@jossuealcala/madre 1.0.0 → 1.0.2

package/src/mcp/proxy.mjs

@@ -0,0 +1,153 @@
+#!/usr/bin/env node
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
+// The one MCP server every CLI starts for a server a person connected (src/mcp/connect.mjs).
+//
+//   node proxy.mjs --state <stateRoot> --project <projectRoot> --server <id> [--allow a,b,c]
+//
+// It speaks MCP over stdio to the CLI, like any local server, and passes each message on to the
+// real one: a local command it starts itself, or a remote address over Streamable HTTP. Three
+// things happen on the way, and they are why it exists:
+//
+//   · Secrets are read here, from the vault, and handed to the real server in its environment or
+//     its headers. Nothing secret is ever in the argv a CLI is given or in its config.
+//   · Only the tools in --allow travel. tools/list comes back without the others, and a call to
+//     one of them is answered here, without reaching the server. The list a CLI gets is already
+//     the allowed one; this is the second lock, for a CLI that would call a tool it was not told.
+//   · A remote server signed in with OAuth gets its token refreshed here when it says it expired.
+//
+// It never writes to stdout anything but MCP messages, and it says why it failed on stderr.
+
+import { spawn } from 'node:child_process';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import { readMcp, resolveEnv, resolveHeaders, refreshGrant } from './connect.mjs';
+
+const option = (name) => { const at = process.argv.indexOf(`--${name}`); return at >= 0 ? process.argv[at + 1] : null; };
+const stateRoot = option('state');
+const projectRoot = option('project');
+const serverId = option('server');
+const allowArg = option('allow');
+const allowed = allowArg === null ? null : new Set(allowArg.split(',').filter(Boolean));
+
+const write = (message) => process.stdout.write(`${JSON.stringify(message)}\n`);
+const fail = (id, message, code = -32000) => { if (id !== undefined && id !== null) write({ jsonrpc: '2.0', id, error: { code, message } }); };
+const say = (text) => process.stderr.write(`MADRE MCP ${serverId ?? '?'}: ${text}\n`);
+
+// The ids of tools/list requests in flight, so their answers can be filtered on the way back.
+const listing = new Set();
+function filterOutbound(message) {
+  if (!allowed || !message || message.id === undefined || !listing.has(message.id)) return message;
+  listing.delete(message.id);
+  const tools = message.result?.tools;
+  if (!Array.isArray(tools)) return message;
+  return { ...message, result: { ...message.result, tools: tools.filter((tool) => allowed.has(tool?.name)) } };
+}
+// A message from the CLI: answered here when it asks for a tool it may not use; passed on otherwise.
+function admit(message) {
+  if (message?.method === 'tools/list' && message.id !== undefined) listing.add(message.id);
+  if (message?.method === 'tools/call' && allowed && !allowed.has(message.params?.name)) {
+    write({ jsonrpc: '2.0', id: message.id, result: { isError: true, content: [{ type: 'text', text: `MADRE does not allow ${message.params?.name ?? 'that tool'} in this turn.` }] } });
+    return false;
+  }
+  return true;
+}
+
+function lines(stream, onMessage) {
+  let buffer = '';
+  stream.setEncoding('utf8');
+  stream.on('data', (chunk) => {
+    buffer += chunk;
+    for (let newline = buffer.indexOf('\n'); newline >= 0; newline = buffer.indexOf('\n')) {
+      const line = buffer.slice(0, newline).trim();
+      buffer = buffer.slice(newline + 1);
+      if (!line) continue;
+      let message;
+      try { message = JSON.parse(line); } catch { continue; }
+      onMessage(message);
+    }
+  });
+}
+
+async function viaStdio(server) {
+  const env = { ...process.env, ...(await resolveEnv(stateRoot, server)) };
+  const home = new Set(server.home ?? []);
+  const argv = [server.command, ...(server.args ?? [])].map((word, index) => (home.has(index) ? (word === '~' ? homedir() : join(homedir(), word.slice(2))) : word));
+  const child = spawn(argv[0], argv.slice(1), { cwd: server.cwd ?? projectRoot, env, stdio: ['pipe', 'pipe', 'pipe'], shell: false, windowsHide: true });
+  child.on('error', (error) => { say(`could not start: ${error.message}`); process.exit(1); });
+  child.on('close', (code) => process.exit(code ?? 0));
+  child.stderr.on('data', (chunk) => process.stderr.write(chunk));
+  child.stdin.on('error', () => {});
+  lines(child.stdout, (message) => write(filterOutbound(message)));
+  lines(process.stdin, (message) => { if (admit(message)) child.stdin.write(`${JSON.stringify(message)}\n`); });
+  process.stdin.on('end', () => { child.stdin.end(); setTimeout(() => child.kill('SIGTERM'), 2000).unref(); });
+}
+
+// Streamable HTTP: each message is a POST; the answer is JSON or an event stream of messages.
+async function viaHttp(server) {
+  let session = null;
+  let protocol = null;
+  let refreshed = false;
+  const post = async (message) => {
+    const headers = { 'content-type': 'application/json', accept: 'application/json, text/event-stream', ...(await resolveHeaders(stateRoot, server)) };
+    if (session) headers['mcp-session-id'] = session;
+    if (protocol) headers['mcp-protocol-version'] = protocol;
+    return fetch(server.url, { method: 'POST', headers, body: JSON.stringify(message), signal: AbortSignal.timeout(300000) });
+  };
+  const send = async (message) => {
+    let response = await post(message);
+    // Expired: refreshed once, then asked again. A server that still refuses is said plainly.
+    if (response.status === 401 && server.auth === 'oauth' && !refreshed) {
+      refreshed = true;
+      if ((await refreshGrant(stateRoot, server.id)).ok) response = await post(message);
+    }
+    if (response.status === 401 || response.status === 403) {
+      fail(message.id, server.auth === 'oauth' ? 'MADRE_AUTH_REQUIRED: sign in to this server again from Settings › Connect MCP.' : 'MADRE_AUTH_REQUIRED: the server refused the credentials. Check the token in Settings › Connect MCP.');
+      return;
+    }
+    if (response.status === 202 || response.status === 204) return;
+    if (!response.ok) { fail(message.id, `the server answered HTTP ${response.status}`); return; }
+    if (response.ok) refreshed = false;
+    session = response.headers.get('mcp-session-id') ?? session;
+    const type = response.headers.get('content-type') ?? '';
+    if (type.includes('text/event-stream')) {
+      const reader = response.body.getReader();
+      const decoder = new TextDecoder();
+      let buffer = '';
+      for (;;) {
+        const { value, done } = await reader.read();
+        if (done) break;
+        buffer += decoder.decode(value, { stream: true });
+        for (let end = buffer.indexOf('\n\n'); end >= 0; end = buffer.indexOf('\n\n')) {
+          const event = buffer.slice(0, end);
+          buffer = buffer.slice(end + 2);
+          const data = event.split('\n').filter((line) => line.startsWith('data:')).map((line) => line.slice(5).trimStart()).join('\n');
+          if (!data) continue;
+          try { const out = JSON.parse(data); for (const one of Array.isArray(out) ? out : [out]) deliver(one); } catch { /* not a message */ }
+        }
+      }
+      return;
+    }
+    const out = await response.json().catch(() => null);
+    for (const one of Array.isArray(out) ? out : out ? [out] : []) deliver(one);
+  };
+  const deliver = (message) => {
+    if (message?.result?.protocolVersion) protocol = message.result.protocolVersion;
+    write(filterOutbound(message));
+  };
+  let queue = Promise.resolve();
+  lines(process.stdin, (message) => {
+    if (!admit(message)) return;
+    // In order, as a stdio server would read them: the handshake has to land before the rest.
+    queue = queue.then(() => send(message)).catch((error) => { say(error.message); fail(message.id, `could not reach the server: ${error.message}`); });
+  });
+  process.stdin.on('end', () => { void queue.finally(() => process.exit(0)); });
+}
+
+const settings = stateRoot && projectRoot && serverId ? await readMcp(stateRoot, projectRoot) : { servers: [] };
+const server = settings.servers.find((one) => one.id === serverId);
+if (!server) {
+  say('this server is not connected in this project.');
+  process.exit(2);
+}
+if (server.transport === 'http') await viaHttp(server); else await viaStdio(server);

package/src/mcp/smtp-server.mjs

@@ -1,4 +1,6 @@
 #!/usr/bin/env node
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // MADRE CORREO: a tiny MCP server (stdio, JSON-RPC 2.0) exposing one tool, send_email, that
 // hands one message to the user's own mail provider over SMTP+TLS with the user's own app
 // password. There is no MADRE in the middle: this process talks to smtp.gmail.com (or whatever

package/src/memory-dashboard.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // What the MEMORY dashboard draws, shaped from counts the archive already keeps.
 //
 // Pure functions. The room hands in `RoomMemory#activity()` and the stats it already reports;

package/src/memory-tools.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 import { fileURLToPath } from 'node:url';
 
 // How MADRE attaches the room's memory to a CLI as an MCP server, every turn:

package/src/memory.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // MADRE's durable room memory, two layers in one SQLite file next to the ledger.
 //   entries   everything ever said in the room outside GHOST, indexed for
 //             full-text recall: exact quotes handed to a turn when they match.

package/src/models.mjs

@@ -1,6 +1,9 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 import { readFile } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
+import { OPENCODE_PROVIDERS } from './credentials.mjs';
 
 // Which model a CLI should use for one turn. Every CLI accepts --model; the
 // names come from what is installed locally (Codex's model cache, OpenCode's
@@ -40,6 +43,9 @@ export const KNOWN_MODELS = {
 export const EFFORTS = {
   claude: ['low', 'medium', 'high', 'xhigh', 'max'],
   codex: ['minimal', 'low', 'medium', 'high', 'xhigh', 'max', 'ultra'],
+  // OpenCode's are each model's «variants» (`opencode run --variant`, 1.18): every rung any provider
+  // names. A model offers only its own, read from `opencode models --verbose` (2026-10-14).
+  opencode: ['none', 'minimal', 'low', 'medium', 'high', 'xhigh', 'max'],
 };
 // What a Codex with no cache to read is offered: the levels its models have always taken.
 const CODEX_SAFE = ['low', 'medium', 'high'];
@@ -167,12 +173,38 @@ export async function discoverModels({ agents = [], config = {}, home = homedir(
       effortsByModel = Object.fromEntries(Object.entries(read.byModel).map(([slug, one]) => [slug, { levels: one.levels, default: one.levels.includes(read.effort) ? read.effort : one.default }]));
       if (!efforts.includes(effortDefault)) effortDefault = (cliDefault && read.byModel[cliDefault]?.default) || null;
     }
-    if (agent.id === 'opencode' && agent.detected) {
-      discovered = await listOpenCode(agent).catch(() => []);
-      cliDefault = process.env.PULSE_OPENCODE_MODEL ?? null;
+    if (agent.id === 'opencode') {
+      // Nothing until a model is known: the rungs are the model's, never the whole union.
+      efforts = [];
+      if (agent.detected) {
+        const listed = await listOpenCode(agent).catch(() => []);
+        discovered = listed.map((one) => (typeof one === 'string' ? one : one?.name)).filter(Boolean);
+        cliDefault = process.env.PULSE_OPENCODE_MODEL ?? null;
+        const byModel = {};
+        for (const one of listed) {
+          if (!one || typeof one === 'string' || !Array.isArray(one.variants)) continue;
+          const levels = EFFORTS.opencode.filter((level) => one.variants.includes(level));
+          if (levels.length) byModel[one.name] = { levels, default: null };
+        }
+        if (Object.keys(byModel).length) {
+          effortsByModel = byModel;
+          effortsShared = [];
+          efforts = (cliDefault && byModel[cliDefault]?.levels) || [];
+        }
+      }
     }
     const custom = Array.isArray(config.models?.[agent.id]) ? config.models[agent.id] : [];
+    // OpenCode speaks to many providers: what `opencode models` lists is already only the ones
+    // signed in plus OpenCode's own. The person may hide a provider from the chooser (AJUSTES ›
+    // Project › OpenCode); its models are then left out, never the room default.
+    let groups;
+    if (agent.id === 'opencode') {
+      const hidden = new Set(openCodeHidden(config));
+      discovered = discovered.filter((name) => !hidden.has(providerOf(name)));
+      groups = groupOpenCode(unique([...custom, ...discovered]));
+    }
     result[agent.id] = {
+      ...(groups ? { groups } : {}),
       models: unique([...custom, ...discovered, ...known.defaults]),
       default: cliDefault,
       note: known.note,
@@ -184,3 +216,51 @@ export async function discoverModels({ agents = [], config = {}, home = homedir(
   }
   return result;
 }
+
+// `opencode models --verbose` prints each model's name on a line of its own and then its JSON.
+// What is read is the name and the variants; a block that does not parse keeps its name.
+export function parseOpenCodeVerbose(lines = []) {
+  const out = [];
+  let current = null;
+  let body = [];
+  const close = () => {
+    if (!current) return;
+    let variants = [];
+    try { variants = Object.keys(JSON.parse(body.join('\n'))?.variants ?? {}); } catch { /* the name is still a model */ }
+    out.push({ name: current, variants });
+  };
+  for (const raw of lines) {
+    const line = String(raw ?? '');
+    if (/^[\w.-]+\/[\w.:/-]+$/.test(line.trim()) && !line.startsWith(' ')) { close(); current = line.trim(); body = []; continue; }
+    if (current) body.push(line);
+  }
+  close();
+  return out;
+}
+
+// ---- OpenCode's models by provider: `provider/model`, named as the person knows the provider.
+export const OPENCODE_OWN = 'opencode';
+export const providerOf = (name) => String(name ?? '').split('/')[0];
+export function openCodeHidden(config = {}) {
+  const hidden = config.opencode?.hidden;
+  return Array.isArray(hidden) ? hidden.filter((id) => typeof id === 'string' && /^[\w.-]{1,60}$/.test(id)) : [];
+}
+export function providerLabel(id) {
+  if (id === OPENCODE_OWN) return 'OpenCode';
+  const known = OPENCODE_PROVIDERS.find((one) => one.id === id);
+  if (known) return known.label;
+  return id.split(/[-_.]/).map((part) => (part ? part[0].toUpperCase() + part.slice(1) : part)).join(' ');
+}
+// Groups in a steady order: the providers with a key first, by name; OpenCode's own models last.
+export function groupOpenCode(names = []) {
+  const byProvider = new Map();
+  for (const name of names) {
+    if (!/^[\w.-]+\/[\w.:/-]+$/.test(name)) continue;
+    const id = providerOf(name);
+    if (!byProvider.has(id)) byProvider.set(id, []);
+    byProvider.get(id).push(name);
+  }
+  return [...byProvider.entries()]
+    .sort(([a], [b]) => Number(a === OPENCODE_OWN) - Number(b === OPENCODE_OWN) || providerLabel(a).localeCompare(providerLabel(b)))
+    .map(([id, models]) => ({ id, label: providerLabel(id), own: id === OPENCODE_OWN, models }));
+}

package/src/modules/ahp.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // AHP+: the one module that writes into the project, through a confirmed npx
 // command. Verified project state, checkpoints and handoffs in .ahp/.
 

package/src/modules/ash-policy.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // Ash changes only the requested shape of an answer. This policy is pure and local: it neither
 // rewrites the human's request nor changes model, context, tools or permissions.
 

package/src/modules/ash.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // Ash: MADRE's token economy.
 //
 // It used to be a text compressor that rewrote the human's message before sending it. That was
@@ -23,7 +25,7 @@ export default defineModule({
   name: 'Token saver',
   vendor: 'MADRE',
   version: '1.0.0',
-  summary: 'Asks every agent for compact prose without altering what you write. MADRE shows each turn\'s input, output and cache use; savings depend on the agent, task and cache, so no fixed percentage is promised.',
+  summary: 'Asks every agent to answer briefly, so it uses less. What you write is not changed. Savings vary, so none are promised.',
   creates: ['nothing in the project', 'a switch in ~/.pulse/config.json'],
   card: 'ash',
   async status(ctx) {

package/src/modules/bishop-plan.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // BISHOP's plans, without the room around them (docs/MACROVERSO.md, fases 4b y 4c): the block a
 // reply ends with, what each of its lines means on this Mac, and the record the buttons act on.
 // Nothing here sends, signs or starts anything; src/modules/bishop.mjs does, after a human press
@@ -132,7 +134,7 @@ export function resolveOrder(order, step, { rooms, contracts, salas, agents }) {
   const contract = contracts.find((one) => receivesOrders(one, salas) === named[0].id) ?? null;
   if (!contract) return { ...base, status: 'blocked', why: 'No signed connection lets the Coordinator give orders to that project.' };
   const maxMode = Math.min(contract.orders.maxMode, MAX_ORDER_MODE);
-  if (order.mode >= 3) return { ...base, contract: contract.id, maxMode, status: 'proposal', why: '#3 and #4 never travel: unlock it yourself in that project.' };
+  if (order.mode >= 3) return { ...base, contract: contract.id, maxMode, status: 'proposal', why: '#3 and #4 are never sent as orders: unlock it yourself in that project.' };
   if (order.mode > maxMode) return { ...base, contract: contract.id, maxMode, status: 'blocked', why: 'That connection allows orders up to #{n}.', whyArgs: { n: maxMode } };
   return { ...base, contract: contract.id, maxMode, status: 'ready', why: null };
 }
@@ -148,12 +150,12 @@ export function resolveLinks({ links, rooms, contracts, salas }) {
     const base = { index, from: from[0]?.id ?? null, fromName: from[0]?.name ?? link.from, to: to[0]?.id ?? null, toName: to[0]?.name ?? link.to, direction: link.both ? 'both' : 'a→b', kinds: link.kinds, days: link.days, orders: null, receives: null };
     if (from.length !== 1 || to.length !== 1) return { ...base, status: 'blocked', why: from.length > 1 || to.length > 1 ? 'Two projects on this Mac have that name; use the project id.' : 'MADRE does not know that project on this Mac.' };
     if (base.from === base.to) return { ...base, status: 'blocked', why: 'A project cannot be connected to itself.' };
-    if (base.from === salas || (link.both && base.to === salas)) return { ...base, status: 'blocked', why: 'The Coordinator\'s project never hands its notes over.' };
+    if (base.from === salas || (link.both && base.to === salas)) return { ...base, status: 'blocked', why: 'The Coordinator does not share its notes with other projects.' };
     if (!link.kinds.length || link.unknown.length) return { ...base, status: 'blocked', why: 'Name what crosses: decision, fact, preference or question.' };
     if (!link.kinds.every((kind) => LINK_KINDS.includes(kind))) return { ...base, status: 'blocked', why: 'Name what crosses: decision, fact, preference or question.' };
     let orders = null;
     if (link.orders !== null) {
-      if (base.from !== salas && base.to !== salas) return { ...base, status: 'blocked', why: 'Orders go only on a connection with the Coordinator\'s project.' };
+      if (base.from !== salas && base.to !== salas) return { ...base, status: 'blocked', why: 'Orders only travel over a connection with the Coordinator.' };
       orders = { allowed: true, maxMode: Math.min(link.orders, MAX_ORDER_MODE), perHour: 6 };
     }
     const receives = orders ? (base.from === salas ? base.to : base.from) : null;

package/src/modules/bishop.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // BISHOP lives in the room of Salas (docs/MACROVERSO.md). What it knows of the fleet — the
 // governance (contracts), the context (census) and the memories of the linked rooms — lives there,
 // in the Macroverso's room, and nowhere else:
@@ -48,7 +50,7 @@ const modeOf = (ctx) => (BISHOP_MODES.includes(ctx.config?.modules?.bishop?.mode
 // D-S13: who signs a link that only reads. By default BISHOP; the human can keep them all.
 export const LINK_SIGNERS = ['bishop', 'you'];
 // What a person reads for each setting's value; the value is what is saved.
-const ORDER_CHOICES = { manual: 'Manual: every order waits for your press', hybrid: 'Hybrid: #0 and #1 leave on their own', auto: 'Automatic: up to #2 leave on their own' };
+const ORDER_CHOICES = { manual: 'Manual: every order waits for you to send it', hybrid: 'Hybrid: #0 and #1 leave on their own', auto: 'Automatic: up to #2 leave on their own' };
 const SIGNER_CHOICES = { bishop: 'The Coordinator signs them, for 7 days at most', you: 'You sign them' };
 const ORDER_WORDS = { manual: 'manual orders', hybrid: 'hybrid orders', auto: 'automatic orders' };
 const SIGNER_WORDS = { bishop: 'The Coordinator signs connections to read', you: 'you sign every connection' };
@@ -121,7 +123,7 @@ async function sendOrder(ctx, planId, step, { auto = false } = {}) {
   const target = (await knownRooms(ctx.stateRoot)).find((room) => room.id === order.room);
   if (!target?.open) return back(409, t('That project is asleep. Wake it from Home to send it orders.'));
   const key = await channelKey(ctx.stateRoot).catch(() => null);
-  if (!key) return back(500, t('The channel has no key.'));
+  if (!key) return back(500, t('The internal key that connects the projects is missing.'));
   const sent = await post(target.open.port, '/api/x/bishop/order', { contract: contract.id, plan: plan.id, step: order.step, total: plan.orders.length, agent: order.agent, mode: order.mode, text: order.text, from: salas, auto: Boolean(auto) }, key);
   if (!sent.ok) { const why = refusal(sent, t('That project runs an older MADRE. Update it to send it orders.')); return back(why.status, why.error); }
   await changePlans(ctx.stateRoot, (data) => { const one = data.plans[plan.id]?.orders.find((item) => item.step === order.step); if (one) { one.status = 'sent'; one.sentAt = new Date().toISOString(); one.held = null; } });
@@ -142,7 +144,7 @@ async function deliverProposal(ctx, planId, step, { auto = false } = {}) {
   const target = (await knownRooms(ctx.stateRoot)).find((room) => room.id === order.room);
   if (!target?.open) return reply(409, { error: t('That project is asleep. Wake it from Home to send it orders.') });
   const key = await channelKey(ctx.stateRoot).catch(() => null);
-  if (!key) return reply(500, { error: t('The channel has no key.') });
+  if (!key) return reply(500, { error: t('The internal key that connects the projects is missing.') });
   const sent = await post(target.open.port, '/api/x/bishop/proposal', { contract: contract.id, plan: plan.id, step: order.step, total: plan.orders.length, agent: order.agent, mode: order.mode, text: order.text, from: salas }, key);
   if (!sent.ok) { const why = refusal(sent, t('That project runs an older MADRE. Update it to send it orders.')); return reply(why.status, { error: why.error }); }
   const closed = await changePlans(ctx.stateRoot, (data) => { const one = data.plans[plan.id]; const item = one?.orders.find((it) => it.step === order.step); if (item) item.status = 'delivered'; return one ? closing(one) : null; });
@@ -200,7 +202,7 @@ async function signLink(ctx, planId, index, { designation = null, by = 'you' } =
   if (by === 'bishop' && link.orders) return reply(403, { error: t('The Coordinator signs only connections to read; a connection with orders is signed by you.') });
   const salas = salasRoomId(ctx.stateRoot);
   const home = (await knownRooms(ctx.stateRoot)).find((room) => room.id === salas && room.open);
-  if (!home) return reply(409, { error: t('The Coordinator\'s project did not open. Open it with madre salas and ask again.') });
+  if (!home) return reply(409, { error: t('The Coordinator did not wake up. Go back to Home and ask again.') });
   const days = by === 'bishop' ? Math.min(link.days ?? BISHOP_SIGN_DAYS, BISHOP_SIGN_DAYS) : link.days;
   const expires = days ? new Date(Date.now() + days * 86400000).toISOString() : null;
   const signed = await askRoom(home.open.port, '/api/salas/enlaces', { method: 'POST', timeoutMs: 6000, body: { a: link.from, b: link.to, direction: link.direction, kinds: link.kinds, expires, orders: link.orders ?? { allowed: false, maxMode: 0, perHour: 6 }, designation, ...(by === 'bishop' ? { by: 'bishop' } : {}) } });
@@ -233,7 +235,7 @@ const base = defineModule({
   id: 'bishop', configKey: 'bishop', name: 'Coordinator', vendor: 'MADRE', version: '1.0.0',
   summary: 'The guardian of your projects, in Home. It answers about every connected project, proposes orders and connections, and you decide what leaves and what is signed. Any project can raise it with /bishop.',
   creates: ['a setting in config.json; no project files'],
-  requires: ['the Coordinator\'s project', 'a ready agent; @madre is selected by default when ready'],
+  requires: ['Home', 'a ready agent; @madre is selected by default when ready'],
   settings: { enabled: true, agent: null, mode: 'manual', links: 'bishop' },
   async status(ctx) {
     const agent = chosen(ctx);
@@ -264,13 +266,13 @@ const base = defineModule({
         await roomComesUp(ctx.stateRoot, salas).catch(() => null);
         home = (await knownRooms(ctx.stateRoot)).find((room) => room.id === salas && room.open);
       }
-      if (!home) return { ok: false, title: 'Coordinator', text: t('The Coordinator\'s project did not open. Open it with madre salas and ask again.') };
+      if (!home) return { ok: false, title: 'Coordinator', text: t('The Coordinator did not wake up. Go back to Home and ask again.') };
       const key = await channelKey(ctx.stateRoot).catch(() => null);
       const here = projectRoomId(ctx.projectRoot);
       const name = (await knownRooms(ctx.stateRoot)).find((room) => room.id === here)?.name ?? here;
-      const sent = key ? await post(home.open.port, '/api/x/bishop/consult', { from: here, name, question }, key) : { ok: false, answer: { error: t('The channel has no key.') } };
+      const sent = key ? await post(home.open.port, '/api/x/bishop/consult', { from: here, name, question }, key) : { ok: false, answer: { error: t('The internal key that connects the projects is missing.') } };
       if (!sent.ok) return { ok: false, title: 'Coordinator', text: sent.answer?.error ?? t('That project did not answer.') };
-      return { ok: true, title: 'Coordinator', text: t('Asked the Coordinator in its project. The answer comes here, for you only: the agents of this project do not read it without a connection.') };
+      return { ok: true, title: 'Coordinator', text: t('Your question went to the Coordinator in Home. The answer comes here, for you only: this project\'s agents cannot read it without a connection.') };
     },
   }],
   // Every event of every room. Outside Salas: the order turns, so one can be stopped. In Salas:
@@ -363,7 +365,7 @@ const base = defineModule({
       const refused = await channelDoor(ctx, request, viaPhone);
       if (refused) return refused;
       if (!enabled(ctx)) return reply(412, { error: t('The Coordinator is off. Turn it on in MODULES.') });
-      if (inSalas(ctx)) return reply(403, { error: t('The Coordinator\'s project gives orders; it does not receive them.') });
+      if (inSalas(ctx)) return reply(403, { error: t('The Coordinator gives orders; it does not receive them.') });
       const here = projectRoomId(ctx.projectRoot);
       const salas = salasRoomId(ctx.stateRoot);
       const contract = activeContracts(ctx.config, { salas }).find((one) => one.id === payload?.contract) ?? null;
@@ -408,7 +410,7 @@ const base = defineModule({
       const refused = await channelDoor(ctx, request, viaPhone);
       if (refused) return refused;
       if (!enabled(ctx)) return reply(412, { error: t('The Coordinator is off. Turn it on in MODULES.') });
-      if (inSalas(ctx)) return reply(403, { error: t('The Coordinator\'s project gives orders; it does not receive them.') });
+      if (inSalas(ctx)) return reply(403, { error: t('The Coordinator gives orders; it does not receive them.') });
       const here = projectRoomId(ctx.projectRoot);
       const salas = salasRoomId(ctx.stateRoot);
       const contract = activeContracts(ctx.config, { salas }).find((one) => one.id === payload?.contract) ?? null;
@@ -526,7 +528,7 @@ const bishop = Object.freeze({
       controls.push({
         key: 'mode', label: 'ORDERS', type: 'select', options: BISHOP_MODES, value: modeOf(ctx),
         choices: BISHOP_MODES.map((value) => ({ value, label: ORDER_CHOICES[value] })),
-        note: 'Always within the connection. #3 and #4 always wait for your key in their project; a failure or STOP ALL stops what leaves on its own.',
+        note: 'Always within what the connection allows. #3 and #4 always wait for your confirmation in their project; an error or STOP ALL halts the orders that go out on their own.',
       });
       controls.push({
         key: 'links', label: 'CONNECTIONS TO READ', type: 'select', options: LINK_SIGNERS, value: signerOf(ctx),

package/src/modules/choices.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // Choices: letting an agent put a decision to the human instead of taking it.
 //
 // An agent that has to pick between three or more real options has two honest ways out: name the

package/src/modules/correo.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // CORREO: MADRE's first connector. It gives a turn one tool, send_email, that hands a message to
 // the human's own mail account over SMTP+TLS, with the human's own app password.
 //

package/src/modules/enlaces.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // ENLACES (docs/MACROVERSO.md, fase 3c): what other rooms on this Mac know, when a signed link
 // lets this room read it. The link itself — the contract, the key of the channel, the room that
 // serves and its locks — lives in src/enlaces.mjs and in the ENLACES section of src/server.mjs.

package/src/modules/git-pulse.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // Git Pulse: /git in the composer brings the repository's facts into the room.
 // Nothing to switch: it is on wherever the project is a git repository.
 

package/src/modules/github.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // GITHUB: the GitHub side of this project, in the room. /gh reads the open pull requests, the CI of
 // the branch you are on and the open issues as a card everyone reads, agents included; and it
 // opens a pull request, an issue or a comment the way /git push sends commits — the first call

package/src/modules/helpers.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 import { execFile } from 'node:child_process';
 import { access, readFile, realpath } from 'node:fs/promises';
 import { delimiter, join } from 'node:path';

package/src/modules/image-studio.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // Image Studio: MADRE's own MCP image server on the Gemini image models, for
 // the CLIs that cannot draw natively. A switch and a model in config.json.
 
@@ -15,7 +17,7 @@ export default defineModule({
   summary: 'Gives Gemini CLI, Claude Code and OpenCode an image tool, through a MADRE-owned MCP server on the Gemini image models and your own key and credits.',
   creates: ['nothing in the project \u00b7 images land in the lease folder', 'an entry in ~/.pulse/config.json', 'an MCP server per turn, started and stopped by the project'],
   // Not something it writes: a condition for it to attach at all, which is what REQUIRES is for.
-  requires: ['a Gemini API key with credits (the one the Gemini CLI stores, or GEMINI_API_KEY)', 'attached only inside a creation lease with the image scope on'],
+  requires: ['a Gemini API key with credits (the one the Gemini CLI stores, or GEMINI_API_KEY)', 'attached only inside a permission to create with images on'],
   models: MODELS,
   settings: { enabled: false, model: MODELS[0] },
   card: 'image-studio',

package/src/modules/index.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // The registry. Order is the order MODULES shows. MADRE's own modules first; then the
 // human's, loaded from ~/.pulse/modules/*.mjs (every project) and <project>/.madre/modules/*.mjs
 // (this project). An external module is a file whose default export is a plain spec object
@@ -24,6 +26,7 @@ import correo from './correo.mjs';
 import github from './github.mjs';
 import enlaces from './enlaces.mjs';
 import bishop from './bishop.mjs';
+import mcpConnect from './mcp-connect.mjs';
 import { isSalasRoom } from '../salas.mjs';
 import { defineModule, matchRoute } from './sdk.mjs';
 
@@ -33,7 +36,7 @@ import { defineModule, matchRoute } from './sdk.mjs';
 // so a module of somebody's own cannot take one and collide with it the day it comes out.
 export const LAB_MODULES = [correo];
 const labsAsked = new Set(String(process.env.PULSE_LABS ?? '').split(',').map((id) => id.trim()).filter(Boolean));
-export const MODULES = [ahp, imageStudio, gitPulse, ash, intents, choices, runs, ripley, ollama, playwright, github, enlaces, bishop, ...LAB_MODULES.filter((module) => labsAsked.has(module.id))];
+export const MODULES = [ahp, imageStudio, gitPulse, ash, intents, choices, runs, ripley, ollama, playwright, github, enlaces, bishop, mcpConnect, ...LAB_MODULES.filter((module) => labsAsked.has(module.id))];
 export const BUILTIN_IDS = new Set([...MODULES, ...LAB_MODULES].map((module) => module.id));
 export const loadFailures = [];   // { file, error } for MODULES to show
 export const moduleFolders = ({ stateRoot, projectRoot }) => ({ user: join(stateRoot, 'modules'), project: join(projectRoot, '.madre', 'modules') });

package/src/modules/intents-calibration.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // The two tests behind Intenciones: is a cheaper rung enough for this project?
 //
 // A suggestion is only worth what it was measured against, and the room's ordinary use can never

package/src/modules/intents-desk.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // The desk behind Intenciones: what this project has measured, what is being measured now, and
 // what that says about the message being written.
 //
@@ -386,7 +388,7 @@ export class IntentsDesk {
     if (!subject?.ready || !invoke) return { error: t('@{agent} is not ready to answer.', { agent }) };
 
     const gate = mayCalibrate({ kind, usage: usageOf(await this.#events(), agent), byHuman: true });
-    if (!gate.ok) return { error: t('@{agent} is too close to the end of its window to spend turns on a test.', { agent }) };
+    if (!gate.ok) return { error: t('@{agent} is too close to its usage limit for this period to spend turns on a test.', { agent }) };
 
     let judge;
     if (kind === 'quick') {
@@ -412,7 +414,7 @@ export class IntentsDesk {
     const focus = kind === 'quick' && READ_ONLY_INTENTS.includes(intent) ? intent : null;
     const version = subject.version ?? null;
     const plan = planRound({ kind, cases, agent, model, reference, version, records, effort: aimed, intent: focus });
-    if (!plan.length) return { error: t('Nothing left to ask @{agent} at this rung: the ledger has no new questions of the kinds this test reads.', { agent }) };
+    if (!plan.length) return { error: t('Nothing left to ask @{agent} at this level: the history has no new questions of the kinds this test uses.', { agent }) };
 
     this.#controller = new AbortController();
     this.#stopping = false;

package/src/modules/intents-observe.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // Intenciones, learned from real use: how each turn the human already paid for went.
 //
 // The calibration (intents-calibration.mjs) asks real questions again, at two rungs, and a judge

package/src/modules/intents-policy.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // Intenciones: how hard a turn needs to think, said before it is paid for.
 //
 // Pure functions. The room hands in the words, the thread they belong to and whatever the
@@ -41,7 +43,8 @@ export const INTENT_TIER = {
   design: 'deep',
 };
 
-export const effortLadder = (agentId) => EFFORTS[agentId] ?? null;
+// OpenCode's rungs are each model's (2026-10-14): with no one ladder to climb, Intenciones leaves it be.
+export const effortLadder = (agentId) => (agentId === 'opencode' ? null : EFFORTS[agentId] ?? null);
 
 const fold = (text) => String(text ?? '').toLowerCase().normalize('NFD').replace(/[̀-ͯ]/g, '');
 

package/src/modules/intents-try.mjs

@@ -1,3 +1,5 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
 // Intenciones, trying a cheaper rung on one message.
 //
 // Real use (intents-observe.mjs) can only vouch for the rungs the human actually uses. Somebody who