Autonomous trading agent for Hyperliquid, restricted to majors — BTC/ETH, gold, silver, oil, the broad indices, and the mega-caps. A standalone Python system built with FastAPI and a pluggable AI brain (OpenRouter default; Claude/Codex CLI optional), operated by Pathia Agent through an MCP server.
What it does: Scans the majors universe, fires statistical triggers on price/volume/breakout signals, runs a cheap pre-AI technical analysis filter, and only calls AI on CONFIRMED setups. Executes with DSL-managed dynamic exits.
What it mostly does, honestly: kills ideas. The measurement layer — the recorders, the shadow ledger, the point-in-time grader — has correctly refuted perpetual-candle trading (a 2-minute BTC move averages 0.028% against a 0.09% round trip), prediction-market forecasting (n=263 against a market already at Brier 0.088), Markov regime models, numerology, social-surge signals, and a "top 25 leaderboard" that lost to random 2000 times out of 2000. That is the part of this system that reliably works, and it is worth more than the trading.
- Max drawdown -94.78% over the last 90 days, flow-neutral (deposits and withdrawals are recorded and netted out, so that is a trading loss, not a withdrawal). Peak equity was $225.93.
- Four books, all LIVE. There is no shadow tier: a book trades or it does not exist. What stops them today is the structural dust floor, not a flag.
- The account is below the structural minimum, so the executor refuses every
order regardless of what
modesays. That is deliberate.
| book | n | EV@25bps | OOS halves | null p |
|---|---|---|---|---|
news_surge_short |
255 | +1.24% | +0.58 / +2.16 | 0.0005 |
news_surge_multi |
230 | +1.87% | +1.50 / +2.50 | 0.0005 |
social_trending |
185 | +0.89% | +0.54 / +1.50 | 0.0005 |
unlock_short_runin |
14 | +3.75% | +0.71 / +7.06 | 0.0375 |
These are SHADOW-ledger grades, not realized P&L. This repo has a documented history of books whose comments claimed +EV while they ran live and lost.
Every book trades and has a switch scripts/autonomous_cycle.py can flip, or it
does not exist. There is no third state, and tests enforce that in the defaults
and in the live config.
Fund this account above $25 and start the loop, and four books place real
orders unattended. What holds them right now is the dust floor in
executor.maybe_execute, the majors allowlist, the daily-loss kill switch, and
the nightly grader that demotes any book whose forward ledger turns negative.
The exemption list that used to hold ten capital-less books is empty and a test
keeps it empty. It produced exactly the failure it sounds like: on 2026-08-29
the grader printed unlock_short — VALIDATED: validated but has no bounded capital path. A book that can prove itself and still never trade costs budget,
log volume and attention to maintain evidence nothing may act on.
The candle-strategy space is saturated and the perp fee math is fatal, not fixable. Deleted rather than disabled, because a half-removal that leaves a live route is worse than either end state:
- 17 strategy books and every order-placing call site, plus
pathia/v2/(a parallel engine whose only three signal generators were among them) - The entire prediction-market side — the arb crossed 2 of 276 sampled windows and the forecasts lost to the market's own calibration
What survives is the engine: ingestion, the TA filter, the risk gates, the executor, the DSL exit engine, the shadow ledger and its grader, and the three mover-recorder live arms. Roughly 26,000 lines came out.
# 1. Start/restart autonomous trading loop + dashboard API
scripts/restart.sh
# 2. Confirm there is one loop process and one API server
scripts/restart.sh status
# 3. Monitor
tail -f logs/trading_loop.log
python3 scripts/preflight_live.py # secrets, capital, books, feed, processes
python3 scripts/book_status.py # where each live book standsDashboard served at http://localhost:8000 (port from PATHIA_PORT).
Trading signals appear constantly — 5-minute spikes, hourly trends, daily breakouts. Most systems call expensive AI on every signal, burning tokens on noise. Pathia-Trader solves this by separating cheap statistical analysis from expensive AI reasoning:
- Scan — the majors universe in parallel with volume pre-filtering and rate-limit-aware batching. The allowlist is applied at scan time, not just at the entry gate, so the tail costs nothing in candles or AI calls
- TA Filter — multi-timeframe indicators (EMA, RSI, ATR, ADX, volume) — zero AI cost
- AI Research — only on CONFIRMED signals, plus any fired momentum burst, through the selected AI brain provider
- Execution — ATR equal-risk sizing, Hyperliquid-valid order normalization, and DSL dynamic exits (loss protection → profit locking)
- Discovery — built-in Hyperfeed Discovery replicates Smart Money leaderboards and whale signals
This architecture reduced daily AI costs from $8-$52 to $3-$10 while improving signal quality.
Every one of these was a real silent failure in this system, where broken and "nothing to report" were indistinguishable. Each is now something that fails loudly, blocks, or pages:
| was silent | now |
|---|---|
| A dead trading loop read as healthy | /api/health/system returns 503; PathiaLoopDead alerts |
| An exchange outage read as a quiet market | Entries blocked while the scan feed is degraded |
| A withdrawal read as a trading loss | Drawdown is flow-neutral; capital flows are recorded |
| An unusable AI brain read as a PASS verdict | provider_readiness() gates the deploy and the healthcheck |
mode: LIVE on a dust account |
Structural floor in the executor; no config can bypass it |
| Logs growing until the disk filled | Rotation, a directory cap, and a disk guard on startup |
| A crash mid-write dropping every claim | Atomic writes with fsync on the state that matters |
| Tests passing on one laptop only | CI installs from a lockfile and rejects absolute paths |
+---------------------------------------------------------------+
| pathia — autonomous trading pipeline |
| |
| Scan ➜ TA Filter ➜ AI Brain ➜ Risk Gates ➜ Execute ➜ DSL Monitor ──▶ Auto-Close
| (cheap) (expensive) (11 gates) (per-tick, 2-phase)
│ |
│ Only CONFIRMED
│ signals proceed
├───────────────────────────────────────────────────────────────┤
│ Hyperfeed Discovery |
│ Leaderboard • Whale Flow • OI Anomaly • Whale Tracking |
+---------------------------------------------------------------+
┌─────────────┐ ┌──────────────┐ ┌─────────────────┐ ┌──────────┐ ┌──────────┐
│ Perception │───>│ TA Filter │───>│ AI Brain │───>│ Risk │───>│ Executor│
│ Scanner │ │ (TA Filter) │ │ provider seam │ │ Gates │ │ (HL + DSL)│
│ 5m/1h/4h │ │ EMA/RSI/ATR│ │ Verdict + Price │ │ 11 gates│ │ SL/TP │
│ Volume-N │ └──────────────┘ └─────────────────┘ └──────────┘ └──────────┘
└─────────────┘
│
├── Hyperfeed Discovery (leaderboard, whale index, OI anomaly)
│ ↳ whale_concentration(), oi_funding_anomaly()
│ ↳ discovery_get_top_traders(), leaderboard_get_trader_positions()
└── Rate-Limit Pipeline (1200 weight/min — batch + cache)
- Volume pre-filtering: Top-N markets by 24h notional volume plus mover and rotating-sweep slots
- Parallel batch scanning: Workers fan out within batches, sleep between
- TTL caching: 5m candles are cached inside the scan interval; 1h enrichment is cached longer and only fetched for surfaced markets
- Configurable:
PATHIA_SCAN_INTERVAL,PATHIA_MAX_MARKETS,PATHIA_SCAN_WORKERS,PATHIA_BATCH_SIZE,PATHIA_BATCH_SLEEP
- Single seam:
research._call_ai()delegates topathia/agents/ai_brain.py; every provider returns verdict text for the sameparse_verdict()contract. - Providers:
openrouter(default),claude_cli, andcodex_cli. - Hot switch: set
AI_BRAIN_PROVIDERor.agent-config.json→ai_brain.providerto switch without code changes. Config is read on each research call. - Failure-safe: provider failure, timeout, empty output, or CLI JSON-less output returns
"", which becomesai_down=Trueand a PASS that cannot be upgraded by the TA sidestep path. - OpenRouter preserved: the 402 affordability retry still downgrades
max_tokensonce before failing closed.
- Phase 1 — Loss Protection: Hard stop at the tighter of
max_loss_pctormax_loss_roe_pct / leveragein spot terms, optionally widened to a volatility-scaledatr_stop(ATR×mult, clamped to floor/ceiling). Current live new-entry config is2.5%spot /15%ROE withatr_stopenabled (1.5× ATR, 1.0–2.5% clamp). - Phase 2 — Profit Locking: Activated once price moves
protect_pctin your favor. Current live new-entry config arms at1.25%, trails with a tightretrace_threshold=0.10(banks give-backs early), then loosens viaphase2_tiersat+8%(0.35) and+15%(0.40) so proven runners get room; the floor ratchets one-way and never gives back locked profit. - Hard/stale timeout:
hard_timeout_minutesis the maximum hold horizon;stale_flat_timeout_minutesexits positions that never reach the profit-lock phase. - Auto-registration: Every executed position is registered for DSL tracking
- Persisted across restarts: Tracker state (peak, floor, breach counter) is written to
.dsl-state.jsonon every advance, so a daemon restart doesn't reset the ratchet - Exchange reconciliation: Each scan tick, trackers are reconciled with live exchange positions — manually-opened or externally-closed positions stay in sync; positions opened before the engine shipped are synthesized from
entryPx - Auto-close: When a tick trips a floor/stop/timeout, the trading loop market-closes the position and logs a
dsl_exitevent to the session log. No human in the loop
- Regime-aware gating: trades are scored against the asset's applicable trend regime — BTC for native crypto, own-trend-first for tokenized equities, and own trend for commodities. Aligned trades clear at
aligned_min_conf; counter-regime trades needcounter_regime_min_conf.block_counter_trend_bypassstops weak own-coin trigger bypasses from sneaking longs into a downtrend. - Short-specific liquidity floor: shorts require deeper 24h volume (
min_short_volume_usd) than longs — thin markets squeeze. - Free-margin floor:
min_available_margin_pctblocks new entries once free margin gets thin, capping over-leverage and correlated stacking. - Correlation cap:
max_crypto_long_correlatedlimits simultaneous correlated crypto exposure. - Self-healing watchdog: the loop re-execs itself if a scan cycle hangs; the watchdog is armed before startup network I/O so it also covers startup hangs.
- Partial-dex degraded-read guard: a HIP-3 dex that fails to fetch no longer drops its equity from the aggregate — prevents false "huge loss" reads from poisoning memory or tripping the kill switch.
- Re-entry backstop: a DSL-registry check prevents position stacking when a live read flakes (restart / 429 window).
Replicates the Hyperfeed MCP plugin's data directly from HL API:
leaderboard_get_markets(limit)— top markets by OI + volumemarket_get_funding_regime()— LONG_CROWDED / SHORT_CROWDED / NEUTRAL analysiswhale_concentration()— identifies assets with whale accumulationoi_funding_anomaly()— OI spike + negative funding + flat price = accumulation signaldiscovery_get_top_traders(...)— trader rankings with win ratesmarket_get_asset_data(asset)— candles + funding + OI for any coin
| Module | Purpose |
|---|---|
pathia/agents/perception.py |
Multi-market volume-pre-filtered scanner with parallel batch scanning |
pathia/indicators/triggers.py |
Trigger engine — composite scoring across signal types |
pathia/agents/ta_filter.py |
Pre-AI technical analysis — multi-TF (1h/4h/1d) EMA, RSI, ATR, ADX, volume confirmation |
pathia/agents/research.py |
AI research pipeline — fetches candles, builds context, dispatches to the configured AI brain |
pathia/agents/ai_brain.py |
Pluggable verdict providers: OpenRouter HTTP, Claude CLI, Codex CLI |
pathia/agents/risk_gates.py |
11 independent risk gates: confidence, notional caps, daily loss, cooldown, correlation, news blackout, etc. |
pathia/agents/executor.py |
ATR/fallback sizing + Hyperliquid precision normalization + EIP-712 order signing + DSL exit registration |
pathia/agents/dsl_exit.py |
Two-phase trailing stop engine — disk-persisted (.dsl-state.json), reconciled with exchange positions each tick |
pathia/agents/hyperfeed.py |
Hyperfeed Discovery API — leaderboard, whale index, OI/funding context |
pathia/agents/memory.py |
Persistent file-backed state (.agent-memory.json, .agent-config.json) |
pathia/agents/config_store.py |
Config persistence layer |
pathia/agents/system_prompt.py |
Dedicated system prompt for the trading agent |
pathia/client/hl_client.py |
Hyperliquid REST + WebSocket client (mids, candles, account state) |
pathia/client/ws_client.py |
Persistent WebSocket connection for sub-second mids |
pathia/client/universe.py |
Volume-ranked market loader with 24h caching |
pathia/client/cache.py |
LRU + TTL memoization with in-flight dedup |
pathia/client/lock.py |
fcntl lock with stale-PID recovery for scan coalescing |
pathia/client/parallel.py |
Concurrency-bounded fan-out for independent API calls |
pathia/client/daemon.py |
Long-lived scan scheduler with tick timeouts + graceful shutdown |
pathia/client/exchange.py |
Order placement, leverage setting, trigger orders (SL/TP) |
pathia/indicators/math.py |
TA indicators: EMA, SMA, ATR, RSI, ADX |
pathia/models/types.py |
Shared data type: Candle (OHLCV) |
pathia/server.py |
FastAPI server — 22 REST routes for frontend/dashboard |
services/trend_engine/ |
/trends tab: 7d HL regime + recorder P&L (own README) |
pathia/agents/universe.py |
The majors allowlist, applied at scan time as well as at the gate |
pathia/agents/capital_flows.py |
Deposits/withdrawals + the flow-neutral NAV index the drawdown uses |
pathia/agents/atomic_io.py |
Crash-safe state writes (temp + fsync + rename + dir fsync) |
| Path | What it shows |
|---|---|
/ |
Landing — risk band (drawdown, fee drag, win rate, kill switch) then equity, positions, live books |
/activity |
Event journal — verdicts, executions, gate results, DSL closes |
/news |
News-catalyst reads + research events with news context |
/trends |
Trend analysis + forecasts + recorder P&L (see services/trend_engine/README.md) |
/analytics |
Funnel, book league, coin chart with our trade markers, funding heat |
Keyboard: g then d / a / n / p / t / y.
There are two config files, and they bootstrap differently:
| File | Ships with repo? | You… | Read |
|---|---|---|---|
.agent-config.json |
Yes — tracked, comes pre-populated with the live strategy | edit it (don't create) | fresh on every trade — no restart |
.env.local |
No — gitignored | create it: cp .env.local.example .env.local, fill in keys |
at process start — restart to apply |
So on a fresh clone: .agent-config.json is already there (tweak the values); .env.local does not exist until you copy the example and add your credentials. If .agent-config.json is ever missing or malformed, the loader falls back to the tuned default config with "mode": "OFF" (analyse-only, no orders) — it fails safe, never trades blind. Partial configs are normalized against the same defaults, and bad nested strategy blocks are ignored rather than wiping stop/gate settings.
Copy .env.local.example → .env.local and fill in:
# ── AI brain / OpenRouter (default research provider) ─────────
AI_BRAIN_PROVIDER=openrouter # openrouter | claude_cli | codex_cli
OPENROUTER_API_KEY=sk-or-...your-key # required when provider=openrouter
OPENROUTER_MODEL=x-ai/grok-4.3 # optional — this is the OpenRouter default
# OPENROUTER_MAX_TOKENS=2048 # optional; 402 retry can shrink this once
# AI_BRAIN_TIMEOUT_S=120 # CLI providers are capped at 120s
# CLAUDE_CLI_COMMAND=claude # optional override for provider=claude_cli
# CLAUDE_CLI_MAX_TURNS=1 # cheap mode default
# CODEX_CLI_COMMAND=codex # optional override for provider=codex_cli
# ── Hyperliquid ──────────────────────────────────────────────
HYPERLIQUID_WALLET_ADDRESS=0x... # required — the signing (agent) wallet
HYPERLIQUID_PRIVATE_KEY=0x... # required — that wallet's key
# HYPERLIQUID_MASTER_ADDRESS=0x... # optional — set for an agent-wallet
# setup; the master holds the funds
# ── News (optional) ──────────────────────────────────────────
# BRAVE_API_KEY=BSA... # optional — enables news headlines
# in AI research and the news-blackout risk gate. Without it, research runs
# with news_context = "no news" and that gate is inert.
# ── Scan tuning (optional — defaults shown) ──────────────────
PATHIA_SCAN_INTERVAL=60 # seconds between scan cycles
PATHIA_MAX_MARKETS=45 # top-vol+movers candle-fetch budget per scan
PATHIA_MAX_MARKETS_HIP3=18 # of that budget, slots reserved for HIP-3
PATHIA_UNIVERSE_SWEEP=0 # >0 = ALSO rotate N extra tail markets/cycle so the
# FULL universe is covered over ceil(N_universe/N)
# cycles (top-vol+movers still scanned every cycle).
# Keep total (MAX_MARKETS+SWEEP) within the rate budget.
PATHIA_SCAN_WORKERS=8 # max concurrent market scans per batch
PATHIA_BATCH_SIZE=10 # markets per parallel batch
PATHIA_BATCH_SLEEP=1.0 # seconds between batches (raise to pace a wider scan)
PATHIA_WATCHDOG_TIMEOUT_S=600 # re-exec the loop if a scan/cycle makes no progress
# for this long. A scan slower than this (too many
# markets / too much batch_sleep) trips it — keep
# MAX_MARKETS+SWEEP fast enough that a cycle stays well under.
# PATHIA_PORT=8000 # FastAPI server portKeep MAX_MARKETS + UNIVERSE_SWEEP within HL's ~1200 weight/min budget — a wider per-cycle scan must be paced (BATCH_SLEEP) or it 429-storms AND trips the watchdog. For full-universe coverage prefer the rotating sweep (fast cycles, full coverage over time) over one giant slow scan. See Rate Limit Math.
When enable_hip3=true, the budget splits into (PATHIA_MAX_MARKETS - PATHIA_MAX_MARKETS_HIP3) crypto slots + PATHIA_MAX_MARKETS_HIP3 HIP-3 slots, each sorted by 24h volume independently. Without this split, BTC/ETH/SOL/etc. dominate the single sorted list and tokenized-equity perps (e.g. xyz:CRCL $34M, xyz:DRAM $22M) never get candles fetched — so their +20% / −8% swings never surface a signal.
The live trading knobs. Read fresh on every trade, so edits take effect on the
next cycle — no restart. Keys are read tolerantly: snake_case or camelCase
both resolve (max_trade_notional_usd ≡ maxTradeNotionalUsd).
{
"mode": "LIVE",
"ai_brain": {
"provider": "openrouter",
"timeout_s": 120,
"claude_cli": { "command": "claude", "max_turns": 1 },
"codex_cli": { "command": "codex" }
},
"enable_crypto": true,
"enable_hip3": true,
"equity_fraction_per_trade": 0.2,
"leverage": 12,
"max_trade_notional_usd": 350,
"tp_scale_fraction": 0.5,
"max_concurrent": 10,
"max_total_notional_pct": 10.0,
"max_daily_loss_usd": -30,
"daily_giveback_halt_pct": 0.35,
"daily_giveback_min_peak_usd": 25.0,
"min_available_margin_pct": 0.10,
"min_market_volume_usd": 700000,
"min_hip3_volume_usd": 700000,
"min_short_volume_usd": 50000000,
"cooldown_min": 30,
"min_ai_confidence": 0.67,
"counter_regime_min_conf": 0.8,
"block_counter_trend_bypass": true,
"max_crypto_long_correlated": 3,
"coin_allowlist": [],
"coin_blocklist": [],
"dsl_exit": {
"max_loss_pct": 2.5,
"max_loss_roe_pct": 15.0,
"atr_stop": { "enabled": true, "atr_mult": 1.5, "floor_pct": 1.0, "ceiling_pct": 2.5 },
"protect_pct": 1.25,
"retrace_threshold": 0.1,
"phase2_tiers": [
{ "pct_above_entry": 8.0, "retrace_threshold": 0.35 },
{ "pct_above_entry": 15.0, "retrace_threshold": 0.4 }
],
"stale_flat_timeout_minutes": 480
},
"atr_risk_sizing": {
"enabled": true,
"risk_per_trade_pct": 0.02,
"sizing_basis": "primary_stop"
},
"ta_sidestep_force_execute": true,
"override_max_daily_extension_pct": 30.0,
"override_volume_confirm": { "enabled": true, "min_ratio": 1.2 },
"trend_filter_200ma": { "enabled": true, "period": 200, "allow_daily_mover_long_bypass": true },
"runner_entry_gate": {
"enabled": true,
"allow_shorts": false,
"require_daily_mover_longs": false,
"shock_day_fresh_impulse": true,
"min_confidence": 0.67,
"min_crypto_composite": 20.0,
"min_hip3_composite": 32.0,
"mover_min_composite": 20.0
},
"late_chase_relax": { "enabled": true, "min_ext_pct": 20.0, "max_ext_pct": 30.0, "min_volume_usd": 5000000 },
"capital_rotation": { "enabled": true, "min_candidate_composite": 40.0, "min_hold_minutes": 30, "protect_winner_roe_pct": 3.0 }
}The snippet above is the current live strategy shape, not a guarantee that those
values are optimal in future market regimes. Missing keys are filled from
pathia.agents.config_store.DEFAULT_CONFIG; keep the tracked
.agent-config.json explicit so reviews show intentional strategy changes.
| Key | What it does | Fallback/default |
|---|---|---|
mode |
OFF = analyse only, no orders · LIVE = place real orders |
OFF |
equity_fraction_per_trade |
Fraction of perp equity committed as margin per trade when ATR risk sizing is disabled — see Trade Sizing | 0.01 |
leverage |
Leverage ceiling — each trade uses min(this, the coin's own max). Coin maxes differ (BOME 3×, BTC 40×). Set high (e.g. 40) to ride each coin's max. Also multiplies position notional. |
5 |
min_ai_confidence |
Minimum AI confidence for a LONG/SHORT to execute | 0.8 |
max_concurrent |
Max simultaneous open positions | 3 |
max_trade_notional_usd |
Hard ceiling on a single trade's notional | 350 |
asset_notional_multiplier |
Optional asset-bucket sizing scale applied after risk sizing. Defaults neutral; use it only for controlled risk experiments, not as the primary alpha fix. | {"crypto": 1.0, "hip3": 1.0} |
max_total_notional_pct |
Ceiling on combined open notional, as a multiple of equity | 1.0 |
max_daily_loss_usd |
Daily-loss kill switch (negative number) | -100 |
daily_giveback_halt_pct |
Give-back breaker: once the day peaks ≥ daily_giveback_min_peak_usd, halt NEW entries if it retraces more than this from peak (existing positions ride their stops; resets at UTC roll). Locks green days from round-tripping |
0 (off) |
daily_giveback_min_peak_usd |
Arm threshold for the give-back breaker — stays disarmed until the day's peak PnL reaches this | 20 |
tp_scale_fraction |
Fraction auto-banked at the TP target (server-side reduce-only trigger at ~1 ATR); rest rides the trail. Captures profit instead of round-tripping | 0.5 |
crowded_with_min_conf |
Squeeze caution: a with-the-crowd aligned trade (short into SHORT_CROWDED / long into LONG_CROWDED) must clear this conf or it's blocked via:crowded_squeeze |
0 (off) |
min_available_margin_pct |
Block new trades when free margin drops below this fraction of equity — caps over-leverage/stacking. Lower = deploys more aggressively | 0.10 |
min_market_volume_usd |
Skip markets below this 24h volume | 5_000_000 |
min_short_volume_usd |
Extra 24h-volume floor for shorts only — thin markets squeeze, so shorts need deeper liquidity | 0 |
cooldown_min |
Minutes before re-trading the same coin | 60 |
counter_regime_min_conf |
Confidence bar for a trade against the regime (e.g. long in a downtrend) | 0.7 |
aligned_min_conf |
Confidence bar for a trade with the regime (trend-aligned) — typically lower than the counter-regime bar | unset |
block_counter_trend_bypass |
When true, own-coin trigger bypasses cannot override the counter-regime gate — stops long-into-downtrend bleed |
false |
override_max_daily_extension_pct |
Max positive 24h move allowed for PASS→LONG TA sidestep. Blocks parabolic chase entries (e.g. TNSR +70%, which backtests −EV above 30% extension). 0 disables |
30 |
backup_sl_max_frac_of_liq |
Caps server-side backup stop distance to this fraction of the approximate liquidation buffer | 0.60 |
max_crypto_long_correlated |
Cap on simultaneous correlated crypto positions (concentration guard) | 2 |
coin_allowlist |
If non-empty, only these coins are tradeable | [] (all) |
coin_blocklist |
Coins that are never traded | [] |
Nested blocks (all in .agent-config.json, all hot-read for new entries):
ai_brain— verdict provider selection.providercan beopenrouter,claude_cli, orcodex_cli;AI_BRAIN_PROVIDERoverrides it. CLI providers run in cheap/headless mode by default and must emit the same final-line verdict JSON as OpenRouter. On any provider failure the result isai_down=TruePASS.dsl_exit— trailing-stop engine.max_loss_pctandmax_loss_roe_pctare the hard stop, with the tighter spot-equivalent value binding; the optionalatr_stopsub-block widens it to a volatility-scaled stop (atr_mult× ATR, clamped tofloor_pct/ceiling_pct). Current live new-entry values aremax_loss_pct=2.5,max_loss_roe_pct=25,atr_stopenabled (1.5×, 1.0–2.5%),protect_pct=1.25, and a tightretrace_threshold=0.10.phase2_tiersis the profit-scaled give-back ladder (loosens the trail on proven runners: +8%→0.35, +15%→0.40).stale_flat_timeout_minutes(480) exits positions that never reach the profit-lock phase. Tracker state →.dsl-state.json(overridePATHIA_DSL_STATE_FILE). Existing open positions keep the policy captured at entry; config edits affect new entries and synthesized trackers.atr_risk_sizing{enabled, risk_per_trade_pct, sizing_basis}— equal-risk position sizing: target risk =risk_per_trade_pct × equity, converted to notional from the configured stop distance. Current live usesrisk_per_trade_pct=0.2andsizing_basis="primary_stop". This overrides the flatequity_fraction_per_tradepath; volatile/wide-stop coins get smaller size.ta_sidestep_force_execute— the only remaining PASS upgrade path. It can upgrade an AI PASS to LONG only on composite>=runner minimum or momentumBurst, never on slow-burn alone, never when AI is down, and never aboveoverride_max_daily_extension_pct. The upgraded LONG still must pass the normal runner gate.late_chase_relax{enabled, min_ext_pct, max_ext_pct, min_volume_usd}— narrows the runner gate's "late trend-only chase" block: trend-aligned entries with no fresh breakout are admitted ONLY on liquid coins (vol ≥min_volume_usd) inside the[min_ext_pct, max_ext_pct]daily-extension band — the one pocket backtested +EV / OOS-robust (20–30% ext, +0.15–0.20%/t). Low-liquidity and out-of-band chases stay blocked.capital_rotation{enabled, min_candidate_composite, min_hold_minutes, protect_winner_roe_pct}— when a strong fresh candidate is blocked purely by capital (book full / notional cap), evicts the weakest non-winner (roe <protect_winner_roe_pct, held ≥min_hold_minutes) to make room.- The four live books, each bounded at $20/1x with a 15% stop and a 1-day
horizon — the geometry each was graded on.
scripts/autonomous_cycle.pygrades them nightly and demotes anything its own forward ledger refutes;scripts/book_status.pyshows where each stands without needing the exchange.
Trigger internals (weights, sigma thresholds, candle interval) live separately in
pathia/agents/config.py — edit there to tune the scan itself.
TL;DR — where to set what: strategy/risk knobs → .agent-config.json (live,
no restart); credentials + scan/infra env → .env.local (restart to apply); scan
trigger internals → pathia/agents/config.py (restart).
- Python 3.11+
- Hyperliquid wallet with private key
- OpenRouter API key (openrouter.ai) for the default
openrouterbrain, or non-interactive Claude/Codex CLI auth forclaude_cli/codex_cli - (Optional) Brave Search API key for news
git clone https://github.com/Julian-dev28/pathia
cd pathia
# Create and activate virtual environment
python3 -m venv .venv
source .venv/bin/activate
# Install dependencies (editable, with dev extras: pytest + ruff)
pip install -e ".[dev]"
# Configure
cp .env.local.example .env.local
# Edit .env.local with your keys# Start or restart both long-running processes
scripts/restart.sh
# Check process status
scripts/restart.sh status
# Follow logs
tail -f logs/trading_loop.logThe API is available at http://localhost:8000. Health check: GET / returns {"service": "Pathia-Trader", "version": "0.3.0", "status": "running"}.
scripts/restart.sh manages the autonomous trading loop and the FastAPI server,
including stop/verify/start and log files under logs/. The MCP stdio server is
not managed by this script; Pathia Agent respawns it on tool calls.
# Foreground loop, useful while debugging
python scripts/trading_loop.py
# API server only
python -m pathia.server
# or: uvicorn pathia.server:app --host 0.0.0.0 --port 8000The --env prod --daemon flags are informational only; they do not fork the
process. Use scripts/restart.sh for normal operation.
Trading Loop Behavior:
- Scans the top ~45 markets (by 24h volume) plus mover slots and a rotating universe sweep, every 60 seconds
- Each tick, reconciles DSL trackers with live exchange positions and runs an exit pass — market-closes anything whose dynamic floor, hard stop, or timeout has tripped
- Runs the TA filter on each trigger — only CONFIRMED signals (or fired momentum bursts) reach AI research
- Researches qualifying signals with the selected AI brain provider (
openrouter,claude_cli, orcodex_cli) - Executes trades that clear all 11 risk gates
- Runs continuously until stopped
pytest # offline unit tests — fast, no network, CI-safe
pytest -m online # read-only tests against the live Hyperliquid public API
PATHIA_E2E=1 pytest -m live # real-money e2e: places a tiny order, calls the LLMonline and live tests are deselected by default. The live suite spends
real funds (a ~$14 round-trip order plus a billable AI-brain call) and is
additionally gated behind PATHIA_E2E=1 so it can never run by accident.
Logged-replay backtests use the real saved AI verdicts from .agent-memory.json
and route them through the current gates/exits:
.venv/bin/python scripts/backtest_logged.py --hours 168 --summary-only \
--mode sidestep --force-bar 30 \
--apply-runner-gate --regime-mode neutral --slippage-bps 5
.venv/bin/python scripts/strategy_grid_search.py --hours 168 --profile blend \
--mode sidestep --force-bar 30 \
--regime-mode neutral --slippage-bps 5Treat these as replay diagnostics, not proof of future profit. The live outcome store, with slippage/funding/hold-time capture, is the source of truth once the sample is large enough.
pathia is a standalone Python application; Pathia Agent operates it through this MCP server — that is the whole integration boundary. The agent calls the tools below; the trading engine itself has no Pathia-framework dependency.
The MCP server (scripts/pathia-mcp-server.py) exposes 99 tools over stdio transport. The 16 primary tools are listed below; the remainder are Hyperliquid data passthroughs (some are placeholders pending SDK wiring).
| Tool | Description |
|---|---|
| Trading Core | |
scan |
Scan all HL markets (volume-filtered), return triggered candidates |
research |
Deep AI analysis on a coin with the configured AI brain provider |
submit_verdict |
Store an agent-authored verdict as an analysis for MCP-native brain mode |
execute |
Execute trade through risk gates + DSL registration |
close_position |
Close a coin through the same reduce-only executor close helper used by loop exits |
state |
Get full agent state (mode, equity, positions, trades) |
config |
Get/set agent configuration (mode, risk caps, thresholds, ai_brain) |
| Hyperfeed Discovery | |
leaderboard_get_markets |
Top markets by OI + volume |
leaderboard_get_top_traders |
Trader rankings with win rates |
leaderboard_get_trader_positions |
Positions for a specific trader |
discovery_get_top_traders |
Discovery top traders (alias) |
discovery_get_trader_state |
Full trader state from discovery |
| Market Data | |
market_get_asset_data |
Candles + funding + OI for any coin |
market_get_funding_regime |
LONG_CROWDED / SHORT_CROWDED / NEUTRAL |
market_list_instruments |
All tradeable instruments |
market_get_mids |
Real-time mid prices |
Configure in Pathia Agent's config.yaml:
mcp_servers:
pathia:
command: python3
args:
- /path/to/pathia/scripts/pathia-mcp-server.py
cwd: /path/to/pathia
timeout: 60
env:
OPENROUTER_API_KEY: ${OPENROUTER_API_KEY}With the skill loaded and the MCP server registered (see MCP Integration), you operate pathia by prompting your Pathia Agent in plain language — the agent calls the MCP tools for you. Restart your Pathia session first so the skill and MCP server are picked up.
| Goal | Prompt to give Pathia |
|---|---|
| Check state | Load the pathia skill and show me its current state — mode, equity, open positions, recent trades. |
Configure (OFF analyzes only, LIVE places real orders) |
Set pathia to LIVE mode with a max trade size of $20. |
| Scan | Scan the markets with pathia and list what triggered, with composite scores. |
| Research | Research the top candidate and tell me the verdict, side, and confidence. |
| Run one full cycle | Run a pathia cycle: scan, run the TA filter, research the best candidate, and execute it if the verdict is LONG or SHORT. Tell me what happened. |
| Start continuous trading | Start the pathia trading loop in the background, then confirm it is running. |
| Stop continuous trading | Stop the pathia trading loop. |
| Monitor (in session) | Check pathia's status and tell me if anything changed since the last report. |
"Start continuous trading" should use scripts/restart.sh loop, which starts
the same scan -> TA-filter -> research -> execute loop on its own every
PATHIA_SCAN_INTERVAL seconds, independent of the Pathia session.
For hands-off monitoring, nothing needs resuming: scripts/scheduler.py
already runs the watch on its own clock, started by scripts/restart.sh. It
supervises the processes, evaluates k8s/prometheusrule.yaml every two minutes
and delivers what fires, and snapshots state nightly.
cron and launchd are NOT options on this machine and never were: macOS TCC
denies both access to ~/Documents, so a job defined there never runs and
never says why. That is why the scheduler exists.
python3 scripts/preflight_live.py # one-shot readiness, anything blocking a trade
tail -f logs/alerts.log # every alert that fired or resolved
tail -f logs/supervisor.log # every process restartThe current live path uses ATR equal-risk sizing in executor.py:
target_risk_usd = perp_equity × atr_risk_sizing.risk_per_trade_pct
raw_notional = target_risk_usd / primary_stop_distance_pct
trade_notional = clamp(raw_notional, max_trade_notional_usd, leverage caps)
Then the executor converts the target notional into the exact Hyperliquid-valid coin size before risk gates run. That prevents a small intended trade from passing gates and then being silently enlarged by exchange minimum-order logic.
Relevant knobs live in .agent-config.json:
| Key | Meaning | Example |
|---|---|---|
atr_risk_sizing.enabled |
Use stop-distance-based equal-risk sizing | true |
atr_risk_sizing.risk_per_trade_pct |
Fraction of equity risked at the primary stop | 0.02 = 2% |
atr_risk_sizing.sizing_basis |
Stop source for sizing | primary_stop |
leverage |
Leverage ceiling — each trade uses min(this, coin's own max); pushed to the exchange via set_leverage |
10 = up to 10× |
max_trade_notional_usd |
Hard cap on a single trade's notional | 350 |
equity_fraction_per_trade |
Fallback margin fraction when ATR sizing is disabled | 0.20 = 20% |
When ATR sizing is disabled, the fallback formula is:
trade_notional = perp_equity × equity_fraction_per_trade × leverage
Caps that bound both sizing paths: max_concurrent, max_total_notional_pct,
max_trade_notional_usd, exchange max leverage, available margin, and the
coin-specific precision/minimum order. Config keys are read tolerantly —
snake_case or camelCase both work.
Defaults if the keys are absent: equity_fraction_per_trade = 0.01, leverage = 5.
HL's API rate limit is 1200 weight/minute. A single candle fetch costs weight 20. Scanning the full 500+ market universe naively required 10,000+ weight -> instant 429. The majors allowlist removes most of that pressure on its own. Volume pre-filtering to 45 core markets plus a small rotating sweep leaves room for mids, HIP-3 metadata, dashboard/account calls, and occasional 1h enrichment. Sustained usage is roughly 1200 * markets / interval weight/min, so the safe rule is markets plus sweep should stay below the scan interval in seconds.
Static SL/TP orders don't adapt to price action. The DSL engine implements a two-phase design: Phase 1 protects your capital (hard stop), Phase 2 locks in profits (trailing floor with tiered retrace thresholds). The floor only moves up — it never gives back locked profit. State is persisted on disk so a daemon restart doesn't reset the ratchet, and the registry is reconciled against the exchange each tick so manually-opened or externally-closed positions stay coherent. This pattern is inspired by senpi-skills' DSL dynamic stop-loss engine.
The research prompt and verdict parser are stable; only the transport changes. Keeping OpenRouter, Claude CLI, and Codex CLI behind one provider interface lets the operator switch the decision-maker without adding another executor or another prompt/parse path. LONG/SHORT/CLOSE verdicts still flow through the same risk gates, kill switch, close helper, and DSL exit engine.
The HL leaderboard and whale tracking aren't exposed through the public API. This module reconstructs the same data patterns (leaderboard rankings, smart money concentration, OI anomalies) from the raw HL endpoints we already call. No external MCP dependency needed.
Rewritten from TypeScript/Next.js to enable simpler deployment, MCP integration with Pathia Agent, and native testability without a headless browser.
| Operation | Weight | Notes |
|---|---|---|
allMids |
2 | Real-time prices |
metaAndAssetCtxs |
20 | Universe + volume + OI (perp) |
spotMetaAndAssetCtxs |
20 | Universe + volume + OI (spot) |
candleSnapshot (per coin) |
20 | Plus per-item weight |
| Total per scan cycle | ~900-1,100 | Top 45 markets plus a small sweep, one 5m candle fetch each |
With PATHIA_MAX_MARKETS=45, a small PATHIA_UNIVERSE_SWEEP, and a 50s candle-cache TTL, each 60s scan fetches fresh 5m candles while keeping room for mids, HIP-3 metadata, dashboard/account calls, and occasional 1h enrichment. The cache TTL is deliberately kept just below the scan interval so the scanner never reacts to a stale snapshot — raising it would re-introduce that lag.
The crypto/HIP-3 budget split (PATHIA_MAX_MARKETS_HIP3) is a partition of the same scan budget, not extra calls. If 429s or data gaps show up, lower PATHIA_UNIVERSE_SWEEP or increase PATHIA_BATCH_SLEEP before tightening strategy gates.
When HIP-3 is enabled, fetch_account_state(user, include_hip3=True) issues one extra clearinghouseState POST per registered HIP-3 dex (~8 dexes × weight 2 = ~16 weight). The aggregated path is used by the dashboard, the trading-loop heartbeat, and the MCP state/portfolio handlers. MCP close_position delegates to executor.close_position_market(), so closes share the same reduce-only order path, DSL cleanup, trigger-order cancellation, and loss-cooldown behavior as loop exits.
pathia/
├── pathia/ # Pure Python agent
│ ├── __init__.py
│ ├── __main__.py # Entry point
│ ├── server.py # FastAPI server — 22 routes
│ ├── agents/ # Core agent logic
│ │ ├── config.py # Agent configuration model
│ │ ├── config_store.py # Config persistence
│ │ ├── ai_brain.py # Pluggable AI brain providers
│ │ ├── executor.py # ATR/fallback sizing + order execution + DSL registration
│ │ ├── memory.py # File-backed state
│ │ ├── perception.py # Volume-filtered parallel scanner
│ │ ├── research.py # AI research pipeline
│ │ ├── risk_gates.py # 11 risk gates
│ │ ├── system_prompt.py # Agent system prompt
│ │ ├── ta_filter.py # Pre-AI TA filter
│ │ ├── dsl_exit.py # Two-phase trailing stop engine
│ │ └── hyperfeed.py # Discovery API (leaderboard, funding regime, OI context)
│ ├── client/ # External API clients
│ │ ├── exchange.py # HL order placement
│ │ ├── hl_client.py # HL REST + WebSocket client
│ │ ├── ws_client.py # Persistent WebSocket for real-time mids
│ │ ├── universe.py # Volume-ranked market loader with caching
│ │ ├── cache.py # LRU + TTL memoization
│ │ ├── lock.py # fcntl lock with stale-PID recovery
│ │ ├── parallel.py # Concurrency-bounded fan-out
│ │ └── daemon.py # Long-lived scan scheduler
│ ├── indicators/ # TA math
│ │ ├── math.py # EMA, SMA, ATR, RSI, ADX
│ │ └── triggers.py # Trigger detection + composite scoring
│ └── models/ # Shared data types
│ └── types.py # Candle (OHLCV)
├── scripts/
│ ├── pathia-mcp-server.py # MCP server (stdio, 99 tools)
│ └── trading_loop.py # Continuous trading loop
├── skills/pathia-agent/ # Pathia Agent skill
├── tests/ # pytest suite — offline / online / live e2e
└── docs/
├── AI_BRAIN_OPERATOR_WIRING.md # Codex/Claude/Pathia/OpenClaw brain wiring
└── journal-schema.md # Trade journal schema
- FastAPI — Python web framework
- OpenRouter / Claude CLI / Codex CLI — AI research brain providers
- Hyperliquid Python SDK — perpetual futures DEX
- Brave Search API (optional, for news signals)
- Prometheus (
prometheus-client) —/metricsinstrumentation + observability - Kubernetes (kind + kube-prometheus-stack) — local deployment & Grafana dashboards (see
k8s/)
It is operated by Pathia Agent through the MCP server — Pathia Agent is not a build dependency; the trading engine is plain Python.
Note: Project trunk is main (Python). The legacy TypeScript/Next.js implementation lives on archived branches.