Try reading this. If you look at the script that runs in Roblox, you’ll notice that it just constantly sends requests to the Node server to see if theres anything waiting to be ran. Basically you could rig this so that instead of sending and receiving information about players and what their punishment is, you could send a string which contains the code to be ran (you could also try compressing the data) and run it through loadstring or an interpreter.
If you wanna go the extra mile, use something like LuaJS to precompile the script so that you only need an interpreter on the game server.