Run Code Steps

async def run():
    text = x_message["text"].lower()
    return {"intent": "pricing" if "price" in text else "other"}

​

The shape

• One async def run(): at the top level, with no parameters — everything it needs is already in scope.
• Return a dict. It is kept under the step’s result key for the rest of the run: later steps read a field as {{key.field}} in messages, as a Code result in conditions and contact updates, and other code steps as x_results["key"]["field"].
• Success or failure. Return {"status": "error", "message": "..."} to take the Failure exit. Raising, a refused code check and the timeout take it too. Anything else takes Success.
• Timeout up to 30 seconds per step (10 by default); a message’s code steps share 60 seconds. Give every network call a shorter timeout of its own.

​

What is in scope

​

x_message by what the user sent

​

x_history

answers = sum(1 for m in x_history if m["role"] == "assistant" and m["agent_id"] == "AGENT_ID")

​

update_contact_custom

count = int(x_contact["attributes"].get("other_messages_count") or 0) + 1
result = await update_contact_custom({"other_messages_count": count})
# {"status": "success", "updated": ["other_messages_count"], "skipped": []}

​

Writing it: Generate with AI, Verify, Test

​

What the code checks refuse

• Modules that reach the server: os, sys, subprocess, socket, pathlib, shutil, importlib, pickle, io, tempfile, multiprocessing and similar — directly or through another module.
• open, eval, exec, compile, __import__, globals, vars, dir; getattr with a computed name; dunder attributes.
• Environment variables, and the platform’s own packages (utils, apps, database, redis, pymongo, clickhouse_connect, azure, boto3…).
• Hard-coded keys, tokens or passwords — save them in Settings → Secrets and read them with x_secrets.

​

Testing safely

if x_context["is_test"]:
    return {"link": "https://example.com/test-payment-link"}