frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Agent-99 – safe (no, really) eval() in the cloud

https://www.npmjs.com/package/agent-99
1•podperson•7h ago

Comments

podperson•7h ago
While I was waiting for the night train to Oulu in Helsinki on Friday night, I pondered two problems I have been thinking about for years on the one hand, and for months on the other.

1. How can I build a simple *service-as-a-service* endpoint that pulls data, maybe does a little work on it (e.g. whittling it down, converting XML to JSON, etc.) caches it, and returns it? This seems to require *eval* to be really useful and then it's a whole deployment, code-review thing (for good reason). 2. How can I build an LLM-powered agent that… you get the idea. If service-as-a-service, why not *agent-as-a-service*? I'd already played with lang-chain and found it quite fiddly even for simple things, and this had led me to build a lighter, schema-first alternative to zod.

The epiphany I had was that these are the same question, and the problem was *eval*. So why not make *eval* completely safe?

The result is *agent-99* – a Turing-complete, cost-limited virtual machine that enables "Safe Eval" anywhere (Node, Bun, Deno, and the Browser). The runtime model is so simple it could easily be ported to any of your favorite languages: Python, Rust, Go, Java, Zig… Haskell. It's a perfect fit for Erlang.

Oh and because the underlying language is JSON schema, it's easy to hand it to an agent as a set of tools. So *agent-99* makes it easy to do that, too.

It's the infrastructure for *sky-net* but, you know, type-safe, deeply asynchronous, and without a halting problem.

- *agent-99 repo* https://www.google.com/search?q=https://github.com/tonioloew... - *agent-99-playground (Vibe Coded in ~2 hours):* https://github.com/brainsnorkel/agent99-playground

### The Core Idea

Most Agent frameworks (like LangChain) rely on heavy "Chain" classes or graph definitions that are hard to inspect, hard to serialize, and hard to run safely on the client.

`agent-99` takes a different approach: *Code is Data.*

1. You define logic using a *Fluent TypeScript Builder* (which feels like writing standard JS). 2. This compiles to a *JSON AST* (Abstract Syntax Tree). 3. The AST is executed by a *Sandboxed VM* (~7kB gzipped core).

Or to put it another way:

1. A program is a function 2. A function is data organized in a syntax tree 3. An agent is a function that takes data and code

`agent-99` provides a *builder* with a fluent-api for creating your language and creating programs, and a *virtual machine* for executing those programs with explicitly provided capabilities.

### Why use a VM? * *Safety:* It solves the halting problem pragmatically with a "Fuel" (Gas) counter. If the Agent loops forever, it runs out of gas and dies. * *Security:* It uses *Capability-Based Security*. The VM has zero access to fetch, disk, or DB unless you explicitly inject those capabilities at runtime. * *Portability:* Because the "code" is just JSON, you can generate an agent on the server, send it to the client, and run it instantly. No build steps, no deployment.

### Batteries Included (But Optional)

While the core is tiny, I wanted a "batteries included" experience for local dev. We built a standard library that lazy-loads:

* *Vectors:* Local embeddings via `@xenova/transformers`. * *Store:* In-memory Vector Search via `@orama/orama`. * *LLM:* A bridge to local models (like LM Studio).

### Proof of Concept

I sent the repo to a friend (https://github.com/brainsnorkel). He literally "vibe coded" a full *visual playground* in a couple of hours using the library. You can see the definitions generating the JSON AST in real-time.

### The Stack * *agent-99:* The runtime. * *tosijs-schema:* The underlying schema/type-inference engine https://github.com/tonioloewald/tosijs-schema

I’d love to hear your thoughts on this approach to code-as-data and agents-as-data.

Space Data Center SIM

https://astrocompute.dev/
1•printerlover•2m ago•0 comments

Learning a new programming language with an LLM

https://feeding.cloud.geek.nz/posts/learning-new-programming-language-with-ai/
1•edward•3m ago•0 comments

Role of anthropogenic climate change in wildfire smoke concentrations in the US

https://www.pnas.org/doi/10.1073/pnas.2421903122
1•bikenaga•4m ago•0 comments

Microplastic exposure is associated with epigenomic effects in model organism

https://pubmed.ncbi.nlm.nih.gov/38742563/
2•donsupreme•6m ago•0 comments

Dafny: Verification-Aware Programming Language

https://dafny.org/
1•handfuloflight•7m ago•0 comments

Efficient Dockerfile templating for complex build scenarios

https://gagor.pro/2025/01/efficient-dockerfile-templating-for-complex-build-scenarios/
1•___timor___•8m ago•0 comments

I Ported JustHTML from Python to JavaScript with Codex CLI and GPT-5.2 in 4.5h

https://simonwillison.net/2025/Dec/15/porting-justhtml/
2•pbowyer•9m ago•0 comments

Google Fi Web Calls

https://fi.google.com/webcalls/calls
1•pcvetkovski•9m ago•0 comments

Launching ChinaRxiv, an automated translation pipeline of all Chinese preprints

https://twitter.com/seconds_0/status/2000606845644505093
1•Anon84•17m ago•0 comments

The "Commons Clause" License Condition

https://commonsclause.com/
1•Kerrick•24m ago•0 comments

Show HN: BoardSpace – AI that draws on a whiteboard in realtime for Calculus

https://www.useboardspace.com/
1•jonnotdoe•24m ago•1 comments

Texas sues biggest TV makers, alleging smart TVs spy on users without consent

https://arstechnica.com/tech-policy/2025/12/texas-sues-biggest-tv-makers-alleging-smart-tvs-spy-o...
9•c420•26m ago•7 comments

The Disappointing Truth About Wi-Fi 7: Multi-Link Operation Isn't Here Yet

https://www.rtings.com/router/learn/research/wifi-7-mlo
1•dokeeffe•26m ago•1 comments

Using Cursor's Bugbot to Spot Issues Early in Pull Requests

https://medium.com/@ali-dev/using-cursor-bugbot-to-spot-issues-early-0cdc142fbaff
1•stringtoint•28m ago•0 comments

The Writer Who Dared Criticize Silicon Valley

https://www.nytimes.com/2025/11/27/technology/writer-silicon-valley-criticism.html
3•petethomas•31m ago•0 comments

Show HN: Calm Companies – Businesses where less is more

https://calmcompanies.club
3•RaulOnRails•31m ago•1 comments

Glycemic index, glycemic load, and risk of dementia

https://academic.oup.com/ije/article-abstract/54/6/dyaf182/8313011?redirectedFrom=fulltext
1•bikenaga•33m ago•1 comments

What the Soviets Found on Venus

https://vinyasi.substack.com/p/what-the-soviets-found-on-venus
2•vinyasi•33m ago•0 comments

Write a Simple Code Agent using moonbitlang/async

https://www.moonbitlang.com/blog/moonbit-async-code-agent
1•necrodome•34m ago•0 comments

Read and Learn: open-source language learning app

https://readandlearn.app/
1•waveywaves•38m ago•1 comments

Breach at South Korea's Equivalent of Amazon Exposed Data of Almost Every Adult

https://www.wsj.com/world/asia/breach-at-south-koreas-equivalent-of-amazon-exposed-data-of-almost...
5•bookofjoe•38m ago•1 comments

Nicholas Deak

https://en.wikipedia.org/wiki/Nicholas_Deak
1•petethomas•39m ago•0 comments

Show HN: The Mirsky Ratio–Measuring R&D vs. SG&A as a predictor of S&P 100

https://substack.com/inbox/post/181826707
2•TheMirskyLimit•39m ago•1 comments

Who has enjoyed using PR code reviewers? What worked and what didn’t?

2•yashwantphogat•39m ago•1 comments

UK to rejoin EU's Erasmus student exchange programme

https://www.theguardian.com/world/2025/dec/16/uk-to-rejoin-eu-erasmus-student-exchange-programme
5•sandbach•40m ago•0 comments

Wall Street banks prepare for round-the-clock stock trading, reluctantly

https://www.reuters.com/business/finance/wall-street-banks-prepare-round-the-clock-stock-trading-...
3•gardncl•41m ago•0 comments

Director of MIT's Plasma and Fusion Center, Dies at 47

https://news.mit.edu/2025/nuno-loureiro-professor-director-plasma-science-and-fusion-center-dies-...
3•jacobedawson•43m ago•1 comments

Manifesto for AI Software Development: Code Is Cattle, Not Pets

https://metamagic.substack.com/p/manifesto-for-ai-software-development
1•r0ze-at-hn•45m ago•1 comments

Adding type-safe structs to Lua

https://if-not-nil.github.io/lua-structs/
1•qwool•45m ago•0 comments

Classify website content using text and screenshot

https://github.com/themains/piedomains
1•neehao•47m ago•0 comments