agents-city 0.5.2 → 0.5.4

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
     {
       "name": "city",
       "source": "./plugin",
-      "version": "0.5.2",
+      "version": "0.5.4",
       "description": "Operate one autonomous city seat, its domain, role, repo support agents, goal, recognised skills and explicit roads to other cities."
     }
   ]

package/README.es.md

@@ -653,6 +653,7 @@ agents-city seat --no-yolo --no-sync
 | `--model ALIAS` | override de modelo para todas las ventanas de este arranque |
 | `--effort LEVEL` | override `low`, `medium`, `high`, `xhigh` o `max` para este arranque |
 | `--seat-yolo on\|off` | si el propio asiento corre sin preguntar permisos; persiste por ciudad (`seat_yolo` en `city.yml`, también la sexta pregunta del asistente). En local el asiento son las manos del dueño; las ventanas de repo conservan su propia historia de yolo/jaula |
+| `--seat-reach open\|closed` | si el propio asiento puede trabajar dentro de los mounts de sus agentes; persiste por ciudad (`seat_reach` en `city.yml`). Cerrado por defecto: el asiento pregunta al agente dueño de ese terreno en vez de leerlo, y el rechazo dice quién es y con qué comando se le pregunta |
 | `--no-yolo` | desactiva autoaprobación en este arranque — asiento incluido, diga lo que diga `seat_yolo` |
 | `--no-sync` | no hace `git fetch/pull` inicial en repos de este arranque |
 
@@ -1818,6 +1819,7 @@ slug: producto
 owner: alice
 domain: software
 seat_yolo: 1
+seat_reach: closed
 ```
 
 El address público se deriva como `owner/slug`; no se guarda como una identidad
@@ -1826,6 +1828,15 @@ global del plugin porque varias ciudades pueden ejecutarse a la vez.
 sexta pregunta del asistente o con `agents-city seat --seat-yolo on|off`;
 `--no-yolo` sigue frenando la sesión entera.
 
+`seat_reach` dice si la silla tiene manos dentro de los mounts de sus agentes.
+Está `closed` mientras no escribas `open`, y cerrado significa que una llamada a
+una herramienta que cae sobre un repo, un worktree o una carpeta de documentos
+que montó un agente se rechaza, con el nombre de quien es su dueño, su rol y el
+comando que le pregunta. La silla conserva la carpeta de la ciudad, las
+carreteras y el registro. Existe porque el fallo que evita no deja rastro: un
+asiento que lee el código y responde es idéntico a uno que consultó a sus
+especialistas.
+
 ### `<owner>.md`: ficha del asiento
 
 Es Markdown con frontmatter. Contiene el rol del asiento, repos, rol de cada repo,

package/README.md

@@ -644,6 +644,7 @@ agents-city seat --no-yolo --no-sync
 | `--model ALIAS` | model override for all windows in this launch |
 | `--effort LEVEL` | `low`, `medium`, `high`, `xhigh`, or `max` override for this launch |
 | `--seat-yolo on\|off` | whether the chair itself runs without permission prompts; persists per city (`city.yml seat_yolo`, also question six of the wizard). Locally the seat is the owner's own hands; repo windows keep their own yolo/cage story either way |
+| `--seat-reach open\|closed` | whether the chair may work inside its agents' mounts; persists per city (`city.yml seat_reach`). Closed by default: the seat asks the agent who owns that ground instead of reading it, and a refusal names them and the command |
 | `--no-yolo` | disable auto-approval for this launch — seat included, whatever `seat_yolo` says |
 | `--no-sync` | skip initial `git fetch/pull` in repos for this launch |
 
@@ -1798,6 +1799,7 @@ slug: product
 owner: alice
 domain: software
 seat_yolo: 1
+seat_reach: closed
 ```
 
 The public address is derived as `owner/slug`. It is not stored as one global
@@ -1806,6 +1808,14 @@ launches the chair itself without permission prompts — set at the wizard's
 sixth question or with `agents-city seat --seat-yolo on|off`; `--no-yolo`
 still brakes the whole session.
 
+`seat_reach` says whether the chair has hands inside its agents' mounts. It is
+`closed` unless you write `open`, and closed means a tool call landing on a
+repo, worktree or document folder an agent mounted is refused, with the owner's
+name, their role and the one command that asks them. The chair keeps the city
+folder, the roads and the record. This exists because the failure it prevents is
+silent: a seat that reads the code and answers looks exactly like a seat that
+consulted its specialists.
+
 ### `<owner>.md`: seat card
 
 This is Markdown with frontmatter. It stores the seat role, repos, each repo

package/benchmarks/latency/fake-claude-cli.mjs

@@ -72,7 +72,8 @@ function runNext() {
   working = true;
   const message = queue.shift();
   const text = userText(message);
-  const delay = behavior() === 'slow' ? 350 : 5;
+  const mode = behavior();
+  const delay = mode === 'slow-long' ? 1_500 : mode === 'slow' ? 350 : 5;
   setTimeout(() => {
     emit({
       type: 'assistant',
@@ -103,7 +104,7 @@ function userText(message) {
   const content = message?.message?.content;
   if (typeof content === 'string') return content;
   if (!Array.isArray(content)) return '';
-  return content.map((block) => block?.type === 'text' ? String(block.text || '') : '').join('');
+  return content.map((block) => (block?.type === 'text' ? String(block.text || '') : '')).join('');
 }
 
 function emit(value) {

package/bin/serve.py

@@ -224,6 +224,24 @@ def olvida_crecimiento(datos, slug):
     _CRECIDO.pop((os.path.realpath(datos), slug), None)
 
 
+def refresca_roster(ficha, datos):
+    """Bring the card's `## Agents` list back in line with its frontmatter.
+
+    The Hall writes the roster as frontmatter keys, which is what the launcher,
+    the cage and the map read — and for a while that was the whole of it. But
+    the seat reads the BODY: the list under `## Agents` is what the chair is
+    told its city contains. So a person who added two houses from the Hall got
+    two windows and a card that still said, in prose, that they had one. Every
+    door that changes the roster passes through here.
+    """
+    texto = card.lee(ficha).get("texto") or ""
+    try:
+        agentes = workspace.agentes(texto, datos)
+    except (OSError, ValueError):
+        return
+    card.cambia_agentes(ficha, [workspace.como_ficha(a) for a in agentes])
+
+
 def _crecimiento_cacheado(a, datos, vida=90):
     import time
 
@@ -619,6 +637,27 @@ class Manejador(http.server.BaseHTTPRequestHandler):
     _ultimo = None
     _error = None
 
+    def _ciudad_para_apuntar(self, q):
+        """The same city `ciudad` would resolve, resolved without touching it.
+
+        `ciudad` calls `asegura_metadata`, which does `makedirs` and writes
+        `city.yml` — right when a request is about to act on a city, and wrong
+        when the only reason we are asking is to write a log line. The journal
+        runs AFTER the handler, so on a request that archived or reset a city it
+        recreated the very folder that had just been taken away, leaving a ghost
+        behind. Observing something must not create it.
+        """
+        pedida = q.get("city", [""])[0]
+        if pedida:
+            resuelta = self.resuelve_conocida(pedida, tocando=False)
+            if resuelta:
+                return resuelta
+        # And not `donde_viven_las_fichas`, which resolves through `cities.actual`
+        # — a resolver that migrates, heals and will CREATE `home` when there is
+        # none. Asking it where to write a log line is how a request that removed
+        # a city brought it back.
+        return cities.actual_sin_tocar()
+
     def apunta(self, q, tipo, **campos):
         """One journal line, in the journal of the city the request acted on.
 
@@ -628,7 +667,11 @@ class Manejador(http.server.BaseHTTPRequestHandler):
         record, because it is a record that lies about where.
         """
         try:
-            diario.apunta(self.ciudad(q), tipo, **campos)
+            donde = self._ciudad_para_apuntar(q)
+            # No city, no line. A journal with nowhere to go must not be handed a
+            # folder invented for it — that is the same bug wearing a default.
+            if donde:
+                diario.apunta(donde, tipo, **campos)
         except Exception:  # noqa: BLE001  logging must not break the request
             pass
 
@@ -670,12 +713,23 @@ class Manejador(http.server.BaseHTTPRequestHandler):
             return False
         return True
 
-    def resuelve_conocida(self, pedida):
-        """Resolve only cities already in this Hall; never arbitrary folders."""
+    def resuelve_conocida(self, pedida, tocando=True):
+        """Resolve only cities already in this Hall; never arbitrary folders.
+
+        `tocando=False` makes the whole resolution read-only, for the journal:
+        both the listing and the fallback to the selected city are repairers by
+        default, and repairing something in order to write a line about it is
+        how a deleted city comes back.
+        """
         usuario = seat.quien_soy()
-        actual = seat.donde_viven_las_fichas()
-        candidatas = cities.lista(usuario)
-        if not any(os.path.realpath(c["ruta"]) == os.path.realpath(actual) for c in candidatas):
+        actual = seat.donde_viven_las_fichas() if tocando else cities.actual_sin_tocar()
+        candidatas = cities.lista(usuario, tocando=tocando)
+        # The selected city, when the listing did not already cover it. With no
+        # city selected at all there is nothing to add, and asking anyway would
+        # hand `identidad('')` the current working directory.
+        if actual and not any(
+            os.path.realpath(c["ruta"]) == os.path.realpath(actual) for c in candidatas
+        ):
             candidatas.append(
                 {
                     "ruta": actual,
@@ -1426,6 +1480,7 @@ class Manejador(http.server.BaseHTTPRequestHandler):
         for clave, valor in workspace.claves_de_roster(roster).items():
             card.pon_campo(ficha, clave, valor)
         workspace.crea_workspace(datos, slug)
+        refresca_roster(ficha, datos)
         return self.responde({"ok": True, "agent": slug, "name": nombre})
 
     def p_montaje(self, q, cuerpo):
@@ -1478,6 +1533,8 @@ class Manejador(http.server.BaseHTTPRequestHandler):
         # "this agent declares no mounts" in a longer, staler way.
         lista = ("[" + ", ".join(fuentes) + "]") if fuentes else ""
         card.pon_campo(ficha, f"mounts.{a.slug}", lista)
+        # The body counts mounts out loud ("2 mounts"), so it moves too.
+        refresca_roster(ficha, datos)
         # What this agent works on just changed, which is exactly what growth
         # counts: remembering the old number for 90s would read as a failed mount.
         olvida_crecimiento(datos, a.slug)

package/bin/test

@@ -22,7 +22,7 @@ if [ -d .git ] && [ -x .githooks/pre-commit ] \
     && printf '  pre-commit gate armed (core.hooksPath .githooks)\n'
 fi
 
-SUITES=(widgets card parcels domains busca arnes i18n diario serve seat cities channel connect committee live-feed runtime claude-runtime runtime-ui runtime-failures stress adapter benchmark demo contracts exit rutas cage broker evidencia admision pairing hall-protocol doctor security workspace avatar crecimiento atajos navegador actualiza desinstala launch)
+SUITES=(widgets card parcels domains busca arnes i18n diario alcance serve seat cities channel connect committee live-feed runtime claude-runtime runtime-ui runtime-failures stress adapter benchmark demo contracts exit rutas cage broker evidencia admision pairing hall-protocol doctor security workspace avatar crecimiento atajos navegador actualiza desinstala launch e2e)
 [ $# -gt 0 ] && SUITES=("$@")
 
 fallos=0
@@ -91,7 +91,7 @@ necesarios = ["bin/agents-city.js", "bin/hall", "bin/seat", "bin/city", "bin/dem
               "plugin/scripts/crecimiento.py",
               "plugin/scripts/reset.py", "plugin/scripts/desinstala.py",
               "plugin/scripts/demos.py", "plugin/scripts/arnes.py",
-              "plugin/scripts/diario.py",
+              "plugin/scripts/diario.py", "plugin/scripts/alcance.py",
               "plugin/channel/runtime/arnes.json", "plugin/scripts/capabilities.py",
               "plugin/scripts/deliberations.py",
               "plugin/scripts/runtime_processes.py",