@jossuealcala/madre 0.5.0 → 0.5.1

package/CHANGELOG.md

@@ -4,6 +4,18 @@ Todas las versiones publicadas de `@jossuealcala/madre`. Fechas en ISO.
 
 Una versión se cierra cuando está en npm: hasta entonces su sección se llama **Sin publicar** y puede crecer. Cada versión publicada tiene exactamente una etiqueta `vX.Y.Z`, una release en GitHub y una sección aquí; el parche puede llegar a dos dígitos (`0.2.10`) antes de subir el menor. Ver `docs/ROADMAP.md` para el criterio de qué sube cada número.
 
+## 0.5.1 · 2026-09-28
+
+Cuatro cosas que salieron del QA de 0.5.0 el mismo día que se publicó. Ninguna cambia modos, módulos, agentes ni a dónde sale nada: son arreglos.
+
+### Los cuatro reportes de 0.5.0
+
+- **`/module` nunca llegaba a su tarjeta de instalación** (#5). MADRE le dice al agente en qué carpeta escribir el borrador —`.pulse/out/<turno>/`— y después revertía esa escritura por caer en zona prohibida: `.pulse/` lo es. La sala nombraba un sitio y castigaba por usarlo. Aquí nunca se vio porque **este** repositorio ignora `.pulse/` y git jamás reportó esos archivos; en un proyecto que no lo ignora, la función entera no existía. Ahora la carpeta de borrador de un turno no es zona prohibida **para ese turno**, y solo para ese: todo lo demás bajo `.pulse` se sigue revirtiendo, y hay una prueba con las dos mitades.
+- **El resaltador tomaba el `//` de un regex como comentario** (#6). `/^https?:\/\//` dejaba gris el resto de la línea. Un literal tiene que ser uno de los candidatos que el escáner considera, no algo que revise después — si salta primero al `//`, nunca se entera de que había un literal abierto. Y el error contrario sería peor, así que `a / b / c` sigue siendo una división: una barra abre un literal solo donde puede empezar un valor, y una que no cierra en su línea era división desde el principio.
+- **Dos textos en inglés** (#7). El vendor de `@madre` —«the room · local»— nunca pasó por el catálogo, y quedó a la vista cuando el menú de revisar empezó a mostrarlo. Y la franja de CREATE decía `@CODEX MAY CREA, GENERA IMÁGENES`: los verbos traducidos dentro de una frase que no. Una frase se traduce entera o no se traduce.
+- **El centinela deja de archivar lo que MU/TH/UR ya explica** (#4). El reporte que llegó al repositorio era `Reading additional input from stdin...`, que no es una falla sino un aviso de Codex — llegó ahí porque MADRE entregaba lo último de stderr como si fuera la causa. Desde 0.4.1 el catálogo lo conoce (`MU-002`) y el centinela no archiva lo que el catálogo explica, así que se explica en la sala en vez de enviárselo al autor. Hay una prueba con el texto exacto de ese reporte.
+- De paso, la tercera zona muerta temporal de la semana: el mapa de vendors quedó declarado al fondo del archivo y la fila de agentes se pinta durante el arranque. **Esta vez la atrapó la prueba de humo**, que es para lo que se reforzó.
+
 ## 0.5.0 · 2026-09-28
 
 **Por qué menor y no parche.** Cambia a dónde sale lo que sale de tu máquina —el colector vive ahora bajo `madre.run`— y, sobre todo, **puede impedir que algo salga**: si tienes `OPENAI_BASE_URL` o `ANTHROPIC_BASE_URL` apuntando a un gateway, esos turnos quedan detenidos hasta que quites la variable o autorices ese endpoint con `PULSE_ALLOW_CUSTOM_AGENT_ENDPOINTS`. Es el arreglo correcto, pero un número de parche se lee como «actualiza sin mirar», y este no lo es. El ledger y la memoria de 0.4.x se siguen leyendo igual.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jossuealcala/madre",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "MADRE · one local room where the AI coding agents already on your machine (Codex, Claude Code, Gemini CLI, OpenCode) work on a project together, with a shared memory every one of them recalls and a local @madre that speaks for it. Read-only by default, per-message permission modes up to a checkpointed CONTROL. Nothing leaves your machine on its own.",
   "keywords": [
     "ai-agents",

package/public/app.js

@@ -141,6 +141,11 @@ const failureKey = (failure) => `${failure.time ?? ''}|${failure.agent ?? ''}|${
 const saveDismissed = () => { try { localStorage.setItem('pulse.mother.dismissed', JSON.stringify([...dismissed].slice(-400))); } catch { /* no storage */ } };
 const openFailures = () => state.failures.filter((failure) => !failure.recovered && !dismissed.has(failureKey(failure)));
 
+// Every other vendor is a company and a company is called the same everywhere. @madre's is a
+// sentence, so it is said in the room's language — declared, not computed, so both guards see it.
+const VENDOR_WORDS = { 'the room · local': t('the room · local'), local: t('local') };
+const vendorWord = (id) => { const said = brandOf(id).vendor ?? ''; return VENDOR_WORDS[said] ?? said; };
+
 // Which agent last wrote to a path, taken from what the room already recorded: the artifacts a
 // creation lease produced, and the files a CONTROL turn changed. Nothing new is stored and nothing
 // is inferred from the filesystem — if MADRE did not see it happen, the file carries no mark.
@@ -368,7 +373,7 @@ function showViewerMenu(x, y) {
     item.type = 'button';
     // `@codex Codex` says one thing twice. The handle is the name; beside it goes only what the
     // handle does not already tell you — the vendor, or why it cannot take this.
-    const aside = agent.ready ? (brandOf(agent.id).vendor ?? '') : t('no session');
+    const aside = agent.ready ? vendorWord(agent.id) : t('no session');
     item.append(el('b', null, `@${agent.id}`), el('span', null, aside));
     item.disabled = !agent.ready;
     item.addEventListener('click', () => reviewWith(agent.id));
@@ -774,7 +779,7 @@ function renderAgents() {
       status: agent.ready ? 'ready' : agent.detected ? 'detected' : 'offline',
     });
     node.title = [
-      `${agent.label}${brandOf(agent.id).vendor ? ` · ${brandOf(agent.id).vendor}` : ''}`,
+      `${agent.label}${vendorWord(agent.id) ? ` · ${vendorWord(agent.id)}` : ''}`,
       agent.ready ? t('Ready') : agent.detected ? t('Detected, adapter pending') : t('Not installed'),
       agent.version ? agent.version : null,
       official === null
@@ -1144,7 +1149,7 @@ function bridgeCard(agent) {
   head.append(avatar(agent.id, { size: 30, status: stage === 'ready' ? 'ready' : agent.detected ? 'detected' : 'offline' }));
   const title = el('div', 'title');
   title.append(el('b', null, agent.label));
-  title.append(el('span', 'vendor', brandOf(agent.id).vendor));
+  title.append(el('span', 'vendor', vendorWord(agent.id)));
   head.append(title);
   head.append(el('span', `state ${stage}`, stage === 'missing' ? t('NOT INSTALLED') : stage === 'inert' ? t('NO ADAPTER') : stage === 'route-blocked' ? t('ROUTE BLOCKED') : stage === 'ready' ? t('READY') : t('SIGNED OUT')));
   card.append(head);
@@ -1503,7 +1508,7 @@ function showReplyMenu(source, x, y) {
     item.type = 'button';
     // The same twice-said name as the viewer's menu: the handle IS the name. Beside it goes only
     // what the handle does not carry — that this is the one who just spoke, its vendor, or why not.
-    const aside = !agent.ready ? t('no session') : agent.id === source.sender ? t('the same agent') : (brandOf(agent.id).vendor ?? '');
+    const aside = !agent.ready ? t('no session') : agent.id === source.sender ? t('the same agent') : vendorWord(agent.id);
     item.append(el('b', null, `@${agent.id}`), el('span', null, aside));
     item.disabled = !agent.ready;
     item.addEventListener('click', () => replyWith(agent.id, source));
@@ -2156,7 +2161,10 @@ function renderLease(event) {
   node.style.setProperty('--agent', agentColor(agent));
   const { delegated = false, scratchDir = null, grantedBy = null } = event.payload;
   node.append(el('b', null, standing ? t('default #2 · ') : escalated ? `${t('#2 granted on request')}${escalated === 'plan' ? t(' · whole plan') : ''} · ` : delegated ? t('#2 by @{who} · ', { who: grantedBy }) : t('create · ')));
-  node.append(`@${agent} may ${scopes.map((scope) => CAP_LABELS[scope] ?? scope).join(', ') || 'create files'}${unavailable.length ? ` (cannot ${unavailable.join(', ')})` : ''} `);
+  // The verbs were translated and the sentence holding them was not: «@CODEX MAY CREA, GENERA
+  // IMÁGENES». A sentence is translated whole or it is not translated.
+  const can = scopes.map((scope) => CAP_LABELS[scope] ?? scope).join(', ');
+  node.append(`${t('@{agent} may {what}', { agent, what: can || t('create files') })}${unavailable.length ? t(' (cannot {what})', { what: unavailable.map((scope) => CAP_LABELS[scope] ?? scope).join(', ') }) : ''} `);
   if (outDir === '.' || !outDir) {
     node.append(t('anywhere in the project · existing files stay untouched'));
     if (scratchDir) { node.append(t(' · scratch ')); const link = el('a', 'file-link', scratchDir); link.href = '#'; link.addEventListener('click', (ev) => { ev.preventDefault(); }); node.append(link); }
@@ -4699,7 +4707,7 @@ function openAgentPop(id, anchor) {
   const head = el('div', 'head');
   head.append(avatar(id, { size: 24 }));
   head.append(el('b', null, agent.label));
-  head.append(el('span', 'vendor', brandOf(id).vendor));
+  head.append(el('span', 'vendor', vendorWord(id)));
   pop.append(head);
   const big = el('div', 'big', official === null ? (formatTokens(agent.tokens ?? 0) || '0') : `${Math.round(official)}%`);
   big.append(el('small', null, official === null ? t('budget tokens · local 5h window') : t("of the provider's {window} limit", { window: fmtWindow(agent.officialWindows?.primary?.windowMinutes ?? 300) }) + (agent.officialResetAt ? t(' · resets {when}', { when: fmtReset(agent.officialResetAt) }) : t(' · window reset'))));

package/public/es.js

@@ -1805,6 +1805,10 @@ export const ES = {
   '/module writes a file, so it needs #2 CREATE. Your request is still in the composer.':
     '/module escribe un archivo, así que necesita #2 CREATE. Tu petición sigue en el compositor.',
   'ARM #2 CREATE': 'ARMAR #2 CREATE',
+  'the room · local': 'la sala · local',
+  '@{agent} may {what}': '@{agent} puede {what}',
+  ' (cannot {what})': ' (no puede {what})',
+  'create files': 'crear archivos',
   'review it with': 'revisarlo con',
   'no session': 'sin sesión',
   'CLICK A LINE NUMBER TO SELECT · SHIFT FOR A RANGE':

package/public/styles.css

@@ -50,6 +50,7 @@
   --syn-comment: color-mix(in srgb, var(--text-3) 88%, transparent);
   --syn-number: #ffd166;
   --syn-literal: #ff9ecd;
+  --syn-regex: #7ce0d3;
 }
 
 @media (prefers-color-scheme: light) {
@@ -60,6 +61,7 @@
     --syn-comment: #6a7280;
     --syn-number: #9a5000;
     --syn-literal: #9c1f6b;
+    --syn-regex: #0a6a73;
     --bg: #f4f5f2;
     --bg-2: #ffffff;
     --panel: #ffffff;
@@ -92,6 +94,7 @@
     --syn-comment: #6a7280;
     --syn-number: #9a5000;
     --syn-literal: #9c1f6b;
+    --syn-regex: #0a6a73;
     --bg: #f4f5f2;
     --bg-2: #ffffff;
     --panel: #ffffff;
@@ -1733,4 +1736,5 @@ dialog.viewer::backdrop { background: rgba(0,0,0,.7); backdrop-filter: blur(4px)
 .viewer .code .t-comment { color: var(--syn-comment); font-style: italic; }
 .viewer .code .t-number  { color: var(--syn-number); }
 .viewer .code .t-literal { color: var(--syn-literal); }
+.viewer .code .t-regex   { color: var(--syn-regex); }
 .viewer-lang { color: var(--ph-dim); font-size: 9.5px; letter-spacing: .16em; text-transform: uppercase; }

package/public/syntax.js

@@ -10,7 +10,7 @@
 // are the same bytes. Anything it cannot classify stays plain text rather than being guessed at.
 
 const FAMILIES = {
-  js: { ext: /\.(m|c)?jsx?$|\.tsx?$/i, label: 'JavaScript',
+  js: { ext: /\.(m|c)?jsx?$|\.tsx?$/i, label: 'JavaScript', regex: true,
     keywords: /\b(await|async|break|case|catch|class|const|continue|default|delete|do|else|export|extends|finally|for|from|function|get|if|import|in|instanceof|let|new|of|return|set|static|super|switch|this|throw|try|typeof|var|void|while|yield|as|interface|type|enum|implements|readonly|declare|namespace|satisfies)\b/,
     literals: /\b(true|false|null|undefined|NaN|Infinity)\b/,
     line: /\/\/.*/, block: [/\/\*/, /\*\//], strings: ['"', "'", '`'] },
@@ -73,11 +73,14 @@ export function tokenize(line, family, state = { inBlock: false }) {
     const lineOpen = rest.match(family.line);
     const quote = family.strings.map((q) => rest.indexOf(q)).filter((at) => at >= 0).sort((a, b) => a - b)[0];
 
-    // Whichever comes first on this line decides what happens next.
+    // Whichever comes first on this line decides what happens next. A regular expression has to
+    // be among the candidates and not an afterthought: its own `//` is a line comment to every
+    // other rule here, so if the scan jumps to that `//` first it never learns a literal was open.
     const marks = [
       blockOpen && blockOpen.index === 0 ? { at: 0, what: 'block' } : blockOpen ? { at: blockOpen.index, what: 'block' } : null,
       lineOpen && lineOpen.index !== undefined ? { at: lineOpen.index, what: 'line' } : null,
       quote !== undefined ? { at: quote, what: 'string' } : null,
+      family.regex ? regexMark(rest, line, index, out) : null,
     ].filter(Boolean).sort((a, b) => a.at - b.at);
     const next = marks[0];
 
@@ -93,6 +96,11 @@ export function tokenize(line, family, state = { inBlock: false }) {
       push(rest, 'comment'); index = line.length; state.inBlock = true; break;
     }
 
+    if (next.what === 'regex') {
+      const end = regexEnd(rest);
+      if (end) { push(rest.slice(0, end), 'regex'); index += end; continue; }
+    }
+
     // A string: to its closing quote, respecting a backslash escape.
     const q = rest[0];
     let at = 1;
@@ -107,6 +115,52 @@ export function tokenize(line, family, state = { inBlock: false }) {
   return out;
 }
 
+// The first slash on what is left that could open a regular expression, and only if the literal
+// actually closes on this line: an unclosed one was division after all.
+function regexMark(rest, line, offset, pieces) {
+  for (let at = 0; at < rest.length; at += 1) {
+    if (rest[at] !== '/') continue;
+    if (rest[at + 1] === '/' || rest[at + 1] === '*') return null;   // a comment, not a literal
+    const before = line.slice(0, offset + at);
+    if (!canStartRegex(pieces, before)) continue;
+    return regexEnd(rest.slice(at)) ? { at, what: 'regex' } : null;
+  }
+  return null;
+}
+
+// A slash opens a regular expression only where a value may begin. After a name, a number or a
+// closing bracket it is division, and treating `a / b / c` as a literal would be worse than the
+// bug this fixes. Whitespace does not count as the thing before.
+function canStartRegex(pieces, before = '') {
+  const trimmed = before.trimEnd();
+  if (trimmed) return !/[\w$)\]]$/.test(trimmed);
+  for (let at = pieces.length - 1; at >= 0; at -= 1) {
+    const text = (pieces[at].text ?? '').trimEnd();
+    if (!text) continue;
+    if (pieces[at].kind === 'comment') continue;
+    if (pieces[at].kind === 'string' || pieces[at].kind === 'number') return false;
+    return !/[\w$)\]]$/.test(text);
+  }
+  return true;
+}
+
+// Where the literal ends: the closing slash plus its flags, skipping escapes and anything inside
+// a character class, where an unescaped slash is ordinary. Returns 0 when it never closes, and
+// then the slash was division after all.
+function regexEnd(rest) {
+  let at = 1;
+  let inClass = false;
+  while (at < rest.length) {
+    const char = rest[at];
+    if (char === '\\') { at += 2; continue; }
+    if (inClass) { if (char === ']') inClass = false; at += 1; continue; }
+    if (char === '[') { inClass = true; at += 1; continue; }
+    if (char === '/') { at += 1; while (at < rest.length && /[a-z]/i.test(rest[at])) at += 1; return at; }
+    at += 1;
+  }
+  return 0;
+}
+
 // Code between the comments and the strings: keywords, literals, numbers, and the rest plain.
 function pushCode(chunk, family, push) {
   const pattern = new RegExp(`${family.keywords.source}|${family.literals.source}|\\b\\d+(?:\\.\\d+)?\\b`, family.keywords.flags.includes('i') ? 'gi' : 'g');

package/src/room/control.mjs

@@ -29,7 +29,7 @@ export class ControlDesk {
     this.#checkpoints.set(checkpoint.id, checkpoint);
     // Prevention first: .env files and MADRE's folders are read-only for the length of the turn.
     const guard = await guardForbidden(this.#projectRoot);
-    const run = { agent: agent.id, messageId, checkpoint, since: new Date().toISOString(), guard, mode };
+    const run = { agent: agent.id, messageId, checkpoint, since: new Date().toISOString(), guard, mode, scratchDir: null };
     if (mode >= 3) this.#holder = run;
     const lease = { leaseId: checkpoint.id, outDir: this.#projectRoot, relativeDir: '.', scopes: { ...enabledScopes, write: true }, control: mode >= 3, airlock: mode === 4, create: mode === 2, checkpoint };
     if (mode < 3) return { run, lease, announcement: null };
@@ -43,7 +43,14 @@ export class ControlDesk {
   async settle(run) {
     const diff = await diffCheckpoint(this.#projectRoot, run.checkpoint);
     const additive = run.mode === 2;
-    const toRevert = new Set(diff.forbidden);
+    // The draft folder MADRE itself hands the agent lives under `.pulse/out/`, and `.pulse/` is a
+    // forbidden zone — so the room named a place to write, the agent wrote there, and the room
+    // undid it. Nobody noticed here because this project ignores `.pulse/` and git never reported
+    // the files; in a project that does not, `/module` never reached its install card. A turn's
+    // own scratch folder is not a forbidden zone FOR THAT TURN. Every other `.pulse` path still is.
+    const ownScratch = run.scratchDir ? `${run.scratchDir.replace(/\/$/, '')}/` : null;
+    const mine = (path) => Boolean(ownScratch) && path.startsWith(ownScratch);
+    const toRevert = new Set(diff.forbidden.filter((path) => !mine(path)));
     if (additive) for (const file of diff.files) if (file.status !== 'A') toRevert.add(file.path);
     let reverted = [];
     if (toRevert.size) {
@@ -51,7 +58,7 @@ export class ControlDesk {
       reverted = [...restored.restored, ...restored.removed];
     }
     const kept = diff.files.filter((file) => !toRevert.has(file.path));
-    const changes = { checkpointId: run.checkpoint.id, agent: run.agent, messageId: run.messageId, mode: run.mode ?? 3, files: kept, stat: diff.stat, forbiddenReverted: diff.forbidden.length ? reverted.filter((path) => diff.forbidden.includes(path)) : [], existingReverted: additive ? reverted.filter((path) => !diff.forbidden.includes(path)) : [] };
+    const changes = { checkpointId: run.checkpoint.id, agent: run.agent, messageId: run.messageId, mode: run.mode ?? 3, files: kept, stat: diff.stat, forbiddenReverted: reverted.filter((path) => diff.forbidden.includes(path) && !mine(path)), existingReverted: additive ? reverted.filter((path) => !diff.forbidden.includes(path)) : [] };
     const count = changes.files.length;
     const notes = [
       changes.forbiddenReverted.length ? `${changes.forbiddenReverted.length} write(s) into forbidden zones were reverted.` : null,

package/src/room.mjs

@@ -1197,6 +1197,9 @@ export class Room {
       // CREATE: photograph the project now; after the turn only what appeared stays.
       const seat = await this.#controlDesk.begin({ agent, messageId, enabledScopes: enabled, mode: 2 });
       createRun = seat.run;
+      // The folder this turn was told to draft in, so settling it does not undo what it was
+      // invited to write. Only this turn's own folder; every other `.pulse` path stays forbidden.
+      createRun.scratchDir = lease.scratchDir ?? null;
       lease = { ...lease, checkpoint: seat.run.checkpoint };
     }
     turnScopes.imageGen = Boolean(lease?.scopes?.imageGen);