diagnostics.py

import os, time, requests
from dotenv import load_dotenv
from signers import binance_headers, binance_sign

load_dotenv()  # loads .env into environment

def ms() -> int:
    return int(time.time() * 1000)

def base_url() -> str:
    # Allow override (e.g. testnet); default: production
    return os.getenv("BINANCE_BASE_URL", "https://api.binance.com")

TOL = int(os.getenv("TIME_SKEW_MS_TOLERANCE", "5000"))
API_KEY = os.getenv("BINANCE_API_KEY")
API_SECRET = os.getenv("BINANCE_API_SECRET")

def binance_server_time():
    t0 = ms()
    r = requests.get(f"{base_url()}/api/v3/time", timeout=10)
    r.raise_for_status()
    t1 = ms()
    data = r.json()
    return {"serverTime": data.get("serverTime"), "rtt_ms": t1 - t0}

def binance_account(api_key, api_secret):
    """
    Minimal signed call to prove credentials + permissions
    GET /api/v3/account?timestamp=...&signature=...
    """
    ts = ms()
    params = {"timestamp": ts}
    signed_qs = binance_sign(api_secret, params)
    url = f"{base_url()}/api/v3/account?" + signed_qs
    r = requests.get(url, headers=binance_headers(api_key), timeout=10)
    return r

def to_markdown(results: list) -> str:
    lines = ["# API Auth Diagnostics (Binance)\n"]
    for r in results:
        status = "✅ OK" if r.get("ok") else "❌ Check"
        lines.append(f"## Binance — {status}")
        for n in r["notes"]:
            lines.append(f"- {n}")
        lines.append("")
    return "\n".join(lines)

def diagnose_binance():
    out = {"exchange": "binance", "ok": False, "notes": []}
    try:
        st = binance_server_time()
        out["notes"].append(f"RTT: {st['rtt_ms']} ms")

        if st.get("serverTime"):
            skew = abs(st["serverTime"] - ms())
            out["notes"].append(f"Time skew: {skew} ms (tolerance {TOL} ms)")
            out["time_skew_ok"] = skew <= TOL
        else:
            out["notes"].append("Server time not found")

        if not API_KEY or not API_SECRET:
            out["notes"].append("BINANCE_API_KEY/SECRET missing (.env)")
            out["ok"] = False
            return out

        r = binance_account(API_KEY, API_SECRET)
        if r.status_code == 200:
            out["auth_ok"] = True
            out["notes"].append("Signed /account OK (credentials & permissions look valid)")
        elif r.status_code in (401, 403):
            out["auth_ok"] = False
            out["notes"].append(f"Auth failed: {r.status_code} {r.text[:120]}")
        else:
            out["auth_ok"] = False
            out["notes"].append(f"Signed call error: {r.status_code} {r.text[:120]}")

        out["ok"] = bool(out.get("auth_ok")) and bool(out.get("time_skew_ok", True))
        return out

    except Exception as e:
        out["notes"].append(f"Exception: {e}")
        return out

if __name__ == "__main__":
    res = [diagnose_binance()]
    md = to_markdown(res)
    print(md)
    with open("report.md", "w", encoding="utf-8") as f:
        f.write(md)