Secure file operations with configurable access controls, glob search, and atomic edits for agent workflows.