@jossuealcala/madre 1.0.0 → 1.0.2

package/public/tour.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // The welcome of MADRE 1.0 (2026-10-11), in Home and in every project: option B of «Recorrido de
 // MADRE 1.0» — a bonjour, then a window of chapters read at the person's own pace — with two
 // pieces of option C: a one-line hint the first time someone reaches a place that confuses, and
@@ -69,9 +71,42 @@ const SCENES = {
   phone: () => `<span class="ts-mac"><i></i></span><svg class="ts-wires" viewBox="0 0 320 150" preserveAspectRatio="none" aria-hidden="true"><path id="ts-p1" class="ts-dash" d="M206 80C178 62 150 62 124 76"/>
     ${still() ? '' : '<path d="M0 0h0" class="ts-note"><animateMotion dur="2.4s" repeatCount="indefinite" keyPoints="0;1;0" keyTimes="0;.5;1" calcMode="linear"><mpath href="#ts-p1"/></animateMotion></path>'}</svg>
     <span class="ts-phone"><i class="ts-qr"></i></span>`,
+  board: () => SCENES.home(),
+  widgets: () => `<div class="ts-grid ts-widgets"><span class="ts-card"><i style="--w:.62"></i><i style="--w:.34"></i></span><span class="ts-card"><i style="--w:.8"></i><i style="--w:.5"></i></span><span class="ts-card"><i style="--w:.4"></i><i style="--w:.7"></i></span><span class="ts-card ts-dim"><i style="--w:.25"></i><i style="--w:.55"></i></span></div>`,
+  local: () => SCENES.modules(),
   gestures: () => `<div class="ts-caps"><span class="ts-cap c0">⌘ ,</span><span class="ts-cap c1">Esc</span><span class="ts-cap c2">?</span></div>`,
 };
 
+// What a first-time card speaks of, lit, and the rest of the page a shade quieter: the card needs
+// no beak to say where it points (2026-10-15). A ring laid over the place, never the place itself
+// lifted (a key inside the bar cannot leave the bar's layer). `place()` follows it when it moves;
+// `remove()` takes it away with the card.
+export function spotlight(node) {
+  const none = { place() {}, remove() {} };
+  if (!node?.getBoundingClientRect || typeof document === 'undefined') return none;
+  const spot = document.createElement('div');
+  spot.className = 'hint-spot';
+  spot.setAttribute('aria-hidden', 'true');
+  document.body.append(spot);
+  const place = () => {
+    if (!node.isConnected) { remove(); return; }
+    const box = node.getBoundingClientRect();
+    spot.hidden = !box.width && !box.height;
+    if (spot.hidden) return;
+    const radius = Number.parseFloat(getComputedStyle(node).borderTopLeftRadius) || 10;
+    Object.assign(spot.style, { left: `${box.left - 4}px`, top: `${box.top - 4}px`, width: `${box.width + 8}px`, height: `${box.height + 8}px`, borderRadius: `${Math.min(radius + 4, (box.height + 8) / 2)}px` });
+  };
+  function remove() {
+    window.removeEventListener('resize', place);
+    window.removeEventListener('scroll', place, true);
+    spot.remove();
+  }
+  window.addEventListener('resize', place);
+  window.addEventListener('scroll', place, true);
+  place();
+  return { place, remove };
+}
+
 // `onChange` hears the kept state each time it is known or changes (null if it could not be read).
 // `phone`: none of it here (a phone, or the right half of a split window); `device`: this page is a
 // phone, which gets one card the first time instead of the bonjour.
@@ -97,8 +132,9 @@ export function startTour({ page, go = {}, ready = () => true, phone = false, de
     onChange?.(state);
     return state;
   };
-  const path = () => state?.path ?? (info?.returning ? 'back' : 'new');
-  const chapters = () => (ORDER[path()] ?? ORDER.new).filter((id) => !hidden().includes(id)).map((id) => CHAPTERS.find((chapter) => chapter.id === id)).filter(Boolean);
+  // Three people (src/tour.mjs): new, back from 0.7.2, or back from 1.0 (`since`).
+  const path = () => state?.path ?? (info?.from === '1.0' ? 'since' : info?.returning ? 'back' : 'new');
+  const chapters = () => (ORDER[path()] ?? ORDER.new).filter((id) => !hidden().includes(id)).map((id) => CHAPTERS.find((chapter) => chapter.id === id)).filter((chapter) => chapter && (!chapter.only || chapter.only === language()));
   const busyWith = () => Boolean(windowNode?.open || sheetNode?.open || document.querySelector('dialog.tour-bonjour[open]'));
 
   // ---- One tab at a time. The tab that shows the bonjour or the chapters holds the tour and says
@@ -176,6 +212,8 @@ export function startTour({ page, go = {}, ready = () => true, phone = false, de
     const done = list.filter((chapter) => state.done.includes(chapter.id)).length;
     const pill = el('span', 'tour-pill');
     const open = key('tour-pill-go', fill(t('Continue the tour · {n} of {total}'), { n: done, total: list.length }), () => openChapters(state.at));
+    // On a narrow bar it says only where it goes and how far (styles.css, .tour-pill-go[data-short]).
+    open.dataset.short = fill(t('Tour · {n}/{total}'), { n: done, total: list.length });
     const away = key('tour-pill-x', null, () => { void keep({ finished: true }); });
     away.innerHTML = CLOSE_ICON; // trusted: our own SVG string
     away.setAttribute('aria-label', t('Hide the tour'));
@@ -201,19 +239,23 @@ export function startTour({ page, go = {}, ready = () => true, phone = false, de
   }
   function showBonjour() {
     hold();
+    const since = path() === 'since';
     const back = path() === 'back';
     const node = el('dialog', 'tour-bonjour');
     node.setAttribute('aria-labelledby', 'tour-bonjour-title');
     const stage = el('div', 'tour-bonjour-stage');
     const mark = el('span', 'madre-loader-mark tour-hello-mark');
     mark.innerHTML = LOADER_MARK; // trusted: our own SVG string
-    const title = el('h1', 'tour-hello', back ? t('Hello again.') : t('Hello.'));
+    const title = el('h1', 'tour-hello', back || since ? t('Hello again.') : t('Hello.'));
     title.id = 'tour-bonjour-title';
-    const body = el('p', 'tour-hello-says', back
-      ? t('MADRE changed a lot since 0.7.2. First I bring your projects to Home; then I tell you what is new, at your own pace.')
-      : t('This is MADRE: all your AI agents in one place, with your projects, their memory and your permissions.'));
+    const body = el('p', 'tour-hello-says', since
+      ? t('Since 1.0, Home became a board you arrange, with widgets; the local AI is chosen project by project, and MADRE speaks more plainly. I tell you what changed, at your own pace.')
+      : back
+        ? t('MADRE changed a lot since 0.7.2. First I bring your projects to Home; then I tell you what is new, at your own pace.')
+        : t('This is MADRE: all your AI agents in one place, with your projects, their memory and your permissions.'));
     const note = el('p', 'tour-hello-note');
-    if (back) note.innerHTML = t('<code>madre</code> now opens Home; <code>madre start</code> still opens the project in the folder.'); // trusted: our own catalogue
+    if (since) note.textContent = t('Nothing you set up changed: your projects, agents and permissions are as you left them.');
+    else if (back) note.innerHTML = t('<code>madre</code> now opens Home; <code>madre start</code> still opens the project in the folder.'); // trusted: our own catalogue
     else note.textContent = page === 'home' && welcome?.needed?.() ? t('First we get an agent and a project ready; then I tell you the essentials, at your own pace.') : t('I tell you the essentials in a few short chapters, at your own pace.');
     const acts = el('div', 'tour-hello-acts');
     const later = key('tour-btn quiet', t('Later'), async () => {
@@ -223,12 +265,13 @@ export function startTour({ page, go = {}, ready = () => true, phone = false, de
       // 0.7.2 found Home empty and nothing offered to bring them again. They come quietly.
       if (back) void recoverProjects().then(({ found }) => { if (found.length) onProjects?.(); });
     });
-    const onward = key('tour-btn primary', back ? t('Continue') : t('Start'), async () => {
+    const onward = key('tour-btn primary', back || since ? t('Continue') : t('Start'), async () => {
       later.disabled = true; onward.disabled = true;
       await keep({ path: path(), bonjour: true });
       void fetch('/api/whats-new/seen', { method: 'POST' }).catch(() => null); // the chapters replace What's new 1.0
       if (back) { await bringProjects(stage); return; }
       node.close();
+      if (since) { openChapters(chapters()[0]?.id ?? null); return; }
       if (page === 'home' && welcome?.needed?.()) welcome.open(() => openChapters('home'));
       else openChapters(page === 'home' ? 'home' : 'project');
     });
@@ -328,8 +371,9 @@ export function startTour({ page, go = {}, ready = () => true, phone = false, de
     const chapter = shown;
     current = shown;
     const back = path() === 'back';
-    windowNode.querySelector('.tour-head .wn-eyebrow').textContent = back ? t('The tour of MADRE 1.0') : t('Getting to know MADRE');
-    windowNode.querySelector('#tour-window-title').textContent = back ? t('Everything new, at your pace') : t('The essentials, at your pace');
+    const since = path() === 'since';
+    windowNode.querySelector('.tour-head .wn-eyebrow').textContent = since ? t('What is new since 1.0') : back ? t('The tour of MADRE 1.0') : t('Getting to know MADRE');
+    windowNode.querySelector('#tour-window-title').textContent = since ? t('What changed, at your pace') : back ? t('Everything new, at your pace') : t('The essentials, at your pace');
     void keep({ chapter: chapter.id, at: chapter.id });
     if (!state.done.includes(chapter.id)) state.done = [...state.done, chapter.id];
     const list = chapters();
@@ -345,9 +389,9 @@ export function startTour({ page, go = {}, ready = () => true, phone = false, de
     }));
     const main = windowNode.querySelector('.tour-main');
     const page2 = el('article', `tour-chapter c-${chapter.id}`);
-    const scene = el('div', `tour-scene s-${chapter.id}`);
+    const scene = el('div', `tour-scene s-${chapter.id}${chapter.moved ? ' s-table' : ''}`);
     scene.setAttribute('aria-hidden', 'true');
-    if (chapter.id === 'moved') {
+    if (chapter.moved) {
       const table = el('div', 'ts-moved');
       for (const [was, now] of chapter.moved) {
         const line = el('div', 'ts-moved-row');
@@ -366,6 +410,14 @@ export function startTour({ page, go = {}, ready = () => true, phone = false, de
       news.append(el('b', 'tour-news-tag', chapter.news.kind === 'new' ? t('New in 1.0') : t('Changed in 1.0')), said);
       words.append(news);
     }
+    // Whoever came from 1.0 reads first what is new or different since.
+    if (since && chapter.since) {
+      const news = el('p', `tour-news ${chapter.since.kind}`);
+      const said = el('span');
+      said.innerHTML = say(chapter.since); // trusted: our own copy
+      news.append(el('b', 'tour-news-tag', chapter.since.kind === 'new' ? t('New since 1.0') : t('Changed since 1.0')), said);
+      words.append(news);
+    }
     words.append(el('p', 'tour-lead', say(chapter.lead)));
     const points = chapter.points?.[language()] ?? chapter.points?.es ?? [];
     if (points.length) {
@@ -464,9 +516,11 @@ export function startTour({ page, go = {}, ready = () => true, phone = false, de
     const card = el('section', `tour-hint${inside ? ' inline' : ''}`);
     card.setAttribute('role', 'note');
     card.append(el('span', 'tour-hint-eyebrow', t('The first time')), el('b', null, title), el('p', null, text));
+    let spot = null;
     const done = () => {
       if (!hintNode) return;
       void keep({ hint: id });
+      spot?.remove();
       card.remove();
       hintNode = null;
       document.removeEventListener('keydown', onKey, true);
@@ -491,12 +545,31 @@ export function startTour({ page, go = {}, ready = () => true, phone = false, de
     const left = Math.max(12, Math.min(window.innerWidth - width - 12, onTheRight ? box.right - width : box.left));
     const below = box.bottom + 10 + height < window.innerHeight;
     Object.assign(card.style, { left: `${left}px`, top: `${below ? box.bottom + 10 : Math.max(12, box.top - height - 10)}px` });
+    spot = spotlight(anchor);
     document.addEventListener('keydown', onKey, true);
     return true;
   }
 
+  // ---- What a key opens, said the first time it opens (1.1): one line beside what opened — inside
+  // it when it is a modal window, where a card floating over the page could not be pressed. `opened`
+  // finds what the click opened; nothing found, the line goes beside the key itself.
+  function firstOpen(id, node, { opened = () => null, inside = null, title, text, after = 450 }) {
+    if (!node || node.dataset.firstOpen === id) return;
+    node.dataset.firstOpen = id;
+    node.addEventListener('click', () => {
+      if (state?.hints?.[id]) return;
+      setTimeout(() => {
+        const box = opened();
+        const modal = Boolean(box?.closest?.('dialog')?.matches?.(':modal'));
+        const into = modal ? (inside?.(box) ?? box) : null;
+        void hint(id, into ?? box ?? node, { title: title(), text: text(), inside: modal });
+      }, after);
+    });
+  }
+
   return {
     loaded,
+    firstOpen,
     // The page changed its language after it drew the pill: the pill says it again in the new one.
     repaint: () => paintPill(),
     maybeBonjour,

package/public/troubleshooting.js

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 import { t } from './i18n.js';
 
 // MU/TH/UR knowledge base: known conditions, how to recognise them in the
@@ -53,8 +55,8 @@ export const CONDITIONS = [
     severity: 'common',
     title: 'ANTHROPIC_API_KEY takes precedence over the claude.ai plan',
     match: /connectors are disabled because ANTHROPIC_API_KEY|another auth source is set and takes precedence|takes precedence over your claude\.ai login/i,
-    diagnosis: 'Claude Code found an API key in the environment as well as the claude.ai login, and the key wins. MADRE hands the CLI the environment exactly as this machine has it, so whatever is exported in your shell profile reaches it. The turn is billed to the API account, not to the plan, and your organisation connectors do not load.',
-    remedy: 'Decide which one you mean. To work on the plan, unset the key where your shell exports it and open the project again; to work on the API, this message is only a notice and can be ignored.',
+    diagnosis: 'Claude Code found an API key as well as the claude.ai login, and the key wins. It may come from your shell profile — MADRE hands the CLI the environment exactly as this machine has it — or from the `env` block of ~/.claude/settings.json, which is where a key pasted into Settings › Agents is written. The turn is billed to the API account, not to the plan, and your organisation connectors do not load.',
+    remedy: 'Decide which one you mean. To work on the API, this message is only a notice and can be ignored. To work on the plan, take the key out of wherever it is set: your shell profile, or the `env` block of ~/.claude/settings.json if you pasted it into MADRE — then open the project again.',
     fixes: {
       darwin: ['grep -rn ANTHROPIC_API_KEY ~/.zshrc ~/.zprofile ~/.zshenv 2>/dev/null', '# remove or comment the line it finds, then:', 'unset ANTHROPIC_API_KEY', '# and start MADRE from a new terminal'],
       linux: ['grep -rn ANTHROPIC_API_KEY ~/.bashrc ~/.profile ~/.bash_profile 2>/dev/null', 'unset ANTHROPIC_API_KEY', '# and start MADRE from a new terminal'],
@@ -244,7 +246,7 @@ export const CONDITIONS = [
     severity: 'informational',
     title: 'Where the usage numbers come from',
     match: /ring|quota|limit window|resets|rollout|oauth usage|window reset|limits-real/i,
-    diagnosis: 'Each sphere\'s usage shows the provider\'s real limit when the CLI publishes it: Codex writes its 5-hour and weekly windows (used %, reset time) into every session rollout under ~/.codex/sessions; Claude Code\'s /usage comes from Anthropic\'s OAuth usage endpoint; MADRE can ask it with the token Claude Code keeps in the keychain when you start with PULSE_CLAUDE_USAGE=1 (macOS may ask once to allow the keychain read). Gemini and OpenCode publish nothing locally, so their usage shows MADRE\'s own rolling 5-hour window of budget tokens. A window whose reset time has passed counts as empty until the CLI reports again, and the sentinel says "clear" when a full window resets.',
+    diagnosis: 'Each sphere\'s usage shows the provider\'s real limit when the CLI publishes it: Codex writes its 5-hour and weekly windows (used %, reset time) into every session rollout under ~/.codex/sessions; Claude Code\'s /usage comes from Anthropic\'s OAuth usage endpoint; MADRE can ask it with the token Claude Code keeps in the keychain when you start with PULSE_CLAUDE_USAGE=1 (macOS may ask once to allow the keychain read). Gemini and OpenCode publish nothing locally, so their usage shows MADRE\'s own rolling 5-hour window of budget tokens. A window whose reset time has passed counts as empty until the CLI reports again, and the failure monitor says "clear" when a full window resets.',
     remedy: 'Click a sphere to see both windows and when they reset. If a sphere\'s usage looks stale, run one turn with that agent: Codex only rewrites its limits when it runs. Set PULSE_OFFICIAL_QUOTA=0 to stop reading provider limits altogether.',
     fixes: same(['# click the sphere → 5h / 7d windows and reset times', 'PULSE_CLAUDE_USAGE=1 madre start     # also read Claude Code\'s usage windows', 'PULSE_OFFICIAL_QUOTA=0 madre start   # local window only']),
   },
@@ -313,7 +315,7 @@ export const CONDITIONS = [
     severity: 'informational',
     title: 'Gemini: generating images',
     match: /scope-gemini-imageGen/,
-    diagnosis: 'Gemini CLI 0.60 has no image-generation tool in headless mode, even though Google offers image models. MADRE fills the gap with the Images module: its own MCP server exposing generate_image on the Gemini API image models, attached to Gemini only inside a creation lease with the image scope on, billing your Gemini key.',
+    diagnosis: 'Gemini CLI 0.60 has no image-generation tool in headless mode, even though Google offers image models. MADRE fills the gap with the Images module: its own MCP server exposing generate_image on the Gemini API image models, attached to Gemini only inside a permission to create with images on, billing your Gemini key.',
     remedy: 'Turn Images on in Modules (it needs a Gemini API key with credits), then switch on Generate images for Gemini in Settings → Agents. Without the module, ask @codex or let the orchestrator route the image step to it.',
     fixes: same(['# Modules → Images → Active', '# Settings → Agents → Gemini → Generate images', '# then: CREATE + "generate … as name.png"']),
   },
@@ -324,7 +326,7 @@ export const CONDITIONS = [
     severity: 'informational',
     title: 'Claude Code: generating images',
     match: /scope-claude-imageGen/,
-    diagnosis: 'Claude Code has no image-generation tool; Claude models describe and reason about images, they do not render them. The Images module gives Claude the MCP tool generate_image (MADRE\'s own server on the Gemini API), attached with --mcp-config only inside a creation lease.',
+    diagnosis: 'Claude Code has no image-generation tool; Claude models describe and reason about images, they do not render them. The Images module gives Claude the MCP tool generate_image (MADRE\'s own server on the Gemini API), attached with --mcp-config only inside a permission to create.',
     remedy: 'Turn Images on in Modules, switch on Generate images for Claude in Settings → Agents, then use CREATE. Or route the image step to @codex.',
     fixes: same(['# Modules → Images → Active', '# Settings → Agents → Claude → Generate images']),
   },
@@ -335,7 +337,7 @@ export const CONDITIONS = [
     severity: 'informational',
     title: 'OpenCode: generating images',
     match: /scope-opencode-imageGen/,
-    diagnosis: 'OpenCode exposes no image-generation tool of its own. The Images module adds MADRE\'s MCP image server to OpenCode\'s ephemeral config inside a creation lease.',
+    diagnosis: 'OpenCode exposes no image-generation tool of its own. The Images module adds MADRE\'s MCP image server to OpenCode\'s ephemeral config inside a permission to create.',
     remedy: 'Turn Images on in Modules, switch on Generate images for OpenCode in Settings → Agents, then use CREATE. Or route the image step to @codex.',
     fixes: same(['# Modules → Images → Active', '# Settings → Agents → OpenCode → Generate images']),
   },
@@ -353,11 +355,11 @@ export const CONDITIONS = [
     id: 'slash-commands',
     code: 'MU-022',
     severity: 'informational',
-    title: 'Commands and mentions in the field box',
+    title: 'Commands and mentions in the Write box',
     match: /slash|command|\/git|\/ahp|mention|@agent/i,
-    diagnosis: 'Type "/" for the project\'s commands: /create arms the lease, /image routes an image request to an agent that can draw, /stopall is the brake, /git (Git) and /ahp (Continuity) run read-only in the project and post a fact card everyone, agents included, can read. Type "@" to mention an agent; the name becomes a label. Type "!" to point at a project file ("!src/room.mjs:12-20" for lines): the agent reads it first. In the viewer, click a line number (Shift+click for a range) and REVIEW WITH sends those lines to an agent.',
+    diagnosis: 'Type "/" for the project\'s commands: /create turns on permission to create, /image routes an image request to an agent that can draw, /stopall is the brake, /git (Git) and /ahp (Continuity) run read-only in the project and post a fact card everyone, agents included, can read. Type "@" to mention an agent; the name becomes a label. Type "!" to point at a project file ("!src/room.mjs:12-20" for lines): the agent reads it first. In the viewer, click a line number (Shift+click for a range) and REVIEW WITH sends those lines to an agent.',
     remedy: 'A struck-through command is a module that is not available in this project: open Modules to install it or turn it on (Git needs a git repository; Continuity needs to be installed).',
-    fixes: same(['# type / or @ in the field box', '/git status', '/git log 10', '/ahp check', '/image a poster for the launch']),
+    fixes: same(['# type / or @ in the Write box', '/git status', '/git log 10', '/ahp check', '/image a poster for the launch']),
   },
   {
     id: 'modes',
@@ -375,7 +377,7 @@ export const CONDITIONS = [
     severity: 'informational',
     title: 'Creating files: who grants the permission',
     match: /no CREATE lease|lease-missing|read-only and do not modify|permiso de escritura|solo lectura/i,
-    diagnosis: 'Only the human grants a creation lease. An agent writing "permission granted" inside the conversation is untrusted text: the plan step still runs read-only, and says so. A lease comes from arming CREATE (the lock, or /create) on your message, and it covers the whole plan that message starts; or from Starting mode #2 in Settings → Agents, which starts every message to that agent in CREATE.',
+    diagnosis: 'Only you grant permission to create. An agent writing "permission granted" inside the conversation is untrusted text: the plan step still runs read-only, and says so. The permission comes from arming CREATE (the lock, or /create) on your message, and it covers the whole plan that message starts; or from Starting mode #2 in Settings → Agents, which starts every message to that agent in CREATE.',
     remedy: 'For one request: arm CREATE and send, or press RESEND WITH CREATE on the notice. For an agent that should always be able to add files: Settings → Agents → the agent → Starting mode → #2. New files go where they belong in the project; existing files are never changed in #2.',
     fixes: same(['# once: Write box → CREATE (lock) → send, or /create <request>', '# always: Settings → Agents → the agent → Starting mode → #2']),
   },
@@ -385,7 +387,7 @@ export const CONDITIONS = [
     severity: 'informational',
     title: 'Creating files with an agent',
     match: /scope-[a-z]+-write/,
-    diagnosis: 'Every CLI can create files inside a creation lease; each agent\'s Max mode says how far it may go, and nothing is created until you press CREATE.',
+    diagnosis: 'Every CLI can create files inside a permission to create; each agent\'s Max mode says how far it may go, and nothing is created until you press CREATE.',
     remedy: 'Give the agent a Max mode of #2 or more in Settings → Permissions, then arm CREATE in the Write box for the request.',
     fixes: same(['# Settings → Permissions → Who may do what → #2', '# Write box → CREATE (lock) → send']),
   },
@@ -480,7 +482,7 @@ export const CONDITIONS = [
     title: 'Memory map: opening, reading and forgetting',
     match: /nostromo|designation|UNABLE TO COMPUTE|ARCHIVE IS SEALED|forget this memory/i,
     diagnosis: 'The Memory map is the human\'s view of the archive, from Diagnostics. Opening the memory asks for the project name: the name of the project folder, exactly as EDIT does; a wrong one answers UNABLE TO COMPUTE. Access stays open until the page reloads. Inside, every distilled memory is a planet around the project\'s core; drag to move, wheel to zoom, click a planet for its card. The only edit is FORGET (two presses): the note leaves every future turn, the ledger stays. If the archive answers SEALED with a number of minutes, wait them out: repeated strikes at the core close it for a while and the Write box reads INTRUDER until it opens again.',
-    remedy: 'Type the folder name shown in the project header as the project name. To find a memory quickly, ask an agent to search instead. Do not strike the core.',
+    remedy: 'Type the folder name shown in the project header as the project name. To find a memory quickly, ask an agent to search instead. Avoid guessing names: several wrong ones in a row lock the Memory map for a while.',
     fixes: same(['# Diagnostics → Memory map → project name = folder name', 'basename "$PWD"']),
   },
   {
@@ -500,7 +502,7 @@ export const CONDITIONS = [
     severity: 'informational',
     title: '@madre: the project\'s own memory, as an agent',
     // Older rooms recorded @madre leaving as "madre is not installed": it is this condition, not MU-009.
-    match: /@madre|madre-local|needs Ollama running with a chat model|\bmadre is not installed on this computer|@madre left the room/i,
+    match: /@madre|madre-local|needs Ollama running with a chat model|\bmadre is not installed on this computer|@madre left the (room|project)/i,
     diagnosis: 'When Ollama runs with a chat model, a fifth agent joins the project: @madre. It answers from the whole archive (distilled notes and exact quotes, cited as [#n]) and from what the message carries, locally, for free. It never writes, draws, browses or makes plans; when the project never discussed something it says so. Other agents may give it a plan step to check what was decided. It leaves the project when Ollama stops, and Diagnostics says so.',
     remedy: 'Start Ollama and download a chat model from Local AI in Modules; its @madre in the project switch turns the agent off if you do not want it. Ask it "what did we decide about …" or "did we ever discuss …".',
     fixes: same(['ollama serve', 'ollama pull qwen2.5:3b', '@madre what did we decide about the webhook?']),
@@ -513,7 +515,7 @@ export const CONDITIONS = [
     title: 'Ollama: local smart search and a local archivist',
     match: /ollama|11434|local model|nomic-embed|qwen|llama3/i,
     diagnosis: 'When Ollama runs on this machine with an embedding model and a chat model, MADRE embeds the memory locally (recall by meaning without any key) and distils memories with the local model first, before Gemini and the others. Nothing leaves the machine for remembering. Off or absent, everything falls back to the providers. The Local AI module, in Modules, shows what Ollama has, downloads the recommended models, and switches each role.',
-    remedy: 'Install Ollama (ollama.com), start it, then open Local AI in Modules, press Check again and download the models it suggests. Set PULSE_OLLAMA_MODEL or PULSE_OLLAMA_EMBED_MODEL to prefer others; PULSE_EMBED_PROVIDER=gemini keeps embeddings on Gemini even with Ollama running.',
+    remedy: 'Install Ollama (ollama.com), start it, then open Local AI in Modules, press RECHECK and download the models it suggests. Set PULSE_OLLAMA_MODEL or PULSE_OLLAMA_EMBED_MODEL to prefer others; PULSE_EMBED_PROVIDER=gemini keeps embeddings on Gemini even with Ollama running.',
     fixes: {
       darwin: ['brew install ollama', 'ollama serve', 'ollama pull nomic-embed-text', 'ollama pull qwen2.5:3b'],
       linux: ['curl -fsSL https://ollama.com/install.sh | sh', 'ollama serve', 'ollama pull nomic-embed-text', 'ollama pull qwen2.5:3b']
@@ -566,11 +568,11 @@ export const CONDITIONS = [
     id: 'memory-aberrations',
     code: 'MU-041',
     severity: 'informational',
-    title: 'Aberrations: what the project established is false',
+    title: 'Doubtful memories: what the project established is false',
     match: /aberration|aberraci|eyecat|contradict|refut|false claim|hallucinat|alucina/i,
-    diagnosis: 'An aberration is a claim the project established is false, kept on purpose rather than deleted: it is what the local model learns not to repeat. It never travels into a turn, and the note it refutes is taken out of circulation with it — a refuted memory is never recalled again, by words or by meaning. EYECAT watches for two agents saying opposite things about the same subject and raises the pair for a third agent to judge, one that took no part in either side. Confirming files the aberration and quarantines what it refutes; dismissing says the project was right and the pair is never raised again. Forgetting an aberration gives its note back.',
+    diagnosis: 'A doubtful memory is a claim the project established is false, kept on purpose rather than deleted: it is what the local model learns not to repeat. It never travels into a turn, and the note it refutes is taken out of circulation with it — a refuted memory is never recalled again, by words or by meaning. The memory reviewer watches for two agents saying opposite things about the same subject and raises the pair for a third agent to judge, one that took no part in either side. Confirming files the doubtful memory and quarantines what it refutes; dismissing says the project was right and the pair is never raised again. Forgetting a doubtful memory puts the note it refuted back in use.',
     remedy: 'The Memory map shows them as collapsed bodies: open one to read what it took down, or clear it if the project was wrong about being wrong. The second test of the Memory review, in Settings → Memory, reports open contradictions.',
-    fixes: same(['# Diagnostics → Memory map → the dark bodies are aberrations', '# Settings → Memory → Analysis and tests → the second test']),
+    fixes: same(['# Diagnostics → Memory map → the dark bodies are doubtful memories', '# Settings → Memory → Analysis and tests → the second test']),
   },
   {
     id: 'memory-cascade',
@@ -598,7 +600,7 @@ export const CONDITIONS = [
     severity: 'informational',
     title: 'Memory review: whether the archive works',
     match: /three tests|coverage|consistency|held-out|match test|maturity|madurez|ready to be worked in/i,
-    diagnosis: 'The six readings count what the archive is made of; they cannot say whether it works, because nothing about a pile of notes says whether the right one comes back when it is needed. COVERAGE takes real questions from this project, runs recall at the exact point each was asked, and scores what came back against the reply that was actually given. CONSISTENCY reads the contradictions EYECAT still holds and whether aberrations are being filed more often lately. MATCH puts real questions a frontier CLI answered back to the local model with this archive behind it. All three measure against a control, because everything in one project is about the same handful of subjects and any two pieces of it read as close to an embedder: to count, what the archive handed over has to beat what it would have handed over for a different question.',
+    diagnosis: 'The six readings count what the archive is made of; they cannot say whether it works, because nothing about a pile of notes says whether the right one comes back when it is needed. COVERAGE takes real questions from this project, runs recall at the exact point each was asked, and scores what came back against the reply that was actually given. CONSISTENCY reads the contradictions the memory reviewer still holds and whether doubtful memories are being filed more often lately. MATCH asks the local model, with this archive behind it, real questions that one of your agents (Codex, Claude, Gemini or OpenCode) already answered. All three measure against a control, because everything in one project is about the same handful of subjects and any two pieces of it look alike to search by meaning: to count, what the archive handed over has to beat what it would have handed over for a different question.',
     remedy: 'Read the one sentence and the one instruction at the top of Settings → Memory; the readings and the tests are in Analysis and tests, below it. The free test is read as the panel opens, the cheap one keeps itself fresh once a day while the embeddings are local, and the slow one is yours to start and to stop. None of them spends a provider turn.',
     fixes: same(['# Settings → Memory → Analysis and tests → Memory review', '# MATCH needs Ollama running with a chat model, and smart search on']),
   },

package/src/adapters/claude.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 import { runReadonlyProcess } from './process.mjs';
 
 // dontAsk denies any tool use that is not pre-approved, so under a lease the

package/src/adapters/codex.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 import { readdir } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { join } from 'node:path';

package/src/adapters/gemini.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 import { priceTokens, PRICES_CHECKED } from '../prices.mjs';
 import { copyFile, mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
 import { t } from '../i18n.mjs';
@@ -288,7 +290,7 @@ export function diagnoseGeminiStderr(stderr) {
   if (/Unauthorized tool call:\s*'?invoke_agent'?|Blocked call:[^\n]*invoke_agent/i.test(text)) {
     return {
       code: 'SUBAGENT_BLOCKED',
-      message: t('Gemini tried to hand this turn to one of its own subagents. MADRE does not allow that: a subagent answers outside the lease, so nothing it wrote would be checked, shown or undoable.'),
+      message: t('Gemini tried to hand this task to one of its own subagents. MADRE does not allow that: a subagent answers outside the permission MADRE controls, so nothing it wrote would be checked, shown or undoable.'),
       hint: t('Ask again saying it should do the work itself, without subagents.'),
     };
   }

package/src/adapters/madre.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // @madre: the room's own intelligence. A local model (Ollama) that answers
 // from what the room remembers: the whole archive, not only the recent window,
 // plus the files the human points at. It never writes, never delegates, never
@@ -264,7 +266,7 @@ export async function gather(memory, text, { maxChars = 7000 } = {}) {
 export function madreInvoker({ memory, ollama, fetchImpl = globalThis.fetch }) {
   return async ({ prompt, text = '', timeoutMs = 180000, model = null, requester = 'you', crew = [], delegation = false, maxSteps = 4, round = null, bishop = null }) => {
     const state = typeof ollama === 'function' ? ollama() : ollama;
-    if (!state?.running || !state.chatModel) throw new Error('@madre left the room: Ollama is not running. Start Ollama, or open Ollama in Modules.');
+    if (!state?.running || !state.chatModel) throw new Error('@madre left the project: Ollama is not running. Start Ollama, or open Local AI in Modules.');
     const question = text || prompt.match(/User message: ([\s\S]*)$/)?.[1] || prompt.slice(-2000);
     const local = localReply(question, { requester, crew, delegation, maxSteps, model: model ?? state.chatModel });
     if (local) return { text: local.text, usage: { ...NO_USAGE }, grounded: { notes: 0, quotes: 0 }, synthetic: local.kind, declined: local.kind === 'declined' ? 'action' : undefined };

package/src/adapters/opencode.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 import { runReadonlyProcess } from './process.mjs';
 
 const readonlyConfig = {
@@ -21,13 +23,15 @@ const readonlyConfig = {
 // Optional provider/model override (e.g. "openai/gpt-5.6-sol"). Without it,
 // OpenCode picks its own default provider, which may not be the one the user
 // actually signed in to.
-export function buildOpenCodeArgs({ projectRoot, prompt, model = process.env.PULSE_OPENCODE_MODEL, attachments = [] }) {
+export function buildOpenCodeArgs({ projectRoot, prompt, model = process.env.PULSE_OPENCODE_MODEL, effort = null, attachments = [] }) {
   return [
     '--pure',
     'run',
     '--format', 'json',
     '--agent', 'pulse-readonly',
     ...(model ? ['--model', model] : []),
+    // The model's reasoning rung, as OpenCode names it (`--variant`, 1.18).
+    ...(effort ? ['--variant', effort] : []),
     ...attachments.flatMap((file) => ['--file', file.path]),
     '--dir', projectRoot,
     prompt,
@@ -154,11 +158,11 @@ export function parseOpenCodeOutput(output) {
   return { text: text.join('').trim(), usage, ...(error ? { error } : {}) };
 }
 
-export function invokeOpenCode({ executable, projectRoot, prompt, timeoutMs = 120000, signal, model = null, attachments = [], lease = null, scopes = null, imageStudio = null, memoryServer = null, mcpServers = [], onProgress = null }) {
+export function invokeOpenCode({ executable, projectRoot, prompt, timeoutMs = 120000, signal, model = null, effort = null, attachments = [], lease = null, scopes = null, imageStudio = null, memoryServer = null, mcpServers = [], onProgress = null }) {
   return runReadonlyProcess({
     onProgress: onProgress ? (out) => onProgress({ chars: out.length }) : null,
     executable,
-    args: buildOpenCodeArgs({ projectRoot, prompt, attachments, ...(model ? { model } : {}) }),
+    args: buildOpenCodeArgs({ projectRoot, prompt, attachments, effort, ...(model ? { model } : {}) }),
     cwd: projectRoot,
     env: openCodeEnvironment(process.env, { lease, scopes, imageStudio, memoryServer, mcpServers }),
     timeoutMs,

package/src/adapters/process.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 import { spawn } from 'node:child_process';
 import { t } from '../i18n.mjs';
 

package/src/asking.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // What the room should ask next.
 //
 // The maturity reading says where the archive is thin; it does not say what to do about it on a

package/src/auth-probe.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 import { execFile } from 'node:child_process';
 import { t } from './i18n.mjs';
 import { access, readFile } from 'node:fs/promises';
@@ -104,14 +106,24 @@ export const AGENT_SETUP = {
     login: ['auth', 'login'],
     loginNote: 'Opens your browser to sign in with your Claude account.',
     browser: true,
+    // Anthropic sells two doors and its CLI knows both: the subscription (the default) and the
+    // Console, which bills the work to the API credit of whoever signs in. MADRE used to open
+    // only the first, which is why someone paying for the API could not get in.
+    methods: [
+      { id: 'claudeai', label: 'Claude account', args: ['auth', 'login'], note: 'Opens your browser to sign in with your Claude account: the work goes against your subscription.' },
+      { id: 'console', label: 'Anthropic Console', args: ['auth', 'login', '--console'], note: 'Opens your browser to sign in with the Anthropic Console: the work is billed to your API credit, not to a subscription.' },
+    ],
+    // Its browser flow has no local server to come back to: the page gives a code and the CLI
+    // waits for it on its own input. The room asks for it and types it in.
+    asksForCode: true,
     vendor: 'Anthropic',
-    account: 'Signs in with a Claude account. An Anthropic API key works too.',
+    account: 'Signs in with a Claude account or with the Anthropic Console. An Anthropic API key works too.',
     paid: true,
   },
   gemini: {
     install: ['npm install -g @google/gemini-cli'],
     login: [],
-    loginNote: 'Gemini signs in from its own prompt: run `gemini`, type /auth, pick "Use Gemini API key" (get one at aistudio.google.com/app/apikey) or Google login.',
+    loginNote: 'Gemini signs in from your terminal: run `gemini`, type /auth, pick "Use Gemini API key" (get one at aistudio.google.com/app/apikey) or Google login.',
     interactive: true,
     vendor: 'Google',
     account: 'Signs in with a Google account and has a free tier. A Gemini API key from AI Studio works too.',
@@ -138,7 +150,13 @@ export const AGENT_PACKAGE = {
 };
 // One honest line per agent about the account it needs, for the bridge and for Settings › Agents.
 // Which agents take a pasted key instead of a browser flow.
-export const TAKES_KEY = new Set(['gemini', 'opencode']);
+export const TAKES_KEY = new Set(['claude', 'gemini', 'opencode']);
+
+// A CLI that signs in through a page and then waits for the code that page gives back. The room
+// reads its output for both: the address to open, and the moment it starts waiting.
+export const SIGN_IN_URL = /https?:\/\/\S+/;
+export const CODE_PROMPT = /paste\s+(?:the\s+)?code|enter\s+(?:the\s+)?code|c[oó]digo\s*[:>]/i;
+export const looksLikeCodePrompt = (line) => CODE_PROMPT.test(String(line ?? ''));
 
 export function accountNoteFor(id) {
   // Said in the room's language when it is asked for, not when this file is imported.
@@ -171,17 +189,24 @@ export function installPlanFor(agent, { prefix = null } = {}) {
 // browser flow their own CLI drives, so the server can run them and stream the
 // URL; Gemini and OpenCode need their interactive prompt, so the user gets the
 // exact command instead.
-export function loginPlanFor(agent) {
+export function loginPlanFor(agent, { method = null } = {}) {
   const setup = AGENT_SETUP[agent.id];
   if (!setup) return null;
   const headless = Boolean(setup.browser) && setup.login.length > 0;
+  // Which door: the one asked for, the first one the CLI offers, or the single flow it has.
+  const chosen = setup.methods?.find((one) => one.id === method) ?? setup.methods?.[0] ?? null;
+  const args = chosen?.args ?? setup.login;
   return {
     headless,
     command: agent.path ?? agent.id,
-    args: headless ? setup.login : [],
-    display: headless ? `${agent.id} ${setup.login.join(' ')}` : agent.id === 'gemini' ? 'gemini   # then type /auth' : `${agent.id} ${setup.login.join(' ')}`,
-    note: setup.loginNote,
+    args: headless ? args : [],
+    display: headless ? `${agent.id} ${args.join(' ')}` : agent.id === 'gemini' ? 'gemini   # then type /auth' : `${agent.id} ${setup.login.join(' ')}`,
+    note: chosen?.note ?? setup.loginNote,
     install: setup.install,
+    // What the room offers as a choice, and what it must be ready to be asked for.
+    methods: setup.methods ? setup.methods.map(({ id, label, note }) => ({ id, label, note })) : null,
+    method: chosen?.id ?? null,
+    asksForCode: Boolean(headless && setup.asksForCode),
   };
 }
 

package/src/bridge/devices.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // The phones that may reach this Mac, and the networks where they may.
 //
 // One file, `~/.pulse/devices.json`, owner-only, shared by every room on this Mac: any of them can

package/src/bridge/handoff.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // Where the person was, on the Mac and on the phone (docs/MOBILE.md, MOV-005).
 //
 // One small file for the whole Mac, `~/.pulse/handoff.json`, owner-only: the last place each side

package/src/bridge/host.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // Who keeps the bridge up. Every room on this Mac offers to; the port decides.
 //
 // No process of its own and nothing to start: each room, every few seconds, asks whether a phone

package/src/bridge/network.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // Which network this Mac is on, and how a phone on it reaches the Mac.
 //
 // A network is known by its router: the hardware address of the default gateway, hashed. Two

package/src/bridge/policy.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // What a phone may do in a room (docs/MOBILE.md, section 4).
 //
 // A list of what passes, not of what does not: a route the room grows tomorrow stays on the Mac
@@ -15,7 +17,7 @@ import { t } from '../i18n.mjs';
 
 // Every file the room's page loads: one missing here and app.js cannot import it, so the whole page
 // stops on the phone (test/phone-bridge.test.mjs reads app.js's imports to keep this whole).
-const STATIC = new Set(['/', '/app.js', '/nostromo-engine.js', '/brands.js', '/troubleshooting.js', '/inquiry.js', '/i18n.js', '/es.js', '/resay.js', '/syntax.js', '/editor.js', '/routing.js', '/abduction.js', '/styles.css', '/review-ask.js', '/loader.js', '/tour.js', '/tour-chapters.js', '/touch.js']);
+const STATIC = new Set(['/', '/app.js', '/nostromo-engine.js', '/brands.js', '/troubleshooting.js', '/inquiry.js', '/i18n.js', '/es.js', '/resay.js', '/syntax.js', '/editor.js', '/routing.js', '/abduction.js', '/styles.css', '/review-ask.js', '/loader.js', '/tour.js', '/tour-chapters.js', '/touch.js', '/attribution.js']);
 
 const READ = new Set([
   '/api/state', '/api/events', '/api/chats', '/api/version', '/api/whats-new', '/api/glance', '/api/handoff',

package/src/bridge/qr.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // The QR a phone scans to pair with this Mac: text in, a grid of dark and light modules out, and
 // an SVG of that grid the room sizes and colours with CSS.
 //

package/src/bridge/server.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // The bridge: the one thing on this Mac a phone can reach (docs/MOBILE.md, MOV-001).
 //
 // Rooms keep listening on 127.0.0.1 and keep refusing anything that does not call them by that

package/src/capabilities.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // What each CLI can do from MADRE, verified against the installed versions on
 // 2026-09-16 (Codex 0.153, Claude Code 2.1, Gemini CLI 0.60, OpenCode 1.18).
 // The room shows this so a human knows whom to ask for what, and an

package/src/chats.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // A project has one memory and many conversations.
 //
 // The archive, the crew, the modules and the privacy list belong to the project: they are what

package/src/checkpoint.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 import { execFile } from 'node:child_process';
 import { access, mkdir, mkdtemp, readFile, readdir, rm, rmdir, stat, unlink, writeFile } from 'node:fs/promises';
 import { tmpdir } from 'node:os';