@tritard/waterbrother 0.8.8 → 0.8.9

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tritard/waterbrother",
-  "version": "0.8.8",
+  "version": "0.8.9",
   "description": "Waterbrother: Grok-powered coding CLI with local tools, sessions, operator modes, and approval controls",
   "type": "module",
   "bin": {

package/src/cli.js

@@ -1687,7 +1687,16 @@ function extractExplicitWriteRoots(line, cwd) {
   if (!/\b(create|make|build|write|save|generate|scaffold|edit|update|rewrite|delete|remove|move|rename)\b/i.test(text)) {
     return [];
   }
-  return extractExplicitReadOnlyRoots(text, cwd);
+  const roots = extractExplicitReadOnlyRoots(text, cwd);
+  const desktopMatch = text.match(/\b(?:in|to|under)\s+(\/[^\s]+)\s+on\s+desktop\b/i);
+  if (desktopMatch) {
+    const home = process.env.HOME || process.env.USERPROFILE || "";
+    const relative = String(desktopMatch[1] || "").replace(/^\/+/, "");
+    if (home && relative) {
+      roots.push(path.join(home, "Desktop", relative));
+    }
+  }
+  return [...new Set(roots)];
 }
 
 function maybeRewriteExplicitInspectionPrompt(promptText, readOnlyRoots = []) {

package/src/tools.js

@@ -1039,6 +1039,16 @@ export function createToolRuntime({
 
   function contractAllows(toolName, args = {}) {
     if (!currentTurn.contract) return { ok: !toolRequiresContract(toolName, args), reason: "No active contract" };
+    if ((toolName === "write_file" || toolName === "replace_in_file" || toolName === "make_directory" || toolName === "delete_path") && args.path) {
+      try {
+        resolveSandboxPath(cwd, args.path, allowOutsideCwd, {
+          allowedWriteRoots: getCurrentWriteRoots()
+        });
+      } catch {
+        const touchedPaths = getTouchedPathsForTool(toolName, args);
+        return { ok: false, reason: `Action outside declared contract scope: ${touchedPaths.join(", ")}` };
+      }
+    }
     const touchedPaths = getTouchedPathsForTool(toolName, args);
     const allowedPaths = normalizePathList([
       ...(Array.isArray(currentTurn.contract.paths) ? currentTurn.contract.paths : []),