aimeat 2.2.0 → 2.3.0

package/dist/public/views/app-grant.js

@@ -22,6 +22,18 @@
  *     shows "Your app" instead of "not yours"; manage mode pre-checks the UNION of granted +
  *     requested scopes and badges newly requested ones "new" (they used to come unchecked, so
  *     users silently kept the old grant after an app added a scope).
+ *   v1.3.0 — 2026-07-27 — Weight + framing pass (outside feedback: the screen "was heavy and would
+ *     easily scare people away"). Generic for every app, nothing app-specific here:
+ *       • identity first — icon (manifest) or a monogram, name, origin, and the app's own
+ *         description, so a stranger sees WHAT this is before what it asks for;
+ *       • the scope wall collapses to ONE line of areas ("Works with: your saved data, your
+ *         files") behind "Show the exact permissions (N)". The exact list is unchanged and one
+ *         click away — the wording is not softened, because app-grant memory scopes really do
+ *         reach the owner's whole namespace;
+ *       • one disclosure instead of two: expanding shows the list WITH the per-scope checkboxes
+ *         (the old "Advanced" toggle hid subset selection from everyone who never found it);
+ *       • the guarantees read as promises, not as the warning "This app is not yours";
+ *       • "Don't trust" → "Not now": cancelling no longer means declaring the app untrustworthy.
  */
 import { h } from 'preact';
 import { useState, useEffect } from 'preact/hooks';
@@ -29,14 +41,41 @@ import htm from 'htm';
 import { t } from '/js/i18n.js';
 import { api } from '/js/api.js';
 import { escHtml } from '/js/utils.js';
+import { swallowed } from '/js/swallowed.js';
 
 const html = htm.bind(h);
-const tr = (key, fallback) => { const v = t(key); return v && v !== key ? v : fallback; };
+/** t() with a literal fallback; {vars} are interpolated into the fallback too (missing-key safety). */
+const tr = (key, fallback, vars) => {
+  const v = t(key, vars);
+  if (v && v !== key) return v;
+  let s = fallback;
+  if (vars) for (const [k, val] of Object.entries(vars)) s = s.replaceAll(`{${k}}`, String(val));
+  return s;
+};
+
+/**
+ * Plain-language area per scope family, for the one-line summary. The summary names WHAT the app
+ * touches; the exact verbs (read / create / delete) stay in the expandable list, unchanged.
+ */
+const AREA_FALLBACKS = {
+  memory: 'your saved data',
+  storage: 'your files',
+  catalogue: 'the public catalogue',
+  social: 'boards',
+  messages: 'your messages',
+  wallet: 'your morsel balance',
+  knowledge: 'your knowledge packages',
+  task: "your agents' tasks",
+  workflow: 'your automations',
+  ai: 'your AI budget',
+  notifications: 'notifications to you',
+  organism: 'your workspaces',
+};
 
 export default function AppGrant() {
   const [state, setState] = useState({ status: 'loading', request: null, error: '' });
   const [submitting, setSubmitting] = useState(false);
-  const [advanced, setAdvanced] = useState(false);
+  const [details, setDetails] = useState(false); // exact per-scope list + checkboxes, collapsed by default
   const [selected, setSelected] = useState(() => new Set());
   const [existingGrant, setExistingGrant] = useState(null); // the grant this app already holds (manage mode)
   const [ownApp, setOwnApp] = useState(false); // server-verified: origin-bound request for the signed-in owner's own app
@@ -70,7 +109,7 @@ export default function AppGrant() {
         try {
           const list = await api('/v1/app-grants');
           grant = (list.data?.grants || []).find((g) => g.app === res.data.app) || null;
-        } catch { /* ignore */ }
+        } catch (err) { swallowed('app-grant: doLogin', err); }
         if (!live) return;
         const reqScopes = (res.data.scopes || []).map((s) => s.scope);
         // The owner's OWN app (server-verified: the redirect origin is bound to exactly this app):
@@ -90,7 +129,7 @@ export default function AppGrant() {
         // covers what it's asking for, just approve silently — no second prompt for an app you trust.
         const covers = grant && reqScopes.every((s) => grant.scopes.includes(s));
         if (grant && !res.data.manage && covers) { setState({ status: 'autoapprove', request: res.data }); return; }
-        if (grant) setAdvanced(true); // manage / add-scopes → show the per-scope checkboxes up front
+        if (grant) setDetails(true); // manage / add-scopes → open the exact list + checkboxes up front
         setState({ status: 'ready', request: res.data });
       })
       .catch((e) => { if (live) setState({ status: 'error', error: e.message || tr('appGrant.expired', 'This request has expired.') }); });
@@ -183,48 +222,82 @@ export default function AppGrant() {
   }
 
   const req = state.request;
+  // Areas, in the order the app asked for them — one plain line instead of a wall of boxes.
+  const areas = [];
+  for (const s of req.scopes) {
+    const family = String(s.scope).split(':')[0];
+    if (!areas.includes(family)) areas.push(family);
+  }
+  const areaLine = areas.map((a) => tr(`appGrant.area.${a}`, AREA_FALLBACKS[a] || a)).join(', ');
+  const keepsData = areas.includes('memory') || areas.includes('storage');
+  const icon = String(req.app_icon || '').trim();
+  const iconIsUrl = /^(https?:\/\/|\/)/.test(icon);
+  const monogram = (Array.from(String(req.app_name || '?').trim())[0] || '?').toUpperCase();
+
   return html`
     <div class="agr-wrap">
       <div class="agr-card">
-        <span class="agr-badge ${ownApp ? 'agr-badge-own' : ''}">${ownApp ? tr('appGrant.ownBadge', 'Your app') : tr('appGrant.externalBadge', 'External app')}</span>
-        <h1 class="agr-title">${existingGrant ? tr('appGrant.manageTitle', 'Manage this app’s access') : tr('appGrant.trustTitle', 'Trust this app?')}</h1>
-        <div class="agr-app">
-          <div class="agr-app-name">${escHtml(req.app_name)}</div>
-          <div class="agr-app-origin">${escHtml(req.app_origin)}</div>
+        <div class="agr-head">
+          <div class="agr-icon" aria-hidden="true">
+            ${icon
+              ? (iconIsUrl
+                ? html`<img class="agr-icon-img" src=${icon} alt="" />`
+                : html`<span class="agr-icon-glyph">${escHtml(icon)}</span>`)
+              : html`<span class="agr-icon-mono">${escHtml(monogram)}</span>`}
+          </div>
+          <div class="agr-head-text">
+            <div class="agr-app-name">${escHtml(req.app_name)}</div>
+            <div class="agr-app-origin">${escHtml(req.app_origin)}</div>
+          </div>
+          <span class="agr-badge ${ownApp ? 'agr-badge-own' : ''}">${ownApp ? tr('appGrant.ownBadge', 'Your app') : tr('appGrant.externalBadge', 'External app')}</span>
         </div>
-        <p class="agr-muted">${ownApp
-          ? tr('appGrant.ownIntro', 'This is your own app. It still uses a scoped, revocable key — never your login session.')
-          : tr('appGrant.trustIntro', 'This app is not yours. It gets its OWN scoped, revocable key — never your login session. You can revoke it anytime in Profile › Access.')}</p>
-
-        <div class="agr-scopes-label">${tr('appGrant.needsLabel', 'This app needs:')}</div>
-        <ul class="agr-scopes">
-          ${req.scopes.map((s) => html`
-            <li class="agr-scope" key=${s.scope}>
-              ${advanced && html`
+
+        <h1 class="agr-title">${existingGrant
+          ? tr('appGrant.manageTitle', 'Manage this app’s access')
+          : tr('appGrant.connectTitle', 'Connect {app} to your account', { app: req.app_name })}</h1>
+        ${req.app_description && html`<p class="agr-lede">${escHtml(req.app_description)}</p>`}
+
+        <div class="agr-summary">
+          <span class="agr-summary-label">${tr('appGrant.worksWith', 'Works with:')}</span>
+          <span class="agr-summary-areas">${escHtml(areaLine)}</span>
+        </div>
+        <button class="agr-details-toggle" aria-expanded=${details} onClick=${() => setDetails((v) => !v)}>
+          ${details
+            ? tr('appGrant.hideDetails', 'Hide the exact permissions')
+            : tr('appGrant.showDetails', 'Show the exact permissions ({n})', { n: req.scopes.length })}
+        </button>
+
+        ${details && html`
+          <ul class="agr-scopes">
+            ${req.scopes.map((s) => html`
+              <li class="agr-scope" key=${s.scope}>
                 <input type="checkbox" class="agr-scope-check" checked=${selected.has(s.scope)}
-                  onChange=${() => toggle(s.scope)} aria-label=${s.scope} />`}
-              <span class="agr-scope-text">
-                <span class="agr-scope-desc">${escHtml(s.description || s.scope)}
-                  ${existingGrant && !existingGrant.scopes.includes(s.scope) && html`<span class="agr-scope-newbadge">${tr('appGrant.newScope', 'new')}</span>`}
+                  onChange=${() => toggle(s.scope)} aria-label=${s.scope} />
+                <span class="agr-scope-text">
+                  <span class="agr-scope-desc">${escHtml(s.description || s.scope)}
+                    ${existingGrant && !existingGrant.scopes.includes(s.scope) && html`<span class="agr-scope-newbadge">${tr('appGrant.newScope', 'new')}</span>`}
+                  </span>
+                  <span class="agr-scope-name">${escHtml(s.scope)}</span>
                 </span>
-                <span class="agr-scope-name">${escHtml(s.scope)}</span>
-              </span>
-            </li>`)}
-        </ul>
+              </li>`)}
+          </ul>
+          <p class="agr-details-hint">${tr('appGrant.subsetHint', 'Uncheck anything you would rather not give. The app gets exactly what stays checked.')}</p>`}
 
-        <button class="agr-advanced-toggle" onClick=${() => setAdvanced((v) => !v)}>
-          ${advanced ? tr('appGrant.advancedHide', '▲ Hide advanced') : tr('appGrant.advancedShow', '⚙ Advanced — choose permissions')}
-        </button>
+        <ul class="agr-assure">
+          <li>${tr('appGrant.assureKey', 'It gets its own key, never your password.')}</li>
+          ${keepsData && html`<li>${tr('appGrant.assureHome', 'What it saves lives in your own AIMEAT account.')}</li>`}
+          <li>${tr('appGrant.assureRevoke', 'You can revoke it in one click: Profile › Access.')}</li>
+          ${!existingGrant && html`<li>${tr('appGrant.assureNext', 'Next time it signs you in without this screen.')}</li>`}
+        </ul>
 
         <div class="agr-actions">
           ${existingGrant
             ? html`<button class="btn-danger agr-btn" onClick=${revoke} disabled=${submitting}>${tr('appGrant.revoke', 'Revoke access')}</button>`
-            : html`<button class="btn-outline agr-btn" onClick=${deny} disabled=${submitting}>${tr('appGrant.deny', 'Don’t trust')}</button>`}
+            : html`<button class="btn-outline agr-btn" onClick=${deny} disabled=${submitting}>${tr('appGrant.notNow', 'Not now')}</button>`}
           <button class="btn-primary agr-btn" onClick=${approve} disabled=${submitting || selected.size === 0}>
-            ${submitting ? tr('appGrant.approving', 'Allowing…') : (existingGrant ? tr('appGrant.saveCta', 'Save changes') : tr('appGrant.trustCta', '❤ Trust — allow access'))}
+            ${submitting ? tr('appGrant.approving', 'Allowing…') : (existingGrant ? tr('appGrant.saveCta', 'Save changes') : tr('appGrant.connectCta', 'Connect'))}
           </button>
         </div>
-        ${!existingGrant && html`<p class="agr-next">${tr('appGrant.nextNote', 'Next time this app logs you in automatically — no prompt.')}</p>`}
       </div>
     </div>`;
 }

package/dist/public/views/business.js

@@ -1,16 +1,26 @@
 /**
  * @file business.js
- * @description "For your business" page: night-shift hero, six outcome cases
- *   (first-person headline + live proof + CTA), an all-of-this-is-production
- *   footer line and the shared ContactCard. Evidence links resolve to LIVE data
- *   (public apps / the FreePartyLights public status page) — never the Wellprepd
- *   organism (sensitive). No protocol terms; "organism" and "node" are product
- *   names, explained on first use.
+ * @description "For your business" page: night-shift hero, then cases grouped by how far
+ *   up the value ladder they sit — work happens without you, the company runs here, the
+ *   company earns here — a sovereignty section (the reason a regulated buyer signs), a
+ *   free assessment as the entry point, and the shared ContactCard.
+ *
+ *   EVERY app referenced here resolves through siteLinks (window.__SITE). A node that has
+ *   not configured a given app renders that case without its proof link, or drops the case
+ *   entirely when the app IS the case. Another operator's business page must never point
+ *   at aimeat.io's apps. No protocol terms; "organism" and "node" are product names,
+ *   explained on first use.
  * @usage routed at /v1/business by spa.html
  * @version-history
  *   v1.0.0 — 2026-06-10 — Initial (owner spec).
  *   v1.1.0 — 2026-06-20 — H-2: published-app proof links open in a sandboxed opaque-origin
  *     iframe (openAppSandboxed) instead of a top-level apex ?mode=inline tab.
+ *   v2.0.0 — 2026-07-28 — Six cases from June became three groups following the value ladder,
+ *     with what shipped since then: a CRM, a marketplace, an API accelerator, playbooks, a
+ *     public roadmap. Four of six CTAs used to be a mailto even where a working product
+ *     existed; each case now opens the real thing. Adds the sovereignty section (EU AI Act,
+ *     NIS2, own server, revocable grants, MIT) which is often the actual reason to buy, and
+ *     a free assessment as the low-commitment entry. Every app link is operator-configurable.
  */
 import { h } from 'preact';
 import { useState, useEffect } from 'preact/hooks';
@@ -19,26 +29,15 @@ const html = htm.bind(h);
 import { t } from '/js/i18n.js';
 import { ContactCard } from '/components/ContactCard.js';
 import { openAppSandboxed, isAppHtmlUrl } from '/js/app-sandbox.js';
+import { siteLink, hasSite, contactHref } from '/js/site.js';
+import { swallowed } from '/js/swallowed.js';
 
 const tr = (key, fallback) => { const v = t(key); return v && v !== key ? v : fallback; };
-const CONTACT = 'mailto:jouni.miikki@aimeat.io';
 
-export default function Business({ navigate }) {
-  // Live evidence: tonight's paper (public app) + the FreePartyLights public status
-  // page (resolved by name so the link works wherever the organism lives — and is
-  // simply hidden on nodes that don't have it). NEVER link the Wellprepd organism.
-  const [paper, setPaper] = useState(null);
-  useEffect(() => {
-    fetch('/v1/apps?limit=100').then(r => r.json()).then(j => {
-      const apps = j?.data?.apps || [];
-      setPaper(apps.find(a => /sanomat/i.test(a.filename || '') || /sanomat/i.test(a.name || '')) || null);
-    }).catch(() => {});
-  }, []);
-  // The FreePartyLights public status page (org + workspace ids on aimeat.io; public
-  // document sharing verified ON — 5 docs readable without auth). NEVER Wellprepd.
-  const fplHref = 'https://aimeat.io/v1/publicworkspaceviewer?org=27b89c13-1cc7-4fde-9c3f-91c4c7d06aa9&ws=ws-mq4y3131522';
-
-  const Case = ({ id, title, text, quote, quoteBy, proofHref, proofLabel, proofNote, ctaLabel, ctaHref }) => html`
+/* One outcome, told in the first person, with a way to check it and a way to start.
+   `proofHref` empty → the case still renders, just without the proof link. */
+function Case({ id, title, text, quote, quoteBy, proofHref, proofLabel, proofNote, ctaLabel, ctaHref }) {
+  return html`
     <div class="ld-case" id=${id}>
       <h3 class="ld-case-title">${title}</h3>
       <p class="ld-case-text">${text}</p>
@@ -50,9 +49,43 @@ export default function Business({ navigate }) {
           ? html`<a class="ld-case-proof" href="#" role="button" onClick=${(e) => { e.preventDefault(); openAppSandboxed(proofHref, proofLabel); }}>${proofLabel}</a>`
           : html`<a class="ld-case-proof" href=${proofHref} target="_blank" rel="noopener">${proofLabel}</a>`)
         : proofNote && html`<div class="ld-case-proofnote">${proofNote}</div>`}
-      <a class="ld-path-cta" href=${ctaHref}>${ctaLabel}</a>
+      ${ctaHref ? html`<a class="ld-path-cta" href=${ctaHref}>${ctaLabel}</a>` : ''}
     </div>
   `;
+}
+
+/* A group whose every case is gated off (this node has none of those apps) renders nothing
+   at all. Checked here rather than in CSS: htm leaves whitespace text nodes between the
+   conditionals, so `.ld-cases:empty` would never match and the heading would sit alone. */
+function Group({ title, children }) {
+  const kids = (Array.isArray(children) ? children.flat(Infinity) : [children])
+    .filter(c => c !== null && c !== undefined && c !== false && c !== '');
+  if (kids.length === 0) return null;
+  return html`
+    <section class="ld-casegroup">
+      <h2 class="ld-casegroup-title">${title}</h2>
+      <div class="ld-cases">${kids}</div>
+    </section>
+  `;
+}
+
+export default function Business({ navigate }) {
+  const CONTACT = contactHref();
+
+  // Live proof: the paper this node's agents write. Resolved from the apps API when the
+  // operator has not pinned a URL, so the link survives a rename.
+  const [paper, setPaper] = useState(null);
+  useEffect(() => {
+    if (hasSite('paper')) return undefined;
+    fetch('/v1/apps?limit=100').then(r => r.json()).then(j => {
+      const apps = j?.data?.apps || [];
+      setPaper(apps.find(a => /sanomat/i.test(a.filename || '') || /sanomat/i.test(a.name || '')) || null);
+    }).catch(err => { swallowed('business: paper lookup', err); });
+    return undefined;
+  }, []);
+  const paperHref = hasSite('paper')
+    ? siteLink('paper')
+    : (paper ? `/v1/apps/${encodeURIComponent(paper.owner)}/${encodeURIComponent(paper.filename)}?mode=inline` : '');
 
   return html`
     <div class="ld ld-business">
@@ -63,58 +96,109 @@ export default function Business({ navigate }) {
           onError=${(e) => { e.target.style.display = 'none'; e.target.closest('.ld-bhero')?.classList.add('ld-bhero--noimg'); }} />
         <div class="ld-bhero-text">
           <h1 class="ld-h1">${tr('biz.heroTitle', 'A digital employee that never sleeps')}</h1>
-          <p class="ld-hero-sub">${tr('biz.heroSub', 'Scheduled agents fetch, write, report and ship while you do something else. Every step traceable.')}</p>
+          <p class="ld-hero-sub">${tr('biz.heroSub', 'Scheduled agents fetch, write, report and ship while you do something else. Every step traceable, and what they produce is yours.')}</p>
         </div>
       </section>
 
-      <div class="ld-cases">
+      <${Group} title=${tr('biz.g1Title', 'The work happens without you')}>
         <${Case} id="case-news"
           title=${tr('biz.c1Title', 'I wake up already knowing what happened in my field')}
-          text=${tr('biz.c1Text', 'AIMEAT Sanomat writes itself every evening. Six agents, zero human hours.')}
-          proofHref=${paper
-            ? `/v1/apps/${encodeURIComponent(paper.owner)}/${encodeURIComponent(paper.filename)}?mode=inline`
-            : 'https://aimeat.io/v1/apps/happydude500001/laimeat-sanomat.html?mode=inline'}
-          proofLabel=${tr('biz.c1Proof', "Read tonight's paper →") + (paper?.created_at && paper.created_at.slice(0, 10) === new Date().toISOString().slice(0, 10) ? ` · ${tr('biz.writtenToday', 'written today at')} ${new Date(paper.created_at).toLocaleTimeString('fi-FI', { hour: '2-digit', minute: '2-digit' })}` : '')}
+          text=${tr('biz.c1Text', 'A publication that writes itself every evening. Agents pull the raw material, write the pieces and ship the edition. Zero human hours.')}
+          proofHref=${paperHref}
+          proofLabel=${tr('biz.c1Proof', "Read tonight's edition →")}
           ctaLabel=${tr('biz.c1Cta', 'The same, from your topics →')} ctaHref=${CONTACT} />
         <${Case} id="case-report"
-          title=${tr('biz.c2Title', 'My 7 AM report is waiting on my phone')}
-          text=${tr('biz.c2Text', 'Tell it once what you want to know every morning. An agent gathers, summarizes and sends.')}
-          proofNote=${tr('biz.c2Proof', 'Example (anonymized, sent today 07:00): "3 new bookings · 1 review (4★, answered) · competitor X dropped prices · suggested action: weekend campaign."')}
-          ctaLabel=${tr('biz.c2Cta', 'Order your morning report →')} ctaHref=${CONTACT} />
+          title=${tr('biz.c2Title', 'My morning briefing is waiting, and it knows what is stale')}
+          text=${tr('biz.c2Text', 'Say once what you want to know every morning. An agent gathers, summarises and sends, and the board shows how old each answer is with a button that puts the agent back to work.')}
+          proofHref=${siteLink('briefing')}
+          proofLabel=${tr('biz.c2Proof', 'Open the briefing board →')}
+          proofNote=${tr('biz.c2ProofNote', 'Example, sent today at 07:00: "3 new bookings · 1 review (4★, answered) · a competitor dropped prices · suggested action: weekend campaign."')}
+          ctaLabel=${tr('biz.c2Cta', 'Order your morning briefing →')} ctaHref=${CONTACT} />
         <${Case} id="case-radar"
-          title=${tr('biz.c3Title', "I know what's being said about us — and what to do about it")}
-          text=${tr('biz.c3Text', 'An agent tracks mentions, competitors and trends, and produces an action list — not just a report.')}
-          proofNote=${tr('biz.c3Proof', 'Example action list: "1) Answer the review on platform Y today. 2) Trend Z is rising — draft a post. 3) Competitor launched a campaign — counter-offer attached."')}
+          title=${tr('biz.c3Title', 'I know what is being said about us, and what to do about it')}
+          text=${tr('biz.c3Text', 'An agent tracks mentions, competitors and registry changes, and produces an action list. Company cards fill themselves from open data.')}
+          proofHref=${siteLink('radar')}
+          proofLabel=${tr('biz.c3Proof', 'Open the company radar →')}
+          proofNote=${tr('biz.c3ProofNote', 'Example action list: "1) Answer the review on platform Y today. 2) Trend Z is rising, draft a post. 3) A competitor launched a campaign, counter-offer attached."')}
           ctaLabel=${tr('biz.c3Cta', 'Start the radar →')} ctaHref=${CONTACT} />
+      <//>
+
+      <${Group} title=${tr('biz.g2Title', 'The company runs on it')}>
+        ${hasSite('crm') ? html`
+          <${Case} id="case-crm"
+            title=${tr('biz.c7Title', 'My CRM costs less than lunch, and my agents keep it fed')}
+            text=${tr('biz.c7Text', 'Contacts, companies, deals and follow-ups as versioned records you own. Tap to dial, dictate the note by voice, set the next follow-up. Company cards enrich themselves from the trade register.')}
+            proofHref=${siteLink('crm')}
+            proofLabel=${tr('biz.c7Proof', 'Open the CRM →')}
+            ctaLabel=${tr('biz.c7Cta', 'Move your CRM here →')} ctaHref=${CONTACT} />` : ''}
         <${Case} id="case-dev"
           title=${tr('biz.c4Title', 'My project knows its own status')}
           text=${tr('biz.c4Text', 'When developers have agents, sprints slow things down. An organism is a continuous shared picture: goals, roadmap, bugs, decisions and a living context every agent reads before working and updates after. A human approves the decisions; everything else moves at agent speed.')}
           quote=${tr('biz.c4Quote', 'This could replace Jira.')} quoteBy=${tr('biz.c4QuoteBy', 'game developer, large studio')}
-          proofHref=${fplHref}
-          proofLabel=${tr('biz.c4Proof', 'Open the FreePartyLights status page →')}
-          proofNote=${tr('biz.proofUnavailable', 'Live proof runs on aimeat.io.')}
+          proofHref=${siteLink('roadmap')}
+          proofLabel=${tr('biz.c4Proof', 'Open our own roadmap, live →')}
+          proofNote=${tr('biz.proofUnavailable', 'Live proof runs on the operator’s node.')}
           ctaLabel=${tr('biz.c4Cta', 'Turn your project into an organism →')} ctaHref=${CONTACT} />
         <${Case} id="case-feedback"
           title=${tr('biz.c5Title', "A user's idea shipped the same day")}
-          text=${tr('biz.c5Text', 'A user left an idea in the morning. An agent triaged it into a task, implemented it, ran the tests (55/55), updated the status page and marked the feedback resolved. A human confirmed it works. The whole chain is traceable: feedback → task → release.')}
-          proofHref=${fplHref}
-          proofLabel=${tr('biz.c5Proof', 'Same status page — see zenmasta001 → task-015 →')}
-          proofNote=${tr('biz.proofUnavailable', 'Live proof runs on aimeat.io.')}
+          text=${tr('biz.c5Text', 'A user left an idea in the morning. An agent triaged it into a task, implemented it, ran the tests, updated the status page and marked the feedback resolved. A human confirmed it works. The whole chain is traceable: feedback → task → release.')}
+          proofHref=${siteLink('roadmap')}
+          proofLabel=${tr('biz.c5Proof', 'Follow one from idea to release →')}
+          proofNote=${tr('biz.proofUnavailable', 'Live proof runs on the operator’s node.')}
           ctaLabel=${tr('biz.c5Cta', 'Open a feedback loop for your customers →')} ctaHref=${CONTACT} />
-        <${Case} id="case-node"
-          title=${tr('biz.c6Title', 'Kalle runs his whole company on its own node')}
-          text=${tr('biz.c6Text', "The Original Miskate Oy's homepage lives in agent memory on its own AIMEAT node, federated into the network. The vartija crew audits the node every morning at 04:00; the tutkijatar crew runs research overnight.")}
-          quote=${'Every discovery is a mistake that survived long enough to prove itself.'}
-          quoteBy=${'Kalle Määttä, founder, The Original Miskate Oy'}
-          proofHref="https://originalmiskate.com"
-          proofLabel=${tr('biz.c6Proof', 'originalmiskate.com — a living node →')}
-          ctaLabel=${tr('biz.c6Cta', 'See hosting packages →')} ctaHref="/v1/pricing" />
-      </div>
+      <//>
+
+      <${Group} title=${tr('biz.g3Title', 'The company earns on it')}>
+        ${hasSite('apiAccelerator') ? html`
+          <${Case} id="case-api"
+            title=${tr('biz.c8Title', 'My API is something agents can find, use and pay for')}
+            text=${tr('biz.c8Text', 'You already have an API. Agents cannot find it, cannot read it and cannot pay for it. That is a day of work, not a project.')}
+            proofHref=${siteLink('apiAccelerator')}
+            proofLabel=${tr('biz.c8Proof', 'See what agent-native looks like →')}
+            ctaLabel=${tr('biz.c8Cta', 'Make your API agent-native →')} ctaHref=${CONTACT} />` : ''}
+        ${hasSite('exchange') ? html`
+          <${Case} id="case-exchange"
+            title=${tr('biz.c9Title', 'My data sells itself while I sleep')}
+            text=${tr('biz.c9Text', 'Publish a capability once and it carries a price. Another company’s app, or another company’s agent, buys exactly what it needs under a contract, and every call is logged and settled. You see what it earned; the buyer saw the price before the first call.')}
+            proofHref=${siteLink('exchange')}
+            proofLabel=${tr('biz.c9Proof', 'Open the marketplace →')}
+            ctaLabel=${tr('biz.c9Cta', 'List your first capability →')} ctaHref=${CONTACT} />` : ''}
+        ${hasSite('playbooks') ? html`
+          <${Case} id="case-playbooks"
+            title=${tr('biz.c10Title', 'What we know how to do is now a product')}
+            text=${tr('biz.c10Text', 'A way of working, packaged: the steps, the prompts, the checks. Run it for one team, then for the next customer without rebuilding it.')}
+            proofHref=${siteLink('playbooks')}
+            proofLabel=${tr('biz.c10Proof', 'Open a playbook →')}
+            ctaLabel=${tr('biz.c10Cta', 'Package what you know →')} ctaHref=${CONTACT} />` : ''}
+        ${hasSite('showcase') ? html`
+          <${Case} id="case-node"
+            title=${tr('biz.c6Title', 'A whole company running on its own node')}
+            text=${tr('biz.c6Text', "The homepage lives in agent memory on its own AIMEAT node, federated into the network. One crew audits the node every morning at 04:00; another runs research overnight.")}
+            quote=${'Every discovery is a mistake that survived long enough to prove itself.'}
+            quoteBy=${'Kalle Määttä, founder, The Original Miskate Oy'}
+            proofHref=${siteLink('showcase')}
+            proofLabel=${tr('biz.c6Proof', 'Open a living node →')}
+            ctaLabel=${tr('biz.c6Cta', 'See hosting packages →')} ctaHref="/v1/pricing" />` : ''}
+      <//>
+
+      <!-- The reason a regulated buyer signs. Often decisive before any of the cases above. -->
+      <section class="ld-sovereignty">
+        <h2 class="ld-casegroup-title">${tr('biz.sovTitle', 'Why owning it is the reason to buy')}</h2>
+        <ul class="ld-sov-list">
+          <li>${tr('biz.sov0', 'A company here is a node, not an account type. You take your own AIMEAT node, put your business identity and your own payment keys on it, invite your people and build the apps your work needs. Nothing about it is a separate product tier.')}</li>
+          <li>${tr('biz.sov1', 'Your data stays on a server you control. We do not see it and do not keep it, so your own certification is the one that counts.')}</li>
+          <li>${tr('biz.sov2', 'Every action is logged: who read what, who authorised it, what it cost. The audit is a report, not a project.')}</li>
+          <li>${tr('biz.sov3', 'Agents and apps work under named permissions you can take back with one click, and every action is attributed to whoever took it.')}</li>
+          <li>${tr('biz.sov4', 'The code is MIT licensed and readable. A closed competitor can only promise the same thing.')}</li>
+        </ul>
+      </section>
 
       <div class="ld-stats">
         <div class="ld-stats-line">${tr('biz.allLive', 'Everything above runs in production right now. No proof is a mockup.')}</div>
         <div class="ld-ctarow">
-          <a class="btn-primary" href=${CONTACT}>${tr('biz.ctaDemo', 'Book a demo →')}</a>
+          ${hasSite('assessment') ? html`
+            <a class="btn-primary" href=${siteLink('assessment')} target="_blank" rel="noopener">${tr('biz.ctaAssessment', 'Free: where is your AI right now? →')}</a>` : ''}
+          ${CONTACT ? html`<a class=${hasSite('assessment') ? 'btn-outline' : 'btn-primary'} href=${CONTACT}>${tr('biz.ctaDemo', 'Book a demo →')}</a>` : ''}
           <a class="btn-outline" href="/v1/pricing" onClick=${(e) => { e.preventDefault(); navigate('/v1/pricing'); }}>${tr('biz.ctaPricing', 'See pricing →')}</a>
         </div>
       </div>

package/dist/public/views/command-palette.js

@@ -26,6 +26,7 @@ import { librarianSearch } from '/js/services/memory.js';
 import { listOrganisms } from '/js/services/organisms.js';
 import { getOwner } from '/js/services/auth.js';
 import { listRecents } from '/js/recents.js';
+import { swallowed } from '/js/swallowed.js';
 
 /** Hand off to the organisms tab using the app's existing nav contract: prime the sessionStorage the
  *  OrganismsTab reads on mount (open id + workspace + an optional ws-search pre-fill), then switch to
@@ -37,11 +38,12 @@ function openTarget(navigate, { orgId, wsId, query }) {
     if (orgId) sessionStorage.setItem('aimeat.ws.openId', orgId);
     if (wsId) sessionStorage.setItem('aimeat.ws.openWs', wsId); else sessionStorage.removeItem('aimeat.ws.openWs');
     if (orgId && wsId && query) sessionStorage.setItem(`aimeat.ws.${orgId}.${wsId}.search`, query);
+  // eslint-disable-next-line aimeat/no-silent-catch -- private mode — the route fallback still works
   } catch { /* private mode — the route fallback still works */ }
   try {
     window.dispatchEvent(new CustomEvent('aimeat-open-tab', { detail: { tabId: 'organisms' } }));
     window.dispatchEvent(new CustomEvent('aimeat-open-organism', { detail: { orgId, wsId: wsId || null } }));
-  } catch { /* noop */ }
+  } catch (err) { swallowed('command-palette: openTarget', err); }
   if (!location.pathname.startsWith('/v1/profile')) navigate('/v1/profile?tab=organisms');
 }
 
@@ -70,7 +72,7 @@ export function CommandPalette({ navigate }) {
   useEffect(() => {
     if (!open) { setQ(''); setHits(null); setSel(0); return; }
     const me = getOwner();
-    if (me) listOrganisms({ member: me }).then(r => setOrgs((r?.data?.organisms) || [])).catch(() => {});
+    if (me) listOrganisms({ member: me }).then(r => setOrgs((r?.data?.organisms) || [])).catch(err => { swallowed('command-palette: onKey', err); });
     setTimeout(() => inputRef.current?.querySelector('input')?.focus(), 30);
   }, [open]);
 
@@ -82,7 +84,7 @@ export function CommandPalette({ navigate }) {
     let cancelled = false;
     setBusy(true);
     const tid = setTimeout(async () => {
-      const r = await librarianSearch(query, 30, 'own').catch(() => []);
+      const r = await librarianSearch(query, 30, 'own').catch(err => { swallowed('command-palette: onKey', err); return []; });
       if (!cancelled) { setHits(r || []); setBusy(false); setSel(0); }
     }, 200);
     return () => { cancelled = true; clearTimeout(tid); };

package/dist/public/views/companies.js

@@ -20,6 +20,7 @@ import { DeliverableBody } from '/components/ImageDeliverable.js';
 import { OfferCardView } from '/components/offer-card-view.js';
 import { Spinner } from '/components/Spinner.js';
 import { EmptyState } from '/components/EmptyState.js';
+import { swallowed } from '/js/swallowed.js';
 
 const html = htm.bind(h);
 
@@ -98,7 +99,7 @@ export default function CompaniesView() {
 
   async function loadMyOrders() {
     try { const r = await apiGet('/v1/orders'); setMyOrders(r.data?.orders ?? []); }
-    catch { setMyOrders([]); }
+    catch (err) { swallowed('companies', err); setMyOrders([]); }
   }
   function toggleOrders() { const n = !showOrders; setShowOrders(n); if (n) loadMyOrders(); }
 
@@ -113,7 +114,7 @@ export default function CompaniesView() {
 
   async function openCompany(owner, slug) {
     setSelected({ owner, slug }); setProfile(null); setErr('');
-    try { history.replaceState(null, '', `/v1/companies?c=${encodeURIComponent(owner)}/${encodeURIComponent(slug)}`); } catch { /* ignore */ }
+    try { history.replaceState(null, '', `/v1/companies?c=${encodeURIComponent(owner)}/${encodeURIComponent(slug)}`); } catch (err) { swallowed('companies: openCompany', err); }
     try {
       const r = await apiGet(`/v1/orgs/${encodeURIComponent(owner)}/${encodeURIComponent(slug)}/offerings`);
       setProfile(r.data ?? null);

package/dist/public/views/doc-solo.js

@@ -21,6 +21,7 @@ import { connect, disconnect, onUpdate, offUpdate } from '/lib/live-updates.js';
 import { useViewCSS } from '/components/useViewCSS.js';
 import * as orgService from '/js/services/organisms.js';
 import { DocumentView, DocumentEditor } from './profile/organisms/document.js';
+import { swallowed } from '/js/swallowed.js';
 
 const html = htm.bind(h);
 
@@ -55,7 +56,7 @@ export default function DocSolo() {
       for (const d of (w.objects?.[type] || [])) byId.set(d.id, { ...d, _draft: false, _published: true });
       for (const d of (w.drafts?.[type] || [])) { const pub = byId.get(d.id); byId.set(d.id, { ...d, _draft: true, _published: !!pub, _pub: pub || null }); }
       setDoc(byId.get(id) || null);
-    } catch { setDoc(null); }
+    } catch (err) { swallowed('doc-solo', err); setDoc(null); }
   }, [session, org, ws, type, id]);
 
   useEffect(() => { load(); }, [load]);