@publish.os/nextjs 0.0.1-alpha.90 → 0.0.1-alpha.91

package/dist/{chunk-H6XILMZX.js → chunk-OXOFRXEI.js}

@@ -1,52 +1,70 @@
+import {
+  assertFrameworkArchiveIdentity,
+  assertFrameworkSelection,
+  readCheckoutTypeScriptConfig
+} from "./chunk-NNBJZPFM.js";
 import {
   ROOT_CONTENT_GROUP_KEY,
+  admitThemeImageResource,
   assertSourceDependency,
-  cssImports,
-  decodeCssPath,
   faviconsAndLogosManifestModule,
   groupedMdxExports,
   mdxComponentExportName,
+  mdxIconPackage,
+  mediaAssetBudgets,
   mediaManifestModule,
   namedValueExports,
+  nextjs_runtime_surface_default,
   normalizeUrlPath,
+  readMdxIconImports,
   replacedMdxSourceFiles,
-  writeFaviconsAndLogosOutputs,
+  supportedRuntimeComponentAliases,
   writeMediaOutputs
-} from "./chunk-535TM4A5.js";
-import {
-  assertFrameworkArchiveIdentity,
-  assertFrameworkSelection,
-  readCheckoutTypeScriptConfig
-} from "./chunk-DLDFHU7Y.js";
+} from "./chunk-UYGCOWRF.js";
 import {
-  ASSET_PREFIX,
   FRAMEWORK_PREFIX,
   FRAMEWORK_PROXY_MATCHER,
   IMAGE_OPTIMIZER_PATH,
+  INTERNAL_PREFIX,
   NEXT_IMAGE_OPTIMIZER_PATH,
   OG_SERVICE_PREFIX,
-  PUBLIC_ASSET_DIRECTORY,
   PUBLIC_FONT_DIRECTORY,
-  PUBLIC_PAGEFIND_DIRECTORY,
+  PUBLIC_INTERNAL_DIRECTORY,
+  PUBLIC_SEARCH_DIRECTORY,
+  SOURCE_ASSET_PREFIX,
+  isFrameworkNamespacePath
+} from "./chunk-EFO6AWXN.js";
+import {
+  cssImports,
+  decodeCssPath,
+  ignoredMediaDocumentWarning,
+  ignoredMediaPathWarning,
+  isHiddenMediaPath,
+  mediaFileTooLarge,
+  readBoundedMediaFile,
+  themeResourceByteLimit
+} from "./chunk-5KAD7W53.js";
+import {
   isApprovedPublishOsPath,
   isDescendant,
   isExcludedSourcePath,
-  isFrameworkNamespacePath,
   isReservedFrameworkPath,
   isSameOrDescendant
-} from "./chunk-YLTOLYWM.js";
+} from "./chunk-WL75GQ5M.js";
 import {
-  AppError,
   readInstalledFramework,
   readInstalledFrameworkLocation
-} from "./chunk-WDY4IK6Z.js";
+} from "./chunk-5J3YUNRY.js";
+import {
+  AppError
+} from "./chunk-22RSSUNV.js";
 
 // src/lib/compiler/nextjs/compose.ts
 import { createHash as createHash4 } from "crypto";
 import { existsSync } from "fs";
 import {
   cp,
-  lstat as lstat2,
+  lstat as lstat3,
   mkdir as mkdir6,
   mkdtemp as mkdtemp2,
   readdir as readdir3,
@@ -69,6 +87,84 @@ import {
 import { googleFontsMetadata as googleFontsMetadata2 } from "next/dist/compiled/@next/font/dist/google/google-fonts-metadata.js";
 import ts3 from "typescript";
 
+// src/lib/assets/map-source-asset-css.ts
+import postcss from "postcss";
+import valueParser from "postcss-value-parser";
+
+// src/lib/assets/map-source-asset-url.ts
+var SOURCE_ASSET_PATH = "/assets/";
+function hasUnsafeControlCharacters(value) {
+  for (let character of value) {
+    let code = character.codePointAt(0) ?? 0;
+    if (code <= 31 || code >= 127 && code <= 159) return !0;
+  }
+  return !1;
+}
+function assertSafeAssetPath(path) {
+  if (path.includes("\\") || hasUnsafeControlCharacters(path))
+    throw new TypeError("Local asset URLs must use safe path segments.");
+  for (let segment of path.split("/")) {
+    if (!segment)
+      throw new TypeError("Local asset URLs must use safe path segments.");
+    let decoded;
+    try {
+      decoded = decodeURIComponent(segment);
+    } catch {
+      throw new TypeError("Local asset URLs must use valid URL encoding.");
+    }
+    if (decoded === "." || decoded === ".." || decoded.includes("/") || decoded.includes("\\") || hasUnsafeControlCharacters(decoded))
+      throw new TypeError("Local asset URLs must use safe path segments.");
+  }
+}
+function mapSourceAssetUrl(value) {
+  if (typeof value != "string" || !value.startsWith(SOURCE_ASSET_PATH))
+    return value;
+  let suffixIndex = value.search(/[?#]/u), pathname = suffixIndex < 0 ? value : value.slice(0, suffixIndex), suffix = suffixIndex < 0 ? "" : value.slice(suffixIndex), path = pathname.slice(SOURCE_ASSET_PATH.length);
+  return assertSafeAssetPath(path), `${SOURCE_ASSET_PREFIX}/${path}${suffix}`;
+}
+
+// src/lib/assets/map-source-asset-css.ts
+var IMAGE_SET_FUNCTIONS = /* @__PURE__ */ new Set(["image-set", "-webkit-image-set"]);
+function mapCssUrls(value) {
+  let parsed = valueParser(value);
+  return parsed.walk((node) => {
+    if (node.type !== "function") return;
+    let name = node.value.toLowerCase();
+    if (name === "url") {
+      let url = node.nodes.find(
+        (part) => part.type === "word" || part.type === "string"
+      );
+      if (url) {
+        let mapped = mapSourceAssetUrl(url.value.trim());
+        typeof mapped == "string" && (url.value = mapped);
+      }
+      return !1;
+    }
+    if (IMAGE_SET_FUNCTIONS.has(name))
+      for (let candidate of node.nodes) {
+        if (candidate.type !== "string") continue;
+        let mapped = mapSourceAssetUrl(candidate.value.trim());
+        typeof mapped == "string" && (candidate.value = mapped);
+      }
+  }), parsed.toString();
+}
+function mapSourceAssetCss(css, sourcePath) {
+  let root = postcss.parse(css, { from: sourcePath });
+  return root.walkDecls((declaration) => {
+    declaration.value = mapCssUrls(declaration.value);
+  }), root.walkAtRules((atRule) => {
+    if (atRule.name.toLowerCase() !== "import") return;
+    let parsed = valueParser(atRule.params), source = parsed.nodes.find(
+      (node) => node.type === "word" || node.type === "string"
+    );
+    if (source) {
+      let mapped = mapSourceAssetUrl(source.value);
+      typeof mapped == "string" && (source.value = mapped);
+    }
+    atRule.params = mapCssUrls(parsed.toString());
+  }), root.toString();
+}
+
 // src/lib/compiler/deployment/deployment-evidence.ts
 import { mkdir, writeFile } from "fs/promises";
 import { join } from "path";
@@ -713,6 +809,58 @@ function tabHandler(node, context) {
   ] : children;
 }
 
+// src/lib/compiler/markdown/handlers/html.ts
+function inlineHtmlHandler(node, context) {
+  handlerDiagnostic(node, context);
+  let children = context.transformChildrenAsPhrasing(node, context);
+  switch (normalizeComponentName(node.name)) {
+    case "strong":
+    case "b":
+      return [{ type: "strong", children }];
+    case "em":
+    case "i":
+      return [{ type: "emphasis", children }];
+    case "code":
+      return [{ type: "inlineCode", value: extractText(children) }];
+    case "br":
+      return [{ type: "break" }];
+    default:
+      return children;
+  }
+}
+function blockquoteHtmlHandler(node, context) {
+  return handlerDiagnostic(node, context), [
+    {
+      type: "blockquote",
+      children: node.type === "mdxJsxTextElement" ? paragraphBlock(context.transformChildrenAsPhrasing(node, context)) : context.transformChildrenAsBlocks(node, context)
+    }
+  ];
+}
+function paragraphHtmlHandler(node, context) {
+  return handlerDiagnostic(node, context), paragraphBlock(context.transformChildrenAsPhrasing(node, context));
+}
+function preformattedText(node, context) {
+  if (node.type === "mdxTextExpression" || node.type === "mdxFlowExpression") {
+    let statement = node.data?.estree?.body?.[0], expression = statement?.type === "ExpressionStatement" ? statement.expression : void 0;
+    return expression?.type === "Literal" && typeof expression.value == "string" ? expression.value : expression?.type === "TemplateLiteral" && expression.expressions?.length === 0 ? expression.quasis?.[0]?.value.cooked ?? "" : (addDiagnostic(context, {
+      code: "mdx-expression-dropped",
+      message: "Dropped non-literal MDX expression from preformatted Markdown output."
+    }), "");
+  }
+  return typeof node.value == "string" ? node.value : (node.children ?? []).map((child, index) => (index > 0 && child.type === "paragraph" ? `
+
+` : "") + preformattedText(child, context)).join("");
+}
+function preHtmlHandler(node, context) {
+  handlerDiagnostic(node, context);
+  let code = node.children?.find((child) => child.name === "code");
+  return [
+    { type: "code", lang: code ? firstAttribute(code, ["className", "class"], context)?.match(
+      /(?:^|\s)language-([^\s]+)/
+    )?.[1] : void 0, value: preformattedText(node, context) }
+  ];
+}
+
 // src/lib/compiler/markdown/handlers/inline.ts
 function iconHandler(node, context) {
   handlerDiagnostic(node, context);
@@ -764,18 +912,33 @@ function imageHandler(node, context, kind) {
   let caption = firstAttribute(node, ["caption"], context), image = {
     type: "image",
     url: context.resolveMediaUrl(src),
-    alt: firstAttribute(node, ["alt", "title", "aria-label"], context) ?? "",
+    alt: getAttribute(node, "alt", context) ?? firstAttribute(node, ["title", "aria-label"], context) ?? "",
     title: firstAttribute(node, ["title"], context)
   };
-  return kind === "inline" ? [image] : [
+  return kind === "inline" ? [image, ...caption ? [text(` ${caption}`)] : []] : [
     ...paragraphBlock([image]),
-    ...caption ? paragraphBlock([{ type: "emphasis", children: [text(caption)] }]) : []
+    ...caption ? paragraphBlock([text(caption)]) : []
   ];
 }
 function figureCaptionHandler(node, context) {
+  return handlerDiagnostic(node, context), node.type === "mdxJsxTextElement" ? paragraphBlock(context.transformChildrenAsPhrasing(node, context)) : context.transformChildrenAsBlocks(node, context);
+}
+function isCaption(node) {
+  return ["figcaption", "figurecaption", "figure.caption"].includes(
+    normalizeComponentName(node.name)
+  );
+}
+function hasDirectCaption(node) {
+  return (node.children ?? []).some(
+    (child) => isCaption(child) || (child.type === "paragraph" || child.type.startsWith("mdxJsx") && child.name === null) && hasDirectCaption(child)
+  );
+}
+function figureHandler(node, context) {
   handlerDiagnostic(node, context);
-  let children = asPhrasing(context.transformChildrenAsBlocks(node, context));
-  return children.length > 0 ? [{ type: "paragraph", children: [{ type: "emphasis", children }] }] : [];
+  let children = context.transformChildrenAsBlocks(node, context);
+  if (hasDirectCaption(node)) return children;
+  let caption = firstAttribute(node, ["caption"], context);
+  return [...children, ...caption ? paragraphBlock([text(caption)]) : []];
 }
 function videoHandler(node, context, kind) {
   let src = firstAttribute(node, ["src", "url", "href"], context);
@@ -785,8 +948,11 @@ function videoHandler(node, context, kind) {
     type: "link",
     url: context.resolveMediaUrl(src),
     children: [text(label)]
-  }, children = [text("Video: "), link];
-  return kind === "inline" ? children : paragraphBlock(children);
+  }, children = [text("Video: "), link], caption = firstAttribute(node, ["caption"], context);
+  return kind === "inline" ? [...children, ...caption ? [text(` ${caption}`)] : []] : [
+    ...paragraphBlock(children),
+    ...caption ? paragraphBlock([text(caption)]) : []
+  ];
 }
 
 // src/lib/compiler/markdown/handlers/passthrough.ts
@@ -814,9 +980,29 @@ var defaultHandlers = [
     transform: calloutHandler
   },
   {
-    componentNames: ["codeblock", "code"],
+    componentNames: ["codeblock"],
     transform: codeBlockHandler
   },
+  {
+    componentNames: ["strong", "b", "em", "i", "code", "span", "br"],
+    transform: inlineHtmlHandler
+  },
+  {
+    componentNames: ["pre"],
+    transform: preHtmlHandler
+  },
+  {
+    componentNames: ["blockquote"],
+    transform: blockquoteHtmlHandler
+  },
+  {
+    componentNames: ["p"],
+    transform: paragraphHtmlHandler
+  },
+  {
+    componentNames: ["div"],
+    transform: passthroughBlockHandler
+  },
   {
     componentNames: [
       "codetab",
@@ -830,10 +1016,10 @@ var defaultHandlers = [
   },
   {
     componentNames: ["figure"],
-    transform: passthroughBlockHandler
+    transform: figureHandler
   },
   {
-    componentNames: ["figcaption", "figurecaption"],
+    componentNames: ["figcaption", "figurecaption", "figure.caption"],
     transform: figureCaptionHandler
   },
   {
@@ -898,6 +1084,12 @@ function transformChildrenAsPhrasing(node, context) {
   );
 }
 function transformMdxElement(node, context, kind) {
+  if (node.name === null)
+    return kind === "block" ? transformChildrenAsBlocks(node, context) : transformChildrenAsPhrasing(node, context);
+  if (node.name && context.importedIcons.has(node.name)) {
+    let label = firstAttribute(node, ["aria-hidden"], context) === "true" ? "" : firstAttribute(node, ["aria-label", "title"], context), children2 = label ? [{ type: "text", value: label }] : [];
+    return kind === "block" ? paragraphBlock(children2) : children2;
+  }
   let componentName = normalizeComponentName(node.name), handler = handlersByName.get(componentName);
   if (handler) {
     let result = handler.transform(node, context, kind);
@@ -957,9 +1149,18 @@ function transformInlineNode(node, context) {
     case "link":
       return [{
         ...node,
+        url: context.resolveMediaUrl(node.url),
         children: transformChildrenAsPhrasing(node, context)
       }];
     case "image":
+      return [
+        {
+          ...node,
+          url: context.resolveMediaUrl(node.url)
+        }
+      ];
+    case "linkReference":
+    case "imageReference":
       return [node];
     case "html":
       return [node];
@@ -987,6 +1188,20 @@ function transformTableRow(node, context) {
     )
   };
 }
+function isFigureBlock(node) {
+  if (node.type !== "mdxJsxTextElement" && node.type !== "mdxJsxFlowElement")
+    return !1;
+  if (node.name === null) return (node.children ?? []).some(isFigureBlock);
+  let name = normalizeComponentName(node.name);
+  return [
+    "figure",
+    "figcaption",
+    "figurecaption",
+    "figure.caption",
+    "pre",
+    "blockquote"
+  ].includes(name) || ["image", "img", "video", "videoiframe", "iframe"].includes(name) && (node.attributes ?? []).some((attribute) => attribute.name === "caption");
+}
 function transformBlockNode(node, context) {
   if (node.type === "mdxjsEsm")
     return addDiagnostic(context, {
@@ -1002,6 +1217,20 @@ function transformBlockNode(node, context) {
     return transformMdxElement(node, context, "block");
   switch (node.type) {
     case "paragraph": {
+      if ((node.children ?? []).some(isFigureBlock)) {
+        let blocks = [], pending = [], flushPhrasing = () => {
+          let children = transformChildrenAsPhrasing(
+            { type: "paragraph", children: pending },
+            context
+          );
+          children.some(
+            (child) => child.type !== "text" || child.value.trim()
+          ) && blocks.push(...paragraphBlock(children)), pending = [];
+        };
+        for (let child of node.children ?? [])
+          isFigureBlock(child) ? (flushPhrasing(), blocks.push(...transformBlockNode(child, context))) : pending.push(child);
+        return flushPhrasing(), blocks;
+      }
       let paragraphNode = paragraph(
         transformChildrenAsPhrasing(node, context)
       );
@@ -1047,18 +1276,25 @@ function transformBlockNode(node, context) {
     case "thematicBreak":
     case "html":
     case "yaml":
-    case "definition":
     case "footnoteDefinition":
       return [node];
+    case "definition":
+      return [
+        {
+          ...node,
+          url: context.resolveMediaUrl(node.url)
+        }
+      ];
     default:
       return [];
   }
 }
 function convertMdxToMarkdown(options) {
-  let resolveMediaUrl = options.resolveMediaUrl ?? ((url) => options.mediaAssets?.[url]?.outputPath ?? url), context = {
+  let context = {
+    importedIcons: /* @__PURE__ */ new Set(),
     collectDiagnostics: options.collectDiagnostics ?? !0,
     diagnostics: [],
-    resolveMediaUrl,
+    resolveMediaUrl: (url) => String(mapSourceAssetUrl(url)),
     transformChildrenAsBlocks,
     transformChildrenAsPhrasing,
     unknownComponentMode: options.unknownComponentMode ?? "children"
@@ -1069,6 +1305,13 @@ function convertMdxToMarkdown(options) {
       markdown: stripTopLevelImports(options.source),
       text: ""
     };
+  for (let node of parsed.children)
+    if (node.type === "mdxjsEsm") {
+      for (let statement of node.data?.estree?.body ?? [])
+        if (!(statement.type !== "ImportDeclaration" || statement.source.value !== mdxIconPackage))
+          for (let specifier of statement.specifiers)
+            specifier.type === "ImportSpecifier" && context.importedIcons.add(specifier.local.name);
+    }
   let transformed = {
     type: "root",
     children: parsed.children.flatMap(
@@ -1082,6 +1325,20 @@ function convertMdxToMarkdown(options) {
   };
 }
 
+// src/lib/compiler/markdown/page-artifact-conversions.ts
+function convertPublishedPageBodies(manifest) {
+  return new Map(
+    manifest.pages.filter((page) => page.status === "published").map((page) => [
+      page.path,
+      convertMdxToMarkdown({
+        collectDiagnostics: !1,
+        source: page.body,
+        unknownComponentMode: "children"
+      })
+    ])
+  );
+}
+
 // src/lib/compiler/nextjs/checkout-runtime.ts
 import {
   mkdir as mkdir3,
@@ -1096,8 +1353,11 @@ import { basename, dirname as dirname2, join as join4, relative } from "path";
 import ts from "typescript";
 
 // src/lib/compiler/nextjs/framework-next-config.ts
-function renderFrameworkNextConfig(template) {
-  return template.replaceAll("__PUBLISHOS_ASSET_PREFIX__", ASSET_PREFIX).replaceAll("__PUBLISHOS_IMAGE_PATH__", IMAGE_OPTIMIZER_PATH).replaceAll("__PUBLISHOS_NEXT_IMAGE_PATH__", NEXT_IMAGE_OPTIMIZER_PATH);
+function renderFrameworkNextConfig(template, componentAliases = {}) {
+  return template.replaceAll("__PUBLISHOS_INTERNAL_PREFIX__", INTERNAL_PREFIX).replaceAll("__PUBLISHOS_SOURCE_ASSET_PREFIX__", SOURCE_ASSET_PREFIX).replaceAll("__PUBLISHOS_IMAGE_PATH__", IMAGE_OPTIMIZER_PATH).replaceAll("__PUBLISHOS_NEXT_IMAGE_PATH__", NEXT_IMAGE_OPTIMIZER_PATH).replaceAll(
+    "__PUBLISHOS_COMPONENT_ALIASES__",
+    JSON.stringify(componentAliases)
+  );
 }
 
 // src/lib/compiler/nextjs/checkout-runtime.ts
@@ -1235,6 +1495,7 @@ export default {
     ...base.turbopack,
     root,
     resolveAlias: {
+      ...base.turbopack?.resolveAlias,
       ...aliases,
       "@app/*": "./app/*",
       "@source/*": "./source/*",
@@ -1276,7 +1537,7 @@ function googleFontOutput({
     () => `font-family: '${family}';`
   );
   for (let file of assets.files)
-    css = css.split(file.url).join(`${ASSET_PREFIX}/_publishos/fonts/${file.sha256}.${file.format}`);
+    css = css.split(file.url).join(`${INTERNAL_PREFIX}/fonts/${file.sha256}.${file.format}`);
   let metrics = font.adjustFontFallback ? getFallbackFontOverrideMetrics(font.family) : void 0;
   metrics && (css += `
 @font-face { font-family: '${family} Fallback'; src: local('${metrics.fallbackFont}'); ascent-override: ${metrics.ascentOverride}; descent-override: ${metrics.descentOverride}; line-gap-override: ${metrics.lineGapOverride}; size-adjust: ${metrics.sizeAdjust}; }
@@ -1298,7 +1559,7 @@ function googleFontOutput({
     else if (font.preload && subset && font.subsets.includes(subset)) {
       let url = match[2]?.trim().replace(/^["']|["']$/g, ""), file = assets.files.find((entry) => entry.url === url);
       file && preloads.add(
-        `  preload("${ASSET_PREFIX}/_publishos/fonts/${file.sha256}.${file.format}", { as: "font", type: "font/${file.format}", crossOrigin: "anonymous" });`
+        `  preload("${INTERNAL_PREFIX}/fonts/${file.sha256}.${file.format}", { as: "font", type: "font/${file.format}", crossOrigin: "anonymous" });`
       );
     }
   return {
@@ -1315,6 +1576,183 @@ export const ${exportName}: { className: string; variable: string; style: { font
   };
 }
 
+// src/lib/compiler/nextjs/mdx-icon-components.ts
+function mdxIconComponentsModule(pages) {
+  let names = /* @__PURE__ */ new Map(), entries = [];
+  for (let page of pages) {
+    let bindings = readMdxIconImports(page.body);
+    if (bindings.length === 0) continue;
+    let properties = bindings.map(({ imported, local }) => {
+      let identifier = names.get(imported);
+      return identifier || (identifier = `ImportedIcon${names.size}`, names.set(imported, identifier)), `[${JSON.stringify(local)}]: ${identifier}`;
+    });
+    entries.push(`${JSON.stringify(page.path)}: { ${properties.join(", ")} }`);
+  }
+  return [
+    'import type { MDXComponents } from "@publish.os/nextjs/mdx/mdx";',
+    ...names.size ? [
+      `import { ${[...names].map(([name, identifier]) => `${name} as ${identifier}`).join(", ")} } from ${JSON.stringify(mdxIconPackage)};`
+    ] : [],
+    `export const importedMdxComponents: Record<string, MDXComponents> = {
+${entries.join(`,
+`)}
+};
+`
+  ].join(`
+`);
+}
+
+// src/lib/runtime/metadata/canonical-url.ts
+function canonicalUrl(manifest, path, group) {
+  let origin = (group && manifest.groups[group]?.origin) ?? manifest.site.origin;
+  if (!origin) return path;
+  try {
+    return new URL(path, `${origin}/`).toString();
+  } catch {
+    return path;
+  }
+}
+function navigationUrl(manifest, path, group) {
+  let origin = manifest.groups[group]?.origin ?? manifest.site.origin;
+  return !origin || origin === manifest.site.origin ? path : canonicalUrl(manifest, path, group);
+}
+
+// src/route-not-found.ts
+var UNSAFE_PATH_CHARACTERS = /[\p{Cc}\p{Cs}\u200b-\u200f\u2028-\u202f\u2060-\u206f\ufeff]/u;
+var DEFAULT_MARKDOWN = serializeNotFoundMarkdown({
+  recommendations: [],
+  indexes: []
+});
+function publicRecoveryHref(href) {
+  if (href.includes("\\") || UNSAFE_PATH_CHARACTERS.test(href))
+    return;
+  let relative5 = href.startsWith("/") && !href.startsWith("//");
+  try {
+    let url = new URL(
+      href,
+      relative5 ? "https://publishos.invalid" : void 0
+    );
+    return !["http:", "https:"].includes(url.protocol) || url.username || url.password ? void 0 : relative5 ? `${url.pathname}${url.search}${url.hash}` : url.href;
+  } catch {
+    return;
+  }
+}
+function markdownText(value) {
+  return value.replace(/\s+/gu, " ").replace(/[\p{Cc}\p{Cs}]/gu, "").trim().replace(/[\\`*_[\]{}<>|~]/gu, "\\$&");
+}
+function markdownLink(link) {
+  let title = markdownText(link.title), href = publicRecoveryHref(link.href)?.replace(
+    /[()`<>]/gu,
+    (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`
+  );
+  if (!title || !href) return;
+  let description = link.description ? markdownText(link.description) : void 0;
+  return `- [${title}](${href})${description ? `: ${description}` : ""}`;
+}
+function serializeNotFoundMarkdown({
+  recommendations,
+  indexes
+}) {
+  let sections = [
+    { title: "Recommendations", links: recommendations },
+    { title: "For crawlers and agents", links: indexes }
+  ], lines = [
+    "# 404 \u2014 Not Found",
+    "",
+    "This page does not exist. Please check the URL and try again.",
+    ""
+  ];
+  for (let section of sections) {
+    let links = section.links.map(markdownLink).filter((link) => link !== void 0);
+    links.length && lines.push(`## ${section.title}`, "", ...links, "");
+  }
+  return lines.join(`
+`);
+}
+
+// src/lib/compiler/nextjs/not-found-plan.ts
+var belongsToPath = (path, base) => base === "/" || path === base || path.startsWith(`${base}/`), outputDirectory = (path) => path.slice(0, path.lastIndexOf("/")) || "/";
+function orderedPagePaths(tree) {
+  return tree.flatMap(
+    (node) => node.type === "page" ? [node.path] : "children" in node ? orderedPagePaths(node.children) : []
+  );
+}
+function createNotFoundScopes({
+  manifest,
+  outputs,
+  rootOwnedGroups,
+  markdownPaths = /* @__PURE__ */ new Set()
+}) {
+  return [
+    void 0,
+    ...Object.values(manifest.groups).filter(
+      (group) => group.key !== ROOT_CONTENT_GROUP_KEY
+    )
+  ].map((group) => {
+    let path = group?.path ?? "/", origin = group?.origin ?? manifest.site.origin, rootOwned = !group || (rootOwnedGroups ? rootOwnedGroups.has(group.key) : origin === manifest.site.origin), groupKeys = new Set(group?.ancestry ?? []);
+    group && groupKeys.add(group.key);
+    let url = (route, key = group?.key) => canonicalUrl(manifest, route, key), recommendations = [];
+    group && recommendations.push({
+      title: `Back to ${group.title}`,
+      href: url(group.path)
+    });
+    let visible = manifest.pages.filter(
+      (page) => page.status === "published" && page.meta.hidden !== !0 && (manifest.groups[page.group]?.origin ?? manifest.site.origin) === origin && belongsToPath(page.path, path) && (!group || page.group === group.key || manifest.groups[page.group]?.ancestry?.includes(group.key))
+    ), byPath = new Map(visible.map((page) => [page.path, page])), first = orderedPagePaths(group?.tree ?? manifest.tree).map((entry) => byPath.get(entry)).find(Boolean) ?? visible[0];
+    first && first.path !== path && recommendations.push({
+      title: first.title,
+      href: url(first.path, first.group)
+    }), rootOwned && !recommendations.some((link) => link.href === url("/")) && recommendations.push({ title: "Go home", href: url("/") });
+    let available = outputs.filter((output) => {
+      let scopeGroup = output.scopeGroup ?? output.group;
+      return (output.group && manifest.groups[output.group]?.origin || manifest.site.origin) !== origin || !output.group && !rootOwned || scopeGroup && group && output.scope !== "site" && !groupKeys.has(scopeGroup) || scopeGroup && !group && output.scope !== "site" || output.scope === "self" && scopeGroup !== group?.key ? !1 : belongsToPath(path, outputDirectory(output.path));
+    }), choose = (kind) => available.filter((output) => output.kind === kind).sort(
+      (a, b) => +!!a.group - +!!b.group || +(b.sitemaps !== void 0) - +(a.sitemaps !== void 0) || (manifest.groups[b.group ?? ""]?.path.length ?? 0) - (manifest.groups[a.group ?? ""]?.path.length ?? 0)
+    )[0], sitemap = choose("sitemap") ?? choose("sitemap-md"), llms = choose("llms"), full = choose("llms-full"), nearestLlms = available.filter((output) => output.kind === "llms").sort(
+      (a, b) => outputDirectory(b.path).length - outputDirectory(a.path).length || (manifest.groups[b.group ?? ""]?.path.length ?? 0) - (manifest.groups[a.group ?? ""]?.path.length ?? 0)
+    )[0], indexes = [
+      sitemap && {
+        title: sitemap.kind === "sitemap-md" ? "Markdown sitemap" : "Sitemap",
+        href: url(sitemap.path, sitemap.group),
+        kind: sitemap.kind
+      },
+      llms && {
+        title: "llms.txt",
+        href: url(llms.path, llms.group),
+        kind: "llms"
+      },
+      full && {
+        title: "llms-full.txt",
+        href: url(full.path, full.group),
+        kind: "llms-full"
+      }
+    ].filter(
+      (link) => !!link
+    ), agentLink = (link) => {
+      let page = visible.find(
+        (candidate) => url(candidate.path, candidate.group) === link.href
+      ), markdownPath = page ? `${page.path}.md` : void 0;
+      return markdownPath && markdownPaths.has(markdownPath) ? { ...link, href: url(markdownPath, page?.group) } : link;
+    }, markdown = serializeNotFoundMarkdown({
+      recommendations: recommendations.map(agentLink),
+      indexes
+    });
+    return {
+      id: group ? `g-${Buffer.from(group.key).toString("base64url")}` : "root",
+      path,
+      ...group ? { group: group.key } : {},
+      ...origin ? { origin } : {},
+      htmlPath: "/_not-found",
+      recommendations,
+      indexes,
+      ...nearestLlms ? { describedBy: url(nearestLlms.path, nearestLlms.group) } : {},
+      markdown
+    };
+  }).sort(
+    (a, b) => b.path.length - a.path.length || +!!b.group - +!!a.group
+  );
+}
+
 // src/lib/compiler/nextjs/route-layout-planner.ts
 import { stat as stat2 } from "fs/promises";
 import { resolve } from "path";
@@ -1442,11 +1880,12 @@ function fontReadErrorDetails(error) {
 async function validateVariableFontFile({
   configuredPath,
   sourcePath,
-  weight
+  weight,
+  contents
 }) {
   let font;
   try {
-    font = await fontkit.open(sourcePath);
+    font = contents ? fontkit.create(contents) : await fontkit.open(sourcePath);
   } catch (error) {
     let details = fontReadErrorDetails(error);
     throw details.reasonCode === "ENOENT" ? new AppError({
@@ -1762,7 +2201,7 @@ async function normalizedLogoDataUri(options) {
   };
 }
 async function logoDataUri(options) {
-  let output = options.faviconsAndLogos.outputs.find(
+  let output = options.media.outputs.find(
     (candidate) => candidate.outputPath === options.entry.outputPath
   );
   if (output) {
@@ -1788,7 +2227,7 @@ async function resolveOgLogo(options) {
   if (!selected || !options.faviconsAndLogos) return;
   let logoData = await logoDataUri({
     entry: selected.entry,
-    faviconsAndLogos: options.faviconsAndLogos
+    media: options.media
   });
   return {
     dataUri: logoData?.dataUri,
@@ -1871,8 +2310,7 @@ async function resolveOgFonts({
             path: file.path,
             sourceFile: "publish.os.config.json"
           });
-          let data = await readFile2(file.path).catch(() => {
-          });
+          let data = file.data;
           if (!data || data.byteLength > MAX_OG_FONT_BYTES)
             return;
           let probe = fontProbe(data);
@@ -1911,9 +2349,6 @@ function fontProbe(data) {
     return;
   }
 }
-function isRemoteImageAllowed(url, sources) {
-  return sources.some((source) => source.protocol !== "https" || url.protocol !== "https:" || source.hostname !== url.hostname ? !1 : source.pathname ? url.pathname.startsWith(source.pathname) : !0);
-}
 function imageSource(image) {
   if (image)
     return typeof image == "string" ? { src: image } : image;
@@ -1947,10 +2382,10 @@ function resolveExplicitImage(options) {
       details: { image: source.src, routePath: options.routePath }
     });
   }
-  if (!isRemoteImageAllowed(url, options.mediaManifest.remote.images))
+  if (url.protocol !== "https:")
     throw new AppError({
       code: "FRAMEWORK_OG_REMOTE_IMAGE_REJECTED",
-      message: `Remote OG image "${source.src}" for route "${options.routePath}" is not allowed by media.remote.images`,
+      message: `Remote OG image "${source.src}" for route "${options.routePath}" must use HTTPS`,
       details: { image: source.src, routePath: options.routePath }
     });
   return { source: "remote", url: source.src, alt: source.alt };
@@ -2154,6 +2589,7 @@ async function buildOgManifest(options) {
     },
     logo: await resolveOgLogo({
       faviconsAndLogos: options.faviconsAndLogos,
+      media: options.media,
       theme: colors.theme
     })
   }, groupGeneratedDefaults = Object.fromEntries(
@@ -2168,6 +2604,7 @@ async function buildOgManifest(options) {
             ...group?.origin ? { siteUrl: group.origin } : {},
             logo: await resolveOgLogo({
               faviconsAndLogos: options.faviconsAndLogos,
+              media: options.media,
               theme: routeColors.theme
             })
           }
@@ -2625,24 +3062,7 @@ async function materializeAppInstallation({
 // src/lib/compiler/search/search-index.ts
 import { mkdir as mkdir5, writeFile as writeFile5 } from "fs/promises";
 import { dirname as dirname4, resolve as resolve3 } from "path";
-
-// src/lib/runtime/metadata/canonical-url.ts
-function canonicalUrl(manifest, path, group) {
-  let origin = (group && manifest.groups[group]?.origin) ?? manifest.site.origin;
-  if (!origin) return path;
-  try {
-    return new URL(path, `${origin}/`).toString();
-  } catch {
-    return path;
-  }
-}
-function navigationUrl(manifest, path, group) {
-  let origin = manifest.groups[group]?.origin ?? manifest.site.origin;
-  return !origin || origin === manifest.site.origin ? path : canonicalUrl(manifest, path, group);
-}
-
-// src/lib/compiler/search/search-index.ts
-var SEARCH_BUNDLE_DIR = PUBLIC_PAGEFIND_DIRECTORY, SEARCH_INDEX_SCRIPT_PATH = "scripts/build-search-index.mjs", SEARCH_RECORDS_PATH = ".meta/search-records.json", SEARCH_STATUS_FILE = "publishos-search-status.json", SEARCH_INDEX_STATUS_MESSAGE = "Building search index...";
+var SEARCH_BUNDLE_DIR = PUBLIC_SEARCH_DIRECTORY, SEARCH_INDEX_SCRIPT_PATH = "scripts/build-search-index.mjs", SEARCH_RECORDS_PATH = ".meta/search-records.json", SEARCH_STATUS_FILE = "publishos-search-status.json", SEARCH_INDEX_STATUS_MESSAGE = "Building search index...";
 function stringifyMetaValue(value) {
   if (typeof value == "string" && value.trim()) return value;
   if (typeof value == "number" || typeof value == "boolean")
@@ -2651,17 +3071,13 @@ function stringifyMetaValue(value) {
 function pageAuthors(page) {
   return page.authors.flatMap((author) => typeof author.name == "string" && author.name.trim() ? [author.name] : []);
 }
-function pageContent(page) {
+function pageContent(page, conversions) {
   return [
     page.title,
     page.description,
     page.tags.join(" "),
     pageAuthors(page).join(" "),
-    convertMdxToMarkdown({
-      collectDiagnostics: !1,
-      source: page.body,
-      unknownComponentMode: "children"
-    }).text
+    conversions.get(page.path)?.text ?? ""
   ].filter(Boolean).join(`
 
 `);
@@ -2689,9 +3105,9 @@ function pageMeta({
 function pagesToIndex(manifest) {
   return manifest.pages.filter((page) => page.status === "published").sort((a, b) => a.path.localeCompare(b.path));
 }
-function createSearchRecords(manifest) {
+function createSearchRecords(manifest, conversions) {
   return pagesToIndex(manifest).map((page) => ({
-    content: pageContent(page),
+    content: pageContent(page, conversions),
     filters: {
       author: pageAuthors(page),
       group: [page.group],
@@ -2708,11 +3124,12 @@ function createSearchRecords(manifest) {
   }));
 }
 async function writeSearchRecordsArtifact({
+  conversions,
   manifest,
   outputDir
 }) {
   let artifact = {
-    records: createSearchRecords(manifest)
+    records: createSearchRecords(manifest, conversions)
   }, filePath = resolve3(outputDir, SEARCH_RECORDS_PATH);
   await mkdir5(dirname4(filePath), { recursive: !0 }), await writeFile5(filePath, `${JSON.stringify(artifact, null, 2)}
 `, "utf-8");
@@ -2840,272 +3257,23 @@ try {
 `;
 }
 
-// src/lib/compiler/theme/component-manifest.ts
-import { readdir as readdir2, readFile as readFile4, stat as stat3 } from "fs/promises";
-import { dirname as dirname5, extname, relative as relative2, resolve as resolve4, sep } from "path";
-import ts2 from "typescript";
-var componentFamilies = [
-  "dialog",
-  "drawer",
-  "menu",
-  "navigation-menu",
-  "popover",
-  "select",
-  "toast",
-  "tooltip"
-], SOURCE_EXTENSIONS = [".js", ".jsx", ".md", ".mdx", ".mjs", ".ts", ".tsx"], IMPORT_PATTERN = /(?:\bfrom\s*|\bimport\s*\(\s*|\bimport\s*)["']([^"']+)["']/g;
-function sourceImports(content, path) {
-  if ([".md", ".mdx"].includes(extname(path)))
-    return {
-      dynamic: !1,
-      specifiers: [...content.matchAll(IMPORT_PATTERN)].flatMap(
-        (match) => match[1] ? [match[1]] : []
-      )
-    };
-  let source = ts2.createSourceFile(
-    path,
-    content,
-    ts2.ScriptTarget.Latest,
-    !1,
-    ts2.ScriptKind.TSX
-  ), specifiers = [], dynamic = !1, visit = (node) => {
-    if ((ts2.isImportDeclaration(node) || ts2.isExportDeclaration(node)) && node.moduleSpecifier && ts2.isStringLiteral(node.moduleSpecifier))
-      specifiers.push(node.moduleSpecifier.text);
-    else if (ts2.isCallExpression(node) && node.expression.kind === ts2.SyntaxKind.ImportKeyword) {
-      let argument = node.arguments[0];
-      argument && ts2.isStringLiteral(argument) ? specifiers.push(argument.text) : dynamic = !0;
-    }
-    ts2.forEachChild(node, visit);
-  };
-  return visit(source), { dynamic, specifiers };
-}
-function portable(path) {
-  return path.split(sep).join("/");
-}
-async function fileExists2(path) {
-  return stat3(path).then((entry) => entry.isFile()).catch(() => !1);
-}
-async function sourceFiles(dir, prefix = "") {
-  let entries = await readdir2(dir, { withFileTypes: !0 }).catch(() => []), files = [];
-  for (let entry of entries) {
-    let relativePath = prefix ? `${prefix}/${entry.name}` : entry.name, path = resolve4(dir, entry.name);
-    if (entry.isDirectory()) {
-      if (relativePath === "components") continue;
-      files.push(...await sourceFiles(path, relativePath));
-    } else SOURCE_EXTENSIONS.includes(extname(entry.name)) && files.push(relativePath);
-  }
-  return files;
+// src/lib/compiler/theme/compile-theme-css.ts
+import { lstat as lstat2, stat as stat3 } from "fs/promises";
+import { dirname as dirname5, relative as relative2, resolve as resolve4, sep } from "path";
+import postcss2 from "postcss";
+import selectorParser from "postcss-selector-parser";
+import valueParser2 from "postcss-value-parser";
+var GROUP_CONDITIONAL_AT_RULES = /* @__PURE__ */ new Set(["container", "media", "supports"]), IMAGE_SET_FUNCTIONS2 = /* @__PURE__ */ new Set(["image-set", "-webkit-image-set"]);
+function fail(code, message, details) {
+  throw new AppError({ code, message, details });
 }
-async function resolveSourceFile(path) {
-  if (await fileExists2(path)) return path;
-  for (let extension of SOURCE_EXTENSIONS)
-    if (await fileExists2(`${path}${extension}`)) return `${path}${extension}`;
-  for (let extension of SOURCE_EXTENSIONS) {
-    let indexPath = resolve4(path, `index${extension}`);
-    if (await fileExists2(indexPath)) return indexPath;
+function hasRuleAncestor(rule) {
+  let parent = rule.parent;
+  for (; parent; ) {
+    if (parent.type === "rule") return !0;
+    parent = parent.parent;
   }
-}
-function resolveApplicationFile(application, path) {
-  let candidates = [
-    path,
-    ...SOURCE_EXTENSIONS.map((extension) => `${path}${extension}`),
-    ...SOURCE_EXTENSIONS.map((extension) => resolve4(path, `index${extension}`))
-  ];
-  for (let candidate of candidates) {
-    let file = application.get(candidate);
-    if (file) return [candidate, file];
-  }
-}
-function runtimeSubpath(specifier) {
-  let prefix = "@publish.os/nextjs";
-  if (specifier === prefix) return "index.js";
-  if (!specifier.startsWith(`${prefix}/`)) return;
-  let subpath = specifier.slice(prefix.length + 1);
-  return subpath === "mdx" ? "kernel/components/mdx/mdx.js" : subpath.startsWith("mdx/") ? `kernel/components/mdx/${subpath.slice(4)}.js` : `${subpath}.js`;
-}
-function familyForPath(path) {
-  let normalized = portable(path);
-  return componentFamilies.find(
-    (family) => new RegExp(`/components/ui/${family}\\.[cm]?[jt]sx?$`).test(normalized)
-  );
-}
-async function publicTokensForFamily({
-  family,
-  runtimeDistDir
-}) {
-  let path = resolve4(
-    runtimeDistDir,
-    "../compiler-assets/nextjs/defaults/root/css/components",
-    `${family}.css`
-  ), css = await readFile4(path, "utf8").catch(() => "");
-  return [
-    ...new Set(
-      [...css.matchAll(new RegExp(`(--${family}-[a-z0-9-]+)\\s*:`, "g"))].map((match) => match[1]).filter((token) => !!token)
-    )
-  ].sort();
-}
-async function createComponentManifest({
-  applicationFiles,
-  runtimeDistDir,
-  sourceDir,
-  editableCheckout = !1
-}) {
-  let application = new Map(
-    applicationFiles.map((file) => [
-      resolve4(dirname5(sourceDir), file.path),
-      file
-    ])
-  ), queue = [], visited = /* @__PURE__ */ new Set(), sources = /* @__PURE__ */ new Set(), sourceByKey = /* @__PURE__ */ new Map(), importsByKey = /* @__PURE__ */ new Map(), families = /* @__PURE__ */ new Set(), familyKeys = /* @__PURE__ */ new Map(), fallbackReasons = /* @__PURE__ */ new Set(), connect = (from, to) => {
-    if (!to) return;
-    let imports = importsByKey.get(from) ?? /* @__PURE__ */ new Set();
-    imports.add(to), importsByKey.set(from, imports);
-  };
-  if (editableCheckout)
-    for (let source of [
-      "../app",
-      "../source",
-      "../node_modules/@publish.os/nextjs/src",
-      "../node_modules/@publish.os/nextjs/compiler-assets/nextjs/defaults"
-    ])
-      sources.add(source);
-  for (let path of editableCheckout ? [] : await sourceFiles(sourceDir))
-    queue.push({ kind: "local", path: resolve4(sourceDir, path) });
-  for (let file of editableCheckout ? [] : applicationFiles)
-    queue.push({
-      content: file.content,
-      key: resolve4(dirname5(sourceDir), file.path),
-      kind: "application",
-      path: file.path
-    });
-  let enqueueRuntime = async (specifier) => {
-    let subpath = runtimeSubpath(specifier);
-    if (!subpath) return;
-    let path = resolve4(runtimeDistDir, subpath);
-    if (!await fileExists2(path)) {
-      fallbackReasons.add(`Missing runtime source for ${specifier}`);
-      return;
-    }
-    return queue.push({ kind: "runtime", path }), path;
-  };
-  for (; queue.length > 0; ) {
-    let entry = queue.shift();
-    if (!entry) continue;
-    let key = entry.kind === "application" ? entry.key : entry.path;
-    if (visited.has(key)) continue;
-    visited.add(key);
-    let content = entry.kind === "application" ? entry.content : await readFile4(entry.path, "utf8"), imports = sourceImports(content, key);
-    imports.dynamic && fallbackReasons.add(`Dynamic import in ${key}`);
-    let source = entry.kind === "runtime" ? `../node_modules/@publish.os/nextjs/dist/${portable(relative2(runtimeDistDir, entry.path))}` : entry.kind === "application" ? `../${portable(entry.path)}` : `../source/${portable(relative2(sourceDir, entry.path))}`;
-    sources.add(source), sourceByKey.set(key, source);
-    let family = familyForPath(key);
-    if (family) {
-      families.add(family);
-      let keys = familyKeys.get(family) ?? /* @__PURE__ */ new Set();
-      keys.add(key), familyKeys.set(family, keys);
-    }
-    for (let specifier of imports.specifiers) {
-      if (specifier.endsWith(".css")) continue;
-      if (specifier.startsWith("@publish.os/nextjs")) {
-        connect(key, await enqueueRuntime(specifier));
-        continue;
-      }
-      if (specifier.startsWith("@components/")) {
-        let componentPath = specifier.slice(12), local = await resolveSourceFile(
-          resolve4(sourceDir, "components", componentPath)
-        );
-        local ? (connect(key, local), queue.push({ kind: "local", path: local })) : connect(
-          key,
-          await enqueueRuntime(
-            `@publish.os/nextjs/kernel/components/${componentPath}`
-          )
-        );
-        continue;
-      }
-      if (specifier.startsWith("@source/")) {
-        let local = await resolveSourceFile(
-          resolve4(sourceDir, specifier.slice(8))
-        );
-        local ? (connect(key, local), queue.push({ kind: "local", path: local })) : fallbackReasons.add(`Missing source import ${specifier} in ${key}`);
-        continue;
-      }
-      if (!specifier.startsWith(".")) continue;
-      let base = entry.kind === "application" ? dirname5(entry.key) : dirname5(entry.path), unresolvedTarget = resolve4(base, specifier), planned = resolveApplicationFile(application, unresolvedTarget);
-      if (planned) {
-        connect(key, planned[0]), queue.push({
-          content: planned[1].content,
-          key: planned[0],
-          kind: "application",
-          path: planned[1].path
-        });
-        continue;
-      }
-      let target = await resolveSourceFile(unresolvedTarget);
-      target ? (connect(key, target), queue.push({
-        kind: target.startsWith(runtimeDistDir) ? "runtime" : "local",
-        path: target
-      })) : fallbackReasons.add(`Missing relative import ${specifier} in ${key}`);
-    }
-  }
-  let fallback = fallbackReasons.size > 0, activeFamilies = fallback || editableCheckout ? [...componentFamilies] : [...families].sort();
-  fallback && sources.add("../node_modules/@publish.os/nextjs/dist/**/*.js");
-  let componentEntries = await Promise.all(
-    activeFamilies.map(async (family) => {
-      let familySources = /* @__PURE__ */ new Set();
-      if (editableCheckout)
-        for (let source of sources) familySources.add(source);
-      let pending = [...familyKeys.get(family) ?? []], traced = /* @__PURE__ */ new Set();
-      for (; pending.length > 0; ) {
-        let key = pending.pop();
-        if (!key || traced.has(key)) continue;
-        traced.add(key);
-        let source = sourceByKey.get(key);
-        source && familySources.add(source), pending.push(...importsByKey.get(key) ?? []);
-      }
-      return fallback && familySources.add("../node_modules/@publish.os/nextjs/dist/**/*.js"), [
-        family,
-        {
-          optionalCss: `./css/components/${family}.css`,
-          publicTokenPrefix: `--${family}-`,
-          publicTokens: await publicTokensForFamily({
-            family,
-            runtimeDistDir
-          }),
-          source: `@publish.os/nextjs/kernel/components/ui/${family}`,
-          sources: [...familySources].sort()
-        }
-      ];
-    })
-  );
-  return {
-    components: Object.fromEntries(componentEntries),
-    fallback,
-    fallbackReasons: [...fallbackReasons].sort(),
-    families: activeFamilies,
-    sources: [...sources].sort()
-  };
-}
-
-// src/lib/compiler/theme/create-theme-build-plan.ts
-import { readFile as readFile5, stat as stat5 } from "fs/promises";
-import { dirname as dirname7, resolve as resolve6 } from "path";
-
-// src/lib/compiler/theme/compile-theme-css.ts
-import { stat as stat4 } from "fs/promises";
-import { dirname as dirname6, relative as relative3, resolve as resolve5, sep as sep2 } from "path";
-import postcss from "postcss";
-import selectorParser from "postcss-selector-parser";
-import valueParser from "postcss-value-parser";
-var GROUP_CONDITIONAL_AT_RULES = /* @__PURE__ */ new Set(["container", "media", "supports"]), IMAGE_SET_FUNCTIONS = /* @__PURE__ */ new Set(["image-set", "-webkit-image-set"]);
-function fail(code, message, details) {
-  throw new AppError({ code, message, details });
-}
-function hasRuleAncestor(rule) {
-  let parent = rule.parent;
-  for (; parent; ) {
-    if (parent.type === "rule") return !0;
-    parent = parent.parent;
-  }
-  return !1;
+  return !1;
 }
 function rejectGlobalSelector(selector, sourcePath) {
   let globalElement;
@@ -3133,7 +3301,7 @@ function scopeGroupThemeCss({
   scopeSelectors,
   sourcePath
 }) {
-  let root = postcss.parse(css, { from: sourcePath });
+  let root = postcss2.parse(css, { from: sourcePath });
   return root.walkAtRules((atRule) => {
     GROUP_CONDITIONAL_AT_RULES.has(atRule.name.toLowerCase()) || fail(
       "FRAMEWORK_GROUP_THEME_GLOBAL_AT_RULE",
@@ -3163,14 +3331,146 @@ function urlKind(value) {
   let trimmed = value.trim();
   return trimmed.startsWith("#") ? "fragment" : trimmed.startsWith("//") || /^[a-z][a-z0-9+.-]*:/i.test(trimmed) ? "unsafe" : trimmed.startsWith("/") ? "root" : "relative";
 }
-async function fileExists3(path) {
-  return stat4(path).then((entry) => entry.isFile()).catch(() => !1);
+async function fileExists2(path) {
+  return stat3(path).then((entry) => entry.isFile()).catch(() => !1);
 }
 function portablePath(path) {
-  return path.split(sep2).join("/");
+  return path.split(sep).join("/");
+}
+var FONT_EXTENSIONS = /* @__PURE__ */ new Set(["woff", "woff2", "ttf", "otf"]);
+function validFontResource(contents, extension) {
+  if (extension === "woff" || extension === "woff2") {
+    let signature2 = extension === "woff" ? "wOFF" : "wOF2", headerBytes = extension === "woff" ? 44 : 48;
+    return contents.length >= headerBytes && contents.toString("ascii", 0, 4) === signature2 && contents.readUInt32BE(8) === contents.length && contents.readUInt16BE(12) > 0;
+  }
+  if (contents.length < 12) return !1;
+  let signature = contents.toString("ascii", 0, 4), truetype = contents.readUInt32BE(0) === 65536;
+  if (extension === "ttf" && signature !== "true" && !truetype || extension === "otf" && signature !== "OTTO" && !truetype) return !1;
+  let tables = contents.readUInt16BE(4);
+  if (tables === 0 || tables > 4096 || 12 + tables * 16 > contents.length)
+    return !1;
+  for (let index = 0; index < tables; index += 1) {
+    let table = 12 + index * 16, offset = contents.readUInt32BE(table + 8), length = contents.readUInt32BE(table + 12);
+    if (offset > contents.length || length > contents.length - offset)
+      return !1;
+  }
+  return !0;
+}
+function createThemeResourceAdmission({
+  media,
+  publishOsDir
+}) {
+  let limits = mediaAssetBudgets(), baseBytes = media?.manifest.totals.bytes ?? 0, baseCount = media?.manifest.totals.count ?? 0, admitted = /* @__PURE__ */ new Map(), mediaPaths = /* @__PURE__ */ new Map();
+  for (let entry of Object.values(media?.manifest.assets ?? {})) {
+    let sourcePrefix = "publish.os/";
+    entry.sourcePath.startsWith(sourcePrefix) && mediaPaths.set(
+      resolve4(publishOsDir, entry.sourcePath.slice(sourcePrefix.length)),
+      entry.outputPath
+    );
+  }
+  let additionalBytes = 0;
+  return {
+    assets: admitted,
+    async admit({
+      filePath,
+      relativePath,
+      sourcePath
+    }) {
+      let existingMediaPath = mediaPaths.get(sourcePath);
+      if (existingMediaPath)
+        return { urlPath: `/${existingMediaPath.replace(/^\/+/, "")}` };
+      let existing = admitted.get(sourcePath);
+      if (existing)
+        return {
+          asset: existing,
+          urlPath: themeResourceUrlPath(existing.outputPath)
+        };
+      let limit = themeResourceByteLimit(relativePath);
+      if (limit === void 0)
+        throw new AppError({
+          code: "FRAMEWORK_MEDIA_TYPE_REJECTED",
+          message: `${relativePath} is not an allowed theme resource type`,
+          details: { path: relativePath }
+        });
+      let entry = await lstat2(sourcePath);
+      if (!entry.isFile() || entry.isSymbolicLink())
+        throw new AppError({
+          code: "FRAMEWORK_SOURCE_DEPENDENCY_NOT_FILE",
+          message: "A theme resource must be a regular file.",
+          details: { file: filePath, target: relativePath }
+        });
+      if (entry.size > limit)
+        throw mediaFileTooLarge({
+          relativePath,
+          bytes: entry.size,
+          limit
+        });
+      let remainingBytes = limits.maxTotalBytes - baseBytes - additionalBytes, reservedTotalBytes = baseBytes + additionalBytes + entry.size;
+      if (reservedTotalBytes > limits.maxTotalBytes)
+        throw new AppError({
+          code: "FRAMEWORK_MEDIA_TOTAL_TOO_LARGE",
+          message: `Theme resources and publish.os/assets total ${reservedTotalBytes} bytes, exceeding the limit of ${limits.maxTotalBytes}`,
+          details: { bytes: reservedTotalBytes, limit: limits.maxTotalBytes }
+        });
+      let totalCount = baseCount + admitted.size + 1;
+      if (totalCount > limits.maxFileCount)
+        throw new AppError({
+          code: "FRAMEWORK_MEDIA_FILE_COUNT_EXCEEDED",
+          message: `Theme resources and publish.os/assets contain more than ${limits.maxFileCount} files, exceeding the limit of ${limits.maxFileCount}`,
+          details: { count: totalCount, limit: limits.maxFileCount }
+        });
+      let contents = await readBoundedMediaFile({
+        path: sourcePath,
+        relativePath,
+        limit: Math.min(limit, remainingBytes),
+        expectedIdentity: { dev: entry.dev, ino: entry.ino }
+      });
+      if (contents.byteLength > limit)
+        throw mediaFileTooLarge({
+          relativePath,
+          bytes: contents.byteLength,
+          limit
+        });
+      if (contents.byteLength > remainingBytes) {
+        let totalBytes = baseBytes + additionalBytes + contents.byteLength;
+        throw new AppError({
+          code: "FRAMEWORK_MEDIA_TOTAL_TOO_LARGE",
+          message: `Theme resources and publish.os/assets total ${totalBytes} bytes, exceeding the limit of ${limits.maxTotalBytes}`,
+          details: { bytes: totalBytes, limit: limits.maxTotalBytes }
+        });
+      }
+      let extension = relativePath.split(".").at(-1)?.toLowerCase() ?? "", admittedContents;
+      if (FONT_EXTENSIONS.has(extension)) {
+        if (!validFontResource(contents, extension))
+          throw new AppError({
+            code: "FRAMEWORK_THEME_FONT_INVALID",
+            message: `${relativePath} is not a valid ${extension.toUpperCase()} font`,
+            details: { path: relativePath }
+          });
+        admittedContents = contents;
+      } else
+        admittedContents = (await admitThemeImageResource({ contents, relativePath })).contents;
+      let admittedTotalBytes = baseBytes + additionalBytes + admittedContents.byteLength;
+      if (admittedTotalBytes > limits.maxTotalBytes)
+        throw new AppError({
+          code: "FRAMEWORK_MEDIA_TOTAL_TOO_LARGE",
+          message: `Theme resources and publish.os/assets total ${admittedTotalBytes} bytes, exceeding the limit of ${limits.maxTotalBytes}`,
+          details: { bytes: admittedTotalBytes, limit: limits.maxTotalBytes }
+        });
+      let projectPath = portablePath(relative2(publishOsDir, sourcePath)), asset = {
+        contents: admittedContents,
+        outputPath: `${PUBLIC_INTERNAL_DIRECTORY}/themes/${projectPath}`,
+        sourcePath
+      };
+      return admitted.set(sourcePath, asset), additionalBytes += admittedContents.byteLength, {
+        asset,
+        urlPath: themeResourceUrlPath(asset.outputPath)
+      };
+    }
+  };
 }
 function cssUrlReferences(value) {
-  let parsed = valueParser(value), references = [];
+  let parsed = valueParser2(value), references = [];
   return parsed.walk((node) => {
     if (node.type !== "function") return;
     let functionName = node.value.toLowerCase();
@@ -3184,10 +3484,10 @@ function cssUrlReferences(value) {
             valueNode.value = nextValue;
           }
         } : {},
-        value: valueNode?.value ?? valueParser.stringify(node.nodes).trim()
+        value: valueNode?.value ?? valueParser2.stringify(node.nodes).trim()
       }), !1;
     }
-    if (IMAGE_SET_FUNCTIONS.has(functionName))
+    if (IMAGE_SET_FUNCTIONS2.has(functionName))
       for (let child of node.nodes)
         child.type === "string" && references.push({
           set: (nextValue) => {
@@ -3204,18 +3504,23 @@ function pathAndSuffix(url) {
     suffix: url.slice(suffixIndex)
   };
 }
+function themeResourceUrlPath(outputPath) {
+  return `/${outputPath.replace(/^\/+/, "").split("/").map((segment) => encodeURIComponent(segment)).join("/")}`;
+}
 async function rewriteThemeCssUrls({
   css,
   filePath,
   publishOsDir,
+  media,
+  resourceAdmission,
   scopeRoot
 }) {
-  let root = postcss.parse(css, { from: filePath }), assets = /* @__PURE__ */ new Map(), declarations = [];
+  let admission = resourceAdmission ?? createThemeResourceAdmission({ media, publishOsDir }), root = postcss2.parse(css, { from: filePath }), assets = /* @__PURE__ */ new Map(), warnings = /* @__PURE__ */ new Map(), declarations = [];
   root.walkDecls((declaration) => {
     declarations.push(declaration);
   });
   for (let declaration of declarations) {
-    let { parsed, references } = cssUrlReferences(declaration.value);
+    let { parsed, references } = cssUrlReferences(declaration.value), declarationAssets = /* @__PURE__ */ new Map(), preparedReferences = [], ignoredDeclaration = !1;
     for (let reference of references) {
       let url = decodeCssPath(reference.value);
       reference.set || fail(
@@ -3227,33 +3532,313 @@ async function rewriteThemeCssUrls({
       if (kind === "unsafe" && fail(
         "FRAMEWORK_THEME_URL_REJECTED",
         "Theme CSS contains an unsafe URL.",
-        {
-          source: filePath,
-          url
-        }
+        { source: filePath, url }
       ), kind !== "relative") continue;
-      let { path, suffix } = pathAndSuffix(url), sourcePath = resolve5(dirname6(filePath), path);
+      let { path, suffix } = pathAndSuffix(url), sourcePath = resolve4(dirname5(filePath), path);
       isSameOrDescendant(scopeRoot, sourcePath) || fail(
         "FRAMEWORK_THEME_URL_ESCAPE",
         "Theme CSS assets cannot escape their theme scope.",
         { source: filePath, url }
-      ), await fileExists3(sourcePath) || fail(
+      );
+      let projectPath = portablePath(relative2(publishOsDir, sourcePath));
+      await fileExists2(sourcePath) || fail(
         "FRAMEWORK_THEME_ASSET_MISSING",
         "A theme CSS asset does not exist.",
-        {
-          source: filePath,
-          url
-        }
-      );
-      let projectPath = portablePath(relative3(publishOsDir, sourcePath)), outputPath = `${PUBLIC_ASSET_DIRECTORY}/__publishos/theme-assets/${projectPath}`;
-      assets.set(sourcePath, { outputPath, sourcePath }), reference.set(`/${encodeURI(outputPath)}${suffix}`);
+        { source: filePath, url }
+      ), await assertSourceDependency({
+        publishOsDir,
+        path: sourcePath,
+        sourceFile: filePath
+      });
+      let ignoredDocument = ignoredMediaDocumentWarning(projectPath);
+      if (ignoredDocument) {
+        warnings.set(projectPath, { ...ignoredDocument, level: "warning" }), ignoredDeclaration = !0;
+        continue;
+      }
+      if (isHiddenMediaPath(projectPath)) {
+        warnings.set(projectPath, {
+          ...ignoredMediaPathWarning(projectPath),
+          level: "warning"
+        }), ignoredDeclaration = !0;
+        continue;
+      }
+      preparedReferences.push({
+        set: reference.set,
+        suffix,
+        sourcePath,
+        projectPath
+      });
+    }
+    if (ignoredDeclaration) {
+      declaration.remove();
+      continue;
+    }
+    for (let { set, suffix, sourcePath, projectPath } of preparedReferences) {
+      let admitted = await admission.admit({
+        filePath,
+        relativePath: projectPath,
+        sourcePath
+      });
+      admitted.asset && declarationAssets.set(sourcePath, admitted.asset), set(`${admitted.urlPath}${suffix}`);
+    }
+    for (let [path, asset] of declarationAssets) assets.set(path, asset);
+    declaration.value = parsed.toString();
+  }
+  return {
+    assets: [...assets.values()],
+    css: root.toString(),
+    warnings: [...warnings.values()]
+  };
+}
+
+// src/lib/compiler/theme/component-manifest.ts
+import { readdir as readdir2, readFile as readFile4, stat as stat4 } from "fs/promises";
+import { dirname as dirname6, extname, relative as relative3, resolve as resolve5, sep as sep2 } from "path";
+import ts2 from "typescript";
+var componentFamilies = [
+  "dialog",
+  "drawer",
+  "menu",
+  "navigation-menu",
+  "popover",
+  "select",
+  "toast",
+  "tooltip"
+], SOURCE_EXTENSIONS = [".js", ".jsx", ".md", ".mdx", ".mjs", ".ts", ".tsx"], IMPORT_PATTERN = /(?:\bfrom\s*|\bimport\s*\(\s*|\bimport\s*)["']([^"']+)["']/g;
+function sourceImports(content, path) {
+  if ([".md", ".mdx"].includes(extname(path)))
+    return {
+      dynamic: !1,
+      specifiers: [...content.matchAll(IMPORT_PATTERN)].flatMap(
+        (match) => match[1] ? [match[1]] : []
+      )
+    };
+  let source = ts2.createSourceFile(
+    path,
+    content,
+    ts2.ScriptTarget.Latest,
+    !1,
+    ts2.ScriptKind.TSX
+  ), specifiers = [], dynamic = !1, visit = (node) => {
+    if ((ts2.isImportDeclaration(node) || ts2.isExportDeclaration(node)) && node.moduleSpecifier && ts2.isStringLiteral(node.moduleSpecifier))
+      specifiers.push(node.moduleSpecifier.text);
+    else if (ts2.isCallExpression(node) && node.expression.kind === ts2.SyntaxKind.ImportKeyword) {
+      let argument = node.arguments[0];
+      argument && ts2.isStringLiteral(argument) ? specifiers.push(argument.text) : dynamic = !0;
+    }
+    ts2.forEachChild(node, visit);
+  };
+  return visit(source), { dynamic, specifiers };
+}
+function portable(path) {
+  return path.split(sep2).join("/");
+}
+async function fileExists3(path) {
+  return stat4(path).then((entry) => entry.isFile()).catch(() => !1);
+}
+async function sourceFiles(dir, prefix = "") {
+  let entries = await readdir2(dir, { withFileTypes: !0 }).catch(() => []), files = [];
+  for (let entry of entries) {
+    let relativePath = prefix ? `${prefix}/${entry.name}` : entry.name, path = resolve5(dir, entry.name);
+    if (entry.isDirectory()) {
+      if (relativePath === "components") continue;
+      files.push(...await sourceFiles(path, relativePath));
+    } else SOURCE_EXTENSIONS.includes(extname(entry.name)) && files.push(relativePath);
+  }
+  return files;
+}
+async function resolveSourceFile(path) {
+  if (await fileExists3(path)) return path;
+  for (let extension of SOURCE_EXTENSIONS)
+    if (await fileExists3(`${path}${extension}`)) return `${path}${extension}`;
+  for (let extension of SOURCE_EXTENSIONS) {
+    let indexPath = resolve5(path, `index${extension}`);
+    if (await fileExists3(indexPath)) return indexPath;
+  }
+}
+function resolveApplicationFile(application, path) {
+  let candidates = [
+    path,
+    ...SOURCE_EXTENSIONS.map((extension) => `${path}${extension}`),
+    ...SOURCE_EXTENSIONS.map((extension) => resolve5(path, `index${extension}`))
+  ];
+  for (let candidate of candidates) {
+    let file = application.get(candidate);
+    if (file) return [candidate, file];
+  }
+}
+function runtimeSubpath(specifier) {
+  let prefix = "@publish.os/nextjs";
+  if (specifier === prefix) return "index.js";
+  if (!specifier.startsWith(`${prefix}/`)) return;
+  let requestedSubpath = specifier.slice(prefix.length + 1), subpath = nextjs_runtime_surface_default.entryAliases[requestedSubpath] ?? requestedSubpath;
+  return subpath === "mdx" ? "kernel/components/mdx/mdx.js" : subpath.startsWith("mdx/") ? `kernel/components/mdx/${subpath.slice(4)}.js` : `${subpath}.js`;
+}
+function familyForPath(path) {
+  let normalized = portable(path);
+  return componentFamilies.find(
+    (family) => new RegExp(`/components/ui/${family}\\.[cm]?[jt]sx?$`).test(normalized)
+  );
+}
+async function publicTokensForFamily({
+  family,
+  runtimeDistDir
+}) {
+  let path = resolve5(
+    runtimeDistDir,
+    "../compiler-assets/nextjs/defaults/root/css/components",
+    `${family}.css`
+  ), css = await readFile4(path, "utf8").catch(() => "");
+  return [
+    ...new Set(
+      [...css.matchAll(new RegExp(`(--${family}-[a-z0-9-]+)\\s*:`, "g"))].map((match) => match[1]).filter((token) => !!token)
+    )
+  ].sort();
+}
+async function createComponentManifest({
+  applicationFiles,
+  runtimeDistDir,
+  sourceDir,
+  editableCheckout = !1
+}) {
+  let application = new Map(
+    applicationFiles.map((file) => [
+      resolve5(dirname6(sourceDir), file.path),
+      file
+    ])
+  ), queue = [], visited = /* @__PURE__ */ new Set(), sources = /* @__PURE__ */ new Set(), sourceByKey = /* @__PURE__ */ new Map(), importsByKey = /* @__PURE__ */ new Map(), families = /* @__PURE__ */ new Set(), familyKeys = /* @__PURE__ */ new Map(), fallbackReasons = /* @__PURE__ */ new Set(), connect = (from, to) => {
+    if (!to) return;
+    let imports = importsByKey.get(from) ?? /* @__PURE__ */ new Set();
+    imports.add(to), importsByKey.set(from, imports);
+  };
+  if (editableCheckout)
+    for (let source of [
+      "../app",
+      "../source",
+      "../node_modules/@publish.os/nextjs/src",
+      "../node_modules/@publish.os/nextjs/compiler-assets/nextjs/defaults"
+    ])
+      sources.add(source);
+  for (let path of editableCheckout ? [] : await sourceFiles(sourceDir))
+    queue.push({ kind: "local", path: resolve5(sourceDir, path) });
+  for (let file of editableCheckout ? [] : applicationFiles)
+    queue.push({
+      content: file.content,
+      key: resolve5(dirname6(sourceDir), file.path),
+      kind: "application",
+      path: file.path
+    });
+  let enqueueRuntime = async (specifier) => {
+    let subpath = runtimeSubpath(specifier);
+    if (!subpath) return;
+    let path = resolve5(runtimeDistDir, subpath);
+    if (!await fileExists3(path)) {
+      fallbackReasons.add(`Missing runtime source for ${specifier}`);
+      return;
+    }
+    return queue.push({ kind: "runtime", path }), path;
+  };
+  for (; queue.length > 0; ) {
+    let entry = queue.shift();
+    if (!entry) continue;
+    let key = entry.kind === "application" ? entry.key : entry.path;
+    if (visited.has(key)) continue;
+    visited.add(key);
+    let content = entry.kind === "application" ? entry.content : await readFile4(entry.path, "utf8"), imports = sourceImports(content, key);
+    imports.dynamic && fallbackReasons.add(`Dynamic import in ${key}`);
+    let source = entry.kind === "runtime" ? `../node_modules/@publish.os/nextjs/dist/${portable(relative3(runtimeDistDir, entry.path))}` : entry.kind === "application" ? `../${portable(entry.path)}` : `../source/${portable(relative3(sourceDir, entry.path))}`;
+    sources.add(source), sourceByKey.set(key, source);
+    let family = familyForPath(key);
+    if (family) {
+      families.add(family);
+      let keys = familyKeys.get(family) ?? /* @__PURE__ */ new Set();
+      keys.add(key), familyKeys.set(family, keys);
+    }
+    for (let specifier of imports.specifiers) {
+      if (specifier.endsWith(".css")) continue;
+      if (specifier.startsWith("@publish.os/nextjs")) {
+        connect(key, await enqueueRuntime(specifier));
+        continue;
+      }
+      if (specifier.startsWith("@components/")) {
+        let componentPath = specifier.slice(12), local = await resolveSourceFile(
+          resolve5(sourceDir, "components", componentPath)
+        );
+        local ? (connect(key, local), queue.push({ kind: "local", path: local })) : connect(
+          key,
+          await enqueueRuntime(
+            `@publish.os/nextjs/kernel/components/${componentPath}`
+          )
+        );
+        continue;
+      }
+      if (specifier.startsWith("@source/")) {
+        let local = await resolveSourceFile(
+          resolve5(sourceDir, specifier.slice(8))
+        );
+        local ? (connect(key, local), queue.push({ kind: "local", path: local })) : fallbackReasons.add(`Missing source import ${specifier} in ${key}`);
+        continue;
+      }
+      if (!specifier.startsWith(".")) continue;
+      let base = entry.kind === "application" ? dirname6(entry.key) : dirname6(entry.path), unresolvedTarget = resolve5(base, specifier), planned = resolveApplicationFile(application, unresolvedTarget);
+      if (planned) {
+        connect(key, planned[0]), queue.push({
+          content: planned[1].content,
+          key: planned[0],
+          kind: "application",
+          path: planned[1].path
+        });
+        continue;
+      }
+      let target = await resolveSourceFile(unresolvedTarget);
+      target ? (connect(key, target), queue.push({
+        kind: target.startsWith(runtimeDistDir) ? "runtime" : "local",
+        path: target
+      })) : fallbackReasons.add(`Missing relative import ${specifier} in ${key}`);
     }
-    declaration.value = parsed.toString();
   }
-  return { assets: [...assets.values()], css: root.toString() };
+  let fallback = fallbackReasons.size > 0, activeFamilies = fallback || editableCheckout ? [...componentFamilies] : [...families].sort();
+  fallback && sources.add("../node_modules/@publish.os/nextjs/dist/**/*.js");
+  let componentEntries = await Promise.all(
+    activeFamilies.map(async (family) => {
+      let familySources = /* @__PURE__ */ new Set();
+      if (editableCheckout)
+        for (let source of sources) familySources.add(source);
+      let pending = [...familyKeys.get(family) ?? []], traced = /* @__PURE__ */ new Set();
+      for (; pending.length > 0; ) {
+        let key = pending.pop();
+        if (!key || traced.has(key)) continue;
+        traced.add(key);
+        let source = sourceByKey.get(key);
+        source && familySources.add(source), pending.push(...importsByKey.get(key) ?? []);
+      }
+      return fallback && familySources.add("../node_modules/@publish.os/nextjs/dist/**/*.js"), [
+        family,
+        {
+          optionalCss: `./css/components/${family}.css`,
+          publicTokenPrefix: `--${family}-`,
+          publicTokens: await publicTokensForFamily({
+            family,
+            runtimeDistDir
+          }),
+          source: `@publish.os/nextjs/kernel/components/ui/${family}`,
+          sources: [...familySources].sort()
+        }
+      ];
+    })
+  );
+  return {
+    components: Object.fromEntries(componentEntries),
+    fallback,
+    fallbackReasons: [...fallbackReasons].sort(),
+    families: activeFamilies,
+    sources: [...sources].sort()
+  };
 }
 
 // src/lib/compiler/theme/create-theme-build-plan.ts
+import { readFile as readFile5, stat as stat5 } from "fs/promises";
+import { dirname as dirname7, resolve as resolve6 } from "path";
 var GROUP_KEY_PATTERN = /^[a-z0-9/-]+$/, installedFramework = readInstalledFrameworkLocation(), THEME_DEFAULTS_PATH = resolve6(
   installedFramework.packageRoot,
   "compiler-assets/nextjs/shims/theme-defaults.css"
@@ -3288,6 +3873,8 @@ async function inlineLocalCssImports({
   rootDir,
   publishOsDir,
   assets,
+  resourceAdmission,
+  onWarning,
   seen = /* @__PURE__ */ new Set()
 }) {
   seen.has(filePath) && fail2("FRAMEWORK_THEME_IMPORT_CYCLE", "Theme CSS imports contain a cycle.", {
@@ -3301,9 +3888,16 @@ async function inlineLocalCssImports({
     css: await readFile5(filePath, "utf-8"),
     filePath,
     publishOsDir,
+    resourceAdmission,
     scopeRoot: rootDir
   });
   for (let asset of rewritten.assets) assets.set(asset.sourcePath, asset);
+  for (let warning of rewritten.warnings)
+    onWarning?.({
+      code: warning.code,
+      message: warning.message,
+      ...typeof warning.details?.file == "string" ? { file: warning.details.file } : {}
+    });
   assertNoThemeModeCssVariables(rewritten.css, filePath);
   let imports = cssImports({ css: rewritten.css }).map((statement) => {
     statement.path.startsWith(".") || fail2(
@@ -3317,26 +3911,27 @@ async function inlineLocalCssImports({
       "Theme CSS imports cannot escape their publish.os scope.",
       { importPath: statement.path, source: filePath }
     ), { ...statement, path };
-  }), importedCss = await Promise.all(
-    imports.map(async (statement) => {
-      let body = await inlineLocalCssImports({
-        filePath: statement.path,
-        rootDir,
-        publishOsDir,
-        assets,
-        seen: new Set(seen)
-      });
-      return statement.media && (body = `@media ${statement.media} {
+  }), importedCss = [];
+  for (let statement of imports) {
+    let body = await inlineLocalCssImports({
+      filePath: statement.path,
+      rootDir,
+      publishOsDir,
+      assets,
+      resourceAdmission,
+      onWarning,
+      seen: new Set(seen)
+    });
+    statement.media && (body = `@media ${statement.media} {
 ${body}
 }`), statement.supports && (body = `@supports ${/^[^():]+:/.test(
-        statement.supports.replace(/\/\*[\s\S]*?\*\//g, " ")
-      ) ? `(${statement.supports})` : statement.supports} {
+      statement.supports.replace(/\/\*[\s\S]*?\*\//g, " ")
+    ) ? `(${statement.supports})` : statement.supports} {
 ${body}
 }`), statement.layer !== void 0 && (body = `@layer${statement.layer === !0 ? "" : ` ${statement.layer}`} {
 ${body}
-}`), body;
-    })
-  );
+}`), importedCss.push(body);
+  }
   return imports.reduceRight(
     (body, statement, index) => `${body.slice(0, statement.start)}${importedCss[index] ?? ""}${body.slice(statement.end)}`,
     rewritten.css
@@ -3423,7 +4018,10 @@ function ogInput({
 }
 async function createThemeBuildPlan({
   config,
-  publishOsDir
+  publishOsDir,
+  media,
+  resourceAdmission: suppliedResourceAdmission,
+  onWarning
 }) {
   let sources = /* @__PURE__ */ new Map(), rootSource = await themeSource({
     folderPath: publishOsDir,
@@ -3439,41 +4037,46 @@ async function createThemeBuildPlan({
       source && sources.set(group.key, source);
     })
   );
-  let assets = /* @__PURE__ */ new Map(), defaultsTemplate = await readFile5(THEME_DEFAULTS_PATH, "utf-8"), rootCss = rootSource ? await inlineLocalCssImports({
+  let assets = /* @__PURE__ */ new Map(), resourceAdmission = suppliedResourceAdmission ?? createThemeResourceAdmission({ media, publishOsDir }), warnedFiles = /* @__PURE__ */ new Set(), warn = (warning) => {
+    warning.file && warnedFiles.has(warning.file) || (warning.file && warnedFiles.add(warning.file), onWarning?.(warning));
+  }, defaultsTemplate = await readFile5(THEME_DEFAULTS_PATH, "utf-8"), rootCss = rootSource ? await inlineLocalCssImports({
     filePath: rootSource.filePath,
     rootDir: publishOsDir,
     publishOsDir,
-    assets
+    assets,
+    resourceAdmission,
+    onWarning: warn
   }) : "", groups = {};
-  return await Promise.all(
-    Object.values(config.groups).map(async (group) => {
-      let source = sources.get(group.key), selectors = groupSelectors(config, group);
-      if (!source || group.key === ROOT_CONTENT_GROUP_KEY) {
-        groups[group.key] = {
-          css: "",
-          hasCss: !1,
-          selector: selectors.join(`,
-`)
-        };
-        return;
-      }
-      let authoredCss = await inlineLocalCssImports({
-        filePath: source.filePath,
-        rootDir: group.folderPath,
-        publishOsDir,
-        assets
-      });
+  for (let group of Object.values(config.groups)) {
+    let source = sources.get(group.key), selectors = groupSelectors(config, group);
+    if (!source || group.key === ROOT_CONTENT_GROUP_KEY) {
       groups[group.key] = {
-        css: `/* ${group.key} */
+        css: "",
+        hasCss: !1,
+        selector: selectors.join(`,
+`)
+      };
+      continue;
+    }
+    let authoredCss = await inlineLocalCssImports({
+      filePath: source.filePath,
+      rootDir: group.folderPath,
+      publishOsDir,
+      assets,
+      resourceAdmission,
+      onWarning: warn
+    });
+    groups[group.key] = {
+      css: `/* ${group.key} */
 ${derivedThemeCss(defaultsTemplate, selectors.join(`,
 `))}${scopeGroupThemeCss({ css: authoredCss, scopeSelectors: selectors, sourcePath: source.relativePath })}
 `,
-        hasCss: !0,
-        selector: selectors.join(`,
+      hasCss: !0,
+      selector: selectors.join(`,
 `)
-      };
-    })
-  ), {
+    };
+  }
+  return {
     assets: [...assets.values()].sort(
       (left, right) => left.sourcePath.localeCompare(right.sourcePath)
     ),
@@ -3486,6 +4089,206 @@ ${derivedThemeCss(defaultsTemplate, selectors.join(`,
   };
 }
 
+// src/lib/runtime/metadata/discovery-content.ts
+function discoveryOrigin(manifest, group) {
+  return (group ? manifest.groups[group]?.origin : void 0) ?? manifest.site.origin;
+}
+function pathWithin(path, basePath) {
+  return basePath === "/" || path === basePath || path.startsWith(`${basePath}/`);
+}
+function discoveryPages({
+  manifest,
+  group,
+  scope,
+  limit
+}) {
+  let origin = discoveryOrigin(manifest, group), basePath = group ? manifest.groups[group]?.path ?? "/" : "/", pages = manifest.pages.filter((page) => page.status !== "published" || discoveryOrigin(manifest, page.group) !== origin ? !1 : !group || scope === "site" ? !0 : pathWithin(page.path, basePath) ? page.group === group || scope !== "self" && page.group.startsWith(`${group}/`) : !1);
+  return limit ? pages.slice(0, limit) : pages;
+}
+function groupDiscoveryPages({
+  manifest,
+  pages
+}) {
+  let sections = /* @__PURE__ */ new Map();
+  for (let page of pages) {
+    let group = manifest.groups[page.group], key = group ? page.group : "", section = sections.get(key);
+    section || (section = {
+      ...group ? { group: page.group } : {},
+      title: group ? group.key === "__root" ? manifest.site.name : group.title : "Pages",
+      pages: []
+    }, sections.set(key, section)), section.pages.push(page);
+  }
+  return [...sections.values()].sort(
+    (a, b) => (manifest.groups[a.group ?? ""]?.path ?? "/").localeCompare(
+      manifest.groups[b.group ?? ""]?.path ?? "/"
+    ) || a.title.localeCompare(b.title)
+  );
+}
+
+// src/lib/runtime/metadata/feed-serialization.ts
+function xmlEscape(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
+}
+function latestDate(pages) {
+  let timestamp = Math.max(
+    0,
+    ...pages.map((page) => {
+      let date = page.publishedAt ?? page.updatedAt;
+      if (!date) return -1 / 0;
+      let parsed = Date.parse(date);
+      return Number.isNaN(parsed) ? -1 / 0 : parsed;
+    })
+  );
+  return new Date(timestamp).toISOString();
+}
+function serializeRssFeed(input) {
+  let description = input.description ?? input.title, items = input.pages.map((page) => {
+    let publishedAt = page.publishedAt, pubDate = publishedAt ? `
+      <pubDate>${xmlEscape(new Date(publishedAt).toUTCString())}</pubDate>` : "", itemDescription = page.description ? `
+      <description>${xmlEscape(page.description)}</description>` : "";
+    return `    <item>
+      <title>${xmlEscape(page.title)}</title>
+      <link>${xmlEscape(page.url)}</link>
+      <guid>${xmlEscape(page.url)}</guid>${pubDate}${itemDescription}
+    </item>`;
+  }).join(`
+`);
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<rss version="2.0">
+  <channel>
+    <title>${xmlEscape(input.title)}</title>
+    <link>${xmlEscape(input.homeUrl)}</link>
+    <description>${xmlEscape(description)}</description>
+${items}
+  </channel>
+</rss>
+`;
+}
+function serializeAtomFeed(input) {
+  let entries = input.pages.map((page) => {
+    let date = page.publishedAt ?? page.updatedAt, updated = date ? new Date(date).toISOString() : latestDate([]), summary = page.description ? `
+    <summary>${xmlEscape(page.description)}</summary>` : "";
+    return `  <entry>
+    <title>${xmlEscape(page.title)}</title>
+    <id>${xmlEscape(page.url)}</id>
+    <link href="${xmlEscape(page.url)}" />
+    <updated>${xmlEscape(updated)}</updated>${summary}
+  </entry>`;
+  }).join(`
+`);
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<feed xmlns="http://www.w3.org/2005/Atom">
+  <title>${xmlEscape(input.title)}</title>
+  <id>${xmlEscape(input.homeUrl)}</id>
+  <updated>${xmlEscape(latestDate(input.pages))}</updated>
+${entries}
+</feed>
+`;
+}
+function serializeJsonFeed(input) {
+  return `${JSON.stringify(
+    {
+      version: "https://jsonfeed.org/version/1.1",
+      title: input.title,
+      description: input.description,
+      home_page_url: input.homeUrl,
+      items: input.pages.map((page) => ({
+        id: page.url,
+        url: page.url,
+        title: page.title,
+        summary: page.description,
+        content_text: page.body,
+        date_published: page.publishedAt,
+        date_modified: page.updatedAt,
+        tags: page.tags
+      }))
+    },
+    null,
+    2
+  )}
+`;
+}
+
+// src/lib/runtime/metadata/llms-serialization.ts
+function inlineText(value) {
+  return value.replace(/[\r\n]+/g, " ").replace(/([\\`*_[\]<>])/g, "\\$1");
+}
+function markdownLink2(link) {
+  let url = link.url.replace(
+    /[\s()<>]/g,
+    (value) => value === "(" ? "%28" : value === ")" ? "%29" : encodeURIComponent(value)
+  );
+  return `[${inlineText(link.title)}](${url})`;
+}
+function serializeLlmsIndex(input) {
+  let body = (input.sections ?? [
+    { title: "Pages", pages: input.pages ?? [] }
+  ]).map((section) => {
+    let lines = [
+      ...(section.links ?? []).map((link) => `- ${markdownLink2(link)}`),
+      ...section.pages.map((page) => {
+        let description = input.includeDescriptions && page.description ? `: ${inlineText(page.description)}` : "", alternate = page.alternate ? ` (${markdownLink2(page.alternate)})` : "";
+        return `- ${markdownLink2(page)}${alternate}${description}`;
+      })
+    ];
+    return `## ${inlineText(section.title)}
+
+${lines.join(`
+`)}`;
+  }).join(`
+
+`), linkLines = (input.links ?? []).map(
+    (link) => `- ${markdownLink2(link)}`
+  ), linkSection = linkLines.length ? `
+
+## Group LLM indexes
+
+${linkLines.join(`
+`)}` : "", otherGroupLines = (input.otherGroupLinks ?? []).map(
+    (link) => `- ${markdownLink2(link)}`
+  ), otherGroupSection = otherGroupLines.length ? `
+
+## Other content groups
+
+${otherGroupLines.join(`
+`)}` : "";
+  return `# ${inlineText(input.title)}
+
+> ${inlineText(input.summary)}
+
+${body}${linkSection}${otherGroupSection}
+`;
+}
+function serializeLlmsFull(input) {
+  let encoder = new TextEncoder(), byteLength = (value) => encoder.encode(value).byteLength, references = [
+    input.indexUrl ? `> LLMS index: ${input.indexUrl}` : void 0,
+    input.sitemapUrl ? `> Sitemap: ${input.sitemapUrl}` : void 0
+  ].filter(Boolean).join(`
+`), header = `# ${input.title} Full Content
+
+${references ? `${references}
+
+` : ""}`, sections = [], totalBytes = byteLength(header), included = 0, truncated = !1;
+  for (let artifact of [...input.artifacts].sort(
+    (a, b) => a.markdownPath.localeCompare(b.markdownPath)
+  )) {
+    let section = `---
+
+${artifact.body.trim()}
+
+`, sectionBytes = byteLength(section);
+    if (totalBytes + sectionBytes > input.maxBytes) {
+      truncated = !0;
+      break;
+    }
+    sections.push(section), totalBytes += sectionBytes, included += 1;
+  }
+  let footer = truncated ? `
+> Truncated at ${included} of ${input.totalCount ?? input.artifacts.length} Markdown pages to stay under ${input.maxBytes} bytes.
+` : "";
+  return `${header}${sections.join("")}${footer}`;
+}
+
 // src/lib/compiler/nextjs/compose.ts
 var BANNER = `// AUTO-GENERATED by the PublishOS framework - do not edit.
 `, MARKDOWN_ARTIFACT_SHARD_MAX_BYTES = 256e3, MARKDOWN_ARTIFACT_SHARD_MAX_PAGES = 250, DEFAULT_LLMS_FULL_MAX_BYTES = 1e6;
@@ -3510,31 +4313,29 @@ function assertComposeOutputDirSafe(options) {
 function childRouteDir(routeDir, child) {
   return routeDir ? `${routeDir}/${child}` : child;
 }
-var installedFramework2 = readInstalledFrameworkLocation(), KERNEL_DIR = resolve7(installedFramework2.packageRoot, "compiler-assets"), NEXTJS_KERNEL_DIR = resolve7(KERNEL_DIR, "nextjs"), DEFAULTS_DIR = resolve7(NEXTJS_KERNEL_DIR, "defaults"), SHIMS_DIR = resolve7(NEXTJS_KERNEL_DIR, "shims"), RUNTIME_DIST_DIR = resolve7(installedFramework2.packageRoot, "dist"), DIRECT_SHIMS_DIR = resolve7(NEXTJS_KERNEL_DIR, "direct-assets", "shims"), DIRECT_DESIGN_SYSTEM_SHIMS = [
-  "design-system-page.tsx",
-  "design-system-progress-page.tsx",
-  "design-system-links-page.tsx"
-];
-async function hasDirectDesignSystemRoute() {
-  let files = await Promise.all(
-    DIRECT_DESIGN_SYSTEM_SHIMS.map(async (file) => ({
-      file,
-      present: await fileExists5(resolve7(DIRECT_SHIMS_DIR, file))
-    }))
-  );
-  if (!files.some(({ present }) => present)) return !1;
-  let missing = files.filter(({ present }) => !present).map(({ file }) => file);
-  if (missing.length > 0)
-    throw new AppError({
-      code: "FRAMEWORK_RELEASE_INVALID",
-      message: "The local design-system route assets are incomplete.",
-      details: { missing }
-    });
-  return !0;
-}
+var installedFramework2 = readInstalledFrameworkLocation(), KERNEL_DIR = resolve7(installedFramework2.packageRoot, "compiler-assets"), NEXTJS_KERNEL_DIR = resolve7(KERNEL_DIR, "nextjs"), DEFAULTS_DIR = resolve7(NEXTJS_KERNEL_DIR, "defaults"), SHIMS_DIR = resolve7(NEXTJS_KERNEL_DIR, "shims"), RUNTIME_DIST_DIR = resolve7(installedFramework2.packageRoot, "dist");
 async function fileExists5(path) {
   return await stat6(path).then((entry) => entry.isFile()).catch(() => !1);
 }
+async function componentResolveAliases({
+  outputDir,
+  sourceDir
+}) {
+  let extensions = [".tsx", ".ts", ".jsx", ".js", ".mjs", ".cjs"], aliases = {};
+  for (let alias of supportedRuntimeComponentAliases()) {
+    let componentPath = alias.slice(12), base = resolve7(sourceDir, "components", componentPath), candidates = [
+      ...extensions.map((extension) => `${base}${extension}`),
+      ...extensions.map((extension) => resolve7(base, `index${extension}`))
+    ], authored;
+    for (let candidate of candidates)
+      if (await fileExists5(candidate)) {
+        authored = candidate;
+        break;
+      }
+    aliases[alias] = authored ? `./${relative4(outputDir, authored).replaceAll("\\", "/")}` : `@publish.os/nextjs/kernel/components/${componentPath}`;
+  }
+  return aliases;
+}
 async function readKernelFile(path) {
   return await readFile6(resolve7(KERNEL_DIR, path), "utf-8");
 }
@@ -3572,6 +4373,13 @@ async function walkPublishOsSourceFiles(dir) {
     skipDirectory: isExcludedSourcePath
   })).filter((path) => !isExcludedSourcePath(path));
 }
+async function mapLocalAssetUrlsInCss(outputDir) {
+  for (let path of await walkFiles(outputDir)) {
+    if (!path.endsWith(".css")) continue;
+    let absolutePath = resolve7(outputDir, path), css = await readFile6(absolutePath, "utf-8"), mapped = mapSourceAssetCss(css, absolutePath);
+    mapped !== css && await writeText(absolutePath, mapped);
+  }
+}
 function createIdeSourceArtifacts(options) {
   return {
     mediaModule: mediaManifestModule(options.mediaManifest)
@@ -3658,117 +4466,30 @@ function defaultSourceGlobalsEntrypoint() {
     '@import "./css/layout.css";',
     '@import "./css/zindex.css";',
     '@import "./css/typography.css";',
-    '@import "./css/animation.css";',
-    '@import "./css/media.css";',
-    '@import "./theme-base.generated.css";',
-    '@import "./theme-defaults.generated.css";',
-    '@import "./components.generated.css";',
-    '@import "./theme.css";',
-    '@import "./publishos.css";'
-  ].join(`
-`)}
-`;
-}
-function componentDefaultsCss(manifest) {
-  return `${manifest.families.map((family) => `@import "./css/components/${family}.css";`).join(`
-`)}
-`;
-}
-async function appGlobalsCss(manifest) {
-  return (await readKernelFile("nextjs/defaults/app/globals.css")).replace(
-    "/* PUBLISHOS_TAILWIND_SOURCES */",
-    manifest.sources.map((source) => `@source "${source}";`).join(`
-`)
-  );
-}
-async function designSystemPreviewModule(publishOsDir) {
-  let hasButton = await fileExists5(
-    resolve7(publishOsDir, "components", "ui", "button.tsx")
-  ), hasMdxLink = await fileExists5(
-    resolve7(publishOsDir, "components", "mdx", "link.tsx")
-  ), hasNavbar = await fileExists5(
-    resolve7(publishOsDir, "components", "blocks", "navbar.tsx")
-  ), imports = [
-    'import { DesignSystemPreview } from "@components/blocks/design-system-preview";',
-    'import type { DesignSystemPreviewFixture } from "@components/blocks/design-system-preview";',
-    'import { Tabs, TabsList, TabsPanel, TabsTab } from "@components/ui/tabs";'
-  ];
-  hasButton && imports.push('import { Button } from "@components/ui/button";'), hasMdxLink && imports.push('import { Link as MdxLink } from "@components/mdx/link";'), hasNavbar && (imports.push('import { Navbar } from "@components/blocks/navbar";'), imports.push(
-    'import type { SiteData, TreeNode } from "@publish.os/nextjs/types";'
-  ));
-  let declarations = [], uiFixtures = hasButton ? `[
-  {
-    name: "Button",
-    children: (
-      <div className="flex flex-col items-center gap-3">
-        <Button>Solid</Button>
-        <Button variant="soft">Soft</Button>
-        <Button disabled>Disabled</Button>
-      </div>
-    ),
-  },
-]` : "[]", mdxFixtures = hasMdxLink ? `[
-  {
-    name: "Link",
-    children: (
-      <div className="flex flex-col items-center gap-2 text-sm">
-        <MdxLink href="/ds">Internal link</MdxLink>
-        <MdxLink href="#">Example link</MdxLink>
-      </div>
-    ),
-  },
-]` : "[]";
-  hasNavbar && declarations.push(`const previewSite: SiteData = {
-  name: "publishOS Preview",
-};
-
-const previewTree: TreeNode[] = [
-  {
-    type: "section",
-    id: "docs",
-    title: "Docs",
-    path: "/docs",
-    children: [],
-  },
-  {
-    type: "section",
-    id: "blog",
-    title: "Blog",
-    path: "/blog",
-    children: [],
-  },
-];`);
-  let blockFixtures = hasNavbar ? `[
-  {
-    name: "Navbar",
-    children: (
-      <Navbar site={previewSite} tree={previewTree} />
-    ),
-  },
-]` : "[]";
-  return `${imports.join(`
-`)}
-
-${declarations.join(`
-
+    '@import "./css/animation.css";',
+    '@import "./css/media.css";',
+    '@import "./theme-base.generated.css";',
+    '@import "./theme-defaults.generated.css";',
+    '@import "./components.generated.css";',
+    '@import "./theme.css";',
+    '@import "./publishos.css";',
+    '@import "./css/components/code-block.css";'
+  ].join(`
 `)}
-
-const uiFixtures: DesignSystemPreviewFixture[] = ${uiFixtures};
-const mdxFixtures: DesignSystemPreviewFixture[] = ${mdxFixtures};
-const blockFixtures: DesignSystemPreviewFixture[] = ${blockFixtures};
-
-export default function GeneratedDesignSystemPreview() {
-  return (
-    <DesignSystemPreview
-      blocks={blockFixtures}
-      mdx={mdxFixtures}
-      tabComponents={{ Tabs, TabsList, TabsPanel, TabsTab }}
-      ui={uiFixtures}
-    />
-  );
+`;
 }
+function componentDefaultsCss(manifest) {
+  return `${manifest.families.map((family) => `@import "./css/components/${family}.css";`).join(`
+`)}
 `;
 }
+async function appGlobalsCss(manifest) {
+  return (await readKernelFile("nextjs/defaults/app/globals.css")).replace(
+    "/* PUBLISHOS_TAILWIND_SOURCES */",
+    manifest.sources.map((source) => `@source "${source}";`).join(`
+`)
+  );
+}
 async function mdxSourceComponentsModule(publishOsDir) {
   let mdxDir = resolve7(publishOsDir, "components", "mdx"), files = (await readdir3(mdxDir).catch(() => [])).filter((file) => file.endsWith(".tsx")).sort(), imports = [
     'import type { MDXComponents } from "@publish.os/nextjs/mdx/mdx";'
@@ -4204,12 +4925,21 @@ function ogFontRoleInput(font) {
     subsets: font.subsets,
     weight: font.weight,
     ...font.localFiles ? {
-      files: font.localFiles.map((file) => ({
-        configuredPath: file.configuredPath,
-        path: file.sourcePath,
-        style: (Array.isArray(file.style), file.style),
-        weight: file.declaredWeight
-      }))
+      files: font.localFiles.map((file) => {
+        if (!file.admittedContents)
+          throw new AppError({
+            code: "FRAMEWORK_FONT_ASSET_UNAVAILABLE",
+            message: `The local font file was not admitted: ${file.configuredPath}`,
+            details: { path: file.configuredPath }
+          });
+        return {
+          configuredPath: file.configuredPath,
+          data: file.admittedContents,
+          path: file.sourcePath,
+          style: file.style,
+          weight: file.declaredWeight
+        };
+      })
     } : {}
   };
 }
@@ -4263,7 +4993,8 @@ async function validateLocalVariableFonts({
           isVariableFontWeight(weight) && (file.weight = await validateVariableFontFile({
             configuredPath: file.configuredPath,
             sourcePath: file.sourcePath,
-            weight
+            weight,
+            contents: file.admittedContents
           }));
         })
       ), localFiles.length === 1 && isVariableFontWeight(font.weight) && (font.weight = localFiles[0]?.weight), localFiles.length === 1 && (font.style = localFiles[0]?.style ?? font.style);
@@ -4274,19 +5005,51 @@ async function fontBuildPlan({
   config,
   publishOsDir,
   prepareAssets,
-  themeGroups
+  themeGroups,
+  resourceAdmission
 }) {
   let rootFonts = resolvedRootFonts(config, publishOsDir), fontsByIdentity = /* @__PURE__ */ new Map(), register = (font) => {
     fontsByIdentity.has(font.identity) || fontsByIdentity.set(font.identity, font);
   };
   for (let font of Object.values(rootFonts)) register(font);
-  let groups = {};
+  let groupOverridesByKey = /* @__PURE__ */ new Map(), groups = {};
   for (let group of Object.values(config.groups)) {
     if (!hasFontOverrides(group)) continue;
     let overrides = groupFontOverrides(group, publishOsDir);
+    groupOverridesByKey.set(group.key, overrides);
     for (let font of Object.values(overrides))
       font && register(font);
   }
+  let admittedFonts = /* @__PURE__ */ new Map(), allFontInstances = [
+    ...Object.values(rootFonts),
+    ...[...groupOverridesByKey.values()].flatMap(
+      (overrides) => Object.values(overrides).filter(
+        (font) => !!font
+      )
+    )
+  ];
+  for (let font of allFontInstances)
+    for (let file of font.localFiles ?? []) {
+      let sourcePath = resolve7(
+        publishOsDir,
+        localFontSourcePath(file.configuredPath)
+      ), admitted = admittedFonts.get(sourcePath);
+      if (!admitted) {
+        let result = await resourceAdmission.admit({
+          filePath: file.configuredPath,
+          relativePath: relative4(publishOsDir, sourcePath),
+          sourcePath
+        });
+        if (!result.asset)
+          throw new AppError({
+            code: "FRAMEWORK_FONT_ASSET_UNAVAILABLE",
+            message: `The local font file could not be admitted: ${file.configuredPath}`,
+            details: { path: file.configuredPath }
+          });
+        admitted = result.asset.contents, admittedFonts.set(sourcePath, admitted);
+      }
+      file.admittedContents = admitted;
+    }
   await validateLocalVariableFonts({
     fonts: fontsByIdentity.values(),
     publishOsDir
@@ -4321,7 +5084,7 @@ async function fontBuildPlan({
         message: `Theme scope is missing for group "${group.key}"`,
         details: { group: group.key }
       });
-    let overrides = groupFontOverrides(group, publishOsDir), overrideFonts = Object.values(overrides).filter(
+    let overrides = groupOverridesByKey.get(group.key) ?? {}, overrideFonts = Object.values(overrides).filter(
       Boolean
     ), imports = Array.from(new Set(overrideFonts.map(importFor))), classNameExport = `${camelCase(group.key)}FontClassName`, module = `${BANNER}${imports.join(`
 `)}
@@ -4367,9 +5130,8 @@ ${declaredFontRoles(group.fonts).map(
     Object.values(config.groups).filter((group) => hasConfiguredOgRole(group)).map((group) => {
       let resolved = { main: rootFonts.main, mono: rootFonts.mono };
       for (let key of group.ancestry) {
-        let ancestor = config.groups[key];
-        if (!ancestor) continue;
-        let overrides = groupFontOverrides(ancestor, publishOsDir);
+        if (!config.groups[key]) continue;
+        let overrides = groupOverridesByKey.get(key) ?? {};
         overrides.main && (resolved.main = overrides.main), overrides.mono && (resolved.mono = overrides.mono);
       }
       return [
@@ -4426,7 +5188,7 @@ ${declaredFontRoles(group.fonts).map(
     assets: [...fontsByIdentity.values()].flatMap(
       (font) => (font.localFiles ?? []).map((file) => ({
         dest: file.generatedPath,
-        src: file.sourcePath
+        data: file.admittedContents
       }))
     ),
     root: {
@@ -4471,7 +5233,7 @@ ${Object.entries(rootFonts).sort(([left], [right]) => left.localeCompare(right))
     ...ogFontManifest ? { og: ogFontManifest } : {}
   };
 }
-async function overlaySource(publishOsDir, sourceDir, config, fonts, theme) {
+async function overlaySource(publishOsDir, sourceDir, config, fonts, theme, pages) {
   let defaultsUsed = [], sourceOverrides = [], sourceConfigPath = resolve7(publishOsDir, "publish.os.config.json");
   await fileExists5(sourceConfigPath) && (await copyText(
     sourceConfigPath,
@@ -4502,6 +5264,9 @@ async function overlaySource(publishOsDir, sourceDir, config, fonts, theme) {
     resolve7(sourceDir, "_internal", "mdx-source-components.generated.ts"),
     await mdxSourceComponentsModule(publishOsDir)
   ), defaultsUsed.push("_internal/mdx-source-components.generated.ts"), await writeText(
+    resolve7(sourceDir, "_internal", "mdx-icon-components.generated.ts"),
+    mdxIconComponentsModule(pages)
+  ), defaultsUsed.push("_internal/mdx-icon-components.generated.ts"), await writeText(
     resolve7(sourceDir, "_internal", "mdx-components.generated.tsx"),
     BANNER + await renderShim("site-mdx-components.tsx", {})
   ), defaultsUsed.push("_internal/mdx-components.generated.tsx"), await writeText(
@@ -4525,29 +5290,19 @@ async function overlaySource(publishOsDir, sourceDir, config, fonts, theme) {
   for (let module of fonts.modules)
     await writeText(resolve7(dirname8(sourceDir), module.path), module.content), defaultsUsed.push(module.path.replace(/^source\//, ""));
   for (let asset of fonts.assets) {
-    if (await assertSourceDependency({
-      publishOsDir,
-      path: asset.src,
-      sourceFile: "publish.os.config.json"
-    }), !await fileExists5(asset.src))
-      throw new AppError({
-        code: "FRAMEWORK_FONT_CONFIG_INVALID",
-        message: `Local font file does not exist: ${asset.src}`,
-        details: { path: asset.src }
-      });
-    await copyTreeIfExists(asset.src, resolve7(dirname8(sourceDir), asset.dest)), defaultsUsed.push(asset.dest.replace(/^source\//, ""));
+    let destination = resolve7(dirname8(sourceDir), asset.dest);
+    await mkdir6(dirname8(destination), { recursive: !0 }), await writeFile6(destination, asset.data), defaultsUsed.push(asset.dest.replace(/^source\//, ""));
   }
   for (let asset of fonts.downloadedAssets) {
     let destination = resolve7(dirname8(sourceDir), asset.dest);
     await mkdir6(dirname8(destination), { recursive: !0 }), await writeFile6(destination, asset.data);
   }
-  for (let asset of theme.assets)
-    await copyTreeIfExists(
-      asset.sourcePath,
-      resolve7(dirname8(sourceDir), "public", asset.outputPath)
-    ), sourceOverrides.push(
+  for (let asset of theme.assets) {
+    let destination = resolve7(dirname8(sourceDir), "public", asset.outputPath);
+    await mkdir6(dirname8(destination), { recursive: !0 }), await writeFile6(destination, asset.contents), sourceOverrides.push(
       relative4(publishOsDir, asset.sourcePath).split("\\").join("/")
     );
+  }
   for (let file of ["layout.tsx", "index.tsx", "page.tsx"]) {
     let projectPath = resolve7(publishOsDir, file), dest = resolve7(sourceDir, file);
     await fileExists5(projectPath) ? (await copyTreeIfExists(projectPath, dest), sourceOverrides.push(file)) : (await copyTreeIfExists(resolve7(DEFAULTS_DIR, "root", file), dest), defaultsUsed.push(file));
@@ -4604,10 +5359,6 @@ export default function InheritedGroupLayout({ children }: LayoutProps) { return
     resolve7(publishOsDir, "components"),
     resolve7(sourceDir, "components"),
     publishOsDir
-  ), await copyTreeIfExists(
-    resolve7(publishOsDir, "public"),
-    resolve7(dirname8(sourceDir), "public"),
-    publishOsDir
   ), { defaultsUsed, sourceOverrides };
 }
 function manifestModule(manifest) {
@@ -4681,6 +5432,20 @@ function outputRoutePath(outputPath) {
 function outputPathWithinGroup(path, groupPath) {
   return groupPath === "/" || path === groupPath || path.startsWith(`${groupPath}/`);
 }
+function outputDirectory2(path) {
+  return path.slice(0, path.lastIndexOf("/") + 1) || "/";
+}
+function discoveryPlanCovers({
+  manifest,
+  plan,
+  group,
+  path
+}) {
+  if (effectiveOrigin(manifest, plan.group) !== effectiveOrigin(manifest, group))
+    return !1;
+  let scopeGroup = plan.scopeGroup ?? plan.group;
+  return scopeGroup ? outputPathWithinGroup(path, manifest.groups[scopeGroup]?.path ?? "/") ? plan.scope === "site" ? !0 : group === scopeGroup || plan.scope !== "self" && group.startsWith(`${scopeGroup}/`) : !1 : !0;
+}
 function outputFactory(kind) {
   return kind === "atom" ? { factory: "createAtomFeedRoute", routeModule: "feed" } : kind === "json-feed" ? { factory: "createJsonFeedRoute", routeModule: "feed" } : kind === "rss" ? { factory: "createRssFeedRoute", routeModule: "feed" } : kind === "llms" ? { factory: "createLlmsTxtRoute", routeModule: "llms" } : kind === "llms-full" ? { factory: "createLlmsFullTxtRoute", routeModule: "llms" } : kind === "sitemap-md" ? { factory: "createSitemapMarkdownRoute", routeModule: "sitemap" } : { factory: "createSitemapXmlRoute", routeModule: "sitemap" };
 }
@@ -4701,13 +5466,13 @@ export const GET = createPrecomputedFeedRoute(agentTextOutputs[${JSON.stringify(
 export const HEAD = GET;
 `;
   let options = {};
-  plan.scope && (options.scope = plan.scope), plan.group && (options.group = plan.group), plan.limit && (options.limit = plan.limit), plan.status && (options.status = plan.status), plan.includeDescriptions && (options.includeDescriptions = plan.includeDescriptions), plan.links?.length && (options.links = plan.links);
+  plan.scope && (options.scope = plan.scope), plan.group && (options.group = plan.group), plan.kind === "sitemap-md" && plan.scopeGroup && (options.group = plan.scopeGroup), plan.limit && (options.limit = plan.limit), plan.status && (options.status = plan.status), plan.includeDescriptions && (options.includeDescriptions = plan.includeDescriptions), plan.links && (options.links = plan.links), plan.otherGroupLinks && (options.otherGroupLinks = plan.otherGroupLinks), plan.kind === "sitemap" && (options.path = plan.path, plan.sitemaps && (options.sitemaps = plan.sitemaps), plan.exclude?.length && (options.exclude = plan.exclude)), plan.markdownAlternates === !1 && (options.markdownAlternates = !1);
   let args = Object.keys(options).length > 0 ? `manifest, ${JSON.stringify(options, null, 2)}` : "manifest";
   return plan.kind === "sitemap-md" ? `import manifest from "@manifest";
 import { markdownArtifactManifest } from "@source/.publishos/markdown-index.generated";
 import { ${factory} } from "@publish.os/nextjs/kernel/routes/metadata/${routeModule}";
 
-export const GET = ${factory}(manifest, markdownArtifactManifest);
+export const GET = ${factory}(manifest, markdownArtifactManifest, ${JSON.stringify(options, null, 2)});
 ` : `import manifest from "@manifest";
 import { ${factory} } from "@publish.os/nextjs/kernel/routes/metadata/${routeModule}";
 
@@ -4740,36 +5505,51 @@ function outputHome(manifest, plan) {
 function llmsSummary(manifest, title) {
   return manifest.site.description ? `> ${manifest.site.description}` : `> Agent-readable index for ${title}.`;
 }
-function llmsTextBody(manifest, plan) {
-  let home = outputHome(manifest, plan), pages = manifest.pages.filter((page) => page.status === "published").filter((page) => pageInOutputScope(page, plan, manifest)), lines = (plan.limit ? pages.slice(0, plan.limit) : pages).map((page) => {
-    let description = plan.includeDescriptions && page.description ? ` - ${page.description}` : "";
-    return `- [${page.title}](${canonicalUrl(manifest, page.path, page.group)})${description}`;
-  }), linkLines = (plan.links ?? []).map(
-    (link) => `- [${link.title}](${canonicalUrl(manifest, link.path, link.group)})`
-  ), linkSection = linkLines.length ? `
-
-## Group LLM indexes
-
-${linkLines.join(`
-`)}` : "";
-  return `# ${home.title}
-
-${llmsSummary(manifest, home.title)}
-
-## Pages
-
-${lines.join(`
-`)}${linkSection}
-`;
+function llmsTextBody(manifest, plan, markdownPaths) {
+  let home = outputHome(manifest, plan), pages = discoveryPages({
+    manifest,
+    ...plan,
+    group: plan.scopeGroup ?? plan.group
+  }), sections = groupDiscoveryPages({ manifest, pages });
+  for (let link of plan.links ?? []) {
+    let group = link.group ? manifest.groups[link.group] : void 0;
+    group && !sections.some((section) => section.group === group.key) && sections.push({ group: group.key, title: group.title, pages: [] });
+  }
+  return serializeLlmsIndex({
+    title: home.title,
+    summary: llmsSummary(manifest, home.title).replace(/^> /, ""),
+    sections: sections.sort(
+      (a, b) => (manifest.groups[a.group ?? ""]?.path ?? "/").localeCompare(
+        manifest.groups[b.group ?? ""]?.path ?? "/"
+      )
+    ).map((section) => ({
+      title: section.title,
+      pages: section.pages.map((page) => ({
+        title: page.title,
+        url: canonicalUrl(
+          manifest,
+          markdownPaths.get(page.path) ?? page.path,
+          page.group
+        ),
+        description: page.description
+      })),
+      links: plan.links?.filter((link) => link.group === section.group).map((link) => ({
+        title: `${link.title} index`,
+        url: canonicalUrl(manifest, link.path, link.group)
+      }))
+    })),
+    includeDescriptions: plan.includeDescriptions,
+    otherGroupLinks: plan.otherGroupLinks?.map((link) => ({
+      title: link.title,
+      url: canonicalUrl(manifest, link.path, link.group)
+    }))
+  });
 }
 function feedContentType(kind) {
   if (kind === "rss") return "application/rss+xml; charset=utf-8";
   if (kind === "atom") return "application/atom+xml; charset=utf-8";
   if (kind === "json-feed") return "application/feed+json; charset=utf-8";
 }
-function xmlEscape(value) {
-  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
-}
 function pageTimestamp(page) {
   let value = page.publishedAt ?? page.updatedAt;
   if (!value) return -1 / 0;
@@ -4783,126 +5563,72 @@ function feedPages(manifest, plan) {
   let statuses = outputStatuses(plan), pages = manifest.pages.filter((page) => statuses.has(page.status)).filter((page) => pageInOutputScope(page, plan, manifest)).sort((a, b) => pageTimestamp(b) - pageTimestamp(a));
   return plan.limit ? pages.slice(0, plan.limit) : pages;
 }
-function pageDate(page) {
-  return page.publishedAt ?? page.updatedAt;
-}
-function latestFeedDate(pages) {
-  let timestamp = Math.max(0, ...pages.map((page) => pageTimestamp(page)));
-  return new Date(timestamp).toISOString();
-}
-function rssFeedBody(manifest, plan) {
-  let home = outputHome(manifest, plan), title = home.title, description = manifest.site.description ?? title, pages = feedPages(manifest, plan), homeUrl = canonicalUrl(manifest, home.path, home.group), items = pages.map((page) => {
-    let pageUrl = canonicalUrl(manifest, page.path, page.group), pubDate = page.publishedAt ? `
-      <pubDate>${xmlEscape(new Date(page.publishedAt).toUTCString())}</pubDate>` : "", description2 = page.description ? `
-      <description>${xmlEscape(page.description)}</description>` : "";
-    return `    <item>
-      <title>${xmlEscape(page.title)}</title>
-      <link>${xmlEscape(pageUrl)}</link>
-      <guid>${xmlEscape(pageUrl)}</guid>${pubDate}${description2}
-    </item>`;
-  }).join(`
-`);
-  return `<?xml version="1.0" encoding="UTF-8"?>
-<rss version="2.0">
-  <channel>
-    <title>${xmlEscape(title)}</title>
-    <link>${xmlEscape(homeUrl)}</link>
-    <description>${xmlEscape(description)}</description>
-${items}
-  </channel>
-</rss>
-`;
-}
-function atomFeedBody(manifest, plan) {
-  let home = outputHome(manifest, plan), title = home.title, pages = feedPages(manifest, plan), homeUrl = canonicalUrl(manifest, home.path, home.group), entries = pages.map((page) => {
-    let date = pageDate(page), updated = date ? new Date(date).toISOString() : latestFeedDate([]), pageUrl = canonicalUrl(manifest, page.path, page.group), summary = page.description ? `
-    <summary>${xmlEscape(page.description)}</summary>` : "";
-    return `  <entry>
-    <title>${xmlEscape(page.title)}</title>
-    <id>${xmlEscape(pageUrl)}</id>
-    <link href="${xmlEscape(pageUrl)}" />
-    <updated>${xmlEscape(updated)}</updated>${summary}
-  </entry>`;
-  }).join(`
-`);
-  return `<?xml version="1.0" encoding="UTF-8"?>
-<feed xmlns="http://www.w3.org/2005/Atom">
-  <title>${xmlEscape(title)}</title>
-  <id>${xmlEscape(homeUrl)}</id>
-  <updated>${xmlEscape(latestFeedDate(pages))}</updated>
-${entries}
-</feed>
-`;
-}
-function jsonFeedBody(manifest, plan) {
+function generatedFeedInput(manifest, plan) {
   let home = outputHome(manifest, plan), pages = feedPages(manifest, plan);
-  return `${JSON.stringify(
-    {
-      version: "https://jsonfeed.org/version/1.1",
-      title: home.title,
-      description: manifest.site.description,
-      home_page_url: canonicalUrl(manifest, home.path, home.group),
-      items: pages.map((page) => ({
-        id: canonicalUrl(manifest, page.path, page.group),
-        url: canonicalUrl(manifest, page.path, page.group),
-        title: page.title,
-        summary: page.description,
-        content_text: page.body,
-        date_published: page.publishedAt,
-        date_modified: page.updatedAt,
-        tags: page.tags
-      }))
-    },
-    null,
-    2
-  )}
-`;
+  return {
+    title: home.title,
+    description: manifest.site.description,
+    homeUrl: canonicalUrl(manifest, home.path, home.group),
+    pages: pages.map((page) => ({
+      url: canonicalUrl(manifest, page.path, page.group),
+      title: page.title,
+      publishedAt: page.publishedAt,
+      updatedAt: page.updatedAt,
+      description: page.description,
+      body: page.body,
+      tags: page.tags
+    }))
+  };
 }
 function feedBody(manifest, plan) {
-  if (plan.kind === "rss") return rssFeedBody(manifest, plan);
-  if (plan.kind === "atom") return atomFeedBody(manifest, plan);
-  if (plan.kind === "json-feed") return jsonFeedBody(manifest, plan);
-}
-function llmsFullTextBody(manifest, artifacts) {
-  let home = outputHome(manifest), pageGroups = new Map(
-    manifest.pages.map((page) => [page.path, page.group])
-  ), visibleArtifacts = artifacts.filter((artifact) => {
-    let group = pageGroups.get(artifact.htmlPath);
-    return group && effectiveOrigin(manifest, group) === manifest.site.origin;
-  }), header = `# ${home.title} Full Content
-
-> LLMS index: ${canonicalUrl(manifest, "/llms.txt")}
-> Sitemap: ${canonicalUrl(manifest, "/sitemap.md")}
-
-`, sections = [], totalBytes = markdownByteSize(header), included = 0, truncated = !1;
-  for (let artifact of [...visibleArtifacts].sort(
-    (a, b) => a.markdownPath.localeCompare(b.markdownPath)
-  )) {
-    let section = `---
-
-${artifact.body.trim()}
-
-`, sectionBytes = markdownByteSize(section);
-    if (totalBytes + sectionBytes > DEFAULT_LLMS_FULL_MAX_BYTES) {
-      truncated = !0;
-      break;
-    }
-    sections.push(section), totalBytes += sectionBytes, included += 1;
-  }
-  let footer = truncated ? `
-> Truncated at ${included} of ${visibleArtifacts.length} Markdown pages to stay under ${DEFAULT_LLMS_FULL_MAX_BYTES} bytes.
-` : "";
-  return `${header}${sections.join("")}${footer}`;
+  if (plan.kind === "rss")
+    return serializeRssFeed(generatedFeedInput(manifest, plan));
+  if (plan.kind === "atom")
+    return serializeAtomFeed(generatedFeedInput(manifest, plan));
+  if (plan.kind === "json-feed")
+    return serializeJsonFeed(generatedFeedInput(manifest, plan));
+}
+function llmsFullTextBody(manifest, plan, outputPlans, artifacts) {
+  let home = outputHome(manifest, plan), pages = new Set(
+    discoveryPages({
+      manifest,
+      ...plan,
+      group: plan.scopeGroup ?? plan.group
+    }).map((page) => page.path)
+  ), visibleArtifacts = artifacts.filter(
+    (artifact) => pages.has(artifact.htmlPath)
+  ), index = outputPlans.find(
+    (candidate) => candidate.kind === "llms" && candidate.group === plan.group
+  ), sitemap = outputPlans.find(
+    (candidate) => candidate.kind === "sitemap-md" && candidate.group === plan.group
+  );
+  return serializeLlmsFull({
+    title: home.title,
+    indexUrl: index ? canonicalUrl(manifest, index.path, index.group) : void 0,
+    sitemapUrl: sitemap ? canonicalUrl(manifest, sitemap.path, sitemap.group) : void 0,
+    artifacts: visibleArtifacts,
+    maxBytes: DEFAULT_LLMS_FULL_MAX_BYTES
+  });
 }
-function agentTextOutputsModule(manifest, outputPlans, artifacts = []) {
-  let outputs = Object.fromEntries(
+function agentTextOutputsModule(manifest, outputPlans, artifacts = [], availableMarkdownPaths) {
+  let markdownPaths = new Map(
+    artifacts.filter(
+      (artifact) => !availableMarkdownPaths || availableMarkdownPaths.has(artifact.markdownPath)
+    ).map((artifact) => [artifact.htmlPath, artifact.markdownPath])
+  ), sitemap = outputPlans.find(
+    (output) => output.kind === "sitemap" && output.sitemaps !== void 0 && !output.group
+  ) ?? outputPlans.find((output) => output.kind === "sitemap" && !output.group), robotsSitemaps = outputPlans.filter(
+    (output) => output.kind === "sitemap" && effectiveOrigin(manifest, output.group) === manifest.site.origin && (output === sitemap || !sitemap || (sitemap.sitemaps ? !sitemap.sitemaps.some(
+      (entry) => entry.path === output.path && entry.group === output.group
+    ) : !output.path.startsWith(outputDirectory2(sitemap.path))))
+  ), outputs = Object.fromEntries(
     outputPlans.filter(
       (plan) => plan.kind === "robots" || plan.kind === "llms" || plan.kind === "llms-full" || plan.kind === "rss" || plan.kind === "atom" || plan.kind === "json-feed"
     ).map((plan) => {
       let body = plan.kind === "robots" ? `User-agent: *
 Allow: /
-Sitemap: ${canonicalUrl(manifest, outputPlans.find((output) => output.kind === "sitemap" && !output.group)?.path ?? "/sitemap.xml")}
-` : plan.kind === "llms-full" ? llmsFullTextBody(manifest, artifacts) : feedBody(manifest, plan) ?? llmsTextBody(manifest, plan);
+${robotsSitemaps.map((output) => `Sitemap: ${canonicalUrl(manifest, output.path, output.group)}
+`).join("")}` : plan.kind === "llms-full" ? llmsFullTextBody(manifest, plan, outputPlans, artifacts) : feedBody(manifest, plan) ?? llmsTextBody(manifest, plan, markdownPaths);
       return [
         plan.path,
         {
@@ -4917,7 +5643,7 @@ Sitemap: ${canonicalUrl(manifest, outputPlans.find((output) => output.kind === "
   return `export const agentTextOutputs = ${JSON.stringify(outputs, null, 2)} as const;
 `;
 }
-function agentRouteConfig(config, outputPlans, manifest, additionalPublicPaths) {
+function agentRouteConfig(config, outputPlans, manifest, additionalPublicPaths, notFoundScopes, markdownPaths) {
   return {
     agentDetection: config.agent?.agentDetection ?? !0,
     blockInternalMarkdownRoute: config.agent?.blockInternalMarkdownRoute ?? !0,
@@ -4927,6 +5653,9 @@ function agentRouteConfig(config, outputPlans, manifest, additionalPublicPaths)
     markdownAccept: config.agent?.markdownAccept ?? !0,
     markdownRoutes: config.agent?.markdownRoutes ?? !0,
     plainTextAccept: config.agent?.plainTextAccept ?? !0,
+    notFoundScopes,
+    markdownPaths,
+    outputPaths: outputPlans.map((output) => output.path),
     publicPaths: [
       .../* @__PURE__ */ new Set([
         "/",
@@ -4938,9 +5667,16 @@ function agentRouteConfig(config, outputPlans, manifest, additionalPublicPaths)
     ].sort()
   };
 }
-function agentRouteConfigModule(config, outputPlans, manifest, additionalPublicPaths) {
+function agentRouteConfigModule(config, outputPlans, manifest, additionalPublicPaths, notFoundScopes, markdownPaths) {
   return `export const agentRouteConfig = ${JSON.stringify(
-    agentRouteConfig(config, outputPlans, manifest, additionalPublicPaths),
+    agentRouteConfig(
+      config,
+      outputPlans,
+      manifest,
+      additionalPublicPaths,
+      notFoundScopes,
+      markdownPaths
+    ),
     null,
     2
   )} as const;
@@ -4956,10 +5692,23 @@ function groupBreadcrumbs(manifest, groupKey, title) {
   let group = manifest.groups[groupKey], seenKeys = /* @__PURE__ */ new Set(), groups = [...group?.ancestry ?? [], groupKey].filter((key) => seenKeys.has(key) ? !1 : (seenKeys.add(key), !0)).map((key) => manifest.groups[key]?.title).filter((value) => !!value), seenLabels = /* @__PURE__ */ new Set();
   return [...groups, title].filter((label) => seenLabels.has(label) ? !1 : (seenLabels.add(label), !0)).join(" > ");
 }
-function groupLlmsPath(pageGroup, outputPlans) {
-  return outputPlans.find(
-    (candidate) => candidate.kind === "llms" && candidate.group === pageGroup
-  )?.path;
+function pageDiscoveryPlan({
+  manifest,
+  outputPlans,
+  page,
+  rootOwnedGroups,
+  kinds
+}) {
+  return outputPlans.filter(
+    (plan) => kinds.includes(plan.kind) && (plan.group || rootOwnedGroups.has(page.group)) && discoveryPlanCovers({
+      manifest,
+      plan,
+      group: page.group,
+      path: page.path
+    }) && page.path.startsWith(outputDirectory2(plan.path))
+  ).sort(
+    (a, b) => outputDirectory2(b.path).length - outputDirectory2(a.path).length || kinds.indexOf(a.kind) - kinds.indexOf(b.kind) || +(b.sitemaps !== void 0) - +(a.sitemaps !== void 0)
+  )[0];
 }
 function markdownLinkForPage(manifest, page) {
   return `[${page.title}](${canonicalUrl(
@@ -5086,7 +5835,10 @@ function markdownArtifactEnrichment(options) {
   let { next, previous } = adjacentMarkdownPages({
     context: options.context,
     page: options.page
-  }), group = options.manifest.groups[options.page.group], sectionLlms = groupLlmsPath(options.page.group, options.outputPlans), related = relatedMarkdownPages({
+  }), group = options.manifest.groups[options.page.group], llms = pageDiscoveryPlan({ ...options, kinds: ["llms"] }), sitemap = pageDiscoveryPlan({
+    ...options,
+    kinds: ["sitemap-md", "sitemap"]
+  }), related = relatedMarkdownPages({
     context: options.context,
     page: options.page
   }), continueItems = [
@@ -5097,9 +5849,8 @@ function markdownArtifactEnrichment(options) {
     return `${markdownLinkForPage(options.manifest, page)}${description}`;
   }), sectionItems = [
     group?.path ? `[${group.title} home](${canonicalUrl(options.manifest, group.path, options.page.group)})` : void 0,
-    sectionLlms ? `[Section LLMS index](${canonicalUrl(options.manifest, sectionLlms, options.page.group)})` : void 0,
-    `[Site LLMS index](${canonicalUrl(options.manifest, "/llms.txt")})`,
-    `[Sitemap](${canonicalUrl(options.manifest, "/sitemap.md")})`
+    llms ? `[LLMS index](${canonicalUrl(options.manifest, llms.path, llms.group)})` : void 0,
+    sitemap ? `[Sitemap](${canonicalUrl(options.manifest, sitemap.path, sitemap.group)})` : void 0
   ].filter((item) => !!item);
   return [
     markdownListSection("Continue reading", continueItems),
@@ -5108,7 +5859,10 @@ function markdownArtifactEnrichment(options) {
   ].filter((section) => !!section);
 }
 function markdownArtifactBody(options) {
-  let markdownPath = markdownRoutePathForPage(options.page.path), group = options.manifest.groups[options.page.group], sectionLlms = groupLlmsPath(options.page.group, options.outputPlans), frontmatter = [
+  let markdownPath = markdownRoutePathForPage(options.page.path), group = options.manifest.groups[options.page.group], llms = pageDiscoveryPlan({ ...options, kinds: ["llms"] }), sitemap = pageDiscoveryPlan({
+    ...options,
+    kinds: ["sitemap-md", "sitemap"]
+  }), frontmatter = [
     "---",
     `title: ${yamlString(options.page.title)}`,
     options.page.description ? `description: ${yamlString(options.page.description)}` : void 0,
@@ -5122,19 +5876,14 @@ function markdownArtifactBody(options) {
       options.page.group,
       options.page.title
     )}`,
-    `> Sitemap: ${canonicalUrl(options.manifest, "/sitemap.md")}`,
-    `> LLMS index: ${canonicalUrl(options.manifest, "/llms.txt")}`,
-    sectionLlms ? `> Section LLMS index: ${canonicalUrl(options.manifest, sectionLlms)}` : void 0
-  ].filter(Boolean), body = convertMdxToMarkdown({
-    collectDiagnostics: !1,
-    mediaAssets: options.mediaManifest.assets,
-    source: options.page.body,
-    unknownComponentMode: "children"
-  }).markdown.trim(), enrichment = markdownArtifactEnrichment({
+    sitemap ? `> Sitemap: ${canonicalUrl(options.manifest, sitemap.path, sitemap.group)}` : void 0,
+    llms ? `> LLMS index: ${canonicalUrl(options.manifest, llms.path, llms.group)}` : void 0
+  ].filter(Boolean), body = options.conversions.get(options.page.path)?.markdown.trim() ?? "", enrichment = markdownArtifactEnrichment({
     manifest: options.manifest,
     outputPlans: options.outputPlans,
     page: options.page,
-    context: options.enrichmentContext
+    context: options.enrichmentContext,
+    rootOwnedGroups: options.rootOwnedGroups
   });
   return [
     frontmatter.join(`
@@ -5149,15 +5898,16 @@ function markdownArtifactBody(options) {
 
 `);
 }
-function markdownArtifacts(manifest, outputPlans, mediaManifest) {
+function markdownArtifacts(manifest, outputPlans, conversions, rootOwnedGroups) {
   let enrichmentContext = createMarkdownEnrichmentContext(manifest);
   return enrichmentContext.publishedPages.map((page) => {
     let body = markdownArtifactBody({
       manifest,
-      mediaManifest,
       outputPlans,
       page,
-      enrichmentContext
+      conversions,
+      enrichmentContext,
+      rootOwnedGroups
     }), markdownPath = markdownRoutePathForPage(page.path);
     return {
       bodyHash: markdownContentHash(body),
@@ -5431,12 +6181,8 @@ function outputLimit(defaults, declaration) {
   return declaration.limit ?? defaults?.limit;
 }
 function planGeneratedOutputs(config, manifest) {
-  let plans = /* @__PURE__ */ new Map(), add = (plan, options = {}) => {
-    let normalizedPath = normalizeOutputPath(plan.path);
-    if (options.replaceKind)
-      for (let [existingPath, existing2] of plans)
-        !existing2.group && existing2.kind === plan.kind && plans.delete(existingPath);
-    let origin = effectiveOrigin(manifest, plan.group), key = JSON.stringify([origin, normalizedPath]), existing = plans.get(key);
+  let plans = /* @__PURE__ */ new Map(), add = (plan) => {
+    let normalizedPath = normalizeOutputPath(plan.path), origin = effectiveOrigin(manifest, plan.group), key = JSON.stringify([origin, normalizedPath]), existing = plans.get(key);
     if (existing)
       throw new AppError({
         code: "FRAMEWORK_OUTPUT_PATH_COLLISION",
@@ -5448,32 +6194,45 @@ function planGeneratedOutputs(config, manifest) {
           kind: plan.kind
         }
       });
-    plans.set(key, { ...plan, path: normalizedPath });
-  }, rootDefaults = resolveOutputDefaults(config), rootLlmsDefaults = rootDefaults.llms;
-  add({ kind: "robots", path: "/robots.txt" }), add({ kind: "sitemap", path: "/sitemap.xml" }), add({ kind: "sitemap-md", path: "/sitemap.md" }), add({
+    let normalized = { ...plan, path: normalizedPath };
+    return plans.set(key, normalized), normalized;
+  }, rootDefaults = resolveOutputDefaults(config), rootMountedGroup = Object.values(config.groups).find(
+    (group) => group.key !== ROOT_CONTENT_GROUP_KEY && group.path === "/" && effectiveOrigin(manifest, group.key) === manifest.site.origin
+  ), rootMountedOutputs = rootMountedGroup?.outputs, rootLlmsDefaults = resolveOutputDefaults(config, rootMountedGroup).llms, rootScopeGroup = rootMountedGroup?.key ?? ROOT_CONTENT_GROUP_KEY, rootOutputs = {
+    ...config.outputs ?? {},
+    robots: config.outputs?.robots ?? rootMountedOutputs?.robots,
+    sitemap: config.outputs?.sitemap ?? rootMountedOutputs?.sitemap,
+    sitemapMarkdown: config.outputs?.sitemapMarkdown ?? rootMountedOutputs?.sitemapMarkdown,
+    llms: config.outputs?.llms ?? rootMountedOutputs?.llms,
+    llmsFull: config.outputs?.llmsFull ?? rootMountedOutputs?.llmsFull
+  };
+  if (rootOutputs.robots !== !1 && add({ kind: "robots", path: rootOutputs.robots?.path ?? "/robots.txt" }), rootOutputs.sitemap !== !1 && add({
+    kind: "sitemap",
+    path: rootOutputs.sitemap?.path ?? "/sitemap.xml",
+    ...rootOutputs.sitemap?.mode === "urls" ? {} : { sitemaps: [] }
+  }), rootOutputs.sitemapMarkdown !== !1 && add({
+    kind: "sitemap-md",
+    path: rootOutputs.sitemapMarkdown?.path ?? "/sitemap.md",
+    scopeGroup: rootScopeGroup,
+    scope: rootOutputs.sitemapMarkdown?.scope ?? (config.outputs?.sitemapMarkdown === void 0 && rootMountedOutputs?.sitemapMarkdown ? "group" : "site")
+  }), rootOutputs.llms !== !1 && add({
     kind: "llms",
-    path: "/llms.txt",
-    scope: rootLlmsDefaults?.scope ?? "site",
-    limit: rootLlmsDefaults?.limit,
+    path: rootOutputs.llms?.path ?? "/llms.txt",
+    scopeGroup: rootScopeGroup,
+    scope: outputScope(
+      rootLlmsDefaults,
+      rootOutputs.llms ?? {},
+      config.outputs?.llms === void 0 && rootMountedOutputs?.llms ? "group" : "site"
+    ),
+    limit: outputLimit(rootLlmsDefaults, rootOutputs.llms ?? {}),
     includeDescriptions: rootLlmsDefaults?.includeDescriptions
-  }), add({ kind: "llms-full", path: "/llms-full.txt" });
-  let rootOutputs = config.outputs ?? {};
-  if (rootOutputs.robots && add(
-    { kind: "robots", path: rootOutputs.robots.path },
-    { replaceKind: !0 }
-  ), rootOutputs.sitemap && add(
-    { kind: "sitemap", path: rootOutputs.sitemap.path },
-    { replaceKind: !0 }
-  ), rootOutputs.llms && add(
-    {
-      kind: "llms",
-      path: rootOutputs.llms.path,
-      scope: outputScope(rootLlmsDefaults, rootOutputs.llms, "site"),
-      limit: outputLimit(rootLlmsDefaults, rootOutputs.llms),
-      includeDescriptions: rootLlmsDefaults?.includeDescriptions
-    },
-    { replaceKind: !0 }
-  ), rootOutputs.feeds?.rss) {
+  }), rootOutputs.llmsFull !== !1 && add({
+    kind: "llms-full",
+    path: rootOutputs.llmsFull?.path ?? "/llms-full.txt",
+    scopeGroup: rootScopeGroup,
+    scope: rootOutputs.llmsFull?.scope ?? (config.outputs?.llmsFull === void 0 && rootMountedOutputs?.llmsFull ? "group" : "site"),
+    limit: rootOutputs.llmsFull?.limit
+  }), rootOutputs.feeds?.rss) {
     let defaults = feedDefaults(rootDefaults, "rss");
     add({
       kind: "rss",
@@ -5504,23 +6263,56 @@ function planGeneratedOutputs(config, manifest) {
     });
   }
   for (let group of Object.values(config.groups)) {
-    let defaults = resolveOutputDefaults(config, group);
-    if (group.outputs?.sitemap && add({
-      kind: "sitemap",
-      path: joinOutputPath(group.path, group.outputs.sitemap.path),
-      group: group.key
-    }), group.outputs?.llms) {
+    let defaults = resolveOutputDefaults(config, group), nested = group.key !== ROOT_CONTENT_GROUP_KEY && group.path !== "/";
+    if (group.key !== rootMountedGroup?.key && (group.outputs?.sitemap || nested && group.outputs?.sitemap !== !1)) {
+      if (group.outputs?.sitemap && group.outputs.sitemap.mode === "index")
+        throw new AppError({
+          code: "FRAMEWORK_OUTPUT_PATH_INVALID",
+          message: `Group "${group.key}" cannot declare a sitemap index.`,
+          fix: 'Use mode "urls" for a group sitemap, or configure the index in root outputs.sitemap.',
+          details: {
+            group: group.key,
+            propertyPath: `groups.${group.key}.outputs.sitemap.mode`
+          }
+        });
+      add({
+        kind: "sitemap",
+        path: joinOutputPath(
+          group.path,
+          group.outputs?.sitemap ? group.outputs.sitemap.path ?? "sitemap.xml" : "sitemap.xml"
+        ),
+        group: group.key
+      });
+    }
+    if (group.key !== rootMountedGroup?.key && (group.outputs?.llms || nested && group.outputs?.llms !== !1)) {
       let llmsDefaults = defaults.llms;
       add({
         kind: "llms",
-        path: joinOutputPath(group.path, group.outputs.llms.path),
+        path: joinOutputPath(
+          group.path,
+          group.outputs?.llms ? group.outputs.llms.path : "llms.txt"
+        ),
         group: group.key,
-        scope: outputScope(llmsDefaults, group.outputs.llms, "group"),
-        limit: outputLimit(llmsDefaults, group.outputs.llms),
+        scope: outputScope(llmsDefaults, group.outputs?.llms || {}, "group"),
+        limit: outputLimit(llmsDefaults, group.outputs?.llms || {}),
         includeDescriptions: llmsDefaults?.includeDescriptions
       });
     }
-    if (group.outputs?.feeds?.rss) {
+    if (group.key !== rootMountedGroup?.key && (group.outputs?.sitemapMarkdown || nested && group.outputs?.sitemapMarkdown !== !1) && add({
+      kind: "sitemap-md",
+      path: joinOutputPath(
+        group.path,
+        group.outputs?.sitemapMarkdown ? group.outputs.sitemapMarkdown.path : "sitemap.md"
+      ),
+      group: group.key,
+      scope: group.outputs?.sitemapMarkdown ? group.outputs.sitemapMarkdown.scope ?? "group" : "group"
+    }), group.key !== rootMountedGroup?.key && group.outputs?.llmsFull && add({
+      kind: "llms-full",
+      path: joinOutputPath(group.path, group.outputs.llmsFull.path),
+      group: group.key,
+      scope: group.outputs.llmsFull.scope ?? "group",
+      limit: group.outputs.llmsFull.limit
+    }), group.outputs?.feeds?.rss) {
       let feedOptions = feedDefaults(defaults, "rss");
       add({
         kind: "rss",
@@ -5554,19 +6346,98 @@ function planGeneratedOutputs(config, manifest) {
       });
     }
   }
+  let xmlLeaves = [...plans.values()].filter(
+    (plan) => plan.kind === "sitemap" && plan.group
+  ), rootSitemap = [...plans.values()].find(
+    (plan) => plan.kind === "sitemap" && !plan.group
+  );
+  if (rootSitemap?.sitemaps) {
+    let directory = outputDirectory2(rootSitemap.path), leaves = xmlLeaves.filter(
+      (plan) => effectiveOrigin(manifest, plan.group) === manifest.site.origin && plan.path.startsWith(directory)
+    );
+    if ([
+      "/",
+      ...Object.values(manifest.groups).filter(
+        (group) => effectiveOrigin(manifest, group.key) === manifest.site.origin
+      ).map((group) => group.path),
+      ...manifest.pages.filter(
+        (page) => page.status === "published" && effectiveOrigin(manifest, page.group) === manifest.site.origin
+      ).map((page) => page.path)
+    ].some(
+      (path) => path.startsWith(directory) && !leaves.some((leaf) => path.startsWith(outputDirectory2(leaf.path)))
+    )) {
+      let rootLeaf = add({
+        kind: "sitemap",
+        path: `${rootSitemap.path.replace(/\.[^/.]+$/, "")}-pages.xml`
+      });
+      leaves.push(rootLeaf);
+    }
+    if (rootSitemap.sitemaps = leaves.map(({ path, group }) => ({
+      path,
+      ...group ? { group } : {}
+    })), !rootSitemap.sitemaps.length)
+      throw new AppError({
+        code: "FRAMEWORK_OUTPUT_PATH_INVALID",
+        message: `Sitemap index "${rootSitemap.path}" has no generated sitemap files within its directory.`,
+        fix: "Put the root sitemap index at the origin root, or use a directory that contains an enabled group sitemap.",
+        details: { path: rootSitemap.path, directory }
+      });
+    xmlLeaves.push(...leaves.filter((leaf) => !leaf.group));
+  }
+  for (let leaf of xmlLeaves) {
+    let directory = outputDirectory2(leaf.path);
+    leaf.exclude = xmlLeaves.filter(
+      (candidate) => candidate !== leaf && effectiveOrigin(manifest, candidate.group) === effectiveOrigin(manifest, leaf.group) && outputDirectory2(candidate.path).startsWith(directory) && outputDirectory2(candidate.path).length > directory.length
+    ).map(({ path, group }) => ({ path, ...group ? { group } : {} }));
+  }
   let groupLlmsPlans = [...plans.values()].filter(
-    (plan) => plan.kind === "llms" && plan.group && effectiveOrigin(manifest, plan.group) === manifest.site.origin
+    (plan) => plan.kind === "llms" && plan.group
   );
   for (let plan of plans.values())
-    plan.kind !== "llms" || plan.group || !groupLlmsPlans.length || (plan.links = groupLlmsPlans.map((llmsPlan) => ({
+    plan.kind === "llms" ? (plan.links = groupLlmsPlans.filter(
+      (candidate) => candidate !== plan && discoveryPlanCovers({
+        manifest,
+        plan,
+        group: candidate.group ?? "",
+        path: manifest.groups[candidate.group ?? ""]?.path ?? "/"
+      })
+    ).map((llmsPlan) => ({
       title: config.groups[llmsPlan.group ?? ""]?.title ?? llmsPlan.group ?? "Group",
       path: llmsPlan.path,
       group: llmsPlan.group
-    })));
+    })), plan.group && (plan.otherGroupLinks = groupLlmsPlans.filter(
+      (candidate) => candidate !== plan && candidate.group !== plan.group && effectiveOrigin(manifest, candidate.group) === effectiveOrigin(manifest, plan.group) && !discoveryPlanCovers({
+        manifest,
+        plan,
+        group: candidate.group ?? "",
+        path: manifest.groups[candidate.group ?? ""]?.path ?? "/"
+      })
+    ).map((candidate) => ({
+      title: `${config.groups[candidate.group ?? ""]?.title ?? candidate.group ?? "Group"} llms.txt`,
+      path: candidate.path,
+      group: candidate.group
+    })))) : plan.kind === "sitemap-md" && (plan.markdownAlternates = config.agent?.enabled !== !1 && config.agent?.markdownRoutes !== !1, plan.links = [...plans.values()].filter(
+      (candidate) => (candidate.kind === "llms" || candidate.kind === "llms-full" || candidate.kind === "sitemap" && (plan.group ? candidate.group === plan.group : candidate === rootSitemap)) && candidate.group === plan.group
+    ).map((candidate) => ({
+      title: candidate.kind === "llms" ? "LLMS index" : candidate.kind === "llms-full" ? "Full LLMS index" : "XML sitemap",
+      path: candidate.path,
+      ...candidate.group ? { group: candidate.group } : {}
+    })), plan.group && (plan.otherGroupLinks = [...plans.values()].filter(
+      (candidate) => (candidate.kind === "sitemap-md" || candidate.kind === "sitemap" || candidate.kind === "llms") && candidate.group && candidate.group !== plan.group && effectiveOrigin(manifest, candidate.group) === effectiveOrigin(manifest, plan.group) && !discoveryPlanCovers({
+        manifest,
+        plan,
+        group: candidate.group,
+        path: manifest.groups[candidate.group]?.path ?? "/"
+      })
+    ).map((candidate) => ({
+      title: `${config.groups[candidate.group ?? ""]?.title ?? candidate.group ?? "Group"} ${candidate.kind === "sitemap-md" ? "sitemap.md" : candidate.kind === "sitemap" ? "XML sitemap" : "llms.txt"}`,
+      path: candidate.path,
+      group: candidate.group
+    }))));
   return [...plans.values()].sort((a, b) => a.path.localeCompare(b.path));
 }
 function validateGeneratedOutputPaths(config, manifest, plans, mediaManifest) {
-  let outputKey = (origin, path) => JSON.stringify([origin, normalizeOutputPath(path)]), reserved = /* @__PURE__ */ new Map(), reserve = (origin, path, value) => {
+  let outputKey = (origin, path) => JSON.stringify([origin, path]), reserved = /* @__PURE__ */ new Map(), reserve = (origin, path, value) => {
     let key = outputKey(origin, path);
     reserved.has(key) || reserved.set(key, value);
   };
@@ -5588,10 +6459,7 @@ function validateGeneratedOutputPaths(config, manifest, plans, mediaManifest) {
   ]);
   for (let asset of Object.values(mediaManifest?.assets ?? {}))
     for (let origin of origins)
-      reserve(origin, asset.publicPath, {
-        kind: "media",
-        owner: asset.sourcePath
-      }), reserve(origin, asset.outputPath, {
+      reserve(origin, asset.outputPath, {
         kind: "media",
         owner: asset.sourcePath
       });
@@ -5634,7 +6502,7 @@ function validateGeneratedOutputPaths(config, manifest, plans, mediaManifest) {
     outputRoutes.set(routePath, { path: plan.path, origin });
   }
 }
-async function appFilePlans(config, manifest, fonts, groupThemes, options) {
+async function appFilePlans(config, manifest, fonts, groupThemes, privateFiles = [], notFoundScopes = []) {
   let hasRootMountedGroup = Object.values(config.groups).some(
     (group) => group.key !== ROOT_CONTENT_GROUP_KEY && group.path === "/"
   ), plans = [
@@ -5652,6 +6520,25 @@ async function appFilePlans(config, manifest, fonts, groupThemes, options) {
       path: "app/providers.tsx",
       content: BANNER + await readFile6(resolve7(SHIMS_DIR, "providers.tsx"), "utf-8")
     },
+    {
+      path: "app/document.tsx",
+      content: BANNER + await readFile6(resolve7(SHIMS_DIR, "document.tsx"), "utf8")
+    },
+    {
+      path: "app/metadata-icons.tsx",
+      content: BANNER + await readFile6(resolve7(SHIMS_DIR, "metadata-icons.tsx"), "utf8")
+    },
+    {
+      path: "app/not-found-content.tsx",
+      content: BANNER + await readFile6(resolve7(SHIMS_DIR, "not-found-content.tsx"), "utf8")
+    },
+    {
+      path: "app/not-found-navigation.tsx",
+      content: BANNER + await readFile6(
+        resolve7(SHIMS_DIR, "not-found-navigation.tsx"),
+        "utf8"
+      )
+    },
     {
       path: "proxy.ts",
       content: BANNER + (await readFile6(resolve7(SHIMS_DIR, "proxy.ts"), "utf-8")).replaceAll(
@@ -5669,7 +6556,39 @@ async function appFilePlans(config, manifest, fonts, groupThemes, options) {
         "utf-8"
       )
     }
-  ], outputPlans = planGeneratedOutputs(config, manifest);
+  ], notFoundLayoutImports = [], notFoundLayouts = [];
+  for (let [index, scope] of notFoundScopes.entries()) {
+    if (!scope.group) continue;
+    let groupChain = await resolveLayoutChain(config, scope.group, {
+      themedGroups: groupThemes
+    }), modulePath = `not-found-layout-${index}`;
+    notFoundLayoutImports.push(
+      `import NotFoundLayout${index} from "@app/${modulePath}";`
+    ), notFoundLayouts.push(
+      `${JSON.stringify(scope.id)}: NotFoundLayout${index},`
+    ), plans.push({
+      path: `app/${modulePath}.tsx`,
+      content: BANNER + await generatedGroupLayoutModule(
+        config,
+        scope.group,
+        groupChain,
+        groupThemes,
+        fonts
+      )
+    });
+  }
+  plans.push({
+    path: "app/global-not-found.tsx",
+    content: BANNER + await renderShim("global-not-found.tsx", {
+      __PUBLISHOS_NOT_FOUND_LAYOUT_IMPORTS__: notFoundLayoutImports.join(`
+`),
+      __PUBLISHOS_NOT_FOUND_LAYOUTS__: `{
+${notFoundLayouts.join(`
+`)}
+}`
+    })
+  });
+  let outputPlans = planGeneratedOutputs(config, manifest);
   validateGeneratedOutputPaths(config, manifest, outputPlans);
   for (let output of outputPlans)
     plans.push({
@@ -5682,25 +6601,7 @@ async function appFilePlans(config, manifest, fonts, groupThemes, options) {
   }), plans.push({
     path: `app/${FRAMEWORK_PREFIX.slice(1)}/api/og/[key]/route.ts`,
     content: BANNER + await readFile6(resolve7(SHIMS_DIR, "og-image-route.ts"), "utf-8")
-  }), options.includeDirectDesignSystemRoute && (plans.push({
-    path: "app/ds/page.tsx",
-    content: BANNER + await readFile6(
-      resolve7(DIRECT_SHIMS_DIR, "design-system-page.tsx"),
-      "utf-8"
-    )
-  }), plans.push({
-    path: "app/ds/progress/page.tsx",
-    content: BANNER + await readFile6(
-      resolve7(DIRECT_SHIMS_DIR, "design-system-progress-page.tsx"),
-      "utf-8"
-    )
-  }), plans.push({
-    path: "app/ds/links/page.tsx",
-    content: BANNER + await readFile6(
-      resolve7(DIRECT_SHIMS_DIR, "design-system-links-page.tsx"),
-      "utf-8"
-    )
-  }));
+  });
   for (let [groupKey, group] of Object.entries(config.groups)) {
     let routeDir = routeDirForGroup(config, group), groupChain = await resolveLayoutChain(config, groupKey, {
       themedGroups: groupThemes
@@ -5748,7 +6649,14 @@ async function appFilePlans(config, manifest, fonts, groupThemes, options) {
       })
     }));
   }
-  return plans;
+  let occupied = new Set(plans.map((plan) => plan.path)), collision = privateFiles.find((file) => occupied.has(file.path));
+  if (collision)
+    throw new AppError({
+      code: "FRAMEWORK_PRIVATE_COMPOSITION_CONFLICT",
+      message: "A private app file conflicts with a generated framework route.",
+      details: { path: collision.path }
+    });
+  return [...plans, ...privateFiles];
 }
 function withPublicNavigationTargets(nodes, manifest) {
   return nodes.map((node) => node.type === "page" ? {
@@ -5765,8 +6673,13 @@ async function writeComposedApplication(options) {
   let preparedSource = options.preparedSource, config = preparedSource.config, manifest = withAttribution(preparedSource.manifest, {
     config,
     projectSlug: options.projectSlug
-  }), connectedOrigin = options.hostedSite ? normalizeHostedSiteUrl(options.hostedSite.url) : void 0;
-  options.hostedSite && (manifest.site.name = config.site?.name?.trim() || normalizeHostedSiteName(options.hostedSite.name)), manifest.site.origin = options.previewUrl ?? connectedOrigin;
+  }), connectedOrigin = options.hostedSite ? normalizeHostedSiteUrl(options.hostedSite.url) : void 0, rootOwnedGroups = new Set(
+    Object.keys(manifest.groups).filter((key) => {
+      let publicOrigin = config.groups[key]?.origin ?? config.origin ?? connectedOrigin;
+      return !connectedOrigin || !publicOrigin || publicOrigin === connectedOrigin;
+    })
+  );
+  options.hostedSite && (manifest.site.name = config.site?.name?.trim() || normalizeHostedSiteName(options.hostedSite.name)), manifest.site.origin = options.previewUrl ?? connectedOrigin ?? config.origin;
   for (let [groupKey, group] of Object.entries(manifest.groups))
     group.origin = options.previewUrl ? options.previewUrl : options.hostedSite ? config.groups[groupKey]?.origin ?? (groupKey === ROOT_CONTENT_GROUP_KEY ? void 0 : config.origin) ?? connectedOrigin : void 0;
   manifest.tree = withPublicNavigationTargets(manifest.tree, manifest);
@@ -5781,19 +6694,33 @@ async function writeComposedApplication(options) {
     },
     signal: options.signal,
     onDownloadStart: options.onAssetDownloadStart
+  }), warnedMediaFiles = new Set(
+    media.warnings.flatMap(
+      (warning) => typeof warning.details?.file == "string" ? [warning.details.file] : []
+    )
+  ), resourceAdmission = createThemeResourceAdmission({
+    media,
+    publishOsDir: options.publishOsDir
   }), theme = await createThemeBuildPlan({
     config,
-    publishOsDir: options.publishOsDir
+    media,
+    publishOsDir: options.publishOsDir,
+    resourceAdmission,
+    onWarning: (warning) => {
+      warning.file && warnedMediaFiles.has(warning.file) || (warning.file && warnedMediaFiles.add(warning.file), options.onWarning?.(warning));
+    }
   }), fonts = await fontBuildPlan({
     config,
     publishOsDir: options.publishOsDir,
     prepareAssets,
-    themeGroups: theme.groups
+    themeGroups: theme.groups,
+    resourceAdmission
   }), og = await buildOgManifest({
     faviconsAndLogos,
     fonts: fonts.og,
     prepareFonts: prepareAssets,
     manifest,
+    media,
     mediaManifest: media.manifest,
     publishOsDir: options.publishOsDir,
     themes: theme.og,
@@ -5801,19 +6728,26 @@ async function writeComposedApplication(options) {
       code: "FRAMEWORK_OG_COLOR_FALLBACK",
       message
     })
-  }), sourceDir = resolve7(options.outputDir, "source"), includeDirectDesignSystemRoute = await hasDirectDesignSystemRoute(), outputPlans = planGeneratedOutputs(config, manifest);
+  }), sourceDir = resolve7(options.outputDir, "source"), outputPlans = planGeneratedOutputs(config, manifest);
   validateGeneratedOutputPaths(config, manifest, outputPlans, media.manifest);
   let { defaultsUsed, sourceOverrides } = await overlaySource(
     options.publishOsDir,
     sourceDir,
     config,
     fonts,
-    theme
+    theme,
+    manifest.pages
   );
-  includeDirectDesignSystemRoute && (await writeText(
-    resolve7(sourceDir, "_internal", "design-system-preview.generated.tsx"),
-    await designSystemPreviewModule(options.publishOsDir)
-  ), defaultsUsed.push("_internal/design-system-preview.generated.tsx")), await writeText(
+  for (let file of options.privateComposition?.sourceFiles ?? []) {
+    if (await fileExists5(resolve7(sourceDir, file.path)))
+      throw new AppError({
+        code: "FRAMEWORK_PRIVATE_COMPOSITION_CONFLICT",
+        message: "A private source file conflicts with an existing source file.",
+        details: { path: file.path }
+      });
+    await writeText(resolve7(sourceDir, file.path), BANNER + file.content);
+  }
+  await writeText(
     resolve7(sourceDir, ".publishos", "media-manifest.generated.ts"),
     mediaManifestModule(media.manifest)
   ), await writeText(
@@ -5834,23 +6768,38 @@ async function writeComposedApplication(options) {
     resolve7(options.outputDir, ".meta", "og-manifest.json"),
     `${JSON.stringify(ogManifestMetadata(og), null, 2)}
 `
-  ), await writeText(
+  );
+  let pageArtifactConversions = convertPublishedPageBodies(manifest), markdownRouteArtifacts = markdownArtifacts(
+    manifest,
+    outputPlans,
+    pageArtifactConversions,
+    rootOwnedGroups
+  ), markdownPaths = config.agent?.enabled === !1 || config.agent?.markdownRoutes === !1 ? /* @__PURE__ */ new Set() : new Set(
+    markdownRouteArtifacts.map((artifact) => artifact.markdownPath)
+  ), notFoundScopes = createNotFoundScopes({
+    manifest,
+    outputs: outputPlans,
+    rootOwnedGroups,
+    markdownPaths
+  });
+  await writeText(
     resolve7(sourceDir, ".publishos", "agent-route-config.generated.ts"),
     agentRouteConfigModule(
       config,
       outputPlans,
       manifest,
-      includeDirectDesignSystemRoute ? ["/ds", "/ds/progress", "/ds/links"] : []
+      options.privateComposition?.publicPaths ?? [],
+      notFoundScopes,
+      markdownRouteArtifacts.map((artifact) => artifact.htmlPath)
     )
-  );
-  let markdownRouteArtifacts = markdownArtifacts(
-    manifest,
-    outputPlans,
-    media.manifest
-  );
-  await writeText(
+  ), await writeText(
     resolve7(sourceDir, ".publishos", "agent-text.generated.ts"),
-    agentTextOutputsModule(manifest, outputPlans, markdownRouteArtifacts)
+    agentTextOutputsModule(
+      manifest,
+      outputPlans,
+      markdownRouteArtifacts,
+      markdownPaths
+    )
   );
   let markdownRouteArtifactShards = createMarkdownArtifactShards(
     markdownRouteArtifacts
@@ -5875,13 +6824,18 @@ async function writeComposedApplication(options) {
       2
     )}
 `
-  ), await writeMediaOutputs({ media, outputDir: options.outputDir }), await writeFaviconsAndLogosOutputs({
-    faviconsAndLogos,
-    outputDir: options.outputDir
-  });
-  let appPlans = await appFilePlans(config, manifest, fonts, theme.groups, {
-    includeDirectDesignSystemRoute
-  }), componentManifest = await createComponentManifest({
+  ), await writeMediaOutputs({ media, outputDir: options.outputDir });
+  let appPlans = await appFilePlans(
+    config,
+    manifest,
+    fonts,
+    theme.groups,
+    (options.privateComposition?.appFiles ?? []).map((file) => ({
+      ...file,
+      content: BANNER + file.content
+    })),
+    notFoundScopes
+  ), componentManifest = await createComponentManifest({
     applicationFiles: appPlans,
     runtimeDistDir: RUNTIME_DIST_DIR,
     sourceDir,
@@ -5903,13 +6857,20 @@ async function writeComposedApplication(options) {
   });
   for (let plan of appPlans)
     await writeText(join6(options.outputDir, plan.path), plan.content);
+  await mapLocalAssetUrlsInCss(options.outputDir);
   let projectDir = resolve7(DEFAULTS_DIR, "project"), nextConfigTemplate = await readFile6(
     resolve7(projectDir, "next.config.mjs"),
     "utf-8"
   );
   await writeText(
     resolve7(options.outputDir, "next.config.mjs"),
-    renderFrameworkNextConfig(nextConfigTemplate)
+    renderFrameworkNextConfig(
+      nextConfigTemplate,
+      await componentResolveAliases({
+        outputDir: options.outputDir,
+        sourceDir
+      })
+    )
   ), await copyText(
     resolve7(projectDir, "tsconfig.json.template"),
     resolve7(options.outputDir, "tsconfig.json")
@@ -5928,6 +6889,7 @@ async function writeComposedApplication(options) {
     resolve7(options.outputDir, "manifest.generated.ts"),
     manifestModule(manifest)
   ), await writeSearchRecordsArtifact({
+    conversions: pageArtifactConversions,
     outputDir: options.outputDir,
     manifest
   }), await writeText(
@@ -6002,7 +6964,7 @@ function normalizeHostedSiteUrl(value) {
 }
 async function physicalOutputPath(path) {
   try {
-    if ((await lstat2(path)).isSymbolicLink())
+    if ((await lstat3(path)).isSymbolicLink())
       throw new AppError({
         code: "FRAMEWORK_OUTPUT_SYMLINK",
         message: "The composition output must not be a symbolic link."
@@ -6047,7 +7009,7 @@ function localPreviewOrigin(request, hosted) {
   return value.origin;
 }
 async function removeTemporaryFontCache(staging) {
-  let temporaryCache = join6(staging, ".font-assets"), cache = await lstat2(temporaryCache).catch(
+  let temporaryCache = join6(staging, ".font-assets"), cache = await lstat3(temporaryCache).catch(
     (error) => {
       if (error.code !== "ENOENT") throw error;
     }
@@ -6085,7 +7047,21 @@ async function cleanupCompositionStage(staging, onProgress) {
   }
 }
 async function composeFrameworkSource(options) {
-  let { request, source, signal, onProgress } = options, outputDir = request.paths.output, archive = request.context?.archive;
+  let { request, source, signal, onProgress } = options, outputDir = request.paths.output, archive = request.context?.archive, privateComposition = request.context?.privateComposition;
+  if (privateComposition) {
+    let validPath = (path, prefix) => path.startsWith(prefix) && !path.includes("\\") && !path.split("/").some((part) => part === "" || part === "." || part === "..");
+    if (!["dev", "compose"].includes(request.operation) || request.context?.framework?.kind !== "checkout" || !privateComposition.appFiles.every(
+      (file) => validPath(file.path, "app/")
+    ) || !privateComposition.sourceFiles.every(
+      (file) => validPath(file.path, "_internal/")
+    ) || !privateComposition.publicPaths.every(
+      (path) => path.startsWith("/") && !path.includes("..")
+    ))
+      throw new AppError({
+        code: "FRAMEWORK_PRIVATE_COMPOSITION_INVALID",
+        message: "Private app files are allowed only for local checkout Dev and must use safe app and source paths."
+      });
+  }
   if (!outputDir || !isAbsolute2(outputDir) || !archive && request.context?.framework?.kind !== "checkout")
     throw new AppError({
       code: "FRAMEWORK_COMPOSE_INPUT_INVALID",
@@ -6124,6 +7100,7 @@ async function composeFrameworkSource(options) {
   try {
     onProgress?.("Composing source"), await writeComposedApplication({
       checkoutRoot: request.context?.framework?.kind === "checkout" ? installedFramework2.packageRoot : void 0,
+      privateComposition,
       publishOsDir: request.paths.source,
       outputDir: staging,
       preparedSource: source,
@@ -6147,8 +7124,6 @@ async function composeFrameworkSource(options) {
 }
 
 export {
-  prepareAppInstallation,
-  materializeAppInstallation,
   createIdeSourceArtifacts,
   composeFrameworkSource
 };