hvip-mcp-server 0.3.1 → 0.3.2

package/dist/index.js

@@ -26557,11 +26557,19 @@ async function request(method, path3, options = {}) {
     headers["OK-ACCESS-PASSPHRASE"] = options.auth.passphrase;
     if (options.auth.isDemo) headers["x-simulated-trading"] = "1";
   }
-  const res = await fetch(BASE + fullPath, {
-    method,
-    headers,
-    ...bodyStr ? { body: bodyStr } : {}
-  });
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), 3e4);
+  let res;
+  try {
+    res = await fetch(BASE + fullPath, {
+      method,
+      headers,
+      body: bodyStr || void 0,
+      signal: controller.signal
+    });
+  } finally {
+    clearTimeout(timer);
+  }
   if (!res.ok) throw new Error(`HTTP ${res.status} ${res.statusText}`);
   const json = await res.json();
   if (json.code !== "0") throw new Error(`OKX ${json.code}: ${json.msg ?? "unknown error"}`);
@@ -30056,6 +30064,8 @@ function registerFundingTools(server, auth) {
     },
     async ({ ccy, amt, dest, toAddr, chain, fee }) => {
       if (!auth) return toError(AUTH_REQUIRED);
+      if (dest === "4" && !toAddr) return toError(new Error("\u94FE\u4E0A\u63D0\u5E01\u5FC5\u987B\u63D0\u4F9B toAddr\uFF08\u76EE\u6807\u5730\u5740\uFF09"));
+      if (dest === "4" && toAddr && !/^[A-Za-z0-9]{20,}$/.test(toAddr)) return toError(new Error(`\u76EE\u6807\u5730\u5740 "${toAddr}" \u683C\u5F0F\u65E0\u6548`));
       try {
         const body = { ccy, amt, dest };
         if (toAddr) body.toAddr = toAddr;
@@ -36654,7 +36664,11 @@ var WsManager = class {
                 hint: parsed.code === "60001" ? "\u9891\u9053\u540D\u4E0D\u652F\u6301\u6216\u53C2\u6570\u9519\u8BEF\uFF0C\u8BF7\u68C0\u67E5 channel \u503C" : parsed.code === "60003" ? "\u767B\u5F55\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u8FDE" : parsed.code === "60009" ? "\u79C1\u6709\u9891\u9053\u9700\u8981\u5148 login\uFF08API Key \u7B7E\u540D\uFF09" : `OKX WS \u9519\u8BEF ${parsed.code}`
               }
             });
-            if (this.events.length > 1e4) this.events = this.events.slice(-5e3);
+            if (this.events.length > 1e4) {
+              if (this.events.length === 10001) process.stderr.write(`[WS] \u26A0\uFE0F \u4E8B\u4EF6\u7F13\u51B2\u5DF2\u6EE1(>10000)\uFF0C\u5F00\u59CB\u622A\u65AD\u65E7\u4E8B\u4EF6
+`);
+              this.events = this.events.slice(-5e3);
+            }
             return;
           }
           if (parsed.arg && parsed.data) {
@@ -36667,7 +36681,11 @@ var WsManager = class {
                   ts: Date.now(),
                   data: parsed.data
                 });
-                if (this.events.length > 1e4) this.events = this.events.slice(-5e3);
+                if (this.events.length > 1e4) {
+                  if (this.events.length === 10001) process.stderr.write(`[WS] \u26A0\uFE0F \u4E8B\u4EF6\u7F13\u51B2\u5DF2\u6EE1(>10000)\uFF0C\u5F00\u59CB\u622A\u65AD\u65E7\u4E8B\u4EF6
+`);
+                  this.events = this.events.slice(-5e3);
+                }
                 break;
               }
             }
@@ -38087,7 +38105,7 @@ async function startHttp(server, version2, auth, readOnly, skipped) {
   });
   await server.connect(transport);
   const httpServer = (0, import_node_http.createServer)(async (req, res) => {
-    res.setHeader("Access-Control-Allow-Origin", "*");
+    res.setHeader("Access-Control-Allow-Origin", `http://${host}:${port}`);
     res.setHeader("Access-Control-Allow-Methods", "GET, POST, OPTIONS");
     res.setHeader("Access-Control-Allow-Headers", "Content-Type, Mcp-Session-Id");
     if (req.method === "OPTIONS") {
@@ -38119,13 +38137,6 @@ async function startHttp(server, version2, auth, readOnly, skipped) {
       }
       return;
     }
-    if (req.method === "GET" && req.url === "/config") {
-      res.writeHead(200, { "Content-Type": "application/json" });
-      res.end(JSON.stringify({
-        claudeApiKey: process.env.CLAUDE_API_KEY || ""
-      }));
-      return;
-    }
     if (req.method === "GET" && req.url === "/health") {
       res.writeHead(200, { "Content-Type": "application/json" });
       res.end(JSON.stringify({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hvip-mcp-server",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "hvip MCP Server — 365 工具覆盖 97.7% OKX REST API，含交易/行情/资金/策略/预测市场/技术指标/Smart Money（非 OKX 官方产品）",
   "homepage": "https://github.com/okx-wallet-H/hvip-mcp",
   "repository": {