@wenathlan/cobaia 2.0.165 → 2.0.167

package/cobaia.csproj

@@ -4,7 +4,7 @@
     <AssemblyName>cobaia</AssemblyName>
     <RootNamespace>cobaia</RootNamespace>
     <PackageId>cobaia</PackageId>
-    <Version>2.0.165</Version>
+    <Version>2.0.167</Version>
     <Authors>wenathlan</Authors>
     <Description>Distribution package containing the cobaia documentation set and the tests directory. cobaia is the monetization surface — the plans, the support rails and the honest advertisement slots.</Description>
     <PackageLicenseExpression>GPL-3.0-only</PackageLicenseExpression>
@@ -17,6 +17,6 @@
   <ItemGroup>
     <None Include="README.md" Pack="true" PackagePath="/" />
     <None Include="docs/**/*" Pack="true" PackagePath="contentFiles/any/any/docs/" />
-    <None Include="tests/**/*" Pack="true" PackagePath="contentFiles/any/any/tests/" />
+    <None Include="test/**/*" Pack="true" PackagePath="contentFiles/any/any/test/" />
   </ItemGroup>
 </Project>

package/cobaia.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |spec|
   spec.name = "cobaia"
-  spec.version = ENV.fetch("COBAIA_VERSION", "2.0.165")
+  spec.version = ENV.fetch("COBAIA_VERSION", "2.0.167")
   spec.authors = ["wenathlan"]
   spec.email = ["support@users.noreply.github.com"]
   spec.summary = "The cobaia documentation and tests envelope (the monetization surface — the plans, the support rails and the honest advertisement slots)."
@@ -8,7 +8,7 @@ Gem::Specification.new do |spec|
   spec.homepage = "https://github.com/wenathlan/devthink"
   spec.license = "GPL-3.0-only"
   spec.required_ruby_version = ">= 3.1"
-  spec.files = Dir["README.md", "docs/**/*", "tests/**/*"]
+  spec.files = Dir["README.md", "docs/**/*", "test/**/*"]
   spec.metadata["source_code_uri"] = "https://github.com/wenathlan/devthink"
   spec.metadata["homepage_uri"] = spec.homepage
 end

package/cobaia.java

@@ -1,4 +1,4 @@
-package io.github.wenathlan.cobaia;
+package com.wenathlan.cobaia;
 
 /**
  * The cobaia version envelope carrier.
@@ -10,7 +10,7 @@ package io.github.wenathlan.cobaia;
  */
 final class Cobaia {
   /** The version of the cobaia envelope (the six-distribution completeness wave). */
-  public static final String VERSION = "2.0.165";
+  public static final String VERSION = "2.0.167";
   private Cobaia() {
   }
 }

package/db.ts

@@ -5,14 +5,15 @@
  * concatenation. The schema mirrors schema.prisma (the documentation of
  * record) and the boot DDL is the idempotent seed-on-first-run: the tables
  * exist after the first open, always. The platform gateway serves the same
- * tables over HTTPS (GET/POST /api/v1/onboarding); no server route lives
- * here.
+ * tables over HTTPS (GET/POST /api/v1/onboarding, GET /api/v1/ui/content);
+ * no server route lives here.
  */
 import { openStorageLane } from "@wenathlan/vault/storage";
+import { CONTENTKINDS, type contentrow, seedAdsLabel, seedAdsEmpty, seedAdsSlots, seedPlans, seedPosts, seedRoster, seedSupportLinks } from "./content";
 import { LABEL_MANIFEST, LABEL_REVISION } from "./labels";
 
 /** the correlated tables the runtime keeps (the family sync contract names). */
-export const tables = ["onboarding_states", "labels"] as const;
+export const tables = ["onboarding_states", "labels", "content_rows"] as const;
 
 /** the one storage lane of the site store (WAL, foreign keys, patient locks — the app's own file, the shared mechanism of the vault). */
 const lane = openStorageLane({ defaultFile: "./cobaia.db" });
@@ -41,6 +42,12 @@ CREATE TABLE IF NOT EXISTS labels (
   updatedAt  TEXT NOT NULL DEFAULT (datetime('now')),
   translated INTEGER NOT NULL DEFAULT 0
 );
+CREATE TABLE IF NOT EXISTS content_rows (
+  kind     TEXT NOT NULL,
+  ordinal  INTEGER NOT NULL,
+  payload  TEXT NOT NULL,
+  PRIMARY KEY (kind, ordinal)
+);
 `;
 
 /** Creates the tables when they do not exist (idempotent, mirrors the prisma schema). */
@@ -217,3 +224,80 @@ try {
 } catch {
   /* the manifest answers; the store catches up on the next boot */
 }
+
+/* --------------------------------------------------------------------- */
+/* content rows — the site content the pages render                       */
+/* --------------------------------------------------------------------- */
+
+/** the manifest seed of one content kind: the rows in ordinal order. */
+function seedrowsOf(kind: (typeof CONTENTKINDS)[number]): readonly unknown[] {
+  switch (kind) {
+    case "posts":
+      return seedPosts;
+    case "roster":
+      return seedRoster;
+    case "plans":
+      return seedPlans;
+    case "supportlinks":
+      return [seedSupportLinks];
+    case "ads.slots":
+      return [seedAdsSlots];
+    case "ads.label":
+      return [seedAdsLabel];
+    case "ads.empty":
+      return [seedAdsEmpty];
+  }
+}
+
+/** Encodes the manifest rows of every kind as content rows (kind, ordinal,
+ * json payload) — the encoding the api answers and the client loader parses. */
+function seedContentRows(): contentrow[] {
+  const rows: contentrow[] = [];
+  for (const kind of CONTENTKINDS) {
+    seedrowsOf(kind).forEach((value, ordinal) => {
+      rows.push({ kind, ordinal, payload: JSON.stringify(value) });
+    });
+  }
+  return rows;
+}
+
+/**
+ * Ingests the content manifest into the content_rows table — idempotent:
+ * every manifest row upserts over its (kind, ordinal) seat, so the db stays
+ * the single living config of the site content the pages render (the
+ * content law: the literals live in the manifest, the rows live here).
+ *
+ * @returns the number of rows seated.
+ */
+export function seedContentTable(): number {
+  ensureSchema();
+  for (const row of seedContentRows()) {
+    execute(
+      `INSERT INTO content_rows (kind, ordinal, payload) VALUES (?, ?, ?)
+       ON CONFLICT(kind, ordinal) DO UPDATE SET payload = excluded.payload`,
+      [row.kind, row.ordinal, row.payload],
+    );
+  }
+  return seedContentRows().length;
+}
+
+/**
+ * Reads every content row of the store, ordered by kind then ordinal — the
+ * rows the platform gateway answers over GET /api/v1/ui/content.
+ *
+ * @returns the content rows of the site store.
+ */
+export function readContentRows(): contentrow[] {
+  return queryAll<Pick<contentrow, "kind" | "ordinal" | "payload">>(
+    "SELECT kind, ordinal, payload FROM content_rows ORDER BY kind ASC, ordinal ASC",
+  ).map((row) => ({ kind: row.kind as contentrow["kind"], ordinal: row.ordinal, payload: row.payload }));
+}
+
+/* the content law rides the db boot beside the labels: the manifest rows
+ * land in the content_rows table from the first open, always (idempotent,
+ * best effort — the manifest keeps answering when the store is sealed). */
+try {
+  seedContentTable();
+} catch {
+  /* the manifest answers; the store catches up on the next boot */
+}

package/docker-compose.yml

@@ -0,0 +1,58 @@
+# cobaia docker-compose — the two-service deploy of the monetization face: the
+# static theme served by the cobaia-face nginx door beside the /api/* proxy lane
+# that carries every platform call to the cobaia engine. until this file the
+# app rode the registry image alone: no compose seated the pair, and every
+# /api call of the face answered the away rehearsal. this file wires the
+# pair the vault compose law standardizes:
+#
+#   cobaia-engine  the cobaia site container the publish lane builds from the staged
+#           family context (the app nested under app/ with the vault sibling
+#           the copy law carries): the built theme behind the unprivileged
+#           nginx, EXPOSE 8080, the wget listen probe the image carries
+#   cobaia-face  the nginx surface: the family conf (nginx.conf) mounted over
+#           the default conf — the resolver law, the security header law,
+#           the gzip and cache law, the /api/* proxy lane to the engine,
+#           the spa rewrite as try_files, host 8083 published on 8080.
+#
+# the engine image is the one the registry lane publishes (ghcr.io/wenathlan/cobaia:<version>
+# — the publish matrix); the publish matrix builds the same image from the staged family context (the app nested under app/ with the vault sibling the copy law carries):
+#
+#   rm -rf familybuildctx && mkdir -p familybuildctx/app
+#   cp -a cobaia/. familybuildctx/app/
+#   cp -a vault/. familybuildctx/vault/ && rm -rf familybuildctx/vault/node_modules
+#   docker build -f cobaia/Dockerfile familybuildctx
+#
+# the /api lane carries the platform calls same-origin: the face proxies
+# them to the cobaia container, and the data lanes the browser contract
+# demands ride the configured gateway base the build stamps (the https law
+# the modules carry).
+
+services:
+  cobaia-engine:
+    image: "ghcr.io/wenathlan/cobaia:${COBAIA_VERSION:-2.0.166}"
+    # the engine never publishes a port by default: the face proxies it on
+    # the private compose network (the vault precedent). uncomment to serve
+    # the engine lane directly behind your own door:
+    # ports:
+    #   - "3213:8080"
+    # the healthcheck rides the image (wget -qO- http://127.0.0.1:8080/ —
+    # the listen probe the site container carries): the face gates on it below.
+    init: true
+    restart: unless-stopped
+
+  cobaia-face:
+    image: "ghcr.io/wenathlan/cobaia:${COBAIA_VERSION:-2.0.166}"
+    volumes:
+      # the family conf over the default site conf: the resolver law, the
+      # security headers, the gzip and cache law, the /api proxy lane.
+      - ./nginx.conf:/etc/nginx/conf.d/default.conf:ro
+    depends_on:
+      # the face starts only when the engine health lane answered — the
+      # proxy upstream is live before the first /api/* call arrives.
+      cobaia-engine:
+        condition: service_healthy
+    ports:
+      # the public door: host 8083 → the unprivileged nginx on 8080.
+      # remap freely ("8084:8080") when another service owns the host.
+      - "8083:8080"
+    restart: unless-stopped

package/docker.config

@@ -0,0 +1,74 @@
+{
+  "meta": {
+    "name": "docker.config",
+    "title": "cobaia - the container configuration of the monetization site (the compose pair, the nginx face, the site container)",
+    "version": "2.0.167",
+    "date": "2026-11-06",
+    "language": "en",
+    "sources": [
+      "app:Dockerfile [the cobaia site container — solbuild vite stage + the nginx-unprivileged face, EXPOSE 8080, the wget listen healthcheck]",
+      "app:docker-compose.yml [the pair: cobaia-engine + cobaia-face, host 8083:8080, the engine direct lane 3213:8080 unpublished by default]",
+      "app:nginx.conf [the vault pattern: resolver 127.0.0.11 valid=10s ipv6=off, location ^~ /api/, the _headers security law, the faun block, the root-emit seal]",
+      "app:vite.config.ts [the root-emit outDir law — the hashed bundles land at the application root]",
+      "app:package.json [the version stamp the compose args and this manifest carry]",
+      "vault:nginx.conf [the reference pattern the family standardizes — the resolver law, the proxy lane, the header law]",
+      "saddle:docker.config [the meta format this manifest follows — name, title, version, date, language, sources, mergeReport]",
+      "app:content.ts [the platform content lane the /api proxy carries — the https base law]"
+    ],
+    "mergeReport": {
+      "rootFiles": [
+        "Dockerfile",
+        "docker-compose.yml",
+        "nginx.conf",
+        "docker.config"
+      ],
+      "composeServices": [
+        "cobaia-engine",
+        "cobaia-face"
+      ],
+      "portMap": {
+        "face": "8083:8080",
+        "engineDirect": "3213:8080 (unpublished by default — the face proxies the private compose network)"
+      },
+      "healthLane": "the image healthcheck (wget -qO- http://127.0.0.1:8080/) — the listen probe",
+      "conflictResolution": "the vault nginx.conf pattern owns the conf law and the saddle docker.config meta format owns this manifest — one owner per law, the family consumes (the engineowners doctrine)",
+      "pinPatch": "the family base nginxinc/nginx-unprivileged:1.29-alpine@sha256:0c79d56aee561a1d81c63f00eee5fb5fe29279560cdc55e91425133104c7fbe6 rides the pattern faces; the static faces ride the registry site image the publish lane stamps"
+    }
+  },
+  "engine": {
+    "service": "cobaia-engine",
+    "surface": "the cobaia site container the publish lane builds (the staged family context the Dockerfile reads); the image healthcheck probes the listen port (wget http://127.0.0.1:8080/)",
+    "port": "8080",
+    "healthcheck": "wget -qO- http://127.0.0.1:8080/ (rides the image)",
+    "stateHome": "stateless — the site container carries no store",
+    "entry": "the site container (nginx serving the built theme)"
+  },
+  "face": {
+    "service": "cobaia-face",
+    "image": "ghcr.io/wenathlan/cobaia:2.0.167",
+    "surface": "the nginx face: the family conf (nginx.conf) mounted over the default site conf of the same cobaia image — resolver 127.0.0.11, the _headers security law, gzip, the hashed-asset cache, the ^~ /api proxy lane, the faun and root-emit seals, the try_files spa rewrite",
+    "listen": 8080,
+    "seals": [
+      "the faun db block (403)",
+      "the root-emit source seal (403)",
+      "the dotfile seal (403)",
+      "the tree seal (node_modules, tests, docs, sol — 403)"
+    ],
+    "spaRewrite": "try_files $uri $uri/ /index.html"
+  },
+  "apiLane": {
+    "route": "/api/*",
+    "upstream": "http://cobaia-engine:8080",
+    "resolver": "127.0.0.11 valid=10s ipv6=off (the docker embedded dns — request-time resolution, the vault law)",
+    "body": "client_max_body_size 0 — the engine quota gate is the only ceiling",
+    "timeouts": "read 300s / send 300s",
+    "carries": "the monetization console rides the platform content lanes (GET /api/v1/ui/content) through the configured https base the build stamps; the /api lane carries the same-origin calls to the cobaia container"
+  },
+  "ports": {
+    "faceHost": 8083,
+    "faceInternal": 8080,
+    "engineInternal": 8080,
+    "engineDirectCommented": 3213,
+    "collisionLaw": "every family face owns one distinct host door (80 for vault, 8081-8090 for the ten siblings) — no two composes ever claim the same host port"
+  }
+}

package/docs/cobaia.md

@@ -0,0 +1,31 @@
+# cobaia — the dossier
+
+The public monetization surface of the family: plans, MRR tracking, honest ad slots and the support rails.
+
+## Identity
+
+- Category: monetization surface.
+- Competitor space: GitHub Sponsors, Ko-fi honest monetization.
+
+## Objective
+
+Give the family an honest monetization engine: every plan grants resources (never powers), every ad slot stays empty until approval, every rail is public and auditable.
+
+## Features
+
+- Plans: the resource grants the devthink system sells (storage quotas, engine seats).
+- MRR tracking and churn seats.
+- Ad slots that stay empty until the approval flows answer (zero tracking before approval).
+- Support rails: sponsorship links, badges, roster.
+- Billing seats with the honest playbook: cashback becomes store credit, never real money.
+- Absolute ethical limits codified: no invisible click mirroring, no dark patterns.
+
+## Interactions
+
+- Public surface with banner, plans and support sections.
+- The roster of supporters and the honest badges.
+
+## Doctrine
+
+- Honest monetization: every limit is a plan limit, never an engine limit.
+- Ethical absolute: the ad seat refuses to track before the approval answers.

package/docs/distributionlanes.md

@@ -6,7 +6,7 @@ The eleven distribution lanes of the PR14 law and the honest status each lane an
 | --- | --- | --- | --- |
 | npmjs | package.json — @wenathlan/cobaia | live | the family-npmjs lane publishes the envelope every release rung |
 | GitHub Packages npm | package.json — @wenathlan/cobaia | live | the family-githubnpm lane publishes the same envelope idempotently |
-| Maven | pom.xml — io.github.wenathlan:cobaia | live | the family-maven lane deploys the jar |
+| Maven | pom.xml — com.wenathlan:cobaia | live | the family-maven lane deploys the jar |
 | NuGet | cobaia.csproj | live | the family-nuget lane packs the envelope |
 | Gradle | build.gradle.kts — com.wenathlan:cobaia | live | the family-gradle lane publishes the module |
 | Ruby Gems | cobaia.gemspec | live | the family-rubygems lane pushes the gem |

package/keywords.txt

@@ -0,0 +1 @@
+cobaia, cobaia app, cobaia devthink, cobaia monetization, devthink os, wenathlan, monetization surface, monetization app, mrr plans, subscription plans, honest ads, ad slots, ad inventory, ad placements, checkout links, github sponsors, ko-fi, support links, donation links, open source funding, creator monetization, posts feed, content publishing, public content, roster page, team roster, pricing page, plan comparison, free plan, pro plan, business plan, revenue dashboard, monetization dashboard, static monetization site, vite monetization app, react monetization app, open source monetization, developer tools monetization, monetization strategy, passive income, funding goals, sponsor tiers, transparent revenue, wenathlan cobaia, devthink family, monetization app 2026

package/labels.ts

@@ -26,7 +26,7 @@ import { createLabelStore } from "@wenathlan/vault/labelstore";
 
 /** the label revision of the manifest: bump on every copy wave so the seed
  * refreshes the store rows of the changed strings. */
-export const LABEL_REVISION = 4;
+export const LABEL_REVISION = 5;
 
 /** the english manifest: the page.widget.key path answers the surface text.
  * every entry is the verbatim string the wingets and page anchors rendered
@@ -257,6 +257,28 @@ export const LABEL_MANIFEST = {
   "intro.footer.familyAria": "the family row",
   "intro.footer.family": "the family",
   "intro.footer.memberTip": "open {slug} — the door beside this site",
+  // the onboarding page anchor (the first-run frames of the entry flow —
+  // the standardized intro → onboarding → entrada law the family rides;
+  // cobaia's frames present the real offer: what the site is, what it
+  // carries, and the hand-over to the content pages)
+  "onboarding.aria": "cobaia — the first-run steps",
+  "onboarding.title": "cobaia",
+  "onboarding.skip": "skip — straight to the site",
+  "onboarding.back": "back",
+  "onboarding.next": "next",
+  "onboarding.enterCta": "enter the site",
+  "onboarding.steps.is.eyebrow": "01 — what this is",
+  "onboarding.steps.is.title": "The family's front door.",
+  "onboarding.steps.is.text": "cobaia is the monetization face of the devthink family — the front door kept apart so the ten applications stay clean. the directory, the plans, the support channels and the update blog live on this one static site.",
+  "onboarding.steps.does.eyebrow": "02 — what it carries",
+  "onboarding.steps.does.title": "The plans, the support rails, the honest ads.",
+  "onboarding.steps.does.text": "the real offer, nothing invented: the three plans with their placeholder prices said out loud, the support rails that activate when the owner wires them, and the reserved ad boxes that stay empty until a network approves the site.",
+  "onboarding.steps.enter.eyebrow": "03 — the entrada",
+  "onboarding.steps.enter.title": "One responsive site, every screen.",
+  "onboarding.steps.enter.text": "the same responsive pages answer on the phone, the tv, the extension and the desktop — the presentation adapts, the content never changes. the entrada is the front door itself.",
+  "onboarding.facts.plans": "the plans — us$0, 5 and 19 a month, placeholder prices until billing lands, honest until then",
+  "onboarding.facts.support": "the support rails — the sponsor channels, configured the day the owner wires them",
+  "onboarding.facts.ads": "the ad slots — reserved boxes, visibly labeled, empty until a network approves the site",
   // the ad slot widget (the reserved box of the content pages)
   "ads.slot.reserved": "reserved · {format}",
 } as const;

package/monetization.ts

@@ -0,0 +1,248 @@
+// # monetization.ts — the one keyword file of the monetization domain: the
+// consolidation law of the root (PR3 of the uploaded rules — one keyword
+// file per domain, "unifique num único módulo as lógicas variantes +
+// correlacionadas que hoje encontram-se espalhadas") merged the four
+// monetization doors of the cobaia site into this seat — the honest ad slot
+// registry (the former adsconfig.ts body below), the typed billing accessor
+// (checkoutlinks.ts), the seed blog accessor (posts.ts) and the family
+// directory accessor (roster.ts) — every export preserved verbatim, zero
+// logic changes, zero behavior changes. The consolidation notes: the doors
+// shared no duplicated helper (each rode its own thin accessors over the
+// content lane), so the one import the four sources repeated — the
+// content.ts door of the uistore chain — rides once at the top; and no two
+// sources double-declared a const or a decl under one name, so every export
+// keeps the exact name the importers always read (the wingets index
+// re-exports the roster pair by name so its surface stays identical). The
+// four source files are deleted; every importer reads this one seat.
+
+import {
+  type blogpost,
+  type checkoutplan,
+  contenttable,
+  contentvalue,
+  type familymember,
+  seedPlans,
+  seedPosts,
+  seedRoster,
+  seedSupportLinks,
+  type supportlinks as supportlinkstable,
+} from "./content.ts";
+
+export type { blogpost, checkoutplan, familymember, supportlinkstable as supportlinks };
+
+/* ════════════════════════════════════════════════════════════════════ */
+/* SECTION: adsconfig.ts — the honest ad slot registry (the ad seat).   */
+/* ════════════════════════════════════════════════════════════════════ */
+
+// # adsconfig.ts — the honest ad slot registry of the family site, pure data
+// at the app root. The family site carries ONE reserved ad container per
+// content page (home, the app directory, the blog index), always at the end
+// of the content, always labeled "advertisement", always a fixed aspect
+// ratio so the page never shifts when a real unit arrives.
+//
+// THE SCRIPT RULE: no ad network script lives in this repository. The
+// AdSense (or equivalent) loader is injected AFTER the network approves the
+// site, through the deploy environment only. Until then the slot ids stay
+// empty and the container renders the honest empty note. No network call,
+// no click encouragement, no automated traffic ever touches an ad surface —
+// invalid traffic is the one thing that kills both the ad account and the
+// domain reputation, so the family does not do it.
+
+/** one reserved ad slot: the config id and the reserved shape. */
+export type adsslot = {
+  /** the ad network slot id — empty until the owner configures it after approval */
+  slotid: string;
+  /** the display format the reserved box mimics */
+  format: string;
+  /** the css aspect-ratio value the container reserves (never shifts layout) */
+  ratio: string;
+};
+
+/** the fixed label every ad container renders, visible and honest. */
+export const ADS_LABEL = "advertisement";
+
+/** the honest note the container renders while no slot id is configured. */
+export const ADS_EMPTY = "ad slot not configured yet";
+
+/** the reserved slots per content page, keyed by the page folder name. */
+export const ADSSLOTS: Readonly<Record<string, adsslot>> = {
+  home: { slotid: "", format: "display", ratio: "728 / 90" },
+  apps: { slotid: "", format: "in-feed", ratio: "3 / 1" },
+  blog: { slotid: "", format: "in-article", ratio: "3 / 1" },
+};
+
+/**
+ * Reads the reserved slot of one content page.
+ *
+ * @param page the page folder name (home, apps, blog).
+ * @returns the slot, or undefined when the page carries no slot.
+ */
+export function adsslotfor(page: string): adsslot | undefined {
+  return ADSSLOTS[page];
+}
+
+/**
+ * Answers whether a slot is configured with a real network id. An empty
+ * (or whitespace) slot id means the container stays an honest placeholder.
+ *
+ * @param slot the reserved slot entry.
+ * @returns true only when the slot id carries a value.
+ */
+export function adsslotlive(slot: adsslot | undefined): boolean {
+  return slot !== undefined && slot.slotid.trim().length > 0;
+}
+
+/* ════════════════════════════════════════════════════════════════════ */
+/* SECTION: checkoutlinks.ts — the typed billing accessor (the plans     */
+/* seat).                                                                */
+/* ════════════════════════════════════════════════════════════════════ */
+
+// # checkoutlinks.ts — the typed accessor of the billing configuration of
+// the family site: the thin door the pricing page, the support page and
+// the intro plans zone import, answering the plan table and the support
+// channels of the content lane (content.ts — the manifest; db.ts — the
+// content_rows table; the platform gateway — GET /api/v1/ui/content). The
+// data never lives here anymore: checkoutlinks() and supportlinks() answer
+// the live rows the platform served, the manifest seed otherwise (the
+// uistore chain). The payment links themselves are configuration, never
+// code: the owner pins the checkout hrefs (Stripe Payment Links or Paddle
+// overlays) into the store once billing goes live. Until then every href
+// ships empty and the interface renders the honest empty state — "checkout
+// not configured yet" — instead of pretending.
+//
+// The words never ride here: every plan sentence (name, billing period,
+// blurb, features) answers from the label store (labels.ts — the manifest
+// the seed carries into the site database), so the pricing cards and the
+// intro plans zone read their prose through the typed accessor and this
+// lane keeps only the billing values — ids, prices and links.
+//
+// No network call ever happens here: the links are plain hrefs the visitor
+// chooses to follow, no key is committed (not even a placeholder that looks
+// real) and no script is loaded. The prices are placeholders (US$0 / 5 / 19
+// per month) until the billing platform decision lands.
+
+/**
+ * The typed accessor of the pricing table: the live db rows when the
+ * platform answered, the manifest seed otherwise — in display order (the
+ * prose answers from the label store; only the billing values ride this
+ * lane).
+ *
+ * @returns the plans of the /pricing page.
+ */
+export function checkoutlinks(): readonly checkoutplan[] {
+  return contenttable("plans", seedPlans);
+}
+
+/**
+ * The typed accessor of the support channels: the live db row when the
+ * platform answered, the manifest seed otherwise — the same rule as the
+ * plans: hrefs stay empty until the owner configures them.
+ *
+ * @returns the support channels of the /support page.
+ */
+export function supportlinks(): Readonly<supportlinkstable> {
+  return contentvalue("supportlinks", seedSupportLinks);
+}
+
+/**
+ * Answers whether a configured link is live. An empty (or whitespace) href
+ * means the feature is not configured yet and the interface must say so.
+ *
+ * @param href the configured link href.
+ * @returns true only when the href carries a real target.
+ */
+export function isconfigured(href: string): boolean {
+  return href.trim().length > 0;
+}
+
+/**
+ * Finds one plan of the table by its stable id.
+ *
+ * @param id the plan id (free, pro, studio).
+ * @returns the plan, or undefined when no plan carries the id.
+ */
+export function planbyid(id: string): checkoutplan | undefined {
+  return checkoutlinks().find((plan) => plan.id === id);
+}
+
+/* ════════════════════════════════════════════════════════════════════ */
+/* SECTION: posts.ts — the seed blog accessor (the blog seat).          */
+/* ════════════════════════════════════════════════════════════════════ */
+
+// # posts.ts — the typed accessor of the seed blog: the thin door the blog
+// page and the tests import, answering the posts of the content lane
+// (content.ts — the manifest; db.ts — the content_rows table; the platform
+// gateway — GET /api/v1/ui/content). The data never lives here anymore:
+// posts() answers the live rows the platform served, the manifest seed
+// otherwise (the uistore chain), the index sort and the honest word count
+// stay exactly where they rode, and the blog index (/blog) renders the
+// sorted index and the full bodies through this door — real, written
+// content about how the family is built, so the site is useful on its own
+// merits (the ad networks approve content, not containers). New posts
+// append to the manifest; the index sorts by date, so the manifest order
+// never matters.
+
+/**
+ * The typed accessor of the blog: the live db rows when the platform
+ * answered, the manifest seed otherwise.
+ *
+ * @returns the posts of the blog.
+ */
+export function posts(): readonly blogpost[] {
+  return contenttable("posts", seedPosts);
+}
+
+/**
+ * Builds the blog index: the posts sorted by date, newest first. The ISO
+ * date sort is lexicographic and stable, so the index order never depends
+ * on the row order the store answers.
+ *
+ * @returns the posts of the blog, newest first.
+ */
+export function postindex(): readonly blogpost[] {
+  return [...posts()].sort((a, b) => {
+    if (a.date < b.date) return 1;
+    if (a.date > b.date) return -1;
+    return 0;
+  });
+}
+
+/**
+ * Counts the words of one post's body — the honest length measure the tests
+ * and the page footer can both read.
+ *
+ * @param post the post to measure.
+ * @returns the total word count across the body paragraphs.
+ */
+export function postwords(post: blogpost): number {
+  return post.body.join(" ").split(/\s+/).filter(Boolean).length;
+}
+
+/* ════════════════════════════════════════════════════════════════════ */
+/* SECTION: roster.ts — the family directory accessor (the directory    */
+/* seat).                                                                */
+/* ════════════════════════════════════════════════════════════════════ */
+
+// # roster.ts — the typed accessor of the family directory data: the thin
+// door the /apps page, the shell footer, the home preview and the intro
+// footer import, answering the roster of the content lane (content.ts —
+// the manifest; db.ts — the content_rows table; the platform gateway — GET
+// /api/v1/ui/content). The data never lives here anymore: roster() answers
+// the live rows the platform served, the manifest seed otherwise (the
+// uistore chain). Every deploy unit beside the cobaia, with the one accent
+// each carries (the spec §12 table, mirrored from the argan contract; the
+// devthink OS rides the family sun) and the honest role each app declares
+// in its own devthink.toml — condensed to one line, nothing embellished:
+// the page and the tests read the same table through this door, so the
+// directory can never drift from the family.
+
+/**
+ * The typed accessor of the directory: the live db rows when the platform
+ * answered, the manifest seed otherwise — rail order, the OS first, then
+ * the applications.
+ *
+ * @returns the directory roster.
+ */
+export function roster(): readonly familymember[] {
+  return contenttable("roster", seedRoster);
+}