@tigeropenapi/tigeropen 0.4.0 → 0.4.6

package/dist/cjs/push/push-client.js

@@ -86,11 +86,13 @@ class PushClient {
     constructor(config, options) {
         this.socket = null;
         this._state = ConnectionState.Disconnected;
+        /** Whether this connect attempt already fell back to unverified TLS */
+        this.tlsFallback = false;
         this.callbacks = {};
         /** Subscription state: subject -> Set<symbol> */
         this.subscriptions = new Map();
-        /** Account-level subscriptions */
-        this.accountSubs = new Set();
+        /** Account-level subscriptions: subject -> account string used at subscribe time */
+        this.accountSubs = new Map();
         this.heartbeatTimer = null;
         this.reconnectTimer = null;
         this.stopped = false;
@@ -124,6 +126,7 @@ class PushClient {
             }
             this._state = ConnectionState.Connecting;
             this.stopped = false;
+            this.tlsFallback = false;
             this.recvBuffer = Buffer.alloc(0);
             const socket = this.createSocket(this.pushHost, this.pushPort);
             this.socket = socket;
@@ -180,6 +183,24 @@ class PushClient {
             });
             socket.on('error', (err) => {
                 if (!settled) {
+                    // If this is a TLS certificate error, warn and retry without verification.
+                    const isTlsCertError = err.message.includes('certificate') ||
+                        err.message.includes('CERT') ||
+                        err.code === 'DEPTH_ZERO_SELF_SIGNED_CERT' ||
+                        err.code === 'UNABLE_TO_VERIFY_LEAF_SIGNATURE' ||
+                        err.code === 'CERT_HAS_EXPIRED';
+                    if (isTlsCertError && !this.tlsFallback) {
+                        this.tlsFallback = true;
+                        settled = true;
+                        clearTimeout(timeout);
+                        socket.destroy();
+                        this.socket = null;
+                        this._state = ConnectionState.Disconnected;
+                        console.warn(`[TigerOpen] TLS certificate verification failed: ${err.message}. Retrying without verification.`);
+                        // Retry immediately using unverified TLS
+                        this.connect().then(resolve).catch(reject);
+                        return;
+                    }
                     settled = true;
                     clearTimeout(timeout);
                     this._state = ConnectionState.Disconnected;
@@ -232,7 +253,7 @@ class PushClient {
     createSocket(host, port) {
         if (this.socketFactory)
             return this.socketFactory(host, port);
-        return tls.connect({ host, port, rejectUnauthorized: false });
+        return tls.connect({ host, port, rejectUnauthorized: !this.tlsFallback });
     }
     /** Handle incoming TCP data: buffer + decode varint32 frames */
     handleData(chunk, onConnected) {
@@ -331,8 +352,8 @@ class PushClient {
         for (const [subject, symbols] of this.subscriptions) {
             this.doSubscribe(subject, Array.from(symbols));
         }
-        for (const subject of this.accountSubs) {
-            this.doSubscribe(subject, undefined, this.config.account);
+        for (const [subject, account] of this.accountSubs) {
+            this.doSubscribe(subject, undefined, account);
         }
     }
     /** Dispatch push data to the appropriate callback based on dataType */
@@ -566,8 +587,9 @@ class PushClient {
     // ===== Account push subscribe/unsubscribe =====
     /** Subscribe to asset changes */
     subscribeAsset(account) {
-        this.doSubscribe(push_message_1.SubjectType.Asset, undefined, account || this.config.account);
-        this.accountSubs.add(push_message_1.SubjectType.Asset);
+        const acct = account || this.config.account;
+        this.doSubscribe(push_message_1.SubjectType.Asset, undefined, acct);
+        this.accountSubs.set(push_message_1.SubjectType.Asset, acct);
     }
     /** Unsubscribe from asset changes */
     unsubscribeAsset() {
@@ -576,8 +598,9 @@ class PushClient {
     }
     /** Subscribe to position changes */
     subscribePosition(account) {
-        this.doSubscribe(push_message_1.SubjectType.Position, undefined, account || this.config.account);
-        this.accountSubs.add(push_message_1.SubjectType.Position);
+        const acct = account || this.config.account;
+        this.doSubscribe(push_message_1.SubjectType.Position, undefined, acct);
+        this.accountSubs.set(push_message_1.SubjectType.Position, acct);
     }
     /** Unsubscribe from position changes */
     unsubscribePosition() {
@@ -586,8 +609,9 @@ class PushClient {
     }
     /** Subscribe to order status */
     subscribeOrder(account) {
-        this.doSubscribe(push_message_1.SubjectType.Order, undefined, account || this.config.account);
-        this.accountSubs.add(push_message_1.SubjectType.Order);
+        const acct = account || this.config.account;
+        this.doSubscribe(push_message_1.SubjectType.Order, undefined, acct);
+        this.accountSubs.set(push_message_1.SubjectType.Order, acct);
     }
     /** Unsubscribe from order status */
     unsubscribeOrder() {
@@ -596,8 +620,9 @@ class PushClient {
     }
     /** Subscribe to transaction details */
     subscribeTransaction(account) {
-        this.doSubscribe(push_message_1.SubjectType.Transaction, undefined, account || this.config.account);
-        this.accountSubs.add(push_message_1.SubjectType.Transaction);
+        const acct = account || this.config.account;
+        this.doSubscribe(push_message_1.SubjectType.Transaction, undefined, acct);
+        this.accountSubs.set(push_message_1.SubjectType.Transaction, acct);
     }
     /** Unsubscribe from transaction details */
     unsubscribeTransaction() {
@@ -613,9 +638,9 @@ class PushClient {
         }
         return result;
     }
-    /** Get account-level subscriptions */
+    /** Get account-level subscriptions: subject -> account */
     getAccountSubscriptions() {
-        return Array.from(this.accountSubs);
+        return new Map(this.accountSubs);
     }
 }
 exports.PushClient = PushClient;

package/dist/cjs/quote/quote-client.js

@@ -361,9 +361,21 @@ class QuoteClient {
         }
         return acc;
     }
-    /** Futures tick trades. wire: future_tick (API v3.0) */
+    /** Futures tick trades. wire: future_tick (API v3.0)
+     * Server returns {contractCode, items:[...]}; unwrap items and backfill contractCode.
+     * endIndex defaults to 30 when not set (consistent with Python/Go SDK). */
     async getFutureTradeTicks(req) {
-        return this.callInto('future_tick', req, '3.0');
+        if (!req.endIndex)
+            req.endIndex = 30;
+        const wrap = await this.callInto('future_tick', req, '3.0');
+        const items = wrap?.items ?? [];
+        if (wrap?.contractCode) {
+            for (const item of items) {
+                if (!item.contractCode)
+                    item.contractCode = wrap.contractCode;
+            }
+        }
+        return items;
     }
     /** Futures depth. wire: future_depth */
     async getFutureDepth(req) {

package/dist/cjs/trade/trade-client.js

@@ -25,9 +25,10 @@ function withAccount(req, account) {
 }
 /** Trading client wrapping all trade-related APIs. */
 class TradeClient {
-    constructor(httpClient, account) {
+    constructor(httpClient, account, secretKey) {
         this.httpClient = httpClient;
         this.account = account;
+        this.secretKey = secretKey;
     }
     async callInto(method, bizParams) {
         const request = (0, api_request_1.createApiRequest)(method, bizParams);
@@ -63,16 +64,26 @@ class TradeClient {
     }
     // === Order operations ===
     async placeOrder(order) {
-        return this.callInto('place_order', { ...order, account: this.account });
+        const params = { ...order, account: this.account };
+        if (!params.secretKey && this.secretKey)
+            params.secretKey = this.secretKey;
+        return this.callInto('place_order', params);
     }
     async previewOrder(order) {
         return this.callInto('preview_order', { ...order, account: this.account });
     }
     async modifyOrder(id, order) {
-        return this.callInto('modify_order', { ...order, account: this.account, id });
-    }
-    async cancelOrder(id) {
-        return this.callInto('cancel_order', { account: this.account, id });
+        const params = { ...order, account: this.account, id };
+        if (!params.secretKey && this.secretKey)
+            params.secretKey = this.secretKey;
+        return this.callInto('modify_order', params);
+    }
+    async cancelOrder(id, secretKey) {
+        const sk = secretKey ?? this.secretKey;
+        const params = { account: this.account, id };
+        if (sk)
+            params.secretKey = sk;
+        return this.callInto('cancel_order', params);
     }
     // === Order queries (BREAKING v0.4.0) ===
     /**
@@ -194,9 +205,10 @@ class TradeClient {
     async getFundDetails(req) {
         return this.callIntoItems('fund_details', withAccount(req, this.account));
     }
-    /** Funding history (wire method: `transfer_fund`). */
+    /** Funding history (wire method: `transfer_fund`).
+     * Server returns bare list (no items wrapper). */
     async getFundingHistory(req) {
-        return this.callIntoItems('transfer_fund', withAccount(req, this.account));
+        return this.callInto('transfer_fund', withAccount(req, this.account));
     }
     // ===== v0.4.0 NEW: Internal / external position transfer =====
     /**
@@ -230,5 +242,42 @@ class TradeClient {
             merged.accountId = this.account;
         return this.callIntoItems('position_transfer_external_records', merged);
     }
+    /** 行权检验：预估行权/作废后正股持仓变化 (wire: option_exercise_check) */
+    async checkOptionExercise(req) {
+        const merged = { ...req };
+        if (!merged.account)
+            merged.account = this.account;
+        return this.callInto('option_exercise_check', merged);
+    }
+    /** 查询可行权持仓列表 (wire: option_exercise_position) */
+    async getOptionExercisePositions(req) {
+        const merged = { ...req };
+        if (!merged.account)
+            merged.account = this.account;
+        return this.callInto('option_exercise_position', merged);
+    }
+    /** 提交行权/作废申请 (wire: option_exercise_submit) */
+    async submitOptionExercise(req) {
+        const merged = { ...req };
+        if (!merged.account)
+            merged.account = this.account;
+        const result = await this.callInto('option_exercise_submit', merged);
+        return result ?? false;
+    }
+    /** 分页查询行权记录 (wire: option_exercise_record) */
+    async getOptionExerciseRecords(req) {
+        const merged = { ...req };
+        if (!merged.account)
+            merged.account = this.account;
+        return this.callInto('option_exercise_record', merged);
+    }
+    /** 撤销行权申请 (wire: option_exercise_cancel) */
+    async cancelOptionExercise(req) {
+        const merged = { ...req };
+        if (!merged.account)
+            merged.account = this.account;
+        const result = await this.callInto('option_exercise_cancel', merged);
+        return result ?? false;
+    }
 }
 exports.TradeClient = TradeClient;

package/dist/esm/client/api-request.js

@@ -4,7 +4,7 @@
  * Requests use camelCase parameters in TypeScript (idiomatic), but the
  * server wire format is snake_case, so we convert keys before serializing.
  */
-import { keysToSnakeCase } from './case-convert';
+import { keysToSnakeCase } from './case-convert.js';
 /**
  * Create an API request, serializing business parameters to JSON as bizContent.
  * camelCase keys are automatically converted to snake_case to match the server.

package/dist/esm/client/api-response.js

@@ -1,10 +1,28 @@
 /**
  * API response parsing.
  */
-import { TigerError } from './errors';
+import { TigerError } from './errors.js';
+/**
+ * Replace bare integers (not inside JSON string values) that exceed
+ * Number.MAX_SAFE_INTEGER (> 15 digits) with quoted string equivalents,
+ * so that int64 order IDs survive JSON.parse without precision loss.
+ */
+function patchLargeIntegers(text) {
+    // Mask all existing JSON string values so their content isn't touched.
+    const strings = [];
+    const masked = text.replace(/"(?:[^"\\]|\\.)*"/g, (match) => {
+        strings.push(match);
+        return '\x01' + (strings.length - 1) + '\x01';
+    });
+    // Quote any bare integer with >15 digits.
+    const patched = masked.replace(/-?\d{16,}/g, (m) => '"' + m + '"');
+    // Restore original string values.
+    return patched.replace(/\x01(\d+)\x01/g, (_, i) => strings[parseInt(i, 10)]);
+}
 /**
  * Parse the raw HTTP response body.
  * Throws TigerError when code != 0.
+ * Large integers in the outer envelope are not an issue (only inner `data` contains int64 IDs).
  */
 export function parseApiResponse(body) {
     const resp = JSON.parse(body);
@@ -22,9 +40,10 @@ export function unmarshalData(data) {
     if (data == null)
         return undefined;
     if (typeof data === 'string') {
-        // Attempt to parse JSON string (double-encoded case)
+        // Attempt to parse JSON string (double-encoded case).
+        // Patch large integers before parsing so int64 IDs survive as strings.
         try {
-            return JSON.parse(data);
+            return JSON.parse(patchLargeIntegers(data));
         }
         catch {
             return data;

package/dist/esm/client/case-convert.js

@@ -13,7 +13,9 @@ export function camelToSnake(key) {
 /**
  * Recursively convert all object keys from camelCase to snake_case.
  * Preserves arrays, primitives, and Date/null/undefined.
- * Keys already containing an underscore are kept as-is (already snake_case).
+ *
+ * Note: camelToSnake is idempotent for pure snake_case keys (no uppercase
+ * letters → no replacements), so no pre-check is needed.
  */
 export function keysToSnakeCase(value) {
     if (Array.isArray(value)) {
@@ -22,8 +24,7 @@ export function keysToSnakeCase(value) {
     if (value && typeof value === 'object' && value.constructor === Object) {
         const out = {};
         for (const [k, v] of Object.entries(value)) {
-            const newKey = k.includes('_') ? k : camelToSnake(k);
-            out[newKey] = keysToSnakeCase(v);
+            out[camelToSnake(k)] = keysToSnakeCase(v);
         }
         return out;
     }

package/dist/esm/client/http-client.js

@@ -1,8 +1,9 @@
-import { getSignContent } from '../signer/sign-content';
-import { signWithRSA, verifyWithRSA } from '../signer/signer';
-import { TigerError } from './errors';
-import { defaultRetryPolicy } from './retry';
-import { parseApiResponse } from './api-response';
+import { TokenManager } from '../config/token-manager.js';
+import { getSignContent } from '../signer/sign-content.js';
+import { signWithRSA, verifyWithRSA } from '../signer/signer.js';
+import { TigerError } from './errors.js';
+import { defaultRetryPolicy } from './retry.js';
+import { parseApiResponse, unmarshalData } from './api-response.js';
 /** SDK 版本号 */
 const SDK_VERSION = '0.4.0';
 /** User-Agent 字符串 */
@@ -13,14 +14,45 @@ const DEFAULT_CHARSET = 'UTF-8';
 const DEFAULT_SIGN_TYPE = 'RSA';
 /** 默认 API 版本 */
 const DEFAULT_VERSION = '2.0';
+/** Token 刷新 API 方法名 */
+const METHOD_TOKEN_REFRESH = 'user_token_refresh';
+/** 默认后台 token 检查间隔（毫秒）：5 分钟 */
+const DEFAULT_TOKEN_CHECK_INTERVAL = 5 * 60 * 1000;
 /**
  * HttpClient handles HTTP requests, signing, retry, and timeout
  */
 export class HttpClient {
     constructor(config, retryPolicy, options) {
+        /** non-null when auto-refresh is active */
+        this.tokenManager = null;
         this.config = config;
         this.retryPolicy = retryPolicy ?? defaultRetryPolicy();
         this.targetUrl = options?.useQuoteServerUrl ? config.quoteServerUrl : config.serverUrl;
+        // Auto-start token refresh when tokenRefreshDuration is configured (mirrors Go SDK behaviour)
+        if (config.tokenRefreshDuration && config.tokenRefreshDuration > 0) {
+            const interval = config.tokenCheckInterval ?? DEFAULT_TOKEN_CHECK_INTERVAL;
+            const opts = {
+                refreshDuration: config.tokenRefreshDuration,
+                refreshInterval: interval,
+            };
+            if (config.tokenWriter) {
+                opts.tokenWriter = config.tokenWriter;
+            }
+            if (config.tokenLoader) {
+                opts.tokenLoader = config.tokenLoader;
+            }
+            this.tokenManager = this.startTokenAutoRefresh(null, opts);
+        }
+    }
+    /**
+     * Stop the background token auto-refresh timer.
+     * Call this when the HttpClient is no longer needed to avoid timer leaks.
+     */
+    close() {
+        if (this.tokenManager) {
+            this.tokenManager.stopAutoRefresh();
+            this.tokenManager = null;
+        }
     }
     /**
      * Build common request parameters
@@ -31,7 +63,11 @@ export class HttpClient {
             method: apiMethod,
             charset: DEFAULT_CHARSET,
             sign_type: DEFAULT_SIGN_TYPE,
-            timestamp: new Date().toISOString().replace('T', ' ').substring(0, 19),
+            timestamp: (() => {
+                const d = new Date();
+                const pad = (n) => String(n).padStart(2, '0');
+                return `${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())} ${pad(d.getHours())}:${pad(d.getMinutes())}:${pad(d.getSeconds())}`;
+            })(),
             version: version || DEFAULT_VERSION,
             biz_content: bizContent,
         };
@@ -58,6 +94,7 @@ export class HttpClient {
         const headers = {
             'Content-Type': 'application/json;charset=UTF-8',
             'User-Agent': USER_AGENT,
+            'Connection': 'close',
         };
         if (this.config.token) {
             headers['Authorization'] = this.config.token;
@@ -68,7 +105,8 @@ export class HttpClient {
             body,
             signal: AbortSignal.timeout(this.config.timeout * 1000),
         });
-        return response.text();
+        const text = await response.text();
+        return text;
     }
     /**
      * Execute a structured API request, returning a parsed ApiResponse.
@@ -95,6 +133,10 @@ export class HttpClient {
             }
             catch (err) {
                 lastErr = err;
+                // Only retry on network errors, not API business errors (TigerError with code)
+                if (err.code !== undefined && err.code !== -1) {
+                    throw err; // API returned a business error code, don't retry
+                }
                 if (!this.retryPolicy.shouldRetry(request.method)) {
                     throw err;
                 }
@@ -107,9 +149,10 @@ export class HttpClient {
      *
      * @param apiMethod - API method name (e.g. "market_state", "place_order")
      * @param requestJson - Raw biz_content JSON string
+     * @param version - Optional API version override (default: "2.0")
      * @returns Raw response JSON string, unparsed
      */
-    async execute(apiMethod, requestJson) {
+    async execute(apiMethod, requestJson, version) {
         // Parameter validation
         if (!apiMethod) {
             throw new TigerError(-1, 'api_method must not be empty');
@@ -120,7 +163,7 @@ export class HttpClient {
         catch {
             throw new TigerError(-1, 'request_json is not valid JSON');
         }
-        const params = this.buildCommonParams(apiMethod, requestJson);
+        const params = this.buildCommonParams(apiMethod, requestJson, version);
         const sign = this.signParams(params);
         params['sign'] = sign;
         let lastErr;
@@ -141,6 +184,10 @@ export class HttpClient {
             }
             catch (err) {
                 lastErr = err;
+                // Don't retry API business errors
+                if (err.code !== undefined && err.code !== -1) {
+                    throw err;
+                }
                 if (!this.retryPolicy.shouldRetry(apiMethod)) {
                     throw err;
                 }
@@ -148,6 +195,75 @@ export class HttpClient {
         }
         throw lastErr;
     }
+    /**
+     * 调用 user_token_refresh 接口获取新 token，返回新 token 字符串。
+     * 此方法仅查询，不修改 config 中的 token。
+     */
+    async queryToken() {
+        const params = this.buildCommonParams(METHOD_TOKEN_REFRESH, '{}');
+        const sign = this.signParams(params);
+        params['sign'] = sign;
+        const body = await this.doHttpPost(params);
+        const response = parseApiResponse(body);
+        this.verifyResponseSign(params['timestamp'], response.sign);
+        const data = unmarshalData(response.data);
+        const newToken = data?.token;
+        if (!newToken) {
+            throw new TigerError(-1, '服务端返回空 token');
+        }
+        return newToken;
+    }
+    /**
+     * 刷新 token：调用接口获取新 token 后更新 config.token。
+     *
+     * @param tokenManager - 可选外部 TokenManager；若提供则调用 setToken() 写文件并触发回调。
+     *                       若 NewHttpClient 已自动启动内部 TokenManager，其内存 token 也会同步更新。
+     */
+    async refreshToken(tokenManager) {
+        const newToken = await this.queryToken();
+        this.config.token = newToken;
+        // Keep internal tokenManager in sync so shouldTokenRefresh stays accurate.
+        if (this.tokenManager && tokenManager !== this.tokenManager) {
+            this.tokenManager.syncToken(newToken);
+        }
+        if (tokenManager) {
+            tokenManager.setToken(newToken);
+        }
+    }
+    /**
+     * 启动后台 token 自动刷新。
+     *
+     * @param tokenManager - 可为 null：SDK 内部自动创建一个仅内存的 TokenManager，
+     *   适合直接通过 token 在代码里设置、不使用文件的场景。
+     * @param options - 仅在 tokenManager 为 null 时生效，用于配置内部 TokenManager
+     *   （refreshDuration / refreshInterval / tokenWriter / tokenLoader）。
+     * @returns 使用或创建的 TokenManager 实例
+     */
+    startTokenAutoRefresh(tokenManager, options) {
+        if (!tokenManager) {
+            tokenManager = new TokenManager(options);
+            // 从 config.token 同步当前 token，使 shouldTokenRefresh 能正确判断。
+            // 若 config.token 暂时为空（异步 tokenLoader 尚未 resolve），则先异步加载。
+            if (this.config.token) {
+                tokenManager.syncToken(this.config.token);
+            }
+            else if (options?.tokenLoader) {
+                // tokenLoader 可能是异步的；在后台 resolve 后同步到 config.token 和 TokenManager。
+                Promise.resolve(options.tokenLoader()).then((t) => {
+                    if (t) {
+                        this.config.token = t;
+                        tokenManager.syncToken(t);
+                    }
+                }).catch(() => { });
+            }
+        }
+        tokenManager.startAutoRefresh(async () => {
+            const newToken = await this.queryToken();
+            this.config.token = newToken;
+            return newToken;
+        });
+        return tokenManager;
+    }
     /** Delay for the specified milliseconds */
     sleep(ms) {
         return new Promise((resolve) => setTimeout(resolve, ms));
@@ -161,7 +277,8 @@ export class HttpClient {
      */
     verifyResponseSign(timestamp, signBase64) {
         if (!signBase64) {
-            throw new TigerError(-1, 'Response signature is missing');
+            // Some endpoints don't return a signature; skip verification silently.
+            return;
         }
         const valid = verifyWithRSA(this.config.tigerPublicKey, timestamp, signBase64);
         if (!valid) {

package/dist/esm/client/index.js

@@ -1,9 +1,9 @@
 /**
  * Transport layer exports.
  */
-export { HttpClient } from './http-client';
-export { TigerError, classifyErrorCode } from './errors';
-export { RetryPolicy, defaultRetryPolicy, isTradeOperation } from './retry';
-export { createApiRequest } from './api-request';
-export { parseApiResponse, unmarshalData } from './api-response';
-export { camelToSnake, keysToSnakeCase } from './case-convert';
+export { HttpClient } from './http-client.js';
+export { TigerError, classifyErrorCode } from './errors.js';
+export { RetryPolicy, defaultRetryPolicy, isTradeOperation } from './retry.js';
+export { createApiRequest } from './api-request.js';
+export { parseApiResponse, unmarshalData } from './api-response.js';
+export { camelToSnake, keysToSnakeCase } from './case-convert.js';