feat(mcp-hyperliquid): leverage_cap + testnet resolver + environment_info

2026-04-27 17:55:26 +02:00
parent e958422fe5
commit fb8c43cc61
7 changed files with 217 additions and 58 deletions
@@ -5,7 +5,7 @@ import os

 import uvicorn
 from mcp_common.auth import load_token_store_from_files
-
+from mcp_common.environment import resolve_environment
 from mcp_common.logging import configure_root_logging

 from mcp_hyperliquid.client import HyperliquidClient
@@ -19,10 +19,20 @@ def main():
    with open(wallet_file) as f:
        creds = json.load(f)

+    creds.setdefault("base_url_live", "https://api.hyperliquid.xyz")
+    creds.setdefault("base_url_testnet", "https://api.hyperliquid-testnet.xyz")
+
+    env_info = resolve_environment(
+        creds,
+        env_var="HYPERLIQUID_TESTNET",
+        flag_key="testnet",
+        exchange="hyperliquid",
+    )
+
    client = HyperliquidClient(
        wallet_address=creds["wallet_address"],
        private_key=creds["private_key"],
-        testnet=bool(creds.get("testnet", True)),
+        testnet=(env_info.environment == "testnet"),
        api_wallet_address=creds.get("api_wallet_address"),
    )

@@ -30,7 +40,12 @@ def main():
        core_token_file=os.environ.get("CORE_TOKEN_FILE"),
        observer_token_file=os.environ.get("OBSERVER_TOKEN_FILE"),
    )
-    app = create_app(client=client, token_store=token_store)
+    app = create_app(
+        client=client,
+        token_store=token_store,
+        creds=creds,
+        env_info=env_info,
+    )
    uvicorn.run(
        app,
        log_config=None,  # CER-P5-009: delega al root JSON logger
@@ -0,0 +1,56 @@
+"""Leverage cap server-side per place_order.
+
+Cap letto dal secret JSON via campo `max_leverage`. Default 1 (cash) se assente.
+"""
+from __future__ import annotations
+
+from fastapi import HTTPException
+
+
+def get_max_leverage(creds: dict) -> int:
+    """Legge max_leverage dal secret. Default 1 se mancante."""
+    raw = creds.get("max_leverage", 1)
+    try:
+        value = int(raw)
+    except (TypeError, ValueError):
+        value = 1
+    return max(1, value)
+
+
+def enforce_leverage(
+    requested: int | float | None,
+    *,
+    creds: dict,
+    exchange: str,
+) -> int:
+    """Verifica e applica leverage cap. Ritorna leverage applicabile.
+
+    Solleva HTTPException(403, LEVERAGE_CAP_EXCEEDED) se requested > cap.
+    Se requested is None, applica il cap come default.
+    """
+    cap = get_max_leverage(creds)
+    if requested is None:
+        return cap
+    lev = int(requested)
+    if lev < 1:
+        raise HTTPException(
+            status_code=403,
+            detail={
+                "error": "LEVERAGE_CAP_EXCEEDED",
+                "exchange": exchange,
+                "requested": lev,
+                "max": cap,
+                "reason": "leverage must be >= 1",
+            },
+        )
+    if lev > cap:
+        raise HTTPException(
+            status_code=403,
+            detail={
+                "error": "LEVERAGE_CAP_EXCEEDED",
+                "exchange": exchange,
+                "requested": lev,
+                "max": cap,
+            },
+        )
+    return lev
@@ -5,11 +5,9 @@ import os
 from fastapi import Depends, FastAPI, HTTPException
 from mcp_common.auth import Principal, TokenStore, require_principal
 from mcp_common.mcp_bridge import mount_mcp_endpoint
-from mcp_common.risk_guard import (
-    enforce_aggregate,
-    enforce_leverage,
-    enforce_single_notional,
-)
+from mcp_common.environment import EnvironmentInfo
+from mcp_hyperliquid.leverage_cap import enforce_leverage as _enforce_leverage
+from mcp_hyperliquid.leverage_cap import get_max_leverage
 from mcp_common.server import build_app
 from pydantic import BaseModel, field_validator, model_validator

@@ -167,35 +165,6 @@ class ClosePositionReq(BaseModel):
    instrument: str


-# --- CER-016 notional helpers ---
-
-async def _compute_notional_hl(client: HyperliquidClient, body: PlaceOrderReq) -> float:
-    """HL perp: amount è in base asset → notional = amount * price."""
-    ref_price: float | None = body.price
-    if ref_price is None:
-        try:
-            tk = await client.get_ticker(body.instrument)
-            ref_price = tk.get("mark_price") or tk.get("last_price") or tk.get("price")
-        except Exception:
-            ref_price = None
-    if not ref_price:
-        return 0.0
-    return float(body.amount) * float(ref_price)
-
-
-async def _current_aggregate_hl(client: HyperliquidClient) -> float:
-    try:
-        positions = await client.get_positions()
-    except Exception:
-        return 0.0
-    total = 0.0
-    for p in positions or []:
-        size = abs(float(p.get("size") or p.get("amount") or 0))
-        mark = float(p.get("mark_price") or p.get("price") or 0)
-        total += size * mark
-    return total
-
-
 # --- ACL helper ---

 def _check(principal: Principal, *, core: bool = False, observer: bool = False) -> None:
@@ -210,11 +179,39 @@ def _check(principal: Principal, *, core: bool = False, observer: bool = False)

 # --- App factory ---

-def create_app(*, client: HyperliquidClient, token_store: TokenStore) -> FastAPI:
+def create_app(
+    *,
+    client: HyperliquidClient,
+    token_store: TokenStore,
+    creds: dict | None = None,
+    env_info: EnvironmentInfo | None = None,
+) -> FastAPI:
+    creds = creds or {}
    app = build_app(name="mcp-hyperliquid", version="0.1.0", token_store=token_store)

    # --- Read tools: core + observer ---

+    @app.post("/tools/environment_info", tags=["reads"])
+    async def t_environment_info(principal: Principal = Depends(require_principal)):
+        _check(principal, core=True, observer=True)
+        if env_info is None:
+            return {
+                "exchange": "hyperliquid",
+                "environment": "testnet" if getattr(client, "testnet", True) else "mainnet",
+                "source": "credentials",
+                "env_value": None,
+                "base_url": getattr(client, "base_url", None),
+                "max_leverage": get_max_leverage(creds),
+            }
+        return {
+            "exchange": env_info.exchange,
+            "environment": env_info.environment,
+            "source": env_info.source,
+            "env_value": env_info.env_value,
+            "base_url": env_info.base_url,
+            "max_leverage": get_max_leverage(creds),
+        }
+
    @app.post("/tools/get_markets", tags=["reads"])
    async def t_get_markets(
        body: GetMarketsReq, principal: Principal = Depends(require_principal)
@@ -307,14 +304,7 @@ def create_app(*, client: HyperliquidClient, token_store: TokenStore) -> FastAPI
        body: PlaceOrderReq, principal: Principal = Depends(require_principal)
    ):
        _check(principal, core=True)
-        enforce_leverage(body.leverage)
-        if not body.reduce_only:
-            notional = await _compute_notional_hl(client, body)
-            enforce_single_notional(
-                notional, exchange="hyperliquid", instrument=body.instrument
-            )
-            agg = await _current_aggregate_hl(client)
-            enforce_aggregate(agg, notional)
+        _enforce_leverage(body.leverage, creds=creds, exchange="hyperliquid")
        return await client.place_order(
            instrument=body.instrument,
            side=body.side,
@@ -361,6 +351,7 @@ def create_app(*, client: HyperliquidClient, token_store: TokenStore) -> FastAPI
        token_store=token_store,
        internal_base_url=f"http://localhost:{port}",
        tools=[
+            {"name": "environment_info", "description": "Ambiente operativo (testnet/mainnet), source, base_url, max_leverage cap."},
            {"name": "get_markets", "description": "Lista mercati perp disponibili."},
            {"name": "get_ticker", "description": "Ticker di un perp."},
            {"name": "get_orderbook", "description": "Orderbook L2."},