Introducing Run SDK: secure eval for your agents

Run SDK is a newly released package for executing untrusted JavaScript and type-stripped TypeScript within applications without granting direct access to Node.js, networks, credentials, or internal services. It runs each program in a fresh QuickJS worker-thread context and lets applications expose narrowly scoped, serializable host functions for approved data access and actions, enabling agents to coordinate tools, process results locally, and return only useful outputs. The SDK supports interruptions for authentication and human approval through signed resume tokens, replaying programs while reusing recorded host-function results so completed work is not repeated. Configurable time and memory limits, disabled dynamic evaluation, and hardened built-in prototypes provide additional safeguards, although host functions remain trusted code responsible for normal authorization checks. Originally developed from the js-exec runtime in just-bash and tested in eve, the execution layer now powers code mode in the AI SDK, supports Node.js 22.13+ and Bun, and is intended for in-application computation rather than workloads requiring operating-system or process-level isolation.

No tracked trend matches for this post yet.

Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.