@tritard/waterbrother 0.16.59 → 0.16.61

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tritard/waterbrother",
-  "version": "0.16.59",
+  "version": "0.16.61",
   "description": "Waterbrother: bring-your-own-model coding CLI with local tools, sessions, operator modes, and approval controls",
   "type": "module",
   "bin": {

package/src/gateway-state.js

@@ -31,8 +31,11 @@ function normalizeBridgeRequest(parsed = {}) {
     chatId: String(parsed?.chatId || "").trim(),
     userId: String(parsed?.userId || "").trim(),
     username: String(parsed?.username || "").trim(),
+    usernameHandle: String(parsed?.usernameHandle || "").trim(),
+    displayName: String(parsed?.displayName || "").trim(),
     sessionId: String(parsed?.sessionId || "").trim(),
     text: String(parsed?.text || "").trim(),
+    explicitExecution: parsed?.explicitExecution === true,
     runtimeProfile: String(parsed?.runtimeProfile || "").trim(),
     replyToMessageId: Number.isFinite(Number(parsed?.replyToMessageId)) ? Math.floor(Number(parsed.replyToMessageId)) : 0,
     requestedAt: String(parsed?.requestedAt || "").trim(),

package/src/tools.js

@@ -406,6 +406,13 @@ function matchesAnyPattern(value, patterns = []) {
   return uniqueStrings(patterns).some((pattern) => matchesPattern(value, pattern));
 }
 
+function isAncestorPath(candidate, target) {
+  const from = normalizePathPattern(candidate);
+  const to = normalizePathPattern(target);
+  if (!from || !to || from === to) return false;
+  return to.startsWith(`${from}/`);
+}
+
 function extractPatchPaths(patchText) {
   const matches = String(patchText || "").match(/^\+\+\+ b\/(.+)$/gm) || [];
   return uniqueStrings(matches.map((line) => line.replace(/^\+\+\+ b\//, "").trim()).filter((line) => line && line !== "/dev/null"));
@@ -1091,6 +1098,13 @@ export function createToolRuntime({
       ...getContractWriteRoots(),
       ...getCurrentWriteRoots()
     ]);
+    if (
+      toolName === "make_directory"
+      && touchedPaths.length > 0
+      && touchedPaths.every((item) => allowedPaths.some((allowed) => isAncestorPath(item, allowed)))
+    ) {
+      return { ok: true, reason: "Directory is a parent of declared contract paths" };
+    }
     if (touchedPaths.length > 0 && !touchedPaths.every((item) => matchesAnyPattern(item, allowedPaths))) {
       return { ok: false, reason: `Action outside declared contract scope: ${touchedPaths.join(", ")}` };
     }