postrv/forgemax

Runs LLM-generated JavaScript in a sandboxed V8 isolate (`deno_core`) with AST validation, opaque credential bindings, and isolated child process execution—collapsing tool discovery into a queryable manifest layer and execution into a single `execute()` call. Integrates with any MCP server (stdio/HTTP/SSE) and provides TypeScript definitions compiled into the binary, allowing LLMs to write typed JavaScript that chains multiple tools with session stash and bounded parallelism, all while keeping secrets and internal state isolated from sandbox code.

135 stars.