web-agent-bridge 2.5.0 → 2.6.0

package/README.md

@@ -119,6 +119,20 @@ WAB v3.0 transforms the project from an advanced automation tool into a **real A
 - **Unified Runtime API** — All Agent OS layers exposed via RESTful endpoints at `/api/os/*`: protocol discovery, agent identity/auth, task CRUD, semantic execution, deployments, policies, isolation, observability (metrics/traces/logs), registry (commands/sites/templates), LLM operations, command signing, and Server-Sent Events for real-time streaming
 - **WABAgentOS SDK Client** — New `WABAgentOS` class in the SDK provides full TypeScript-typed API for all Agent OS operations: register → authenticate → negotiate capabilities → submit tasks → execute semantically → query observability → subscribe to events
 
+### v3.1 — WAP Deep Architecture (Protocol Hardening)
+
+v3.1 hardens the Agent OS into a production-grade system that *surpasses* MCP — making WAP (Web Agent Protocol) the top-level protocol with MCP as just one adapter.
+
+- **WAP Discovery Spec** — Formal `/.well-known/agent-tools.json` discovery document. AI agents can find all WAP capabilities, commands, permissions, runtime config, security model, and SDKs from a single standardized URL
+- **Adapter Layer** — WAP sits at the top; MCP, REST/GraphQL, and Browser automation are transport adapters beneath it. MCP Adapter exposes all WAB commands as MCP tools (list_tools / call_tool). REST Adapter registers external APIs as first-class WAP endpoints with auth, mapping, and rate limiting. Browser Adapter translates semantic actions (checkout.addItem, search.query, auth.login) into concrete browser step plans with selector fallbacks and verification
+- **Auth Middleware** — All `/api/os/*` mutation endpoints require authentication (Bearer token, API key, or agent header). Public read endpoints remain open for discovery. GET requests pass through for read-only access
+- **Deterministic Replay Engine** — Records all task inputs, outputs, and side-effects. Supports replay with verification mode (re-execute and compare), dry-run mode (inspect recorded steps), and diff between two recordings. Enables debugging, regression testing, and workflow certification
+- **Failure Analysis & Classification** — Automatic classification of failures into 9 categories (network, timeout, permission, validation, execution, rate_limit, resource, dependency, unknown). Root cause analysis, severity scoring, retryability assessment, suggested fixes, and pattern detection for recurring failures
+- **Session Engine** — Browser execution sessions with cookie jar (set/get/domain-scoped), localStorage/sessionStorage emulation, navigation history, variable store, session export/import for transfer, and TTL-based expiration
+- **Certification System** — Site compatibility verification with 13 weighted checks across 7 categories (integration, protocol, data, security, fairness, compliance, sovereignty). Issues certificates at 5 levels (none → basic → standard → premium → sovereign) with 90-day validity, HMAC-signed badges, and revocation
+- **DB Persistence Layer** — SQLite tables for all Agent OS entities: agents, sessions, tasks, deployments, registry commands/sites/templates, audit log (immutable append-only), capability grants, and policies. Auto-migrates on boot
+- **65+ API Endpoints** — Adapters (MCP tools, REST endpoints, browser mappings), replay (recordings, replay, diff, stats), sessions (CRUD, cookies, storage, export/import), failure analysis (query, patterns, summary, classify), certification (verify, certificates, revoke), plus all existing v3.0 endpoints
+
 > **Many more features** are available on the live website that aren't listed here — dashboards, analytics, admin tools, and more. Visit [webagentbridge.com](https://webagentbridge.com) to explore.
 
 ---

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "web-agent-bridge",
-  "version": "2.5.0",
+  "version": "2.6.0",
   "description": "Open-source middleware that bridges AI agents and websites — providing a standardized command interface for intelligent automation",
   "main": "server/index.js",
   "bin": {

package/public/.well-known/agent-tools.json

@@ -0,0 +1,180 @@
+{
+  "protocol": "wap",
+  "version": "1.0.0",
+  "name": "Web Agent Bridge",
+  "description": "Web Execution Layer for AI Agents — Protocol + Runtime + Security + Ecosystem",
+  "homepage": "https://webagentbridge.com",
+  "spec": "https://webagentbridge.com/.well-known/agent-tools.json",
+
+  "discovery": {
+    "protocol_endpoint": "/api/os/protocol",
+    "commands_endpoint": "/api/os/registry/commands",
+    "sites_endpoint": "/api/os/registry/sites",
+    "templates_endpoint": "/api/os/registry/templates",
+    "health_endpoint": "/api/os/observability/health"
+  },
+
+  "capabilities": {
+    "browser": {
+      "read": { "risk": "low", "description": "Read page content, text, attributes" },
+      "click": { "risk": "medium", "description": "Click interactive elements" },
+      "fill": { "risk": "medium", "description": "Fill form fields" },
+      "navigate": { "risk": "medium", "description": "Navigate to URLs" },
+      "scroll": { "risk": "low", "description": "Scroll the page" },
+      "screenshot": { "risk": "low", "description": "Capture screenshots" },
+      "execute": { "risk": "high", "description": "Execute JavaScript in page" }
+    },
+    "data": {
+      "extract": { "risk": "low", "description": "Extract structured data" },
+      "compare": { "risk": "low", "description": "Compare data across sources" },
+      "store": { "risk": "medium", "description": "Persist data" }
+    },
+    "agent": {
+      "spawn": { "risk": "high", "description": "Create child agents" },
+      "communicate": { "risk": "medium", "description": "Inter-agent messaging" },
+      "delegate": { "risk": "high", "description": "Delegate tasks to other agents" }
+    },
+    "system": {
+      "api": { "risk": "medium", "description": "Make API calls" },
+      "webhook": { "risk": "medium", "description": "Send webhook notifications" },
+      "schedule": { "risk": "medium", "description": "Schedule future tasks" }
+    },
+    "commerce": {
+      "price": { "risk": "low", "description": "Read prices" },
+      "negotiate": { "risk": "high", "description": "Negotiate prices" },
+      "purchase": { "risk": "critical", "description": "Complete purchases" }
+    },
+    "ai": {
+      "infer": { "risk": "medium", "description": "Run LLM inference" },
+      "vision": { "risk": "medium", "description": "Analyze images" },
+      "embed": { "risk": "low", "description": "Generate embeddings" }
+    }
+  },
+
+  "permissions": {
+    "levels": ["none", "read", "write", "execute", "admin", "owner"],
+    "default": "read",
+    "negotiable": true
+  },
+
+  "security": {
+    "authentication": ["api_key", "bearer_token"],
+    "signing": "HMAC-SHA256",
+    "isolation": "per-site-sandbox",
+    "audit": true
+  },
+
+  "runtime": {
+    "scheduler": {
+      "maxConcurrency": 50,
+      "retries": 3,
+      "backoff": "exponential",
+      "maxBackoff": 30000,
+      "priorities": [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10]
+    },
+    "sandbox": {
+      "defaultTimeout": 30000,
+      "maxMemory": 134217728,
+      "maxNetworkCalls": 100,
+      "maxDomOperations": 1000
+    },
+    "state": {
+      "checkpoints": true,
+      "rollback": true,
+      "ttl": 86400000
+    }
+  },
+
+  "adapters": {
+    "mcp": { "endpoint": "/api/os/adapters/mcp", "spec": "Model Context Protocol" },
+    "rest": { "endpoint": "/api/os/adapters/rest", "spec": "REST/OpenAPI" },
+    "browser": { "endpoint": "/api/os/adapters/browser", "spec": "Puppeteer/Playwright/BiDi" }
+  },
+
+  "commands": [
+    {
+      "name": "wab.discover",
+      "version": "1.0.0",
+      "category": "discovery",
+      "description": "Discover available actions on a site",
+      "capabilities": ["browser.read"],
+      "input": { "type": "object", "properties": { "siteId": { "type": "string" }, "category": { "type": "string" } } },
+      "output": { "type": "object", "properties": { "actions": { "type": "array" }, "meta": { "type": "object" } } }
+    },
+    {
+      "name": "wab.execute",
+      "version": "1.0.0",
+      "category": "execution",
+      "description": "Execute a registered action",
+      "capabilities": ["browser.execute"],
+      "input": { "type": "object", "properties": { "action": { "type": "string" }, "params": { "type": "object" } }, "required": ["action"] },
+      "sideEffects": true
+    },
+    {
+      "name": "wab.semantic.execute",
+      "version": "1.0.0",
+      "category": "execution",
+      "description": "Execute semantic action (e.g., checkout.addItem) without raw selectors",
+      "capabilities": ["browser.execute"],
+      "input": { "type": "object", "properties": { "domain": { "type": "string" }, "action": { "type": "string" }, "params": { "type": "object" } }, "required": ["domain", "action"] },
+      "sideEffects": true
+    },
+    {
+      "name": "wab.agent.register",
+      "version": "1.0.0",
+      "category": "lifecycle",
+      "description": "Register an agent with the runtime",
+      "capabilities": [],
+      "input": { "type": "object", "properties": { "name": { "type": "string" }, "type": { "type": "string" }, "capabilities": { "type": "array" } }, "required": ["name", "type"] }
+    },
+    {
+      "name": "wab.task.submit",
+      "version": "1.0.0",
+      "category": "runtime",
+      "description": "Submit a task to the scheduler",
+      "capabilities": ["system.schedule"],
+      "input": { "type": "object", "properties": { "type": { "type": "string" }, "params": { "type": "object" }, "priority": { "type": "integer" } } }
+    },
+    {
+      "name": "wab.commerce.compare",
+      "version": "1.0.0",
+      "category": "commerce",
+      "description": "Compare prices across sources with fairness scoring",
+      "capabilities": ["commerce.price", "data.compare"]
+    },
+    {
+      "name": "wab.commerce.negotiate",
+      "version": "1.0.0",
+      "category": "commerce",
+      "description": "Open or continue a price negotiation session",
+      "capabilities": ["commerce.negotiate"],
+      "sideEffects": true
+    },
+    {
+      "name": "wab.ai.infer",
+      "version": "1.0.0",
+      "category": "ai",
+      "description": "Run LLM inference through the model abstraction layer",
+      "capabilities": ["ai.infer"],
+      "input": { "type": "object", "properties": { "prompt": { "type": "string" }, "model": { "type": "string" }, "provider": { "type": "string" } }, "required": ["prompt"] }
+    }
+  ],
+
+  "ecosystem": {
+    "sdks": {
+      "javascript": { "npm": "web-agent-bridge-sdk", "version": "2.5.0" },
+      "langchain": { "npm": "web-agent-bridge-langchain", "version": "2.5.0" },
+      "react": { "npm": "web-agent-bridge-react", "version": "2.5.0" },
+      "vue": { "npm": "web-agent-bridge-vue", "version": "2.5.0" },
+      "svelte": { "npm": "web-agent-bridge-svelte", "version": "2.5.0" }
+    },
+    "plugins": {
+      "wordpress": "web-agent-bridge-wordpress",
+      "mcp_adapter": "wab-mcp-adapter"
+    },
+    "certification": {
+      "endpoint": "/api/os/certification/verify",
+      "badge_url": "https://webagentbridge.com/badge/agent-compatible.svg"
+    }
+  }
+}

package/sdk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "web-agent-bridge-sdk",
-  "version": "2.5.0",
+  "version": "2.6.0",
   "description": "SDK for building AI agents that interact with Web Agent Bridge (WAB)",
   "main": "index.js",
   "license": "MIT",