I think I would rather just let the logic-writer user use JS directly, and then verify the AST only uses certain language features.

This way you can ensure the code is a subset of JS (the same subset of JSON-Logic), whilst using all the tools and runtimes of JS.