agents-city 0.5.7 → 0.5.9

package/.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
     {
       "name": "city",
       "source": "./plugin",
-      "version": "0.5.7",
+      "version": "0.5.9",
       "description": "Operate one autonomous city seat, its domain, role, repo support agents, goal, recognised skills and explicit roads to other cities."
     }
   ]

package/README.es.md

@@ -1828,6 +1828,18 @@ global del plugin porque varias ciudades pueden ejecutarse a la vez.
 sexta pregunta del asistente o con `agents-city seat --seat-yolo on|off`;
 `--no-yolo` sigue frenando la sesión entera.
 
+`ui.<agente>` elige qué se abre en una ventana: `tui` es el Claude Code de esa
+persona — sus plugins, su statusline, sus comandos — y `gateway` es el prompt de
+la ciudad con el runtime headless detrás. La silla usa `tui` por defecto y una
+casa `gateway`, y los dos defectos son los útiles: una silla es donde te sientas,
+y una casa es donde llega el trabajo sin que nadie se siente en ella, con la
+conversación entera apareciendo en el Hall.
+
+El intercambio se dice, no se esconde. El TUI de Claude Code no tiene puerta de
+entrada, así que una ventana en `tui` recibe su trabajo como un pegado protegido
+en el pane, y el lanzador avisa de que la entrega nativa no está disponible ahí.
+Es el mismo trato que la silla lleva haciendo desde siempre.
+
 `seat_reach` dice si la silla trabaja con sus propias manos. Está `closed`
 mientras no escribas `open`. Cerrado significa que un asiento tiene las
 herramientas de una silla y ninguna más: su carpeta de ciudad, las puertas de

package/README.md

@@ -1808,6 +1808,18 @@ launches the chair itself without permission prompts — set at the wizard's
 sixth question or with `agents-city seat --seat-yolo on|off`; `--no-yolo`
 still brakes the whole session.
 
+`ui.<agent>` chooses what opens in a window: `tui` is that person's own Claude
+Code — their plugins, their statusline, their slash commands — and `gateway` is
+the city's own prompt with the runtime headless behind it. The chair defaults to
+`tui` and a house to `gateway`, and both defaults are the useful ones: a chair is
+where you sit, and a house is where work arrives without anybody sitting in it,
+with the whole conversation showing up in the Hall.
+
+The trade is stated rather than hidden. Claude Code's TUI has no inbound door,
+so a `tui` window receives its work as a protected paste into the pane, and the
+launcher warns that native delivery is unavailable for it. That is the same
+bargain the chair has always made.
+
 `seat_reach` says whether the chair works with its own hands. It is `closed`
 unless you write `open`. Closed means a seat holds a chair's tools and nothing
 else: its own city folder, this product's own doors (`agents-city …` — that is

package/bin/test-adapter.py

@@ -117,6 +117,15 @@ def main():
                    and 'agents-city committee respond' in body
                    and 'Do not contact another repo agent directly' in body,
                    body[-160:])
+            # A member read its brief and answered "let me start working on it",
+            # then ran thirteen shell commands. Investigating is what it was
+            # asked for; deciding by doing is not, and nothing in the brief had
+            # ever said so. Gathering an opinion has to leave the repo as it
+            # found it, or the committee is ratifying work already done.
+            afirma(f'· and {runtime} is told that gathering a position changes nothing',
+                   'Look, do not touch' in body
+                   and 'leave the repo as it found it' in body,
+                   body[-300:])
             esperado = (
                 'operating role is seo'
                 if actor == 'legacy-two'

package/bin/test-committee.py

@@ -220,6 +220,82 @@ def main():
         })
         afirma('· the chair resolves the request explicitly', denied.returncode == 0)
 
+        # ── the record, which had nobody checking it ────────────────────────
+        #
+        # Execution gets an independent verifier. The SUMMARY got nobody: a
+        # position quietly softened, a condition dropped, a stance reported as
+        # something it was not, and the member it belonged to had no valid basis
+        # to say so. Not new evidence, not a contradiction in the facts — a
+        # challenge to the chair's account of what they said.
+        mal_citado = valor(ejecuta(env, 'web', 'floor-request', thread, {
+            'basis': 'misrepresented',
+            'reason': 'the synthesis reports me as unconditional; my stance was conditional',
+            'evidence': [],
+        }))
+        mal_id = mal_citado.get('myFloorRequests', [{}])[-1].get('id', '')
+        afirma('· a member can say the synthesis is not what it said', bool(mal_id))
+        peticion = next((r for r in mal_citado.get('myFloorRequests', [])
+                         if r.get('id') == mal_id), {})
+        afirma(
+            "· and its own position travels with it, so the chair is shown what it summarised",
+            peticion.get('position', {}).get('recommendation')
+            == web_position['recommendation'],
+            json.dumps(peticion)[:300],
+        )
+        bloquea = ejecuta(env, 'seat', 'decide', thread, {
+            'outcome': 'ship', 'rationale': 'gates pass', 'owner': 'alice',
+            'executor': 'seat', 'verifier': 'ops',
+            'verificationQuestion': 'does replay pass?',
+            'selectedEvidence': ['run 482'], 'reopenIf': ['replay fails'],
+        })
+        afirma('· non-happy: and the chair cannot decide over an unanswered one',
+               bloquea.returncode != 0 and 'pending floor request' in bloquea.stderr)
+        ejecuta(env, 'seat', 'floor-deny', thread, {
+            'requestId': mal_id, 'reason': 'the stance is quoted verbatim in the act',
+        })
+        # Resolved, so the pending guard is out of the way and what refuses the
+        # second one is the rule this basis carries: once.
+        otra_vez = ejecuta(env, 'web', 'floor-request', thread, {
+            'basis': 'misrepresented', 'reason': 'still not right', 'evidence': [],
+        })
+        afirma('· non-happy: a correction that repeats is a filibuster with better manners',
+               otra_vez.returncode != 0
+               and 'already challenged how its position' in otra_vez.stderr,
+               otra_vez.stderr.strip())
+
+        # The one case where a member has nothing on the record: the chair
+        # synthesised without it, said why, and now it turns up. There is no
+        # summary of its position to be wrong, because it never gave one — and a
+        # basis that would let it claim otherwise would let anybody claim
+        # anything.
+        segundo = valor(ejecuta(env, 'seat', 'open', payload={
+            'question': 'Do we cache the banner?',
+            'desiredOutcome': 'A yes or no',
+            'definitionOfDone': ['a decision'],
+            'participants': ['api', 'ops'],
+            'authority': 'recommend',
+        }))
+        hilo2 = segundo.get('id', '')
+        ejecuta(env, 'api', 'respond', hilo2, {
+            'stance': 'support', 'recommendation': 'cache it',
+            'evidence': ['cdn hit rate'], 'expectedImpact': 'fewer origin hits',
+            'visibleWhen': 'next deploy', 'withdrawIf': 'the banner changes hourly',
+        })
+        sin_esperar = ejecuta(env, 'seat', 'synthesize', hilo2, {
+            'summary': 'api says cache', 'agreements': ['cache it'],
+            'conflicts': [], 'unknowns': [],
+            'proceedWithout': 'ops has not answered in an hour and the window closes',
+        })
+        afirma('· a chair may proceed without a position, having said why',
+               sin_esperar.returncode == 0, sin_esperar.stderr.strip())
+        tarde = ejecuta(env, 'ops', 'floor-request', hilo2, {
+            'basis': 'misrepresented', 'reason': 'that is not my view', 'evidence': [],
+        })
+        afirma('· non-happy: and one who said nothing has nothing to be misquoted about',
+               tarde.returncode != 0 and 'submitted no position' in tarde.stderr,
+               tarde.stderr.strip()[:200])
+        ejecuta(env, 'seat', 'cancel', hilo2, {'reason': 'fixture'})
+
         decision = {
             'outcome': 'ship after staging replay',
             'rationale': 'migration and rollback evidence agree',
@@ -313,9 +389,14 @@ def main():
                len(events) >= 16 and events[-1]['type'] == 'committee.close',
                f'{len(events)} events')
         history = valor(ejecuta(env, 'seat', 'history'))
+        # Indexed defensively: an earlier transition that stops working leaves
+        # these lists empty, and an IndexError here would replace every failure
+        # this suite had collected with a traceback about the last one.
+        reciente = (history.get('recent') or [{}])[0]
+        contribuyentes = (history.get('contributorCounts') or [{}])[0]
         afirma('· the chair gets concise cross-decision memory against capture',
-               history.get('recent', [{}])[0].get('deliberation') == thread
-               and history.get('contributorCounts', [{}])[0].get('decisions') == 2
+               reciente.get('deliberation') == thread
+               and contribuyentes.get('decisions') == 2
                and 'not proof of capture' in history.get('note', ''), str(history))
         denied_history = ejecuta(env, 'api', 'history')
         afirma('· decision influence history is chair-only',

package/bin/test-contracts.py

@@ -474,9 +474,16 @@ def asiento_con_su_arnes():
            and "crossSessionInbound" not in fuente
            and "SendMessage,ListAgents" not in fuente, '')
 
-    # A house is not a chair: it must still be reachable from the bus.
-    afirma('· an agent house still goes through the gateway',
-           'gateway_line "$win" "$path" "$CLAUDE_REPO"' in fuente, '')
+    # A house is not a chair, and its DEFAULT must keep it reachable from the
+    # bus: work arrives without anybody sitting in that window. The choice is
+    # now offered — `ui.<house>: tui` opens the person's own Claude Code — so
+    # what this checks is the default, not the absence of a choice.
+    casa_claude = fuente[fuente.index('lanza_casa_claude() {'):fuente.index("# The chair's Claude")]
+    afirma('· a house defaults to the gateway, which is what makes work reach it',
+           'ui_de "$win" gateway' in casa_claude
+           and 'gateway_line "$win" "$ruta" "$orden"' in casa_claude, casa_claude[:400])
+    afirma('· and a house that keeps its own CLI is given a way to be handed work',
+           '"$RUNTIME" fallback "$win"' in casa_claude, casa_claude[:400])
 
     # `ui.<window>`, lifted out and exercised.
     casa = tempfile.mkdtemp()

package/bin/test-seat.py

@@ -1495,6 +1495,51 @@ def arranque_escalonado():
         and "--channels" not in asiento,
         asiento[:160],
     )
+    # And the same choice, for a house. It is the point of the product — orchestrate
+    # somebody's CLI, do not replace it — and until now `ui_de` was a general
+    # function consulted for exactly one window.
+    card.pon_campo(ficha, "ui.api", "tui")
+    lineas = corre(CITY_SETTLE="0", CITY_STAGGER="0")
+    api_tui = next((l for l in lineas if "CITY_BUS_ACTOR=api" in l), "")
+    afirma(
+        "· happy: `ui.api: tui` opens that house's own Claude Code, not a prompt in front of it",
+        "city-runtime.sh gateway api" not in api_tui and "claude" in api_tui,
+        api_tui[:300],
+    )
+    aviso = subprocess.run(
+        ["bash", guion, "ana", "--claude", "--no-sync"],
+        capture_output=True, text=True, cwd=casa,
+        env=dict(os.environ, HOME=casa, AGENTS_CITY_DATA=datos, CITY_CODE_DIR=codigo,
+                 PATH=fbin + os.pathsep + os.environ["PATH"],
+                 CITY_SETTLE="0", CITY_STAGGER="0"),
+    ).stderr
+    afirma(
+        "· and the city says out loud what that costs, rather than hiding it",
+        "api uses the explicit terminal fallback" in aviso
+        and "native delivery is unavailable" in aviso,
+        aviso[-400:],
+    )
+    afirma(
+        "· non-happy: while its cage and its bus identity are exactly as before",
+        "CITY_BUS_ACTOR=api" in api_tui and "CITY_AGENT_ROLE=data-engineer" in api_tui,
+        api_tui[:300],
+    )
+    card.pon_campo(ficha, "ui.api", "")
+    api_pasarela = next(
+        (l for l in corre(CITY_SETTLE="0", CITY_STAGGER="0") if "CITY_BUS_ACTOR=api" in l), "")
+    afirma(
+        "· non-happy: and clearing the key puts the gateway back, which is the default",
+        "city-runtime.sh gateway api" in api_pasarela, api_pasarela[:300],
+    )
+    card.pon_campo(ficha, "ui.api", "ventana-preciosa")
+    api_raro = next(
+        (l for l in corre(CITY_SETTLE="0", CITY_STAGGER="0") if "CITY_BUS_ACTOR=api" in l), "")
+    afirma(
+        "· non-happy: a value that is neither tui nor gateway is not a third mode",
+        "city-runtime.sh gateway api" in api_raro, api_raro[:300],
+    )
+    card.pon_campo(ficha, "ui.api", "")
+
     # The old shape is still one card key away, for anybody who wants the bus
     # able to drive their chair.
     card.pon_campo(ficha, "ui.seat", "gateway")
@@ -1590,6 +1635,75 @@ def arranque_escalonado():
         str(lineas)[:400],
     )
 
+    # A card that moved on under a window that is already open. This is the trap
+    # the reconcile created: `ui.api: tui` on a running city applies to nothing,
+    # and if nothing says so the owner sets it, reopens, sees the same gateway
+    # and concludes the feature does not work.
+    card.pon_campo(ficha, "ui.api", "tui")
+    # The gateway's own pid marker: the only positive proof of what an already
+    # open window is running.
+    marcas = subprocess.run(
+        [sys.executable, "-c",
+         "import sys; sys.path.insert(0, sys.argv[1]); import runtime_processes as r;"
+         " print(r.ruta(sys.argv[2]))",
+         os.path.join(RAIZ, "plugin", "scripts"), datos],
+        capture_output=True, text=True,
+        # The launcher's own environment, or this resolves a different marker
+        # directory from the one the launcher will look in.
+        env={k: v for k, v in dict(os.environ, HOME=casa).items()
+             if k != "AGENTS_CITY_HOME"},
+    ).stdout.strip()
+    os.makedirs(os.path.join(marcas, "gateways"), exist_ok=True)
+    open(os.path.join(marcas, "gateways", "api.pid"), "w").write("4242\n")
+    desfase = subprocess.run(
+        ["bash", guion, "ana", "--claude", "--no-sync"],
+        capture_output=True, text=True, cwd=casa,
+        env=dict(os.environ, HOME=casa, AGENTS_CITY_DATA=datos, CITY_CODE_DIR=codigo,
+                 PATH=fbin + os.pathsep + os.environ["PATH"],
+                 CITY_SETTLE="0", CITY_STAGGER="0",
+                 FAKE_SESSION="1", FAKE_WINDOWS="seat api docs"),
+    ).stderr
+    afirma(
+        "· happy: a card that moved on under an open window is reported, with what to run",
+        "the card says tui" in desfase and "kill-window" in desfase and "api" in desfase,
+        desfase[-500:],
+    )
+    afirma(
+        "· non-happy: and nothing is closed on the owner's behalf",
+        "kill-window" not in open(registro).read(),
+        open(registro).read()[-300:],
+    )
+    card.pon_campo(ficha, "ui.api", "")
+    sin_desfase = subprocess.run(
+        ["bash", guion, "ana", "--claude", "--no-sync"],
+        capture_output=True, text=True, cwd=casa,
+        env=dict(os.environ, HOME=casa, AGENTS_CITY_DATA=datos, CITY_CODE_DIR=codigo,
+                 PATH=fbin + os.pathsep + os.environ["PATH"],
+                 CITY_SETTLE="0", CITY_STAGGER="0",
+                 FAKE_SESSION="1", FAKE_WINDOWS="seat api docs"),
+    ).stderr
+    afirma(
+        "· non-happy: and a city whose windows agree with its card says nothing about them",
+        "the card says" not in sin_desfase, sin_desfase[-300:],
+    )
+    # The absence of a marker is not proof of anything, and used to be read as
+    # proof of a TUI.
+    card.pon_campo(ficha, "ui.api", "tui")
+    os.remove(os.path.join(marcas, "gateways", "api.pid"))
+    sin_marca = subprocess.run(
+        ["bash", guion, "ana", "--claude", "--no-sync"],
+        capture_output=True, text=True, cwd=casa,
+        env=dict(os.environ, HOME=casa, AGENTS_CITY_DATA=datos, CITY_CODE_DIR=codigo,
+                 PATH=fbin + os.pathsep + os.environ["PATH"],
+                 CITY_SETTLE="0", CITY_STAGGER="0",
+                 FAKE_SESSION="1", FAKE_WINDOWS="seat api docs"),
+    ).stderr
+    afirma(
+        "· non-happy: with no marker it says nothing, rather than guessing what is running",
+        "the card says" not in sin_marca, sin_marca[-300:],
+    )
+    card.pon_campo(ficha, "ui.api", "")
+
     # A window whose agent left the card may be mid-task. Say so; do not close
     # it. The owner decides what to do with somebody's unfinished work.
     sobra = subprocess.run(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agents-city",
-  "version": "0.5.7",
+  "version": "0.5.9",
   "description": "Run autonomous agent cities: one chair seat, role-aware repo agents, repo-owned skills, and explicit roads.",
   "bin": {
     "agents-city": "bin/agents-city.js"

package/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "city",
   "displayName": "Agents City",
-  "version": "0.5.7",
+  "version": "0.5.9",
   "description": "One autonomous city seat with a work domain, role, goal, repo support agents, recognised skills and explicit roads to other cities.",
   "author": {
     "name": "jlcases",

package/plugin/channel/adapter-prompts.ts

@@ -12,6 +12,7 @@ export function promptFor(envelope: BusEnvelope, operatingRole = 'blank'): strin
       RULES,
       role,
       `Your first position is isolated: do not seek or read another member's answer. Inspect your own repo and use any matching skill installed there. Abstention is valid.`,
+      `Look, do not touch. A position is what you have found and what you would do — reading, running read-only checks, and reporting. Nothing here asks you to change a file, land a branch or run a migration, and doing it now would decide the very thing the chair convened this committee to decide. The act of gathering an opinion must leave the repo as it found it; work follows a decision, and this is not one yet.`,
       `Brief:\n${pretty(envelope.payload.brief)}`,
       `Submit evidence, not a chat reply. Run:`,
       `  agents-city committee schema respond`,
@@ -25,8 +26,9 @@ export function promptFor(envelope: BusEnvelope, operatingRole = 'blank'): strin
       `${HEADER} The chair published the synthesis for ${thread}.`,
       RULES,
       pretty(envelope.payload.synthesis),
-      `Stay silent unless you have new evidence, a contradiction, a material risk or a dependency. If so, request—not take—the floor:`,
+      `Stay silent unless you have new evidence, a contradiction, a material risk or a dependency. Wanting to add something is not one of those: your turn to contribute was your isolated position, and a floor taken for an opinion is how a committee becomes a chat room. If you do have one of the four, request—not take—the floor:`,
       `  agents-city committee floor-request ${thread} --input <request.json>`,
+      `There is a fifth basis and it is about this text rather than the world: \`misrepresented\`, for when the synthesis does not say what you said. Not "I disagree with the summary" — that it puts words in your mouth, drops your condition, or reports a stance you did not take. You get one, it does not spend your rebuttals even where the chair allowed none, and your own position is attached automatically so the chair is shown what it summarised rather than your memory of it.`,
       `Use: agents-city committee schema floor-request`,
     ].join('\n\n');
   }

package/plugin/channel/adapter.js

@@ -3722,6 +3722,7 @@ function promptFor(envelope, operatingRole = "blank") {
       RULES,
       role,
       `Your first position is isolated: do not seek or read another member's answer. Inspect your own repo and use any matching skill installed there. Abstention is valid.`,
+      `Look, do not touch. A position is what you have found and what you would do \u2014 reading, running read-only checks, and reporting. Nothing here asks you to change a file, land a branch or run a migration, and doing it now would decide the very thing the chair convened this committee to decide. The act of gathering an opinion must leave the repo as it found it; work follows a decision, and this is not one yet.`,
       `Brief:
 ${pretty(envelope.payload.brief)}`,
       `Submit evidence, not a chat reply. Run:`,
@@ -3736,8 +3737,9 @@ ${pretty(envelope.payload.brief)}`,
       `${HEADER} The chair published the synthesis for ${thread}.`,
       RULES,
       pretty(envelope.payload.synthesis),
-      `Stay silent unless you have new evidence, a contradiction, a material risk or a dependency. If so, request\u2014not take\u2014the floor:`,
+      `Stay silent unless you have new evidence, a contradiction, a material risk or a dependency. Wanting to add something is not one of those: your turn to contribute was your isolated position, and a floor taken for an opinion is how a committee becomes a chat room. If you do have one of the four, request\u2014not take\u2014the floor:`,
       `  agents-city committee floor-request ${thread} --input <request.json>`,
+      `There is a fifth basis and it is about this text rather than the world: \`misrepresented\`, for when the synthesis does not say what you said. Not "I disagree with the summary" \u2014 that it puts words in your mouth, drops your condition, or reports a stance you did not take. You get one, it does not spend your rebuttals even where the chair allowed none, and your own position is attached automatically so the chair is shown what it summarised rather than your memory of it.`,
       `Use: agents-city committee schema floor-request`
     ].join("\n\n");
   }

package/plugin/channel/bus.js

@@ -19816,6 +19816,7 @@ function promptFor(envelope, operatingRole = "blank") {
       RULES,
       role,
       `Your first position is isolated: do not seek or read another member's answer. Inspect your own repo and use any matching skill installed there. Abstention is valid.`,
+      `Look, do not touch. A position is what you have found and what you would do \u2014 reading, running read-only checks, and reporting. Nothing here asks you to change a file, land a branch or run a migration, and doing it now would decide the very thing the chair convened this committee to decide. The act of gathering an opinion must leave the repo as it found it; work follows a decision, and this is not one yet.`,
       `Brief:
 ${pretty(envelope.payload.brief)}`,
       `Submit evidence, not a chat reply. Run:`,
@@ -19830,8 +19831,9 @@ ${pretty(envelope.payload.brief)}`,
       `${HEADER} The chair published the synthesis for ${thread}.`,
       RULES,
       pretty(envelope.payload.synthesis),
-      `Stay silent unless you have new evidence, a contradiction, a material risk or a dependency. If so, request\u2014not take\u2014the floor:`,
+      `Stay silent unless you have new evidence, a contradiction, a material risk or a dependency. Wanting to add something is not one of those: your turn to contribute was your isolated position, and a floor taken for an opinion is how a committee becomes a chat room. If you do have one of the four, request\u2014not take\u2014the floor:`,
       `  agents-city committee floor-request ${thread} --input <request.json>`,
+      `There is a fifth basis and it is about this text rather than the world: \`misrepresented\`, for when the synthesis does not say what you said. Not "I disagree with the summary" \u2014 that it puts words in your mouth, drops your condition, or reports a stance you did not take. You get one, it does not spend your rebuttals even where the chair allowed none, and your own position is attached automatically so the chair is shown what it summarised rather than your memory of it.`,
       `Use: agents-city committee schema floor-request`
     ].join("\n\n");
   }

package/plugin/channel/client.js

@@ -4146,7 +4146,11 @@ function schema(verb) {
       unknowns: []
     },
     synthesize: { summary: "", agreements: [], conflicts: [], unknowns: [], proceedWithout: "" },
-    "floor-request": { basis: "new_evidence", reason: "", evidence: [""] },
+    "floor-request": {
+      basis: "new_evidence | contradiction | risk | dependency | misrepresented",
+      reason: "what the committee does not yet know, or what the synthesis got wrong about you",
+      evidence: [""]
+    },
     "floor-grant": { requestId: "" },
     "floor-deny": { requestId: "", reason: "" },
     reply: { claim: "", evidence: [""], consequence: "" },

package/plugin/channel/committee/floor.ts

@@ -11,20 +11,42 @@ export function requestFloor(
   requireMember(state, actor, role);
   if (state.status !== 'deliberating')
     throw new Error('the floor opens only after the chair synthesis');
-  const alreadyUsed = state.floor.replies.filter((reply) => reply.actor === actor).length;
+  const basis = oneOf(payload.basis, FLOOR_BASES, 'basis');
   const alreadyPending = state.floor.requests.some(
     (request) => request.actor === actor && ['pending', 'granted'].includes(request.status),
   );
   if (alreadyPending) throw new Error(`${actor} already has a pending floor request`);
-  if (alreadyUsed >= state.brief.maxRebuttals) {
-    throw new Error(`${actor} reached this deliberation's rebuttal limit`);
+  const mia = basis === 'misrepresented' ? state.positions[actor] : undefined;
+  if (basis === 'misrepresented') {
+    // Abstention is a valid position to hold and an empty one to misquote: with
+    // nothing on the record there is nothing the synthesis can have got wrong.
+    if (!mia) throw new Error(`${actor} submitted no position, so none can be misrepresented`);
+    // Once. Saying "that is not what I said" is a correction, and a correction
+    // that can be repeated is a filibuster with better manners.
+    if (state.floor.requests.some((r) => r.actor === actor && r.basis === 'misrepresented')) {
+      throw new Error(`${actor} already challenged how its position was represented`);
+    }
+  } else {
+    // The rebuttal budget governs DEBATE. A committee may legitimately forbid
+    // debate — `maxRebuttals: 0` is a real choice — and may not thereby forbid a
+    // member from saying the record is wrong about them, because the record is
+    // what the decision gets made from.
+    const alreadyUsed = state.floor.replies.filter((reply) => reply.actor === actor).length;
+    if (alreadyUsed >= state.brief.maxRebuttals) {
+      throw new Error(`${actor} reached this deliberation's rebuttal limit`);
+    }
   }
   const request: FloorRequest = {
     id: randomId('floor'),
     actor,
-    basis: oneOf(payload.basis, FLOOR_BASES, 'basis'),
+    basis,
     reason: text(payload.reason, 'reason'),
-    evidence: strings(payload.evidence, 'evidence', true),
+    // Every other basis has to bring something from the world. This one is
+    // answered by what the committee already holds — the position below — so
+    // demanding evidence on top would be asking a member to prove its own words
+    // with something other than its own words.
+    evidence: strings(payload.evidence, 'evidence', basis !== 'misrepresented'),
+    ...(mia ? { position: mia } : {}),
     status: 'pending',
     requestedAt: isoNow(),
   };

package/plugin/channel/committee/types.ts

@@ -1,7 +1,28 @@
 import { ActorRole } from '../protocol.js';
 
 export const STANCES = ['support', 'oppose', 'conditional', 'abstain'] as const;
-export const FLOOR_BASES = ['new_evidence', 'contradiction', 'risk', 'dependency'] as const;
+/** Why a member may interrupt a synthesis.
+ *
+ * The first four are about the WORLD: something is true that the chair did not
+ * have, said something the evidence contradicts, carries a risk, or depends on
+ * something. They are deliberately narrow — "I would like to add something" is
+ * how a committee becomes a chat room, and with the chat room comes the
+ * anchoring that isolated first positions exist to prevent.
+ *
+ * `misrepresented` is about the RECORD, and it is the one a member had no way
+ * to raise. A position summarised into something it did not say is neither new
+ * evidence nor a contradiction in the facts; it is the chair's account of what
+ * you said being wrong. Until this existed, the synthesis was the one place in
+ * the protocol where a single actor could bend the outcome and nothing could
+ * catch it: execution gets an independent verifier, the summary got nobody.
+ */
+export const FLOOR_BASES = [
+  'new_evidence',
+  'contradiction',
+  'risk',
+  'dependency',
+  'misrepresented',
+] as const;
 export const AUTHORITIES = ['recommend', 'decide', 'execute'] as const;
 export const VERIFY_RESULTS = ['pass', 'fail'] as const;
 export const TERMINAL_STATUSES = new Set(['closed', 'cancelled']);
@@ -40,6 +61,11 @@ export interface FloorRequest {
   basis: (typeof FLOOR_BASES)[number];
   reason: string;
   evidence: string[];
+  /** On `misrepresented`, the requester's own position, attached by the bus.
+   *  The point of the basis is that the chair is shown the literal text it
+   *  summarised, not a member's memory of it — quoting yourself from memory is
+   *  the same class of evidence as the summary being challenged. */
+  position?: Position;
   status: 'pending' | 'granted' | 'used' | 'denied';
   requestedAt: string;
   decidedAt?: string;

package/plugin/channel/committee-cli.ts

@@ -82,7 +82,11 @@ function schema(verb: string): Record<string, unknown> {
       unknowns: [],
     },
     synthesize: { summary: '', agreements: [], conflicts: [], unknowns: [], proceedWithout: '' },
-    'floor-request': { basis: 'new_evidence', reason: '', evidence: [''] },
+    'floor-request': {
+      basis: 'new_evidence | contradiction | risk | dependency | misrepresented',
+      reason: 'what the committee does not yet know, or what the synthesis got wrong about you',
+      evidence: [''],
+    },
     'floor-grant': { requestId: '' },
     'floor-deny': { requestId: '', reason: '' },
     reply: { claim: '', evidence: [''], consequence: '' },

package/plugin/channel/local-hub.js

@@ -3981,7 +3981,13 @@ function limpia(bruto) {
 
 // committee/types.ts
 var STANCES = ["support", "oppose", "conditional", "abstain"];
-var FLOOR_BASES = ["new_evidence", "contradiction", "risk", "dependency"];
+var FLOOR_BASES = [
+  "new_evidence",
+  "contradiction",
+  "risk",
+  "dependency",
+  "misrepresented"
+];
 var AUTHORITIES = ["recommend", "decide", "execute"];
 var VERIFY_RESULTS = ["pass", "fail"];
 var TERMINAL_STATUSES = /* @__PURE__ */ new Set(["closed", "cancelled"]);
@@ -4280,20 +4286,34 @@ function requestFloor(state, payload, actor, role) {
   requireMember(state, actor, role);
   if (state.status !== "deliberating")
     throw new Error("the floor opens only after the chair synthesis");
-  const alreadyUsed = state.floor.replies.filter((reply) => reply.actor === actor).length;
+  const basis = oneOf(payload.basis, FLOOR_BASES, "basis");
   const alreadyPending = state.floor.requests.some(
     (request2) => request2.actor === actor && ["pending", "granted"].includes(request2.status)
   );
   if (alreadyPending) throw new Error(`${actor} already has a pending floor request`);
-  if (alreadyUsed >= state.brief.maxRebuttals) {
-    throw new Error(`${actor} reached this deliberation's rebuttal limit`);
+  const mia = basis === "misrepresented" ? state.positions[actor] : void 0;
+  if (basis === "misrepresented") {
+    if (!mia) throw new Error(`${actor} submitted no position, so none can be misrepresented`);
+    if (state.floor.requests.some((r) => r.actor === actor && r.basis === "misrepresented")) {
+      throw new Error(`${actor} already challenged how its position was represented`);
+    }
+  } else {
+    const alreadyUsed = state.floor.replies.filter((reply) => reply.actor === actor).length;
+    if (alreadyUsed >= state.brief.maxRebuttals) {
+      throw new Error(`${actor} reached this deliberation's rebuttal limit`);
+    }
   }
   const request = {
     id: randomId("floor"),
     actor,
-    basis: oneOf(payload.basis, FLOOR_BASES, "basis"),
+    basis,
     reason: text(payload.reason, "reason"),
-    evidence: strings(payload.evidence, "evidence", true),
+    // Every other basis has to bring something from the world. This one is
+    // answered by what the committee already holds — the position below — so
+    // demanding evidence on top would be asking a member to prove its own words
+    // with something other than its own words.
+    evidence: strings(payload.evidence, "evidence", basis !== "misrepresented"),
+    ...mia ? { position: mia } : {},
     status: "pending",
     requestedAt: isoNow()
   };

package/plugin/channel/runtime-gateway.js

@@ -3723,6 +3723,7 @@ function promptFor(envelope, operatingRole = "blank") {
       RULES,
       role,
       `Your first position is isolated: do not seek or read another member's answer. Inspect your own repo and use any matching skill installed there. Abstention is valid.`,
+      `Look, do not touch. A position is what you have found and what you would do \u2014 reading, running read-only checks, and reporting. Nothing here asks you to change a file, land a branch or run a migration, and doing it now would decide the very thing the chair convened this committee to decide. The act of gathering an opinion must leave the repo as it found it; work follows a decision, and this is not one yet.`,
       `Brief:
 ${pretty(envelope.payload.brief)}`,
       `Submit evidence, not a chat reply. Run:`,
@@ -3737,8 +3738,9 @@ ${pretty(envelope.payload.brief)}`,
       `${HEADER} The chair published the synthesis for ${thread}.`,
       RULES,
       pretty(envelope.payload.synthesis),
-      `Stay silent unless you have new evidence, a contradiction, a material risk or a dependency. If so, request\u2014not take\u2014the floor:`,
+      `Stay silent unless you have new evidence, a contradiction, a material risk or a dependency. Wanting to add something is not one of those: your turn to contribute was your isolated position, and a floor taken for an opinion is how a committee becomes a chat room. If you do have one of the four, request\u2014not take\u2014the floor:`,
       `  agents-city committee floor-request ${thread} --input <request.json>`,
+      `There is a fifth basis and it is about this text rather than the world: \`misrepresented\`, for when the synthesis does not say what you said. Not "I disagree with the summary" \u2014 that it puts words in your mouth, drops your condition, or reports a stance you did not take. You get one, it does not spend your rebuttals even where the chair allowed none, and your own position is attached automatically so the chair is shown what it summarised rather than your memory of it.`,
       `Use: agents-city committee schema floor-request`
     ].join("\n\n");
   }

package/plugin/scripts/city-session.sh

@@ -526,6 +526,34 @@ entorno_de() {  # $1 = actor ("seat" or a window name)
   printf '%s%s' "$(sync_line)AGENTS_CITY_DATA=$EQUIPO AGENTS_CITY_HOME=${AGENTS_CITY_HOME:-$HOME/.agents-city} AGENTS_CITY_USER=$USUARIO CITY_ADDRESS=$ADDRESS CITY_SEAT_NAME=$SEAT_NAME " "$propio"
 }
 
+# A house's Claude, opened the way its card asks for.
+#
+# `gateway` by default, and that default is what makes a city a city: work
+# reaches the agent without anybody sitting in its terminal, and the whole
+# conversation shows up in the Hall instead of in a pane nobody is watching.
+#
+# `ui.<house>: tui` opens the person's own Claude Code instead — their plugins,
+# their statusline, their slash commands, their transcript. The cost is stated
+# rather than hidden: delivery falls back to a protected paste into the pane,
+# and `city-runtime.sh fallback` warns that native delivery is unavailable.
+#
+# That choice already existed for the chair, and `ui_de` was written as a
+# general function consulted for exactly one window. Which is the tell: the
+# chair — the one actor that receives text from OTHER cities — has been running
+# pasted delivery all along, so refusing a house the same option while granting
+# it there was backwards on risk, not careful about it.
+lanza_casa_claude() {  # $1 = window, $2 = cwd, $3 = the full claude command, $4 = wait
+  local win="$1" ruta="$2" orden="$3" espera="${4:-}" entorno
+  entorno="$(entorno_de "$win")$BROKER_ENV$JAULA$CAGE_RUNTIME_ENV"
+  if [ "$(ui_de "$win" gateway)" = tui ]; then
+    lanza "$SESSION:$win" "$win" "$ruta" "$espera$entorno${CLAUDE_AUTH_PREFIX}$orden"
+    "$RUNTIME" fallback "$win" "$SESSION:$win" claude
+  else
+    lanza "$SESSION:$win" "$win" "$ruta" \
+      "$espera$entorno${CLAUDE_AUTH_PREFIX}$(gateway_line "$win" "$ruta" "$orden")"
+  fi
+}
+
 # The chair's Claude, opened the way the card asks for.
 #
 # Both spellings carry the SAME flags. That matters: `--settings` closes
@@ -651,8 +679,7 @@ for path in ${RUTAS[@]+"${RUTAS[@]}"}; do
         turno=$((turno + 1))
         if [ "$espera" = "0" ]; then espera=''; else espera="sleep $espera; "; fi
         CLAUDE_REPO="$(con_motor "$win" claude "$OTRO --name $SESSION-$win")$CLAUDE_TRATO$YOLO_FLAG"
-        lanza "$SESSION:$win" "$win" "$path" \
-          "$espera$(entorno_de "$win")$BROKER_ENV$JAULA$CAGE_RUNTIME_ENV${CLAUDE_AUTH_PREFIX}$(gateway_line "$win" "$path" "$CLAUDE_REPO")"
+        lanza_casa_claude "$win" "$path" "$CLAUDE_REPO" "$espera"
       elif [ "$KIND" = codex ] || [ "$KIND" = opencode ] || [ "$KIND" = kimi ]; then
         # Native servers have their own credentials and do not share Claude's OAuth race.
         # Codex stays outside the outer cage ON macOS ONLY: its node_repl MCP
@@ -684,8 +711,7 @@ for path in ${RUTAS[@]+"${RUTAS[@]}"}; do
       turno=$((turno + 1))
       if [ "$espera" = "0" ]; then espera=''; else espera="sleep $espera; "; fi
       CLAUDE_REPO="$(con_motor "$win" claude "claude --name $SESSION-$win")$CLAUDE_TRATO$YOLO_FLAG"
-      lanza "$SESSION:$win" "$win" "$path" \
-        "$espera$(entorno_de "$win")$BROKER_ENV${JAULA}$CAGE_RUNTIME_ENV${CLAUDE_AUTH_PREFIX}$(gateway_line "$win" "$path" "$CLAUDE_REPO")"
+      lanza_casa_claude "$win" "$path" "$CLAUDE_REPO" "$espera"
     fi
   fi
 done
@@ -731,6 +757,36 @@ if [ "$SESION_YA" -eq 1 ]; then
   else
     echo "Session '$SESSION' is already up, with every agent on the card — attaching." >&2
   fi
+  # A window that is already open is left alone — there may be work in it — and
+  # that is exactly why a card change to one of them has to be said out loud.
+  # `ui.dev: tui` on a running city applies to nothing and reports nothing, so
+  # the owner sets it, reopens, sees the same gateway and concludes the feature
+  # does not work. The gateway leaves a pid marker, so drift here is a fact and
+  # not a guess.
+  # Only where there is positive evidence. A gateway leaves a pid marker, so its
+  # presence proves what that window is running; its ABSENCE proves nothing —
+  # a session opened without --claude has no markers at all, and inferring "then
+  # it must be a TUI" reported drift on a city where nothing had drifted. So
+  # this speaks in one direction, and says nothing rather than something it
+  # cannot know.
+  desfasadas=()
+  MARCAS="$(python3 -c 'import sys; sys.path.insert(0, sys.argv[1]); import runtime_processes as r; print(r.ruta(sys.argv[2]))' "$(dirname "$0")" "$EQUIPO" 2>/dev/null || true)"
+  for w in $VENTANAS_YA; do
+    [ "$w" = seat ] && continue
+    [ "$(ui_de "$w" gateway)" = tui ] || continue
+    [ -n "$MARCAS" ] && [ -f "$MARCAS/gateways/$w.pid" ] \
+      && desfasadas+=("$w: the card says tui, and the open window is the city's gateway")
+  done
+  if [ ${#desfasadas[@]} -gt 0 ]; then
+    echo >&2
+    echo "These windows were left as they are, and their card has moved on:" >&2
+    printf '  %s\n' "${desfasadas[@]}" >&2
+    echo "Nothing was closed — there may be work in them. To apply:" >&2
+    for d in ${desfasadas[@]+"${desfasadas[@]}"}; do
+      echo "  tmux kill-window -t $SESSION:${d%%:*}   (then open the city again)" >&2
+    done
+  fi
+
   sobran=()
   for w in $VENTANAS_YA; do
     [ "$w" = seat ] && continue

package/plugin/skills/city/SKILL.md

@@ -103,16 +103,29 @@ Use a committee only when specialised repo evidence can change the decision:
    chair or another member before the barrier opens. Abstention is valid.
 3. Compare evidence and publish one synthesis. Do not count votes.
 4. After synthesis, members stay silent unless they can identify new evidence, a
-   contradiction, a material risk or a dependency. They request the floor.
-5. Grant or deny every request explicitly. A grant allows one scoped reply. That
+   contradiction, a material risk or a dependency. Wanting to add something is
+   not one of those — the moment to contribute was the isolated position, and a
+   floor taken for an opinion is how a committee becomes a chat room. They
+   request the floor; they never take it.
+5. There is a fifth basis, `misrepresented`, and it is about the record rather
+   than the world: the synthesis does not say what that member said. Not
+   disagreement with the summary — words put in their mouth, a condition
+   dropped, a stance reported that they did not take. Each member gets one, it
+   does not spend the rebuttal budget even where the brief allowed none, and
+   the bus attaches their stored position so the chair is shown what it
+   summarised rather than a memory of it. A member the chair proceeded without
+   has nothing on the record and so cannot raise it. This exists because
+   execution gets an independent verifier and the summary had nobody: it was
+   the one place where a single actor could bend the outcome unchecked.
+6. Grant or deny every request explicitly. A grant allows one scoped reply. That
    intervention is then heard by all selected members, but nobody answers it
    directly: a material counterpoint requires a new request which the chair
    sequences. This creates deliberation without opening a free debate.
-6. Record outcome, rationale, owner, executor, selected and rejected evidence,
+7. Record outcome, rationale, owner, executor, selected and rejected evidence,
    decisive contributors, dissent and observable conditions that reopen the
    decision. Review `agents-city committee history`; repeated influence is a
    prompt to inspect capture, not a verdict.
-7. Assign verification to an agent other than the executor whenever one exists.
+8. Assign verification to an agent other than the executor whenever one exists.
    A failed verification must replan; only a pass may close the act.
 
 The vendor-neutral terminal door is: