@wenathlan/cobaia 0.0.0-stage → 2.0.158

package/sandboxmodality.ts

@@ -0,0 +1,138 @@
+// # sandboxmodality — the workload lane declaration of the cobaia
+// application (root layer, wave WL1): the lanes this app owns in the
+// family workload catalog, mirrored from the engine of record
+// (saddle/workloadlaw.ts — the FAMILYLANES table) as the string contract
+// the deploy and the platform speak. The mirror law (the same discipline
+// the devthink modalities vendor rides): the rows are mirrored, not
+// imported, because the published saddle envelope the container build
+// installs does not carry the workload law yet and the family law bars a
+// relative path across apps — the day the envelope publishes, the ids
+// answer the same strings (the lockstep is the string contract, not the
+// import). The app battery pins the mirror against the engine source
+// through the library bridge so the vendor can never drift in silence.
+//
+// The seat law (the deploy's opt-in, the family's shared shape): the
+// deploy pins COBAIA_SANDBOX_LANE — "local" (the default, the deploy's own process),
+// "join" (the platform resolves every lane through the engine's join
+// resolver — the nuclear modality law: the workload never names a
+// modality, the join answers), or a modality id the deploy pins for the
+// app's lanes (named here, validated by the platform's join at dispatch —
+// this module never judges engine vocabulary, so the mirror cannot drift
+// when the registry grows). The module never spawns anything and resolves
+// no join: it names the lanes' truth; the platform resolves the sandbox.
+// Zero consumer data, zero imports.
+
+/** one mirrored workload lane row — the same five keys the engine law pins
+ * (app, lane, role, demand, today). */
+export type AppWorkloadLane = {
+  /** the official app slug every row carries. */
+  readonly app: string;
+  /** the lane id inside the app (kebab-case, the engine catalog id). */
+  readonly lane: string;
+  /** what the lane does, in one sentence (the engine row's sentence). */
+  readonly role: string;
+  /** the demand the lane puts on the sandbox (gpu, network, isolation,
+   * boot budget — never a modality name: the nuclear law). */
+  readonly demand: {
+    readonly gpu: boolean;
+    readonly network: boolean;
+    readonly isolation: "process" | "namespace" | "vm" | "hardware";
+    readonly bootbudget?: number;
+  };
+  /** where the heavy pass runs today — the honest truth the census reads. */
+  readonly today: "engine-lane" | "app-lane";
+};
+
+/** the app slug every mirrored row carries. */
+export const APPSLUG = "cobaia";
+
+/** the workload lanes this app owns — the mirror of the engine catalog
+ * rows (saddle/workloadlaw.ts, the FAMILYLANES table; the battery pins
+ * the two surfaces equal). */
+export const WORKLOADLANES: readonly AppWorkloadLane[] = Object.freeze([
+  {
+    app: "cobaia",
+    lane: "plan-checkout",
+    role: "the plan checkout surface: mrr plan rows, link validation and the billing webhook walk when it lands, secrets server-side",
+    demand: { gpu: false, network: true, isolation: "process", bootbudget: 25 },
+    today: "app-lane",
+  },
+  {
+    app: "cobaia",
+    lane: "ads-slot",
+    role: "the honest ad slot lane: the reserved slots and the rotation decision the deploy answers before the render",
+    demand: { gpu: false, network: true, isolation: "process", bootbudget: 25 },
+    today: "app-lane",
+  },
+  {
+    app: "cobaia",
+    lane: "label-seed",
+    role: "the label manifest seed of the monetization face: the store walk the sqlite vault carries",
+    demand: { gpu: false, network: false, isolation: "process", bootbudget: 25 },
+    today: "app-lane",
+  },
+]);
+
+/** the environment name the deploy pins the sandbox lane seat through
+ * (the opt-in seat — documented in the env example, zero hardcode). */
+export const SANDBOXLANEENV = "COBAIA_SANDBOX_LANE";
+
+/** the typed answer of the seat: the declaration the deploy reads —
+ * local (the lanes run in the deploy's own process), join (the platform
+ * resolves every lane through the engine's join resolver), or the pinned
+ * modality id the deploy named (validated by the platform's join at
+ * dispatch, never judged here). every answer is honest: an absent or
+ * blank choice answers the declared default, never a silent switch. */
+export type LaneSeatResult =
+  | { ok: true; seat: "local"; sandboxed: false }
+  | { ok: true; seat: "join"; sandboxed: true; pinned: false }
+  | { ok: true; seat: string; sandboxed: true; pinned: true };
+
+/**
+ * Resolves the sandbox lane seat of this application — the deploy's
+ * opt-in: an absent or blank choice answers the declared default ("local"
+ * — the lanes run in the deploy's own process); "join" opts every lane
+ * onto the platform's join resolver (the nuclear modality law); any other
+ * non-empty choice is the modality id the deploy pins for the lanes
+ * (named by the deploy, validated by the platform's join at dispatch —
+ * this module never judges engine vocabulary, so the mirror cannot drift
+ * when the registry grows).
+ *
+ * @param choice the deploy's choice (the env value or the config row).
+ * @returns the seat declaration.
+ */
+export function lanesandbox(choice: string | undefined): LaneSeatResult {
+  const name = choice?.trim() ?? "";
+  if (name.length === 0 || name === "local") {
+    return { ok: true, seat: "local", sandboxed: false };
+  }
+  if (name === "join") {
+    return { ok: true, seat: "join", sandboxed: true, pinned: false };
+  }
+  return { ok: true, seat: name, sandboxed: true, pinned: true };
+}
+
+/**
+ * Reads the lane seat off one environment lookup — the deploy pins
+ * COBAIA_SANDBOX_LANE (opt-in per deploy); the lookup is injected so the server lane
+ * hands process.env and any other lane hands its own seat. this module
+ * never spawns anything: it names the truth the platform resolves.
+ *
+ * @param lookup the environment lookup function (the env carrier).
+ * @returns the seat declaration.
+ */
+export function lanesandboxfromenv(lookup: (key: string) => string | undefined): LaneSeatResult {
+  return lanesandbox(lookup(SANDBOXLANEENV));
+}
+
+/**
+ * Answers one mirrored lane row by lane id — the lookup the app surfaces
+ * and the batteries read.
+ *
+ * @param lane the lane id inside the app.
+ * @returns the mirrored row, or undefined when the app carries no such
+ * lane.
+ */
+export function laneof(lane: string): AppWorkloadLane | undefined {
+  return WORKLOADLANES.find((row) => row.lane === lane);
+}

package/schema.prisma

@@ -0,0 +1,31 @@
+// cobaia prisma schema — the self-hosted database of the family site. cobaia
+// is the monetization surface of the family: the content site that carries
+// the plans, the support rails and the honest advertisement slots while the
+// family apps stay clean.
+//
+// family sync contract (devthink master): a table of the same kind carries
+// the same columns and the same pointers in every application that holds
+// the kind — identity pointers are text, counts are 32-bit ints, time is
+// datetime or iso text, and byte-scale pointers (sizes, lengths, offsets)
+// are 64-bit BigInt, the pointer that holds terabytes. The sqlite
+// autoincrement rowid is 64-bit by the engine contract. This file is the
+// documentation of record: the runtime runs better-sqlite3 beside it and
+// mirrors the same columns in its boot DDL (db.ts).
+generator client {
+  provider = "prisma-client-js"
+}
+
+datasource db {
+  provider = "sqlite"
+  url      = env("DATABASE_URL")
+}
+
+/// the first-run state of one visitor (the platform contract the gateway
+/// serves over /api/v1/onboarding)
+model OnboardingState {
+  id             Int      @id @default(autoincrement())
+  visitor        String   @unique
+  introseen      Boolean  @default(false)
+  onboardingseen Boolean  @default(false)
+  updatedAt      DateTime @updatedAt
+}

package/sitemap.xml

@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- cobaia — the family site. No domain is hardcoded. The loc entries are
+     relative and resolve against whichever origin serves this sitemap; the
+     canonical domain binds on the deploy platform. -->
+<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
+  <url>
+    <loc>/</loc>
+    <lastmod>2026-10-10</lastmod>
+    <changefreq>weekly</changefreq>
+    <priority>1.0</priority>
+  </url>
+  <url>
+    <loc>/apps</loc>
+    <lastmod>2026-10-10</lastmod>
+    <changefreq>weekly</changefreq>
+    <priority>0.9</priority>
+  </url>
+  <url>
+    <loc>/pricing</loc>
+    <lastmod>2026-10-10</lastmod>
+    <changefreq>monthly</changefreq>
+    <priority>0.9</priority>
+  </url>
+  <url>
+    <loc>/blog</loc>
+    <lastmod>2026-10-06</lastmod>
+    <changefreq>weekly</changefreq>
+    <priority>0.8</priority>
+  </url>
+  <url>
+    <loc>/support</loc>
+    <lastmod>2026-10-10</lastmod>
+    <changefreq>monthly</changefreq>
+    <priority>0.6</priority>
+  </url>
+  <url>
+    <loc>/legal</loc>
+    <lastmod>2026-10-10</lastmod>
+    <changefreq>monthly</changefreq>
+    <priority>0.5</priority>
+  </url>
+</urlset>

package/sol/Sol.tsx

@@ -0,0 +1,91 @@
+/**
+ * Sol theme anchor — layer 2 of the anchor architecture.
+ * The file carrying the theme folder's own name (sol/Sol.tsx, beside
+ * sol/sol.css) is the path manager of the pages: it imports one anchor per
+ * page folder (`folder/folder.tsx`, each beside the loose components its
+ * folder keeps) and mounts every route of the theme. App.tsx consumes only
+ * this file and the theme stylesheet; no page component is ever imported
+ * outside this layer. When a theme folder changes its name (Moon, Aqua),
+ * this file follows the new name and App.tsx keeps importing the anchor by
+ * the folder path.
+ *
+ * The cobaia is a CONTENT site (the monetization surface of the family): no
+ * onboarding, no entry gate — every content route is a page of the site, and
+ * the home renders directly on the bare root. The intro (/intro) is the one
+ * public presentation page of the family grammar (every app carries one) and
+ * mounts BARE — outside the window chrome, like the sibling sites mount
+ * theirs; the shell's close-caption door relaunches the site at it. Every
+ * content route renders as the page body of the ONE shared shell (the header
+ * and the footer); every page is freely reachable, and the catch-all lands
+ * on the 404 anchor.
+ */
+import type { ReactNode } from "react";
+import { Route, Switch } from "wouter";
+import AppsAnchor from "./apps/apps";
+import BlogAnchor from "./blog/blog";
+import HomeAnchor from "./home/home";
+import IntroAnchor from "./intro/intro";
+import LegalAnchor from "./legal/legal";
+import NotFoundAnchor from "./notfound/notfound";
+import PricingAnchor from "./pricing/pricing";
+import { Shell } from "./shell/Shell";
+import SupportAnchor from "./support/support";
+
+/** the content pages: the site chrome around one page anchor */
+function Content({ children }: { children: ReactNode }) {
+  return <Shell>{children}</Shell>;
+}
+
+/** the unrouted addresses: the 404 answer of the cobaia, inside the site
+ * chrome (the theme catch-all) */
+function Unrouted() {
+  return (
+    <Shell>
+      <NotFoundAnchor />
+    </Shell>
+  );
+}
+
+/** Mounts the theme surface through the page anchors: the bare intro first
+ * (the public presentation, outside the chrome, like the siblings mount
+ * theirs), then the content pages of the site — the home on the bare root,
+ * the five public sections, and the catch-all last. No entry flow: the site
+ * is content end to end. */
+export default function Sol() {
+  return (
+    <Switch>
+      <Route path="/intro" component={IntroAnchor} />
+      <Route path="/">
+        <Content>
+          <HomeAnchor />
+        </Content>
+      </Route>
+      <Route path="/apps">
+        <Content>
+          <AppsAnchor />
+        </Content>
+      </Route>
+      <Route path="/pricing">
+        <Content>
+          <PricingAnchor />
+        </Content>
+      </Route>
+      <Route path="/support">
+        <Content>
+          <SupportAnchor />
+        </Content>
+      </Route>
+      <Route path="/blog">
+        <Content>
+          <BlogAnchor />
+        </Content>
+      </Route>
+      <Route path="/legal">
+        <Content>
+          <LegalAnchor />
+        </Content>
+      </Route>
+      <Route component={Unrouted} />
+    </Switch>
+  );
+}

package/sol/apps/apps.tsx

@@ -0,0 +1,66 @@
+/**
+ * apps page anchor — layer 3 of the anchor architecture.
+ * The file carrying the folder's own name is the path manager of the page:
+ * it imports the loose components beside it (the roster data), mounts the
+ * page and re-exports the public component surface. Only the theme anchor
+ * (sol/Sol.tsx) consumes this file.
+ *
+ * The app directory of the cobaia content site: the ten deploy units of the
+ * family, each card carrying the honest one-line role and the deep link
+ * through the familyurl contract (../slug/ — the family redirects both
+ * ways). The accents come from the spec §12 table mirrored in the roster;
+ * the roles are the ones each app declares in its own devthink.toml. The
+ * in-feed ad slot closes the feed at the end of the content.
+ */
+import type { CSSProperties } from "react";
+import { useContent } from "../../content.ts";
+import { familyurl } from "../../familyurl";
+import { label, labelfill } from "../../labels";
+import { roster } from "../../roster.ts";
+import { AdSlot } from "../wingets";
+
+export function Apps() {
+  useContent();
+  return (
+    <div className="cb-page">
+      <section className="cb-hero" aria-label={label("apps.aria.hero")}>
+        <p className="cb-eyebrow cb-in" style={{ "--cb-d": 0 } as CSSProperties}>
+          {label("apps.eyebrow")}
+        </p>
+        <h1 className="cb-title cb-in" style={{ "--cb-d": 1 } as CSSProperties}>
+          {label("apps.title")}
+        </h1>
+        <p className="cb-lede cb-in" style={{ "--cb-d": 2 } as CSSProperties}>
+          {label("apps.lede")}
+        </p>
+      </section>
+
+      <section className="cb-section" aria-label={label("apps.section.rosterAria")}>
+        <div className="cb-appgrid">
+          {roster().map((member, index) => (
+            <a
+              key={member.slug}
+              className="cb-appcard cb-in"
+              href={familyurl(member.slug)}
+              target="_blank"
+              rel="noreferrer"
+              style={{ "--cb-dot": member.accent, "--cb-d": Math.min(index + 1, 6) } as CSSProperties}
+            >
+              <span className="cb-apphead">
+                <span className="cb-appdot" aria-hidden="true" />
+                <span className="cb-appname">{member.slug}</span>
+              </span>
+              <span className="cb-approle">{member.role}</span>
+              <span className="cb-appopen">{labelfill("apps.card.open", { slug: member.slug })}</span>
+            </a>
+          ))}
+        </div>
+      </section>
+
+      {/* the one reserved ad slot of the page: after the feed it belongs to */}
+      <AdSlot page="apps" />
+    </div>
+  );
+}
+
+export default Apps;

package/sol/blog/blog.tsx

@@ -0,0 +1,86 @@
+/**
+ * blog page anchor — layer 3 of the anchor architecture.
+ * The file carrying the folder's own name is the path manager of the page:
+ * it imports the loose components beside it, mounts the page and re-exports
+ * the public component surface. Only the theme anchor (sol/Sol.tsx) consumes
+ * this file.
+ *
+ * The update blog of the cobaia content site: the sorted index (the pure
+ * posts module at the app root owns the posts and the ordering) and the full
+ * bodies rendered below as real articles — the in-article surface of the
+ * site. Every post title wears the trylle display type (the clamp, the
+ * -0.02em track) so the articles open like the site hero does. The tree
+ * rule keeps this one page (no post subfolders), so every post anchors in
+ * place and the index links jump to the article.
+ */
+import type { CSSProperties } from "react";
+import { useContent } from "../../content.ts";
+import { label, labelfill } from "../../labels";
+import { type blogpost, postindex, postwords } from "../../posts";
+import { AdSlot } from "../wingets";
+
+/** the meta line of one post: the date and the honest word count. */
+function PostMeta({ post }: { post: blogpost }) {
+  return (
+    <p className="cb-postdate">
+      {labelfill("blog.post.meta", {
+        date: post.date,
+        words: String(postwords(post)),
+        tags: post.tags.join(" / "),
+      })}
+    </p>
+  );
+}
+
+export function Blog() {
+  useContent();
+  const posts = postindex();
+  return (
+    <div className="cb-page">
+      <section className="cb-hero" aria-label={label("blog.aria.hero")}>
+        <p className="cb-eyebrow cb-in" style={{ "--cb-d": 0 } as CSSProperties}>
+          {label("blog.eyebrow")}
+        </p>
+        <h1 className="cb-title cb-in" style={{ "--cb-d": 1 } as CSSProperties}>
+          {label("blog.title")}
+        </h1>
+        <p className="cb-lede cb-in" style={{ "--cb-d": 2 } as CSSProperties}>
+          {label("blog.lede")}
+        </p>
+      </section>
+
+      <section className="cb-section" aria-label={label("blog.section.indexAria")}>
+        <ul className="cb-postlist">
+          {posts.map((post, index) => (
+            <li key={post.slug} className="cb-postrow cb-in" style={{ "--cb-d": index + 1 } as CSSProperties}>
+              <PostMeta post={post} />
+              <a className="cb-postlink" href={`#${post.slug}`}>
+                {post.title}
+              </a>
+              <p className="cb-postexcerpt">{post.excerpt}</p>
+            </li>
+          ))}
+        </ul>
+      </section>
+
+      <section className="cb-section" aria-label={label("blog.section.fullAria")}>
+        {posts.map((post) => (
+          <article key={post.slug} id={post.slug} className="cb-article" aria-label={post.title}>
+            <h2 className="cb-posttitle">{post.title}</h2>
+            <PostMeta post={post} />
+            <div className="cb-articlebody">
+              {post.body.map((paragraph) => (
+                <p key={paragraph}>{paragraph}</p>
+              ))}
+            </div>
+          </article>
+        ))}
+      </section>
+
+      {/* the one reserved ad slot of the page, after the articles */}
+      <AdSlot page="blog" />
+    </div>
+  );
+}
+
+export default Blog;

package/sol/home/home.tsx

@@ -0,0 +1,140 @@
+/**
+ * home page anchor — layer 3 of the anchor architecture.
+ * The file carrying the folder's own name is the path manager of the page:
+ * it imports the loose components beside it, mounts the page and re-exports
+ * the public component surface. Only the theme anchor (sol/Sol.tsx) consumes
+ * this file.
+ *
+ * The landing of the cobaia content site: what the devthink family is, said
+ * directly — ten deployable applications on one engine, shipped as static
+ * sites, tracked nowhere. Left-aligned hero (no centered hero + pill), the
+ * three how-it-works steps on hairline seams (01 engine · 02 static · 03
+ * honest), a four-card preview of the directory leading to /apps, the
+ * support strip, and the one reserved ad slot at the end of the content.
+ * No entry gate and no first-run flow: cobaia is a content site — the home
+ * renders directly, every page is public.
+ * Styled entirely by sol/sol.css.
+ */
+import type { CSSProperties } from "react";
+import { Link } from "wouter";
+import { useContent } from "../../content.ts";
+import { familyurl } from "../../familyurl";
+import { type LabelKey, label, labelfill } from "../../labels";
+import { roster } from "../../roster.ts";
+import { AdSlot, BrandMark } from "../wingets";
+
+/** the featured deploy units of the landing preview (the full directory
+ * lives on /apps): the OS, the engine, the store and one studio — read
+ * from the one roster table so the preview can never drift from /apps. */
+const FEATUREDSLUGS: readonly string[] = ["devthink", "saddle", "vault", "cadria"];
+/** the featured rows answer the accessor at render time (the content
+ * lane law): the seed answers the first paint and the useContent mount
+ * refreshes the derivation when the live rows land. */
+const featured = () => roster().filter((member) => FEATUREDSLUGS.includes(member.slug));
+
+/** the three steps of the landing: what the family is made of — the text
+ * rides the label accessor (the store keeps the sentence). */
+const STEPS: readonly { n: LabelKey; title: LabelKey; text: LabelKey }[] = [
+  { n: "home.steps.engine.n", title: "home.steps.engine.title", text: "home.steps.engine.text" },
+  { n: "home.steps.static.n", title: "home.steps.static.title", text: "home.steps.static.text" },
+  { n: "home.steps.honest.n", title: "home.steps.honest.title", text: "home.steps.honest.text" },
+];
+
+export function Home() {
+  useContent();
+  return (
+    <div className="cb-page">
+      {/* the hero: the family said plainly */}
+      <section className="cb-hero" aria-label={label("home.aria.hero")}>
+        <div className="cb-in" style={{ "--cb-d": 0 } as CSSProperties}>
+          <BrandMark size={52} />
+        </div>
+        <p className="cb-eyebrow cb-in" style={{ "--cb-d": 1 } as CSSProperties}>
+          {label("home.eyebrow")}
+        </p>
+        <h1 className="cb-title cb-in" style={{ "--cb-d": 2 } as CSSProperties}>
+          {label("home.title")}
+        </h1>
+        <p className="cb-lede cb-in" style={{ "--cb-d": 3 } as CSSProperties}>
+          {label("home.lede")}
+        </p>
+        <div className="cb-btnrow cb-in" style={{ "--cb-d": 4 } as CSSProperties}>
+          <Link className="cb-btn" href="/pricing">
+            {label("home.action.pricing")}
+          </Link>
+          <Link className="cb-btn cb-btn--ghost" href="/apps">
+            {label("home.action.apps")}
+          </Link>
+        </div>
+      </section>
+
+      {/* the three steps, on hairline seams */}
+      <section className="cb-section" aria-label={label("home.section.stepsAria")}>
+        <div className="cb-secthead cb-in" style={{ "--cb-d": 0 } as CSSProperties}>
+          <h2 className="cb-secttitle">{label("home.section.stepsTitle")}</h2>
+          <p className="cb-sectlede">{label("home.section.stepsLede")}</p>
+        </div>
+        <div className="cb-grid cb-grid--3">
+          {STEPS.map((step, index) => (
+            <div key={step.n} className="cb-card cb-in" style={{ "--cb-d": index + 1 } as CSSProperties}>
+              <p className="cb-cardmeta">{label(step.n)}</p>
+              <h3 className="cb-cardtitle">{label(step.title)}</h3>
+              <p className="cb-cardtext">{label(step.text)}</p>
+            </div>
+          ))}
+        </div>
+      </section>
+
+      {/* the directory preview: four of the ten, the rest on /apps */}
+      <section className="cb-section" aria-label={label("home.section.previewAria")}>
+        <div className="cb-secthead cb-in" style={{ "--cb-d": 0 } as CSSProperties}>
+          <h2 className="cb-secttitle">{label("home.section.previewTitle")}</h2>
+          <p className="cb-sectlede">
+            {label("home.section.previewLede")}{" "}
+            <Link className="cb-link" href="/apps">
+              {label("home.section.previewLink")}
+            </Link>
+            {label("home.section.previewTail")}
+          </p>
+        </div>
+        <div className="cb-appgrid">
+          {featured().map((app, index) => (
+            <a
+              key={app.slug}
+              className="cb-appcard cb-in"
+              href={familyurl(app.slug)}
+              target="_blank"
+              rel="noreferrer"
+              style={{ "--cb-dot": app.accent, "--cb-d": index + 1 } as CSSProperties}
+            >
+              <span className="cb-apphead">
+                <span className="cb-appdot" aria-hidden="true" />
+                <span className="cb-appname">{app.slug}</span>
+              </span>
+              <span className="cb-approle">{app.role}</span>
+              <span className="cb-appopen">{labelfill("home.appcard.open", { slug: app.slug })}</span>
+            </a>
+          ))}
+        </div>
+      </section>
+
+      {/* the support strip: the honest ask */}
+      <section className="cb-section" aria-label={label("home.section.supportAria")}>
+        <div className="cb-secthead cb-in" style={{ "--cb-d": 0 } as CSSProperties}>
+          <h2 className="cb-secttitle">{label("home.section.supportTitle")}</h2>
+          <p className="cb-sectlede">{label("home.section.supportLede")}</p>
+        </div>
+        <div className="cb-btnrow cb-in" style={{ "--cb-d": 1 } as CSSProperties}>
+          <Link className="cb-btn cb-btn--ghost" href="/support">
+            {label("home.action.support")}
+          </Link>
+        </div>
+      </section>
+
+      {/* the one reserved ad slot of the page, at the end of the content */}
+      <AdSlot page="home" />
+    </div>
+  );
+}
+
+export default Home;