Website

Always 200. Returns optional website payload (null if not created).

Create website + API key for the business, trigger provisioning, and return website only.

Takes no input beyond ``business_id``: the generator builds from the business's own backend content, so there is no design prompt to supply.

The image bytes; 404 for a screenshot of another business, or none.

The document as the owner attached it; 404 for another business's.

Store a document the owner attached for the site agent. With the private bucket: a PDF, Word, Excel, PowerPoint or text file, validated and converted at once (the answer lists the derived files and any ``warnings``); without it, text files only, as before.

Return the site's live public API key, in the clear.

404 while the feature flag is off; 404 for an unknown business or a business with no website; 409 when the site has no readable key yet. The key returned is the one the running site uses — revealing never rotates.

Direct collaborators (``status="active"``) merged with pending invitations (``status="invited"``). Direct affiliation only: org-inherited members (Keystone staff, the App) are asked out of the list at GitHub.

404 while the flag is off, for an unknown business, and for a business with no site repo yet.

Invite at push. Idempotent-friendly: an already-invited or already-active username answers 200 with ``already=true`` and a sentence saying so — repeats are clean answers, not errors.

422 for a blank or unknown username; 503 ``GITHUB_APP_PERMISSION_MISSING`` when the App lacks the Administration permission.

One endpoint for both shapes of "take their access away": sor cancels the pending invitation if that is what exists, removes the active direct collaborator otherwise. 404 when the username has neither.

The conversation's changes as a git log, newest first.

404 while the preview flag is off, and for a business with no website row. A website with no repository yet answers 200 with the honest-empty shape.

Update website photo selections (partial). Only slot IDs present in the active config are applied.

Return current custom_domain, worker_name (repo_name), and preview_url when set; otherwise success with custom_domain: null.

Set custom domain for a website. Normalizes apex to www, creates Cloudflare custom hostname if needed, returns DNS instructions.

Remove custom domain: delete in Cloudflare and clear website.custom_domain. 404 if none configured.

Return Cloudflare status, ssl_status, validation_records, and dns_instructions when custom_domain is set; else { status: 'none' }.

Mint a fresh Entri token and build the dnsRecords for entri.showEntri().

Dedicated endpoint (not folded into create/status) so a fresh short-lived token is minted each time the user opens the modal. 409 if no custom domain is configured yet.

Server-Sent Events stream of provisioning logs/status for a website.

Link an orphaned domain (in Cloudflare but not in DB) to this website. 404 if not in CF; 409 if linked to another website.

Reset a failed website and re-run its build in the background.

404 if the website does not exist, 409 if it is already active or currently provisioning. On success the error is cleared and a fresh build is kicked off. Without a website preview that is the classic path the create endpoint uses (status reset to ``provisioning``); a website preview's failed full build is retried as that build, seeded from the confirmed draft — 409 for a draft not confirmed yet (see ``website_svc.reprovision_website``) — and the answer waits (bounded) for the workflow start it makes, as the preview routes do.

A plain retry: it re-runs the same fixed brief against the business's current backend content. The body is accepted but ignored (see ``WebsiteReprovisionBody``).