@tigeropenapi/tigeropen 0.5.0 → 0.5.4

package/dist/cjs/quote/quote-client.js

@@ -1,4 +1,37 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.QuoteClient = void 0;
 exports.parseOptionIdentifier = parseOptionIdentifier;
@@ -12,6 +45,7 @@ exports.parseOptionIdentifier = parseOptionIdentifier;
 const http_client_1 = require("../client/http-client");
 const api_request_1 = require("../client/api-request");
 const api_response_1 = require("../client/api-response");
+const tokenMethods = __importStar(require("../client/token-methods"));
 /**
  * resolveOptionTimezone returns the timezone string to use for expiry conversion.
  * Explicit tz takes precedence; otherwise infer from symbol (.HK suffix → Asia/Hong_Kong, else America/New_York).
@@ -94,6 +128,25 @@ class QuoteClient {
     static fromConfig(config) {
         return new QuoteClient(new http_client_1.HttpClient(config, undefined, { useQuoteServerUrl: true }));
     }
+    // ── Token management ──────────────────────────────────────────────────────
+    /** Call the `user_token_refresh` API and return the new token. Read-only. */
+    async queryToken() {
+        return tokenMethods.queryToken(this.httpClient);
+    }
+    /** Refresh the token and update the in-memory config token. */
+    async refreshToken(tokenManager) {
+        return tokenMethods.refreshToken(this.httpClient, tokenManager);
+    }
+    /**
+     * Start background token auto-refresh. Returns a TokenManager to stop with `tm.stopAutoRefresh()`.
+     *
+     * @param refreshDurationSecs - Refresh threshold in seconds (minimum 30).
+     * @param checkIntervalMs - How often to check, in milliseconds (default 300 000 / 5 min).
+     * @param tokenWriter - Optional callback invoked after each successful refresh.
+     */
+    startTokenAutoRefresh(refreshDurationSecs, checkIntervalMs, tokenWriter) {
+        return tokenMethods.startTokenAutoRefresh(this.httpClient, refreshDurationSecs, checkIntervalMs, tokenWriter);
+    }
     async callInto(method, bizParams, version) {
         const request = (0, api_request_1.createApiRequest)(method, bizParams, version);
         const response = await this.httpClient.executeRequest(request);
@@ -155,8 +208,10 @@ class QuoteClient {
      *
      * @param timezone - Optional IANA timezone for expiry conversion (e.g. 'America/New_York').
      *   If omitted, defaults to America/New_York for US symbols and Asia/Hong_Kong for .HK symbols.
+     * @param returnGreekValue - Whether to return Greeks (delta/gamma/theta/vega/rho).
+     * @param optionFilter - Optional filter for in-the-money status, IV range, open interest range, Greeks ranges.
      */
-    async getOptionChain(items, timezone) {
+    async getOptionChain(items, timezone, returnGreekValue, optionFilter) {
         const optionBasic = items.map(([symbol, expiry]) => {
             if (!/^\d{4}-\d{2}-\d{2}$/.test(expiry)) {
                 throw new Error(`invalid expiry date, expected YYYY-MM-DD: ${expiry}`);
@@ -165,37 +220,27 @@ class QuoteClient {
             const expiryMs = localMidnightMs(expiry, tz);
             return { symbol, expiry: expiryMs };
         });
-        return this.callInto('option_chain', { option_basic: optionBasic }, '3.0');
-    }
-    /**
-     * Real-time option quotes by OCC-style identifier.
-     *
-     * @param timezone - Optional IANA timezone for expiry conversion (e.g. 'America/New_York').
-     *   If omitted, defaults to America/New_York for US symbols and Asia/Hong_Kong for .HK symbols.
-     */
-    async getOptionQuote(identifiers, timezone) {
-        const optionBasic = identifiers.map((id) => {
-            const p = parseOptionIdentifier(id, timezone);
-            return { symbol: p.symbol, expiry: p.expiryMs, right: p.right, strike: p.strike };
-        });
-        return this.callInto('option_brief', { option_basic: optionBasic }, '2.0');
-    }
-    /** @deprecated Use getOptionQuote instead. */
-    async getOptionBrief(identifiers) {
-        return this.getOptionQuote(identifiers);
+        const body = { option_basic: optionBasic };
+        if (returnGreekValue !== undefined)
+            body['return_greek_value'] = returnGreekValue;
+        if (optionFilter !== undefined)
+            body['option_filter'] = optionFilter;
+        return this.callInto('option_chain', body, '3.0');
     }
     /**
      * Option K-line by OCC-style identifier.
      *
      * @param timezone - Optional IANA timezone for expiry conversion (e.g. 'America/New_York').
      *   If omitted, defaults to America/New_York for US symbols and Asia/Hong_Kong for .HK symbols.
+     * @param limit - Maximum number of bars to return.
+     * @param sortDir - Sort direction ('asc' or 'desc').
      */
-    async getOptionKline(identifiers, period, beginTime = -1, endTime = -1, timezone) {
+    async getOptionKline(identifiers, period, beginTime = -1, endTime = -1, timezone, limit, sortDir) {
         const resolvedBegin = beginTime === 0 ? -1 : beginTime;
         const resolvedEnd = endTime === 0 ? -1 : endTime;
         const optionQuery = identifiers.map((id) => {
             const p = parseOptionIdentifier(id, timezone);
-            return {
+            const entry = {
                 symbol: p.symbol,
                 expiry: p.expiryMs,
                 right: p.right,
@@ -204,9 +249,31 @@ class QuoteClient {
                 begin_time: resolvedBegin,
                 end_time: resolvedEnd,
             };
+            if (limit !== undefined && limit > 0)
+                entry['limit'] = limit;
+            if (sortDir !== undefined && sortDir !== '')
+                entry['sort_dir'] = sortDir;
+            return entry;
         });
         return this.callInto('option_kline', { option_query: optionQuery }, '2.0');
     }
+    /**
+     * Real-time option quotes by OCC-style identifier.
+     *
+     * @param timezone - Optional IANA timezone for expiry conversion (e.g. 'America/New_York').
+     *   If omitted, defaults to America/New_York for US symbols and Asia/Hong_Kong for .HK symbols.
+     */
+    async getOptionQuote(identifiers, timezone) {
+        const optionBasic = identifiers.map((id) => {
+            const p = parseOptionIdentifier(id, timezone);
+            return { symbol: p.symbol, expiry: p.expiryMs, right: p.right, strike: p.strike };
+        });
+        return this.callInto('option_brief', { option_basic: optionBasic }, '2.0');
+    }
+    /** @deprecated Use getOptionQuote instead. */
+    async getOptionBrief(identifiers) {
+        return this.getOptionQuote(identifiers);
+    }
     // === Futures ===
     async getFutureExchange() {
         return this.callInto('future_exchange', { secType: 'FUT' });
@@ -524,6 +591,30 @@ class QuoteClient {
             return [];
         return Object.values(grouped).flat();
     }
+    /** Corporate symbol change (flattened). wire: corporate_action (action_type=symbol_change) */
+    async getCorporateSymbolChange(req) {
+        const body = { ...req, actionType: 'symbol_change' };
+        const grouped = await this.callInto('corporate_action', body);
+        if (!grouped || typeof grouped !== 'object')
+            return [];
+        return Object.values(grouped).flat();
+    }
+    /** Corporate delisting (flattened). wire: corporate_action (action_type=delisting) */
+    async getCorporateDelisting(req) {
+        const body = { ...req, actionType: 'delisting' };
+        const grouped = await this.callInto('corporate_action', body);
+        if (!grouped || typeof grouped !== 'object')
+            return [];
+        return Object.values(grouped).flat();
+    }
+    /** Corporate IPO (flattened). wire: corporate_action (action_type=ipo) */
+    async getCorporateIPO(req) {
+        const body = { ...req, actionType: 'ipo' };
+        const grouped = await this.callInto('corporate_action', body);
+        if (!grouped || typeof grouped !== 'object')
+            return [];
+        return Object.values(grouped).flat();
+    }
     /** Financial currency per symbol. wire: financial_currency */
     async getFinancialCurrency(req) {
         return this.callInto('financial_currency', req);

package/dist/cjs/trade/trade-client.js

@@ -1,4 +1,37 @@
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.TradeClient = void 0;
 /**
@@ -13,6 +46,7 @@ exports.TradeClient = void 0;
 const http_client_1 = require("../client/http-client");
 const api_request_1 = require("../client/api-request");
 const api_response_1 = require("../client/api-response");
+const tokenMethods = __importStar(require("../client/token-methods"));
 const order_status_1 = require("../model/order-status");
 /** Normalize `Order.status` field in-place (handles int → string). */
 function normalizeOrderInPlace(o) {
@@ -44,8 +78,42 @@ class TradeClient {
     static fromConfig(config, account, secretKey) {
         return new TradeClient(new http_client_1.HttpClient(config), account, secretKey);
     }
+    // ── Token management ──────────────────────────────────────────────────────
+    /** Call the `user_token_refresh` API and return the new token. Read-only. */
+    async queryToken() {
+        return tokenMethods.queryToken(this.httpClient);
+    }
+    /**
+     * Refresh the token: call the API, update the in-memory config token, and
+     * optionally persist via the provided TokenManager (file + writer callback).
+     *
+     * @param tokenManager - optional TokenManager for file persistence and writer callback
+     */
+    async refreshToken(tokenManager) {
+        return tokenMethods.refreshToken(this.httpClient, tokenManager);
+    }
+    /**
+     * Start background token auto-refresh. Returns a TokenManager that can be
+     * used to stop the background task via `tm.stopAutoRefresh()`.
+     *
+     * @param refreshDurationSecs - Refresh threshold in seconds (minimum 30).
+     * @param checkIntervalMs - How often to check, in milliseconds (default 300 000 / 5 min).
+     * @param tokenWriter - Optional callback invoked after each successful refresh.
+     */
+    startTokenAutoRefresh(refreshDurationSecs, checkIntervalMs, tokenWriter) {
+        return tokenMethods.startTokenAutoRefresh(this.httpClient, refreshDurationSecs, checkIntervalMs, tokenWriter);
+    }
     async callInto(method, bizParams) {
-        const request = (0, api_request_1.createApiRequest)(method, bizParams);
+        // Inject secretKey into every request when available (institution accounts require it).
+        // Individual methods that already set secretKey will not be overwritten (|| not &&).
+        let params = bizParams;
+        if (this.secretKey && params !== null && typeof params === 'object' && !Array.isArray(params)) {
+            const p = params;
+            if (p['secretKey'] == null && p['secret_key'] == null) {
+                params = { ...p, secretKey: this.secretKey };
+            }
+        }
+        const request = (0, api_request_1.createApiRequest)(method, params);
         const response = await this.httpClient.executeRequest(request);
         return (0, api_response_1.unmarshalData)(response.data);
     }
@@ -78,25 +146,18 @@ class TradeClient {
     }
     // === Order operations ===
     async placeOrder(order) {
-        const params = { ...order, account: this.account };
-        if (!params.secretKey && this.secretKey)
-            params.secretKey = this.secretKey;
-        return this.callInto('place_order', params);
+        return this.callInto('place_order', { ...order, account: this.account });
     }
     async previewOrder(order) {
         return this.callInto('preview_order', { ...order, account: this.account });
     }
     async modifyOrder(id, order) {
-        const params = { ...order, account: this.account, id };
-        if (!params.secretKey && this.secretKey)
-            params.secretKey = this.secretKey;
-        return this.callInto('modify_order', params);
+        return this.callInto('modify_order', { ...order, account: this.account, id });
     }
     async cancelOrder(id, secretKey) {
-        const sk = secretKey ?? this.secretKey;
         const params = { account: this.account, id };
-        if (sk)
-            params.secretKey = sk;
+        if (secretKey !== undefined)
+            params.secretKey = secretKey; // per-call override takes precedence; undefined means use config default
         return this.callInto('cancel_order', params);
     }
     // === Order queries (BREAKING v0.4.0) ===
@@ -134,14 +195,11 @@ class TradeClient {
     }
     /**
      * Get a single order by ID (v0.4.0 new).
-     * Wire method: `orders` with id/order_id param; server returns a single Order object
-     * (not `{items:[]}` envelope).
-     *
      * Returns `undefined` if no match.
      */
     async getOrder(req) {
         const merged = withAccount(req, this.account);
-        const out = await this.callInto('orders', merged);
+        const out = await this.callInto('order_no', merged);
         if (!out || (!out.id && !out.orderId))
             return undefined;
         normalizeOrderInPlace(out);

package/dist/esm/client/api-response.js

@@ -3,29 +3,33 @@
  */
 import { TigerError } from './errors.js';
 /**
- * Replace bare integers (not inside JSON string values) that exceed
- * Number.MAX_SAFE_INTEGER (> 15 digits) with quoted string equivalents,
- * so that int64 order IDs survive JSON.parse without precision loss.
+ * Replaces bare int64 values (≥17 digits, not part of a float) with quoted
+ * strings so they survive JSON.parse without precision loss.
+ * 17+ digits are guaranteed to exceed Number.MAX_SAFE_INTEGER (≈9.007e15),
+ * so 16-digit microsecond timestamps remain as numbers.
  */
 function patchLargeIntegers(text) {
-    // Mask all existing JSON string values so their content isn't touched.
     const strings = [];
     const masked = text.replace(/"(?:[^"\\]|\\.)*"/g, (match) => {
         strings.push(match);
         return '\x01' + (strings.length - 1) + '\x01';
     });
-    // Quote any bare integer with >15 digits.
-    const patched = masked.replace(/-?\d{16,}/g, (m) => '"' + m + '"');
-    // Restore original string values.
+    // Match bare integers preceded by a JSON structural character or line start,
+    // not followed by decimal point or exponent (avoids matching float components).
+    // The `m` flag makes `^` match line-start for multi-line JSON.
+    const patched = masked.replace(/([:,\[{]|^)\s*(-?\d{17,})(?![.\deE])/gm, (full, prefix, num) => {
+        return prefix + '"' + num + '"';
+    });
     return patched.replace(/\x01(\d+)\x01/g, (_, i) => strings[parseInt(i, 10)]);
 }
 /**
- * Parse the raw HTTP response body.
- * Throws TigerError when code != 0.
- * Large integers in the outer envelope are not an issue (only inner `data` contains int64 IDs).
+ * Parse the raw HTTP response body. Throws TigerError when code != 0.
+ *
+ * patchLargeIntegers is applied before JSON.parse to preserve int64 order IDs
+ * (e.g. 28868646234578944) as strings rather than losing precision.
  */
 export function parseApiResponse(body) {
-    const resp = JSON.parse(body);
+    const resp = JSON.parse(patchLargeIntegers(body));
     if (resp.code !== 0) {
         throw new TigerError(resp.code, resp.message);
     }
@@ -33,15 +37,13 @@ export function parseApiResponse(body) {
 }
 /**
  * Decode an ApiResponse.data payload into a typed value.
- * Handles the server's occasional double-encoded JSON (where `data` is a
- * JSON string that itself wraps JSON), seen on some trade endpoints.
+ * Handles double-encoded JSON (where `data` is a JSON string wrapping JSON),
+ * seen on some trade endpoints.
  */
 export function unmarshalData(data) {
     if (data == null)
         return undefined;
     if (typeof data === 'string') {
-        // Attempt to parse JSON string (double-encoded case).
-        // Patch large integers before parsing so int64 IDs survive as strings.
         try {
             return JSON.parse(patchLargeIntegers(data));
         }

package/dist/esm/client/token-methods.js

@@ -0,0 +1,37 @@
+/**
+ * Call the `user_token_refresh` API and return the new token string.
+ * Read-only: does NOT update the stored token.
+ * Use `refreshToken()` to also update the in-memory config and optionally persist.
+ */
+export async function queryToken(httpClient) {
+    return httpClient.queryToken();
+}
+/**
+ * Refresh the token: call the API, update the in-memory config token, and
+ * optionally persist via the provided TokenManager (file + writer callback).
+ *
+ * @param httpClient - The underlying HTTP client
+ * @param tokenManager - optional TokenManager for file persistence and writer callback
+ */
+export async function refreshToken(httpClient, tokenManager) {
+    return httpClient.refreshToken(tokenManager);
+}
+/**
+ * Start background token auto-refresh. Returns a TokenManager that can be
+ * used to stop the background task via `tm.stopAutoRefresh()`.
+ *
+ * @param httpClient - The underlying HTTP client
+ * @param refreshDurationSecs - Refresh threshold in seconds (minimum 30).
+ *   When the token age exceeds this value the refresh is triggered.
+ * @param checkIntervalMs - How often to check whether a refresh is needed,
+ *   in milliseconds. Defaults to 300 000 ms (5 minutes).
+ * @param tokenWriter - Optional callback invoked with the new token string
+ *   after each successful refresh.
+ */
+export function startTokenAutoRefresh(httpClient, refreshDurationSecs, checkIntervalMs, tokenWriter) {
+    return httpClient.startTokenAutoRefresh(null, {
+        refreshDuration: refreshDurationSecs,
+        refreshInterval: checkIntervalMs,
+        tokenWriter,
+    });
+}

package/dist/esm/config/client-config.js

@@ -9,7 +9,7 @@
  * Priority: environment variables > code options (incl. config file) > defaults
  */
 import { readFileSync, existsSync, statSync } from 'fs';
-import { join } from 'path';
+import { join, dirname } from 'path';
 import { homedir, networkInterfaces } from 'os';
 import { parsePropertiesString } from './config-parser.js';
 import { queryDomains, resolveDynamicServerUrl, resolveDynamicQuoteServerUrl } from './domain.js';
@@ -22,6 +22,10 @@ const DEFAULT_TIMEOUT = 15;
 const DEFAULT_SERVER_URL = 'https://openapi.tigerfintech.com/gateway';
 /** Tiger public key for response signature verification (Base64-encoded) */
 const TIGER_PUBLIC_KEY = 'MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDNF3G8SoEcCZh2rshUbayDgLLrj6rKgzNMxDL2HSnKcB0+GPOsndqSv+a4IBu9+I3fyBp5hkyMMG2+AXugd9pMpy6VxJxlNjhX1MYbNTZJUT4nudki4uh+LMOkIBHOceGNXjgB+cXqmlUnjlqha/HgboeHSnSgpM3dKSJQlIOsDwIDAQAB';
+/** Sandbox / QA tiger public key for response signature verification */
+export const SANDBOX_TIGER_PUBLIC_KEY = 'MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCbm21i11hgAENGd3/f280PSe4g9YGkS3TEXBYMidihTvHHf' +
+    '+tJ0PYD0o3PruI0hl3qhEjHTAxb75T5YD3SGK4IBhHn/Rk6mhqlGgI+bBrBVYaXixmHfRo75RpUUuWACyeqQk' +
+    'ZckgR0McxuW9xRMIa2cXZOoL1E4SL4lXKGhKoWbwIDAQAB';
 /** Environment variable names */
 const ENV_TIGER_ID = 'TIGEROPEN_TIGER_ID';
 const ENV_PRIVATE_KEY = 'TIGEROPEN_PRIVATE_KEY';
@@ -29,6 +33,9 @@ const ENV_ACCOUNT = 'TIGEROPEN_ACCOUNT';
 const ENV_SECRET_KEY = 'TIGEROPEN_SECRET_KEY';
 const ENV_TOKEN = 'TIGEROPEN_TOKEN';
 const ENV_TOKEN_FILE = 'TIGEROPEN_TOKEN_FILE';
+const ENV_TIGER_PUBLIC_KEY = 'TIGEROPEN_TIGER_PUBLIC_KEY';
+const ENV_SERVER_URL = 'TIGEROPEN_SERVER_URL';
+const ENV_QUOTE_SERVER_URL = 'TIGEROPEN_QUOTE_SERVER_URL';
 /**
  * Load and parse a Java-style properties file.
  *
@@ -101,23 +108,32 @@ export function createClientConfig(options) {
     const opts = options ?? {};
     // Load properties: explicit path > auto-discovery
     let fileProps = {};
+    let configFileDir;
     if (opts.propertiesFilePath) {
         // Support both directory path and full file path
         let filePath = opts.propertiesFilePath;
         if (existsSync(filePath) && statSync(filePath).isDirectory()) {
+            configFileDir = filePath;
             filePath = join(filePath, CONFIG_FILE_NAME);
         }
         else if (!existsSync(filePath) && !filePath.endsWith('.properties')) {
             // Path doesn't exist as-is; try treating it as a directory
             const asDir = join(filePath, CONFIG_FILE_NAME);
-            if (existsSync(asDir))
+            if (existsSync(asDir)) {
+                configFileDir = filePath;
                 filePath = asDir;
+            }
+        }
+        else {
+            // It's a file path: derive directory from it
+            configFileDir = dirname(filePath);
         }
         fileProps = loadPropertiesFile(filePath);
     }
     else {
         const discovered = discoverConfigFile();
         if (discovered) {
+            configFileDir = dirname(discovered);
             fileProps = loadPropertiesFile(discovered);
         }
     }
@@ -130,12 +146,15 @@ export function createClientConfig(options) {
     const license = opts.license || fileProps['license'];
     const language = opts.language || fileProps['language'] || DEFAULT_LANGUAGE;
     const timezone = opts.timezone || fileProps['timezone'];
+    // tiger_public_key from properties file (e.g. for QA/sandbox environments)
+    let tigerPublicKey = opts.tigerPublicKey || fileProps['tiger_public_key'] || TIGER_PUBLIC_KEY;
     // Environment variables override everything
     const envTigerId = process.env[ENV_TIGER_ID];
     const envPrivateKey = process.env[ENV_PRIVATE_KEY];
     const envAccount = process.env[ENV_ACCOUNT];
     const envSecretKey = process.env[ENV_SECRET_KEY];
     const envToken = process.env[ENV_TOKEN];
+    const envTigerPublicKey = process.env[ENV_TIGER_PUBLIC_KEY];
     if (envTigerId) {
         tigerId = envTigerId;
     }
@@ -151,6 +170,9 @@ export function createClientConfig(options) {
     if (envToken) {
         token = envToken;
     }
+    if (envTigerPublicKey) {
+        tigerPublicKey = envTigerPublicKey;
+    }
     // Token loading priority: env TIGEROPEN_TOKEN > tokenLoader > token file (TIGEROPEN_TOKEN_FILE or default)
     if (!token) {
         if (opts.tokenLoader) {
@@ -171,8 +193,9 @@ export function createClientConfig(options) {
             }
         }
         else {
-            // Load from token file: TIGEROPEN_TOKEN_FILE env var > default file
-            const tokenFilePath = process.env[ENV_TOKEN_FILE] || 'tiger_openapi_token.properties';
+            // Load from token file: TIGEROPEN_TOKEN_FILE env var > config dir > default
+            const tokenFilePath = process.env[ENV_TOKEN_FILE]
+                || (configFileDir ? join(configFileDir, 'tiger_openapi_token.properties') : 'tiger_openapi_token.properties');
             const tm = new TokenManager({ filePath: tokenFilePath });
             try {
                 token = tm.loadTokenSync();
@@ -189,29 +212,53 @@ export function createClientConfig(options) {
     if (!privateKey) {
         throw new Error(`privateKey is required. Set it via options.privateKey, a config file, or the ${ENV_PRIVATE_KEY} environment variable.`);
     }
-    // Resolve server URL: explicit > dynamic domain > default
+    // Resolve server URL: env var > explicit opts > file > dynamic domain > default
     const enableDynamicDomain = opts.enableDynamicDomain ?? true;
     let serverUrl;
     let quoteServerUrl;
     // Query dynamic domains once (may spawn a child process); reuse for both URLs.
     let domainConf = {};
-    if (enableDynamicDomain && (!opts.serverUrl || !opts.quoteServerUrl)) {
+    const envServerUrl = process.env[ENV_SERVER_URL];
+    const envQuoteServerUrl = process.env[ENV_QUOTE_SERVER_URL];
+    const needServerUrl = !envServerUrl && !opts.serverUrl && !fileProps['server_url'];
+    const needQuoteServerUrl = !envQuoteServerUrl && !opts.quoteServerUrl && !fileProps['quote_server_url'];
+    if (enableDynamicDomain && (needServerUrl || needQuoteServerUrl)) {
         domainConf = queryDomains(license);
     }
-    if (opts.serverUrl) {
+    if (envServerUrl) {
+        serverUrl = envServerUrl;
+    }
+    else if (opts.serverUrl) {
         serverUrl = opts.serverUrl;
     }
+    else if (fileProps['server_url']) {
+        serverUrl = fileProps['server_url'];
+    }
     else {
         const dynamicUrl = resolveDynamicServerUrl(domainConf, license);
         serverUrl = dynamicUrl || DEFAULT_SERVER_URL;
     }
-    // Resolve quote server URL: explicit > dynamic domain > serverUrl fallback
-    if (opts.quoteServerUrl) {
+    // Resolve quote server URL: env var > explicit opts > file > dynamic domain > serverUrl fallback
+    if (envQuoteServerUrl) {
+        quoteServerUrl = envQuoteServerUrl;
+    }
+    else if (opts.quoteServerUrl) {
         quoteServerUrl = opts.quoteServerUrl;
     }
+    else if (fileProps['quote_server_url']) {
+        quoteServerUrl = fileProps['quote_server_url'];
+    }
     else {
-        const dynamicQuoteUrl = resolveDynamicQuoteServerUrl(domainConf, license);
-        quoteServerUrl = dynamicQuoteUrl || serverUrl;
+        // Only use dynamic domain if serverUrl itself came from dynamic resolution (not pinned by env/opts/file).
+        // When serverUrl is pinned, prefer it as the quote fallback to avoid mixing environments.
+        const serverUrlPinned = !!(envServerUrl || opts.serverUrl || fileProps['server_url']);
+        if (!serverUrlPinned) {
+            const dynamicQuoteUrl = resolveDynamicQuoteServerUrl(domainConf, license);
+            quoteServerUrl = dynamicQuoteUrl || serverUrl;
+        }
+        else {
+            quoteServerUrl = serverUrl;
+        }
     }
     return {
         tigerId,
@@ -230,7 +277,7 @@ export function createClientConfig(options) {
         serverUrl,
         quoteServerUrl,
         deviceId: detectDeviceId(),
-        tigerPublicKey: opts.tigerPublicKey ?? TIGER_PUBLIC_KEY,
+        tigerPublicKey,
     };
 }
 /**

package/dist/esm/config/config-parser.js

@@ -33,34 +33,34 @@ export function parsePropertiesString(content) {
     let continuation = false;
     for (const rawLine of lines) {
         if (continuation) {
-            // 续行：去除前导空格后拼接
             const trimmedLeft = rawLine.replace(/^[ \t]+/, '');
-            if (trimmedLeft.endsWith('\\')) {
+            if (trimmedLeft === '' || trimmedLeft.startsWith('#') || trimmedLeft.startsWith('!')) {
+                continuation = false;
+            }
+            else if (endsWithContinuation(trimmedLeft)) {
                 currentLine += trimmedLeft.slice(0, -1);
                 continue;
             }
-            currentLine += trimmedLeft;
-            continuation = false;
+            else {
+                currentLine += trimmedLeft;
+                continuation = false;
+            }
         }
         else {
             const trimmed = rawLine.trim();
-            // 跳过空行
             if (trimmed === '') {
                 continue;
             }
-            // 跳过注释行
             if (trimmed.startsWith('#') || trimmed.startsWith('!')) {
                 continue;
             }
-            // 检查续行
-            if (trimmed.endsWith('\\')) {
+            if (endsWithContinuation(trimmed)) {
                 currentLine = trimmed.slice(0, -1);
                 continuation = true;
                 continue;
             }
             currentLine = trimmed;
         }
-        // 解析键值对
         const result = parseKeyValue(currentLine);
         if (result) {
             props[result[0]] = result[1];
@@ -76,6 +76,16 @@ export function parsePropertiesString(content) {
     }
     return props;
 }
+/**
+ * 判断一行是否以续行标记结尾（奇数个末尾反斜杠）。
+ */
+function endsWithContinuation(line) {
+    let count = 0;
+    for (let i = line.length - 1; i >= 0 && line[i] === '\\'; i--) {
+        count++;
+    }
+    return count % 2 === 1;
+}
 /**
  * 解析单行键值对，支持 = 和 : 分隔符。
  * 值中可以包含 = 或 :，只按第一个分隔符拆分。