agents-city 0.3.0-beta.21

package/bin/serve.py

@@ -0,0 +1,1428 @@
+#!/usr/bin/env python3
+"""The local Hall server for one selected personal city.
+
+Why a local server and not the Worker that serves the map: the Hall writes files
+on this machine. A Worker cannot touch your disk, and it should not be able to.
+So the page is served from here, by Python, next to the files it writes.
+
+The Hall uses the same city, card, parcel, road and capability modules as the CLI.
+The retired v1 multiple-person wizard is deliberately not served.
+
+    ./bin/hall              open it
+    ./bin/hall --no-browser print the URL instead
+
+It binds to 127.0.0.1 on a port the OS picks, and every request carries a token
+minted for this run. Both matter: this process writes to your disk, and without
+the token any page you happen to have open could POST to it.
+"""
+
+import http.server
+import json
+import os
+import re
+import secrets
+import shutil
+import signal
+import socketserver
+import subprocess
+import sys
+import threading
+import urllib.parse
+import webbrowser
+
+AQUI = os.path.dirname(os.path.abspath(__file__))
+sys.path.insert(0, AQUI)
+import setup as W  # noqa: E402  legacy template catalogue used by the Hall
+
+sys.path.insert(0, os.path.join(os.path.dirname(AQUI), "plugin", "scripts"))
+import card  # noqa: E402
+import domains  # noqa: E402
+import gh  # noqa: E402
+import parcels  # noqa: E402
+import units  # noqa: E402
+import cities  # noqa: E402
+import roads  # noqa: E402
+import capabilities  # noqa: E402
+import deliberations  # noqa: E402
+import avatar  # noqa: E402
+import workspace  # noqa: E402
+import crecimiento  # noqa: E402
+import runtime_processes  # noqa: E402
+import importlib.machinery as _mach
+import importlib.util as _iu  # noqa: E402
+
+_s = _iu.spec_from_loader(
+    "seat",
+    _mach.SourceFileLoader(
+        "seat", os.path.join(os.path.dirname(AQUI), "plugin", "scripts", "seat.py")
+    ),
+)
+seat = _iu.module_from_spec(_s)
+_s.loader.exec_module(seat)
+
+FICHA = "PASE"  # the token's name, in one place
+PASE = secrets.token_urlsafe(24)
+
+# The demo cities' guided committees, when this Hall is serving one of them.
+# One process at most; /api/demo is its remote control and refuses real cities.
+# Every packaged demo city carries the prefix; nothing real ever does.
+DEMO_ID_PREFIX = "city_demo_"
+DEMO_SHOW = {"proc": None, "pausado": False}
+
+try:
+    sys.path.insert(0, os.path.join(os.path.dirname(AQUI), "demo"))
+    from stories import STORIES as DEMO_STORIES  # noqa: E402
+except ImportError:  # an install without the demo still serves every city
+    DEMO_STORIES = {}
+
+
+def es_demo(datos):
+    return cities.identidad(datos).startswith(DEMO_ID_PREFIX)
+
+
+# Growth walks the agent's workspace and every mount, and /api/estado is hit on
+# every page load and after every sheet edit. Ninety seconds of memory keeps the
+# sheet honest enough while sparing the walk on each click.
+_CRECIDO = {}
+
+
+def _cuenta_git(ruta, extra):
+    salida = subprocess.run(
+        ["git", "-C", ruta, "rev-list", "--count", *extra, "HEAD"],
+        capture_output=True,
+        text=True,
+        timeout=10,
+    )
+    return int(salida.stdout.strip() or 0) if salida.returncode == 0 else 0
+
+
+def contador_git_local(a, datos):
+    """The code counter the sheet injects into `crecimiento.crece`: local git
+    history from the repos this agent actually reaches, no network, no token.
+    Floors are merge commits (a merged PR lands as exactly one), bricks the
+    plain commits, activity the last thirty days. Without this, `_code`
+    honestly answers zero and every code agent's sheet showed an empty house
+    no matter how much it had built."""
+    if a.legacy:
+        rutas = [capabilities.ruta_de(a.nombre)]
+    else:
+        rutas = [a.workspace] + list(workspace.mount_targets(a, datos) or [])
+    prs = commits = act = 0
+    vistos = set()
+    for r in rutas:
+        real = os.path.realpath(r) if r else ""
+        if not real or real in vistos or not os.path.exists(os.path.join(real, ".git")):
+            continue
+        vistos.add(real)
+        prs += _cuenta_git(real, ["--merges"])
+        commits += _cuenta_git(real, ["--no-merges"])
+        act += _cuenta_git(real, ["--since=30.days"])
+    return prs, commits, act
+
+
+def _crecimiento_cacheado(a, datos, vida=90):
+    import time
+
+    clave = (os.path.realpath(datos), a.slug)
+    momento, valor = _CRECIDO.get(clave, (0, None))
+    if valor is not None and time.monotonic() - momento < vida:
+        return valor
+    try:
+        valor = crecimiento.crece(a, datos, contador_git_local)
+    except (OSError, ValueError, subprocess.SubprocessError):
+        valor = {"floors": 0, "bricks": 0, "activity30": 0, "signal": "unavailable"}
+    _CRECIDO[clave] = (time.monotonic(), valor)
+    return valor
+
+
+def ficha_de_agente(a, texto, datos, ventanas):
+    """One agent's character sheet, every number real: identity and kind, the
+    engine it starts with (specific-then-default, same resolution the launcher
+    uses), the engine's traffic light, and how its house has grown. Growth may
+    cost a directory walk, so a failure degrades to honest zeros rather than a
+    broken Hall."""
+    modelo = card.campo(texto, f"model.{a.slug}") or card.campo(texto, "model")
+    esfuerzo = card.campo(texto, f"effort.{a.slug}") or card.campo(texto, "effort")
+    semilla = card.campo(texto, f"avatar.{a.slug}")
+    crecido = _crecimiento_cacheado(a, datos)
+    return {
+        "name": a.nombre,
+        "slug": a.slug,
+        "kind": a.clase,
+        "role": a.rol,
+        "runtime": a.runtime,
+        "model": modelo,
+        "effort": esfuerzo,
+        "avatar_seed": semilla,
+        "avatar": avatar.data_uri(a.nombre, a.clase, semilla=semilla, rol=a.rol),
+        "cli": estado_del_cli(a, ventanas),
+        "legacy": a.legacy,
+        "mounts": len(a.mounts),
+        "growth": crecido,
+    }
+
+
+def binario_del_agente(a):
+    """The executable behind this agent's runtime: the first token of the
+    configured command, basename only — a path or flags never leak into which()."""
+    crudo = (a.runtime or "claude").strip()
+    if crudo.startswith("terminal:"):
+        crudo = crudo[len("terminal:"):]
+    piezas = crudo.split()
+    return os.path.basename(piezas[0]) if piezas else "claude"
+
+
+def estado_del_cli(a, ventanas):
+    """The engine's traffic light, derived and never guessed: green is this
+    agent's own window alive in the city's tmux session, yellow is the binary
+    present on this machine with nobody in it, red is not installed at all."""
+    binario = binario_del_agente(a)
+    return {
+        "binary": binario,
+        "installed": bool(shutil.which(binario)),
+        "connected": a.slug in ventanas or a.nombre in ventanas,
+    }
+
+
+def ventanas_vivas(owner, datos):
+    """The window names alive in this city's tmux session, or nothing.
+
+    The `=` prefix asks tmux for an exact session match: bare `-t home` also
+    matches a session called `home-2`, and the green dot must never be lit by
+    a different city's windows."""
+    try:
+        salida = subprocess.run(
+            [
+                "tmux",
+                "list-windows",
+                "-t",
+                "=" + cities.sesion(owner, datos),
+                "-F",
+                "#{window_name}",
+            ],
+            capture_output=True,
+            text=True,
+            timeout=3,
+        )
+        return set(salida.stdout.split()) if salida.returncode == 0 else set()
+    except (OSError, subprocess.SubprocessError):
+        return set()
+
+
+def hogar_de_agente(a, datos):
+    """Where one agent's own files live: its workspace for an agents-first
+    agent, its repo on disk for a legacy one. Empty when nothing exists yet —
+    callers decide whether to create (a workspace) or refuse (a missing repo).
+    """
+    if not a.legacy:
+        return a.workspace
+    return capabilities.ruta_de(a.nombre)
+
+
+def hogar_escribible(a, datos, crear=True):
+    """The agent's home, ready to be written into: created when it is a
+    workspace, refused when it is a repo that is not on this disk. Returns
+    (home, error-message) — exactly one of them truthy."""
+    hogar = hogar_de_agente(a, datos)
+    if not hogar:
+        return "", "this agent's repo is not on disk; clone it first"
+    if crear and not a.legacy:
+        workspace.crea_workspace(datos, a.slug)
+    return hogar, ""
+
+
+def raiz_de_skills(hogar):
+    """The agent home's own `.claude/skills`, verified to still be inside the
+    home after resolution. A repo can commit `.claude/skills` (or `.claude`)
+    as a symlink to anywhere this user can write — the global skills folder
+    included — and both the install and the rmtree would follow it. A linked
+    root returns '' and every caller refuses."""
+    real = os.path.realpath(os.path.join(hogar, ".claude", "skills"))
+    if real != os.path.join(os.path.realpath(hogar), ".claude", "skills"):
+        return ""
+    return real
+
+
+def skills_con_gestion(a, hogar, skills):
+    """The discovered skills, with the ones the Hall itself could remove marked:
+    exactly the folders under the agent home's own `.claude/skills` — the one
+    place installs go. `dir` is the folder name, which is what removal is keyed
+    on; a SKILL.md display name is free to differ from it."""
+    raiz = raiz_de_skills(hogar) if hogar else ""
+    fuera = []
+    for s in skills:
+        s = dict(s)
+        real = os.path.realpath(s.get("manifest", ""))
+        if raiz and real.startswith(raiz + os.sep):
+            carpeta = real[len(raiz) + 1:].split(os.sep, 1)[0]
+            if card.rol_seguro(carpeta, defecto="") == carpeta:
+                s["removable"] = True
+                s["dir"] = carpeta
+        fuera.append(s)
+    return fuera
+
+
+# One skill's extraction budget. The base64 cap in p_skill bounds the upload;
+# only these bound what a hostile deflate ratio inflates it to on disk.
+MAX_ENTRADAS_ZIP = 2048
+MAX_EXTRAIDO = 64 * 1024 * 1024
+
+
+def _zip_inseguro(entradas):
+    """The shapes a hostile zip uses, refused by name before a byte lands."""
+    if len(entradas) > MAX_ENTRADAS_ZIP:
+        return "the zip holds too many files for one skill"
+    if sum(info.file_size for info in entradas) > MAX_EXTRAIDO:
+        return "the zip inflates too large for one skill"
+    for info in entradas:
+        nombre = info.filename
+        if nombre.startswith(("/", "\\")) or ".." in nombre.split("/"):
+            return "the zip tries to escape its folder"
+        if (info.external_attr >> 16) & 0o170000 == 0o120000:
+            return "symlinks in a skill are refused"
+    return ""
+
+
+def _nombre_de_skill(entradas, pedido):
+    """The skill's name and its base inside the zip: the single top folder when
+    there is one, else the zip root plus a name from the payload."""
+    raices = {e.filename.split("/")[0] for e in entradas if e.filename.strip("/")}
+    con_carpeta = len(raices) == 1 and any(
+        "/" in e.filename or e.filename.endswith("/") for e in entradas
+    )
+    base = (next(iter(raices)) + "/") if con_carpeta else ""
+    crudo = next(iter(raices)) if con_carpeta else str(pedido or "")
+    nombre = card.rol_seguro(crudo, defecto="")
+    rutas = {e.filename[len(base):] for e in entradas if e.filename.startswith(base)}
+    return nombre, base, rutas
+
+
+def _extrae_skill(archivo, entradas, base, destino):
+    """Write the zip's files under `destino`, containment resolved twice and
+    the decompressed bytes metered as they land — the headers already passed
+    _zip_inseguro, but a header's declared size is the sender's word."""
+    presupuesto = MAX_EXTRAIDO
+    for info in entradas:
+        relativa = info.filename[len(base):] if info.filename.startswith(base) else ""
+        if not relativa or relativa.endswith("/"):
+            continue
+        ruta = os.path.realpath(os.path.join(destino, relativa))
+        if not ruta.startswith(destino + os.sep) and ruta != destino:
+            return "the zip tries to escape its folder"
+        os.makedirs(os.path.dirname(ruta), exist_ok=True)
+        with archivo.open(info) as origen, open(ruta, "wb") as salida:
+            while True:
+                trozo = origen.read(1024 * 64)
+                if not trozo:
+                    break
+                presupuesto -= len(trozo)
+                if presupuesto < 0:
+                    return "the zip inflates too large for one skill"
+                salida.write(trozo)
+    return ""
+
+
+def _instala_skill(archivo, entradas, base, nombre, hogar):
+    """Extract a validated zip into the home's verified skills root.
+
+    Returns (home, '', 0) or ('', why, http-code). The try covers what a zip's
+    own shape can still break — entries where a file and a directory collide,
+    a full disk, a permission wall — because a handler that dies mid-write
+    leaves half a folder that 409s every retry forever."""
+    raiz = raiz_de_skills(hogar)
+    if not raiz:
+        return "", "this agent's .claude/skills is a link out of its home", 409
+    destino = os.path.join(raiz, nombre)
+    if os.path.lexists(destino):
+        return "", f"{nombre} already exists there", 409
+    try:
+        os.makedirs(destino)
+        mal = _extrae_skill(archivo, entradas, base, destino)
+    except OSError as error:
+        mal = f"could not write the skill: {error}"
+    if mal:
+        shutil.rmtree(destino, ignore_errors=True)
+        return "", mal, 400
+    return destino, "", 0
+
+
+def historia_del_demo(datos):
+    """The story a demo city replays: its domain AS WRITTEN in city.yml.
+
+    Not the normalised registry domain — that maps anything it does not know
+    (medicina included) to software, which is exactly how the clinic once
+    replayed Aurora's night instead of its own morning.
+    """
+    historia = lee_clave(os.path.join(datos, "city.yml"), "domain")
+    return historia if historia in DEMO_STORIES else "software"
+
+# Where people actually keep their code. The curses wizard offered `~/code` and
+# nothing else, which is wrong on most machines and silently scans a folder that
+# is not there. Offer the ones that exist, most-repos first, and let them type.
+CANDIDATAS = [
+    "code",
+    "codigo",
+    "src",
+    "dev",
+    "devel",
+    "projects",
+    "proyectos",
+    "work",
+    "trabajo",
+    "repos",
+    "git",
+    "Developer",
+    "Documents",
+]
+
+
+def glob_fichas(datos):
+    import glob as _g
+
+    return [f for f in _g.glob(os.path.join(datos, "*.md")) if card.lee(f).get("user")]
+
+
+def lee_clave(fichero, clave, defecto=""):
+    try:
+        import re as _re
+
+        m = _re.search(rf"^{clave}:[ \t]*(.*)$", open(fichero).read(), _re.M)
+        return (m.group(1).strip() if m else defecto) or defecto
+    except OSError:
+        return defecto
+
+
+def lista_con(datos):
+    real = os.path.realpath(datos)
+    fuera = [dict(c, actual=(c["ruta"] == real)) for c in cities.lista(seat.quien_soy())]
+    if not any(c["actual"] for c in fuera):
+        fuera.insert(0, {"ruta": real, "nombre": cities.nombre(real), "actual": True})
+    return fuera
+
+
+def mapa_vivo(datos=""):
+    """Where the map is being served locally, or ''.
+
+    The map is a Cloudflare Worker so the whole team can see it deployed; a Worker
+    cannot write your disk, which is why the hall is this Python process instead.
+    They cannot be one server — but locally they can be one web: the hall finds the
+    map and frames it. bin/city takes 8787 or the next free port, so probe a few.
+    """
+    import urllib.request as _u
+
+    esperada = cities.identidad(datos or DESTINO)
+    for puerto in range(8787, 8797):
+        try:
+            with _u.urlopen(f"http://127.0.0.1:{puerto}/api/identity", timeout=0.25) as r:
+                identidad = json.load(r).get("cityId", "")
+                if r.status == 200 and identidad == esperada:
+                    return f"http://127.0.0.1:{puerto}"
+        except Exception:
+            continue
+    return ""
+
+
+def actividad_viva(datos):
+    """Read-only browser door into this city's authenticated local bus.
+
+    The Hall's own unguessable PASE protects the endpoint that returns this
+    short-lived token. The hub additionally accepts only localhost browser
+    origins, and rotates the token on every restart.
+    """
+    try:
+        endpoint = json.load(
+            open(
+                os.path.join(runtime_processes.ruta(datos), "endpoint.json"),
+                encoding="utf-8",
+            )
+        )
+        if endpoint.get("cityId") != cities.identidad(datos):
+            raise ValueError("wrong city")
+        if os.path.realpath(endpoint.get("dataDir", "")) != os.path.realpath(datos):
+            raise ValueError("wrong data folder")
+        pid = int(endpoint.get("pid", 0))
+        os.kill(pid, 0)
+        token = str(endpoint.get("spectatorToken") or "")
+        parsed = urllib.parse.urlparse(str(endpoint.get("url") or ""))
+        if (
+            not token
+            or parsed.scheme != "ws"
+            or parsed.hostname not in {"127.0.0.1", "localhost"}
+            or parsed.path != "/ws"
+        ):
+            raise ValueError("not a local spectator endpoint")
+        query = urllib.parse.parse_qs(parsed.query)
+        query["mode"] = ["spectator"]
+        query["token"] = [token]
+        query_string = urllib.parse.urlencode(query, doseq=True)
+        url = urllib.parse.urlunparse(parsed._replace(query=query_string))
+        return {
+            "online": True,
+            "url": url,
+            "city": endpoint.get("cityAddress", ""),
+            "started_at": endpoint.get("startedAt", ""),
+        }
+    except (OSError, ValueError, TypeError, json.JSONDecodeError):
+        return {"online": False, "url": "", "city": "", "started_at": ""}
+
+
+def carpetas_probables():
+    """Existing folders under $HOME that look like where the work lives."""
+    casa = os.path.expanduser("~")
+    fuera = []
+    for n in CANDIDATAS:
+        ruta = os.path.join(casa, n)
+        if not os.path.isdir(ruta):
+            continue
+        try:
+            hijos = [x for x in os.listdir(ruta) if not x.startswith(".")]
+            gits = sum(1 for x in hijos if os.path.isdir(os.path.join(ruta, x, ".git")))
+        except OSError:
+            continue
+        fuera.append({"ruta": ruta, "nombre": n, "items": len(hijos), "gits": gits})
+    fuera.sort(key=lambda c: (-c["gits"], -c["items"]))
+    return fuera
+
+
+def catalogo_roles(dominio):
+    """The roles this work domain offers, with the one-line remit from each
+    role's own file. Same source as the curses screen, so the two cannot drift."""
+    plants = {p["id"]: p for p in W.plantillas()}
+    tpl = plants.get(domains.canonico(dominio)) or plants.get("software")
+    tabla = {r: (nombre, resumen) for r, nombre, resumen, _ in W.ROLES}
+    fuera = []
+    for r, por_defecto in tpl["roles"]:
+        nombre, resumen = tabla.get(r, (r.replace("-", " ").title(), ""))
+        fuera.append(
+            {
+                "id": r,
+                "name": nombre,
+                "summary": resumen or W.leeRol(r),
+                "trade": W.oficio(r),
+                "on": por_defecto,
+                "architect": r in ARQUITECTOS,
+            }
+        )
+    return fuera
+
+
+def catalogo_roles_agente():
+    """Every built-in specialty a repo agent may adopt, across work domains.
+
+    Repo roles are deliberately not filtered by the city's domain: a portfolio
+    repo in a software city may be represented by an SEO specialist. Authority
+    is not part of this list; every one of these actors remains a bus member and
+    the owner seat remains the chair.
+    """
+    pertenencia = {}
+    for pack in domains.catalogo():
+        for rol, _ in pack["roles"]:
+            pertenencia.setdefault(rol, []).append(pack["id"])
+    fuera = []
+    for rol, nombre, resumen, _ in W.ROLES:
+        if rol not in pertenencia:
+            continue
+        fuera.append(
+            {
+                "id": rol,
+                "name": nombre,
+                "summary": resumen,
+                "trade": W.oficio(rol),
+                "domains": pertenencia[rol],
+            }
+        )
+    return fuera
+
+
+import roles as _roles  # noqa: E402
+
+ARQUITECTOS = _roles.ARQUITECTOS  # one set: whoever sets the goals
+
+
+class Manejador(http.server.BaseHTTPRequestHandler):
+    server_version = "AgentsCitySetup/1"
+
+    # ── plumbing ───────────────────────────────────────────────────────────
+    def log_message(self, format, *args):  # noqa: A002  the base class names it this
+        """Quiet by default: the browser is the interface, and a request log
+        underneath it reads like something went wrong."""
+        if os.environ.get("CITY_SETUP_DEBUG"):
+            sys.stderr.write("  %s\n" % (format % args))
+
+    def responde(self, cuerpo, tipo="application/json", codigo=200):
+        if not isinstance(cuerpo, bytes):
+            cuerpo = json.dumps(cuerpo).encode()
+        self.send_response(codigo)
+        self.send_header("Content-Type", tipo)
+        self.send_header("Content-Length", str(len(cuerpo)))
+        self.send_header("Cache-Control", "no-store")
+        # This process writes to disk. No other origin gets to reach it, and no
+        # page gets to embed it.
+        self.send_header("X-Frame-Options", "DENY")
+        self.send_header("Referrer-Policy", "no-referrer")
+        self.end_headers()
+        try:
+            self.wfile.write(cuerpo)
+        except (BrokenPipeError, ConnectionResetError):
+            pass
+
+    def autorizado(self, q):
+        """The token, plus the two checks that stop another page on this machine
+        from driving this server: the Host has to be our loopback address, and any
+        Origin that arrives has to be us."""
+        if not secrets.compare_digest(
+            (q.get(FICHA, [""])[0] or self.headers.get("X-City-Pase", "")), PASE
+        ):
+            return False
+        anfitrion = (self.headers.get("Host") or "").split(":")[0]
+        if anfitrion not in ("127.0.0.1", "localhost"):
+            return False
+        origen = self.headers.get("Origin")
+        if origen and origen not in (
+            f"http://127.0.0.1:{self.server.server_port}",
+            f"http://localhost:{self.server.server_port}",
+        ):
+            return False
+        return True
+
+    def resuelve_conocida(self, pedida):
+        """Resolve only cities already in this Hall; never arbitrary folders."""
+        usuario = seat.quien_soy()
+        actual = seat.donde_viven_las_fichas()
+        candidatas = cities.lista(usuario)
+        if not any(os.path.realpath(c["ruta"]) == os.path.realpath(actual) for c in candidatas):
+            candidatas.append(
+                {
+                    "ruta": actual,
+                    "nombre": cities.nombre(actual),
+                    "slug": cities.slug_ciudad(actual),
+                    "id": cities.identidad(actual),
+                }
+            )
+        buscada = str(pedida).lower()
+        return next(
+            (
+                c["ruta"]
+                for c in candidatas
+                if buscada
+                in {
+                    str(c.get("ruta", "")).lower(),
+                    str(c.get("nombre", "")).lower(),
+                    str(c.get("slug", "")).lower(),
+                    str(c.get("id", "")).lower(),
+                }
+            ),
+            "",
+        )
+
+    def ciudad(self, q):
+        """The requested known city, or the selected city as a safe fallback."""
+        pedida = q.get("city", [""])[0]
+        if pedida:
+            resuelta = self.resuelve_conocida(pedida)
+            if resuelta:
+                cities.asegura_metadata(resuelta, seat.quien_soy())
+                return resuelta
+        datos = seat.donde_viven_las_fichas()
+        cities.asegura_metadata(datos, seat.quien_soy())
+        return datos
+
+    # ── routes ─────────────────────────────────────────────────────────────
+    # One method per endpoint; these two tables are the whole routing. The
+    # old do_GET/do_POST were this repo's god functions — every endpoint
+    # inline, complexity 19 and 22, and a new route meant scrolling a wall.
+    GETS = {
+        "/api/estado": "g_estado",
+        "/api/instrucciones": "g_instrucciones",
+        "/api/live": "g_live",
+        "/api/misrepos": "g_misrepos",
+        "/api/domains": "g_domains",
+        "/api/roles": "g_roles",
+    }
+    POSTS = {
+        "/api/ficha": "p_ficha",
+        "/api/unidades": "p_unidades",
+        "/api/parcelas": "p_parcelas",
+        "/api/mapa": "p_mapa",
+        "/api/sesion": "p_sesion",
+        "/api/ciudades": "p_ciudades",
+        "/api/roads": "p_roads",
+        "/api/agente": "p_agente",
+        "/api/motor": "p_motor",
+        "/api/instrucciones": "p_instrucciones",
+        "/api/skill": "p_skill",
+        "/api/demo": "p_demo",
+        "/api/salir": "p_salir",
+    }
+
+    def do_GET(self):
+        ruta, _, cadena = self.path.partition("?")
+        q = urllib.parse.parse_qs(cadena)
+        if not self.autorizado(q):
+            return self.responde({"error": "not for you"}, codigo=403)
+
+        if ruta == "/":
+            pagina = open(os.path.join(AQUI, "hall.html"), "rb").read()
+            pagina = pagina.replace(b"__PASE__", PASE.encode())
+            return self.responde(pagina, "text/html; charset=utf-8")
+        if ruta == "/wizard":
+            return self.responde(
+                {"error": "the v1 multiple-person wizard was retired; use the Hall"}, codigo=404
+            )
+
+        if ruta == "/hall.js":
+            # The hall's code, TypeScript built by city/web's own esbuild. From
+            # dist-hall/, never dist/: dist/ is what the deployed Worker serves to
+            # the whole team, and the hall drives an API that writes this disk.
+            if not os.path.isfile(HALL_JS):
+                return self.responde(
+                    {
+                        "error": "the hall is not built yet — ./bin/hall builds it, "
+                        "or: cd city/web && npm install && npm run build"
+                    },
+                    codigo=404,
+                )
+            return self.responde(open(HALL_JS, "rb").read(), "text/javascript; charset=utf-8")
+
+        if ruta in self.GETS:
+            return getattr(self, self.GETS[ruta])(q)
+        return self.responde({"error": "no such thing"}, codigo=404)
+
+    def do_POST(self):
+        ruta, _, cadena = self.path.partition("?")
+        q = urllib.parse.parse_qs(cadena)
+        if not self.autorizado(q):
+            return self.responde({"error": "not for you"}, codigo=403)
+        try:
+            largo = int(self.headers.get("Content-Length") or 0)
+            cuerpo = json.loads(self.rfile.read(largo) or b"{}")
+        except (ValueError, json.JSONDecodeError) as e:
+            return self.responde({"error": f"unreadable body: {e}"}, codigo=400)
+        if ruta in self.POSTS:
+            return getattr(self, self.POSTS[ruta])(q, cuerpo)
+        return self.responde({"error": "no such thing"}, codigo=404)
+
+    def g_estado(self, q):
+        datos = self.ciudad(q)
+        owner = cities.lee_clave(datos, "owner") or seat.quien_soy()
+        tarjetas = []
+        # A face, a kind and the full character sheet per agent. Built here
+        # because the agent list needs the card text this response drops. One
+        # sheet render per agent: the roster portrait IS the sheet's avatar,
+        # so the map's face can never drift from the card's.
+        retratos = {"seat": avatar.data_uri("seat", "coordinator", rol="chair")}
+        agentes = []
+        ventanas = ventanas_vivas(owner, datos)
+        habilidades = capabilities.descubre_ciudad(datos)
+        for f in sorted(glob_fichas(datos)):
+            c = card.lee(f)
+            if c.get("user") == owner:
+                texto = c.get("texto") or ""
+                try:
+                    normalizados = workspace.agentes(texto, datos)
+                except ValueError:
+                    # A malformed card (two names, one slug) still gets listed
+                    # as a card; only its agent sheets have nothing safe to say.
+                    normalizados = []
+                for a in normalizados:
+                    if a.nombre in retratos:
+                        continue
+                    hoja = ficha_de_agente(a, texto, datos, ventanas)
+                    agentes.append(hoja)
+                    retratos[a.nombre] = hoja["avatar"]
+                    info = habilidades.get(a.nombre)
+                    if info:
+                        hogar = info["path"] if a.legacy else a.workspace
+                        info["skills"] = skills_con_gestion(a, hogar, info["skills"])
+                c.pop("texto", None)
+                tarjetas.append(c)
+        ps, lab, _ = parcels.lee(os.path.join(datos, "parcels.yml"))
+        sesiones = [
+            l.split(":")[0] for l in gh.sh(["tmux", "ls", "-F", "#{session_name}"]).splitlines()
+        ]
+        return self.responde(
+            {
+                "datos": datos,
+                "casa": os.path.expanduser("~"),
+                "yo": owner,
+                "address": cities.direccion(owner, datos),
+                "city_id": cities.identidad(datos),
+                "city_name": cities.nombre(datos),
+                "domain": domains.de_ciudad(datos),
+                # Compatibility for older built Hall bundles. New code reads domain.
+                "kind": domains.de_ciudad(datos),
+                "grow": lee_clave(os.path.join(datos, "city.yml"), "grow_command"),
+                "tarjetas": tarjetas,
+                "unidades": units.propias(os.path.join(datos, "units.yml")),
+                "parcelas": ps,
+                "lab": sorted(lab),
+                "gh": gh.conectado(),
+                "tmux": sesiones,
+                "plugin": os.path.isdir(os.path.expanduser("~/.claude/plugins/cache/agents-city")),
+                "mapa": mapa_vivo(datos),
+                "sesion": cities.sesion(owner, datos),
+                # The list always contains the city being looked at, registered or
+                # not — you can be standing in a city the registry has not met yet.
+                # Registration is earned by writing to one, never by looking.
+                "ciudades": lista_con(datos),
+                "roads": roads.lee(datos),
+                "invitation": roads.invitacion(datos, owner),
+                "skills": habilidades,
+                "deliberations": deliberations.lista(datos),
+                "live_bus": actividad_viva(datos),
+                "avatars": retratos,
+                "agents": agentes,
+                "demo": es_demo(datos),
+                "paleta": [{"hex": c_, "nombre": n} for c_, n in W.PALETA],
+            }
+        )
+
+    def g_live(self, q):
+        return self.responde(actividad_viva(self.ciudad(q)))
+
+    def g_misrepos(self, q):
+        # The whole disk by remote (find-repos.sh's cached index), with the
+        # ones this person has commits in already marked — the seat's own
+        # question, served to a page instead of a terminal.
+        quien = q.get("user", [seat.quien_soy()])[0]
+        # ?refresh=1 rebuilds the disk index first. The cache lasts a day, and
+        # the repo somebody just cloned is exactly the one they came to tick.
+        if q.get("refresh", [""])[0]:
+            gh.sh(
+                [
+                    os.path.join(os.path.dirname(AQUI), "plugin", "scripts", "find-repos.sh"),
+                    "--refresh",
+                ],
+                timeout=600,
+            )
+        todos = seat.repos_del_disco()
+        correo = gh.sh(["git", "config", "user.email"]).strip()
+        mios = seat.mios(quien, correo, todos)
+        return self.responde(
+            {
+                "repos": [
+                    {"nombre": n, "ruta": r, "cuando": seat.ultimo_commit(r), "mio": n in mios}
+                    for n, r in todos
+                ]
+            }
+        )
+
+    def g_arranque(self, q):
+        plants = W.plantillas()
+        return self.responde(
+            {
+                "kinds": plants,
+                "destino": DESTINO,
+                "casa": os.path.expanduser("~"),
+                "carpetas": carpetas_probables(),
+                # Only whether the CLI is there. Whether it is logged in is the
+                # orgs endpoint's answer, and asking it here would make every
+                # page load wait on a network call.
+                "gh": bool(shutil.which("gh")),
+                "existe": os.path.isdir(DESTINO),
+                "paleta": [{"hex": c, "nombre": n} for c, n in W.PALETA],
+                "arquitectos": sorted(ARQUITECTOS),
+            }
+        )
+
+    def g_roles(self, q):
+        if q.get("scope", [""])[0] == "agent":
+            return self.responde({"roles": catalogo_roles_agente()})
+        elegido = q.get("domain", q.get("kind", ["software"]))[0]
+        return self.responde({"roles": catalogo_roles(elegido)})
+
+    def g_domains(self, _q):
+        return self.responde(
+            {
+                "domains": [
+                    {"id": p["id"], "name": p["name"], "summary": p["summary"]}
+                    for p in domains.catalogo()
+                ]
+            }
+        )
+
+    def g_orgs(self, q):
+        return self.responde({"orgs": W.orgs_de_gh()})
+
+    def g_repos(self, q):
+        org = q.get("org", [""])[0]
+        if org:
+            hallados = [
+                {"nombre": n, "detalle": d, "fecha": f, "ruta": ""}
+                for n, d, f in W.repos_de_org(org)
+            ]
+            return self.responde({"repos": hallados})
+        base = os.path.expanduser(q.get("ruta", [""])[0])
+        if not base or not os.path.isdir(base):
+            return self.responde({"repos": [], "error": f"{base or '(empty)'} is not a folder"})
+        # Two different third columns, and saying so beats guessing in the page:
+        # a git repo reports its last commit, any-folder reports what is inside.
+        if q.get("modo", ["git"])[0] == "git":
+            crudo = W.repos_del_disco(base)
+            repos = [{"nombre": n, "ruta": r, "detalle": "", "fecha": f} for n, r, f in crudo]
+        else:
+            crudo = W.carpetas_del_disco(base)
+            repos = [{"nombre": n, "ruta": r, "detalle": d, "fecha": ""} for n, r, d in crudo]
+        return self.responde({"repos": repos})
+
+    def g_gente(self, q):
+        org = q.get("org", [""])[0]
+        if org:
+            return self.responde(
+                {
+                    "gente": [
+                        {"user": u, "nombre": u, "detalle": "org member"}
+                        for u in W.gente_de_org(org)
+                    ]
+                }
+            )
+        rutas = [os.path.expanduser(r) for r in q.get("ruta", []) if r]
+        return self.responde(
+            {
+                "gente": [
+                    {"user": u, "nombre": n, "detalle": f"{v} commits"}
+                    for u, n, v in W.gente_de_repos(rutas)
+                ]
+            }
+        )
+
+    def p_escribe(self, q, cuerpo):
+        d = {
+            "destino": os.path.expanduser(cuerpo.get("destino") or DESTINO),
+            "unidades": cuerpo.get("unidades") or [],
+            "roles": cuerpo.get("roles") or [],
+            "repos": cuerpo.get("repos") or [],
+            "gente": cuerpo.get("gente") or [],
+            "org": cuerpo.get("org") or "",
+            "rutas": {k: os.path.expanduser(v) for k, v in (cuerpo.get("rutas") or {}).items()},
+            "kind": cuerpo.get("kind") or "product",
+            "grow_cmd": cuerpo.get("grow_cmd") or "",
+        }
+        if cuerpo.get("objetivo", {}).get("title"):
+            d["objetivo"] = cuerpo["objetivo"]
+        try:
+            hechos = W.escribe(d)
+        except OSError as e:
+            return self.responde({"error": str(e)}, codigo=500)
+        RESULTADO.append((d, hechos))
+        return self.responde({"hechos": hechos, "destino": d["destino"]})
+
+    def p_ficha(self, q, cuerpo):
+        # One owner seat, written by the same code as every other door.  The old
+        # endpoint trusted ``body.user`` and could silently add a second person to
+        # one city; cities are autonomous seats, not team containers.
+        datos = self.ciudad(q)
+        quien = cities.lee_clave(datos, "owner") or seat.quien_soy()
+        rol = str(cuerpo.get("role") or "dev")
+        dominio = domains.canonico(cuerpo.get("domain") or domains.de_ciudad(datos))
+        if not domains.obtiene(dominio):
+            return self.responde({"error": f"unknown domain: {dominio}"}, codigo=400)
+        repos_e = [str(r) for r in (cuerpo.get("repos") or [])]
+        repo_roles_raw = cuerpo.get("repo_roles", {})
+        if repo_roles_raw is None:
+            repo_roles_raw = {}
+        if not isinstance(repo_roles_raw, dict):
+            return self.responde({"error": "repo_roles must be an object"}, codigo=400)
+        try:
+            repo_roles = card.normaliza_roles_repos(repos_e, repo_roles_raw)
+        except ValueError as e:
+            return self.responde({"error": str(e)}, codigo=400)
+        obj = cuerpo.get("objetivo") or None
+        if obj is not None and not isinstance(obj, dict):
+            obj = None
+        if obj and not str(obj.get("title", "")).strip():
+            obj = None
+        try:
+            seat.escribe_ficha(
+                os.path.join(datos, f"{quien}.md"),
+                quien,
+                rol,
+                repos_e,
+                obj,
+                cities.slug_ciudad(datos),
+                repo_roles,
+            )
+            hechos = []
+            if cities.gestionada(datos, quien):
+                hechos = seat.escribe_suelo(datos, repos_e, dominio)
+            domains.selecciona(datos, dominio)
+            hechos += domains.materializa(datos, dominio, rol)
+            for rol_repo in sorted(set(repo_roles.values()) - {"blank", rol}):
+                hechos += domains.materializa(datos, dominio, rol_repo)
+        except OSError as e:
+            return self.responde({"error": str(e)}, codigo=500)
+        cities.registra(datos)
+        return self.responde(
+            {
+                "ok": True,
+                "user": quien,
+                "hechos": hechos,
+                "attach": f"tmux attach -t {cities.sesion(quien, datos)}",
+            }
+        )
+
+    def p_unidades(self, q, cuerpo):
+        datos = self.ciudad(q)
+        lista = cuerpo.get("unidades")
+        if not isinstance(lista, list) or not all(
+            isinstance(u, dict) and u.get("id") for u in lista
+        ):
+            return self.responde(
+                {"error": "unidades has to be a list of {id, name, color}"}, codigo=400
+            )
+        try:
+            units.escribe(os.path.join(datos, "units.yml"), lista)
+        except OSError as e:
+            return self.responde({"error": str(e)}, codigo=500)
+        cities.registra(datos)
+        return self.responde(
+            {"ok": True, "unidades": units.propias(os.path.join(datos, "units.yml"))}
+        )
+
+    def p_parcelas(self, q, cuerpo):
+        datos = self.ciudad(q)
+        porRepo = cuerpo.get("repos")
+        if not isinstance(porRepo, dict):
+            return self.responde({"error": "repos has to be {repo: [rows]}"}, codigo=400)
+        try:
+            parcels.escribe(
+                os.path.join(datos, "parcels.yml"),
+                porRepo,
+                lab=[str(x) for x in (cuerpo.get("lab") or [])],
+            )
+        except OSError as e:
+            return self.responde({"error": str(e)}, codigo=500)
+        cities.registra(datos)
+        ps, lab, _ = parcels.lee(os.path.join(datos, "parcels.yml"))
+        return self.responde({"ok": True, "parcelas": ps, "lab": sorted(lab)})
+
+    def p_ciudades(self, q, cuerpo):
+        nombre = " ".join(str(cuerpo.get("name") or "").split())
+        if not nombre:
+            return self.responde({"error": "name is required"}, codigo=400)
+        usuario = seat.quien_soy()
+        try:
+            datos = cities.crea(usuario, nombre)
+        except (OSError, ValueError) as e:
+            return self.responde({"error": str(e)}, codigo=400)
+        return self.responde(
+            {"ok": True, "city": datos, "address": cities.direccion(usuario, datos)}
+        )
+
+    def p_roads(self, q, cuerpo):
+        origen = self.ciudad(q)
+        accion = str(cuerpo.get("action") or "")
+        objetivo = str(cuerpo.get("target") or "")
+        usuario = seat.quien_soy()
+        try:
+            if accion == "connect":
+                destino = self.resuelve_conocida(objetivo)
+                if not destino:
+                    return self.responde(
+                        {"error": "target city is not present locally"}, codigo=404
+                    )
+                roads.conecta(origen, destino, usuario)
+            elif accion == "disconnect":
+                camino = next(
+                    (
+                        r
+                        for r in roads.lee(origen)
+                        if r["id"] == objetivo or r["address"] == objetivo
+                    ),
+                    None,
+                )
+                if not camino:
+                    return self.responde({"error": "road does not exist"}, codigo=404)
+                destino = roads.destino_local(camino, usuario)
+                if destino:
+                    roads.desconecta_local(origen, destino)
+                else:
+                    roads.desconecta(origen, camino["id"])
+            else:
+                return self.responde({"error": "action must be connect or disconnect"}, codigo=400)
+        except (OSError, ValueError) as e:
+            return self.responde({"error": str(e)}, codigo=400)
+        return self.responde({"ok": True, "roads": roads.lee(origen)})
+
+    def p_mapa(self, q, cuerpo):
+        # Bake and serve the map, detached. First run builds the front end and
+        # seeds the local D1, so the page polls /api/estado until it is up.
+        datos = self.ciudad(q)
+        if mapa_vivo(datos):
+            return self.responde({"ok": True, "mapa": mapa_vivo(datos)})
+        guion = os.path.join(os.path.dirname(AQUI), "bin", "city")
+        if not os.path.isfile(guion):
+            return self.responde(
+                {"error": "bin/city is not next to this hall — the map needs the clone"}, codigo=500
+            )
+        subprocess.Popen(
+            [guion, datos],
+            stdout=subprocess.DEVNULL,
+            stderr=subprocess.DEVNULL,
+            start_new_session=True,
+        )
+        return self.responde({"ok": True, "mapa": ""})
+
+    def p_sesion(self, q, cuerpo):
+        # Build the tmux session, detached: the browser cannot hold a terminal,
+        # so the page shows the attach command instead. The script's final
+        # `tmux attach` fails headless and that is fine — the windows exist.
+        datos = self.ciudad(q)
+        quien = cities.lee_clave(datos, "owner") or seat.quien_soy()
+        guion = os.path.join(os.path.dirname(AQUI), "plugin", "scripts", "city-session.sh")
+        subprocess.Popen(
+            [guion, quien, "--claude"],
+            env=dict(
+                os.environ,
+                AGENTS_CITY_DATA=datos,
+                AGENTS_CITY_HOME=cities.raiz(),
+                AGENTS_CITY_USER=quien,
+                CITY_ADDRESS=cities.direccion(quien, datos),
+            ),
+            stdout=subprocess.DEVNULL,
+            stderr=subprocess.DEVNULL,
+            start_new_session=True,
+        )
+        return self.responde(
+            {"ok": True, "attach": f"tmux attach -t {cities.sesion(quien, datos)}"}
+        )
+
+    # Every tunable on the sheet: payload field -> (card key prefix, validator,
+    # refusal). A validator is a regex or a set; both mean "an alias shape or
+    # nothing, never a shell fragment". `runtime` maps to `runs.` — the launcher's
+    # own key — and the web deliberately cannot reach the terminal: fallback.
+    CAMPOS_DE_AGENTE = {
+        "model": ("model", re.compile(r"[a-z0-9][a-z0-9.-]{0,63}"), "that is not a model alias"),
+        "effort": ("effort", frozenset(("low", "medium", "high", "xhigh", "max")),
+                   "effort is low..max or empty"),
+        "runtime": ("runs", frozenset(("claude",) + seat.OTROS_MOTORES),
+                    "runtime is claude, codex, opencode, kimi or empty"),
+        "avatar": ("avatar", re.compile(r"[a-z0-9-]{1,16}"), "an avatar seed is short and plain"),
+    }
+
+    def p_agente(self, q, cuerpo):
+        """Tune one agent from its character sheet: model, effort, runtime and
+        avatar seed, written to the card keys the launcher already resolves. An
+        empty value removes the key — back to the owner's default, which is the
+        right silence. Applies the next time the session opens."""
+        a, ficha, datos = self._agente(q, cuerpo.get("agent"))
+        if not a:
+            return self.responde({"error": "no such agent here"}, codigo=404)
+        # Validate the whole body first, write after: a 400 answer must never
+        # have left half an edit already persisted on the card.
+        escrituras = []
+        for campo, (clave, valida, queja) in self.CAMPOS_DE_AGENTE.items():
+            if campo not in cuerpo:
+                continue
+            valor = str(cuerpo.get(campo) or "").strip().lower()
+            bien = (valor in valida) if isinstance(valida, frozenset) else bool(
+                valida.fullmatch(valor)
+            )
+            if valor and not bien:
+                return self.responde({"error": queja}, codigo=400)
+            escrituras.append((f"{clave}.{a.slug}", valor))
+        for clave, valor in escrituras:
+            card.pon_campo(ficha, clave, valor)
+
+        # The runtime may have just changed; re-normalise so the sheet answers
+        # with the new engine, its traffic light included.
+        texto = card.lee(ficha).get("texto") or ""
+        owner = cities.lee_clave(datos, "owner") or seat.quien_soy()
+        actual = {x.slug: x for x in workspace.agentes(texto, datos)}.get(a.slug, a)
+        return self.responde(
+            {
+                "ok": True,
+                "agent": ficha_de_agente(actual, texto, datos, ventanas_vivas(owner, datos)),
+            }
+        )
+
+
+    def _agente(self, q, nombre):
+        """Resolve one agent by slug on the selected city, or (None, ...).
+
+        The shape check mirrors card.ventana's slugs (up to 80 chars), not
+        card.rol_seguro's 64 — a long-named agent that renders a full sheet
+        must not 404 on every one of that sheet's actions."""
+        datos = self.ciudad(q)
+        owner = cities.lee_clave(datos, "owner") or seat.quien_soy()
+        ficha = os.path.join(datos, f"{owner}.md")
+        texto = card.lee(ficha).get("texto") or ""
+        if not texto:
+            return None, None, None
+        try:
+            agentes = {a.slug: a for a in workspace.agentes(texto, datos)}
+        except ValueError:
+            return None, None, None
+        pedido = str(nombre or "").strip().lower()
+        if not re.fullmatch(r"[a-z0-9][a-z0-9-]{0,79}", pedido):
+            pedido = ""
+        return agentes.get(pedido), ficha, datos
+
+    def g_instrucciones(self, q):
+        """One agent's instruction file, as it is on disk. CLAUDE.md is read by
+        the Claude runtime; AGENTS.md by Codex, OpenCode and friends — the Hall
+        labels them so nobody edits a file their engine never opens."""
+        a, _, datos = self._agente(q, q.get("agent", [""])[0])
+        archivo = q.get("file", [""])[0]
+        if archivo not in workspace.INSTRUCCIONES:
+            return self.responde({"error": "file is CLAUDE.md or AGENTS.md"}, codigo=400)
+        if not a:
+            return self.responde({"error": "no such agent here"}, codigo=404)
+        hogar = hogar_de_agente(a, datos)
+        ruta = os.path.join(hogar, archivo) if hogar else ""
+        existe = bool(ruta) and os.path.isfile(ruta)
+        contenido = ""
+        if existe:
+            try:
+                contenido = open(ruta, encoding="utf-8").read()
+            except UnicodeDecodeError:
+                # Never pretend the file is absent: `exists: false` would let
+                # the editor save over it and destroy what it could not read.
+                return self.responde(
+                    {"error": f"{archivo} is not UTF-8 text — edit it with your own editor"},
+                    codigo=409,
+                )
+            except OSError:
+                existe = False
+        return self.responde(
+            {
+                "agent": a.slug,
+                "file": archivo,
+                "reader": workspace.INSTRUCCIONES[archivo],
+                "exists": existe,
+                "home": hogar,
+                "content": contenido,
+            }
+        )
+
+    def p_instrucciones(self, q, cuerpo):
+        """Write one agent's instruction file, atomically, into its own home —
+        an agents-first workspace or the agent's own repo, never anywhere else."""
+        a, _, datos = self._agente(q, cuerpo.get("agent"))
+        archivo = str(cuerpo.get("file") or "")
+        contenido = cuerpo.get("content")
+        if archivo not in workspace.INSTRUCCIONES:
+            return self.responde({"error": "file is CLAUDE.md or AGENTS.md"}, codigo=400)
+        if not isinstance(contenido, str) or len(contenido) > 256_000:
+            return self.responde({"error": "content is text, under 256 KB"}, codigo=400)
+        if not a:
+            return self.responde({"error": "no such agent here"}, codigo=404)
+        hogar, mal = hogar_escribible(a, datos)
+        if mal:
+            return self.responde({"error": mal}, codigo=409)
+        cities.escribe_atomico(os.path.join(hogar, archivo), contenido)
+        return self.responde({"ok": True, "agent": a.slug, "file": archivo})
+
+    def p_skill(self, q, cuerpo):
+        """Install one skill zip into one agent's own home — the owner's upload,
+        the agent's `.claude/skills/`, and nothing else.
+
+        Recognition stays read-only; this is the one deliberate write, and it is
+        paranoid on purpose: no absolute paths, no `..`, no symlinks, a size cap,
+        and every extracted path re-checked against the destination after
+        resolution. Skills are the Claude runtime's format — other engines
+        ignore them, and the sheet says so."""
+        import base64
+        import io
+        import zipfile
+
+        a, _, datos = self._agente(q, cuerpo.get("agent"))
+        if not a:
+            return self.responde({"error": "no such agent here"}, codigo=404)
+        if cuerpo.get("remove"):
+            return self._quita_skill(a, datos, cuerpo)
+        crudo = str(cuerpo.get("zip") or "")
+        if not crudo or len(crudo) > 14_000_000:  # ~10 MB decoded
+            return self.responde({"error": "a skill zip, base64, under 10 MB"}, codigo=400)
+        try:
+            binario = base64.b64decode(crudo, validate=True)
+            archivo = zipfile.ZipFile(io.BytesIO(binario))
+        except (ValueError, zipfile.BadZipFile):
+            return self.responde({"error": "that is not a readable zip"}, codigo=400)
+
+        entradas = archivo.infolist()
+        mal = _zip_inseguro(entradas)
+        if mal:
+            return self.responde({"error": mal}, codigo=400)
+        nombre_skill, base_zip, rutas_zip = _nombre_de_skill(entradas, cuerpo.get("name"))
+        if not nombre_skill:
+            return self.responde({"error": "the skill needs a plain folder name"}, codigo=400)
+        if "SKILL.md" not in rutas_zip:
+            return self.responde({"error": "a skill is a folder with a SKILL.md"}, codigo=400)
+
+        hogar, mal = hogar_escribible(a, datos)
+        if mal:
+            return self.responde({"error": mal}, codigo=409)
+        destino, mal, codigo = _instala_skill(archivo, entradas, base_zip, nombre_skill, hogar)
+        if mal:
+            return self.responde({"error": mal}, codigo=codigo)
+        return self.responde({"ok": True, "agent": a.slug, "skill": nombre_skill, "home": destino})
+
+    def p_motor(self, q, cuerpo):
+        """The test button: run the agent's engine for real and report. Never a
+        guess — `--version` against the actual binary, plus the login state for
+        Claude. A missing binary is an honest answer, not an HTTP error."""
+        a, _, datos = self._agente(q, cuerpo.get("agent"))
+        if not a:
+            return self.responde({"error": "no such agent here"}, codigo=404)
+        binario = binario_del_agente(a)
+        ruta = shutil.which(binario)
+        if not ruta:
+            return self.responde(
+                {"ok": False, "binary": binario, "detail": f"{binario} is not on this machine"}
+            )
+        try:
+            salida = subprocess.run(
+                [ruta, "--version"], capture_output=True, text=True, timeout=10
+            )
+        except (OSError, subprocess.SubprocessError) as error:
+            return self.responde({"ok": False, "binary": binario, "detail": str(error)})
+        version = (salida.stdout or salida.stderr).strip().splitlines()
+        detalle = ""
+        if binario in ("claude", "claude-code") and salida.returncode == 0:
+            try:
+                auth = subprocess.run(
+                    [ruta, "auth", "status"], capture_output=True, text=True, timeout=10
+                )
+                detalle = (
+                    "logged in"
+                    if re.search(r'"loggedIn"\s*:\s*true', auth.stdout)
+                    else "not logged in"
+                )
+            except (OSError, subprocess.SubprocessError):
+                detalle = "auth status unavailable"
+        return self.responde(
+            {
+                "ok": salida.returncode == 0,
+                "binary": binario,
+                "version": version[0] if version else "",
+                "detail": detalle,
+            }
+        )
+
+    def _quita_skill(self, a, datos, cuerpo):
+        """Remove one skill folder from the agent's own `.claude/skills/` — the
+        exact place the Hall installs into, and nowhere else. A skill living
+        elsewhere in a repo (its root SKILL.md, a committed layout) is the
+        repo's property and this endpoint refuses to know it exists."""
+        nombre = card.rol_seguro(str(cuerpo.get("remove") or ""), defecto="")
+        if not nombre:
+            return self.responde({"error": "that is not a skill name"}, codigo=400)
+        hogar, mal = hogar_escribible(a, datos, crear=False)
+        if mal:
+            return self.responde({"error": mal}, codigo=409)
+        raiz = raiz_de_skills(hogar)
+        if not raiz:
+            return self.responde(
+                {"error": "this agent's .claude/skills is a link out of its home"}, codigo=409
+            )
+        if os.path.islink(os.path.join(raiz, nombre)):
+            return self.responde({"error": "that skill is a link, not a folder"}, codigo=400)
+        destino = os.path.realpath(os.path.join(raiz, nombre))
+        if not destino.startswith(raiz + os.sep):
+            return self.responde({"error": "that name escapes the skills folder"}, codigo=400)
+        if not os.path.isdir(destino):
+            return self.responde(
+                {"error": f"no skill called {nombre} in this agent's home"}, codigo=404
+            )
+        shutil.rmtree(destino)
+        return self.responde({"ok": True, "agent": a.slug, "removed": nombre})
+
+    def p_demo(self, q, cuerpo):
+        """The demo's remote control: replay, pause and resume the guided
+        committee. It runs once when the first spectator connects, and anybody
+        whose map was still baking missed it with no way back — these verbs are
+        that way back. They refuse any city that is not the packaged Aurora
+        demo: a real city's committee is real, and a replay there would be
+        publishing fiction onto a real bus."""
+        datos = self.ciudad(q)
+        if not es_demo(datos):
+            return self.responde({"error": "only a packaged demo can be replayed"}, codigo=403)
+        accion = str(cuerpo.get("action") or "")
+        if accion not in ("restart", "pause", "resume", "status"):
+            return self.responde({"error": f"unknown action: {accion}"}, codigo=400)
+
+        proc = DEMO_SHOW["proc"]
+        vivo = proc is not None and proc.poll() is None
+        if accion == "restart":
+            if vivo:
+                # A paused process cannot handle SIGTERM: wake it first.
+                proc.send_signal(signal.SIGCONT)
+                proc.terminate()
+                try:
+                    proc.wait(timeout=3)
+                except subprocess.TimeoutExpired:
+                    proc.kill()
+            guion = os.path.join(os.path.dirname(AQUI), "demo", "show.py")
+            historia = historia_del_demo(datos)
+            DEMO_SHOW["proc"] = subprocess.Popen(
+                [sys.executable, guion, "--no-wait", "--step", "2", "--story", historia],
+                stdout=subprocess.DEVNULL,
+                stderr=subprocess.DEVNULL,
+            )
+            DEMO_SHOW["pausado"] = False
+        elif accion == "pause" and vivo and not DEMO_SHOW["pausado"]:
+            # A real pause: the storyteller process is stopped mid-sentence and
+            # resumes exactly where it was, because it is SIGSTOP, not a flag.
+            proc.send_signal(signal.SIGSTOP)
+            DEMO_SHOW["pausado"] = True
+        elif accion == "resume" and vivo and DEMO_SHOW["pausado"]:
+            proc.send_signal(signal.SIGCONT)
+            DEMO_SHOW["pausado"] = False
+
+        proc = DEMO_SHOW["proc"]
+        vivo = proc is not None and proc.poll() is None
+        return self.responde(
+            {"ok": True, "running": vivo, "paused": bool(DEMO_SHOW["pausado"] and vivo)}
+        )
+
+    def p_salir(self, q, cuerpo):
+        threading.Timer(0.4, self.server.shutdown).start()
+        return self.responde({"ok": True})
+
+
+class Servidor(socketserver.ThreadingMixIn, http.server.HTTPServer):
+    daemon_threads = True
+    allow_reuse_address = True
+
+    def server_bind(self):
+        # Bind without the stdlib's socket.getfqdn() call: it is a reverse DNS
+        # lookup for a cosmetic server_name, and on a machine with a slow or
+        # unanswered resolver it stalls the Hall's start for tens of seconds.
+        socketserver.TCPServer.server_bind(self)
+        self.server_name, self.server_port = self.server_address[:2]
+
+
+DESTINO = os.path.expanduser("~/agents-city-data")
+HALL_JS = os.path.join(os.path.dirname(AQUI), "city", "web", "dist-hall", "hall.js")
+RESULTADO = []
+
+
+def sirve(destino, abrir=True, pagina="hall"):
+    """Serve the selected city's local Hall until it is stopped."""
+    global DESTINO
+    DESTINO = destino
+    with Servidor(("127.0.0.1", 0), Manejador) as s:
+        puerto = s.server_port
+        url = f"http://127.0.0.1:{puerto}/?{FICHA}={PASE}"
+        titulo = "The town hall"
+        print(f"\n  {titulo}\n")
+        print(f"    {url}\n")
+        if abrir:
+            # A browser that will not open is not an error worth stopping for: the
+            # URL is right there above.
+            try:
+                webbrowser.open(url)
+            except Exception:
+                pass
+            print("    (opening it — if nothing happened, paste the address above)\n")
+        print("    ctrl-c to stop\n")
+        try:
+            s.serve_forever()
+        except KeyboardInterrupt:
+            print("\n  Stopped.\n")
+    return RESULTADO[-1] if RESULTADO else (None, None)
+
+
+if __name__ == "__main__":
+    sirve(sys.argv[1] if len(sys.argv) > 1 else DESTINO)