Maybe just `import subprocess` and doing some sandbox thing (to not to make any SPOF on host) rather than create a abstraction layer between OS and LLM.