feat(V2): cabla audit logging nei write endpoint dei 4 router exchange

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

src/cerbero_mcp/routers/bybit.py

@@ -11,6 +11,7 @@ from typing import Literal, cast
 from fastapi import APIRouter, Depends, Request
 
 from cerbero_mcp.client_registry import ClientRegistry
+from cerbero_mcp.common.audit_helpers import audit_call
 from cerbero_mcp.exchanges.bybit import tools as t
 from cerbero_mcp.exchanges.bybit.client import BybitClient
 
@@ -182,7 +183,14 @@ def make_router() -> APIRouter:
         client: BybitClient = Depends(get_bybit_client),
     ):
         creds = _build_creds(request)
-        return await t.place_order(client, params, creds=creds)
+        return await audit_call(
+            request=request,
+            exchange="bybit",
+            action="place_order",
+            target_field="symbol",
+            params=params,
+            tool_fn=lambda: t.place_order(client, params, creds=creds),
+        )
 
     @r.post("/tools/place_combo_order")
     async def _place_combo_order(
@@ -191,49 +199,103 @@ def make_router() -> APIRouter:
         client: BybitClient = Depends(get_bybit_client),
     ):
         creds = _build_creds(request)
-        return await t.place_combo_order(client, params, creds=creds)
+        return await audit_call(
+            request=request,
+            exchange="bybit",
+            action="place_combo_order",
+            params=params,
+            tool_fn=lambda: t.place_combo_order(client, params, creds=creds),
+        )
 
     @r.post("/tools/amend_order")
     async def _amend_order(
         params: t.AmendOrderReq,
+        request: Request,
         client: BybitClient = Depends(get_bybit_client),
     ):
-        return await t.amend_order(client, params)
+        return await audit_call(
+            request=request,
+            exchange="bybit",
+            action="amend_order",
+            target_field="symbol",
+            params=params,
+            tool_fn=lambda: t.amend_order(client, params),
+        )
 
     @r.post("/tools/cancel_order")
     async def _cancel_order(
         params: t.CancelOrderReq,
+        request: Request,
         client: BybitClient = Depends(get_bybit_client),
     ):
-        return await t.cancel_order(client, params)
+        return await audit_call(
+            request=request,
+            exchange="bybit",
+            action="cancel_order",
+            target_field="order_id",
+            params=params,
+            tool_fn=lambda: t.cancel_order(client, params),
+        )
 
     @r.post("/tools/cancel_all_orders")
     async def _cancel_all_orders(
         params: t.CancelAllReq,
+        request: Request,
         client: BybitClient = Depends(get_bybit_client),
     ):
-        return await t.cancel_all_orders(client, params)
+        return await audit_call(
+            request=request,
+            exchange="bybit",
+            action="cancel_all_orders",
+            target_field="symbol",
+            params=params,
+            tool_fn=lambda: t.cancel_all_orders(client, params),
+        )
 
     @r.post("/tools/set_stop_loss")
     async def _set_stop_loss(
         params: t.SetStopLossReq,
+        request: Request,
         client: BybitClient = Depends(get_bybit_client),
     ):
-        return await t.set_stop_loss(client, params)
+        return await audit_call(
+            request=request,
+            exchange="bybit",
+            action="set_stop_loss",
+            target_field="symbol",
+            params=params,
+            tool_fn=lambda: t.set_stop_loss(client, params),
+        )
 
     @r.post("/tools/set_take_profit")
     async def _set_take_profit(
         params: t.SetTakeProfitReq,
+        request: Request,
         client: BybitClient = Depends(get_bybit_client),
     ):
-        return await t.set_take_profit(client, params)
+        return await audit_call(
+            request=request,
+            exchange="bybit",
+            action="set_take_profit",
+            target_field="symbol",
+            params=params,
+            tool_fn=lambda: t.set_take_profit(client, params),
+        )
 
     @r.post("/tools/close_position")
     async def _close_position(
         params: t.ClosePositionReq,
+        request: Request,
         client: BybitClient = Depends(get_bybit_client),
     ):
-        return await t.close_position(client, params)
+        return await audit_call(
+            request=request,
+            exchange="bybit",
+            action="close_position",
+            target_field="symbol",
+            params=params,
+            tool_fn=lambda: t.close_position(client, params),
+        )
 
     @r.post("/tools/set_leverage")
     async def _set_leverage(
@@ -242,20 +304,43 @@ def make_router() -> APIRouter:
         client: BybitClient = Depends(get_bybit_client),
     ):
         creds = _build_creds(request)
-        return await t.set_leverage(client, params, creds=creds)
+        return await audit_call(
+            request=request,
+            exchange="bybit",
+            action="set_leverage",
+            target_field="symbol",
+            params=params,
+            tool_fn=lambda: t.set_leverage(client, params, creds=creds),
+        )
 
     @r.post("/tools/switch_position_mode")
     async def _switch_position_mode(
         params: t.SwitchModeReq,
+        request: Request,
         client: BybitClient = Depends(get_bybit_client),
     ):
-        return await t.switch_position_mode(client, params)
+        return await audit_call(
+            request=request,
+            exchange="bybit",
+            action="switch_position_mode",
+            target_field="symbol",
+            params=params,
+            tool_fn=lambda: t.switch_position_mode(client, params),
+        )
 
     @r.post("/tools/transfer_asset")
     async def _transfer_asset(
         params: t.TransferReq,
+        request: Request,
         client: BybitClient = Depends(get_bybit_client),
     ):
-        return await t.transfer_asset(client, params)
+        return await audit_call(
+            request=request,
+            exchange="bybit",
+            action="transfer_asset",
+            target_field="coin",
+            params=params,
+            tool_fn=lambda: t.transfer_asset(client, params),
+        )
 
     return r