@saypsst/next 0.2.0 → 0.3.0

package/README.md

@@ -1,12 +1,12 @@
 # @saypsst/next
 
-Drop-in route modules that serve [psst](https://saypsst.com) pages on your own domain, inside your Next.js App Router app (Next 15 or 16, any host). psst publishes, updates and withdraws pages under a path prefix it owns (default `/resources`) without another deploy on your side.
+Drop-in route modules that serve [PSST](https://saypsst.com) pages on your own domain, inside your Next.js App Router app (Next 15 or 16, any host). PSST publishes, updates and withdraws pages under a path prefix it owns (default `/resources`) without another deploy on your side.
 
 - Server components and route handlers only: no client component, no client JavaScript added.
 - Full text in the HTML for every visitor and crawler, with canonical, Open Graph, JSON-LD and a `psst-version` meta.
-- Time-based ISR (300 s). If psst is down, your site keeps serving the last good render.
+- Time-based ISR (300 s). If PSST is down, your site keeps serving the last good render.
 - No secrets. The only value you configure is your public site id.
-- Runtime dependency: `zod` (pinned). `@psst/content`, the psst content contract, is bundled into `dist/`. No install scripts.
+- Runtime dependency: `zod` (pinned). `@psst/content`, the PSST content contract, is bundled into `dist/`. No install scripts.
 
 `npx saypsst init` writes all of this for you. This README is the reference for what it writes.
 
@@ -22,7 +22,7 @@ Paths assume `app/` at the project root and the default prefix `/resources`. Wit
 import { definePsst } from "@saypsst/next";
 
 export default definePsst({
-  site: "site_xxxxxxxxxxxxxxxx", // public site id from the psst dashboard
+  site: "site_xxxxxxxxxxxxxxxx", // public site id from the PSST dashboard
   domain: "example.com", // production host, no scheme
   siteName: "Example",
   prefix: "/resources",
@@ -47,7 +47,7 @@ export const generateMetadata = page.generateMetadata;
 export default page.default;
 ```
 
-To get your site's header and footer (needed when your root layout renders none), pass a `Shell`. It receives the psst `<main>` element as `children`; do not wrap it in another `<main>`:
+To get your site's header and footer (needed when your root layout renders none), pass a `Shell`. It receives the PSST `<main>` element as `children`; do not wrap it in another `<main>`:
 
 ```tsx
 import type { PsstShellProps } from "@saypsst/next/page";
@@ -111,13 +111,13 @@ export const config = {
 };
 ```
 
-If you already have a proxy, wrap it and keep your own matcher (make sure it also matches the psst prefix):
+If you already have a proxy, wrap it and keep your own matcher (make sure it also matches the PSST prefix):
 
 ```ts
 export const proxy = withPsst(psst, yourProxy);
 ```
 
-Then reference the psst sitemap from `robots.txt` (`Sitemap: https://example.com/resources/sitemap.xml`) or from `app/robots.ts`.
+Then reference the PSST sitemap from `robots.txt` (`Sitemap: https://example.com/resources/sitemap.xml`) or from `app/robots.ts`.
 
 ### Only when the dashboard claimed a root path
 
@@ -144,7 +144,7 @@ export const revalidate = 300;
 export const GET = psstLlms(psst);
 ```
 
-Do not edit these files by hand beyond the `Shell`; psst content is never added locally.
+Do not edit these files by hand beyond the `Shell`; PSST content is never added locally.
 
 ## Exports
 
@@ -154,17 +154,17 @@ Do not edit these files by hand beyond the `Shell`; psst content is never added
 | | `PsstConfig`, `PsstConfigInput`, `PsstConfigError`, `PSST_REVALIDATE` (300), `DEFAULT_EDGE`, `PSST_NEXT_VERSION` | Types and constants. |
 | `@saypsst/next/page` | `psstPage(config, { Shell?, path? })` | Returns `{ default, generateMetadata, generateStaticParams }` for the page file. |
 | | `PsstShellProps`, `PsstPageOptions`, `PsstPageProps`, `PsstPageModule`, `PsstIntegrityError`, `PSST_REVALIDATE` | |
-| `@saypsst/next/sitemap` | `psstSitemap(config)` | `GET` handler: XML sitemap of the published psst pages. |
-| `@saypsst/next/style` | `psstStyle(config)` | `GET` handler: the psst stylesheet, same-origin, `text/css`. |
-| `@saypsst/next/verify` | `psstVerify(config)` | `GET` handler: the domain-proof text psst checks. |
+| `@saypsst/next/sitemap` | `psstSitemap(config)` | `GET` handler: XML sitemap of the published PSST pages. |
+| `@saypsst/next/style` | `psstStyle(config)` | `GET` handler: the PSST stylesheet, same-origin, `text/css`. |
+| `@saypsst/next/verify` | `psstVerify(config)` | `GET` handler: the domain-proof text PSST checks. |
 | `@saypsst/next/llms` | `psstLlms(config)` | `GET` handler: `/llms.txt`. Throws unless `/llms.txt` is in `rootPaths`. |
 | `@saypsst/next/proxy` | `withPsst(config, proxy?)`, `PsstProxy` | Wraps your proxy: AI-crawler / AI-referral hits, 410 for withdrawn paths. |
 
 ## What each module does
 
-**Page.** `generateMetadata` and the page fetch `GET {edge}/v1/sites/{site}/pages?path=…` (one request per render; 8 s timeout), validate the response and the document against the content contract (images only from your domain or `edge.saypsst.com`), and check the document's sha256 against the version hash psst approved. The body has the same structure as psst's static renderer: header, `main > article.psst-article` (h1, lede, updated date, blocks, sources), footer, plus one JSON-LD script (escaped; the only script). Metadata replaces your layout's defaults: absolute title, description, canonical `https://{domain}{path}`, Open Graph, Twitter, `robots: index, follow`, and `<meta name="psst-version" content="{12-char hash}">`. `generateStaticParams` prerenders the published pages from the manifest at build, and returns `[]` if psst is unreachable.
+**Page.** `generateMetadata` and the page fetch `GET {edge}/v1/sites/{site}/pages?path=…` (one request per render; 8 s timeout), validate the response and the document against the content contract (images only from your domain or `edge.saypsst.com`), and check the document's sha256 against the version hash PSST approved. The body has the same structure as PSST's static renderer: header, `main > article.psst-article` (h1, lede, updated date, blocks, sources), footer, plus one JSON-LD script (escaped; the only script). Metadata replaces your layout's defaults: absolute title, description, canonical `https://{domain}{path}`, Open Graph, Twitter, `robots: index, follow`, and `<meta name="psst-version" content="{12-char hash}">`. `generateStaticParams` prerenders the published pages from the manifest at build, and returns `[]` if PSST is unreachable.
 
-**Sitemap** renders the manifest's published HTML pages (withdrawn paths are already out). **Style, verify, llms** copy the files psst's edge renders (`GET {edge}/s/{site}{path}`), check the media type and size, and serve them same-origin with `nosniff`.
+**Sitemap** renders the manifest's published HTML pages (withdrawn paths are already out). **Style, verify, llms** copy the files PSST's edge renders (`GET {edge}/s/{site}{path}`), check the media type and size, and serve them same-origin with `nosniff`.
 
 **Proxy.** On every matched request it classifies the `User-Agent` (a claim, not proof) and the `Referer` host. Known AI crawlers and visitors arriving from ChatGPT, Perplexity, Gemini, Copilot or Claude produce one `POST {edge}/v1/hits` with the path and the classes only: no IP, no cookie, no query string, no UA string. The post is not awaited (`event.waitUntil`, 300 ms abort) and errors are swallowed. Requests with `X-Psst-Doctor: 1`, prefetches, RSC navigations, `/_next/*` and static assets are skipped. Then your proxy runs unchanged and its result is returned as is.
 
@@ -176,13 +176,13 @@ Verified against the Next 16.4 docs (`incremental-static-regeneration`, `caching
 | --- | --- |
 | Time-based ISR, 300 s | Route segment config `export const revalidate = 300` written as a literal in every route file (page and the four route handlers), plus `dynamicParams = true` on the catch-all. Edge fetches set no `cache` option, so they never enter the Data Cache (only status-200 responses would) and the ISR entry is the one cache layer; using no Request-time API keeps the routes static. Pages missing from `generateStaticParams` render on first request and are then cached the same way. |
 | Keep the last good render on fetch failure | The page and handlers **throw** (`PsstUnavailableError`, `PsstIntegrityError`) on a network error, timeout, non-200/404/410 answer, invalid JSON, contract failure or hash mismatch. Next's response cache keeps serving the previous entry when a background regeneration throws, and retries on the next request. Nothing is caught that Next needs: `notFound()` is called outside any `try`, so `unstable_rethrow` is not needed. |
-| Never-rendered page while psst is down | **A page cannot set a 503 in the App Router** (only `notFound()` 404, redirects, and the experimental 401/403). The closest correct mechanism: the thrown error makes Next answer **500 with `Cache-Control: private, no-cache, no-store`** and a `noindex` robots meta, and the failure is never persisted as ISR output, so no cached 404 and no cached error; the next request retries. There is no `Retry-After` on this response. |
-| psst down during `next build` | Your build never fails because of psst. `generateStaticParams` returns `[]` (the pages render on first request). A fixed-path page (`/about`) that cannot fetch at build calls `connection()` (`next/server`), so Next renders it at request time for that deployment. Route handlers (`process.env.NEXT_PHASE === "phase-production-build"`) return **503, `Retry-After: 300`, `Cache-Control: no-store`**; Next never stores a build-time route response with status ≥ 400 other than 404 (it sets `revalidate: 0`), so those routes are also rendered at request time for that deployment. In that degraded mode every request asks the edge: it answers normally once psst is back (successful handler responses carry `Cache-Control: public, max-age=0, s-maxage=300, stale-while-revalidate=86400`, so a CDN still caches them), and answers 500 uncached while psst is down. The next deploy restores full ISR. At runtime the handlers never return an error response: they throw, as above, so a good response is never replaced. |
-| Not found / withdrawn | Edge 404 or 410 → `notFound()` (404, cached for one ISR period). A page cannot answer 410, so `withPsst()` answers **410** for paths in the manifest's `withdrawn` list. It keeps that list in memory per instance and refreshes it in the background every 300 s, so no request waits on psst; until the first refresh completes, a withdrawn path answers 404. The sitemap drops withdrawn paths. |
+| Never-rendered page while PSST is down | **A page cannot set a 503 in the App Router** (only `notFound()` 404, redirects, and the experimental 401/403). The closest correct mechanism: the thrown error makes Next answer **500 with `Cache-Control: private, no-cache, no-store`** and a `noindex` robots meta, and the failure is never persisted as ISR output, so no cached 404 and no cached error; the next request retries. There is no `Retry-After` on this response. |
+| PSST down during `next build` | Your build never fails because of PSST. `generateStaticParams` returns `[]` (the pages render on first request). A fixed-path page (`/about`) that cannot fetch at build calls `connection()` (`next/server`), so Next renders it at request time for that deployment. Route handlers (`process.env.NEXT_PHASE === "phase-production-build"`) return **503, `Retry-After: 300`, `Cache-Control: no-store`**; Next never stores a build-time route response with status ≥ 400 other than 404 (it sets `revalidate: 0`), so those routes are also rendered at request time for that deployment. In that degraded mode every request asks the edge: it answers normally once PSST is back (successful handler responses carry `Cache-Control: public, max-age=0, s-maxage=300, stale-while-revalidate=86400`, so a CDN still caches them), and answers 500 uncached while PSST is down. The next deploy restores full ISR. At runtime the handlers never return an error response: they throw, as above, so a good response is never replaced. |
+| Not found / withdrawn | Edge 404 or 410 → `notFound()` (404, cached for one ISR period). A page cannot answer 410, so `withPsst()` answers **410** for paths in the manifest's `withdrawn` list. It keeps that list in memory per instance and refreshes it in the background every 300 s, so no request waits on PSST; until the first refresh completes, a withdrawn path answers 404. The sitemap drops withdrawn paths. |
 
-Cache Components (`cacheComponents: true`) removes the `revalidate` and `dynamicParams` segment configs, so these route files do not build there; v1 supports apps without Cache Components.
+Cache Components (`cacheComponents: true`) removes the `revalidate` and `dynamicParams` segment configs, so these route files do not build there. Such an app sets `serveFromEdge: true` in `psst.config.ts` and adds only `proxy.ts`: `withPsst()` rewrites PSST paths to the edge, which renders them with its own header and footer (not your layout), answers 410 for withdrawn paths and counts crawler hits itself. `npx saypsst init` does this when it detects the flag.
 
-Self-hosted with several instances (for example behind CloudFront): the default ISR cache is per instance. psst content then refreshes per instance within 300 s, which is correct but uneven; a shared cache handler fixes that.
+Self-hosted with several instances (for example behind CloudFront): the default ISR cache is per instance. PSST content then refreshes per instance within 300 s, which is correct but uneven; a shared cache handler fixes that.
 
 ## Security notes
 

package/dist/{chunk-4FFLVIJG.js → chunk-2NMIB353.js}

@@ -1,4 +1,4 @@
-import { domainSchema, publicIdSchema, isSafeHref, prefixSchema } from './chunk-WHB66OTA.js';
+import { domainSchema, publicIdSchema, isSafeHref, prefixSchema } from './chunk-X3GT7AOS.js';
 import { z } from 'zod';
 
 var PSST_REVALIDATE = 300;
@@ -29,6 +29,11 @@ var configSchema = z.strictObject({
   rootPaths: z.array(z.enum(["/about", "/llms.txt"])).max(2).default([]),
   /** psst edge origin. Override only for local development. */
   edge: z.string().refine(isEdgeOrigin, "edge must be an https origin (http only on localhost)").default(DEFAULT_EDGE),
+  /**
+   * Serve psst paths from the edge through `withPsst()` instead of route files, for apps with Cache Components, where
+   * the route files do not build. Pages use the edge's own header and footer, not the app's layout.
+   */
+  serveFromEdge: z.boolean().default(false),
   /** Header/footer used when the page module gets no `Shell` component. Same shape as the static renderer's shell. */
   shell: z.strictObject({
     nav: z.array(
@@ -50,7 +55,7 @@ function definePsst(input) {
   const parsed = configSchema.safeParse(input);
   if (!parsed.success) {
     throw new PsstConfigError(
-      `invalid psst config: ${parsed.error.issues.map((i) => `${i.path.join(".") || "(root)"}: ${i.message}`).join("; ")}`
+      `invalid PSST config: ${parsed.error.issues.map((i) => `${i.path.join(".") || "(root)"}: ${i.message}`).join("; ")}`
     );
   }
   const c = parsed.data;

package/dist/{chunk-CKSLG42W.js → chunk-ELYUDQHH.js}

@@ -1,4 +1,4 @@
-import { PsstUnavailableError } from './chunk-5X6OYLUN.js';
+import { PsstUnavailableError } from './chunk-ZELUPPQB.js';
 
 // src/route.ts
 var RETRY_AFTER_SECONDS = 300;
@@ -19,7 +19,7 @@ function psstRoute(handler) {
   };
 }
 function unavailable() {
-  return new Response("psst is temporarily unavailable\n", {
+  return new Response("PSST is temporarily unavailable\n", {
     status: 503,
     headers: {
       "content-type": "text/plain; charset=utf-8",

package/dist/{chunk-XCY5RUQM.js → chunk-QE3BBW25.js}

@@ -1,5 +1,5 @@
-import { psstRoute, notFoundResponse, textResponse } from './chunk-CKSLG42W.js';
-import { fetchEdgeFile, PsstUnavailableError, readCapped } from './chunk-5X6OYLUN.js';
+import { psstRoute, notFoundResponse, textResponse } from './chunk-ELYUDQHH.js';
+import { fetchEdgeFile, PsstUnavailableError, readCapped } from './chunk-ZELUPPQB.js';
 
 // src/edge-file.ts
 function edgeFileRoute(config, spec) {

package/dist/{chunk-WHB66OTA.js → chunk-X3GT7AOS.js}

@@ -404,7 +404,20 @@ var publicIdSchema = z.string().regex(/^site_[a-z2-7]{16}$/);
 var sitePathSchema = z.string().max(512).regex(SITE_PATH).refine((p) => !p.startsWith("//") && !p.includes(".."), "invalid path");
 var siteModeSchema = z.enum(["next", "vercel_static", "proxy"]);
 var agentClassSchema = z.enum(["training", "search", "user_fetch", "other"]);
-var referrerClassSchema = z.enum(["chatgpt", "perplexity", "gemini", "copilot", "claude", "other", "none"]);
+var referrerClassSchema = z.enum([
+  "chatgpt",
+  "perplexity",
+  "gemini",
+  "copilot",
+  "claude",
+  "grok",
+  "mistral",
+  "deepseek",
+  "meta",
+  "you",
+  "other",
+  "none"
+]);
 var hitSourceSchema = z.enum(["edge", "proxy"]);
 var publishStateSchema = z.enum(["published", "verified"]);
 var hashSchema = z.string().regex(/^[0-9a-f]{64}$/);
@@ -475,7 +488,17 @@ var AI_AGENT_RULES = [
   { agent: "Meta-ExternalAgent", agentClass: "training", pattern: /meta-externalagent/i },
   { agent: "Bytespider", agentClass: "training", pattern: /bytespider/i },
   { agent: "CCBot", agentClass: "training", pattern: /ccbot/i },
-  { agent: "Amazonbot", agentClass: "training", pattern: /amazonbot/i }
+  { agent: "Amazonbot", agentClass: "training", pattern: /amazonbot/i },
+  { agent: "MistralAI-User", agentClass: "user_fetch", pattern: /mistralai-user/i },
+  { agent: "MistralAI-Index", agentClass: "search", pattern: /mistralai-index/i },
+  { agent: "DuckAssistBot", agentClass: "search", pattern: /duckassistbot/i },
+  { agent: "Google-Agent", agentClass: "user_fetch", pattern: /google-agent/i },
+  { agent: "Meta-ExternalFetcher", agentClass: "user_fetch", pattern: /meta-externalfetcher/i },
+  { agent: "meta-webindexer", agentClass: "search", pattern: /meta-webindexer/i },
+  { agent: "YouBot", agentClass: "search", pattern: /youbot/i },
+  { agent: "Amzn-SearchBot", agentClass: "search", pattern: /amzn-searchbot/i },
+  { agent: "Amzn-User", agentClass: "user_fetch", pattern: /amzn-user/i },
+  { agent: "Claude-Agent", agentClass: "user_fetch", pattern: /claude-agent/i }
 ];
 new Set(AI_AGENT_RULES.map((r) => r.agent));
 function classifyUserAgent(userAgent) {
@@ -494,22 +517,70 @@ var REFERRER_HOSTS = [
   { host: "bard.google.com", cls: "gemini" },
   { host: "copilot.microsoft.com", cls: "copilot" },
   { host: "copilot.cloud.microsoft", cls: "copilot" },
-  { host: "claude.ai", cls: "claude" }
+  { host: "claude.ai", cls: "claude" },
+  { host: "grok.com", cls: "grok" },
+  { host: "chat.mistral.ai", cls: "mistral" },
+  { host: "chat.deepseek.com", cls: "deepseek" },
+  { host: "meta.ai", cls: "meta" },
+  { host: "you.com", cls: "you" }
+];
+var REFERRER_PATHS = [
+  { host: "x.com", pathPrefix: "/i/grok", cls: "grok" },
+  { host: "twitter.com", pathPrefix: "/i/grok", cls: "grok" }
 ];
 function classifyReferrer(referrer) {
   if (typeof referrer !== "string" || referrer.length === 0 || referrer.length > 2048) return "none";
-  let host;
+  let url;
   try {
-    host = new URL(referrer).hostname.toLowerCase();
+    url = new URL(referrer);
   } catch {
     return "none";
   }
+  const host = url.hostname.toLowerCase();
   if (host === "") return "none";
   for (const { host: h, cls } of REFERRER_HOSTS) {
     if (host === h || host.endsWith(`.${h}`)) return cls;
   }
+  const bare = host.replace(/^www\./, "");
+  const path = url.pathname.toLowerCase();
+  for (const { host: h, pathPrefix, cls } of REFERRER_PATHS) {
+    if (bare === h && (path === pathPrefix || path.startsWith(`${pathPrefix}/`))) return cls;
+  }
   return "other";
 }
+var AI_UTM_RULES = {
+  chatgpt: "chatgpt",
+  "chatgpt.com": "chatgpt",
+  openai: "chatgpt",
+  perplexity: "perplexity",
+  "perplexity.ai": "perplexity",
+  gemini: "gemini",
+  "gemini.google.com": "gemini",
+  copilot: "copilot",
+  "copilot.microsoft.com": "copilot",
+  claude: "claude",
+  "claude.ai": "claude",
+  grok: "grok",
+  mistral: "mistral",
+  lechat: "mistral",
+  deepseek: "deepseek",
+  metaai: "meta",
+  youcom: "you"
+};
+function classifyUtmSource(utmSource) {
+  if (typeof utmSource !== "string" || utmSource.length === 0 || utmSource.length > 200) return null;
+  const v = utmSource.trim().toLowerCase();
+  if (Object.hasOwn(AI_UTM_RULES, v)) return AI_UTM_RULES[v] ?? null;
+  for (const { host, cls } of REFERRER_HOSTS) {
+    if (v === host || v.endsWith(`.${host}`)) return cls;
+  }
+  return null;
+}
+function classifyArrival(referrer, utmSource) {
+  const fromReferrer = classifyReferrer(referrer);
+  if (fromReferrer !== "other" && fromReferrer !== "none") return fromReferrer;
+  return classifyUtmSource(utmSource) ?? fromReferrer;
+}
 
 // src/content.ts
 var siteShape = manifestResponseSchema.shape.site.shape;
@@ -517,6 +588,6 @@ var domainSchema = siteShape.domain;
 var prefixSchema = siteShape.prefix;
 
 // src/version.ts
-var PSST_NEXT_VERSION = "0.2.0";
+var PSST_NEXT_VERSION = "0.3.0";
 
-export { CONTENT_SCHEMA_VERSION, ContentError, PSST_NEXT_VERSION, buildJsonLd, classifyReferrer, classifyUserAgent, domainSchema, factValue, hashDocument, hitRequestSchema, isSafeHref, manifestResponseSchema, pageResponseSchema, parsePageDocument, prefixSchema, publicIdSchema, renderSitemap, serializeJsonForScript, shortHash, sitePathSchema };
+export { CONTENT_SCHEMA_VERSION, ContentError, PSST_NEXT_VERSION, buildJsonLd, classifyArrival, classifyUserAgent, domainSchema, factValue, hashDocument, hitRequestSchema, isSafeHref, manifestResponseSchema, pageResponseSchema, parsePageDocument, prefixSchema, publicIdSchema, renderSitemap, serializeJsonForScript, shortHash, sitePathSchema };

package/dist/{chunk-5X6OYLUN.js → chunk-ZELUPPQB.js}

@@ -1,9 +1,9 @@
-import { pageResponseSchema, PSST_NEXT_VERSION, manifestResponseSchema } from './chunk-WHB66OTA.js';
+import { pageResponseSchema, PSST_NEXT_VERSION, manifestResponseSchema } from './chunk-X3GT7AOS.js';
 import { cache } from 'react';
 
 var PsstUnavailableError = class extends Error {
   constructor(message, options) {
-    super(`psst: ${message}`, options);
+    super(`PSST: ${message}`, options);
     this.name = "PsstUnavailableError";
   }
 };

package/dist/{config-CoVgm6Ny.d.ts → config-LILlPYgW.d.ts}

@@ -14,6 +14,7 @@ declare const configSchema: z.ZodObject<{
         "/llms.txt": "/llms.txt";
     }>>>;
     edge: z.ZodDefault<z.ZodString>;
+    serveFromEdge: z.ZodDefault<z.ZodBoolean>;
     shell: z.ZodOptional<z.ZodObject<{
         nav: z.ZodOptional<z.ZodArray<z.ZodObject<{
             label: z.ZodString;
@@ -32,6 +33,8 @@ interface PsstConfig {
     readonly rootPaths: readonly ("/about" | "/llms.txt")[];
     /** Edge origin without a trailing slash. */
     readonly edge: string;
+    /** Psst paths are rewritten to the edge by `withPsst()` instead of served by route files. */
+    readonly serveFromEdge: boolean;
     readonly shell?: {
         readonly nav?: readonly {
             readonly label: string;

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-export { D as DEFAULT_EDGE, P as PSST_REVALIDATE, a as PsstConfig, b as PsstConfigError, c as PsstConfigInput, d as definePsst } from './config-CoVgm6Ny.js';
+export { D as DEFAULT_EDGE, P as PSST_REVALIDATE, a as PsstConfig, b as PsstConfigError, c as PsstConfigInput, d as definePsst } from './config-LILlPYgW.js';
 import 'zod';
 
 /** Kept equal to package.json `version` (checked by test/version.test.ts). */
-declare const PSST_NEXT_VERSION = "0.2.0";
+declare const PSST_NEXT_VERSION = "0.3.0";
 
 export { PSST_NEXT_VERSION };

package/dist/index.js

@@ -1,2 +1,2 @@
-export { DEFAULT_EDGE, PSST_REVALIDATE, PsstConfigError, definePsst } from './chunk-4FFLVIJG.js';
-export { PSST_NEXT_VERSION } from './chunk-WHB66OTA.js';
+export { DEFAULT_EDGE, PSST_REVALIDATE, PsstConfigError, definePsst } from './chunk-2NMIB353.js';
+export { PSST_NEXT_VERSION } from './chunk-X3GT7AOS.js';

package/dist/llms.d.ts

@@ -1,5 +1,5 @@
-import { a as PsstConfig } from './config-CoVgm6Ny.js';
-export { P as PSST_REVALIDATE } from './config-CoVgm6Ny.js';
+import { a as PsstConfig } from './config-LILlPYgW.js';
+export { P as PSST_REVALIDATE } from './config-LILlPYgW.js';
 import 'zod';
 
 /** `GET` for `app/llms.txt/route.ts`, only when the dashboard claimed `/llms.txt` (`rootPaths`). */

package/dist/llms.js

@@ -1,14 +1,14 @@
-import { edgeFileRoute } from './chunk-XCY5RUQM.js';
-import './chunk-CKSLG42W.js';
-import { PsstConfigError } from './chunk-4FFLVIJG.js';
-export { PSST_REVALIDATE } from './chunk-4FFLVIJG.js';
-import './chunk-5X6OYLUN.js';
-import './chunk-WHB66OTA.js';
+import { edgeFileRoute } from './chunk-QE3BBW25.js';
+import './chunk-ELYUDQHH.js';
+import { PsstConfigError } from './chunk-2NMIB353.js';
+export { PSST_REVALIDATE } from './chunk-2NMIB353.js';
+import './chunk-ZELUPPQB.js';
+import './chunk-X3GT7AOS.js';
 
 // src/llms.ts
 function psstLlms(config) {
   if (!config.rootPaths.includes("/llms.txt")) {
-    throw new PsstConfigError("/llms.txt is not in rootPaths; psst only serves root paths the dashboard claimed");
+    throw new PsstConfigError("/llms.txt is not in rootPaths; PSST only serves root paths the dashboard claimed");
   }
   return edgeFileRoute(config, { path: "/llms.txt", type: "text/plain", maxBytes: 512 * 1024 });
 }

package/dist/page.d.ts

@@ -1,7 +1,7 @@
 import { Metadata } from 'next';
 import { ReactNode, ComponentType } from 'react';
-import { a as PsstConfig } from './config-CoVgm6Ny.js';
-export { P as PSST_REVALIDATE } from './config-CoVgm6Ny.js';
+import { a as PsstConfig } from './config-LILlPYgW.js';
+export { P as PSST_REVALIDATE } from './config-LILlPYgW.js';
 import 'zod';
 
 /** Props your `Shell` receives: the psst `<main>` element. Render your header and footer around it. */

package/dist/page.js

@@ -1,8 +1,8 @@
-import { isBuildPhase } from './chunk-CKSLG42W.js';
-import { PsstConfigError } from './chunk-4FFLVIJG.js';
-export { PSST_REVALIDATE } from './chunk-4FFLVIJG.js';
-import { fetchManifest, PsstUnavailableError, fetchPage } from './chunk-5X6OYLUN.js';
-import { ContentError, parsePageDocument, hashDocument, shortHash, serializeJsonForScript, buildJsonLd, sitePathSchema, factValue } from './chunk-WHB66OTA.js';
+import { isBuildPhase } from './chunk-ELYUDQHH.js';
+import { PsstConfigError } from './chunk-2NMIB353.js';
+export { PSST_REVALIDATE } from './chunk-2NMIB353.js';
+import { fetchManifest, PsstUnavailableError, fetchPage } from './chunk-ZELUPPQB.js';
+import { ContentError, parsePageDocument, hashDocument, shortHash, serializeJsonForScript, buildJsonLd, sitePathSchema, factValue } from './chunk-X3GT7AOS.js';
 import { notFound } from 'next/navigation';
 import { connection } from 'next/server';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
@@ -104,7 +104,7 @@ function DefaultShell({ siteName, nav = [], footer, children }) {
 }
 var PsstIntegrityError = class extends Error {
   constructor(message) {
-    super(`psst: ${message}`);
+    super(`PSST: ${message}`);
     this.name = "PsstIntegrityError";
   }
 };
@@ -140,7 +140,7 @@ async function load(config, fixed, props) {
 function psstPage(config, options = {}) {
   const fixed = options.path;
   if (fixed && !config.rootPaths.includes(fixed)) {
-    throw new PsstConfigError(`${fixed} is not in rootPaths; psst only serves root paths the dashboard claimed`);
+    throw new PsstConfigError(`${fixed} is not in rootPaths; PSST only serves root paths the dashboard claimed`);
   }
   const Shell = options.Shell;
   async function Page(props) {
@@ -178,7 +178,7 @@ function psstPage(config, options = {}) {
       return manifest.pages.filter((p) => p.kind !== "llms_txt" && p.path.startsWith(base) && p.path.length > base.length).map((p) => ({ slug: p.path.slice(base.length).split("/") }));
     } catch (err) {
       if (err instanceof PsstUnavailableError || err instanceof ContentError) {
-        console.warn(`${err.message}; prerendering no psst pages, they render on first request`);
+        console.warn(`${err.message}; prerendering no PSST pages, they render on first request`);
         return [];
       }
       throw err;

package/dist/proxy.d.ts

@@ -1,5 +1,5 @@
 import { NextRequest, NextFetchEvent } from 'next/server';
-import { a as PsstConfig } from './config-CoVgm6Ny.js';
+import { a as PsstConfig } from './config-LILlPYgW.js';
 import 'zod';
 
 type ProxyResult = Response | null | undefined | void;
@@ -9,6 +9,9 @@ type PsstProxy = (request: NextRequest, event: NextFetchEvent) => ProxyResult |
  * Wrap the site's proxy. On every request: classify AI crawlers (by User-Agent, a claim not a proof) and AI
  * referrers, and post a hit without awaiting it (`event.waitUntil`); no IP, cookie, query or UA string is sent.
  * Withdrawn psst paths answer 410. Everything else goes to `proxy` unchanged, and its result is returned as is.
+ *
+ * With `serveFromEdge`, psst paths are rewritten to the edge before anything else, with an allowlist of request headers:
+ * the edge answers them (410 included) and counts its own hits, so no hit is posted for them here.
  */
 declare function withPsst(config: PsstConfig, proxy?: PsstProxy): PsstProxy;
 

package/dist/proxy.js

@@ -1,8 +1,8 @@
-import { USER_AGENT, fetchManifest } from './chunk-5X6OYLUN.js';
-import { sitePathSchema, classifyUserAgent, classifyReferrer, hitRequestSchema, CONTENT_SCHEMA_VERSION } from './chunk-WHB66OTA.js';
+import { USER_AGENT, fetchManifest } from './chunk-ZELUPPQB.js';
+import { sitePathSchema, classifyUserAgent, classifyArrival, hitRequestSchema, CONTENT_SCHEMA_VERSION } from './chunk-X3GT7AOS.js';
+import { NextResponse } from 'next/server';
 
 // src/hits.ts
-var AI_REFERRERS = /* @__PURE__ */ new Set(["chatgpt", "perplexity", "gemini", "copilot", "claude"]);
 var ASSET = /\.(?:js|mjs|css|map|png|jpe?g|gif|webp|avif|svg|ico|woff2?|ttf|otf|mp4|webm)$/i;
 function hitFor(config, request) {
   if (request.method !== "GET" && request.method !== "HEAD") return null;
@@ -15,8 +15,8 @@ function hitFor(config, request) {
   if (path.startsWith("/_next/") || ASSET.test(path)) return null;
   if (!sitePathSchema.safeParse(path).success) return null;
   const bot = classifyUserAgent(h.get("user-agent"));
-  const referrerClass = classifyReferrer(h.get("referer"));
-  if (bot.agent === null && !AI_REFERRERS.has(referrerClass)) return null;
+  const referrerClass = classifyArrival(h.get("referer"), request.nextUrl.searchParams.get("utm_source"));
+  if (bot.agent === null && (referrerClass === "other" || referrerClass === "none")) return null;
   const hit = hitRequestSchema.safeParse({
     v: CONTENT_SCHEMA_VERSION,
     publicId: config.site,
@@ -71,12 +71,35 @@ function gone() {
     headers: { "content-type": "text/plain; charset=utf-8", "cache-control": "public, max-age=0, s-maxage=300" }
   });
 }
+var EDGE_REQUEST_HEADERS = ["user-agent", "accept", "x-psst-doctor", "rsc", "next-router-prefetch", "purpose", "sec-purpose"];
+function refererOrigin(value) {
+  if (value === null) return null;
+  try {
+    return new URL(value).origin;
+  } catch {
+    return null;
+  }
+}
+function rewriteToEdge(config, request, path) {
+  const headers = new Headers();
+  for (const name of EDGE_REQUEST_HEADERS) {
+    const value = request.headers.get(name);
+    if (value !== null) headers.set(name, value);
+  }
+  const referer = refererOrigin(request.headers.get("referer"));
+  if (referer !== null) headers.set("referer", referer);
+  return NextResponse.rewrite(new URL(`${config.edge}/s/${config.site}${path}`), { request: { headers } });
+}
 function withPsst(config, proxy) {
   const withdrawn = withdrawnTracker(config);
   return (request, event) => {
+    const path = request.nextUrl.pathname;
+    if (config.serveFromEdge) {
+      const edgePath = path.replace(/\/+$/, "");
+      if (isPsstPath(config, edgePath)) return rewriteToEdge(config, request, edgePath);
+    }
     const hit = hitFor(config, request);
     if (hit) event.waitUntil(postHit(config, hit));
-    const path = request.nextUrl.pathname;
     if (isPsstPath(config, path)) {
       const refresh = withdrawn.refreshIfStale(Date.now());
       if (refresh) event.waitUntil(refresh);

package/dist/sitemap.d.ts

@@ -1,5 +1,5 @@
-import { a as PsstConfig } from './config-CoVgm6Ny.js';
-export { P as PSST_REVALIDATE } from './config-CoVgm6Ny.js';
+import { a as PsstConfig } from './config-LILlPYgW.js';
+export { P as PSST_REVALIDATE } from './config-LILlPYgW.js';
 import 'zod';
 
 /**

package/dist/sitemap.js

@@ -1,7 +1,7 @@
-import { psstRoute, textResponse } from './chunk-CKSLG42W.js';
-export { PSST_REVALIDATE } from './chunk-4FFLVIJG.js';
-import { fetchManifest, PsstUnavailableError } from './chunk-5X6OYLUN.js';
-import { renderSitemap } from './chunk-WHB66OTA.js';
+import { psstRoute, textResponse } from './chunk-ELYUDQHH.js';
+export { PSST_REVALIDATE } from './chunk-2NMIB353.js';
+import { fetchManifest, PsstUnavailableError } from './chunk-ZELUPPQB.js';
+import { renderSitemap } from './chunk-X3GT7AOS.js';
 
 // src/sitemap.ts
 function psstSitemap(config) {

package/dist/style.d.ts

@@ -1,5 +1,5 @@
-import { a as PsstConfig } from './config-CoVgm6Ny.js';
-export { P as PSST_REVALIDATE } from './config-CoVgm6Ny.js';
+import { a as PsstConfig } from './config-LILlPYgW.js';
+export { P as PSST_REVALIDATE } from './config-LILlPYgW.js';
 import 'zod';
 
 /** `GET` for `app/(psst){prefix}/_psst/style.css/route.ts`: the psst stylesheet, served same-origin. */

package/dist/style.js

@@ -1,8 +1,8 @@
-import { edgeFileRoute } from './chunk-XCY5RUQM.js';
-import './chunk-CKSLG42W.js';
-export { PSST_REVALIDATE } from './chunk-4FFLVIJG.js';
-import './chunk-5X6OYLUN.js';
-import './chunk-WHB66OTA.js';
+import { edgeFileRoute } from './chunk-QE3BBW25.js';
+import './chunk-ELYUDQHH.js';
+export { PSST_REVALIDATE } from './chunk-2NMIB353.js';
+import './chunk-ZELUPPQB.js';
+import './chunk-X3GT7AOS.js';
 
 // src/style.ts
 function psstStyle(config) {

package/dist/verify.d.ts

@@ -1,5 +1,5 @@
-import { a as PsstConfig } from './config-CoVgm6Ny.js';
-export { P as PSST_REVALIDATE } from './config-CoVgm6Ny.js';
+import { a as PsstConfig } from './config-LILlPYgW.js';
+export { P as PSST_REVALIDATE } from './config-LILlPYgW.js';
 import 'zod';
 
 /**

package/dist/verify.js

@@ -1,8 +1,8 @@
-import { edgeFileRoute } from './chunk-XCY5RUQM.js';
-import './chunk-CKSLG42W.js';
-export { PSST_REVALIDATE } from './chunk-4FFLVIJG.js';
-import './chunk-5X6OYLUN.js';
-import './chunk-WHB66OTA.js';
+import { edgeFileRoute } from './chunk-QE3BBW25.js';
+import './chunk-ELYUDQHH.js';
+export { PSST_REVALIDATE } from './chunk-2NMIB353.js';
+import './chunk-ZELUPPQB.js';
+import './chunk-X3GT7AOS.js';
 
 // src/verify.ts
 function psstVerify(config) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@saypsst/next",
-  "version": "0.2.0",
-  "description": "Drop-in Next.js App Router route modules that serve psst pages on your own domain.",
+  "version": "0.3.0",
+  "description": "Drop-in Next.js App Router route modules that serve PSST pages on your own domain.",
   "license": "UNLICENSED",
   "type": "module",
   "sideEffects": false,