I've built my own as well, in a terminal. Not pretty, but does the job until something better comes along (maybe Baton is that something better): https://github.com/electrovir/agent-storm
Node.js now has a stable permissions model, though it's very limited compared to Deno's (I don't see anything about blocking network requests). Node also says "This feature does not protect against malicious code"