@wenathlan/cobaia 0.0.0-stage → 2.0.155

package/package.json

@@ -1,6 +1,202 @@
 {
   "name": "@wenathlan/cobaia",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "packageManager": "pnpm@12.3.4",
+  "version": "2.0.155",
+  "description": "cobaia is the monetization surface of the wenathlan family: the content site that carries the plans, the support rails and the honest advertisement slots while the family apps stay clean; the name is provisional until the owner picks the official one",
+  "type": "module",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/wenathlan/devthink"
+  },
+  "author": "Wenathlan",
+  "sideEffects": false,
+  "scripts": {
+    "dev": "vite --host",
+    "build": "vite build",
+    "start": "vite preview --host",
+    "preview": "vite preview --host",
+    "check": "tsc --noEmit",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@fluentui/react-icons": "^2.0.345",
+    "@fontsource-variable/bricolage-grotesque": "^5.3.0",
+    "@fontsource-variable/geist-mono": "^5.3.0",
+    "@fontsource-variable/inter": "^5.3.0",
+    "@fontsource-variable/jetbrains-mono": "^5.3.0",
+    "@fontsource-variable/outfit": "^5.3.0",
+    "@hono/node-server": "^2.1.5",
+    "@libsql/client": "^0.18.0",
+    "@prisma/adapter-libsql": "^7.10.1",
+    "@prisma/client": "^7.10.1",
+    "@wenathlan/cadria": "^2.0.154",
+    "@wenathlan/debonair": "^2.0.154",
+    "@wenathlan/devthink": "^2.0.154",
+    "@wenathlan/getry": "^2.0.154",
+    "@wenathlan/saddle": "^2.0.154",
+    "@wenathlan/vault": "^2.0.154",
+    "better-sqlite3": "^13.0.3",
+    "drizzle-orm": "^0.45.4",
+    "gsap": "^3.15.0",
+    "hono": "^4.13.16",
+    "ink": "^7.1.1",
+    "lucide-react": "^1.67.0",
+    "motion": "^12.43.0",
+    "react": "^19.3.1",
+    "react-devtools-core": "^8.0.0",
+    "react-dom": "^19.3.1",
+    "three": "^0.187.0",
+    "wouter": "^3.13.0",
+    "z-ai-web-dev-sdk": "^0.0.18"
+  },
+  "devDependencies": {
+    "@biomejs/biome": "^2.6.4",
+    "@capacitor/android": "^8.6.0",
+    "@capacitor/cli": "^8.6.0",
+    "@capacitor/core": "^8.6.0",
+    "@capacitor/ios": "^8.6.0",
+    "@fluentui/react-icons": "^2.0.345",
+    "@hookform/resolvers": "^5.9.2",
+    "@libsql/client": "^0.18.0",
+    "@opencode-ai/sdk": "^1.19.5",
+    "@prisma/client": "^7.10.1",
+    "@radix-ui/react-accordion": "^1.3.1",
+    "@radix-ui/react-alert-dialog": "^1.2.1",
+    "@radix-ui/react-aspect-ratio": "^1.2.0",
+    "@radix-ui/react-avatar": "^1.3.1",
+    "@radix-ui/react-checkbox": "^1.4.1",
+    "@radix-ui/react-collapsible": "^1.2.1",
+    "@radix-ui/react-context-menu": "^2.4.1",
+    "@radix-ui/react-dialog": "^1.3.1",
+    "@radix-ui/react-dropdown-menu": "^2.2.1",
+    "@radix-ui/react-hover-card": "^1.2.1",
+    "@radix-ui/react-label": "^2.1.17",
+    "@radix-ui/react-menubar": "^1.2.1",
+    "@radix-ui/react-navigation-menu": "^1.4.1",
+    "@radix-ui/react-popover": "^1.3.1",
+    "@radix-ui/react-progress": "^1.2.1",
+    "@radix-ui/react-radio-group": "^1.5.1",
+    "@radix-ui/react-scroll-area": "^1.4.0",
+    "@radix-ui/react-select": "^2.4.1",
+    "@radix-ui/react-separator": "^1.2.0",
+    "@radix-ui/react-slider": "^1.6.1",
+    "@radix-ui/react-slot": "^1.5.0",
+    "@radix-ui/react-switch": "^1.4.1",
+    "@radix-ui/react-tabs": "^1.2.1",
+    "@radix-ui/react-toggle": "^1.2.1",
+    "@radix-ui/react-toggle-group": "^1.2.1",
+    "@radix-ui/react-tooltip": "^1.4.1",
+    "@tailwindcss/postcss": "^4.3.4",
+    "@tailwindcss/typography": "^0.5.20",
+    "@tailwindcss/vite": "^4.3.4",
+    "@tsconfig/node26": "^26.0.1",
+    "@types/better-sqlite3": "^9.6.0",
+    "@types/chrome": "^0.3.7",
+    "@types/express": "^5.0.6",
+    "@types/google.maps": "^3.66.9",
+    "@types/node": "^26.6.6",
+    "@types/react": "^19.3.0",
+    "@types/react-dom": "^19.3.0",
+    "@types/three": "^0.187.0",
+    "@vitejs/plugin-react": "^6.2.1",
+    "add": "^2.0.9",
+    "autoprefixer": "^10.6.2",
+    "axios": "^1.21.0",
+    "better-sqlite3": "^13.0.3",
+    "bun-types": "^1.4.4",
+    "cheerio": "^1.2.0",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "cmdk": "^1.1.1",
+    "drizzle-kit": "^0.31.11",
+    "drizzle-orm": "^0.45.4",
+    "embla-carousel-react": "^8.6.0",
+    "emittery": "^2.2.0",
+    "esbuild": "^0.28.2",
+    "express": "^5.3.0",
+    "fast-check": "^4.10.2",
+    "framer-motion": "^13.5.1",
+    "hono": "^4.13.16",
+    "input-otp": "^1.5.0",
+    "jsdom": "26.1.0",
+    "lucide-react": "^1.67.0",
+    "mysql2": "^3.24.6",
+    "nanoid": "^6.0.2",
+    "next-themes": "^0.4.6",
+    "p-limit": "^7.3.3",
+    "p-retry": "^8.0.1",
+    "playwright": "^1.64.1",
+    "pnpm": "^12.16.1",
+    "postcss": "^8.5.32",
+    "prettier": "^3.9.10",
+    "prisma": "^7.10.1",
+    "react": "^19.3.1",
+    "react-day-picker": "^10.0.2",
+    "react-dom": "^19.3.1",
+    "react-hook-form": "^7.91.0",
+    "react-resizable-panels": "^4.18.0",
+    "recharts": "^3.10.1",
+    "sonner": "^2.0.8",
+    "streamdown": "^2.7.1",
+    "tailwind-merge": "^3.7.0",
+    "tailwindcss": "^4.3.4",
+    "tailwindcss-animate": "^1.0.7",
+    "tsup": "^8.5.1",
+    "tsx": "^4.23.15",
+    "tw-animate-css": "^1.4.0",
+    "typescript": "^7.0.2",
+    "vaul": "^1.1.2",
+    "vite": "^8.3.5",
+    "vite-plugin-manus-runtime": "^0.0.59",
+    "vitest": "^5.1.0",
+    "webpack": "^5.112.2",
+    "webpack-cli": "^6.0.1",
+    "wouter": "^3.13.0",
+    "yaml": "^2.9.1",
+    "zod": "^4.6.7"
+  },
+  "engines": {
+    "bare": "^1.18.0",
+    "bun": "^1.4.2",
+    "cargo": ">=1.85.0",
+    "chrome": "^16.0.912",
+    "cnpm": "^9.4.0",
+    "corepack": "^0.35.0",
+    "deno": "^2.9.5",
+    "dotnet": ">=8.0.0",
+    "ecmascript": "^5.0.0",
+    "firefox": ">=0.8.0",
+    "go": ">=1.24.0",
+    "iojs": "^1.0.0",
+    "java": ">=17",
+    "node": ">=26.13.0 <27",
+    "npm": "^12.1.0",
+    "pnpm": "^12.6.0",
+    "python": ">=3.11.0",
+    "rust": ">=1.85.0",
+    "teleport": ">=0.2.0",
+    "typescript": "^5.8.0",
+    "v": "^0.5.2",
+    "vscode": "^1.118.0",
+    "yarn": "^4.17.1"
+  },
+  "overrides": {
+    "body-parser": "^2.4.0",
+    "fast-uri": "^3.1.9",
+    "follow-redirects": "^1.16.2",
+    "minimatch": "^11.0.3",
+    "glob": "^14.0.3",
+    "zod": "^4.6.7",
+    "esbuild": "^0.28.2",
+    "undici": "^7.30.1",
+    "uuid": "^11.1.1",
+    "postcss-selector-parser": "^7.1.6",
+    "deepmerge-ts": "^8.0.0",
+    "katex": "^0.18.2",
+    "mysql2": "^3.24.6",
+    "proxy-addr": "2.0.8",
+    "shell-quote": "^1.11.0",
+    "source-map-js": "1.2.2"
+  }
+}

package/pnpm-workspace.yaml

@@ -0,0 +1,82 @@
+# the vulnerability overrides of the family security gate (the devthink
+# override contract): pnpm 12 reads overrides here, the lockfile regenerates
+# against these pins and the OSV scan of the committed lockfile answers clean.
+overrides:
+  undici: ^7.30.1
+  zod: ^4.6.7
+  follow-redirects: ^1.16.2
+  glob: ^14.0.2
+  minimatch: ^11.0.1
+  fast-uri: ^3.1.9
+  body-parser: ^2.4.0
+  esbuild: ^0.28.2
+  deepmerge-ts: ^8.0.0
+  mysql2: ^3.23.1
+
+# the freshly published security fixes install before they age: pnpm 12
+# verifies the supply-chain age by default and these four corrections ride
+# the exclusion so the family heals now, not after the waiting window.
+minimumReleaseAgeExclude:
+  - body-parser@2.4.0
+  - fast-uri@3.1.9
+  - follow-redirects@1.16.1
+  - zod@4.6.6
+  - '@biomejs/biome@2.6.3 || 2.6.4'
+  - '@biomejs/cli-android-arm64@2.6.3 || 2.6.4'
+  - '@biomejs/cli-android-x64@2.6.3 || 2.6.4'
+  - '@biomejs/cli-darwin-arm64@2.6.3 || 2.6.4'
+  - '@biomejs/cli-darwin-x64@2.6.3 || 2.6.4'
+  - '@biomejs/cli-linux-arm64-musl@2.6.3 || 2.6.4'
+  - '@biomejs/cli-linux-arm64@2.6.3 || 2.6.4'
+  - '@biomejs/cli-linux-x64-musl@2.6.3 || 2.6.4'
+  - '@biomejs/cli-linux-x64@2.6.3 || 2.6.4'
+  - '@biomejs/cli-win32-arm64@2.6.3 || 2.6.4'
+  - '@biomejs/cli-win32-x64@2.6.3 || 2.6.4'
+  - '@types/node@26.6.6'
+  - '@capacitor/android@8.6.0'
+  - '@capacitor/cli@8.6.0'
+  - '@capacitor/core@8.6.0'
+  - '@capacitor/ios@8.6.0'
+  - '@opencode-ai/sdk@1.19.5'
+  - react-resizable-panels@4.15.1 || 4.15.2 || 4.15.3 || 4.16.0 || 4.16.1 || 4.17.0 || 4.18.0
+  - '@types/google.maps@3.66.9'
+  - lucide-react@1.64.0 || 1.65.0 || 1.66.0 || 1.67.0
+  - '@fluentui/react-icons@2.0.345'
+  - '@wenathlan/vault@2.0.152 || 2.0.153 || 2.0.154 || 2.0.155 || 2.1.8'
+  - hono@4.13.16
+  - '@wenathlan/cadria@2.0.154 || 2.0.155 || 2.1.8'
+  - '@wenathlan/debonair@2.0.154 || 2.0.155 || 2.1.8'
+  - '@wenathlan/getry@2.0.154 || 2.0.155'
+  - '@tailwindcss/node@4.3.4'
+  - '@tailwindcss/oxide-android-arm64@4.3.4'
+  - '@tailwindcss/oxide-darwin-arm64@4.3.4'
+  - '@tailwindcss/oxide-darwin-x64@4.3.4'
+  - '@tailwindcss/oxide-freebsd-x64@4.3.4'
+  - '@tailwindcss/oxide-linux-arm-gnueabihf@4.3.4'
+  - '@tailwindcss/oxide-linux-arm64-gnu@4.3.4'
+  - '@tailwindcss/oxide-linux-arm64-musl@4.3.4'
+  - '@tailwindcss/oxide-linux-x64-gnu@4.3.4'
+  - '@tailwindcss/oxide-linux-x64-musl@4.3.4'
+  - '@tailwindcss/oxide-wasm32-wasi@4.3.4'
+  - '@tailwindcss/oxide-win32-arm64-msvc@4.3.4'
+  - '@tailwindcss/oxide-win32-x64-msvc@4.3.4'
+  - '@tailwindcss/oxide@4.3.4'
+  - '@tailwindcss/postcss@4.3.4'
+  - '@tailwindcss/vite@4.3.4'
+  - '@vitejs/plugin-react@6.2.1'
+  - '@vitest/mocker@5.1.0'
+  - '@vitest/spy@5.1.0'
+  - tailwindcss@4.3.4
+  - vitest@5.1.0
+  - '@wenathlan/saddle@2.0.154 || 2.0.155 || 2.1.8'
+  - '@wenathlan/devthink@2.0.154 || 2.0.155'
+# the pnpm settings live here since pnpm 12 (the package.json pnpm field is
+# no longer read, and onlyBuiltDependencies died in pnpm 11 — the map below
+# is allowBuilds). the honest-site surface builds exactly the engines its db
+# layer and toolchain ride on; nothing else is granted a build script.
+allowBuilds:
+  '@prisma/engines': true
+  better-sqlite3: true
+  esbuild: true
+  prisma: true
+dangerouslyAllowAllBuilds: false

package/posts.ts

@@ -0,0 +1,54 @@
+/**
+ * posts.ts — the typed accessor of the seed blog: the thin door the blog
+ * page and the tests import, answering the posts of the content lane
+ * (content.ts — the manifest; db.ts — the content_rows table; the platform
+ * gateway — GET /api/v1/ui/content). The data never lives here anymore:
+ * posts() answers the live rows the platform served, the manifest seed
+ * otherwise (the uistore chain), the index sort and the honest word count
+ * stay exactly where they rode, and the blog index (/blog) renders the
+ * sorted index and the full bodies through this door — real, written
+ * content about how the family is built, so the site is useful on its own
+ * merits (the ad networks approve content, not containers). New posts
+ * append to the manifest; the index sorts by date, so the manifest order
+ * never matters.
+ */
+
+import { type blogpost, contenttable, seedPosts } from "./content.ts";
+
+export type { blogpost };
+
+/**
+ * The typed accessor of the blog: the live db rows when the platform
+ * answered, the manifest seed otherwise.
+ *
+ * @returns the posts of the blog.
+ */
+export function posts(): readonly blogpost[] {
+  return contenttable("posts", seedPosts);
+}
+
+/**
+ * Builds the blog index: the posts sorted by date, newest first. The ISO
+ * date sort is lexicographic and stable, so the index order never depends
+ * on the row order the store answers.
+ *
+ * @returns the posts of the blog, newest first.
+ */
+export function postindex(): readonly blogpost[] {
+  return [...posts()].sort((a, b) => {
+    if (a.date < b.date) return 1;
+    if (a.date > b.date) return -1;
+    return 0;
+  });
+}
+
+/**
+ * Counts the words of one post's body — the honest length measure the tests
+ * and the page footer can both read.
+ *
+ * @param post the post to measure.
+ * @returns the total word count across the body paragraphs.
+ */
+export function postwords(post: blogpost): number {
+  return post.body.join(" ").split(/\s+/).filter(Boolean).length;
+}

package/robots.txt

@@ -0,0 +1,90 @@
+# robots.txt — cobaia, the front door of the DevThink family
+# Universal deployable template: no domain is hardcoded here. The canonical
+# domain binds on the deploy platform (netlify, vercel, sandbox) and the
+# relative Sitemap line resolves against whichever origin serves this file.
+# Public surface: home, pricing, support, the app directory, the update blog
+# and the legal pages. This site exists to be indexed — content pages stay
+# open to the search and ads crawlers.
+
+User-agent: Googlebot
+Allow: /
+Disallow: /node_modules/
+Disallow: /*.js.map$
+Disallow: /*.json$
+Disallow: /*.ts$
+Disallow: /*.tsx$
+Disallow: /*.css.map$
+Crawl-delay: 5
+
+User-agent: Bingbot
+Allow: /
+Disallow: /node_modules/
+Disallow: /*.js.map$
+Disallow: /*.json$
+Disallow: /*.ts$
+Disallow: /*.tsx$
+Disallow: /*.css.map$
+Crawl-delay: 10
+
+User-agent: *
+Allow: /
+Disallow: /node_modules/
+Disallow: /*.js.map$
+Disallow: /*.json$
+Disallow: /*.ts$
+Disallow: /*.tsx$
+Disallow: /*.css.map$
+Crawl-delay: 10
+
+# SEO and scraper bots blocked outright
+User-agent: AhrefsBot
+Disallow: /
+
+User-agent: SemrushBot
+Disallow: /
+
+User-agent: DotBot
+Disallow: /
+
+User-agent: MJ12bot
+Disallow: /
+
+User-agent: PetalBot
+Disallow: /
+
+User-agent: BLEXBot
+Disallow: /
+
+User-agent: DataForSeoBot
+Disallow: /
+
+# AI training crawlers blocked outright
+User-agent: GPTBot
+Disallow: /
+
+User-agent: CCBot
+Disallow: /
+
+User-agent: anthropic-ai
+Disallow: /
+
+User-agent: Claude-Web
+Disallow: /
+
+User-agent: ChatGPT-User
+Disallow: /
+
+User-agent: Google-Extended
+Disallow: /
+
+User-agent: Bytespider
+Disallow: /
+
+# ads relevance crawlers keep full access — the site runs honest ad slots
+User-agent: Mediapartners-Google
+Allow: /
+
+User-agent: AdsBot-Google
+Allow: /
+
+Sitemap: /sitemap.xml

package/roster.ts

@@ -0,0 +1,29 @@
+/**
+ * roster.ts — the typed accessor of the family directory data: the thin
+ * door the /apps page, the shell footer, the home preview and the intro
+ * footer import, answering the roster of the content lane (content.ts —
+ * the manifest; db.ts — the content_rows table; the platform gateway — GET
+ * /api/v1/ui/content). The data never lives here anymore: roster() answers
+ * the live rows the platform served, the manifest seed otherwise (the
+ * uistore chain). Every deploy unit beside the cobaia, with the one accent
+ * each carries (the spec §12 table, mirrored from the argan contract; the
+ * devthink OS rides the family sun) and the honest role each app declares
+ * in its own devthink.toml — condensed to one line, nothing embellished:
+ * the page and the tests read the same table through this door, so the
+ * directory can never drift from the family.
+ */
+
+import { contenttable, type familymember, seedRoster } from "./content.ts";
+
+export type { familymember };
+
+/**
+ * The typed accessor of the directory: the live db rows when the platform
+ * answered, the manifest seed otherwise — rail order, the OS first, then
+ * the applications.
+ *
+ * @returns the directory roster.
+ */
+export function roster(): readonly familymember[] {
+  return contenttable("roster", seedRoster);
+}

package/sandboxmodality.ts

@@ -0,0 +1,138 @@
+// # sandboxmodality — the workload lane declaration of the cobaia
+// application (root layer, wave WL1): the lanes this app owns in the
+// family workload catalog, mirrored from the engine of record
+// (saddle/workloadlaw.ts — the FAMILYLANES table) as the string contract
+// the deploy and the platform speak. The mirror law (the same discipline
+// the devthink modalities vendor rides): the rows are mirrored, not
+// imported, because the published saddle envelope the container build
+// installs does not carry the workload law yet and the family law bars a
+// relative path across apps — the day the envelope publishes, the ids
+// answer the same strings (the lockstep is the string contract, not the
+// import). The app battery pins the mirror against the engine source
+// through the library bridge so the vendor can never drift in silence.
+//
+// The seat law (the deploy's opt-in, the family's shared shape): the
+// deploy pins COBAIA_SANDBOX_LANE — "local" (the default, the deploy's own process),
+// "join" (the platform resolves every lane through the engine's join
+// resolver — the nuclear modality law: the workload never names a
+// modality, the join answers), or a modality id the deploy pins for the
+// app's lanes (named here, validated by the platform's join at dispatch —
+// this module never judges engine vocabulary, so the mirror cannot drift
+// when the registry grows). The module never spawns anything and resolves
+// no join: it names the lanes' truth; the platform resolves the sandbox.
+// Zero consumer data, zero imports.
+
+/** one mirrored workload lane row — the same five keys the engine law pins
+ * (app, lane, role, demand, today). */
+export type AppWorkloadLane = {
+  /** the official app slug every row carries. */
+  readonly app: string;
+  /** the lane id inside the app (kebab-case, the engine catalog id). */
+  readonly lane: string;
+  /** what the lane does, in one sentence (the engine row's sentence). */
+  readonly role: string;
+  /** the demand the lane puts on the sandbox (gpu, network, isolation,
+   * boot budget — never a modality name: the nuclear law). */
+  readonly demand: {
+    readonly gpu: boolean;
+    readonly network: boolean;
+    readonly isolation: "process" | "namespace" | "vm" | "hardware";
+    readonly bootbudget?: number;
+  };
+  /** where the heavy pass runs today — the honest truth the census reads. */
+  readonly today: "engine-lane" | "app-lane";
+};
+
+/** the app slug every mirrored row carries. */
+export const APPSLUG = "cobaia";
+
+/** the workload lanes this app owns — the mirror of the engine catalog
+ * rows (saddle/workloadlaw.ts, the FAMILYLANES table; the battery pins
+ * the two surfaces equal). */
+export const WORKLOADLANES: readonly AppWorkloadLane[] = Object.freeze([
+  {
+    app: "cobaia",
+    lane: "plan-checkout",
+    role: "the plan checkout surface: mrr plan rows, link validation and the billing webhook walk when it lands, secrets server-side",
+    demand: { gpu: false, network: true, isolation: "process", bootbudget: 25 },
+    today: "app-lane",
+  },
+  {
+    app: "cobaia",
+    lane: "ads-slot",
+    role: "the honest ad slot lane: the reserved slots and the rotation decision the deploy answers before the render",
+    demand: { gpu: false, network: true, isolation: "process", bootbudget: 25 },
+    today: "app-lane",
+  },
+  {
+    app: "cobaia",
+    lane: "label-seed",
+    role: "the label manifest seed of the monetization face: the store walk the sqlite vault carries",
+    demand: { gpu: false, network: false, isolation: "process", bootbudget: 25 },
+    today: "app-lane",
+  },
+]);
+
+/** the environment name the deploy pins the sandbox lane seat through
+ * (the opt-in seat — documented in the env example, zero hardcode). */
+export const SANDBOXLANEENV = "COBAIA_SANDBOX_LANE";
+
+/** the typed answer of the seat: the declaration the deploy reads —
+ * local (the lanes run in the deploy's own process), join (the platform
+ * resolves every lane through the engine's join resolver), or the pinned
+ * modality id the deploy named (validated by the platform's join at
+ * dispatch, never judged here). every answer is honest: an absent or
+ * blank choice answers the declared default, never a silent switch. */
+export type LaneSeatResult =
+  | { ok: true; seat: "local"; sandboxed: false }
+  | { ok: true; seat: "join"; sandboxed: true; pinned: false }
+  | { ok: true; seat: string; sandboxed: true; pinned: true };
+
+/**
+ * Resolves the sandbox lane seat of this application — the deploy's
+ * opt-in: an absent or blank choice answers the declared default ("local"
+ * — the lanes run in the deploy's own process); "join" opts every lane
+ * onto the platform's join resolver (the nuclear modality law); any other
+ * non-empty choice is the modality id the deploy pins for the lanes
+ * (named by the deploy, validated by the platform's join at dispatch —
+ * this module never judges engine vocabulary, so the mirror cannot drift
+ * when the registry grows).
+ *
+ * @param choice the deploy's choice (the env value or the config row).
+ * @returns the seat declaration.
+ */
+export function lanesandbox(choice: string | undefined): LaneSeatResult {
+  const name = choice?.trim() ?? "";
+  if (name.length === 0 || name === "local") {
+    return { ok: true, seat: "local", sandboxed: false };
+  }
+  if (name === "join") {
+    return { ok: true, seat: "join", sandboxed: true, pinned: false };
+  }
+  return { ok: true, seat: name, sandboxed: true, pinned: true };
+}
+
+/**
+ * Reads the lane seat off one environment lookup — the deploy pins
+ * COBAIA_SANDBOX_LANE (opt-in per deploy); the lookup is injected so the server lane
+ * hands process.env and any other lane hands its own seat. this module
+ * never spawns anything: it names the truth the platform resolves.
+ *
+ * @param lookup the environment lookup function (the env carrier).
+ * @returns the seat declaration.
+ */
+export function lanesandboxfromenv(lookup: (key: string) => string | undefined): LaneSeatResult {
+  return lanesandbox(lookup(SANDBOXLANEENV));
+}
+
+/**
+ * Answers one mirrored lane row by lane id — the lookup the app surfaces
+ * and the batteries read.
+ *
+ * @param lane the lane id inside the app.
+ * @returns the mirrored row, or undefined when the app carries no such
+ * lane.
+ */
+export function laneof(lane: string): AppWorkloadLane | undefined {
+  return WORKLOADLANES.find((row) => row.lane === lane);
+}

package/schema.prisma

@@ -0,0 +1,31 @@
+// cobaia prisma schema — the self-hosted database of the family site. cobaia
+// is the monetization surface of the family: the content site that carries
+// the plans, the support rails and the honest advertisement slots while the
+// family apps stay clean.
+//
+// family sync contract (devthink master): a table of the same kind carries
+// the same columns and the same pointers in every application that holds
+// the kind — identity pointers are text, counts are 32-bit ints, time is
+// datetime or iso text, and byte-scale pointers (sizes, lengths, offsets)
+// are 64-bit BigInt, the pointer that holds terabytes. The sqlite
+// autoincrement rowid is 64-bit by the engine contract. This file is the
+// documentation of record: the runtime runs better-sqlite3 beside it and
+// mirrors the same columns in its boot DDL (db.ts).
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "sqlite"
+  url      = env("DATABASE_URL")
+}
+
+/// the first-run state of one visitor (the platform contract the gateway
+/// serves over /api/v1/onboarding)
+model OnboardingState {
+  id             Int      @id @default(autoincrement())
+  visitor        String   @unique
+  introseen      Boolean  @default(false)
+  onboardingseen Boolean  @default(false)
+  updatedAt      DateTime @updatedAt
+}

package/sitemap.xml

@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- cobaia — the family site. No domain is hardcoded. The loc entries are
+     relative and resolve against whichever origin serves this sitemap; the
+     canonical domain binds on the deploy platform. -->
+<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
+  <url>
+    <loc>/</loc>
+    <lastmod>2026-10-10</lastmod>
+    <changefreq>weekly</changefreq>
+    <priority>1.0</priority>
+  </url>
+  <url>
+    <loc>/apps</loc>
+    <lastmod>2026-10-10</lastmod>
+    <changefreq>weekly</changefreq>
+    <priority>0.9</priority>
+  </url>
+  <url>
+    <loc>/pricing</loc>
+    <lastmod>2026-10-10</lastmod>
+    <changefreq>monthly</changefreq>
+    <priority>0.9</priority>
+  </url>
+  <url>
+    <loc>/blog</loc>
+    <lastmod>2026-10-06</lastmod>
+    <changefreq>weekly</changefreq>
+    <priority>0.8</priority>
+  </url>
+  <url>
+    <loc>/support</loc>
+    <lastmod>2026-10-10</lastmod>
+    <changefreq>monthly</changefreq>
+    <priority>0.6</priority>
+  </url>
+  <url>
+    <loc>/legal</loc>
+    <lastmod>2026-10-10</lastmod>
+    <changefreq>monthly</changefreq>
+    <priority>0.5</priority>
+  </url>
+</urlset>