@vellumai/assistant 0.3.28 → 0.4.0

package/src/__tests__/session-slash-known.test.ts

@@ -30,6 +30,8 @@ mock.module('../providers/registry.js', () => ({
 
 mock.module('../config/loader.js', () => ({
   getConfig: () => ({
+    ui: {},
+    
     provider: 'mock-provider',
     maxTokens: 4096,
     thinking: false,
@@ -62,6 +64,13 @@ mock.module('../security/secret-allowlist.js', () => ({
 }));
 
 mock.module('../memory/conversation-store.js', () => ({
+  getConversationThreadType: () => 'default',
+  setConversationOriginChannelIfUnset: () => {},
+  updateConversationContextWindow: () => {},
+  deleteMessageById: () => {},
+  provenanceFromGuardianContext: () => ({ source: 'user', guardianContext: undefined }),
+  getConversationOriginInterface: () => null,
+  getConversationOriginChannel: () => null,
   getMessages: () => [],
   getConversation: () => ({
     id: 'conv-1',
@@ -165,6 +174,20 @@ mock.module('../agent/loop.js', () => ({
     }
   },
 }));
+mock.module('../memory/canonical-guardian-store.js', () => ({
+  listPendingCanonicalGuardianRequestsByDestinationConversation: () => [],
+  listCanonicalGuardianRequests: () => [],
+  createCanonicalGuardianRequest: () => ({ id: 'mock-cg-id', code: 'MOCK', status: 'pending' }),
+  getCanonicalGuardianRequest: () => null,
+  getCanonicalGuardianRequestByCode: () => null,
+  updateCanonicalGuardianRequest: () => {},
+  resolveCanonicalGuardianRequest: () => {},
+  createCanonicalGuardianDelivery: () => ({ id: 'mock-cgd-id' }),
+  listCanonicalGuardianDeliveries: () => [],
+  listPendingCanonicalGuardianRequestsByDestinationChat: () => [],
+  updateCanonicalGuardianDelivery: () => {},
+  generateCanonicalRequestCode: () => 'MOCK-CODE',
+}));
 
 // ---------------------------------------------------------------------------
 // Import Session AFTER mocks are registered.

package/src/__tests__/session-slash-queue.test.ts

@@ -30,6 +30,8 @@ mock.module('../providers/registry.js', () => ({
 
 mock.module('../config/loader.js', () => ({
   getConfig: () => ({
+    ui: {},
+    
     provider: 'mock-provider',
     maxTokens: 4096,
     thinking: false,
@@ -62,6 +64,13 @@ mock.module('../security/secret-allowlist.js', () => ({
 }));
 
 mock.module('../memory/conversation-store.js', () => ({
+  getConversationThreadType: () => 'default',
+  setConversationOriginChannelIfUnset: () => {},
+  updateConversationContextWindow: () => {},
+  deleteMessageById: () => {},
+  provenanceFromGuardianContext: () => ({ source: 'user', guardianContext: undefined }),
+  getConversationOriginInterface: () => null,
+  getConversationOriginChannel: () => null,
   getMessages: () => [],
   getConversation: () => ({
     id: 'conv-1',
@@ -165,6 +174,20 @@ mock.module('../agent/loop.js', () => ({
     }
   },
 }));
+mock.module('../memory/canonical-guardian-store.js', () => ({
+  listPendingCanonicalGuardianRequestsByDestinationConversation: () => [],
+  listCanonicalGuardianRequests: () => [],
+  createCanonicalGuardianRequest: () => ({ id: 'mock-cg-id', code: 'MOCK', status: 'pending' }),
+  getCanonicalGuardianRequest: () => null,
+  getCanonicalGuardianRequestByCode: () => null,
+  updateCanonicalGuardianRequest: () => {},
+  resolveCanonicalGuardianRequest: () => {},
+  createCanonicalGuardianDelivery: () => ({ id: 'mock-cgd-id' }),
+  listCanonicalGuardianDeliveries: () => [],
+  listPendingCanonicalGuardianRequestsByDestinationChat: () => [],
+  updateCanonicalGuardianDelivery: () => {},
+  generateCanonicalRequestCode: () => 'MOCK-CODE',
+}));
 
 // ---------------------------------------------------------------------------
 // Import Session AFTER mocks are registered.

package/src/__tests__/session-slash-unknown.test.ts

@@ -30,6 +30,8 @@ mock.module('../providers/registry.js', () => ({
 
 mock.module('../config/loader.js', () => ({
   getConfig: () => ({
+    ui: {},
+    
     provider: 'mock-provider',
     maxTokens: 4096,
     thinking: false,
@@ -64,6 +66,13 @@ mock.module('../security/secret-allowlist.js', () => ({
 const addMessageCalls: Array<{ convId: string; role: string; content: string }> = [];
 
 mock.module('../memory/conversation-store.js', () => ({
+  getConversationThreadType: () => 'default',
+  setConversationOriginChannelIfUnset: () => {},
+  updateConversationContextWindow: () => {},
+  deleteMessageById: () => {},
+  provenanceFromGuardianContext: () => ({ source: 'user', guardianContext: undefined }),
+  getConversationOriginInterface: () => null,
+  getConversationOriginChannel: () => null,
   getMessages: () => [],
   getConversation: () => ({
     id: 'conv-1',
@@ -177,6 +186,20 @@ mock.module('../agent/loop.js', () => ({
     }
   },
 }));
+mock.module('../memory/canonical-guardian-store.js', () => ({
+  listPendingCanonicalGuardianRequestsByDestinationConversation: () => [],
+  listCanonicalGuardianRequests: () => [],
+  createCanonicalGuardianRequest: () => ({ id: 'mock-cg-id', code: 'MOCK', status: 'pending' }),
+  getCanonicalGuardianRequest: () => null,
+  getCanonicalGuardianRequestByCode: () => null,
+  updateCanonicalGuardianRequest: () => {},
+  resolveCanonicalGuardianRequest: () => {},
+  createCanonicalGuardianDelivery: () => ({ id: 'mock-cgd-id' }),
+  listCanonicalGuardianDeliveries: () => [],
+  listPendingCanonicalGuardianRequestsByDestinationChat: () => [],
+  updateCanonicalGuardianDelivery: () => {},
+  generateCanonicalRequestCode: () => 'MOCK-CODE',
+}));
 
 // ---------------------------------------------------------------------------
 // Import Session AFTER mocks are registered.

package/src/__tests__/session-workspace-cache-state.test.ts

@@ -23,6 +23,8 @@ mock.module('../providers/registry.js', () => ({
 
 mock.module('../config/loader.js', () => ({
   getConfig: () => ({
+    ui: {},
+    
     provider: 'mock-provider',
     maxTokens: 4096,
     thinking: false,
@@ -76,6 +78,11 @@ mock.module('../security/secret-allowlist.js', () => ({
 }));
 
 mock.module('../memory/conversation-store.js', () => ({
+  getConversationThreadType: () => 'default',
+  setConversationOriginChannelIfUnset: () => {},
+  provenanceFromGuardianContext: () => ({ source: 'user', guardianContext: undefined }),
+  getConversationOriginInterface: () => null,
+  getConversationOriginChannel: () => null,
   getMessages: () => [],
   getConversation: () => ({
     id: 'conv-1',

package/src/__tests__/session-workspace-injection.test.ts

@@ -37,6 +37,8 @@ mock.module('../providers/registry.js', () => ({
 
 mock.module('../config/loader.js', () => ({
   getConfig: () => ({
+    ui: {},
+    
     provider: 'mock-provider',
     maxTokens: 4096,
     thinking: false,
@@ -67,6 +69,11 @@ mock.module('../permissions/trust-store.js', () => ({ addRule: () => {}, findHig
 mock.module('../security/secret-allowlist.js', () => ({ resetAllowlist: () => {} }));
 
 mock.module('../memory/conversation-store.js', () => ({
+  getConversationThreadType: () => 'default',
+  setConversationOriginChannelIfUnset: () => {},
+  provenanceFromGuardianContext: () => ({ source: 'user', guardianContext: undefined }),
+  getConversationOriginInterface: () => null,
+  getConversationOriginChannel: () => null,
   getMessages: () => [],
   getConversation: () => ({
     id: 'conv-1', contextSummary: null, contextCompactedMessageCount: 0,
@@ -134,6 +141,20 @@ mock.module('../agent/loop.js', () => ({
     }
   },
 }));
+mock.module('../memory/canonical-guardian-store.js', () => ({
+  listPendingCanonicalGuardianRequestsByDestinationConversation: () => [],
+  listCanonicalGuardianRequests: () => [],
+  createCanonicalGuardianRequest: () => ({ id: 'mock-cg-id', code: 'MOCK', status: 'pending' }),
+  getCanonicalGuardianRequest: () => null,
+  getCanonicalGuardianRequestByCode: () => null,
+  updateCanonicalGuardianRequest: () => {},
+  resolveCanonicalGuardianRequest: () => {},
+  createCanonicalGuardianDelivery: () => ({ id: 'mock-cgd-id' }),
+  listCanonicalGuardianDeliveries: () => [],
+  listPendingCanonicalGuardianRequestsByDestinationChat: () => [],
+  updateCanonicalGuardianDelivery: () => {},
+  generateCanonicalRequestCode: () => 'MOCK-CODE',
+}));
 
 import { Session } from '../daemon/session.js';
 

package/src/__tests__/session-workspace-tool-tracking.test.ts

@@ -36,6 +36,8 @@ mock.module('../providers/registry.js', () => ({
 
 mock.module('../config/loader.js', () => ({
   getConfig: () => ({
+    ui: {},
+    
     provider: 'mock-provider',
     maxTokens: 4096,
     thinking: false,
@@ -66,6 +68,11 @@ mock.module('../permissions/trust-store.js', () => ({ addRule: () => {}, findHig
 mock.module('../security/secret-allowlist.js', () => ({ resetAllowlist: () => {} }));
 
 mock.module('../memory/conversation-store.js', () => ({
+  getConversationThreadType: () => 'default',
+  setConversationOriginChannelIfUnset: () => {},
+  provenanceFromGuardianContext: () => ({ source: 'user', guardianContext: undefined }),
+  getConversationOriginInterface: () => null,
+  getConversationOriginChannel: () => null,
   getMessages: () => [],
   getConversation: () => ({
     id: 'conv-1', contextSummary: null, contextCompactedMessageCount: 0,
@@ -124,6 +131,20 @@ mock.module('../agent/loop.js', () => ({
     }
   },
 }));
+mock.module('../memory/canonical-guardian-store.js', () => ({
+  listPendingCanonicalGuardianRequestsByDestinationConversation: () => [],
+  listCanonicalGuardianRequests: () => [],
+  createCanonicalGuardianRequest: () => ({ id: 'mock-cg-id', code: 'MOCK', status: 'pending' }),
+  getCanonicalGuardianRequest: () => null,
+  getCanonicalGuardianRequestByCode: () => null,
+  updateCanonicalGuardianRequest: () => {},
+  resolveCanonicalGuardianRequest: () => {},
+  createCanonicalGuardianDelivery: () => ({ id: 'mock-cgd-id' }),
+  listCanonicalGuardianDeliveries: () => [],
+  listPendingCanonicalGuardianRequestsByDestinationChat: () => [],
+  updateCanonicalGuardianDelivery: () => {},
+  generateCanonicalRequestCode: () => 'MOCK-CODE',
+}));
 
 import { Session } from '../daemon/session.js';
 

package/src/__tests__/shell-credential-ref.test.ts

@@ -20,6 +20,8 @@ mock.module('../tools/registry.js', () => ({
 // Mock config
 mock.module('../config/loader.js', () => ({
   getConfig: () => ({
+    ui: {},
+    
     timeouts: { shellDefaultTimeoutSec: 120, shellMaxTimeoutSec: 600 },
     sandbox: { enabled: false, backend: 'none' },
     secretDetection: { allowOneTimeSend: false },

package/src/__tests__/skill-feature-flags-integration.test.ts

@@ -20,7 +20,7 @@ let currentConfig: Record<string, unknown> = {
 };
 
 const DECLARED_SKILL_ID = 'hatch-new-assistant';
-const DECLARED_LEGACY_KEY = 'skills.hatch-new-assistant.enabled';
+const DECLARED_FLAG_KEY = 'feature_flags.hatch-new-assistant.enabled';
 
 mock.module('../util/platform.js', () => ({
   getRootDir: () => TEST_DIR,
@@ -121,7 +121,7 @@ describe('buildSystemPrompt feature flag filtering', () => {
 
     currentConfig = {
       sandbox: { enabled: false, backend: 'native' },
-      featureFlags: { [DECLARED_LEGACY_KEY]: false },
+      assistantFeatureFlagValues: { [DECLARED_FLAG_KEY]: false },
     };
 
     const result = buildSystemPrompt();
@@ -137,7 +137,7 @@ describe('buildSystemPrompt feature flag filtering', () => {
 
     currentConfig = {
       sandbox: { enabled: false, backend: 'native' },
-      featureFlags: {},
+      assistantFeatureFlagValues: {},
     };
 
     const result = buildSystemPrompt();
@@ -152,9 +152,9 @@ describe('buildSystemPrompt feature flag filtering', () => {
 
     currentConfig = {
       sandbox: { enabled: false, backend: 'native' },
-      featureFlags: {
-        [DECLARED_LEGACY_KEY]: false,
-        'skills.twitter.enabled': false,
+      assistantFeatureFlagValues: {
+        [DECLARED_FLAG_KEY]: false,
+        'feature_flags.twitter.enabled': false,
       },
     };
 

package/src/__tests__/skill-load-feature-flag.test.ts

@@ -15,7 +15,7 @@ let currentConfig: Record<string, unknown> = {
 };
 
 const DECLARED_SKILL_ID = 'hatch-new-assistant';
-const DECLARED_LEGACY_KEY = 'skills.hatch-new-assistant.enabled';
+const DECLARED_FLAG_KEY = 'feature_flags.hatch-new-assistant.enabled';
 
 const platformOverrides: Record<string, (...args: unknown[]) => unknown> = {
   getRootDir: () => TEST_DIR,
@@ -54,6 +54,7 @@ mock.module('../util/logger.js', () => ({
   getLogger: () => new Proxy({} as Record<string, unknown>, {
     get: () => () => {},
   }),
+  isDebug: () => false,
 }));
 
 mock.module('../config/loader.js', () => ({
@@ -101,7 +102,7 @@ describe('skill_load feature flag enforcement', () => {
     writeFileSync(join(TEST_DIR, 'skills', 'SKILLS.md'), `- ${DECLARED_SKILL_ID}\n`);
 
     currentConfig = {
-      featureFlags: { [DECLARED_LEGACY_KEY]: false },
+      assistantFeatureFlagValues: { [DECLARED_FLAG_KEY]: false },
     };
 
     const result = await executeSkillLoad({ skill: DECLARED_SKILL_ID });
@@ -116,7 +117,7 @@ describe('skill_load feature flag enforcement', () => {
     writeFileSync(join(TEST_DIR, 'skills', 'SKILLS.md'), `- ${DECLARED_SKILL_ID}\n`);
 
     currentConfig = {
-      featureFlags: { [DECLARED_LEGACY_KEY]: true },
+      assistantFeatureFlagValues: { [DECLARED_FLAG_KEY]: true },
     };
 
     const result = await executeSkillLoad({ skill: DECLARED_SKILL_ID });
@@ -130,7 +131,7 @@ describe('skill_load feature flag enforcement', () => {
     writeFileSync(join(TEST_DIR, 'skills', 'SKILLS.md'), `- ${DECLARED_SKILL_ID}\n`);
 
     currentConfig = {
-      featureFlags: {},
+      assistantFeatureFlagValues: {},
     };
 
     const result = await executeSkillLoad({ skill: DECLARED_SKILL_ID });

package/src/__tests__/skill-projection-feature-flag.test.ts

@@ -31,10 +31,31 @@ const DECLARED_LEGACY_KEY = 'skills.hatch-new-assistant.enabled';
 
 mock.module('../config/skills.js', () => ({
   loadSkillCatalog: () => mockCatalog,
+  checkSkillRequirements: () => ({ satisfied: true, missing: [] }),
 }));
 
 mock.module('../config/loader.js', () => ({
   getConfig: () => currentConfig,
+  loadConfig: () => currentConfig,
+  invalidateConfigCache: () => {},
+}));
+
+mock.module('../config/assistant-feature-flags.js', () => ({
+  isAssistantFeatureFlagEnabled: (key: string, config: Record<string, unknown>) => {
+    const vals = (config as { assistantFeatureFlagValues?: Record<string, boolean> }).assistantFeatureFlagValues;
+    if (vals && typeof vals[key] === 'boolean') return vals[key];
+    // Check legacy featureFlags too
+    const legacy = (config as { featureFlags?: Record<string, boolean> }).featureFlags;
+    if (legacy && typeof legacy[key] === 'boolean') return legacy[key];
+    return true; // default enabled
+  },
+  loadDefaultsRegistry: () => ({}),
+  getAssistantFeatureFlagDefaults: () => ({}),
+  _resetDefaultsCache: () => {},
+}));
+
+mock.module('../config/skill-state.js', () => ({
+  skillFlagKey: (skillId: string) => `skills.${skillId}.enabled`,
 }));
 
 mock.module('../skills/active-skill-tools.js', () => {
@@ -184,6 +205,7 @@ mock.module('../util/logger.js', () => ({
     debug: () => {},
     error: () => {},
   }),
+  isDebug: () => false,
 }));
 
 // ---------------------------------------------------------------------------

package/src/__tests__/skills.test.ts

@@ -518,14 +518,14 @@ describe('bundled browser skill', () => {
     expect(browserSkill!.disableModelInvocation).toBe(false);
   });
 
-  test('browser skill has a valid tool manifest with 10 tools', () => {
+  test('browser skill has a valid tool manifest with 14 tools', () => {
     const catalog = loadSkillCatalog();
     const browserSkill = catalog.find((s) => s.id === 'browser');
     expect(browserSkill).toBeDefined();
     expect(browserSkill!.toolManifest).toBeDefined();
     expect(browserSkill!.toolManifest!.present).toBe(true);
     expect(browserSkill!.toolManifest!.valid).toBe(true);
-    expect(browserSkill!.toolManifest!.toolCount).toBe(10);
+    expect(browserSkill!.toolManifest!.toolCount).toBe(14);
     expect(browserSkill!.toolManifest!.toolNames).toEqual([
       'browser_navigate',
       'browser_snapshot',
@@ -534,8 +534,12 @@ describe('bundled browser skill', () => {
       'browser_click',
       'browser_type',
       'browser_press_key',
+      'browser_scroll',
+      'browser_select_option',
+      'browser_hover',
       'browser_wait_for',
       'browser_extract',
+      'browser_wait_for_download',
       'browser_fill_credential',
     ]);
   });
@@ -618,10 +622,10 @@ describe('ingress-dependent setup skills declare public-ingress', () => {
     expect(includes).toContain('public-ingress');
   });
 
-  test('slack-oauth-setup includes public-ingress', () => {
+  test('slack-oauth-setup includes browser', () => {
     const includes = readSkillIncludes(VELLUM_SKILLS_DIR, 'slack-oauth-setup');
     expect(includes).toBeDefined();
-    expect(includes).toContain('public-ingress');
+    expect(includes).toContain('browser');
   });
 });
 

package/src/__tests__/slack-channel-config.test.ts

@@ -7,7 +7,9 @@ import { afterAll, beforeEach, describe, expect, mock, test } from 'bun:test';
 const testDir = mkdtempSync(join(tmpdir(), 'slack-channel-cfg-test-'));
 
 mock.module('../config/loader.js', () => ({
-  getConfig: () => ({}),
+  getConfig: () => ({
+    ui: {},
+    }),
   loadConfig: () => ({}),
   loadRawConfig: () => ({}),
   saveRawConfig: () => {},

package/src/__tests__/subagent-tools.test.ts

@@ -6,6 +6,25 @@ import { describe, expect, mock, test } from 'bun:test';
 // Mock conversation-store before importing tool executors that depend on it.
 let mockGetMessages: (conversationId: string) => Array<{ role: string; content: string }> | null = () => null;
 mock.module('../memory/conversation-store.js', () => ({
+  getConversationThreadType: () => 'default',
+  setConversationOriginChannelIfUnset: () => {},
+  updateConversationContextWindow: () => {},
+  deleteMessageById: () => {},
+  updateConversationTitle: () => {},
+  updateConversationUsage: () => {},
+  addMessage: () => ({ id: 'mock-msg-id' }),
+  getConversation: () => ({
+    id: 'conv-1',
+    contextSummary: null,
+    contextCompactedMessageCount: 0,
+    totalInputTokens: 0,
+    totalOutputTokens: 0,
+    totalEstimatedCost: 0,
+    title: null,
+  }),
+  provenanceFromGuardianContext: () => ({ source: 'user', guardianContext: undefined }),
+  getConversationOriginInterface: () => null,
+  getConversationOriginChannel: () => null,
   getMessages: (conversationId: string) => mockGetMessages(conversationId),
   createConversation: () => ({ id: 'mock-conv' }),
 }));

package/src/__tests__/swarm-recursion.test.ts

@@ -30,6 +30,8 @@ mock.module('../util/logger.js', () => ({
 
 mock.module('../config/loader.js', () => ({
   getConfig: () => ({
+    ui: {},
+    
     provider: 'anthropic',
     providerOrder: ['anthropic'],
     apiKeys: { anthropic: 'test-key' },

package/src/__tests__/swarm-session-integration.test.ts

@@ -21,6 +21,8 @@ let hasApiKey = true;
 
 mock.module('../config/loader.js', () => ({
   getConfig: () => ({
+    ui: {},
+    
     provider: 'anthropic',
     providerOrder: ['anthropic'],
     apiKeys: { anthropic: hasApiKey ? 'test-key' : '' },

package/src/__tests__/swarm-tool.test.ts

@@ -12,6 +12,8 @@ mock.module('../util/logger.js', () => ({
 
 mock.module('../config/loader.js', () => ({
   getConfig: () => ({
+    ui: {},
+    
     provider: 'anthropic',
     providerOrder: ['anthropic'],
     apiKeys: { anthropic: 'test-key' },

package/src/__tests__/system-prompt.test.ts

@@ -49,6 +49,8 @@ mock.module('../util/logger.js', () => ({
 
 mock.module('../config/loader.js', () => ({
   getConfig: () => ({
+    ui: {},
+    
     sandbox: { enabled: true },
   }),
 }));
@@ -203,7 +205,7 @@ describe('buildSystemPrompt', () => {
 
   test('config section uses workspace directory from platform util', () => {
     const result = buildSystemPrompt();
-    expect(result).toContain(`Your workspace is mounted at \`/workspace/\` inside the Docker sandbox (host path: \`${TEST_DIR}/\`)`);
+    expect(result).toContain(`Your configuration directory is \`${TEST_DIR}/\`.`);
   });
 
   test('omits user skills from catalog when none are configured', () => {

package/src/__tests__/task-compiler.test.ts

@@ -28,7 +28,9 @@ mock.module('../util/logger.js', () => ({
 }));
 
 mock.module('../config/loader.js', () => ({
-  getConfig: () => ({ memory: {} }),
+  getConfig: () => ({
+    ui: {},
+     memory: {} }),
 }));
 
 mock.module('./indexer.js', () => ({

package/src/__tests__/task-management-tools.test.ts

@@ -27,7 +27,9 @@ mock.module('../util/logger.js', () => ({
 }));
 
 mock.module('../config/loader.js', () => ({
-  getConfig: () => ({ memory: {} }),
+  getConfig: () => ({
+    ui: {},
+     memory: {} }),
 }));
 
 mock.module('../tools/registry.js', () => ({

package/src/__tests__/task-tools.test.ts

@@ -27,7 +27,9 @@ mock.module('../util/logger.js', () => ({
 }));
 
 mock.module('../config/loader.js', () => ({
-  getConfig: () => ({ memory: {} }),
+  getConfig: () => ({
+    ui: {},
+     memory: {} }),
 }));
 
 mock.module('./indexer.js', () => ({

package/src/__tests__/terminal-sandbox.test.ts

@@ -177,20 +177,21 @@ describe('terminal sandbox — macOS sandbox-exec behavior', () => {
     expect(result.args.slice(2)).toEqual(['bash', '-c', '--', 'echo hello']);
   });
 
-  test('throws ToolError for working dirs with SBPL metacharacters', () => {
-    expect(() => wrapCommand('pwd', '/tmp/bad"dir', nativeConfig())).toThrow(ToolError);
-    expect(() => wrapCommand('pwd', '/tmp/bad(dir', nativeConfig())).toThrow(ToolError);
-    expect(() => wrapCommand('pwd', '/tmp/bad;dir', nativeConfig())).toThrow(ToolError);
+  test('escapes SBPL metacharacters in working dirs instead of throwing', () => {
+    // The sandbox now escapes metacharacters rather than rejecting them
+    const result1 = wrapCommand('pwd', '/tmp/bad"dir', nativeConfig());
+    expect(result1.sandboxed).toBe(true);
+    const result2 = wrapCommand('pwd', '/tmp/bad(dir', nativeConfig());
+    expect(result2.sandboxed).toBe(true);
+    const result3 = wrapCommand('pwd', '/tmp/bad;dir', nativeConfig());
+    expect(result3.sandboxed).toBe(true);
   });
 
-  test('SBPL metacharacter error mentions unsafe characters', () => {
-    try {
-      wrapCommand('pwd', '/tmp/bad"dir', nativeConfig());
-      throw new Error('should have thrown');
-    } catch (err) {
-      expect(err).toBeInstanceOf(ToolError);
-      expect((err as Error).message).toContain('SBPL metacharacters');
-    }
+  test('SBPL profile escapes metacharacters in working dir path', () => {
+    // Verify the sandbox profile is written with escaped chars
+    wrapCommand('pwd', '/tmp/bad"dir', nativeConfig());
+    const profileContent = writeFileSyncMock.mock.calls[0]?.[1] as string;
+    expect(profileContent).toContain('bad\\"dir');
   });
 });
 

package/src/__tests__/terminal-tools.test.ts

@@ -34,6 +34,8 @@ mock.module('../util/platform.js', () => ({
 
 mock.module('../config/loader.js', () => ({
   getConfig: () => ({
+    ui: {},
+    
     timeouts: { shellDefaultTimeoutSec: 120, shellMaxTimeoutSec: 600 },
     sandbox: {
       enabled: false,