idx-cli/changes/unreleased/stockbit-login.md
0xrsydn 809966925e docs: keep a CHANGELOG.md, with one entry file per PR
Release notes were written by hand on GitHub at tag time, so the contents
of a stacked release had to be pieced together from every PR, and output
changes that scripts and agents rely on were easy to miss.

- CHANGELOG.md backfills every published release (0.2.0 to 0.4.0) from its
  GitHub notes, verbatim.
- A PR adds changes/unreleased/<branch-name>.md instead of editing
  CHANGELOG.md, so stacked PRs never conflict. changes/README.md gives the
  sections, including Output Changes for JSON, MCP and error-code changes.
- scripts/changelog.sh: `check` validates entries and CHANGELOG.md,
  `release X.Y.Z` folds the entries into a new section (ordered by PR), and
  `notes X.Y.Z` prints a section as GitHub release notes.
- The release workflow sets the GitHub notes from the tag's section.
- New flake check `changelog` runs scripts/changelog-test.sh; both scripts
  are shellchecked.
- Entries for 0.5.0: #73, #74, #75, #78, #79, #80, #81 and this PR.

Claude-Session: https://claude.ai/code/session_01RqPPVeVDrnLoP7NUZmLRxY
2026-11-04 19:48:58 +07:00

1.3 KiB

New Features

  • idx stockbit login, status and logout sign in with your own Stockbit account. On a desktop, idx opens a browser window on Stockbit's sign-in page; over SSH or with --no-browser, a page on 127.0.0.1 takes the session from your own browser. idx never sees your password, stores the session with mode 0600, and refreshes it under a lock so concurrent processes never spend it twice. (#74)
  • idx stocks orderbook and get_orderbook show a stock's order book: the depth ladder, OHLC, value, trades and foreign flow, and whether the book is live. (#74)
  • With a session, --provider stockbit quotes come from Stockbit's session API, and price history from 5 days to 1 year uses Stockbit's daily charts (--history-provider stockbit, or auto under the stockbit provider). If Stockbit refuses the session, auto falls back to Yahoo with a warning. (#74)
  • MCP: stockbit_login starts a sign-in and answers at once, and stockbit_status reports it: sign_in.state (waiting, signed_in or failed), plus sign_in.warning while it waits, for example when Stockbit refuses the session. (#74)

Notes

  • New dependency in idx-core: base64 0.22. (#74)
  • Google sign-in does not work in idx's browser window; sign in with your password there, or use the local page (idx stockbit login --no-browser). (#74)