@jossuealcala/madre 0.2.1 → 0.2.3

package/CHANGELOG.md

@@ -2,6 +2,23 @@
 
 Todas las versiones publicadas de `@jossuealcala/madre`. Fechas en ISO.
 
+Una versión se cierra cuando está en npm: hasta entonces su sección se llama **Sin publicar** y puede crecer. Cada versión publicada tiene exactamente una etiqueta `vX.Y.Z`, una release en GitHub y una sección aquí; el parche puede llegar a dos dígitos (`0.2.10`) antes de subir el menor. Ver `docs/ROADMAP.md` para el criterio de qué sube cada número.
+
+## 0.2.3 · 2026-09-18
+
+### RIPLEY navega
+- El visor renderiza HTML como un navegador del proyecto: la página se sirve en `/preview/project/<ruta>`, sus scripts corren y sus rutas relativas a CSS, JS, imágenes y fuentes funcionan. El marco sigue sellado: sin origen propio, sin red, sin formularios, sin acceso a MADRE, y solo carga recursos del proyecto a través de MADRE. Antes los scripts estaban bloqueados y una página construida con JavaScript se veía vacía.
+- Barra mínima en el visor: atrás y recargar, con la ruta y el título de la página en pantalla. Sin URL editable: RIPLEY es un visor del proyecto, no un navegador general.
+- Recarga sola cuando un agente cambia la página abierta o algo de su carpeta, en CONTROL o en un lease.
+- Los errores de la página se ven: un puente de una línea dentro del marco reenvía `window.onerror`, promesas rechazadas y recursos que no cargan; el visor los muestra en una franja con `ASK THE ROOM`, que deja el error y el archivo en el compositor.
+
+## 0.2.2 · 2026-09-18
+
+### Corrección crítica
+- Claude Code negaba toda escritura en `#2 CREATE` y `#3 CONTROL`: las reglas `Write(/ruta/**)` se leían como relativas al proyecto. Ahora van como `//ruta/**`, la forma absoluta de Claude Code; las zonas prohibidas siguen bloqueadas antes del turno.
+
+Reproducido con el CLI real en un repositorio temporal: con una barra el archivo quedaba bloqueado sin pregunta; con dos se escribe y `.env` sigue bloqueado. Sin otros cambios respecto a 0.2.1.
+
 ## 0.2.1 · 2026-09-18 · beta pública
 
 Primera versión pensada para manos ajenas. Requiere Node 22.5 o superior.

package/CONTRIBUTING.md

@@ -35,4 +35,11 @@ public/              the room UI; troubleshooting.js is MU/TH/UR's knowledge bas
 docs/report-collector/    the Worker that turns sentinel reports into issues
 ```
 
+## Versions
+
+- A version is **closed only when it is on npm**. Until then its changelog section reads *Sin publicar* and keeps growing; no new number is opened while the previous one is unpublished.
+- One published version = one `vX.Y.Z` tag = one GitHub release = one changelog section. Tags and releases are created at publish time, never before.
+- Patch (`0.2.x`) for fixes and additions inside existing modules; the patch number may reach two digits. Minor (`0.x`) for a new mode, a new module, a new agent, or a change to what leaves the machine. Major when the room's ledger or memory format stops being readable by the previous version.
+- `scripts/release.mjs` does the closing in one go: checks the tree is clean and CI-green, runs the suite and pack:check, turns *Sin publicar* into the dated section, tags, pushes, creates the release and prints the publish command.
+
 Open questions go to issues with the `question` label. Ideas go through `✎ FEEDBACK` in MU/TH/UR or a plain issue. Be kind to the crew.

package/README.md

@@ -212,7 +212,7 @@ La sala ofrece módulos integrados de MADRE y una integración externa opcional.
 
 - **Git Pulse** (integrado, sin instalación): `/git status`, `/git log [n]`, `/git diff` y `/git branches` traen a la sala la rama, los cambios sin confirmar, los últimos commits o el resumen del diff, en solo lectura y sin gastar un turno de agente. La tarjeta queda en el registro como `command.output` y entra en el contexto que reciben los agentes, así todos razonan sobre los mismos hechos del repositorio. Requiere que el proyecto sea un repositorio git.
 - **Image Studio** (integrado): ver la sección anterior.
-- **RIPLEY** (integrado): actívalo en `MODULES` y el visor de archivos renderiza HTML, SVG y Markdown en lugar de mostrar su código, con un botón `PREVIEW`/`SOURCE` en la cabecera. HTML y SVG se sirven por `/api/preview` dentro de un marco sellado (`sandbox` sin permisos y una CSP que prohíbe scripts, red, formularios y almacenamiento); Markdown se renderiza en el propio visor. Apagado, esos archivos se muestran como texto con una nota. Sirve para ver lo que los agentes crean en `.pulse/out/` sin salir de la sala.
+- **RIPLEY** (integrado): actívalo en `MODULES` y el visor de archivos renderiza HTML, SVG y Markdown en lugar de mostrar su código, con un botón `PREVIEW`/`SOURCE` en la cabecera. HTML y SVG se sirven por `/preview/project/<ruta>` dentro de un marco sellado: los scripts de la página sí corren, pero el marco no tiene origen propio (`sandbox allow-scripts`, sin `same-origin`), no puede hacer peticiones de red, ni enviar formularios, ni navegar la ventana de MADRE, y solo carga CSS, JS, imágenes y fuentes del propio proyecto a través de MADRE. Las rutas relativas de la página funcionan, el visor tiene atrás y recargar, se recarga solo cuando un agente cambia la página abierta, y los errores de la página aparecen en una franja con `ASK THE ROOM`. Markdown se renderiza en el propio visor. Apagado, esos archivos se muestran como texto con una nota. Sirve para ver lo que los agentes crean en `.pulse/out/` sin salir de la sala.
 - **AshCode** (integrado, beta): actívalo en `MODULES` para mostrar el botón `$ ash_code` en el campo de texto. Cuando está iluminado, MADRE intenta abreviar localmente mensajes en español o inglés antes de enviarlos a un agente, y pide respuestas concisas. La burbuja muestra el texto enviado y permite desplegar el original; las respuestas abreviadas también conservan el original. Se omite la transformación si detecta código, rutas, enlaces, negaciones, cifras, estructura compleja, idioma incierto o ninguna reducción segura. **Puede cambiar el significado o producir errores: revisa siempre el original y la respuesta.** Menos caracteres no demuestra menos tokens facturados; consulta el uso real del proveedor. Al encenderlo, el campo se ensancha como con CREATE, la etiqueta pasa a `MU/TH/UR · SPECIAL ORDER 937 ›` y la caja hace un guiño a MADRE: un barrido CRT con líneas de fósforo en verde Homebrew (el verde del perfil Homebrew de Terminal.app), que también viste el botón como un prompt de bash con cursor parpadeante. Se apaga desde `ORDER 937` para el siguiente mensaje o se deshabilita en `MODULES`. No requiere npm ni modifica el proyecto: su estado se guarda en la configuración local de MADRE.
 - **AHP+** (`@jossuealcala/ahp-plus`): estado verificado del proyecto, checkpoints y handoffs entre sesiones de IA, guardado en `.ahp/`. MADRE lo detecta por `.ahp/manifest.json` y lo instala con `npx --yes @jossuealcala/ahp-plus@1.4.1 setup . --platforms <agentes detectados>`, pidiendo adaptadores solo para los agentes presentes en la máquina que AHP+ soporta (Codex, Claude, OpenCode). Una vez instalado, `/ahp status`, `/ahp check` y `/ahp context` consultan su estado desde el campo de texto.
 
@@ -290,7 +290,7 @@ Todos los adaptadores corren en su propio grupo de procesos. Si un agente no res
 
 ## Cambios
 
-Ver [CHANGELOG.md](CHANGELOG.md). La versión actual es 0.2.1, beta pública: el núcleo está probado y bajo CI, la superficie sigue cambiando y las decisiones que aún duelen están escritas en el modelo de amenazas. Los problemas se reportan desde MU/TH/UR (`✎ FEEDBACK` o el sentinel) o en [issues](https://github.com/jossuealcacao-exe/madre/issues); la seguridad, según [SECURITY.md](SECURITY.md).
+Ver [CHANGELOG.md](CHANGELOG.md). La versión publicada es 0.2.2 y la siguiente en preparación es 0.2.3, beta pública: el núcleo está probado y bajo CI, la superficie sigue cambiando y las decisiones que aún duelen están escritas en el modelo de amenazas. Los problemas se reportan desde MU/TH/UR (`✎ FEEDBACK` o el sentinel) o en [issues](https://github.com/jossuealcacao-exe/madre/issues); la seguridad, según [SECURITY.md](SECURITY.md).
 
 ## Licencia
 

package/bin/madre.mjs

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
 
 import { resolve } from 'node:path';
-import { stat } from 'node:fs/promises';
+import { execFileSync } from 'node:child_process';
+import { readFile, stat } from 'node:fs/promises';
 import { startPulse } from '../src/server.mjs';
 import { detectAgents } from '../src/runtime-detection.mjs';
 import { probeAll } from '../src/auth-probe.mjs';
@@ -42,6 +43,14 @@ if (nodeMajor < 22 || (nodeMajor === 22 && nodeMinor < 5)) {
   console.error(`\n  MOTHER › MADRE needs Node 22.5 or newer (found ${process.version}): the room's memory runs on node:sqlite.\n`);
   process.exit(2);
 }
+if (has('--version') || has('-v') || command === 'version') {
+  // Version and commit, so a report can name exactly what ran.
+  const pkg = JSON.parse(await readFile(new URL('../package.json', import.meta.url), 'utf8'));
+  let commit = '';
+  try { commit = execFileSync('git', ['rev-parse', '--short', 'HEAD'], { cwd: new URL('..', import.meta.url).pathname, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim(); } catch { /* installed from npm: no repo */ }
+  console.log(`madre ${pkg.version}${commit ? ` · ${commit}` : ''} · node ${process.version}`);
+  process.exit(0);
+}
 const stateRoot = process.env.PULSE_HOME;
 if (command !== 'help') {
   const stats = await stat(projectRoot).catch(() => null);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jossuealcala/madre",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "MADRE: one local room where the AI coding agents already installed on your machine (Codex, Claude Code, Gemini CLI, OpenCode) work on a project together over the PULSE channel: read-only by default, per-message permission modes up to a checkpointed CONTROL, a shared memory every agent recalls and queries, and NOSTROMO to browse it.",
   "keywords": [
     "ai-agents",
@@ -57,7 +57,8 @@
     "doctor": "node ./bin/madre.mjs doctor",
     "test": "node --test",
     "check": "npm test && node ./bin/madre.mjs doctor --json",
-    "pack:check": "node ./scripts/pack-check.mjs"
+    "pack:check": "node ./scripts/pack-check.mjs",
+    "release": "node ./scripts/release.mjs"
   },
   "publishConfig": {
     "access": "public"

package/public/app.js

@@ -309,7 +309,7 @@ viewerUI.review?.addEventListener('click', (event) => {
   if (viewerUI.menu.hidden) showViewerMenu(rect.left, rect.bottom + 6); else hideViewerMenu();
 });
 viewer.dialog.addEventListener('click', (event) => { if (!viewerUI.menu.hidden && !viewerUI.menu.contains(event.target) && event.target !== viewerUI.review) hideViewerMenu(); });
-viewer.dialog.addEventListener('close', () => { hideViewerMenu(); setSelection(null, null); });
+viewer.dialog.addEventListener('close', () => { hideViewerMenu(); setSelection(null, null); ripley.frame = null; ripley.history = []; ripleyClearErrors(); if (ripley.nav) ripley.nav.hidden = true; });
 
 function codeView(text, { line = null, lines = null } = {}) {
   const pre = el('pre', 'code');
@@ -345,6 +345,9 @@ const RIPLEY_KIND = (name) => (/\.(html?|xhtml)$/i.test(name ?? '') ? 'html' : /
 const viewerMode = { button: document.querySelector('#viewer-mode'), preview: false, kind: null, text: '', src: '', line: null, lines: null };
 
 function showViewerSource() {
+  if (ripley.nav) ripley.nav.hidden = true;
+  ripleyClearErrors();
+  ripley.frame = null;
   const pre = codeView(viewerMode.text, { line: viewerMode.line, lines: viewerMode.lines });
   viewer.body.replaceChildren(pre);
   if (!state.ripley && viewerMode.kind) {
@@ -356,20 +359,115 @@ function showViewerSource() {
   else if (viewerMode.line) setSelection(viewerMode.line, viewerMode.line);
   pre.querySelector('.hl')?.scrollIntoView?.({ block: 'center' });
 }
-// The sealed frame: no scripts, no network, no storage; Markdown renders in place.
+// RIPLEY's frame, its small bar (back, reload), its history inside the project,
+// what the page reports up (which page, which errors), and reloads when an
+// agent changes the file on screen.
+const ripley = {
+  nav: document.querySelector('#viewer-nav'),
+  back: document.querySelector('#viewer-back'),
+  reload: document.querySelector('#viewer-reload'),
+  errors: document.querySelector('#viewer-errors'),
+  frame: null,
+  history: [],      // preview URLs visited in this session of the viewer
+  current: null,    // project-relative path of the page on screen
+  root: 'project',
+};
+function ripleyPathFromPreview(pathname) {
+  const match = String(pathname ?? '').match(/^\/preview\/(project|attachments)\/(.*)$/);
+  return match ? { root: match[1], path: decodeURIComponent(match[2]) } : null;
+}
+function ripleyNavigate(url, { push = true } = {}) {
+  if (!ripley.frame) return;
+  if (push && ripley.history.at(-1) !== url) ripley.history.push(url);
+  ripley.frame.src = url;
+  ripley.back.disabled = ripley.history.length < 2;
+}
+function ripleyClearErrors() { if (ripley.errors) { ripley.errors.hidden = true; ripley.errors.replaceChildren(); } }
+function ripleyShowError({ message, source, line }) {
+  if (!ripley.errors || !viewerMode.preview) return;
+  const where = source ? `${ripleyPathFromPreview(new URL(source, window.location.origin).pathname)?.path ?? source}${line ? `:${line}` : ''}` : (ripley.current ? `${ripley.current}${line ? `:${line}` : ''}` : '');
+  const row = el('div', 'err-row');
+  row.append(el('span', 'msg', message));
+  if (where) row.append(el('span', 'where', where));
+  const ask = el('button', null, 'ASK THE ROOM');
+  ask.type = 'button';
+  ask.title = 'Put this error and the file into the composer';
+  ask.addEventListener('click', () => {
+    const reference = ripley.current ? `!${ripley.current}${line ? `:${line}` : ''} ` : '';
+    els.input.value = `${reference}RIPLEY reports an error in the page: ${message}${where ? ` (${where})` : ''}. Find the cause and propose the fix.`;
+    viewer.dialog.close();
+    autosize();
+    els.input.focus();
+  });
+  row.append(ask);
+  ripley.errors.append(row);
+  while (ripley.errors.children.length > 3) ripley.errors.firstChild.remove();
+  ripley.errors.hidden = false;
+}
+window.addEventListener?.('message', (event) => {
+  const data = event.data;
+  if (!data || data.ripley !== 1 || !ripley.frame || event.source !== ripley.frame.contentWindow) return;
+  if (data.type === 'page') {
+    const at = ripleyPathFromPreview(data.path);
+    if (at) {
+      ripley.current = at.path;
+      ripley.root = at.root;
+      viewer.path.textContent = `${at.root === 'project' ? '/' : ''}${at.path}${data.title ? ` · ${data.title}` : ''}`;
+      viewer.open.href = `/api/files?root=${at.root}&path=${encodeURIComponent(at.path)}`;
+    }
+  } else if (data.type === 'error') {
+    ripleyShowError(data);
+  }
+});
+ripley.back?.addEventListener('click', () => {
+  if (ripley.history.length < 2) return;
+  ripley.history.pop();
+  ripleyClearErrors();
+  ripleyNavigate(ripley.history.at(-1), { push: false });
+});
+ripley.reload?.addEventListener('click', () => { if (ripley.frame) { ripleyClearErrors(); ripley.frame.src = ripley.frame.src; } });
+// An agent changed what is on screen (CONTROL) or created it (a lease): reload the page.
+function ripleyMaybeReload(paths) {
+  if (!viewerMode.preview || !ripley.frame || !ripley.current || !viewer.dialog.open) return;
+  const page = ripley.current;
+  const dir = page.includes('/') ? page.slice(0, page.lastIndexOf('/') + 1) : '';
+  const hit = paths.some((path) => path === page || (dir ? path.startsWith(dir) : !path.includes('/')));
+  if (!hit) return;
+  ripleyClearErrors();
+  ripley.frame.src = ripley.frame.src;
+  toast('MU/TH/UR › RIPLEY reloaded the page: an agent changed it.');
+}
+
 function showViewerPreview() {
   if (viewerMode.kind === 'markdown') {
+    ripley.nav.hidden = true;
     const doc = el('article', 'viewer-markdown bubble');
     doc.append(renderMarkdown(viewerMode.text));
     viewer.body.replaceChildren(doc);
     return;
   }
+  // Scripts may run; the frame has no origin of its own, no network, no forms, no way up to MADRE.
   const frame = el('iframe', 'ripley');
-  frame.setAttribute('sandbox', '');
+  frame.setAttribute('sandbox', 'allow-scripts');
   frame.setAttribute('referrerpolicy', 'no-referrer');
   frame.title = `RIPLEY preview of ${viewer.path.textContent}`;
-  frame.src = viewerMode.src.replace('/api/files?', '/api/preview?');
+  ripley.frame = frame;
+  ripley.history = [];
+  ripleyClearErrors();
+  const start = previewUrl(viewerMode.src);
+  const at = ripleyPathFromPreview(start);
+  ripley.current = at?.path ?? null;
+  ripley.root = at?.root ?? 'project';
   viewer.body.replaceChildren(frame);
+  ripley.nav.hidden = false;
+  ripleyNavigate(start);
+}
+// /api/files?root=project&path=a/b.html → /preview/project/a/b.html, so the page's relative links resolve.
+function previewUrl(filesUrl) {
+  const params = new URL(filesUrl, window.location.origin).searchParams;
+  const root = params.get('root') === 'attachments' ? 'attachments' : 'project';
+  const path = (params.get('path') ?? '').split('/').map(encodeURIComponent).join('/');
+  return `/preview/${root}/${path}`;
 }
 function syncViewerMode() {
   if (!viewerMode.button) return;
@@ -1698,12 +1796,12 @@ function renderEventNode(event) {
     case 'lease.missing': node = renderLeaseMissing(event); break;
     case 'mode.requested': node = renderModeRequest(event); break;
     case 'control.started': node = renderControlStarted(event); break;
-    case 'control.changed': node = renderControlChanged(event); break;
+    case 'control.changed': node = renderControlChanged(event); if (!replaying) ripleyMaybeReload((event.payload.files ?? []).map((file) => file.path)); break;
     case 'control.reverted': node = renderControlReverted(event); break;
     case 'mode.granted':
     case 'mode.denied': settleModeRequest(event); return;
     case 'plan.ignored': node = renderPlanIgnored(event); break;
-    case 'artifacts.created': attachArtifacts(event); return;
+    case 'artifacts.created': attachArtifacts(event); if (!replaying) ripleyMaybeReload((event.payload.files ?? []).map((file) => file.path)); return;
     case 'command.output': node = renderCommandCard(event); break;
     default: return;
   }

package/public/index.html

@@ -217,6 +217,10 @@
       </dialog>
       <dialog id="viewer" class="viewer" aria-label="File viewer">
         <header class="viewer-head">
+          <span class="viewer-nav" id="viewer-nav" hidden>
+            <button id="viewer-back" class="nav" type="button" title="Back to the previous page" aria-label="Back" disabled>‹</button>
+            <button id="viewer-reload" class="nav" type="button" title="Reload the page" aria-label="Reload">↻</button>
+          </span>
           <span id="viewer-path" class="viewer-path"></span>
           <span id="viewer-selection" class="viewer-selection" hidden></span>
           <button id="viewer-mode" class="viewer-review viewer-mode" type="button" hidden>SOURCE</button>
@@ -224,6 +228,7 @@
           <a id="viewer-open" class="viewer-open" target="_blank" rel="noopener noreferrer">OPEN RAW ↗</a>
           <button id="viewer-close" class="mother-close" type="button">CLOSE ×</button>
         </header>
+        <div id="viewer-errors" class="viewer-errors" hidden></div>
         <div id="viewer-body" class="viewer-body"></div>
         <div id="viewer-menu" class="viewer-menu" role="menu" hidden></div>
       </dialog>

package/public/styles.css

@@ -710,6 +710,17 @@ dialog.viewer::backdrop { background: rgba(0,0,0,.7); backdrop-filter: blur(4px)
 .viewer-path { color: var(--text-2); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; flex: 1; }
 .viewer-open { color: var(--phosphor); text-decoration: none; letter-spacing: .12em; font-size: 10px; }
 .viewer-body { height: calc(100% - 46px); overflow: auto; display: grid; place-items: start center; padding: 16px; }
+.viewer-nav { display: inline-flex; gap: 4px; }
+.viewer-nav .nav { width: 26px; height: 26px; display: grid; place-items: center; border: 1px solid var(--line-2); background: transparent; color: var(--text-2); border-radius: 7px; cursor: pointer; font: inherit; font-size: 14px; line-height: 1; }
+.viewer-nav .nav:hover { color: var(--text); border-color: var(--text-3); }
+.viewer-nav .nav:disabled { opacity: .35; cursor: default; }
+.viewer-errors { display: grid; gap: 6px; padding: 8px 16px; border-bottom: 1px solid color-mix(in srgb, var(--danger) 40%, transparent); background: color-mix(in srgb, var(--danger) 7%, transparent); font-family: var(--mono); font-size: 11px; }
+.viewer-errors:not([hidden]) + .viewer-body { height: auto; max-height: calc(100% - 46px); }
+.viewer-errors .err-row { display: flex; gap: 10px; align-items: center; flex-wrap: wrap; }
+.viewer-errors .msg { color: var(--danger); overflow-wrap: anywhere; }
+.viewer-errors .where { color: var(--text-3); font-size: 10px; }
+.viewer-errors button { margin-left: auto; border: 1px solid color-mix(in srgb, var(--danger) 55%, transparent); background: transparent; color: var(--danger); font: inherit; font-family: var(--mono); font-size: 9.5px; letter-spacing: .14em; padding: 3px 8px; border-radius: 6px; cursor: pointer; }
+.viewer-errors button:hover { background: color-mix(in srgb, var(--danger) 14%, transparent); }
 .viewer-body img { max-width: 100%; max-height: 100%; border-radius: 8px; }
 .viewer-body pre { margin: 0; width: 100%; font-family: var(--mono); font-size: 12.5px; line-height: 1.55; white-space: pre-wrap; overflow-wrap: anywhere; color: var(--text); }
 .viewer-body iframe { width: 100%; height: 100%; border: 0; background: #fff; border-radius: 8px; }

package/public/troubleshooting.js

@@ -416,8 +416,8 @@ export const CONDITIONS = [
     severity: 'informational',
     title: 'RIPLEY: rendering HTML, SVG and Markdown in the viewer',
     match: /ripley|RIPLEY is off|renders \.html|render(ed|ing)? (the )?(html|svg|markdown)/i,
-    diagnosis: 'With RIPLEY on (MODULES), the file viewer renders .html and .svg through /api/preview inside a sealed frame (sandbox with no permissions; a policy that allows no scripts, no network, no forms, no storage) and Markdown in place; PREVIEW / SOURCE switches. Off, those files show as text with a note. 412 means RIPLEY is off; 415 means the type is not rendered (only .html, .htm, .svg; .md renders in the viewer itself). Plain /api/files always serves HTML as text.',
-    remedy: 'Enable RIPLEY in MODULES. If a page looks broken in PREVIEW it is usually because it needs scripts or external resources, which the frame forbids by design: open it with OPEN RAW in a normal tab if you trust it.',
+    diagnosis: 'With RIPLEY on (MODULES), the file viewer renders .html and .svg through /preview/project/<path> inside a sealed frame: the page\'s own scripts run, but the frame has no origin, no network, no forms and no way to reach MADRE, and it loads CSS, JS, images and fonts only from the project through MADRE. Relative links work. Markdown renders in place; PREVIEW / SOURCE switches. Off, those files show as text with a note. 412 means RIPLEY is off. Plain /api/files always serves HTML as text.',
+    remedy: 'Enable RIPLEY in MODULES. If a page looks broken in PREVIEW it is usually because it fetches something from the internet or another server, which the frame forbids by design: open it with OPEN RAW in a normal tab if you trust it.',
     fixes: same(['# MODULES → RIPLEY → ENABLE RIPLEY', '# viewer → PREVIEW / SOURCE']),
   },
   {

package/src/adapters/claude.mjs

@@ -25,7 +25,8 @@ export function buildClaudeArgs({ prompt, model = null, attachmentsDir = null, l
   ];
   const allowed = [
     'Read', 'Glob', 'Grep',
-    ...(lease ? [`Write(${lease.outDir}/**)`, `Edit(${lease.outDir}/**)`] : []),
+    // Claude Code reads `/path` as relative to the project and `//path` as an absolute path.
+    ...(lease ? [`Write(//${lease.outDir}/**)`, `Edit(//${lease.outDir}/**)`] : []),
     ...(scopes?.web ? ['WebFetch', 'WebSearch'] : []),
     ...mcpTools,
   ];
@@ -43,7 +44,7 @@ export function buildClaudeArgs({ prompt, model = null, attachmentsDir = null, l
     '--tools', tools.join(','),
     ...(lease || scopes?.web || anyMcp ? ['--allowedTools', allowed.join(',')] : []),
     // CONTROL: the whole project is writable except MADRE's forbidden zones.
-    ...(lease?.control ? ['--disallowedTools', ['.git/**', '.pulse/**', '.env', '.env.*', '**/.env', '**/.env.*'].flatMap((glob) => [`Write(${lease.outDir}/${glob})`, `Edit(${lease.outDir}/${glob})`]).join(',')] : []),
+    ...(lease?.control ? ['--disallowedTools', ['.git/**', '.pulse/**', '.env', '.env.*', '**/.env', '**/.env.*'].flatMap((glob) => [`Write(//${lease.outDir}/${glob})`, `Edit(//${lease.outDir}/${glob})`]).join(',')] : []),
     // --safe-mode disables every MCP server, ours included. With a MADRE server
     // attached we drop it and instead load no setting sources at all: no user
     // hooks, plugins or MCP servers, only the project's CLAUDE.md and ours.

package/src/server.mjs

@@ -15,6 +15,20 @@ import { ErrorSentinel } from './sentinel-errors.mjs';
 
 const PACKAGE = JSON.parse(await readFile(new URL('../package.json', import.meta.url), 'utf8').catch(() => '{}'));
 let crashHandlersInstalled = false;
+
+// RIPLEY's bridge, injected into every page it renders: reports the page's path
+// and title to the viewer and forwards runtime errors and failed resources.
+// It talks only upward through postMessage; the frame stays an opaque origin.
+export const RIPLEY_BRIDGE = '<script data-ripley>(function(){var p=location.pathname;function send(m){try{parent.postMessage(Object.assign({ripley:1},m),"*")}catch(e){}}send({type:"page",path:p,title:document.title});addEventListener("DOMContentLoaded",function(){send({type:"page",path:p,title:document.title})});addEventListener("error",function(e){if(e.target&&e.target!==window&&!e.message){var u=e.target.src||e.target.href||"";send({type:"error",message:"Failed to load "+(u||e.target.tagName.toLowerCase()),source:u,line:0});return}send({type:"error",message:String(e.message||"error"),source:e.filename||"",line:e.lineno||0})},true);addEventListener("unhandledrejection",function(e){var r=e.reason;send({type:"error",message:"Unhandled promise rejection: "+String(r&&r.message||r),source:"",line:0})})})();</script>';
+export function injectRipleyBridge(body) {
+  const text = Buffer.isBuffer(body) ? body.toString('utf8') : String(body);
+  if (text.includes('data-ripley')) return Buffer.from(text);
+  const head = text.match(/<head[^>]*>/i);
+  if (head) return Buffer.from(text.slice(0, head.index + head[0].length) + RIPLEY_BRIDGE + text.slice(head.index + head[0].length));
+  const html = text.match(/<html[^>]*>/i);
+  if (html) return Buffer.from(text.slice(0, html.index + html[0].length) + RIPLEY_BRIDGE + text.slice(html.index + html[0].length));
+  return Buffer.from(RIPLEY_BRIDGE + text);
+}
 // The author's collector: SEND and AUTO-REPORT are available out of the box; AUTO-REPORT stays off until the human turns it on.
 const DEFAULT_REPORT_URL = 'https://madre-reports.jossue-alcala-o.workers.dev/v1/reports';
 import { QuotaMonitor } from './quota-monitor.mjs';
@@ -523,26 +537,34 @@ export async function createPulseServer({
         });
         return response.end(file.body);
       }
-      // RIPLEY: the same file, served to be rendered, inside a frame that may run
-      // nothing, load nothing from outside and keep nothing.
-      if (request.method === 'GET' && url.pathname === '/api/preview') {
+      // RIPLEY: the project rendered as a site, inside a frame that runs scripts but
+      // reaches nothing: an opaque origin (sandbox without same-origin), no network
+      // (connect-src none), no forms, no top navigation, assets only from MADRE's
+      // own host. Path-based, so a page's relative links to its CSS, JS and images
+      // resolve to the same route.
+      const previewMatch = request.method === 'GET' && url.pathname.match(/^\/preview\/(project|attachments)\/(.*)$/);
+      if (previewMatch) {
         if (!ripleyEnabled) return sendJson(response, 412, { error: 'RIPLEY is off. Enable it in MODULES to render files.' });
-        const which = url.searchParams.get('root') === 'attachments' ? attachmentsRoot : canonicalProjectRoot;
-        const relative = url.searchParams.get('path') ?? '';
-        const kind = /\.(html?|xhtml)$/i.test(relative) ? 'text/html; charset=utf-8' : /\.svg$/i.test(relative) ? 'image/svg+xml' : null;
-        if (!kind) return sendJson(response, 415, { error: 'RIPLEY renders .html and .svg here; Markdown is rendered in the viewer itself.' });
+        const which = previewMatch[1] === 'attachments' ? attachmentsRoot : canonicalProjectRoot;
+        const relative = decodeURIComponent(previewMatch[2]);
         const file = await readServable(which, relative);
         if (file.status !== 200) return sendJson(response, file.status, { error: file.error });
-        response.writeHead(200, {
-          'content-type': kind,
-          'content-length': file.size,
+        const isPage = /\.(html?|xhtml)$/i.test(relative);
+        const origin = `${request.headers['x-forwarded-proto'] ?? 'http'}://${request.headers.host ?? '127.0.0.1'}`;
+        // Pages carry RIPLEY's bridge: one inline script that tells the viewer which
+        // page loaded and forwards the page's own errors. Nothing else is touched.
+        const bodyOut = isPage ? injectRipleyBridge(file.body) : file.body;
+        const headers = {
+          'content-type': isPage ? 'text/html; charset=utf-8' : file.contentType,
+          'content-length': Buffer.byteLength(bodyOut),
           'cache-control': 'no-store',
           'x-content-type-options': 'nosniff',
           'referrer-policy': 'no-referrer',
-          'content-security-policy': "sandbox; default-src 'none'; img-src 'self' data: blob:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; media-src 'self' data:; form-action 'none'; base-uri 'none'",
           'content-disposition': `inline; filename="${encodeURIComponent(basename(file.path))}"`,
-        });
-        return response.end(file.body);
+        };
+        if (isPage) headers['content-security-policy'] = `sandbox allow-scripts; default-src 'none'; script-src 'unsafe-inline' ${origin}; style-src 'unsafe-inline' ${origin}; img-src ${origin} data: blob:; font-src ${origin} data:; media-src ${origin} data: blob:; connect-src 'none'; frame-src 'none'; object-src 'none'; form-action 'none'; base-uri 'none'`;
+        response.writeHead(200, headers);
+        return response.end(bodyOut);
       }
       if (request.method === 'POST' && url.pathname === '/api/attachments') {
         let bytes;