Do Coding Agents Really Need Unrestricted Shell Access?

Exploring a bounded repository capability layer with MCP, AST/LSP code intelligence, guarded writes, and Git context. Coding agents need access to a repository. They need to read files, search for imp