@wenathlan/cobaia 0.0.0-stage → 2.0.158

package/docs/features.md

@@ -0,0 +1,58 @@
+# cobaia features
+
+the real feature list of the cobaia content site, extracted from the code: every item below exists in the app root logics or the Sol theme.
+
+## plans
+
+- three mrr plans: free at us$0, pro at us$5 and studio at us$19 per month, placeholder prices until the billing platform decision lands (stripe payment links or paddle)
+- honest checkout state: a configured plan href renders a live anchor, an empty one renders the disabled button with the note checkout not configured yet
+- plan lookup: planbyid answers one plan of the table by its stable id (free, pro, studio)
+- plan prose in the label store: every plan sentence (name, billing period, blurb, features) answers from labels.ts; only the billing values ride checkoutlinks.ts
+- intro plans zone: the intro page renders the same offer from the one checkoutlinks table, the studio plan leading raised
+- what the money covers: the pricing section states the us$15 a month floor of domains and free static hosting and that the applications stay ad free
+- billing webhook walk lane: the plan-checkout workload lane is declared in sandboxmodality.ts for the billing webhook work when it lands, secrets server side
+
+## ads
+
+- reserved slot registry: one slot per content page, home display at 728/90, apps in-feed at 3/1, blog in-article at 3/1, keyed by page folder name
+- honest ad container: a fixed aspect-ratio box on a hairline well, visibly labeled advertisement, rendering the empty note ad slot not configured yet while no slot id is set, so the page never shifts when a real unit arrives
+- script rule: no ad network script lives in the repository; the adsense or equivalent loader is injected after network approval through the deploy environment only
+- slot liveness check: adsslotlive answers whether a reserved slot carries a real network id
+- ad free surfaces: the pricing, support and legal pages carry no ad slot; nothing that asks for money or discloses policy sits beside an advertisement
+- ads slot lane: the ads-slot workload lane is declared for the reserved slots and the rotation decision the deploy answers before the render
+
+## content
+
+- content lane: the pages read the live rows the platform gateway serves over GET /api/v1/ui/content and fall back to the manifest seed in content.ts, so the interface never blanks
+- content kinds: the lane serves posts, roster, plans, supportlinks, ads.slots, ads.label and ads.empty, each row an ordinal and a json payload
+- live load discipline: one fetch per session against the configured base (VITE_CATALOG_URL) with a 4 second abort window; any failure keeps the seed answering
+- useContent mount hook: a store-riding page loads the live rows once per mount and re-renders when they land, with no first-paint flash
+- update blog: three seed posts with full bodies (ten sites one engine, one css one tree, no backend no tracking), the index sorted newest first and each post carrying date, tags, excerpt, body and the honest word count
+- app directory: the ten deploy units of the family, each card carrying the one-line role declared in its own devthink.toml and its spec accent
+- label store: every interface string rides the label manifest at revision 4, read through the typed accessors label and labelfill, seeded into the store with translated rows protected from overwrite
+- label seed lane: the label-seed workload lane is declared for the manifest walk the sqlite vault carries
+
+## support
+
+- two support channels: github sponsors and ko-fi, both presented as zero platform fee, read from the supportlinks record
+- honest channel state: an unconfigured channel renders the disabled button with the note link not configured yet, never a fake link
+- other ways to help: the section lists the public issue tracker, writing about the tools and linking the directory
+- invalid traffic policy: the site states no ad clicking, no traffic exchange, no bots, because automated traffic against an ad surface kills the ad account and the domain reputation
+- support strip on home: the landing carries the support call before the reserved ad slot
+
+## ui
+
+- one shared shell: the sticky acrylic nav with the active section indicator and the worked footer carrying the family row, the same surface at the direct url and inside the os power clip
+- routes: home on the bare root, apps, pricing, support, blog, legal inside the shell, the bare intro at /intro and the catch-all 404
+- intro splash: the akash opening with the mark spring, name rise and role fade, skippable by click, tap or key, honoring reduced motion and writing nothing to the visitor machine
+- brand mark: the drawn beaker svg in the dark amber gradient, the only seat of the identity accent, with a gentle hover tilt
+- home landing: left-aligned hero, the three steps (engine, static, honest), the four-card featured directory preview and the support strip
+- legal page: the privacy policy and terms with clause leads, disclosing the advertising plan and the analytics rule
+- notfound page: the 404 answer inside the site chrome with the way out to home and the directory
+- window captions: the shell carries the minimize, maximize and close caption labels for the os window seat
+- wouter routing on the declared vite base: deep links resolve against the pages subpath the build declaration owns
+- static deploys: netlify, vercel and cloudflare workers configs at the app root, plus robots.txt and sitemap.xml for the crawlers
+
+## Dependencies
+
+- synchronized dependency union — the eleven family apps share one dependency tree: identical `dependencies`, `devDependencies` and `peerDependencies` (same keys, same versions, nothing removed, highest semver wins on conflicts) and one `engines` catalog with node as maestro and the V 0.5.2 seat as catalog annotation (@family wave/depssync).

package/docs/monetization.md

@@ -0,0 +1,61 @@
+# cobaia monetization surface
+
+cobaia is the public monetization surface of the devthink family: the content site that carries the mrr plan table, the support channels and the honest advertisement slots while the ten family applications stay clean.
+
+## overview
+
+- a plain content site with no entry gate and no onboarding flow: every page is public and the home renders directly on the bare root
+- one window shell (header, footer) wraps every content route; the intro page mounts bare at /intro outside the chrome
+- every plan href and support href ships empty until the owner configures billing; the interface renders honest empty states instead of dead links
+- no ad network script is committed: the loader enters only after network approval, injected through the deploy environment
+- zero tracking: no cookies, no local storage, no analytics beacons, no keys committed
+- build tooling: vite static build, wouter router on the declared vite base, vitest suites, biome formatting
+
+## module inventory
+
+the pure logics at the app root, each one a typed accessor over the content lane:
+
+- adsconfig.ts: the honest ad slot registry. exports the adsslot type (slotid, format, ratio), the fixed label advertisement, the empty note ad slot not configured yet, the reserved slots per page (home display 728/90, apps in-feed 3/1, blog in-article 3/1) and the readers adsslotfor and adsslotlive
+- checkoutlinks.ts: the typed billing accessor. checkoutlinks answers the plan table, supportlinks the support channel record, isconfigured tests an href, planbyid finds one plan by id (free, pro, studio). only billing values ride here; the plan prose answers from the label store
+- content.ts: the content law. section 1 holds the manifest seed (seedPosts, seedRoster, seedPlans, seedSupportLinks, seedAdsSlots, seedAdsLabel, seedAdsEmpty); section 2 holds the live loader (loadcontent over GET /api/v1/ui/content), the accessors contenttable and contentvalue (live rows first, seed fallback) and the useContent mount hook
+- posts.ts: the blog accessor. posts answers the post table, postindex sorts it newest first, postwords counts the honest word total of one body
+- roster.ts: the family directory accessor. roster answers the ten deploy units with slug, accent and one-line role, in rail order with the os first
+- db.ts: the self-hosted sqlite runtime (better-sqlite3 through the vault storagelane). keeps the onboarding_states and labels tables with prepared, parameterized statements only
+- familyurl.ts: the family address book. familyurl resolves one sibling deploy unit to the relative url ../slug/ with the trailing slash, so the family links both ways
+- labels.ts: the copy law. the english manifest (LABEL_MANIFEST, revision 4) carries every interface string keyed by page.widget.key; label and labelfill read it; seedLabels mirrors the rows into the browser label store
+- sandboxmodality.ts: the workload lane declaration. mirrors the three lanes cobaia owns in the family catalog (plan-checkout, ads-slot, label-seed) and reads the COBAIA_SANDBOX_LANE seat (local, join, or a pinned modality id)
+- capacitor.config.ts, vite.config.ts, vitest.config.ts: the mobile conversion config, the static build and the test runner configs at the app root
+
+## data layer
+
+- the sqlite runtime opens one storage lane on the app-owned file cobaia.db (wal, foreign keys, patient locks) through openStorageLane of @wenathlan/vault
+- every statement is prepared and bound; no sql is assembled by string concatenation
+- the boot ddl is idempotent and mirrors schema.prisma, the documentation of record: the tables exist after the first open
+- onboarding_states holds the entry-flow flags per visitor (introseen, onboardingseen) with a seen-wins upsert; the platform gateway serves the same flags over /api/v1/onboarding
+- labels holds the interface copy store: id, text, revision, translated. the boot seed ingests the english manifest and never overwrites a translated row
+- the content rows (posts, roster, plans, supportlinks, ads.slots, ads.label, ads.empty) live in the site store and answer over the platform gateway at GET /api/v1/ui/content; the manifest seed in content.ts is the fallback the offline static build reads
+- the browser never imports db.ts: better-sqlite3 cannot ride the static bundle, so the browser pulls the live rows over the internal api (base from VITE_CATALOG_URL, 4 second abort window, one load per session)
+- the vitest suites (adsconfig, checkoutlinks, familyurl, posts, sandboxmodality) pin the module contracts: the slot registry, the placeholder prices, the empty hrefs and the plan prose keys
+
+## sol subapps
+
+the theme surface, one folder per page, mounted by the theme anchor sol/Sol.tsx on wouter:
+
+- home: the landing. left-aligned hero, the three steps (engine, static, honest), a four-card directory preview reading the one roster table (devthink, saddle, vault, cadria), the support strip and the reserved ad slot at the end of the content
+- apps: the directory. one card per deploy unit with the honest role and the deep link through familyurl, closed by the in-feed ad slot
+- pricing: the plan table. three honest plans (free, pro, studio), a configured href renders a live anchor, an empty one the disabled button plus the note checkout not configured yet, and the money section explains the us$15 a month floor. no ad slot on this page
+- support: the support channels. github sponsors and ko-fi cards with the same configured-or-honest rule, the other ways to help section and the invalid traffic line. no ad slot on this page
+- blog: the update blog. the sorted index and the full bodies of the posts as real articles with date, word count and tags in the meta line, closed by the in-article ad slot
+- legal: the privacy policy and the terms. discloses the advertising plan (labeled reserved slots, third-party cookies only once a network is live) and the analytics rule (none by default). no ad slot on this page
+- intro: the bare presentation page. the akash splash (plays per visit, writes nothing, skips on click, tap or key), the plans zone reading the one checkoutlinks table, the door panes and the footer doors
+- notfound: the 404 answer inside the site chrome
+- shell: the one chrome. the sticky acrylic nav with the active section indicator, the footer carrying the family row through familyurl, and the embedded contract that renders the same surface inside the devthink os power clip
+- wingets: the shared components (IntroSplash, IntroPlans, IntroFooter, ShellAdsslot, ShellBrand) re-exported through one index surface
+
+## family integration
+
+- the roster mirrors the ten deploy units: devthink the os, saddle the sandbox, forge the execution clone, foundry the complete clone, vault the storage clone, getry the ai workspace, cadria the video and image studio, debonair the audio daw, stealthhead the fps game platform, argan the dns toolkit, each with its spec section 12 accent
+- familyurl resolves every sibling one level above this deploy unit, so the directory links out and every sibling footer links back
+- the label store rides the shared vault labelstore; the sqlite lane rides the shared vault storagelane, the same mechanism the storage clone keeps
+- the deploy targets are static: netlify, vercel and cloudflare workers configs sit at the app root beside robots.txt and sitemap.xml; the capacitor mobile lane renders the same web bundle
+- the package identity is @wenathlan/cobaia inside the devthink monorepo; the devthink.toml declares the app role and the seven pages (home, pricing, support, apps, legal, blog, notfound)

package/familyurl.ts

@@ -0,0 +1,22 @@
+/**
+ * familyurl.ts — the address book of the family deploy units that share the
+ * host with the cobaia. The family redirects both ways: the site directory
+ * (/apps) links every sibling application and the DevThink OS, and every
+ * sibling links back through its own copy of this helper. The deploy units
+ * sit beside this one as sibling folders on the shared origin, so the url
+ * resolves one level above this application (../slug/), with the slug
+ * trimmed of any slashes so both bare names and pasted segments resolve to
+ * the same address. Pure and side-effect free: the helper only shapes
+ * strings.
+ */
+
+/**
+ * Resolves the url of a family deploy unit that shares this origin.
+ *
+ * @param slug the deploy unit segment (the app folder name).
+ * @returns the relative url of the family application, one level above this
+ * deploy unit, always carrying the trailing slash.
+ */
+export function familyurl(slug: string): string {
+  return `../${slug.replace(/^\/+|\/+$/g, "")}/`;
+}

package/favicon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32" role="img" aria-label="cobaia favicon"><title>cobaia</title><rect width="32" height="32" rx="8" fill="#b45309"/></svg>

package/icon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 96 96" role="img" aria-label="cobaia icon"><title>cobaia</title><defs><linearGradient id="cbbg" x1="0" y1="0" x2="0" y2="1"><stop offset="0" stop-color="#f59e0b"/><stop offset="1" stop-color="#b45309"/></linearGradient></defs><rect width="96" height="96" rx="24" fill="url(#cbbg)"/><g fill="none" stroke="#fbf5ea" stroke-width="5" stroke-linecap="round" stroke-linejoin="round"><path d="M38 26 H58 M42 26 V44 L30 66 A4 4 0 0 0 34 72 H62 A4 4 0 0 0 66 66 L54 44 V26"/><path d="M36 56 H60"/></g></svg>

package/index.html

@@ -0,0 +1,26 @@
+<!doctype html>
+<!-- web entry of the theme -->
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta content="width=device-width, initial-scale=1.0, maximum-scale=1.0, user-scalable=no" name="viewport" />
+    <meta
+      name="description"
+      content="cobaia is the front door of the DevThink family: the pricing, the support page, the app directory and the update blog for ten deployable web applications."
+    />
+    <meta name="theme-color" content="#0a0a0b" />
+    <link rel="icon" href="./favicon.svg" />
+    <link rel="manifest" href="./manifest.webmanifest" />
+    <link rel="preconnect" href="https://fonts.googleapis.com" />
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
+    <link
+      href="https://fonts.googleapis.com/css2?family=Inter:wght@100..900&family=Geist+Mono:wght@100..900&display=swap"
+      rel="stylesheet"
+    />
+    <title>cobaia — the devthink family site</title>
+    <script type="module" src="./App.tsx"></script>
+  </head>
+  <body>
+    <div id="root"></div>
+  </body>
+</html>

package/labels.ts

@@ -0,0 +1,291 @@
+/**
+ * labels.ts — the copy law of cobaia: every interface string lives in the
+ * label store, the wingets and page anchors read through this typed
+ * accessor, and a hardcoded string inside a widget is a defect. the
+ * manifest below is the english source of truth extracted from the real
+ * strings of the Sol wingets and the page anchors; the seed ingests it
+ * into the labels store (the site db through db.ts on the server, the
+ * browser rows cache in the visitor machine) and the seed never overwrites
+ * a translated row.
+ *
+ * the browser never imports db.ts (better-sqlite3 cannot ride the static
+ * bundle): the type comes across erased, the browser seed mirrors the rows
+ * into the local cache.
+ *
+ * data stays data: the app roster (apps.roster.ts — slugs, accents, the
+ * roles each app declares in its own devthink.toml), the plan billing
+ * values and the support hrefs (checkoutlinks.ts — ids, prices, checkout
+ * links; the plan prose itself rides here), the ad slot registry
+ * (adsconfig.ts — the fixed ad contract label and note ride there, pinned
+ * by the tests), the blog posts (posts.ts) and the route hrefs keep
+ * flowing from the data modules; the prose and the affordances around
+ * them ride here.
+ */
+
+import { createLabelStore } from "@wenathlan/vault/labelstore";
+
+/** the label revision of the manifest: bump on every copy wave so the seed
+ * refreshes the store rows of the changed strings. */
+export const LABEL_REVISION = 4;
+
+/** the english manifest: the page.widget.key path answers the surface text.
+ * every entry is the verbatim string the wingets and page anchors rendered
+ * before the copy wave — zero invented copy. */
+export const LABEL_MANIFEST = {
+  // the window shell widget (the one chrome of the content site)
+  "shell.skip": "skip to content",
+  "shell.window.aria": "cobaia",
+  "shell.brand.aria": "cobaia — home",
+  "shell.name": "cobaia",
+  "shell.role": "the devthink family site",
+  "shell.caption.minimize": "Minimize cobaia",
+  "shell.caption.maximize": "Maximize cobaia",
+  "shell.caption.close": "Close cobaia",
+  "shell.nav.aria": "site sections",
+  "shell.nav.apps": "apps",
+  "shell.nav.pricing": "pricing",
+  "shell.nav.blog": "blog",
+  "shell.nav.support": "support",
+  "shell.foot.aboutHead": "cobaia",
+  "shell.foot.aboutText":
+    "the front door of the devthink family: ten applications that run anywhere, tracked nowhere. pricing, support, the app directory and the update blog live here.",
+  "shell.foot.siteHead": "site",
+  "shell.foot.apps": "apps",
+  "shell.foot.pricing": "pricing",
+  "shell.foot.blog": "blog",
+  "shell.foot.support": "support",
+  "shell.foot.legal": "legal",
+  "shell.foot.familyHead": "the family",
+  "shell.colophon": "cobaia — a provisional name. part of the devthink family · ten honest tools under one roof.",
+  // the home page anchor (the landing)
+  "home.aria.hero": "cobaia — the devthink family site",
+  "home.eyebrow": "the devthink family site",
+  "home.title": "One family. Ten tools. Zero tracking.",
+  "home.lede":
+    "devthink builds and ships a family of web applications — sandboxes, studios, tools and a game platform — hosted free, tracked nowhere. this site is the front door: the directory, the pricing, the support page and the update blog.",
+  "home.action.pricing": "see the pricing",
+  "home.action.apps": "browse the ten apps",
+  "home.section.stepsAria": "what the family is made of",
+  "home.section.stepsTitle": "What the family is made of",
+  "home.section.stepsLede": "the same three choices behind every member of the family.",
+  "home.steps.engine.n": "01",
+  "home.steps.engine.title": "one core",
+  "home.steps.engine.text":
+    "the sandbox and the storage are shared parts. every application assembles the parts it needs and ships beside the others.",
+  "home.steps.static.n": "02",
+  "home.steps.static.title": "static first",
+  "home.steps.static.text":
+    "every public surface builds down to one stylesheet and a handful of bundles on free static hosting. nothing is stored on the visitor machine — no cookies, no accounts, no tracking.",
+  "home.steps.honest.n": "03",
+  "home.steps.honest.title": "honest money",
+  "home.steps.honest.text":
+    "the family runs on about us$15 a month of domains. the pricing and the support page exist to cover that floor first — and the apps themselves stay free of ads.",
+  "home.section.previewAria": "a preview of the app directory",
+  "home.section.previewTitle": "A few of the ten",
+  "home.section.previewLede": "every member lives beside this site, one link away. the full directory lives on",
+  "home.section.previewLink": "/apps",
+  "home.section.previewTail": ".",
+  "home.appcard.open": "open {slug}",
+  "home.section.supportAria": "supporting the family",
+  "home.section.supportTitle": "Keep the family independent",
+  "home.section.supportLede":
+    "github sponsors and ko-fi keep the domains paid and the tools free — both charge zero platform fees, so the support goes straight to the hosting floor.",
+  "home.action.support": "ways to support",
+  // the apps page anchor (the directory)
+  "apps.aria.hero": "the devthink app directory",
+  "apps.eyebrow": "the directory",
+  "apps.title": "Ten apps. One family.",
+  "apps.lede":
+    "every member of the family lives beside this site and links back to it. the roles below are the honest ones each app declares for itself; the accents are the family's spec table.",
+  "apps.section.rosterAria": "the family roster",
+  "apps.card.open": "open {slug}",
+  // the pricing page anchor (the plans)
+  "pricing.action.choose": "choose {name}",
+  "pricing.action.notConfigured": "checkout not configured yet",
+  "pricing.aria.hero": "cobaia pricing",
+  "pricing.eyebrow": "pricing",
+  "pricing.title": "Pay for what you use. Or use it free.",
+  "pricing.lede":
+    "the core surface of every application is free and stays free. the paid plans add the pro features of one app or of the whole family. the prices below are placeholders until billing goes live — a plan activates the moment its checkout link is configured, and says so honestly until then.",
+  "pricing.section.plansAria": "the plans",
+  "pricing.card.planAria": "{name} plan",
+  "pricing.section.moneyAria": "what the money covers",
+  "pricing.section.moneyTitle": "What the money covers",
+  "pricing.section.moneyLede":
+    "the family runs on about us$15 a month of domains and free static hosting. the paid plans cover that floor first, then the higher tiers. there are no ads inside the applications — the ad slots live only on this site's content pages, and they are labeled and reserved.",
+  "pricing.section.moneyNote":
+    "billing decision pending: stripe payment links or paddle (merchant of record). the checkout hrefs are configuration at the app root — never code, never a committed key.",
+  // the plan prose of the pricing cards and the intro plans zone (the
+  // billing values — ids, prices, hrefs — stay in checkoutlinks.ts; the
+  // words ride here so the store answers every plan sentence)
+  "pricing.plan.free.name": "Free",
+  "pricing.plan.free.per": "month",
+  "pricing.plan.free.blurb": "every app's core surface, for as long as the family is up.",
+  "pricing.plan.free.feat.1": "the core surface of all ten applications",
+  "pricing.plan.free.feat.2": "no ads inside the apps, ever",
+  "pricing.plan.free.feat.3": "community support through the public issue tracker",
+  "pricing.plan.pro.name": "Pro",
+  "pricing.plan.pro.per": "month",
+  "pricing.plan.pro.blurb": "one app and its pro features, billed per application.",
+  "pricing.plan.pro.feat.1": "the pro features of one chosen application",
+  "pricing.plan.pro.feat.2": "priority routes on the shared gateway",
+  "pricing.plan.pro.feat.3": "early access to that app's new surfaces",
+  "pricing.plan.studio.name": "Studio",
+  "pricing.plan.studio.per": "month",
+  "pricing.plan.studio.blurb": "the whole family at once, for people who live in the tools.",
+  "pricing.plan.studio.feat.1": "the pro features of every application in the family",
+  "pricing.plan.studio.feat.2": "early access across the family",
+  "pricing.plan.studio.feat.3": "a direct line to the maintainer for feature requests",
+  // the support page anchor (the channels)
+  "support.action.notConfigured": "link not configured yet",
+  "support.aria.hero": "cobaia support",
+  "support.eyebrow": "support",
+  "support.title": "Keep the family independent.",
+  "support.lede":
+    "the family runs on about us$15 a month of domains and free hosting. support covers that floor, keeps every tool free to use and keeps the applications free of ads. both channels below charge zero platform fees, so the support goes where it says.",
+  "support.section.channelsAria": "the support channels",
+  "support.channel.sponsors.name": "GitHub Sponsors",
+  "support.channel.sponsors.promise":
+    "sponsor the maintainer through github. zero platform fee, payouts land automatically, and the sponsorship shows up next to the public work it funds.",
+  "support.channel.sponsors.cta": "sponsor on github",
+  "support.channel.kofi.name": "Ko-fi",
+  "support.channel.kofi.promise":
+    "one-off donations and monthly memberships through ko-fi. zero fee on donations, no account required on your side beyond the payment.",
+  "support.channel.kofi.cta": "buy a coffee",
+  "support.section.otherAria": "other ways to help",
+  "support.section.otherTitle": "Other ways to help",
+  "support.section.otherLede":
+    "use the tools and tell the truth about them — report what breaks in the public issue tracker, write about what the family does well or badly, and link the directory when a tool earns it. none of it costs anything and all of it compounds.",
+  "support.section.otherNote":
+    "the honest line: no ad clicking, no traffic exchange, no bots. automated traffic against an ad surface is invalid traffic — it would end the ad account and the domain reputation. the family does not do it.",
+  // the blog page anchor (the update blog)
+  "blog.aria.hero": "the family update blog",
+  "blog.eyebrow": "updates",
+  "blog.title": "What the family is building.",
+  "blog.lede":
+    "short, written updates on the family — how the sites are built, what they cost and why they ship the way they do. every post lives on this page; the index jumps to it.",
+  "blog.section.indexAria": "the post index",
+  "blog.section.fullAria": "the posts in full",
+  "blog.post.meta": "{date} · {words} words · {tags}",
+  // the legal page anchor (privacy and terms)
+  "legal.aria.hero": "cobaia legal",
+  "legal.eyebrow": "legal",
+  "legal.title": "Privacy and terms.",
+  "legal.lede":
+    "the short version: the family sites are static files, they collect nothing by default, they track nobody, and the details below are the long version of the same promise. last updated 2026-10-10.",
+  "legal.privacy.aria": "privacy policy",
+  "legal.privacy.title": "Privacy policy",
+  "legal.privacy.collect.head": "What we collect: nothing, by default.",
+  "legal.privacy.collect.text":
+    "The family sites are static files served from a CDN. They set no cookies, run no analytics, embed no fingerprinting and write nothing to your browser — no local storage, no indexed databases, no session records. The only thing a visitor machine does is load the interface.",
+  "legal.privacy.logs.head": "Server logs.",
+  "legal.privacy.logs.text":
+    "The hosting providers (netlify, vercel, cloudflare and equivalents) keep standard access logs on their own infrastructure for security and abuse prevention. The family does not add identifiers to them and does not export them for profiling.",
+  "legal.privacy.ads.head": "Advertising.",
+  "legal.privacy.ads.text":
+    "The family site runs reserved, visibly labeled ad containers on its content pages. No ad script ships in the code: the advertising partner's loader is only added after the partner approves the site, and it arrives through the deploy environment. Once live, third-party vendors including Google may serve ads and use cookies to personalize them, as governed by the partner's own policies. You can opt out of personalized advertising through your ad settings (for Google, adssettings.google.com). Ads never appear inside the applications themselves.",
+  "legal.privacy.analytics.head": "Analytics.",
+  "legal.privacy.analytics.text":
+    "There is no analytics on the family sites today. If that ever changes, it will be opt-in, minimal and disclosed on this page before it goes live.",
+  "legal.privacy.payments.head": "Payments.",
+  "legal.privacy.payments.text":
+    "When paid plans go live, checkout runs on the payment provider's own pages (stripe, paddle or equivalents). The family sites never see or store card data.",
+  "legal.privacy.contact.head": "Contact.",
+  "legal.privacy.contact.text":
+    "Privacy questions and data requests go through the public issue tracker of the family repository — the same channel the software itself uses.",
+  "legal.terms.aria": "terms of use",
+  "legal.terms.title": "Terms of use",
+  "legal.terms.service.head": "The service.",
+  "legal.terms.service.text":
+    "The family applications and this site are provided as is, without warranty of any kind. They are tools built in public: features change, break and get fixed in the open. Nothing here is offered as professional advice or with any availability guarantee.",
+  "legal.terms.use.head": "Acceptable use.",
+  "legal.terms.use.text":
+    "Use the tools like a person. Do not run automated traffic against the sites or, above all, against any advertising surface: clicking your own ads, exchanging traffic or driving bots at ad containers is invalid traffic — it defrauds the advertisers, it ends the ad account and it burns the domain reputation. The family does not do it and asks nobody else to.",
+  "legal.terms.data.head": "Your data.",
+  "legal.terms.data.text":
+    "Since the sites collect nothing, there is nothing to export or delete. What you do inside the hosted tools stays governed by the tool's own page.",
+  "legal.terms.ip.head": "Intellectual property.",
+  "legal.terms.ip.text":
+    'The family code is free software under its repository license; the name devthink and the family marks belong to their author. The site name "cobaia" is provisional and may change.',
+  "legal.terms.changes.head": "Changes.",
+  "legal.terms.changes.text":
+    "These terms change when the facts change, and the changes land on this page with a new date. Using the sites after a change means you accept it.",
+  // the notfound page anchor (the empty address)
+  "notfound.eyebrow": "404",
+  "notfound.title": "This address is not part of the family.",
+  "notfound.lede":
+    "the page you asked for does not exist here. the front door and the app directory are the honest way back in.",
+  "notfound.action.home": "back to the front door",
+  "notfound.action.apps": "browse the apps",
+  // the intro page anchor (the bare presentation — the family grammar's last
+  // seat: every app carries an intro; the cobaia one presents the real offer,
+  // never invented numbers, never fake testimonials)
+  "intro.aria.page": "cobaia — the intro",
+  "intro.aria.splash": "the cobaia intro splash",
+  "intro.splash.name": "cobaia",
+  "intro.splash.role": "the devthink family site",
+  "intro.splash.skip": "click, tap or any key to skip",
+  "intro.bar.aria": "the intro doors",
+  "intro.hero.eyebrow": "the presentation",
+  "intro.hero.title": "The family's front door, and its price list.",
+  "intro.hero.lede":
+    "cobaia is the monetization face of the devthink family, kept apart so the ten applications stay clean — no ads inside the apps. the directory, the plans, the support channels and the update blog live here, on one static site that collects nothing by default.",
+  "intro.hero.cta": "enter the site",
+  "intro.hero.cue": "see the plans",
+  "intro.hero.note":
+    "the name is provisional, the hosting is free and static, the storage is zero — the long version of that promise rides the legal page.",
+  "intro.plans.aria": "the plans as they really are",
+  "intro.plans.eyebrow": "the plans",
+  "intro.plans.title": "The plans, as they really are.",
+  "intro.plans.lede":
+    "the same three plans the pricing page carries — us$0, 5 and 19 a month, placeholder prices until billing lands. a plan activates the moment its checkout link is configured, and says so honestly until then.",
+  "intro.plans.choose": "choose {name}",
+  "intro.plans.notConfigured": "checkout not configured yet",
+  "intro.plans.door": "the full pricing page",
+  "intro.doors.aria": "the doors of the site",
+  "intro.doors.eyebrow": "the doors",
+  "intro.doors.title": "Where the family lives.",
+  "intro.doors.apps": "the app directory",
+  "intro.doors.appsText":
+    "ten apps live beside this site. the full directory, with the honest role each application declares for itself, is one door away.",
+  "intro.doors.appsCta": "browse the ten apps",
+  "intro.doors.legal": "privacy and terms",
+  "intro.doors.legalText":
+    "the family sites are static files: they collect nothing by default and they track nobody. the privacy policy and the terms of use are the long version of the same promise.",
+  "intro.doors.legalCta": "read the legal page",
+  "intro.footer.siteAria": "the site doors",
+  "intro.footer.familyAria": "the family row",
+  "intro.footer.family": "the family",
+  "intro.footer.memberTip": "open {slug} — the door beside this site",
+  // the ad slot widget (the reserved box of the content pages)
+  "ads.slot.reserved": "reserved · {format}",
+} as const;
+
+export type LabelKey = keyof typeof LABEL_MANIFEST & string;
+
+/** the store mechanism rides the vault factory (the storage law of the
+ * family: the vault owns the store, the app owns the manifest — the
+ * mechanism is imported, never duplicated). the surface answers its own no-storage law: the visitor browser never writes. */
+const store = createLabelStore({
+  manifest: LABEL_MANIFEST,
+  revision: LABEL_REVISION,
+});
+
+/** the typed accessor of the copy: the only door a widget or page anchor uses. */
+export function label(key: LabelKey): string {
+  return store.label(key);
+}
+
+/** the placeholder door: fills the {token} slots of one format key with the
+ * runtime values (the store keeps the sentence, the widget passes the data). */
+export function labelfill(key: LabelKey, values: Record<string, string>): string {
+  return store.labelfill(key, values);
+}
+
+/** the seed ingests the manifest into the labels store, idempotent, and the
+ * translated rows stay protected from the overwrite. in the browser the rows
+ * ride the local cache of the site db; on the server db.ts seeds the same
+ * manifest into the labels table through seedLabelRows. */
+export function seedLabels(): Promise<{ seeded: number; protected: number }> {
+  return store.seedLabels();
+}

package/manifest.webmanifest

@@ -0,0 +1,56 @@
+{
+  "name": "cobaia",
+  "short_name": "cobaia",
+  "description": "The front door of the DevThink family: pricing, support, the app directory and the update blog for ten deployable web applications.",
+  "id": "/",
+  "start_url": "/",
+  "scope": "/",
+  "display": "standalone",
+  "display_override": ["window-controls-overlay", "standalone", "minimal-ui"],
+  "orientation": "any",
+  "background_color": "#0a0a0b",
+  "theme_color": "#f59e0b",
+  "lang": "en",
+  "dir": "ltr",
+  "categories": ["developer", "productivity"],
+  "icons": [
+    {
+      "src": "./favicon.svg",
+      "sizes": "any",
+      "type": "image/svg+xml",
+      "purpose": "any"
+    },
+    {
+      "src": "./favicon.svg",
+      "sizes": "any",
+      "type": "image/svg+xml",
+      "purpose": "any maskable"
+    },
+    {
+      "src": "./icon.svg",
+      "sizes": "any",
+      "type": "image/svg+xml",
+      "purpose": "any"
+    },
+    {
+      "src": "./icon.svg",
+      "sizes": "any",
+      "type": "image/svg+xml",
+      "purpose": "any maskable"
+    }
+  ],
+  "shortcuts": [
+    {
+      "name": "Pricing",
+      "short_name": "Pricing",
+      "url": "/pricing"
+    },
+    {
+      "name": "App directory",
+      "short_name": "Apps",
+      "url": "/apps"
+    }
+  ],
+  "related_applications": [],
+  "prefer_related_applications": false
+}

package/mime.types

@@ -0,0 +1,12 @@
+# MIME types served by the site
+text/html   html htm
+text/css    css
+text/javascript js mjs
+application/json json
+application/manifest+json webmanifest
+image/svg+xml svg
+image/png png
+image/jpeg jpg jpeg
+image/x-icon ico
+font/woff2  woff2
+application/wasm wasm

package/netlify.toml

@@ -0,0 +1,2 @@
+[build]
+  publish = "."