@wenathlan/cobaia 2.0.163 → 2.0.165

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Cobaia release notes
 
+## 2.0.162 — the depsunion rung (the eleven manifests answer one dependency union)
+
+### Changed
+
+| Area | Change |
+| --- | --- |
+| The dependency union | Cobaia carries the synchronized family manifest: the eleven official apps and the root envelope answer the identical union — 30 dependencies and 94 devDependencies — and no seat loses a row; the internal family pins ride the ~2.0.155 tilde floor everywhere (the devthink drift of ~2.0.159/~2.0.160 returns to the family number). |
+| The engine catalog | The engines block answers 25 rows: Babel (^7.28.0) joins Bun, Cargo, CorePack, Deno and PNPM beside the V 0.5.2 catalog entry (catalog only, the PR4 law), Node stays the maestro orchestrating the engine ladder with priority for its natives, and Python / Go / Rust / Cargo / PNPM / V stay allowed. |
+| The overrides union | The overrides block syncs to the family's 18 rows — the saddle xcode uuid pin and the @grpc/grpc-js 1.14.5 floor reach every manifest beside the root envelope. |
+| The lockfile law | The per-app lockfiles stay as tracked (bun.lock, pnpm-lock.yaml, package-lock.json where present); the sync creates no new lockfile and pnpm-lock.yaml keeps the single-lockfile example seat. |
+| The storage layer | better-sqlite3 (^13.0.3) stays in the checklist as the storage layer for the database and cache seats. |
+
 ## 2.0.158 — the docstd rung (the document family answers one template)
 
 ### Changed

package/Dockerfile

@@ -1,4 +1,4 @@
-# cobaia 2.0.134 — THE SITE CONTAINER FILE
+# cobaia 2.0.165 — THE SITE CONTAINER FILE
 #
 # The family container doctrine in the sol shape: one versioned static
 # container per site. The sol theme builds inside the container — stage one
@@ -10,7 +10,7 @@
 
 FROM node:26-alpine@sha256:40cd011b55415bc894e45b02fdd5a5dfde056921b7d23a64c74f80497af48797 AS solbuild
 
-ARG COBAIA_VERSION=2.0.134
+ARG COBAIA_VERSION=2.0.165
 
 # The family context fix (the staged shape the site containers read): the
 # application rides the context nested under app/ with the sibling sources
@@ -30,7 +30,7 @@ RUN pnpm build
 
 FROM nginxinc/nginx-unprivileged:1.29-alpine@sha256:0c79d56aee561a1d81c63f00eee5fb5fe29279560cdc55e91425133104c7fbe6
 
-ARG COBAIA_VERSION=2.0.134
+ARG COBAIA_VERSION=2.0.165
 
 LABEL org.opencontainers.image.title="cobaia" \
       org.opencontainers.image.description="cobaia — the monetization surface: the ads, the plans and the conversion, kept apart from the main sites." \

package/bun.lock

@@ -138,6 +138,7 @@
     },
   },
   "overrides": {
+    "@grpc/grpc-js": "1.14.5",
     "body-parser": "^2.4.0",
     "deepmerge-ts": "^8.0.0",
     "esbuild": "^0.28.2",
@@ -304,7 +305,7 @@
 
     "@griffel/style-types": ["@griffel/style-types@1.4.3", "", { "dependencies": { "csstype": "^3.2.3" } }, "sha512-sFxMK19oFUPQSmyCKT1Pvj5Nu/ODvhMczqhGjVAoksDTXUj1za40WA0CXqV3o+xxKWPec+K/rbS78jJLmomsQA=="],
 
-    "@grpc/grpc-js": ["@grpc/grpc-js@1.14.6", "", { "dependencies": { "@grpc/proto-loader": "^0.8.0", "@js-sdsl/ordered-map": "^4.4.2" } }, "sha512-SgC/B3/VZ8lTyOZ4Cwk6f1skWhmkNAaVfiX90qd5u1rRXGKk1//8FTUEN9GvOUq7rfWIqAYkA3CoyumYVpOS6g=="],
+    "@grpc/grpc-js": ["@grpc/grpc-js@1.14.5", "", { "dependencies": { "@grpc/proto-loader": "^0.8.0", "@js-sdsl/ordered-map": "^4.4.2" } }, "sha512-7VZM+SVdEcUUqSQeNI3zM8Qs/BhQKZndPo2h5VkYkAM8Iz0wJIa8mKV5ekQGqG8UUsnkQ0NMxIxwkIHYvj0qOw=="],
 
     "@grpc/proto-loader": ["@grpc/proto-loader@0.7.15", "", { "dependencies": { "lodash.camelcase": "^4.3.0", "long": "^5.0.0", "protobufjs": "^7.2.5", "yargs": "^17.7.2" }, "bin": { "proto-loader-gen-types": "build/bin/proto-loader-gen-types.js" } }, "sha512-tMXdRCfYVixjuFK+Hk0Q1s38gV9zDiDJfWL3h1rv4Qc39oILCu1TRTDt7+fGUI8K4G1Fj125Hx/ru3azECWTyQ=="],
 

package/cli.ts

@@ -8,7 +8,10 @@
  * @module cobaia/cli
  * @family wave/clibin
  * @law same design as web / desktop, difference only responsiveness / DPI
- * @seat 2026 · rung 2.0.157 · hierarchical JSDoc, tokens/flags, no hardcoded
+ * @dpi native detection, never XDPI — the 1x / 1.5x / 2x / 3x scale ladder
+ *   folds the chrome to the terminal cell grid (windows terminal, conpty
+ *   and every linux pty), the <APP>_DPI environment override wins first.
+ * @seat 2026 · rung 2.0.163 · hierarchical JSDoc, tokens/flags, no hardcoded
  *   data — the version is read from package.json at runtime and the engine
  *   one-liner is quoted from the app docs.
  * @runtime node strips the types; the shebang hands the file to the runtime
@@ -43,16 +46,56 @@ const APP = "cobaia" as const;
 const ENGINE =
   "owns no engine file — the content site is the monetization surface: static plans, support rails and honest ad slots, no backend no tracking (docs/features.md)" as const;
 
-/** the titlebar bar: the app name on the left rail, the window controls on the right — the windows 11 chrome inside the terminal. */
+/** the titlebar bar: the app name on the left rail, the window controls on the right — the windows 11 chrome inside the terminal, the rail folded through the dpi frame. */
 function titlebar(): string {
-  return `${ACCENT}┌ ${APP} ─ cli${RESET}  ${INK}${BAR.repeat(24)} ─ ❐ ✕${RESET}`;
+  return `${ACCENT}┌ ${APP} ─ cli${RESET}  ${INK}${BAR.repeat(FRAME.rail)} ─ ❐ ✕${RESET}`;
 }
 
-/** the top rule: the 28px divider of the web surface folded to one terminal line. */
+/** the top rule: the 28px divider of the web surface folded to one terminal line, scaled by the dpi seat. */
 function toprule(): string {
-  return `${FOCUS}${BAR.repeat(3)} ${APP} ${BAR.repeat(3)}${RESET}`;
+  const rail = Math.max(3, Math.round(3 * FRAME.scale));
+  return `${FOCUS}${BAR.repeat(rail)} ${APP} ${BAR.repeat(rail)}${RESET}`;
 }
 
+/* ════════════════════════════════════════════════════════════════════ */
+/* Section 1b: the dpi conversion — native detection, the 1x / 1.5x / 2x / 3x scale ladder and the terminal clamp (the pr13 law: DPI never XDPI — the same design as the web / desktop surface, only the responsiveness folds to the cell grid of the terminal, inside windows terminal and every linux pty). */
+/* ════════════════════════════════════════════════════════════════════ */
+
+/** the scale ladder the native detection resolves (the automatic scaling law). */
+const SCALESTEPS = [1, 1.5, 2, 3] as const;
+
+/** the dpi frame the chrome renders inside: the resolved scale seat, the terminal columns and the rail length the titlebar draws. */
+interface dpiframe {
+  /** the scale seat of the ladder (1, 1.5, 2 or 3). */
+  scale: number;
+  /** the columns the terminal answers (windows terminal, conpty, xterm, tmux — every pty reports them). */
+  columns: number;
+  /** the titlebar rail length in cells (the pixel rail folded to the grid and clamped so the line never wraps). */
+  rail: number;
+}
+
+/** resolves the dpi frame natively, zero dependencies: the columns come from stdout (every windows and linux terminal answers them), the scale seat from the column ladder — the explicit <APP>_DPI environment override wins first (the native scaling knob) — and the rail clamps inside the frame so the chrome never wraps a narrow console. */
+function detectdpiframe(): dpiframe {
+  const columns = Number.isFinite(stdout.columns) && Number(stdout.columns) > 0 ? Number(stdout.columns) : 80;
+  const override = Number(process.env[`${APP.toUpperCase()}_DPI`] ?? "");
+  const scale =
+    Number.isFinite(override) && override > 0 && SCALESTEPS.includes(override as (typeof SCALESTEPS)[number])
+      ? override
+      : columns >= 200
+        ? 3
+        : columns >= 160
+          ? 2
+          : columns >= 120
+            ? 1.5
+            : 1;
+  /* the rail folds the 24-cell rail of the 1x seat through the scale seat and clamps inside the frame with room for the name, the controls and the reset runs (the escapes are zero-width). */
+  const rail = Math.max(4, Math.min(Math.round(24 * scale), columns - APP.length - 16));
+  return { scale, columns, rail };
+}
+
+/** the dpi frame the console booted with (resolved once, before any chrome prints — a piped stdin answers the deterministic 80-column seat). */
+const FRAME = detectdpiframe();
+
 /* ════════════════════════════════════════════════════════════════════ */
 /* Section 2: the runtime reads — no hardcoded data; the version comes from package.json at runtime. */
 /* ════════════════════════════════════════════════════════════════════ */
@@ -77,6 +120,7 @@ function help(): string[] {
     `${INK}commands${RESET}`,
     `  help      ${INK}this list${RESET}`,
     `  version   ${INK}the package version, read from package.json at runtime${RESET}`,
+    `  dpi       ${INK}the resolved dpi seat of this terminal (scale, columns, rail)${RESET}`,
     `  engine    ${INK}the engine ownership one-liner of the app${RESET}`,
     `  exit      ${INK}close the console${RESET}`,
   ];
@@ -101,6 +145,7 @@ export async function main(): Promise<void> {
     if (command === "exit") rl.close();
     else if (command === "help") for (const row of help()) console.log(row);
     else if (command === "version") console.log(`${ACCENT}${APP}${RESET} ${version}`);
+    else if (command === "dpi") console.log(`${ACCENT}${APP}${RESET} ${INK}dpi seat ${FRAME.scale}x on ${FRAME.columns} columns — rail ${FRAME.rail} cells, ladder 1x / 1.5x / 2x / 3x${RESET}`);
     else if (command === "engine") console.log(`${INK}${ENGINE}${RESET}`);
     else if (command.length > 0) console.log(`${HOVER}✕${RESET} ${INK}unknown command: ${command} — type help${RESET}`);
     if (command === "exit") break;

package/cobaia.csproj

@@ -4,7 +4,7 @@
     <AssemblyName>cobaia</AssemblyName>
     <RootNamespace>cobaia</RootNamespace>
     <PackageId>cobaia</PackageId>
-    <Version>2.0.163</Version>
+    <Version>2.0.165</Version>
     <Authors>wenathlan</Authors>
     <Description>Distribution package containing the cobaia documentation set and the tests directory. cobaia is the monetization surface — the plans, the support rails and the honest advertisement slots.</Description>
     <PackageLicenseExpression>GPL-3.0-only</PackageLicenseExpression>

package/cobaia.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |spec|
   spec.name = "cobaia"
-  spec.version = ENV.fetch("COBAIA_VERSION", "2.0.163")
+  spec.version = ENV.fetch("COBAIA_VERSION", "2.0.165")
   spec.authors = ["wenathlan"]
   spec.email = ["support@users.noreply.github.com"]
   spec.summary = "The cobaia documentation and tests envelope (the monetization surface — the plans, the support rails and the honest advertisement slots)."

package/cobaia.java

@@ -10,7 +10,7 @@ package io.github.wenathlan.cobaia;
  */
 final class Cobaia {
   /** The version of the cobaia envelope (the six-distribution completeness wave). */
-  public static final String VERSION = "2.0.163";
+  public static final String VERSION = "2.0.165";
   private Cobaia() {
   }
 }

package/doc.go

@@ -0,0 +1,23 @@
+// Package cobaia carries the go module identity of the cobaia envelope —
+// the monetization surface of the wenathlan family: the plans, the
+// support rails and the honest advertisement slots while the family
+// apps stay clean.
+//
+// The goget wave seats the go module rung beside the maven, nuget,
+// rubygems and gradle rungs: the module resolves at
+// github.com/wenathlan/devthink/cobaia/v2 through the
+// proxy.golang.org chain, and the version answers the per-application
+// tag (cobaia/vX.Y.Z on the release commit) the publish lane syncs —
+// the package carries no version constant the metadata lockstep would
+// have to stamp, the same way the gradle marker reads the envelope
+// package.json at build time.
+package cobaia
+
+// ModulePath is the go module path the go get consumer resolves.
+const ModulePath = "github.com/wenathlan/devthink/cobaia/v2"
+
+// Family is the distribution family every envelope of the monorepo answers.
+const Family = "wenathlan"
+
+// Description is the envelope summary the registry metadata carries.
+const Description = "The cobaia documentation and tests envelope (the monetization surface)."

package/docs/distributionlanes.md

@@ -0,0 +1,19 @@
+# Distribution lanes
+
+The eleven distribution lanes of the PR14 law and the honest status each lane answers for cobaia at the 2.0.163 family rung. A lane never ships metadata its real surface cannot back: a lane without a real carrier stays a documented stub until the surface lands, and no version ever bumps to fake a lane.
+
+| Lane | Carrier | Status | Note |
+| --- | --- | --- | --- |
+| npmjs | package.json — @wenathlan/cobaia | live | the family-npmjs lane publishes the envelope every release rung |
+| GitHub Packages npm | package.json — @wenathlan/cobaia | live | the family-githubnpm lane publishes the same envelope idempotently |
+| Maven | pom.xml — io.github.wenathlan:cobaia | live | the family-maven lane deploys the jar |
+| NuGet | cobaia.csproj | live | the family-nuget lane packs the envelope |
+| Gradle | build.gradle.kts — com.wenathlan:cobaia | live | the family-gradle lane publishes the module |
+| Ruby Gems | cobaia.gemspec | live | the family-rubygems lane pushes the gem |
+| Docker Container | Dockerfile | live | the family-ghcr lane pushes ghcr.io/wenathlan/cobaia and the family-container lane attaches the release archive |
+| Go Get | go.mod | stub | no Go source surface ships yet — the lane lands when a real Go adapter exists, never as an empty module |
+| Cargo Crates | Cargo.toml | stub | no Rust source surface ships yet — the lane lands with a real crate, never as an empty manifest |
+| PyPi | pyproject.toml | stub | no Python package surface ships yet — the lane lands with a real wheel, never as an empty project table |
+| Homebrew | Formula | stub | no tap repository ships yet — the formula lands pointing at the real release binaries with real checksums, never at a placeholder |
+
+The engines block of package.json keeps Go, Rust and Python as declared toolchain floors — a catalog row is not a distribution lane. The dual npm law answers through the npmjs and GitHub Packages rows; the release binaries (the desktop bundles, the mobile artifacts, the container archive) ride the family-desktop, family-mobile and family-container lanes every release rung.

package/go.mod

@@ -0,0 +1,13 @@
+// The cobaia go module marker (the goget wave): the
+// documentation envelope rides the go get rung the way it rides the
+// maven, nuget, rubygems and gradle rungs — the module path answers the
+// github.com/wenathlan/devthink monorepo with the per-application
+// subdirectory and the major version suffix the go semver law demands
+// at the v2 line, and the version answers the per-application tag
+// (cobaia/vX.Y.Z on the release commit) the publish lane syncs — the go
+// module registry carries no version literal the rung ladder would have
+// to stamp, the same way the gradle marker reads the envelope
+// package.json at build time.
+module github.com/wenathlan/devthink/cobaia/v2
+
+go 1.27

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenathlan/cobaia",
-  "version": "2.0.163",
+  "version": "2.0.165",
   "description": "cobaia is the monetization surface of the wenathlan family: the content site that carries the plans, the support rails and the honest advertisement slots while the family apps stay clean; the name is provisional until the owner picks the official one",
   "repository": {
     "type": "git",
@@ -13,6 +13,7 @@
     "cobaia": "./cli.ts"
   },
   "engines": {
+    "babel": "^7.28.0",
     "bare": "^1.18.0",
     "bun": "^1.4.4",
     "cargo": ">=1.85.0",
@@ -35,6 +36,7 @@
     "typescript": "^5.8.0",
     "v": "^0.5.2",
     "vscode": "^1.118.0",
+    "yaml": "^2.9.1",
     "yarn": "^4.17.1"
   },
   "peerDependencies": {
@@ -60,12 +62,12 @@
     "@libsql/client": "^0.18.0",
     "@prisma/adapter-libsql": "^7.10.1",
     "@prisma/client": "^7.10.1",
+    "@wenathlan/argan": "~2.0.155",
     "@wenathlan/cadria": "~2.0.155",
     "@wenathlan/debonair": "~2.0.155",
     "@wenathlan/devthink": "~2.0.154",
     "@wenathlan/getry": "~2.0.155",
     "@wenathlan/saddle": "~2.0.155",
-    "@wenathlan/argan": "~2.0.155",
     "@wenathlan/vault": "~2.0.155",
     "better-sqlite3": "^13.0.3",
     "drizzle-orm": "^0.45.4",
@@ -178,22 +180,26 @@
     "zod": "^4.6.7"
   },
   "overrides": {
-    "body-parser": "^2.4.0",
-    "fast-uri": "^3.1.9",
+    "uuid": "^11.1.1",
+    "deepmerge-ts": "^8.0.0",
+    "esbuild": "^0.28.2",
     "follow-redirects": "^1.16.2",
     "minimatch": "^11.0.3",
     "glob": "^14.0.3",
+    "mysql2": "^3.24.6",
+    "postcss-selector-parser": "^7.1.6",
+    "source-map-js": "1.2.2",
+    "proxy-addr": "2.0.8",
+    "body-parser": "^2.4.0",
+    "fast-uri": "^3.1.9",
     "zod": "^4.6.7",
-    "esbuild": "^0.28.2",
     "undici": "^7.30.1",
-    "uuid": "^11.1.1",
-    "postcss-selector-parser": "^7.1.6",
-    "deepmerge-ts": "^8.0.0",
     "katex": "^0.18.2",
-    "mysql2": "^3.24.6",
-    "proxy-addr": "2.0.8",
     "shell-quote": "^1.11.0",
-    "source-map-js": "1.2.2"
+    "xcode": {
+      "uuid": "11.1.1"
+    },
+    "@grpc/grpc-js": "1.14.5"
   },
   "packageManager": "pnpm@12.3.4"
 }

package/pom.xml

@@ -12,7 +12,7 @@
   <scm><url>https://github.com/wenathlan/devthink</url><connection>scm:git:https://github.com/wenathlan/devthink.git</connection></scm>
   <distributionManagement><repository><id>github</id><name>GitHub Packages</name><url>https://maven.pkg.github.com/wenathlan/devthink</url></repository></distributionManagement>
   <properties>
-    <revision>2.0.163</revision>
+    <revision>2.0.165</revision>
   </properties>
   <build>
     <resources>

package/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Cobaia",
-  "version": "2.0.162",
+  "version": "2.0.165",
   "identifier": "com.wenathlan.cobaia",
   "build": {
     "beforeDevCommand": "pnpm dev",