@cparkerwebm/webmonterey 1.0.0 → 1.2.0

package/src/cli/checks.test.ts

@@ -217,7 +217,7 @@ test('a site with components but no credit import warns', () => {
   const ctx = base({
     components: new Map([['src/components/regions/footer/footer.astro', '<footer>hi</footer>']]),
   });
-  const result = runCheck('agency-credit', ctx);
+  const result = runCheck('webmaster-credit', ctx);
   assert.equal(result.status, 'warn');
   assert.match(result.detail!, /footer component/);
 });
@@ -227,15 +227,15 @@ test('a footer that imports the credit passes', () => {
     components: new Map([
       [
         'src/components/regions/footer/footer.astro',
-        `import Credit from '@cparkerwebm/webmonterey/webmonterey/credits/Credit.astro';`,
+        `import Webmaster from '@cparkerwebm/webmonterey/webmonterey/webmaster/Webmaster.astro';`,
       ],
     ]),
   });
-  assert.equal(runCheck('agency-credit', ctx).status, 'pass');
+  assert.equal(runCheck('webmaster-credit', ctx).status, 'pass');
 });
 
 test('a site with no components yet is not nagged', () => {
-  assert.equal(runCheck('agency-credit', base()).status, 'pass');
+  assert.equal(runCheck('webmaster-credit', base()).status, 'pass');
 });
 
 test('a comment explaining a trap does not trip the check that enforces it', () => {
@@ -274,7 +274,7 @@ test("WebMonterey's own site is not asked to credit itself", () => {
     site: { client: 'WebMonterey', domain: 'webmonterey.com' },
     components: new Map([['src/components/regions/footer/footer.astro', '<footer>x</footer>']]),
   });
-  assert.equal(runCheck('agency-credit', ctx).status, 'pass');
+  assert.equal(runCheck('webmaster-credit', ctx).status, 'pass');
 });
 
 test('a cron with no custom entrypoint FAILS, and names the fix', () => {
@@ -405,7 +405,7 @@ test("a placeholder favicon still in public/ fails - it is the agency's mark on
    */
   const ctx = base({
     site: { client: 'Acme', domain: 'acme.com', launched: '2026-03-01' },
-    placeholders: ['public/favicon.svg', 'public/open-graph.png'],
+    placeholders: ['public/favicon.svg', 'public/opengraph.png'],
   });
   const result = runCheck('placeholder-branding', ctx);
   assert.equal(result.status, 'fail', 'a LAUNCHED site shipping the agency mark is a fault');

package/src/cli/checks.ts

@@ -676,14 +676,16 @@ export const CHECKS: Check[] = [
     },
   },
   {
-    id: 'agency-credit',
-    title: 'Something renders the agency credit',
-    silentAs: 'the site ships with no "Powered by WebMonterey" and nobody notices for months',
+    id: 'webmaster-credit',
+    title: 'Something renders the webmaster credit',
+    silentAs:
+      'the site ships with no "Powered by WebMonterey", the /webmaster page is orphaned, and nobody notices for months',
     run(ctx) {
       /*
        * The package ships no footer - it ships no components at all - so the credit is imported
        * by whichever site component renders the footer. That is the right seam and it is also
-       * easy to simply never do, which is how live client sites ended up without it.
+       * easy to simply never do, which is how live client sites ended up without it. Without it
+       * the /webmaster page the package injects is reachable from nothing.
        *
        * A warning, not a failure: a site mid-build has no footer yet, and failing there trains
        * people to ignore the doctor. `/webm:launch` is where it becomes blocking.
@@ -697,11 +699,11 @@ export const CHECKS: Check[] = [
       if (ctx.site.domain === 'webmonterey.com') return pass;
 
       for (const src of ctx.components.values()) {
-        if (/webmonterey\/credits/.test(stripComments(src))) return pass;
+        if (/webmonterey\/webmaster/.test(stripComments(src))) return pass;
       }
       return warn(
-        'no component imports @cparkerwebm/webmonterey/webmonterey/credits/Credit.astro. ' +
-          'The footer component is where it goes.',
+        'no component imports @cparkerwebm/webmonterey/webmonterey/webmaster/Webmaster.astro. ' +
+          'The footer component is where it goes; it links to the /webmaster page.',
       );
     },
   },

package/src/cli/new.ts

@@ -28,26 +28,33 @@ function parseArgs(argv: string[]) {
   return {
     domain: positional[0],
     client: flag('client'),
-    org: flag('org') ?? 'webmonterey',
-    stagingEmail: flag('staging-email'),
+    org: flag('org') ?? gitConfig('webm.org'),
+    stagingEmail:
+      flag('staging-email') ?? gitConfig('webm.stagingEmail') ?? gitConfig('user.email'),
     into: flag('into'),
     install: !argv.includes('--no-install'),
   };
 }
 
 /*
- * WHERE A STAGING SITE'S MAIL GOES, defaulting to whoever is scaffolding it.
+ * WHO IS SCAFFOLDING, read from the machine rather than baked into the package.
  *
- * The package carries no inbox of its own: a default address baked into a public package means
- * a stranger's staging site mails the package author. `git config user.email` is the person at
- * the keyboard, which is the right default for a site they are about to test. The flag overrides
- * it; doctor fails a staging site that ends up with none.
+ * A public package carries no agency defaults: not a GitHub org, not an inbox. A default org
+ * would only ever be wrong for anyone else, and a default address means a stranger's staging site
+ * mails the package author. So both come from git config, set once per machine -
+ *
+ *     git config --global webm.org webmonterey
+ *     git config --global webm.stagingEmail dev@example.com     # optional; user.email otherwise
+ *
+ * - and a flag overrides either for one run. `webm doctor` fails a staging site that ends up
+ * with no address.
  */
-function gitUserEmail(): string {
+function gitConfig(key: string): string | undefined {
   try {
-    return execFileSync('git', ['config', 'user.email'], { encoding: 'utf8' }).trim();
+    const value = execFileSync('git', ['config', key], { encoding: 'utf8' }).trim();
+    return value || undefined;
   } catch {
-    return '';
+    return undefined;
   }
 }
 
@@ -56,9 +63,17 @@ export function run(argv: string[]): number {
 
   if (!args.domain) {
     console.error(
-      'webm new <domain> [--client="Name"] [--org=webmonterey] [--staging-email=you@example.com] [--into=path] [--no-install]',
+      'webm new <domain> [--client="Name"] [--org=<github-owner>] [--staging-email=you@example.com] [--into=path] [--no-install]',
+    );
+    console.error('\n  webm new example.com --client="Example Co"');
+    return 1;
+  }
+
+  if (!args.org) {
+    console.error(
+      'webm new: no GitHub owner for the repo. Either pass --org=<owner> or set it once:\n\n' +
+        '  git config --global webm.org <owner>\n',
     );
-    console.error('\n  webm new autire.com --client="Autire Technologies"');
     return 1;
   }
 
@@ -86,7 +101,7 @@ export function run(argv: string[]): number {
     domain,
     client: args.client,
     org: args.org,
-    stagingEmail: args.stagingEmail ?? gitUserEmail(),
+    stagingEmail: args.stagingEmail,
     packageVersion: packageVersion(),
     /* Real today, not a constant - see ScaffoldOptions.today for what a stale one does. */
     today: new Date().toISOString().slice(0, 10),
@@ -114,12 +129,14 @@ export function run(argv: string[]): number {
   console.log(`Scaffolded ${Object.keys(files).length} files into ${root}`);
   console.log(`  + ${seeded.length} seeded (favicons, headers, CLAUDE.md, a contact form)`);
   console.log(`  + ${kept.length} .gitkeep, so the empty directories survive a clone\n`);
-  console.log(`  repo     ${args.org}/${names.repo}      (keeps the domain)`);
+  console.log(`  repo               ${args.org}/${names.repo}`);
+  console.log(
+    `  worker · d1 · r2   ${names.slug}   (the domain minus its TLD, so Chrome does not flag previews)`,
+  );
   console.log(
-    `  worker   ${names.worker}                (slug - no TLD, so Chrome does not flag previews)`,
+    `\n  One name everywhere. If ${names.slug} is already taken in the account - ${domain.replace(/^[^.]+/, names.slug)}` +
+      ` and another TLD both want it - pick another with --into and edit webmonterey.json.`,
   );
-  console.log(`  d1       ${names.d1}`);
-  console.log(`  r2       ${names.r2Media}`);
 
   try {
     execFileSync('git', ['init', '-q', '-b', 'main'], { cwd: root });

package/src/cli/scaffold.test.ts

@@ -7,6 +7,7 @@ const files = (over = {}) =>
   scaffold({
     domain: 'autire.com',
     client: 'Autire Technologies',
+    org: 'webmonterey',
     packageVersion: '1.0.0',
     today: '2026-08-26',
     ...over,
@@ -14,15 +15,15 @@ const files = (over = {}) =>
 
 const json = (f: Record<string, string>, path: string) => JSON.parse(f[path]!);
 
-test('three names, three jobs: repo, slug, Cloudflare', () => {
+test('one name everywhere: repo, Worker, D1 and R2 are all the slug', () => {
   const f = files();
   const site = json(f, 'webmonterey.json');
-  // Repo carries the full domain with UNDERSCORES; Cloudflare carries the slug, no TLD.
-  assert.equal(site.repo, 'webmonterey/autire_com');
-  assert.equal(site.worker, 'webm-autire');
+  assert.equal(site.repo, 'webmonterey/autire');
+  assert.equal(site.worker, 'autire');
   assert.equal(site.slug, 'autire');
-  assert.match(f['wrangler.jsonc']!, /"name": "webm-autire"/);
-  assert.match(f['README.md']!, /webm-autire-db/);
+  assert.match(f['wrangler.jsonc']!, /"name": "autire"/);
+  assert.match(f['README.md']!, /\| Worker · D1 · R2 \| `autire` \|/);
+  assert.equal(json(f, 'package.json').name, 'autire');
 });
 
 test('MCP is declared AND pre-approved - a declaration alone is inert', () => {
@@ -84,7 +85,7 @@ test('secrets are gitignored and the example names the password-manager habit',
   assert.match(f['.dev.vars.example']!, /password manager/);
 });
 
-test('an unnamed client gets CHANGEME, which go-live refuses to launch with', () => {
+test('an unnamed client gets CHANGEME, which launch refuses to launch with', () => {
   const site = json(files({ client: undefined }), 'webmonterey.json');
   assert.equal(site.client, 'CHANGEME');
 });
@@ -176,20 +177,26 @@ test('compatibility_date is the date passed in, never a constant baked into the
    * scaffold.ts, which exists because a date NEWER than the installed runtime does not build at
    * all. Both directions are traps and they pull in opposite ways.
    */
-  const config = scaffold({ domain: 'a.com', packageVersion: '1.0.0', today: '2026-08-26' })[
-    'wrangler.jsonc'
-  ]!;
+  const config = scaffold({
+    domain: 'a.com',
+    org: 'o',
+    packageVersion: '1.0.0',
+    today: '2026-08-26',
+  })['wrangler.jsonc']!;
   assert.match(config, /"compatibility_date":\s*"2026-08-12"/, 'derived from it, a fortnight back');
 
-  const other = scaffold({ domain: 'a.com', packageVersion: '1.0.0', today: '2027-03-04' })[
-    'wrangler.jsonc'
-  ]!;
+  const other = scaffold({
+    domain: 'a.com',
+    org: 'o',
+    packageVersion: '1.0.0',
+    today: '2027-03-04',
+  })['wrangler.jsonc']!;
   assert.match(other, /"compatibility_date":\s*"2027-02-18"/, 'and it still tracks the argument');
 });
 
 test('a malformed date is refused rather than written into wrangler.jsonc', () => {
   assert.throws(
-    () => scaffold({ domain: 'a.com', packageVersion: '1.0.0', today: 'today' }),
+    () => scaffold({ domain: 'a.com', org: 'o', packageVersion: '1.0.0', today: 'today' }),
     /YYYY-MM-DD/,
   );
 });
@@ -205,9 +212,9 @@ test('the scaffolded compatibility_date is never in the future of the installed
    * machine that just installed. The margin is for every machine that did not.
    */
   const written = (today: string) =>
-    scaffold({ domain: 'a.com', packageVersion: '1.0.0', today })['wrangler.jsonc']!.match(
-      /"compatibility_date":\s*"([\d-]+)"/,
-    )![1]!;
+    scaffold({ domain: 'a.com', org: 'o', packageVersion: '1.0.0', today })[
+      'wrangler.jsonc'
+    ]!.match(/"compatibility_date":\s*"([\d-]+)"/)![1]!;
 
   for (const today of ['2026-08-27', '2026-01-01', '2026-03-01', '2027-12-31']) {
     const gap = (Date.parse(today) - Date.parse(written(today))) / 86_400_000;
@@ -222,9 +229,9 @@ test('the scaffolded compatibility_date is never in the future of the installed
 test('the margin crosses a month and a year boundary correctly', () => {
   // Naive string arithmetic gets 2026-01-05 minus 14 days wrong; this is why it goes through Date.
   const at = (today: string) =>
-    scaffold({ domain: 'a.com', packageVersion: '1.0.0', today })['wrangler.jsonc']!.match(
-      /"compatibility_date":\s*"([\d-]+)"/,
-    )![1]!;
+    scaffold({ domain: 'a.com', org: 'o', packageVersion: '1.0.0', today })[
+      'wrangler.jsonc'
+    ]!.match(/"compatibility_date":\s*"([\d-]+)"/)![1]!;
   assert.equal(at('2026-01-05'), '2025-12-22');
   assert.equal(at('2026-03-05'), '2026-02-19', 'and February');
 });

package/src/cli/scaffold.ts

@@ -13,10 +13,10 @@ import { MCP_NAMES, mcpConfig } from './mcp.ts';
 
 export interface ScaffoldOptions {
   domain: string;
-  /** Display name. Falls back to CHANGEME, which `go-live` refuses to launch with. */
+  /** Display name. Falls back to CHANGEME, which `/webm:launch` refuses to launch with. */
   client?: string;
-  /** GitHub org for the repo. */
-  org?: string;
+  /** GitHub owner for the repo. Required - the package carries no agency default. */
+  org: string;
   /**
    * Where a staging deployment's mail goes. `webm new` fills it from `git config user.email`;
    * the package itself carries no inbox, because a default address in a public package means a
@@ -49,7 +49,7 @@ export function scaffold(options: ScaffoldOptions): Record<string, string> {
   const { domain, packageVersion } = options;
   const n = resourceNames(domain);
   const client = options.client ?? 'CHANGEME';
-  const org = options.org ?? 'webmonterey';
+  const { org } = options;
   const { today } = options;
 
   if (!/^\d{4}-\d{2}-\d{2}$/.test(today)) {
@@ -413,9 +413,10 @@ export function scaffold(options: ScaffoldOptions): Record<string, string> {
     `| \`npx webm doctor\` | the things that fail silently |\n\n` +
     `## Cloudflare\n\n` +
     `| | |\n| --- | --- |\n` +
-    `| Worker | \`${n.worker}\` |\n| D1 | \`${n.d1}\` |\n| R2 media | \`${n.r2Media}\` |\n\n` +
-    `The repo is named for the domain; Cloudflare resources use the slug, with no TLD, so a\n` +
-    `preview hostname never embeds a domain Chrome could mistake for a lookalike.\n\n` +
+    `| Worker · D1 · R2 | \`${n.slug}\` |\n\n` +
+    `One name everywhere: the domain minus its TLD. A preview hostname then never embeds a\n` +
+    `domain Chrome could mistake for a lookalike. A second resource of one kind takes a purpose\n` +
+    `suffix - \`${n.slug}-portal\`.\n\n` +
     `## Deploying\n\n` +
     `Push to deploy. A \`wrangler deploy\` from a laptop creates a version no build produced, so\n` +
     `history stops describing what is live and the next push reverts it.\n`;

package/src/cli/slug.test.ts

@@ -20,24 +20,11 @@ test('something that is not a domain is refused, naming what was expected', () =
   assert.throws(() => normalizeDomain('exa mple.com'), DomainError);
 });
 
-test('the repo keeps the full domain, dots to UNDERSCORES', () => {
-  assert.equal(repoName('autire.com'), 'autire_com');
-  assert.equal(repoName('friendsofthemarinalibrary.org'), 'friendsofthemarinalibrary_org');
-});
-
-test('the three names are all different, and each has a job', () => {
-  // repo is unambiguous about the site; slug drops the TLD so Chrome does not flag preview
-  // hostnames; worker is the slug prefixed.
-  const n = resourceNames('autire.com');
-  assert.equal(n.repo, 'autire_com');
-  assert.equal(n.slug, 'autire');
-  assert.equal(n.worker, 'webm-autire');
-});
-
 test('the slug drops the TLD - this is what stops Chrome flagging preview links', () => {
-  // webm-autire-com contains autire-com, which reads as a domain. webm-autire does not.
-  assert.equal(slugFor('autire.com'), 'autire');
-  assert.equal(slugFor('stevenglaze.com'), 'stevenglaze');
+  // A Worker named example-com puts example-com into every preview hostname, which Chrome reads
+  // as a registrable domain. `example` embeds nothing.
+  assert.equal(slugFor('example.com'), 'example');
+  assert.equal(slugFor('acme-widgets.org'), 'acme-widgets');
 });
 
 test('a two-part public suffix drops both labels', () => {
@@ -45,7 +32,7 @@ test('a two-part public suffix drops both labels', () => {
   assert.equal(slugFor('example.com.au'), 'example');
 });
 
-test('a subdomain is kept - two of ours could differ only by it', () => {
+test('a subdomain is kept - an indexable subdomain is its own site', () => {
   assert.equal(slugFor('shop.example.com'), 'shop-example');
 });
 
@@ -53,18 +40,28 @@ test('a single-label result never comes back empty', () => {
   assert.ok(slugFor('a.com').length > 0);
 });
 
-test('every Cloudflare name derives from one domain, and the repo differs on purpose', () => {
-  assert.deepEqual(resourceNames('autire.com'), {
-    slug: 'autire',
-    repo: 'autire_com',
-    worker: 'webm-autire',
-    d1: 'webm-autire-db',
-    r2Media: 'webm-autire-media',
-    r2App: 'webm-autire-app',
+test('one name, everywhere: repo, Worker, D1, R2 and KV are all the slug', () => {
+  assert.equal(repoName('example.com'), 'example');
+  assert.deepEqual(resourceNames('example.com'), {
+    slug: 'example',
+    repo: 'example',
+    worker: 'example',
+    d1: 'example',
+    r2: 'example',
+    kv: 'example',
   });
 });
 
+test('every name is valid for the strictest resource - lowercase, digits and dashes only', () => {
+  // R2 and Workers accept nothing else, and R2 also refuses a leading or trailing dash.
+  for (const domain of ['example.com', 'shop.example.com', 'acme-widgets.co.uk', 'a1.io']) {
+    for (const name of Object.values(resourceNames(domain))) {
+      assert.match(name, /^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/, `${domain} -> ${name}`);
+    }
+  }
+});
+
 test('two clients on the same name under different TLDs collide, which the caller must handle', () => {
-  // clients.slug carries a unique constraint; `webm new` picks the next free form and records it.
-  assert.equal(slugFor('autire.com'), slugFor('autire.org'));
+  // `webm new` says so; the second one gets a name chosen by a person.
+  assert.equal(slugFor('example.com'), slugFor('example.org'));
 });

package/src/cli/slug.ts

@@ -1,15 +1,21 @@
 /*
- * Turning a domain into the names everything else uses.
+ * Turning a domain into the ONE name everything else uses.
  *
- * TWO NAMES, DELIBERATELY DIFFERENT.
+ *   example.com        ->  example
+ *   shop.example.com   ->  shop-example
+ *   example.co.uk      ->  example
  *
- *   GitHub repo        <domain_underscored>   webmonterey/autire_com
- *   Cloudflare stuff   webm-<slug>            webm-autire, webm-autire-db, webm-autire-media
+ * The GitHub repo, the Worker, the D1 database, the R2 bucket and any KV namespace all carry
+ * that same name. It is the domain minus its public suffix, which is the one shape valid for
+ * every resource at once - Workers and R2 accept only `[a-z0-9-]`, and in an agency account that
+ * holds nothing but client sites a prefix says nothing.
  *
- * The repo keeps the full domain so it is unambiguous which site it serves. Cloudflare drops the
- * TLD token because `webm-autire-com` contains `autire-com`, which Chrome's lookalike check reads
- * as a registrable domain - and every preview link then warns the client the site looks fake.
- * `webm-autire` has nothing in it that looks like a domain. See ARCHITECTURE.md section 5.
+ * The TLD is dropped for a reason beyond brevity: a Worker named `example-com` puts `example-com`
+ * into every preview hostname, and Chrome's lookalike-domain check reads that as a registrable
+ * domain and warns the client their own preview looks fake. `example` embeds nothing.
+ *
+ * A second resource of the same kind for one client takes a purpose suffix - `example-portal` -
+ * and is the exception, not the pattern.
  */
 
 /** Public suffixes that take two labels, so `example.co.uk` slugs to `example`. */
@@ -63,28 +69,16 @@ export function normalizeDomain(input: string): string {
   return cleaned;
 }
 
-/**
- * The GitHub repo name. Dots become UNDERSCORES: `autire.com` -> `autire_com`.
- *
- * Underscores, not dashes, and not the slug. Three names, three jobs:
- *
- *   repo       autire_com     the full domain, unambiguous about which site this is
- *   slug       autire         no TLD, because a Cloudflare Worker named webm-autire-com
- *                             embeds autire-com and Chrome reads that as a domain
- *   worker     webm-autire    the slug, prefixed
- *
- * A rebuild creates a NEW repo under the underscore name beside the old dashed one, which is what
- * lets the old site keep serving until the cutover.
- */
-export function repoName(domain: string): string {
-  return normalizeDomain(domain).replace(/\./g, '_');
-}
-
 /**
  * The client slug - the domain with its public suffix removed.
  *
- * `autire.com` -> `autire`, `example.co.uk` -> `example`. Subdomains are kept, because
- * `shop.example.com` and `example.com` are different clients if they are ever both ours.
+ * `example.com` -> `example`, `example.co.uk` -> `example`. Subdomains are kept, joined with a
+ * dash, because `shop.example.com` and `example.com` are different sites if they are ever both
+ * ours - and an indexable subdomain is always its own site.
+ *
+ * `example.com` and `example.org` slug to the same thing. That is a real collision inside one
+ * account, and `webm new` says so rather than silently picking - the second one gets a name
+ * chosen by a person.
  */
 export function slugFor(domain: string): string {
   const clean = normalizeDomain(domain);
@@ -95,15 +89,16 @@ export function slugFor(domain: string): string {
   return kept.join('-');
 }
 
-/** Every Cloudflare resource name for a site, from one domain. */
+/** The GitHub repo name. The slug - one name, everywhere. */
+export function repoName(domain: string): string {
+  return slugFor(domain);
+}
+
+/**
+ * Every resource name for a site, from one domain. They are all the slug; the fields exist so a
+ * caller says which resource it means, and so a purpose suffix has an obvious place to go.
+ */
 export function resourceNames(domain: string) {
   const slug = slugFor(domain);
-  return {
-    slug,
-    repo: repoName(domain),
-    worker: `webm-${slug}`,
-    d1: `webm-${slug}-db`,
-    r2Media: `webm-${slug}-media`,
-    r2App: `webm-${slug}-app`,
-  };
+  return { slug, repo: slug, worker: slug, d1: slug, r2: slug, kv: slug };
 }

package/src/cli/sync.ts

@@ -51,7 +51,7 @@ import { PACKAGE_ROOT, packageVersion } from './package-root.ts';
 
 /**
  * The namespace. Rule 5's prefix: the CLI is `webm`, the tokens are --webm-*, the classes are
- * .webm-*, the Workers are webm-<slug>. `/webm:launch` rather than `/webmonterey:launch`.
+ * .webm-*, the cloud resources carry one name each - the domain minus its TLD. `/webm:launch` rather than `/webmonterey:launch`.
  */
 const NAMESPACE = 'webm';
 

package/src/emails/footer.ts

@@ -14,7 +14,7 @@
  * constant — and a caller that has to remember to pass the year eventually forgets, which
  * shows up as a stale copyright the following January.
  */
-import { CREDIT_TEXT, creditUrl } from '../includes/webmonterey/credits/credit.ts';
+import { CREDIT_TEXT, creditUrl } from '../includes/webmonterey/webmaster/webmaster.ts';
 import { DEFAULT_COPY, fill } from '../includes/webmonterey/copy-defaults.ts';
 
 export interface EmailFooterInput {
@@ -75,13 +75,13 @@ export function renderFooterHtml(input: EmailFooterInput): string {
    * in a browser is the expected behavior, so the warning would be noise about something no
    * reader was surprised by. Nothing is lost that email a11y actually asks for.
    *
-   * `title` is absent from both links ON PURPOSE, here and in Credit.astro. It is not reliably
+   * `title` is absent from both links ON PURPOSE, here and in Webmaster.astro. It is not reliably
    * announced by screen readers, is unreachable by keyboard and touch entirely, and either
    * duplicates the link text or competes with it for the accessible name. The link text is the
    * accessible name; that is the mechanism that works.
    *
    * `rel="noopener"` without `noreferrer`, also on purpose: the referrer IS the attribution.
-   * Stripping it would leave only utm_content. See credit.ts.
+   * Stripping it would leave only utm_content. See webmaster.ts.
    */
   return `    <div style="max-width:640px;margin:0 auto;padding:24px 32px 8px;text-align:center;font-size:13px;line-height:1.6;color:#3f3f3f;">
       <p style="margin:0;">&copy; ${year} ${escapeHtml(input.client)}</p>

package/src/includes/cloudflare/r2/README.md

@@ -13,7 +13,7 @@ domain on a bucket requires the zone to be on the same account as the bucket, so
 earlier fails for the same reason `preview.<client-domain>` does.
 
 ```sh
-npx wrangler r2 bucket create webm-<domain-dashed>-media
+npx wrangler r2 bucket create <slug>        # the domain minus its TLD, same as the Worker and D1
 ```
 
 Then in the dashboard: **R2 → the bucket → Settings → Custom Domains → Connect Domain**, and
@@ -49,8 +49,8 @@ no_check_bucket = true
 every transfer fails with an error naming an operation you never asked for.
 
 ```sh
-rclone copy ./uploads webm-media:webm-<domain-dashed>-media --transfers 2 --progress
-rclone check ./uploads webm-media:webm-<domain-dashed>-media
+rclone copy ./uploads webm-media:<slug> --transfers 2 --progress
+rclone check ./uploads webm-media:<slug>
 ```
 
 Two things learned the hard way:

package/src/includes/cloudflare/r2/media.ts

@@ -5,7 +5,7 @@
  *
  *   src/assets/    images the DESIGN uses — imported, hashed, optimised at build by sharp.
  *                  A logo, an icon, a hero shot. These belong in the repo.
- *   public/        small fixed files that need a stable URL (favicons, open-graph.png).
+ *   public/        small fixed files that need a stable URL (favicons, opengraph.png).
  *   R2 (here)      everything too large or too numerous to sit in git: video, audio, PDFs,
  *                  photo galleries, downloads, anything migrated wholesale off a WordPress
  *                  uploads folder.
@@ -13,9 +13,9 @@
  * The deciding question is not file size, it is "should `git clone` carry this?" A 40MB
  * showreel makes every clone slower forever and can never be optimised by the build.
  *
- * NAMING (rule 5):
- *   bucket    webm-<domain-dashed>-media     e.g. webm-example-com-media
- *   hostname  media.<client-domain>          e.g. media.example.com
+ * NAMING:
+ *   bucket    <slug>                  e.g. example - one name for every resource, see cli/slug.ts
+ *   hostname  media.<client-domain>   e.g. media.example.com
  *
  * WHY A CUSTOM DOMAIN AND NOT r2.dev: Cloudflare's r2.dev subdomain is rate-limited and
  * documented as unsuitable for production. It is also a hostname the client does not own,

package/src/includes/webmonterey/config.test.ts

@@ -68,7 +68,7 @@ test('staging is decided by config OR by a workers.dev hostname, each covering t
   // A cron has no hostname, so config is the only signal it can read; a branch preview of a
   // launched site inherits `production` from main, so the hostname is the only signal there.
   assert.equal(isStagingDeployment('staging', null), true);
-  assert.equal(isStagingDeployment('production', 'x-webm-acme.acct.workers.dev'), true);
+  assert.equal(isStagingDeployment('production', 'x-acme.acct.workers.dev'), true);
   assert.equal(isStagingDeployment('production', 'acme.com'), false);
   assert.equal(isStagingDeployment(undefined, 'www.acme.com'), false, 'a www variant still sends');
   assert.equal(isStagingDeployment('production', 'notworkers.dev'), false, 'label, not substring');

package/src/includes/webmonterey/copy-defaults.ts

@@ -67,6 +67,13 @@ export interface Copy {
     /** `{domain}` is replaced with the site's domain. */
     footerNotice: string;
   };
+  /** The /webmaster page. `intro` wraps the agency link: `before` <a>WebMonterey</a> `after`. */
+  webmaster: {
+    title: string;
+    description: string;
+    intro: { before: string; after: string };
+    body: string[];
+  };
 }
 
 /*
@@ -125,6 +132,19 @@ export const DEFAULT_COPY: Copy = {
     reference: 'Reference: #{id}',
     footerNotice: 'This is an automated notification for your account at the {domain} website.',
   },
+  webmaster: {
+    title: 'Our Webmaster',
+    description:
+      'This website was designed, built and managed by WebMonterey, a webmaster maintenance service in Monterey, California.',
+    intro: {
+      before: 'This website was designed, built and managed by',
+      after:
+        ', a webmaster maintenance service in Monterey, California. WebMonterey handles the hosting, security, updates and ongoing care of the site so that we can focus on what we do.',
+    },
+    body: [
+      "If you have a question about this website, notice something that isn't working, or have trouble using a page, please let WebMonterey know and they will take care of it.",
+    ],
+  },
 };
 
 /** Merge the site's overrides over the defaults, key by key, at any depth. */