@wenathlan/cobaia 2.0.155 → 2.0.159

package/pnpmboot.package-lock.json

@@ -0,0 +1,157 @@
+{
+  "name": "pnpmboot",
+  "version": "0.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "pnpmboot",
+      "version": "0.0.0",
+      "dependencies": {
+        "pnpm": "12.3.4"
+      }
+    },
+    "node_modules/@pnpm/exe.darwin-arm64": {
+      "version": "12.3.4",
+      "resolved": "https://registry.npmjs.org/@pnpm/exe.darwin-arm64/-/exe.darwin-arm64-12.3.4.tgz",
+      "integrity": "sha512-PAyUol8T1+/+ViOiXAt51ECA+QnfXCqz6foL4bW+LsoX0NcVd5XVEM2mRQu+LV4oc7uRz9zf9U0P+XFfuQeDAw==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@pnpm/exe.darwin-x64": {
+      "version": "12.3.4",
+      "resolved": "https://registry.npmjs.org/@pnpm/exe.darwin-x64/-/exe.darwin-x64-12.3.4.tgz",
+      "integrity": "sha512-fxP9JCk0Cdye+ePuj+GJJLMUMTqHGWRdb1dtv4How876uQ2ehxvenpgiYAir/ceO9PsYUZkFTtyZdx+rRu5QOA==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ]
+    },
+    "node_modules/@pnpm/exe.linux-arm64": {
+      "version": "12.3.4",
+      "resolved": "https://registry.npmjs.org/@pnpm/exe.linux-arm64/-/exe.linux-arm64-12.3.4.tgz",
+      "integrity": "sha512-t71AVA7LRqiKTyZ5xMYaZc2n5DfdpMbfokZuiIOXHBOM03ECnF0t4iYwaBDqJgVjlKYUOwaF/bRQajGNA4cJ4w==",
+      "cpu": [
+        "arm64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@pnpm/exe.linux-arm64-musl": {
+      "version": "12.3.4",
+      "resolved": "https://registry.npmjs.org/@pnpm/exe.linux-arm64-musl/-/exe.linux-arm64-musl-12.3.4.tgz",
+      "integrity": "sha512-FBOt0/7ye6O6q4AllVV5QMviB6qE6fqkeczV/+MDWQsmo+QJrlfsh6X7CpH/tClVpBZEyIbjpUoT8bNhCYBxEg==",
+      "cpu": [
+        "arm64"
+      ],
+      "libc": [
+        "musl"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@pnpm/exe.linux-x64": {
+      "version": "12.3.4",
+      "resolved": "https://registry.npmjs.org/@pnpm/exe.linux-x64/-/exe.linux-x64-12.3.4.tgz",
+      "integrity": "sha512-2ZqOlSPkfwX1h5cR+FPiWf8+F+2hZT/3TvhUK5sigHqwaQCIiq8R7CGxhndKs63JtcLi2a1Qpo+wX/EoyfjyJQ==",
+      "cpu": [
+        "x64"
+      ],
+      "libc": [
+        "glibc"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@pnpm/exe.linux-x64-musl": {
+      "version": "12.3.4",
+      "resolved": "https://registry.npmjs.org/@pnpm/exe.linux-x64-musl/-/exe.linux-x64-musl-12.3.4.tgz",
+      "integrity": "sha512-RPmk7Jb/aYaFvL2iyDN/AtMY+hUEsue732WmXpcuQ9tBpMnGyA5py7Z3+e+qmQaJ0zY/4ni9jJiyPBQHujmv6w==",
+      "cpu": [
+        "x64"
+      ],
+      "libc": [
+        "musl"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ]
+    },
+    "node_modules/@pnpm/exe.win32-arm64": {
+      "version": "12.3.4",
+      "resolved": "https://registry.npmjs.org/@pnpm/exe.win32-arm64/-/exe.win32-arm64-12.3.4.tgz",
+      "integrity": "sha512-ANyrHqyqco6SXBysUTRF74itDyyraea7IbFsKFdNXTjcFnfycTDx37EwuhdpPYFNSIh2JhUG4fByclsRfiHX7w==",
+      "cpu": [
+        "arm64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/@pnpm/exe.win32-x64": {
+      "version": "12.3.4",
+      "resolved": "https://registry.npmjs.org/@pnpm/exe.win32-x64/-/exe.win32-x64-12.3.4.tgz",
+      "integrity": "sha512-WH/KqBPY/hq2Tb7SgQltEZytimcjgKRaCRL/aM9CI0c67iKc5TVmHUhIiL3Ux9FB4bWn36i6XewUcScQI+zG8w==",
+      "cpu": [
+        "x64"
+      ],
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ]
+    },
+    "node_modules/pnpm": {
+      "version": "12.3.4",
+      "resolved": "https://registry.npmjs.org/pnpm/-/pnpm-12.3.4.tgz",
+      "integrity": "sha512-lhqkH7B32joEpEHZ+OFevAyW2o73ELLrZ7+e58sGEOq9SPH9hfUc/+c4RnhfoPh8VqOocqHYk/hEZ0G1zORUVw==",
+      "hasInstallScript": true,
+      "license": "MIT",
+      "bin": {
+        "pn": "pn",
+        "pnpm": "pnpm",
+        "pnpx": "pnpx",
+        "pnx": "pnx"
+      },
+      "engines": {
+        "node": ">=18.*"
+      },
+      "optionalDependencies": {
+        "@pnpm/exe.darwin-arm64": "12.3.4",
+        "@pnpm/exe.darwin-x64": "12.3.4",
+        "@pnpm/exe.linux-arm64": "12.3.4",
+        "@pnpm/exe.linux-arm64-musl": "12.3.4",
+        "@pnpm/exe.linux-x64": "12.3.4",
+        "@pnpm/exe.linux-x64-musl": "12.3.4",
+        "@pnpm/exe.win32-arm64": "12.3.4",
+        "@pnpm/exe.win32-x64": "12.3.4"
+      }
+    }
+  }
+}

package/pnpmboot.package.json

@@ -0,0 +1,6 @@
+{
+  "name": "pnpmboot",
+  "version": "0.0.0",
+  "private": true,
+  "dependencies": { "pnpm": "12.3.4" }
+}

package/pom.xml

@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/xsd/maven-4.0.0.xsd">
+  <modelVersion>4.0.0</modelVersion>
+  <groupId>io.github.wenathlan</groupId>
+  <artifactId>cobaia</artifactId>
+  <version>${revision}</version>
+  <packaging>jar</packaging>
+  <name>cobaia single distribution</name>
+  <description>The single cobaia maven distribution: the documentation set and the tests directory embedded as jar resources in the one io.github.wenathlan.cobaia artifact. cobaia is the monetization surface — the plans, the support rails and the honest advertisement slots.</description>
+  <url>https://github.com/wenathlan/devthink</url>
+  <licenses><license><name>GPL-3.0-only</name><url>https://www.gnu.org/licenses/gpl-3.0.html</url></license></licenses>
+  <scm><url>https://github.com/wenathlan/devthink</url><connection>scm:git:https://github.com/wenathlan/devthink.git</connection></scm>
+  <distributionManagement><repository><id>github</id><name>GitHub Packages</name><url>https://maven.pkg.github.com/wenathlan/devthink</url></repository></distributionManagement>
+  <properties>
+    <revision>2.0.159</revision>
+  </properties>
+  <build>
+    <resources>
+      <resource>
+        <directory>.</directory>
+        <includes>
+          <include>README.md</include>
+          <include>docs/**</include>
+          <include>tests/**</include>
+        </includes>
+      </resource>
+    </resources>
+  </build>
+</project>

package/privacypolicy.md

@@ -0,0 +1,9 @@
+# Cobaia privacy policy
+
+Copyright (C) 2026 devthink, nathlan, iakadion, nathu filho, allan neris, andraneris, and contributors.
+
+The Cobaia monetization surface does not intentionally collect telemetry or transmit data without an operator-requested integration. Plan, ad slot and support features can access data only when the operator configures and invokes them. Operators must review the configuration and the privacy policy of every connected provider.
+
+The repository itself is hosted by third-party services such as GitHub. Those services process requests, account data, logs and cookies under their own policies. A deployment that adds analytics, account data, logs or external storage must document that behavior and provide the controls required by applicable law.
+
+Privacy questions and reports should use the repository support channel. Security-sensitive reports must follow `SECURITY.md`.

package/pullrequesttemplate.md

@@ -0,0 +1,13 @@
+<!-- Cobaia pull request template -->
+
+# Description
+
+## Type of change
+
+## Verification
+
+- [ ] The change preserves GPL-3.0-only metadata and required notices.
+- [ ] Tests or a reason for not adding tests are included.
+- [ ] Security-sensitive behavior and workflow changes were reviewed.
+- [ ] No credentials, private data or generated build output was added.
+- [ ] Public documentation was updated when behavior changed.

package/{Sol → sol}/Sol.tsx

@@ -1,7 +1,7 @@
 /**
  * Sol theme anchor — layer 2 of the anchor architecture.
- * The file carrying the theme folder's own name (Sol/Sol.tsx, beside
- * Sol/sol.css) is the path manager of the pages: it imports one anchor per
+ * The file carrying the theme folder's own name (sol/Sol.tsx, beside
+ * sol/sol.css) is the path manager of the pages: it imports one anchor per
  * page folder (`folder/folder.tsx`, each beside the loose components its
  * folder keeps) and mounts every route of the theme. App.tsx consumes only
  * this file and the theme stylesheet; no page component is ever imported

package/{Sol → sol}/apps/apps.tsx

@@ -3,7 +3,7 @@
  * The file carrying the folder's own name is the path manager of the page:
  * it imports the loose components beside it (the roster data), mounts the
  * page and re-exports the public component surface. Only the theme anchor
- * (Sol/Sol.tsx) consumes this file.
+ * (sol/Sol.tsx) consumes this file.
  *
  * The app directory of the cobaia content site: the ten deploy units of the
  * family, each card carrying the honest one-line role and the deep link

package/{Sol → sol}/blog/blog.tsx

@@ -2,7 +2,7 @@
  * blog page anchor — layer 3 of the anchor architecture.
  * The file carrying the folder's own name is the path manager of the page:
  * it imports the loose components beside it, mounts the page and re-exports
- * the public component surface. Only the theme anchor (Sol/Sol.tsx) consumes
+ * the public component surface. Only the theme anchor (sol/Sol.tsx) consumes
  * this file.
  *
  * The update blog of the cobaia content site: the sorted index (the pure

package/{Sol → sol}/home/home.tsx

@@ -2,7 +2,7 @@
  * home page anchor — layer 3 of the anchor architecture.
  * The file carrying the folder's own name is the path manager of the page:
  * it imports the loose components beside it, mounts the page and re-exports
- * the public component surface. Only the theme anchor (Sol/Sol.tsx) consumes
+ * the public component surface. Only the theme anchor (sol/Sol.tsx) consumes
  * this file.
  *
  * The landing of the cobaia content site: what the devthink family is, said
@@ -13,7 +13,7 @@
  * support strip, and the one reserved ad slot at the end of the content.
  * No entry gate and no first-run flow: cobaia is a content site — the home
  * renders directly, every page is public.
- * Styled entirely by Sol/sol.css.
+ * Styled entirely by sol/sol.css.
  */
 import type { CSSProperties } from "react";
 import { Link } from "wouter";

package/{Sol → sol}/intro/intro.tsx

@@ -2,7 +2,7 @@
  * intro page anchor — layer 3 of the anchor architecture. The file carrying
  * the folder's own name is the path manager of the page: it imports the
  * loose components beside it, mounts the page and re-exports the public
- * component surface. Only the theme anchor (Sol/Sol.tsx) consumes this file.
+ * component surface. Only the theme anchor (sol/Sol.tsx) consumes this file.
  *
  * The PRESENTATION page of cobaia — the family grammar's last seat (every
  * app of the family carries one): the page mounts BARE at /intro, no window

package/{Sol → sol}/legal/legal.tsx

@@ -2,7 +2,7 @@
  * legal page anchor — layer 3 of the anchor architecture.
  * The file carrying the folder's own name is the path manager of the page:
  * it imports the loose components beside it, mounts the page and re-exports
- * the public component surface. Only the theme anchor (Sol/Sol.tsx) consumes
+ * the public component surface. Only the theme anchor (sol/Sol.tsx) consumes
  * this file. The legal page of the cobaia content site: the privacy policy
  * and the terms, written seriously and directly. The page discloses the
  * advertising plan (labeled, reserved slots, third-party cookies only once

package/{Sol → sol}/notfound/notfound.tsx

@@ -2,7 +2,7 @@
  * notfound page anchor — layer 3 of the anchor architecture.
  * The file carrying the folder's own name is the path manager of the page:
  * it imports the loose components beside it, mounts the page and re-exports
- * the public component surface. Only the theme anchor (Sol/Sol.tsx) consumes
+ * the public component surface. Only the theme anchor (sol/Sol.tsx) consumes
  * this file. The cobaia copy answers for the family site: the address is not
  * part of the family — the way out is the home and the directory.
  */

package/{Sol → sol}/pricing/pricing.tsx

@@ -2,7 +2,7 @@
  * pricing page anchor — layer 3 of the anchor architecture.
  * The file carrying the folder's own name is the path manager of the page:
  * it imports the loose components beside it, mounts the page and re-exports
- * the public component surface. Only the theme anchor (Sol/Sol.tsx) consumes
+ * the public component surface. Only the theme anchor (sol/Sol.tsx) consumes
  * this file.
  *
  * The pricing table of the cobaia content site: three honest plans (free,

package/{Sol → sol}/shell/Shell.tsx

@@ -18,7 +18,7 @@
  * sticky section bar, the page surface and the worked footer answer in
  * both seats so the design is IDENTICAL at the direct url and inside the
  * os window (the window-era law) — the host window owns the chrome
- * there. Styled entirely by Sol/sol.css (the fullscreen law
+ * there. Styled entirely by sol/sol.css (the fullscreen law
  * block carries the two contracts).
  */
 import type { CSSProperties, ReactNode } from "react";

package/{Sol → sol}/sol.css

@@ -1942,3 +1942,10 @@ code {
     -webkit-backdrop-filter: none;
   }
 }
+
+/* the zoom lock (the owner law, wave designheal): the viewport pins the
+   scale and the touch lane answers pan-x pan-y only — no pinch may
+   rescale the interface on any host. */
+html {
+  touch-action: pan-x pan-y;
+}

package/{Sol → sol}/support/support.tsx

@@ -2,7 +2,7 @@
  * support page anchor — layer 3 of the anchor architecture.
  * The file carrying the folder's own name is the path manager of the page:
  * it imports the loose components beside it, mounts the page and re-exports
- * the public component surface. Only the theme anchor (Sol/Sol.tsx) consumes
+ * the public component surface. Only the theme anchor (sol/Sol.tsx) consumes
  * this file.
  *
  * The support page of the cobaia content site: the two configured channels

package/{Sol → sol}/wingets/index.ts

@@ -1,6 +1,6 @@
 /**
  * index.ts — the universal winget surface of cobaia: every winget of the
- * Sol/wingets folder answers from this one module, so the pages import
+ * sol/wingets folder answers from this one module, so the pages import
  * their components from a single place and the dotted winget file name
  * lives exactly once (here) instead of repeating across every page —
  * the components stay complete independent files beside this surface.

package/support.md

@@ -0,0 +1,7 @@
+# Cobaia support
+
+Copyright (C) 2026 devthink, nathlan, iakadion, nathu filho, allan neris, andraneris, and contributors.
+
+Cobaia is open-source software under GPL-3.0-only. Questions about installation, configuration, usage and reproducible failures should include the version, target, relevant logs and a minimal reproduction without credentials or private data.
+
+Security reports must use the private process in `SECURITY.md`. Requests involving a third-party provider should also include the provider and the operator-controlled configuration. Community support is provided on a best-effort basis and does not create a warranty, service-level agreement or maintenance obligation.

package/termsandconditions.md

@@ -0,0 +1,9 @@
+# Cobaia terms and conditions
+
+Copyright (C) 2026 devthink, nathlan, iakadion, nathu filho, allan neris, andraneris, and contributors.
+
+These terms describe access to the Cobaia repository, documentation, releases and project services. The source code license is the GNU General Public License version 3.0 only; the repository `LICENSE` file (the saddle seat carries the family copy) controls permissions to copy, modify, run and redistribute covered works.
+
+Users must comply with applicable law, third-party provider terms, the acceptable use policy, and the security policy. Users must not use a configured integration to access data or systems without authorization, expose credentials, distribute malware, or evade safety controls.
+
+The repository and project services are provided without warranty to the maximum extent permitted by law. Separate provider terms apply to infrastructure, accounts, data and hosted services. These terms do not add restrictions to GPL-licensed source code.

package/termsofuse.md

@@ -0,0 +1,9 @@
+# Cobaia terms of use
+
+Copyright (C) 2026 devthink, nathlan, iakadion, nathu filho, allan neris, andraneris, and contributors.
+
+Cobaia may be used, modified and redistributed under GPL-3.0-only. Use of a connected payment or sponsorship provider remains subject to the operator's authorization and that provider's terms.
+
+Users must protect secrets, respect privacy, avoid unauthorized access, and validate outputs before relying on them. Feedback may be used by the project under the applicable copyright permissions; submitting feedback does not transfer unrelated rights in the contributor's code.
+
+The project is provided as-is without a warranty or service-level commitment. The GPL and applicable law control where this document conflicts with a covered source license.

package/tests/sandboxmodality.test.ts

@@ -59,12 +59,12 @@ describe("the sandbox lane seat (the deploy decides)", () => {
   });
 
   it("pins the named modality for the platform join to validate", () => {
-    const pinned = lanesandbox("runner-node");
-    assert.deepEqual(pinned, { ok: true, seat: "runner-node", sandboxed: true, pinned: true });
+    const pinned = lanesandbox("runnernode");
+    assert.deepEqual(pinned, { ok: true, seat: "runnernode", sandboxed: true, pinned: true });
     // the module never judges engine vocabulary: the platform's join
     // validates the pinned id at dispatch, the mirror only names it
-    const unusual = lanesandbox("microvm-firecracker");
-    assert.deepEqual(unusual, { ok: true, seat: "microvm-firecracker", sandboxed: true, pinned: true });
+    const unusual = lanesandbox("microvmfirecracker");
+    assert.deepEqual(unusual, { ok: true, seat: "microvmfirecracker", sandboxed: true, pinned: true });
   });
 
   it("reads the seat off the environment lookup the deploy pins", () => {

package/thirdpartynotices.md

@@ -0,0 +1,7 @@
+# Cobaia third-party notices
+
+Copyright (C) 2026 devthink, nathlan, iakadion, nathu filho, allan neris, andraneris, and contributors.
+
+Cobaia includes or builds with third-party components. Their individual licenses remain in force and are not replaced by GPL-3.0-only. Package manifests, lockfiles and generated license inventories are the source of truth for the exact dependency set of each release.
+
+When a component requires a notice, attribution or source offer, the release process must include it. A future dependency should be recorded with its name, version, license identifier, copyright notice and source URL.

package/trademarkpolicy.md

@@ -0,0 +1,7 @@
+# Cobaia trademark policy
+
+Copyright (C) 2026 devthink, nathlan, iakadion, nathu filho, allan neris, andraneris, and contributors.
+
+The name “Cobaia”, together with associated logos and marks, identifies the project and its official releases. GPL-3.0-only grants rights to the source code; it does not grant permission to use project marks in a way that suggests endorsement, affiliation or official distribution.
+
+Forks and modified distributions should use distinct names and branding where necessary to avoid confusion. Descriptive references to compatibility, origin or modification are permitted when they are accurate and do not imply sponsorship.

package/tsconfig.json

@@ -17,6 +17,6 @@
     "allowImportingTsExtensions": true,
     "types": ["vite/client", "node"]
   },
-  "include": ["*.ts", "*.tsx", "Sol/**/*.ts", "Sol/**/*.tsx"],
+  "include": ["*.ts", "*.tsx", "sol/**/*.ts", "sol/**/*.tsx"],
   "exclude": ["node_modules", "dist", "**/*.test.ts"]
 }

package/vite.config.ts

@@ -1,4 +1,4 @@
-/** Style: cobaia sol — the vite config lives at the app root while the theme stays in Sol/: static build emitting the hashed bundles directly into the app root folder (publish = "."), with a repository-scoped base path so the theme answers any deploy root (pages subpath, vercel, netlify, workers). The Tailwind 4 vite plugin compiles the theme stylesheet's `@import "tailwindcss"` head (the @theme source of truth + the light/hcf custom variants). */
+/** Style: cobaia sol — the vite config lives at the app root while the theme stays in sol/: static build emitting the hashed bundles directly into the app root folder (publish = "."), with a repository-scoped base path so the theme answers any deploy root (pages subpath, vercel, netlify, workers). The Tailwind 4 vite plugin compiles the theme stylesheet's `@import "tailwindcss"` head (the @theme source of truth + the light/hcf custom variants). */
 
 import path from "node:path";
 import tailwindcss from "@tailwindcss/vite";
@@ -23,7 +23,7 @@ export default defineConfig({
        * the mechanism is never duplicated inside cobaia. the entry retires
        * when the published envelope carries the built label store. */
       "@wenathlan/vault/labelstore": path.resolve(import.meta.dirname, "../vault/labelstore.ts"),
-      "@": path.resolve(import.meta.dirname, "Sol"),
+      "@": path.resolve(import.meta.dirname, "sol"),
     },
   },
   root: import.meta.dirname,
@@ -32,7 +32,7 @@ export default defineConfig({
     emptyOutDir: false,
     assetsDir: "",
   },
-  /** the theme (Sol/) and the root logics (checkoutlinks, posts, adsconfig) share one app root, so the dev server allows the app root. */
+  /** the theme (sol/) and the root logics (checkoutlinks, posts, adsconfig) share one app root, so the dev server allows the app root. */
   server: {
     fs: {
       allow: [import.meta.dirname, path.resolve(import.meta.dirname, "../vault")],

package/vitest.config.ts

@@ -14,12 +14,12 @@ export default defineConfig({
 
       /** the storage lane bridge of the ownership law: the app's sqlite
        * mechanism rides the vault factory through the published library
-       * specifier ("@wenathlan/vault/storagelane"), and this bridge resolves
+       * specifier ("@wenathlan/vault/storage"), and this bridge resolves
        * the specifier to the monorepo source the sibling engine carries —
        * the bootstrap and the helpers are never duplicated inside cobaia.
        * the entry retires when the published envelope carries the built
        * storage lane. */
-      "@wenathlan/vault/storagelane": path.resolve(import.meta.dirname, "../vault/storagelane.ts"),
+      "@wenathlan/vault/storage": path.resolve(import.meta.dirname, "../vault/storage.ts"),
 
       /** the workload law bridge of the family: the app battery pins the
        * lane mirror against the engine catalog through the published