@jossuealcala/madre 1.0.2 → 1.0.4

package/src/modules/playwright.mjs

@@ -11,6 +11,7 @@ import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { t } from '../i18n.mjs';
 import { defineModule } from './sdk.mjs';
+import { switchIn } from '../module-scope.mjs';
 import { packageVersion } from './helpers.mjs';
 import { terminateProcessTree, lastWords } from '../adapters/process.mjs';
 
@@ -35,6 +36,51 @@ export async function playwrightVersion({ env = process.env, projectRoot = proce
   return version;
 }
 
+// Why npm stopped, in its own words: the line that says it, not the last one, which only points at
+// a log file («npm error A complete log of this run can be found in …», 2026-10-18).
+export function npmReason(output) {
+  const lines = String(output ?? '').split('\n').map((line) => line.trim()).filter(Boolean);
+  const said = lines.filter((line) => /^npm (error|ERR!)/i.test(line)).map((line) => line.replace(/^npm (error|ERR!)\s*/i, '')).filter((line) => line && !/complete log of this run|^(code|errno|syscall)\b/i.test(line));
+  return said.find((line) => !/^path\b/i.test(line)) ?? said[0] ?? lastWords(output);
+}
+
+// One command of the module's own, run to its end with no terminal: getting the server or its
+// browser onto this computer. What it printed last is kept for the case it fails.
+function runToEnd(command, args, { cwd, env, timeoutMs = 900000 } = {}) {
+  return new Promise((resolve) => {
+    let err = '';
+    let child;
+    try { child = spawn(command, args, { cwd, env: { ...env, CI: '1', NO_COLOR: '1' }, stdio: ['ignore', 'ignore', 'pipe'], shell: false, detached: true, windowsHide: true }); }
+    catch (error) { resolve({ code: 1, said: error.message }); return; }
+    const timer = setTimeout(() => terminateProcessTree(child, { graceMs: 1000 }), timeoutMs);
+    timer.unref?.();
+    child.stderr.setEncoding('utf8');
+    child.stderr.on('data', (chunk) => { err = (err + chunk).slice(-4000); });
+    child.on('error', (error) => { clearTimeout(timer); resolve({ code: 1, said: error.message }); });
+    child.on('close', (code) => { clearTimeout(timer); resolve({ code, said: npmReason(err) }); });
+  });
+}
+
+// What the switch puts in place by itself before it gives up (2026-10-18): the person turned it
+// on, and a browser to download is MADRE's to fetch, not a line to copy into a terminal. The
+// server, globally (where `npx --no` finds it at turn time), when it is missing; then the browser
+// the server itself downloads for the engine chosen. Asked again after.
+export async function preparePlaywright({ browser = 'chromium', env = process.env, cwd = process.cwd(), run = runToEnd, starts = playwrightStarts, version = playwrightVersion } = {}) {
+  const engine = PLAYWRIGHT_BROWSERS.includes(browser) ? browser : 'chromium';
+  let installed = await version({ env, projectRoot: cwd, fresh: true });
+  const steps = [];
+  if (!installed) {
+    const server = await run('npm', ['install', '-g', PLAYWRIGHT_PACKAGE], { cwd, env });
+    steps.push({ display: `npm install -g ${PLAYWRIGHT_PACKAGE}`, code: server.code });
+    installed = await version({ env, projectRoot: cwd, fresh: true });
+    if (!installed) return { ok: false, steps, problem: server.said ?? t('the browser server could not be installed') };
+  }
+  const fetched = await run('npx', ['--no', PLAYWRIGHT_PACKAGE, 'install-browser', engine], { cwd, env });
+  steps.push({ display: installBrowserLine(engine), code: fetched.code });
+  const check = await starts({ browser, env, cwd });
+  return { ...check, steps, ...(check.ok ? {} : { problem: check.problem ?? fetched.said }) };
+}
+
 // Does the browser server start, with its browser? Asked when the switch is turned on, with the
 // same server a turn gets: the card said «on · chromium» while every turn's server closed before it
 // spoke, and the agents saw only CONNECTION_CLOSED. It is asked to open about:blank, because a
@@ -93,7 +139,7 @@ export async function playwrightStarts({ browser = 'chromium', env = process.env
     });
     child.stderr.on('data', (chunk) => { err += chunk; });
     child.on('error', (error) => finish({ ok: false, problem: error.message }));
-    child.on('close', (code) => finish({ ok: false, problem: lastWords(err) ?? t('it exited with code {code} before it spoke', { code }) }));
+    child.on('close', (code) => finish({ ok: false, problem: npmReason(err) ?? t('it exited with code {code} before it spoke', { code }) }));
     send({ jsonrpc: '2.0', id: 1, method: 'initialize', params: { protocolVersion: '2025-03-26', capabilities: {}, clientInfo: { name: 'madre', version: '1' } } });
   });
 }
@@ -143,6 +189,24 @@ export function playwrightServerFor({ port, outputDir, browser = 'chromium', hea
   };
 }
 
+async function playwrightReady(ctx) {
+  const browser = ctx.settings.browser ?? 'chromium';
+  let check = await playwrightStarts({ browser, env: ctx.env, cwd: ctx.projectRoot });
+  // Something missing: MADRE fetches it, then asks again, before saying anything to the person.
+  if (!check.ok && process.platform !== 'win32') {
+    await ctx.record('extension.preparing', { id: 'playwright', name: 'PLAYWRIGHT', browser });
+    check = await preparePlaywright({ browser, env: ctx.env, cwd: ctx.projectRoot });
+  }
+  forgetPlaywrightHealth(check, browser);
+  if (check.ok) return null;
+  // The server is there and only the browser is missing: say which one, and the one line that
+  // installs it. Without the server, both lines.
+  const version = await playwrightVersion({ env: ctx.env, projectRoot: ctx.projectRoot });
+  return { status: 412, body: { error: version
+    ? t('TEST BROWSER stays off: MADRE downloaded the {browser} browser and it still does not start ({problem}). Check your internet connection and turn it on again, or choose another browser in its settings.', { problem: String(check.problem).replace(/[.\s]+$/, ''), browser })
+    : t('TEST BROWSER stays off: MADRE could not install its browser server ({problem}). Check your internet connection and turn it on again.', { problem: String(check.problem).replace(/[.\s]+$/, '') }), code: 'MU-054' } };
+}
+
 export default defineModule({
   id: 'playwright',
   name: 'Test browser',
@@ -163,7 +227,7 @@ export default defineModule({
     return {
       runs: [{ name: PLAYWRIGHT_PACKAGE, version }],
       settings: { browser: ctx.settings.browser ?? 'chromium', headless: ctx.settings.headless !== false },
-      status: { installed: Boolean(ctx.settings.enabled), detail: ctx.settings.enabled ? (!version ? t('on · the browser server is not installed') : health?.ok === false ? t('on · the browser does not start: {problem}. Install it with {command}.', { problem: String(health.problem).replace(/[.\s]+$/, '').slice(0, 160), command: installBrowserLine(ctx.settings.browser) }) : `${t('on')} · ${ctx.settings.browser}`) : version ? t('off') : t('off · the browser server is not installed') },
+      status: { installed: Boolean(ctx.settings.enabled), detail: ctx.settings.enabled ? (!version ? t('on · the browser server is not installed') : health?.ok === false ? t('on · the browser does not start: {problem}. Turn it off and on again: MADRE downloads what is missing.', { problem: String(health.problem).replace(/[.\s]+$/, '').slice(0, 160) }) : `${t('on')} · ${ctx.settings.browser}`) : version ? t('off') : t('off · the browser server is not installed') },
       preflight: version ? { ok: true, problems: [] } : { ok: false, problems: [`Install the browser server first: npm install -g @playwright/mcp, then its browser: ${installBrowserLine(ctx.settings.browser)}`] },
       install: { display: ctx.settings.enabled ? 'disable PLAYWRIGHT' : 'enable PLAYWRIGHT (config.json)', platforms: ['codex', 'claude', 'gemini', 'opencode'] },
     };
@@ -192,21 +256,15 @@ export default defineModule({
     const outputDir = turn.scratchDir ?? join(turn.roomDir ?? ctx.stateRoot, 'playwright');
     return [playwrightServerFor({ port: turn.port, outputDir, browser: ctx.settings.browser ?? 'chromium', headless: ctx.settings.headless !== false, servers: turn.servers ?? [] })];
   },
-  // The switch, guarded: on only if the server starts and has its browser. Off is always allowed.
+  // Before it turns on, in one project or in all: the server starts and has its browser, or MADRE
+  // fetches what is missing and asks again. `null` is ready; anything else is the refusal.
+  ready: playwrightReady,
+  // The switch, guarded: on only if it is ready. Off is always allowed. A project's switch is that
+  // project's (module-scope.mjs).
   async toggle(ctx) {
     const enabled = !ctx.settings.enabled;
-    if (enabled) {
-      const browser = ctx.settings.browser ?? 'chromium';
-      const check = await playwrightStarts({ browser, env: ctx.env, cwd: ctx.projectRoot });
-      forgetPlaywrightHealth(check, browser);
-      // The server is there and only the browser is missing: say which one, and the one line that
-      // installs it. Without the server, both lines.
-      const version = await playwrightVersion({ env: ctx.env, projectRoot: ctx.projectRoot });
-      if (!check.ok) return { status: 412, body: { error: version
-        ? t('TEST BROWSER did not start, so it stays off: {problem}. The browser server is installed; what is missing is the {browser} browser. Install it with {command} and turn it on again, or choose another browser in its settings.', { problem: String(check.problem).replace(/[.\s]+$/, ''), browser, command: installBrowserLine(browser) })
-        : t('TEST BROWSER did not start, so it stays off: {problem}. Install the server and its browser ({server}, then {command}) and turn it on again.', { problem: String(check.problem).replace(/[.\s]+$/, ''), server: `npm install -g ${PLAYWRIGHT_PACKAGE}`, command: installBrowserLine(browser) }), code: 'MU-054' } };
-    }
-    await ctx.updateConfig({ modules: { playwright: { ...(ctx.config.modules?.playwright ?? {}), enabled } } });
+    if (enabled) { const refused = await playwrightReady(ctx); if (refused) return refused; }
+    await ctx.updateConfig({ modules: { playwright: switchIn(ctx.config.modules?.playwright ?? {}, ctx.roomId ?? null, enabled) } });
     await ctx.record('extension.toggled', { id: 'playwright', name: 'PLAYWRIGHT', enabled });
     return { status: 200, body: { enabled } };
   },

package/src/modules/sdk.mjs

@@ -19,6 +19,7 @@
 
 import { readFile, stat } from 'node:fs/promises';
 import { forgetSecret, readSecret, summary as vaultSummary, writeSecret } from '../vault.mjs';
+import { moduleOnIn, roomsOf, scopeIn, settingsIn, switchIn } from '../module-scope.mjs';
 
 const camel = (id) => id.replace(/-([a-z])/g, (_, c) => c.toUpperCase());
 
@@ -67,7 +68,7 @@ export function dependencies(runs) {
   return list.filter((dep) => dep && dep.name).map((dep) => ({ name: String(dep.name), version: dep.version ?? null, target: dep.target ?? null }));
 }
 
-// Every field this contract answers to. Thirty-four of them and all but two optional, which is
+// Every field this contract answers to. Thirty-eight of them and all but two optional, which is
 // generous until you misspell one: `sumary` used to install without a word and leave a card with
 // an empty summary. A key MADRE does not know is not fatal — a module written for a newer MADRE
 // may carry fields this one has not learned yet — so it is said out loud instead of refused.
@@ -76,10 +77,31 @@ export const MODULE_FIELDS = new Set([
   'requires', 'models', 'commands', 'card', 'configKey', 'settings', 'controls', 'routes', 'reaches',
   'conditions', 'slash', 'status', 'preflight', 'detect', 'confirm', 'installCommand', 'secrets',
   'updatePlan', 'toolsForTurn', 'toggle', 'onToggle', 'onSettings', 'onEvent', 'toggledEvent',
-  'toggledBody', 'describe',
+  'toggledBody', 'describe', 'ready', 'footer',
 ]);
 export const unknownFields = (spec) => Object.keys(spec ?? {}).filter((key) => !MODULE_FIELDS.has(key));
 
+// A key beside MADRE's version (2026-10-18): what a module may put on the page, and nothing more.
+// MADRE draws it — one of its own icons, the module's words, an https address that opens in a new
+// tab — so a module never reaches into the page itself.
+export const FOOTER_ICONS = ['heart', 'star', 'link'];
+const footerWords = (value) => {
+  if (typeof value === 'string') return value.slice(0, 160);
+  if (!value || typeof value !== 'object') return null;
+  const out = {};
+  for (const lang of ['en', 'es']) if (typeof value[lang] === 'string') out[lang] = value[lang].slice(0, 160);
+  return Object.keys(out).length ? out : null;
+};
+function footerKeys(spec) {
+  return (Array.isArray(spec.footer) ? spec.footer : []).slice(0, 2).map((key) => {
+    let url = null;
+    try { url = new URL(String(key?.url ?? '')); } catch { /* said below */ }
+    if (url?.protocol !== 'https:') throw new Error(`Module ${spec.id}: a key beside the version needs an https address.`);
+    if (!footerWords(key.label)) throw new Error(`Module ${spec.id}: a key beside the version needs a label.`);
+    return { icon: FOOTER_ICONS.includes(key.icon) ? key.icon : 'link', label: footerWords(key.label), text: footerWords(key.text), action: footerWords(key.action), url: url.href };
+  });
+}
+
 export function defineModule(spec) {
   if (!spec?.id || !/^[a-z][a-z0-9-]*$/.test(spec.id)) throw new Error(`Module id must be kebab-case: ${spec?.id}`);
   if (!spec.name) throw new Error(`Module ${spec.id} needs a name.`);
@@ -97,6 +119,8 @@ export function defineModule(spec) {
     // lives and MADRE can go and get it: the file is fetched, checked the same way an upload is,
     // and only replaces the one installed if it passes and says it is newer.
     updates: spec.updates?.url && /^https:\/\//.test(String(spec.updates.url)) ? { url: String(spec.updates.url) } : null,
+    // Keys beside MADRE's version, drawn by MADRE while the module is on (footerKeys).
+    footer: footerKeys(spec),
     summary: spec.summary ?? '', creates: spec.creates ?? [], requires: spec.requires ?? [], models: spec.models ?? [], commands: spec.commands ?? (spec.slash?.length ? spec.slash.map((command) => command.usage ?? `/${command.name}`) : undefined),
     card: spec.card ?? (kind === 'builtin' ? 'switch' : 'installer'),
     // The settings floor of the card, declared instead of drawn: MADRE renders these and saves
@@ -133,8 +157,14 @@ export function defineModule(spec) {
       return { name: secret.name, label: secret.label ?? secret.name.toUpperCase(), note: secret.note ?? '', where: secret.where ?? '' };
     }),
   };
-  const settingsFrom = (config) => ({ ...defaults, ...(config?.modules?.[configKey] ?? {}) });
+  // A project reads its own word on `enabled` when it said one (module-scope.mjs).
+  const settingsFrom = (config, roomId = null) => ({ ...defaults, ...settingsIn(config?.modules?.[configKey] ?? {}, roomId) });
   const mine = (ctx, settings) => ({ ...ctx, settings, vault: vaultFor(spec.id, ctx.stateRoot) });
+  const scopeHere = (ctx) => {
+    const block = ctx.config?.modules?.[configKey] ?? {};
+    const own = ctx.roomId ? roomsOf(block)[ctx.roomId] : undefined;
+    return { all: typeof block.enabled === 'boolean' ? block.enabled : Boolean(defaults.enabled), here: typeof own === 'boolean' ? own : null };
+  };
   const module = {
     ...base,
     configKey,
@@ -152,14 +182,14 @@ export function defineModule(spec) {
     }),
     // Tools for a turn, only while the module is on. Failures never break a turn.
     toolsForTurn: spec.toolsForTurn ? async (ctx, turn) => {
-      const settings = settingsFrom(ctx.config);
+      const settings = settingsFrom(ctx.config, ctx.roomId);
       if (kind === 'builtin' && !settings.enabled) return [];
       try { return (await spec.toolsForTurn(mine(ctx, settings), turn)) ?? []; } catch (error) { console.error(`MADRE module ${spec.id}: toolsForTurn failed: ${error.message}`); return []; }
     } : null,
     // How the outside thing this module drives gets a newer version onto this computer. MADRE
     // shows the command before it runs and never runs one the human has not read. A module that
     // cannot update what it drives returns the note that says where to get it instead.
-    updatePlan: spec.updatePlan ? async (ctx, what) => spec.updatePlan(mine(ctx, settingsFrom(ctx.config)), what) : null,
+    updatePlan: spec.updatePlan ? async (ctx, what) => spec.updatePlan(mine(ctx, settingsFrom(ctx.config, ctx.roomId)), what) : null,
     // Legacy installer hooks, kept on the object so the confirm-and-run path can use them.
     detect: spec.detect ?? null,
     preflight: spec.preflight ?? null,
@@ -167,7 +197,7 @@ export function defineModule(spec) {
 
     // What MODULES shows: base fields plus status, preflight, install line and whatever the module adds.
     async describe(ctx) {
-      const settings = settingsFrom(ctx.config);
+      const settings = settingsFrom(ctx.config, ctx.roomId);
       const own = spec.status ? await spec.status(mine(ctx, settings)) : {};
       const installed = own.installed ?? (kind === 'builtin' ? Boolean(settings.enabled) : false);
       const runs = dependencies(own.runs);
@@ -188,6 +218,8 @@ export function defineModule(spec) {
         status: own.status ?? { installed, detail: own.detail ?? (installed ? 'on' : 'off') },
         preflight: own.preflight ?? { ok: true, problems: [] },
         install: own.install ?? (kind === 'builtin' ? { display: installed ? `disable ${base.name}` : `enable ${base.name} (config.json)`, platforms: [] } : { display: '', platforms: [] }),
+        // Whether it is on for every project, and this project's own word when it said one.
+        ...(kind === 'builtin' ? { scope: scopeHere(ctx) } : {}),
       };
     },
 
@@ -204,7 +236,7 @@ export function defineModule(spec) {
       } else {
         next = String(value ?? '').slice(0, 500);
       }
-      const settings = { ...settingsFrom(ctx.config), [key]: next };
+      const settings = { ...settingsFrom(ctx.config, ctx.roomId), [key]: next };
       await ctx.updateConfig({ modules: { [configKey]: { ...(ctx.config.modules?.[configKey] ?? {}), [key]: next } } });
       if (spec.onSettings) await spec.onSettings(mine(ctx, settings), settings);
       return { status: 200, body: { settings: Object.fromEntries(base.controls.map((known) => [known.key, settings[known.key] ?? null])) } };
@@ -213,15 +245,35 @@ export function defineModule(spec) {
     // The switch. Default for builtins: flip `enabled`, persist, tell the room.
     // A module may guard it (`confirm`) or replace it (`toggle`).
     toggle: kind === 'builtin' || spec.toggle ? async (ctx, payload = {}) => {
-      const settings = settingsFrom(ctx.config);
+      const settings = settingsFrom(ctx.config, ctx.roomId);
       if (spec.toggle) return spec.toggle(mine(ctx, settings), payload);
       const enabled = !settings.enabled;
       if (enabled && spec.confirm && payload.confirm !== true) return { status: 400, body: { error: spec.confirm } };
-      await ctx.updateConfig({ modules: { [configKey]: { ...(ctx.config.modules?.[configKey] ?? {}), enabled } } });
+      if (enabled && spec.ready) { const refused = await spec.ready(mine(ctx, settings)); if (refused) return refused; }
+      // A project's switch is that project's (module-scope.mjs); Home's is every project's.
+      await ctx.updateConfig({ modules: { [configKey]: switchIn(ctx.config.modules?.[configKey] ?? {}, ctx.roomId ?? null, enabled) } });
       const after = spec.onToggle ? await spec.onToggle(mine(ctx, { ...settings, enabled }), enabled) : null;
       await ctx.record('extension.toggled', { id: spec.id, name: base.name, enabled, ...(spec.toggledEvent ?? {}) });
       return { status: 200, body: { enabled, ...(after ?? {}), ...(spec.toggledBody?.(enabled) ?? {}) } };
     } : null,
+
+    // Home's word on which projects (2026-10-18): `{ all }` for every project, `{ rooms: { id: on } }`
+    // for some. Turning it on anywhere asks what turning it on asks (`confirm`, `ready`); the
+    // project rooms read the new word on their next turn.
+    scope: kind === 'builtin' || spec.toggle ? async (ctx, change = {}) => {
+      const block = ctx.config.modules?.[configKey] ?? {};
+      const next = scopeIn(block, change);
+      const fallback = Boolean(defaults.enabled);
+      const turningOn = change.all === true || Object.values(change.rooms ?? {}).some((on) => on === true);
+      const settings = settingsFrom(ctx.config, ctx.roomId);
+      if (turningOn && spec.confirm && change.confirm !== true) return { status: 400, body: { error: spec.confirm } };
+      if (turningOn && spec.ready) { const refused = await spec.ready(mine(ctx, settings)); if (refused) return refused; }
+      await ctx.updateConfig({ modules: { [configKey]: next } });
+      const here = moduleOnIn(next, ctx.roomId ?? null, fallback);
+      if (spec.onToggle && here !== Boolean(settings.enabled)) await spec.onToggle(mine(ctx, { ...settings, enabled: here }), here);
+      await ctx.record('extension.toggled', { id: spec.id, name: base.name, enabled: here, scope: { all: typeof next.enabled === 'boolean' ? next.enabled : fallback, rooms: roomsOf(next) } });
+      return { status: 200, body: { all: typeof next.enabled === 'boolean' ? next.enabled : fallback, rooms: roomsOf(next) } };
+    } : null,
   };
   return Object.freeze(module);
 }

package/src/npm-launch.mjs

@@ -0,0 +1,18 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
+// What `npx` leaves in MADRE's environment about the call that started it, taken away before MADRE
+// runs anything (2026-10-18).
+//
+// npm hands every process it starts the details of its own run: which package it was asked for
+// (npm_config_package), that it may say yes for you (npm_config_yes), the folder it was typed in
+// (npm_config_local_prefix, INIT_CWD), its own command and script. They are about that one call,
+// and every npm or npx MADRE ran after inherited them: Continuity's installer, started in a
+// project, went to install the package MADRE had been launched from, in the project's folder,
+// and failed. The person's npm configuration (cache, registry, prefix, their npmrc) stays.
+const LAUNCH = /^(npm_config_(package|yes|call|local_prefix|npm_version|user_agent)|npm_command|npm_execpath|npm_node_execpath|npm_lifecycle_event|npm_lifecycle_script|npm_package_json|INIT_CWD)$/i;
+
+export function forgetNpxLaunch(env = process.env) {
+  const gone = [];
+  for (const name of Object.keys(env)) if (LAUNCH.test(name)) { delete env[name]; gone.push(name); }
+  return gone;
+}

package/src/ollama.mjs

@@ -10,10 +10,11 @@ import { t } from './i18n.mjs';
 export const DEFAULT_OLLAMA_HOST = 'http://127.0.0.1:11434';
 // Embedding models we know how to talk to, best first.
 export const EMBED_MODELS = ['nomic-embed-text', 'mxbai-embed-large', 'snowflake-arctic-embed', 'all-minilm', 'bge-m3'];
-// Chat models that follow instructions well enough to distil, best first for a 16 GB machine.
-// General chat models first: @madre speaks for the room in the human's language, and coder
-// models drift into other voices. A coder is taken only when nothing else is there.
-export const CHAT_MODELS = ['qwen2.5:7b', 'llama3.1:8b', 'gemma3:4b', 'qwen2.5:3b', 'llama3.2:3b', 'qwen2.5:1.5b', 'llama3.2:1b', 'qwen2.5-coder:7b', 'qwen2.5-coder:1.5b'];
+// Chat models that follow instructions well enough to distil, best first. The larger Qwen2.5
+// sizes lead: the room only offers one to a computer that runs it (src/modules/local-models.mjs),
+// so when it is there it was pulled for this machine. General chat models before coders: @madre
+// speaks for the room in the human's language, and coder models drift into other voices.
+export const CHAT_MODELS = ['qwen2.5:72b', 'qwen2.5:32b', 'qwen2.5:14b', 'qwen2.5:7b', 'llama3.1:8b', 'gemma3:4b', 'qwen2.5:3b', 'llama3.2:3b', 'qwen2.5:1.5b', 'llama3.2:1b', 'qwen2.5-coder:7b', 'qwen2.5-coder:1.5b'];
 // Ollama's default window is 4k tokens and it drops the OLDEST text when a prompt overflows:
 // the system prompt goes first. Every MADRE call asks for a wider window.
 export const DEFAULT_NUM_CTX = 8192;
@@ -60,7 +61,7 @@ export async function probeOllama({ host = ollamaHost(), fetchImpl = globalThis.
     // What Ollama itself is running. It answers or it does not; either way the probe goes on.
     const version = await fetchImpl(`${host}/api/version`, { signal: AbortSignal.timeout(timeoutMs) })
       .then((answer) => (answer.ok ? answer.json() : null)).then((body) => body?.version ?? null).catch(() => null);
-    const models = (payload.models ?? []).map((model) => ({ name: model.name, size: model.size ?? 0, family: model.details?.family ?? '', details: model.details ?? {} }));
+    const models = (payload.models ?? []).map((model) => ({ name: model.name, size: model.size ?? 0, digest: model.digest ?? null, family: model.details?.family ?? '', details: model.details ?? {} }));
     const embeds = models.filter(isEmbedModel);
     const chats = models.filter((model) => !isEmbedModel(model));
     return {

package/src/outbound.mjs

@@ -87,6 +87,14 @@ export const DESTINATIONS = [
     where: 'Always on: it is how the author knows how many people use MADRE',
     inside: true,
   },
+  {
+    // The Market (src/market-remote.mjs): a signed catalog, and the file of a module you get from it.
+    id: 'market', host: 'madre.run', match: (url) => url.pathname.startsWith('/mercado/'), to: "madre.run · the Market",
+    what: 'Nothing about you: it asks for the catalog of modules, and for the file of a module you got or that has a newer version. Every file is checked against the author\'s signature before it is used.',
+    when: 'when MADRE opens, at most every ten minutes, and when you get a module',
+    where: 'Settings › Version and reports › Look for new versions · or PULSE_MARKET=0',
+    inside: true,
+  },
   {
     id: 'usage', host: 'madre.run', match: (url) => url.pathname === '/api/usage', to: "madre.run · the author's usage figures",
     what: "The author's token, to read how many copies are on. Only in the author's own copy, run from source.",
@@ -323,7 +331,7 @@ export class OutboundLog {
 export function outboundView({ log = null, state = {}, agents = [] } = {}) {
   const counts = log?.counts() ?? {};
   // Said in the room's language (2026-10-12): the list read in English inside a Spanish room.
-  const vendors = { codex: 'OpenAI', claude: 'Anthropic', gemini: 'Google', opencode: t('the provider OpenCode is signed in to') };
+  const vendors = { codex: 'OpenAI', claude: 'Anthropic', gemini: 'Google', opencode: t('the provider OpenCode is signed in to'), cursor: 'Cursor' };
   const crew = agents.filter((agent) => agent.detected && !agent.local).map((agent) => `@${agent.id} → ${agent.route?.destination ?? vendors[agent.id] ?? t('its own provider')}`);
   const destinations = DESTINATIONS.map((one) => ({
     id: one.id,

package/src/ports.mjs

@@ -16,16 +16,16 @@
 const SYSTEM_PORTS = new Set([22, 25, 53, 88, 139, 445, 548, 631, 5353, 7000]);
 // Processes that always listen and never serve a page worth previewing.
 // Ollama is here because MADRE itself uses it (the local model, @madre): started from a project
-// folder it would pass for that project's server.
-const NOISE = /^(rapportd|sharingd|identityservicesd|controlce|remoted|launchd|mDNSResponder|cupsd|Spotify|Dropbox|Docker|com\.docker|ollama)/i;
+// folder it would pass for that project's server. So is its runner, `llama-server` («llama-ser» in
+// lsof's nine letters): each model it loads listens on a port of its own and closes it when the
+// model is unloaded after a few idle minutes, which read as «your server stopped» (2026-10-17).
+const NOISE = /^(rapportd|sharingd|identityservicesd|controlce|remoted|launchd|mDNSResponder|cupsd|Spotify|Dropbox|Docker|com\.docker|ollama|llama-ser)/i;
 
 // One `lsof -nP -iTCP -sTCP:LISTEN` table into the ports a human might want to look at.
-// Loopback only: a line bound to * or 0.0.0.0 is reachable from the network, and this room does
-// not help anyone frame that by accident.
-// Everything listening, split by whether RIPLEY may open it. The wider half is NOT a list of
-// things to show as openable — it is the answer to «there is nothing here», which was a lie:
-// `node server.js` and `python -m http.server` bind every interface by default, so the most
-// common case in the world was being discarded in silence and reported as an empty computer.
+// Everything listening, split by where it listens: loopback, or every interface (* or 0.0.0.0),
+// which is reachable from the network too. `node server.js` and `python -m http.server` bind every
+// interface by default. Since 2026-10-18 the servers sentinel offers a project's own server from
+// either half, opened on 127.0.0.1, and says which ones the network can also reach.
 export function classifyListening(output = '', { self = null } = {}) {
   const found = new Map();
   const wider = new Map();

package/src/room/control.mjs

@@ -113,7 +113,7 @@ export class ControlDesk {
       reverted = [...restored.restored, ...restored.removed];
     }
     const kept = diff.files.filter((file) => !toRevert.has(file.path));
-    const changes = { checkpointId: run.checkpoint.id, agent: run.agent, messageId: run.messageId, mode: run.mode ?? 3, files: kept, stat: diff.stat, forbiddenReverted: [...controls, ...reverted.filter((path) => diff.forbidden.includes(path) && !mine(path))], existingReverted: additive ? reverted.filter((path) => !diff.forbidden.includes(path)) : [], ...(deleted.size ? { deletesReverted: [...deleted] } : {}) };
+    const changes = { checkpointId: run.checkpoint.id, agent: run.agent, messageId: run.messageId, mode: run.mode ?? 3, files: kept, stat: diff.stat, ...(diff.afterTree ? { afterTree: diff.afterTree } : {}), forbiddenReverted: [...controls, ...reverted.filter((path) => diff.forbidden.includes(path) && !mine(path))], existingReverted: additive ? reverted.filter((path) => !diff.forbidden.includes(path)) : [], ...(deleted.size ? { deletesReverted: [...deleted] } : {}) };
     const count = changes.files.length;
     const notes = [
       changes.forbiddenReverted.length ? `${changes.forbiddenReverted.length} write(s) into forbidden zones were reverted.` : null,

package/src/room/prompt.mjs

@@ -74,6 +74,14 @@ export function sparedChars(options) {
   return full.find((part) => part.id === 'sdk')?.text.length ?? 0;
 }
 
+// Codex has no tool of its own to read a file: it reads with the shell (cat, sed, rg). «You cannot
+// run commands» read to it as «you cannot read», and in #3 it answered «I need #4 for 5 min» to
+// open the file it had been asked to edit (manual tests on 1.0.2, 2026-10-17). Claude and OpenCode
+// read with their own tools and get no shell below #4, so the line is drawn for the shell readers
+// only: reading is part of reading; running programs is what stays out.
+const READS_WITH_SHELL = new Set(['codex']);
+const SHELL_READING = 'Reading includes looking at files with read-only shell commands (cat, sed, head, rg, ls, find, git status, git diff, git log); what you cannot run yourself are programs: tests, builds, installs, scripts, servers, or anything that changes files or reaches the network.';
+
 export function promptParts({
   agent, text, requester, depth, allowDelegation, context, recall = null, memories = null,
   attachments = [], references = [], lease = null, scopes = null, imageStudio = null,
@@ -82,6 +90,7 @@ export function promptParts({
   others = [], delegation = true, maxPlanSteps = 4, scopesFor = () => ({}), motherLines = [], memoryServer = null, controlHolder = null, privacyMarker = '[ENTIDAD-ORG]', madreModel = null, sdk = null,
 }) {
   const mayDelegate = allowDelegation && delegation && depth === 0 && others.length > 0;
+  const shellReader = READS_WITH_SHELL.has(agent.id);
   const attached = attachments.length
     ? `The human attached ${attachments.length} file(s); read them if relevant, they are part of this request:\n${attachments.map((file) => `- ${file.path} (${file.contentType}, ${file.size} bytes)`).join('\n')}`
     : null;
@@ -103,7 +112,7 @@ export function promptParts({
         : null },
     // #3 and #4 used to fall into the last branch and read «Read-only» right above the lease that
     // gave them the project: with #4 open, Codex answered that it would only inspect (2026-10-14).
-    { id: 'mode', text: `Permission mode for this turn: #${mode} ${MODES[mode]?.label ?? ''}.${mode === 0 ? ' This exchange is off the record: it is not written to the room transcript, no other agent will see it, and nothing you say here can be referred to later. Do not coordinate with other agents.' : mode === 2 ? ' You may create files, only inside the lease directory described below.' : mode === 3 ? ' You may read, create and modify the project\'s files as described below; you cannot run commands yourself.' : mode === 4 ? ' You may modify the project and run commands as described below.' : ' Read-only: you may read the project and coordinate, not create or modify files.'}${mode >= 1 && mode <= 3 && requester === 'you' ? ` If going on needs a higher mode, ask for it in one line with the mode and how long you need it, like "I need ${mode === 3 ? '#4 for 5 min' : '#3 for 15 min'}: <why>" (#3 holds 5, 15 or 30 min; #4 holds 5): the human gets a button for it.` : ''}` },
+    { id: 'mode', text: `Permission mode for this turn: #${mode} ${MODES[mode]?.label ?? ''}.${mode === 0 ? ' This exchange is off the record: it is not written to the room transcript, no other agent will see it, and nothing you say here can be referred to later. Do not coordinate with other agents.' : mode === 2 ? ' You may create files, only inside the lease directory described below.' : mode === 3 ? (shellReader ? ` You may read, create and modify the project's files as described below. ${SHELL_READING}` : ' You may read, create and modify the project\'s files as described below; you cannot run commands yourself.') : mode === 4 ? ' You may modify the project and run commands as described below.' : ' Read-only: you may read the project and coordinate, not create or modify files.'}${mode >= 1 && mode <= 3 && requester === 'you' ? ` If going on needs a higher mode, ask for it in one line with the mode and how long you need it, like "I need ${mode === 3 ? '#4 for 5 min' : '#3 for 15 min'}: <why>" (#3 holds 5, 15 or 30 min; #4 holds 5): the human gets a button for it.` : ''}` },
     { id: 'inspect', text: lease ? (lease.airlock ? 'Inspect the project as needed; the airlock is open for you this turn, as described below.' : lease.control ? 'Inspect the project as needed; you hold it for this turn, as described below.' : lease.create ? 'Inspect the project as needed; you may add new files to it as described below, never change existing ones.' : 'Inspect the project as needed; the only writable place is the creation lease directory below.') : `Inspect the project only as needed. Operate read-only and do not modify files.${scopes?.web ? '' : ' Do not access the web.'}` },
     { id: 'ash', text: ash ? 'Ash: answer in compact prose. Say it once, drop the preamble and the summary of what you are about to say, and keep names, negation, numbers, paths, safety details and any ```pulse block exactly as they are. Brevity is in how you write, never in what you leave out.' : null },
     { id: 'mother', text:
@@ -153,7 +162,9 @@ export function promptParts({
       : null },
     { id: 'runs', text: runs
       ? [
-        'You cannot run commands in this mode. If your answer depends on one (tests, a build, a linter, a git query), or you hand the human a command to run, end your reply with one fenced block and the human may run it for you; a command in a plain code block gives them no button:',
+        shellReader
+          ? 'You cannot run programs in this mode; reading files with read-only shell commands (cat, sed, rg, ls, git diff) is fine. If your answer depends on a program (tests, a build, a linter), or you hand the human a command to run, end your reply with one fenced block and the human may run it for you; a command in a plain code block gives them no button:'
+          : 'You cannot run commands in this mode. If your answer depends on one (tests, a build, a linter, a git query), or you hand the human a command to run, end your reply with one fenced block and the human may run it for you; a command in a plain code block gives them no button:',
         '```pulse-run',
         '<why you need it, one line>',
         '$ <command>',

package/src/room.mjs

@@ -5,6 +5,7 @@ import { t } from './i18n.mjs';
 import { invokeClaude, buildClaudeArgs } from './adapters/claude.mjs';
 import { invokeGemini, buildGeminiArgs } from './adapters/gemini.mjs';
 import { invokeOpenCode, buildOpenCodeArgs } from './adapters/opencode.mjs';
+import { invokeCursor, buildCursorArgs } from './adapters/cursor.mjs';
 import { parseMessage } from './router.mjs';
 import { randomUUID } from 'node:crypto';
 import { basename } from 'node:path';
@@ -64,6 +65,7 @@ const defaultInvokers = {
   'claude-readonly': invokeClaude,
   'gemini-readonly': invokeGemini,
   'opencode-readonly': invokeOpenCode,
+  'cursor-readonly': invokeCursor,
 };
 
 // What a turn costs against MADRE's local budget. Cache reads are close to
@@ -831,6 +833,7 @@ export class Room {
     if (model) return model;
     if (agentId === 'codex') return (await readCodexEfforts({ home: this.#codexHome }).catch(() => null))?.model ?? null;
     if (agentId === 'opencode') return process.env.PULSE_OPENCODE_MODEL || null;
+    if (agentId === 'cursor') return process.env.PULSE_CURSOR_MODEL || null;
     return null;
   }
 
@@ -1349,7 +1352,8 @@ export class Room {
       const said = events.find((event) => event.type === 'message.created' && event.payload.role === 'assistant' && event.payload.sender === agent && event.payload.status !== 'delegated');
       if (said) return { agent, sequence: said.sequence, text: said.payload.text ?? '' };
       const failed = events.find((event) => event.type === 'message.failed' && event.payload.target === agent);
-      return { agent, failed: true, error: failed ? String(failed.payload.error ?? '').slice(0, 160) : null };
+      // Whole, so the closing turn can say it in the round's language and cut it at a sentence.
+      return { agent, failed: true, error: failed ? String(failed.payload.error ?? '').slice(0, 600) : null };
     });
     return { asked, answers };
   }
@@ -1643,16 +1647,19 @@ export class Room {
       : agent.id === 'claude' ? buildClaudeArgs({ ...shared, attachmentsDir: null, imageStudio: null })
         : agent.id === 'gemini' ? buildGeminiArgs({ ...shared, policyPath: '<written for this turn, deleted after it>', attachmentsDir: null })
           : agent.id === 'opencode' ? buildOpenCodeArgs(shared)
-            : null;
+            : agent.id === 'cursor' ? buildCursorArgs(shared)
+              : null;
     if (!args) return { agent: agent.id, label: agent.label, local: false, says: `MADRE has no adapter for @${agent.id}.`, mcpServers: [], env: [], isolation: [] };
     const isolation = {
       codex: ['--ephemeral: the run keeps no session of its own, so nothing said here reaches another project.'],
       claude: ['--no-session-persistence: the run keeps no session of its own.', 'Only the project\'s own CLAUDE.md and MADRE\'s briefing are read; hooks, plugins and outside MCP servers are not.'],
       gemini: ['GEMINI_CLI_HOME points at a temporary home made for this turn and removed after it, so settings, hooks and extensions come from there and not from yours.', 'GEMINI_CLI_NO_RELAUNCH keeps the launcher from spawning a second process MADRE could not stop.'],
       opencode: ['The run is given the model you chose and nothing else of your session.'],
+      cursor: ['--mode ask: Cursor\'s read-only mode, whatever its own settings say; no edits and no commands.', 'CURSOR_CONFIG_DIR points at a configuration made for this turn and removed after it: every command and every write denied. The sign-in stays in the system keychain.'],
     }[agent.id] ?? [];
     const env = {
       gemini: [{ name: 'GEMINI_CLI_HOME', note: 'the temporary home for this turn' }, { name: 'GEMINI_CLI_NO_RELAUNCH', note: 'so the launcher stays killable' }],
+      cursor: [{ name: 'CURSOR_CONFIG_DIR', note: 'the configuration for this turn: read only' }, { name: 'NO_OPEN_BROWSER', note: 'a turn never opens a page' }],
     }[agent.id] ?? [];
     return {
       agent: agent.id, label: agent.label, local: false,
@@ -1875,7 +1882,9 @@ export class Room {
       // not allow simply fails and the model reports the file as created. The room does not read
       // the prose for a claim; it takes the paths the reply names and asks the disk. Only what is
       // named AND absent is said, so an agent talking about files that exist says nothing here.
-      if (lease && !lease.control && artifacts.length === 0) {
+      // A reply that opens a plan names the files its steps will make (manual tests, 2026-10-17:
+      // «Claude arma el plan, Codex escribe memoria.html» read as a file Claude failed to write).
+      if (lease && !lease.control && artifacts.length === 0 && !/```pulse\s*\n/.test(result.text ?? '')) {
         const roots = [this.#projectRoot, lease.outDir, lease.realOutDir].filter(Boolean);
         const named = namedPaths(result.text, { roots });
         const missing = [];
@@ -1883,7 +1892,8 @@ export class Room {
           const full = path.startsWith('/') ? path : joinPath(this.#projectRoot, path);
           if (!(await statFile(full).then(() => true, () => false))) missing.push(path);
         }
-        if (missing.length) await this.#emit('create.missing', { messageId: responseMessageId, agent: agent.id, planId, files: missing });
+        // `requestId` lets the page put the same request back in the box for another try.
+        if (missing.length) await this.#emit('create.missing', { messageId: responseMessageId, requestId: messageId, agent: agent.id, planId, files: missing });
       }
       // CONTROL: what really changed in the project, forbidden zones reverted on the spot.
       const controlChanges = controlRun ? await this.#controlDesk.settleOrSay(controlRun) : null;

package/src/router.mjs

@@ -1,6 +1,6 @@
 // SPDX-License-Identifier: AGPL-3.0-only
 // MADRE · © 2026 Jossue Alcalá · GNU AGPL v3 with additional terms (Section 7): ADDITIONAL-TERMS.md
-const supported = new Set(['codex', 'claude', 'gemini', 'opencode']);
+const supported = new Set(['codex', 'claude', 'gemini', 'opencode', 'cursor']);
 
 export function parseMessage(text, fallbackTarget = null) {
   const value = String(text ?? '').trim();

package/src/runs.mjs

@@ -29,7 +29,10 @@ import { join } from 'node:path';
 
 export const MAX_COMMANDS = 5;
 const MAX_REASON = 300;
-const MAX_LINE = 500;
+// A line has to be read before it is pressed, and the card shows it whole however long it is
+// (public/app.js, renderRunRequest). The cap is only a guard against a runaway reply: a one-liner a
+// few hundred characters long (`npx tsx -e "…"`, a long `node -p`) is still a command to run.
+const MAX_LINE = 4000;
 
 // Shell builtins: without a shell they are not programs, or they are programs that change nothing.
 const BUILTINS = new Set(['cd', 'export', 'source', '.', 'alias', 'unset', 'set', 'eval', 'exec', 'pushd', 'popd']);

package/src/runtime-detection.mjs

@@ -38,6 +38,15 @@ const definitions = [
     versionArgs: ['--version'],
     adapter: 'opencode-readonly',
   },
+  {
+    // Cursor's agent CLI (2026-10-17). Its installer puts it in ~/.local/bin, which is not always
+    // on the PATH a room is started with.
+    id: 'cursor',
+    label: 'Cursor',
+    candidates: ['cursor-agent', join(homedir(), '.local', 'bin', 'cursor-agent')],
+    versionArgs: ['--version'],
+    adapter: 'cursor-readonly',
+  },
 ];
 
 const OFFICIAL_DESTINATIONS = {

package/src/salas.mjs

@@ -189,6 +189,32 @@ export async function associateProject({ root, home, stateRoot, now = new Date()
   return { id, name: basename(folder), root: folder, already: Boolean(before) };
 }
 
+// A new project, from nothing (2026-10-17): a folder made where the person chose, inside the home
+// folder, and added to Home like any other. The name is held to what any system refuses in a folder
+// name, the strictest set (separators, reserved characters, a trailing dot or space, device names),
+// so a name is only ever one folder, never a path, a device or a hidden folder.
+const DEVICE_NAMES = /^(con|prn|aux|nul|com[1-9]|lpt[1-9])(\..*)?$/i;
+export function projectNameProblem(name) {
+  const text = String(name ?? '');
+  if (!text.trim()) return 'empty';
+  if (text.length > 120) return 'long';
+  if (/[<>:"/\\|?*\u0000-\u001f]/.test(text) || text !== text.trim() || /[. ]$/.test(text) || text.startsWith('.') || DEVICE_NAMES.test(text)) return 'name';
+  return null;
+}
+export async function createProject({ name, parent = null, home, stateRoot, now = new Date() }) {
+  const problem = projectNameProblem(name);
+  if (problem) return { error: problem };
+  const top = realFolder(home);
+  const place = realFolder(parent || home);
+  if (!inside(place, top)) return { error: 'outside' };
+  if (inside(place, realFolder(stateRoot))) return { error: 'madre' };
+  if (!(await stat(place).catch(() => null))?.isDirectory()) return { error: 'missing' };
+  const folder = join(place, String(name));
+  if (dirname(folder) !== place) return { error: 'name' };
+  try { await mkdir(folder); } catch (error) { return { error: error?.code === 'EEXIST' ? 'exists' : 'missing' }; }
+  return { ...(await associateProject({ root: folder, home, stateRoot, now })), created: true };
+}
+
 // Takes a project out of MADRE (2026-10-10): its record of where it is goes aside, so Home no
 // longer lists it. Nothing in the project's folder is touched, and its conversations and its
 // memory stay beside the record: added again, the folder gets the same id and finds them there.