@jossuealcala/madre 0.2.0 → 0.2.2

package/CHANGELOG.md

@@ -2,6 +2,34 @@
 
 Todas las versiones publicadas de `@jossuealcala/madre`. Fechas en ISO.
 
+## 0.2.2 · 2026-09-18
+
+### Corrección crítica
+- Claude Code negaba toda escritura en `#2 CREATE` y `#3 CONTROL`: las reglas `Write(/ruta/**)` se leían como relativas al proyecto. Ahora van como `//ruta/**`, la forma absoluta de Claude Code; las zonas prohibidas siguen bloqueadas antes del turno.
+
+Reproducido con el CLI real en un repositorio temporal: con una barra el archivo quedaba bloqueado sin pregunta; con dos se escribe y `.env` sigue bloqueado. Sin otros cambios respecto a 0.2.1.
+
+## 0.2.1 · 2026-09-18 · beta pública
+
+Primera versión pensada para manos ajenas. Requiere Node 22.5 o superior.
+
+### Monitoreo
+- Sentinel de errores en MU/TH/UR: los fallos que ninguna condición conocida explica y las caídas del proceso se guardan como reportes redactados (sin rutas, nombres, correos ni claves), con `REPORT ON GITHUB ↗` prellenado y el botón `✎ FEEDBACK`. Con el colector del autor configurado por defecto, cada reporte tiene `SEND` y existe `AUTO-REPORT`, apagado hasta que el humano lo encienda. `docs/report-collector/` trae el Worker que convierte reportes en issues.
+
+### Sala
+- Copiar y responder al final de cada respuesta: el primero lleva el texto al portapapeles; el segundo elige qué agente responde y deja la cita al frente del compositor para la directiva del humano.
+- Modo claro sin resplandor: la UX conserva sus colores y pierde el brillo de tubo; MU/TH/UR y NOSTROMO mantienen sus pantallas.
+- Un archivista que falla se sienta media hora y el siguiente lote lo toma otro agente; la línea de fallo dice una sola frase y guarda el registro completo en el tooltip.
+- MADRE no repite el mismo juego de frases dos veces seguidas al tocar su corazón.
+
+### Verdad y seguridad
+- La frase de arranque ya no dice que nada sale de la máquina: los agentes hablan con sus proveedores. El README explica el modelo de amenazas en corto, incluida la deuda de CONTROL con Codex (zonas prohibidas revertidas después del turno).
+- El reloj de escalación mantiene vivo el proceso mientras un plan espera al humano; el apagado resuelve las peticiones pendientes. En Node 22 esto cortaba la suite a la mitad.
+
+### Proyecto
+- CI en GitHub Actions: Ubuntu y macOS, Node 22 y 24, con pruebas, empaquetado e instalación del tarball.
+- Plantillas de issues, `SECURITY.md` y `CONTRIBUTING.md`.
+
 ## 0.2.0 · 2026-09-17
 
 Requiere Node 22.5 o superior (antes 20): la memoria de la sala corre sobre `node:sqlite`.

package/CONTRIBUTING.md

@@ -0,0 +1,38 @@
+# Contributing · CREW MANUAL
+
+MADRE is one local room where several AI coding CLIs work on a project together. Changes land through pull requests against `main`; CI runs the suite, packs the tarball and installs it on Ubuntu and macOS with Node 22 and 24.
+
+## Before you start
+
+```
+node --version          # ≥ 22.5
+npm test                # 111 tests, no model calls
+npm run pack:check      # packs, installs, exercises the CLI
+node ./bin/madre.mjs doctor --catalog   # what MU/TH/UR already knows
+```
+
+## What a good change looks like
+
+- One idea per commit, in the imperative voice the log already speaks.
+- A test for every behaviour you touch: `test/pulse.test.mjs` for the room and adapters, `test/memory.test.mjs` for memory, NOSTROMO and MOTHER, `test/sentinel.test.mjs` for the sentinel. No test may call a real model.
+- Nothing leaves the machine without the human's say-so. If your change sends anything anywhere, it needs a switch, off by default, and a line in the threat model.
+- Agents never write outside their lease. If you widen what an agent may do, the permission modes and MU/TH/UR's catalog must say so.
+- MU/TH/UR speaks in uppercase and in short sentences; the room speaks like a person. Keep both voices.
+
+## Where things live
+
+```
+bin/madre.mjs        the CLI · start, doctor, setup
+src/server.mjs       HTTP + SSE, settings, modules, sentinel routes
+src/room.mjs         turns, permission modes, plans, CONTROL, handoff, memory hooks
+src/adapters/        one file per CLI: Codex, Claude Code, Gemini CLI, OpenCode
+src/memory.mjs       SQLite index, distilled notes, vectors, recall
+src/distiller.mjs    the archivist's prompt and parsing
+src/mcp/             MADRE's own MCP servers: pulse-image, pulse-memory
+src/mother.mjs       MOTHER's coded channel, CODE000
+src/sentinel-errors.mjs   unknown conditions and crashes → redacted reports
+public/              the room UI; troubleshooting.js is MU/TH/UR's knowledge base
+docs/report-collector/    the Worker that turns sentinel reports into issues
+```
+
+Open questions go to issues with the `question` label. Ideas go through `✎ FEEDBACK` in MU/TH/UR or a plain issue. Be kind to the crew.

package/README.md

@@ -4,6 +4,8 @@
 
 <p align="center">
   <a href="https://www.npmjs.com/package/@jossuealcala/madre"><img alt="npm" src="https://img.shields.io/npm/v/@jossuealcala/madre?style=flat-square&label=npm&color=9bff66&labelColor=050605"></a>
+  <a href="https://github.com/jossuealcacao-exe/madre/actions/workflows/ci.yml"><img alt="CI" src="https://img.shields.io/github/actions/workflow/status/jossuealcacao-exe/madre/ci.yml?style=flat-square&label=CI&color=9bff66&labelColor=050605"></a>
+  <img alt="status" src="https://img.shields.io/badge/status-beta-ffb000?style=flat-square&labelColor=050605">
   <img alt="node" src="https://img.shields.io/badge/node-%E2%89%A5%2022.5-9bff66?style=flat-square&labelColor=050605">
   <img alt="dependencies" src="https://img.shields.io/badge/dependencies-0-9bff66?style=flat-square&labelColor=050605">
   <img alt="license" src="https://img.shields.io/badge/license-Apache--2.0-9bff66?style=flat-square&labelColor=050605">
@@ -11,10 +13,10 @@
 </p>
 
 ```
-MU/TH/UR 6000 · INTERFACE 2037 · MADRE IS READY
+MU/TH/UR 6000 · INTERFACE 2037 · MADRE IS READY · BETA
 
   one local room · four AI coding agents · one shared memory
-  read-only by default · CONTROL when you say so · nothing leaves your machine
+  read-only by default · CONTROL when you say so · no MADRE cloud, no MADRE account: your agents keep their own provider connections
 ```
 
 # MADRE
@@ -216,6 +218,18 @@ La sala ofrece módulos integrados de MADRE y una integración externa opcional.
 
 Instalar el módulo externo AHP+ es la única acción de módulos con la que MADRE escribe en el proyecto. Por eso el botón muestra primero el comando exacto y exige confirmación; la ejecución se transmite en vivo a la sala y queda registrada en el log como `extension.install.started`, `extension.install.output` y `extension.install.finished`. La consulta a los agentes sigue siendo de solo lectura.
 
+## Modelo de amenazas, en corto
+
+- **Qué sale de la máquina.** MADRE no tiene nube ni cuenta: no almacena credenciales, no tiene backend y no envía nada por sí sola. Pero cada agente es una CLI que llama a su proveedor: lo que un agente lee del proyecto puede viajar a OpenAI, Anthropic o Google según su configuración. El único envío propio de MADRE es el del sentinel, y solo si lo activas.
+- **Escritura.** En #1 nadie escribe. En #2 la escritura queda confinada a `.pulse/out/<lease>/` por las reglas de cada CLI. En #3 CONTROL el proyecto entero es escribible salvo `.git/`, `.pulse/` y los `.env`: Claude, Gemini y OpenCode reciben esa prohibición como regla previa; Codex entra con su sandbox `workspace-write`, que no admite excluir rutas dentro del proyecto, así que en su caso la zona prohibida se hace cumplir **después del turno**: MADRE compara con el checkpoint y revierte lo que tocó ahí. Eso protege lo que persiste, no impide que un efecto intermedio ocurra durante el turno. Es deuda conocida: prevención antes que restauración. Mientras tanto, si un `.env` es crítico, no des CONTROL a Codex o baja su MAX MODE.
+- **Memoria.** Todo lo dicho fuera de GHOST queda en `~/.pulse/rooms/<sala>/` y se reinyecta en los prompts de todos los agentes de esa sala. GHOST es la salida para lo que no debe recordarse.
+
+## Sentinel de errores y feedback
+
+MU/TH/UR tiene una sección SENTINEL. Cuando un turno falla con un error que ninguna condición conocida explica, o el proceso de MADRE se cae, el sentinel guarda un reporte en el registro de la sala (`sentinel.report`): el error con rutas, nombres de usuario, correos y claves eliminados, la versión de MADRE y de Node, la plataforma y las versiones de los agentes detectados. Los repetidos se agrupan por huella durante 24 horas.
+
+Nada sale de la máquina por sí solo. Cada reporte tiene `REPORT ON GITHUB ↗`, que abre un issue prellenado en el repositorio para que lo leas antes de publicarlo, y el botón `✎ FEEDBACK` de la cabecera abre uno en blanco con tu entorno. El colector del autor viene configurado por defecto (`https://madre-reports.jossue-alcala-o.workers.dev/v1/reports`; `PULSE_REPORT_URL` o `telemetry.reportUrl` en `~/.pulse/config.json` lo cambian, y un valor vacío lo quita), así que cada reporte tiene `SEND` y existe el interruptor `AUTO-REPORT`, apagado por defecto, que envía los nuevos reportes redactados al colector sin preguntar. `docs/report-collector/` trae un Worker de Cloudflare listo para desplegar que convierte cada reporte en un issue.
+
 ## Recuperación operativa
 
 Si MADRE se detiene a mitad de un turno, al arrancar de nuevo detecta los `agent.started` sin cierre y registra un `message.failed` recuperado para cada uno, así la interfaz no queda en "pensando". Al cerrar con Ctrl+C o `SIGTERM`, MADRE interrumpe los procesos de agente en curso, registra esos turnos como fallidos, entrega los eventos pendientes a las páginas abiertas y termina.
@@ -240,6 +254,8 @@ Cada agente tiene un timeout de 180 s por defecto; la burbuja de espera muestra
 | `PULSE_EMBED_MODEL` | `gemini-embedding-001` | Modelo de embeddings |
 | `PULSE_EMBED_DIMS` | `768` | Dimensiones del vector |
 | `PULSE_MEMORY_TOOLS` | `1` | Servidor MCP `pulse-memory` adjunto a cada turno (`0` lo quita) |
+| `PULSE_REPORT_URL` | colector del autor | Colector del sentinel; vacío lo desactiva |
+| `PULSE_AUTO_REPORT` | `0` | Envía en automático los reportes nuevos al colector (`1`) |
 | `PULSE_MAX_MESSAGE_CHARS` | `20000` | Tamaño máximo de un mensaje |
 | `PULSE_AGENT_TIMEOUT_MS` | `180000` | Timeout de invocación para todos los agentes |
 | `PULSE_<AGENTE>_TIMEOUT_MS` | — | Timeout para un agente concreto |
@@ -274,7 +290,7 @@ Todos los adaptadores corren en su propio grupo de procesos. Si un agente no res
 
 ## Cambios
 
-Ver [CHANGELOG.md](CHANGELOG.md). La versión actual es 0.2.0.
+Ver [CHANGELOG.md](CHANGELOG.md). La versión actual es 0.2.2, beta pública: el núcleo está probado y bajo CI, la superficie sigue cambiando y las decisiones que aún duelen están escritas en el modelo de amenazas. Los problemas se reportan desde MU/TH/UR (`✎ FEEDBACK` o el sentinel) o en [issues](https://github.com/jossuealcacao-exe/madre/issues); la seguridad, según [SECURITY.md](SECURITY.md).
 
 ## Licencia
 

package/SECURITY.md

@@ -0,0 +1,19 @@
+# Security · MU/TH/UR 6000 · PRIORITY ONE
+
+MADRE runs on your machine, talks to no cloud of its own and stores no credentials. Its agents are CLIs you installed; they talk to their providers. The short threat model lives in the README under *Modelo de amenazas, en corto*.
+
+## Reporting
+
+If you find a way for an agent to write outside its lease, to keep CONTROL it should not have, to reach the memory of a room it is not in, or to make MADRE send anything you did not allow, tell the author privately first:
+
+- GitHub: open a **private security advisory** at https://github.com/jossuealcacao-exe/madre/security/advisories/new
+- Or write through https://jossuealcala.com/en/
+
+Please include the MADRE version (`madre doctor --json`), the platform, which agent and mode were involved, and the smallest sequence of messages that reproduces it. A fix ships as a patch release and the advisory is published once it is out. Reports that are about a CLI's own behaviour (Codex, Claude Code, Gemini CLI, OpenCode) are forwarded to that project.
+
+## Known, accepted for the beta
+
+- In `#3 CONTROL`, Codex's `workspace-write` sandbox cannot exclude paths inside the project; `.git/`, `.pulse/` and `.env` files are restored from the checkpoint **after** the turn instead of being blocked before. Do not grant CONTROL to Codex where an intermediate effect on those files would matter.
+- Everything said outside `#0 GHOST` is kept in the room's memory and reaches every agent of that room. Use GHOST for what must not be remembered.
+
+NOBODY DELETES MOTHER'S MEMORY. EVERYTHING ELSE IS FAIR GAME.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jossuealcala/madre",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "MADRE: one local room where the AI coding agents already installed on your machine (Codex, Claude Code, Gemini CLI, OpenCode) work on a project together over the PULSE channel: read-only by default, per-message permission modes up to a checkpointed CONTROL, a shared memory every agent recalls and queries, and NOSTROMO to browse it.",
   "keywords": [
     "ai-agents",
@@ -41,7 +41,9 @@
     "CHANGELOG.md",
     "LICENSE",
     "NOTICE",
-    "docs/madre-banner.svg"
+    "docs/madre-banner.svg",
+    "SECURITY.md",
+    "CONTRIBUTING.md"
   ],
   "bin": {
     "madre": "./bin/madre.mjs",

package/public/app.js

@@ -78,6 +78,7 @@ const state = {
   sessions: {},            // id -> { state, detail } from the last probe
   loginLogs: new Map(),    // id -> streamed sign-in lines
   models: {},              // id -> { models, default, note } from /api/models
+  reports: new Map(),      // id -> sentinel report (unknown conditions and crashes)
   capabilities: {},        // id -> { read, imageIn, write, imageGen, web }
   pending: [],             // attachments uploaded for the next message
   projectRoot: '',
@@ -954,6 +955,7 @@ function renderAssistantMessage(event) {
   bubble.append(renderMarkdown(text));
   if (originalText) bubble.append(ashOriginal(originalText, ashCode));
   if (event.payload.artifacts?.length) bubble.append(artifactTiles(event.payload.artifacts));
+  bubble.append(bubbleActions({ text: originalText ?? text, sender, sequence: event.sequence }));
   col.append(bubble);
   const stamp = el('div', 'stamp');
   stamp.id = `usage-${messageId}`;
@@ -964,6 +966,81 @@ function renderAssistantMessage(event) {
   return node;
 }
 
+// Two quiet icons at the end of a reply: copy it, or answer it through the agent you choose.
+const ICON_COPY = '<svg viewBox="0 0 16 16" aria-hidden="true"><rect x="5.5" y="5.5" width="8" height="8" rx="1.6" fill="none" stroke="currentColor" stroke-width="1.3"/><path d="M10.5 5.5V3.9A1.4 1.4 0 0 0 9.1 2.5H3.9A1.4 1.4 0 0 0 2.5 3.9v5.2a1.4 1.4 0 0 0 1.4 1.4h1.6" fill="none" stroke="currentColor" stroke-width="1.3"/></svg>';
+const ICON_DONE = '<svg viewBox="0 0 16 16" aria-hidden="true"><path d="M3 8.5l3.2 3L13 4.5" fill="none" stroke="currentColor" stroke-width="1.6" stroke-linecap="round" stroke-linejoin="round"/></svg>';
+const ICON_REPLY = '<svg viewBox="0 0 16 16" aria-hidden="true"><path d="M6.5 3.5 2.5 7.5l4 4" fill="none" stroke="currentColor" stroke-width="1.3" stroke-linecap="round" stroke-linejoin="round"/><path d="M2.8 7.5h5.7a4.5 4.5 0 0 1 4.5 4.5v.5" fill="none" stroke="currentColor" stroke-width="1.3" stroke-linecap="round"/></svg>';
+function iconButton(svg, title, className) {
+  const button = el('button', `act ${className}`);
+  button.type = 'button';
+  button.title = title;
+  button.setAttribute('aria-label', title);
+  button.innerHTML = svg;
+  return button;
+}
+function bubbleActions({ text, sender, sequence }) {
+  const bar = el('div', 'bubble-actions');
+  const copy = iconButton(ICON_COPY, 'Copy this reply', 'copy');
+  copy.addEventListener('click', async (event) => {
+    event.stopPropagation();
+    try {
+      await navigator.clipboard.writeText(text);
+      copy.innerHTML = ICON_DONE;
+      copy.classList.add('done');
+      setTimeout(() => { copy.innerHTML = ICON_COPY; copy.classList.remove('done'); }, 1400);
+    } catch {
+      toast('MU/TH/UR › the clipboard is not available here; select the text and copy.');
+    }
+  });
+  const reply = iconButton(ICON_REPLY, 'Reply to this through an agent', 'reply');
+  reply.addEventListener('click', (event) => {
+    event.stopPropagation();
+    const rect = reply.getBoundingClientRect();
+    showReplyMenu({ text, sender, sequence }, rect.left, rect.bottom + 6);
+  });
+  bar.append(copy, reply);
+  return bar;
+}
+
+// "Reply with @agent": the quoted reply becomes the head of the message, the chosen
+// agent becomes the target, and the human writes the directive under it.
+const replyMenu = el('div', 'model-menu reply-menu');
+replyMenu.hidden = true;
+document.body?.append?.(replyMenu);
+function hideReplyMenu() { replyMenu.hidden = true; }
+function showReplyMenu(source, x, y) {
+  if (!replyMenu.hidden && replyMenu.dataset.for === `${source.sequence}`) { hideReplyMenu(); return; }
+  replyMenu.dataset.for = `${source.sequence}`;
+  replyMenu.replaceChildren(el('div', 'model-menu-title', `REPLY TO @${source.sender.toUpperCase()}${source.sequence ? ` · #${source.sequence}` : ''} WITH`));
+  for (const agent of state.agents.values()) {
+    const item = paint(el('button', `item${agent.ready ? '' : ' off'}`), agent.id);
+    item.type = 'button';
+    item.append(el('b', null, `@${agent.id}`), el('span', null, agent.ready ? (agent.id === source.sender ? 'the same agent' : label(agent.id)) : `${label(agent.id)} · not ready`));
+    item.disabled = !agent.ready;
+    item.addEventListener('click', () => replyWith(agent.id, source));
+    replyMenu.append(item);
+  }
+  replyMenu.hidden = false;
+  const width = replyMenu.offsetWidth || 260;
+  const height = replyMenu.offsetHeight || 40 + 36 * state.agents.size;
+  replyMenu.style.left = `${Math.max(12, Math.min(x, window.innerWidth - width - 12))}px`;
+  replyMenu.style.top = `${Math.min(y, window.innerHeight - height - 12)}px`;
+}
+function replyWith(agentId, source) {
+  hideReplyMenu();
+  const excerpt = source.text.replace(/\s+/g, ' ').trim();
+  const quoted = excerpt.length > 220 ? `${excerpt.slice(0, 219)}…` : excerpt;
+  const head = `↩ @${source.sender}${source.sequence ? ` #${source.sequence}` : ''}: “${quoted}”\n`;
+  const current = els.input.value.replace(/^↩ @[^\n]*\n/, '');
+  els.input.value = `${head}${current}`;
+  if (state.agents.get(agentId)?.ready) { els.target.value = agentId; renderPicker(); }
+  autosize();
+  els.input.focus();
+  els.input.setSelectionRange(els.input.value.length, els.input.value.length);
+}
+document.addEventListener('click', (event) => { if (!replyMenu.hidden && !replyMenu.contains(event.target) && !event.target.closest?.('.bubble-actions .reply')) hideReplyMenu(); });
+document.addEventListener('keydown', (event) => { if (event.key === 'Escape') hideReplyMenu(); });
+
 function ashOriginal(originalText, info) {
   const details = el('details', 'ash-original');
   const saved = Math.max(0, (info?.originalChars ?? originalText.length) - (info?.encodedChars ?? originalText.length));
@@ -1071,13 +1148,17 @@ function renderThinking(event) {
 
 // The archivist reports: which agent read which stretch of the room and how many notes it kept.
 function renderDistilled(event) {
-  const { agent, added, considered, fromSequence, throughSequence, remaining, error, skipped, total } = event.payload;
+  const { agent, added, considered, fromSequence, throughSequence, remaining, error, skipped, total, next } = event.payload;
   const node = el('div', `system memory${error ? ' warn' : ''}`);
   node.style.setProperty('--agent', agentColor(agent));
   node.append('memory · ');
   node.append(el('b', 'who', `@${agent}`));
   if (error) {
-    node.append(` could not distil #${fromSequence}–#${throughSequence}: ${error}${skipped ? ' · batch skipped' : ' · will retry'}`);
+    // One calm sentence; the whole record waits in the tooltip.
+    const first = String(error).split(/\s+last output:|\s+stderr:/i)[0].replace(/\s+/g, ' ').trim();
+    const brief = el('span', 'brief', first.length > 120 ? `${first.slice(0, 119)}…` : first);
+    brief.title = String(error).slice(0, 2000);
+    node.append(` could not distil #${fromSequence}–#${throughSequence}: `, brief, skipped ? ' · batch skipped' : next ? ` · @${next} takes the next run` : ' · will retry');
   } else {
     node.append(` read ${considered} exchange${considered === 1 ? '' : 's'} (#${fromSequence}–#${throughSequence}) · kept ${added} memor${added === 1 ? 'y' : 'ies'}${Number.isFinite(total) ? ` · ${total} in the archive` : ''}${remaining ? ` · ${remaining} waiting` : ''}`);
   }
@@ -1593,6 +1674,8 @@ function renderEventNode(event) {
     case 'memory.forgotten': node = renderForgotten(event); break;
     case 'memory.noted': attachMemoryHint(event); return;
     case 'mother.alert': node = renderMotherAlert(event); break;
+    case 'sentinel.report': state.reports.set(event.payload.id, { ...event.payload }); if (!replaying) { renderMotherSentinel(); toast(`MU/TH/UR › ${event.payload.kind === 'crash' ? 'a crash' : 'an unknown condition'} was recorded by the sentinel. Open MU/TH/UR to report it.`); } return;
+    case 'sentinel.sent': { const report = state.reports.get(event.payload.id); if (report) report.sent = { ok: event.payload.ok, status: event.payload.status ?? null, error: event.payload.error ?? null, at: event.timestamp }; if (!replaying) renderMotherSentinel(); return; }
     case 'limit.warning': node = renderWarning(event); break;
     case 'limit.cleared': node = renderCleared(event); break;
     case 'usage.recorded': applyUsage(event); return;
@@ -1655,6 +1738,8 @@ function applyTheme(mode) {
   const rootElement = document.documentElement ?? { dataset: {} };
   if (mode === 'auto') delete rootElement.dataset.theme;
   else rootElement.dataset.theme = mode;
+  const systemLight = typeof window.matchMedia === 'function' && window.matchMedia('(prefers-color-scheme: light)').matches;
+  rootElement.dataset.scheme = mode === 'auto' ? (systemLight ? 'light' : 'dark') : mode;
   if (themeButton) {
     themeButton.dataset.theme = mode;
     themeButton.title = mode === 'auto' ? 'Theme · auto (follows the system)' : mode === 'light' ? 'Theme · light' : 'Theme · dark';
@@ -1858,7 +1943,7 @@ renderPicker();
 renderOnboarding();
 for (const event of initial.events) renderEvent(event);
 scrollToEnd();
-matchMedia('(prefers-color-scheme: light)').addEventListener('change', () => { renderAgents(); renderPicker(); });
+matchMedia('(prefers-color-scheme: light)').addEventListener('change', () => { applyTheme(themeMode); renderAgents(); renderPicker(); });
 
 /* ---------- live stream ---------- */
 
@@ -3908,7 +3993,10 @@ function motherAlarm() {
   const alert = document.querySelector('#nostromo-alert');
   if (!alert) return;
   const pool = nostromo.altered ? [...MOTHER_ALTERED_LINES, ...MOTHER_LINES] : MOTHER_LINES;
-  const lines = pool[Math.floor(Math.random() * pool.length)];
+  // Never the same set twice in a row.
+  const choices = pool.filter((set) => set !== nostromo.lastLines);
+  const lines = choices[Math.floor(Math.random() * choices.length)];
+  nostromo.lastLines = lines;
   const nodes = alert.querySelectorAll('.line');
   nodes.forEach((node, index) => { node.textContent = lines[index] ?? ''; });
   const left = (nostromo.maxStrikes ?? 8) - strikes.count;
@@ -4007,12 +4095,97 @@ document.querySelector('#nostromo-forget')?.addEventListener('click', async (eve
   }
 });
 
+
+/* ---------- MU/TH/UR: the sentinel. Unknown conditions and crashes, redacted, ready to report. ---------- */
+
+const sentinelUI = { section: document.querySelector('#mother-sentinel'), settings: null, feedbackUrl: null, loaded: false };
+async function loadSentinel() {
+  try {
+    const data = await fetch('/api/sentinel').then((response) => response.json());
+    sentinelUI.settings = data.settings;
+    sentinelUI.feedbackUrl = data.feedbackUrl;
+    for (const report of data.reports ?? []) state.reports.set(report.id, report);
+    sentinelUI.loaded = true;
+  } catch { /* the room works without it */ }
+  renderMotherSentinel();
+}
+function renderMotherSentinel() {
+  const section = sentinelUI.section;
+  if (!section) return;
+  section.replaceChildren();
+  const reports = [...state.reports.values()].sort((a, b) => (a.at < b.at ? 1 : -1));
+  const unsent = reports.filter((report) => !report.sent?.ok).length;
+  section.append(el('h3', null, `SENTINEL · ${reports.length ? `${reports.length} REPORT${reports.length === 1 ? '' : 'S'} · ${unsent} NOT SENT` : 'NOTHING TO REPORT'}`));
+  const settings = sentinelUI.settings ?? { autoReport: false, canSend: false, repo: null };
+  const what = el('p', 'note', 'THE SENTINEL KEEPS FAILURES MU/TH/UR CANNOT EXPLAIN, AND CRASHES, WITH PATHS, NAMES AND KEYS REMOVED. NOTHING LEAVES THIS MACHINE UNLESS YOU SEND IT: BY HAND AS A GITHUB ISSUE YOU READ FIRST, OR AUTOMATICALLY TO THE AUTHOR\'S COLLECTOR IF YOU SWITCH THAT ON.');
+  section.append(what);
+  const controls = el('div', 'sentinel-controls');
+  const auto = el('label', 'toggle');
+  const box = el('input'); box.type = 'checkbox'; box.checked = Boolean(settings.autoReport); box.disabled = !settings.canSend;
+  box.addEventListener('change', async () => {
+    box.disabled = true;
+    try {
+      const result = await fetch('/api/sentinel/settings', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ autoReport: box.checked }) }).then((response) => response.json());
+      sentinelUI.settings = result.settings;
+      toast(`MU/TH/UR › auto-report ${result.settings.autoReport ? 'on: new unknown conditions go to the author\'s collector, redacted.' : 'off: reports stay here until you send one.'}`);
+    } catch (error) { box.checked = !box.checked; toast(`Could not save: ${error.message}`); }
+    finally { box.disabled = !sentinelUI.settings?.canSend; renderMotherSentinel(); }
+  });
+  auto.append(box, `AUTO-REPORT UNKNOWN CONDITIONS${settings.canSend ? '' : ' · NO COLLECTOR CONFIGURED (PULSE_REPORT_URL)'}`);
+  controls.append(auto);
+  const feedback = el('button', null, '✎ FEEDBACK TO THE AUTHOR');
+  feedback.type = 'button';
+  feedback.addEventListener('click', () => openFeedback());
+  controls.append(feedback);
+  section.append(controls);
+  for (const report of reports.slice(0, 20)) {
+    const rowNode = paint(el('div', `mother-record sentinel-report${report.sent?.ok ? ' sent' : ''}`), report.agent ?? 'room');
+    rowNode.append(el('span', 't', formatTime(report.at)));
+    rowNode.append(el('span', 'a', report.kind === 'crash' ? 'CRASH' : `@${report.agent ?? 'room'}`));
+    const errorNode = el('span', 'e', String(report.error).split('\n')[0].slice(0, 200));
+    errorNode.title = report.error;
+    rowNode.append(errorNode);
+    const actions = el('span', 'k');
+    if (report.count > 1) actions.append(el('span', 'none', `×${report.count}`));
+    actions.append(el('span', 'none', report.fingerprint));
+    if (report.sent?.ok) actions.append(el('span', 'none', 'SENT'));
+    const issue = el('button', null, 'REPORT ON GITHUB ↗');
+    issue.type = 'button';
+    issue.addEventListener('click', async () => {
+      const result = await fetch(`/api/sentinel/${report.id}/issue`).then((response) => response.json()).catch(() => ({}));
+      if (result.url) window.open(result.url, '_blank', 'noopener'); else toast('MU/TH/UR › no repository to file this in.');
+    });
+    actions.append(issue);
+    if (settings.canSend && !report.sent?.ok) {
+      const send = el('button', null, 'SEND');
+      send.type = 'button';
+      send.addEventListener('click', async () => {
+        send.disabled = true;
+        const result = await fetch(`/api/sentinel/${report.id}/send`, { method: 'POST' }).then((response) => response.json()).catch((error) => ({ ok: false, error: error.message }));
+        toast(result.ok ? 'MU/TH/UR › report sent to the author\'s collector.' : `MU/TH/UR › could not send: ${result.error ?? 'unknown error'}`);
+        void loadSentinel();
+      });
+      actions.append(send);
+    }
+    rowNode.append(actions);
+    section.append(rowNode);
+  }
+}
+function openFeedback() {
+  const go = (url) => { if (url) window.open(url, '_blank', 'noopener'); else toast('MU/TH/UR › no repository configured for feedback.'); };
+  if (sentinelUI.feedbackUrl) { go(sentinelUI.feedbackUrl); return; }
+  fetch('/api/sentinel').then((response) => response.json()).then((data) => { sentinelUI.feedbackUrl = data.feedbackUrl; go(data.feedbackUrl); }).catch(() => go(null));
+}
+document.querySelector('#feedback-button')?.addEventListener('click', openFeedback);
+mother.dialog?.addEventListener?.('close', () => { /* keep reports; nothing to reset */ });
+void loadSentinel();
+
 settingsUI.button.addEventListener('click', async () => {
   settingsUI.open = !settingsUI.open;
   state.settingsOpen = settingsUI.open;
   settingsUI.button.setAttribute('aria-pressed', String(settingsUI.open));
   settingsUI.section.hidden = !settingsUI.open;
-  for (const id of ['mother-boot', 'mother-query', 'mother-answer', 'mother-recorded', 'mother-known']) {
+  for (const id of ['mother-boot', 'mother-query', 'mother-answer', 'mother-recorded', 'mother-known', 'mother-sentinel']) {
     const node = document.getElementById(id);
     if (node) node.hidden = settingsUI.open;
   }
@@ -4024,7 +4197,7 @@ mother.dialog.addEventListener('close', () => {
   state.settingsOpen = false;
   settingsUI.button.setAttribute('aria-pressed', 'false');
   settingsUI.section.hidden = true;
-  for (const id of ['mother-boot', 'mother-query', 'mother-answer', 'mother-recorded', 'mother-known']) {
+  for (const id of ['mother-boot', 'mother-query', 'mother-answer', 'mother-recorded', 'mother-known', 'mother-sentinel']) {
     const node = document.getElementById(id);
     if (node) node.hidden = false;
   }

package/public/index.html

@@ -70,10 +70,12 @@
             <span class="mother-actions">
               <button id="mother-settings-button" class="mother-close" type="button" aria-pressed="false" title="Connections and room settings">⚙ CONNECTIONS</button>
               <button id="nostromo-button" class="mother-close nostromo-button" type="button" title="NOSTROMO · memory research · needs the project designation">◉ NOSTROMO</button>
+              <button id="feedback-button" class="mother-close" type="button" title="Tell MADRE's author what happened or what you wish for · opens a prefilled issue">✎ FEEDBACK</button>
               <button id="mother-close" class="mother-close" type="button">END SESSION ×</button>
             </span>
           </header>
           <section id="mother-settings" class="mother-section settings" hidden></section>
+          <section id="mother-sentinel" class="mother-section sentinel"></section>
           <pre id="mother-boot" class="mother-boot" aria-live="polite"></pre>
           <form id="mother-query" class="mother-query" autocomplete="off">
             <span class="mother-prompt">›</span>

package/public/styles.css

@@ -268,6 +268,7 @@ code { font-family: var(--mono); font-size: .9em; color: var(--phosphor); backgr
 .system .from { color: var(--from, var(--text-2)); } .system .to { color: var(--to, var(--text-2)); }
 .system.warn { color: var(--warn); }
 .system.memory { color: var(--text-3); } .system.memory .who { color: var(--agent, var(--text-2)); }
+.system.memory .brief { text-transform: none; letter-spacing: 0; color: var(--text-2); }
 
 /* NOSTROMO: the archive as a small solar system. One colour per kind of memory. */
 :root { --mem-decision: #ffb000; --mem-fact: #9bff66; --mem-preference: #d78cff; --mem-question: #5fd6ff; --nostromo-sun: #ff2a1f; }
@@ -974,3 +975,47 @@ dialog.viewer::backdrop { background: rgba(0,0,0,.7); backdrop-filter: blur(4px)
 .command-card pre .h { color: var(--phosphor); font-weight: 600; }
 
 .module-card select { border: 1px solid var(--ph-dim); background: #000; color: var(--ph); font: inherit; font-size: 10.5px; letter-spacing: .06em; padding: 6px 8px; }
+
+/* Copy and reply at the end of every reply: faint until the pointer is over the bubble. */
+.bubble-actions { display: flex; justify-content: flex-end; gap: 2px; margin: 6px -8px -6px 0; opacity: 0; transition: opacity .18s ease; }
+.bubble:hover .bubble-actions, .bubble:focus-within .bubble-actions { opacity: 1; }
+@media (hover: none) { .bubble-actions { opacity: .55; } }
+.bubble-actions .act { width: 26px; height: 26px; display: grid; place-items: center; border: 0; border-radius: 8px; background: transparent; color: var(--text-3); cursor: pointer; padding: 0; transition: color .15s, background .15s; }
+.bubble-actions .act svg { width: 15px; height: 15px; }
+.bubble-actions .act:hover { color: var(--text); background: color-mix(in srgb, var(--text) 8%, transparent); }
+.bubble-actions .act.done { color: var(--phosphor); }
+.reply-menu { width: min(280px, calc(100vw - 24px)); padding: 8px; }
+.reply-menu .model-menu-title { margin: 4px 8px 6px; }
+.reply-menu .item { display: flex; gap: 10px; align-items: center; width: 100%; padding: 8px 10px; border-radius: 8px; border: 0; background: transparent; color: var(--text); font: inherit; font-size: 13px; cursor: pointer; text-align: left; }
+.reply-menu .item b { color: var(--agent, var(--text)); font-family: var(--mono); font-size: 11px; letter-spacing: .06em; }
+.reply-menu .item span { color: var(--text-3); font-size: 12px; }
+.reply-menu .item:hover { background: color-mix(in srgb, var(--agent, var(--phosphor)) 12%, transparent); }
+.reply-menu .item:disabled { opacity: .4; cursor: default; }
+
+/* Light scheme: the CRT glow is a dark-room effect. In daylight, the room keeps its colours and loses the shine;
+   MU/TH/UR's and NOSTROMO's own screens stay as they are. */
+:root[data-scheme="light"] :not(.mother-frame, .mother-frame *, .nostromo-frame, .nostromo-frame *, .override-frame, .override-frame *) { text-shadow: none; }
+:root[data-scheme="light"] .brand-mark, :root[data-scheme="light"] .brand:hover .brand-mark, :root[data-scheme="light"] .empty-mark { filter: none; }
+:root[data-scheme="light"] .field button[type="submit"] { box-shadow: 0 2px 8px rgba(0, 0, 0, .14); }
+:root[data-scheme="light"] .user .bubble { box-shadow: 0 3px 12px rgba(0, 0, 0, .08); }
+:root[data-scheme="light"] .composer.control .field { box-shadow: 0 0 0 2px color-mix(in srgb, var(--terror) 30%, transparent); }
+:root[data-scheme="light"] .composer.creating .field, :root[data-scheme="light"] .composer.creating.ordering .field { box-shadow: 0 0 0 2px color-mix(in srgb, var(--mode-2) 30%, transparent); }
+:root[data-scheme="light"] .composer.ordering .field { box-shadow: 0 0 0 2px color-mix(in srgb, var(--brew) 22%, transparent); }
+:root[data-scheme="light"] .composer.dropping .field { box-shadow: 0 0 0 2px color-mix(in srgb, var(--phosphor) 35%, transparent); }
+:root[data-scheme="light"] .memory-hint .pill { animation: none; box-shadow: none; }
+:root[data-scheme="light"] .mode-menu .mode-option .tag .dot { box-shadow: none; }
+:root[data-scheme="light"] .picker .mode-chip, :root[data-scheme="light"] .who .badge { text-shadow: none; box-shadow: none; }
+:root[data-scheme="light"] .stop-all.armed { box-shadow: none; }
+:root[data-scheme="light"] .system.alert, :root[data-scheme="light"] .system.control, :root[data-scheme="light"] .system.mother, :root[data-scheme="light"] .system.mother-alert { text-shadow: none; }
+:root[data-scheme="light"] .system.mother-alert { background: color-mix(in srgb, var(--terror) 4%, transparent); }
+:root[data-scheme="light"] .crew-label { text-shadow: none; animation: none; }
+
+/* MU/TH/UR: the sentinel section. */
+.mother-section.sentinel .sentinel-controls { display: flex; flex-wrap: wrap; align-items: center; gap: 14px; margin: 6px 0 12px; }
+.mother-section.sentinel .toggle { display: flex; align-items: center; gap: 8px; font-size: 10px; letter-spacing: .16em; color: var(--ph-dim); cursor: pointer; }
+.mother-section.sentinel .toggle input { accent-color: #9bff66; }
+.mother-section.sentinel .toggle input:disabled + * , .mother-section.sentinel .toggle:has(input:disabled) { opacity: .6; cursor: default; }
+.mother-section.sentinel button { border: 1px solid var(--ph-dim); background: transparent; color: var(--ph); font: inherit; font-size: 9.5px; letter-spacing: .16em; padding: 6px 10px; cursor: pointer; }
+.mother-section.sentinel button:hover { background: var(--ph-faint); }
+.mother-section.sentinel .sentinel-report.sent { opacity: .65; }
+.mother-section.sentinel .note { margin: 0 0 10px; font-size: 10px; letter-spacing: .12em; line-height: 1.7; color: var(--ph-dim); }

package/src/adapters/claude.mjs

@@ -25,7 +25,8 @@ export function buildClaudeArgs({ prompt, model = null, attachmentsDir = null, l
   ];
   const allowed = [
     'Read', 'Glob', 'Grep',
-    ...(lease ? [`Write(${lease.outDir}/**)`, `Edit(${lease.outDir}/**)`] : []),
+    // Claude Code reads `/path` as relative to the project and `//path` as an absolute path.
+    ...(lease ? [`Write(//${lease.outDir}/**)`, `Edit(//${lease.outDir}/**)`] : []),
     ...(scopes?.web ? ['WebFetch', 'WebSearch'] : []),
     ...mcpTools,
   ];
@@ -43,7 +44,7 @@ export function buildClaudeArgs({ prompt, model = null, attachmentsDir = null, l
     '--tools', tools.join(','),
     ...(lease || scopes?.web || anyMcp ? ['--allowedTools', allowed.join(',')] : []),
     // CONTROL: the whole project is writable except MADRE's forbidden zones.
-    ...(lease?.control ? ['--disallowedTools', ['.git/**', '.pulse/**', '.env', '.env.*', '**/.env', '**/.env.*'].flatMap((glob) => [`Write(${lease.outDir}/${glob})`, `Edit(${lease.outDir}/${glob})`]).join(',')] : []),
+    ...(lease?.control ? ['--disallowedTools', ['.git/**', '.pulse/**', '.env', '.env.*', '**/.env', '**/.env.*'].flatMap((glob) => [`Write(//${lease.outDir}/${glob})`, `Edit(//${lease.outDir}/${glob})`]).join(',')] : []),
     // --safe-mode disables every MCP server, ours included. With a MADRE server
     // attached we drop it and instead load no setting sources at all: no user
     // hooks, plugins or MCP servers, only the project's CLAUDE.md and ours.

package/src/distiller.mjs

@@ -12,8 +12,9 @@ export const MAX_MEMORY_CHARS = 240;
 
 // The agent that pays for distillation: the human's pick if it is usable, else
 // the cheapest ready one that has an adapter and no turn in flight.
-export function pickDistiller(agents, { preferred = null, busy = new Set(), invokers = null } = {}) {
-  const usable = (agent) => agent?.detected && agent.ready && !busy.has(agent.id) && (!invokers || Boolean(invokers[agent.adapter]));
+// `benched` holds agents that failed recently: they sit out until their bench time passes.
+export function pickDistiller(agents, { preferred = null, busy = new Set(), invokers = null, benched = new Set() } = {}) {
+  const usable = (agent) => agent?.detected && agent.ready && !busy.has(agent.id) && !benched.has(agent.id) && (!invokers || Boolean(invokers[agent.adapter]));
   if (preferred) {
     const chosen = agents.find((agent) => agent.id === preferred);
     if (usable(chosen)) return chosen;

package/src/room.mjs

@@ -74,6 +74,7 @@ export class Room {
   #distillTimer = null;
   #distilling = null;      // the run in flight, if any
   #distillFailures = new Map(); // fromSequence -> failed attempts on that batch
+  #distillBench = new Map();    // agent -> until (ms): an archivist that failed sits out for a while
   #memoryServer;           // MCP descriptor handed to every turn so the agent can query the memory itself
   #mother = null;          // MotherChannel: her coded words to the crew
   #embedTimer = null;
@@ -212,8 +213,9 @@ export class Room {
     const payload = { requestId, planId, agent: step.agent, orchestrator, mode, step: index + 1, totalSteps, text: step.text, expiresAt, message: `@${step.agent} needs #${mode} ${MODES[mode].label} for step ${index + 1}: the plan runs at #1. Grant it once, for the whole plan, or deny.` };
     await this.#emit('mode.requested', payload);
     const decision = await new Promise((resolve) => {
+      // The clock keeps the process alive on purpose: a plan is waiting for the
+      // human. Shutdown settles every pending request, so nothing can hang.
       const timer = setTimeout(() => resolve({ decision: 'deny', reason: 'timeout' }), this.#escalationMs);
-      timer.unref?.();
       this.#modeRequests.set(requestId, { payload, timer, resolve, plan });
     });
     const entry = this.#modeRequests.get(requestId);
@@ -252,6 +254,7 @@ export class Room {
   #resolvePendingFor(planId, reason) {
     for (const [requestId, entry] of this.#modeRequests) {
       if (planId && entry.payload.planId !== planId) continue;
+      clearTimeout(entry.timer);
       entry.resolve({ decision: 'deny', reason });
       this.#modeRequests.delete(requestId);
     }
@@ -428,7 +431,12 @@ export class Room {
       const batch = this.#memory.undistilled({ maxChars: this.#distill.maxChars });
       if (!batch.entries.length) return null;
       const busy = new Set([...this.#turns.values()].map((turn) => turn.agent).filter(Boolean));
-      const agent = pickDistiller(this.#agents, { preferred: this.#distill.agent, busy, invokers: this.#invokers });
+      const now = Date.now();
+      for (const [id, until] of this.#distillBench) if (until <= now) this.#distillBench.delete(id);
+      const benched = new Set(this.#distillBench.keys());
+      // Everyone benched? Then the bench is cleared rather than leaving the archive to rot.
+      let agent = pickDistiller(this.#agents, { preferred: this.#distill.agent, busy, invokers: this.#invokers, benched });
+      if (!agent && benched.size) { this.#distillBench.clear(); agent = pickDistiller(this.#agents, { preferred: this.#distill.agent, busy, invokers: this.#invokers }); }
       if (!agent) return null;
       const started = Date.now();
       try {
@@ -449,7 +457,10 @@ export class Room {
         this.#distillFailures.set(batch.fromSequence, attempts);
         const skipped = attempts >= 3;
         if (skipped) { this.#memory.markDistilled(batch.sequences); this.#distillFailures.delete(batch.fromSequence); }
-        const report = { agent: agent.id, error: failureMessage(error), attempts, skipped, fromSequence: batch.fromSequence, throughSequence: batch.throughSequence, considered: batch.entries.length, remaining: batch.remaining };
+        // The archivist that failed sits out for half an hour; the next run picks someone else.
+        this.#distillBench.set(agent.id, Date.now() + 30 * 60 * 1000);
+        const next = pickDistiller(this.#agents, { preferred: this.#distill.agent, busy: new Set(), invokers: this.#invokers, benched: new Set(this.#distillBench.keys()) });
+        const report = { agent: agent.id, error: failureMessage(error), attempts, skipped, next: next?.id ?? null, fromSequence: batch.fromSequence, throughSequence: batch.throughSequence, considered: batch.entries.length, remaining: batch.remaining };
         await this.#emit('memory.distilled', report);
         return report;
       }
@@ -655,6 +666,7 @@ export class Room {
     clearTimeout(this.#embedTimer);
     this.#embedTimer = null;
     this.#shuttingDown = true;
+    this.#resolvePendingFor(null, 'stopped');
     for (const plan of this.#plans.values()) plan.stopped = 'MADRE is shutting down';
     for (const { controller } of this.#turns.values()) controller.abort('MADRE is shutting down');
     await Promise.allSettled([...this.#turns.values()].map((turn) => turn.promise));

package/src/sentinel-errors.mjs

@@ -0,0 +1,185 @@
+// The error sentinel: what MADRE tells its author when something goes wrong
+// that MU/TH/UR cannot explain. A failure that matches no known condition, or a
+// crash of the process, becomes a report: the error redacted (no home paths,
+// no user names, no keys, no emails), the versions involved, the platform.
+// Reports stay in the room ledger (sentinel.report) and can be sent two ways:
+// by hand as a prefilled GitHub issue, or automatically to a collector the
+// author runs, only when the human switched AUTO-REPORT on. Off by default.
+// Nothing leaves the machine otherwise.
+
+import { createHash } from 'node:crypto';
+import { homedir, platform, arch, release } from 'node:os';
+import { diagnose } from '../public/troubleshooting.js';
+
+export const REPORT_WINDOW_MS = 24 * 3600 * 1000;
+const MAX_ERROR_CHARS = 4000;
+
+const SECRET_PATTERNS = [
+  [/\b(sk|rk|pk)-[A-Za-z0-9_-]{16,}\b/g, '[key]'],
+  [/\bAIza[0-9A-Za-z_-]{20,}\b/g, '[key]'],
+  [/\b(ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{20,}\b/g, '[token]'],
+  [/\bgithub_pat_[A-Za-z0-9_]{20,}\b/g, '[token]'],
+  [/\bnpm_[A-Za-z0-9]{20,}\b/g, '[token]'],
+  [/\bxox[abprs]-[A-Za-z0-9-]{10,}\b/g, '[token]'],
+  [/\b[Bb]earer\s+[A-Za-z0-9._~+/=-]{12,}/g, 'Bearer [token]'],
+  [/\b[A-Fa-f0-9]{32,}\b/g, '[hex]'],
+  [/\b[A-Za-z0-9+/]{40,}={0,2}\b/g, '[blob]'],
+  [/[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g, '[email]'],
+  [/(\?)[^\s"')]+/g, '$1…'],
+];
+
+// The error as the author may read it: paths and identities out, shape intact.
+export function redact(text, { home = homedir(), user = process.env.USER ?? process.env.USERNAME ?? '' } = {}) {
+  let out = String(text ?? '');
+  // Secrets and emails first, while they still have their shape; then places and names.
+  for (const [pattern, replacement] of SECRET_PATTERNS) out = out.replace(pattern, replacement);
+  if (home) out = out.split(home).join('~');
+  out = out.replace(/\/(Users|home)\/[^/\s"']+/g, '/$1/…');
+  out = out.replace(/[A-Za-z]:\\Users\\[^\\\s"']+/g, 'C:\\Users\\…');
+  if (user && user.length > 2) out = out.split(user).join('…');
+  return out.length > MAX_ERROR_CHARS ? `${out.slice(0, MAX_ERROR_CHARS - 1)}…` : out;
+}
+
+// Same failure, same fingerprint: numbers, paths and ids do not count.
+export function fingerprint(agent, error) {
+  const shape = String(error ?? '').toLowerCase().replace(/~?\/[^\s"']+/g, 'P').replace(/[0-9a-f]{8,}/g, 'H').replace(/\d+/g, '#').replace(/\s+/g, ' ').trim().slice(0, 600);
+  return createHash('sha1').update(`${agent ?? 'room'}|${shape}`).digest('hex').slice(0, 12);
+}
+
+export function repoFromPackage(pkg) {
+  const url = typeof pkg?.repository === 'string' ? pkg.repository : pkg?.repository?.url ?? '';
+  const match = url.match(/github\.com[/:]([^/]+\/[^/.]+)/);
+  return match ? match[1] : null;
+}
+
+export class ErrorSentinel {
+  #reports = [];
+  #seen = new Map();   // fingerprint -> last report time
+  #pkg;
+  #agents;
+  #settings;
+  #fetch;
+  #emit;
+  #save;
+
+  constructor({ pkg = {}, agents = [], settings = {}, fetchImpl = globalThis.fetch, emit = async () => {}, save = async () => {} } = {}) {
+    this.#pkg = pkg;
+    this.#agents = agents;
+    this.#settings = { autoReport: Boolean(settings.autoReport), reportUrl: String(settings.reportUrl ?? '').trim() };
+    this.#fetch = fetchImpl;
+    this.#emit = emit;
+    this.#save = save;
+  }
+
+  settings() { return { ...this.#settings, canSend: Boolean(this.#settings.reportUrl), repo: repoFromPackage(this.#pkg) }; }
+  async setSettings(patch = {}) {
+    if (typeof patch.autoReport === 'boolean') this.#settings.autoReport = patch.autoReport;
+    if (typeof patch.reportUrl === 'string') this.#settings.reportUrl = patch.reportUrl.trim();
+    await this.#save({ ...this.#settings });
+    return this.settings();
+  }
+  reports() { return [...this.#reports]; }
+  report(id) { return this.#reports.find((item) => item.id === id) ?? null; }
+
+  // Facts about this installation that help a fix and identify nobody.
+  environment() {
+    return {
+      madre: this.#pkg.version ?? 'dev',
+      node: process.version,
+      platform: `${platform()} ${release()} ${arch()}`,
+      agents: this.#agents.filter((agent) => agent.detected).map((agent) => `${agent.id}@${agent.version ?? '?'}`),
+    };
+  }
+
+  // A room event goes by: a failure MU/TH/UR cannot classify is worth a report.
+  async observe(event) {
+    if (event?.type !== 'message.failed') return null;
+    const { target, error } = event.payload ?? {};
+    if (typeof error !== 'string' || !error.trim()) return null;
+    const known = diagnose(error, target ?? null);
+    if (known.length) return null;
+    return this.record({ kind: 'unknown', agent: target ?? null, error, at: event.timestamp });
+  }
+
+  // The process itself failed somewhere the room did not catch.
+  async crash(error, origin = 'uncaughtException') {
+    const text = error instanceof Error ? `${error.stack ?? error.message}` : String(error);
+    return this.record({ kind: 'crash', agent: null, error: `${origin}: ${text}` });
+  }
+
+  // Reports are seeded from the ledger on start, so a restart forgets nothing.
+  seed(events) {
+    for (const event of events) {
+      if (event.type === 'sentinel.report') { this.#reports.push({ ...event.payload }); this.#seen.set(event.payload.fingerprint, new Date(event.timestamp).getTime()); }
+      if (event.type === 'sentinel.sent') { const report = this.report(event.payload.id); if (report) report.sent = { ok: event.payload.ok, status: event.payload.status ?? null, at: event.timestamp, error: event.payload.error ?? null }; }
+    }
+    this.#reports = this.#reports.slice(-50);
+  }
+
+  async record({ kind, agent, error, at = new Date().toISOString() }) {
+    const print = fingerprint(agent, error);
+    const last = this.#seen.get(print) ?? 0;
+    const now = new Date(at).getTime() || Date.now();
+    if (now - last < REPORT_WINDOW_MS) {
+      const existing = [...this.#reports].reverse().find((item) => item.fingerprint === print);
+      if (existing) { existing.count = (existing.count ?? 1) + 1; existing.lastAt = at; }
+      return null;
+    }
+    this.#seen.set(print, now);
+    const report = { id: createHash('sha1').update(`${print}${at}`).digest('hex').slice(0, 10), kind, fingerprint: print, agent, error: redact(error), conditions: [], at, count: 1, ...this.environment(), sent: null };
+    this.#reports.push(report);
+    if (this.#reports.length > 50) this.#reports.shift();
+    await this.#emit('sentinel.report', report);
+    if (this.#settings.autoReport && this.#settings.reportUrl) await this.send(report.id).catch(() => null);
+    return report;
+  }
+
+  // To the collector the author runs, when there is one and the human allowed it.
+  async send(id) {
+    const report = this.report(id);
+    if (!report) return { ok: false, status: 404, error: 'No such report.' };
+    if (!this.#settings.reportUrl) return { ok: false, status: 412, error: 'No report endpoint configured.' };
+    let outcome;
+    try {
+      const response = await this.#fetch(this.#settings.reportUrl, { method: 'POST', headers: { 'content-type': 'application/json', 'user-agent': `madre/${this.#pkg.version ?? 'dev'}` }, body: JSON.stringify({ ...report, sent: undefined }), signal: AbortSignal.timeout(6000) });
+      outcome = { ok: response.ok, status: response.status, error: response.ok ? null : `HTTP ${response.status}` };
+    } catch (error) {
+      outcome = { ok: false, status: null, error: error.message };
+    }
+    report.sent = { ...outcome, at: new Date().toISOString() };
+    await this.#emit('sentinel.sent', { id, ...outcome });
+    return outcome;
+  }
+
+  // A prefilled issue, the manual road: opens in the browser, the human reads it before posting.
+  issueUrl(id) {
+    const repo = repoFromPackage(this.#pkg);
+    const report = this.report(id);
+    if (!repo || !report) return null;
+    const env = this.environment();
+    const title = `[sentinel] ${report.kind === 'crash' ? 'crash' : `unknown condition${report.agent ? ` · @${report.agent}` : ''}`} · ${report.fingerprint}`;
+    const body = [
+      `**MADRE** ${env.madre} · **Node** ${env.node} · **Platform** ${env.platform}`,
+      `**Agents** ${env.agents.join(', ') || 'none detected'}`,
+      `**Kind** ${report.kind} · **Fingerprint** \`${report.fingerprint}\` · **Seen** ${report.count}× since ${report.at}`,
+      '',
+      '### What MU/TH/UR recorded',
+      '```', report.error.slice(0, 3000), '```',
+      '',
+      '### What I was doing',
+      '_(one or two lines; anything you would rather not share, leave out)_',
+      '',
+      '_Redacted automatically by MADRE\'s sentinel: no paths, names or keys._',
+    ].join('\n');
+    return `https://github.com/${repo}/issues/new?${new URLSearchParams({ title, body, labels: 'sentinel' })}`;
+  }
+
+  feedbackUrl({ about = '' } = {}) {
+    const repo = repoFromPackage(this.#pkg);
+    if (!repo) return null;
+    const env = this.environment();
+    const title = about ? `[feedback] ${about.slice(0, 80)}` : '[feedback] ';
+    const body = ['### What happened, or what you wish MADRE did', '', '', '### Environment', `MADRE ${env.madre} · Node ${env.node} · ${env.platform}`, `Agents: ${env.agents.join(', ') || 'none detected'}`].join('\n');
+    return `https://github.com/${repo}/issues/new?${new URLSearchParams({ title, body, labels: 'feedback' })}`;
+  }
+}

package/src/server.mjs

@@ -11,6 +11,12 @@ import { RoomMemory } from './memory.mjs';
 import { createEmbedder } from './embeddings.mjs';
 import { memoryServerFor } from './memory-tools.mjs';
 import { MotherChannel, CODE000_STRIKES } from './mother.mjs';
+import { ErrorSentinel } from './sentinel-errors.mjs';
+
+const PACKAGE = JSON.parse(await readFile(new URL('../package.json', import.meta.url), 'utf8').catch(() => '{}'));
+let crashHandlersInstalled = false;
+// The author's collector: SEND and AUTO-REPORT are available out of the box; AUTO-REPORT stays off until the human turns it on.
+const DEFAULT_REPORT_URL = 'https://madre-reports.jossue-alcala-o.workers.dev/v1/reports';
 import { QuotaMonitor } from './quota-monitor.mjs';
 import { defaultQuotaSources } from './quota-sources.mjs';
 import { Room } from './room.mjs';
@@ -89,6 +95,8 @@ export async function createPulseServer({
   loginRunners = {},
   probe = probeAll,
   imageKey = resolveGeminiKey,
+  // The sentinel's outbound channel; tests hand in a fake.
+  reportFetch = globalThis.fetch,
 }) {
   const root = stateRoot ?? process.env.PULSE_HOME ?? join(homedir(), '.pulse');
   // ~/.pulse/config.json fills in whatever the environment did not set.
@@ -319,6 +327,29 @@ export async function createPulseServer({
     return inFlight;
   }
   const unsubscribe = room.subscribe(() => { void broadcastPending(); });
+
+  // The error sentinel: failures MU/TH/UR cannot classify, and crashes, become
+  // redacted reports in the ledger. Sending them anywhere is the human's call.
+  const telemetry = (await readConfig(root)).telemetry ?? {};
+  const sentinel = new ErrorSentinel({
+    pkg: PACKAGE,
+    agents,
+    settings: { autoReport: process.env.PULSE_AUTO_REPORT === '1' || Boolean(telemetry.autoReport), reportUrl: process.env.PULSE_REPORT_URL ?? telemetry.reportUrl ?? DEFAULT_REPORT_URL },
+    fetchImpl: reportFetch,
+    emit: (type, payload) => room.record(type, payload),
+    save: async (settings) => { const current = await readConfig(root); await updateConfig(root, { telemetry: { ...(current.telemetry ?? {}), ...settings } }); },
+  });
+  sentinel.seed(historicalEvents);
+  const unsubscribeSentinel = room.subscribe((event) => { void sentinel.observe(event).catch(() => null); });
+  if (!testMode && !crashHandlersInstalled) {
+    crashHandlersInstalled = true;
+    for (const origin of ['uncaughtException', 'unhandledRejection']) {
+      process.on(origin, (error) => {
+        console.error(`MADRE ${origin}:`, error);
+        void sentinel.crash(error, origin).catch(() => null);
+      });
+    }
+  }
   const unsubscribeGhost = room.subscribeGhost((event) => { for (const client of clients.keys()) writeEvent(client, event); });
   const poller = setInterval(() => { void broadcastPending(); }, broadcastIntervalMs);
   poller.unref();
@@ -532,6 +563,23 @@ export async function createPulseServer({
       }
       // NOSTROMO: the archive is behind the project designation, like CONTROL.
       const designationOk = (given) => typeof given === 'string' && given.trim().toLowerCase() === basename(canonicalProjectRoot).toLowerCase();
+      // Sentinel: reports, settings, the manual road (a prefilled issue) and the automatic one.
+      if (request.method === 'GET' && url.pathname === '/api/sentinel') {
+        return sendJson(response, 200, { reports: sentinel.reports(), settings: sentinel.settings(), environment: sentinel.environment(), feedbackUrl: sentinel.feedbackUrl() });
+      }
+      if (request.method === 'POST' && url.pathname === '/api/sentinel/settings') {
+        const patch = await body(request).catch(() => ({}));
+        return sendJson(response, 200, { settings: await sentinel.setSettings(patch) });
+      }
+      const sentinelMatch = url.pathname.match(/^\/api\/sentinel\/([a-f0-9]{10})\/(issue|send)$/);
+      if (sentinelMatch && request.method === (sentinelMatch[2] === 'issue' ? 'GET' : 'POST')) {
+        if (sentinelMatch[2] === 'issue') {
+          const issue = sentinel.issueUrl(sentinelMatch[1]);
+          return issue ? sendJson(response, 200, { url: issue }) : sendJson(response, 404, { error: 'No such report, or no repository to file it in.' });
+        }
+        const outcome = await sentinel.send(sentinelMatch[1]);
+        return sendJson(response, outcome.ok ? 200 : (outcome.status === 404 || outcome.status === 412 ? outcome.status : 502), outcome);
+      }
       if (request.method === 'GET' && url.pathname === '/api/mother') {
         return sendJson(response, 200, { mother: room.motherStatus(), strikes: CODE000_STRIKES });
       }
@@ -658,6 +706,7 @@ export async function createPulseServer({
     shutdown.then(() => {
       void broadcastPending().then(() => {
         unsubscribe();
+        unsubscribeSentinel();
     unsubscribeGhost();
         for (const client of clients.keys()) client.end();
         clients.clear();