Most tool-calling sandboxes projects off GitHub will require privileged access, CAP_SYS_ADMIN, and user namespaces and cross platform quirks that a team where devs have both windows and Mac, and deployment is linux.
During local dev Qwen3.5-0.8B/2B with WASM/Pyodide Deno ( extracted from DSPy ) are 0 cost combination to plug in with no cross platform quirks.
Necessity is the mother of all inventions, Lack of Funds is the mother of all resourcefulness.