aimeat 2.1.0 → 2.3.0

package/dist/public/js/services/organisms.js

@@ -37,6 +37,7 @@ import { api, apiGet, apiPost, apiPut, apiPatch, apiDelete } from '/js/api.js';
 import { decodeEntities } from '/js/utils.js';
 import { wsRoot, isMemorySpace, isDocSpace } from './organisms.shared.js';
 import { mlbl } from './organisms.charts.js';
+import { swallowed } from '/js/swallowed.js';
 
 // ── Re-exports of pieces extracted to sibling modules (pure extraction, max-file-lines) ──
 export { wsRoot, isMemorySpace, isDocSpace, getObjectSchema } from './organisms.shared.js';
@@ -75,7 +76,7 @@ export async function getOrganismsTab() {
     const d = data?.data;
     if (!d) return null;
     return { mine: d.mine || [], public: d.public || [], uiPrefs: d.uiPrefs ?? null };
-  } catch { return null; }
+  } catch (err) { swallowed('organisms: getOrganismsTab', err); return null; }
 }
 
 /** Get organism detail. */
@@ -134,7 +135,7 @@ export async function getWaiting() {
   try {
     const resp = await apiGet('/v1/organisms/waiting');
     return Array.isArray(resp?.data?.items) ? resp.data.items : [];
-  } catch { return []; }
+  } catch (err) { swallowed('organisms: getWaiting', err); return []; }
 }
 
 /** Agent activity aggregated across every readable workspace in ONE request (organism Agents tab).
@@ -143,7 +144,7 @@ export async function getAgentsActivity(orgId) {
   try {
     const resp = await apiGet(`/v1/organisms/${encodeURIComponent(orgId)}/agents/activity`);
     return resp?.data?.agents || {};
-  } catch { return {}; }
+  } catch (err) { swallowed('organisms: getAgentsActivity', err); return {}; }
 }
 
 /** List the comment thread on a workspace object (record or document). */
@@ -161,7 +162,7 @@ export async function listCommentsBatch(orgId, instances) {
   try {
     const resp = await apiPost(`/v1/organisms/${encodeURIComponent(orgId)}/comments/batch`, { instances });
     return (resp?.data?.comments) || {};
-  } catch { return {}; }
+  } catch (err) { swallowed('organisms: listCommentsBatch', err); return {}; }
 }
 
 /** Add a comment to a workspace object. anchor: { section?|quote? }; parentId for a threaded reply. */
@@ -304,7 +305,7 @@ export async function deleteWorkspace(orgId, wsId) {
   const r = await apiDelete(`/v1/organisms/${encodeURIComponent(orgId)}/workspace?ws=${encodeURIComponent(wsId)}`);
   // Drop the registry entry so the deleted workspace no longer lists.
   const list = await listWorkspaces(orgId);
-  await saveWorkspaceRegistry(orgId, list.filter(w => w.id !== wsId)).catch(() => {});
+  await saveWorkspaceRegistry(orgId, list.filter(w => w.id !== wsId)).catch(err => { swallowed('organisms: deleteWorkspace', err); });
   return r;
 }
 
@@ -340,7 +341,7 @@ export async function getOrganismOverview(orgId) {
   try {
     const r = await apiGet(`/v1/organisms/${encodeURIComponent(orgId)}/overview`);
     return r?.data?.markdown || '';
-  } catch { return ''; }
+  } catch (err) { swallowed('organisms: getOrganismOverview', err); return ''; }
 }
 
 /** OKF-style STRUCTURE OVERVIEW (Markdown) of ONE workspace — per space the most-recent entries
@@ -349,7 +350,7 @@ export async function getWorkspaceOverview(orgId, wsId) {
   try {
     const r = await apiGet(`/v1/organisms/${encodeURIComponent(orgId)}/workspace/overview?ws=${encodeURIComponent(wsId)}`);
     return r?.data?.markdown || '';
-  } catch { return ''; }
+  } catch (err) { swallowed('organisms: getWorkspaceOverview', err); return ''; }
 }
 
 /** Full workspace overview payload in ONE call: the OKF markdown PLUS the measurability `objectives`
@@ -369,7 +370,7 @@ export async function getOrganismGraph(orgId) {
   try {
     const r = await apiGet(`/v1/organisms/${encodeURIComponent(orgId)}/graph`);
     return r?.data?.graph || null;
-  } catch { return null; }
+  } catch (err) { swallowed('organisms: getOrganismGraph', err); return null; }
 }
 
 /** Deterministic GRAPH of ONE workspace (root = workspace, with its spaces). Returns null on failure. */
@@ -377,7 +378,7 @@ export async function getWorkspaceGraph(orgId, wsId) {
   try {
     const r = await apiGet(`/v1/organisms/${encodeURIComponent(orgId)}/workspace/graph?ws=${encodeURIComponent(wsId)}`);
     return r?.data?.graph || null;
-  } catch { return null; }
+  } catch (err) { swallowed('organisms: getWorkspaceGraph', err); return null; }
 }
 
 /** Organism STRUCTURE TIMELINE: { current, history } — the trackable structure fingerprint's current
@@ -418,7 +419,7 @@ export async function listWorkspaces(orgId) {
     const list = Array.isArray(item?.value?.workspaces) ? item.value.workspaces : [];
     // Names are plain text; legacy import paths stored them HTML-escaped. Decode for display.
     return list.map(w => (w && w.name ? { ...w, name: decodeEntities(w.name) } : w));
-  } catch { return []; }
+  } catch (err) { swallowed('organisms: item', err); return []; }
 }
 
 /** Persist the workspace registry. */
@@ -440,7 +441,7 @@ export async function discoverWorkspaces(orgId, opts = {}) {
     const list = Array.isArray(resp?.data?.workspaces) ? resp.data.workspaces : [];
     // Names are plain text; legacy import paths stored them HTML-escaped. Decode for display.
     return list.map(w => (w && w.name ? { ...w, name: decodeEntities(w.name) } : w));
-  } catch { return []; }
+  } catch (err) { swallowed('organisms: discoverWorkspaces', err); return []; }
 }
 
 /** Request access to a workspace you can see but not read. */
@@ -453,7 +454,7 @@ export async function listWorkspaceRequests(orgId, ws) {
   try {
     const resp = await apiGet(`/v1/organisms/${encodeURIComponent(orgId)}/workspace-access?ws=${encodeURIComponent(ws)}`);
     return Array.isArray(resp?.data?.requests) ? resp.data.requests : [];
-  } catch { return []; }
+  } catch (err) { swallowed('organisms: listWorkspaceRequests', err); return []; }
 }
 
 /** Approve or deny a member's access request to your workspace. decision: 'approve'|'deny'|'viewer'|'contributor'. */
@@ -475,7 +476,7 @@ export async function getWorkspaceAccessAll(orgId) {
   try {
     const resp = await apiGet(`/v1/organisms/${encodeURIComponent(orgId)}/workspace-access?all=1`);
     return Array.isArray(resp?.data?.workspaces) ? resp.data.workspaces : [];
-  } catch { return []; }
+  } catch (err) { swallowed('organisms: getWorkspaceAccessAll', err); return []; }
 }
 
 /** Directly add (or re-role) a member: role 'viewer' (read) | 'contributor' (read+write). grantee = an
@@ -498,7 +499,7 @@ export async function getWorkspaceEngagements(orgId, ws) {
   try {
     const resp = await apiGet(`/v1/organisms/${encodeURIComponent(orgId)}/workspace/engagements?ws=${encodeURIComponent(ws)}`);
     return Array.isArray(resp?.data?.engagements) ? resp.data.engagements : [];
-  } catch { return []; }
+  } catch (err) { swallowed('organisms: getWorkspaceEngagements', err); return []; }
 }
 
 /** Activate (adopt) a contract engagement for one of your agents. `agent` = full GAII. */
@@ -566,17 +567,17 @@ function slug(name) {
 export async function buildOrganismOverviewMermaid(orgId) {
   const nodeId = (currentGhii().split('@')[1]) || '';
   const [orgResp, memResp, wsList] = await Promise.all([
-    getOrganism(orgId).catch(() => null),
-    listMembers(orgId).catch(() => null),
-    listWorkspaces(orgId).catch(() => []),
+    getOrganism(orgId).catch(err => { swallowed('organisms: nodeId', err); return null; }),
+    listMembers(orgId).catch(err => { swallowed('organisms: nodeId', err); return null; }),
+    listWorkspaces(orgId).catch(err => { swallowed('organisms: nodeId', err); return []; }),
   ]);
   const org = orgResp?.data?.organism || {};
   const members = memResp?.data?.members || [];
   const agents = org.agentGaiis || [];
   const wsData = [];
   for (const w of wsList) {
-    const ws = await getWorkspace(orgId, w.id).catch(() => null);
-    const sources = await getWorkspaceSources(orgId, w.id).catch(() => []);
+    const ws = await getWorkspace(orgId, w.id).catch(err => { swallowed('organisms: nodeId', err); return null; });
+    const sources = await getWorkspaceSources(orgId, w.id).catch(err => { swallowed('organisms: nodeId', err); return []; });
     const types = (ws?.manifest?.objectTypes || []).filter(isMemorySpace)
       .map(o => `${o.name} (${isDocSpace(o) ? 'doc' : 'rec'})`);
     const knowledge = sources.filter(s => s.type === 'knowledge').map(s => s.label || s.packageId);
@@ -686,7 +687,7 @@ export async function deleteWorkspaceObject(orgId, wsId, namespace, id) {
     if (it.key !== base && !it.key.startsWith(base + '.')) continue;  // exclude sibling ids
     const role = it.key === base ? '' : it.key.slice(base.length + 1);
     if (role === '' || role === 'draft' || role === 'latest' || /^version\.\d+$/.test(role)) {
-      try { await apiDelete(`/v1/memory/${encodeURIComponent(it.key)}`); deleted++; } catch { /* skip */ }
+      try { await apiDelete(`/v1/memory/${encodeURIComponent(it.key)}`); deleted++; } catch (err) { swallowed('organisms: items', err); }
     }
   }
   return deleted;
@@ -709,7 +710,7 @@ export async function getConfig(orgId) {
   try {
     const resp = await apiGet(`/v1/memory?prefix=${encodeURIComponent(key)}`);
     return (resp?.data?.items || []).find(i => i.key === key)?.value || {};
-  } catch { return {}; }
+  } catch (err) { swallowed('organisms: getConfig', err); return {}; }
 }
 
 /** The current owner's GHII (`owner@node`). ALWAYS returns a string so callers can safely `.split('@')`.
@@ -723,7 +724,7 @@ export function currentGhii() {
   try {
     const s = typeof auth.getSession === 'function' ? auth.getSession() : null;
     if (s && typeof s === 'object' && typeof s.ghii === 'string') return s.ghii;
-  } catch { /* ignore */ }
+  } catch (err) { swallowed('organisms: auth', err); }
   return '';
 }
 
@@ -737,7 +738,7 @@ export async function getAllSections(orgId, wsId) {
       const m = String(it.key || '').match(/\.meta\.sections\.(.+)$/);
       if (m) out[m[1]] = Array.isArray(it.value?.sections) ? it.value.sections : [];
     }
-  } catch { /* none yet */ }
+  } catch (err) { swallowed('organisms: getAllSections', err); }
   return out;
 }
 
@@ -756,7 +757,7 @@ export async function getAllColors(orgId, wsId) {
       const m = String(it.key || '').match(/\.meta\.colors\.(.+)$/);
       if (m) out[m[1]] = (it.value && typeof it.value.colors === 'object' && it.value.colors) || {};
     }
-  } catch { /* none yet */ }
+  } catch (err) { swallowed('organisms: getAllColors', err); }
   return out;
 }
 
@@ -776,7 +777,7 @@ export async function getWorkspaceSources(orgId, wsId) {
     const resp = await apiGet(`/v1/memory?prefix=${encodeURIComponent(key)}`);
     const item = (resp?.data?.items || []).find(i => i.key === key);
     return Array.isArray(item?.value?.sources) ? item.value.sources : [];
-  } catch { return []; }
+  } catch (err) { swallowed('organisms: item', err); return []; }
 }
 
 /** Persist the workspace's source references. */

package/dist/public/js/services/organisms.prompts.js

@@ -8,6 +8,7 @@
  *   v1.0.0 — 2026-07-13 — Extracted from organisms.js (max-file-lines)
  */
 import { isMemorySpace, isDocSpace, getObjectSchema } from './organisms.shared.js';
+import { swallowed } from '/js/swallowed.js';
 
 // ── Access prompt: a copy-paste prompt teaching an AI/agent how to use THIS workspace ──
 // Bridges the MCP gap (no workspace-aware tools yet) by injecting the real structure + the exact
@@ -40,7 +41,7 @@ export async function buildAccessPrompt(orgId, orgName, wsId, ws, variant = 'hum
   const described = [];
   for (const ot of types) {
     // records is the default mode (mode may be undefined) — fetch the schema unless it's a document.
-    const schema = !isDocSpace(ot) ? await getObjectSchema(orgId, wsId, ot.namespace).catch(() => null) : null;
+    const schema = !isDocSpace(ot) ? await getObjectSchema(orgId, wsId, ot.namespace).catch(err => { swallowed('organisms.prompts: types', err); return null; }) : null;
     described.push(describeType(ot, schema));
   }
   const structure = described.join('\n') || '(no spaces declared yet)';
@@ -140,7 +141,7 @@ export async function buildContractAgentPrompt(orgId, orgName, wsId, ws) {
   const types = (m.objectTypes || []).filter(isMemorySpace);
   const described = [];
   for (const ot of types) {
-    const schema = !isDocSpace(ot) ? await getObjectSchema(orgId, wsId, ot.namespace).catch(() => null) : null;
+    const schema = !isDocSpace(ot) ? await getObjectSchema(orgId, wsId, ot.namespace).catch(err => { swallowed('organisms.prompts: types', err); return null; }) : null;
     described.push(describeType(ot, schema));
   }
   const structure = described.join('\n') || '(no spaces declared yet)';

package/dist/public/js/services/organisms.shared.js

@@ -8,6 +8,7 @@
  *   v1.0.0 — 2026-07-13 — Extracted from organisms.js (max-file-lines)
  */
 import { apiGet } from '/js/api.js';
+import { swallowed } from '/js/swallowed.js';
 
 /** Does this space's data live in workspace memory keys (records/documents the workspace view can
  *  show)? Missing backing counts as memory. Mirrors the server's isMemoryBackedSpace — THE one
@@ -29,5 +30,5 @@ export async function getObjectSchema(orgId, wsId, namespace) {
   try {
     const resp = await apiGet(`/v1/memory/${encodeURIComponent(key)}/schema`);
     return resp?.data?.has_schema ? resp.data.schema : null;
-  } catch { return null; }
+  } catch (err) { swallowed('organisms.shared: getObjectSchema', err); return null; }
 }

package/dist/public/js/services/organisms.workspace-gen.js

@@ -9,6 +9,7 @@
  */
 import { api, apiGet, apiPost, apiPut } from '/js/api.js';
 import { wsRoot } from './organisms.shared.js';
+import { swallowed } from '/js/swallowed.js';
 
 // ── Workspace (manifest-driven; a "project" = an organism with a manifest) ──
 
@@ -63,7 +64,7 @@ export async function getManifestArchitectPrompt() {
   try {
     const resp = await apiGet('/v1/portal/prompts/manifest-architect');
     return resp?.data?.prompt || '';
-  } catch { return ''; }
+  } catch (err) { swallowed('organisms.workspace-gen: getManifestArchitectPrompt', err); return ''; }
 }
 
 /* Self-contained, positively-framed one-shot prompt for the workspace generator (and the
@@ -263,7 +264,7 @@ export async function applyGeneratedWorkspace(orgId, wsId, generated, opts = {})
       for (const item of items.slice(0, 5)) {
         n++;
         const id = String((item && item.id) || `example-${n}`).replace(/[^a-zA-Z0-9_-]/g, '-');
-        await apiPost('/v1/memory', { key: `${root}.${namespace}.${id}.draft`, value: { ...item, id }, visibility: 'private' }).catch(() => {});
+        await apiPost('/v1/memory', { key: `${root}.${namespace}.${id}.draft`, value: { ...item, id }, visibility: 'private' }).catch(err => { swallowed('organisms.workspace-gen: applyGeneratedWorkspace', err); });
       }
     }
   }

package/dist/public/js/services/packages.js

@@ -74,6 +74,7 @@ export async function importPackageZip(file) {
     body: formData,
   });
   if (!res.ok) {
+    // eslint-disable-next-line aimeat/no-silent-catch -- the body is read only to enrich an error already being reported
     const body = await res.json().catch(() => ({}));
     throw new Error(body.error?.message || `Import failed: ${res.status}`);
   }

package/dist/public/js/services/schedules.js

@@ -18,6 +18,7 @@
  *     projected cron fire-times for the Profile › Scheduler calendar.
  */
 import { apiGet, apiPost, apiPatch, apiDelete } from '/js/api.js';
+import { swallowed } from '/js/swallowed.js';
 
 /** Master aggregate: { managed, extensions, agentInternal }. */
 export async function listAllSchedules() {
@@ -35,7 +36,7 @@ export async function getSchedulerTab() {
     const d = res?.data;
     if (!d) return null;
     return { schedules: d.schedules || { managed: [], extensions: [], agentInternal: [] }, agents: d.agents || [] };
-  } catch { return null; }
+  } catch (err) { swallowed('schedules: getSchedulerTab', err); return null; }
 }
 
 /**

package/dist/public/js/services/security.js

@@ -13,6 +13,7 @@
  *   v1.0.0 — 2026-07-13 — Header added; file pre-dates header standard
  */
 import { apiGet, api } from '/js/api.js';
+import { swallowed } from '/js/swallowed.js';
 
 /** Load GHII CORS settings. */
 export async function getGhiiCors() {
@@ -70,7 +71,7 @@ export async function loadAll(agents) {
       try {
         const cors = await getAgentCors(ag.name);
         agentsCors.push(cors);
-      } catch { /* skip */ }
+      } catch (err) { swallowed('security: loadAll', err); }
     }
   }
   return { ghii, agents: agentsCors };
@@ -87,5 +88,5 @@ export async function getSecurityOverview() {
     const d = data?.data;
     if (!d) return null;
     return { ghii: d.ghii ?? null, agents: d.agents || [], sessions: d.sessions || [] };
-  } catch { return null; }
+  } catch (err) { swallowed('security: getSecurityOverview', err); return null; }
 }

package/dist/public/js/services/skills.js

@@ -88,6 +88,7 @@ export async function downloadSkillZip(name, { scope, owner, organism, ws } = {}
   try {
     jwt = (window.AIMEAT?.auth?.getSession()?.jwt)
       || JSON.parse(localStorage.getItem('aimeat_session') || '{}').jwt || '';
+  // eslint-disable-next-line aimeat/no-silent-catch -- anonymous
   } catch { /* anonymous */ }
   const res = await fetch(`/v1/skills/${encodeURIComponent(name)}/zip${qs ? `?${qs}` : ''}`, {
     headers: jwt ? { Authorization: `Bearer ${jwt}` } : {},

package/dist/public/js/services/tracked-responses.js

@@ -11,6 +11,7 @@
  */
 import { api, apiGet } from '/js/api.js';
 import { createMemory, getMemory, deleteMemory } from '/js/services/memory.js';
+import { swallowed } from '/js/swallowed.js';
 
 const enc = encodeURIComponent;
 const FLAG_PREFIX = 'message-flag.';
@@ -80,12 +81,12 @@ export async function cancelTrackedResponse(id) {
 // ── Lightweight "Important / needs reply" flag (Tier 1) — owner memory, no schema migration ──
 export async function setMessageImportant(messageId, important) {
   if (important) return createMemory(flagKey(messageId), { important: true, at: new Date().toISOString() }, 'private');
-  return deleteMemory(flagKey(messageId)).catch(() => {});
+  return deleteMemory(flagKey(messageId)).catch(err => { swallowed('tracked-responses: setMessageImportant', err); });
 }
 
 export async function isMessageImportant(messageId) {
   try { const r = await getMemory(flagKey(messageId)); return !!(r?.data?.value?.important); }
-  catch { return false; }
+  catch (err) { swallowed('tracked-responses', err); return false; }
 }
 
 /** Return the set of message ids the owner flagged important (for the "Needs reply" filter). Uses a
@@ -99,5 +100,5 @@ export async function listImportantMessageIds() {
       .map(m => String(m.key || ''))
       .filter(k => k.startsWith(FLAG_PREFIX))
       .map(k => k.slice(FLAG_PREFIX.length).replace(/\.latest$/, ''));
-  } catch { return []; }
+  } catch (err) { swallowed('tracked-responses: listImportantMessageIds', err); return []; }
 }

package/dist/public/js/services/unfurl.js

@@ -10,6 +10,7 @@
  *   v1.0.0 — 2026-07-21 — Initial link-preview service (inbox message link cards).
  */
 import { apiGet } from '/js/api.js';
+import { swallowed } from '/js/swallowed.js';
 
 const enc = encodeURIComponent;
 
@@ -19,7 +20,8 @@ export async function fetchPreview(url) {
   try {
     const r = await apiGet(`/v1/unfurl?url=${enc(url)}`);
     return r?.data || null;
-  } catch {
+  } catch (err) {
+    swallowed('unfurl', err);
     return null;   // a preview is best-effort — a link that won't unfurl just shows no card
   }
 }
@@ -37,7 +39,5 @@ export async function fetchPreviewImageUrl(imageUrl) {
     const blob = await resp.blob();
     if (!blob.type.startsWith('image/')) return null;
     return URL.createObjectURL(blob);
-  } catch {
-    return null;
-  }
+  } catch (err) { swallowed('unfurl', err); return null; }
 }

package/dist/public/js/services/work.js

@@ -13,6 +13,7 @@
  *   v1.0.0 — 2026-07-13 — Header added; file pre-dates header standard
  */
 import { apiGet, api } from '/js/api.js';
+import { swallowed } from '/js/swallowed.js';
 
 /** Load work inbox items. Returns array. */
 export async function listInbox() {
@@ -36,7 +37,7 @@ export async function getWorkOverview() {
     const d = data?.data;
     if (!d) return null;
     return { inbox: d.inbox || [], sent: d.sent || [] };
-  } catch { return null; }
+  } catch (err) { swallowed('work: getWorkOverview', err); return null; }
 }
 
 /** Submit a rating for a completed work item. */

package/dist/public/js/site.js

@@ -0,0 +1,74 @@
+/**
+ * @file site.js
+ * @description Reader for this node's own public-page links (window.__SITE, injected by
+ *   serveSpa from config.siteLinks). The marketing pages point at apps and contacts that
+ *   belong to whoever runs the node, so nothing here is guaranteed to exist: a fresh clone
+ *   has none of it, and every page must render fine without a single one.
+ * @structure
+ *   - siteLink(key) — the URL, or '' when this node has no such link
+ *   - hasSite(key)  — presence test for hiding a nav item or a whole section
+ *   - siteContacts() — the people to show, in approach order (possibly none)
+ *   - contactHref(subject) — mailto: for the first contact, or '' when nobody is configured
+ * @usage import { siteLink, hasSite } from '/js/site.js';
+ * @version-history
+ *   v1.0.0 — 2026-07-28 — Initial. Makes every public-page app reference operator-configurable
+ *     so a node that is not aimeat.io never advertises aimeat.io's apps or contact details.
+ *   v1.1.0 — 2026-07-28 — Contacts become a list with roles (a company has more than one
+ *     person), replacing the single contactName/Email/Phone trio.
+ */
+
+/** @returns {Record<string, any>} */
+function site() {
+  const s = /** @type {any} */ (window).__SITE;
+  return (s && typeof s === 'object') ? s : {};
+}
+
+/**
+ * The configured URL for a site link, or '' when this node does not have one.
+ * Callers render conditionally on the empty string; they never hardcode a fallback.
+ * @param {string} key one of: learn, exchange, assessment, roadmap, paper, crm, radar,
+ *   briefing, apiAccelerator, playbooks, showcase, contactName, contactEmail, contactPhone
+ * @returns {string}
+ */
+export function siteLink(key) {
+  const v = site()[key];
+  return typeof v === 'string' ? v : '';
+}
+
+/**
+ * Whether this node has the given link configured. Use to drop a nav item, a proof link or
+ * a whole section rather than rendering a dead control.
+ * @param {string} key
+ * @returns {boolean}
+ */
+export function hasSite(key) {
+  return siteLink(key) !== '';
+}
+
+/**
+ * @typedef {{ name: string, role: string, email: string, phone: string, linkedin: string }} SiteContact
+ */
+
+/**
+ * The people this node prints on its public pages, in the order they should be approached.
+ * Empty when the node configured nobody, which is a valid state: the page then renders no
+ * contact card and no "talk to us" control rather than a dead one.
+ * @returns {SiteContact[]}
+ */
+export function siteContacts() {
+  const c = site().contacts;
+  return Array.isArray(c) ? c.filter(x => x && typeof x.email === 'string' && x.email !== '') : [];
+}
+
+/**
+ * mailto: href for the FIRST configured contact, or '' when nobody is configured. First
+ * rather than "the founder" on purpose: whoever should field the first message goes first
+ * in the list, and every call to action mails them.
+ * @param {string} [subject] optional pre-filled subject line
+ * @returns {string}
+ */
+export function contactHref(subject) {
+  const first = siteContacts()[0];
+  if (!first) return '';
+  return subject ? `mailto:${first.email}?subject=${encodeURIComponent(subject)}` : `mailto:${first.email}`;
+}

package/dist/public/js/swallowed.js

@@ -0,0 +1,69 @@
+/**
+ * @file swallowed.js
+ * @description A bounded, inspectable record of failures the frontend deliberately continues past.
+ *
+ *   Why this exists rather than `console.warn` at every site. The browser code carries ~800 handlers
+ *   that discard their error, and making each one print would destroy a signal this project actually
+ *   relies on: Rule 1b verification treats a clean console as evidence, and an app was once reported
+ *   as "0 console errors" while repainting its open dialog every second. Six hundred new warnings
+ *   would make that measurement meaningless, and the noise would train everyone to ignore it.
+ *
+ *   So the default is quiet but NOT silent: every suppressed failure lands in a ring buffer that can
+ *   be read at any time, and printing is opt-in.
+ *
+ *   Read them: `AIMEAT_SWALLOWED()` in the console, any time, on any page.
+ *   Print them as they happen: `?debug=1` in the URL, or `localStorage.aimeat_debug = '1'`.
+ *
+ * @structure
+ *   - swallowed(where, err): record one suppressed failure
+ *   - window.AIMEAT_SWALLOWED(): read the buffer (newest last)
+ * @usage
+ *   import { swallowed } from '/js/swallowed.js';
+ *   try { ... } catch { swallowed('memory-tab: loadKeys', err); }
+ * @version-history
+ *   v1.0.0 — 2026-07-26 — Initial (silent-exception cleanup, TARGET-052).
+ */
+
+const MAX = 200;
+const ring = [];
+
+let echo = false;
+try {
+    echo = new URLSearchParams(window.location.search).has('debug')
+        || window.localStorage.getItem('aimeat_debug') === '1';
+// This module IS the reporting channel: a storage-blocked browser only means the opt-in echo
+// cannot be read, and reporting that through the channel being initialised would recurse.
+// eslint-disable-next-line aimeat/no-silent-catch -- reporting here would recurse into this module
+} catch {
+    echo = false;
+}
+
+/**
+ * Record a failure the caller has decided to continue past.
+ * @param {string} where  Where it happened — file or component plus the operation.
+ * @param {unknown} err   The caught value.
+ */
+export function swallowed(where, err) {
+    const entry = {
+        at: new Date().toISOString(),
+        where,
+        error: err instanceof Error ? (err.message || err.name) : String(err),
+    };
+    ring.push(entry);
+    if (ring.length > MAX) ring.shift();
+    if (echo) console.warn(`[swallowed] ${where}`, err);
+}
+
+/** Read the buffer. Exposed on window so it can be called from the console on any page. */
+export function readSwallowed() {
+    return ring.slice();
+}
+
+try {
+    /** @type {Record<string, unknown>} */ (/** @type {unknown} */ (window)).AIMEAT_SWALLOWED = readSwallowed;
+// No window (SSR/worker): the buffer still works through the exported function, only the console
+// shortcut is unavailable.
+// eslint-disable-next-line aimeat/no-silent-catch -- no window; only the console shortcut is lost
+} catch {
+    void 0;
+}

package/dist/public/js/theme.js

@@ -38,6 +38,7 @@ function storedChoice() {
     const v = localStorage.getItem(STORAGE_KEY);
     return VALID.has(v) ? v : null;
   } catch {
+    // eslint-disable-next-line aimeat/no-silent-catch -- a browser API refusing here IS the answer
     return null;
   }
 }
@@ -68,7 +69,7 @@ export function setTheme(theme, persist = true) {
   const next = VALID.has(theme) ? theme : 'light';
   document.documentElement.dataset.theme = next;
   if (persist) {
-    try { localStorage.setItem(STORAGE_KEY, next); } catch { /* ignore */ }
+    try { localStorage.setItem(STORAGE_KEY, next); } catch { /* ignore */ }   // eslint-disable-line aimeat/no-silent-catch -- ignore
   }
   syncMetaThemeColor(next);
   const detail = { theme: next };

package/dist/public/js/utils.js

@@ -1,3 +1,4 @@
+import { swallowed } from '/js/swallowed.js';
 /**
  * @file public/js/utils.js
  * @description Shared browser helpers used across all portal/SPA views — HTML/attribute escaping and
@@ -209,7 +210,8 @@ export function handleImgError(e) {
       icon = `<path d="M21 5v6.59l-3-3L13.41 13 9 8.59 3 14.59V5c0-1.1.9-2 2-2h14c1.1 0 2 .9 2 2zm0 14c0 1.1-.9 2-2 2H5c-1.1 0-2-.9-2-2v-2.58l6-6L13.41 15 18 10.41l3 3V19z" fill="currentColor" opacity=".5"/><line x1="4" y1="4" x2="20" y2="20" stroke="currentColor" stroke-width="1.5" opacity=".5"/>`;
     }
     applyFallbackSvg(img, w, h, label, icon);
-  }).catch(() => {
+  }).catch((err) => {
+    swallowed('utils', err);
     applyFallbackSvg(img, w, h, 'N/A',
       `<path d="M21 5v6.59l-3-3L13.41 13 9 8.59 3 14.59V5c0-1.1.9-2 2-2h14c1.1 0 2 .9 2 2zm0 14c0 1.1-.9 2-2 2H5c-1.1 0-2-.9-2-2v-2.58l6-6L13.41 15 18 10.41l3 3V19z" fill="currentColor" opacity=".5"/><line x1="4" y1="4" x2="20" y2="20" stroke="currentColor" stroke-width="1.5" opacity=".5"/>`);
   });

package/dist/public/lib/VENDORED.md

@@ -11,7 +11,8 @@ with per-lib AI docs + changelogs) — keep this table and the registry in sync.
 |------|---------|---------|---------|--------|---------|
 | `tailwindcss@4.js` | `@tailwindcss/browser` | 4.3.1 | `styling` | `https://cdn.jsdelivr.net/npm/@tailwindcss/browser@4` | MIT |
 | `daisyui@5.css` | `daisyui` | 5.5.23 | `styling` | `https://cdn.jsdelivr.net/npm/daisyui@5` | MIT |
-| `aimeat-daisyui-bridge.css` | AIMEAT-local (theme bridge) | — | `styling` | this repo | MIT |
+| `aimeat-theme.css` | AIMEAT-local (the theme SYSTEM: 5 palettes × light+dark on the `data-theme` × `data-palette` axes, self-hosted faces, elevation/motion/type tokens; verified by `pnpm check:theme`) | 2.0.0 | `styling` | this repo | MIT |
+| `aimeat-daisyui-bridge.css` | AIMEAT-local (theme bridge; `@import`s the theme) | — | `styling` | this repo | MIT |
 | `chartjs@4.js` | `chart.js` (UMD) | 4.5.1 | `chartjs` | `https://cdn.jsdelivr.net/npm/chart.js@4/dist/chart.umd.min.js` | MIT |
 | `mermaid/mermaid.min.js` | `mermaid` (UMD) | 11.15.0 | `mermaid` | `node_modules/mermaid/dist` (see mermaid/README.md) | MIT |
 | `three.min.js` | `three` (r128 UMD) | r128 | `three` | `https://cdn.jsdelivr.net/npm/three@0.128.0/build/three.min.js` | MIT |
@@ -20,10 +21,12 @@ with per-lib AI docs + changelogs) — keep this table and the registry in sync.
 | `pixi-unsafe-eval@8.min.js` | `pixi.js` (unsafe-eval companion — REQUIRED after pixi under the app CSP) | 8.19.0 | `pixi` | `https://cdn.jsdelivr.net/npm/pixi.js@8/dist/packages/unsafe-eval.min.js` | MIT |
 | `phaser@3.min.js` | `phaser` | 3.90.0 | `phaser` | `https://cdn.jsdelivr.net/npm/phaser@3/dist/phaser.min.js` | MIT |
 | `drawflow@0.min.js` + `.min.css` | `drawflow` (engine INSIDE the aimeat-flow cortex — apps use AIMEAT.flow, never Drawflow directly) | 0.0.60 | `aimeat-flow` | `https://cdn.jsdelivr.net/npm/drawflow@0.0.60/dist/` | MIT |
-| `fonts.css` + `fonts/*.woff2` | Baloo 2 (variable 400–800) + Bangers display fonts, latin + latin-ext (ä/ö) | Baloo 2 v23 · Bangers v25 | `fonts` | Google Fonts CDN (see `fonts/LICENSE.md`) | OFL-1.1 |
+| `fonts.css` + `fonts/*.woff2` | Baloo 2 + Bangers display fonts (the `fonts` pack, via `fonts.css`) AND the theme-system faces Inter, Space Grotesk, Fraunces, JetBrains Mono (declared by `aimeat-theme.css`, lazy-loaded per family). All latin + latin-ext (ä/ö); see `fonts/LICENSE.md` | Baloo 2 v23 · Bangers v25 · Inter v20 · Space Grotesk v22 · Fraunces v38 · JetBrains Mono v24 | `fonts` / `styling` | Google Fonts CDN (see `fonts/LICENSE.md`) | OFL-1.1 |
 | `realtime.js` | AIMEAT-local (WS/WebRTC/Yjs client + `SharedClock` synced timeline) | 1 | `realtime` | this repo | MIT |
 | `toastui/toastui-editor-all.min.js` + `.min.css` | TOAST UI Editor | (SPA-internal) | — | `https://uicdn.toast.com` | MIT |
-| `preact.mjs`, `preact-hooks.mjs`, `htm.mjs`, `yaml.mjs`, `minidenticons.min.js` | preact / htm / yaml / minidenticons (ESM) | (SPA-internal, importmap) | — | jsdelivr | MIT |
+| `pdfjs@6/pdf.min.mjs` + `pdf.worker.min.mjs` | `pdfjs-dist` (ESM + worker) | 6.1.200 | `pdfjs` | `https://cdn.jsdelivr.net/npm/pdfjs-dist@6.1.200/build/` | Apache-2.0 |
+| `yaml.mjs` | `yaml` (ESM) | 2.x | `yaml` | jsdelivr | ISC |
+| `preact.mjs`, `preact-hooks.mjs`, `htm.mjs`, `minidenticons.min.js` | preact / htm / minidenticons (ESM) | (SPA-internal, importmap) | — | jsdelivr | MIT |
 | `live-updates.js` | AIMEAT-local (SSE ESM wrapper) | (SPA-internal) | — | this repo | MIT |
 | `samples/` | audio samples for aimeat-audio | — | — | CC | CC |
 
@@ -51,6 +54,7 @@ The same append-only rule applies to the node-bundled cortex wrappers
 
 ```html
 <link href="/lib/daisyui@5.css" rel="stylesheet" type="text/css" />
+<link href="/lib/aimeat-theme.css" rel="stylesheet" type="text/css" />
 <link href="/lib/aimeat-daisyui-bridge.css" rel="stylesheet" type="text/css" />
 <script src="/lib/tailwindcss@4.js"></script>
 <!-- charts: <script src="/lib/chartjs@4.js"></script> before aimeat-charts -->