chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

Automated backend sync from szl-holdings/a11oy main via hf-sync-backend.
Updated (differed from the Space): Dockerfile, serve.py
Deleted (gone from the repo + Dockerfile COPY set): (none)

Keeps the Space-built backend (serve.py + the Dockerfile-COPY'd .py
modules) identical to GitHub main so the Space never rebuilds from a
stale backend, new endpoints don't 404 there, and orphaned modules
removed from the repo don't linger in the Space tree.

Dockerfile

@@ -130,6 +130,14 @@ COPY static/a11oy_operator_organ.js ./static/a11oy_operator_organ.js
 COPY static/vendor3d/three.module.min.js ./static/vendor3d/three.module.min.js
 COPY static/vendor3d/OrbitControls.js ./static/vendor3d/OrbitControls.js
 COPY static/vendor3d/THREE_LICENSE.txt ./static/vendor3d/THREE_LICENSE.txt
+# ADDITIVE (cathedral unification, GitHub-aligned): the ONE canonical genius
+# cathedral served at /cathedral — IDENTICAL "Constellation · Khipu" scene as the
+# SZLHOLDINGS/cathedral HF static space. cathedral_genius.html is that HF
+# index.html byte-for-byte except its two asset paths (importmap -> /hero/vendor3d,
+# module src -> /cathedral/app.js). app.js is the canonical ES module, served
+# sovereign in-image. Reuses the vendor3d Three.js r160 above — 0 CDN.
+COPY cathedral_genius.html ./cathedral_genius.html
+COPY static/cathedral_app.js ./static/cathedral_app.js
 # ADDITIVE: batch-2 sovereign security data module (imported by serve.py; try/except-guarded).
 # ADDITIVE: a11oy.code conversational orchestrator module (imported by serve.py).
 # ADDITIVE (a11oy Code agentic core, 2026-06-10): the GENUINELY-agentic loop + agentic

serve.py

@@ -6441,6 +6441,39 @@ async def _hero_vendor(fname: str) -> Response:
     return JSONResponse({"error": "vendor missing"}, status_code=404)
 
 
+# === ADDITIVE: /cathedral — the ONE canonical genius cathedral, GitHub-aligned. ===
+# Unifies the cathedral front door so a11oy.net/cathedral renders the IDENTICAL
+# "Constellation · Khipu" scene as the SZLHOLDINGS/cathedral HF static space and
+# killinchu/cathedral. The page (cathedral_genius.html at the repo root) is the
+# canonical HF index.html byte-for-byte EXCEPT its two asset paths, which are
+# repointed at sovereign in-image routes: the ES-module app at /cathedral/app.js
+# and the vendored Three.js r160 (MIT) at the existing /hero/vendor3d/* routes.
+# 0 runtime CDN; system-font stacks; Three.js vendored. Honesty doctrine v11:
+# locked-proven = 8, Λ = Conjecture 1 (advisory), Khipu BFT = Conjecture 2.
+# Registered BEFORE the SPA /{full_path:path} catch-all so it wins ordered match
+# (previously /cathedral fell through to the console SPA shell — the divergence).
+# Signed-off-by: Stephen P. Lutar Jr. <stephenlutar2@gmail.com>
+@app.get("/cathedral")
+async def cathedral_genius_page() -> Response:
+    f = Path("/app/cathedral_genius.html")
+    if f.is_file():
+        return FileResponse(str(f), media_type="text/html")
+    # Honest fallback: the Sovereign-Lattice front door, then the SPA shell.
+    hero = Path("/app/cathedral.html")
+    if hero.is_file():
+        return FileResponse(str(hero), media_type="text/html")
+    return FileResponse(INDEX_HTML, media_type="text/html")
+
+@app.get("/cathedral/app.js")
+async def _cathedral_app_js() -> Response:
+    f = Path("/app/static/cathedral_app.js")
+    if f.is_file():
+        return FileResponse(str(f), media_type="application/javascript; charset=utf-8",
+                            headers={"Cache-Control": "public, max-age=3600"})
+    return JSONResponse({"error": "cathedral app.js missing"}, status_code=404)
+# === end /cathedral canonical genius unification ===
+
+
 
 # --- Doctrine v13 organ page routes (ADDITIVE; explicit, win over SPA catch-all) ---
 PAGES_DIR = Path("/app/pages")