That's actually how clawk runs it: the agent process (claude/codex) runs inside the Linux guest on a PTY, not on macOS