AI site builders produce a polished Vite\/React + Tailwind site in minutes, exported as a ZIP. Esipher turns that export into a real, activatable theme. The core conversion - extraction, parsing, asset rewriting, theme generation and installation - runs entirely on your own server: no third-party upload service, no external API call.<\/p>\n\n
Developed by Samuel Olaosebikan<\/a> and Moses Adebayo<\/a>.<\/p>\n\n Work from the admin screen (Esipher in wp-admin) or from WP-CLI ( Two optional features connect to third-party APIs, and only when you set them up (see \"External services\" below):<\/p>\n\n This is an early development build; per-builder adapters beyond the generic fallback and a conversion history\/rollback screen are still to come.<\/p>\n\n The core \"upload a ZIP and get a theme\" flow makes no external requests. The features below\ndo, and only after you enable them and provide your own credentials. You can use the plugin\nindefinitely without ever touching them.<\/p>\n\n Used by Connected Projects<\/strong> and Mobile App<\/strong>. When you connect a repo, sync, or build an\napp, the plugin talks to the GitHub REST API as your own GitHub account, using an OAuth access\ntoken you obtain by authorising your own GitHub OAuth App. It sends: that access token, the\nrepository owner and name you enter, the contents of the build workflow file it commits into\nyour repo, webhook configuration (including a random shared secret), Actions repository\nsecrets and variables it sets for the build, and, for the Mobile App feature, an\nApp-Store-Connect-signed certificate request routed to Apple (see below). It downloads the\nbuild artifacts your workflow produces. The OAuth sign-in also redirects your browser to\ngithub.com. For Connected Projects, GitHub also calls this site's REST route\n( GitHub Terms of Service: https:\/\/docs.github.com\/en\/site-policy\/github-terms\/github-terms-of-service\nGitHub Privacy Statement: https:\/\/docs.github.com\/en\/site-policy\/privacy-policies\/github-general-privacy-statement<\/p>\n\n Used by the Mobile App<\/strong> feature only, and only if you fill in the iOS fields (Apple Team\nID, App Store Connect API Key ID, Issuer ID and .p8 key). When you save those and start an\niOS build, the plugin calls the App Store Connect API, authenticating with a short-lived\nJSON Web Token it signs locally with your .p8 key. It sends: a certificate signing request\n(to obtain an Apple Distribution certificate), your app's bundle identifier (to register it\nif needed), and a request to create an App Store provisioning profile. It receives the\ncertificate and provisioning profile, which are stored encrypted on your site and set as\nGitHub Actions secrets for the build. No request is made to Apple unless you provide an App\nStore Connect API key.<\/p>\n\n Apple Media Services Terms: https:\/\/www.apple.com\/legal\/internet-services\/itunes\/\nApple Privacy Policy: https:\/\/www.apple.com\/legal\/privacy\/<\/p>\n\n The multi-page conversion option \"Try to recover cloud-hosted images from the original\nproject\"<\/strong> (and the WP-CLI Lovable Terms of Service: https:\/\/lovable.dev\/terms\nLovable Privacy Policy: https:\/\/lovable.dev\/privacy<\/p>\n\n\nwp esipher convert<\/code>).<\/p>\n\n\n
What does not convert<\/h4>\n\n
\n
External services<\/h3>\n\n
GitHub (github.com, api.github.com)<\/h4>\n\n
\/wp-json\/esipher\/v1\/github-webhook<\/code>) when a build finishes; the request is verified with the\nwebhook's shared secret and only records that an update is ready. Nothing is sent to GitHub\nunless you have connected an account.<\/p>\n\nApple App Store Connect (api.appstoreconnect.apple.com)<\/h4>\n\n
Original project image hosting (opt-in)<\/h4>\n\n
--recover-images<\/code> flag) fetches image files from the URL your AI\nsite builder still hosts them at (for Lovable exports this is a *.lovableproject.com<\/code>\naddress derived from a descriptor file inside your own export). The request sends only a normal\nHTTP GET for each image path, so the host sees your site's IP address. This happens only for that\none opt-in setting, and only for images your export references but did not bundle. No other\nrequest is made to that host. This service is provided by Lovable.<\/p>\n\n\n
\/wp-content\/plugins\/esipher<\/code>, or install it from the Plugins screen.<\/li>\n