Static ReadonlyAuthorizesTrue when the action authorizes its caller itself, so a public entry point such as the
RunAction mutation may run it for an authenticated user without an MJ: Action Authorizations link. Set it only on an action that either checks an authorization the caller
must hold, or reads and writes only with the caller's own permissions. Leave it false for an
action that acts with more authority than its caller, or that reaches data or sends messages
the caller chooses but could not otherwise reach.
The engine reads the marker only from the class that runs, never from its parent classes. A subclass that overrides a marked action must declare the marker again.
ProtectedInternalExecute the action by delegating to CodeExecutionService
Action parameters including code, language, inputData
ActionResultSimple with execution results or errors
Executes the action with the provided parameters.
The action execution parameters including context
Promise resolving to the action result
Action for executing JavaScript code in a sandboxed environment
This is a THIN WRAPPER - all core logic lives in CodeExecutionService. The action's job is simply to:
Security is enforced entirely by CodeExecutionService.
Example: Agent usage: