Extract the marketing/docs site into agentrelay.com

.github/workflows/deploy.yml

@@ -0,0 +1,45 @@
+name: Deploy Web (Cloudflare)
+
+on:
+  push:
+    branches:
+      - main
+  workflow_dispatch:
+
+concurrency:
+  group: deploy-web-production
+  cancel-in-progress: false
+
+permissions:
+  contents: read
+
+jobs:
+  deploy-production:
+    name: Deploy production
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build OpenNext (Cloudflare)
+        working-directory: web
+        env:
+          NEXT_PUBLIC_POSTHOG_HOST: ${{ vars.NEXT_PUBLIC_POSTHOG_HOST || 'https://i.agentrelay.com' }}
+          NEXT_PUBLIC_POSTHOG_KEY: ${{ vars.NEXT_PUBLIC_POSTHOG_KEY }}
+        run: npm run cf:build
+
+      - name: Deploy to Cloudflare
+        working-directory: web
+        env:
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          CLOUDFLARE_ACCOUNT_ID: ${{ vars.CLOUDFLARE_ACCOUNT_ID }}
+        run: npx wrangler deploy

.github/workflows/preview.yml

@@ -0,0 +1,96 @@
+name: Preview Web (Cloudflare)
+
+on:
+  pull_request:
+    types: [opened, synchronize, reopened]
+
+permissions:
+  contents: read
+  issues: write
+  pull-requests: write
+
+concurrency:
+  group: preview-web-pr-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  preview:
+    name: Deploy Preview
+    # Same-repo PRs only (forks can't read the Cloudflare secret).
+    if: github.event.pull_request.head.repo.full_name == github.repository
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '22'
+          cache: 'npm'
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Build OpenNext (Cloudflare)
+        working-directory: web
+        env:
+          NEXT_PUBLIC_POSTHOG_HOST: ${{ vars.NEXT_PUBLIC_POSTHOG_HOST || 'https://i.agentrelay.com' }}
+          NEXT_PUBLIC_POSTHOG_KEY: ${{ vars.NEXT_PUBLIC_POSTHOG_KEY }}
+        run: npm run cf:build
+
+      - name: Upload preview version
+        id: preview
+        working-directory: web
+        env:
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          CLOUDFLARE_ACCOUNT_ID: ${{ vars.CLOUDFLARE_ACCOUNT_ID }}
+        run: |
+          set -o pipefail
+
+          upload_log="$(mktemp)"
+          # Upload a new version WITHOUT promoting it to production. Cloudflare
+          # retains/expires versions automatically, so there is no stale-stage
+          # cleanup to run. A per-version preview URL is minted only when the
+          # account has a workers.dev subdomain enabled; if it isn't, the upload
+          # still succeeds and we just skip the URL (don't fail the check).
+          npx wrangler versions upload | tee "$upload_log"
+
+          preview_url="$(grep -oE 'https://[a-z0-9][a-z0-9-]*\.[a-z0-9-]+\.workers\.dev' "$upload_log" | tail -n 1 || true)"
+          echo "preview_url=${preview_url}" >> "$GITHUB_OUTPUT"
+
+      - name: Comment on PR
+        continue-on-error: true
+        uses: actions/github-script@v7
+        env:
+          PREVIEW_URL: ${{ steps.preview.outputs.preview_url }}
+        with:
+          script: |
+            const prNum = context.payload.pull_request.number;
+            const url = process.env.PREVIEW_URL;
+            const body = url
+              ? `**Preview deployed!**\n\n` +
+                `| Environment | URL |\n` +
+                `|-------------|-----|\n` +
+                `| Web | ${url} |\n\n` +
+                `This is a Cloudflare Workers preview version of this PR's build.`
+              : `**Preview built** — a Cloudflare Worker version was uploaded for this PR, ` +
+                `but no per-version preview URL was returned. Enable a workers.dev subdomain ` +
+                `on the Cloudflare account to get preview URLs.`;
+
+            const { data: comments } = await github.rest.issues.listComments({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              issue_number: prNum,
+            });
+            const existing = comments.find(c =>
+              c.user.type === 'Bot' && c.body.includes('Preview deployed')
+            );
+
+            const params = { owner: context.repo.owner, repo: context.repo.repo, body };
+            if (existing) {
+              await github.rest.issues.updateComment({ ...params, comment_id: existing.id });
+            } else {
+              await github.rest.issues.createComment({ ...params, issue_number: prNum });
+            }

.gitignore

@@ -0,0 +1,29 @@
+# Dependencies
+node_modules/
+.npm-cache/
+
+# Next.js
+web/.next/
+web/out/
+
+# OpenNext (Cloudflare) build output
+web/.open-next/
+
+# Wrangler
+.wrangler/
+web/.wrangler/
+web/.dev.vars
+
+# Build info
+**/tsconfig.tsbuildinfo
+
+# Runtime data
+web/waitlist.json
+
+# Env
+.env
+.env.local
+.env*.local
+
+# OS
+.DS_Store

.nvmrc

@@ -0,0 +1 @@
+22

README.md

@@ -1,2 +1,52 @@
 # agentrelay.com
-It's the, uh, agentrelay.com site I feel like that's obvious
+
+The Agent Relay front door: the public marketing/docs site, and (incoming) the
+Cloudflare router that fronts `agentrelay.com`. Runs entirely on Cloudflare —
+no AWS.
+
+## Layout
+
+```
+web/      Next.js marketing + docs site (OpenNext → Cloudflare Workers)
+```
+
+`router/` (the seamless front-door Cloudflare Worker) lands here in a later phase.
+
+## Develop
+
+```bash
+npm install         # workspace root
+npm run dev         # next dev
+npm run build       # next build
+npm test            # vitest
+npm run preview     # build + run the OpenNext worker locally (wrangler dev)
+```
+
+## Deploy
+
+`web` is a Next.js app built with [`@opennextjs/cloudflare`](https://opennext.js.org/cloudflare)
+and deployed as a Cloudflare Worker via Wrangler (`web/wrangler.jsonc`). Wrangler
+auto-provisions the Worker, uploads static assets, and creates the
+`origin-web.agentrelay.com` DNS record + TLS cert (the `agentrelay.com` zone must
+live in the Cloudflare account).
+
+GitHub Actions:
+
+- `.github/workflows/deploy.yml` — production, on push to `main`
+  (`wrangler deploy` → `origin-web.agentrelay.com`)
+- `.github/workflows/preview.yml` — per-PR preview via `wrangler versions upload`
+  (ephemeral `*.workers.dev` URL, no custom domain; Cloudflare expires old
+  versions automatically — no stale-preview cleanup needed)
+
+Required GitHub Actions config (repository-level — prod and previews share the
+same Cloudflare account, so no per-environment scoping is needed):
+
+- Secrets: `CLOUDFLARE_API_TOKEN` (Workers Scripts + Workers Routes + DNS edit on
+  the account)
+- Vars: `CLOUDFLARE_ACCOUNT_ID`, `NEXT_PUBLIC_POSTHOG_KEY`
+  (optional `NEXT_PUBLIC_POSTHOG_HOST`, defaults to `https://i.agentrelay.com`)
+
+Pushes to `main` auto-deploy to production; PRs get an ephemeral preview version.
+
+The apex `agentrelay.com` reaches this site via the router's fallback; domain
+consolidation onto `*.agentrelay.com` is a later phase.