Multi agent apps are hot again thanks to Grok Bot.
So I thought of having one locally for fun. Who doesn't love having the same user experience, with control on the provider you use?
A good starter is taking local sandboxing seriously, which I lack as I rely on permission gates more and doing most of my work on my local machine.
But interacting with your agent 70% of the task is not it. The real unlock is the time and complexity you freed, isn't it?
So I'm taking "hands free" seriously this time, and it starts with containment. Steering comes next, but that's for another day.
If you're on Windows, containment starts with a minimal WSL 2 instance and Pi agent. If you love NodeJS you better have nvm with you and if you love Python, it has to be uv.
Now, here's a shortcut: You can skip Podman and Docker if you start your WSL 2 sandbox with only your project folder mounted to it.
You can easily do that with your main agent harness controlling your host machine, or a script that injects into /etc/wsl.conf inside that WSL 2 sandbox.
Could be OpenCode on Orca if you love the CLI look, or Paseo if you like the desktop feel. Or just a simple .cmd/ps1 launcher script. Up to you, if you like Batch or PowerShell more.
Of course, you have to launch your WSL 2 sandbox with a non root user so you're still "sudo" protected, plus I/O piping for Pi agent, and "exec pi" in the end.
Sudo might not be enough, but Linux is well equipped with user permissions that worth exploring in another day.
That's it. I just finished the first step towards my local Grok Bot goal.
The first test is the image below: An OpenDesign instance, using a Pi agent inside my WSL 2 sandbox.
No more permission gates. No more host altering changes. Everything is contained in a WSL 2 sandbox and just the project folder itself.
So, if OpenDesign can use a harness contained in a sandbox, which eliminates the need to ask me to intervene, then any harness can, like an open source Grok Bot, which I am going to explore next.
I will definitely see how Podman or Docker fits in the whole picture, as I want more predictable, recurring workflows mimicking containerized production environments.
All it took is half a day of setup and with the help of DeepSeek V4.1 Flash during off peak hours. On a weekend of course.
Tweaking is fun.