Build a working coding agent in R from three tools

Reported experience

1. 1

   What they did

   The author uses R's ellmer package to build a Claude-backed agent from three plain R functions: read file, write file and run shell command. Each function returns a string to the model, and a short system prompt tells it to read before editing and to run tests. He then adds list and search tools, a path check that keeps access inside the project directory, and a targeted edit tool.

2. 2

   How it went

   The three-tool agent can find a function, read the existing tests, write a new test and run the suite, though the author says it falls well short of Claude Code. The shell tool stays risky, and the author defers fuller security coverage to a later post.

3. 3

   Worth knowing

   Wrap every file tool in the path check, not just search. The unrestricted shell tool can still bypass it, so don't treat the project-directory check as full protection.