@tigeropenapi/tigeropen 0.4.9 → 0.5.3

package/dist/cjs/client/api-response.js

@@ -7,29 +7,33 @@ exports.unmarshalData = unmarshalData;
  */
 const errors_1 = require("./errors");
 /**
- * Replace bare integers (not inside JSON string values) that exceed
- * Number.MAX_SAFE_INTEGER (> 15 digits) with quoted string equivalents,
- * so that int64 order IDs survive JSON.parse without precision loss.
+ * Replaces bare int64 values (≥17 digits, not part of a float) with quoted
+ * strings so they survive JSON.parse without precision loss.
+ * 17+ digits are guaranteed to exceed Number.MAX_SAFE_INTEGER (≈9.007e15),
+ * so 16-digit microsecond timestamps remain as numbers.
  */
 function patchLargeIntegers(text) {
-    // Mask all existing JSON string values so their content isn't touched.
     const strings = [];
     const masked = text.replace(/"(?:[^"\\]|\\.)*"/g, (match) => {
         strings.push(match);
         return '\x01' + (strings.length - 1) + '\x01';
     });
-    // Quote any bare integer with >15 digits.
-    const patched = masked.replace(/-?\d{16,}/g, (m) => '"' + m + '"');
-    // Restore original string values.
+    // Match bare integers preceded by a JSON structural character or line start,
+    // not followed by decimal point or exponent (avoids matching float components).
+    // The `m` flag makes `^` match line-start for multi-line JSON.
+    const patched = masked.replace(/([:,\[{]|^)\s*(-?\d{17,})(?![.\deE])/gm, (full, prefix, num) => {
+        return prefix + '"' + num + '"';
+    });
     return patched.replace(/\x01(\d+)\x01/g, (_, i) => strings[parseInt(i, 10)]);
 }
 /**
- * Parse the raw HTTP response body.
- * Throws TigerError when code != 0.
- * Large integers in the outer envelope are not an issue (only inner `data` contains int64 IDs).
+ * Parse the raw HTTP response body. Throws TigerError when code != 0.
+ *
+ * patchLargeIntegers is applied before JSON.parse to preserve int64 order IDs
+ * (e.g. 28868646234578944) as strings rather than losing precision.
  */
 function parseApiResponse(body) {
-    const resp = JSON.parse(body);
+    const resp = JSON.parse(patchLargeIntegers(body));
     if (resp.code !== 0) {
         throw new errors_1.TigerError(resp.code, resp.message);
     }
@@ -37,15 +41,13 @@ function parseApiResponse(body) {
 }
 /**
  * Decode an ApiResponse.data payload into a typed value.
- * Handles the server's occasional double-encoded JSON (where `data` is a
- * JSON string that itself wraps JSON), seen on some trade endpoints.
+ * Handles double-encoded JSON (where `data` is a JSON string wrapping JSON),
+ * seen on some trade endpoints.
  */
 function unmarshalData(data) {
     if (data == null)
         return undefined;
     if (typeof data === 'string') {
-        // Attempt to parse JSON string (double-encoded case).
-        // Patch large integers before parsing so int64 IDs survive as strings.
         try {
             return JSON.parse(patchLargeIntegers(data));
         }

package/dist/cjs/config/client-config.js

@@ -1,5 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.SANDBOX_TIGER_PUBLIC_KEY = void 0;
 exports.loadPropertiesFile = loadPropertiesFile;
 exports.createClientConfig = createClientConfig;
 /**
@@ -26,6 +27,10 @@ const DEFAULT_TIMEOUT = 15;
 const DEFAULT_SERVER_URL = 'https://openapi.tigerfintech.com/gateway';
 /** Tiger public key for response signature verification (Base64-encoded) */
 const TIGER_PUBLIC_KEY = 'MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNF3G8SoEcCZh2rshUbayDgLLrj6rKgzNMxDL2HSnKcB0+GPOsndqSv+a4IBu9+I3fyBp5hkyMMG2+AXugd9pMpy6VxJxlNjhX1MYbNTZJUT4nudki4uh+LMOkIBHOceGNXjgB+cXqmlUnjlqha/HgboeHSnSgpM3dKSJQlIOsDwIDAQAB';
+/** Sandbox / QA tiger public key for response signature verification */
+exports.SANDBOX_TIGER_PUBLIC_KEY = 'MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCbm21i11hgAENGd3/f280PSe4g9YGkS3TEXBYMidihTvHHf' +
+    '+tJ0PYD0o3PruI0hl3qhEjHTAxb75T5YD3SGK4IBhHn/Rk6mhqlGgI+bBrBVYaXixmHfRo75RpUUuWACyeqQk' +
+    'ZckgR0McxuW9xRMIa2cXZOoL1E4SL4lXKGhKoWbwIDAQAB';
 /** Environment variable names */
 const ENV_TIGER_ID = 'TIGEROPEN_TIGER_ID';
 const ENV_PRIVATE_KEY = 'TIGEROPEN_PRIVATE_KEY';
@@ -33,6 +38,9 @@ const ENV_ACCOUNT = 'TIGEROPEN_ACCOUNT';
 const ENV_SECRET_KEY = 'TIGEROPEN_SECRET_KEY';
 const ENV_TOKEN = 'TIGEROPEN_TOKEN';
 const ENV_TOKEN_FILE = 'TIGEROPEN_TOKEN_FILE';
+const ENV_TIGER_PUBLIC_KEY = 'TIGEROPEN_TIGER_PUBLIC_KEY';
+const ENV_SERVER_URL = 'TIGEROPEN_SERVER_URL';
+const ENV_QUOTE_SERVER_URL = 'TIGEROPEN_QUOTE_SERVER_URL';
 /**
  * Load and parse a Java-style properties file.
  *
@@ -134,12 +142,15 @@ function createClientConfig(options) {
     const license = opts.license || fileProps['license'];
     const language = opts.language || fileProps['language'] || DEFAULT_LANGUAGE;
     const timezone = opts.timezone || fileProps['timezone'];
+    // tiger_public_key from properties file (e.g. for QA/sandbox environments)
+    let tigerPublicKey = opts.tigerPublicKey || fileProps['tiger_public_key'] || TIGER_PUBLIC_KEY;
     // Environment variables override everything
     const envTigerId = process.env[ENV_TIGER_ID];
     const envPrivateKey = process.env[ENV_PRIVATE_KEY];
     const envAccount = process.env[ENV_ACCOUNT];
     const envSecretKey = process.env[ENV_SECRET_KEY];
     const envToken = process.env[ENV_TOKEN];
+    const envTigerPublicKey = process.env[ENV_TIGER_PUBLIC_KEY];
     if (envTigerId) {
         tigerId = envTigerId;
     }
@@ -155,6 +166,9 @@ function createClientConfig(options) {
     if (envToken) {
         token = envToken;
     }
+    if (envTigerPublicKey) {
+        tigerPublicKey = envTigerPublicKey;
+    }
     // Token loading priority: env TIGEROPEN_TOKEN > tokenLoader > token file (TIGEROPEN_TOKEN_FILE or default)
     if (!token) {
         if (opts.tokenLoader) {
@@ -193,29 +207,53 @@ function createClientConfig(options) {
     if (!privateKey) {
         throw new Error(`privateKey is required. Set it via options.privateKey, a config file, or the ${ENV_PRIVATE_KEY} environment variable.`);
     }
-    // Resolve server URL: explicit > dynamic domain > default
+    // Resolve server URL: env var > explicit opts > file > dynamic domain > default
     const enableDynamicDomain = opts.enableDynamicDomain ?? true;
     let serverUrl;
     let quoteServerUrl;
     // Query dynamic domains once (may spawn a child process); reuse for both URLs.
     let domainConf = {};
-    if (enableDynamicDomain && (!opts.serverUrl || !opts.quoteServerUrl)) {
+    const envServerUrl = process.env[ENV_SERVER_URL];
+    const envQuoteServerUrl = process.env[ENV_QUOTE_SERVER_URL];
+    const needServerUrl = !envServerUrl && !opts.serverUrl && !fileProps['server_url'];
+    const needQuoteServerUrl = !envQuoteServerUrl && !opts.quoteServerUrl && !fileProps['quote_server_url'];
+    if (enableDynamicDomain && (needServerUrl || needQuoteServerUrl)) {
         domainConf = (0, domain_1.queryDomains)(license);
     }
-    if (opts.serverUrl) {
+    if (envServerUrl) {
+        serverUrl = envServerUrl;
+    }
+    else if (opts.serverUrl) {
         serverUrl = opts.serverUrl;
     }
+    else if (fileProps['server_url']) {
+        serverUrl = fileProps['server_url'];
+    }
     else {
         const dynamicUrl = (0, domain_1.resolveDynamicServerUrl)(domainConf, license);
         serverUrl = dynamicUrl || DEFAULT_SERVER_URL;
     }
-    // Resolve quote server URL: explicit > dynamic domain > serverUrl fallback
-    if (opts.quoteServerUrl) {
+    // Resolve quote server URL: env var > explicit opts > file > dynamic domain > serverUrl fallback
+    if (envQuoteServerUrl) {
+        quoteServerUrl = envQuoteServerUrl;
+    }
+    else if (opts.quoteServerUrl) {
         quoteServerUrl = opts.quoteServerUrl;
     }
+    else if (fileProps['quote_server_url']) {
+        quoteServerUrl = fileProps['quote_server_url'];
+    }
     else {
-        const dynamicQuoteUrl = (0, domain_1.resolveDynamicQuoteServerUrl)(domainConf, license);
-        quoteServerUrl = dynamicQuoteUrl || serverUrl;
+        // Only use dynamic domain if serverUrl itself came from dynamic resolution (not pinned by env/opts/file).
+        // When serverUrl is pinned, prefer it as the quote fallback to avoid mixing environments.
+        const serverUrlPinned = !!(envServerUrl || opts.serverUrl || fileProps['server_url']);
+        if (!serverUrlPinned) {
+            const dynamicQuoteUrl = (0, domain_1.resolveDynamicQuoteServerUrl)(domainConf, license);
+            quoteServerUrl = dynamicQuoteUrl || serverUrl;
+        }
+        else {
+            quoteServerUrl = serverUrl;
+        }
     }
     return {
         tigerId,
@@ -234,7 +272,7 @@ function createClientConfig(options) {
         serverUrl,
         quoteServerUrl,
         deviceId: detectDeviceId(),
-        tigerPublicKey: opts.tigerPublicKey ?? TIGER_PUBLIC_KEY,
+        tigerPublicKey,
     };
 }
 /**

package/dist/cjs/config/config-parser.js

@@ -70,34 +70,34 @@ function parsePropertiesString(content) {
     let continuation = false;
     for (const rawLine of lines) {
         if (continuation) {
-            // 续行：去除前导空格后拼接
             const trimmedLeft = rawLine.replace(/^[ \t]+/, '');
-            if (trimmedLeft.endsWith('\\')) {
+            if (trimmedLeft === '' || trimmedLeft.startsWith('#') || trimmedLeft.startsWith('!')) {
+                continuation = false;
+            }
+            else if (endsWithContinuation(trimmedLeft)) {
                 currentLine += trimmedLeft.slice(0, -1);
                 continue;
             }
-            currentLine += trimmedLeft;
-            continuation = false;
+            else {
+                currentLine += trimmedLeft;
+                continuation = false;
+            }
         }
         else {
             const trimmed = rawLine.trim();
-            // 跳过空行
             if (trimmed === '') {
                 continue;
             }
-            // 跳过注释行
             if (trimmed.startsWith('#') || trimmed.startsWith('!')) {
                 continue;
             }
-            // 检查续行
-            if (trimmed.endsWith('\\')) {
+            if (endsWithContinuation(trimmed)) {
                 currentLine = trimmed.slice(0, -1);
                 continuation = true;
                 continue;
             }
             currentLine = trimmed;
         }
-        // 解析键值对
         const result = parseKeyValue(currentLine);
         if (result) {
             props[result[0]] = result[1];
@@ -113,6 +113,16 @@ function parsePropertiesString(content) {
     }
     return props;
 }
+/**
+ * 判断一行是否以续行标记结尾（奇数个末尾反斜杠）。
+ */
+function endsWithContinuation(line) {
+    let count = 0;
+    for (let i = line.length - 1; i >= 0 && line[i] === '\\'; i--) {
+        count++;
+    }
+    return count % 2 === 1;
+}
 /**
  * 解析单行键值对，支持 = 和 : 分隔符。
  * 值中可以包含 = 或 :，只按第一个分隔符拆分。

package/dist/cjs/config/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveDynamicQuoteServerUrl = exports.resolveDynamicServerUrl = exports.queryDomains = exports.TokenManager = exports.loadPropertiesFile = exports.createClientConfig = exports.parsePropertiesString = exports.parsePropertiesFile = void 0;
+exports.resolveDynamicQuoteServerUrl = exports.resolveDynamicServerUrl = exports.queryDomains = exports.TokenManager = exports.SANDBOX_TIGER_PUBLIC_KEY = exports.loadPropertiesFile = exports.createClientConfig = exports.parsePropertiesString = exports.parsePropertiesFile = void 0;
 /**
  * 配置层导出
  */
@@ -10,6 +10,7 @@ Object.defineProperty(exports, "parsePropertiesString", { enumerable: true, get:
 var client_config_1 = require("./client-config");
 Object.defineProperty(exports, "createClientConfig", { enumerable: true, get: function () { return client_config_1.createClientConfig; } });
 Object.defineProperty(exports, "loadPropertiesFile", { enumerable: true, get: function () { return client_config_1.loadPropertiesFile; } });
+Object.defineProperty(exports, "SANDBOX_TIGER_PUBLIC_KEY", { enumerable: true, get: function () { return client_config_1.SANDBOX_TIGER_PUBLIC_KEY; } });
 var token_manager_1 = require("./token-manager");
 Object.defineProperty(exports, "TokenManager", { enumerable: true, get: function () { return token_manager_1.TokenManager; } });
 var domain_1 = require("./domain");

package/dist/cjs/index.js

@@ -16,7 +16,7 @@
  * @packageDocumentation
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.orderStatusCode = exports.BarPeriod = exports.License = exports.Language = exports.FinancialReportPeriod = exports.OptionAnalysisPeriod = exports.SortDirection = exports.IndustryLevel = exports.CorporateActionType = exports.OrderSortBy = exports.SegmentType = exports.QuoteRight = exports.Currency = exports.Market = exports.TimeInForce = exports.OrderType = exports.SecurityType = exports.OrderStatus = exports.normalizeOrderStatus = exports.stopLimitOrder = exports.stopOrder = exports.limitOrder = exports.marketOrder = exports.SubjectType = exports.ConnectionState = exports.PushClient = exports.TradeClient = exports.parseOptionIdentifier = exports.QuoteClient = exports.classifyErrorCode = exports.TigerError = exports.HttpClient = exports.TokenManager = exports.loadPropertiesFile = exports.createClientConfig = exports.VERSION = void 0;
+exports.orderStatusCode = exports.BarPeriod = exports.License = exports.Language = exports.FinancialReportPeriod = exports.OptionAnalysisPeriod = exports.SortDirection = exports.IndustryLevel = exports.CorporateActionType = exports.OrderSortBy = exports.SegmentType = exports.QuoteRight = exports.Currency = exports.Market = exports.TimeInForce = exports.OrderType = exports.SecurityType = exports.OrderStatus = exports.normalizeOrderStatus = exports.stopLimitOrder = exports.stopOrder = exports.limitOrder = exports.marketOrder = exports.SubjectType = exports.ConnectionState = exports.PushClient = exports.TradeClient = exports.parseOptionIdentifier = exports.QuoteClient = exports.classifyErrorCode = exports.TigerError = exports.HttpClient = exports.TokenManager = exports.SANDBOX_TIGER_PUBLIC_KEY = exports.loadPropertiesFile = exports.createClientConfig = exports.VERSION = void 0;
 /** SDK 版本号 */
 var version_1 = require("./version");
 Object.defineProperty(exports, "VERSION", { enumerable: true, get: function () { return version_1.SDK_VERSION; } });
@@ -24,6 +24,7 @@ Object.defineProperty(exports, "VERSION", { enumerable: true, get: function () {
 var config_1 = require("./config");
 Object.defineProperty(exports, "createClientConfig", { enumerable: true, get: function () { return config_1.createClientConfig; } });
 Object.defineProperty(exports, "loadPropertiesFile", { enumerable: true, get: function () { return config_1.loadPropertiesFile; } });
+Object.defineProperty(exports, "SANDBOX_TIGER_PUBLIC_KEY", { enumerable: true, get: function () { return config_1.SANDBOX_TIGER_PUBLIC_KEY; } });
 var config_2 = require("./config");
 Object.defineProperty(exports, "TokenManager", { enumerable: true, get: function () { return config_2.TokenManager; } });
 // Transport

package/dist/cjs/model/enums.js

@@ -150,6 +150,7 @@ var TimeInForce;
 (function (TimeInForce) {
     TimeInForce["DAY"] = "DAY";
     TimeInForce["GTC"] = "GTC";
+    TimeInForce["GTD"] = "GTD";
     TimeInForce["OPG"] = "OPG";
 })(TimeInForce || (exports.TimeInForce = TimeInForce = {}));
 /** 订单排序字段 */
@@ -172,6 +173,9 @@ var CorporateActionType;
     CorporateActionType["Split"] = "split";
     CorporateActionType["Dividend"] = "dividend";
     CorporateActionType["Earning"] = "earning";
+    CorporateActionType["SymbolChange"] = "symbol_change";
+    CorporateActionType["Delisting"] = "delisting";
+    CorporateActionType["IPO"] = "ipo";
 })(CorporateActionType || (exports.CorporateActionType = CorporateActionType = {}));
 /** 行业级别 (1~4 级) */
 var IndustryLevel;

package/dist/cjs/quote/quote-client.js

@@ -155,8 +155,10 @@ class QuoteClient {
      *
      * @param timezone - Optional IANA timezone for expiry conversion (e.g. 'America/New_York').
      *   If omitted, defaults to America/New_York for US symbols and Asia/Hong_Kong for .HK symbols.
+     * @param returnGreekValue - Whether to return Greeks (delta/gamma/theta/vega/rho).
+     * @param optionFilter - Optional filter for in-the-money status, IV range, open interest range, Greeks ranges.
      */
-    async getOptionChain(items, timezone) {
+    async getOptionChain(items, timezone, returnGreekValue, optionFilter) {
         const optionBasic = items.map(([symbol, expiry]) => {
             if (!/^\d{4}-\d{2}-\d{2}$/.test(expiry)) {
                 throw new Error(`invalid expiry date, expected YYYY-MM-DD: ${expiry}`);
@@ -165,37 +167,27 @@ class QuoteClient {
             const expiryMs = localMidnightMs(expiry, tz);
             return { symbol, expiry: expiryMs };
         });
-        return this.callInto('option_chain', { option_basic: optionBasic }, '3.0');
-    }
-    /**
-     * Real-time option quotes by OCC-style identifier.
-     *
-     * @param timezone - Optional IANA timezone for expiry conversion (e.g. 'America/New_York').
-     *   If omitted, defaults to America/New_York for US symbols and Asia/Hong_Kong for .HK symbols.
-     */
-    async getOptionQuote(identifiers, timezone) {
-        const optionBasic = identifiers.map((id) => {
-            const p = parseOptionIdentifier(id, timezone);
-            return { symbol: p.symbol, expiry: p.expiryMs, right: p.right, strike: p.strike };
-        });
-        return this.callInto('option_brief', { option_basic: optionBasic }, '2.0');
-    }
-    /** @deprecated Use getOptionQuote instead. */
-    async getOptionBrief(identifiers) {
-        return this.getOptionQuote(identifiers);
+        const body = { option_basic: optionBasic };
+        if (returnGreekValue !== undefined)
+            body['return_greek_value'] = returnGreekValue;
+        if (optionFilter !== undefined)
+            body['option_filter'] = optionFilter;
+        return this.callInto('option_chain', body, '3.0');
     }
     /**
      * Option K-line by OCC-style identifier.
      *
      * @param timezone - Optional IANA timezone for expiry conversion (e.g. 'America/New_York').
      *   If omitted, defaults to America/New_York for US symbols and Asia/Hong_Kong for .HK symbols.
+     * @param limit - Maximum number of bars to return.
+     * @param sortDir - Sort direction ('asc' or 'desc').
      */
-    async getOptionKline(identifiers, period, beginTime = -1, endTime = -1, timezone) {
+    async getOptionKline(identifiers, period, beginTime = -1, endTime = -1, timezone, limit, sortDir) {
         const resolvedBegin = beginTime === 0 ? -1 : beginTime;
         const resolvedEnd = endTime === 0 ? -1 : endTime;
         const optionQuery = identifiers.map((id) => {
             const p = parseOptionIdentifier(id, timezone);
-            return {
+            const entry = {
                 symbol: p.symbol,
                 expiry: p.expiryMs,
                 right: p.right,
@@ -204,9 +196,31 @@ class QuoteClient {
                 begin_time: resolvedBegin,
                 end_time: resolvedEnd,
             };
+            if (limit !== undefined && limit > 0)
+                entry['limit'] = limit;
+            if (sortDir !== undefined && sortDir !== '')
+                entry['sort_dir'] = sortDir;
+            return entry;
         });
         return this.callInto('option_kline', { option_query: optionQuery }, '2.0');
     }
+    /**
+     * Real-time option quotes by OCC-style identifier.
+     *
+     * @param timezone - Optional IANA timezone for expiry conversion (e.g. 'America/New_York').
+     *   If omitted, defaults to America/New_York for US symbols and Asia/Hong_Kong for .HK symbols.
+     */
+    async getOptionQuote(identifiers, timezone) {
+        const optionBasic = identifiers.map((id) => {
+            const p = parseOptionIdentifier(id, timezone);
+            return { symbol: p.symbol, expiry: p.expiryMs, right: p.right, strike: p.strike };
+        });
+        return this.callInto('option_brief', { option_basic: optionBasic }, '2.0');
+    }
+    /** @deprecated Use getOptionQuote instead. */
+    async getOptionBrief(identifiers) {
+        return this.getOptionQuote(identifiers);
+    }
     // === Futures ===
     async getFutureExchange() {
         return this.callInto('future_exchange', { secType: 'FUT' });
@@ -524,6 +538,30 @@ class QuoteClient {
             return [];
         return Object.values(grouped).flat();
     }
+    /** Corporate symbol change (flattened). wire: corporate_action (action_type=symbol_change) */
+    async getCorporateSymbolChange(req) {
+        const body = { ...req, actionType: 'symbol_change' };
+        const grouped = await this.callInto('corporate_action', body);
+        if (!grouped || typeof grouped !== 'object')
+            return [];
+        return Object.values(grouped).flat();
+    }
+    /** Corporate delisting (flattened). wire: corporate_action (action_type=delisting) */
+    async getCorporateDelisting(req) {
+        const body = { ...req, actionType: 'delisting' };
+        const grouped = await this.callInto('corporate_action', body);
+        if (!grouped || typeof grouped !== 'object')
+            return [];
+        return Object.values(grouped).flat();
+    }
+    /** Corporate IPO (flattened). wire: corporate_action (action_type=ipo) */
+    async getCorporateIPO(req) {
+        const body = { ...req, actionType: 'ipo' };
+        const grouped = await this.callInto('corporate_action', body);
+        if (!grouped || typeof grouped !== 'object')
+            return [];
+        return Object.values(grouped).flat();
+    }
     /** Financial currency per symbol. wire: financial_currency */
     async getFinancialCurrency(req) {
         return this.callInto('financial_currency', req);

package/dist/cjs/trade/trade-client.js

@@ -45,7 +45,16 @@ class TradeClient {
         return new TradeClient(new http_client_1.HttpClient(config), account, secretKey);
     }
     async callInto(method, bizParams) {
-        const request = (0, api_request_1.createApiRequest)(method, bizParams);
+        // Inject secretKey into every request when available (institution accounts require it).
+        // Individual methods that already set secretKey will not be overwritten (|| not &&).
+        let params = bizParams;
+        if (this.secretKey && params !== null && typeof params === 'object' && !Array.isArray(params)) {
+            const p = params;
+            if (p['secretKey'] == null && p['secret_key'] == null) {
+                params = { ...p, secretKey: this.secretKey };
+            }
+        }
+        const request = (0, api_request_1.createApiRequest)(method, params);
         const response = await this.httpClient.executeRequest(request);
         return (0, api_response_1.unmarshalData)(response.data);
     }
@@ -78,25 +87,18 @@ class TradeClient {
     }
     // === Order operations ===
     async placeOrder(order) {
-        const params = { ...order, account: this.account };
-        if (!params.secretKey && this.secretKey)
-            params.secretKey = this.secretKey;
-        return this.callInto('place_order', params);
+        return this.callInto('place_order', { ...order, account: this.account });
     }
     async previewOrder(order) {
         return this.callInto('preview_order', { ...order, account: this.account });
     }
     async modifyOrder(id, order) {
-        const params = { ...order, account: this.account, id };
-        if (!params.secretKey && this.secretKey)
-            params.secretKey = this.secretKey;
-        return this.callInto('modify_order', params);
+        return this.callInto('modify_order', { ...order, account: this.account, id });
     }
     async cancelOrder(id, secretKey) {
-        const sk = secretKey ?? this.secretKey;
         const params = { account: this.account, id };
-        if (sk)
-            params.secretKey = sk;
+        if (secretKey !== undefined)
+            params.secretKey = secretKey; // per-call override takes precedence; undefined means use config default
         return this.callInto('cancel_order', params);
     }
     // === Order queries (BREAKING v0.4.0) ===
@@ -134,14 +136,11 @@ class TradeClient {
     }
     /**
      * Get a single order by ID (v0.4.0 new).
-     * Wire method: `orders` with id/order_id param; server returns a single Order object
-     * (not `{items:[]}` envelope).
-     *
      * Returns `undefined` if no match.
      */
     async getOrder(req) {
         const merged = withAccount(req, this.account);
-        const out = await this.callInto('orders', merged);
+        const out = await this.callInto('order_no', merged);
         if (!out || (!out.id && !out.orderId))
             return undefined;
         normalizeOrderInPlace(out);

package/dist/esm/client/api-response.js

@@ -3,29 +3,33 @@
  */
 import { TigerError } from './errors.js';
 /**
- * Replace bare integers (not inside JSON string values) that exceed
- * Number.MAX_SAFE_INTEGER (> 15 digits) with quoted string equivalents,
- * so that int64 order IDs survive JSON.parse without precision loss.
+ * Replaces bare int64 values (≥17 digits, not part of a float) with quoted
+ * strings so they survive JSON.parse without precision loss.
+ * 17+ digits are guaranteed to exceed Number.MAX_SAFE_INTEGER (≈9.007e15),
+ * so 16-digit microsecond timestamps remain as numbers.
  */
 function patchLargeIntegers(text) {
-    // Mask all existing JSON string values so their content isn't touched.
     const strings = [];
     const masked = text.replace(/"(?:[^"\\]|\\.)*"/g, (match) => {
         strings.push(match);
         return '\x01' + (strings.length - 1) + '\x01';
     });
-    // Quote any bare integer with >15 digits.
-    const patched = masked.replace(/-?\d{16,}/g, (m) => '"' + m + '"');
-    // Restore original string values.
+    // Match bare integers preceded by a JSON structural character or line start,
+    // not followed by decimal point or exponent (avoids matching float components).
+    // The `m` flag makes `^` match line-start for multi-line JSON.
+    const patched = masked.replace(/([:,\[{]|^)\s*(-?\d{17,})(?![.\deE])/gm, (full, prefix, num) => {
+        return prefix + '"' + num + '"';
+    });
     return patched.replace(/\x01(\d+)\x01/g, (_, i) => strings[parseInt(i, 10)]);
 }
 /**
- * Parse the raw HTTP response body.
- * Throws TigerError when code != 0.
- * Large integers in the outer envelope are not an issue (only inner `data` contains int64 IDs).
+ * Parse the raw HTTP response body. Throws TigerError when code != 0.
+ *
+ * patchLargeIntegers is applied before JSON.parse to preserve int64 order IDs
+ * (e.g. 28868646234578944) as strings rather than losing precision.
  */
 export function parseApiResponse(body) {
-    const resp = JSON.parse(body);
+    const resp = JSON.parse(patchLargeIntegers(body));
     if (resp.code !== 0) {
         throw new TigerError(resp.code, resp.message);
     }
@@ -33,15 +37,13 @@ export function parseApiResponse(body) {
 }
 /**
  * Decode an ApiResponse.data payload into a typed value.
- * Handles the server's occasional double-encoded JSON (where `data` is a
- * JSON string that itself wraps JSON), seen on some trade endpoints.
+ * Handles double-encoded JSON (where `data` is a JSON string wrapping JSON),
+ * seen on some trade endpoints.
  */
 export function unmarshalData(data) {
     if (data == null)
         return undefined;
     if (typeof data === 'string') {
-        // Attempt to parse JSON string (double-encoded case).
-        // Patch large integers before parsing so int64 IDs survive as strings.
         try {
             return JSON.parse(patchLargeIntegers(data));
         }