it’s a shame it has to be in CF workers because the easiest ways to eval JS on-the-fly is inside a deno worker

you can set sandbox permissions on a deno process but also (experimentally) web workers inside the process as well

someone else recommended Lua transpiled to JS — that also sounds good