@@ -1,14 +1,6 @@
 User-agent: *
 Allow: /
 
-# The Starlight/@astrojs/sitemap integration generates sitemap-index.xml on
-# every build, so it is always current. A hand-written public/sitemap.xml used
-# to ship alongside it with all 13 lastmod values frozen at 2026-07-02, and
-# this file pointed at that stale copy rather than the generated one (B-24).
 Sitemap: https://netscli.com/sitemap-index.xml
 
-# A curated map of this site for answer engines, generated from the same
-# content the pages render (src/pages/llms.txt.ts) so it cannot drift from
-# them. Not a standard robots.txt directive -- a discovery hint, since the
-# convention has no other advertised location.
 # llms.txt: https://netscli.com/llms.txt
@@ -70,7 +70,11 @@ const groups = [
                   {alternatives.length > 0 && (
                     <div class="alts">
                       {alternatives.map((e) => (
-                        <div class={`alt${e.command ? ' has-copy' : ''}`}>
+                        /* `data-copy` is the command and nothing else. Without
+                           it the copy button falls back to the row's text,
+                           which is the label glued to the front of the
+                           command ("Scoopscoop bucket add ..."). */
+                        <div class={`alt${e.command ? ' has-copy' : ''}`} data-copy={e.command}>
                           <div class="alt-label">
                             {e.label}
                             {/* A caveat about a command belongs by the label;
@@ -254,6 +258,9 @@ html[data-theme='light'] #install .reco{
   font-family:ui-monospace,"SF Mono",Menlo,monospace;font-size:.82rem;
   color:var(--ui-text);overflow-wrap:anywhere;word-break:normal;
 }
+/* A command can be more than one line (Scoop's bucket add and install), and
+   the break has to show: collapsed into a space it reads as one command. */
+.alt-cmd:not(.install-download){white-space:pre-line}
 /* Reserve for the copy button, which only command rows have. It used to sit
    on `.alt-cmd` unconditionally, so a download row reserved 50px for a button
    that is never rendered there -- dead space the Download button was then
@@ -457,9 +464,11 @@ a.install-download:focus-visible{
   /* `.alt-cmd` too. It was left on `overflow-wrap:anywhere`, so while the
      recommended command truncated to one line the alternates below it broke
      mid-token across four -- the Scoop line did exactly that at 375px. Same
-     treatment, same reason: the copy button carries the full command. */
+     treatment, same reason: the copy button carries the full command.
+     `pre` rather than `nowrap` so a two-line command keeps its break; for a
+     one-line command the two are the same. */
   .alt-cmd:not(.install-download){
-    white-space:nowrap;
+    white-space:pre;
     overflow:hidden;
     text-overflow:ellipsis;
   }
 
@@ -21,7 +21,7 @@ Interface layers use the core `Ops` facade instead of implementing their own pro
 Dependency flow stays one-way:
 
 <svg viewBox="0 0 720 300" role="img" width="100%"
-     aria-label="Dependency graph: netscli (CLI, TUI and serve) depends on netscli-mcp and on netscli-core; netscli-mcp depends on netscli-core; netscli-gui depends on netscli-core; netscli-core depends on none of them"
+     aria-label="Dependency graph. netscli (CLI, TUI and serve) depends on netscli-mcp and netscli-core. netscli-mcp depends on netscli-core. netscli-gui depends on netscli-core. netscli-core depends on none of them."
      style="max-width:720px;height:auto;margin-block:1.25rem">
   <defs><marker id="dep-arrow" viewBox="0 0 10 10" refX="9" refY="5" markerWidth="6" markerHeight="6" orient="auto-start-reverse"><path d="M0 0 L10 5 L0 10 z" fill="var(--sl-color-gray-3, #8b919b)"/></marker></defs>
   <g fill="none" stroke="var(--sl-color-gray-3, #8b919b)" stroke-width="1.5" marker-end="url(#dep-arrow)"><path d="M170 86 L170 112"/><path d="M300 52 L360 52 L360 210"/><path d="M170 176 L170 196 L250 196 L250 210"/><path d="M540 86 L540 196 L470 196 L470 210"/></g>
@@ -78,6 +78,7 @@ Exact method signatures can change as operations gain richer structured data. Pr
 | `dns` | Record lookup and reverse lookup behavior. |
 | `mdns` | Local mDNS/DNS-SD service discovery behind the `mdns` feature. |
 | `arp` | Local neighbor cache and MAC vendor enrichment. |
+| `oui` | MAC vendor lookup from an IEEE list embedded in the crate. Set `NETSCLI_OUI_PATH` to a `.json` or `.json.gz` file to use a newer or filtered list instead. |
 | `stats` | Local interface traffic counters. |
 | `pcap` | Optional capture execution and packet parsing behind the `pcap` feature. |
 | `db` | SQLite persistence for host records and scan history. |
 
@@ -8,7 +8,7 @@ head:
 
 NetsCLI Desktop is the interactive interface for reviewing network results. It is built for users who want tables, filters, row details, history, exports, and multiple operation tabs open at once.
 
-<img src="/assets/gui-scan.png" width="2000" height="1125" alt="Port scan results in NetsCLI Desktop, with the details pane open below the table showing the banner and raw response for the selected row" />
+<img src="/assets/gui-scan.png" width="2000" height="1125" alt="Port scan results in NetsCLI Desktop, with a Version column and the details pane open below the table showing the banner for the selected row" />
 
 *Port scan. The details pane carries the banner, headers and raw response for the selected row.*
 
@@ -109,7 +109,7 @@ The pane can be collapsed, resized, or expanded to fill the content area.
 
 ## History and exports
 
-History records recent operations so you can reopen or repeat work. If history persistence is enabled, command history and result snapshots survive app restarts.
+History keeps your last 20 runs, with their results, so you can reopen or repeat them. Very large results are skipped. The history survives app restarts. To stop keeping it, turn off **Save History** in Settings, which also clears the runs already saved.
 
 Export options:
 
@@ -133,11 +133,12 @@ Settings control:
 - Network interface used for local status indicators.
 - Address family preference for the selected interface display.
 - Traffic unit and precision display.
+- MCP server setup, which gives you the config to paste into your MCP client, or the command to install `netscli` first when the app cannot find it.
 
 ## Updates
 
 When the app opens, it checks GitHub for a newer release. If there is one, a
-notice appears in the corner. The check fetches one small file and nothing else. You can turn it off under **Settings → Release Notifications**.
+notice appears in the corner. The check is one small request. Installs that can update themselves fetch a small file from the release downloads, and the rest ask GitHub's API for the latest release. Nothing else is fetched. You can turn it off under **Settings → Release Notifications**.
 
 Where the app can update itself, the notice opens a dialog with the new version's release notes and three choices, **Install and restart**, **Later** or **Skip this version**. Nothing downloads until you choose to install. The
 update is checked against NetsCLI's signing key before it is installed. On
 
@@ -252,9 +252,9 @@ A checksum only proves the file matches its own sidecar, and both come from
 the same place. The signature is what ties the asset to the workflow run that
 built it.
 
-Every asset is signed with [Sigstore
-cosign](https://docs.sigstore.dev/cosign/overview/) by the release workflow,
-and the signature is tied to the exact run that built it. Each asset ships a
+Every CLI and desktop asset is signed with [Sigstore
+cosign](https://docs.sigstore.dev/cosign/signing/overview/) by the release workflow,
+and the signature is tied to the exact run that built it. Each of those assets ships a
 `.sig` and a `.pem` beside it:
 
 ```bash