From 9488c1ab6578e848f52c0eae20b3265d7da922cc Mon Sep 17 00:00:00 2001
From: sudoHG <by331works@gmail.com>
Date: Tue, 13 Oct 2026 19:59:58 +0800
Subject: [PATCH] Help search engines and link previews find the website (#160)

Add robots.txt with a sitemap of both languages, an x-default hreflang,
Open Graph site name and locales, X image alt text, SoftwareApplication
structured data and a root favicon.ico. Shorten the English description
to fit search results. Mark the pages.dev mirror noindex and cache
hashed assets for a year through Cloudflare Pages headers; the
not-found page now links its stylesheet with a hash too.
---
 site-src/README.md     |   4 ++++
 site-src/how/stamp.mjs |   2 +-
 site/404.html          |   2 +-
 site/_headers          |  25 +++++++++++++++++++++++++
 site/favicon.ico       | Bin 0 -> 6109 bytes
 site/index.html        |  39 ++++++++++++++++++++++++++++++++++++++-
 site/robots.txt        |   4 ++++
 site/sitemap.xml       |  17 +++++++++++++++++
 site/zh/index.html     |  37 +++++++++++++++++++++++++++++++++++++
 9 files changed, 127 insertions(+), 3 deletions(-)
 create mode 100644 site/_headers
 create mode 100644 site/favicon.ico
 create mode 100644 site/robots.txt
 create mode 100644 site/sitemap.xml

diff --git a/site-src/README.md b/site-src/README.md
index 4d50284..f431b96 100644
--- a/site-src/README.md
+++ b/site-src/README.md
@@ -14,3 +14,7 @@ npx wrangler pages deploy site --project-name askkey --branch main \
 Wrangler reads a Cloudflare API token with Pages write access from `CLOUDFLARE_API_TOKEN` and the account from `CLOUDFLARE_ACCOUNT_ID`. Never put the token in a file, an argument or a log.
 
 Before deploying, run `npm run stamp` in `how/` if any CSS or JS changed, so pages never pair with a cached old file, and check both pages in a browser.
+
+## Search and sharing
+
+`site/robots.txt` points crawlers to `site/sitemap.xml`; update its `lastmod` dates when the pages change. `site/_headers` sets Cloudflare Pages response headers: the `askkey.pages.dev` mirror is marked `noindex`, hashed stylesheets, scripts and fonts are cached for a year, and pictures for a week. Each page carries its canonical URL, `hreflang` alternates, Open Graph and X card tags with its own share image (`site/assets/og-*.jpg`), and `SoftwareApplication` structured data.
diff --git a/site-src/how/stamp.mjs b/site-src/how/stamp.mjs
index f6d444a..8dcbef2 100644
--- a/site-src/how/stamp.mjs
+++ b/site-src/how/stamp.mjs
@@ -6,7 +6,7 @@ import { readFileSync, writeFileSync } from "node:fs";
 const site = new URL("../../site/", import.meta.url);
 const files = ["style.css", "motion.js", "how/how.css", "how/how.js"];
 const hash = Object.fromEntries(files.map((f) => [f, createHash("sha256").update(readFileSync(new URL(f, site))).digest("hex").slice(0, 10)]));
-for (const page of ["index.html", "zh/index.html"]) {
+for (const page of ["index.html", "zh/index.html", "404.html"]) {
   const url = new URL(page, site);
   let html = readFileSync(url, "utf8");
   for (const f of files) {
diff --git a/site/404.html b/site/404.html
index e60184a..81db57e 100644
--- a/site/404.html
+++ b/site/404.html
@@ -6,7 +6,7 @@
   <title>页面不存在 · Page not found — Ask Key</title>
   <meta name="robots" content="noindex">
   <link rel="icon" href="/assets/favicon-64.png" type="image/png">
-  <link rel="stylesheet" href="/style.css">
+  <link rel="stylesheet" href="/style.css?v=6a97785f0c">
   <style>
     .lost { min-height: 100svh; display: flex; flex-direction: column; justify-content: center; align-items: center; gap: 22px; padding: 48px var(--gutter); text-align: center; }
     .lost img { width: 72px; height: 72px; }
diff --git a/site/_headers b/site/_headers
new file mode 100644
index 0000000..9cbadd8
--- /dev/null
+++ b/site/_headers
@@ -0,0 +1,25 @@
+# Cloudflare Pages response headers.
+
+# The pages.dev address is a mirror of askkey.sudohg.com; keep it out of
+# search results so the custom domain is the only one indexed.
+https://askkey.pages.dev/*
+  X-Robots-Tag: noindex
+
+# Stylesheets and scripts are linked with a content hash (?v=…), so a
+# changed file always has a new URL and the old one can be kept forever.
+/style.css
+  Cache-Control: public, max-age=31536000, immutable
+/motion.js
+  Cache-Control: public, max-age=31536000, immutable
+/how/how.css
+  Cache-Control: public, max-age=31536000, immutable
+/how/how.js
+  Cache-Control: public, max-age=31536000, immutable
+/fonts/*
+  Cache-Control: public, max-age=31536000, immutable
+
+# Pictures keep their names when they change, so cache them for a week.
+/assets/*
+  Cache-Control: public, max-age=604800
+/how/img/*
+  Cache-Control: public, max-age=604800
diff --git a/site/favicon.ico b/site/favicon.ico
new file mode 100644
index 0000000000000000000000000000000000000000..4fb738235644abf2d67b4a1ab316236a9c28122e
GIT binary patch
literal 6109
zcmai%MNk}ovaSawxVsJxfk6g>!wfD#g9LX81b1g}39iAN;O-vWgTo|1a0nXQU(P+7
zx42ce7cJFQUA_3K{%!yO0e}R+!vp*?I=}=X03h(6jPAd+85#h9fCK<=bN{#Y!3F@#
zF#v!lH5EB*42pjl09!#`TH{~*&jdVl)PJ7#^3@aoKul7QhJ5hK4oimE7|2i!2fk*u
zf>z(#b1W_Dhic$e@{{-wKp<DTbzW6Em|{eXYN609vyy}NkjZ*hpzKAlS2-S=BCa+h
zIs=AYQmXLIcIgz}>S$&C!r+*7V73^Lo@x5B@ovNKm7GjU5&c$DIE>ubdYckh-s|?H
z#a25xY*xZlU}JmugZG9H6mt6IC~5L`I{wrCkFPAAD&m&Xdy9tR_Z|VSf2mG+zuUdA
zKOeDVBbA|1CI^JO9~d}h+vjo2IK;>+g7g!IbOSt}uJ@!W9gmKdah98Zf4YNGB$H}+
zM2$6)DxVFz*5`qBl549~Y5ec1&FKAMQzkr%T$3lX#)Ydt7EY`i@a=ofHtC<%=(TJ5
zKgaxGE@ar#US#$p(=|z~mmFV2kXf$d33_(@fR@(udZ5z}FN1BweuY7xh7tJh9kQ$h
zyNS1EDFv2IHq<MqYt^zd`P~90p7>}j=<Tw=kv8CB)12&4i4Hn7Z+XS0c>I#Fg<NuF
zCDsQiXxW$>a<wgj@=dGr<+A-|pZ;9feDRcVq+E|h+aqAhSIs^N3Kc6?wb^k%I6)%|
zB5F-gjh}sVio3owM$+MSKQ^~fmLiXwjy3qnx%nrE=sn4w4rK$sh^1TFAG-Hxze5^B
zzhiPg1C9uIMtjlQkcn+A)HzrE$*bi`FI32k+JoSiqJhUg1RIOe6r^|e({@-|8tjZd
zP&bOA`Ar96`hXW%r(RIR9~Pt7UnP#Pg*xGm!MXPqm6%ceeO>xj4Q2Z3EMT%ocU_V(
z>|JYX+mzX#Y-zvR?M{AO(71WEbnh}P=7e4SslOpSsq*P^iL@-HAB@Zy)f5wmRTbvD
z{yt4eIRVdpeJXv8xLA`wILR_SM3Px({Rb&PK}JQo25JKPUr?s|*QWa)lwEy%t^fcu
zw*R6$l>RxET8n%na3(X;_w4k<LBFNsKtm7X4YWu;1<acNCV@-}jJ#GJm5BG84^da=
zp?hn$l|HV7ctmQqMOyTmlUdtVnTUH)7l;wsQ;b5i_UmLW-G4)bZ-1A^`n3D=p$9w_
zlxuOC-Ja~4`+6_&x*s@=u4E$&wpeMCQ+c`EX-7MewalnXxu0445HaaXBQhv7QW}FM
zD~X@TeLtZDN~}8b+gG7Bac-Ia0@5RadrxO?uVjd@erJdPMmF-$$DjtfG$wMYK5Py7
z(yBCMicB3-^4Ig(2&p=8qNlMJHkV`CkaP3IlEO5{%`Y1XHAU-gerL+LM}7!*Rzl3z
zI%kQsU){Rw4Scn}ZuU2}+!4awC9}aa-wRVN80{Bf6-$v+bDP`RQx|2|R-PLt6VdLq
zJ}>xI9TS`o)`S~1>NNU#lasdu(z|cwZunjymZEs{!D6j#`&!DO*txc)bT65)Umq03
zSTH%UD25bJY4c+rliq7c(2qC0q=@i~FPD$Sr%G`MQ2*Q-f!o6D{65E1Y`xK8F~{_3
zCXGAI)M|FgLSET)@AmJwzDRAy@4s0!Gq~~b<~|tCa(bq_=?=y@CyzgBc1{AT>tzbn
z#rtIh7Obn^iiyJ89tR>yX@m?3U4VClS;-lfhbP8Q_8XQVy_Q={l*cyVlac{g<A^Rp
zL~krtYfID8yg2RvT;+#{m04z}zHSr?AA}{h?X);Q<Wy#L2|4Ye+<xiuVUN5T{HxPD
zk2+7$nVVVE4|m4jrppWYS$G+pg6gPLJ*M8TQCrH2lD$=0YQ|G;B5i)2#EuP&yxhtf
z&g{zQK=mT7_$!Jn*-AV@uNoVPNpzWz&P|(Oz`i^2@MjR)59<EceX=(X@$5%Jf!>r3
ziVo(Yc|I_zJmPE8Cg~m2=Yh80r_Q?=@h^HGlp~JgH^YVuC;*Ss^&*7rr7P>(^EHQj
z<~Bb9rCK1bAcgBsRB1$o?JJw?{%^1l-TjuuF<(J)zh~|M527qurpcZ!#_ojorJu_M
z63WBybS9!IF$}z=^zDZkl@RdyQf({>&b9Jz1Cb2hDSPkm@8$Z&-j|(?yjKN!z?}NO
zGzo}Bx1ze|ERJka5CVxA)G@UxGf{eyxlr>PmTd$o-w`bRig%<gX@2yME~8~3l=s1Q
znNT&^qH{RcywjpB^4J8~a58DjVo_<Tl?*DNa9No<17<uC+`4|Duo9o#1H{)VL5V%L
z^L&6QEfayNlJn?rvZ{P1I}?f|V$>+`hyLcTpd(4(s*5(Nk<A9sg_3hgTWB%lwa<}E
zE?M|`qDHFci9=a9SpSiH;8-1z&EZq*(y5L-1~-0Nu7N-DtYrw3ZP2WCBR2ATo^40^
zzz6Ln1L!Kyz>E6+(V-|ilW7If7F^$H+;;|#zp^;_@{OUde80kY7@W-`j){=+L%NBV
zbX<~~?J!uP5Z)Vw31!_opDzk6Ppt}WgYA{V4>~VUH5_?tHQwt*)nn4R<xUMaS@l1d
z3w;dh3hBbKag_Dg{P?8lnMg}nf)(s%FX37%Mk*FwtX{T%lgB{&#5mVbUL1LbQRk|)
zj+f>_$Mg9@W>GeAsDH`)LGu%u2Y06<smz)1_yzuxh}>oz+Clq`D;bZ|gaE9YdbO2s
z?yZkgD(c2{2p`y$`Arj&oqL-gJ&=@pLc=E`pXY{m$|-c$4r`S*K%VzOqqC=LXrlwW
z*HjY@5lM+Sr8--WB2@^EVY8X1ts)QxhbzhlH?b7lKBeqQ4mSi?-cPkA8Tnz03mS+=
zpbj~%hU*6s)8CeVjeZ#&oFkjX2@=fT{-mX#wX{@oqWgFOPPr;gSzezp7|rngL?-dV
zye`spl@$2&N4N5>AqQ3?m8*%g)~xaBps)4CYT;1FvwuqHC!a)Q=euVP3Pwut@#8D3
zQX{pl7m61_aJsv6x$`>%7<$Opwq?6wWwW}BUI(F})NC_edi;T!lZCzhr#q%SnCa>2
z$SCe{$<JHWuRyRFTkAIaDgl|3%0_Hwq+<bds>dwrsGtIPuBA-p7rHV9`4@1)>mGb^
zEr2=jRfJKp2$!O}l!6pv=!zu?3%pVO<g+~{22oL?J<;2gkkY9-%oJ~Ht<C<JsL!UZ
z&>=f#3B-x6jAn6FC>#pO!BKt>n;|&jr)O$H*;}Zk$!FHdYi+&nuB?SoTW04!9BdMy
zZcUTVd?Lj?6Y@Jh?FSJtKlx;ir9blKauq?`pS!ltF06#v<AztWX6*+ZVQPl>7D*V-
z9Ldrk<9m-bm-9=YNc54YS2V{cBEAPs?BiMIRZ{Bx0=2CZW%s9(9lRm8H(126H<gN%
z_0ToNI1v+VmNQ!W9>L3k=H7$Xs|h*agmVFA>N!o%;mdN%O14WJLb%ugK~LDsioi%7
z2OiBJ$aeQN{>IqI$m*%Gm>}T)P}u*RlidHKusVqM5&w=z$bS{~<fHF@6!z7Be{!<B
zv-MXGt-VsE*#(4nffXMch8hyj8r4$B!%j?l5vGldZ>dkCO;=z3N`~hb<3UW=TpXFt
z6b=g_v*(=ED4267h%fQIT^EUWown|Aweo1aX*L`j3{}`$Z+Erc^NZiOeWXDW?R}<o
zn6v}C=9yWU4fl(@Y~R^DQrH+FKKJ6&<nJG^`m2rjsDe);_>xCeq_e97HzH2X*O>&S
ztonC%7I{%t$ZLUPjshkO8!8UW`nvfhHxitL*(<^1?XC`O-QB;~9P(48T4PwsX+64J
ze%yr_LyBu$?v1(Hcya~Y$!AgZ;6Z*8CYpV2fGi{#j7Z=#!Z1Kaokql~J_BLm9D^J1
zqdn8q%Q3jr?(Lajvo-%MePQZLo^@>yX}}Oh;Y6*|;jg?G$mdfSu1I6+X4x_auM{#t
z<DRrk%&sm|q=`$PZeJRV6k^j7G_g`gA4YW?s1Fp_X;YJ~md4#1BlYd&xtqFRhio@K
z5!W=n6iHOg=wH$AdyuZwbIDo+j|NE-WWiDp+HFTYo4+~%>yd=eJYMj2GIC1FwclaG
z9YS*cj*k)8lM67(7Es~J`P7vMI=}F5Yr^8ls{H+>IsWZuxF6Una5h9+?+{-Q3}=YO
zteXZbBg9HttvK^Ug$pc*JH9q;ryuSdRyd4N*UegJf1Iw^Z}uB2-fmR=TCgyXNCNU=
zLN+BI%)~j-#a$i#yIy%)^<qw2$QPeKNKcISAoWThv;Q*Qa`rU(-f*OMN7Nb(Q`Frz
zHWade+)1L=)GsqWh<cwqsNbXc)@S#5#e*@X+0oF$LFYC+YpQe#byocx@17f9bv64V
zU6@DVExZOa*=e=mZkHwr5>qyz)eGiV0&||UR*R%p9~s>Zfb>NSX8UN(7D6Mx22ta5
zjs<n$88oU8H|KtBlDVDi(v&GIF^8cjQ30gwsoiJFE5lfFrQ%;rJN#X6rP$h~^D)x$
zJuD5Z3AF3R7mJ$2PsI2@aOapE3_YJZ0yMThfB$Ih8n?$&-Ih9ssin1n_Gr&)mQ+DA
zf>HE8O+j7Qx=37f^_bISdK~$clxom@f;Jo{ra$QDACSRt?nlgfe6l4)tk4M=ii=3X
z;VDxFw8f?5cT+w?`l|hNFVU@WNoXn$a%x9ooMmpD*~IPsxO#;K^#l-&K9ZNiQBFZ?
zNsIa<6^4~qYT@^2>e9&Rbew|?!NDt$L5du6JFlJ)r#z5f2kU$GIOcNY*^d*dR6lR_
zz2}2Zk`8Q2djFhbJlW3A8wF?R^AioKvE_>jes_>Y*bXaFL@0x#An_0ZSsTotLEB^&
zVYYxdEfq}dG(2nd3iRvnC(=zKw_C-!yRjpWTu*9@qlg>H_KzfbN^cTbP4L^g&oktX
zf(-H*RG8@4`!H3|W+ZT_ro!#S5t^SzW|1iS*m2YdGSE|Y;3!8s<4ETAN3lE3LgX+C
zMoi_V6ug4Zl(R&L0uw<4sFV8*;jpp=owsP94hmM@y4j=Rd9_I+#Lf#2d4UZ;Ioa`h
znyO=Ztp=R*jeyJ9H?Kk$`3OV^&1=X+ctl=ZF$4rDFS?tWK}?;{kS!{|zhQlEmV+W%
z`iZHzIRyKIqD@I^5%)vahX06V!>)GI$ui|CrQR6e|IC6%*ac-Ge;*XZ1EZHFplPpw
z21PN>2S8}O2cOP28R~`yG`85(R}=s$hYlH<HHefUYr|Q6!Z-WR{4lI{(Y~e(LJ4gN
z!lKB6A%iFipMiLDkT>;R2WFwX*zzRNm?jtdeV`7Kr%49Z1|q97?TnGrFuO_Fr@6)g
zcOn=+9O?3?He?=W>;1d$Z&DwcL{NndP`wZHC2Ju(#6J>uB=oR!>jdZu+>=B8A%@bs
zY1kK|6LKqoYEHH~JvAD5fzp<v>I+%WZ>9GcvD~y5^a4^!-&9QWiJXP3HxnzXm#f|P
z(WNB~NPSaw&{!CsgSth)<K`sM4T@`Un+^-`IZS?sIpsiBfFWA^JCu$Qt1sY%1ujNS
zq9nNh1VgOgLcs+gW~6V(huMv$BG4Rq?|Qlt>53T?aayO*Ni7$VpzHV{r1c?S6IG~L
zjC5iR`R1KqTh|*Fnjde<#pn5CK7W-V5INXp`M%^E6zA3FZA9w9`w6vy1n*sOG`ea2
z_^zMi1cd>yInmz{b=Vy`&1^q#{VxgQM=e<EBJA@Sg4E-BjD6e#<&2cyQD(VnL!@d3
zO4qI)_u_AR1QuB*l4)Y@PEQ~uvH^_`&0T;=Y>AQ{@$ZRHEQK}sB=g&#v$|DCLxm$j
zw=X|;3XJxJZE`F<xb3jJxRW9u_X)k`8oA9HC;KbH{LkIr+hUtk2Evh7wVptH4ZZ=c
zT_{&V_A8gzW=PuywHMK@JGpTrBZQ4!RDCaY_w~O&HhN;9y@02=TUfMdotHd*n=gIB
zo|BdJx!Ok&LFxk6kuP=nG$BXC?5SydZZjW-|3<PP3(#N5>e`y&5gf<cqWL?e;xY*`
zdKzGLUXZl4{njBJZ_0VD^G4H<Z_MU!SEbOzn~@-Qeup=N6`dkcYmu{AOy~72C?3u$
zCmJKo+_~9<Ra_B=A2#TM&!FeY;}Vxo+Dn+i-w%ty|CBgEln*YK=ee)COmyQ}a0Fcl
z!BQ|nijp||fP@TM1L^mYOXKcP!U-g^&$PM-81_&ZF5=?ZZz@<<XFZ|NmBU@@5JtPl
zqxpXK8^|G<v$;>u?^!O!GJh;Ck9>U)iURbz4IAfx(v*&OLE*>4%4GTR^(e1CdDnhP
zMqTP_=x7Q~3hTk!i2LjG1c?p=!QWsfg9vIW$%p+7$wi8Tk1ZI@WAjMTUy;;mpOLHh
zXYC#(uUR+cM++@-E7~Z(1V=&3zg|Vn!eT3~suhD8w12pVtq5lLJ|wO$;%<YL;SU(n
zUCU8iFg*|I!Usm$rV1f|@U>>041zyARgwT{?rmyX`gJz8n9J^$D3p2{1{*E0xc)tx
z-O*Y60&xcDEm4@yuL57a(A;)>pS=<JmS0FmuW#FI9wX#~ii7}Nzg=0^{qWli`#hZr
zFfZ-3fdZqaADs|s>e^A<GUsgV`FO|YY07rZ6h#<+1;sIipq`*(j9JhL)ga9CVamAX
zoy9P%c-sI3{e@yV@&kG)s-*mPI(cw8Zr;>l{rSfwjXp6(P8uwJ*Uq@{g9C|P$~Z91
zH0l_`*+MPwIkWH4F}RUrNoWH;Q4a!zdjxN|@f;u0qVaC~MycT{tP(3m6@5M$je7eb
z6gHMP{cSv@=io1C7^PzQmlVJ>^d0y(voZm@Il(>rhxZetX*mE>n;Ca;{pXis_dIEV
zMp6O3x;eZk&u0_C!5^VSc(&}gvDKOtUg-BS731nksg|ly#!Q#MVtrakkw0`B_4xO<
z;_;_$psjDNCMCU2yqlwbl4U<bx(I#DY9)oLle?L*@1*s{E1*|0%Na0^zOv(dzYuX@
z0{lI6$Y@<VQh+N@^r~Irdf>a#o;@tE_$410?ImoI`z=)=BdSCP&D4ANEH&GLf1_sH
zM?WsNQD*5PqKUy-eJO%ZCfVw_I0yzR^EhgfFvG3^C&l21h~Uqyg{46cbHrrpooG2K
zXbvU}bB_UMAwA6joRcPTYi=lnvMB2+iYDwc;D|hBs^UI!mZ_T{?rH4Dl~mzsGoZ8G
zqWy>14=BzGmASo^&WD!WW)x#?*t=N5fxXz(LrMj?KIkX30mL(+O-OSZ@*1ZO38cDp
zZ1wcRF$9wChoUhH=WWEg_1`u)X2-6iW{Oh;GCs**QY}g{@a3GR4e7(v*NoZ;tc=E-
zjwkR)VldXppWqV^+^X*{Q@G}@61Tv^s6^>lT~=MPN$VOsV}riyD*_qKBYoyY6-txS
z^rYkb1o2|K3fuD=%>8G-n)T<Nf@hfm{vouKPRsormWfn3*}W{L-3}LJy)TNG5leKl
zNn>3a@<a^LqnKPcga<Z5+_H+K=^#-%m!zpYXUKC%eBh(g8OA{!2(BH3R^zvdc<g@^
ztZ=^>+w>i!ire2i9waPt=K|K{(e$RuV9ZV)gW-P494Fg7ySSy7tYxp1dDE`O(Sm98
zi@J=3##7b*w2;r~tOJpwyU5!Be1ulcA=zyVe?l&O@2%e{uzew0L^8sA>lSB1rT$x<
zTnS%f?r-TpZ?#jg!OE^6bY)lAlFD|UHMoG{qhbnSx`u%fAxEj+0N9n}8%o*D;EiRs
z=b|z1<FBh5_uNn%rYBP|?j^#)$+({7N#zDZQo4z0_35`J(5Yq4MYkzAXy4-~l79uK
zp_adP-Q~xgD=KIRqr_Inr;+*ODd)3=yaP5>1JD`LPU4QSugVqEMn+;w7oVM>?_9Rk
z#FCJPLBt0@Pmv5~Qc?p_ex+#o!=qg|nTu)j{XE-_fmO!SD=^aZ>zWj2huiXLVskw3
zsqLM2LRY2F5-!Dz9zdZl?l$b9zQ_I6TX73%W~c@6$+-URlJdn9-isg*U6}^q5DEML
HKd=7>rDTUg

literal 0
HcmV?d00001

diff --git a/site/index.html b/site/index.html
index cd8bb3f..a33f770 100644
--- a/site/index.html
+++ b/site/index.html
@@ -4,20 +4,26 @@
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
   <title>Ask Key — the Mac key manager for AI</title>
-  <meta name="description" content="Ask Key is the Mac key manager for AI. Your AI agents look up the keys they need without you pointing the way; everyday keys pass while sensitive ones wait for your approval; keys go only to the program, never to the AI. Free and open source.">
+  <meta name="description" content="Ask Key, the free Mac key manager for AI. Agents find keys themselves, sensitive ones wait for your approval, and keys go only to the program, never to the AI.">
   <link rel="canonical" href="https://askkey.sudohg.com/">
   <link rel="alternate" hreflang="en" href="https://askkey.sudohg.com/">
   <link rel="alternate" hreflang="zh-Hans" href="https://askkey.sudohg.com/zh/">
+  <link rel="alternate" hreflang="x-default" href="https://askkey.sudohg.com/">
   <meta property="og:title" content="Ask Key — the Mac key manager for AI">
   <meta property="og:description" content="The Mac key manager for AI. AI agents find keys themselves, sensitive ones wait for your approval, and keys go only to the program, never to the AI.">
   <meta property="og:url" content="https://askkey.sudohg.com/">
   <meta property="og:type" content="website">
+  <meta property="og:site_name" content="Ask Key">
+  <meta property="og:locale" content="en_US">
+  <meta property="og:locale:alternate" content="zh_CN">
   <meta property="og:image" content="https://askkey.sudohg.com/assets/og-en.jpg">
   <meta property="og:image:width" content="1200">
   <meta property="og:image:height" content="630">
   <meta property="og:image:alt" content="Ask Key: No key leaves without your seal. The Mac key manager for AI.">
   <meta name="twitter:card" content="summary_large_image">
+  <meta name="twitter:image:alt" content="Ask Key: No key leaves without your seal. The Mac key manager for AI.">
   <meta name="theme-color" content="#ffffff">
+  <link rel="icon" href="/favicon.ico" sizes="48x48">
   <link rel="icon" type="image/png" href="/assets/favicon-64.png">
   <link rel="apple-touch-icon" href="/assets/apple-touch-icon.png">
   <link rel="preload" href="/assets/hero-desk.jpg" as="image">
@@ -26,6 +32,37 @@
   <link rel="stylesheet" href="/how/how.css?v=68de86ac7c">
   <script type="module" src="/how/how.js?v=28dba282cc"></script>
   <script src="/motion.js?v=09073b35d1" defer></script>
+  <script type="application/ld+json">
+{
+    "@context": "https://schema.org",
+    "@type": "SoftwareApplication",
+    "name": "Ask Key",
+    "alternateName": "请旨",
+    "url": "https://askkey.sudohg.com/",
+    "description": "The Mac key manager for AI: agents find the keys they need, everyday keys pass, sensitive ones wait for your approval, and keys go only to the program, never to the AI.",
+    "inLanguage": "en",
+    "applicationCategory": "DeveloperApplication",
+    "operatingSystem": "macOS 14 or later (Apple silicon)",
+    "isAccessibleForFree": true,
+    "offers": {
+      "@type": "Offer",
+      "price": "0",
+      "priceCurrency": "USD"
+    },
+    "downloadUrl": "https://github.com/sudoHG/AskKey/releases/latest/download/AskKey.dmg",
+    "license": "https://github.com/sudoHG/AskKey/blob/main/LICENSE",
+    "image": "https://askkey.sudohg.com/assets/icon-256.png",
+    "screenshot": "https://askkey.sudohg.com/assets/og-en.jpg",
+    "sameAs": [
+      "https://github.com/sudoHG/AskKey"
+    ],
+    "author": {
+      "@type": "Person",
+      "name": "sudoHG",
+      "url": "https://github.com/sudoHG"
+    }
+  }
+  </script>
 </head>
 <body>
   <header class="hero">
diff --git a/site/robots.txt b/site/robots.txt
new file mode 100644
index 0000000..223098d
--- /dev/null
+++ b/site/robots.txt
@@ -0,0 +1,4 @@
+User-agent: *
+Allow: /
+
+Sitemap: https://askkey.sudohg.com/sitemap.xml
diff --git a/site/sitemap.xml b/site/sitemap.xml
new file mode 100644
index 0000000..570b429
--- /dev/null
+++ b/site/sitemap.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9" xmlns:xhtml="http://www.w3.org/1999/xhtml">
+  <url>
+    <loc>https://askkey.sudohg.com/</loc>
+    <lastmod>2026-10-13</lastmod>
+    <xhtml:link rel="alternate" hreflang="en" href="https://askkey.sudohg.com/"/>
+    <xhtml:link rel="alternate" hreflang="zh-Hans" href="https://askkey.sudohg.com/zh/"/>
+    <xhtml:link rel="alternate" hreflang="x-default" href="https://askkey.sudohg.com/"/>
+  </url>
+  <url>
+    <loc>https://askkey.sudohg.com/zh/</loc>
+    <lastmod>2026-10-13</lastmod>
+    <xhtml:link rel="alternate" hreflang="en" href="https://askkey.sudohg.com/"/>
+    <xhtml:link rel="alternate" hreflang="zh-Hans" href="https://askkey.sudohg.com/zh/"/>
+    <xhtml:link rel="alternate" hreflang="x-default" href="https://askkey.sudohg.com/"/>
+  </url>
+</urlset>
diff --git a/site/zh/index.html b/site/zh/index.html
index 49ea882..1c6a5de 100644
--- a/site/zh/index.html
+++ b/site/zh/index.html
@@ -8,16 +8,22 @@
   <link rel="canonical" href="https://askkey.sudohg.com/zh/">
   <link rel="alternate" hreflang="en" href="https://askkey.sudohg.com/">
   <link rel="alternate" hreflang="zh-Hans" href="https://askkey.sudohg.com/zh/">
+  <link rel="alternate" hreflang="x-default" href="https://askkey.sudohg.com/">
   <meta property="og:title" content="请旨 Ask Key：给 AI 用的 Mac 密钥管家">
   <meta property="og:description" content="给 AI 用的 Mac 密钥管家。AI 自己找得到密钥；普通密钥直接放行，敏感密钥由你审批；密钥只交给目标程序，AI 看不到明文。">
   <meta property="og:url" content="https://askkey.sudohg.com/zh/">
   <meta property="og:type" content="website">
+  <meta property="og:site_name" content="请旨 Ask Key">
+  <meta property="og:locale" content="zh_CN">
+  <meta property="og:locale:alternate" content="en_US">
   <meta property="og:image" content="https://askkey.sudohg.com/assets/og-zh.jpg">
   <meta property="og:image:width" content="1200">
   <meta property="og:image:height" content="630">
   <meta property="og:image:alt" content="请旨 Ask Key：取用密钥，先来请旨。给 AI 用的 Mac 密钥管家。">
   <meta name="twitter:card" content="summary_large_image">
+  <meta name="twitter:image:alt" content="请旨 Ask Key：取用密钥，先来请旨。给 AI 用的 Mac 密钥管家。">
   <meta name="theme-color" content="#ffffff">
+  <link rel="icon" href="/favicon.ico" sizes="48x48">
   <link rel="icon" type="image/png" href="/assets/favicon-64.png">
   <link rel="apple-touch-icon" href="/assets/apple-touch-icon.png">
   <link rel="preload" href="/assets/hero-desk.jpg" as="image">
@@ -25,6 +31,37 @@
   <link rel="stylesheet" href="/how/how.css?v=68de86ac7c">
   <script type="module" src="/how/how.js?v=28dba282cc"></script>
   <script src="/motion.js?v=09073b35d1" defer></script>
+  <script type="application/ld+json">
+{
+    "@context": "https://schema.org",
+    "@type": "SoftwareApplication",
+    "name": "Ask Key",
+    "alternateName": "请旨",
+    "url": "https://askkey.sudohg.com/zh/",
+    "description": "给 AI 用的 Mac 密钥管家：AI 自己找得到密钥，普通密钥直接放行，敏感密钥由你审批，密钥只交给目标程序，AI 看不到明文。",
+    "inLanguage": "zh-Hans",
+    "applicationCategory": "DeveloperApplication",
+    "operatingSystem": "macOS 14 or later (Apple silicon)",
+    "isAccessibleForFree": true,
+    "offers": {
+      "@type": "Offer",
+      "price": "0",
+      "priceCurrency": "USD"
+    },
+    "downloadUrl": "https://github.com/sudoHG/AskKey/releases/latest/download/AskKey.dmg",
+    "license": "https://github.com/sudoHG/AskKey/blob/main/LICENSE",
+    "image": "https://askkey.sudohg.com/assets/icon-256.png",
+    "screenshot": "https://askkey.sudohg.com/assets/og-zh.jpg",
+    "sameAs": [
+      "https://github.com/sudoHG/AskKey"
+    ],
+    "author": {
+      "@type": "Person",
+      "name": "sudoHG",
+      "url": "https://github.com/sudoHG"
+    }
+  }
+  </script>
 </head>
 <body>
   <header class="hero">