saypsst 0.1.0 → 0.2.0

package/README.md

@@ -1,10 +1,10 @@
-# psst
+# PSST
 
-Install [psst](https://saypsst.com) on your site, and check it in production. psst publishes pages that make your brand show up in AI answers, on your own domain, under a path prefix it owns (default `/resources`), with no deploy after this one-time install.
+Install [PSST](https://saypsst.com) on your site, and check it in production. PSST publishes pages that make your brand show up in AI answers, on your own domain, under a path prefix it owns (default `/resources`), with no deploy after this one-time install.
 
 ## Quick start
 
-1. Copy your site id from the psst dashboard (Settings › Connections).
+1. Copy your site id from the PSST dashboard (Settings › Connections).
 2. In your site's folder: `npx saypsst init --site <site id>`. It checks before it writes, and prints any edit it will not make for you.
 3. Commit and deploy. Then check it in production: `npx saypsst doctor --wait`.
 
@@ -16,9 +16,9 @@ npx saypsst doctor --wait
 
 Briefs for Orchestrapay and Enrow (the exact prompt, the PR contents, host notes): `features/publish-integration-2026-10-28/install-briefs/`.
 
-Or paste this to your coding agent: *Run `npx saypsst init --site site_xxxxxxxxxxxxxxxx` and follow the psst skill.* `init` copies the skills into `.claude/skills/` and `.agents/skills/`: `psst` (the plumbing) and `psst-tasks` (below).
+Or paste this to your coding agent: *Run `npx saypsst init --site site_xxxxxxxxxxxxxxxx` and follow the PSST skill.* `init` copies the skills into `.claude/skills/` and `.agents/skills/`: `psst` (the plumbing) and `psst-tasks` (below).
 
-- **No secrets.** The site id is public. psst never asks for a key, token or deploy access.
+- **No secrets.** The site id is public. PSST never asks for a key, token or deploy access.
 - **Zero runtime dependencies, no install scripts.** One bundled file, Node 20 or later.
 - **Idempotent.** `init` marks with ✓ what is in place, does only what is missing, never overwrites a file you edited, and prints the exact edit for a file too unusual to change.
 
@@ -30,20 +30,20 @@ Or paste this to your coding agent: *Run `npx saypsst init --site site_xxxxxxxxx
 | Static site on Vercel | `vercel.json` without Next (or `--mode vercel_static`) | Rewrites `{prefix}/:path*` → `https://edge.saypsst.com/s/{site}{prefix}/:path*` (and claimed root paths) inserted first in `vercel.json`, every other byte kept; the sitemap line in `robots.txt`. |
 | Anything else | | Nothing but the skill; prints how to route the prefix (Cloudflare Worker, nginx, CloudFront, Next Pages Router rewrites). |
 
-All modes: the two skills, and with `--agents-md` a two-line note in `AGENTS.md`. Before writing anything, `init` checks the site id with psst, that the prefix is free in the repository and on the live site, and that the app is supported (App Router, Next ≥ 15, no Cache Components).
+All modes: the two skills, and with `--agents-md` a two-line note in `AGENTS.md`. Before writing anything, `init` checks the site id with PSST, that the prefix is free in the repository and on the live site, and that the app is supported (App Router, Next ≥ 15, no Cache Components).
 
 `init` options: `--site`, `--site-name` (Next.js: overrides the brand name for Open Graph and JSON-LD; defaults to the dashboard's, then `psst.config.ts`), `--prefix` / `--domain` (must equal the dashboard's; default to it), `--mode next|vercel_static|proxy`, `--agents-md`, `--no-install`, `--dry-run`, `--dir <path>`. For local testing: `--edge <origin>` (or `PSST_EDGE`; `http:` only on localhost), `--site-url <origin>` (the live site to check the prefix on, default `https://{domain}`), `--psst-next <spec>` (dependency spec for `@saypsst/next`, for example a tarball path).
 
-## Let your agent do your psst tasks
+## Let your agent do your PSST tasks
 
-Every psst brief says who does it once you approve it: **psst** (mentions, listings, community, pages on psst's own paths) or **your agent** (changes to your existing pages and stack). The `psst-tasks` skill is how your agent does its share.
+Every PSST brief says who does it once you approve it: **PSST** (mentions, listings, community, pages on PSST's own paths) or **your agent** (changes to your existing pages and stack). The `psst-tasks` skill is how your agent does its share.
 
-1. Approve briefs in the psst dashboard (Overview ✓). The ones marked *Done by <Brand>'s agent* are now your agent's.
-2. Connect the psst connector (`https://app.saypsst.com/api/mcp`) in Claude Code or Codex (setup: https://app.saypsst.com/connectors).
-3. Tell your agent: *Do my psst tasks. Don't stop until they're done.* It lists its approved briefs, makes each change in this repository, opens a pull request the way your repository works, and marks a brief done only once the change is live on production.
-4. Optional: a nightly run ("Anything to implement from psst?"). `skills/psst-tasks/routine.md` has the prompt.
+1. Approve briefs in the PSST dashboard (Overview ✓). The ones marked *Done by <Brand>'s agent* are now your agent's.
+2. Connect the PSST connector (`https://app.saypsst.com/api/mcp`) in Claude Code or Codex (setup: https://app.saypsst.com/connectors).
+3. Tell your agent: *Do my PSST tasks. Don't stop until they're done.* It lists its approved briefs, makes each change in this repository, opens a pull request the way your repository works, and marks a brief done only once the change is live on production.
+4. Optional: a nightly run ("Anything to implement from PSST?"). `skills/psst-tasks/routine.md` has the prompt.
 
-Your agent never approves or declines briefs, never acts off your site and never touches psst's own paths.
+Your agent never approves or declines briefs, never acts off your site and never touches PSST's own paths.
 
 ## `doctor`
 
@@ -55,4 +55,4 @@ The site's mode, prefix, claimed root paths, published pages with their 12-chara
 
 ## Output and exit codes
 
-`--json` prints one object per command; the JSON Schemas are in `schemas/` (`index.json` maps them). Exit codes: **0** done · **1** failed (message id `P01`…`P44`, explained in the skill's `troubleshooting.md`) · **2** usage · **3** waiting, run the same command again · **4** psst or the site unreachable from here.
+`--json` prints one object per command; the JSON Schemas are in `schemas/` (`index.json` maps them). Exit codes: **0** done · **1** failed (message id `P01`…`P44`, explained in the skill's `troubleshooting.md`) · **2** usage · **3** waiting, run the same command again · **4** PSST or the site unreachable from here.

package/dist/bin.mjs

@@ -12421,7 +12421,20 @@ var publicIdSchema = external_exports.string().regex(/^site_[a-z2-7]{16}$/);
 var sitePathSchema = external_exports.string().max(512).regex(SITE_PATH).refine((p) => !p.startsWith("//") && !p.includes(".."), "invalid path");
 var siteModeSchema = external_exports.enum(["next", "vercel_static", "proxy"]);
 var agentClassSchema = external_exports.enum(["training", "search", "user_fetch", "other"]);
-var referrerClassSchema = external_exports.enum(["chatgpt", "perplexity", "gemini", "copilot", "claude", "other", "none"]);
+var referrerClassSchema = external_exports.enum([
+  "chatgpt",
+  "perplexity",
+  "gemini",
+  "copilot",
+  "claude",
+  "grok",
+  "mistral",
+  "deepseek",
+  "meta",
+  "you",
+  "other",
+  "none"
+]);
 var hitSourceSchema = external_exports.enum(["edge", "proxy"]);
 var publishStateSchema = external_exports.enum(["published", "verified"]);
 var hashSchema = external_exports.string().regex(/^[0-9a-f]{64}$/);
@@ -12492,7 +12505,17 @@ var AI_AGENT_RULES = [
   { agent: "Meta-ExternalAgent", agentClass: "training", pattern: /meta-externalagent/i },
   { agent: "Bytespider", agentClass: "training", pattern: /bytespider/i },
   { agent: "CCBot", agentClass: "training", pattern: /ccbot/i },
-  { agent: "Amazonbot", agentClass: "training", pattern: /amazonbot/i }
+  { agent: "Amazonbot", agentClass: "training", pattern: /amazonbot/i },
+  { agent: "MistralAI-User", agentClass: "user_fetch", pattern: /mistralai-user/i },
+  { agent: "MistralAI-Index", agentClass: "search", pattern: /mistralai-index/i },
+  { agent: "DuckAssistBot", agentClass: "search", pattern: /duckassistbot/i },
+  { agent: "Google-Agent", agentClass: "user_fetch", pattern: /google-agent/i },
+  { agent: "Meta-ExternalFetcher", agentClass: "user_fetch", pattern: /meta-externalfetcher/i },
+  { agent: "meta-webindexer", agentClass: "search", pattern: /meta-webindexer/i },
+  { agent: "YouBot", agentClass: "search", pattern: /youbot/i },
+  { agent: "Amzn-SearchBot", agentClass: "search", pattern: /amzn-searchbot/i },
+  { agent: "Amzn-User", agentClass: "user_fetch", pattern: /amzn-user/i },
+  { agent: "Claude-Agent", agentClass: "user_fetch", pattern: /claude-agent/i }
 ];
 new Set(AI_AGENT_RULES.map((r) => r.agent));
 
@@ -12517,7 +12540,7 @@ var MESSAGES = {
   P05: { code: "site_unknown", exit: EXIT.failed },
   P06: { code: "edge_error", exit: EXIT.failed },
   P07: { code: "site_name_required", exit: EXIT.usage },
-  P08: { code: "cache_components", exit: EXIT.failed },
+  P08: { code: "cache_components", exit: null },
   P09: { code: "config_other_site", exit: EXIT.failed },
   P10: { code: "prefix_mismatch", exit: EXIT.usage },
   P11: { code: "domain_mismatch", exit: EXIT.usage },
@@ -12570,8 +12593,8 @@ var CliError = class extends Error {
 };
 
 // src/version.ts
-var CLI_VERSION = "0.1.0";
-var PSST_NEXT_VERSION = "0.2.0";
+var CLI_VERSION = "0.2.0";
+var PSST_NEXT_VERSION = "0.3.0";
 var JSON_CONTRACT = "1.0";
 var DEFAULT_EDGE = "https://edge.saypsst.com";
 var USER_AGENT = `psst-cli/${CLI_VERSION} (+https://saypsst.com)`;
@@ -12595,7 +12618,7 @@ function parseEdgeOrigin(value) {
 }
 function assertSiteId(value) {
   if (!publicIdSchema.safeParse(value).success) {
-    throw new CliError("P13", `"${value}" is not a psst site id: it looks like site_ followed by 16 letters and digits`);
+    throw new CliError("P13", `"${value}" is not a PSST site id: it looks like site_ followed by 16 letters and digits`);
   }
   return value;
 }
@@ -12618,25 +12641,25 @@ async function fetchManifest(edge, site) {
   } catch {
     throw new CliError(
       "P04",
-      `psst is unreachable from here (${edge}). Allow network access for this command, or ask the person to run it`
+      `PSST is unreachable from here (${edge}). Allow network access for this command, or ask the person to run it`
     );
   }
   if (res.status === 404) {
-    throw new CliError("P05", `psst knows no site ${site}. Copy the site id from the dashboard, Settings \u203A Connections`);
+    throw new CliError("P05", `PSST knows no site ${site}. Copy the site id from the dashboard, Settings \u203A Connections`);
   }
   if (res.status === 503 || res.status === 429) {
-    throw new CliError("P16", `psst answered ${res.status} (busy or down for a moment). Run the same command again in a few minutes`);
+    throw new CliError("P16", `PSST answered ${res.status} (busy or down for a moment). Run the same command again in a few minutes`);
   }
-  if (res.status !== 200) throw new CliError("P06", `psst answered ${res.status} for the site manifest`);
+  if (res.status !== 200) throw new CliError("P06", `PSST answered ${res.status} for the site manifest`);
   let raw;
   try {
     raw = JSON.parse(res.body);
   } catch {
-    throw new CliError("P06", "psst answered with something that is not JSON for the site manifest");
+    throw new CliError("P06", "PSST answered with something that is not JSON for the site manifest");
   }
   const parsed = manifestResponseSchema.safeParse(raw);
-  if (!parsed.success) throw new CliError("P06", "the site manifest does not match this CLI's contract: update psst (npx saypsst@latest)");
-  if (parsed.data.site.publicId !== site) throw new CliError("P06", "psst answered with another site's manifest");
+  if (!parsed.success) throw new CliError("P06", "the site manifest does not match this CLI's contract: update PSST (npx saypsst@latest)");
+  if (parsed.data.site.publicId !== site) throw new CliError("P06", "PSST answered with another site's manifest");
   return parsed.data;
 }
 async function fetchEdgeVerify(edge, site, prefix) {
@@ -12803,7 +12826,8 @@ function parsePsstConfig(file2, text) {
     siteName: stringValue(text, "siteName"),
     prefix: stringValue(text, "prefix"),
     rootPaths: roots?.[1] !== void 0 ? [...roots[1].matchAll(/["']([^"']+)["']/g)].map((m) => m[1] ?? "") : null,
-    edge: stringValue(text, "edge")
+    edge: stringValue(text, "edge"),
+    serveFromEdge: /\bserveFromEdge\s*:\s*true\b/.test(text)
   };
 }
 function findPsstConfig(dir) {
@@ -12911,7 +12935,7 @@ function resolveSite(dir, site, edge) {
   if (!id) {
     throw new CliError(
       "P42",
-      "no psst install here (no psst.config.ts, no psst rewrite in vercel.json): pass --site site_\u2026 or run in the site's folder"
+      "no PSST install here (no psst.config.ts, no PSST rewrite in vercel.json): pass --site site_\u2026 or run in the site's folder"
     );
   }
   return {
@@ -12936,7 +12960,7 @@ function notOk(name, url2, res) {
   if (res === null) return check2(name, "failed", `${url2} could not be reached`, "P40");
   if (res.status === 404) return check2(name, "waiting", `${url2} answers 404: deploy the install, then run doctor again`, "P30");
   if (res.status >= 300 && res.status < 400) {
-    return check2(name, "failed", `${url2} redirects (${res.status}) to ${res.headers.get("location") ?? "?"}: psst's paths must answer directly on the site's domain`, "P39");
+    return check2(name, "failed", `${url2} redirects (${res.status}) to ${res.headers.get("location") ?? "?"}: PSST's paths must answer directly on the site's domain`, "P39");
   }
   return check2(name, "failed", `${url2} answers ${res.status}`, "P44");
 }
@@ -12955,7 +12979,7 @@ async function checkStyle(base, prefix) {
   const res = await get(url2);
   if (!res || res.status !== 200) return notOk("style", url2, res);
   const type = res.headers.get("content-type") ?? "";
-  return type.startsWith("text/css") ? check2("style", "passed", "the psst stylesheet is served same-origin") : check2("style", "failed", `${url2} answers ${type || "no content type"}, not text/css`, "P44");
+  return type.startsWith("text/css") ? check2("style", "passed", "the PSST stylesheet is served same-origin") : check2("style", "failed", `${url2} answers ${type || "no content type"}, not text/css`, "P44");
 }
 async function checkSitemap(base, m, pages) {
   const url2 = `${base}${m.site.prefix}/sitemap.xml`;
@@ -12988,9 +13012,9 @@ async function checkPage(base, domain2, page) {
     }
     const html = res.body;
     const served = metaContent(html, "psst-version");
-    if (served === null) return check2(name, "failed", `${url2} has no psst-version meta (as ${probe.name}): it is not a psst page`, "P44");
+    if (served === null) return check2(name, "failed", `${url2} has no psst-version meta (as ${probe.name}): it is not a PSST page`, "P44");
     if (served !== version2) {
-      return check2(name, "waiting", `${url2} serves version ${served}, psst published ${version2} (as ${probe.name}); caches refresh within 10 minutes`, "P32");
+      return check2(name, "waiting", `${url2} serves version ${served}, PSST published ${version2} (as ${probe.name}); caches refresh within 10 minutes`, "P32");
     }
     const robotsMeta = (metaContent(html, "robots") ?? "").toLowerCase();
     const robotsHeader = (res.headers.get("x-robots-tag") ?? "").toLowerCase();
@@ -13008,7 +13032,7 @@ async function checkPage(base, domain2, page) {
     const text = articleText(html);
     if (browserText === null) browserText = text;
     else if (text !== browserText) {
-      return check2(name, "failed", `${url2} serves ${probe.name} other content than a browser: psst pages must be identical for people and crawlers`, "P35");
+      return check2(name, "failed", `${url2} serves ${probe.name} other content than a browser: PSST pages must be identical for people and crawlers`, "P35");
     }
   }
   return check2(name, "passed", `200, version ${version2}, canonical, indexable, full text without JavaScript, same for ${PROBES.map((p) => p.name).join(", ")}`);
@@ -13017,7 +13041,7 @@ async function checkRobots(base, prefix) {
   const url2 = `${base}/robots.txt`;
   const res = await get(url2);
   if (!res || res.status === 404 || res.status === 410) {
-    return [check2("robots", "information", res ? "no robots.txt: every crawler may fetch psst's pages" : `${url2} could not be reached`)];
+    return [check2("robots", "information", res ? "no robots.txt: every crawler may fetch PSST's pages" : `${url2} could not be reached`)];
   }
   if (res.status !== 200) return [check2("robots", "information", `${url2} answers ${res.status}`)];
   const robots = parseRobots(res.body);
@@ -13039,7 +13063,7 @@ async function checkRobots(base, prefix) {
   );
   const listed = robots.sitemaps.some((s) => s.endsWith(`${prefix}/sitemap.xml`));
   out.push(
-    check2("robots:sitemap", "information", listed ? "robots.txt lists the psst sitemap" : `robots.txt does not list ${prefix}/sitemap.xml (recommended)`, listed ? void 0 : "P21")
+    check2("robots:sitemap", "information", listed ? "robots.txt lists the PSST sitemap" : `robots.txt does not list ${prefix}/sitemap.xml (recommended)`, listed ? void 0 : "P21")
   );
   return out;
 }
@@ -13047,7 +13071,7 @@ async function doctorRound(base, edge, site) {
   const m = await fetchManifest(edge, site);
   const prefix = m.site.prefix;
   const pages = m.pages.filter((p) => p.kind !== "llms_txt").sort((a, b) => a.updatedAt < b.updatedAt ? 1 : -1).slice(0, MAX_PAGES);
-  const checks = [check2("manifest", "passed", `psst knows ${site} (${m.site.domain}, ${m.site.mode}, ${prefix})`)];
+  const checks = [check2("manifest", "passed", `PSST knows ${site} (${m.site.domain}, ${m.site.mode}, ${prefix})`)];
   const [verify, style, sitemap] = await Promise.all([checkVerify(base, edge, site, prefix), checkStyle(base, prefix), checkSitemap(base, m, pages)]);
   checks.push(verify, style, sitemap);
   if (m.site.claimedRootPaths.includes("/llms.txt")) checks.push(await checkLlms(base));
@@ -13218,8 +13242,8 @@ function installSkill(changes, repo) {
 var AGENTS_NOTE_MARKER = "<!-- psst -->";
 function agentsNote(prefix) {
   return `${AGENTS_NOTE_MARKER}
-psst serves AI-search pages on this site under \`${prefix}\` (\`psst.config.ts\`, \`app/(psst)/\` or the \`vercel.json\` rewrites); its content is never edited here.
-Before touching psst files or running \`npx saypsst\`, read \`.claude/skills/psst/SKILL.md\` (also in \`.agents/skills/psst/\`).
+PSST serves AI-search pages on this site under \`${prefix}\` (\`psst.config.ts\`, \`app/(psst)/\` or the \`vercel.json\` rewrites); its content is never edited here.
+Before touching PSST files or running \`npx saypsst\`, read \`.claude/skills/psst/SKILL.md\` (also in \`.agents/skills/psst/\`).
 `;
 }
 function agentsMdCandidates(repo, dir) {
@@ -13234,7 +13258,7 @@ function agentsMd(changes, repo, dir, prefix, requested) {
   const candidates = agentsMdCandidates(repo, dir);
   const noted = candidates.find((f) => readText(f)?.includes(AGENTS_NOTE_MARKER));
   if (noted) {
-    changes.unchanged(changes.rel(noted), "psst note");
+    changes.unchanged(changes.rel(noted), "PSST note");
     return;
   }
   const file2 = candidates.find((f) => readText(f) !== null) ?? join(repo, "AGENTS.md");
@@ -13242,14 +13266,14 @@ function agentsMd(changes, repo, dir, prefix, requested) {
   if (!requested) {
     changes.info(
       changes.rel(file2),
-      'Ask the person: "Add a two-line note to AGENTS.md so every coding agent knows psst is installed?" If yes, run npx saypsst init --agents-md',
-      message("P28", "AGENTS.md has no psst note")
+      'Ask the person: "Add a two-line note to AGENTS.md so every coding agent knows PSST is installed?" If yes, run npx saypsst init --agents-md',
+      message("P28", "AGENTS.md has no PSST note")
     );
     return;
   }
   const note = agentsNote(prefix);
-  if (current === null) changes.create(file2, note, "psst note");
-  else changes.replace(file2, `${current}${current.endsWith("\n") ? "\n" : "\n\n"}${note}`, "psst note appended");
+  if (current === null) changes.create(file2, note, "PSST note");
+  else changes.replace(file2, `${current}${current.endsWith("\n") ? "\n" : "\n\n"}${note}`, "PSST note appended");
 }
 function addDependency(changes, dir, name, spec) {
   const file2 = join(dir, "package.json");
@@ -13282,6 +13306,13 @@ function addDependency(changes, dir, name, spec) {
 }
 
 // src/edit/proxy.ts
+function edgeMatcherPaths(prefix, rootPaths) {
+  return [`${prefix}/:path*`, ...rootPaths];
+}
+function missingMatcherPaths(content, paths) {
+  if (!/\bmatcher\b/.test(content) || content.includes("(?!")) return [];
+  return paths.filter((p) => !content.includes(`"${p}"`) && !content.includes(`'${p}'`));
+}
 function hasPsstProxy(content) {
   return /\bwithPsst\s*\(/.test(content) && content.includes("@saypsst/next/proxy");
 }
@@ -13323,9 +13354,8 @@ import psst from "${configImport}";`;
       indentLines(`export const proxy = withPsst(psst, siteProxy);`, 3)
     );
   }
-  steps.push(
-    `${steps.filter((l) => /^\d\./.test(l)).length + 1}. Keep \`config.matcher\` a literal and make sure it also matches "${prefix}/:path*" (psst counts AI crawlers there).`
-  );
+  const matcher = input2.edgeRootPaths ? `${edgeMatcherPaths(prefix, input2.edgeRootPaths).map((p) => `"${p}"`).join(", ")} (PSST serves these paths from the proxy)` : `"${prefix}/:path*" (PSST counts AI crawlers there)`;
+  steps.push(`${steps.filter((l) => /^\d\./.test(l)).length + 1}. Keep \`config.matcher\` a literal and make sure it also matches ${matcher}.`);
   return steps.join("\n");
 }
 function indentLines(text, n) {
@@ -13340,12 +13370,13 @@ function psstConfigFile(v) {
     `import { definePsst } from "@saypsst/next";`,
     ``,
     `export default definePsst({`,
-    `  site: ${q(v.site)}, // public site id from the psst dashboard`,
+    `  site: ${q(v.site)}, // public site id from the PSST dashboard`,
     `  domain: ${q(v.domain)}, // production host, no scheme`,
     `  siteName: ${q(v.siteName)},`,
     `  prefix: ${q(v.prefix)},`,
     `  rootPaths: ${rootPaths}, // add "/about" and/or "/llms.txt" only when the dashboard claimed them`,
     ...v.edge ? [`  edge: ${q(v.edge)},`] : [],
+    ...v.serveFromEdge ? [`  serveFromEdge: true, // Cache Components: proxy.ts serves PSST pages from the edge`] : [],
     `});`,
     ``
   ];
@@ -13658,14 +13689,14 @@ async function runInit(opts) {
   const vercelInstall = findVercelInstall(opts.dir);
   const siteArg = opts.site ?? existing?.site ?? vercelInstall?.site;
   if (!siteArg) {
-    throw new CliError("P13", "init needs --site site_\u2026 (the site id from the psst dashboard, Settings \u203A Connections)");
+    throw new CliError("P13", "init needs --site site_\u2026 (the site id from the PSST dashboard, Settings \u203A Connections)");
   }
   const site = assertSiteId(siteArg);
   const project = detectProject(opts.dir, opts.mode);
   if (project.mode === "pages_router") {
     throw new CliError(
       "P01",
-      "this Next.js app has no App Router folder (app/ or src/app/). psst's Next.js routes need the App Router; serve psst through a proxy instead: see proxy.md in the psst skill, or run init --mode proxy"
+      "this Next.js app has no App Router folder (app/ or src/app/). PSST's Next.js routes need the App Router; serve PSST through a proxy instead: see proxy.md in the PSST skill, or run init --mode proxy"
     );
   }
   if (project.mode === "proxy" && project.candidates.length > 0) {
@@ -13678,19 +13709,19 @@ async function runInit(opts) {
   if (existing?.site && existing.site !== site) {
     throw new CliError(
       "P09",
-      `${existing.file.slice(opts.dir.length + 1)} is set up for ${existing.site}, not ${site}. psst never overwrites it: if this repository moves to the new site, change \`site\` there by hand, then run init again`
+      `${existing.file.slice(opts.dir.length + 1)} is set up for ${existing.site}, not ${site}. PSST never overwrites it: if this repository moves to the new site, change \`site\` there by hand, then run init again`
     );
   }
   const manifest = await fetchManifest(edge, site);
   const domain2 = manifest.site.domain;
   if (opts.domain && opts.domain !== domain2) {
-    throw new CliError("P11", `--domain ${opts.domain} differs from the site's domain in psst, ${domain2}. Change it in the dashboard, or drop --domain`);
+    throw new CliError("P11", `--domain ${opts.domain} differs from the site's domain in PSST, ${domain2}. Change it in the dashboard, or drop --domain`);
   }
   const prefix = manifest.site.prefix;
   if (opts.prefix && opts.prefix !== prefix) {
     throw new CliError(
       "P10",
-      `--prefix ${opts.prefix} differs from the site's prefix in psst, ${prefix}. Change the prefix in the dashboard (Settings \u203A Connections) first, then run init again`
+      `--prefix ${opts.prefix} differs from the site's prefix in PSST, ${prefix}. Change the prefix in the dashboard (Settings \u203A Connections) first, then run init again`
     );
   }
   const changes = new Changes(opts.dir, opts.dryRun, repoRoot(opts.dir));
@@ -13711,12 +13742,13 @@ async function runInit(opts) {
       );
     }
     if (project.nextMajor !== null && project.nextMajor < 15) {
-      throw new CliError("P14", `psst needs Next.js 15 or later (this app has ${project.nextMajor}). Upgrade Next, or use --mode proxy`);
+      throw new CliError("P14", `PSST needs Next.js 15 or later (this app has ${project.nextMajor}). Upgrade Next, or use --mode proxy`);
     }
     if (project.cacheComponents) {
-      throw new CliError(
-        "P08",
-        "this app turns on Cache Components (cacheComponents in next.config), which psst's route files do not support yet. Use --mode proxy, or turn it off"
+      changes.info(
+        "cacheComponents",
+        "this app turns on Cache Components, where PSST's route files do not build: proxy.ts serves PSST pages from the edge, with PSST's own header and footer",
+        message("P08", "Cache Components is on: PSST pages come from the edge, not this app's layout")
       );
     }
     const conflicts = appRoutesUnder(join(opts.dir, project.appDir), prefix);
@@ -13724,7 +13756,7 @@ async function runInit(opts) {
       throw new CliError("P03", `the app already has routes under ${prefix}: ${conflicts.map((c) => `${project.appDir}/${c}`).join(", ")}. Pick a free prefix in the dashboard, then run init again`);
     }
     await checkLive(changes, opts, site, domain2, prefix);
-    await setUpNext(changes, opts, project, manifest, { site, domain: domain2, siteName, prefix, edge }, existing, next);
+    await setUpNext(changes, opts, project, manifest, { site, domain: domain2, siteName, prefix, edge, serveFromEdge: project.cacheComponents }, existing, next);
   } else if (project.mode === "vercel_static") {
     const conflict = staticPrefixConflict(opts.dir, prefix, site);
     if (conflict) {
@@ -13739,7 +13771,7 @@ async function runInit(opts) {
       `nothing to write: route ${prefix}/* (and any claimed root path) on ${domain2} to ${edge}/s/${site}${prefix}/* at your host or CDN`
     );
     next.push(
-      `Route ${prefix}/* to ${edge}/s/${site}${prefix}/* in front of the site, as proxy.md in the psst skill shows (Cloudflare Worker, nginx, CloudFront)`
+      `Route ${prefix}/* to ${edge}/s/${site}${prefix}/* in front of the site, as proxy.md in the PSST skill shows (Cloudflare Worker, nginx, CloudFront)`
     );
     for (const p of manifest.site.claimedRootPaths) next.push(`Route ${p} to ${edge}/s/${site}${p}`);
     next.push(`Add "Sitemap: https://${domain2}${prefix}/sitemap.xml" to robots.txt`);
@@ -13765,7 +13797,7 @@ async function checkLive(changes, opts, site, domain2, prefix) {
   if (live.kind === "skipped") {
     changes.info(prefix, `live check skipped: ${live.reason}`, message("P29", "could not check that the prefix is free"));
   } else if (live.kind === "catch_all") {
-    changes.info(prefix, `the live site answers every path; psst's routes take precedence under ${prefix}`);
+    changes.info(prefix, `the live site answers every path; PSST's routes take precedence under ${prefix}`);
   }
 }
 async function setUpNext(changes, opts, project, manifest, v, existing, next) {
@@ -13782,7 +13814,7 @@ async function setUpNext(changes, opts, project, manifest, v, existing, next) {
     if (served) {
       changes.info(
         p,
-        `the site serves ${p} itself (${served}); psst leaves it alone. Ask psst to release the claim in the dashboard`,
+        `the site serves ${p} itself (${served}); PSST leaves it alone. Ask PSST to release the claim in the dashboard`,
         message("P25", `${p} is already served by the site`),
         "skipped"
       );
@@ -13794,7 +13826,8 @@ async function setUpNext(changes, opts, project, manifest, v, existing, next) {
     siteName: v.siteName,
     prefix: v.prefix,
     rootPaths,
-    ...v.edge !== DEFAULT_EDGE ? { edge: v.edge } : {}
+    ...v.edge !== DEFAULT_EDGE ? { edge: v.edge } : {},
+    ...v.serveFromEdge ? { serveFromEdge: true } : {}
   };
   writeConfig(changes, configFile, values, existing);
   const app = join(dir, project.appDir);
@@ -13802,10 +13835,10 @@ async function setUpNext(changes, opts, project, manifest, v, existing, next) {
   const file2 = (abs) => ({ abs, config: importPath(abs, configNoExt) });
   const routeFiles = [];
   const page = file2(join(group, "[...slug]", `page.${ts ? "tsx" : "js"}`));
-  routeFiles.push({ ...page, content: catchAllPageFile(page.config), module: "@saypsst/next/page", what: "psst pages" });
+  routeFiles.push({ ...page, content: catchAllPageFile(page.config), module: "@saypsst/next/page", what: "PSST pages" });
   const handlers = [
-    ["sitemap", ["sitemap.xml"], "psst sitemap"],
-    ["style", ["%5Fpsst", "style.css"], "psst stylesheet"],
+    ["sitemap", ["sitemap.xml"], "PSST sitemap"],
+    ["style", ["%5Fpsst", "style.css"], "PSST stylesheet"],
     ["verify", ["%5Fpsst", "verify"], "domain proof"]
   ];
   for (const [kind, segs, what] of handlers) {
@@ -13814,15 +13847,19 @@ async function setUpNext(changes, opts, project, manifest, v, existing, next) {
   }
   if (rootPaths.includes("/about")) {
     const f = file2(join(app, "about", `page.${ts ? "tsx" : "js"}`));
-    routeFiles.push({ ...f, content: aboutPageFile(f.config), module: "@saypsst/next/page", what: "/about (claimed by psst)" });
+    routeFiles.push({ ...f, content: aboutPageFile(f.config), module: "@saypsst/next/page", what: "/about (claimed by PSST)" });
   }
   if (rootPaths.includes("/llms.txt")) {
     const f = file2(join(app, "llms.txt", `route.${ext}`));
-    routeFiles.push({ ...f, content: handlerFile("llms", f.config), module: "@saypsst/next/llms", what: "/llms.txt (claimed by psst)" });
+    routeFiles.push({ ...f, content: handlerFile("llms", f.config), module: "@saypsst/next/llms", what: "/llms.txt (claimed by PSST)" });
   }
   for (const r of routeFiles) {
     const current = readText(r.abs);
-    if (current === null) changes.create(r.abs, r.content, r.what);
+    if (v.serveFromEdge) {
+      if (current !== null && isOurs(current, r.module)) {
+        changes.edit(changes.rel(r.abs), r.what, "Delete this file: it does not build with Cache Components, and proxy.ts serves this path now", message("P08", `${changes.rel(r.abs)} does not build with Cache Components`));
+      }
+    } else if (current === null) changes.create(r.abs, r.content, r.what);
     else if (current === r.content || isOurs(current, r.module)) changes.unchanged(changes.rel(r.abs), r.what);
     else {
       changes.edit(
@@ -13830,7 +13867,7 @@ async function setUpNext(changes, opts, project, manifest, v, existing, next) {
         r.what,
         `Replace the file with:
 ${indent(r.content.trimEnd())}`,
-        message("P24", `${changes.rel(r.abs)} is not psst's route file; init left it alone`)
+        message("P24", `${changes.rel(r.abs)} is not PSST's route file; init left it alone`)
       );
     }
   }
@@ -13839,15 +13876,23 @@ ${indent(r.content.trimEnd())}`,
   const existingProxy = firstExisting(base, proxyNames);
   if (existingProxy === null) {
     const abs = join(base, `${exportName}.${ext}`);
-    changes.create(abs, proxyFile(exportName, importPath(abs, configNoExt)), "AI crawler and referral hits, 410 for withdrawn pages");
+    changes.create(abs, proxyFile(exportName, importPath(abs, configNoExt)), v.serveFromEdge ? "PSST pages from the edge, AI crawler and referral hits" : "AI crawler and referral hits, 410 for withdrawn pages");
   } else {
     const content = readText(existingProxy) ?? "";
-    if (hasPsstProxy(content)) changes.unchanged(changes.rel(existingProxy), "withPsst() in place");
+    const missing = v.serveFromEdge ? missingMatcherPaths(content, edgeMatcherPaths(v.prefix, rootPaths)) : [];
+    if (hasPsstProxy(content) && missing.length > 0) {
+      changes.edit(
+        changes.rel(existingProxy),
+        "PSST paths are served from this proxy: its matcher must reach them",
+        `Add to config.matcher: ${missing.map((p) => JSON.stringify(p)).join(", ")}`,
+        message("P20", `${changes.rel(existingProxy)} is the site's own code; init prints the edit`)
+      );
+    } else if (hasPsstProxy(content)) changes.unchanged(changes.rel(existingProxy), "withPsst() in place");
     else {
       changes.edit(
         changes.rel(existingProxy),
         "the site has its own proxy: wrap it with withPsst()",
-        proxyEdit({ file: changes.rel(existingProxy), content, configImport: importPath(existingProxy, configNoExt), prefix: v.prefix }),
+        proxyEdit({ file: changes.rel(existingProxy), content, configImport: importPath(existingProxy, configNoExt), prefix: v.prefix, ...v.serveFromEdge ? { edgeRootPaths: rootPaths } : {} }),
         message("P20", `${changes.rel(existingProxy)} is the site's own code; init prints the edit`)
       );
     }
@@ -13891,11 +13936,14 @@ function writeConfig(changes, file2, values, existing) {
   if ((existing.edge ?? DEFAULT_EDGE) !== (values.edge ?? DEFAULT_EDGE)) {
     diffs.push(values.edge ? `edge: ${JSON.stringify(values.edge)}` : `(remove the edge key)`);
   }
+  if (existing.serveFromEdge !== (values.serveFromEdge ?? false)) {
+    diffs.push(values.serveFromEdge ? "serveFromEdge: true" : "(remove the serveFromEdge key)");
+  }
   if (diffs.length === 0) changes.unchanged(changes.rel(file2), `site ${values.site} (with your additions)`);
   else {
     changes.edit(
       changes.rel(file2),
-      "psst.config differs from the site's settings in psst",
+      "psst.config differs from the site's settings in PSST",
       `Set these keys in definePsst({ \u2026 }):
 ${indent(diffs.join("\n"))}`,
       message("P23", `${changes.rel(file2)} differs from the dashboard; init never rewrites it`)
@@ -13908,16 +13956,16 @@ function sitemapLine(domain2, prefix) {
 function appendRobots(changes, file2, domain2, prefix) {
   const current = readText(file2) ?? "";
   const line = sitemapLine(domain2, prefix);
-  if (current.includes(`${prefix}/sitemap.xml`)) changes.unchanged(changes.rel(file2), "psst sitemap listed");
+  if (current.includes(`${prefix}/sitemap.xml`)) changes.unchanged(changes.rel(file2), "PSST sitemap listed");
   else changes.replace(file2, `${current}${current === "" || current.endsWith("\n") ? "" : "\n"}${line}
 `, `added ${line}`);
 }
 function printRobots(changes, item, domain2, prefix, how) {
   changes.edit(
     item,
-    "reference the psst sitemap",
+    "reference the PSST sitemap",
     how,
-    message("P21", `add the psst sitemap (https://${domain2}${prefix}/sitemap.xml) to robots`)
+    message("P21", `add the PSST sitemap (https://${domain2}${prefix}/sitemap.xml) to robots`)
   );
 }
 function robotsNext(changes, dir, project, domain2, prefix) {
@@ -13925,7 +13973,7 @@ function robotsNext(changes, dir, project, domain2, prefix) {
   const robotsCode = firstExisting(app, ["robots.ts", "robots.js"]);
   if (robotsCode) {
     const content = readText(robotsCode) ?? "";
-    if (content.includes(`${prefix}/sitemap.xml`)) changes.unchanged(changes.rel(robotsCode), "psst sitemap listed");
+    if (content.includes(`${prefix}/sitemap.xml`)) changes.unchanged(changes.rel(robotsCode), "PSST sitemap listed");
     else {
       printRobots(
         changes,
@@ -13980,12 +14028,12 @@ function setUpVercelStatic(changes, opts, manifest, edge, hasVercelJson) {
   for (const p of manifest.site.claimedRootPaths) {
     const served = staticServesRootPath(opts.dir, p);
     if (served) {
-      changes.info(p, `the site serves ${p} itself (${served}); psst leaves it alone`, message("P25", `${p} is already served by the site`), "skipped");
+      changes.info(p, `the site serves ${p} itself (${served}); PSST leaves it alone`, message("P25", `${p} is already served by the site`), "skipped");
     } else wanted.push({ source: p, destination: `${edge}/s/${publicId}${p}` });
   }
   const file2 = join(opts.dir, "vercel.json");
   if (!hasVercelJson) {
-    changes.create(file2, newVercelJson(wanted), `rewrites ${wanted.map((w) => w.source).join(", ")} to the psst edge`);
+    changes.create(file2, newVercelJson(wanted), `rewrites ${wanted.map((w) => w.source).join(", ")} to the PSST edge`);
     return;
   }
   const text = readText(file2) ?? "";
@@ -14010,7 +14058,7 @@ ${indent(c.wanted.destination)}`,
     );
   }
   if (plan.added.length > 0) {
-    changes.replace(file2, plan.text, `rewrites ${plan.added.map((w) => w.source).join(", ")} to the psst edge (other keys untouched)`, "updated");
+    changes.replace(file2, plan.text, `rewrites ${plan.added.map((w) => w.source).join(", ")} to the PSST edge (other keys untouched)`, "updated");
   } else if (plan.conflicts.length === 0) {
     changes.unchanged("vercel.json", `rewrites ${plan.present.map((w) => w.source).join(", ")} in place`);
   }
@@ -14037,7 +14085,7 @@ async function runStatus(opts) {
     withdrawn: [...m.withdrawn],
     crawlerHits: {
       status: "not_available",
-      reason: "the psst edge does not expose crawler hits yet; the dashboard shows them"
+      reason: "the PSST edge does not expose crawler hits yet; the dashboard shows them"
     }
   };
 }
@@ -14120,19 +14168,19 @@ var processIo = {
   err: (text) => process.stderr.write(text)
 };
 function failureLine(m) {
-  return `psst: ${m.message} (${m.id})
+  return `PSST: ${m.message} (${m.id})
 `;
 }
 
 // src/cli.ts
-var HELP = `saypsst ${CLI_VERSION}: install psst on a site and check it in production
+var HELP = `saypsst ${CLI_VERSION}: install PSST on a site and check it in production
 
 Usage:
   npx saypsst init --site <site_id> [--site-name "Brand"] [--agents-md]
   npx saypsst doctor [--wait] [--url <origin>]
   npx saypsst status
 
-init      Adds psst to this site (Next.js App Router, or a static site on Vercel; other hosts get
+init      Adds PSST to this site (Next.js App Router, or a static site on Vercel; other hosts get
           printed proxy instructions). Idempotent: run it again any time, it only does what is missing
           and never overwrites your edits.
             --site <id>          public site id from the dashboard (Settings \u203A Connections)
@@ -14140,10 +14188,10 @@ init      Adds psst to this site (Next.js App Router, or a static site on Vercel
             --prefix <path>      must equal the dashboard's prefix (default: the dashboard's)
             --domain <host>      must equal the dashboard's domain (default: the dashboard's)
             --mode <mode>        next | vercel_static | proxy (default: detected)
-            --agents-md          append a two-line psst note to AGENTS.md
+            --agents-md          append a two-line PSST note to AGENTS.md
             --no-install         do not run the package manager
             --dry-run            print what would change, write nothing
-doctor    Fetches the production site as a browser and as AI crawlers and checks every psst path.
+doctor    Fetches the production site as a browser and as AI crawlers and checks every PSST path.
             --wait               poll up to --timeout seconds (default 300) while a check waits on a deploy
             --url <origin>       probe this origin instead of https://{domain} (local or preview build)
 status    The site's published pages and versions.
@@ -14151,7 +14199,7 @@ status    The site's published pages and versions.
 All commands: --json (one JSON object, schemas in node_modules/saypsst/schemas), --dir <path>,
 --site <id>, --edge <origin> (default https://edge.saypsst.com).
 
-Exit codes: 0 done \xB7 1 failed (message id P\u2026) \xB7 2 usage \xB7 3 waiting, run again \xB7 4 psst or the site unreachable.
+Exit codes: 0 done \xB7 1 failed (message id P\u2026) \xB7 2 usage \xB7 3 waiting, run again \xB7 4 PSST or the site unreachable.
 `;
 var OPTIONS = {
   site: { type: "string" },
@@ -14298,7 +14346,7 @@ async function main(argv, env = {}) {
         for (const c of r2.checks) lines.push(`${CHECK_SYMBOL[c.status]} ${c.check}  ${c.detail}${c.message ? ` (${c.message.id})` : ""}`);
         lines.push(
           "",
-          r2.exit === EXIT.ok ? "All checks passed." : r2.exit === EXIT.waiting ? "Waiting: deploy (or let caches refresh), then run npx saypsst doctor --wait again." : r2.exit === EXIT.network ? "The site could not be reached from here: allow network access, or ask the person to run doctor." : "Fix the failed checks: troubleshooting.md in the psst skill has each message id.",
+          r2.exit === EXIT.ok ? "All checks passed." : r2.exit === EXIT.waiting ? "Waiting: deploy (or let caches refresh), then run npx saypsst doctor --wait again." : r2.exit === EXIT.network ? "The site could not be reached from here: allow network access, or ask the person to run doctor." : "Fix the failed checks: troubleshooting.md in the PSST skill has each message id.",
           ""
         );
         io.out(lines.join("\n"));
@@ -14337,7 +14385,7 @@ main(process.argv.slice(2)).then(
     process.exitCode = code;
   },
   (err) => {
-    process.stderr.write(`psst: unexpected error: ${err instanceof Error ? err.stack ?? err.message : String(err)}
+    process.stderr.write(`PSST: unexpected error: ${err instanceof Error ? err.stack ?? err.message : String(err)}
 `);
     process.exitCode = 1;
   }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "saypsst",
-  "version": "0.1.0",
-  "description": "Install psst on your site (npx saypsst init) and check it in production (npx saypsst doctor).",
+  "version": "0.2.0",
+  "description": "Install PSST on your site (npx saypsst init) and check it in production (npx saypsst doctor).",
   "license": "UNLICENSED",
   "type": "module",
   "bin": {

package/schemas/index.json

@@ -1,6 +1,6 @@
 {
   "format": "psst.schemas/1",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "contract": "1.0",
   "commands": {
     "init": "init.schema.json",

package/skills/psst/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: psst
-description: psst publishes pages that make this brand show up in AI answers (ChatGPT, Claude, Gemini, Perplexity, Google AI Overviews) on this site's own domain, under a path prefix psst owns (default /resources), plus optionally /about and /llms.txt. Use it for finishing setup after `npx saypsst init`; any change near psst.config.ts, app/(psst)/, the psst rewrites in vercel.json, or the proxy's withPsst(); checking that psst pages are live and visible to AI crawlers (`npx saypsst doctor`); reading what psst has published (`npx saypsst status`); and any psst message id (P01…P44), exit code or build problem.
+description: PSST publishes pages that make this brand show up in AI answers (ChatGPT, Claude, Gemini, Perplexity, Google AI Overviews) on this site's own domain, under a path prefix PSST owns (default /resources), plus optionally /about and /llms.txt. Use it for finishing setup after `npx saypsst init`; any change near psst.config.ts, app/(psst)/, the PSST rewrites in vercel.json, or the proxy's withPsst(); checking that PSST pages are live and visible to AI crawlers (`npx saypsst doctor`); reading what PSST has published (`npx saypsst status`); and any PSST message id (P01…P44), exit code or build problem.
 ---
 
-# psst
+# PSST
 
-psst helps a brand show up in AI answers. Its agents find the most useful page the site is missing (an `/about`, an `/llms.txt`, a guide under the prefix), draft it from the site's own facts, and, once an admin approves it in the psst dashboard, publish it **on this site's domain** with no deploy. Every page is plain HTML (no JavaScript), the same for people and crawlers, with a canonical URL, JSON-LD and a `psst-version` meta that proves which approved version is live.
+PSST helps a brand show up in AI answers. Its agents find the most useful page the site is missing (an `/about`, an `/llms.txt`, a guide under the prefix), draft it from the site's own facts, and, once an admin approves it in the PSST dashboard, publish it **on this site's domain** with no deploy. Every page is plain HTML (no JavaScript), the same for people and crawlers, with a canonical URL, JSON-LD and a `psst-version` meta that proves which approved version is live.
 
-The person installed psst once, with one pull request. From then on psst writes content, and the site serves it. You keep the plumbing working; you never write psst content.
+The person installed PSST once, with one pull request. From then on PSST writes content, and the site serves it. You keep the plumbing working; you never write PSST content.
 
 **First:**
 - **Read the site's own file before any change:**
@@ -16,21 +16,21 @@ The person installed psst once, with one pull request. From then on psst writes
   |---|---|
   | `psst.config.ts` (or `.js`) imports from `@saypsst/next` | `nextjs.md` |
   | `vercel.json` rewrites a path to `https://edge.saypsst.com/s/site_…` | `vercel-static.md` |
-  | Neither: psst is routed by a CDN, a Worker or a reverse proxy | `proxy.md` |
+  | Neither: PSST is routed by a CDN, a Worker or a reverse proxy | `proxy.md` |
 
 - **When a command, doctor, a build log or a warning names a problem** (`P01` to `P44`, or an exit code), read `troubleshooting.md`.
 
 ## Where things are
 
-- **The site id** (`site_` + 16 characters) is public, not a secret. It is in `psst.config.ts` or in the `vercel.json` rewrite destination. psst needs no key, token or secret anywhere: if something asks for one, it is not psst.
-- **The prefix** (`/resources` by default) belongs to psst. The site must not serve anything else there. Root paths (`/about`, `/llms.txt`) are psst's only when the dashboard claimed them and the site did not already serve them.
-- **The content lives in psst**, never in the repository. Pages change when an admin approves a new version in the dashboard, and appear within about 10 minutes (300 s ISR plus 300 s CDN cache).
+- **The site id** (`site_` + 16 characters) is public, not a secret. It is in `psst.config.ts` or in the `vercel.json` rewrite destination. PSST needs no key, token or secret anywhere: if something asks for one, it is not PSST.
+- **The prefix** (`/resources` by default) belongs to PSST. The site must not serve anything else there. Root paths (`/about`, `/llms.txt`) are PSST's only when the dashboard claimed them and the site did not already serve them.
+- **The content lives in PSST**, never in the repository. Pages change when an admin approves a new version in the dashboard, and appear within about 10 minutes (300 s ISR plus 300 s CDN cache).
 - **`npx saypsst <command>`:**
   - `init --site <id>`: sets up or repairs the plumbing. Idempotent: it marks with ✓ what is in place, does only what is missing, never overwrites an edit, and prints the exact edit for a file too unusual to change.
-  - `doctor [--wait] [--url <origin>]`: fetches the production site (or `--url`) as a browser and as GPTBot, OAI-SearchBot, ClaudeBot, PerplexityBot and Googlebot, and checks every psst path. Its probes carry `X-Psst-Doctor: 1` and are never counted as crawler hits.
-  - `status`: what psst has published, with versions.
+  - `doctor [--wait] [--url <origin>]`: fetches the production site (or `--url`) as a browser and as GPTBot, OAI-SearchBot, ClaudeBot, PerplexityBot and Googlebot, and checks every PSST path. Its probes carry `X-Psst-Doctor: 1` and are never counted as crawler hits.
+  - `status`: what PSST has published, with versions.
   - Every command takes `--json`; the shapes are in `node_modules/saypsst/schemas/` (or the CLI package's `schemas/`).
-- **This skill's other files:** the site's own (above), and `troubleshooting.md`. `init` copies this folder into `.claude/skills/psst/` and `.agents/skills/psst/`, and replaces it on the next `init` when psst updates it: do not edit it.
+- **This skill's other files:** the site's own (above), and `troubleshooting.md`. `init` copies this folder into `.claude/skills/psst/` and `.agents/skills/psst/`, and replaces it on the next `init` when PSST updates it: do not edit it.
 
 ## Setup after `npx saypsst init`
 
@@ -45,22 +45,22 @@ The person installed psst once, with one pull request. From then on psst writes
    | Exit 1 or 4 | Read `troubleshooting.md` at the message id. Nothing was half-written: init checks before it writes. |
    | `Run pnpm install …` in `Next:` | Run it (init skipped it because of `--no-install` or `--dry-run`). |
 
-2. **Check the change like any other:** the repository's own typecheck, lint and build. For Next.js, `next build` must pass (the route files are plain re-exports; psst being unreachable never fails a build).
-3. **Show the person `git diff`** in two sentences: psst's routes under the prefix, the config with the public site id, the proxy wrapper, the robots line, this skill. Nothing changes for visitors until a page is published, and only under the prefix.
-4. **After the deploy**, run `npx saypsst doctor --wait` (give the Bash call a 360000 ms timeout). Exit 0 means the site serves psst; exit 3 means it is still waiting on the deploy or caches: run it again. Before any page is published, doctor checks the domain proof, the stylesheet and the sitemap, and says "nothing is published yet" (P41): that is expected.
-5. **Leave the person oriented:** the first page appears after they approve it in the dashboard (Publishing), then psst verifies it in production by itself.
+2. **Check the change like any other:** the repository's own typecheck, lint and build. For Next.js, `next build` must pass (the route files are plain re-exports; PSST being unreachable never fails a build).
+3. **Show the person `git diff`** in two sentences: PSST's routes under the prefix, the config with the public site id, the proxy wrapper, the robots line, this skill. Nothing changes for visitors until a page is published, and only under the prefix.
+4. **After the deploy**, run `npx saypsst doctor --wait` (give the Bash call a 360000 ms timeout). Exit 0 means the site serves PSST; exit 3 means it is still waiting on the deploy or caches: run it again. Before any page is published, doctor checks the domain proof, the stylesheet and the sitemap, and says "nothing is published yet" (P41): that is expected.
+5. **Leave the person oriented:** the first page appears after they approve it in the dashboard (Publishing), then PSST verifies it in production by itself.
 
 ## Rules
 
-- **Never edit psst's route files by hand** (`app/(psst)/**`, a claimed `app/about/page.tsx` or `app/llms.txt/route.ts`), except to pass a `Shell` to `psstPage` (see `nextjs.md`). `export const revalidate = 300` must stay a literal in each file: Next.js reads it statically.
-- **Never add psst content locally**: no MDX, no pages, no copy under the prefix. Content changes go through the dashboard, where an admin approves each version.
+- **Never edit PSST's route files by hand** (`app/(psst)/**`, a claimed `app/about/page.tsx` or `app/llms.txt/route.ts`), except to pass a `Shell` to `psstPage` (see `nextjs.md`). `export const revalidate = 300` must stay a literal in each file: Next.js reads it statically.
+- **Never add PSST content locally**: no MDX, no pages, no copy under the prefix. Content changes go through the dashboard, where an admin approves each version.
 - **Never put anything else under the prefix**, and never block it in the proxy, middleware, auth or a CDN rule.
-- **Never change robots.txt policy for psst** without the person. Doctor reports training, search and user-fetch crawlers separately; only blocked search or user-fetch agents fail it.
-- **Never cache psst paths longer than the origin says**, and never cache a 404 or 5xx there (a CDN rule that does breaks updates and outages).
+- **Never change robots.txt policy for PSST** without the person. Doctor reports training, search and user-fetch crawlers separately; only blocked search or user-fetch agents fail it.
+- **Never cache PSST paths longer than the origin says**, and never cache a 404 or 5xx there (a CDN rule that does breaks updates and outages).
 - **Verify with doctor, not by reading code.** Done means `npx saypsst doctor` exits 0 against production.
 
 ## Exit codes
 
-- **0** done · **1** failed, with a message id · **2** the command or its arguments are wrong · **3** waiting on a deploy, caches or psst: run the same command again · **4** psst or the site is unreachable from here (a sandbox without network): allow network access for the command, or ask the person to run it.
+- **0** done · **1** failed, with a message id · **2** the command or its arguments are wrong · **3** waiting on a deploy, caches or PSST: run the same command again · **4** PSST or the site is unreachable from here (a sandbox without network): allow network access for the command, or ask the person to run it.
 
 With `--json`, a failure reads `{"contract":"1.0","command":"init","site":…,"exit":1,"error":{"id":"P02","code":"prefix_served","message":"…"}}`.

package/skills/psst/nextjs.md

@@ -1,6 +1,6 @@
-# psst on Next.js (App Router)
+# PSST on Next.js (App Router)
 
-This site serves psst through `@saypsst/next`, route modules inside its own Next.js app (15 or 16, App Router, any host). `SKILL.md` holds what every site shares; this file holds the code. The package's own reference is `node_modules/@saypsst/next/README.md`.
+This site serves PSST through `@saypsst/next`, route modules inside its own Next.js app (15 or 16, App Router, any host). `SKILL.md` holds what every site shares; this file holds the code. The package's own reference is `node_modules/@saypsst/next/README.md`.
 
 ## What `init` set up
 
@@ -10,10 +10,10 @@ Paths assume `app/` and the prefix `/resources`. With `src/app/`, `psst.config.t
 |---|---|
 | `package.json` | `@saypsst/next` at an exact version (its only dependency is `zod`; no install scripts) |
 | `psst.config.ts` | `definePsst({ site, domain, siteName, prefix, rootPaths })`: the public site id, the production host, the brand name. `definePsst` validates it and fails the build on a typo. |
-| `app/(psst)/resources/[...slug]/page.tsx` | Every psst page under the prefix. Time-based ISR (`revalidate = 300`), `dynamicParams = true`. |
-| `app/(psst)/resources/sitemap.xml/route.ts` | The psst sitemap |
-| `app/(psst)/resources/%5Fpsst/style.css/route.ts` | The psst stylesheet, same-origin (no inline style, so strict CSPs pass) |
-| `app/(psst)/resources/%5Fpsst/verify/route.ts` | The domain proof psst checks before it publishes |
+| `app/(psst)/resources/[...slug]/page.tsx` | Every PSST page under the prefix. Time-based ISR (`revalidate = 300`), `dynamicParams = true`. |
+| `app/(psst)/resources/sitemap.xml/route.ts` | The PSST sitemap |
+| `app/(psst)/resources/%5Fpsst/style.css/route.ts` | The PSST stylesheet, same-origin (no inline style, so strict CSPs pass) |
+| `app/(psst)/resources/%5Fpsst/verify/route.ts` | The domain proof PSST checks before it publishes |
 | `app/about/page.tsx`, `app/llms.txt/route.ts` | Only when the dashboard claimed the path and the app did not serve it |
 | `proxy.ts` (Next 16) or `middleware.ts` (Next 15) | `withPsst(psst)`: counts AI-crawler fetches and AI referrals (classes only: no IP, no cookie, no query, no UA string), answers 410 for withdrawn pages. Never awaited, never throws. |
 | `public/robots.txt` | One added line: `Sitemap: https://{domain}/resources/sitemap.xml` |
@@ -24,7 +24,7 @@ Two Next.js rules shape these files:
 
 ## The site's header and footer
 
-psst pages render inside the root layout. When that layout has no header or footer (common: they live in a `(marketing)` group layout), pass a `Shell` built from the site's own components. It is the one hand edit psst allows in its route files, and `init` keeps it:
+PSST pages render inside the root layout. When that layout has no header or footer (common: they live in a `(marketing)` group layout), pass a `Shell` built from the site's own components. It is the one hand edit PSST allows in its route files, and `init` keeps it:
 
 ```tsx
 // app/(psst)/resources/[...slug]/page.tsx
@@ -51,7 +51,7 @@ export const generateMetadata = page.generateMetadata;
 export default page.default;
 ```
 
-`children` is psst's own `<main>`: do not wrap it in another `<main>`. The Shell must be a server component (no `"use client"` at its top; client components inside it are fine). Without a Shell, `psst.config.ts` can take `shell: { nav: [{ label, href }], footer }` for a plain built-in header and footer.
+`children` is PSST's own `<main>`: do not wrap it in another `<main>`. The Shell must be a server component (no `"use client"` at its top; client components inside it are fine). Without a Shell, `psst.config.ts` can take `shell: { nav: [{ label, href }], footer }` for a plain built-in header and footer.
 
 ## An existing proxy or middleware
 
@@ -63,9 +63,10 @@ A proxy that rewrites, redirects or authenticates every path must let the prefix
 
 ## Caching and failures
 
-- Pages and handlers revalidate every 300 s. When psst is unreachable, the last good render keeps being served; a page never rendered answers 500 uncached (never a cached 404), and the next request retries.
-- `next build` never fails because of psst: unreachable at build, the pages render on first request.
-- **Cache Components** (`cacheComponents: true`) is not supported yet (P08): the segment config these files need is removed there. Use `proxy.md` instead.
+- Pages and handlers revalidate every 300 s. When PSST is unreachable, the last good render keeps being served; a page never rendered answers 500 uncached (never a cached 404), and the next request retries.
+- `next build` never fails because of PSST: unreachable at build, the pages render on first request.
+- **Cache Components** (`cacheComponents: true`, P08): the segment config the route files need is removed there, so init writes no route files. `serveFromEdge: true` in `psst.config` makes `withPsst()` rewrite PSST paths to the edge, which renders them with its own header and footer, not the app's layout. To use the app's layout, turn the flag off and run init again.
+- **`trailingSlash: true`**: Next redirects PSST's paths before any PSST code runs, so `doctor` and the domain proof report P39. Pages still answer after the redirect. With `serveFromEdge`, adding `skipTrailingSlashRedirect: true` to `next.config` clears it, but that changes the redirects of the whole site: ask the person first.
 - **Self-hosted with several instances** (for example behind CloudFront): each instance keeps its own ISR cache, so updates land per instance within 300 s. The CDN in front must respect the origin's `Cache-Control` on the prefix.
 
 ## Build or type errors
@@ -73,11 +74,11 @@ A proxy that rewrites, redirects or authenticates every path must let the prefix
 | Error | Fix |
 |---|---|
 | `Cannot find module '@saypsst/next/page'` | Install: run the package manager (`pnpm install`, `npm install`). |
-| `invalid psst config: …` (PsstConfigError) | A value in `psst.config.ts` is wrong; the message names it. `npx saypsst init` prints the expected keys (P23). |
+| `invalid PSST config: …` (PsstConfigError) | A value in `psst.config.ts` is wrong; the message names it. `npx saypsst init` prints the expected keys (P23). |
 | `Cannot find module '../../../../psst.config'` | The config moved. Put it back next to `app/` (or in `src/` with `src/app/`), or run `npx saypsst init`, which prints each route file's expected content (P24). |
 | Type error in the Shell | Type its props as `PsstShellProps` from `@saypsst/next/page`. |
-| A lint rule flags a psst route file | Exclude `app/(psst)/**` from that rule rather than editing the file. |
+| A lint rule flags a PSST route file | Exclude `app/(psst)/**` from that rule rather than editing the file. |
 
-## Remove psst
+## Remove PSST
 
 Delete `app/(psst)/`, the claimed root-path files, `psst.config.ts`, the `withPsst` wrapper (or the proxy file init created), the robots line, `@saypsst/next` from `package.json`, and `.claude/skills/psst/`. Ask the person to withdraw the pages in the dashboard first, so crawlers get 410s rather than 404s.

package/skills/psst/proxy.md

@@ -1,6 +1,6 @@
-# psst behind a proxy, a CDN or a Worker
+# PSST behind a proxy, a CDN or a Worker
 
-For any site that is neither a Next.js App Router app nor a static site on Vercel: a Pages Router app, Nuxt, Astro SSR, WordPress, Shopify, or a Next.js app behind CloudFront whose infra owner prefers routing. psst's edge renders full pages; the site's host or CDN routes psst's paths to it. `init --mode proxy` writes nothing but the skill; this file has the snippets. `SKILL.md` holds what every site shares.
+For any site that is neither a Next.js App Router app nor a static site on Vercel: a Pages Router app, Nuxt, Astro SSR, WordPress, Shopify, or a Next.js app behind CloudFront whose infra owner prefers routing. PSST's edge renders full pages; the site's host or CDN routes PSST's paths to it. `init --mode proxy` writes nothing but the skill; this file has the snippets. `SKILL.md` holds what every site shares.
 
 Throughout: `SITE` is the site id (`site_…`), `PREFIX` the prefix (`/resources`), `EDGE` is `https://edge.saypsst.com`. The edge path is always `EDGE/s/SITE` followed by the path on the site, unchanged.
 
@@ -11,7 +11,7 @@ Throughout: `SITE` is the site id (`site_…`), `PREFIX` the prefix (`/resources
 | `PREFIX` and everything under it | `EDGE/s/SITE/PREFIX/…` (same path) |
 | `/about`, `/llms.txt`, only if the dashboard claimed them | `EDGE/s/SITE/about`, `EDGE/s/SITE/llms.txt` |
 
-Forward the method, the `User-Agent` and the `Referer` (psst classifies AI crawlers and referrals from them; it stores no IP, cookie or UA string). Do not forward cookies or `Authorization`. Keep the response status and the `Cache-Control`, `Content-Type`, `Content-Security-Policy` and `X-Psst-Version` headers. Never cache a 404 or 5xx from the edge, and never cache longer than its `s-maxage`.
+Forward the method, the `User-Agent` and the `Referer` (PSST classifies AI crawlers and referrals from them; it stores no IP, cookie or UA string). Do not forward cookies or `Authorization`. Keep the response status and the `Cache-Control`, `Content-Type`, `Content-Security-Policy` and `X-Psst-Version` headers. Never cache a 404 or 5xx from the edge, and never cache longer than its `s-maxage`.
 
 ## Cloudflare Worker (route `example.com/resources*`)
 
@@ -55,7 +55,7 @@ A `proxy_pass` with a variable needs a `resolver` (for example `resolver 1.1.1.1
 1. Origin: `edge.saypsst.com`, HTTPS only, origin path `/s/site_xxxxxxxxxxxxxxxx`.
 2. Behavior: path pattern `/resources*` (above the default behavior), that origin, cache policy honouring origin headers (`CachingOptimized` with min TTL 0, or a policy with "Use origin cache headers"), origin request policy forwarding `User-Agent` and `Referer`, no cookies, no query strings.
 3. One behavior per claimed root path (`/about`, `/llms.txt`), same origin.
-4. Error pages: none for this behavior (a custom error response would turn psst's 410 and 503 into the site's page).
+4. Error pages: none for this behavior (a custom error response would turn PSST's 410 and 503 into the site's page).
 
 ## Next.js Pages Router (P01)
 

package/skills/psst/troubleshooting.md

@@ -6,37 +6,37 @@
 
 ## init stops (nothing was written)
 
-- **P01** `no_app_router`: a Next.js app without `app/` or `src/app/` (Pages Router only). psst's Next.js routes need the App Router. Route psst at the host instead: `proxy.md`, "Next.js Pages Router" (`beforeFiles` rewrites), then `npx saypsst init --mode proxy`.
+- **P01** `no_app_router`: a Next.js app without `app/` or `src/app/` (Pages Router only). PSST's Next.js routes need the App Router. Route PSST at the host instead: `proxy.md`, "Next.js Pages Router" (`beforeFiles` rewrites), then `npx saypsst init --mode proxy`.
 - **P02** `prefix_served`: the live site already answers 200 under the prefix. Another prefix is needed: the person changes it in the dashboard (Settings › Connections), then run init again. Never delete the site's pages to make room.
 - **P03** `prefix_route_exists`: the repository already has routes or files under the prefix (`app/resources/`, `public/resources/`, a rewrite or redirect). Same fix as P02.
-- **P04** `edge_unreachable` (exit 4): psst's edge cannot be reached from here, as in a sandbox without network. Allow network access for the command, or ask the person to run it.
+- **P04** `edge_unreachable` (exit 4): PSST's edge cannot be reached from here, as in a sandbox without network. Allow network access for the command, or ask the person to run it.
 - **P05** `site_unknown`: no site with that id. Copy the id again from the dashboard (Settings › Connections); it looks like `site_` + 16 letters and digits 2–7.
-- **P06** `edge_error`: psst answered something unexpected. If it says "contract", update the CLI (`npx saypsst@latest init`); otherwise retry later.
+- **P06** `edge_error`: PSST answered something unexpected. If it says "contract", update the CLI (`npx saypsst@latest init`); otherwise retry later.
 - **P07** `site_name_required` (exit 2): pass `--site-name "Brand"`, the brand as the site names itself. Normally not needed: init takes the brand name from the dashboard, then from `psst.config.ts`. Only an edge without it asks.
-- **P08** `cache_components`: `cacheComponents: true` in `next.config` removes the route segment config psst's files need. Use `proxy.md` (route the prefix at the host) until psst supports it.
+- **P08** `cache_components`: not a failure. `cacheComponents: true` in `next.config` removes the route segment config PSST's route files need, so init sets `serveFromEdge: true` and writes only `proxy.ts`; the edge serves PSST pages with its own header and footer. If init prints a route file to delete, delete it: it comes from an install made before the flag was on.
 - **P09** `config_other_site`: `psst.config.ts` names another site. init never rewrites it. If the repository really moves to the new site, change `site` there by hand (ask the person), then run init.
 - **P10** `prefix_mismatch` (exit 2): `--prefix` must equal the dashboard's prefix. Change it in the dashboard first, or drop `--prefix`.
 - **P11** `domain_mismatch` (exit 2): `--domain` must equal the dashboard's domain. Fix the domain in the dashboard, or drop `--domain`.
 - **P12** `install_failed`: the package manager failed to install `@saypsst/next`. Everything else is in place: fix the install (network, registry auth, peer conflicts), run it, then run init again.
 - **P13** `usage` (exit 2): a wrong command, option or value; the message says which. `npx saypsst --help`.
-- **P14** `next_unsupported`: Next.js older than 15. Upgrade (it changes the app beyond psst: ask the person), or use `proxy.md`.
-- **P15** `monorepo_root`: this folder holds several apps. Run init in the site's folder (`cd apps/web`), the one Vercel builds; or pass `--mode proxy` if psst is routed elsewhere.
-- **P16** `edge_busy` (exit 3): psst answered 503 or 429 for a moment. Run the same command again in a few minutes.
+- **P14** `next_unsupported`: Next.js older than 15. Upgrade (it changes the app beyond PSST: ask the person), or use `proxy.md`.
+- **P15** `monorepo_root`: this folder holds several apps. Run init in the site's folder (`cd apps/web`), the one Vercel builds; or pass `--mode proxy` if PSST is routed elsewhere.
+- **P16** `edge_busy` (exit 3): PSST answered 503 or 429 for a moment. Run the same command again in a few minutes.
 
 ## init printed an edit (`!`)
 
 Make the edit exactly as printed, then run `npx saypsst init` again: the line turns ✓.
 
 - **P20** `proxy_edit`: the site has its own `proxy.ts` / `middleware.ts`. Wrap it with `withPsst()` as printed; keep its matcher a literal that also matches the prefix (`nextjs.md`).
-- **P21** `robots_edit`: robots is generated by code (`app/robots.ts`) or missing. Add the psst sitemap URL where robots is produced. Never change its allow/disallow policy for psst.
+- **P21** `robots_edit`: robots is generated by code (`app/robots.ts`) or missing. Add the PSST sitemap URL where robots is produced. Never change its allow/disallow policy for PSST.
 - **P22** `vercel_json_edit`: `vercel.json` has comments, invalid JSON or legacy `routes`. Add the printed rewrites first in `rewrites` (or the route before `{ "handle": "filesystem" }`).
-- **P23** `config_edit`: `psst.config.ts` differs from the site's settings in psst (domain, brand name, prefix, root paths). Set the printed keys; keep anything you added (`shell`).
-- **P24** `route_file_edited`: a file at a psst route path is not psst's (or lost `export const revalidate = 300`). Replace it with the printed content; a `Shell` is the only change psst allows.
-- **P26** `rewrite_conflict`: `vercel.json` already rewrites a psst path elsewhere. Point it at the printed destination, if the person agrees the path is psst's.
+- **P23** `config_edit`: `psst.config.ts` differs from the site's settings in PSST (domain, brand name, prefix, root paths). Set the printed keys; keep anything you added (`shell`).
+- **P24** `route_file_edited`: a file at a PSST route path is not PSST's (or lost `export const revalidate = 300`). Replace it with the printed content; a `Shell` is the only change PSST allows.
+- **P26** `rewrite_conflict`: `vercel.json` already rewrites a PSST path elsewhere. Point it at the printed destination, if the person agrees the path is PSST's.
 
 ## Information (nothing to fix)
 
-- **P25** `root_path_served`: the site already serves `/about` or `/llms.txt`, so psst does not take it. The person can release the claim in the dashboard.
+- **P25** `root_path_served`: the site already serves `/about` or `/llms.txt`, so PSST does not take it. The person can release the claim in the dashboard.
 - **P27** `mode_mismatch`: the dashboard's mode differs from what init detected; init sets up what it found. Tell the person so the dashboard can be updated.
 - **P28** `agents_md_ask`: ask the person whether to add the two-line note to AGENTS.md; if yes, `npx saypsst init --agents-md`.
 - **P29** `live_check_skipped`: init could not fetch the live site (not deployed yet, or no network), so it could not confirm the prefix is free there. Check it after the deploy with `npx saypsst doctor`.
@@ -45,18 +45,18 @@ Make the edit exactly as printed, then run `npx saypsst init` again: the line tu
 
 ## doctor
 
-Doctor fetches each psst path on the production domain (or `--url`) as a browser and as GPTBot, OAI-SearchBot, ClaudeBot, PerplexityBot and Googlebot, without following redirects. `--wait` repeats while a check is waiting, up to 5 minutes (under Claude Code, give that Bash call a 360000 ms timeout).
+Doctor fetches each PSST path on the production domain (or `--url`) as a browser and as GPTBot, OAI-SearchBot, ClaudeBot, PerplexityBot and Googlebot, without following redirects. `--wait` repeats while a check is waiting, up to 5 minutes (under Claude Code, give that Bash call a 360000 ms timeout).
 
-- **P30** `not_deployed` (waiting): a psst path answers 404. Deploy the install; for a just-published page, wait a minute and run again. Still 404 after a deploy: in Next.js, check that `app/(psst)/` is deployed and the proxy does not rewrite the prefix; on Vercel static, that no file or redirect shadows it; behind a proxy, that the route exists.
+- **P30** `not_deployed` (waiting): a PSST path answers 404. Deploy the install; for a just-published page, wait a minute and run again. Still 404 after a deploy: in Next.js, check that `app/(psst)/` is deployed and the proxy does not rewrite the prefix; on Vercel static, that no file or redirect shadows it; behind a proxy, that the route exists.
 - **P31** `verify_mismatch`: `{prefix}/_psst/verify` does not serve this site's proof. The site's config names another site, or something else answers that path.
-- **P32** `version_stale` (waiting): the page serves an older version than psst published. Caches refresh within about 10 minutes. Still stale after 15 minutes: a CDN caches the prefix longer than the origin's `s-maxage` (fix its cache rule), or a self-hosted app runs several instances with their own caches.
+- **P32** `version_stale` (waiting): the page serves an older version than PSST published. Caches refresh within about 10 minutes. Still stale after 15 minutes: a CDN caches the prefix longer than the origin's `s-maxage` (fix its cache rule), or a self-hosted app runs several instances with their own caches.
 - **P33** `noindex`: the page is noindex, from the layout's metadata, a header rule (`X-Robots-Tag`), or the host's preview protection. Remove it for the prefix.
-- **P34** `canonical_wrong`: the canonical is not `https://{domain}{path}`. The layout overrides psst's metadata, or `domain` in `psst.config.ts` is wrong (P23).
-- **P35** `bot_content_differs`: crawlers get other content than people: a bot rule, a WAF challenge, or A/B testing on the prefix. psst pages must be identical for everyone; exclude the prefix from it.
-- **P36** `text_missing`: the page's text is not in the HTML without JavaScript. Something renders the prefix client-side or replaces psst's page; check the proxy and layouts.
+- **P34** `canonical_wrong`: the canonical is not `https://{domain}{path}`. The layout overrides PSST's metadata, or `domain` in `psst.config.ts` is wrong (P23).
+- **P35** `bot_content_differs`: crawlers get other content than people: a bot rule, a WAF challenge, or A/B testing on the prefix. PSST pages must be identical for everyone; exclude the prefix from it.
+- **P36** `text_missing`: the page's text is not in the HTML without JavaScript. Something renders the prefix client-side or replaces PSST's page; check the proxy and layouts.
 - **P37** `robots_blocks`: robots.txt blocks AI search or user-fetch agents from the prefix, so AI answers cannot cite these pages. The policy is the site's: show the person and let them decide. Blocking training crawlers is reported as information only.
-- **P38** `sitemap_bad`: `{prefix}/sitemap.xml` is not psst's sitemap, or does not list a published page yet (waiting, like P32).
-- **P39** `redirected`: a psst path redirects (to `www.`, to https, to a login). psst's paths must answer directly on the configured domain: fix the redirect, or the domain in the dashboard.
+- **P38** `sitemap_bad`: `{prefix}/sitemap.xml` is not PSST's sitemap, or does not list a published page yet (waiting, like P32).
+- **P39** `redirected`: a PSST path redirects (to `www.`, to https, to a login). PSST's paths must answer directly on the configured domain: fix the redirect, or the domain in the dashboard.
 - **P40** `site_unreachable` (exit 4 when it is the only failure): the site could not be fetched from here: no network in the sandbox, DNS not pointed yet, or a firewall.
 - **P42** `no_site_id` (exit 2): nothing in this folder names the site. Run doctor in the site's folder, or pass `--site site_…`.
-- **P44** `bad_status`: a psst path answers an unexpected status or type (500, 410, an HTML error page, no `psst-version`). A 500 that persists: the app cannot reach psst at runtime (outbound network blocked); a 410: the page was withdrawn in the dashboard.
+- **P44** `bad_status`: a PSST path answers an unexpected status or type (500, 410, an HTML error page, no `psst-version`). A 500 that persists: the app cannot reach PSST at runtime (outbound network blocked); a 410: the page was withdrawn in the dashboard.

package/skills/psst/vercel-static.md

@@ -1,6 +1,6 @@
-# psst on a static site on Vercel
+# PSST on a static site on Vercel
 
-This site deploys on Vercel without Next.js (plain HTML, Astro static, a custom build). psst pages are served by the psst edge and reach visitors through **rewrites in `vercel.json`**: Vercel fetches them from the edge and serves them on the site's own domain. There is no psst code in the repository, no dependency and no secret. `SKILL.md` holds what every site shares.
+This site deploys on Vercel without Next.js (plain HTML, Astro static, a custom build). PSST pages are served by the PSST edge and reach visitors through **rewrites in `vercel.json`**: Vercel fetches them from the edge and serves them on the site's own domain. There is no PSST code in the repository, no dependency and no secret. `SKILL.md` holds what every site shares.
 
 ## What `init` set up
 
@@ -21,10 +21,10 @@ This site deploys on Vercel without Next.js (plain HTML, Astro static, a custom
 
 ## Rules for this site
 
-- **Vercel serves files before rewrites.** A file or folder under the prefix in the build output (`public/resources/…`, `resources/index.html`, `about.html`) hides psst's page: remove it, or ask for another prefix in the dashboard (P03).
-- **Redirects run before rewrites.** A redirect whose source covers the prefix (`/resources/:path*`, `/:path*`) sends visitors away from psst: exclude the prefix from it.
+- **Vercel serves files before rewrites.** A file or folder under the prefix in the build output (`public/resources/…`, `resources/index.html`, `about.html`) hides PSST's page: remove it, or ask for another prefix in the dashboard (P03).
+- **Redirects run before rewrites.** A redirect whose source covers the prefix (`/resources/:path*`, `/:path*`) sends visitors away from PSST: exclude the prefix from it.
 - **`cleanUrls` and `trailingSlash`** are fine: the rewrite matches both forms.
-- **Headers:** a `Content-Security-Policy` in `vercel.json` also applies to psst pages, and they need nothing beyond `'self'` for the stylesheet: no inline script or style, and JSON-LD is a data block. A strict `script-src` with hashes passes.
+- **Headers:** a `Content-Security-Policy` in `vercel.json` also applies to PSST pages, and they need nothing beyond `'self'` for the stylesheet: no inline script or style, and JSON-LD is a data block. A strict `script-src` with hashes passes.
 - **Legacy `routes`:** a `vercel.json` with `routes` cannot use `rewrites`. init prints the edit (P22); add a route before `{ "handle": "filesystem" }`: `{ "src": "/resources/(.*)", "dest": "https://edge.saypsst.com/s/site_…/resources/$1" }`.
 - **`vercel.json` with comments** (or invalid JSON): init prints the rewrites to add (P22).
 - **Monorepo:** run init in the folder that holds this site's `vercel.json` (the Vercel project's root directory), for example `cd apps/web` (P15).
@@ -37,6 +37,6 @@ The edge answers `Cache-Control: public, max-age=0, s-maxage=300, stale-while-re
 
 After the deploy: `npx saypsst doctor --wait`. A preview deployment can be checked with `npx saypsst doctor --url https://<preview>.vercel.app` (canonical URLs still point at the production domain, as they should).
 
-## Remove psst
+## Remove PSST
 
-Delete the psst rewrites from `vercel.json`, the robots line and `.claude/skills/psst/`. Ask the person to withdraw the pages in the dashboard first.
+Delete the PSST rewrites from `vercel.json`, the robots line and `.claude/skills/psst/`. Ask the person to withdraw the pages in the dashboard first.

package/skills/psst-tasks/SKILL.md

@@ -1,17 +1,17 @@
 ---
 name: psst-tasks
-description: Do the psst tasks assigned to this repository's coding agent. psst (saypsst.com) finds what keeps this brand out of AI answers and writes evidence-backed task briefs; the person approves them in the psst dashboard, and the ones marked "Done by <Brand>'s agent" change this site's existing pages or stack (copy, sections, FAQ blocks, schema, meta, llms.txt, robots, sitemap). Use it when the person says "do my psst tasks", "anything to implement from psst?", "work through the psst briefs" or runs the nightly psst routine (`routine.md`).
+description: Do the PSST tasks assigned to this repository's coding agent. PSST (saypsst.com) finds what keeps this brand out of AI answers and writes evidence-backed task briefs; the person approves them in the PSST dashboard, and the ones marked "Done by <Brand>'s agent" change this site's existing pages or stack (copy, sections, FAQ blocks, schema, meta, llms.txt, robots, sitemap). Use it when the person says "do my PSST tasks", "anything to implement from PSST?", "work through the PSST briefs" or runs the nightly PSST routine (`routine.md`).
 ---
 
-# psst tasks
+# PSST tasks
 
-psst splits approved work between two executors. **psst** does everything off this site (mentions, listings, community threads, third-party pages) and the new pages it publishes under its own prefix. **This repository's agent** (you) does the rest: changes to the site's existing pages and stack. Each brief says which. You only ever do briefs marked for the agent.
+PSST splits approved work between two executors. **PSST** does everything off this site (mentions, listings, community threads, third-party pages) and the new pages it publishes under its own prefix. **This repository's agent** (you) does the rest: changes to the site's existing pages and stack. Each brief says which. You only ever do briefs marked for the agent.
 
-The person said go when they approved the brief. You still work the way this repository works: its branches, its review rules, its checks. psst never deploys anything here.
+The person said go when they approved the brief. You still work the way this repository works: its branches, its review rules, its checks. PSST never deploys anything here.
 
 ## Before you start
 
-- **The psst connector** must be connected in this session (an MCP server at `https://app.saypsst.com/api/mcp`, signed in as someone in the brand's psst organization). If its tools (`list_projects`, `list_actions`, `get_action`, `report_progress`, `complete_action`) are missing, stop and say: "Connect the psst connector first: https://app.saypsst.com/connectors." Do not scrape the dashboard.
+- **The PSST connector** must be connected in this session (an MCP server at `https://app.saypsst.com/api/mcp`, signed in as someone in the brand's PSST organization). If its tools (`list_projects`, `list_actions`, `get_action`, `report_progress`, `complete_action`) are missing, stop and say: "Connect the PSST connector first: https://app.saypsst.com/connectors." Do not scrape the dashboard.
 - **Pick the project**: `list_projects`. One project: use it. Several: use the one whose brand owns this repository's site; if that is unclear, ask once.
 - **Read this repository's rules** (AGENTS.md, CLAUDE.md, CONTRIBUTING) before the first edit. They win over this skill.
 
@@ -20,7 +20,7 @@ The person said go when they approved the brief. You still work the way this rep
 1. **List your briefs**: `list_actions` with `status: "in_progress"` and `executor: "agent"`, every page. Approved briefs are `in_progress`; `new` and `planned` ones still wait for the person, so leave them alone.
 2. **Order**: by `priority` (P0 first), then rank. One brief at a time, start to finish.
 3. **Already shipped?** If the brief's `notes` (from `get_action`: your earlier `report_progress` lines) or your last run's summary name a PR or commit for it, do not redo it: if that PR is still open, report it as waiting; if it shipped, go straight to step 9.
-4. **Read the whole brief**: `get_action`. Use `content.target.url` (the page to change; `null` when the brief creates a new page, such as a free tool, whose path is in `content.definitionOfDone`, e.g. `/tools/<slug>`), `content.checklist` (the steps), `content.draft` (wording psst proposes), `content.definitionOfDone`, `content.evidence` (why). The brief is a proposal grounded in evidence: keep its intent; adapt the wording to the site's voice and facts. Never invent claims, numbers, reviews or quotes. If a fact is unknown, leave it out and say so.
+4. **Read the whole brief**: `get_action`. Use `content.target.url` (the page to change; `null` when the brief creates a new page, such as a free tool, whose path is in `content.definitionOfDone`, e.g. `/tools/<slug>`), `content.checklist` (the steps), `content.draft` (wording PSST proposes), `content.definitionOfDone`, `content.evidence` (why). The brief is a proposal grounded in evidence: keep its intent; adapt the wording to the site's voice and facts. Never invent claims, numbers, reviews or quotes. If a fact is unknown, leave it out and say so.
 5. **Find the code** that renders the target page (route, template, CMS entry, content file). If the page is not built from this repository (a CMS, another repo, a hosted help center), do not guess: report it as blocked with where it lives.
 6. **Make the change**, the smallest one that meets the checklist. Run the repository's own checks (typecheck, lint, tests, build) and fix what you broke.
 7. **Ship it the repository's way**: a branch and a pull request, or a commit if that is how this repository works. Never push to a protected branch, skip review or force anything. Put the brief's title and id in the PR description.
@@ -35,11 +35,11 @@ The person said go when they approved the brief. You still work the way this rep
 
 ## Hard rules
 
-- **Never touch psst's own paths**: the prefix psst owns (default `/resources`), its route files, `psst.config.ts`, the psst rewrites. Those are psst's (see the `psst` skill). A brief that targets them is psst's, not yours: skip it and say so.
-- **Never act off this site**: no emails, posts, reviews, outreach, third-party edits. Briefs marked `psst` are psst's.
+- **Never touch PSST's own paths**: the prefix PSST owns (default `/resources`), its route files, `psst.config.ts`, the PSST rewrites. Those are PSST's (see the `psst` skill). A brief that targets them is PSST's, not yours: skip it and say so.
+- **Never act off this site**: no emails, posts, reviews, outreach, third-party edits. Briefs marked `psst` are PSST's.
 - **Never change a brief's status any other way**: no approving, declining or reopening briefs. The person decides; you report.
-- **Connector errors are answers, not obstacles.** `consent_required`: tell the person to revoke the psst connection at https://app.saypsst.com/connectors/access and connect again. `not_agent_task` or `conflict`: the brief is no longer yours or no longer in progress; skip it and say so. `notes_full`: ask the person to tidy the brief's notes in the dashboard.
-- **Secrets stay where they are.** psst needs no key in this repository.
+- **Connector errors are answers, not obstacles.** `consent_required`: tell the person to revoke the PSST connection at https://app.saypsst.com/connectors/access and connect again. `not_agent_task` or `conflict`: the brief is no longer yours or no longer in progress; skip it and say so. `notes_full`: ask the person to tidy the brief's notes in the dashboard.
+- **Secrets stay where they are.** PSST needs no key in this repository.
 
 ## When you finish
 
@@ -53,4 +53,4 @@ Reply with one line per brief:
 
 Then the count: "3 live, 1 waiting for deploy, 1 blocked." Nothing else.
 
-**This skill's other file:** `routine.md` (a nightly run). `npx saypsst init` copies this folder into `.claude/skills/psst-tasks/` and `.agents/skills/psst-tasks/` and replaces it when psst updates it: do not edit it.
+**This skill's other file:** `routine.md` (a nightly run). `npx saypsst init` copies this folder into `.claude/skills/psst-tasks/` and `.agents/skills/psst-tasks/` and replaces it when PSST updates it: do not edit it.

package/skills/psst-tasks/routine.md

@@ -1,18 +1,18 @@
-# Nightly psst routine
+# Nightly PSST routine
 
-Run this to set up a nightly check: "Anything to implement from psst?" Every night the agent picks up newly approved briefs, ships them as pull requests, and completes the ones that went live since the last run.
+Run this to set up a nightly check: "Anything to implement from PSST?" Every night the agent picks up newly approved briefs, ships them as pull requests, and completes the ones that went live since the last run.
 
 ## Set it up (once, with the person)
 
-1. The psst connector is connected in Claude Code (see `SKILL.md` › Before you start).
+1. The PSST connector is connected in Claude Code (see `SKILL.md` › Before you start).
 2. Create a scheduled task that runs in this repository every night. In Claude Code: ask "schedule a nightly task at 02:00 in this repo with the prompt below" (desktop scheduled task or `/schedule`). In Codex or Cursor, use their scheduled or background agents with the same prompt.
 3. Give it permission to create branches and open pull requests in this repository, and nothing more.
 
 ## The prompt
 
 ```
-Anything to implement from psst? Use the psst-tasks skill.
-1. Re-check every psst brief you left "waiting for deploy": if the change is live on production, complete it.
+Anything to implement from PSST? Use the psst-tasks skill.
+1. Re-check every PSST brief you left "waiting for deploy": if the change is live on production, complete it.
 2. Then do every other approved agent brief (never one that already has a PR), one at a time, until each is live, waiting for deploy with a PR, or blocked.
 Open pull requests; never merge or deploy on your own unless this repository's rules say the agent may.
 End with the one-line-per-brief summary.
@@ -21,8 +21,8 @@ End with the one-line-per-brief summary.
 ## What the person sees in the morning
 
 - Pull requests to review, one per brief, each naming the brief.
-- In the psst dashboard: briefs that went live moved to Done, the rest show their PR in the notes.
-- Nothing to do? The run ends with "Nothing to implement from psst." and opens nothing.
+- In the PSST dashboard: briefs that went live moved to Done, the rest show their PR in the notes.
+- Nothing to do? The run ends with "Nothing to implement from PSST." and opens nothing.
 
 ## Rules for the scheduled run