0.27

website-builder 0.27 — tell your story, see whether AI names you, and build as a team 📖

As always: your favorite AI assistant takes you by the hand — just ask it, in your own words, and it does the work.

What's new:

• 📖 Your home page can tell your customer's story. A new, optional step turns your home page into a short story: your customer, the problem they have, how you help, three simple steps, and what life looks like afterwards. Your assistant offers it once, right after you've worked out what makes you different, and never does it unasked.
• 🤖 "Does AI name you?" — a weekly check. Find out whether ChatGPT, Gemini, Claude, Perplexity or Google's AI answers mention your business when someone asks the kind of question your customers ask. It shows what each one knows about you from memory and what it finds when it searches the web, keeps every answer, and shows how things change week by week. Every assistant is optional and uses your own accounts; your assistant helps you set up one at a time, starting with a free one.
• 📊 A report you can actually read. Just ask "Show me my AI report for example.com". One plain answer at the top, a simple ✓ / ◐ / ✗ table per question, and the full answers tucked away for when you want them.
• 👥 Ready for a team. When a colleague or partner joins, a new guided step sets them up: the invitation, the right settings, and a one-page guide for them. Every new site also comes with one shared rulebook that all AI assistants follow, so nobody overwrites anybody.
• 🔐 Your website is yours — keep it that way. When you set up your accounts, your assistant now explains that they and your website belong to you, and recommends signing in with a second step, like your fingerprint, face or phone, so a stolen password alone can't get anyone in. It's a recommendation, not a requirement.
• 🔀 Your real address gets the credit. Once your site is live, anyone who lands on its temporary address is sent to your real domain, so AI answers point people to the right place. It stays off until you switch it on at launch; your assistant knows the steps.
• ⏩ Tidying up is quick again. Removing a finished piece of work no longer runs the whole build-and-test check first.
• 🔒 Fresh building blocks. Your site's building blocks are updated to their latest versions, including a security fix.
• 🧹 Behind the scenes. Sturdier built-in checks that now also run cleanly on a Mac, and a more thorough way for your assistant to get a second opinion on its own work.
• 🔁 Already have a site? Nothing changes on its own. If you got the toolkit straight from GitHub (rather than as the download below), ask your assistant: "check if my site needs any updates from the latest website-builder version" — it lists what changed and helps you apply it.

New here? How to start: download website-builder.zip below, unzip it, and paste the starter prompt from the README into your AI assistant — it takes you by the hand from there. Works on macOS, Linux, WSL, and Git Bash on Windows.

---

For the technically curious:

• New website-story skill: STORY.md template, a seven-section home page map, an opt-in tests/story.spec.ts that compares the CTA's resolved URL (scheme, origin, path, hash), evals; offered once from new-website §2a — PR #133, PR #137, PR #139.
• GEO check in search-console-insights: "Knows you" / "Finds you" per engine, counted in code, drift check, --report; track.sh runs every step and ends with a needs-attention list — PR #121, PR #122.
• AGENTS.md + CLAUDE.md in every scaffold and the website-team-setup skill; CI turns red on [MISSING: …] placeholders. The skill's evals ran for the first time (plan-only, 21/22 with vs 9/22 without) and two broken steps were fixed — PR #111, PR #120, PR #124, PR #139.
• Two-factor / passkey recommendation for GitHub and Cloudflare in README, GETTING-STARTED, SETUP.md, new-website and website-team-setup; never required unless the provider requires it — PR #139.
• functions/_middleware.ts 301-redirects the exact production <project>.pages.dev host once CANONICAL_URL is set; previews keep noindex — PR #118.
• The template's pre-push hook exits 0 for a delete-only push, tested under bash, sh and dash (tests now assert exit status) — PR #125, PR #139.
• Template dependencies refreshed in range (astro 7.3.5, devalue 5.9.4 for GHSA-9rgm-9g3h-6x36, svgo 4.1.0) — PR #112, PR #103.
• independent-review: review depth, parallel tiers, review_log.sh with gate ids, claims sweep, round budget, merge links, --seat, Codex run outside the repo, --hidethinking for ollama, full process-tree stop — PR #106, PR #110, PR #113–#117, PR #126, PR #128, PR #132, PR #136, PR #138, PR #139.
• Suite guards: CDPATH-safe script self-location, a fail-safe pipefail early-exit-pipe guard, pipefail status fixes in package.sh and friends, a packaged-zip leak test, a secret-pattern self-test; macOS bash 3.2 / BSD-tool compatibility, and make check inside an enclosing git repo — PR #119, PR #123, PR #127, PR #129–#131, PR #139.
• Every PR since 0.26 without a Codex review was reviewed by Codex + ollama-cloud before this release; trail in docs/reviews/REVIEW-diff-2026-09-27-pre-release-v027.md — PR #139.