bwrap is builtin in claude too, activate with /sandbox command.