "non-interactive mode (use provided flags only)").action(async (subFlags, cmd) => {
+    const flags = cmd.optsWithGlobals();
+    flags.setDefault = subFlags.setDefault;
     const path = ctx.getConfigPath();
     let existing = null;
     try {
@@ -1277,7 +1290,7 @@ function registerConfigRemove(parent, ctx) {
 
 // src/commands/order/create.ts
 function registerOrderCreate(parent, ctx) {
-  parent.command("create").description("Place a new order (POST /v2/order/create)").requiredOption("--symbol <symbol>", "trading pair, e.g. btc_usdt").requiredOption("--order-type <type>", "LIMIT | MARKET | STOP_LIMIT | etc.").requiredOption("--order-side <side>", "BUY | SELL").requiredOption("--position-side <side>", "LONG | SHORT | NET").requiredOption("--orig-qty <qty>", "order quantity (string, decimal-safe)").option("--price <price>", "limit price (string)").option("--time-in-force <tif>", "GTC | IOC | FOK | GTX").option("--reduce-only <bool>", "true | false").option("--client-order-id <id>", "client-supplied order id").option("--position-id <id>", "existing position id (for hedge mode)").option("--leverage <lv>", "override leverage").option("--trigger-profit-price <price>", "TP trigger price").option("--trigger-stop-price <price>", "SL trigger price").option("--profit-order-type <type>", "TP child order type").option("--stop-order-type <type>", "SL child order type").option("--profit-order-price <price>", "TP child order price").option("--stop-order-price <price>", "SL child order price").option("--market-order-level <lv>", "market order depth level").action(
+  parent.command("create").description("Place a new order (POST /v2/order/create)").requiredOption("--symbol <symbol>", "trading pair, e.g. btc_usdt").requiredOption("--order-type <type>", "LIMIT | MARKET").requiredOption("--order-side <side>", "BUY | SELL").requiredOption("--position-side <side>", "LONG | SHORT").requiredOption("--orig-qty <qty>", "integer contracts (string)").option("--price <price>", "required when --order-type LIMIT; ignored for MARKET").option("--time-in-force <tif>", "GTC | IOC | FOK | GTX (MARKET defaults IOC, LIMIT defaults GTC; MARKET only allows IOC/FOK)").option("--reduce-only <bool>", "true | false").option("--client-order-id <id>", "client-supplied order id").option("--position-id <id>", "existing position id (for hedge mode)").option("--leverage <lv>", "override leverage").option("--trigger-profit-price <price>", "TP trigger price").option("--trigger-stop-price <price>", "SL trigger price").option("--profit-order-type <type>", "TP child order type").option("--stop-order-type <type>", "SL child order type").option("--profit-order-price <price>", "TP child order price").option("--stop-order-price <price>", "SL child order price").option("--market-order-level <lv>", "market order depth level").action(
     async (opts) => {
       const body = pruneEmpty({
         symbol: opts.symbol,
@@ -1340,7 +1353,7 @@ function registerOrderCancelAll(parent, ctx) {
 
 // src/commands/entrust/create-plan.ts
 function registerEntrustCreatePlan(parent, ctx) {
-  parent.command("create-plan").description("Create a plan entrust (POST /v2/entrust/create-plan)").requiredOption("--symbol <symbol>", "trading pair").requiredOption("--order-side <side>", "BUY | SELL").requiredOption("--position-side <side>", "LONG | SHORT | NET").requiredOption("--entrust-type <type>", "plan entrust type").requiredOption("--time-in-force <tif>", "time-in-force, e.g. GTC").requiredOption("--trigger-price-type <type>", "INDEX | MARK | LATEST").requiredOption("--orig-qty <qty>", "order quantity (string)").option("--stop-price <price>", "stop price").option("--price <price>", "limit price").option("--position-id <id>", "existing position id").option("--market-order-level <lv>", "market order depth level").option("--expire-time <ms>", "expiration time in ms").action(
+  parent.command("create-plan").description("Create a plan entrust (POST /v2/entrust/create-plan)").requiredOption("--symbol <symbol>", "trading pair").requiredOption("--order-side <side>", "BUY | SELL").requiredOption("--position-side <side>", "LONG | SHORT").requiredOption("--entrust-type <type>", "STOP | STOP_MARKET").requiredOption("--time-in-force <tif>", "GTC | IOC | FOK | GTX").requiredOption("--trigger-price-type <type>", "MARK_PRICE | LATEST_PRICE").requiredOption("--orig-qty <qty>", "integer contracts (string)").requiredOption("--stop-price <price>", "trigger price (server-required despite the doc marking it conditional)").option("--price <price>", "limit price").option("--position-id <id>", "existing position id").option("--market-order-level <lv>", "market order depth level").option("--expire-time <ms>", "expiration time in ms").action(
     async (opts) => {
       const body = pruneEmpty({
         symbol: opts.symbol,
@@ -1363,7 +1376,7 @@ function registerEntrustCreatePlan(parent, ctx) {
 
 // src/commands/entrust/create-profit.ts
 function registerEntrustCreateProfit(parent, ctx) {
-  parent.command("create-profit").description("Create a TP/SL entrust (POST /v2/entrust/create-profit)").requiredOption("--symbol <symbol>", "trading pair").requiredOption("--orig-qty <qty>", "order quantity (string)").option("--position-side <side>", "LONG | SHORT | NET").option("--order-side <side>", "BUY | SELL").option("--trigger-price-type <type>", "INDEX | MARK | LATEST").option("--trigger-profit-price <price>", "TP trigger price").option("--trigger-stop-price <price>", "SL trigger price").option("--profit-order-type <type>", "TP child order type").option("--stop-order-type <type>", "SL child order type").option("--profit-order-price <price>", "TP child order price").option("--stop-order-price <price>", "SL child order price").option("--position-id <id>", "existing position id").option("--reduce-only <bool>", "true | false").option("--profit-flag <flag>", "profit flag").option("--expire-time <ms>", "expiration time in ms").action(
+  parent.command("create-profit").description("Create a TP/SL entrust (POST /v2/entrust/create-profit)").requiredOption("--symbol <symbol>", "trading pair").requiredOption("--orig-qty <qty>", "order quantity (string)").option("--position-side <side>", "LONG | SHORT (required when --position-id is omitted)").option("--order-side <side>", "BUY | SELL (required when --position-id is omitted)").option("--trigger-price-type <type>", "MARK_PRICE | LATEST_PRICE (API default LATEST_PRICE)").option("--trigger-profit-price <price>", "TP trigger price").option("--trigger-stop-price <price>", "SL trigger price").option("--profit-order-type <type>", "TP child order type").option("--stop-order-type <type>", "SL child order type").option("--profit-order-price <price>", "TP child order price").option("--stop-order-price <price>", "SL child order price").option("--position-id <id>", "existing position id").option("--reduce-only <bool>", "true | false").option("--profit-flag <flag>", "profit flag").option("--expire-time <ms>", "expiration time in ms").action(
     async (opts) => {
       const body = pruneEmpty({
         symbol: opts.symbol,
@@ -1522,6 +1535,68 @@ function registerPositionChangeType(parent, ctx) {
   );
 }
 
+// src/commands/position/history-async.ts
+var MAX_RANGE_MS = 366 * 24 * 60 * 60 * 1e3;
+function registerPositionHistoryAsync(parent, ctx) {
+  parent.command("history-async").description(
+    "Create an async position-history export task (GET /v2/position/history/async). Max 1-year range; at most 5 tasks per account per month. Download the result with `system download <downloadId>`."
+  ).requiredOption("--start-time <ms>", "start time in milliseconds", parseInt).requiredOption("--end-time <ms>", "end time in milliseconds", parseInt).action(async (opts) => {
+    if (!Number.isFinite(opts.startTime) || !Number.isFinite(opts.endTime)) {
+      throw new Error("--start-time and --end-time must be millisecond timestamps");
+    }
+    if (opts.endTime < opts.startTime) {
+      throw new Error("--end-time must not be earlier than --start-time");
+    }
+    if (opts.endTime - opts.startTime > MAX_RANGE_MS) {
+      throw new Error("time range must not exceed 1 year (API limit)");
+    }
+    const c = ctx.http({ requireAuth: true });
+    const data = await c.getPrivate("/v2/position/history/async", {
+      startTime: opts.startTime,
+      endTime: opts.endTime
+    });
+    const { render: render2, effectiveFormat: effectiveFormat2 } = await import("./output-UIZGG7EU.js");
+    ctx.stdout(
+      render2(data, {
+        format: effectiveFormat2(ctx.outputFormat, ctx.isTTY),
+        isTTY: ctx.isTTY
+      })
+    );
+  });
+}
+
+// src/commands/system/user-info.ts
+function registerSystemUserInfo(parent, ctx) {
+  parent.command("user-info").description("Get the user bound to the current API key (GET /v2/system/user/info)").action(async () => {
+    const c = ctx.http({ requireAuth: true });
+    const data = await c.getPrivate("/v2/system/user/info", {});
+    const { render: render2, effectiveFormat: effectiveFormat2 } = await import("./output-UIZGG7EU.js");
+    ctx.stdout(
+      render2(data, {
+        format: effectiveFormat2(ctx.outputFormat, ctx.isTTY),
+        isTTY: ctx.isTTY
+      })
+    );
+  });
+}
+
+// src/commands/system/download.ts
+function registerSystemDownload(parent, ctx) {
+  parent.command("download <downloadId>").description(
+    "Download an async export file (GET /v2/system/download). Saves to ~/.onebullex/downloads/ unless --out is given. Each success counts toward the 5-per-hour limit for that downloadId."
+  ).option("--out <path>", 'target file, or an existing directory / path ending in "/"').action(async (downloadId, opts) => {
+    const c = ctx.http({ requireAuth: true });
+    const result = await downloadToFile({ client: c, downloadId, out: opts.out, cwd: ctx.cwd });
+    const { render: render2, effectiveFormat: effectiveFormat2 } = await import("./output-UIZGG7EU.js");
+    ctx.stdout(
+      render2(result, {
+        format: effectiveFormat2(ctx.outputFormat, ctx.isTTY),
+        isTTY: ctx.isTTY
+      })
+    );
+  });
+}
+
 // src/index.ts
 function buildProgram(opts) {
   const stdoutFn = opts?.stdout ?? ((s) => process.stdout.write(s + "\n"));
@@ -1563,7 +1638,7 @@ function buildProgram(opts) {
       return new HttpClient(cfg, opts?.fetch);
     }
   };
-  const program = new Command("onebullex").version(true ? "1.4.0" : "0.0.0-dev").description("OneBullEx exchange CLI").option("-p, --profile <name>", "config profile to use").option("-o, --output <format>", "output format: table | json").option("--debug", "enable debug logging").option("--timeout <ms>", "request timeout in milliseconds", parseInt).option("--confirm", "confirm write operations (required for non-dry-run writes)").option("--base-url <url>", "override base URL").option("--api-key <key>", "override api key (env: ONEBULLEX_API_KEY)").option("--secret <s>", "override secret (env: ONEBULLEX_SECRET; CLI flag discouraged for security)").exitOverride();
+  const program = new Command("onebullex").version(true ? "1.5.0" : "0.0.0-dev").description("OneBullEx exchange CLI").option("-p, --profile <name>", "config profile to use").option("-o, --output <format>", "output format: table | json").option("--debug", "enable debug logging").option("--timeout <ms>", "request timeout in milliseconds", parseInt).option("--confirm", "confirm write operations (required for non-dry-run writes)").option("--base-url <url>", "override base URL").option("--api-key <key>", "override api key (env: ONEBULLEX_API_KEY)").option("--secret <s>", "override secret (env: ONEBULLEX_SECRET; CLI flag discouraged for security)").exitOverride();
   program.hook("preAction", (thisCommand, _actionCommand) => {
     const flags = thisCommand.opts();
     if (flags.output === "table" || flags.output === "json") {
@@ -1658,12 +1733,16 @@ function buildProgram(opts) {
   registerPositionList(position, ctx);
   registerPositionConfs(position, ctx);
   registerPositionHistory(position, ctx);
+  registerPositionHistoryAsync(position, ctx);
   registerPositionAdjustLeverage(position, ctx);
   registerPositionMargin(position, ctx);
   registerPositionAutoMargin(position, ctx);
   registerPositionCloseAll(position, ctx);
   registerPositionMerge(position, ctx);
   registerPositionChangeType(position, ctx);
+  const system = program.command("system").description("Account identity and async export downloads");
+  registerSystemUserInfo(system, ctx);
+  registerSystemDownload(system, ctx);
   const config = program.command("config").description("Manage CLI configuration");
   registerConfigInit(config, ctx);
   registerConfigSet(config, ctx);
@@ -1711,7 +1790,7 @@ async function main(argv) {
     return EXIT.GENERIC;
   }
 }
-var isEntry = process.argv[1] && (process.argv[1].endsWith("/index.ts") || process.argv[1].endsWith("/index.js") || process.argv[1].endsWith("\\index.ts") || process.argv[1].endsWith("\\index.js"));
+var isEntry = process.argv[1] && (process.argv[1].endsWith("/index.ts") || process.argv[1].endsWith("/index.js") || process.argv[1].endsWith("\\index.ts") || process.argv[1].endsWith("\\index.js") || process.argv[1].endsWith("/onebullex") || process.argv[1].endsWith("\\onebullex"));
 if (isEntry) {
   void main(process.argv).then((code) => process.exit(code));
 }

package/dist/lint-api.d.ts

@@ -25,7 +25,7 @@ declare function diffEndpoints(doc: readonly Endpoint[], cli: readonly Endpoint[
  * - GET / query table: 5 columns `参数 | 位置 | 类型 | 必填 | 说明`
  * - POST body table: 4 columns `字段 | 类型 | 必填 | 说明`
  */
-declare function parseDocParams(md: string, path: string): DocParam[];
+declare function parseDocParams(rawMd: string, path: string): DocParam[];
 /**
  * Parses a TS source string and returns commander positional/option flags as
  * `(name, required)` pairs. Positional `<x>` → required, `[x]` → optional;

package/dist/lint-api.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   REGISTRY
-} from "./chunk-KS5FFAKW.js";
+} from "./chunk-NMW73ILO.js";
 
 // scripts/check-cli-coverage.ts
 import { readFileSync } from "fs";
@@ -37,7 +37,8 @@ function diffEndpoints(doc, cli) {
 function escapeRegex(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function parseDocParams(md, path) {
+function parseDocParams(rawMd, path) {
+  const md = rawMd.replace(/\r\n/g, "\n");
   const headingRe = new RegExp(
     `####\\s+(?:GET|POST)\\s+${escapeRegex(path)}\\b`,
     "m"
@@ -135,15 +136,29 @@ var CLI_DEFAULTED_PARAMS = /* @__PURE__ */ new Map([
   // the caller omits it.
   ["POST /v2/balance/transfer", /* @__PURE__ */ new Set(["bill-no"])]
 ]);
+var CLI_ONLY_PARAMS = /* @__PURE__ */ new Map([
+  // where to save the downloaded file; the API only sees downloadId
+  ["GET /v2/system/download", /* @__PURE__ */ new Set(["out"])]
+]);
+var CLI_POSITIONAL_ALIASES = /* @__PURE__ */ new Map([
+  ["GET /v2/entrust/plan-detail", /* @__PURE__ */ new Map([["id", "entrust-id"]])],
+  ["GET /v2/entrust/profit-detail", /* @__PURE__ */ new Map([["id", "profit-id"]])]
+]);
 function diffParams(endpoint, docParams, cliParams) {
   const errors = [];
-  const defaulted = CLI_DEFAULTED_PARAMS.get(`${endpoint.method} ${endpoint.path}`) ?? /* @__PURE__ */ new Set();
+  const key = `${endpoint.method} ${endpoint.path}`;
+  const defaulted = CLI_DEFAULTED_PARAMS.get(key) ?? /* @__PURE__ */ new Set();
+  const cliOnly = CLI_ONLY_PARAMS.get(key) ?? /* @__PURE__ */ new Set();
+  const aliases = CLI_POSITIONAL_ALIASES.get(key) ?? /* @__PURE__ */ new Map();
   const docMap = new Map(
     docParams.map((p) => [normalize(p.name), p])
   );
-  const cliMap = new Map(
-    cliParams.filter((p) => !GLOBAL_FLAGS.has(p.name)).map((p) => [normalize(p.name), p])
-  );
+  const cliMap = /* @__PURE__ */ new Map();
+  for (const p of cliParams) {
+    if (GLOBAL_FLAGS.has(p.name) || cliOnly.has(p.name)) continue;
+    const mapped = aliases.get(p.name) ?? normalize(p.name);
+    cliMap.set(mapped, { name: mapped, required: p.required });
+  }
   for (const [k, dp] of docMap.entries()) {
     if (dp.required) {
       const cp = cliMap.get(k);

package/dist/registry.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   REGISTRY
-} from "./chunk-KS5FFAKW.js";
+} from "./chunk-NMW73ILO.js";
 export {
   REGISTRY
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onebullex-group/cli",
-  "version": "1.4.0",
+  "version": "1.5.0",
   "description": "OneBullEx Open API V2 command-line interface",
   "license": "MIT",
   "type": "module",
@@ -17,6 +17,7 @@
     "./core/signature": "./dist/core/signature.js",
     "./core/types": "./dist/core/types.js",
     "./core/bill-no": "./dist/core/bill-no.js",
+    "./core/download": "./dist/core/download.js",
     "./core/redact": "./dist/core/redact.js"
   },
   "files": [