fix(coding-agent): remove process-cwd tool singletons and use tool-name allowlists

- switch SDK/CLI tool selection to name-based allowlists
- apply allowlists across built-in, extension, and SDK tools
- remove ambient process.cwd defaults from core tooling and resource helpers
- update tests, examples, and TUI callers for explicit cwd plumbing
- add regression coverage for extension tool filtering

closes #3452
closes #2835

packages/coding-agent/src/core/bash-executor.ts

@@ -12,7 +12,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import stripAnsi from "strip-ansi";
 import { sanitizeBinaryOutput } from "../utils/shell.js";
-import { type BashOperations, createLocalBashOperations } from "./tools/bash.js";
+import type { BashOperations } from "./tools/bash.js";
 import { DEFAULT_MAX_BYTES, truncateTail } from "./tools/truncate.js";
 
 // ============================================================================
@@ -43,23 +43,6 @@ export interface BashResult {
 // Implementation
 // ============================================================================
 
-/**
- * Execute a bash command with optional streaming and cancellation support.
- *
- * Uses the same local BashOperations backend as createBashTool() so interactive
- * user bash and tool-invoked bash share the same process spawning behavior.
- * Sanitization, newline normalization, temp-file capture, and truncation still
- * happen in executeBashWithOperations(), so reusing the local backend does not
- * change output processing behavior.
- *
- * @param command - The bash command to execute
- * @param options - Optional streaming callback and abort signal
- * @returns Promise resolving to execution result
- */
-export function executeBash(command: string, options?: BashExecutorOptions): Promise<BashResult> {
-	return executeBashWithOperations(command, process.cwd(), createLocalBashOperations(), options);
-}
-
 /**
  * Execute a bash command using custom BashOperations.
  * Used for remote execution (SSH, containers, etc.).