"""Router /mcp-bybit/* — DI per env, client e (write) creds. Mappa 1:1 i tool di `cerbero_mcp.exchanges.bybit.tools` a endpoint `POST /mcp-bybit/tools/{tool_name}`. L'autenticazione bearer è gestita dal middleware in `cerbero_mcp.auth`; qui leggiamo solo `request.state.environment`. """ from __future__ import annotations from typing import Literal, cast from fastapi import APIRouter, Depends, Request from cerbero_mcp.client_registry import ClientRegistry from cerbero_mcp.common.audit_helpers import audit_call from cerbero_mcp.exchanges.bybit import tools as t from cerbero_mcp.exchanges.bybit.client import BybitClient Environment = Literal["testnet", "mainnet"] def get_environment(request: Request) -> Environment: return cast(Environment, request.state.environment) async def get_bybit_client( request: Request, env: Environment = Depends(get_environment) ) -> BybitClient: registry: ClientRegistry = request.app.state.registry return cast(BybitClient, await registry.get("bybit", env)) def _build_creds(request: Request) -> dict: """Costruisce dict `creds` minimale per leverage cap / metadata. Le credenziali vere sono già iniettate nel client da ClientRegistry; qui passiamo solo il cap di leverage e l'api_key (metadata audit). """ settings = request.app.state.settings return { "max_leverage": settings.bybit.max_leverage, "api_key": settings.bybit.api_key, } def make_router() -> APIRouter: r = APIRouter(prefix="/mcp-bybit", tags=["bybit"]) # === READ tools === @r.post("/tools/environment_info") async def _environment_info( request: Request, client: BybitClient = Depends(get_bybit_client), ): creds = _build_creds(request) return await t.environment_info(client, creds=creds) @r.post("/tools/get_ticker") async def _get_ticker( params: t.TickerReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_ticker(client, params) @r.post("/tools/get_ticker_batch") async def _get_ticker_batch( params: t.TickerBatchReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_ticker_batch(client, params) @r.post("/tools/get_orderbook") async def _get_orderbook( params: t.OrderbookReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_orderbook(client, params) @r.post("/tools/get_historical") async def _get_historical( params: t.HistoricalReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_historical(client, params) @r.post("/tools/get_indicators") async def _get_indicators( params: t.IndicatorsReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_indicators(client, params) @r.post("/tools/get_funding_rate") async def _get_funding_rate( params: t.FundingRateReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_funding_rate(client, params) @r.post("/tools/get_funding_history") async def _get_funding_history( params: t.FundingHistoryReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_funding_history(client, params) @r.post("/tools/get_open_interest") async def _get_open_interest( params: t.OpenInterestReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_open_interest(client, params) @r.post("/tools/get_instruments") async def _get_instruments( params: t.InstrumentsReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_instruments(client, params) @r.post("/tools/get_option_chain") async def _get_option_chain( params: t.OptionChainReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_option_chain(client, params) @r.post("/tools/get_positions") async def _get_positions( params: t.PositionsReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_positions(client, params) @r.post("/tools/get_account_summary") async def _get_account_summary( params: t.AccountSummaryReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_account_summary(client, params) @r.post("/tools/get_trade_history") async def _get_trade_history( params: t.TradeHistoryReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_trade_history(client, params) @r.post("/tools/get_open_orders") async def _get_open_orders( params: t.OpenOrdersReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_open_orders(client, params) @r.post("/tools/get_basis_spot_perp") async def _get_basis_spot_perp( params: t.BasisSpotPerpReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_basis_spot_perp(client, params) @r.post("/tools/get_orderbook_imbalance") async def _get_orderbook_imbalance( params: t.OrderbookImbalanceReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_orderbook_imbalance(client, params) @r.post("/tools/get_basis_term_structure") async def _get_basis_term_structure( params: t.BasisTermStructureReq, client: BybitClient = Depends(get_bybit_client), ): return await t.get_basis_term_structure(client, params) # === WRITE tools (richiedono creds per leverage cap / audit) === @r.post("/tools/place_order") async def _place_order( params: t.PlaceOrderReq, request: Request, client: BybitClient = Depends(get_bybit_client), ): creds = _build_creds(request) return await audit_call( request=request, exchange="bybit", action="place_order", target_field="symbol", params=params, tool_fn=lambda: t.place_order(client, params, creds=creds), ) @r.post("/tools/place_combo_order") async def _place_combo_order( params: t.PlaceComboOrderReq, request: Request, client: BybitClient = Depends(get_bybit_client), ): creds = _build_creds(request) return await audit_call( request=request, exchange="bybit", action="place_combo_order", params=params, tool_fn=lambda: t.place_combo_order(client, params, creds=creds), ) @r.post("/tools/amend_order") async def _amend_order( params: t.AmendOrderReq, request: Request, client: BybitClient = Depends(get_bybit_client), ): return await audit_call( request=request, exchange="bybit", action="amend_order", target_field="symbol", params=params, tool_fn=lambda: t.amend_order(client, params), ) @r.post("/tools/cancel_order") async def _cancel_order( params: t.CancelOrderReq, request: Request, client: BybitClient = Depends(get_bybit_client), ): return await audit_call( request=request, exchange="bybit", action="cancel_order", target_field="order_id", params=params, tool_fn=lambda: t.cancel_order(client, params), ) @r.post("/tools/cancel_all_orders") async def _cancel_all_orders( params: t.CancelAllReq, request: Request, client: BybitClient = Depends(get_bybit_client), ): return await audit_call( request=request, exchange="bybit", action="cancel_all_orders", target_field="symbol", params=params, tool_fn=lambda: t.cancel_all_orders(client, params), ) @r.post("/tools/set_stop_loss") async def _set_stop_loss( params: t.SetStopLossReq, request: Request, client: BybitClient = Depends(get_bybit_client), ): return await audit_call( request=request, exchange="bybit", action="set_stop_loss", target_field="symbol", params=params, tool_fn=lambda: t.set_stop_loss(client, params), ) @r.post("/tools/set_take_profit") async def _set_take_profit( params: t.SetTakeProfitReq, request: Request, client: BybitClient = Depends(get_bybit_client), ): return await audit_call( request=request, exchange="bybit", action="set_take_profit", target_field="symbol", params=params, tool_fn=lambda: t.set_take_profit(client, params), ) @r.post("/tools/close_position") async def _close_position( params: t.ClosePositionReq, request: Request, client: BybitClient = Depends(get_bybit_client), ): return await audit_call( request=request, exchange="bybit", action="close_position", target_field="symbol", params=params, tool_fn=lambda: t.close_position(client, params), ) @r.post("/tools/set_leverage") async def _set_leverage( params: t.SetLeverageReq, request: Request, client: BybitClient = Depends(get_bybit_client), ): creds = _build_creds(request) return await audit_call( request=request, exchange="bybit", action="set_leverage", target_field="symbol", params=params, tool_fn=lambda: t.set_leverage(client, params, creds=creds), ) @r.post("/tools/switch_position_mode") async def _switch_position_mode( params: t.SwitchModeReq, request: Request, client: BybitClient = Depends(get_bybit_client), ): return await audit_call( request=request, exchange="bybit", action="switch_position_mode", target_field="symbol", params=params, tool_fn=lambda: t.switch_position_mode(client, params), ) @r.post("/tools/transfer_asset") async def _transfer_asset( params: t.TransferReq, request: Request, client: BybitClient = Depends(get_bybit_client), ): return await audit_call( request=request, exchange="bybit", action="transfer_asset", target_field="coin", params=params, tool_fn=lambda: t.transfer_asset(client, params), ) return r