@wenathlan/cobaia 2.0.167 → 2.0.168

package/db.ts

@@ -8,6 +8,7 @@
  * tables over HTTPS (GET/POST /api/v1/onboarding, GET /api/v1/ui/content);
  * no server route lives here.
  */
+import { createOnboardingStore } from "@wenathlan/vault/onboardingstore";
 import { openStorageLane } from "@wenathlan/vault/storage";
 import { CONTENTKINDS, type contentrow, seedAdsLabel, seedAdsEmpty, seedAdsSlots, seedPlans, seedPosts, seedRoster, seedSupportLinks } from "./content";
 import { LABEL_MANIFEST, LABEL_REVISION } from "./labels";
@@ -70,6 +71,12 @@ export type OnboardingStateRow = {
 /** the stage flags the entry flow consults, as booleans. */
 export type OnboardingFlags = { introseen: boolean; onboardingseen: boolean };
 
+/** the onboarding store of the site: the vault factory over the site's own
+ * storage lane (the seen-flags table rides the app schema, the read and the
+ * seen-wins upsert ride the shared mechanism — never duplicated inside the
+ * app; the storage lane law of the family, the labelstore precedent). */
+const onboardingstore = createOnboardingStore(lane);
+
 /**
  * Reads the onboarding stage flags of one visitor (parameterized; undefined
  * before the first write). The browser accessor serves the same flags over
@@ -79,17 +86,13 @@ export type OnboardingFlags = { introseen: boolean; onboardingseen: boolean };
  * @returns the flags, or undefined when the visitor never wrote.
  */
 export function getOnboardingState(visitor: string): OnboardingFlags | undefined {
-  const row = queryOne<Pick<OnboardingStateRow, "introseen" | "onboardingseen">>(
-    "SELECT introseen, onboardingseen FROM onboarding_states WHERE visitor = ?",
-    [visitor],
-  );
-  if (!row) return undefined;
-  return { introseen: row.introseen === 1, onboardingseen: row.onboardingseen === 1 };
+  return onboardingstore.getOnboardingState(visitor);
 }
 
 /**
- * Marks one onboarding stage seen for a visitor — idempotent seen-wins
- * upsert (a stage seen anywhere stays seen), prepared and parameterized,
+ * Marks one onboarding stage seen for a visitor — the idempotent seen-wins
+ * upsert of the vault store (a stage seen anywhere stays seen; the later
+ * stage implies the earlier — the flow order), prepared and parameterized,
  * never concatenated SQL.
  *
  * @param visitor the visitor key of the row.
@@ -97,15 +100,7 @@ export function getOnboardingState(visitor: string): OnboardingFlags | undefined
  * @returns the flags after the write.
  */
 export function setOnboardingStage(visitor: string, stage: "intro" | "onboarding"): OnboardingFlags {
-  execute(
-    `INSERT INTO onboarding_states (visitor, introseen, onboardingseen, updatedAt)
-     VALUES (?, ?, ?, datetime('now'))
-     ON CONFLICT(visitor) DO UPDATE SET
-       introseen = MAX(introseen, excluded.introseen),
-       onboardingseen = MAX(onboardingseen, excluded.onboardingseen),
-       updatedAt = datetime('now')`,
-    [visitor, stage === "intro" ? 1 : 0, stage === "onboarding" ? 1 : 0],
-  );
+  onboardingstore.setOnboardingStage(visitor, stage);
   return getOnboardingState(visitor) ?? { introseen: false, onboardingseen: false };
 }
 

package/docker-compose.yml

@@ -29,7 +29,7 @@
 
 services:
   cobaia-engine:
-    image: "ghcr.io/wenathlan/cobaia:${COBAIA_VERSION:-2.0.166}"
+    image: "ghcr.io/wenathlan/cobaia:${COBAIA_VERSION:-2.0.167}"
     # the engine never publishes a port by default: the face proxies it on
     # the private compose network (the vault precedent). uncomment to serve
     # the engine lane directly behind your own door:
@@ -41,7 +41,7 @@ services:
     restart: unless-stopped
 
   cobaia-face:
-    image: "ghcr.io/wenathlan/cobaia:${COBAIA_VERSION:-2.0.166}"
+    image: "ghcr.io/wenathlan/cobaia:${COBAIA_VERSION:-2.0.167}"
     volumes:
       # the family conf over the default site conf: the resolver law, the
       # security headers, the gzip and cache law, the /api proxy lane.

package/homebrew.rb

@@ -0,0 +1,25 @@
+# wenathlan-cobaia — the homebrew formula of the family (the homebrew channel).
+# The lane stamps the version and sha256 at push time (the sums derive from
+# the release tarball assets the release lane builds, never hardcoded).
+class WenathlanCobaia < Formula
+  desc "The monetization surface — the plans, the support rails and the honest advertisement slots"
+  homepage "https://github.com/wenathlan/devthink"
+  url "https://github.com/wenathlan/devthink/releases/download/v2.0.167/wenathlan-cobaia-2.0.167.tgz"
+  version "2.0.167"
+  # sha256 stamped by the lane from the release asset (never hardcoded)
+  sha256 "0000000000000000000000000000000000000000000000000000000000000000"
+
+  depends_on "node"
+
+  def install
+    libexec.install Dir["*"]
+    (bin/"wenathlan-cobaia").write <<~SH
+      #!/bin/bash
+      exec "#{libexec}/cli.js" "$@"
+    SH
+  end
+
+  test do
+    assert_match "2.0.167", shell_output("#{bin}/wenathlan-cobaia --version")
+  end
+end

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenathlan/cobaia",
-  "version": "2.0.167",
+  "version": "2.0.168",
   "private": false,
   "description": "cobaia is the monetization surface of the wenathlan family: the content site that carries the plans, the support rails and the honest advertisement slots while the family apps stay clean; the name is provisional until the owner picks the official one",
   "license": "GPL-3.0-only",
@@ -14,9 +14,9 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@ai-sdk/openai": "^4.0.110",
-    "@ai-sdk/openai-compatible": "^3.0.86",
-    "@ai-sdk/provider-utils": "^5.0.75",
+    "@ai-sdk/openai": "^4.0.111",
+    "@ai-sdk/openai-compatible": "^3.0.87",
+    "@ai-sdk/provider-utils": "^5.0.76",
     "@anthropic-ai/sdk": "^1.6.0",
     "@biomejs/biome": "^2.6.6",
     "@capacitor/android": "^8.6.0",
@@ -86,15 +86,15 @@
     "@types/react-dom": "^19.3.0",
     "@types/three": "^0.187.0",
     "@vitejs/plugin-react": "^6.2.1",
-    "@wenathlan/argan": "~2.0.166",
-    "@wenathlan/cadria": "~2.0.166",
-    "@wenathlan/debonair": "~2.0.166",
-    "@wenathlan/devthink": "~2.0.166",
-    "@wenathlan/getry": "~2.0.166",
-    "@wenathlan/saddle": "~2.0.166",
-    "@wenathlan/vault": "~2.0.166",
+    "@wenathlan/argan": "~2.0.167",
+    "@wenathlan/cadria": "~2.0.167",
+    "@wenathlan/debonair": "~2.0.167",
+    "@wenathlan/devthink": "~2.0.167",
+    "@wenathlan/getry": "~2.0.167",
+    "@wenathlan/saddle": "~2.0.167",
+    "@wenathlan/vault": "~2.0.167",
     "add": "^2.0.9",
-    "ai": "^7.0.164",
+    "ai": "^7.0.165",
     "autoprefixer": "^10.6.2",
     "axios": "^1.21.0",
     "baseline-browser-mapping": "^2.11.35",
@@ -105,7 +105,7 @@
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
-    "commander": "^15.0.0",
+    "commander": "^15.1.0",
     "date-fns": "^4.4.0",
     "deepmerge-ts": "^8.0.2",
     "dockerode": "^5.0.1",
@@ -123,13 +123,12 @@
     "framer-motion": "^14.10.1",
     "glob": "^14.0.4",
     "gsap": "^3.15.1",
-    "hono": "^4.13.16",
+    "hono": "^4.13.17",
     "ink": "^8.0.0",
     "input-otp": "^1.5.0",
     "js-yaml": "^5.5.0",
     "jsdom": "^31.0.0",
     "katex": "^0.19.1",
-    "lucide-react": "^1.70.0",
     "minimatch": "^11.0.5",
     "motion": "^14.10.1",
     "mysql2": "^3.24.6",
@@ -188,9 +187,9 @@
     "zustand": "^5.1.0"
   },
   "devDependencies": {
-    "@ai-sdk/openai": "^4.0.110",
-    "@ai-sdk/openai-compatible": "^3.0.86",
-    "@ai-sdk/provider-utils": "^5.0.75",
+    "@ai-sdk/openai": "^4.0.111",
+    "@ai-sdk/openai-compatible": "^3.0.87",
+    "@ai-sdk/provider-utils": "^5.0.76",
     "@anthropic-ai/sdk": "^1.6.0",
     "@biomejs/biome": "^2.6.6",
     "@capacitor/android": "^8.6.0",
@@ -260,15 +259,15 @@
     "@types/react-dom": "^19.3.0",
     "@types/three": "^0.187.0",
     "@vitejs/plugin-react": "^6.2.1",
-    "@wenathlan/argan": "~2.0.166",
-    "@wenathlan/cadria": "~2.0.166",
-    "@wenathlan/debonair": "~2.0.166",
-    "@wenathlan/devthink": "~2.0.166",
-    "@wenathlan/getry": "~2.0.166",
-    "@wenathlan/saddle": "~2.0.166",
-    "@wenathlan/vault": "~2.0.166",
+    "@wenathlan/argan": "~2.0.167",
+    "@wenathlan/cadria": "~2.0.167",
+    "@wenathlan/debonair": "~2.0.167",
+    "@wenathlan/devthink": "~2.0.167",
+    "@wenathlan/getry": "~2.0.167",
+    "@wenathlan/saddle": "~2.0.167",
+    "@wenathlan/vault": "~2.0.167",
     "add": "^2.0.9",
-    "ai": "^7.0.164",
+    "ai": "^7.0.165",
     "autoprefixer": "^10.6.2",
     "axios": "^1.21.0",
     "baseline-browser-mapping": "^2.11.35",
@@ -279,7 +278,7 @@
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
-    "commander": "^15.0.0",
+    "commander": "^15.1.0",
     "date-fns": "^4.4.0",
     "deepmerge-ts": "^8.0.2",
     "dockerode": "^5.0.1",
@@ -297,13 +296,12 @@
     "framer-motion": "^14.10.1",
     "glob": "^14.0.4",
     "gsap": "^3.15.1",
-    "hono": "^4.13.16",
+    "hono": "^4.13.17",
     "ink": "^8.0.0",
     "input-otp": "^1.5.0",
     "js-yaml": "^5.5.0",
     "jsdom": "^31.0.0",
     "katex": "^0.19.1",
-    "lucide-react": "^1.70.0",
     "minimatch": "^11.0.5",
     "motion": "^14.10.1",
     "mysql2": "^3.24.6",
@@ -362,9 +360,9 @@
     "zustand": "^5.1.0"
   },
   "overrides": {
-    "@ai-sdk/openai": "^4.0.110",
-    "@ai-sdk/openai-compatible": "^3.0.86",
-    "@ai-sdk/provider-utils": "^5.0.75",
+    "@ai-sdk/openai": "^4.0.111",
+    "@ai-sdk/openai-compatible": "^3.0.87",
+    "@ai-sdk/provider-utils": "^5.0.76",
     "@anthropic-ai/sdk": "^1.6.0",
     "@biomejs/biome": "^2.6.6",
     "@capacitor/android": "^8.6.0",
@@ -434,15 +432,15 @@
     "@types/react-dom": "^19.3.0",
     "@types/three": "^0.187.0",
     "@vitejs/plugin-react": "^6.2.1",
-    "@wenathlan/argan": "~2.0.166",
-    "@wenathlan/cadria": "~2.0.166",
-    "@wenathlan/debonair": "~2.0.166",
-    "@wenathlan/devthink": "~2.0.166",
-    "@wenathlan/getry": "~2.0.166",
-    "@wenathlan/saddle": "~2.0.166",
-    "@wenathlan/vault": "~2.0.166",
+    "@wenathlan/argan": "~2.0.167",
+    "@wenathlan/cadria": "~2.0.167",
+    "@wenathlan/debonair": "~2.0.167",
+    "@wenathlan/devthink": "~2.0.167",
+    "@wenathlan/getry": "~2.0.167",
+    "@wenathlan/saddle": "~2.0.167",
+    "@wenathlan/vault": "~2.0.167",
     "add": "^2.0.9",
-    "ai": "^7.0.164",
+    "ai": "^7.0.165",
     "autoprefixer": "^10.6.2",
     "axios": "^1.21.0",
     "baseline-browser-mapping": "^2.11.35",
@@ -453,7 +451,7 @@
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
-    "commander": "^15.0.0",
+    "commander": "^15.1.0",
     "date-fns": "^4.4.0",
     "deepmerge-ts": "^8.0.2",
     "dockerode": "^5.0.1",
@@ -471,13 +469,12 @@
     "framer-motion": "^14.10.1",
     "glob": "^14.0.4",
     "gsap": "^3.15.1",
-    "hono": "^4.13.16",
+    "hono": "^4.13.17",
     "ink": "^8.0.0",
     "input-otp": "^1.5.0",
     "js-yaml": "^5.5.0",
     "jsdom": "^31.0.0",
     "katex": "^0.19.1",
-    "lucide-react": "^1.70.0",
     "minimatch": "^11.0.5",
     "motion": "^14.10.1",
     "mysql2": "^3.24.6",

package/pnpm-workspace.yaml

@@ -48,7 +48,6 @@ minimumReleaseAgeExclude:
   - '@opencode-ai/sdk@1.19.5'
   - react-resizable-panels@4.15.1 || 4.15.2 || 4.15.3 || 4.16.0 || 4.16.1 || 4.17.0 || 4.18.0 || 4.18.1 || 4.19.0 || 4.19.1
   - '@types/google.maps@3.66.9 || 3.66.10'
-  - lucide-react@1.64.0 || 1.65.0 || 1.66.0 || 1.67.0 || 1.68.0 || 1.69.0 || 1.70.0
   - playwright@1.65.0
   - playwright-core@1.65.0
   - '@anthropic-ai/sdk@1.6.0'
@@ -56,13 +55,13 @@ minimumReleaseAgeExclude:
   - '@tanstack/query-core@5.106.1 || 5.107.1'
   - '@tanstack/react-query@5.106.1 || 5.107.1'
   - openai@7.52.0 || 7.53.0
-  - '@wenathlan/argan@2.0.155 || 2.0.165 || 2.0.166'
-  - '@wenathlan/cadria@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.8'
-  - '@wenathlan/debonair@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.8'
-  - '@wenathlan/devthink@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.7'
-  - '@wenathlan/getry@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166'
-  - '@wenathlan/saddle@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.8'
-  - '@wenathlan/vault@2.0.152 || 2.0.153 || 2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.8'
+  - '@wenathlan/argan@2.0.155 || 2.0.165 || 2.0.166 || 2.0.167'
+  - '@wenathlan/cadria@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.8 || 2.0.167'
+  - '@wenathlan/debonair@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.8 || 2.0.167'
+  - '@wenathlan/devthink@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.7 || 2.0.167'
+  - '@wenathlan/getry@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.0.167'
+  - '@wenathlan/saddle@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.8 || 2.0.167'
+  - '@wenathlan/vault@2.0.152 || 2.0.153 || 2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.8 || 2.0.167'
   - jsdom@31.0.0
   - pnpm@12.18.0
   - "@pnpm/exe.linux-x64@12.18.0"
@@ -90,10 +89,10 @@ minimumReleaseAgeExclude:
   - tailwindcss@4.3.4 || 4.3.5
   - vitest@5.1.0
   - gsap@3.15.1
-  - '@wenathlan/cobaia@2.0.166'
-  - '@wenathlan/forge@2.0.166'
-  - '@wenathlan/foundry@2.0.166'
-  - '@wenathlan/stealthhead@2.0.166'
+  - '@wenathlan/cobaia@2.0.166 || 2.0.167'
+  - '@wenathlan/forge@2.0.166 || 2.0.167'
+  - '@wenathlan/foundry@2.0.166 || 2.0.167'
+  - '@wenathlan/stealthhead@2.0.166 || 2.0.167'
   - framer-motion@14.10.1
   - motion-dom@14.10.1
   - motion@14.10.1

package/pom.xml

@@ -12,7 +12,7 @@
   <scm><url>https://github.com/wenathlan/devthink</url><connection>scm:git:https://github.com/wenathlan/devthink.git</connection></scm>
   <distributionManagement><repository><id>github</id><name>GitHub Packages</name><url>https://maven.pkg.github.com/wenathlan/devthink</url></repository></distributionManagement>
   <properties>
-    <revision>2.0.167</revision>
+    <revision>2.0.168</revision>
   </properties>
   <build>
     <resources>

package/pyproject.toml

@@ -0,0 +1,23 @@
+# cobaia — the python documentation envelope of the family (the pypi channel).
+# Ships the same envelope the gem face packs: README, docs and tests.
+# Built by the publish lane with `python -m build` (PEP 517); the version
+# rides the COBAIA_VERSION environment the metadata lockstep stamps — the
+# pyproject table cannot fetch an environment the gemspec reads, so the
+# static version below is the fallback the lane sed-stamps before building.
+[build-system]
+requires = ["setuptools>=75"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "wenathlan-cobaia"
+version = "2.0.167"
+authors = [{name = "wenathlan"}]
+description = "The monetization surface — the plans, the support rails and the honest advertisement slots"
+readme = "README.md"
+license = {text = "GPL-3.0-only"}
+requires-python = ">=3.11"
+
+# The envelope carries no python code — the empty package list keeps the
+# build honest while the MANIFEST.in packs the envelope files.
+[tool.setuptools]
+packages = []

package/sandboxmodality.ts

@@ -20,28 +20,24 @@
 // this module never judges engine vocabulary, so the mirror cannot drift
 // when the registry grows). The module never spawns anything and resolves
 // no join: it names the lanes' truth; the platform resolves the sandbox.
-// Zero consumer data, zero imports.
+// Zero consumer data; the one import below is the owner's lane seat
+// factory and nothing else enters.
+//
+// The engine seat (wave W5, the dedup law): the seat resolver, the env
+// reader and the lane lookup no longer live in this file — they ride the
+// saddle factory (laneseating of ../saddle/workloadlaw.ts, the owner's
+// workload law) bound once to this app's own data, re-exported under the
+// same names the surface always spoke. The rows stay mirrored (the drift
+// pin the battery wants), only the engine moved: zero behavior change,
+// zero public-surface change.
+
+import { type AppWorkloadLane, type LaneSeatResult, laneseating } from "../saddle/workloadlaw.ts";
 
 /** one mirrored workload lane row — the same five keys the engine law pins
- * (app, lane, role, demand, today). */
-export type AppWorkloadLane = {
-  /** the official app slug every row carries. */
-  readonly app: string;
-  /** the lane id inside the app (kebab-case, the engine catalog id). */
-  readonly lane: string;
-  /** what the lane does, in one sentence (the engine row's sentence). */
-  readonly role: string;
-  /** the demand the lane puts on the sandbox (gpu, network, isolation,
-   * boot budget — never a modality name: the nuclear law). */
-  readonly demand: {
-    readonly gpu: boolean;
-    readonly network: boolean;
-    readonly isolation: "process" | "namespace" | "vm" | "hardware";
-    readonly bootbudget?: number;
-  };
-  /** where the heavy pass runs today — the honest truth the census reads. */
-  readonly today: "engine-lane" | "app-lane";
-};
+ * (app, lane, role, demand, today); the shape itself rides the owner's
+ * law now (wave W5 — saddle/workloadlaw.ts answers the type once),
+ * re-exported under the historical surface name. */
+export type { AppWorkloadLane };
 
 /** the app slug every mirrored row carries. */
 export const APPSLUG = "cobaia";
@@ -83,10 +79,13 @@ export const SANDBOXLANEENV = "COBAIA_SANDBOX_LANE";
  * modality id the deploy named (validated by the platform's join at
  * dispatch, never judged here). every answer is honest: an absent or
  * blank choice answers the declared default, never a silent switch. */
-export type LaneSeatResult =
-  | { ok: true; seat: "local"; sandboxed: false }
-  | { ok: true; seat: "join"; sandboxed: true; pinned: false }
-  | { ok: true; seat: string; sandboxed: true; pinned: true };
+export type { LaneSeatResult };
+
+/** the lane seat engine of this app — the saddle factory bound once to
+ * this app's own data (the dedup law: the engine lives in the owner, the
+ * app keeps its data), the seats re-exported below under the names the
+ * surface always spoke. */
+const seating = laneseating({ slug: APPSLUG, envvar: SANDBOXLANEENV, lanes: WORKLOADLANES });
 
 /**
  * Resolves the sandbox lane seat of this application — the deploy's
@@ -101,16 +100,7 @@ export type LaneSeatResult =
  * @param choice the deploy's choice (the env value or the config row).
  * @returns the seat declaration.
  */
-export function lanesandbox(choice: string | undefined): LaneSeatResult {
-  const name = choice?.trim() ?? "";
-  if (name.length === 0 || name === "local") {
-    return { ok: true, seat: "local", sandboxed: false };
-  }
-  if (name === "join") {
-    return { ok: true, seat: "join", sandboxed: true, pinned: false };
-  }
-  return { ok: true, seat: name, sandboxed: true, pinned: true };
-}
+export const lanesandbox = seating.lanesandbox;
 
 /**
  * Reads the lane seat off one environment lookup — the deploy pins
@@ -121,9 +111,7 @@ export function lanesandbox(choice: string | undefined): LaneSeatResult {
  * @param lookup the environment lookup function (the env carrier).
  * @returns the seat declaration.
  */
-export function lanesandboxfromenv(lookup: (key: string) => string | undefined): LaneSeatResult {
-  return lanesandbox(lookup(SANDBOXLANEENV));
-}
+export const lanesandboxfromenv = seating.lanesandboxfromenv;
 
 /**
  * Answers one mirrored lane row by lane id — the lookup the app surfaces
@@ -133,6 +121,4 @@ export function lanesandboxfromenv(lookup: (key: string) => string | undefined):
  * @returns the mirrored row, or undefined when the app carries no such
  * lane.
  */
-export function laneof(lane: string): AppWorkloadLane | undefined {
-  return WORKLOADLANES.find((row) => row.lane === lane);
-}
+export const laneof = seating.laneof;

package/sol/Sol.tsx

@@ -29,7 +29,7 @@ import OnboardingAnchor from "./onboarding/onboarding";
 import LegalAnchor from "./legal/legal";
 import NotFoundAnchor from "./notfound/notfound";
 import PricingAnchor from "./pricing/pricing";
-import { EntryGate } from "./wingets";
+import { EntryGate } from "../wingets";
 import { Shell } from "./shell/Shell";
 import SupportAnchor from "./support/support";
 

package/sol/apps/apps.tsx

@@ -17,7 +17,7 @@ import { useContent } from "../../content.ts";
 import { familyurl } from "../../familyurl";
 import { label, labelfill } from "../../labels";
 import { roster } from "../../monetization.ts";
-import { AdSlot } from "../wingets";
+import { AdSlot } from "../../wingets";
 
 export function Apps() {
   useContent();

package/sol/blog/blog.tsx

@@ -17,7 +17,7 @@ import type { CSSProperties } from "react";
 import { useContent } from "../../content.ts";
 import { label, labelfill } from "../../labels";
 import { type blogpost, postindex, postwords } from "../../monetization";
-import { AdSlot } from "../wingets";
+import { AdSlot } from "../../wingets";
 
 /** the meta line of one post: the date and the honest word count. */
 function PostMeta({ post }: { post: blogpost }) {

package/sol/home/home.tsx

@@ -22,7 +22,7 @@ import { useContent } from "../../content.ts";
 import { familyurl } from "../../familyurl";
 import { type LabelKey, label, labelfill } from "../../labels";
 import { roster } from "../../monetization.ts";
-import { AdSlot, BrandMark, EntryGate } from "../wingets";
+import { AdSlot, BrandMark, EntryGate } from "../../wingets";
 
 /** the featured deploy units of the landing preview (the full directory
  * lives on /apps): the OS, the engine, the store and one studio — read

package/sol/intro/intro.tsx

@@ -31,7 +31,7 @@ import { useCallback, useEffect, useState } from "react";
 import { Link } from "wouter";
 import { label } from "../../labels";
 import { markOnboardingStage } from "../../onboardingstate.ts";
-import { BrandMark, IntroFooter, IntroPlans, IntroSplash } from "../wingets";
+import { BrandMark, IntroFooter, IntroPlans, IntroSplash } from "../../wingets";
 
 /** the lifecycle of the opening act: resolving (the motion preference
  * decides) → playing (the akash floor over the landing) → done (the

package/sol/onboarding/onboarding.tsx

@@ -19,7 +19,7 @@ import { useState } from "react";
 import { useLocation } from "wouter";
 import { type LabelKey, label } from "../../labels";
 import { markOnboardingStage } from "../../onboardingstate.ts";
-import { BrandMark } from "../wingets";
+import { BrandMark } from "../../wingets";
 
 /** the three frames of the first run, in order — the copy rides the store
  * (the id keeps the ladder segments keyed, the key answers the eyebrow). */

package/sol/shell/Shell.tsx

@@ -27,7 +27,7 @@ import { useContent } from "../../content.ts";
 import { familyurl } from "../../familyurl";
 import { type LabelKey, label } from "../../labels";
 import { roster } from "../../monetization.ts";
-import { BrandMark } from "../wingets";
+import { BrandMark } from "../../wingets";
 
 /** the section links of the top bar, in reading order (home is the mark).
  * the href rides the route table, the text rides the label accessor. */

package/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Cobaia",
-  "version": "2.0.167",
+  "version": "2.0.168",
   "identifier": "com.wenathlan.cobaia",
   "build": {
     "beforeDevCommand": "pnpm dev",

package/tsconfig.json

@@ -14,6 +14,7 @@
     "types": ["vite/client", "node"],
     "paths": {
       "@wenathlan/vault/labelstore": ["../vault/labelstore.ts"],
+      "@wenathlan/vault/onboardingstore": ["../vault/onboardingstore.ts"],
       "@wenathlan/vault/storagelane": ["../vault/storagelane.ts"]
     }
   },

package/vite.config.ts

@@ -23,8 +23,22 @@ export default defineConfig({
        * the mechanism is never duplicated inside cobaia. the entry retires
        * when the published envelope carries the built label store. */
       "@wenathlan/vault/labelstore": path.resolve(import.meta.dirname, "../vault/labelstore.ts"),
+      "@wenathlan/vault/onboardingstore": path.resolve(import.meta.dirname, "../vault/onboardingstore.ts"),
       "@": path.resolve(import.meta.dirname, "sol"),
     },
+    /** the single-instance law (the PR12 renderparity heal): the family
+     * sources the thin doors re-export (devthink/reveal.ts and the sibling
+     * bridges) live outside this app root, and the resolver answers their
+     * bare react and wouter imports against the folder the file sits in —
+     * a second physical copy rides the bundle when the sibling tree carries
+     * its own node_modules (the two-react crash: the wouter context hook
+     * then answers the dispatcher of the copy that never renders, and the
+     * app dies at the workbench-failure face on both doors, the typed url
+     * and the panel window alike). the dedupe forces every react,
+     * react-dom and wouter specifier of the graph onto one resolved
+     * instance — the cross-app source rides, the duplication dies, one
+     * design answers both doors. */
+    dedupe: ["react", "react-dom", "react-dom/client", "wouter"],
   },
   root: import.meta.dirname,
   build: {

package/vitest.config.ts

@@ -11,6 +11,14 @@ export default defineConfig({
        * the mechanism is never duplicated inside cobaia. the entry retires
        * when the published envelope carries the built label store. */
       "@wenathlan/vault/labelstore": path.resolve(import.meta.dirname, "../vault/labelstore.ts"),
+      /** the onboarding store bridge of the ownership law: the app's
+       * seen-flags mechanism rides the vault factory through the published
+       * library specifier ("@wenathlan/vault/onboardingstore"), and this
+       * bridge resolves the specifier to the monorepo source the sibling
+       * engine carries — the mechanism is never duplicated inside cobaia.
+       * the entry retires when the published envelope carries the built
+       * onboarding store. */
+      "@wenathlan/vault/onboardingstore": path.resolve(import.meta.dirname, "../vault/onboardingstore.ts"),
 
       /** the storage lane bridge of the ownership law: the app's sqlite
        * mechanism rides the vault factory through the published library

package/wingets.ts

@@ -0,0 +1,21 @@
+/**
+ * wingets.ts — the universal winget surface of cobaia: every winget of the
+ * sol/wingets folder answers from this one module at the app root, so the
+ * pages import their components from a single place and the dotted winget
+ * file name lives exactly once (here) instead of repeating across every
+ * page — the components stay complete independent files inside the
+ * sol/wingets folder.
+ */
+export { type familymember, roster } from "./monetization.ts";
+export * from "./sol/wingets/HomeEntrygate.tsx";
+export { default as EntryGate } from "./sol/wingets/HomeEntrygate.tsx";
+export * from "./sol/wingets/IntroFooter.tsx";
+export { default as IntroFooter } from "./sol/wingets/IntroFooter.tsx";
+export * from "./sol/wingets/IntroPlans.tsx";
+export { default as IntroPlans } from "./sol/wingets/IntroPlans.tsx";
+export * from "./sol/wingets/IntroSplash.tsx";
+export { default as IntroSplash } from "./sol/wingets/IntroSplash.tsx";
+export * from "./sol/wingets/ShellAdsslot.tsx";
+export { default as ShellAdsslot } from "./sol/wingets/ShellAdsslot.tsx";
+export * from "./sol/wingets/ShellBrand.tsx";
+export { default as ShellBrand } from "./sol/wingets/ShellBrand.tsx";