Wires session_env_vars.py into agent_tools._build_subprocess_env so that
variables set via the session registry now reach spawned children, matching
utils/shell/bashProvider.ts:249. Per-call extra_env still wins so explicit
tool overrides take precedence over session defaults.
- Add 26 tests covering _resolve_path, _ensure_shell_allowed, and
_is_sensitive_env_var across path traversal, destructive command
blocking, and secret-name detection.
- Fix bug in _ensure_shell_allowed: regex patterns for chmod -R and
chown -R used uppercase -R but the command is lowered before matching,
so these patterns never matched. Changed to lowercase -r.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: abdoelsayed2016 <27821589+abdoelsayed2016@users.noreply.github.com>
Abdelrahman Abdallah