Site Publisher

Publish and manage password-protected branded websites on Cloudflare.

Prerequisites

Credentials must be configured via one of:

scripts/credentials.json with gateway_domain + admin_token (Claude.ai)
Environment variables WEB_FACTORY_DOMAIN + WEB_FACTORY_ADMIN_TOKEN (Claude Code)

Operations

Publish a New Site

Verify the build directory contains index.html:
```
ls ./build/index.html
```
Collect from the user:
- Brand slug (subdomain): e.g. bluewaves, mycompany, acme-corp
  - Must match ^[a-z0-9]([a-z0-9-]*[a-z0-9])?$, 1–63 characters
  - Suggest options based on context; validate format before proceeding
- Site name (URL path): e.g. q1-proposal, annual-report (lowercase, hyphens)
- Title: Human-readable title for the site
Check availability:
```
python3 scripts/site_api.py info {brand} {site-name}
```
A 404 means the name is available. Confirm with the user before publishing.

Publish (with optional brand kit for login page styling):

# Default brand (no brand kit)
python3 scripts/site_api.py publish ./build {brand} {site-name} --title "Title"

# With brand kit (optional — styles the login page)
python3 scripts/site_api.py publish ./build {brand} {site-name} \
  --title "Title" \
  --brand-kit plugins/docs-factory/skills/brand-{brand}/assets/manifest.json

Report to the user:
- Live URL: https://{brand}.bluewaves-athena.app/{site-name}/
- Generated password (4-word passphrase)
- Number of files uploaded

Update an Existing Site

Replace the content of an existing site without changing the password:

python3 scripts/site_api.py update ./build {brand} {site-name}

Download Site Files

Download all files from a published site to a local directory:

python3 scripts/site_api.py download {brand} {site-name} [output-dir]

Default output directory is ./build. This creates a build directory that can be modified and re-published via update.

List Sites

List all published sites, optionally filtered by brand:

# All sites
python3 scripts/site_api.py list

# Filter by brand
python3 scripts/site_api.py list {brand}

Get Site Info

View metadata for a specific site:

python3 scripts/site_api.py info {brand} {site-name}

Delete a Site

Remove a site and all its files:

python3 scripts/site_api.py delete {brand} {site-name}

Rotate Password

Generate a new password for a site (invalidates existing sessions):

python3 scripts/site_api.py rotate-password {brand} {site-name}

Reports the new password. Share with authorized users.

URL Pattern

Sites are served at: https://{brand}.bluewaves-athena.app/{site-name}/

Brand = subdomain (must match a Cloudflare DNS wildcard)
Site name = first path segment (lowercase, hyphens, no spaces)

Password System

Passwords are system-generated 4-word passphrases (e.g. coral-sunset-tide-2026)
Users never choose passwords
Passwords are shown once on publish and on rotation
Each site has an independent password and session cookie

Troubleshooting

See references/publish-guide.md for detailed API reference and troubleshooting.

site-publisher