- switch SDK/CLI tool selection to name-based allowlists - apply allowlists across built-in, extension, and SDK tools - remove ambient process.cwd defaults from core tooling and resource helpers - update tests, examples, and TUI callers for explicit cwd plumbing - add regression coverage for extension tool filtering closes #3452 closes #2835
* fix(coding-agent): handle reftable footer branch detection - Fall back to git commands when HEAD contains refs/heads/.invalid - Treat unresolved .invalid as detached instead of showing literal .invalid - Watch reftable directory for branch change updates - Resolve commonGitDir for worktree setups fixes #2123 * fix(coding-agent): improve reftable branch detection and reduce false-positive rerenders - Re-resolve branch on watcher events instead of invalidating cache; only notify listeners when the branch string actually changed - Add regression tests: regular repo fast path (no spawnSync), nested cwd upward walk, unchanged-branch reftable churn suppression