aimeat 2.7.0 → 3.0.0

package/dist/src/routes/home/feed.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feed.js","sourceRoot":"","sources":["../../../../src/routes/home/feed.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAuB,MAAM,qCAAqC,CAAC;AAClH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAqB,MAAM,kBAAkB,CAAC;AAE1E,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,GAAiB;IACpE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAEhC;;;;;OAKG;IACH,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAC3D,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC;QAC9B,oFAAoF;QACpF,iEAAiE;QACjE,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5F,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEP;;;;;;;OAOG;IACH,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAC5D,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAsB,CAAC;QACrD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,EAAE,CAAC;YACT,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EACrD,wBAAwB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YAChE,OAAO;QACX,CAAC;QACD,oFAAoF;QACpF,sFAAsF;QACtF,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,IAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,EACnD,yCAAyC,CAAC,CAAC,CAAC;YAChD,OAAO;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAC/D,eAAe,CAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACX,CAAC"}

package/dist/src/routes/home/first-agent.d.ts

@@ -0,0 +1,24 @@
+/**
+ * @file src/routes/home/first-agent.ts
+ * @description POST /v1/home/first-agent — the funnel marker for "this person's first agent is
+ *   in" (aimeat_remake/05-mittaus.md). Called by the home right after an approval.
+ *
+ *   It records rather than grants: the approval itself already happened through the normal
+ *   device-authorization route, and nothing here can create or admit an agent. That separation is
+ *   deliberate — a measurement endpoint that could also let someone in would be a way to walk past
+ *   the consent step it exists to count.
+ *
+ *   Write-once, so re-approving or a double-click cannot move the timestamp, and only ever about
+ *   the caller's OWN account.
+ * @structure registerFirstAgentRoutes(router, ctx): POST /v1/home/first-agent
+ * @usage Registered from src/routes/home.ts.
+ * @version-history
+ *   v1.0.0 — 2026-08-07 — Initial (remake phase 4).
+ *   v1.1.0 — 2026-08-09 — Records the agent the submitted `user_code` actually names. It ignored
+ *     the code and wrote agents[0], so the marker — which the home card renders — could show one
+ *     agent's name with another's timestamp. Ownership of the resolved request is checked.
+ */
+import type { Router } from 'express';
+import { type HomeRouteCtx } from './welcome-mat.js';
+export declare function registerFirstAgentRoutes(router: Router, ctx: HomeRouteCtx): void;
+//# sourceMappingURL=first-agent.d.ts.map

package/dist/src/routes/home/first-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"first-agent.d.ts","sourceRoot":"","sources":["../../../../src/routes/home/first-agent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAKtC,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAE1E,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,IAAI,CA0ChF"}

package/dist/src/routes/home/first-agent.js

@@ -0,0 +1,41 @@
+import { requireAuth, requireRole } from '../../auth/middleware.js';
+import { success, error } from '../../middleware/envelope.js';
+import { ONBOARDING_KEYS, recordOnboardingEvent } from '../../services/onboarding-funnel.js';
+import { readHomeState } from '../../services/home-state.js';
+import { requireOwnerSession } from './welcome-mat.js';
+export function registerFirstAgentRoutes(router, ctx) {
+    const { config, storage } = ctx;
+    router.post('/v1/home/first-agent', requireAuth(), requireRole('owner'), requireOwnerSession(config.nodeId), async (req, res) => {
+        const owner = req.auth.owner;
+        // The agent list is the evidence. Marking "first agent connected" for an account with
+        // no agents would put a step in the funnel that never happened, and the funnel is the
+        // only thing that says whether any of this works.
+        const agents = await storage.getAgentsByOwner(owner);
+        if (!agents.length) {
+            res.status(409).json(error(config.nodeId, 'NO_AGENT', 'No agent has joined this account yet.'));
+            return;
+        }
+        // WHICH agent just joined. The caller sends the user_code it approved; this used to
+        // ignore it and record agents[0], so the marker could carry one agent's name with
+        // another's moment — and the home card reads this name. Ownership is re-checked rather
+        // than assumed: a user_code is a short human-typed string, and resolving one that
+        // belongs to somebody else would be a cross-account read.
+        const userCode = typeof req.body?.user_code === 'string' ? req.body.user_code.toUpperCase() : null;
+        const request = userCode ? await storage.getDeviceAuthByUserCode(userCode) : null;
+        const named = request && request.ownerName === owner
+            ? agents.find(a => a.name === request.agentName) ?? null
+            : null;
+        // No code (an older client) falls back to the first agent, which is what the account
+        // has always meant when it could not say. A code that resolves to nothing does the
+        // same rather than failing: the marker is measurement, not a gate.
+        const subject = named ?? agents[0];
+        const wrote = await recordOnboardingEvent(storage, config, owner, ONBOARDING_KEYS.firstAgentConnected, { agentName: subject.name });
+        // readHomeState also stamps home_initialized the first time all three conditions hold,
+        // so the response is the authoritative "are you done" answer rather than a guess.
+        const state = await readHomeState(storage, config, owner);
+        res.json(success(config.nodeId, { recorded: wrote, state }, [
+            { description: 'Prove the connection from your AI chat', method: 'GET', url: '/v1/prompts/hello-mcp' },
+        ]));
+    });
+}
+//# sourceMappingURL=first-agent.js.map

package/dist/src/routes/home/first-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"first-agent.js","sourceRoot":"","sources":["../../../../src/routes/home/first-agent.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,mBAAmB,EAAqB,MAAM,kBAAkB,CAAC;AAE1E,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,GAAiB;IACtE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAEhC,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EACnE,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC;QAE9B,sFAAsF;QACtF,sFAAsF;QACtF,kDAAkD;QAClD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACjB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,EAChD,uCAAuC,CAAC,CAAC,CAAC;YAC9C,OAAO;QACX,CAAC;QAED,oFAAoF;QACpF,kFAAkF;QAClF,uFAAuF;QACvF,kFAAkF;QAClF,0DAA0D;QAC1D,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACnG,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,MAAM,KAAK,GAAG,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK;YAChD,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI;YACxD,CAAC,CAAC,IAAI,CAAC;QACX,qFAAqF;QACrF,mFAAmF;QACnF,mEAAmE;QACnE,MAAM,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC;QAEnC,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAC5D,eAAe,CAAC,mBAAmB,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAEtE,uFAAuF;QACvF,kFAAkF;QAClF,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACxD,EAAE,WAAW,EAAE,wCAAwC,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,uBAAuB,EAAE;SACzG,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC;AACX,CAAC"}

package/dist/src/routes/home/state.d.ts

@@ -0,0 +1,18 @@
+/**
+ * @file src/routes/home/state.ts
+ * @description GET /v1/home/state — where this account stands on the new path, in one call
+ *   (aimeat_remake/06-koti-feed-suostumus.md). The home view renders entirely from this: which
+ *   step is open, which are named but not yet reachable, and whether the home exists at all.
+ *
+ *   The answer also carries what the UI needs to ASK when the branch is undecided — the app
+ *   options built from the tool table itself, so the picker can never drift from the list the
+ *   branch decision reads.
+ * @structure registerHomeStateRoutes(router, ctx): GET /v1/home/state
+ * @usage Registered from src/routes/home.ts.
+ * @version-history
+ *   v1.0.0 — 2026-08-07 — Initial (remake phase 3).
+ */
+import type { Router } from 'express';
+import { type HomeRouteCtx } from './welcome-mat.js';
+export declare function registerHomeStateRoutes(router: Router, ctx: HomeRouteCtx): void;
+//# sourceMappingURL=state.d.ts.map

package/dist/src/routes/home/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../../src/routes/home/state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAOtC,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAE1E,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,IAAI,CA0C/E"}

package/dist/src/routes/home/state.js

@@ -0,0 +1,56 @@
+import { requireAuth, requireRole } from '../../auth/middleware.js';
+import { success } from '../../middleware/envelope.js';
+import { readHomeState, HOME_STEPS } from '../../services/home-state.js';
+import { aiClientQuestionOptions, resolveAiClient, decideBranch } from '../../services/ai-tool-setup.js';
+import { openRooms } from '../../services/home-rooms.js';
+import { resolveIdentity } from '../../utils/gaii.js';
+import { requireOwnerSession } from './welcome-mat.js';
+export function registerHomeStateRoutes(router, ctx) {
+    const { config, storage } = ctx;
+    /**
+     * GET /v1/home/state
+     *
+     * Owner role: this is the person's own home. An agent asking where its owner stands in
+     * onboarding would be reading the owner's progress, which is theirs and not the agent's.
+     */
+    router.get('/v1/home/state', requireAuth(), requireRole('owner'), requireOwnerSession(config.nodeId), async (req, res) => {
+        const owner = req.auth.owner;
+        const lang = typeof req.query.lang === 'string' ? req.query.lang : undefined;
+        const state = await readHomeState(storage, config, owner);
+        // Re-derive the pending question from what is known, rather than storing it: the answer
+        // to "what should I ask next" is a function of the state, and a stored copy would survive
+        // the state changing underneath it.
+        const decision = state.mat.done
+            ? decideBranch(resolveAiClient(state.ai?.client ?? null), state.branch ? { clientAnswer: state.ai?.client ?? undefined } : {})
+            : null;
+        const question = state.branch ? null : decision?.branch === 'ask' ? decision.question : null;
+        // Only the rooms that are really there. The view renders what it is given and never
+        // decides for itself which doors exist (E11).
+        // The mailbox room asks about THIS account, so the resolved GHII goes in — never
+        // req.auth!.sub, which is a bare owner name on an owner session (Rule 10).
+        const rooms = state.initialized
+            ? await openRooms(storage, config, resolveIdentity(req.auth, config.nodeId))
+            : [];
+        res.json(success(config.nodeId, {
+            state,
+            rooms,
+            /** The three steps in order, so the view can name the ones still ahead. */
+            steps: HOME_STEPS,
+            /** What still needs asking, if anything. */
+            question,
+            /** Built from the tool table itself — never a second hardcoded list. */
+            client_options: question === 'which-client' ? aiClientQuestionOptions(config, { lang }) : null,
+        }, nextActions(state.step)));
+    });
+}
+/** The one thing to do next, as a hint. One action, because the view shows one action. */
+function nextActions(step) {
+    if (step === 'welcome-mat') {
+        return [{ description: 'Get the prompt for your welcome mat', method: 'GET', url: '/v1/prompts/welcome-mat' }];
+    }
+    if (step === 'first-agent' || step === 'hello-mcp') {
+        return [{ description: 'Connect your first agent', method: 'POST', url: '/v1/agents/device-authorize' }];
+    }
+    return [{ description: 'Your welcome mat', method: 'GET', url: '/v1/portfolio/me' }];
+}
+//# sourceMappingURL=state.js.map

package/dist/src/routes/home/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../../src/routes/home/state.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,MAAM,8BAA8B,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,iCAAiC,CAAC;AACzG,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAqB,MAAM,kBAAkB,CAAC;AAE1E,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,GAAiB;IACrE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAEhC;;;;;OAKG;IACH,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACrH,MAAM,KAAK,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7E,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAE1D,wFAAwF;QACxF,0FAA0F;QAC1F,oCAAoC;QACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI;YAC3B,CAAC,CAAC,YAAY,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,IAAI,IAAI,CAAC,EACpD,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,CAAC,CAAC,IAAI,CAAC;QACX,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QAE7F,oFAAoF;QACpF,8CAA8C;QAC9C,iFAAiF;QACjF,2EAA2E;QAC3E,MAAM,KAAK,GAAG,KAAK,CAAC,WAAW;YAC3B,CAAC,CAAC,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,IAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;YAC7E,CAAC,CAAC,EAAE,CAAC;QAET,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC5B,KAAK;YACL,KAAK;YACL,2EAA2E;YAC3E,KAAK,EAAE,UAAU;YACjB,4CAA4C;YAC5C,QAAQ;YACR,wEAAwE;YACxE,cAAc,EAAE,QAAQ,KAAK,cAAc,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;SACjG,EAAE,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACP,CAAC;AAED,0FAA0F;AAC1F,SAAS,WAAW,CAAC,IAAmB;IACpC,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QACzB,OAAO,CAAC,EAAE,WAAW,EAAE,qCAAqC,EAAE,MAAM,EAAE,KAAc,EAAE,GAAG,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACjD,OAAO,CAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,EAAE,MAAe,EAAE,GAAG,EAAE,6BAA6B,EAAE,CAAC,CAAC;IACtH,CAAC;IACD,OAAO,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,EAAE,KAAc,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAAC,CAAC;AAClG,CAAC"}

package/dist/src/routes/home/track.d.ts

@@ -0,0 +1,32 @@
+/**
+ * @file src/routes/home/track.ts
+ * @description The switch between the new home and the old profile (aimeat_remake/08-kytkin.md).
+ *
+ *   GET /v1/home/ui-track — which side this person lands on.
+ *   PUT /v1/home/ui-track — change it.
+ *
+ *   K2: the choice is per USER, stored on the account, so it follows them to another device. A
+ *   per-tab choice would mean landing on whichever side happened to be the default every morning,
+ *   and the measurement needs a durable answer anyway.
+ *
+ *   The switch INCREMENTS `switched` and never touches `track`. Those are two different questions:
+ *   `track` is which path the account was CREATED on and defines its cohort, `switched` is how many
+ *   times the person has flipped. Rewriting `track` on a flip would move accounts between cohorts
+ *   as people wander, and a cohort whose membership changes under you measures nothing. The counter
+ *   is itself a result: remake-created accounts leaving for the old side is the signal that the
+ *   remake is not working.
+ *
+ *   What the switch does NOT do: move data, reset anything, or change what either side can see.
+ *   Both read the same account.
+ * @structure registerHomeTrackRoutes(router, ctx): GET + PUT /v1/home/ui-track
+ * @usage Registered from src/routes/home.ts.
+ * @version-history
+ *   v1.0.0 — 2026-08-07 — Initial (remake phase 8).
+ */
+import type { Router } from 'express';
+import { type HomeRouteCtx } from './welcome-mat.js';
+/** Which side the person lands on. Separate from `track`, which is a cohort and never changes. */
+export declare const UI_TRACK_KEY = "settings.ui_track";
+export type UiTrack = 'home' | 'profile';
+export declare function registerHomeTrackRoutes(router: Router, ctx: HomeRouteCtx): void;
+//# sourceMappingURL=track.d.ts.map

package/dist/src/routes/home/track.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"track.d.ts","sourceRoot":"","sources":["../../../../src/routes/home/track.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAItC,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAE1E,kGAAkG;AAClG,eAAO,MAAM,YAAY,sBAAsB,CAAC;AAChD,MAAM,MAAM,OAAO,GAAG,MAAM,GAAG,SAAS,CAAC;AAEzC,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,IAAI,CAuE/E"}

package/dist/src/routes/home/track.js

@@ -0,0 +1,73 @@
+import { requireAuth, requireRole } from '../../auth/middleware.js';
+import { success, error } from '../../middleware/envelope.js';
+import { readTrack, recordTrackSwitch } from '../../services/onboarding-funnel.js';
+import { requireOwnerSession } from './welcome-mat.js';
+/** Which side the person lands on. Separate from `track`, which is a cohort and never changes. */
+export const UI_TRACK_KEY = 'settings.ui_track';
+export function registerHomeTrackRoutes(router, ctx) {
+    const { config, storage } = ctx;
+    const ghiiOf = (owner) => `${owner}@${config.nodeId}`;
+    /** The stored choice, or the default for this account. */
+    async function currentUiTrack(owner) {
+        const rec = await storage.getMemory(ghiiOf(owner), UI_TRACK_KEY);
+        const v = (rec?.value ?? null);
+        if (v?.ui === 'home' || v?.ui === 'profile')
+            return { ui: v.ui, defaulted: false };
+        // K3: an account created on the remake lands on the home; one created before it lands where
+        // it always did. Nobody's workflow changes under them, and new people see the new thing.
+        const { track } = await readTrack(storage, config, owner);
+        return { ui: track === 'remake' ? 'home' : 'profile', defaulted: true };
+    }
+    router.get('/v1/home/ui-track', requireAuth(), requireRole('owner'), requireOwnerSession(config.nodeId), async (req, res) => {
+        const owner = req.auth.owner;
+        const [{ ui, defaulted }, cohort] = await Promise.all([
+            currentUiTrack(owner),
+            readTrack(storage, config, owner),
+        ]);
+        res.json(success(config.nodeId, {
+            ui,
+            /** True when nothing has been chosen yet and this is the default for the cohort. */
+            defaulted,
+            landing: ui === 'home' ? '/v1/home' : '/v1/profile',
+            // The cohort, for transparency. Read-only here: no route changes it.
+            track: cohort.track,
+            switched: cohort.switched,
+        }));
+    });
+    router.put('/v1/home/ui-track', requireAuth(), requireRole('owner'), requireOwnerSession(config.nodeId), async (req, res) => {
+        const owner = req.auth.owner;
+        const ui = (req.body ?? {}).ui;
+        if (ui !== 'home' && ui !== 'profile') {
+            res.status(400).json(error(config.nodeId, 'INVALID_INPUT', 'ui must be "home" or "profile"'));
+            return;
+        }
+        const before = await currentUiTrack(owner);
+        const now = new Date().toISOString();
+        const existing = await storage.getMemory(ghiiOf(owner), UI_TRACK_KEY);
+        await storage.setMemory({
+            key: UI_TRACK_KEY,
+            ownerGaii: ghiiOf(owner),
+            value: { ui, at: now },
+            visibility: 'owner',
+            tags: ['settings'],
+            ttlHours: null,
+            version: existing ? existing.version + 1 : 1,
+            createdAt: existing?.createdAt ?? now,
+            updatedAt: now,
+        });
+        // Count a real CHANGE of side, not a re-affirmation of the current one. Counting a
+        // no-op would inflate the one number that says whether people are leaving.
+        let switched = (await readTrack(storage, config, owner)).switched;
+        if (before.ui !== ui)
+            switched = await recordTrackSwitch(storage, config, owner);
+        const cohort = await readTrack(storage, config, owner);
+        res.json(success(config.nodeId, {
+            ui,
+            landing: ui === 'home' ? '/v1/home' : '/v1/profile',
+            switched,
+            // Unchanged, always. Proven by the E2E rather than promised here.
+            track: cohort.track,
+        }));
+    });
+}
+//# sourceMappingURL=track.js.map

package/dist/src/routes/home/track.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"track.js","sourceRoot":"","sources":["../../../../src/routes/home/track.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAqB,MAAM,kBAAkB,CAAC;AAE1E,kGAAkG;AAClG,MAAM,CAAC,MAAM,YAAY,GAAG,mBAAmB,CAAC;AAGhD,MAAM,UAAU,uBAAuB,CAAC,MAAc,EAAE,GAAiB;IACrE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAChC,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;IAE9D,0DAA0D;IAC1D,KAAK,UAAU,cAAc,CAAC,KAAa;QACvC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,IAAI,IAAI,CAA2B,CAAC;QACzD,IAAI,CAAC,EAAE,EAAE,KAAK,MAAM,IAAI,CAAC,EAAE,EAAE,KAAK,SAAS;YAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACnF,4FAA4F;QAC5F,yFAAyF;QACzF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC5E,CAAC;IAED,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAC/D,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC;QAC9B,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAClD,cAAc,CAAC,KAAK,CAAC;YACrB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC;SACpC,CAAC,CAAC;QACH,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC5B,EAAE;YACF,oFAAoF;YACpF,SAAS;YACT,OAAO,EAAE,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa;YACnD,qEAAqE;YACrE,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;SAC5B,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC;IAEP,MAAM,CAAC,GAAG,CAAC,mBAAmB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAC/D,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC;QAC9B,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAa,CAAC;QAC1C,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;YACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,gCAAgC,CAAC,CAAC,CAAC;YAC9F,OAAO;QACX,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC;QACtE,MAAM,OAAO,CAAC,SAAS,CAAC;YACpB,GAAG,EAAE,YAAY;YACjB,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC;YACxB,KAAK,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE;YACtB,UAAU,EAAE,OAAO;YACnB,IAAI,EAAE,CAAC,UAAU,CAAC;YAClB,QAAQ,EAAE,IAAI;YACd,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5C,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,GAAG;YACrC,SAAS,EAAE,GAAG;SACjB,CAAC,CAAC;QAEH,mFAAmF;QACnF,2EAA2E;QAC3E,IAAI,QAAQ,GAAG,CAAC,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QAClE,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE;YAAE,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAEjF,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC5B,EAAE;YACF,OAAO,EAAE,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa;YACnD,QAAQ;YACR,kEAAkE;YAClE,KAAK,EAAE,MAAM,CAAC,KAAK;SACtB,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC;AACX,CAAC"}

package/dist/src/routes/home/welcome-mat.d.ts

@@ -0,0 +1,45 @@
+/**
+ * @file src/routes/home/welcome-mat.ts
+ * @description The welcome-mat paste (aimeat_remake/03-welcome-mat.md, phase 2). A person copies a
+ *   prompt into their own AI chat and pastes the answer here. This is step 1 of the new path and
+ *   there is no way past it: without a mat there is no home.
+ *
+ *   What the endpoint does with a paste:
+ *     1. reads a page out of it (five attempts, first hit wins — the paste arrives wrapped in
+ *        whatever the model said around it);
+ *     2. stores that page as the person's PORTFOLIO — the mat is not a new page type, it is the
+ *        first version of the portfolio they already have;
+ *     3. reads the four ai-* fields and decides the branch from `ai-client`, because MCP is a
+ *        property of the client app and not of the model;
+ *     4. writes the funnel markers.
+ *
+ *   A rejected paste is a 400 that NAMES what was missing and says how many attempts have been
+ *   made. The person's text is never echoed back and never cleared: the box keeps it client-side,
+ *   because a cleared box after a failed paste loses work their AI may not reproduce.
+ * @structure registerWelcomeMatRoutes(router, ctx): POST /v1/home/welcome-mat, POST /v1/home/ai-client
+ * @usage Registered from src/routes/home.ts.
+ * @version-history
+ *   v1.0.0 — 2026-08-07 — Initial (remake phase 2).
+ */
+import type { Router, RequestHandler } from 'express';
+import type { AimeatConfig } from '../../config.js';
+import type { Storage } from '../../storage/interface.js';
+export interface HomeRouteCtx {
+    config: AimeatConfig;
+    storage: Storage;
+}
+/**
+ * The home is the PERSON's, so its routes need a person's session.
+ *
+ * requireRole('owner') is not that fence: an agent token inherits its owner's roles on this node
+ * (the scope list is what fences an agent), so an agent would sail through it. The distinction the
+ * codebase already uses for exactly this is `owner` present AND `agent` absent — extended here to
+ * ecosystem apps and app grants, which are the other principals that act "as" an owner.
+ *
+ * It matters most on the welcome mat: the mat doubles as evidence that a human has an AI and
+ * understands copy-paste, and an agent pasting it on their behalf would prove neither while
+ * marking the gate passed.
+ */
+export declare function requireOwnerSession(nodeId: string): RequestHandler;
+export declare function registerWelcomeMatRoutes(router: Router, ctx: HomeRouteCtx): void;
+//# sourceMappingURL=welcome-mat.d.ts.map

package/dist/src/routes/home/welcome-mat.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"welcome-mat.d.ts","sourceRoot":"","sources":["../../../../src/routes/home/welcome-mat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AACtD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AAiB1D,MAAM,WAAW,YAAY;IACzB,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;CACpB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAYlE;AA+ED,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,YAAY,GAAG,IAAI,CAgHhF"}

package/dist/src/routes/home/welcome-mat.js

@@ -0,0 +1,193 @@
+import { requireAuth, requireRole } from '../../auth/middleware.js';
+import { success, error } from '../../middleware/envelope.js';
+import { emitChange } from '../../services/event-bus.js';
+import { logger } from '../../utils/logger.js';
+import { parseWelcomeMat } from '../../services/welcome-mat-parse.js';
+import { resolveAiClient, decideBranch, } from '../../services/ai-tool-setup.js';
+import { ONBOARDING_KEYS, recordOnboardingEvent, recordWelcomeMatPasted, recordAiModelDetected, } from '../../services/onboarding-funnel.js';
+import { readHomeState } from '../../services/home-state.js';
+import { portfolioWriteGaii, portfolioStandaloneUrl, writePortfolioHtml, PORTFOLIO_CONFIG_KEY, } from '../portfolio.js';
+/**
+ * The home is the PERSON's, so its routes need a person's session.
+ *
+ * requireRole('owner') is not that fence: an agent token inherits its owner's roles on this node
+ * (the scope list is what fences an agent), so an agent would sail through it. The distinction the
+ * codebase already uses for exactly this is `owner` present AND `agent` absent — extended here to
+ * ecosystem apps and app grants, which are the other principals that act "as" an owner.
+ *
+ * It matters most on the welcome mat: the mat doubles as evidence that a human has an AI and
+ * understands copy-paste, and an agent pasting it on their behalf would prove neither while
+ * marking the gate passed.
+ */
+export function requireOwnerSession(nodeId) {
+    return (req, res, next) => {
+        const roles = req.auth?.roles ?? [];
+        const isPerson = roles.includes('owner')
+            && !roles.includes('agent') && !roles.includes('ecosystem') && !roles.includes('app');
+        if (!isPerson) {
+            res.status(403).json(error(nodeId, 'ACCESS_DENIED', 'This is the account holder\'s own step. Sign in as yourself to do it.'));
+            return;
+        }
+        next();
+    };
+}
+/** The branch as the client sees it: what to show, and what still needs asking. */
+function branchPayload(decision) {
+    return {
+        branch: decision.branch,
+        reason: 'reason' in decision ? decision.reason : null,
+        question: decision.branch === 'ask' ? decision.question : null,
+        tool_id: 'toolId' in decision ? decision.toolId ?? null : null,
+    };
+}
+/**
+ * Store the page as the owner's portfolio and turn the portfolio on.
+ *
+ * One write path with PUT /v1/portfolio/upload by construction: both call writePortfolioHtml, so
+ * a mat made before the first agent lands under the GHII and a later one under the agent, and the
+ * reader finds either.
+ */
+async function storeMatAsPortfolio(ctx, owner, html, title) {
+    const { storage, config } = ctx;
+    const target = await portfolioWriteGaii(storage, owner, config.nodeId);
+    const data = Buffer.from(html, 'utf-8');
+    const now = new Date().toISOString();
+    await writePortfolioHtml(storage, target, data);
+    // Enable the portfolio, preserving whatever settings are already there. The mat is meant to be
+    // looked at the moment it lands — an accepted mat behind a disabled portfolio would be the
+    // "nothing happened" screen this whole step exists to avoid.
+    const existing = await storage.getMemory(target, PORTFOLIO_CONFIG_KEY);
+    const prev = (existing?.value ?? {});
+    await storage.setMemory({
+        key: PORTFOLIO_CONFIG_KEY,
+        ownerGaii: target,
+        value: { ...prev, enabled: true, source: 'welcome-mat', ...(title ? { title } : {}) },
+        visibility: 'owner',
+        tags: ['portfolio'],
+        ttlHours: null,
+        version: existing ? existing.version + 1 : 1,
+        createdAt: existing?.createdAt ?? now,
+        updatedAt: now,
+    });
+}
+/** Record what we learned about the person's AI. Never carries the mat's content (05-mittaus.md). */
+async function recordAiDetection(ctx, owner, fields, resolution, source, hasPaidPlan, supersedes = false) {
+    await recordAiModelDetected(ctx.storage, ctx.config, owner, {
+        model: fields.model,
+        vendor: fields.vendor,
+        client: fields.client,
+        // Our reading of the app, not the model's claim about its own capability.
+        mcp: resolution.kind === 'known' ? (resolution.capability === 'yes' ? 'yes' : 'unknown') : 'unknown',
+        source,
+        // The unmatched name is the list from which the alias map grows.
+        unknownClient: resolution.kind === 'unknown' ? resolution.claim : null,
+        resolvedClient: resolution.kind === 'known' ? resolution.id : null,
+        hasPaidPlan: typeof hasPaidPlan === 'boolean' ? hasPaidPlan : null,
+        supersedes,
+    });
+}
+/** Write branch_taken once a real branch (not a question) has been settled on. */
+async function recordBranch(ctx, owner, decision) {
+    if (decision.branch === 'ask')
+        return;
+    await recordOnboardingEvent(ctx.storage, ctx.config, owner, ONBOARDING_KEYS.branchTaken, {
+        branch: decision.branch,
+    });
+}
+export function registerWelcomeMatRoutes(router, ctx) {
+    const { config, storage } = ctx;
+    /**
+     * POST /v1/home/welcome-mat
+     * Body: { paste: string }
+     *
+     * Owner role required. The mat is the person's own act and it doubles as the evidence that
+     * they have an AI and understand copy-paste; an agent posting it on their behalf would prove
+     * neither, so an agent or app token is refused here even though it can write memory.
+     */
+    router.post('/v1/home/welcome-mat', requireAuth(), requireRole('owner'), requireOwnerSession(config.nodeId), async (req, res) => {
+        const owner = req.auth.owner;
+        const paste = (req.body ?? {}).paste;
+        // Size cap before parsing: the same limit the portfolio itself enforces, applied early so a
+        // multi-megabyte paste is refused rather than regex-scanned.
+        const maxBytes = (config.portfolioMaxSizeKb ?? 512) * 1024;
+        if (typeof paste === 'string' && Buffer.byteLength(paste, 'utf-8') > maxBytes) {
+            res.status(413).json(error(config.nodeId, 'QUOTA_EXCEEDED', `That paste is larger than ${config.portfolioMaxSizeKb ?? 512}KB. Ask your AI for a shorter page.`));
+            return;
+        }
+        const parsed = parseWelcomeMat(paste);
+        if (!parsed.ok) {
+            const { attempts } = await recordWelcomeMatPasted(storage, config, owner, 'failed');
+            // 400 with the specifics, and NO skip offered anywhere in it. The client keeps the
+            // text; we never echo it back, so a rejection cannot leak the page into a log.
+            res.status(400).json(error(config.nodeId, 'WELCOME_MAT_UNREADABLE', parsed.reason === 'empty'
+                ? 'There was nothing in the box.'
+                : parsed.reason === 'empty_page'
+                    ? 'That was a page, but it had nothing on it.'
+                    : 'I could not find a page in what you pasted.', undefined, { reason: parsed.reason, missing: parsed.missing, attempts }));
+            return;
+        }
+        await storeMatAsPortfolio(ctx, owner, parsed.html, parsed.meta.title);
+        const { attempts } = await recordWelcomeMatPasted(storage, config, owner, 'ok');
+        // The branch comes from `ai-client`. The model's own `ai-can-mcp` claim is recorded and
+        // deliberately not obeyed: models are confident about capabilities they do not have.
+        const resolution = resolveAiClient(parsed.meta.client);
+        const decision = decideBranch(resolution);
+        // A paste is a NEW mat, so it replaces whatever was known — including a stale paid-tier
+        // answer about the app they used last time.
+        await recordAiDetection(ctx, owner, parsed.meta, resolution, 'meta', undefined, true);
+        await recordBranch(ctx, owner, decision);
+        const state = await readHomeState(storage, config, owner);
+        res.json(success(config.nodeId, {
+            saved: true,
+            attempts,
+            /** Which of the five attempts read it — grades the prompt, not the person. */
+            level: parsed.level,
+            wrapped: parsed.wrapped,
+            meta: parsed.meta,
+            ...branchPayload(decision),
+            portfolio_url: `/v1/portfolio/${encodeURIComponent(owner)}`,
+            standalone_url: portfolioStandaloneUrl(config, owner),
+            state,
+        }, [
+            { description: 'Look at your welcome mat', method: 'GET', url: `/v1/portfolio/${encodeURIComponent(owner)}` },
+            { description: 'Where your home stands now', method: 'GET', url: '/v1/home/state' },
+        ]));
+        emitChange('portfolio');
+    });
+    /**
+     * POST /v1/home/ai-client
+     * Body: { client?: string, has_paid_plan?: boolean }
+     *
+     * The person's own answer to the two questions the branch can raise: which app they talked in,
+     * and whether they have the tier that app needs. An answer here is more trustworthy than the
+     * page's metadata (a model misreports its own app), so it is recorded with source 'asked' and
+     * overwrites nothing — both readings stay in the funnel.
+     */
+    router.post('/v1/home/ai-client', requireAuth(), requireRole('owner'), requireOwnerSession(config.nodeId), async (req, res) => {
+        const owner = req.auth.owner;
+        const body = req.body ?? {};
+        const clientAnswer = typeof body.client === 'string' ? body.client.trim().slice(0, 200) : undefined;
+        const hasPaidPlan = typeof body.has_paid_plan === 'boolean' ? body.has_paid_plan : undefined;
+        if (clientAnswer === undefined && hasPaidPlan === undefined) {
+            res.status(400).json(error(config.nodeId, 'INVALID_INPUT', 'Answer with the app you talked in (client) or whether you have a paid plan (has_paid_plan).'));
+            return;
+        }
+        // Re-read from whatever we know: the person's answer where they gave one, the page's claim
+        // otherwise. Their answer is run through the same alias map — it is not privileged.
+        const state = await readHomeState(storage, config, owner);
+        const base = resolveAiClient(clientAnswer ?? state.ai?.client ?? null);
+        const decision = decideBranch(base, { clientAnswer, hasPaidPlan });
+        await recordAiDetection(ctx, owner, {
+            model: state.ai?.model ?? null,
+            vendor: state.ai?.vendor ?? null,
+            client: clientAnswer ?? state.ai?.client ?? null,
+        }, base, 'asked', hasPaidPlan);
+        await recordBranch(ctx, owner, decision);
+        res.json(success(config.nodeId, {
+            ...branchPayload(decision),
+            state: await readHomeState(storage, config, owner),
+        }));
+    });
+    logger.debug('home: welcome-mat routes registered');
+}
+//# sourceMappingURL=welcome-mat.js.map

package/dist/src/routes/home/welcome-mat.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"welcome-mat.js","sourceRoot":"","sources":["../../../../src/routes/home/welcome-mat.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAC;AACtE,OAAO,EACH,eAAe,EAAE,YAAY,GAChC,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACH,eAAe,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,qBAAqB,GACxF,MAAM,qCAAqC,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EACH,kBAAkB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,oBAAoB,GACvF,MAAM,iBAAiB,CAAC;AAOzB;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAC9C,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACtB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;eACjC,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC1F,IAAI,CAAC,QAAQ,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,eAAe,EAC9C,uEAAuE,CAAC,CAAC,CAAC;YAC9E,OAAO;QACX,CAAC;QACD,IAAI,EAAE,CAAC;IACX,CAAC,CAAC;AACN,CAAC;AAED,mFAAmF;AACnF,SAAS,aAAa,CAAC,QAAwB;IAC3C,OAAO;QACH,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM,EAAE,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QACrD,QAAQ,EAAE,QAAQ,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;QAC9D,OAAO,EAAE,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI;KACjE,CAAC;AACN,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,mBAAmB,CAC9B,GAAiB,EAAE,KAAa,EAAE,IAAY,EAAE,KAAoB;IAEpE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAErC,MAAM,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAEhD,+FAA+F;IAC/F,2FAA2F;IAC3F,6DAA6D;IAC7D,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAA4B,CAAC;IAChE,MAAM,OAAO,CAAC,SAAS,CAAC;QACpB,GAAG,EAAE,oBAAoB;QACzB,SAAS,EAAE,MAAM;QACjB,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QACrF,UAAU,EAAE,OAAO;QACnB,IAAI,EAAE,CAAC,WAAW,CAAC;QACnB,QAAQ,EAAE,IAAI;QACd,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,SAAS,EAAE,QAAQ,EAAE,SAAS,IAAI,GAAG;QACrC,SAAS,EAAE,GAAG;KACjB,CAAC,CAAC;AACP,CAAC;AAED,qGAAqG;AACrG,KAAK,UAAU,iBAAiB,CAC5B,GAAiB,EAAE,KAAa,EAChC,MAA8E,EAC9E,UAA8B,EAC9B,MAAwB,EACxB,WAAqB,EACrB,UAAU,GAAG,KAAK;IAElB,MAAM,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE;QACxD,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,0EAA0E;QAC1E,GAAG,EAAE,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS;QACpG,MAAM;QACN,iEAAiE;QACjE,aAAa,EAAE,UAAU,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QACtE,cAAc,EAAE,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;QAClE,WAAW,EAAE,OAAO,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;QAClE,UAAU;KACb,CAAC,CAAC;AACP,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,YAAY,CAAC,GAAiB,EAAE,KAAa,EAAE,QAAwB;IAClF,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK;QAAE,OAAO;IACtC,MAAM,qBAAqB,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,eAAe,CAAC,WAAW,EAAE;QACrF,MAAM,EAAE,QAAQ,CAAC,MAAM;KAC1B,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,GAAiB;IACtE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IAEhC;;;;;;;OAOG;IACH,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5H,MAAM,KAAK,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC;QAC9B,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC;QAErC,4FAA4F;QAC5F,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,kBAAkB,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC;QAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,QAAQ,EAAE,CAAC;YAC5E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,EACtD,6BAA6B,MAAM,CAAC,kBAAkB,IAAI,GAAG,qCAAqC,CAAC,CAAC,CAAC;YACzG,OAAO;QACX,CAAC;QAED,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QAEtC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;YACpF,mFAAmF;YACnF,+EAA+E;YAC/E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,wBAAwB,EAC9D,MAAM,CAAC,MAAM,KAAK,OAAO;gBACrB,CAAC,CAAC,+BAA+B;gBACjC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,YAAY;oBAC5B,CAAC,CAAC,4CAA4C;oBAC9C,CAAC,CAAC,6CAA6C,EACvD,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC9E,OAAO;QACX,CAAC;QAED,MAAM,mBAAmB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAEhF,wFAAwF;QACxF,qFAAqF;QACrF,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;QAC1C,wFAAwF;QACxF,4CAA4C;QAC5C,MAAM,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACtF,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEzC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC5B,KAAK,EAAE,IAAI;YACX,QAAQ;YACR,8EAA8E;YAC9E,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,aAAa,CAAC,QAAQ,CAAC;YAC1B,aAAa,EAAE,iBAAiB,kBAAkB,CAAC,KAAK,CAAC,EAAE;YAC3D,cAAc,EAAE,sBAAsB,CAAC,MAAM,EAAE,KAAK,CAAC;YACrD,KAAK;SACR,EAAE;YACC,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,iBAAiB,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE;YAC7G,EAAE,WAAW,EAAE,4BAA4B,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE;SACtF,CAAC,CAAC,CAAC;QACJ,UAAU,CAAC,WAAW,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH;;;;;;;;OAQG;IACH,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,WAAW,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1H,MAAM,KAAK,GAAG,GAAG,CAAC,IAAK,CAAC,KAAK,CAAC;QAC9B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;QAC5B,MAAM,YAAY,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpG,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;QAE7F,IAAI,YAAY,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC1D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EACrD,6FAA6F,CAAC,CAAC,CAAC;YACpG,OAAO;QACX,CAAC;QAED,2FAA2F;QAC3F,oFAAoF;QACpF,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,eAAe,CAAC,YAAY,IAAI,KAAK,CAAC,EAAE,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC;QACvE,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC;QAEnE,MAAM,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE;YAChC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,IAAI,IAAI;YAC9B,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,IAAI,IAAI;YAChC,MAAM,EAAE,YAAY,IAAI,KAAK,CAAC,EAAE,EAAE,MAAM,IAAI,IAAI;SACnD,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;QAC/B,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEzC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE;YAC5B,GAAG,aAAa,CAAC,QAAQ,CAAC;YAC1B,KAAK,EAAE,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC;SACrD,CAAC,CAAC,CAAC;IACR,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;AACxD,CAAC"}

package/dist/src/routes/home.d.ts

@@ -0,0 +1,26 @@
+/**
+ * @file src/routes/home.ts
+ * @description The KOTI (home) routes — the new onboarding path, built beside the old one rather
+ *   than on top of it (aimeat_remake/08-kytkin.md). Nothing here modifies an existing route: the
+ *   old profile keeps /v1/profile and every endpoint it already used, and a person moves between
+ *   the two with a switch. Two parallel view trees, one backend.
+ *
+ *   "Profile" is not a word on this path. The account has a HOME, its first content is a welcome
+ *   mat, and the mat is the person's portfolio rather than a second page type.
+ * @structure
+ *   - homeRouter(config, storage): the router, mounted in routes-loader
+ *   - Handlers live in sibling modules under ./home/:
+ *     - home/welcome-mat.ts — POST /v1/home/welcome-mat, POST /v1/home/ai-client
+ *     - home/state.ts       — GET /v1/home/state
+ *     - home/first-agent.ts — POST /v1/home/first-agent
+ *     - home/feed.ts        — GET /v1/home/feed, POST /v1/home/room
+ *     - home/track.ts       — GET + PUT /v1/home/ui-track (the switch)
+ * @usage app.use(homeRouter(config, storage));
+ * @version-history
+ *   v1.0.0 — 2026-08-07 — Initial (remake phase 2).
+ */
+import { Router } from 'express';
+import type { AimeatConfig } from '../config.js';
+import type { Storage } from '../storage/interface.js';
+export declare function homeRouter(config: AimeatConfig, storage: Storage): Router;
+//# sourceMappingURL=home.d.ts.map

package/dist/src/routes/home.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"home.d.ts","sourceRoot":"","sources":["../../../src/routes/home.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAOvD,wBAAgB,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAWzE"}

package/dist/src/routes/home.js

@@ -0,0 +1,38 @@
+/**
+ * @file src/routes/home.ts
+ * @description The KOTI (home) routes — the new onboarding path, built beside the old one rather
+ *   than on top of it (aimeat_remake/08-kytkin.md). Nothing here modifies an existing route: the
+ *   old profile keeps /v1/profile and every endpoint it already used, and a person moves between
+ *   the two with a switch. Two parallel view trees, one backend.
+ *
+ *   "Profile" is not a word on this path. The account has a HOME, its first content is a welcome
+ *   mat, and the mat is the person's portfolio rather than a second page type.
+ * @structure
+ *   - homeRouter(config, storage): the router, mounted in routes-loader
+ *   - Handlers live in sibling modules under ./home/:
+ *     - home/welcome-mat.ts — POST /v1/home/welcome-mat, POST /v1/home/ai-client
+ *     - home/state.ts       — GET /v1/home/state
+ *     - home/first-agent.ts — POST /v1/home/first-agent
+ *     - home/feed.ts        — GET /v1/home/feed, POST /v1/home/room
+ *     - home/track.ts       — GET + PUT /v1/home/ui-track (the switch)
+ * @usage app.use(homeRouter(config, storage));
+ * @version-history
+ *   v1.0.0 — 2026-08-07 — Initial (remake phase 2).
+ */
+import { Router } from 'express';
+import { registerWelcomeMatRoutes } from './home/welcome-mat.js';
+import { registerHomeStateRoutes } from './home/state.js';
+import { registerFirstAgentRoutes } from './home/first-agent.js';
+import { registerHomeFeedRoutes } from './home/feed.js';
+import { registerHomeTrackRoutes } from './home/track.js';
+export function homeRouter(config, storage) {
+    const router = Router();
+    const ctx = { config, storage };
+    registerHomeStateRoutes(router, ctx);
+    registerWelcomeMatRoutes(router, ctx);
+    registerFirstAgentRoutes(router, ctx);
+    registerHomeFeedRoutes(router, ctx);
+    registerHomeTrackRoutes(router, ctx);
+    return router;
+}
+//# sourceMappingURL=home.js.map