@jossuealcala/madre 0.4.1 → 0.5.0

package/public/es.js

@@ -64,6 +64,8 @@ export const ES = {
   'NO ADAPTER': 'SIN ADAPTADOR',
   'READY': 'LISTO',
   'SIGNED OUT': 'SIN SESIÓN',
+  'ROUTE BLOCKED': 'RUTA BLOQUEADA',
+  'route: {destination}': 'ruta: {destination}',
   'Not on this computer.': 'No lo tienes instalado.',
   'Not on this computer · {command}': 'No lo tienes instalado · {command}',
   'version unknown': 'versión desconocida',
@@ -729,6 +731,8 @@ export const ES = {
   'Load your module files again without restarting the room': 'Vuelve a cargar tus archivos de módulo sin reiniciar la sala',
   'YOURS · ': 'TUYOS · ',
   'REMOVE': 'QUITAR',
+  'UNINSTALL': 'DESINSTALAR',
+  'Delete module file {file}': 'Borrar el archivo del módulo {file}',
   'DID NOT LOAD · ': 'NO CARGÓ · ',
   'connections › ': 'conexiones › ',
   'HELP': 'AYUDA',
@@ -902,7 +906,7 @@ export const ES = {
   'loading…': 'cargando…',
   'select & copy': 'selecciona y copia',
   'to ': 'para ',
-  'memory · answers & asks the crew · never writes': 'memoria · contesta y le pregunta a la tripulación · nunca escribe',
+  'memory · never writes': 'memoria · nunca escribe',
   'Choose the model for this agent': 'Elige el modelo de este agente',
   'loading models…': 'cargando modelos…',
   'other model name…': 'otro nombre de modelo…',
@@ -1620,12 +1624,13 @@ export const ES = {
   // ── EL COMPOSITOR, LOS MODOS Y LA ANULACIÓN ──────────────────────────────
   'Arm CREATE for this message: the agent may add new files to the project where they belong.':
     'Arma CREATE para este mensaje: el agente puede agregar archivos nuevos donde les toque en el proyecto.',
+  'Build one MADRE module with the guided SDK flow: the agent writes it, then you review and install it.':
+    'Construye un módulo de MADRE con el flujo guiado del SDK: el agente lo escribe y después tú lo revisas e instalas.',
   'Image': 'Imagen',
   'Ask for an image: arms CREATE with the image scope and routes to an agent that can generate images.':
     'Pide una imagen: arma CREATE con el alcance de imagen y la manda a un agente que sepa generarlas.',
   'Master brake: halt every plan and turn in flight. Never reaches an agent.':
     'Freno maestro: detiene todos los planes y turnos en vuelo. Nunca llega a un agente.',
-  'REVIEW {what} WITH': 'REVISAR {what} CON',
   'RIPLEY can render this file. ': 'RIPLEY puede dibujar este archivo. ',
   'RIPLEY preview of {path}': 'Vista previa de RIPLEY de {path}',
   'Show the file as text': 'Ver el archivo como texto',
@@ -1634,7 +1639,7 @@ export const ES = {
   'Permission mode for this message · {hint}': 'Modo de permiso de este mensaje · {hint}',
   'default model ▾': 'modelo por defecto ▾',
   ' · model for this request': ' · modelo para esta petición',
-  ' · mode for this message · ceiling #{cap}': ' · modo de este mensaje · techo #{cap}',
+  ' · ceiling #{cap}': ' · techo #{cap}',
   'NOW': 'AHORA',
   'RAISE TO #{n} ›': 'SUBIR A #{n} ›',
   'LOCKED': 'BLOQUEADO',
@@ -1781,6 +1786,11 @@ export const ES = {
     'Claude Code encontró en el entorno una llave de API además del inicio de sesión de claude.ai, y gana la llave. MADRE le entrega al CLI el entorno tal como lo tiene esta computadora, así que lo que esté exportado en el perfil de tu shell le llega. El turno se le cobra a la cuenta de API, no al plan, y los conectores de tu organización no cargan.',
   'Decide which one you mean. To work on the plan, unset the key where your shell exports it and open the room again; to work on the API, this message is only a notice and can be ignored.':
     'Decide cuál quieres. Para trabajar con el plan, quita la llave de donde tu shell la exporta y vuelve a abrir la sala; para trabajar con la API, este mensaje es solo un aviso y se puede ignorar.',
+  'The agent is pointed at a custom endpoint': 'El agente apunta a un endpoint personalizado',
+  'The installed CLI inherited a base-URL override from this computer, so its request was going to another gateway instead of the official agent service. A demand to join a Telegram channel comes from that gateway, not from MADRE, Anthropic or OpenAI. MADRE now names that route and stops before sending the briefing.':
+    'El CLI instalado heredó de esta computadora una dirección base distinta, así que su solicitud iba a otro gateway y no al servicio oficial del agente. La exigencia de unirse a un canal de Telegram viene de ese gateway, no de MADRE, Anthropic ni OpenAI. MADRE ahora nombra esa ruta y se detiene antes de enviar el briefing.',
+  'Do not subscribe or enter credentials. Remove the base-URL override and reopen MADRE to use the official service. If the gateway is intentional and you have verified who operates it, explicitly allow only that agent.':
+    'No te suscribas ni ingreses credenciales. Quita la dirección base modificada y vuelve a abrir MADRE para usar el servicio oficial. Si el gateway es intencional y verificaste quién lo opera, autoriza explícitamente solo a ese agente.',
   // La condición que declara el módulo PLAYWRIGHT. Las de los módulos viven en su archivo, no
   // en troubleshooting.js, y por eso se quedaron fuera del catálogo hasta ahora.
   'PLAYWRIGHT: the browser server is not installed': 'PLAYWRIGHT: el servidor de navegador no está instalado',
@@ -1792,6 +1802,16 @@ export const ES = {
   'SHOW THE {n} DISMISSED': 'VER LOS {n} DESCARTADOS',
   'DISMISS ALL {n}': 'DESCARTAR LOS {n}',
   'DOWNLOAD THE LOG': 'DESCARGAR EL REGISTRO',
+  '/module writes a file, so it needs #2 CREATE. Your request is still in the composer.':
+    '/module escribe un archivo, así que necesita #2 CREATE. Tu petición sigue en el compositor.',
+  'ARM #2 CREATE': 'ARMAR #2 CREATE',
+  'review it with': 'revisarlo con',
+  'no session': 'sin sesión',
+  'CLICK A LINE NUMBER TO SELECT · SHIFT FOR A RANGE':
+    'CLIC EN UN NÚMERO DE LÍNEA PARA SELECCIONAR · SHIFT PARA UN RANGO',
+  '{agent} wrote this file in this room': '{agent} escribió este archivo en esta sala',
+  'MU/TH/UR › {name} declares {fields}, which this MADRE does not know. A typo, or a field from a newer version.':
+    'MU/TH/UR › {name} declara {fields}, que esta MADRE no conoce. O es un dedazo, o es un campo de una versión más nueva.',
   'OR ON MADRE.RUN ↗': 'O EN MADRE.RUN ↗',
   '✎ REPORT ON MADRE.RUN ↗': '✎ REPORTAR EN MADRE.RUN ↗',
   'OPEN ⚙ CONNECTIONS · @{agent}': 'ABRIR ⚙ CONEXIONES · @{agent}',
@@ -1803,6 +1823,12 @@ export const ES = {
     '# borra o comenta la línea que encuentre, y luego:',
   '# and start MADRE from a new terminal':
     '# y arranca MADRE desde una terminal nueva',
+  '# remove that export from ~/.zshrc, ~/.zprofile or ~/.zshenv; then:':
+    '# quita esa exportación de ~/.zshrc, ~/.zprofile o ~/.zshenv; después:',
+  '# remove that export from ~/.bashrc, ~/.profile or ~/.bash_profile; then:':
+    '# quita esa exportación de ~/.bashrc, ~/.profile o ~/.bash_profile; después:',
+  '# open a new room; only for a gateway you verified:':
+    '# abre una sala nueva; solo para un gateway que sí verificaste:',
   '# inside gemini: /auth → "Use Gemini API key" and paste the key from https://aistudio.google.com/app/apikey':
     '# dentro de gemini: /auth → "Use Gemini API key" y pega la llave de https://aistudio.google.com/app/apikey',
   '# or, without the prompt:':
@@ -1995,6 +2021,13 @@ export const ES = {
   '{title} is not available here · see MODULES': '{title} no está disponible aquí · mira MÓDULOS',
   'MU/TH/UR › /{name} needs a request after it, e.g. "/{name} a poster for the launch".':
     'MU/TH/UR › /{name} necesita una petición después, por ejemplo «/{name} un póster para el lanzamiento».',
+  'MU/TH/UR › /module needs a job, e.g. "/module summarize today’s commits".':
+    'MU/TH/UR › /module necesita una tarea, por ejemplo «/module resume los commits de hoy».',
+  'MU/TH/UR › /module needs #2 CREATE. Choose #2 in the mode chip, then send again.':
+    'MU/TH/UR › /module necesita #2 CREATE. Elige #2 en el chip de modo y vuelve a enviar.',
+  'MU/TH/UR · MODULE · NEEDS #2 ›': 'MU/TH/UR · MODULE · REQUIERE #2 ›',
+  'Create a MADRE module for this request: {request} Write exactly one <id>.module.mjs file for review. Do not install it; MADRE will show the human an install card.':
+    'Crea un módulo de MADRE para esta petición: {request} Escribe exactamente un archivo <id>.module.mjs para revisión. No lo instales; MADRE le mostrará al humano una tarjeta de instalación.',
   'MU/TH/UR › unknown command /{name}. Type "/" to see what this room offers.':
     'MU/TH/UR › comando desconocido /{name}. Escribe «/» para ver lo que ofrece esta sala.',
   '{name} · uploading…': '{name} · subiendo…',

package/public/index.html

@@ -305,6 +305,8 @@
             <button id="viewer-reload" class="nav" type="button" title="Reload the page" aria-label="Reload">↻</button>
           </span>
           <span id="viewer-path" class="viewer-path"></span>
+          <span id="viewer-lang" class="viewer-lang" hidden></span>
+          <span id="viewer-hint-select" class="viewer-lang" hidden>CLICK A LINE NUMBER TO SELECT · SHIFT FOR A RANGE</span>
           <span id="viewer-selection" class="viewer-selection" hidden></span>
           <button id="viewer-mode" class="viewer-review viewer-mode" type="button" hidden>SOURCE</button>
           <button id="viewer-review" class="viewer-review" type="button" hidden>REVIEW WITH ▾</button>

package/public/styles.css

@@ -40,10 +40,26 @@
   --mode-2: #ffb000; --mode-2-ink: #1a1000;        /* CREATE · amber phosphor */
   --mode-3: var(--terror); --mode-3-ink: #fff3f1;  /* CONTROL · the red screen */
   --mode-4: #8fd3ff; --mode-4-ink: #04131c;        /* AIRLOCK · the cold outside */
+  --module-electric: #b44cff; --module-electric-ink: #12001d; /* MODULE · MADRE electric purple */
 }
+/* Reading code, in whichever ground the room is standing on. These were picked for phosphor on
+   black; on white the same green and yellow disappear, so each one has a light value of its own. */
+:root {
+  --syn-keyword: #9bb8ff;
+  --syn-string: #9bff66;
+  --syn-comment: color-mix(in srgb, var(--text-3) 88%, transparent);
+  --syn-number: #ffd166;
+  --syn-literal: #ff9ecd;
+}
+
 @media (prefers-color-scheme: light) {
   :root:not([data-theme="dark"]) {
     color-scheme: light;
+    --syn-keyword: #0b57b8;
+    --syn-string: #0a6e35;
+    --syn-comment: #6a7280;
+    --syn-number: #9a5000;
+    --syn-literal: #9c1f6b;
     --bg: #f4f5f2;
     --bg-2: #ffffff;
     --panel: #ffffff;
@@ -71,6 +87,11 @@
 }
 :root[data-theme="light"] {
     color-scheme: light;
+    --syn-keyword: #0b57b8;
+    --syn-string: #0a6e35;
+    --syn-comment: #6a7280;
+    --syn-number: #9a5000;
+    --syn-literal: #9c1f6b;
     --bg: #f4f5f2;
     --bg-2: #ffffff;
     --panel: #ffffff;
@@ -145,7 +166,11 @@ body {
   .brand-mark .beat-dot { animation: none; opacity: 1; }
   .brand-word { animation: none; opacity: 1; transform: none; }
 }
-.project { flex: 0 1 auto; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; color: var(--text-3); }
+/* Two names sit here and only one of them tells you where you are. The project never gives way:
+   a room whose project reads `pul…` has stopped saying which project it is. The conversation is
+   the one that shrinks — it has a panel of its own where its whole name is written. */
+.project { flex: 0 0 auto; max-width: 24ch; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; color: var(--text-3); }
+.project.chat-here { flex: 0 1 auto; min-width: 3ch; max-width: none; }
 .update-command { display: flex; align-items: center; gap: 10px; margin: 8px 0; padding: 8px 10px; border: 1px solid var(--line); border-radius: 10px; background: color-mix(in srgb, var(--text) 4%, transparent); }
 .update-command code { flex: 1; min-width: 0; overflow-x: auto; white-space: nowrap; font-family: var(--mono); font-size: 11.5px; color: var(--text); }
 .update-command button { font: inherit; font-family: var(--mono); font-size: 9.5px; letter-spacing: .14em; text-transform: uppercase; border: 1px solid var(--line); background: transparent; color: var(--text-2); border-radius: 8px; padding: 4px 10px; cursor: pointer; }
@@ -162,7 +187,7 @@ body {
 .train-step-label { font-family: var(--mono); font-size: 9px; letter-spacing: .16em; text-transform: uppercase; color: var(--text-3); }
 .project::before { content: "/ "; }
 .agents { display: flex; gap: 8px; margin-left: 0; flex: none; }
-.connection { display: inline-flex; align-items: center; gap: 6px; color: var(--text-3); text-transform: uppercase; font-size: 10px; }
+.connection { display: inline-flex; flex: 0 0 auto; white-space: nowrap; align-items: center; gap: 6px; color: var(--text-3); text-transform: uppercase; font-size: 10px; }
 .connection-dot { width: 6px; height: 6px; border-radius: 50%; background: var(--text-3); }
 .connection[data-state="live"] .connection-dot { background: var(--phosphor); box-shadow: 0 0 10px var(--phosphor); }
 .connection[data-state="reconnecting"] .connection-dot { background: var(--warn); animation: blink 1s infinite; }
@@ -570,11 +595,14 @@ pre.core-egress-log { margin: 0; max-height: 34vh; overflow: auto; padding: 10px
 /* ================= composer ================= */
 .composer { display: grid; gap: 12px; padding: 14px 0 0; }
 .composer[aria-disabled="true"] { opacity: .45; pointer-events: none; }
-.picker { display: flex; gap: 8px; align-items: center; padding: 0 4px; }
+/* One line, always. The spheres and the chips keep their size; the note is the only piece that
+   gives way, because its whole sentence is in its tooltip anyway. */
+.picker { display: flex; flex-wrap: nowrap; gap: 8px; align-items: center; padding: 0 4px; }
 .picker .pick { --size: 30px; cursor: pointer; border: 1px solid transparent; background: color-mix(in srgb, var(--agent) 10%, transparent); transition: transform .12s ease, box-shadow .12s ease; }
 .picker .pick:hover { transform: translateY(-1px); }
 .picker .pick[aria-checked="true"] { box-shadow: 0 0 0 2px var(--bg), 0 0 0 3.5px var(--agent); background: color-mix(in srgb, var(--agent) 22%, transparent); }
-.picker .pick-label { font-family: var(--mono); font-size: 10.5px; letter-spacing: .1em; text-transform: uppercase; color: var(--text-2); margin-left: 2px; }
+.picker .pick-label { display: flex; align-items: center; gap: 8px; min-width: 0; font-family: var(--mono); font-size: 10.5px; letter-spacing: .1em; text-transform: uppercase; color: var(--text-2); margin-left: 2px; }
+.picker .pick-label > .mode-chip, .picker .pick-label > .model-chip { flex: 0 0 auto; }
 .picker .pick-label b { color: var(--agent, var(--text)); font-weight: 600; }
 .field { position: relative; display: grid; grid-template-columns: auto 1fr auto; gap: 10px; align-items: end; padding: 6px 6px 6px 18px; border: 1px solid var(--line-2); background: var(--panel); border-radius: 24px; }
 .crew-label { align-self: center; font-family: var(--mono); font-size: 10px; letter-spacing: .18em; color: var(--text-3); white-space: nowrap; transition: color .4s ease; }
@@ -593,7 +621,7 @@ textarea::placeholder { color: var(--text-3); }
 .field button[type="submit"] svg { width: 18px; height: 18px; }
 .field button[type="submit"]:hover { filter: brightness(1.06); }
 .field button[type="submit"]:disabled { opacity: .4; cursor: default; box-shadow: none; }
-.pick-label .pick-note { font-family: var(--mono); font-size: 9px; letter-spacing: .14em; text-transform: uppercase; color: var(--text-3); margin-left: 4px; white-space: nowrap; }
+.pick-label .pick-note { flex: 0 1 auto; min-width: 0; overflow: hidden; text-overflow: ellipsis; font-family: var(--mono); font-size: 9px; letter-spacing: .14em; text-transform: uppercase; color: var(--text-3); white-space: nowrap; }
 .safety { margin: 14px auto 18px; color: var(--text-3); font-family: var(--mono); font-size: 9.5px; letter-spacing: .08em; text-transform: uppercase; text-align: center; }
 
 /* toast */
@@ -801,6 +829,8 @@ dialog.mother::backdrop { background: rgba(0, 0, 0, .82); backdrop-filter: blur(
 .module-card .actions { display: flex; gap: 10px; flex-wrap: wrap; align-items: center; }
 .module-card .actions button { border: 1px solid var(--ph); background: transparent; color: var(--ph); font: inherit; font-size: 10.5px; letter-spacing: .18em; padding: 8px 14px; cursor: pointer; }
 .module-card .actions button.primary { background: var(--ph); color: #041004; text-shadow: none; }
+.module-card .actions button.remove-module { border-color: color-mix(in srgb, var(--danger) 65%, transparent); color: var(--danger); }
+.module-card .actions button.remove-module:hover { background: color-mix(in srgb, var(--danger) 12%, transparent); }
 .module-card .actions button:disabled { opacity: .4; cursor: default; }
 .module-card .actions .note { font-size: 10px; letter-spacing: .12em; color: var(--ph-dim); }
 .module-card .confirm { border: 1px dashed var(--ph); padding: 12px 14px; display: grid; gap: 10px; }
@@ -915,6 +945,9 @@ dialog.mother::backdrop { background: rgba(0, 0, 0, .82); backdrop-filter: blur(
 .picker .mode-chip.m3 { --mode: var(--mode-3); }
 .picker .mode-chip.m4 { --mode: var(--mode-4); }
 .mode-menu { width: min(380px, calc(100vw - 24px)); padding: 12px; }
+/* One line. The header carries two facts — whose mode, and how far it may go — and both have to
+   be readable at once; the sentence about this message living only in this message is on the chip
+   that opens this menu. Short enough that the ellipsis below should never have anything to do. */
 .mode-menu .model-menu-title { margin: 4px 10px 10px; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
 .mode-menu .mode-ladder { display: grid; gap: 2px; }
 .mode-menu .mode-option { --mode: var(--text-2); display: grid; grid-template-columns: 28px minmax(0, 1fr) auto; gap: 14px; align-items: baseline; width: 100%; text-align: left; border: 0; background: transparent; color: var(--text); font: inherit; font-family: var(--mono); padding: 12px 10px; border-radius: 8px; cursor: pointer; transition: background .15s, opacity .15s; }
@@ -1051,7 +1084,11 @@ dialog.viewer::backdrop { background: rgba(0,0,0,.7); backdrop-filter: blur(4px)
 .viewer-review { border: 1px solid var(--phosphor); background: color-mix(in srgb, var(--phosphor) 10%, transparent); color: var(--phosphor); font: inherit; font-family: var(--mono); font-size: 10px; letter-spacing: .14em; padding: 5px 10px; border-radius: 6px; cursor: pointer; white-space: nowrap; }
 .viewer-review:hover { background: color-mix(in srgb, var(--phosphor) 20%, transparent); }
 .viewer-menu { position: fixed; z-index: 50; min-width: 220px; border: 1px solid var(--line-2); background: var(--panel); border-radius: 12px; box-shadow: 0 14px 40px rgba(0, 0, 0, .35); padding: 6px; display: grid; gap: 2px; }
-.viewer-menu .hint { padding: 4px 10px 6px; font-family: var(--mono); font-size: 10px; letter-spacing: .12em; color: var(--text-3); }
+/* Two lines: the range being sent, then the question. The reference is a path and can be long,
+   so it wraps instead of pushing the menu wider or being clipped mid-word. */
+.viewer-menu .hint { display: grid; gap: 2px; padding: 6px 10px 8px; font-family: var(--mono); font-size: 10px; letter-spacing: .12em; color: var(--text-3); }
+.viewer-menu .hint b { color: var(--text-2); font-weight: 500; overflow-wrap: anywhere; }
+.viewer-menu .item span { color: var(--text-3); font-size: 11px; }
 .viewer-menu .item { display: flex; gap: 10px; align-items: center; padding: 7px 10px; border-radius: 8px; border: 0; background: transparent; color: var(--text); font: inherit; font-size: 13px; cursor: pointer; text-align: left; }
 .viewer-menu .item:hover { background: color-mix(in srgb, var(--agent, var(--phosphor)) 14%, transparent); }
 .viewer-menu .item b { color: var(--agent, var(--phosphor)); font-family: var(--mono); font-size: 11.5px; letter-spacing: .06em; }
@@ -1204,6 +1241,36 @@ dialog.viewer::backdrop { background: rgba(0,0,0,.7); backdrop-filter: blur(4px)
 .system.escalation.denied { color: var(--text-3); border-color: var(--line-2); background: transparent; }
 .composer.creating .field { border-color: var(--mode-2); box-shadow: 0 0 0 3px color-mix(in srgb, var(--mode-2) 18%, transparent); }
 .composer.creating .crew-label { color: var(--mode-2); }
+/* /module temporarily gives CREATE its own electric MADRE signature. The pixel layer crosses
+   the typebox once, then leaves a clean purple field behind while the request is composed. */
+.composer.module-command { --mode: var(--module-electric); --mode-ink: var(--module-electric-ink); }
+.composer.creating.module-command .field, .composer.module-command .field {
+  border-color: var(--module-electric);
+  background: linear-gradient(100deg, color-mix(in srgb, var(--module-electric) 8%, var(--panel)), var(--panel) 62%);
+  box-shadow: 0 0 0 3px color-mix(in srgb, var(--module-electric) 18%, transparent), 0 0 28px color-mix(in srgb, var(--module-electric) 18%, transparent);
+  transition: border-color .18s ease, background .22s ease, box-shadow .22s ease;
+}
+.composer.module-command .crew-label { color: var(--module-electric); text-shadow: 0 0 9px color-mix(in srgb, var(--module-electric) 58%, transparent); }
+.composer.module-command .editor textarea { caret-color: var(--module-electric); }
+.composer.module-command .editor .highlight .chip.cmd { --agent: var(--module-electric); }
+.composer .field::after {
+  content: ''; position: absolute; inset: 0; z-index: 2; border-radius: inherit; pointer-events: none; opacity: 0;
+  background:
+    linear-gradient(90deg, transparent 0 10%, color-mix(in srgb, var(--module-electric) 72%, transparent) 46% 54%, transparent 90% 100%),
+    repeating-linear-gradient(90deg, color-mix(in srgb, var(--module-electric) 78%, transparent) 0 7px, transparent 7px 12px),
+    repeating-linear-gradient(0deg, color-mix(in srgb, var(--module-electric) 62%, transparent) 0 7px, transparent 7px 12px);
+  background-size: 42% 100%, 100% 12px, 12px 100%;
+  background-position: -55% 0, 0 0, 0 0;
+  mix-blend-mode: normal;
+}
+.composer.module-command .field::after { animation: module-pixel-shift .58s steps(9, end) 1; }
+@keyframes module-pixel-shift {
+  0% { opacity: 0; clip-path: inset(0 100% 0 0); background-position: -55% 0, 0 0, 0 0; }
+  14% { opacity: .82; }
+  58% { opacity: .48; clip-path: inset(0 0 0 0); background-position: 86% 0, 9px 0, 0 7px; }
+  100% { opacity: 0; clip-path: inset(0 0 0 100%); background-position: 155% 0, 18px 0, 0 14px; }
+}
+@media (prefers-reduced-motion: reduce) { .composer.module-command .field::after { animation: none; } }
 .who .badge.lease { color: var(--warn); border-color: color-mix(in srgb, var(--warn) 50%, transparent); }
 .user .stamp .lease { color: var(--warn); }
 .system.lease { color: var(--warn); }
@@ -1244,17 +1311,28 @@ dialog.viewer::backdrop { background: rgba(0,0,0,.7); backdrop-filter: blur(4px)
 .composer.creating { width: min(1180px, 100% - 40px); }
 .editor textarea::placeholder { white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
 .editor { position: relative; display: grid; min-width: 0; }
-.editor textarea, .editor .highlight { grid-area: 1 / 1; margin: 0; padding: 7px 0; line-height: 21px; font-size: 15px; font-family: inherit; letter-spacing: normal; white-space: pre-wrap; overflow-wrap: anywhere; word-break: normal; box-sizing: content-box; min-height: 0; max-height: none; overflow-y: auto; }
+.editor textarea, .editor .highlight { grid-area: 1 / 1; margin: 0 -5px; padding: 7px 5px; line-height: 21px; font-size: 15px; font-family: inherit; letter-spacing: normal; white-space: pre-wrap; overflow-wrap: anywhere; word-break: normal; box-sizing: content-box; min-height: 0; max-height: none; overflow-y: auto; }
 .editor textarea { position: relative; z-index: 1; color: transparent; caret-color: var(--text); }
 .editor textarea::selection { background: color-mix(in srgb, var(--phosphor) 30%, transparent); }
 .composer.stopall .editor textarea { color: var(--terror); }
 .composer.stopall .editor .highlight { visibility: hidden; }
 .editor .highlight { color: var(--text); pointer-events: none; scrollbar-width: none; }
 .editor .highlight::-webkit-scrollbar { display: none; }
-.editor .highlight .chip { --chip-bg: color-mix(in srgb, var(--agent, var(--phosphor)) 16%, var(--panel)); border-radius: 5px; padding: 0; margin: 0; background: var(--chip-bg); color: var(--agent, var(--phosphor)); box-shadow: 0 0 0 3px var(--chip-bg), 0 0 0 4px color-mix(in srgb, var(--agent, var(--phosphor)) 40%, transparent); font-weight: 600; }
-.editor .highlight .chip.cmd { --agent: var(--phosphor); font-family: var(--mono); font-size: 13px; letter-spacing: .04em; }
-.editor .highlight .chip.file { --agent: var(--text-2); font-family: var(--mono); font-size: 13px; letter-spacing: 0; font-weight: 500; }
-.editor .highlight .chip.unknown { --agent: var(--text-3); text-decoration: underline dotted; font-weight: 500; }
+/* A chip may take any colour it likes and no metric at all. Font family, size, weight and
+   letter-spacing all change how wide a string draws, and the caret under this layer is placed by
+   the textarea's metrics, not by these: change one and the caret drifts into the pill. Colour,
+   background, radius and box-shadow are free — they paint without moving anything. */
+/* A pill may grow upward and it may not grow sideways. Vertical padding costs nothing: an inline
+   box overflows its line without moving a character. Horizontal padding does move them — and the
+   negative margin that pays for it only gives the room back to the TEXT, while the background
+   still paints those pixels, so the pill ends up covering the space after it and the next word
+   arrives glued to its edge. Its ring is drawn INSET for the same reason: a spread shadow paints
+   outward on every side, so it would swallow that space too, only more quietly. It hugs its
+   characters; the gap after it is the space the human typed, and it stays visible. */
+.editor .highlight .chip { --chip-bg: color-mix(in srgb, var(--agent, var(--phosphor)) 20%, var(--panel)); border-radius: 5px; padding: 3px 0; margin: 0; background: var(--chip-bg); color: var(--agent, var(--phosphor)); box-shadow: inset 0 0 0 1px color-mix(in srgb, var(--agent, var(--phosphor)) 50%, transparent); }
+.editor .highlight .chip.cmd { --agent: var(--phosphor); }
+.editor .highlight .chip.file { --agent: var(--text-2); }
+.editor .highlight .chip.unknown { --agent: var(--text-3); text-decoration: underline dotted; }
 /* A mention is a word in the sentence you are writing, so it is only ever coloured. A pill drawn
    round it turns the line into a form to fill in and breaks the rhythm of reading it back. */
 .editor .highlight .chip.agent { background: transparent; box-shadow: none; }
@@ -1394,6 +1472,7 @@ dialog.viewer::backdrop { background: rgba(0,0,0,.7); backdrop-filter: blur(4px)
 :root[data-scheme="light"] .composer.creating .field, :root[data-scheme="light"] .composer.creating.ordering .field { box-shadow: 0 0 0 2px color-mix(in srgb, var(--mode-2) 30%, transparent); }
 :root[data-scheme="light"] .composer.ash-on .field { box-shadow: 0 0 0 2px color-mix(in srgb, var(--brew) 22%, transparent); }
 :root[data-scheme="light"] .composer.dropping .field { box-shadow: 0 0 0 2px color-mix(in srgb, var(--phosphor) 35%, transparent); }
+:root[data-scheme="light"] .composer.module-command .field { box-shadow: 0 0 0 2px color-mix(in srgb, var(--module-electric) 34%, transparent); }
 :root[data-scheme="light"] .memory-hint .pill { animation: none; box-shadow: none; }
 :root[data-scheme="light"] .mode-menu .mode-option .tag .dot { box-shadow: none; }
 :root[data-scheme="light"] .picker .mode-chip, :root[data-scheme="light"] .who .badge { text-shadow: none; box-shadow: none; }
@@ -1643,3 +1722,15 @@ dialog.viewer::backdrop { background: rgba(0,0,0,.7); backdrop-filter: blur(4px)
 /* A remedy this room can carry out itself: the button goes above the commands it replaces. */
 .mother-goto { display: block; margin: 6px 0 0; border: 1px solid var(--ph-dim); border-radius: 4px; background: transparent; color: var(--ph); cursor: pointer; font: inherit; font-size: 10px; letter-spacing: .14em; padding: 6px 12px; text-transform: uppercase; }
 .mother-goto:hover { background: color-mix(in srgb, var(--ph) 12%, transparent); }
+
+/* A file an agent wrote in this room, in that agent's own colour. */
+.tree .node .touched { width: 6px; height: 6px; border-radius: 50%; background: var(--agent, var(--ph)); box-shadow: 0 0 6px var(--agent, var(--ph)); flex: 0 0 auto; margin-left: 2px; }
+
+/* Read by what the file is. Six roles, the room's own phosphor: enough to find a string or a
+   comment at a glance, and never so many colours that the code stops being the thing you see. */
+.viewer .code .t-keyword { color: var(--syn-keyword); }
+.viewer .code .t-string  { color: var(--syn-string); }
+.viewer .code .t-comment { color: var(--syn-comment); font-style: italic; }
+.viewer .code .t-number  { color: var(--syn-number); }
+.viewer .code .t-literal { color: var(--syn-literal); }
+.viewer-lang { color: var(--ph-dim); font-size: 9.5px; letter-spacing: .16em; text-transform: uppercase; }

package/public/syntax.js

@@ -0,0 +1,121 @@
+// The names below are the names of formats — JavaScript, JSON, CSS, Markdown — and a format is
+// called the same in every language, so they never pass through the catalogue.
+//
+// Reading a file in the room, not just seeing it. MADRE has no dependencies and is not about to
+// take one for this: a highlighter good enough for a viewer is a few hundred lines, and a
+// highlighter that has to be perfect is somebody else's product.
+//
+// The rule it follows is the one that keeps it honest: it never rewrites the file. It hands back
+// spans over the same characters, in the same order, so what the screen shows and what is on disk
+// are the same bytes. Anything it cannot classify stays plain text rather than being guessed at.
+
+const FAMILIES = {
+  js: { ext: /\.(m|c)?jsx?$|\.tsx?$/i, label: 'JavaScript',
+    keywords: /\b(await|async|break|case|catch|class|const|continue|default|delete|do|else|export|extends|finally|for|from|function|get|if|import|in|instanceof|let|new|of|return|set|static|super|switch|this|throw|try|typeof|var|void|while|yield|as|interface|type|enum|implements|readonly|declare|namespace|satisfies)\b/,
+    literals: /\b(true|false|null|undefined|NaN|Infinity)\b/,
+    line: /\/\/.*/, block: [/\/\*/, /\*\//], strings: ['"', "'", '`'] },
+  json: { ext: /\.json(c|5)?$|^\.?[a-z-]*rc$/i, label: 'JSON',
+    keywords: /(?!)/, literals: /\b(true|false|null)\b/, line: /(?!)/, block: null, strings: ['"'] },
+  css: { ext: /\.(css|scss|less|sass)$/i, label: 'CSS',
+    keywords: /@[a-z-]+|\b(important)\b/, literals: /#[0-9a-f]{3,8}\b|\b\d+(\.\d+)?(px|rem|em|%|vh|vw|s|ms|fr|deg)\b/i,
+    line: /\/\/.*/, block: [/\/\*/, /\*\//], strings: ['"', "'"] },
+  html: { ext: /\.(html?|xhtml|xml|svg|vue|svelte)$/i, label: 'HTML',
+    keywords: /<\/?[a-zA-Z][\w:-]*|\/?>/, literals: /(?!)/, line: /(?!)/, block: [/<!--/, /-->/], strings: ['"', "'"] },
+  md: { ext: /\.(md|markdown|mdx)$/i, label: 'Markdown',
+    keywords: /^#{1,6}\s.*$|^\s*[-*+]\s|^\s*\d+\.\s|^>\s?.*$/, literals: /\*\*[^*]+\*\*|__[^_]+__|\[[^\]]*\]\([^)]*\)/,
+    line: /(?!)/, block: null, strings: ['`'] },
+  py: { ext: /\.pyi?$/i, label: 'Python',
+    keywords: /\b(and|as|assert|async|await|break|class|continue|def|del|elif|else|except|finally|for|from|global|if|import|in|is|lambda|nonlocal|not|or|pass|raise|return|try|while|with|yield|match|case)\b/,
+    literals: /\b(True|False|None|self|cls)\b/, line: /#.*/, block: null, strings: ['"', "'"] },
+  sh: { ext: /\.(sh|bash|zsh|fish)$|^(Makefile|Dockerfile|\.env.*)$/i, label: 'Shell',
+    keywords: /\b(if|then|else|elif|fi|for|while|do|done|case|esac|function|return|export|local|source|set|trap|in)\b/,
+    literals: /\$\{?[A-Za-z_][\w]*\}?|\$\(.*?\)/, line: /#.*/, block: null, strings: ['"', "'"] },
+  yaml: { ext: /\.(ya?ml|toml|ini|cfg|conf)$/i, label: 'Config',
+    keywords: /^\s*[\w.-]+(?=\s*[:=])/, literals: /\b(true|false|null|yes|no|on|off)\b/, line: /#.*/, block: null, strings: ['"', "'"] },
+  sql: { ext: /\.sql$/i, label: 'SQL',
+    keywords: /\b(select|from|where|insert|into|values|update|set|delete|create|table|index|drop|alter|join|left|right|inner|outer|on|group|order|by|having|limit|offset|and|or|not|null|primary|key|foreign|references|as|distinct|union|with)\b/i,
+    literals: /\b\d+\b/, line: /--.*/, block: [/\/\*/, /\*\//], strings: ["'", '"'] },
+};
+
+// What this file is, by its name alone. A family MADRE does not know is not an error: the file is
+// shown as plain text, which is what it would have been anyway.
+export function familyOf(name) {
+  const base = String(name ?? '').split('/').pop() ?? '';
+  for (const [id, family] of Object.entries(FAMILIES)) if (family.ext.test(base)) return { id, ...family };
+  return null;
+}
+
+export function languageLabel(name) {
+  return familyOf(name)?.label ?? null;
+}
+
+// One line, cut into pieces. Returns [{ text, kind }] covering exactly the input: joining every
+// `text` back together must give the line unchanged, which is what the test holds it to.
+export function tokenize(line, family, state = { inBlock: false }) {
+  if (!family) return [{ text: line, kind: null }];
+  const out = [];
+  let index = 0;
+  const push = (text, kind) => { if (text) out.push({ text, kind }); };
+
+  while (index < line.length) {
+    const rest = line.slice(index);
+
+    if (state.inBlock) {
+      const close = family.block ? rest.match(family.block[1]) : null;
+      if (!close) { push(rest, 'comment'); index = line.length; break; }
+      push(rest.slice(0, close.index + close[0].length), 'comment');
+      index += close.index + close[0].length;
+      state.inBlock = false;
+      continue;
+    }
+
+    const blockOpen = family.block ? rest.match(family.block[0]) : null;
+    const lineOpen = rest.match(family.line);
+    const quote = family.strings.map((q) => rest.indexOf(q)).filter((at) => at >= 0).sort((a, b) => a - b)[0];
+
+    // Whichever comes first on this line decides what happens next.
+    const marks = [
+      blockOpen && blockOpen.index === 0 ? { at: 0, what: 'block' } : blockOpen ? { at: blockOpen.index, what: 'block' } : null,
+      lineOpen && lineOpen.index !== undefined ? { at: lineOpen.index, what: 'line' } : null,
+      quote !== undefined ? { at: quote, what: 'string' } : null,
+    ].filter(Boolean).sort((a, b) => a.at - b.at);
+    const next = marks[0];
+
+    if (!next) { pushCode(rest, family, push); index = line.length; break; }
+    if (next.at > 0) { pushCode(rest.slice(0, next.at), family, push); index += next.at; continue; }
+
+    if (next.what === 'line') { push(rest, 'comment'); index = line.length; break; }
+    if (next.what === 'block') {
+      const opened = rest.match(family.block[0])[0];
+      const after = rest.slice(opened.length);
+      const close = after.match(family.block[1]);
+      if (close) { push(rest.slice(0, opened.length + close.index + close[0].length), 'comment'); index += opened.length + close.index + close[0].length; continue; }
+      push(rest, 'comment'); index = line.length; state.inBlock = true; break;
+    }
+
+    // A string: to its closing quote, respecting a backslash escape.
+    const q = rest[0];
+    let at = 1;
+    while (at < rest.length) {
+      if (rest[at] === '\\') { at += 2; continue; }
+      if (rest[at] === q) { at += 1; break; }
+      at += 1;
+    }
+    push(rest.slice(0, at), 'string');
+    index += at;
+  }
+  return out;
+}
+
+// Code between the comments and the strings: keywords, literals, numbers, and the rest plain.
+function pushCode(chunk, family, push) {
+  const pattern = new RegExp(`${family.keywords.source}|${family.literals.source}|\\b\\d+(?:\\.\\d+)?\\b`, family.keywords.flags.includes('i') ? 'gi' : 'g');
+  let last = 0;
+  for (const match of chunk.matchAll(pattern)) {
+    if (match.index > last) push(chunk.slice(last, match.index), null);
+    const text = match[0];
+    push(text, family.keywords.test(text) ? 'keyword' : /^\d/.test(text) ? 'number' : 'literal');
+    last = match.index + text.length;
+  }
+  if (last < chunk.length) push(chunk.slice(last), null);
+}

package/public/troubleshooting.js

@@ -60,6 +60,19 @@ export const CONDITIONS = [
       linux: ['grep -rn ANTHROPIC_API_KEY ~/.bashrc ~/.profile ~/.bash_profile 2>/dev/null', 'unset ANTHROPIC_API_KEY', '# and start MADRE from a new terminal'],
     },
   },
+  {
+    id: 'custom-agent-endpoint',
+    code: 'MU-055',
+    severity: 'blocking',
+    title: 'The agent is pointed at a custom endpoint',
+    match: /MADRE blocked @(?:codex|claude) before sending the briefing|Subscribe to (?:the )?Telegram|@conduitapi/i,
+    diagnosis: 'The installed CLI inherited a base-URL override from this computer, so its request was going to another gateway instead of the official agent service. A demand to join a Telegram channel comes from that gateway, not from MADRE, Anthropic or OpenAI. MADRE now names that route and stops before sending the briefing.',
+    remedy: 'Do not subscribe or enter credentials. Remove the base-URL override and reopen MADRE to use the official service. If the gateway is intentional and you have verified who operates it, explicitly allow only that agent.',
+    fixes: {
+      darwin: ['env | grep -E \'^(ANTHROPIC|OPENAI)_BASE_URL=\'', '# remove that export from ~/.zshrc, ~/.zprofile or ~/.zshenv; then:', 'unset ANTHROPIC_BASE_URL OPENAI_BASE_URL', '# open a new room; only for a gateway you verified:', 'PULSE_ALLOW_CUSTOM_AGENT_ENDPOINTS=claude madre start'],
+      linux: ['env | grep -E \'^(ANTHROPIC|OPENAI)_BASE_URL=\'', '# remove that export from ~/.bashrc, ~/.profile or ~/.bash_profile; then:', 'unset ANTHROPIC_BASE_URL OPENAI_BASE_URL', '# open a new room; only for a gateway you verified:', 'PULSE_ALLOW_CUSTOM_AGENT_ENDPOINTS=claude madre start'],
+    },
+  },
   {
     id: 'codex-reading-stdin',
     code: 'MU-002',

package/src/adapters/codex.mjs

@@ -50,6 +50,7 @@ export function buildCodexArgs({ projectRoot, prompt, model = null, attachments
 export function parseCodexOutput(output) {
   let text = '';
   let usage = null;
+  let error = null;
   for (const line of output.split('\n').filter(Boolean)) {
     try {
       const event = JSON.parse(line);
@@ -66,11 +67,13 @@ export function parseCodexOutput(output) {
           source: 'codex-json',
         };
       }
+      if (event.type === 'error' && typeof event.message === 'string') error = event.message;
+      if (event.type === 'turn.failed' && typeof event.error?.message === 'string') error = event.error.message;
     } catch {
       // Ignore CLI diagnostics that are not JSON events.
     }
   }
-  return { text: text.trim(), usage };
+  return { text: text.trim(), usage, ...(error ? { error } : {}) };
 }
 
 export function invokeCodex({ executable, projectRoot, prompt, timeoutMs = 120000, signal, model = null, attachments = [], lease = null, scopes = null, memoryServer = null, mcpServers = [], onProgress = null }) {

package/src/modules/index.mjs

@@ -79,8 +79,20 @@ export async function verifyModuleText({ text, name = null, replace = true }) {
   try {
     const probe = join(scratch, name && /\.m?js$/.test(name) ? basename(name) : 'candidate.mjs');
     await writeFile(probe, text);
-    const module = checkExternal(await importModuleFile(probe), { replace });
-    return { id: module.id, name: module.name, vendor: module.vendor, version: module.version ?? null, summary: module.summary ?? '', updates: module.updates ?? null };
+    let module;
+    try {
+      module = checkExternal(await importModuleFile(probe), { replace });
+    } catch (error) {
+      // The one mistake that looks right and never works: MADRE's own modules import the SDK by
+      // relative path because they live inside the package, and anyone — an agent most of all —
+      // reading one of them copies that line. Here the file is alone in a scratch folder, so the
+      // import cannot resolve and node says only that it cannot find a file. Say what to do.
+      if (error?.code === 'ERR_MODULE_NOT_FOUND' || /Cannot find (module|package)/.test(error?.message ?? '')) {
+        throw new Error(`${error.message.split('\n')[0]} — a module imports nothing: MADRE loads it from a folder of its own to check it, where no package resolves. Export a plain object, or a function ({ defineModule }) => defineModule({ … }) and MADRE hands you the SDK.`);
+      }
+      throw error;
+    }
+    return { id: module.id, name: module.name, vendor: module.vendor, version: module.version ?? null, summary: module.summary ?? '', updates: module.updates ?? null, unknown: module.unknown ?? [] };
   } finally { await rm(scratch, { recursive: true, force: true, maxRetries: 6, retryDelay: 60 }); }
 }
 
@@ -95,7 +107,7 @@ export async function installModuleText({ text, name = null, scope = 'user', sta
   // Where it came from, so the same place can be asked for a newer one later.
   if (source) await writeFile(join(dir, `${module.id}.source.json`), JSON.stringify({ ...source, at: new Date().toISOString(), version: module.version ?? null }, null, 2)).catch(() => {});
   await loadExternalModules({ stateRoot, projectRoot });
-  return { id: module.id, name: module.name, version: module.version ?? null, file: target, origin: scope === 'project' ? 'project' : 'user', replaced };
+  return { id: module.id, name: module.name, version: module.version ?? null, file: target, origin: scope === 'project' ? 'project' : 'user', replaced, unknown: module.unknown ?? [] };
 }
 
 // The same thing from a file already on this computer. `source` must be inside the project or the
@@ -122,9 +134,15 @@ export async function removeExternalModule({ id, stateRoot, projectRoot }) {
   const module = MODULES.find((known) => known.id === id);
   if (!module) throw new Error(`No module "${id}".`);
   if (!module.external) throw new Error(`${module.name} ships with MADRE and cannot be removed; switch it off instead.`);
-  await unlink(module.file).catch(() => {});
+  // The origin record goes first: if it cannot be removed, the executable module file remains
+  // installed rather than leaving a live registry entry whose file has already disappeared.
+  const files = [...new Set([module.file.replace(/\.(?:mjs|js)$/, '.source.json'), module.file])];
+  const removedFiles = [];
+  for (const file of files) {
+    try { await unlink(file); removedFiles.push(file); } catch (error) { if (error.code !== 'ENOENT') throw error; }
+  }
   await loadExternalModules({ stateRoot, projectRoot });
-  return { id, name: module.name, file: module.file };
+  return { id, name: module.name, file: module.file, removedFiles };
 }
 
 export const moduleById = (id) => MODULES.find((module) => module.id === id) ?? null;

package/src/modules/sdk.mjs

@@ -51,6 +51,19 @@ export function dependencies(runs) {
   return list.filter((dep) => dep && dep.name).map((dep) => ({ name: String(dep.name), version: dep.version ?? null, target: dep.target ?? null }));
 }
 
+// Every field this contract answers to. Thirty-four of them and all but two optional, which is
+// generous until you misspell one: `sumary` used to install without a word and leave a card with
+// an empty summary. A key MADRE does not know is not fatal — a module written for a newer MADRE
+// may carry fields this one has not learned yet — so it is said out loud instead of refused.
+export const MODULE_FIELDS = new Set([
+  'id', 'kind', 'name', 'vendor', 'package', 'version', 'tracks', 'updates', 'summary', 'creates',
+  'requires', 'models', 'commands', 'card', 'configKey', 'settings', 'controls', 'routes',
+  'conditions', 'slash', 'status', 'preflight', 'detect', 'confirm', 'installCommand',
+  'updatePlan', 'toolsForTurn', 'toggle', 'onToggle', 'onSettings', 'onEvent', 'toggledEvent',
+  'toggledBody', 'describe',
+]);
+export const unknownFields = (spec) => Object.keys(spec ?? {}).filter((key) => !MODULE_FIELDS.has(key));
+
 export function defineModule(spec) {
   if (!spec?.id || !/^[a-z][a-z0-9-]*$/.test(spec.id)) throw new Error(`Module id must be kebab-case: ${spec?.id}`);
   if (!spec.name) throw new Error(`Module ${spec.id} needs a name.`);
@@ -59,6 +72,8 @@ export function defineModule(spec) {
   const defaults = { ...(kind === 'builtin' ? { enabled: false } : {}), ...(spec.settings ?? {}) };
   const base = {
     id: spec.id, kind, name: spec.name, vendor: spec.vendor ?? 'MADRE', package: spec.package ?? null, version: spec.version ?? null,
+    // Keys this contract does not answer to. Carried so whoever installs the module is told.
+    unknown: unknownFields(spec),
     // What this module's version follows, when it is not its own: { name, npm } or { name, github }.
     // MADRE reads the version from there and looks for a newer one on its own, once a day.
     tracks: spec.tracks ? { name: spec.tracks.name ?? spec.tracks.npm ?? spec.tracks.github ?? null, npm: spec.tracks.npm ?? null, github: spec.tracks.github ?? null } : null,

package/src/outbound.mjs

@@ -269,7 +269,7 @@ export class OutboundLog {
 export function outboundView({ log = null, state = {}, agents = [] } = {}) {
   const counts = log?.counts() ?? {};
   const vendors = { codex: 'OpenAI', claude: 'Anthropic', gemini: 'Google', opencode: 'the provider OpenCode is signed in to' };
-  const crew = agents.filter((agent) => agent.detected && !agent.local).map((agent) => `@${agent.id} → ${vendors[agent.id] ?? 'its own provider'}`);
+  const crew = agents.filter((agent) => agent.detected && !agent.local).map((agent) => `@${agent.id} → ${agent.route?.destination ?? vendors[agent.id] ?? 'its own provider'}`);
   const destinations = DESTINATIONS.map((one) => ({
     id: one.id,
     to: one.id === 'crew' && crew.length ? crew.join(' · ') : one.to,

package/src/room.mjs

@@ -945,6 +945,18 @@ export class Room {
       await this.#emit('message.failed', { messageId, target: targetId, planId, error: `${agent.label} was detected, but its MADRE adapter is not enabled yet.` });
       return null;
     }
+    if (agent.route?.custom && !agent.route.allowed) {
+      const destination = agent.route.host ?? 'an unrecognised host';
+      const source = agent.route.source ?? 'a custom endpoint setting';
+      const official = agent.id === 'codex' ? 'OpenAI' : agent.id === 'claude' ? 'Anthropic' : 'the agent\'s official service';
+      await this.#emit('message.failed', {
+        messageId,
+        target: targetId,
+        planId,
+        error: `MADRE blocked @${agent.id} before sending the briefing: ${source} points to ${destination}, not ${official}. Remove that override to use the official service, or set PULSE_ALLOW_CUSTOM_AGENT_ENDPOINTS=${agent.id} only if you trust that endpoint.`,
+      });
+      return null;
+    }
 
     const priorEvents = await this.#store.readAll();
     // @madre never reads its own canned replies back: a small model would echo them.