Site Publisher

Publish and manage password-protected branded websites on Cloudflare.

Prerequisites

Credentials must be configured via one of:

• scripts/credentials.json with gateway_domain + admin_token (Claude.ai)
• Environment variables WEB_FACTORY_DOMAIN + WEB_FACTORY_ADMIN_TOKEN (Claude Code)

Operations

Publish a New Site

1. Verify the build directory contains index.html:

   ls ./build/index.html
   

2. Collect from the user:

   • Brand slug (subdomain): e.g. bluewaves, mycompany, acme-corp
     • Must match ^[a-z0-9]([a-z0-9-]*[a-z0-9])?$, 1–63 characters
     • Suggest options based on context; validate format before proceeding
   • Site name (URL path): e.g. q1-proposal, annual-report (lowercase, hyphens)
   • Title: Human-readable title for the site

3. Check availability:

   python3 scripts/site_api.py info {brand} {site-name}
   

   A 404 means the name is available. Confirm with the user before publishing.

4. Publish (with optional brand kit for login page styling):

   # Default brand (no brand kit)
   python3 scripts/site_api.py publish ./build {brand} {site-name} --title "Title"
   
   # With brand kit (optional — styles the login page)
   python3 scripts/site_api.py publish ./build {brand} {site-name} \
     --title "Title" \
     --brand-kit plugins/docs-factory/skills/brand-{brand}/assets/manifest.json
   

5. Report to the user:

   • Live URL: https://{brand}.bluewaves-athena.app/{site-name}/
   • Generated password (4-word passphrase)
   • Number of files uploaded

Update an Existing Site

Replace the content of an existing site without changing the password:

python3 scripts/site_api.py update ./build {brand} {site-name}

Download Site Files

Download all files from a published site to a local directory:

python3 scripts/site_api.py download {brand} {site-name} [output-dir]

Default output directory is ./build. This creates a build directory that can be modified and re-published via update.

List Sites

List all published sites, optionally filtered by brand:

# All sites
python3 scripts/site_api.py list

# Filter by brand
python3 scripts/site_api.py list {brand}

Get Site Info

View metadata for a specific site:

python3 scripts/site_api.py info {brand} {site-name}

Delete a Site

Remove a site and all its files:

python3 scripts/site_api.py delete {brand} {site-name}

Rotate Password

Generate a new password for a site (invalidates existing sessions):

python3 scripts/site_api.py rotate-password {brand} {site-name}

Reports the new password. Share with authorized users.

URL Pattern

Sites are served at: https://{brand}.bluewaves-athena.app/{site-name}/

• Brand = subdomain (must match a Cloudflare DNS wildcard)
• Site name = first path segment (lowercase, hyphens, no spaces)

Password System

• Passwords are system-generated 4-word passphrases (e.g. coral-sunset-tide-2026)
• Users never choose passwords
• Passwords are shown once on publish and on rotation
• Each site has an independent password and session cookie

Troubleshooting

See references/publish-guide.md for detailed API reference and troubleshooting.