@sonordev/site-kit 5.6.0 → 5.8.0

package/dist/cli/index.mjs

@@ -1,16 +1,18 @@
 #!/usr/bin/env node
 import { traverse, isJSXIdentifier, isJSXAttribute, isFunctionDeclaration, isVariableDeclarator, isIdentifier, isStringLiteral, isJSXMemberExpression, isJSXExpressionContainer, isTemplateLiteral, isArrayExpression, isObjectExpression, isJSXText } from '../chunk-JOYMIGR2.mjs';
 import { parse } from '../chunk-5YA6SI4Z.mjs';
-import { buildOgHtml, TITLE_MAX_PX, OG_REPORT_ATTR } from '../chunk-UJ6CHZAI.mjs';
+import { paramCardKeys, unmatchedCardKeys, DYNAMIC, PARAM_CARD_DIR, buildOgHtml, pageCardConfig, paramCardUrl } from '../chunk-XZO5I4RS.mjs';
+import { TITLE_MAX_PX, OG_REPORT_ATTR } from '../chunk-YU7QZ3PP.mjs';
 import { require_main } from '../chunk-NNZDWY3L.mjs';
-import { findAppDirForDiscovery, discoverNextJsRoutes } from '../chunk-XIJ4F6IE.mjs';
-import { SITE_KIT_VERSION } from '../chunk-DQUBETXH.mjs';
+import { findAppDirForDiscovery, NEXT_PROXY_FILES, NEXT_MIDDLEWARE_FILES, findConventionFile, NEXT_APP_DIRS, findSitemapRoute, findProxyFiles, findNextConfig, findRootLayout, discoverNextJsRoutes, hasPageFile, NEXT_SOURCE_EXTENSIONS } from '../chunk-U2V542EO.mjs';
+import { applyTrailingSlash } from '../chunk-4LYW6PMU.mjs';
+import { SITE_KIT_VERSION } from '../chunk-HRMGITUZ.mjs';
 import { __commonJS, __require, __toESM, __export, __privateAdd, __publicField, __privateGet, __privateMethod, __privateSet, __privateWrapper } from '../chunk-BEXTDHO4.mjs';
 import { EventEmitter } from 'events';
 import childProcess, { execFile as execFile$1, execSync, spawnSync, spawn } from 'child_process';
 import path12, { win32, posix } from 'path';
-import * as fs from 'fs';
-import fs__default, { realpathSync, existsSync, readFileSync, readdirSync, statSync, readlinkSync, readdir as readdir$1, lstatSync, rmSync, mkdtempSync, writeFileSync } from 'fs';
+import * as fs20 from 'fs';
+import fs20__default, { realpathSync, existsSync, readFileSync, readdirSync, statSync, readlinkSync, readdir as readdir$1, lstatSync, rmSync, mkdtempSync, writeFileSync } from 'fs';
 import process2 from 'process';
 import { styleText, promisify, stripVTControlCharacters } from 'util';
 import os from 'os';
@@ -19,7 +21,7 @@ import { AsyncLocalStorage, AsyncResource } from 'async_hooks';
 import * as readline3 from 'readline';
 import readline3__default from 'readline';
 import { randomUUID } from 'crypto';
-import fs3, { realpath, readlink, readdir, lstat, constants } from 'fs/promises';
+import fs3, { realpath as realpath$1, readlink, readdir, lstat, constants } from 'fs/promises';
 import { fileURLToPath, URL as URL$1 } from 'url';
 import { Buffer as Buffer$1 } from 'buffer';
 import http from 'http';
@@ -6202,10 +6204,10 @@ var require_lib2 = __commonJS({
     exports.analyse = analyse;
     var detectFile = (filepath, opts = {}) => new Promise((resolve, reject) => {
       let fd;
-      const fs29 = (0, node_1.default)();
+      const fs31 = (0, node_1.default)();
       const handler = (err, buffer) => {
         if (fd) {
-          fs29.closeSync(fd);
+          fs31.closeSync(fd);
         }
         if (err) {
           reject(err);
@@ -6217,9 +6219,9 @@ var require_lib2 = __commonJS({
       };
       const sampleSize = (opts === null || opts === void 0 ? void 0 : opts.sampleSize) || 0;
       if (sampleSize > 0) {
-        fd = fs29.openSync(filepath, "r");
+        fd = fs31.openSync(filepath, "r");
         let sample = Buffer.allocUnsafe(sampleSize);
-        fs29.read(fd, sample, 0, sampleSize, opts.offset, (err, bytesRead) => {
+        fs31.read(fd, sample, 0, sampleSize, opts.offset, (err, bytesRead) => {
           if (err) {
             handler(err, null);
           } else {
@@ -6231,22 +6233,22 @@ var require_lib2 = __commonJS({
         });
         return;
       }
-      fs29.readFile(filepath, handler);
+      fs31.readFile(filepath, handler);
     });
     exports.detectFile = detectFile;
     var detectFileSync = (filepath, opts = {}) => {
-      const fs29 = (0, node_1.default)();
+      const fs31 = (0, node_1.default)();
       if (opts && opts.sampleSize) {
-        const fd = fs29.openSync(filepath, "r");
+        const fd = fs31.openSync(filepath, "r");
         let sample = Buffer.allocUnsafe(opts.sampleSize);
-        const bytesRead = fs29.readSync(fd, sample, 0, opts.sampleSize, opts.offset);
+        const bytesRead = fs31.readSync(fd, sample, 0, opts.sampleSize, opts.offset);
         if (bytesRead < opts.sampleSize) {
           sample = sample.subarray(0, bytesRead);
         }
-        fs29.closeSync(fd);
+        fs31.closeSync(fd);
         return (0, exports.detect)(sample);
       }
-      return (0, exports.detect)(fs29.readFileSync(filepath));
+      return (0, exports.detect)(fs31.readFileSync(filepath));
     };
     exports.detectFileSync = detectFileSync;
     exports.default = {
@@ -12247,7 +12249,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @param {string} subcommandName
    */
   _checkForMissingExecutable(executableFile, executableDir, subcommandName) {
-    if (fs__default.existsSync(executableFile)) return;
+    if (fs20__default.existsSync(executableFile)) return;
     const executableDirMessage = executableDir ? `searched for local subcommand relative to directory '${executableDir}'` : "no directory for search for local subcommand, use .executableDir() to supply a custom directory";
     const executableMissing = `'${executableFile}' does not exist
  - if '${subcommandName}' is not meant to be an executable command, remove description parameter from '.command()' and use '.description()' instead
@@ -12265,10 +12267,10 @@ Expecting one of '${allowedValues.join("', '")}'`);
     const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
     function findFile(baseDir, baseName) {
       const localBin = path12.resolve(baseDir, baseName);
-      if (fs__default.existsSync(localBin)) return localBin;
+      if (fs20__default.existsSync(localBin)) return localBin;
       if (sourceExt.includes(path12.extname(baseName))) return void 0;
       const foundExt = sourceExt.find(
-        (ext2) => fs__default.existsSync(`${localBin}${ext2}`)
+        (ext2) => fs20__default.existsSync(`${localBin}${ext2}`)
       );
       if (foundExt) return `${localBin}${foundExt}`;
       return void 0;
@@ -12280,7 +12282,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
     if (this._scriptPath) {
       let resolvedScriptPath;
       try {
-        resolvedScriptPath = fs__default.realpathSync(this._scriptPath);
+        resolvedScriptPath = fs20__default.realpathSync(this._scriptPath);
       } catch {
         resolvedScriptPath = this._scriptPath;
       }
@@ -13236,9 +13238,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @param {string} [path]
    * @return {(string|null|Command)}
    */
-  executableDir(path29) {
-    if (path29 === void 0) return this._executableDir;
-    this._executableDir = path29;
+  executableDir(path31) {
+    if (path31 === void 0) return this._executableDir;
+    this._executableDir = path31;
     return this;
   }
   /**
@@ -20345,9 +20347,9 @@ function observableToAsyncIterable(source) {
 
 // node_modules/.pnpm/inquirer@14.0.2_@types+node@26.2.0/node_modules/inquirer/dist/ui/prompt.js
 var _ = {
-  set: (obj, path29 = "", value) => {
+  set: (obj, path31 = "", value) => {
     let pointer = obj;
-    path29.split(".").forEach((key, index, arr) => {
+    path31.split(".").forEach((key, index, arr) => {
       if (key === "__proto__" || key === "constructor")
         return;
       if (index === arr.length - 1) {
@@ -20358,8 +20360,8 @@ var _ = {
       pointer = pointer[key];
     });
   },
-  get: (obj, path29 = "", defaultValue) => {
-    const travel = (regexp) => String.prototype.split.call(path29, regexp).filter(Boolean).reduce(
+  get: (obj, path31 = "", defaultValue) => {
+    const travel = (regexp) => String.prototype.split.call(path31, regexp).filter(Boolean).reduce(
       // @ts-expect-error implicit any on res[key]
       (res, key) => res == null ? res : res[key],
       obj
@@ -20716,18 +20718,18 @@ function scanForForms(ast, content, filePath) {
   const forms = [];
   content.split("\n");
   traverse(ast, {
-    JSXElement(path29) {
-      const opening = path29.node.openingElement;
+    JSXElement(path31) {
+      const opening = path31.node.openingElement;
       if (isJSXIdentifier(opening.name) && opening.name.name === "form") {
-        const fields = extractFieldsFromForm(path29);
+        const fields = extractFieldsFromForm(path31);
         const hasOnSubmit = opening.attributes.some(
           (attr) => isJSXAttribute(attr) && isJSXIdentifier(attr.name) && attr.name.name === "onSubmit"
         );
         if (hasOnSubmit && fields.length > 0) {
-          const startLine = path29.node.loc?.start.line || 0;
-          const endLine = path29.node.loc?.end.line || 0;
+          const startLine = path31.node.loc?.start.line || 0;
+          const endLine = path31.node.loc?.end.line || 0;
           let componentName = "UnknownForm";
-          let current = path29.parentPath;
+          let current = path31.parentPath;
           while (current) {
             if (isFunctionDeclaration(current.node) && current.node.id) {
               componentName = current.node.id.name;
@@ -20760,7 +20762,7 @@ function scanForForms(ast, content, filePath) {
       }
       if (isJSXIdentifier(opening.name) && opening.name.name === "Form") {
         if (content.includes("Formik") || content.includes("formik")) {
-          const fields = extractFieldsFromFormik(path29);
+          const fields = extractFieldsFromFormik(path31);
           if (fields.length > 0) {
             forms.push({
               filePath,
@@ -20771,8 +20773,8 @@ function scanForForms(ast, content, filePath) {
               submitsTo: null,
               complexity: "moderate",
               suggestedAction: "assisted",
-              startLine: path29.node.loc?.start.line || 0,
-              endLine: path29.node.loc?.end.line || 0
+              startLine: path31.node.loc?.start.line || 0,
+              endLine: path31.node.loc?.end.line || 0
             });
           }
         }
@@ -20790,8 +20792,8 @@ function extractFieldsFromForm(formPath) {
   const radioGroups = /* @__PURE__ */ new Map();
   const checkboxGroups = /* @__PURE__ */ new Map();
   formPath.traverse({
-    JSXElement(path29) {
-      const opening = path29.node.openingElement;
+    JSXElement(path31) {
+      const opening = path31.node.openingElement;
       const tagName = isJSXIdentifier(opening.name) ? opening.name.name : null;
       if (["input", "textarea", "select"].includes(tagName || "")) {
         const attrs = opening.attributes;
@@ -20838,7 +20840,7 @@ function extractFieldsFromForm(formPath) {
         }
         if (tagName === "select") {
           const selectOptions = [];
-          path29.traverse({
+          path31.traverse({
             JSXElement(optionPath) {
               const optOpening = optionPath.node.openingElement;
               const optTagName = isJSXIdentifier(optOpening.name) ? optOpening.name.name : null;
@@ -20913,8 +20915,8 @@ function extractFieldsFromForm(formPath) {
 function extractFieldsFromFormik(formPath, content) {
   const fields = [];
   formPath.traverse({
-    JSXElement(path29) {
-      const opening = path29.node.openingElement;
+    JSXElement(path31) {
+      const opening = path31.node.openingElement;
       const tagName = isJSXIdentifier(opening.name) ? opening.name.name : null;
       if (tagName === "Field" || tagName === "FastField") {
         const attrs = opening.attributes;
@@ -21033,11 +21035,11 @@ function scanForMetadata(ast, content, filePath) {
   }
   let hasHeadComponent = false;
   traverse(ast, {
-    JSXElement(path29) {
-      const opening = path29.node.openingElement;
+    JSXElement(path31) {
+      const opening = path31.node.openingElement;
       if (isJSXIdentifier(opening.name) && opening.name.name === "Head") {
         hasHeadComponent = true;
-        path29.stop();
+        path31.stop();
       }
     }
   });
@@ -21072,8 +21074,8 @@ function scanForWidgets(ast, content, filePath) {
   for (const { pattern, type } of widgetPatterns) {
     if (pattern.test(content)) {
       traverse(ast, {
-        JSXElement(path29) {
-          const opening = path29.node.openingElement;
+        JSXElement(path31) {
+          const opening = path31.node.openingElement;
           if (isJSXIdentifier(opening.name) && (opening.name.name === "script" || opening.name.name === "Script")) {
             const srcAttr = opening.attributes.find(
               (attr) => isJSXAttribute(attr) && isJSXIdentifier(attr.name) && attr.name.name === "src"
@@ -21088,8 +21090,8 @@ function scanForWidgets(ast, content, filePath) {
                   filePath,
                   widgetType: type,
                   scriptTag: src,
-                  startLine: path29.node.loc?.start.line || 0,
-                  endLine: path29.node.loc?.end.line || 0
+                  startLine: path31.node.loc?.start.line || 0,
+                  endLine: path31.node.loc?.end.line || 0
                 });
               }
             }
@@ -21228,8 +21230,8 @@ function scanForSchemas(ast, content, filePath) {
     return schemas;
   }
   traverse(ast, {
-    JSXElement(path29) {
-      const opening = path29.node.openingElement;
+    JSXElement(path31) {
+      const opening = path31.node.openingElement;
       if (isJSXIdentifier(opening.name) && (opening.name.name === "script" || opening.name.name === "Script")) {
         const typeAttr = opening.attributes.find(
           (attr) => isJSXAttribute(attr) && isJSXIdentifier(attr.name) && attr.name.name === "type"
@@ -21256,8 +21258,8 @@ function scanForSchemas(ast, content, filePath) {
               filePath,
               type: detectedType,
               schemaType,
-              startLine: path29.node.loc?.start.line || 0,
-              endLine: path29.node.loc?.end.line || 0
+              startLine: path31.node.loc?.start.line || 0,
+              endLine: path31.node.loc?.end.line || 0
             });
           }
         }
@@ -21290,8 +21292,8 @@ function scanForFAQs(ast, content, filePath) {
     /questions?\s*(?:and|&)?\s*answers?/i
   ];
   traverse(ast, {
-    JSXElement(path29) {
-      const opening = path29.node.openingElement;
+    JSXElement(path31) {
+      const opening = path31.node.openingElement;
       let tagName = "";
       if (isJSXIdentifier(opening.name)) {
         tagName = opening.name.name;
@@ -21304,8 +21306,8 @@ function scanForFAQs(ast, content, filePath) {
         faqs.push({
           filePath,
           type: "details-summary",
-          startLine: path29.node.loc?.start.line || 0,
-          endLine: path29.node.loc?.end.line || 0,
+          startLine: path31.node.loc?.start.line || 0,
+          endLine: path31.node.loc?.end.line || 0,
           hasSchema: content.includes("FAQPage") || content.includes("application/ld+json")
         });
         return;
@@ -21313,7 +21315,7 @@ function scanForFAQs(ast, content, filePath) {
       for (const pattern of faqPatterns) {
         if (pattern.test(tagName)) {
           let itemCount = 0;
-          path29.traverse({
+          path31.traverse({
             JSXElement(itemPath) {
               const itemOpening = itemPath.node.openingElement;
               if (isJSXIdentifier(itemOpening.name)) {
@@ -21329,8 +21331,8 @@ function scanForFAQs(ast, content, filePath) {
             type: "accordion",
             componentName: tagName,
             itemCount: itemCount || void 0,
-            startLine: path29.node.loc?.start.line || 0,
-            endLine: path29.node.loc?.end.line || 0,
+            startLine: path31.node.loc?.start.line || 0,
+            endLine: path31.node.loc?.end.line || 0,
             hasSchema: content.includes("FAQPage") || content.includes("application/ld+json")
           });
           return;
@@ -21453,8 +21455,8 @@ function scanForImages(ast, content, filePath) {
     return images;
   }
   traverse(ast, {
-    JSXElement(path29) {
-      const opening = path29.node.openingElement;
+    JSXElement(path31) {
+      const opening = path31.node.openingElement;
       if (!isJSXIdentifier(opening.name)) return;
       const tagName = opening.name.name;
       if (tagName === "img" || tagName === "Image") {
@@ -21482,8 +21484,8 @@ function scanForImages(ast, content, filePath) {
           src: src || void 0,
           alt: alt || void 0,
           isLocal,
-          startLine: path29.node.loc?.start.line || 0,
-          endLine: path29.node.loc?.end.line || 0
+          startLine: path31.node.loc?.start.line || 0,
+          endLine: path31.node.loc?.end.line || 0
         });
       }
     }
@@ -22374,18 +22376,18 @@ async function migrateFile(filePath, options) {
   let componentName = "Form";
   const traverse2 = (await import('../lib-RSDMEKDQ.mjs')).default;
   traverse2(ast, {
-    ExportNamedDeclaration(path29) {
-      const decl = path29.node.declaration;
+    ExportNamedDeclaration(path31) {
+      const decl = path31.node.declaration;
       if (decl && decl.type === "FunctionDeclaration" && decl.id) {
         componentName = decl.id.name;
-        path29.stop();
+        path31.stop();
       }
     },
-    ExportDefaultDeclaration(path29) {
-      const decl = path29.node.declaration;
+    ExportDefaultDeclaration(path31) {
+      const decl = path31.node.declaration;
       if (decl && decl.type === "FunctionDeclaration" && decl.id) {
         componentName = decl.id.name;
-        path29.stop();
+        path31.stop();
       }
     }
   });
@@ -22501,7 +22503,7 @@ function addImportSafely2(content, importStatement) {
 async function generateLayout() {
   const layoutPath = await findLayoutFile();
   if (!layoutPath) {
-    throw new Error("Could not find layout.tsx file");
+    throw new Error("Could not find a root layout (app/layout.tsx, .jsx, .ts or .js)");
   }
   const content = await fs3.readFile(layoutPath, "utf-8");
   if (content.includes("SiteKitLayout") || content.includes("SiteKitProvider")) {
@@ -22535,27 +22537,12 @@ async function generateLayout() {
   await fs3.writeFile(layoutPath, newContent, "utf-8");
 }
 async function findLayoutFile() {
-  const possiblePaths = [
-    "src/app/layout.tsx",
-    "app/layout.tsx",
-    "src/app/layout.jsx",
-    "app/layout.jsx"
-  ];
-  for (const relativePath of possiblePaths) {
-    const fullPath = path12.join(process.cwd(), relativePath);
-    try {
-      await fs3.access(fullPath);
-      return fullPath;
-    } catch {
-      continue;
-    }
-  }
-  return null;
+  return findRootLayout(process.cwd());
 }
 var isDockerCached;
 function hasDockerEnv() {
   try {
-    fs__default.statSync("/.dockerenv");
+    fs20__default.statSync("/.dockerenv");
     return true;
   } catch {
     return false;
@@ -22563,7 +22550,7 @@ function hasDockerEnv() {
 }
 function hasDockerCGroup() {
   try {
-    return fs__default.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
+    return fs20__default.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
   } catch {
     return false;
   }
@@ -22579,7 +22566,7 @@ function isDocker() {
 var cachedResult;
 var hasContainerEnv = () => {
   try {
-    fs__default.statSync("/run/.containerenv");
+    fs20__default.statSync("/run/.containerenv");
     return true;
   } catch {
     return false;
@@ -22604,12 +22591,12 @@ var isWsl = () => {
     return true;
   }
   try {
-    if (fs__default.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft")) {
+    if (fs20__default.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft")) {
       return !isInsideContainer();
     }
   } catch {
   }
-  if (fs__default.existsSync("/proc/sys/fs/binfmt_misc/WSLInterop") || fs__default.existsSync("/run/WSL")) {
+  if (fs20__default.existsSync("/proc/sys/fs/binfmt_misc/WSLInterop") || fs20__default.existsSync("/run/WSL")) {
     return !isInsideContainer();
   }
   return false;
@@ -22712,15 +22699,15 @@ var wslDefaultBrowser = async () => {
   const { stdout } = await executePowerShell(command, { powerShellPath: psPath });
   return stdout.trim();
 };
-var convertWslPathToWindows = async (path29) => {
-  if (/^[a-z]+:\/\//i.test(path29)) {
-    return path29;
+var convertWslPathToWindows = async (path31) => {
+  if (/^[a-z]+:\/\//i.test(path31)) {
+    return path31;
   }
   try {
-    const { stdout } = await execFile2("wslpath", ["-aw", path29], { encoding: "utf8" });
+    const { stdout } = await execFile2("wslpath", ["-aw", path31], { encoding: "utf8" });
     return stdout.trim();
   } catch {
-    return path29;
+    return path31;
   }
 };
 
@@ -25208,8 +25195,8 @@ async function templateCommand(sourcePath, options) {
     const slots = [];
     const componentNames = [];
     traverse(ast, {
-      JSXElement(path29) {
-        const openingElement = path29.node.openingElement;
+      JSXElement(path31) {
+        const openingElement = path31.node.openingElement;
         if (isJSXIdentifier(openingElement.name)) {
           const componentName = openingElement.name.name;
           if (componentName[0] === componentName[0].toUpperCase()) {
@@ -26333,11 +26320,230 @@ async function uploadSchemas(pages, globalSchema, config2) {
     }
   }
 }
-var APP_DIRS = ["app", path12.join("src", "app")];
-var CARD_FILE = /^(opengraph-image|twitter-image)\b.*\.(png|jpe?g|gif|webp)$/i;
+var SOURCE_EXTENSIONS = [".ts", ".tsx", ".mts", ".cts", ".js", ".jsx", ".mjs", ".cjs"];
+function stripComments(source) {
+  return source.replace(
+    /("(?:\\.|[^"\\\n])*"|'(?:\\.|[^'\\\n])*'|`(?:\\.|[^`\\])*`)|\/\*[\s\S]*?\*\/|\/\/[^\n]*/g,
+    (match, literal) => literal ?? (match.startsWith("/*") ? match.replace(/[^\n]/g, "") : "")
+  );
+}
+function readText(file) {
+  try {
+    return fs20__default.readFileSync(file, "utf-8");
+  } catch {
+    return null;
+  }
+}
+function isFile(p) {
+  try {
+    return fs20__default.statSync(p).isFile();
+  } catch {
+    return false;
+  }
+}
+function realpath(p) {
+  try {
+    return fs20__default.realpathSync(p);
+  } catch {
+    return null;
+  }
+}
+function resolveFile(base) {
+  if (isFile(base) && SOURCE_EXTENSIONS.includes(path12.extname(base))) return base;
+  const stem = base.replace(/\.(m|c)?js$/, "");
+  for (const ext2 of SOURCE_EXTENSIONS) {
+    if (isFile(stem + ext2)) return stem + ext2;
+  }
+  for (const ext2 of SOURCE_EXTENSIONS) {
+    const index = path12.join(base, `index${ext2}`);
+    if (isFile(index)) return index;
+  }
+  return null;
+}
+function importSpecifiers(source) {
+  const found = /* @__PURE__ */ new Set();
+  const patterns = [
+    /\b(?:import|export)\s+(?:type\s+)?[^'"`;]*?\bfrom\s*['"]([^'"]+)['"]/g,
+    /\bimport\s*['"]([^'"]+)['"]/g,
+    /\bimport\s*\(\s*['"]([^'"]+)['"]\s*\)/g,
+    /\brequire\s*\(\s*['"]([^'"]+)['"]\s*\)/g
+  ];
+  for (const re2 of patterns) {
+    for (const m of source.matchAll(re2)) found.add(m[1]);
+  }
+  return [...found];
+}
+function readLooseJson(file) {
+  const text = readText(file);
+  if (!text) return null;
+  try {
+    return JSON.parse(text);
+  } catch {
+    try {
+      const stripped = text.replace(/("(?:\\.|[^"\\])*")|\/\*[\s\S]*?\*\/|\/\/[^\n]*/g, (_m4, str) => str ?? "").replace(/,(\s*[}\]])/g, "$1");
+      return JSON.parse(stripped);
+    } catch {
+      return null;
+    }
+  }
+}
+function loadScope(root) {
+  const tsconfig = readLooseJson(path12.join(root, "tsconfig.json")) ?? readLooseJson(path12.join(root, "jsconfig.json"));
+  const options = tsconfig?.compilerOptions ?? {};
+  const baseUrl = path12.resolve(root, options.baseUrl ?? ".");
+  const aliases = [];
+  for (const [key, value] of Object.entries(options.paths ?? {})) {
+    const star = key.indexOf("*");
+    aliases.push({
+      prefix: star === -1 ? key : key.slice(0, star),
+      suffix: star === -1 ? "" : key.slice(star + 1),
+      exact: star === -1,
+      targets: (Array.isArray(value) ? value : [value]).map((t) => path12.resolve(baseUrl, t))
+    });
+  }
+  return { root, aliases };
+}
+function packageRoot(dir) {
+  let current = dir;
+  for (; ; ) {
+    if (["package.json", "tsconfig.json", "jsconfig.json"].some((f) => isFile(path12.join(current, f)))) return current;
+    const parent = path12.dirname(current);
+    if (parent === current) return dir;
+    current = parent;
+  }
+}
+function pickExportTarget(value) {
+  if (typeof value === "string") return value;
+  if (Array.isArray(value)) {
+    for (const v2 of value) {
+      const t = pickExportTarget(v2);
+      if (t) return t;
+    }
+    return null;
+  }
+  if (value && typeof value === "object") {
+    const conditions = value;
+    for (const key of ["source", "import", "default", "require", "node", "types"]) {
+      if (key in conditions) {
+        const t = pickExportTarget(conditions[key]);
+        if (t) return t;
+      }
+    }
+  }
+  return null;
+}
+function resolvePackageSubpath(pkgRoot, subpath) {
+  const pkg = readLooseJson(path12.join(pkgRoot, "package.json")) ?? {};
+  const exportsField = pkg.exports;
+  if (exportsField !== void 0) {
+    const map = typeof exportsField === "string" || Array.isArray(exportsField) || !Object.keys(exportsField).some((k2) => k2.startsWith(".")) ? { ".": exportsField } : exportsField;
+    if (subpath in map) {
+      const target = pickExportTarget(map[subpath]);
+      if (target) return resolveFile(path12.resolve(pkgRoot, target));
+    }
+    for (const [key, value] of Object.entries(map)) {
+      const star = key.indexOf("*");
+      if (star === -1) continue;
+      const prefix = key.slice(0, star);
+      const suffix = key.slice(star + 1);
+      if (subpath.startsWith(prefix) && subpath.endsWith(suffix) && subpath.length >= prefix.length + suffix.length) {
+        const matched = subpath.slice(prefix.length, subpath.length - suffix.length);
+        const target = pickExportTarget(value);
+        if (target) return resolveFile(path12.resolve(pkgRoot, target.replace("*", matched)));
+      }
+    }
+  }
+  if (subpath === ".") {
+    const main = pkg.source ?? pkg.module ?? pkg.main;
+    if (typeof main === "string") {
+      const hit = resolveFile(path12.resolve(pkgRoot, main));
+      if (hit) return hit;
+    }
+    return resolveFile(path12.join(pkgRoot, "index"));
+  }
+  return resolveFile(path12.resolve(pkgRoot, subpath));
+}
+function workspacePackage(fromDir, name) {
+  let current = fromDir;
+  for (; ; ) {
+    const candidate = path12.join(current, "node_modules", name);
+    if (fs20__default.existsSync(candidate)) {
+      const real = realpath(candidate);
+      if (!real || real.split(path12.sep).includes("node_modules")) return null;
+      return real;
+    }
+    const parent = path12.dirname(current);
+    if (parent === current) return null;
+    current = parent;
+  }
+}
+function splitBare(specifier) {
+  const parts = specifier.split("/");
+  const nameParts = specifier.startsWith("@") ? parts.slice(0, 2) : parts.slice(0, 1);
+  const rest = parts.slice(nameParts.length);
+  return { name: nameParts.join("/"), subpath: rest.length ? `./${rest.join("/")}` : "." };
+}
+function readSourceGraph(entries, options = {}) {
+  const { maxDepth = 4, maxFiles = 300 } = options;
+  const scopes = /* @__PURE__ */ new Map();
+  const scopeFor = (file) => {
+    const root = packageRoot(path12.dirname(file));
+    let scope = scopes.get(root);
+    if (!scope) {
+      scope = loadScope(root);
+      scopes.set(root, scope);
+    }
+    return scope;
+  };
+  const resolve = (specifier, fromFile) => {
+    const fromDir = path12.dirname(fromFile);
+    if (specifier.startsWith(".")) return resolveFile(path12.resolve(fromDir, specifier));
+    if (specifier.startsWith("/") || /^[a-z]+:/i.test(specifier)) return null;
+    const scope = scopeFor(fromFile);
+    for (const alias of scope.aliases) {
+      const hit = alias.exact ? specifier === alias.prefix : specifier.startsWith(alias.prefix) && specifier.endsWith(alias.suffix);
+      if (!hit) continue;
+      const matched = alias.exact ? "" : specifier.slice(alias.prefix.length, specifier.length - alias.suffix.length);
+      for (const target of alias.targets) {
+        const hit2 = resolveFile(target.replace("*", matched));
+        if (hit2) return hit2;
+      }
+    }
+    const { name, subpath } = splitBare(specifier);
+    const pkg = workspacePackage(fromDir, name);
+    return pkg ? resolvePackageSubpath(pkg, subpath) : null;
+  };
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  let frontier = entries.map((e) => path12.resolve(e));
+  for (let depth = 0; depth <= maxDepth && frontier.length && out.length < maxFiles; depth++) {
+    const next = [];
+    for (const file of frontier) {
+      if (seen.has(file) || out.length >= maxFiles) continue;
+      seen.add(file);
+      const raw = readText(file);
+      if (raw === null) continue;
+      const source = stripComments(raw);
+      out.push({ file, source });
+      if (depth === maxDepth) continue;
+      for (const specifier of importSpecifiers(source)) {
+        const hit = resolve(specifier, file);
+        if (hit && !seen.has(hit)) next.push(hit);
+      }
+    }
+    frontier = next;
+  }
+  return out;
+}
+function readWithImports(cwd, rel, options) {
+  return readSourceGraph([path12.join(cwd, rel)], options).map((f) => f.source).join("\n");
+}
+
+// src/og/wiring.ts
+var CARD_FILE = /^(opengraph-image|twitter-image)\b.*\.(png|jpe?g|gif|webp|tsx|ts|jsx|js)$/i;
 function safeExists(p) {
   try {
-    return fs__default.existsSync(p);
+    return fs20__default.existsSync(p);
   } catch {
     return false;
   }
@@ -26347,7 +26553,7 @@ function findPageCards(cwd) {
   const walk = (dir) => {
     let entries;
     try {
-      entries = fs__default.readdirSync(dir, { withFileTypes: true });
+      entries = fs20__default.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -26358,34 +26564,97 @@ function findPageCards(cwd) {
       else if (CARD_FILE.test(entry.name)) found.push(full);
     }
   };
-  for (const rel of APP_DIRS) walk(path12.join(cwd, rel));
+  for (const rel of NEXT_APP_DIRS) walk(path12.join(cwd, rel));
   return found;
 }
-function readOgWiring(cwd) {
+function findPageFiles(cwd) {
+  const found = [];
+  const pageFile = new RegExp(`^page\\.(${NEXT_SOURCE_EXTENSIONS.join("|")})$`);
+  const walk = (dir) => {
+    let entries;
+    try {
+      entries = fs20__default.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      if (entry.name.startsWith(".") || entry.name === "node_modules") continue;
+      const full = path12.join(dir, entry.name);
+      if (entry.isDirectory()) walk(full);
+      else if (pageFile.test(entry.name)) found.push(full);
+    }
+  };
+  for (const rel of NEXT_APP_DIRS) walk(path12.join(cwd, rel));
+  return found;
+}
+function routeOf(cwd, dir) {
+  const appRoot = NEXT_APP_DIRS.map((rel2) => path12.join(cwd, rel2)).find((root) => dir === root || dir.startsWith(root + path12.sep));
+  const rel = appRoot ? path12.relative(appRoot, dir) : dir;
+  const segments = rel.split(path12.sep).filter((s) => s && !(s.startsWith("(") && s.endsWith(")"))).map((s) => s.startsWith("[") && s.endsWith("]") ? "*" : s);
+  return `/${segments.join("/")}`;
+}
+function readCodeCards(cwd, pageCards) {
+  const code = pageCards.filter((f) => /^opengraph-image\.(tsx|ts|jsx|js)$/.test(path12.basename(f)));
+  return code.map((file) => {
+    const dir = path12.dirname(file);
+    const page = findConventionFile(dir, "page");
+    const source = page ? readSourceGraph([page], { maxDepth: 2, maxFiles: 40 }).map((f) => f.source).join("\n") : "";
+    const pageOwn = page ? readSourceGraph([page], { maxDepth: 0 })[0]?.source ?? "" : "";
+    return {
+      file: path12.relative(cwd, file),
+      route: routeOf(cwd, dir),
+      declaresUrl: /\bcodeCardImage\s*\(/.test(source),
+      // A page that deletes the key itself (the pre-`images: false` workaround)
+      // is fine too.
+      blogDeclaresImages: /\bgenerateBlogPostMetadata\s*\(/.test(pageOwn) && !/\bimages\s*:\s*false\b/.test(pageOwn) && !/\bdelete\s+[\w.]+\.images\b/.test(pageOwn)
+    };
+  });
+}
+function readTrailingSlash(cwd) {
+  const rel = findNextConfig(cwd);
+  if (!rel) return false;
+  try {
+    return /\btrailingSlash\s*:\s*true\b/.test(fs20__default.readFileSync(path12.join(cwd, rel), "utf-8"));
+  } catch {
+    return false;
+  }
+}
+function readOgWiring(cwd, known = {}) {
   const siteCard = ["public/og.png", "public/og.jpg", "public/opengraph.png"].some(
     (rel) => safeExists(path12.join(cwd, rel))
   );
-  const layoutPath = ["app/layout.tsx", "src/app/layout.tsx"].map((rel) => path12.join(cwd, rel)).find(safeExists);
+  const layoutPath = findRootLayout(cwd);
   let layout = "";
   if (layoutPath) {
     try {
-      layout = fs__default.readFileSync(layoutPath, "utf-8");
+      layout = fs20__default.readFileSync(layoutPath, "utf-8");
     } catch {
     }
   }
+  const pageCards = findPageCards(cwd);
+  const entries = [...layoutPath ? [layoutPath] : [], ...findPageFiles(cwd)];
+  const largeCard = /summary_large_image/.test(layout) || pageCards.some((f) => /^twitter-image\b/.test(path12.basename(f))) || readSourceGraph(entries, { maxDepth: 3, maxFiles: 400 }).some((f) => /summary_large_image/.test(f.source));
   return {
     siteCard,
-    pageCards: findPageCards(cwd),
+    pageCards,
     layoutDeclaresImages: /images:\s*\[/.test(layout),
-    largeCard: /summary_large_image/.test(layout),
+    largeCard,
     referencesImage: /og\.png|opengraph-image|og:image|images:\s*\[/.test(layout),
-    layoutFound: !!layoutPath
+    layoutFound: !!layoutPath,
+    trailingSlash: readTrailingSlash(cwd),
+    codeCards: readCodeCards(cwd, pageCards),
+    ...known.managedOgImages && { managedOgImages: known.managedOgImages }
   };
 }
 function judgeOgWiring(facts) {
   const problems = [];
   if (!facts.layoutFound) {
-    return [{ message: "no app/layout.tsx found to verify metadata", fix: "Run this from the site root." }];
+    return [
+      {
+        message: "no root layout (app/layout.{tsx,ts,jsx,js} or src/app/layout.*) found to verify metadata",
+        fix: "Run this from the site root."
+      }
+    ];
   }
   if (!facts.siteCard && !facts.pageCards.length) {
     return [
@@ -26402,10 +26671,13 @@ function judgeOgWiring(facts) {
         fix: "Remove the images arrays from the root layout metadata and let Next serve each route its own opengraph-image file."
       });
     }
-    problems.push({
-      message: "seo_pages.managed_og_image (if set in Sonor) overrides per-page cards the same way",
-      fix: "Clear managed_og_image for this project so each page serves its own card."
-    });
+    const managed = facts.managedOgImages ?? [];
+    if (managed.length) {
+      problems.push({
+        message: `seo_pages.managed_og_image is set for ${managed.length} page${managed.length === 1 ? "" : "s"} (${managed.slice(0, 5).join(", ")}${managed.length > 5 ? ", \u2026" : ""}), which overrides ${managed.length === 1 ? "its" : "their"} own card`,
+        fix: "Clear managed_og_image on those pages in Sonor so each serves its own card."
+      });
+    }
   } else if (!facts.referencesImage) {
     problems.push({
       message: "card asset exists but layout metadata never references it",
@@ -26418,10 +26690,24 @@ function judgeOgWiring(facts) {
       fix: "Set twitter: { card: 'summary_large_image' } in the root layout metadata."
     });
   }
+  for (const card of facts.codeCards ?? []) {
+    if (card.blogDeclaresImages) {
+      problems.push({
+        message: `${card.route} has its own card (${card.file}), but its page's generateBlogPostMetadata declares the featured image, which beats the card`,
+        fix: "Pass images: false to generateBlogPostMetadata in that page."
+      });
+    }
+    if (facts.trailingSlash && !card.declaresUrl) {
+      problems.push({
+        message: `${card.route}'s card (${card.file}) is served at \u2026/opengraph-image with no extension, which trailingSlash: true 308-redirects`,
+        fix: "Declare the slashed URL from the page's metadata: openGraph.images = [codeCardImage(path)] from @sonordev/site-kit/og. Or, for cards that can be rendered ahead of time, key them in og.config.ts `cards` by URL and use paramCardImage."
+      });
+    }
+  }
   return problems;
 }
-function checkOgWiring(cwd) {
-  return judgeOgWiring(readOgWiring(cwd));
+function checkOgWiring(cwd, known = {}) {
+  return judgeOgWiring(readOgWiring(cwd, known));
 }
 
 // src/cli/agent/ssr-bailout.ts
@@ -26440,26 +26726,6 @@ async function readFileOrNull(p) {
     return null;
   }
 }
-async function findFirst(cwd, candidates) {
-  for (const rel of candidates) {
-    const full = path12.join(cwd, rel);
-    if (await readFileOrNull(full)) return full;
-  }
-  return null;
-}
-var LAYOUT_CANDIDATES = [
-  "app/layout.tsx",
-  "app/layout.jsx",
-  "src/app/layout.tsx",
-  "src/app/layout.jsx"
-];
-var SITEMAP_CANDIDATES = [
-  "app/sitemap.ts",
-  "app/sitemap.tsx",
-  "app/sitemap.js",
-  "src/app/sitemap.ts",
-  "src/app/sitemap.tsx"
-];
 function checkApiKeyEnv() {
   const key = process.env.SONOR_API_KEY;
   if (key && key.startsWith("sonor_")) {
@@ -26546,7 +26812,7 @@ async function checkPackageInstalled(cwd) {
   };
 }
 async function checkSiteKitLayout(cwd) {
-  const layoutPath = await findFirst(cwd, LAYOUT_CANDIDATES);
+  const layoutPath = findRootLayout(cwd);
   if (!layoutPath) {
     return {
       id: "layout.sitekit",
@@ -26590,8 +26856,8 @@ async function checkSiteKitLayout(cwd) {
   };
 }
 async function checkSitemap(cwd) {
-  const sitemapPath = await findFirst(cwd, SITEMAP_CANDIDATES);
-  if (!sitemapPath) {
+  const sitemapRel = findSitemapRoute(cwd);
+  if (!sitemapRel) {
     return {
       id: "sitemap.managed",
       title: "Sitemap",
@@ -26601,7 +26867,7 @@ async function checkSitemap(cwd) {
       fixCommand: "npx sonor-setup scaffold --yes"
     };
   }
-  const content = await readFileOrNull(sitemapPath) || "";
+  const content = await readFileOrNull(path12.join(cwd, sitemapRel)) || "";
   if (content.includes("createSitemap") || content.includes("@sonordev/site-kit")) {
     return { id: "sitemap.managed", title: "Sitemap", level: "ok", message: "Using Site-Kit sitemap" };
   }
@@ -26648,6 +26914,90 @@ async function checkPostbuildSitemap(cwd) {
     fix: 'Add "postbuild": "sonor-register-sitemap --auto-discover || true" to package.json scripts.'
   };
 }
+var TRAILING_SLASH_ON = /\btrailingSlash\s*:\s*true\b/;
+async function readBuiltSitemaps(cwd) {
+  const appDir = path12.join(cwd, ".next", "server", "app");
+  const single = await readFileOrNull(path12.join(appDir, "sitemap.xml.body"));
+  if (single !== null) return [single];
+  let shards;
+  try {
+    shards = (await fs3.readdir(path12.join(appDir, "sitemap"))).filter((f) => f.endsWith(".xml.body"));
+  } catch {
+    return null;
+  }
+  if (shards.length === 0) return null;
+  const bodies = await Promise.all(shards.map((f) => readFileOrNull(path12.join(appDir, "sitemap", f))));
+  return bodies.filter((b) => b !== null);
+}
+function locPath(loc) {
+  try {
+    return new URL(loc).pathname;
+  } catch {
+    return loc;
+  }
+}
+async function checkSitemapTrailingSlash(cwd) {
+  const id = "sitemap.trailing-slash";
+  const title = "Sitemap trailing slash";
+  const configRel = findNextConfig(cwd);
+  const config2 = configRel ? await readFileOrNull(path12.join(cwd, configRel)) || "" : "";
+  if (!TRAILING_SLASH_ON.test(config2)) {
+    return { id, title, level: "ok", message: "next.config leaves trailingSlash off" };
+  }
+  const sitemapRel = findSitemapRoute(cwd);
+  const source = sitemapRel ? await readFileOrNull(path12.join(cwd, sitemapRel)) || "" : "";
+  const forcesOff = /\btrailingSlash\s*:\s*false\b/.test(source);
+  const removeForcedOff = `Remove trailingSlash: false from ${sitemapRel}. createSitemap follows next.config.`;
+  const built = await readBuiltSitemaps(cwd);
+  if (built) {
+    const locs = built.flatMap((xml) => [...xml.matchAll(/<loc>\s*([^<\s]+)\s*<\/loc>/g)].map((m) => m[1]));
+    const unslashed = locs.filter((loc) => {
+      const p = locPath(loc);
+      return applyTrailingSlash(p, true) !== p;
+    });
+    if (unslashed.length === 0) {
+      return { id, title, level: "ok", message: `All ${locs.length} URLs in the built sitemap match trailingSlash: true` };
+    }
+    const fix = forcesOff ? removeForcedOff : source.includes("createSitemap") ? "Upgrade @sonordev/site-kit: createSitemap now follows next.config trailingSlash. If it's already current, something loads the kit outside Next's bundler (serverExternalPackages), so pass createSitemap({ trailingSlash: true })." : `End every <loc> except / and files like /llms.txt in "/", or switch ${sitemapRel ?? "the sitemap route"} to createSitemap.`;
+    return {
+      id,
+      title,
+      level: "warn",
+      message: `${unslashed.length} of ${locs.length} built sitemap URLs lack the trailing slash ${configRel} requires`,
+      detail: `Each one 308-redirects. ${unslashed.slice(0, 5).join(", ")}`,
+      fix: `${fix} Then rebuild.`
+    };
+  }
+  if (!sitemapRel) {
+    return { id, title, level: "skip", message: "No sitemap route to check" };
+  }
+  if (forcesOff) {
+    return {
+      id,
+      title,
+      level: "warn",
+      message: `${sitemapRel} passes trailingSlash: false but ${configRel} sets trailingSlash: true`,
+      detail: "Every sitemap URL except / will 308-redirect.",
+      fix: removeForcedOff
+    };
+  }
+  if (source.includes("createSitemap")) {
+    return {
+      id,
+      title,
+      level: "ok",
+      message: "createSitemap follows next.config trailingSlash",
+      detail: "No build to confirm against. Run `next build`, then doctor again to check the emitted URLs."
+    };
+  }
+  return {
+    id,
+    title,
+    level: "skip",
+    message: "Custom sitemap and no build to check",
+    fix: 'Run `next build`, then doctor again. Every <loc> except / and files like /llms.txt must end in "/".'
+  };
+}
 async function checkApiReachable(timeoutMs = 5e3) {
   const key = process.env.SONOR_API_KEY;
   try {
@@ -26979,8 +27329,7 @@ async function checkSsrRenderFromBuild(cwd) {
 }
 async function checkNetlifyMiddleware(cwd) {
   const runtimeRe = /runtime\s*[:=]\s*['"](nodejs|edge)['"]/;
-  const proxyFiles = ["proxy.ts", "proxy.js", "src/proxy.ts", "src/proxy.js"];
-  for (const rel of proxyFiles) {
+  for (const rel of NEXT_PROXY_FILES) {
     const content = await readFileOrNull(path12.join(cwd, rel));
     if (content === null) continue;
     if (runtimeRe.test(content)) {
@@ -26996,8 +27345,7 @@ async function checkNetlifyMiddleware(cwd) {
     }
     return { id: "middleware.netlify", title: "Proxy / middleware", level: "ok", message: `${rel} present` };
   }
-  const middlewareFiles = ["middleware.ts", "middleware.js", "src/middleware.ts", "src/middleware.js"];
-  for (const rel of middlewareFiles) {
+  for (const rel of NEXT_MIDDLEWARE_FILES) {
     const content = await readFileOrNull(path12.join(cwd, rel));
     if (content === null) continue;
     if (/runtime\s*[:=]\s*['"]nodejs['"]/.test(content)) {
@@ -27093,8 +27441,8 @@ async function checkImageDimsDrift(cwd) {
   }
   return { id: "images.dims-drift", title: "Image dims vs SVG", level: "ok", message: "Declared dims match SVG viewBoxes" };
 }
-async function checkOgCard(cwd) {
-  const problems = judgeOgWiring(readOgWiring(cwd));
+async function checkOgCard(cwd, known = {}) {
+  const problems = judgeOgWiring(readOgWiring(cwd, known));
   if (!problems.length) {
     return { id: "og.card", title: "Open Graph card", level: "ok", message: "Cards present and wired" };
   }
@@ -27115,12 +27463,59 @@ async function staticChecks(cwd) {
     await checkSiteKitLayout(cwd),
     await checkSitemap(cwd),
     await checkPostbuildSitemap(cwd),
+    await checkSitemapTrailingSlash(cwd),
     await checkNetlifyMiddleware(cwd),
     await checkImageDimsDrift(cwd),
     await checkOgCard(cwd)
   ];
 }
 
+// src/og/route-copy.ts
+var RENDER_CONCURRENCY = 4;
+async function pooled(items, limit, fn) {
+  const results = new Array(items.length);
+  let cursor = 0;
+  const workers = Array.from({ length: Math.min(limit, items.length) }, async () => {
+    while (cursor < items.length) {
+      const i = cursor++;
+      results[i] = await fn(items[i], i);
+    }
+  });
+  await Promise.all(workers);
+  return results;
+}
+async function resolveRouteCopy(paths) {
+  let getSEOPageData = null;
+  try {
+    if (process.env.SONOR_API_KEY) {
+      ;
+      ({ getSEOPageData } = await import('../api-D745LGGU.mjs'));
+    }
+  } catch {
+    getSEOPageData = null;
+  }
+  if (!getSEOPageData) return paths.map((p) => ({ path: p }));
+  return pooled(paths, RENDER_CONCURRENCY, async (p) => {
+    try {
+      const page = await getSEOPageData("", p);
+      const title = page?.managed_title ?? page?.managed_og_title;
+      const description = page?.managed_meta_description ?? page?.managed_og_description;
+      const managedOgImage = page?.managed_og_image || void 0;
+      return { path: p, title: title || void 0, description: description || void 0, managedOgImage };
+    } catch {
+      return { path: p };
+    }
+  });
+}
+async function readManagedOgImages(cwd) {
+  if (!process.env.SONOR_API_KEY) return void 0;
+  const appDir = findAppDirForDiscovery(cwd);
+  if (!appDir) return void 0;
+  const routes = [...new Set(discoverNextJsRoutes(appDir).map((r) => r.path))];
+  const copy = await resolveRouteCopy(routes);
+  return copy.filter((r) => r.managedOgImage).map((r) => r.path);
+}
+
 // src/cli/commands/doctor.ts
 function countLevels(checks) {
   return {
@@ -27133,6 +27528,11 @@ function countLevels(checks) {
 async function collectChecks(cwd, online) {
   const checks = await staticChecks(cwd);
   if (online) {
+    const managedOgImages = await readManagedOgImages(cwd).catch(() => void 0);
+    if (managedOgImages) {
+      const i = checks.findIndex((c) => c.id === "og.card");
+      if (i !== -1) checks[i] = await checkOgCard(cwd, { managedOgImages });
+    }
     checks.push(await checkApiReachable(), await checkKeyValid(), await checkLlmsTxt());
     checks.push(...await checkClientAuth());
   }
@@ -27189,87 +27589,7 @@ async function statusCommand(options) {
   const online = options.offline ? false : true;
   await runCommand(ctx, (c) => run2(c, online), renderChecksHuman("Site-Kit Integration Status"));
 }
-
-// src/og/pages.ts
-var DYNAMIC = "*";
-function pathSegments(path29) {
-  return path29.split("/").filter(Boolean);
-}
-function stripBrandSuffix(title, brand) {
-  const cleaned = title.replace(/\s*[|–—-]\s*[^|–—-]+$/, "").trim();
-  if (!cleaned) return title.trim();
-  if (brand && cleaned.toLowerCase() === brand.toLowerCase()) return title.trim();
-  return cleaned;
-}
-function titleFromPath(path29) {
-  const last = pathSegments(path29).filter((s) => s !== DYNAMIC).pop();
-  if (!last) return "Home";
-  return last.replace(/[-_]+/g, " ").replace(/\b\w/g, (c) => c.toUpperCase()).trim();
-}
-function kickerFromPath(path29, fallback) {
-  const parts = pathSegments(path29);
-  const section = parts.includes(DYNAMIC) ? parts.filter((s) => s !== DYNAMIC) : parts.slice(0, -1);
-  if (!section.length) return fallback;
-  return section.join(" / ").replace(/[-_]+/g, " ");
-}
-function clampSubtitle(text, max = 100) {
-  if (!text) return void 0;
-  const flat = text.replace(/\s+/g, " ").trim();
-  if (!flat) return void 0;
-  if (flat.length <= max) return flat;
-  const sentence = flat.slice(0, max + 1).match(/^.*[.!?](?=\s|$)/)?.[0];
-  if (sentence && sentence.length >= 30) return sentence.trim();
-  return void 0;
-}
-function kickerIsRedundant(kicker, title) {
-  if (!kicker) return false;
-  const norm = (s) => s.toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
-  const k2 = norm(kicker);
-  const t = norm(title);
-  if (!k2) return true;
-  if (t.includes(k2) || k2.includes(t)) return true;
-  const titleWords = new Set(t.split(" "));
-  return k2.split(" ").every((w) => titleWords.has(w));
-}
-function slugForPath(path29) {
-  const segments = pathSegments(path29);
-  if (!segments.length) return "home";
-  return segments.map((s) => s === DYNAMIC ? "any" : s).join("-").replace(/[^a-zA-Z0-9]+/g, "-").replace(/^-+|-+$/g, "").toLowerCase();
-}
-function unmatchedCardKeys(cards, paths) {
-  if (!cards) return [];
-  const known = new Set(paths.flatMap((p) => [p, slugForPath(p)]));
-  return Object.keys(cards).filter((key) => !known.has(key));
-}
-function pageCardConfig(base, route, brand) {
-  const override = base.cards?.[route.path] ?? base.cards?.[slugForPath(route.path)];
-  const isHome = route.path === "/";
-  const derived = isHome ? { ...base, cards: void 0 } : (() => {
-    const title = route.title ? stripBrandSuffix(route.title, brand) : titleFromPath(route.path);
-    const kicker = kickerFromPath(route.path, base.content.kicker);
-    return {
-      ...base,
-      // `cards` is a build-time instruction, not part of a rendered card.
-      cards: void 0,
-      content: {
-        ...base.content,
-        kicker: kickerIsRedundant(kicker, title) ? void 0 : kicker,
-        title,
-        subtitle: clampSubtitle(route.description) ?? base.content.subtitle
-      }
-    };
-  })();
-  if (!override) return derived;
-  return {
-    ...derived,
-    ...override,
-    content: { ...derived.content, ...override.content }
-  };
-}
-
-// src/cli/commands/og.ts
 var execFileAsync5 = promisify(execFile$1);
-var RENDER_CONCURRENCY = 4;
 var CARD_KEY_FIX = "Key `cards` by route path (`/services/garage`) or slug (`services-garage`). A dynamic route is one `*` per dynamic level \u2014 `/services/*` for `[slug]`, plus a star for each nested `[param]`.";
 var CHROME_CANDIDATES = [
   process.env.SONOR_CHROME_PATH,
@@ -27393,6 +27713,9 @@ async function compressCard(pngPath, cwd) {
     return pngPath;
   }
 }
+function codeOgImageFile(dir) {
+  return findConventionFile(dir, "opengraph-image") ?? findConventionFile(path12.join(dir, "opengraph-image"), "route");
+}
 function discoverDynamicSegments(appDir) {
   const found = [];
   const walk = (dir, urlSegments, pattern) => {
@@ -27406,10 +27729,11 @@ function discoverDynamicSegments(appDir) {
       const nextUrl = isGroup || isDynamic ? urlSegments : [...urlSegments, entry.name];
       const nextPattern = isGroup ? pattern : [...pattern, isDynamic ? DYNAMIC : entry.name];
       if (isDynamic) {
-        const hasPage = ["tsx", "jsx", "ts", "js"].some((ext2) => existsSync(path12.join(full, `page.${ext2}`)));
-        if (hasPage) {
+        if (hasPageFile(full)) {
           found.push({ dir: full, path: `/${nextPattern.join("/")}`, parent: `/${urlSegments.join("/")}` });
         }
+      } else if (!isGroup && nextPattern.includes(DYNAMIC) && hasPageFile(full)) {
+        found.push({ dir: full, path: `/${nextPattern.join("/")}`, parent: null });
       }
       walk(full, nextUrl, nextPattern);
     }
@@ -27417,40 +27741,6 @@ function discoverDynamicSegments(appDir) {
   walk(appDir, [], []);
   return found;
 }
-async function pooled(items, limit, fn) {
-  const results = new Array(items.length);
-  let cursor = 0;
-  const workers = Array.from({ length: Math.min(limit, items.length) }, async () => {
-    while (cursor < items.length) {
-      const i = cursor++;
-      results[i] = await fn(items[i], i);
-    }
-  });
-  await Promise.all(workers);
-  return results;
-}
-async function resolveRouteCopy(paths) {
-  let getSEOPageData = null;
-  try {
-    if (process.env.SONOR_API_KEY) {
-      ;
-      ({ getSEOPageData } = await import('../api-D745LGGU.mjs'));
-    }
-  } catch {
-    getSEOPageData = null;
-  }
-  if (!getSEOPageData) return paths.map((p) => ({ path: p }));
-  return pooled(paths, RENDER_CONCURRENCY, async (p) => {
-    try {
-      const page = await getSEOPageData("", p);
-      const title = page?.managed_title ?? page?.managed_og_title;
-      const description = page?.managed_meta_description ?? page?.managed_og_description;
-      return { path: p, title: title || void 0, description: description || void 0 };
-    } catch {
-      return { path: p };
-    }
-  });
-}
 function reportCard(label, report) {
   if (report.fits && !report.issues.length) {
     const shrunk = report.titlePx < TITLE_MAX_PX ? source_default.gray(` (title fitted to ${report.titlePx}px)`) : "";
@@ -27495,6 +27785,7 @@ async function runOg(options) {
   let cardKeyFix = null;
   let pageCardsWritten = 0;
   let totalCardBytes = 0;
+  let managedOgImages;
   const spinner = ora("Rendering the site card...").start();
   try {
     const report = await renderCard(config2, outPath, cwd, chrome, "site");
@@ -27526,6 +27817,9 @@ async function runOg(options) {
         const withCopy = await resolveRouteCopy(routes);
         const named = withCopy.filter((r) => r.title).length;
         copySpinner.stop();
+        if (process.env.SONOR_API_KEY) {
+          managedOgImages = withCopy.filter((r) => r.managedOgImage).map((r) => r.path);
+        }
         if (named) {
           console.log(source_default.gray(`    ${named}/${routes.length} titled from Sonor, the rest from the route path`));
         } else {
@@ -27534,11 +27828,13 @@ async function runOg(options) {
         const brand = config2.content.title.replace(/\n/g, " ").trim();
         const copyByPath = new Map(withCopy.map((r) => [r.path, r]));
         const dynamic = discoverDynamicSegments(appDir).map((seg) => ({
-          ...copyByPath.get(seg.parent) ?? {},
+          ...seg.parent !== null && copyByPath.get(seg.parent) || {},
           path: seg.path,
           dir: seg.dir
         }));
         const targets = [...withCopy, ...dynamic];
+        const paramKeys = paramCardKeys(config2.cards, targets.map((t) => t.path));
+        const paramRoutes = paramKeys.length ? await resolveRouteCopy(paramKeys.map((k2) => k2.path)) : [];
         const strayKeys = unmatchedCardKeys(config2.cards, targets.map((t) => t.path));
         if (strayKeys.length) {
           const patterns = targets.filter((t) => t.path.includes(DYNAMIC)).map((t) => t.path);
@@ -27560,9 +27856,19 @@ async function runOg(options) {
           });
           cardKeyFix = CARD_KEY_FIX;
         }
-        const reports = await pooled(targets, RENDER_CONCURRENCY, async (route, i) => {
+        const placed = targets.map((route) => ({ ...route, dir: route.dir ?? routeOutputDir(appDir, route.path) }));
+        const toRender = placed.filter((route) => !codeOgImageFile(route.dir));
+        for (const route of placed.filter((r) => codeOgImageFile(r.dir))) {
+          for (const ext2 of ["png", "jpg", "jpeg"]) {
+            await fs3.rm(path12.join(route.dir, `opengraph-image.${ext2}`), { force: true });
+          }
+          const file = path12.relative(cwd, codeOgImageFile(route.dir));
+          console.log(source_default.gray(`    \u21B7 ${route.path}  keeps its own ${file}`));
+          checks.push({ id: "og.code-card", title: route.path, level: "ok", message: `Code-based card kept: ${file}` });
+        }
+        const reports = await pooled(toRender, RENDER_CONCURRENCY, async (route, i) => {
           const pageConfig = pageCardConfig(config2, route, brand);
-          const dir = route.dir ?? routeOutputDir(appDir, route.path);
+          const dir = route.dir;
           for (const ext2 of ["png", "jpg", "jpeg"]) {
             await fs3.rm(path12.join(dir, `opengraph-image.${ext2}`), { force: true });
           }
@@ -27575,10 +27881,36 @@ async function runOg(options) {
           clean = reportCard(`${route.path}  ${source_default.gray(path12.relative(cwd, file))}`, report) && clean;
           checks.push(cardCheck(route.path, path12.relative(cwd, file), report));
         }
-        pageCardsWritten = reports.length;
-        const bytes = await totalBytes(reports.map((r) => r.file));
+        const paramDir = path12.join(cwd, "public", PARAM_CARD_DIR);
+        await fs3.rm(paramDir, { recursive: true, force: true });
+        let paramReports = [];
+        if (paramRoutes.length) {
+          console.log("");
+          console.log(source_default.bold("  Per-URL cards") + source_default.gray(`  public/${PARAM_CARD_DIR}/, declare with paramCardImage()`));
+          paramReports = await pooled(paramRoutes, RENDER_CONCURRENCY, async (route, i) => {
+            const pageConfig = pageCardConfig(config2, route, brand);
+            const jpg = path12.join(cwd, "public", paramCardUrl(route.path));
+            const png = jpg.replace(/\.jpg$/, ".png");
+            const report = await renderCard(pageConfig, png, cwd, chrome, `param-${i}`);
+            const file = await compressCard(png, cwd);
+            if (file !== jpg) {
+              report.fits = false;
+              report.issues = [...report.issues, "sharp is needed to write per-URL cards as .jpg. Add it: pnpm add -D sharp"];
+            }
+            return { route, file, report };
+          });
+          for (const { route, file, report } of paramReports) {
+            clean = reportCard(`${route.path}  ${source_default.gray(path12.relative(cwd, file))}`, report) && clean;
+            checks.push(cardCheck(route.path, path12.relative(cwd, file), report));
+          }
+        }
+        pageCardsWritten = reports.length + paramReports.length;
+        const bytes = await totalBytes([...reports, ...paramReports].map((r) => r.file));
         totalCardBytes = bytes;
-        console.log(source_default.gray(`    ${(bytes / 1024 / 1024).toFixed(1)} MB of cards. Next serves these automatically \u2014 no per-page metadata needed.`));
+        console.log(source_default.gray(`    ${(bytes / 1024 / 1024).toFixed(1)} MB of cards. Next serves the route cards automatically \u2014 no per-page metadata needed.`));
+        if (paramReports.length) {
+          console.log(source_default.gray("    Per-URL cards need the page to declare them: openGraph.images = [paramCardImage(path, { config })]."));
+        }
       }
     }
   }
@@ -27595,7 +27927,7 @@ async function runOg(options) {
       console.log(source_default.gray("  (sharp not resolvable \u2014 skipped the 300px preview)"));
     }
   }
-  const problems = checkOgWiring(cwd);
+  const problems = checkOgWiring(cwd, { managedOgImages });
   console.log("");
   if (problems.length) {
     console.log(source_default.yellow("  Metadata wiring:"));
@@ -27797,14 +28129,14 @@ var hs = new RegExp(pe, "g");
 var as = /\\\\/g;
 var ls = /\\{/g;
 var cs = /\\}/g;
-var fs22 = /\\,/g;
+var fs23 = /\\,/g;
 var us = /\\./g;
 var ds = 1e5;
 function Ht(n5) {
   return isNaN(n5) ? n5.charCodeAt(0) : parseInt(n5, 10);
 }
 function ps(n5) {
-  return n5.replace(as, fe).replace(ls, ue).replace(cs, qt).replace(fs22, de).replace(us, pe);
+  return n5.replace(as, fe).replace(ls, ue).replace(cs, qt).replace(fs23, de).replace(us, pe);
 }
 function ms(n5) {
   return n5.replace(is, "\\").replace(rs, "{").replace(ns, "}").replace(os5, ",").replace(hs, ".");
@@ -29425,8 +29757,8 @@ var V = class extends EventEmitter {
   }
 };
 var vi = realpathSync.native;
-var wt = { lstatSync: lstatSync, readdir: readdir$1, readdirSync: readdirSync, readlinkSync: readlinkSync, realpathSync: vi, promises: { lstat: lstat, readdir: readdir, readlink: readlink, realpath: realpath } };
-var Ue = (n5) => !n5 || n5 === wt || n5 === fs ? wt : { ...wt, ...n5, promises: { ...wt.promises, ...n5.promises || {} } };
+var wt = { lstatSync: lstatSync, readdir: readdir$1, readdirSync: readdirSync, readlinkSync: readlinkSync, realpathSync: vi, promises: { lstat: lstat, readdir: readdir, readlink: readlink, realpath: realpath$1 } };
+var Ue = (n5) => !n5 || n5 === wt || n5 === fs20 ? wt : { ...wt, ...n5, promises: { ...wt.promises, ...n5.promises || {} } };
 var $e = /^\\\\\?\\([a-z]:)\\?$/i;
 var Ri = (n5) => n5.replace(/\//g, "\\").replace($e, "$1\\");
 var Oi = /[\\\/]/;
@@ -31155,7 +31487,7 @@ function findManifestPath() {
   let dir = baseDir;
   for (let i = 0; i < 8; i++) {
     const candidate = path12.join(dir, "agent-manifest.json");
-    if (fs__default.existsSync(candidate)) return candidate;
+    if (fs20__default.existsSync(candidate)) return candidate;
     const parent = path12.dirname(dir);
     if (parent === dir) break;
     dir = parent;
@@ -31171,7 +31503,7 @@ async function run5(ctx, options) {
       "Reinstall @sonordev/site-kit, or run `npm run build` if working from source."
     );
   }
-  const manifest = JSON.parse(fs__default.readFileSync(manifestPath, "utf-8"));
+  const manifest = JSON.parse(fs20__default.readFileSync(manifestPath, "utf-8"));
   if (options.section) {
     const section = options.section;
     if (!(section in manifest)) {
@@ -31235,7 +31567,7 @@ async function syncCommand2(options) {
 }
 async function syncPagesToPortal(apiUrl, apiKey, dryRun) {
   const spinner = ora("Discovering pages...").start();
-  const appDir = findAppDir();
+  const appDir = findAppDirForDiscovery();
   if (!appDir) {
     spinner.fail("Could not find app directory");
     return;
@@ -31296,18 +31628,6 @@ async function syncPagesToPortal(apiUrl, apiKey, dryRun) {
     syncSpinner.fail(`Sync failed: ${error2.message}`);
   }
 }
-function findAppDir() {
-  const candidates = [
-    path12.join(process.cwd(), "app"),
-    path12.join(process.cwd(), "src", "app")
-  ];
-  for (const candidate of candidates) {
-    if (existsSync(candidate)) {
-      return candidate;
-    }
-  }
-  return null;
-}
 function discoverPages(appDir, currentPath = "", pages = []) {
   const fullPath = path12.join(appDir, currentPath);
   if (!existsSync(fullPath)) {
@@ -31607,7 +31927,7 @@ async function discoverSchemaUsage(appDir) {
   return usages;
 }
 async function syncSchemasToPortal(apiUrl, apiKey, dryRun) {
-  const appDir = findAppDir();
+  const appDir = findAppDirForDiscovery();
   if (!appDir) {
     console.log(source_default.gray("  No app directory found"));
     return;
@@ -31650,7 +31970,7 @@ async function apiRoutesCommand(options) {
   console.log("");
   console.log(source_default.bold("  Site-Kit API Routes"));
   console.log("");
-  const appDir = findAppDir2();
+  const appDir = findAppDirForDiscovery();
   if (!appDir) {
     console.log(source_default.red("  \u2717 Could not find app directory"));
     console.log(source_default.gray("    Make sure you are in a Next.js project with an app directory"));
@@ -31693,18 +32013,6 @@ async function apiRoutesCommand(options) {
     spinner.fail(`Failed to create API routes: ${error2.message}`);
   }
 }
-function findAppDir2() {
-  const candidates = [
-    path12.join(process.cwd(), "app"),
-    path12.join(process.cwd(), "src", "app")
-  ];
-  for (const candidate of candidates) {
-    if (existsSync(candidate)) {
-      return candidate;
-    }
-  }
-  return null;
-}
 function generateRouteHandler() {
   return `/**
  * Sonor API Proxy
@@ -31919,7 +32227,7 @@ async function scaffoldCommand(options) {
   );
   console.log("");
   const cwd = process.cwd();
-  const appDir = await findAppDir3();
+  const appDir = findAppDirForDiscovery(cwd);
   if (!appDir) {
     console.log(source_default.red("  \u2717 No app directory found (app/ or src/app/)"));
     process.exit(1);
@@ -31932,8 +32240,8 @@ async function scaffoldCommand(options) {
 
 export default createSitemap({
   // baseUrl auto-resolved from Portal via API key
-  includeLlmsTxtInSitemap: true,
-  includeLlmsFullTxtInSitemap: true,
+  // llms.txt stays out of the sitemap on purpose: it's a plain-text duplicate
+  // of these pages, and AI crawlers find it at /llms.txt anyway.
   // optimizedLLMsTxt: true, // optional: static build writes optimized llms (CI)
   // llmsPublicSummaryOnly: true, // optional: page list from Portal public summaries only
   // additionalPaths: async () => [...],
@@ -31969,13 +32277,13 @@ export const GET = createLLMsFullTxtHandler({ preferStatic: true })
     files.push(
       {
         path: path12.join(cwd, "proxy.ts"),
-        label: "Proxy (security headers; redirects resolve at the 404 boundary)",
+        label: "Proxy (security headers, managed redirects)",
         content: `import { createProxy } from '@sonordev/site-kit/proxy'
 
-// redirects: false \u2014 managed redirects resolve in app/not-found.tsx via
-// resolveManagedRedirect() instead of on every request. The proxy still
-// stamps x-sk-path so the 404 boundary knows the requested URL.
-export default createProxy({ redirects: false })
+// Sonor-managed redirects apply here. The rule list is cached in memory for
+// five minutes, so page loads rarely wait on it. Don't move them into
+// app/not-found.tsx: reading request headers there makes every page dynamic.
+export default createProxy({ redirects: true })
 
 // Inlined on purpose: Next statically parses \`config.matcher\` at build time
 // and rejects an imported value (Turbopack build error). Keep in sync with
@@ -31997,18 +32305,11 @@ export const GET = createManifest()
       },
       {
         path: path12.join(appDir, "not-found.tsx"),
-        label: "404 Page (resolves managed redirects)",
-        content: `import { redirect, permanentRedirect } from 'next/navigation'
-import { resolveManagedRedirect } from '@sonordev/site-kit/redirects/not-found'
-
-export default async function NotFound() {
-  // Sonor-managed redirects resolve here, at the only place they can matter:
-  // a URL that would otherwise 404. Successful page loads pay nothing.
-  const managed = await resolveManagedRedirect()
-  if (managed) {
-    ;(managed.permanent ? permanentRedirect : redirect)(managed.destination)
-  }
-
+        label: "404 Page",
+        content: `// Keep this component free of request APIs (headers, cookies). Next
+// renders the root 404 inside every page, so one headers() call here makes
+// the whole site dynamic. Managed redirects run in proxy.ts instead.
+export default function NotFound() {
   return (
     <div style={{ textAlign: 'center', padding: '4rem 1rem' }}>
       <h1 style={{ fontSize: '3rem', fontWeight: 700, marginBottom: '0.5rem' }}>404</h1>
@@ -32128,9 +32429,9 @@ SONOR_API_KEY=sonor_your-project-uuid_your-secret-key
     console.log(source_default.yellow("  [DRY RUN] Would create:"));
     for (const f of files) {
       const rel = path12.relative(cwd, f.path);
-      const exists = existsSync(f.path);
+      const exists2 = existsSync(f.path);
       console.log(
-        source_default.gray(`    ${rel}`) + (exists ? source_default.yellow(" (exists, would skip)") : "")
+        source_default.gray(`    ${rel}`) + (exists2 ? source_default.yellow(" (exists, would skip)") : "")
       );
     }
     console.log("");
@@ -32194,17 +32495,217 @@ SONOR_API_KEY=sonor_your-project-uuid_your-secret-key
     console.log("");
   }
 }
-async function findAppDir3() {
-  const cwd = process.cwd();
-  const candidates = [
-    path12.join(cwd, "app"),
-    path12.join(cwd, "src", "app")
-  ];
-  for (const dir of candidates) {
-    if (existsSync(dir)) return dir;
+var LLMS_FILES = [
+  { path: "/llms.txt", handler: "createLLMsTxtHandler" },
+  { path: "/llms-full.txt", handler: "createLLMsFullTxtHandler" }
+];
+function read(cwd, rel) {
+  try {
+    return fs20__default.readFileSync(path12.join(cwd, rel), "utf-8");
+  } catch {
+    return "";
   }
+}
+function exists(cwd, rel) {
+  try {
+    return fs20__default.existsSync(path12.join(cwd, rel));
+  } catch {
+    return false;
+  }
+}
+function patternMatches(pattern, urlPath) {
+  const re2 = pattern.trim().split(/\(\.\*\)|:\w+\*|\*/).map((part) => part.replace(/[.+?^${}()|[\]\\]/g, "\\$&")).join(".*");
+  return new RegExp(`^${re2}$`).test(urlPath);
+}
+var NOINDEX = /noindex/i;
+function netlifyTomlNoindex(toml, urlPath) {
+  const blocks = [];
+  for (const line of toml.split("\n")) {
+    const header = line.match(/^\s*\[\[?\s*([^\]]+?)\s*\]\]?\s*$/);
+    if (header && header[1] !== "headers.values") blocks.push(line);
+    else if (blocks.length) blocks[blocks.length - 1] += `
+${line}`;
+  }
+  return blocks.some((block) => {
+    if (!/^\s*\[\[\s*headers\s*\]\]/.test(block)) return false;
+    const pattern = block.match(/^\s*for\s*=\s*["']([^"']+)["']/m)?.[1];
+    const value = block.match(/^\s*["']?X-Robots-Tag["']?\s*=\s*["']([^"']*)["']/im)?.[1];
+    return !!pattern && !!value && NOINDEX.test(value) && patternMatches(pattern, urlPath);
+  });
+}
+function headersFileNoindex(text, urlPath) {
+  let current = null;
+  for (const line of text.split("\n")) {
+    if (!line.trim() || line.trim().startsWith("#")) continue;
+    if (!/^\s/.test(line)) {
+      current = line.trim();
+      continue;
+    }
+    const m = line.match(/^\s+X-Robots-Tag\s*:\s*(.+)$/i);
+    if (current && m && NOINDEX.test(m[1]) && patternMatches(current, urlPath)) return true;
+  }
+  return false;
+}
+function vercelJsonNoindex(text, urlPath) {
+  try {
+    const json = JSON.parse(text);
+    return (json.headers ?? []).some(
+      (rule) => !!rule.source && patternMatches(rule.source, urlPath) && (rule.headers ?? []).some((h) => /^x-robots-tag$/i.test(h.key ?? "") && NOINDEX.test(h.value ?? ""))
+    );
+  } catch {
+    return false;
+  }
+}
+function findHostNoindex(cwd, urlPath) {
+  const toml = read(cwd, "netlify.toml");
+  if (toml && netlifyTomlNoindex(toml, urlPath)) return "netlify.toml";
+  const headers = read(cwd, "public/_headers");
+  if (headers && headersFileNoindex(headers, urlPath)) return "public/_headers";
+  const vercel = read(cwd, "vercel.json");
+  if (vercel && vercelJsonNoindex(vercel, urlPath)) return "vercel.json";
   return null;
 }
+function readGraph(cwd, rel) {
+  return exists(cwd, rel) ? readWithImports(cwd, rel, { maxDepth: 3, maxFiles: 60 }) : "";
+}
+var LINK_DISCOVERY_LINE = /^.*\bLink\b.*(llms[^\n]*describedby|describedby[^\n]*llms).*$/im;
+function findDiscoverySource(cwd) {
+  for (const rel of findProxyFiles(cwd)) {
+    const src = readGraph(cwd, rel);
+    const viaFactory = /\bcreate(Proxy|Middleware)\s*\(/.test(src) && /\bllmsDiscovery\b(?!\s*:\s*false\b)/.test(src);
+    if (viaFactory) return `${rel} (createProxy llmsDiscovery)`;
+    if (src.includes("buildAiDiscoveryHeaders")) return `${rel} (buildAiDiscoveryHeaders)`;
+  }
+  const nextConfig = findNextConfig(cwd);
+  if (nextConfig) {
+    const src = read(cwd, nextConfig);
+    if (/\bllmsTxtDiscoveryLink\s*:(?!\s*false\b)/.test(src)) return `${nextConfig} (llmsTxtDiscoveryLink)`;
+    if (src.includes("buildAiDiscoveryHeaders")) return `${nextConfig} (buildAiDiscoveryHeaders)`;
+  }
+  for (const rel of ["netlify.toml", "public/_headers"]) {
+    if (LINK_DISCOVERY_LINE.test(read(cwd, rel))) return rel;
+  }
+  return null;
+}
+function findLayoutHeadersAttempt(cwd) {
+  const layout = findRootLayout(cwd);
+  if (!layout) return null;
+  const src = read(cwd, path12.relative(cwd, layout));
+  return src.includes("buildAiDiscoveryHeaders") || /\bexport\s+(async\s+)?function\s+headers\b/.test(src) ? path12.relative(cwd, layout) : null;
+}
+function readGeoWiring(cwd) {
+  const appDir = NEXT_APP_DIRS.find((rel) => exists(cwd, rel)) ?? null;
+  const sitemap = findSitemapRoute(cwd);
+  const sitemapSrc = sitemap ? readGraph(cwd, sitemap) : "";
+  const sitemapListsLlms = /\bincludeLlms(Full)?TxtInSitemap\s*:\s*true\b/.test(sitemapSrc) || /['"`/]llms(-full)?\.txt['"`]/.test(sitemapSrc);
+  const sitemapWritesStatic = /\bcreateSitemap\s*\(/.test(sitemapSrc);
+  const writesLlms = sitemapWritesStatic && !/\boptimizedLLMsTxt\s*:\s*false\b/.test(sitemapSrc);
+  const writesLlmsFull = writesLlms && /\boptimizedLLMsFullTxt\s*:\s*true\b/.test(sitemapSrc);
+  const llms = LLMS_FILES.map(({ path: urlPath, handler }) => {
+    const file = urlPath.slice(1);
+    const routeAbs = appDir ? findConventionFile(path12.join(cwd, appDir, file), "route") : null;
+    const route = routeAbs ? path12.relative(cwd, routeAbs) : null;
+    const routeSrc = route ? readGraph(cwd, route) : "";
+    const publicFile = exists(cwd, path12.join("public", file));
+    const built = urlPath === "/llms.txt" ? writesLlms : writesLlmsFull;
+    return {
+      path: urlPath,
+      route,
+      routeUsesKitHandler: routeSrc.includes(handler),
+      routeOptsOutOfNoindex: /\bnoindex\s*:\s*false\b/.test(routeSrc),
+      routeSetsNoindex: /X-Robots-Tag/i.test(routeSrc) && NOINDEX.test(routeSrc),
+      servedStatic: publicFile || built,
+      staticReason: publicFile ? `public/${file}` : built ? `public/${file} (written by createSitemap at build)` : null,
+      hostNoindex: findHostNoindex(cwd, urlPath)
+    };
+  });
+  const discovery = findDiscoverySource(cwd);
+  return {
+    appDir,
+    llms,
+    sitemap,
+    sitemapListsLlms,
+    discovery,
+    layoutHeadersAttempt: discovery ? null : findLayoutHeadersAttempt(cwd)
+  };
+}
+var DISCOVERY_FIX = "Add llmsDiscovery to the proxy: createProxy({ llmsDiscovery: { siteUrl } }) in proxy.ts. Or withSiteKitConfig({ llmsTxtDiscoveryLink: true }) in next.config.";
+var SITEMAP_FIX = "Drop includeLlmsTxtInSitemap / includeLlmsFullTxtInSitemap (and any hand-added /llms*.txt entry) from the sitemap. A sitemap lists indexable HTML pages; AI crawlers find llms.txt at /llms.txt.";
+function hostNoindexFix(urlPath) {
+  return `The CDN serves it before any route handler runs, so set the header in host config. netlify.toml: [[headers]] for = "${urlPath}" [headers.values] X-Robots-Tag = "noindex"`;
+}
+function judgeGeoWiring(facts) {
+  const rows = [];
+  for (const f of facts.llms) {
+    const name = f.path.slice(1);
+    const id = f.path === "/llms.txt" ? "llms" : "llms-full";
+    const served = !!f.route || f.servedStatic;
+    rows.push(
+      served ? { id: `${id}.served`, label: `${name} served`, level: "ok", detail: f.route ?? f.staticReason ?? void 0 } : {
+        id: `${id}.served`,
+        label: `${name} served`,
+        level: "fail",
+        detail: `no ${facts.appDir ?? "app"}/${name}/route.* and no public/${name}`,
+        fix: "Run: sonor-setup geo --ensure-routes"
+      }
+    );
+  }
+  if (!facts.sitemap) {
+    rows.push({ id: "geo.sitemap", label: "sitemap leaves llms files out", level: "info", detail: "no sitemap route to check" });
+  } else if (facts.sitemapListsLlms) {
+    rows.push({
+      id: "geo.sitemap",
+      label: "sitemap leaves llms files out",
+      level: "warn",
+      detail: `${facts.sitemap} lists /llms.txt, inviting search engines to index a thin plain-text duplicate`,
+      fix: SITEMAP_FIX
+    });
+  } else {
+    rows.push({ id: "geo.sitemap", label: "sitemap leaves llms files out", level: "ok", detail: facts.sitemap });
+  }
+  rows.push(
+    facts.discovery ? { id: "geo.discovery", label: 'discovery header (Link rel="describedby")', level: "ok", detail: facts.discovery } : {
+      id: "geo.discovery",
+      label: 'discovery header (Link rel="describedby")',
+      level: "fail",
+      detail: facts.layoutHeadersAttempt ? `${facts.layoutHeadersAttempt} exports headers(), which is a next.config API: from a layout it's never called and sends nothing` : "not wired in proxy, next.config, or host config",
+      fix: DISCOVERY_FIX
+    }
+  );
+  for (const f of facts.llms) {
+    if (!f.route && !f.servedStatic) continue;
+    const name = f.path.slice(1);
+    const id = `${f.path === "/llms.txt" ? "llms" : "llms-full"}.noindex`;
+    const label = `${name} sends X-Robots-Tag: noindex`;
+    if (f.servedStatic) {
+      rows.push(
+        f.hostNoindex ? { id, label, level: "ok", detail: f.hostNoindex } : { id, label, level: "warn", detail: `${f.staticReason} is served without it`, fix: hostNoindexFix(f.path) }
+      );
+      continue;
+    }
+    if (f.hostNoindex) {
+      rows.push({ id, label, level: "ok", detail: f.hostNoindex });
+    } else if (f.routeUsesKitHandler && !f.routeOptsOutOfNoindex) {
+      rows.push({ id, label, level: "ok", detail: `${f.route} (site-kit handler default)` });
+    } else if (f.routeSetsNoindex) {
+      rows.push({ id, label, level: "ok", detail: f.route });
+    } else {
+      rows.push({
+        id,
+        label,
+        level: "warn",
+        detail: f.routeOptsOutOfNoindex ? `${f.route} passes noindex: false` : `${f.route} doesn't set it`,
+        fix: f.routeOptsOutOfNoindex ? "Drop noindex: false unless you want llms.txt in search results." : "Serve it with createLLMsTxtHandler (sends the header by default), or add X-Robots-Tag: noindex to the response."
+      });
+    }
+  }
+  return rows;
+}
+function checkGeoWiring(cwd) {
+  return judgeGeoWiring(readGeoWiring(cwd));
+}
+
+// src/cli/commands/geo.ts
 var LLMS_ROUTE = `import { createLLMsTxtHandler } from '@sonordev/site-kit/llms'
 
 export const GET = createLLMsTxtHandler({ preferStatic: true })
@@ -32213,40 +32714,36 @@ var LLMS_FULL_ROUTE = `import { createLLMsFullTxtHandler } from '@sonordev/site-
 
 export const GET = createLLMsFullTxtHandler({ preferStatic: true })
 `;
-async function readIfExists(p) {
-  if (!existsSync(p)) return "";
-  try {
-    return await fs3.readFile(p, "utf-8");
-  } catch {
-    return "";
-  }
-}
+var ICON = {
+  ok: source_default.green("  \u2713 "),
+  info: source_default.gray("  \xB7 "),
+  warn: source_default.yellow("  ! "),
+  fail: source_default.red("  \u2717 ")
+};
 async function ensureLlmsRouteFiles(appDir, dryRun) {
-  const llms = path12.join(appDir, "llms.txt", "route.ts");
-  const llmsFull = path12.join(appDir, "llms-full.txt", "route.ts");
   let n5 = 0;
   if (dryRun) return 0;
-  if (!existsSync(llms)) {
-    await fs3.mkdir(path12.dirname(llms), { recursive: true });
-    await fs3.writeFile(llms, LLMS_ROUTE, "utf-8");
-    n5++;
-  }
-  if (!existsSync(llmsFull)) {
-    await fs3.mkdir(path12.dirname(llmsFull), { recursive: true });
-    await fs3.writeFile(llmsFull, LLMS_FULL_ROUTE, "utf-8");
+  for (const [dir, source] of [
+    ["llms.txt", LLMS_ROUTE],
+    ["llms-full.txt", LLMS_FULL_ROUTE]
+  ]) {
+    if (findConventionFile(path12.join(appDir, dir), "route")) continue;
+    const file = path12.join(appDir, dir, "route.ts");
+    await fs3.mkdir(path12.dirname(file), { recursive: true });
+    await fs3.writeFile(file, source, "utf-8");
     n5++;
   }
   return n5;
 }
 async function geoCommand(options) {
   if (options.forInstall) {
-    const appDir2 = await findAppDir3();
+    const appDir2 = findAppDirForDiscovery();
     if (!appDir2) return;
     const created = await ensureLlmsRouteFiles(appDir2, options.dryRun);
     if (created > 0) {
       console.log(
         source_default.cyan(
-          `[@sonordev/site-kit] Created ${created} llms route file(s). Set NEXT_PUBLIC_SITE_URL, use createSitemap({ includeLlmsTxtInSitemap: true }), and withSiteKitConfig({ llmsTxtDiscoveryLink: true }) when ready.`
+          `[@sonordev/site-kit] Created ${created} llms route file(s). Set NEXT_PUBLIC_SITE_URL and add createProxy({ llmsDiscovery: { siteUrl } }) to proxy.ts when ready.`
         )
       );
     }
@@ -32261,59 +32758,20 @@ async function geoCommand(options) {
     )
   );
   console.log("");
-  const appDir = await findAppDir3();
+  const appDir = findAppDirForDiscovery();
   if (!appDir) {
     console.log(source_default.red("  \u2717 No app directory (app/ or src/app/)"));
     process.exit(1);
   }
-  const llms = path12.join(appDir, "llms.txt", "route.ts");
-  const llmsFull = path12.join(appDir, "llms-full.txt", "route.ts");
-  const sitemap = path12.join(appDir, "sitemap.ts");
   let allOk = true;
-  const row = (label, pass) => {
-    if (!pass) allOk = false;
-    console.log(
-      (pass ? source_default.green("  \u2713 ") : source_default.red("  \u2717 ")) + label
-    );
-  };
-  row("llms.txt route", existsSync(llms));
-  row("llms-full.txt route", existsSync(llmsFull));
-  let sitemapHasLlms = false;
-  if (existsSync(sitemap)) {
-    const txt = await readIfExists(sitemap);
-    sitemapHasLlms = txt.includes("includeLlmsTxtInSitemap") || txt.includes("includeLlmsFullTxtInSitemap");
-    row("sitemap.ts lists llms URLs", sitemapHasLlms);
-  } else {
-    row("sitemap.ts lists llms URLs", false);
-  }
-  const nextConfigs = [
-    path12.join(cwd, "next.config.ts"),
-    path12.join(cwd, "next.config.mjs"),
-    path12.join(cwd, "next.config.js")
-  ];
-  let nextCfg = "";
-  for (const p of nextConfigs) {
-    if (existsSync(p)) {
-      nextCfg = await readIfExists(p);
-      break;
+  for (const row of checkGeoWiring(cwd)) {
+    if (row.level === "fail") allOk = false;
+    const detail = row.detail ? source_default.gray(`  ${row.detail}`) : "";
+    console.log(`${ICON[row.level]}${row.label}${detail}`);
+    if (row.fix && (row.level === "fail" || row.level === "warn")) {
+      console.log(source_default.gray(`      ${row.fix}`));
     }
   }
-  const layoutCandidates = [
-    path12.join(appDir, "layout.tsx"),
-    path12.join(appDir, "layout.jsx"),
-    path12.join(appDir, "layout.js")
-  ];
-  let layoutTxt = "";
-  for (const p of layoutCandidates) {
-    layoutTxt = await readIfExists(p);
-    if (layoutTxt) break;
-  }
-  const hasLayoutDiscovery = layoutTxt.includes("buildAiDiscoveryHeaders") || layoutTxt.includes("llmsTxtDiscoveryLink");
-  const hasConfigDiscovery = nextCfg.includes("llmsTxtDiscoveryLink");
-  row(
-    "discovery header (next.config or root layout)",
-    hasConfigDiscovery || hasLayoutDiscovery
-  );
   const siteUrl = process.env.NEXT_PUBLIC_SITE_URL?.trim() || process.env.SITE_BASE_URL?.trim() || (process.env.VERCEL_URL?.trim() ? `https://${process.env.VERCEL_URL.replace(/\/$/, "")}` : "");
   if (siteUrl) {
     console.log(source_default.gray(`  Public origin (env): ${siteUrl}`));
@@ -32339,19 +32797,16 @@ async function geoCommand(options) {
   console.log(source_default.bold("  Automation"));
   console.log("");
   console.log(
-    source_default.gray(
-      "  \u2022 next.config: withSiteKitConfig({ llmsTxtDiscoveryLink: true })"
-    )
+    source_default.gray('  \u2022 proxy.ts: createProxy({ llmsDiscovery: { siteUrl } })  (Link rel="describedby")')
   );
   console.log(
-    source_default.gray(
-      "    (If you define your own headers() on nextConfig, merge Link manually.)"
-    )
+    source_default.gray("    or next.config: withSiteKitConfig({ llmsTxtDiscoveryLink: true })")
   );
   console.log(
-    source_default.gray(
-      "  \u2022 createSitemap({ includeLlmsTxtInSitemap: true, includeLlmsFullTxtInSitemap: true })"
-    )
+    source_default.gray("  \u2022 createLLMsTxtHandler sends X-Robots-Tag: noindex; a static public/llms.txt needs it in netlify.toml")
+  );
+  console.log(
+    source_default.gray("  \u2022 Keep llms.txt out of the sitemap: AI crawlers find it at /llms.txt")
   );
   console.log(
     source_default.gray("  \u2022 npx sonor-setup scaffold --minimal  (routes + sitemap template)")