Working in a folder, with safety nets
Link a folder and the agent reads files, writes changes, runs commands in the terminal and executes scripts. You choose per conversation how strict approval is, from approving everything by hand to letting a helper model review every action for you. Under every write there is a checkpoint, and before the first far-reaching command of a turn a snapshot of the folder.