@tritard/waterbrother 0.16.0 → 0.16.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tritard/waterbrother",
-  "version": "0.16.0",
+  "version": "0.16.2",
   "description": "Waterbrother: bring-your-own-model coding CLI with local tools, sessions, operator modes, and approval controls",
   "type": "module",
   "bin": {

package/src/security.js

@@ -60,9 +60,16 @@ function checkFilePath(filePath, cwd) {
     }
   }
 
-  // Home directory protection
+  // Home directory protection — only block writes to home dir root itself
+  // Allow writes to subdirectories (Desktop/my-project, Documents/app, etc.)
   if (HOME_DIR && cwdNorm === HOME_DIR) {
-    reasons.push({ rule: "home-dir-write", message: "Writing files in home directory — use a project directory instead" });
+    const targetNorm = normalized.startsWith("/") || /^[a-zA-Z]:/.test(normalized)
+      ? normalized
+      : `${cwdNorm}/${normalized}`;
+    const isInSubdir = targetNorm.startsWith(HOME_DIR + "/") && targetNorm.split("/").length > HOME_DIR.split("/").length + 1;
+    if (!isInSubdir) {
+      reasons.push({ rule: "home-dir-write", message: "Writing files in home directory — use a project directory instead" });
+    }
   }
 
   // Self-modification

package/src/tools.js

@@ -1340,6 +1340,13 @@ ${clipped}`;
       const { classifyToolCall } = await import("./security.js");
       const classification = classifyToolCall(toolName, args, { cwd });
       if (!classification.allowed) {
+        // Visible warning to user — don't fail silently
+        const reason = classification.reasons[0];
+        if (reason?.rule === "home-dir-write") {
+          output.write(`\n⚠ Can't write files here — you're in your home directory.\n  Create a project folder first: mkdir my-project && cd my-project\n\n`);
+        } else {
+          output.write(`\n⚠ Blocked: ${classification.message}\n\n`);
+        }
         return { approved: false, note: `Security: ${classification.message}`, policyBlocked: true };
       }
     } catch {}