Code

With the Code feature, you can write your own trading strategy directly in JavaScript.

Your strategy runs in a sandboxed environment where you can analyze the current market data, store custom information, and trigger actions using the built-in $ object.

---

🧩 Available Variables

Each run of your strategy includes access to the following objects and functions:

---

$.Action

Enum representing all available trade actions:

• LONG → Open a long position

• SHORT → Open a short position

• EXIT → Close the current position

---

$.Price

The current market price of the selected symbol.

Example:

if ($.Price > 25000) {
    await $.Strategy.action($.Action.LONG);
}

---

$.Strategy

Provides context for the current trading session and allows you to execute actions.

Property	Description
symbol	Trading pair, e.g. "BTCUSDT"
exchange	Exchange identifier, e.g. "BINANCE"
service	Market type, e.g. "spot" or "futures"
lastTrigger.action	The most recent action (LONG, SHORT, or EXIT)
lastTrigger.price	The price when the last action was executed
lastTrigger.at	Timestamp of the last action, or null if none
roi(percentage?: boolean)	Returns the current ROI. When percentage is true, the value is expressed in percent.
async action(type: $.Action)	Executes an action such as await $.Strategy.action($.Action.LONG)

---

$.Storage

Persistent JSON storage (up to 24 KB) that remains between strategy runs.

Function	Description
byteLimit	Constant holding the maximum allowed bytes (24,576)
async get()	Retrieves the current stored data (returns null if empty)
async set(obj)	Saves a new data object (overwrites existing data)

Example:

const state = await $.Storage.get() || { trades: 0 };
state.trades++;
await $.Storage.set(state);

---

$.Http

Utility for sending HTTP requests from within your strategy. Each request has a maximum timeout of 1750 ms.

Function	Description
timeout	Constant holding the timeout value in milliseconds (1750)
async get(url, params?, headers?)	Sends a GET request and returns the parsed response object
async post(url, data, headers?)	Sends a POST request and returns the parsed response object
async generateSignature(payload, secret)	Generates an HMAC signature from the provided payload and secret. Returns the signature as a string.

Important: Every HTTP method always returns an object in the following format:

{ status: number, text: string }

• status → HTTP status code (e.g. 200, 404, 500)

• text → Raw response body as string

Example:

const params = { symbol: "BTCUSDT" };

const response = await $.Http.get("https://api.binance.com/api/v3/ticker/price", params);

if(response.status === 200){
    const data = JSON.parse(response.text);
}

Example signature generation:

const API_KEY = "your_public_api_key"
const API_SECRET = "your_private_api_secret"

const method = "POST"
const path = "/api/v2/strategy/llm-session"

const body = {
  name: "My Strategy",
  cron_interval: "15m"
}

const timestamp = Math.floor(Date.now() / 1000).toString()

const payload =
   method + path + JSON.stringify(body) + timestamp

const signature = await $.Http.generateSignature(payload, API_SECRET);
  

---

$.Ta

Provides access to a built-in technical analysis library for calculating indicators and signals directly inside your strategy or reaction.

The $.Ta object exposes the functionality of the trading-signals library:

👉 https://github.com/bennycode/trading-signals/tree/main/packages/trading-signals

---

What You Can Do

With $.Ta, you can:

• Calculate indicators like RSI, EMA, SMA, MACD, ATR, Bollinger Bands

• Build custom technical strategies

• Combine indicators with webhook data or price logic

• Perform calculations without external API calls

---

Usage

Indicators are typically used by feeding values sequentially.

Example: RSI

const rsi = new $.Ta.RSI(14);

rsi.update(30000);
rsi.update(30100);
rsi.update(29950);

if (rsi.isStable) {
  const value = rsi.getResult();

  if (value < 30) {
    await $.Strategy.action($.Action.LONG);
  }
}

---

⚡ Rules & Limits

To ensure fair and safe execution, the following rules apply:

• Maximum execution time: 5000 ms per run

• Maximum HTTP request time: 1750 ms

• Maximum storage size: 24 KB

• Only one action per run is allowed

• Maximum five actions per second globally

• Two consecutive EXIT actions are not permitted

• Violating these limits will suspend the strategy temporarily

---

🧠 Example Strategy

// Example: simple entry and exit logic

if ($.Strategy.lastTrigger.action === $.Action.EXIT) {
    if ($.Price < 19000) {
        await $.Strategy.action($.Action.LONG);
    }
} else {
    if ($.Price > 20000) {
        await $.Strategy.action($.Action.EXIT);
    }
}

This example demonstrates:

• Checking the last executed action ($.Strategy.lastTrigger.action)

• Using current market data ($.Price)

• Executing a new action with ($.Strategy.action())

---

🏁 Summary

Feature	Description
Action trigger	await $.Strategy.action($.Action.LONG)
Available actions	LONG, SHORT, EXIT
Actions per run	1
Actions per second	5
Execution time	5000 ms
Storage limit	24 KB
HTTP timeout	1750 ms
Duplicate EXITs	Not allowed

🔒 Sandbox Restrictions & Forbidden Identifiers

Your strategy code runs inside a strictly sandboxed environment. For security, stability, and fair usage, certain JavaScript identifiers are completely blocked and cannot be used anywhere in your code — not even indirectly or in comments.

If your strategy references any of the identifiers listed below, execution will fail and the strategy may be suspended.

---

🚫 Forbidden Identifiers

The following identifiers are not available and must not appear in your strategy code:

Networking & Communication

• fetch

• WebSocket

• EventSource

• Worker, SharedWorker

• XMLHttpRequest

• navigator, location

• postMessage

• onmessage, onmessageerror

• MessageChannel, BroadcastChannel

• importScripts

• close

✅ Use $.Http.get() and $.Http.post() instead.

---

Dynamic Code Execution

• eval

• Function

• AsyncFunction

• generatorFunction

• constructor

❗ Dynamic or runtime-generated code is not permitted.

---

Global Objects & DOM-Like APIs

• globalThis

• window

• self

• frames

• parent

• top

• document

ℹ️ There is no DOM, browser, or global scope access.

---

Timers & Scheduling

• setTimeout, setInterval, setImmediate

• clearTimeout, clearInterval, clearImmediate

• queueMicrotask

⏱ Strategies are event-driven and executed automatically — manual scheduling is not allowed.

---

Crypto, Performance & Parallelism

• crypto

• performance

• structuredClone

• Atomics

• SharedArrayBuffer

---

Reflection & Obfuscation

• Reflect

• Proxy

---

Node.js / Deno Environment

• process

• require

• module

• exports

• Deno

❌ This is not a Node.js or Deno runtime.

---

Encoding / Decoding

• atob

• btoa

---

User Interaction & Debugging

• alert

• confirm

• prompt

• console

• Intl

• FinalizationRegistry

• WeakRef

🛑 Logging, dialogs, locale detection, and memory introspection are intentionally disabled.

---

✅ What You Can Use

Instead of the blocked APIs, always rely on:

• Market data: $.Price

• Trading actions: $.Strategy.action(...)

• Persistent state: $.Storage.get() / $.Storage.set()

• HTTP requests: $.Http.get() / $.Http.post()

These are the only supported interfaces for interacting with the outside world.

---

⚠️ Important Notes

• Forbidden identifiers cannot be used anywhere:

  • Not in variables

  • Not in functions

  • Not in comments

  • Not via aliases

  • Not via destructuring

• Even unused references may cause execution failure

• Violations may result in temporary strategy suspension