Untitled topic

I built a TypeScript framework for AI agents that replaces shelling out and parsing stdout. Agents discover and call typed functions with structured inputs and outputs. Permissions are first-class — every operation is allow, ask, or deny — so you get granular control instead of "allow bash: yes/no." LLM-generated code runs in a SES sandbox with no access to fetch, require, or process.