agents-city 0.5.6 → 0.5.8

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
     {
       "name": "city",
       "source": "./plugin",
-      "version": "0.5.6",
+      "version": "0.5.8",
       "description": "Operate one autonomous city seat, its domain, role, repo support agents, goal, recognised skills and explicit roads to other cities."
     }
   ]

package/README.es.md

@@ -1828,6 +1828,18 @@ global del plugin porque varias ciudades pueden ejecutarse a la vez.
 sexta pregunta del asistente o con `agents-city seat --seat-yolo on|off`;
 `--no-yolo` sigue frenando la sesión entera.
 
+`ui.<agente>` elige qué se abre en una ventana: `tui` es el Claude Code de esa
+persona — sus plugins, su statusline, sus comandos — y `gateway` es el prompt de
+la ciudad con el runtime headless detrás. La silla usa `tui` por defecto y una
+casa `gateway`, y los dos defectos son los útiles: una silla es donde te sientas,
+y una casa es donde llega el trabajo sin que nadie se siente en ella, con la
+conversación entera apareciendo en el Hall.
+
+El intercambio se dice, no se esconde. El TUI de Claude Code no tiene puerta de
+entrada, así que una ventana en `tui` recibe su trabajo como un pegado protegido
+en el pane, y el lanzador avisa de que la entrega nativa no está disponible ahí.
+Es el mismo trato que la silla lleva haciendo desde siempre.
+
 `seat_reach` dice si la silla trabaja con sus propias manos. Está `closed`
 mientras no escribas `open`. Cerrado significa que un asiento tiene las
 herramientas de una silla y ninguna más: su carpeta de ciudad, las puertas de

package/README.md

@@ -1808,6 +1808,18 @@ launches the chair itself without permission prompts — set at the wizard's
 sixth question or with `agents-city seat --seat-yolo on|off`; `--no-yolo`
 still brakes the whole session.
 
+`ui.<agent>` chooses what opens in a window: `tui` is that person's own Claude
+Code — their plugins, their statusline, their slash commands — and `gateway` is
+the city's own prompt with the runtime headless behind it. The chair defaults to
+`tui` and a house to `gateway`, and both defaults are the useful ones: a chair is
+where you sit, and a house is where work arrives without anybody sitting in it,
+with the whole conversation showing up in the Hall.
+
+The trade is stated rather than hidden. Claude Code's TUI has no inbound door,
+so a `tui` window receives its work as a protected paste into the pane, and the
+launcher warns that native delivery is unavailable for it. That is the same
+bargain the chair has always made.
+
 `seat_reach` says whether the chair works with its own hands. It is `closed`
 unless you write `open`. Closed means a seat holds a chair's tools and nothing
 else: its own city folder, this product's own doors (`agents-city …` — that is

package/bin/hall.html

@@ -386,6 +386,9 @@ input[type=text]:focus,select:focus{outline:none;border-color:var(--lampara)}
 /* ── the guided first run ────────────────────────────────────────────────── */
 .bv{display:flex;flex-direction:column;gap:26px;max-width:min(760px,100%)}
 .bv .prosa{max-width:100%}
+/* The consequence of a choice, under the button that makes it: quieter than the
+   question and still legible, because a warning nobody reads is decoration. */
+.bv .prosa.apunte{font-size:13px;margin-top:10px;opacity:.82}
 .bv code.mono{word-break:break-all}
 /* The live rail has nothing to show before a city exists, and it costs half
    the screen exactly when the guide needs it. */

package/bin/navegador.mjs

@@ -35,11 +35,31 @@ function dondeEstaChrome() {
   return CANDIDATOS.find((p) => existsSync(p)) || '';
 }
 
-/** Chrome prints its DevTools endpoint on stderr; that is the handshake. */
-function esperaEndpoint(proceso, limite = 20000) {
+/** Chrome prints its DevTools endpoint on stderr; that is the handshake.
+ *
+ * Sixty seconds, not twenty. This is a browser cold-starting on a shared CI
+ * runner that is also finishing two thousand other checks, and twenty seconds
+ * was a coin toss we kept winning until we did not. Waiting longer costs
+ * nothing when it works, because the wait ends at the handshake.
+ *
+ * And a timeout now carries whatever Chrome DID say. "chrome never announced
+ * its port" is a sentence about the observer: it names what we stopped waiting
+ * for and drops the one piece of evidence — a missing library, a sandbox
+ * refusal, a profile it could not write — that says which of those it was.
+ */
+function esperaEndpoint(proceso, limite = Number(process.env.CITY_BROWSER_WAIT_MS) || 60000) {
   return new Promise((listo, falla) => {
     let visto = '';
-    const reloj = setTimeout(() => falla(new Error('chrome never announced its port')), limite);
+    const reloj = setTimeout(
+      () =>
+        falla(
+          new Error(
+            `chrome never announced its port in ${limite / 1000}s` +
+              (visto.trim() ? `; it said: ${visto.trim().slice(-400)}` : ', and said nothing'),
+          ),
+        ),
+      limite,
+    );
     proceso.stderr.on('data', (trozo) => {
       visto += trozo.toString();
       const m = visto.match(/ws:\/\/[^\s]+/);
@@ -65,7 +85,9 @@ class Cdp {
       const espera = this.pendientes.get(mensaje.id);
       if (!espera) return;
       this.pendientes.delete(mensaje.id);
-      mensaje.error ? espera.falla(new Error(JSON.stringify(mensaje.error))) : espera.listo(mensaje.result);
+      mensaje.error
+        ? espera.falla(new Error(JSON.stringify(mensaje.error)))
+        : espera.listo(mensaje.result);
     });
   }
 
@@ -73,7 +95,9 @@ class Cdp {
     const socket = new WebSocket(url);
     await new Promise((listo, falla) => {
       socket.addEventListener('open', listo, { once: true });
-      socket.addEventListener('error', () => falla(new Error('cannot reach chrome')), { once: true });
+      socket.addEventListener('error', () => falla(new Error('cannot reach chrome')), {
+        once: true,
+      });
     });
     return new Cdp(socket);
   }
@@ -102,7 +126,9 @@ const dormir = (ms) => new Promise((r) => setTimeout(r, ms));
 
 let fallos = 0;
 function comprueba(texto, bien, detalle = '') {
-  console.log(`${bien ? '  ok  ·' : '  FAIL·'} ${texto}${bien || !detalle ? '' : `\n        ${detalle}`}`);
+  console.log(
+    `${bien ? '  ok  ·' : '  FAIL·'} ${texto}${bien || !detalle ? '' : `\n        ${detalle}`}`,
+  );
   if (!bien) fallos += 1;
 }
 
@@ -195,7 +221,11 @@ async function main() {
         test: boton('.rpgTest'),
       };
     })()`);
-    comprueba('the houses view renders its sheets', (abierto?.fichas ?? 0) > 0, JSON.stringify(abierto));
+    comprueba(
+      'the houses view renders its sheets',
+      (abierto?.fichas ?? 0) > 0,
+      JSON.stringify(abierto),
+    );
     for (const [control, etiqueta] of [
       ['alta', 'the build-a-house button'],
       ['instrucciones', 'the CLAUDE.md / AGENTS.md editors'],
@@ -316,8 +346,11 @@ async function main() {
     })()`);
     comprueba(
       'the house form walks the disk — nothing offered, you pick what you want',
-      (casa?.filas ?? 0) > 0 && !!casa?.sube && !!casa?.tomaAqui &&
-        casa.dondeDespues !== casa.dondeAntes && (casa?.elegidas ?? 0) > 0,
+      (casa?.filas ?? 0) > 0 &&
+        !!casa?.sube &&
+        !!casa?.tomaAqui &&
+        casa.dondeDespues !== casa.dondeAntes &&
+        (casa?.elegidas ?? 0) > 0,
       JSON.stringify(casa),
     );
     comprueba(
@@ -468,13 +501,16 @@ async function main() {
     })()`);
     comprueba(
       'thirty connected people use one recipient picker, not thirty message boxes',
-      reception?.navRole === 'button' && reception?.navTabIndex === '0' &&
-        reception?.composers === 1 && reception?.recipients === 30,
+      reception?.navRole === 'button' &&
+        reception?.navTabIndex === '0' &&
+        reception?.composers === 1 &&
+        reception?.recipients === 30,
       JSON.stringify(reception),
     );
     comprueba(
       'pending messages stay above composing and use distinct route/reject language',
-      reception?.messages === 1 && reception?.reviewFirst === true &&
+      reception?.messages === 1 &&
+        reception?.reviewFirst === true &&
         /route|dirigir/i.test(reception?.route ?? '') &&
         /reason|motivo/i.test(reception?.rejection ?? ''),
       JSON.stringify(reception),
@@ -687,8 +723,11 @@ async function main() {
     })()`);
     comprueba(
       'the language switch really translates the page, and remembers it',
-      !!lengua && !lengua.falta && lengua.despues !== lengua.antes &&
-        /casas|resumen|mapa/i.test(lengua.despues) && lengua.guardado === lengua.lang &&
+      !!lengua &&
+        !lengua.falta &&
+        lengua.despues !== lengua.antes &&
+        /casas|resumen|mapa/i.test(lengua.despues) &&
+        lengua.guardado === lengua.lang &&
         lengua.etiqueta !== lengua.etiquetaAntes,
       JSON.stringify(lengua),
     );
@@ -698,8 +737,14 @@ async function main() {
       JSON.stringify(lengua?.marca),
     );
 
-    const errores = await cdp.evalua('window.__erroresDePagina ? window.__erroresDePagina.length : 0');
-    comprueba('the page raised no uncaught errors while we drove it', errores === 0, String(errores));
+    const errores = await cdp.evalua(
+      'window.__erroresDePagina ? window.__erroresDePagina.length : 0',
+    );
+    comprueba(
+      'the page raised no uncaught errors while we drove it',
+      errores === 0,
+      String(errores),
+    );
   } finally {
     proceso.kill('SIGKILL');
   }

package/bin/test-adapter.py

@@ -117,6 +117,15 @@ def main():
                    and 'agents-city committee respond' in body
                    and 'Do not contact another repo agent directly' in body,
                    body[-160:])
+            # A member read its brief and answered "let me start working on it",
+            # then ran thirteen shell commands. Investigating is what it was
+            # asked for; deciding by doing is not, and nothing in the brief had
+            # ever said so. Gathering an opinion has to leave the repo as it
+            # found it, or the committee is ratifying work already done.
+            afirma(f'· and {runtime} is told that gathering a position changes nothing',
+                   'Look, do not touch' in body
+                   and 'leave the repo as it found it' in body,
+                   body[-300:])
             esperado = (
                 'operating role is seo'
                 if actor == 'legacy-two'

package/bin/test-committee.py

@@ -220,6 +220,82 @@ def main():
         })
         afirma('· the chair resolves the request explicitly', denied.returncode == 0)
 
+        # ── the record, which had nobody checking it ────────────────────────
+        #
+        # Execution gets an independent verifier. The SUMMARY got nobody: a
+        # position quietly softened, a condition dropped, a stance reported as
+        # something it was not, and the member it belonged to had no valid basis
+        # to say so. Not new evidence, not a contradiction in the facts — a
+        # challenge to the chair's account of what they said.
+        mal_citado = valor(ejecuta(env, 'web', 'floor-request', thread, {
+            'basis': 'misrepresented',
+            'reason': 'the synthesis reports me as unconditional; my stance was conditional',
+            'evidence': [],
+        }))
+        mal_id = mal_citado.get('myFloorRequests', [{}])[-1].get('id', '')
+        afirma('· a member can say the synthesis is not what it said', bool(mal_id))
+        peticion = next((r for r in mal_citado.get('myFloorRequests', [])
+                         if r.get('id') == mal_id), {})
+        afirma(
+            "· and its own position travels with it, so the chair is shown what it summarised",
+            peticion.get('position', {}).get('recommendation')
+            == web_position['recommendation'],
+            json.dumps(peticion)[:300],
+        )
+        bloquea = ejecuta(env, 'seat', 'decide', thread, {
+            'outcome': 'ship', 'rationale': 'gates pass', 'owner': 'alice',
+            'executor': 'seat', 'verifier': 'ops',
+            'verificationQuestion': 'does replay pass?',
+            'selectedEvidence': ['run 482'], 'reopenIf': ['replay fails'],
+        })
+        afirma('· non-happy: and the chair cannot decide over an unanswered one',
+               bloquea.returncode != 0 and 'pending floor request' in bloquea.stderr)
+        ejecuta(env, 'seat', 'floor-deny', thread, {
+            'requestId': mal_id, 'reason': 'the stance is quoted verbatim in the act',
+        })
+        # Resolved, so the pending guard is out of the way and what refuses the
+        # second one is the rule this basis carries: once.
+        otra_vez = ejecuta(env, 'web', 'floor-request', thread, {
+            'basis': 'misrepresented', 'reason': 'still not right', 'evidence': [],
+        })
+        afirma('· non-happy: a correction that repeats is a filibuster with better manners',
+               otra_vez.returncode != 0
+               and 'already challenged how its position' in otra_vez.stderr,
+               otra_vez.stderr.strip())
+
+        # The one case where a member has nothing on the record: the chair
+        # synthesised without it, said why, and now it turns up. There is no
+        # summary of its position to be wrong, because it never gave one — and a
+        # basis that would let it claim otherwise would let anybody claim
+        # anything.
+        segundo = valor(ejecuta(env, 'seat', 'open', payload={
+            'question': 'Do we cache the banner?',
+            'desiredOutcome': 'A yes or no',
+            'definitionOfDone': ['a decision'],
+            'participants': ['api', 'ops'],
+            'authority': 'recommend',
+        }))
+        hilo2 = segundo.get('id', '')
+        ejecuta(env, 'api', 'respond', hilo2, {
+            'stance': 'support', 'recommendation': 'cache it',
+            'evidence': ['cdn hit rate'], 'expectedImpact': 'fewer origin hits',
+            'visibleWhen': 'next deploy', 'withdrawIf': 'the banner changes hourly',
+        })
+        sin_esperar = ejecuta(env, 'seat', 'synthesize', hilo2, {
+            'summary': 'api says cache', 'agreements': ['cache it'],
+            'conflicts': [], 'unknowns': [],
+            'proceedWithout': 'ops has not answered in an hour and the window closes',
+        })
+        afirma('· a chair may proceed without a position, having said why',
+               sin_esperar.returncode == 0, sin_esperar.stderr.strip())
+        tarde = ejecuta(env, 'ops', 'floor-request', hilo2, {
+            'basis': 'misrepresented', 'reason': 'that is not my view', 'evidence': [],
+        })
+        afirma('· non-happy: and one who said nothing has nothing to be misquoted about',
+               tarde.returncode != 0 and 'submitted no position' in tarde.stderr,
+               tarde.stderr.strip()[:200])
+        ejecuta(env, 'seat', 'cancel', hilo2, {'reason': 'fixture'})
+
         decision = {
             'outcome': 'ship after staging replay',
             'rationale': 'migration and rollback evidence agree',
@@ -313,9 +389,14 @@ def main():
                len(events) >= 16 and events[-1]['type'] == 'committee.close',
                f'{len(events)} events')
         history = valor(ejecuta(env, 'seat', 'history'))
+        # Indexed defensively: an earlier transition that stops working leaves
+        # these lists empty, and an IndexError here would replace every failure
+        # this suite had collected with a traceback about the last one.
+        reciente = (history.get('recent') or [{}])[0]
+        contribuyentes = (history.get('contributorCounts') or [{}])[0]
         afirma('· the chair gets concise cross-decision memory against capture',
-               history.get('recent', [{}])[0].get('deliberation') == thread
-               and history.get('contributorCounts', [{}])[0].get('decisions') == 2
+               reciente.get('deliberation') == thread
+               and contribuyentes.get('decisions') == 2
                and 'not proof of capture' in history.get('note', ''), str(history))
         denied_history = ejecuta(env, 'api', 'history')
         afirma('· decision influence history is chair-only',

package/bin/test-contracts.py

@@ -474,9 +474,16 @@ def asiento_con_su_arnes():
            and "crossSessionInbound" not in fuente
            and "SendMessage,ListAgents" not in fuente, '')
 
-    # A house is not a chair: it must still be reachable from the bus.
-    afirma('· an agent house still goes through the gateway',
-           'gateway_line "$win" "$path" "$CLAUDE_REPO"' in fuente, '')
+    # A house is not a chair, and its DEFAULT must keep it reachable from the
+    # bus: work arrives without anybody sitting in that window. The choice is
+    # now offered — `ui.<house>: tui` opens the person's own Claude Code — so
+    # what this checks is the default, not the absence of a choice.
+    casa_claude = fuente[fuente.index('lanza_casa_claude() {'):fuente.index("# The chair's Claude")]
+    afirma('· a house defaults to the gateway, which is what makes work reach it',
+           'ui_de "$win" gateway' in casa_claude
+           and 'gateway_line "$win" "$ruta" "$orden"' in casa_claude, casa_claude[:400])
+    afirma('· and a house that keeps its own CLI is given a way to be handed work',
+           '"$RUNTIME" fallback "$win"' in casa_claude, casa_claude[:400])
 
     # `ui.<window>`, lifted out and exercised.
     casa = tempfile.mkdtemp()

package/bin/test-navegador.py

@@ -145,9 +145,43 @@ def bundle_al_dia():
     return "rebuilt from src/hall.ts"
 
 
+def un_chrome_que_no_arranca():
+    """What the driver says when the browser never answers.
+
+    This suite has exactly one way to fail without telling anybody anything, and
+    CI found it: `chrome never announced its port` names what we stopped waiting
+    for and drops the only evidence of why — a missing library, a sandbox
+    refusal, a profile it could not write. A stub browser that talks and never
+    announces proves the message carries what it heard.
+
+    CHROME_PATH is the first candidate the driver considers, which is what makes
+    this testable without a browser at all.
+    """
+    print("  and a browser that never starts says why")
+    casa = tempfile.mkdtemp()
+    falso = os.path.join(casa, "chrome")
+    with open(falso, "w", encoding="utf-8") as f:
+        f.write("#!/bin/bash\n"
+                "echo 'FATAL: could not open display, and this is the useful half' >&2\n"
+                "sleep 30\n")
+    os.chmod(falso, 0o755)
+    salida = subprocess.run(
+        ["node", os.path.join(RAIZ, "bin", "navegador.mjs"), "http://127.0.0.1:1/"],
+        capture_output=True, text=True, timeout=90,
+        env=dict(os.environ, CHROME_PATH=falso, CITY_BROWSER_WAIT_MS="1500"),
+    )
+    shutil.rmtree(casa, ignore_errors=True)
+    todo = salida.stdout + salida.stderr
+    afirma("· the timeout names what it waited for",
+           "never announced its port" in todo, todo[-300:])
+    afirma("· and repeats what the browser actually said",
+           "could not open display" in todo, todo[-300:])
+
+
 def main():
     print()
     print("  the hall, in a browser that clicks")
+    un_chrome_que_no_arranca()
     print(f"  · {bundle_al_dia()}")
     datos = tempfile.mkdtemp()
     casa = tempfile.mkdtemp()

package/bin/test-seat.py

@@ -1495,6 +1495,51 @@ def arranque_escalonado():
         and "--channels" not in asiento,
         asiento[:160],
     )
+    # And the same choice, for a house. It is the point of the product — orchestrate
+    # somebody's CLI, do not replace it — and until now `ui_de` was a general
+    # function consulted for exactly one window.
+    card.pon_campo(ficha, "ui.api", "tui")
+    lineas = corre(CITY_SETTLE="0", CITY_STAGGER="0")
+    api_tui = next((l for l in lineas if "CITY_BUS_ACTOR=api" in l), "")
+    afirma(
+        "· happy: `ui.api: tui` opens that house's own Claude Code, not a prompt in front of it",
+        "city-runtime.sh gateway api" not in api_tui and "claude" in api_tui,
+        api_tui[:300],
+    )
+    aviso = subprocess.run(
+        ["bash", guion, "ana", "--claude", "--no-sync"],
+        capture_output=True, text=True, cwd=casa,
+        env=dict(os.environ, HOME=casa, AGENTS_CITY_DATA=datos, CITY_CODE_DIR=codigo,
+                 PATH=fbin + os.pathsep + os.environ["PATH"],
+                 CITY_SETTLE="0", CITY_STAGGER="0"),
+    ).stderr
+    afirma(
+        "· and the city says out loud what that costs, rather than hiding it",
+        "api uses the explicit terminal fallback" in aviso
+        and "native delivery is unavailable" in aviso,
+        aviso[-400:],
+    )
+    afirma(
+        "· non-happy: while its cage and its bus identity are exactly as before",
+        "CITY_BUS_ACTOR=api" in api_tui and "CITY_AGENT_ROLE=data-engineer" in api_tui,
+        api_tui[:300],
+    )
+    card.pon_campo(ficha, "ui.api", "")
+    api_pasarela = next(
+        (l for l in corre(CITY_SETTLE="0", CITY_STAGGER="0") if "CITY_BUS_ACTOR=api" in l), "")
+    afirma(
+        "· non-happy: and clearing the key puts the gateway back, which is the default",
+        "city-runtime.sh gateway api" in api_pasarela, api_pasarela[:300],
+    )
+    card.pon_campo(ficha, "ui.api", "ventana-preciosa")
+    api_raro = next(
+        (l for l in corre(CITY_SETTLE="0", CITY_STAGGER="0") if "CITY_BUS_ACTOR=api" in l), "")
+    afirma(
+        "· non-happy: a value that is neither tui nor gateway is not a third mode",
+        "city-runtime.sh gateway api" in api_raro, api_raro[:300],
+    )
+    card.pon_campo(ficha, "ui.api", "")
+
     # The old shape is still one card key away, for anybody who wants the bus
     # able to drive their chair.
     card.pon_campo(ficha, "ui.seat", "gateway")
@@ -1521,6 +1566,11 @@ def arranque_escalonado():
         corre(**extra)
         return open(registro).read()
 
+    primera = crudo(CITY_SETTLE="0", CITY_STAGGER="0")
+    afirma(
+        "· happy: a city opened for the first time gets its tmux comforts",
+        "set-option" in primera, primera[:300],
+    )
     log = crudo(FAKE_SESSION="1", FAKE_WINDOWS="seat api", CITY_SETTLE="0", CITY_STAGGER="0")
     afirma(
         "· happy: an agent added to a running city gets its window",
@@ -1542,6 +1592,12 @@ def arranque_escalonado():
         "new-session" not in log,
         log[:600],
     )
+    afirma(
+        "· non-happy: and a running session's tmux options are left exactly as found",
+        "set-option" not in log,
+        "re-applying `set -g mouse on` under a live full-screen app types raw SGR "
+        "sequences into its prompt: " + log[:400],
+    )
     afirma(
         "· the new house is what you are looking at when it opens",
         "select-window" in log and ":docs" in log.split("select-window")[-1][:40],