@tritard/waterbrother 0.16.0 → 0.16.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tritard/waterbrother",
-  "version": "0.16.0",
+  "version": "0.16.1",
   "description": "Waterbrother: bring-your-own-model coding CLI with local tools, sessions, operator modes, and approval controls",
   "type": "module",
   "bin": {

package/src/tools.js

@@ -1340,6 +1340,13 @@ ${clipped}`;
       const { classifyToolCall } = await import("./security.js");
       const classification = classifyToolCall(toolName, args, { cwd });
       if (!classification.allowed) {
+        // Visible warning to user — don't fail silently
+        const reason = classification.reasons[0];
+        if (reason?.rule === "home-dir-write") {
+          output.write(`\n⚠ Can't write files here — you're in your home directory.\n  Create a project folder first: mkdir my-project && cd my-project\n\n`);
+        } else {
+          output.write(`\n⚠ Blocked: ${classification.message}\n\n`);
+        }
         return { approved: false, note: `Security: ${classification.message}`, policyBlocked: true };
       }
     } catch {}