I built a TypeScript framework for AI agents that replaces shelling out and parsing stdout. Agents discover and call typed functions with structured inputs and outputs. Permissions are first-class — every operation is allow, ask, or deny — so you get granular control instead of "allow bash: yes/no." LLM-generated code runs in a SES sandbox with no access to fetch, require, or process.
I'm curious how this performs on everyone's machines? Worked great for me on macOS but not as well on Linux (supposedly there are still WebGPU quirks?)