If bun and node.js run I'm sure the agents will, you might have to fight tool calls since the system utils differ from GNU core utils a tiny bit here and there, but you could toss the agent and whatever tools into a jail and have a nice package, use zfs snapshots between prompts so you can disect it later.