flash-trade-mcp 0.2.1 → 0.2.2

package/dist/index.js

@@ -49229,6 +49229,25 @@ function registerHealthTools(server, client) {
 }
 
 // src/tools/markets.ts
+var VIRTUAL_CUSTODY_MAP = {
+  "6bthDsp8pcGBGKVKCKZjV5JfuSUNRo62RG4hQHj1u4CK": { symbol: "BNB", pool: "Crypto.1", maxLeverage: "60.00" },
+  A8SKWb3pwbFUtxLQhnpUTfy7CkxBpWGvTLYyJyWHCMWv: { symbol: "PYTH", pool: "Governance.1", maxLeverage: "60.00" },
+  "5JtPiHFmkb1nv1Qvs3sryLgXmjs8p5iQexAseC2Ljjzg": { symbol: "KMNO", pool: "Governance.1", maxLeverage: "60.00" },
+  "9GeU2eX2B8nLCJr7FKhXeR73fM2ULBwUXZqHov9iipxz": { symbol: "MET", pool: "Governance.1", maxLeverage: "15.00" },
+  "7WWSRZSgFmp7UDfD1KHWYJ2CqXVbpCdQ5cQfgBxjpFeL": { symbol: "EUR", pool: "Virtual.1", maxLeverage: "550.00" },
+  Ah1Kd146CtAexGvbVNWRMQ8aXJTJDf4AopNLQZKGfYck: { symbol: "GBP", pool: "Virtual.1", maxLeverage: "550.00" },
+  ERiMNq88WEByvDUKsPsvkJRnvsDrPPhbWedn59cDfvXY: { symbol: "USDJPY", pool: "Virtual.1", maxLeverage: "550.00" },
+  "2zB3Uv3SoFGe17UiGjPGrwBRA7edH3YRwtHWQES7KkqP": { symbol: "USDCNH", pool: "Virtual.1", maxLeverage: "550.00" },
+  "3j1xiP6GckKCzsTm6sni5iy6zrpZX5BWZGbKCq5buk4d": { symbol: "XAU", pool: "Virtual.1", maxLeverage: "120.00" },
+  GMqeFJ8LG5BcrRtVgvfQuA7giBETcY76ikC8h5hPh59h: { symbol: "XAG", pool: "Virtual.1", maxLeverage: "130.00" },
+  "5mggznCHoC98t2xXNYPVR8cqNhRhYdhV7qGWqMoY6YSJ": { symbol: "CRUDEOIL", pool: "Virtual.1", maxLeverage: "7.00" },
+  A2C8A9QMEQ1XAWjLSe7zUNRXSjDqQA4cpYzLYGvDZS1u: { symbol: "AMZN", pool: "Equity.1", maxLeverage: "12.00" },
+  CK6ByFWy3fMbymx55SGhWi4yEv4HebdtdbLMwfPTZDwK: { symbol: "AAPL", pool: "Equity.1", maxLeverage: "12.00" },
+  GDudQbq15yQuhvZ2N63qiYdQBiMipooeArcUgcwizd5b: { symbol: "AMD", pool: "Equity.1", maxLeverage: "12.00" },
+  HbwAAHzRwNqrZMD9WzMJBYGnKqUrDLcodD9rvaEkPYXK: { symbol: "NVDA", pool: "Equity.1", maxLeverage: "12.00" },
+  RQNURQjDbq2Yah2udtFTNT7TjR15vsPV3oJNnwYher8: { symbol: "TSLA", pool: "Equity.1", maxLeverage: "12.00" },
+  ArnD1faZVVkkewX4HUSoDuht46egAtVvhDTFMJn3DkFo: { symbol: "SAMO", pool: "Community.3", maxLeverage: "50.00" }
+};
 function buildCustodySymbolMap(poolData) {
   const map3 = new Map;
   for (const pool of poolData.pools) {
@@ -49240,6 +49259,11 @@ function buildCustodySymbolMap(poolData) {
       });
     }
   }
+  for (const [pubkey, info] of Object.entries(VIRTUAL_CUSTODY_MAP)) {
+    if (!map3.has(pubkey)) {
+      map3.set(pubkey, info);
+    }
+  }
   return map3;
 }
 function formatMarketsSummary(markets, custodyInfo) {
@@ -56772,9 +56796,13 @@ var $VersionedTransaction = VersionedTransaction;
 
 // src/tools/sign-and-send.ts
 import fs from "node:fs";
+function sanitizeError(e) {
+  const msg = e instanceof Error ? e.message : String(e);
+  return msg.replace(/\[[\d,\s]{20,}\]/g, "[REDACTED]").replace(/[0-9a-fA-F]{40,}/g, "[REDACTED]").replace(/[123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz]{40,}/g, "[REDACTED]");
+}
 function registerSignAndSendTool(server) {
   server.registerTool("sign_and_send", {
-    description: "Sign and submit a base64-encoded unsigned Solana transaction using the locally configured keypair. " + "Call this AFTER a transaction tool (open_position, close_position, add_collateral, remove_collateral, reverse_position) " + "returns a transactionBase64 string AND the user has reviewed and approved the preview. " + "The keypair is read from KEYPAIR_PATH (default: ~/.config/solana/id.json). " + "Returns the confirmed transaction signature and a Solscan link. " + "IMPORTANT: Always show the transaction preview to the user and get their approval BEFORE calling this tool. " + "This tool signs with the local keypair and submits to Solana mainnet — the action is IRREVERSIBLE.",
+    description: "Sign and submit a base64-encoded unsigned Solana transaction using the locally configured keypair. " + "Call this AFTER a transaction tool (open_position, close_position, add_collateral, remove_collateral, reverse_position) " + "returns a transactionBase64 string AND the user has reviewed and approved the preview. " + "The keypair is read from KEYPAIR_PATH (default: ~/.config/solana/id.json). " + "Returns the confirmed transaction signature and a Solscan link. " + "IMPORTANT: Always show the transaction preview to the user and get their approval BEFORE calling this tool. " + "This tool signs with the local keypair and submits to Solana mainnet — the action is IRREVERSIBLE. " + "NOTE: This tool never exposes private key material in its output.",
     inputSchema: {
       transaction_base64: exports_external.string().describe("The base64-encoded unsigned transaction returned by a transaction tool")
     }
@@ -56783,12 +56811,26 @@ function registerSignAndSendTool(server) {
     const keypairPath = process.env.KEYPAIR_PATH ?? `${process.env.HOME}/.config/solana/id.json`;
     let keypair;
     try {
-      const keypairData = JSON.parse(fs.readFileSync(keypairPath, "utf-8"));
+      const raw = fs.readFileSync(keypairPath, "utf-8");
+      let keypairData;
+      try {
+        keypairData = JSON.parse(raw);
+      } catch {
+        return {
+          content: [{ type: "text", text: `Keypair file at ${keypairPath} is not valid JSON.` }],
+          isError: true
+        };
+      }
+      if (!Array.isArray(keypairData) || keypairData.length !== 64) {
+        return {
+          content: [{ type: "text", text: `Keypair file at ${keypairPath} does not contain a valid 64-byte Solana keypair.` }],
+          isError: true
+        };
+      }
       keypair = $Keypair.fromSecretKey(Uint8Array.from(keypairData));
     } catch (e) {
-      const msg = e instanceof Error ? e.message : String(e);
       return {
-        content: [{ type: "text", text: `Failed to load keypair from ${keypairPath}: ${msg}` }],
+        content: [{ type: "text", text: `Failed to load keypair from ${keypairPath}: ${sanitizeError(e)}` }],
         isError: true
       };
     }
@@ -56797,9 +56839,8 @@ function registerSignAndSendTool(server) {
       const txBytes = Buffer.from(params.transaction_base64, "base64");
       tx = $VersionedTransaction.deserialize(txBytes);
     } catch (e) {
-      const msg = e instanceof Error ? e.message : String(e);
       return {
-        content: [{ type: "text", text: `Failed to decode transaction: ${msg}` }],
+        content: [{ type: "text", text: `Failed to decode transaction: ${sanitizeError(e)}` }],
         isError: true
       };
     }
@@ -56826,15 +56867,13 @@ Signature: ${signature2}` }],
       const lines = [
         "=== Transaction Confirmed ===",
         `Signature: ${signature2}`,
-        `Wallet: ${keypair.publicKey.toBase58()}`,
         `Explorer: https://solscan.io/tx/${signature2}`
       ];
       return { content: [{ type: "text", text: lines.join(`
 `) }] };
     } catch (e) {
-      const msg = e instanceof Error ? e.message : String(e);
       return {
-        content: [{ type: "text", text: `Transaction send failed: ${msg}` }],
+        content: [{ type: "text", text: `Transaction send failed: ${sanitizeError(e)}` }],
         isError: true
       };
     }
@@ -56933,7 +56972,7 @@ try {
   const client = new FlashApiClient(config2);
   const server = new McpServer({
     name: "flash-trade",
-    version: "0.2.1"
+    version: "0.2.2"
   }, {
     capabilities: {
       tools: {},

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "flash-trade-mcp",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "MCP server for Flash Trade — perpetual futures DEX on Solana. Provides AI agents with typed tools for trading, position management, and market data.",
   "module": "src/index.ts",
   "main": "dist/index.js",