Five records bind a resumable harness to canonical exchange truth

type TradingAccount = {
  id: string;
  userId: string;
  environment: "hyperliquid_testnet";

  masterWallet: {
    privyWalletId: string;
    address: `0x${string}`;
    ownership: "user";
  };

  executionWallet: {
    privyWalletId: string;
    address: `0x${string}`;
    hyperliquidAgentName: string;
    status:
      | "creating"
      | "awaiting_approval"
      | "approved"
      | "revoked"
      | "error";
    approvedAt?: number;
  };

  status:
    | "onboarding"
    | "ready"
    | "agent_revoked"
    | "account_unavailable"
    | "error";

  createdAt: number;
  updatedAt: number;
};

The execution wallet signs actions. Hyperliquid account state is queried with the master-wallet address.

type TradingHarnessBinding = {
  provider: "codex" | "claude" | "opencode";
  providerInstanceId: string;
  providerSessionId?: string;
  resumeCursor?: string;
  threadId: string;
  model?: string;
  status: "available" | "unavailable";
};

The binding is immutable for an active POC mission.

type TradingMission = {
  id: string;
  userId: string;
  tradingAccountId: string;

  instruction: string;
  market: "ETH";
  strategyFamily: "momentum";
  harness: TradingHarnessBinding;

  authority: TradingAuthority;
  strategy?: MomentumStrategyState;

  status:
    | "initializing"
    | "analysing"
    | "waiting"
    | "executing"
    | "position_open"
    | "paused"
    | "agent_unavailable"
    | "blocked"
    | "revoked"
    | "completed";

  blockedReason?:
    | "cumulative_loss_limit"
    | "protection_failure"
    | "account_unavailable"
    | "reconciliation_failure";

  control: {
    entriesAllowed: boolean;
    reentryAllowed: boolean;
    pauseAfterPositionClose: boolean;
  };

  strategyVersion: number;
  authorityVersion: number;
  lastHarnessRunId?: string;
  createdAt: number;
  updatedAt: number;
};

type TradingAuthority = {
  allocatedCapitalUsd: number;
  allowedDirections: Array<"long" | "short">;

  maximumLeverage: number;
  maximumGrossNotionalUsd: number;
  maximumCumulativeLossUsd: number;
  maximumPlannedRiskPerPositionUsd: number;

  marginModes: Array<"cross" | "isolated">;

  allowScaleIn: boolean;
  allowPartialReduction: boolean;
  allowReentry: boolean;
  allowDirectionReversal: boolean;

  validUntil: "revoked" | number;
};

type TradingRiskPolicy = {
  feeRateSource: "hyperliquid_user_fees";
  fallbackTakerFeeBpsPerSide: number;
  stopSlippageReserveBps: number;
  positivePnlExpandsLossBudget: false;
};

const pocAuthorityDefaults = (
  allocatedCapitalUsd: number
): TradingAuthority => ({
  allocatedCapitalUsd,
  allowedDirections: ["long", "short"],

  maximumLeverage: 3,
  maximumGrossNotionalUsd: allocatedCapitalUsd * 3,
  maximumCumulativeLossUsd: allocatedCapitalUsd * 0.10,
  maximumPlannedRiskPerPositionUsd: allocatedCapitalUsd * 0.02,

  // POC decision: isolated margin only. Reject the mission if
  // isolated is unavailable; do not fall back to cross.
  marginModes: ["isolated"],

  allowScaleIn: true,
  allowPartialReduction: true,
  allowReentry: true,
  // POC decision: reversal off by default. Reversal is a harness
  // power the user must grant explicitly via an authority patch.
  allowDirectionReversal: false,

  validUntil: "revoked",
});

const pocRiskPolicyDefaults: TradingRiskPolicy = {
  feeRateSource: "hyperliquid_user_fees",
  fallbackTakerFeeBpsPerSide: 5,
  stopSlippageReserveBps: 25,
  positivePnlExpandsLossBudget: false,
};

type AgentConditionDescription = {
  description: string;
  timeframe?: TradingTimeframe;
  priceLevel?: number;
  invalidatedBy?: string;
};

description carries the authoritative published conclusion. The optional fields are display hints only and never drive a runtime decision — watch predicates come from MarketWatch (§12.1), never from a condition description.

type TradingTimeframe = "1m" | "3m" | "5m" | "15m" | "1h";

type MomentumStrategyState = {
  version: number;
  name: string;
  market: "ETH";

  mode:
    | "breakout_continuation"
    | "breakdown_continuation"
    | "pullback_continuation"
    | "volatility_expansion";

  direction: "long" | "short" | "both" | "conditional";
  timeframes: TradingTimeframe[];

  belief: {
    summary: string;
    regime: string;
    confidence?: number;
    evidence: string[];
  };

  entryPlan: {
    explanation: string;
    initialNotionalUsd?: number;
    maximumIntendedNotionalUsd?: number;
    orderPreference: "marketable_ioc" | "resting_limit";
    conditions: AgentConditionDescription[];
  };

  positionManagement: {
    scaleInAllowed: boolean;
    scaleInConditions: AgentConditionDescription[];
    partialReductionAllowed: boolean;
    trailingMethod?: string;
  };

  protection: {
    stopMethod: string;
    stopPrice?: number;
    takeProfitMethod?: string;
    takeProfitPrice?: number;
    maximumPlannedLossUsd?: number;
  };

  exitConditions: AgentConditionDescription[];
  abandonmentConditions: AgentConditionDescription[];
  reentryConditions: AgentConditionDescription[];

  currentAction:
    | "analysing"
    | "waiting"
    | "entering"
    | "holding"
    | "scaling"
    | "reducing"
    | "exiting"
    | "reassessing"
    | "abandoning";

  explanation: string;
  updatedAt: number;
};

This stores published conclusions, not hidden reasoning.