agents-city 0.5.5 → 0.5.7

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
     {
       "name": "city",
       "source": "./plugin",
-      "version": "0.5.5",
+      "version": "0.5.7",
       "description": "Operate one autonomous city seat, its domain, role, repo support agents, goal, recognised skills and explicit roads to other cities."
     }
   ]

package/README.es.md

@@ -1828,14 +1828,22 @@ global del plugin porque varias ciudades pueden ejecutarse a la vez.
 sexta pregunta del asistente o con `agents-city seat --seat-yolo on|off`;
 `--no-yolo` sigue frenando la sesión entera.
 
-`seat_reach` dice si la silla tiene manos dentro de los mounts de sus agentes.
-Está `closed` mientras no escribas `open`, y cerrado significa que una llamada a
-una herramienta que cae sobre un repo, un worktree o una carpeta de documentos
-que montó un agente se rechaza, con el nombre de quien es su dueño, su rol y el
-comando que le pregunta. La silla conserva la carpeta de la ciudad, las
-carreteras y el registro. Existe porque el fallo que evita no deja rastro: un
-asiento que lee el código y responde es idéntico a uno que consultó a sus
-especialistas.
+`seat_reach` dice si la silla trabaja con sus propias manos. Está `closed`
+mientras no escribas `open`. Cerrado significa que un asiento tiene las
+herramientas de una silla y ninguna más: su carpeta de ciudad, las puertas de
+este producto (`agents-city …`, que es toda la shell que tiene), el bus de la
+ciudad, y pensar en voz alta. Una carpeta fuera de la ciudad, un comando que no
+es una puerta, una búsqueda, una descarga o el MCP de un proveedor se rechazan
+por su nombre, diciendo a quién preguntar.
+
+Esos tres últimos son la razón de que esto vaya de herramientas y no de
+carpetas. Un asiento al que le piden una decisión de producto puede traerse sus
+propias analíticas, responder bien, no pisar el terreno de nadie — y dejar fuera
+de la conversación a todos los especialistas que le diste. Ese fallo no deja
+rastro: es idéntico a un asiento que consultó a su ciudad. Cuando llega una
+pregunta, al asiento se le pone además delante las dos listas — sus agentes, y
+las ciudades de sus carreteras con el rol que cada una dice tener — porque a
+veces la respuesta no está ni en sus carpetas ni en su ciudad.
 
 ### `<owner>.md`: ficha del asiento
 

package/README.md

@@ -1808,13 +1808,20 @@ launches the chair itself without permission prompts — set at the wizard's
 sixth question or with `agents-city seat --seat-yolo on|off`; `--no-yolo`
 still brakes the whole session.
 
-`seat_reach` says whether the chair has hands inside its agents' mounts. It is
-`closed` unless you write `open`, and closed means a tool call landing on a
-repo, worktree or document folder an agent mounted is refused, with the owner's
-name, their role and the one command that asks them. The chair keeps the city
-folder, the roads and the record. This exists because the failure it prevents is
-silent: a seat that reads the code and answers looks exactly like a seat that
-consulted its specialists.
+`seat_reach` says whether the chair works with its own hands. It is `closed`
+unless you write `open`. Closed means a seat holds a chair's tools and nothing
+else: its own city folder, this product's own doors (`agents-city …` — that is
+the whole shell it has), the city bus, and thinking out loud. A folder outside
+the city, a shell command that is not a door, a search, a fetch or a vendor's
+MCP server are refused by name, with who to ask instead.
+
+The last three are the reason this is about tools and not folders. A seat asked
+for a product decision can pull its own analytics, answer well, trespass on
+nothing — and leave every specialist it was given out of the conversation. That
+failure is silent: it looks exactly like a seat that consulted its city. When a
+question arrives, the seat is also handed both rosters — its agents, and the
+cities on its roads with the role each one says it has — because the answer is
+sometimes in neither its folders nor its own city.
 
 ### `<owner>.md`: seat card
 

package/bin/hall.html

@@ -386,6 +386,9 @@ input[type=text]:focus,select:focus{outline:none;border-color:var(--lampara)}
 /* ── the guided first run ────────────────────────────────────────────────── */
 .bv{display:flex;flex-direction:column;gap:26px;max-width:min(760px,100%)}
 .bv .prosa{max-width:100%}
+/* The consequence of a choice, under the button that makes it: quieter than the
+   question and still legible, because a warning nobody reads is decoration. */
+.bv .prosa.apunte{font-size:13px;margin-top:10px;opacity:.82}
 .bv code.mono{word-break:break-all}
 /* The live rail has nothing to show before a city exists, and it costs half
    the screen exactly when the guide needs it. */

package/bin/navegador.mjs

@@ -35,11 +35,31 @@ function dondeEstaChrome() {
   return CANDIDATOS.find((p) => existsSync(p)) || '';
 }
 
-/** Chrome prints its DevTools endpoint on stderr; that is the handshake. */
-function esperaEndpoint(proceso, limite = 20000) {
+/** Chrome prints its DevTools endpoint on stderr; that is the handshake.
+ *
+ * Sixty seconds, not twenty. This is a browser cold-starting on a shared CI
+ * runner that is also finishing two thousand other checks, and twenty seconds
+ * was a coin toss we kept winning until we did not. Waiting longer costs
+ * nothing when it works, because the wait ends at the handshake.
+ *
+ * And a timeout now carries whatever Chrome DID say. "chrome never announced
+ * its port" is a sentence about the observer: it names what we stopped waiting
+ * for and drops the one piece of evidence — a missing library, a sandbox
+ * refusal, a profile it could not write — that says which of those it was.
+ */
+function esperaEndpoint(proceso, limite = Number(process.env.CITY_BROWSER_WAIT_MS) || 60000) {
   return new Promise((listo, falla) => {
     let visto = '';
-    const reloj = setTimeout(() => falla(new Error('chrome never announced its port')), limite);
+    const reloj = setTimeout(
+      () =>
+        falla(
+          new Error(
+            `chrome never announced its port in ${limite / 1000}s` +
+              (visto.trim() ? `; it said: ${visto.trim().slice(-400)}` : ', and said nothing'),
+          ),
+        ),
+      limite,
+    );
     proceso.stderr.on('data', (trozo) => {
       visto += trozo.toString();
       const m = visto.match(/ws:\/\/[^\s]+/);
@@ -65,7 +85,9 @@ class Cdp {
       const espera = this.pendientes.get(mensaje.id);
       if (!espera) return;
       this.pendientes.delete(mensaje.id);
-      mensaje.error ? espera.falla(new Error(JSON.stringify(mensaje.error))) : espera.listo(mensaje.result);
+      mensaje.error
+        ? espera.falla(new Error(JSON.stringify(mensaje.error)))
+        : espera.listo(mensaje.result);
     });
   }
 
@@ -73,7 +95,9 @@ class Cdp {
     const socket = new WebSocket(url);
     await new Promise((listo, falla) => {
       socket.addEventListener('open', listo, { once: true });
-      socket.addEventListener('error', () => falla(new Error('cannot reach chrome')), { once: true });
+      socket.addEventListener('error', () => falla(new Error('cannot reach chrome')), {
+        once: true,
+      });
     });
     return new Cdp(socket);
   }
@@ -102,7 +126,9 @@ const dormir = (ms) => new Promise((r) => setTimeout(r, ms));
 
 let fallos = 0;
 function comprueba(texto, bien, detalle = '') {
-  console.log(`${bien ? '  ok  ·' : '  FAIL·'} ${texto}${bien || !detalle ? '' : `\n        ${detalle}`}`);
+  console.log(
+    `${bien ? '  ok  ·' : '  FAIL·'} ${texto}${bien || !detalle ? '' : `\n        ${detalle}`}`,
+  );
   if (!bien) fallos += 1;
 }
 
@@ -195,7 +221,11 @@ async function main() {
         test: boton('.rpgTest'),
       };
     })()`);
-    comprueba('the houses view renders its sheets', (abierto?.fichas ?? 0) > 0, JSON.stringify(abierto));
+    comprueba(
+      'the houses view renders its sheets',
+      (abierto?.fichas ?? 0) > 0,
+      JSON.stringify(abierto),
+    );
     for (const [control, etiqueta] of [
       ['alta', 'the build-a-house button'],
       ['instrucciones', 'the CLAUDE.md / AGENTS.md editors'],
@@ -316,8 +346,11 @@ async function main() {
     })()`);
     comprueba(
       'the house form walks the disk — nothing offered, you pick what you want',
-      (casa?.filas ?? 0) > 0 && !!casa?.sube && !!casa?.tomaAqui &&
-        casa.dondeDespues !== casa.dondeAntes && (casa?.elegidas ?? 0) > 0,
+      (casa?.filas ?? 0) > 0 &&
+        !!casa?.sube &&
+        !!casa?.tomaAqui &&
+        casa.dondeDespues !== casa.dondeAntes &&
+        (casa?.elegidas ?? 0) > 0,
       JSON.stringify(casa),
     );
     comprueba(
@@ -468,13 +501,16 @@ async function main() {
     })()`);
     comprueba(
       'thirty connected people use one recipient picker, not thirty message boxes',
-      reception?.navRole === 'button' && reception?.navTabIndex === '0' &&
-        reception?.composers === 1 && reception?.recipients === 30,
+      reception?.navRole === 'button' &&
+        reception?.navTabIndex === '0' &&
+        reception?.composers === 1 &&
+        reception?.recipients === 30,
       JSON.stringify(reception),
     );
     comprueba(
       'pending messages stay above composing and use distinct route/reject language',
-      reception?.messages === 1 && reception?.reviewFirst === true &&
+      reception?.messages === 1 &&
+        reception?.reviewFirst === true &&
         /route|dirigir/i.test(reception?.route ?? '') &&
         /reason|motivo/i.test(reception?.rejection ?? ''),
       JSON.stringify(reception),
@@ -687,8 +723,11 @@ async function main() {
     })()`);
     comprueba(
       'the language switch really translates the page, and remembers it',
-      !!lengua && !lengua.falta && lengua.despues !== lengua.antes &&
-        /casas|resumen|mapa/i.test(lengua.despues) && lengua.guardado === lengua.lang &&
+      !!lengua &&
+        !lengua.falta &&
+        lengua.despues !== lengua.antes &&
+        /casas|resumen|mapa/i.test(lengua.despues) &&
+        lengua.guardado === lengua.lang &&
         lengua.etiqueta !== lengua.etiquetaAntes,
       JSON.stringify(lengua),
     );
@@ -698,8 +737,14 @@ async function main() {
       JSON.stringify(lengua?.marca),
     );
 
-    const errores = await cdp.evalua('window.__erroresDePagina ? window.__erroresDePagina.length : 0');
-    comprueba('the page raised no uncaught errors while we drove it', errores === 0, String(errores));
+    const errores = await cdp.evalua(
+      'window.__erroresDePagina ? window.__erroresDePagina.length : 0',
+    );
+    comprueba(
+      'the page raised no uncaught errors while we drove it',
+      errores === 0,
+      String(errores),
+    );
   } finally {
     proceso.kill('SIGKILL');
   }

package/bin/test

@@ -92,6 +92,7 @@ necesarios = ["bin/agents-city.js", "bin/hall", "bin/seat", "bin/city", "bin/dem
               "plugin/scripts/reset.py", "plugin/scripts/desinstala.py",
               "plugin/scripts/demos.py", "plugin/scripts/arnes.py",
               "plugin/scripts/diario.py", "plugin/scripts/alcance.py",
+              "plugin/scripts/consulta.py",
               "plugin/channel/runtime/arnes.json", "plugin/scripts/capabilities.py",
               "plugin/scripts/deliberations.py",
               "plugin/scripts/runtime_processes.py",

package/bin/test-alcance.py

@@ -32,7 +32,9 @@ sys.path.insert(0, os.path.join(RAIZ, "plugin", "scripts"))
 
 import alcance  # noqa: E402
 import cities  # noqa: E402
+import consulta  # noqa: E402
 import diario  # noqa: E402
+import roads  # noqa: E402
 import seat as S  # noqa: E402
 import workspace  # noqa: E402
 from testlib import afirma, comprueba, resumen, roster  # noqa: E402
@@ -82,6 +84,10 @@ def juzga(datos, herramienta, entrada, cwd=None, **extra):
     )
 
 
+def decision_de(veredicto):
+    return ((veredicto or {}).get("hookSpecificOutput") or {}).get("permissionDecision", "")
+
+
 def razon(veredicto):
     return ((veredicto or {}).get("hookSpecificOutput") or {}).get("permissionDecisionReason", "")
 
@@ -113,14 +119,21 @@ def lo_que_sigue_pudiendo(datos, api):
         is None,
     )
     afirma(
-        "· happy: a shell command that names no place at all",
-        juzga(datos, "Bash", {"command": "git status"}) is None,
+        "· happy: and its own record, written not just read",
+        juzga(datos, "Write", {"file_path": os.path.join(datos, "roles", "cpto.md")}) is None,
+    )
+    afirma(
+        "· happy: the bus is its voice, so its own bus tools pass",
+        all(juzga(datos, t, {}) is None for t in
+            ("mcp__city-bus__bus_roster", "mcp__plugin_city_city-bus__bus_send")),
     )
     afirma(
-        "· happy: somewhere nobody in this city owns",
-        juzga(datos, "Read", {"file_path": os.path.join(datos, "..", "nada.txt")}) is None,
+        "· happy: and thinking out loud costs nobody anything",
+        all(juzga(datos, t, {}) is None
+            for t in ("TodoWrite", "Skill", "SlashCommand", "ExitPlanMode")),
     )
 
+
     # The refusal recommends `agents-city committee open --question "..."`, and a
     # brief about a repo names that repo. A guard that denies its own remedy is
     # a guard that just stops the seat.
@@ -137,28 +150,23 @@ def lo_que_sigue_pudiendo(datos, api):
         "· happy: and neither is the repo's own committee door",
         juzga(datos, "Bash", {"command": f"./bin/committee open --member api # {api}"}) is None,
     )
-    # Prose that happens to contain a path is prose.
+    # A brief quotes the folder it is about. That prose must survive inside the
+    # one shell a chair has, or the refusal would be denying its own remedy.
     afirma(
-        "· happy: a quoted sentence that mentions a folder is not a hand in it",
-        juzga(datos, "Bash", {"command": f'echo "the answer is somewhere under {api}/app"'})
-        is None,
+        "· happy: a door whose question quotes a folder is still a door",
+        juzga(datos, "Bash", {
+            "command": f'agents-city committee open --member api '
+                       f'--question "what should change under {api}/app"'}) is None,
     )
     afirma(
-        "· happy: even when the sentence starts with the folder",
-        juzga(datos, "Bash", {"command": f'echo "{api}/app is where it lives"'}) is None,
+        "· happy: even when the question starts with the folder",
+        juzga(datos, "Bash", {
+            "command": f'agents-city committee open --member api '
+                       f'--question "{api}/app is where it lives"'}) is None,
     )
     afirma(
         "· happy: and a sibling folder whose name merely starts the same way",
-        juzga(datos, "Read", {"file_path": f"{api}-viejo/router.rb"}) is None,
-    )
-    # The other side of that tiebreaker: a folder with a space in its name is a
-    # real folder, and plenty of people have one.
-    con_espacio = os.path.join(os.path.dirname(api), "api", "app", "mis notas.md")
-    open(con_espacio, "w").write("# notas\n")
-    afirma(
-        "· non-happy: a real path with a space in it is still that agent's ground",
-        juzga(datos, "Bash", {"command": f'cat "{con_espacio}"'}) is not None,
-        con_espacio,
+        juzga(datos, "Read", {"file_path": os.path.join(datos, "roles")}) is None,
     )
 
     afirma(
@@ -265,6 +273,64 @@ def lo_que_ya_no_puede(datos, api, docs):
     )
 
 
+# ── a chair holds a chair's tools ────────────────────────────────────────────
+
+
+def las_manos_de_una_silla(datos, api):
+    """The half that folders never covered.
+
+    A seat asked for a product decision read nobody's files, trespassed on
+    nothing, called two of its vendor's SEO tools and answered alone — while
+    three configured specialists never heard the question. A guard that only
+    watches folders records that as a clean turn, which is why the rule is now
+    what a chair IS rather than where it may go.
+    """
+    print("  and it holds a chair's tools, not the work's")
+
+    fuera_de_la_ciudad = [
+        ("a search", "WebSearch", {"query": "menu information architecture"}),
+        ("a fetch", "WebFetch", {"url": "https://example.invalid/x"}),
+        ("somebody else's MCP server", "mcp__claude_ai_Nexo__seo_get_site_context", {}),
+        ("another vendor's, spelled differently", "mcp__slack__slack_send_message", {}),
+        ("hiring hands that are not its houses", "Task", {"prompt": "go and find out"}),
+        ("a shell that is not a door", "Bash", {"command": "ls -la"}),
+        ("a shell that leaves the machine", "Bash", {"command": "curl https://example.invalid"}),
+        ("a file that belongs to nobody here", "Read", {"file_path": "/etc/hosts"}),
+    ]
+    for nombre, herramienta, entrada in fuera_de_la_ciudad:
+        v = juzga(datos, herramienta, entrada)
+        afirma(f"· non-happy: {nombre}", (v or {}) and decision_de(v) == "deny",
+               f'{herramienta} {json.dumps(entrada)[:80]}')
+
+    # The one from the report, in full: nothing is trespassed and the answer is
+    # still one model's.
+    texto = razon(juzga(datos, "mcp__claude_ai_Nexo__seo_get_site_context", {}))
+    afirma("· the refusal says why a clean turn is still the wrong turn",
+           "leaves no trace" in texto, texto[:300])
+    afirma("· and names everyone this city has, with their roles",
+           "api" in texto and "dev" in texto and "manual" in texto and "seo" in texto,
+           texto[:400])
+    afirma("· and how to ask one of them",
+           "agents-city committee open" in texto and "--member" in texto, texto[:400])
+    afirma("· and that the answer may not be in this city at all",
+           "bus_roster" in texto and "bus_send" in texto, texto[-500:])
+
+    afirma("· non-happy: and a bare shell says what a chair's shell is",
+           "agents-city committee" in razon(juzga(datos, "Bash", {"command": "ls -la"})))
+
+    # A chair with nobody to ask is a person with a terminal.
+    sola = tempfile.mkdtemp()
+    with open(os.path.join(sola, "city.yml"), "w", encoding="utf-8") as f:
+        f.write("owner: ana\nname: sola\nslug: sola\nid: city-alcance-sola\n")
+    S.escribe_ficha(os.path.join(sola, "ana.md"), "ana", "cpto", [])
+    afirma(
+        "· happy: a city with no agents yet does not come with its seat bricked",
+        juzga(sola, "WebSearch", {"query": "anything"}) is None
+        and juzga(sola, "Bash", {"command": "ls"}) is None,
+    )
+    shutil.rmtree(sola, ignore_errors=True)
+
+
 # ── the owner decides, and the guard never decides for them ──────────────────
 
 
@@ -274,7 +340,8 @@ def la_puerta_del_dueno(datos, api):
     afirma("· closed is the default", juzga(datos, "Read", dentro) is not None)
     afirma(
         "· happy: CITY_SEAT_REACH=open gives the chair its hands, now",
-        juzga(datos, "Read", dentro, CITY_SEAT_REACH="open") is None,
+        juzga(datos, "Read", dentro, CITY_SEAT_REACH="open") is None
+        and juzga(datos, "WebSearch", {"query": "x"}, CITY_SEAT_REACH="open") is None,
     )
     cities.pon_clave(datos, "seat_reach", "open")
     try:
@@ -291,6 +358,77 @@ def la_puerta_del_dueno(datos, api):
     )
 
 
+# ── and it is told who it has, when the question arrives ─────────────────────
+
+
+def el_momento_de_decidir(datos):
+    """Stopping the chair is half of it; the other half is knowing who to ask.
+
+    A refusal that arrives after the seat has started is a correction. The plan
+    has to happen where the question lands — and it has to carry BOTH rosters,
+    because a city can be missing the answer in two ways: no agent here does
+    that work, or the answer belongs to somebody else's city entirely.
+    """
+    print("  and it is told who it has, at the moment the question arrives")
+    roads.escribe(datos, [{
+        "id": "road_0000000000000000000000000000abcd",
+        "address": "bea/comunidad",
+        "owner": "bea",
+        "name": "comunidad",
+        "role": "ux",
+        "domain": "marketing",
+        "local": True,
+    }])
+    nota = consulta.contexto(datos)
+    afirma("· it names every agent in this city, with its role",
+           "api" in nota and "dev" in nota and "manual" in nota and "seo" in nota, nota)
+    afirma("· and how much ground each of them holds",
+           "1 folder" in nota, nota)
+    afirma("· it names the cities on the roads too, with what they do",
+           "bea/comunidad" in nota and "ux" in nota and "marketing" in nota, nota)
+    afirma("· and says a road's role came from a note, not from that city",
+           "note" in nota, nota)
+    afirma("· it offers both routes, because the answer may be in neither place",
+           "agents-city committee open" in nota and "bus_send" in nota, nota)
+    afirma("· and says that deciding nobody is a decision, not a shortcut",
+           "concerns nobody" in nota, nota[-400:])
+
+    def por_el_gancho(prompt, **extra):
+        env = dict(os.environ)
+        env.update({"CLAUDE_PLUGIN_ROOT": os.path.join(RAIZ, "plugin"),
+                    "AGENTS_CITY_DATA": datos, "CITY_BUS_ACTOR": "seat"})
+        env.update(extra)
+        r = subprocess.run(
+            ["/bin/bash", os.path.join(RAIZ, "plugin", "hooks", "who-does-this-concern.sh")],
+            input=json.dumps({"prompt": prompt}), capture_output=True, text=True, env=env,
+        )
+        try:
+            return json.loads(r.stdout or "{}"), r
+        except ValueError:
+            return {}, r
+
+    salida, r = por_el_gancho("I want to improve the menu, people cannot find things")
+    afirma("· the hook itself puts it in front of the seat",
+           "api" in ((salida.get("hookSpecificOutput") or {}).get("additionalContext") or ""),
+           f"{r.stdout[:200]} {r.stderr[-200:]}")
+    salida, _ = por_el_gancho("/city:round")
+    comprueba("· non-happy: a slash command already carries its own instructions",
+              salida, {})
+    salida, _ = por_el_gancho("sigue")
+    comprueba("· non-happy: and a two-word reply is not a question to route", salida, {})
+    salida, _ = por_el_gancho("I want to improve the menu, people cannot find things",
+                              CITY_BUS_ACTOR="api")
+    comprueba("· non-happy: a house is not chairing anything", salida, {})
+    salida, _ = por_el_gancho("I want to improve the menu, people cannot find things",
+                              AGENTS_CITY_DATA="")
+    comprueba("· non-happy: and with no city there is nobody to name", salida, {})
+    roads.escribe(datos, [])
+
+    hooks = json.load(open(os.path.join(RAIZ, "plugin", "hooks", "hooks.json")))
+    afirma("· and Claude is told to run it when a prompt arrives",
+           "who-does-this-concern.sh" in json.dumps(hooks["hooks"]["UserPromptSubmit"]))
+
+
 # ── a guard that breaks a turn is worse than no guard ────────────────────────
 
 
@@ -356,7 +494,8 @@ def nunca_rompe_el_turno(datos, api):
         "· non-happy: a tool_input that is not an object",
         juzga(datos, "Read", "no soy un objeto") is None,
     )
-    afirma("· non-happy: an empty command", juzga(datos, "Bash", {"command": ""}) is None)
+    afirma("· non-happy: an empty command is not a door either",
+           juzga(datos, "Bash", {"command": ""}) is not None)
     afirma(
         "· non-happy: an unbalanced quote still gets read",
         juzga(datos, "Bash", {"command": f"grep -r ' {api}/app"}) is not None,
@@ -388,12 +527,12 @@ def nunca_rompe_el_turno(datos, api):
 def queda_escrito(datos, api):
     print("  every refusal is on disk before anybody has to remember it")
     antes = len(diario.lee(datos))
-    juzga(datos, "Bash", {"command": f"grep -rn router {api}"})
+    juzga(datos, "Grep", {"pattern": "router", "path": api})
     lineas = [x for x in diario.lee(datos) if x.get("tipo") == "alcance"]
     afirma("· the refusal is journalled", len(diario.lee(datos)) > antes and lineas, str(lineas))
     ultima = lineas[-1]
     comprueba("· with the agent whose ground it was", ultima.get("agente"), "api")
-    comprueba("· and the tool that tried", ultima.get("herramienta"), "Bash")
+    comprueba("· and the tool that tried", ultima.get("herramienta"), "Grep")
     afirma("· and the exact path", api in str(ultima.get("ruta")), str(ultima))
 
 
@@ -440,8 +579,9 @@ def el_gancho_de_verdad(datos, api):
     # nobody registered is a file.
     hooks = json.load(open(os.path.join(RAIZ, "plugin", "hooks", "hooks.json")))
     texto = json.dumps(hooks["hooks"]["PreToolUse"])
-    afirma("· and Claude is told to run it before every tool that names a place",
-           "ask-the-house.sh" in texto and "Bash" in texto and "Grep" in texto, texto[:400])
+    afirma("· and Claude is told to run it before EVERY tool, not a list of them",
+           "ask-the-house.sh" in texto and '"matcher": "*"' in texto,
+           'a list of tools is a list of the ways somebody thought of')
 
 
 def main():
@@ -451,6 +591,8 @@ def main():
     try:
         lo_que_sigue_pudiendo(datos, api)
         lo_que_ya_no_puede(datos, api, docs)
+        las_manos_de_una_silla(datos, api)
+        el_momento_de_decidir(datos)
         la_puerta_del_dueno(datos, api)
         nunca_se_lleva_la_ciudad_por_delante(base, api)
         nunca_rompe_el_turno(datos, api)

package/bin/test-e2e.py

@@ -298,8 +298,8 @@ def main():
         propio, _ = llama_al_gancho(mundo, sesion, "Read", {"file_path": ficha})
         comprueba("· happy: its own card is its own business", decision(propio), "")
         ajeno, bruto = llama_al_gancho(
-            mundo, sesion, "Bash",
-            {"command": f"cd {mundo.repo} && grep -rn router app"},
+            mundo, sesion, "Read",
+            {"file_path": os.path.join(mundo.repo, "app", "router.rb")},
         )
         comprueba("· non-happy: its agent's repo is not", decision(ajeno), "deny")
         afirma(
@@ -315,6 +315,18 @@ def main():
             decision(otro) == "deny" and "manual" in motivo(otro),
             motivo(otro)[:200],
         )
+        # The half that folders never covered: work that trespasses on nobody.
+        vendedor, _ = llama_al_gancho(
+            mundo, sesion, "mcp__claude_ai_Nexo__seo_get_site_context", {})
+        afirma(
+            "· non-happy: and neither is a vendor's tool that touches nobody's files",
+            decision(vendedor) == "deny" and "api" in motivo(vendedor)
+            and "bus_send" in motivo(vendedor),
+            motivo(vendedor)[:300],
+        )
+        suelto, _ = llama_al_gancho(mundo, sesion, "Bash", {"command": "ls -la /"})
+        comprueba("· non-happy: nor a shell that is not one of this product's doors",
+                  decision(suelto), "deny")
         puerta, _ = llama_al_gancho(
             mundo, sesion, "Bash",
             {"command": f'agents-city committee open --member api --question "about {mundo.repo}"'},

package/bin/test-navegador.py

@@ -145,9 +145,43 @@ def bundle_al_dia():
     return "rebuilt from src/hall.ts"
 
 
+def un_chrome_que_no_arranca():
+    """What the driver says when the browser never answers.
+
+    This suite has exactly one way to fail without telling anybody anything, and
+    CI found it: `chrome never announced its port` names what we stopped waiting
+    for and drops the only evidence of why — a missing library, a sandbox
+    refusal, a profile it could not write. A stub browser that talks and never
+    announces proves the message carries what it heard.
+
+    CHROME_PATH is the first candidate the driver considers, which is what makes
+    this testable without a browser at all.
+    """
+    print("  and a browser that never starts says why")
+    casa = tempfile.mkdtemp()
+    falso = os.path.join(casa, "chrome")
+    with open(falso, "w", encoding="utf-8") as f:
+        f.write("#!/bin/bash\n"
+                "echo 'FATAL: could not open display, and this is the useful half' >&2\n"
+                "sleep 30\n")
+    os.chmod(falso, 0o755)
+    salida = subprocess.run(
+        ["node", os.path.join(RAIZ, "bin", "navegador.mjs"), "http://127.0.0.1:1/"],
+        capture_output=True, text=True, timeout=90,
+        env=dict(os.environ, CHROME_PATH=falso, CITY_BROWSER_WAIT_MS="1500"),
+    )
+    shutil.rmtree(casa, ignore_errors=True)
+    todo = salida.stdout + salida.stderr
+    afirma("· the timeout names what it waited for",
+           "never announced its port" in todo, todo[-300:])
+    afirma("· and repeats what the browser actually said",
+           "could not open display" in todo, todo[-300:])
+
+
 def main():
     print()
     print("  the hall, in a browser that clicks")
+    un_chrome_que_no_arranca()
     print(f"  · {bundle_al_dia()}")
     datos = tempfile.mkdtemp()
     casa = tempfile.mkdtemp()

package/bin/test-seat.py

@@ -1521,6 +1521,11 @@ def arranque_escalonado():
         corre(**extra)
         return open(registro).read()
 
+    primera = crudo(CITY_SETTLE="0", CITY_STAGGER="0")
+    afirma(
+        "· happy: a city opened for the first time gets its tmux comforts",
+        "set-option" in primera, primera[:300],
+    )
     log = crudo(FAKE_SESSION="1", FAKE_WINDOWS="seat api", CITY_SETTLE="0", CITY_STAGGER="0")
     afirma(
         "· happy: an agent added to a running city gets its window",
@@ -1542,6 +1547,12 @@ def arranque_escalonado():
         "new-session" not in log,
         log[:600],
     )
+    afirma(
+        "· non-happy: and a running session's tmux options are left exactly as found",
+        "set-option" not in log,
+        "re-applying `set -g mouse on` under a live full-screen app types raw SGR "
+        "sequences into its prompt: " + log[:400],
+    )
     afirma(
         "· the new house is what you are looking at when it opens",
         "select-window" in log and ":docs" in log.split("select-window")[-1][:40],