diff --git a/modules/dunst/cmd/dunst-tools/manifest_test.go b/modules/dunst/cmd/dunst-tools/manifest_test.go
index fe03a5c4..2712ea02 100644
--- a/modules/dunst/cmd/dunst-tools/manifest_test.go
+++ b/modules/dunst/cmd/dunst-tools/manifest_test.go
@@ -47,7 +47,7 @@ func TestTheFileIsTheDecidedOneAndCallsRofi(t *testing.T) {
 	m := readManifest(t)
 	c := m.resource(t, "configuration")["content"].(string)
 	for _, want := range []string{"origin = top-right", "transparency = 0", "corner_radius = 0", "font = Inter ${setting:font-size}",
-		"width = ${setting:width}", "dmenu = rofi -dmenu -p dunst"} {
+		"width = ${setting:width}", "dmenu = rofi -dmenu -no-custom -p dunst"} {
 		if !strings.Contains(c, "    "+want+"\n") {
 			t.Errorf("lacks %q", want)
 		}
diff --git a/modules/dunst/files/dunstrc b/modules/dunst/files/dunstrc
index d8fc1278..40d3eb71 100644
--- a/modules/dunst/files/dunstrc
+++ b/modules/dunst/files/dunstrc
@@ -63,11 +63,11 @@
     sticky_history = yes
     history_length = 20
 
-    # The context menu is rofi, which this module installs. Not `dmenu`, the node-launcher's command in
+    # The context menu is rofi (installed by the rofi module); -no-custom keeps typed text from becoming a choice. Not `dmenu`, the node-launcher's command in
     # ~/.local/bin: dunst runs in the account's service manager, whose PATH does not hold that
     # directory (seen on the laptop on 2026-10-10), so the menu never opened. Links open in the
     # desktop's default browser.
-    dmenu = rofi -dmenu -p dunst
+    dmenu = rofi -dmenu -no-custom -p dunst
     browser = /usr/bin/xdg-open
     always_run_script = true
 
diff --git a/modules/dunst/module.json b/modules/dunst/module.json
index 8f1e9f1e..f94d5d96 100644
--- a/modules/dunst/module.json
+++ b/modules/dunst/module.json
@@ -66,7 +66,7 @@
       "path": "${machine:account-home}/.config/dunst/dunstrc",
       "owner": "${machine:account}",
       "mode": "0644",
-      "content": "# dunst, the notifier (module dunst, novox/hq ADR 0208). Owned by the mesh: this file is replaced\n# at every push. Adopted from the laptop's file of 2026-10-04 (the two workstations differed in\n# position, transparency and corner radius; the laptop's square, opaque, top-right one matches the\n# rest of the desktop). Only what differs from dunst's defaults, and what the desktop relies on.\n#\n# Other modules' rules go in ~/.config/dunst/dunstrc.d/*.conf, which dunst reads after this file,\n# so a drop-in outranks it. dunst is started by D-Bus on the first notification: nothing starts it.\n# When the mesh rewrites this file (a font-size or width setting changed), it tells a running dunst\n# to read it again (its unit's reload, dunstctl reload); what is on screen stays.\n\n[global]\n    monitor = 0\n    follow = none\n\n    # Geometry\n    width = ${setting:width}\n    height = (0, 300)\n    origin = top-right\n    offset = (10, 50)\n    notification_limit = 20\n\n    progress_bar = true\n    progress_bar_height = 10\n    progress_bar_frame_width = 1\n    progress_bar_min_width = 150\n    progress_bar_max_width = 300\n\n    indicate_hidden = yes\n    transparency = 0\n    separator_height = 2\n    padding = 8\n    horizontal_padding = 8\n    text_icon_padding = 0\n    frame_width = 3\n    frame_color = \"#de5200\"\n    gap_size = 0\n    separator_color = frame\n    sort = yes\n    corner_radius = 0\n\n    # Text: the interface face (research 026/04)\n    font = Inter ${setting:font-size}\n    line_height = 0\n    markup = full\n    format = \"<b>%s</b>\\n%b\"\n    alignment = left\n    vertical_alignment = center\n    show_age_threshold = 60\n    ellipsize = middle\n    ignore_newline = no\n    stack_duplicates = true\n    hide_duplicate_count = false\n    show_indicators = yes\n\n    # Icons, from the desktop's icon theme\n    enable_recursive_icon_lookup = true\n    icon_theme = Adwaita\n    icon_position = left\n    min_icon_size = 32\n    max_icon_size = 128\n\n    # History\n    sticky_history = yes\n    history_length = 20\n\n    # The context menu is rofi, which this module installs. Not `dmenu`, the node-launcher's command in\n    # ~/.local/bin: dunst runs in the account's service manager, whose PATH does not hold that\n    # directory (seen on the laptop on 2026-10-10), so the menu never opened. Links open in the\n    # desktop's default browser.\n    dmenu = rofi -dmenu -p dunst\n    browser = /usr/bin/xdg-open\n    always_run_script = true\n\n    title = Dunst\n    class = Dunst\n    ignore_dbusclose = false\n\n    # A tap answers (the touchpads have no middle button). do_action runs the notification's only\n    # action, or opens the context menu when it has several; without actions it opens its one link,\n    # if it has one. The notification then closes; a menu dismissed with Escape leaves it shown.\n    mouse_left_click = do_action, close_current\n    mouse_middle_click = do_action, close_current\n    mouse_right_click = close_all\n\n[urgency_low]\n    background = \"#000000\"\n    foreground = \"#ffffff\"\n    timeout = 10\n\n[urgency_normal]\n    background = \"#000000\"\n    foreground = \"#ffffff\"\n    timeout = 10\n\n[urgency_critical]\n    background = \"#000000\"\n    foreground = \"#ffffff\"\n    frame_color = \"#ff0000\"\n    timeout = 0\n\n# What is shown once is never kept (the review of 2026-10-09): a notification marked secret (a link's\n# code, category mesh.secret) and any transient one leave no entry in the history, which\n# node-notifier.history serves to every caller of the mesh's verbs.\n[mesh-secret]\n    category = \"mesh.secret\"\n    history_ignore = yes\n\n[transient-history-ignore]\n    match_transient = yes\n    history_ignore = yes\n"
+      "content": "# dunst, the notifier (module dunst, novox/hq ADR 0208). Owned by the mesh: this file is replaced\n# at every push. Adopted from the laptop's file of 2026-10-04 (the two workstations differed in\n# position, transparency and corner radius; the laptop's square, opaque, top-right one matches the\n# rest of the desktop). Only what differs from dunst's defaults, and what the desktop relies on.\n#\n# Other modules' rules go in ~/.config/dunst/dunstrc.d/*.conf, which dunst reads after this file,\n# so a drop-in outranks it. dunst is started by D-Bus on the first notification: nothing starts it.\n# When the mesh rewrites this file (a font-size or width setting changed), it tells a running dunst\n# to read it again (its unit's reload, dunstctl reload); what is on screen stays.\n\n[global]\n    monitor = 0\n    follow = none\n\n    # Geometry\n    width = ${setting:width}\n    height = (0, 300)\n    origin = top-right\n    offset = (10, 50)\n    notification_limit = 20\n\n    progress_bar = true\n    progress_bar_height = 10\n    progress_bar_frame_width = 1\n    progress_bar_min_width = 150\n    progress_bar_max_width = 300\n\n    indicate_hidden = yes\n    transparency = 0\n    separator_height = 2\n    padding = 8\n    horizontal_padding = 8\n    text_icon_padding = 0\n    frame_width = 3\n    frame_color = \"#de5200\"\n    gap_size = 0\n    separator_color = frame\n    sort = yes\n    corner_radius = 0\n\n    # Text: the interface face (research 026/04)\n    font = Inter ${setting:font-size}\n    line_height = 0\n    markup = full\n    format = \"<b>%s</b>\\n%b\"\n    alignment = left\n    vertical_alignment = center\n    show_age_threshold = 60\n    ellipsize = middle\n    ignore_newline = no\n    stack_duplicates = true\n    hide_duplicate_count = false\n    show_indicators = yes\n\n    # Icons, from the desktop's icon theme\n    enable_recursive_icon_lookup = true\n    icon_theme = Adwaita\n    icon_position = left\n    min_icon_size = 32\n    max_icon_size = 128\n\n    # History\n    sticky_history = yes\n    history_length = 20\n\n    # The context menu is rofi (installed by the rofi module); -no-custom keeps typed text from becoming a choice. Not `dmenu`, the node-launcher's command in\n    # ~/.local/bin: dunst runs in the account's service manager, whose PATH does not hold that\n    # directory (seen on the laptop on 2026-10-10), so the menu never opened. Links open in the\n    # desktop's default browser.\n    dmenu = rofi -dmenu -no-custom -p dunst\n    browser = /usr/bin/xdg-open\n    always_run_script = true\n\n    title = Dunst\n    class = Dunst\n    ignore_dbusclose = false\n\n    # A tap answers (the touchpads have no middle button). do_action runs the notification's only\n    # action, or opens the context menu when it has several; without actions it opens its one link,\n    # if it has one. The notification then closes; a menu dismissed with Escape leaves it shown.\n    mouse_left_click = do_action, close_current\n    mouse_middle_click = do_action, close_current\n    mouse_right_click = close_all\n\n[urgency_low]\n    background = \"#000000\"\n    foreground = \"#ffffff\"\n    timeout = 10\n\n[urgency_normal]\n    background = \"#000000\"\n    foreground = \"#ffffff\"\n    timeout = 10\n\n[urgency_critical]\n    background = \"#000000\"\n    foreground = \"#ffffff\"\n    frame_color = \"#ff0000\"\n    timeout = 0\n\n# What is shown once is never kept (the review of 2026-10-09): a notification marked secret (a link's\n# code, category mesh.secret) and any transient one leave no entry in the history, which\n# node-notifier.history serves to every caller of the mesh's verbs.\n[mesh-secret]\n    category = \"mesh.secret\"\n    history_ignore = yes\n\n[transient-history-ignore]\n    match_transient = yes\n    history_ignore = yes\n"
     },
     {
       "id": "notifier",