@wenathlan/cobaia 2.0.167 → 2.0.169

package/cobaia.gemspec

@@ -1,6 +1,6 @@
 Gem::Specification.new do |spec|
   spec.name = "cobaia"
-  spec.version = ENV.fetch("COBAIA_VERSION", "2.0.167")
+  spec.version = ENV.fetch("COBAIA_VERSION", "2.0.169")
   spec.authors = ["wenathlan"]
   spec.email = ["support@users.noreply.github.com"]
   spec.summary = "The cobaia documentation and tests envelope (the monetization surface — the plans, the support rails and the honest advertisement slots)."

package/cobaia.java

@@ -10,7 +10,7 @@ package com.wenathlan.cobaia;
  */
 final class Cobaia {
   /** The version of the cobaia envelope (the six-distribution completeness wave). */
-  public static final String VERSION = "2.0.167";
+  public static final String VERSION = "2.0.169";
   private Cobaia() {
   }
 }

package/cobaia.rs

@@ -0,0 +1,8 @@
+//! The cobaia version envelope carrier.
+//!
+//! The carrier answers the lowercase file name doctrine: the envelope
+//! carries the version constant the metadata lockstep stamps, the cargo
+//! lane packages it, the registry lanes never compile it locally.
+
+/// The version of the cobaia envelope (the family tri-channel wave).
+pub const VERSION: &str = "2.0.169";

package/db.ts

@@ -8,6 +8,7 @@
  * tables over HTTPS (GET/POST /api/v1/onboarding, GET /api/v1/ui/content);
  * no server route lives here.
  */
+import { createOnboardingStore } from "@wenathlan/vault/onboardingstore";
 import { openStorageLane } from "@wenathlan/vault/storage";
 import { CONTENTKINDS, type contentrow, seedAdsLabel, seedAdsEmpty, seedAdsSlots, seedPlans, seedPosts, seedRoster, seedSupportLinks } from "./content";
 import { LABEL_MANIFEST, LABEL_REVISION } from "./labels";
@@ -70,6 +71,12 @@ export type OnboardingStateRow = {
 /** the stage flags the entry flow consults, as booleans. */
 export type OnboardingFlags = { introseen: boolean; onboardingseen: boolean };
 
+/** the onboarding store of the site: the vault factory over the site's own
+ * storage lane (the seen-flags table rides the app schema, the read and the
+ * seen-wins upsert ride the shared mechanism — never duplicated inside the
+ * app; the storage lane law of the family, the labelstore precedent). */
+const onboardingstore = createOnboardingStore(lane);
+
 /**
  * Reads the onboarding stage flags of one visitor (parameterized; undefined
  * before the first write). The browser accessor serves the same flags over
@@ -79,17 +86,13 @@ export type OnboardingFlags = { introseen: boolean; onboardingseen: boolean };
  * @returns the flags, or undefined when the visitor never wrote.
  */
 export function getOnboardingState(visitor: string): OnboardingFlags | undefined {
-  const row = queryOne<Pick<OnboardingStateRow, "introseen" | "onboardingseen">>(
-    "SELECT introseen, onboardingseen FROM onboarding_states WHERE visitor = ?",
-    [visitor],
-  );
-  if (!row) return undefined;
-  return { introseen: row.introseen === 1, onboardingseen: row.onboardingseen === 1 };
+  return onboardingstore.getOnboardingState(visitor);
 }
 
 /**
- * Marks one onboarding stage seen for a visitor — idempotent seen-wins
- * upsert (a stage seen anywhere stays seen), prepared and parameterized,
+ * Marks one onboarding stage seen for a visitor — the idempotent seen-wins
+ * upsert of the vault store (a stage seen anywhere stays seen; the later
+ * stage implies the earlier — the flow order), prepared and parameterized,
  * never concatenated SQL.
  *
  * @param visitor the visitor key of the row.
@@ -97,15 +100,7 @@ export function getOnboardingState(visitor: string): OnboardingFlags | undefined
  * @returns the flags after the write.
  */
 export function setOnboardingStage(visitor: string, stage: "intro" | "onboarding"): OnboardingFlags {
-  execute(
-    `INSERT INTO onboarding_states (visitor, introseen, onboardingseen, updatedAt)
-     VALUES (?, ?, ?, datetime('now'))
-     ON CONFLICT(visitor) DO UPDATE SET
-       introseen = MAX(introseen, excluded.introseen),
-       onboardingseen = MAX(onboardingseen, excluded.onboardingseen),
-       updatedAt = datetime('now')`,
-    [visitor, stage === "intro" ? 1 : 0, stage === "onboarding" ? 1 : 0],
-  );
+  onboardingstore.setOnboardingStage(visitor, stage);
   return getOnboardingState(visitor) ?? { introseen: false, onboardingseen: false };
 }
 

package/docker-compose.yml

@@ -29,7 +29,7 @@
 
 services:
   cobaia-engine:
-    image: "ghcr.io/wenathlan/cobaia:${COBAIA_VERSION:-2.0.166}"
+    image: "ghcr.io/wenathlan/cobaia:${COBAIA_VERSION:-2.0.167}"
     # the engine never publishes a port by default: the face proxies it on
     # the private compose network (the vault precedent). uncomment to serve
     # the engine lane directly behind your own door:
@@ -41,7 +41,7 @@ services:
     restart: unless-stopped
 
   cobaia-face:
-    image: "ghcr.io/wenathlan/cobaia:${COBAIA_VERSION:-2.0.166}"
+    image: "ghcr.io/wenathlan/cobaia:${COBAIA_VERSION:-2.0.167}"
     volumes:
       # the family conf over the default site conf: the resolver law, the
       # security headers, the gzip and cache law, the /api proxy lane.

package/docker.config

@@ -2,7 +2,7 @@
   "meta": {
     "name": "docker.config",
     "title": "cobaia - the container configuration of the monetization site (the compose pair, the nginx face, the site container)",
-    "version": "2.0.167",
+    "version": "2.0.169",
     "date": "2026-11-06",
     "language": "en",
     "sources": [
@@ -45,7 +45,7 @@
   },
   "face": {
     "service": "cobaia-face",
-    "image": "ghcr.io/wenathlan/cobaia:2.0.167",
+    "image": "ghcr.io/wenathlan/cobaia:2.0.169",
     "surface": "the nginx face: the family conf (nginx.conf) mounted over the default site conf of the same cobaia image — resolver 127.0.0.11, the _headers security law, gzip, the hashed-asset cache, the ^~ /api proxy lane, the faun and root-emit seals, the try_files spa rewrite",
     "listen": 8080,
     "seals": [

package/homebrew.rb

@@ -0,0 +1,25 @@
+# wenathlan-cobaia — the homebrew formula of the family (the homebrew channel).
+# The lane stamps the version and sha256 at push time (the sums derive from
+# the release tarball assets the release lane builds, never hardcoded).
+class WenathlanCobaia < Formula
+  desc "The monetization surface — the plans, the support rails and the honest advertisement slots"
+  homepage "https://github.com/wenathlan/devthink"
+  url "https://github.com/wenathlan/devthink/releases/download/v2.0.167/wenathlan-cobaia-2.0.167.tgz"
+  version "2.0.167"
+  # sha256 stamped by the lane from the release asset (never hardcoded)
+  sha256 "0000000000000000000000000000000000000000000000000000000000000000"
+
+  depends_on "node"
+
+  def install
+    libexec.install Dir["*"]
+    (bin/"wenathlan-cobaia").write <<~SH
+      #!/bin/bash
+      exec "#{libexec}/cli.js" "$@"
+    SH
+  end
+
+  test do
+    assert_match "2.0.167", shell_output("#{bin}/wenathlan-cobaia --version")
+  end
+end

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenathlan/cobaia",
-  "version": "2.0.167",
+  "version": "2.0.169",
   "private": false,
   "description": "cobaia is the monetization surface of the wenathlan family: the content site that carries the plans, the support rails and the honest advertisement slots while the family apps stay clean; the name is provisional until the owner picks the official one",
   "license": "GPL-3.0-only",
@@ -14,9 +14,9 @@
     "test": "vitest run"
   },
   "dependencies": {
-    "@ai-sdk/openai": "^4.0.110",
-    "@ai-sdk/openai-compatible": "^3.0.86",
-    "@ai-sdk/provider-utils": "^5.0.75",
+    "@ai-sdk/openai": "^4.0.111",
+    "@ai-sdk/openai-compatible": "^3.0.87",
+    "@ai-sdk/provider-utils": "^5.0.76",
     "@anthropic-ai/sdk": "^1.6.0",
     "@biomejs/biome": "^2.6.6",
     "@capacitor/android": "^8.6.0",
@@ -86,15 +86,15 @@
     "@types/react-dom": "^19.3.0",
     "@types/three": "^0.187.0",
     "@vitejs/plugin-react": "^6.2.1",
-    "@wenathlan/argan": "~2.0.166",
-    "@wenathlan/cadria": "~2.0.166",
-    "@wenathlan/debonair": "~2.0.166",
-    "@wenathlan/devthink": "~2.0.166",
-    "@wenathlan/getry": "~2.0.166",
-    "@wenathlan/saddle": "~2.0.166",
-    "@wenathlan/vault": "~2.0.166",
+    "@wenathlan/argan": "~2.0.168",
+    "@wenathlan/cadria": "~2.0.168",
+    "@wenathlan/debonair": "~2.0.168",
+    "@wenathlan/devthink": "~2.0.168",
+    "@wenathlan/getry": "~2.0.168",
+    "@wenathlan/saddle": "~2.0.168",
+    "@wenathlan/vault": "~2.0.168",
     "add": "^2.0.9",
-    "ai": "^7.0.164",
+    "ai": "^7.0.165",
     "autoprefixer": "^10.6.2",
     "axios": "^1.21.0",
     "baseline-browser-mapping": "^2.11.35",
@@ -105,7 +105,7 @@
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
-    "commander": "^15.0.0",
+    "commander": "^15.1.0",
     "date-fns": "^4.4.0",
     "deepmerge-ts": "^8.0.2",
     "dockerode": "^5.0.1",
@@ -119,17 +119,16 @@
     "express": "^5.3.0",
     "fast-check": "^4.10.2",
     "fast-uri": "^4.2.3",
-    "follow-redirects": "^1.16.2",
+    "follow-redirects": "^1.16.3",
     "framer-motion": "^14.10.1",
     "glob": "^14.0.4",
     "gsap": "^3.15.1",
-    "hono": "^4.13.16",
+    "hono": "^4.13.17",
     "ink": "^8.0.0",
     "input-otp": "^1.5.0",
     "js-yaml": "^5.5.0",
     "jsdom": "^31.0.0",
     "katex": "^0.19.1",
-    "lucide-react": "^1.70.0",
     "minimatch": "^11.0.5",
     "motion": "^14.10.1",
     "mysql2": "^3.24.6",
@@ -144,7 +143,7 @@
     "playwright": "^1.65.0",
     "pnpm": "^12.18.0",
     "postcss": "^8.5.32",
-    "postcss-selector-parser": "^7.1.7",
+    "postcss-selector-parser": "^7.1.8",
     "prettier": "^3.9.10",
     "prisma": "^7.10.1",
     "proxy-addr": "^2.0.8",
@@ -154,7 +153,7 @@
     "react-dom": "^19.3.1",
     "react-hook-form": "^7.91.0",
     "react-markdown": "^10.1.0",
-    "react-resizable-panels": "^4.19.1",
+    "react-resizable-panels": "^4.20.0",
     "react-syntax-highlighter": "^16.1.2",
     "recharts": "^3.10.1",
     "request-ip": "^3.3.0",
@@ -188,9 +187,9 @@
     "zustand": "^5.1.0"
   },
   "devDependencies": {
-    "@ai-sdk/openai": "^4.0.110",
-    "@ai-sdk/openai-compatible": "^3.0.86",
-    "@ai-sdk/provider-utils": "^5.0.75",
+    "@ai-sdk/openai": "^4.0.111",
+    "@ai-sdk/openai-compatible": "^3.0.87",
+    "@ai-sdk/provider-utils": "^5.0.76",
     "@anthropic-ai/sdk": "^1.6.0",
     "@biomejs/biome": "^2.6.6",
     "@capacitor/android": "^8.6.0",
@@ -260,15 +259,15 @@
     "@types/react-dom": "^19.3.0",
     "@types/three": "^0.187.0",
     "@vitejs/plugin-react": "^6.2.1",
-    "@wenathlan/argan": "~2.0.166",
-    "@wenathlan/cadria": "~2.0.166",
-    "@wenathlan/debonair": "~2.0.166",
-    "@wenathlan/devthink": "~2.0.166",
-    "@wenathlan/getry": "~2.0.166",
-    "@wenathlan/saddle": "~2.0.166",
-    "@wenathlan/vault": "~2.0.166",
+    "@wenathlan/argan": "~2.0.168",
+    "@wenathlan/cadria": "~2.0.168",
+    "@wenathlan/debonair": "~2.0.168",
+    "@wenathlan/devthink": "~2.0.168",
+    "@wenathlan/getry": "~2.0.168",
+    "@wenathlan/saddle": "~2.0.168",
+    "@wenathlan/vault": "~2.0.168",
     "add": "^2.0.9",
-    "ai": "^7.0.164",
+    "ai": "^7.0.165",
     "autoprefixer": "^10.6.2",
     "axios": "^1.21.0",
     "baseline-browser-mapping": "^2.11.35",
@@ -279,7 +278,7 @@
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
-    "commander": "^15.0.0",
+    "commander": "^15.1.0",
     "date-fns": "^4.4.0",
     "deepmerge-ts": "^8.0.2",
     "dockerode": "^5.0.1",
@@ -293,17 +292,16 @@
     "express": "^5.3.0",
     "fast-check": "^4.10.2",
     "fast-uri": "^4.2.3",
-    "follow-redirects": "^1.16.2",
+    "follow-redirects": "^1.16.3",
     "framer-motion": "^14.10.1",
     "glob": "^14.0.4",
     "gsap": "^3.15.1",
-    "hono": "^4.13.16",
+    "hono": "^4.13.17",
     "ink": "^8.0.0",
     "input-otp": "^1.5.0",
     "js-yaml": "^5.5.0",
     "jsdom": "^31.0.0",
     "katex": "^0.19.1",
-    "lucide-react": "^1.70.0",
     "minimatch": "^11.0.5",
     "motion": "^14.10.1",
     "mysql2": "^3.24.6",
@@ -318,7 +316,7 @@
     "playwright": "^1.65.0",
     "pnpm": "^12.18.0",
     "postcss": "^8.5.32",
-    "postcss-selector-parser": "^7.1.7",
+    "postcss-selector-parser": "^7.1.8",
     "prettier": "^3.9.10",
     "prisma": "^7.10.1",
     "proxy-addr": "^2.0.8",
@@ -328,7 +326,7 @@
     "react-dom": "^19.3.1",
     "react-hook-form": "^7.91.0",
     "react-markdown": "^10.1.0",
-    "react-resizable-panels": "^4.19.1",
+    "react-resizable-panels": "^4.20.0",
     "react-syntax-highlighter": "^16.1.2",
     "recharts": "^3.10.1",
     "request-ip": "^3.3.0",
@@ -362,9 +360,9 @@
     "zustand": "^5.1.0"
   },
   "overrides": {
-    "@ai-sdk/openai": "^4.0.110",
-    "@ai-sdk/openai-compatible": "^3.0.86",
-    "@ai-sdk/provider-utils": "^5.0.75",
+    "@ai-sdk/openai": "^4.0.111",
+    "@ai-sdk/openai-compatible": "^3.0.87",
+    "@ai-sdk/provider-utils": "^5.0.76",
     "@anthropic-ai/sdk": "^1.6.0",
     "@biomejs/biome": "^2.6.6",
     "@capacitor/android": "^8.6.0",
@@ -434,15 +432,15 @@
     "@types/react-dom": "^19.3.0",
     "@types/three": "^0.187.0",
     "@vitejs/plugin-react": "^6.2.1",
-    "@wenathlan/argan": "~2.0.166",
-    "@wenathlan/cadria": "~2.0.166",
-    "@wenathlan/debonair": "~2.0.166",
-    "@wenathlan/devthink": "~2.0.166",
-    "@wenathlan/getry": "~2.0.166",
-    "@wenathlan/saddle": "~2.0.166",
-    "@wenathlan/vault": "~2.0.166",
+    "@wenathlan/argan": "~2.0.168",
+    "@wenathlan/cadria": "~2.0.168",
+    "@wenathlan/debonair": "~2.0.168",
+    "@wenathlan/devthink": "~2.0.168",
+    "@wenathlan/getry": "~2.0.168",
+    "@wenathlan/saddle": "~2.0.168",
+    "@wenathlan/vault": "~2.0.168",
     "add": "^2.0.9",
-    "ai": "^7.0.164",
+    "ai": "^7.0.165",
     "autoprefixer": "^10.6.2",
     "axios": "^1.21.0",
     "baseline-browser-mapping": "^2.11.35",
@@ -453,7 +451,7 @@
     "class-variance-authority": "^0.7.1",
     "clsx": "^2.1.1",
     "cmdk": "^1.1.1",
-    "commander": "^15.0.0",
+    "commander": "^15.1.0",
     "date-fns": "^4.4.0",
     "deepmerge-ts": "^8.0.2",
     "dockerode": "^5.0.1",
@@ -467,17 +465,16 @@
     "express": "^5.3.0",
     "fast-check": "^4.10.2",
     "fast-uri": "^4.2.3",
-    "follow-redirects": "^1.16.2",
+    "follow-redirects": "^1.16.3",
     "framer-motion": "^14.10.1",
     "glob": "^14.0.4",
     "gsap": "^3.15.1",
-    "hono": "^4.13.16",
+    "hono": "^4.13.17",
     "ink": "^8.0.0",
     "input-otp": "^1.5.0",
     "js-yaml": "^5.5.0",
     "jsdom": "^31.0.0",
     "katex": "^0.19.1",
-    "lucide-react": "^1.70.0",
     "minimatch": "^11.0.5",
     "motion": "^14.10.1",
     "mysql2": "^3.24.6",
@@ -492,7 +489,7 @@
     "playwright": "^1.65.0",
     "pnpm": "^12.18.0",
     "postcss": "^8.5.32",
-    "postcss-selector-parser": "^7.1.7",
+    "postcss-selector-parser": "^7.1.8",
     "prettier": "^3.9.10",
     "prisma": "^7.10.1",
     "proxy-addr": "^2.0.8",
@@ -502,7 +499,7 @@
     "react-dom": "^19.3.1",
     "react-hook-form": "^7.91.0",
     "react-markdown": "^10.1.0",
-    "react-resizable-panels": "^4.19.1",
+    "react-resizable-panels": "^4.20.0",
     "react-syntax-highlighter": "^16.1.2",
     "recharts": "^3.10.1",
     "request-ip": "^3.3.0",
@@ -548,5 +545,6 @@
     "@swc/core",
     "pnpm",
     "protobufjs"
-  ]
+  ],
+  "optionalDependencies": {}
 }

package/pnpm-workspace.yaml

@@ -48,7 +48,6 @@ minimumReleaseAgeExclude:
   - '@opencode-ai/sdk@1.19.5'
   - react-resizable-panels@4.15.1 || 4.15.2 || 4.15.3 || 4.16.0 || 4.16.1 || 4.17.0 || 4.18.0 || 4.18.1 || 4.19.0 || 4.19.1
   - '@types/google.maps@3.66.9 || 3.66.10'
-  - lucide-react@1.64.0 || 1.65.0 || 1.66.0 || 1.67.0 || 1.68.0 || 1.69.0 || 1.70.0
   - playwright@1.65.0
   - playwright-core@1.65.0
   - '@anthropic-ai/sdk@1.6.0'
@@ -56,13 +55,13 @@ minimumReleaseAgeExclude:
   - '@tanstack/query-core@5.106.1 || 5.107.1'
   - '@tanstack/react-query@5.106.1 || 5.107.1'
   - openai@7.52.0 || 7.53.0
-  - '@wenathlan/argan@2.0.155 || 2.0.165 || 2.0.166'
-  - '@wenathlan/cadria@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.8'
-  - '@wenathlan/debonair@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.8'
-  - '@wenathlan/devthink@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.7'
-  - '@wenathlan/getry@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166'
-  - '@wenathlan/saddle@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.8'
-  - '@wenathlan/vault@2.0.152 || 2.0.153 || 2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.8'
+  - '@wenathlan/argan@2.0.155 || 2.0.165 || 2.0.166 || 2.0.167'
+  - '@wenathlan/cadria@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.8 || 2.0.167'
+  - '@wenathlan/debonair@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.8 || 2.0.167'
+  - '@wenathlan/devthink@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.7 || 2.0.167'
+  - '@wenathlan/getry@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.0.167'
+  - '@wenathlan/saddle@2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.8 || 2.0.167'
+  - '@wenathlan/vault@2.0.152 || 2.0.153 || 2.0.154 || 2.0.155 || 2.0.156 || 2.0.165 || 2.0.166 || 2.1.8 || 2.0.167'
   - jsdom@31.0.0
   - pnpm@12.18.0
   - "@pnpm/exe.linux-x64@12.18.0"
@@ -90,10 +89,10 @@ minimumReleaseAgeExclude:
   - tailwindcss@4.3.4 || 4.3.5
   - vitest@5.1.0
   - gsap@3.15.1
-  - '@wenathlan/cobaia@2.0.166'
-  - '@wenathlan/forge@2.0.166'
-  - '@wenathlan/foundry@2.0.166'
-  - '@wenathlan/stealthhead@2.0.166'
+  - '@wenathlan/cobaia@2.0.166 || 2.0.167'
+  - '@wenathlan/forge@2.0.166 || 2.0.167'
+  - '@wenathlan/foundry@2.0.166 || 2.0.167'
+  - '@wenathlan/stealthhead@2.0.166 || 2.0.167'
   - framer-motion@14.10.1
   - motion-dom@14.10.1
   - motion@14.10.1

package/pom.xml

@@ -12,7 +12,7 @@
   <scm><url>https://github.com/wenathlan/devthink</url><connection>scm:git:https://github.com/wenathlan/devthink.git</connection></scm>
   <distributionManagement><repository><id>github</id><name>GitHub Packages</name><url>https://maven.pkg.github.com/wenathlan/devthink</url></repository></distributionManagement>
   <properties>
-    <revision>2.0.167</revision>
+    <revision>2.0.169</revision>
   </properties>
   <build>
     <resources>

package/pyproject.toml

@@ -0,0 +1,23 @@
+# cobaia — the python documentation envelope of the family (the pypi channel).
+# Ships the same envelope the gem face packs: README, docs and tests.
+# Built by the publish lane with `python -m build` (PEP 517); the version
+# rides the COBAIA_VERSION environment the metadata lockstep stamps — the
+# pyproject table cannot fetch an environment the gemspec reads, so the
+# static version below is the fallback the lane sed-stamps before building.
+[build-system]
+requires = ["setuptools>=75"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "wenathlan-cobaia"
+version = "2.0.169"
+authors = [{name = "wenathlan"}]
+description = "The monetization surface — the plans, the support rails and the honest advertisement slots"
+readme = "README.md"
+license = {text = "GPL-3.0-only"}
+requires-python = ">=3.11"
+
+# The envelope carries no python code — the empty package list keeps the
+# build honest while the MANIFEST.in packs the envelope files.
+[tool.setuptools]
+packages = []

package/sandboxmodality.ts

@@ -20,28 +20,24 @@
 // this module never judges engine vocabulary, so the mirror cannot drift
 // when the registry grows). The module never spawns anything and resolves
 // no join: it names the lanes' truth; the platform resolves the sandbox.
-// Zero consumer data, zero imports.
+// Zero consumer data; the one import below is the owner's lane seat
+// factory and nothing else enters.
+//
+// The engine seat (wave W5, the dedup law): the seat resolver, the env
+// reader and the lane lookup no longer live in this file — they ride the
+// saddle factory (laneseating of ../saddle/workloadlaw.ts, the owner's
+// workload law) bound once to this app's own data, re-exported under the
+// same names the surface always spoke. The rows stay mirrored (the drift
+// pin the battery wants), only the engine moved: zero behavior change,
+// zero public-surface change.
+
+import { type AppWorkloadLane, type LaneSeatResult, laneseating } from "../saddle/workloadlaw.ts";
 
 /** one mirrored workload lane row — the same five keys the engine law pins
- * (app, lane, role, demand, today). */
-export type AppWorkloadLane = {
-  /** the official app slug every row carries. */
-  readonly app: string;
-  /** the lane id inside the app (kebab-case, the engine catalog id). */
-  readonly lane: string;
-  /** what the lane does, in one sentence (the engine row's sentence). */
-  readonly role: string;
-  /** the demand the lane puts on the sandbox (gpu, network, isolation,
-   * boot budget — never a modality name: the nuclear law). */
-  readonly demand: {
-    readonly gpu: boolean;
-    readonly network: boolean;
-    readonly isolation: "process" | "namespace" | "vm" | "hardware";
-    readonly bootbudget?: number;
-  };
-  /** where the heavy pass runs today — the honest truth the census reads. */
-  readonly today: "engine-lane" | "app-lane";
-};
+ * (app, lane, role, demand, today); the shape itself rides the owner's
+ * law now (wave W5 — saddle/workloadlaw.ts answers the type once),
+ * re-exported under the historical surface name. */
+export type { AppWorkloadLane };
 
 /** the app slug every mirrored row carries. */
 export const APPSLUG = "cobaia";
@@ -83,10 +79,13 @@ export const SANDBOXLANEENV = "COBAIA_SANDBOX_LANE";
  * modality id the deploy named (validated by the platform's join at
  * dispatch, never judged here). every answer is honest: an absent or
  * blank choice answers the declared default, never a silent switch. */
-export type LaneSeatResult =
-  | { ok: true; seat: "local"; sandboxed: false }
-  | { ok: true; seat: "join"; sandboxed: true; pinned: false }
-  | { ok: true; seat: string; sandboxed: true; pinned: true };
+export type { LaneSeatResult };
+
+/** the lane seat engine of this app — the saddle factory bound once to
+ * this app's own data (the dedup law: the engine lives in the owner, the
+ * app keeps its data), the seats re-exported below under the names the
+ * surface always spoke. */
+const seating = laneseating({ slug: APPSLUG, envvar: SANDBOXLANEENV, lanes: WORKLOADLANES });
 
 /**
  * Resolves the sandbox lane seat of this application — the deploy's
@@ -101,16 +100,7 @@ export type LaneSeatResult =
  * @param choice the deploy's choice (the env value or the config row).
  * @returns the seat declaration.
  */
-export function lanesandbox(choice: string | undefined): LaneSeatResult {
-  const name = choice?.trim() ?? "";
-  if (name.length === 0 || name === "local") {
-    return { ok: true, seat: "local", sandboxed: false };
-  }
-  if (name === "join") {
-    return { ok: true, seat: "join", sandboxed: true, pinned: false };
-  }
-  return { ok: true, seat: name, sandboxed: true, pinned: true };
-}
+export const lanesandbox = seating.lanesandbox;
 
 /**
  * Reads the lane seat off one environment lookup — the deploy pins
@@ -121,9 +111,7 @@ export function lanesandbox(choice: string | undefined): LaneSeatResult {
  * @param lookup the environment lookup function (the env carrier).
  * @returns the seat declaration.
  */
-export function lanesandboxfromenv(lookup: (key: string) => string | undefined): LaneSeatResult {
-  return lanesandbox(lookup(SANDBOXLANEENV));
-}
+export const lanesandboxfromenv = seating.lanesandboxfromenv;
 
 /**
  * Answers one mirrored lane row by lane id — the lookup the app surfaces
@@ -133,6 +121,4 @@ export function lanesandboxfromenv(lookup: (key: string) => string | undefined):
  * @returns the mirrored row, or undefined when the app carries no such
  * lane.
  */
-export function laneof(lane: string): AppWorkloadLane | undefined {
-  return WORKLOADLANES.find((row) => row.lane === lane);
-}
+export const laneof = seating.laneof;

package/sol/Sol.tsx

@@ -29,7 +29,7 @@ import OnboardingAnchor from "./onboarding/onboarding";
 import LegalAnchor from "./legal/legal";
 import NotFoundAnchor from "./notfound/notfound";
 import PricingAnchor from "./pricing/pricing";
-import { EntryGate } from "./wingets";
+import { EntryGate } from "../wingets";
 import { Shell } from "./shell/Shell";
 import SupportAnchor from "./support/support";
 

package/sol/apps/apps.tsx

@@ -17,7 +17,7 @@ import { useContent } from "../../content.ts";
 import { familyurl } from "../../familyurl";
 import { label, labelfill } from "../../labels";
 import { roster } from "../../monetization.ts";
-import { AdSlot } from "../wingets";
+import { AdSlot } from "../../wingets";
 
 export function Apps() {
   useContent();

package/sol/blog/blog.tsx

@@ -17,7 +17,7 @@ import type { CSSProperties } from "react";
 import { useContent } from "../../content.ts";
 import { label, labelfill } from "../../labels";
 import { type blogpost, postindex, postwords } from "../../monetization";
-import { AdSlot } from "../wingets";
+import { AdSlot } from "../../wingets";
 
 /** the meta line of one post: the date and the honest word count. */
 function PostMeta({ post }: { post: blogpost }) {

package/sol/home/home.tsx

@@ -22,7 +22,7 @@ import { useContent } from "../../content.ts";
 import { familyurl } from "../../familyurl";
 import { type LabelKey, label, labelfill } from "../../labels";
 import { roster } from "../../monetization.ts";
-import { AdSlot, BrandMark, EntryGate } from "../wingets";
+import { AdSlot, BrandMark, EntryGate } from "../../wingets";
 
 /** the featured deploy units of the landing preview (the full directory
  * lives on /apps): the OS, the engine, the store and one studio — read

package/sol/intro/intro.tsx

@@ -31,7 +31,7 @@ import { useCallback, useEffect, useState } from "react";
 import { Link } from "wouter";
 import { label } from "../../labels";
 import { markOnboardingStage } from "../../onboardingstate.ts";
-import { BrandMark, IntroFooter, IntroPlans, IntroSplash } from "../wingets";
+import { BrandMark, IntroFooter, IntroPlans, IntroSplash } from "../../wingets";
 
 /** the lifecycle of the opening act: resolving (the motion preference
  * decides) → playing (the akash floor over the landing) → done (the