web-agent-bridge 3.0.0 → 3.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (202) hide show
  1. package/LICENSE +72 -21
  2. package/README.ar.md +1286 -1073
  3. package/README.md +1764 -1535
  4. package/bin/agent-runner.js +474 -474
  5. package/bin/cli.js +237 -138
  6. package/bin/wab.js +80 -80
  7. package/examples/bidi-agent.js +119 -119
  8. package/examples/cross-site-agent.js +91 -91
  9. package/examples/mcp-agent.js +94 -94
  10. package/examples/next-app-router/README.md +44 -44
  11. package/examples/puppeteer-agent.js +108 -108
  12. package/examples/saas-dashboard/README.md +55 -55
  13. package/examples/shopify-hydrogen/README.md +74 -74
  14. package/examples/vision-agent.js +171 -171
  15. package/examples/wordpress-elementor/README.md +77 -77
  16. package/package.json +17 -3
  17. package/public/.well-known/agent-tools.json +180 -180
  18. package/public/.well-known/ai-assets.json +59 -59
  19. package/public/.well-known/ai-plugin.json +28 -0
  20. package/public/.well-known/security.txt +8 -0
  21. package/public/agent-workspace.html +349 -347
  22. package/public/ai.html +198 -196
  23. package/public/api.html +413 -0
  24. package/public/browser.html +486 -484
  25. package/public/commander-dashboard.html +243 -243
  26. package/public/cookies.html +210 -208
  27. package/public/css/agent-workspace.css +1713 -1713
  28. package/public/css/premium.css +317 -317
  29. package/public/css/styles.css +1235 -1235
  30. package/public/dashboard.html +706 -704
  31. package/public/demo.html +1770 -1
  32. package/public/dns.html +507 -0
  33. package/public/docs.html +587 -585
  34. package/public/feed.xml +89 -89
  35. package/public/growth.html +463 -0
  36. package/public/index.html +341 -9
  37. package/public/integrations.html +556 -0
  38. package/public/js/agent-workspace.js +1740 -1740
  39. package/public/js/auth-nav.js +31 -31
  40. package/public/js/auth-redirect.js +12 -12
  41. package/public/js/cookie-consent.js +56 -56
  42. package/public/js/wab-demo-page.js +721 -721
  43. package/public/js/ws-client.js +74 -74
  44. package/public/llms-full.txt +360 -309
  45. package/public/llms.txt +125 -86
  46. package/public/login.html +85 -83
  47. package/public/mesh-dashboard.html +328 -328
  48. package/public/openapi.json +580 -580
  49. package/public/phone-shield.html +281 -0
  50. package/public/premium-dashboard.html +2489 -2487
  51. package/public/premium.html +793 -791
  52. package/public/privacy.html +297 -295
  53. package/public/register.html +105 -103
  54. package/public/robots.txt +87 -87
  55. package/public/script/wab-consent.d.ts +36 -36
  56. package/public/script/wab-consent.js +104 -104
  57. package/public/script/wab-schema.js +131 -131
  58. package/public/script/wab.d.ts +108 -108
  59. package/public/script/wab.min.js +580 -580
  60. package/public/security.txt +8 -0
  61. package/public/terms.html +256 -254
  62. package/script/ai-agent-bridge.js +1754 -1754
  63. package/sdk/README.md +99 -99
  64. package/sdk/agent-mesh.js +449 -449
  65. package/sdk/commander.js +262 -262
  66. package/sdk/index.d.ts +464 -464
  67. package/sdk/index.js +18 -1
  68. package/sdk/multi-agent.js +318 -318
  69. package/sdk/package.json +12 -1
  70. package/sdk/safety-shield.js +219 -0
  71. package/sdk/schema-discovery.js +83 -83
  72. package/server/adapters/index.js +520 -520
  73. package/server/config/plans.js +367 -367
  74. package/server/config/secrets.js +102 -102
  75. package/server/control-plane/index.js +301 -301
  76. package/server/data-plane/index.js +354 -354
  77. package/server/index.js +175 -19
  78. package/server/llm/index.js +404 -404
  79. package/server/middleware/adminAuth.js +35 -35
  80. package/server/middleware/auth.js +50 -50
  81. package/server/middleware/featureGate.js +88 -88
  82. package/server/middleware/rateLimits.js +100 -100
  83. package/server/middleware/sensitiveAction.js +157 -0
  84. package/server/migrations/001_add_analytics_indexes.sql +7 -7
  85. package/server/migrations/002_premium_features.sql +418 -418
  86. package/server/migrations/003_ads_integer_cents.sql +33 -33
  87. package/server/migrations/004_agent_os.sql +158 -158
  88. package/server/migrations/005_marketplace_metering.sql +126 -126
  89. package/server/models/adapters/index.js +33 -33
  90. package/server/models/adapters/mysql.js +183 -183
  91. package/server/models/adapters/postgresql.js +172 -172
  92. package/server/models/adapters/sqlite.js +7 -7
  93. package/server/models/db.js +681 -681
  94. package/server/observability/failure-analysis.js +337 -337
  95. package/server/observability/index.js +394 -394
  96. package/server/protocol/capabilities.js +223 -223
  97. package/server/protocol/index.js +243 -243
  98. package/server/protocol/schema.js +584 -584
  99. package/server/registry/certification.js +271 -271
  100. package/server/registry/index.js +326 -326
  101. package/server/routes/admin-premium.js +671 -671
  102. package/server/routes/admin.js +261 -261
  103. package/server/routes/ads.js +130 -130
  104. package/server/routes/agent-workspace.js +540 -378
  105. package/server/routes/api.js +150 -150
  106. package/server/routes/auth.js +71 -71
  107. package/server/routes/billing.js +45 -45
  108. package/server/routes/commander.js +316 -316
  109. package/server/routes/demo-showcase.js +332 -0
  110. package/server/routes/demo-store.js +154 -0
  111. package/server/routes/discovery.js +417 -406
  112. package/server/routes/gateway.js +173 -0
  113. package/server/routes/license.js +251 -240
  114. package/server/routes/mesh.js +469 -469
  115. package/server/routes/noscript.js +543 -543
  116. package/server/routes/premium-v2.js +686 -686
  117. package/server/routes/premium.js +724 -724
  118. package/server/routes/runtime.js +2148 -2147
  119. package/server/routes/sovereign.js +465 -385
  120. package/server/routes/universal.js +200 -177
  121. package/server/routes/wab-api.js +850 -491
  122. package/server/runtime/container-worker.js +111 -111
  123. package/server/runtime/container.js +448 -448
  124. package/server/runtime/distributed-worker.js +362 -362
  125. package/server/runtime/event-bus.js +210 -210
  126. package/server/runtime/index.js +253 -253
  127. package/server/runtime/queue.js +599 -599
  128. package/server/runtime/replay.js +666 -666
  129. package/server/runtime/sandbox.js +266 -266
  130. package/server/runtime/scheduler.js +534 -534
  131. package/server/runtime/session-engine.js +293 -293
  132. package/server/runtime/state-manager.js +188 -188
  133. package/server/security/cross-site-redactor.js +196 -0
  134. package/server/security/dry-run.js +180 -0
  135. package/server/security/human-gate-rate-limit.js +147 -0
  136. package/server/security/human-gate-transports.js +178 -0
  137. package/server/security/human-gate.js +281 -0
  138. package/server/security/index.js +368 -368
  139. package/server/security/intent-engine.js +245 -0
  140. package/server/security/reward-guard.js +171 -0
  141. package/server/security/rollback-store.js +239 -0
  142. package/server/security/token-scope.js +404 -0
  143. package/server/security/url-policy.js +139 -0
  144. package/server/services/agent-chat.js +506 -506
  145. package/server/services/agent-learning.js +601 -575
  146. package/server/services/agent-memory.js +625 -625
  147. package/server/services/agent-mesh.js +555 -539
  148. package/server/services/agent-symphony.js +717 -717
  149. package/server/services/agent-tasks.js +1807 -1807
  150. package/server/services/api-key-engine.js +292 -0
  151. package/server/services/cluster.js +894 -894
  152. package/server/services/commander.js +738 -738
  153. package/server/services/edge-compute.js +440 -440
  154. package/server/services/email.js +204 -204
  155. package/server/services/hosted-runtime.js +205 -205
  156. package/server/services/lfd.js +635 -616
  157. package/server/services/local-ai.js +389 -389
  158. package/server/services/marketplace.js +270 -270
  159. package/server/services/metering.js +182 -182
  160. package/server/services/modules/affiliate-intelligence.js +93 -0
  161. package/server/services/modules/agent-firewall.js +90 -0
  162. package/server/services/modules/bounty.js +89 -0
  163. package/server/services/modules/collective-bargaining.js +92 -0
  164. package/server/services/modules/dark-pattern.js +66 -0
  165. package/server/services/modules/gov-intelligence.js +45 -0
  166. package/server/services/modules/neural.js +55 -0
  167. package/server/services/modules/notary.js +49 -0
  168. package/server/services/modules/price-time-machine.js +86 -0
  169. package/server/services/modules/protocol.js +104 -0
  170. package/server/services/negotiation.js +439 -439
  171. package/server/services/plugins.js +771 -771
  172. package/server/services/premium.js +1 -1
  173. package/server/services/price-intelligence.js +566 -565
  174. package/server/services/price-shield.js +1137 -1137
  175. package/server/services/reputation.js +465 -465
  176. package/server/services/search-engine.js +357 -357
  177. package/server/services/security.js +513 -513
  178. package/server/services/self-healing.js +843 -843
  179. package/server/services/sovereign-shield.js +542 -0
  180. package/server/services/stripe.js +192 -192
  181. package/server/services/swarm.js +788 -788
  182. package/server/services/universal-scraper.js +662 -661
  183. package/server/services/verification.js +481 -481
  184. package/server/services/vision.js +1163 -1163
  185. package/server/utils/cache.js +125 -125
  186. package/server/utils/migrate.js +81 -81
  187. package/server/utils/safe-fetch.js +228 -0
  188. package/server/utils/secureFields.js +50 -50
  189. package/server/ws.js +161 -161
  190. package/templates/artisan-marketplace.yaml +104 -104
  191. package/templates/book-price-scout.yaml +98 -98
  192. package/templates/electronics-price-tracker.yaml +108 -108
  193. package/templates/flight-deal-hunter.yaml +113 -113
  194. package/templates/freelancer-direct.yaml +116 -116
  195. package/templates/grocery-price-compare.yaml +93 -93
  196. package/templates/hotel-direct-booking.yaml +113 -113
  197. package/templates/local-services.yaml +98 -98
  198. package/templates/olive-oil-tunisia.yaml +88 -88
  199. package/templates/organic-farm-fresh.yaml +101 -101
  200. package/templates/restaurant-direct.yaml +97 -97
  201. package/server/services/fairness-engine.js +0 -409
  202. package/server/services/fairness.js +0 -420
@@ -0,0 +1,92 @@
1
+ /**
2
+ * WAB Collective Bargaining (04-collective-bargaining) — PUBLIC JOIN API, PRIVATE MATCHING ENGINE
3
+ * Groups buyers to negotiate bulk discounts.
4
+ * Join interface is open, matching engine is closed.
5
+ *
6
+ * Powered by WAB — Web Agent Bridge
7
+ * https://www.webagentbridge.com
8
+ */
9
+
10
+ 'use strict';
11
+
12
+ const crypto = require('crypto');
13
+
14
+ const demandPools = new Map();
15
+ const NEGOTIATION_THRESHOLDS = {
16
+ electronics: { minBuyers: 10, targetDiscount: 0.15 },
17
+ travel: { minBuyers: 5, targetDiscount: 0.20 },
18
+ fashion: { minBuyers: 20, targetDiscount: 0.25 },
19
+ software: { minBuyers: 50, targetDiscount: 0.30 },
20
+ default: { minBuyers: 15, targetDiscount: 0.15 },
21
+ };
22
+
23
+ let matchingEngine;
24
+ try { matchingEngine = require('./bargaining-engine'); } catch { matchingEngine = null; }
25
+
26
+ function createRouter(express) {
27
+ const router = express.Router();
28
+
29
+ router.post('/join', (req, res) => {
30
+ const { platform, product_id, product_name, category, current_price, currency, max_price } = req.body;
31
+ if (!platform || !product_id || !current_price) {
32
+ return res.status(400).json({ error: 'platform, product_id, and current_price required' });
33
+ }
34
+
35
+ const poolKey = `${platform}:${product_id}`;
36
+ if (!demandPools.has(poolKey)) {
37
+ const cat = category || 'default';
38
+ const threshold = NEGOTIATION_THRESHOLDS[cat] || NEGOTIATION_THRESHOLDS.default;
39
+ demandPools.set(poolKey, {
40
+ id: 'POOL-' + crypto.randomBytes(8).toString('hex').toUpperCase(),
41
+ platform, product_id, product_name: product_name || product_id,
42
+ category: cat, current_price: parseFloat(current_price), currency: currency || 'USD',
43
+ target_price: parseFloat((current_price * (1 - threshold.targetDiscount)).toFixed(2)),
44
+ target_discount_pct: Math.round(threshold.targetDiscount * 100),
45
+ min_buyers: threshold.minBuyers, members: 0, status: 'OPEN',
46
+ created_at: new Date().toISOString(),
47
+ });
48
+ }
49
+
50
+ const pool = demandPools.get(poolKey);
51
+ if (pool.status !== 'OPEN') return res.status(400).json({ error: 'Pool is not open' });
52
+ pool.members++;
53
+
54
+ if (matchingEngine && pool.members >= pool.min_buyers) {
55
+ const deal = matchingEngine.negotiate(pool);
56
+ pool.status = deal ? 'DEAL_REACHED' : 'NEGOTIATING';
57
+ }
58
+
59
+ res.json({
60
+ success: true, pool_id: pool.id, member_count: pool.members, status: pool.status,
61
+ progress_pct: Math.min(100, Math.round(pool.members / pool.min_buyers * 100)),
62
+ members_needed: Math.max(0, pool.min_buyers - pool.members),
63
+ target_price: pool.target_price, target_discount_pct: pool.target_discount_pct,
64
+ });
65
+ });
66
+
67
+ router.get('/pools', (req, res) => {
68
+ const pools = Array.from(demandPools.values()).map(p => ({
69
+ pool_id: p.id, platform: p.platform, product_name: p.product_name,
70
+ current_price: p.current_price, target_price: p.target_price,
71
+ members: p.members, min_buyers: p.min_buyers, status: p.status,
72
+ progress_pct: Math.min(100, Math.round(p.members / p.min_buyers * 100)),
73
+ }));
74
+ res.json({ total: pools.length, pools: pools.filter(p => p.status === 'OPEN').slice(0, 50) });
75
+ });
76
+
77
+ router.get('/pool/:id', (req, res) => {
78
+ const pool = Array.from(demandPools.values()).find(p => p.id === req.params.id);
79
+ if (!pool) return res.status(404).json({ error: 'Pool not found' });
80
+ res.json(pool);
81
+ });
82
+
83
+ router.get('/stats', (req, res) => {
84
+ let totalMembers = 0, activePoolsCount = 0;
85
+ for (const p of demandPools.values()) { totalMembers += p.members; if (p.status === 'OPEN') activePoolsCount++; }
86
+ res.json({ total_pools: demandPools.size, active_pools: activePoolsCount, total_participants: totalMembers });
87
+ });
88
+
89
+ return router;
90
+ }
91
+
92
+ module.exports = { createRouter };
@@ -0,0 +1,66 @@
1
+ /**
2
+ * WAB Dark Pattern Detector (03-dark-pattern) — FULLY CLOSED
3
+ * DSA compliance engine detects all 17 OECD dark patterns.
4
+ * All detection rules are proprietary.
5
+ *
6
+ * Powered by WAB — Web Agent Bridge
7
+ * https://www.webagentbridge.com
8
+ */
9
+
10
+ 'use strict';
11
+
12
+ let darkPatternEngine;
13
+ try { darkPatternEngine = require('./dark-pattern-engine'); } catch { darkPatternEngine = null; }
14
+
15
+ function createRouter(express) {
16
+ const router = express.Router();
17
+
18
+ router.post('/audit', async (req, res) => {
19
+ const { url: targetUrl } = req.body;
20
+ if (!targetUrl) return res.status(400).json({ error: 'url required' });
21
+ if (!darkPatternEngine) return res.status(503).json({ error: 'Dark pattern engine not available', code: 'MODULE_UNAVAILABLE' });
22
+ try {
23
+ const report = await darkPatternEngine.generateReport(targetUrl);
24
+ res.json(report);
25
+ } catch (e) { res.status(500).json({ error: e.message }); }
26
+ });
27
+
28
+ router.post('/scan', (req, res) => {
29
+ const { html, page_url } = req.body;
30
+ if (!html) return res.status(400).json({ error: 'html content required' });
31
+ if (!darkPatternEngine) return res.status(503).json({ error: 'Dark pattern engine not available', code: 'MODULE_UNAVAILABLE' });
32
+ const result = darkPatternEngine.scanContent(html, page_url);
33
+ res.json(result);
34
+ });
35
+
36
+ router.get('/patterns', (req, res) => {
37
+ res.json({ total: 17, categories: [
38
+ { id: 'DP001', name: 'False Urgency', severity: 'HIGH', dsa_article: 'Article 25(1)(a)' },
39
+ { id: 'DP002', name: 'Scarcity Manipulation', severity: 'HIGH', dsa_article: 'Article 25(1)(a)' },
40
+ { id: 'DP003', name: 'Hidden Costs', severity: 'CRITICAL', dsa_article: 'Article 25(1)(b)' },
41
+ { id: 'DP004', name: 'Trick Question', severity: 'HIGH', dsa_article: 'Article 25(1)(c)' },
42
+ { id: 'DP005', name: 'Roach Motel', severity: 'CRITICAL', dsa_article: 'Article 25(1)(d)' },
43
+ { id: 'DP006', name: 'Confirmshaming', severity: 'MEDIUM', dsa_article: 'Article 25(1)(a)' },
44
+ { id: 'DP007', name: 'Forced Continuity', severity: 'CRITICAL', dsa_article: 'Article 25(1)(b)' },
45
+ { id: 'DP008', name: 'Misdirection', severity: 'MEDIUM', dsa_article: 'Article 25(1)(a)' },
46
+ { id: 'DP009', name: 'Disguised Ads', severity: 'HIGH', dsa_article: 'Article 26' },
47
+ { id: 'DP010', name: 'Nagging', severity: 'LOW', dsa_article: 'Article 25(1)(a)' },
48
+ { id: 'DP011', name: 'Basket Sneaking', severity: 'CRITICAL', dsa_article: 'Article 25(1)(b)' },
49
+ { id: 'DP012', name: 'Bait and Switch', severity: 'CRITICAL', dsa_article: 'Article 25(1)(b)' },
50
+ { id: 'DP013', name: 'Privacy Zuckering', severity: 'HIGH', dsa_article: 'Article 25(1)(c)' },
51
+ { id: 'DP014', name: 'Fake Social Proof', severity: 'HIGH', dsa_article: 'Article 25(1)(a)' },
52
+ { id: 'DP015', name: 'Interface Interference', severity: 'MEDIUM', dsa_article: 'Article 25(1)(a)' },
53
+ { id: 'DP016', name: 'Drip Pricing', severity: 'HIGH', dsa_article: 'Article 25(1)(b)' },
54
+ { id: 'DP017', name: 'Disguised Subscription', severity: 'CRITICAL', dsa_article: 'Article 25(1)(b)' },
55
+ ]});
56
+ });
57
+
58
+ router.get('/stats', (req, res) => {
59
+ if (!darkPatternEngine) return res.json({ status: 'engine_not_loaded', patterns_tracked: 17 });
60
+ res.json(darkPatternEngine.getStats());
61
+ });
62
+
63
+ return router;
64
+ }
65
+
66
+ module.exports = { createRouter };
@@ -0,0 +1,45 @@
1
+ /**
2
+ * WAB Gov Intelligence (05-gov-intelligence) — FULLY CLOSED
3
+ * Regulatory compliance and government intelligence database.
4
+ * All data and logic is proprietary.
5
+ *
6
+ * Powered by WAB — Web Agent Bridge
7
+ * https://www.webagentbridge.com
8
+ */
9
+
10
+ 'use strict';
11
+
12
+ let govEngine;
13
+ try { govEngine = require('./gov-engine'); } catch { govEngine = null; }
14
+
15
+ function createRouter(express) {
16
+ const router = express.Router();
17
+
18
+ router.get('/check/:domain', (req, res) => {
19
+ if (!govEngine) return res.status(503).json({ error: 'Gov intelligence engine not available', code: 'MODULE_UNAVAILABLE' });
20
+ const result = govEngine.checkDomain(req.params.domain);
21
+ res.json(result);
22
+ });
23
+
24
+ router.get('/regulations', (req, res) => {
25
+ const { country, sector } = req.query;
26
+ if (!govEngine) return res.status(503).json({ error: 'Gov intelligence engine not available', code: 'MODULE_UNAVAILABLE' });
27
+ res.json(govEngine.getRegulations(country, sector));
28
+ });
29
+
30
+ router.post('/compliance-report', (req, res) => {
31
+ const { domain, country } = req.body;
32
+ if (!domain) return res.status(400).json({ error: 'domain required' });
33
+ if (!govEngine) return res.status(503).json({ error: 'Gov intelligence engine not available', code: 'MODULE_UNAVAILABLE' });
34
+ res.json(govEngine.generateComplianceReport(domain, country));
35
+ });
36
+
37
+ router.get('/stats', (req, res) => {
38
+ if (!govEngine) return res.json({ status: 'offline' });
39
+ res.json(govEngine.getStats());
40
+ });
41
+
42
+ return router;
43
+ }
44
+
45
+ module.exports = { createRouter };
@@ -0,0 +1,55 @@
1
+ /**
2
+ * WAB Neural Engine (07-neural) — FULLY CLOSED
3
+ * Local AI inference engine. All logic is proprietary.
4
+ * Only the API interface is exposed here.
5
+ *
6
+ * Powered by WAB — Web Agent Bridge
7
+ * https://www.webagentbridge.com
8
+ */
9
+
10
+ 'use strict';
11
+
12
+ let neuralEngine;
13
+ try { neuralEngine = require('./neural-engine'); } catch { neuralEngine = null; }
14
+
15
+ function createRouter(express) {
16
+ const router = express.Router();
17
+
18
+ router.post('/analyze-url', (req, res) => {
19
+ const { url: targetUrl } = req.body;
20
+ if (!targetUrl) return res.status(400).json({ error: 'url required' });
21
+ if (!neuralEngine) return res.status(503).json({ error: 'Neural engine not available', code: 'MODULE_UNAVAILABLE' });
22
+ const result = neuralEngine.analyzeUrl(targetUrl);
23
+ res.json(result);
24
+ });
25
+
26
+ router.post('/classify', (req, res) => {
27
+ const { content, categories } = req.body;
28
+ if (!content) return res.status(400).json({ error: 'content required' });
29
+ if (!neuralEngine) return res.status(503).json({ error: 'Neural engine not available', code: 'MODULE_UNAVAILABLE' });
30
+ const result = neuralEngine.classify(content, categories);
31
+ res.json(result);
32
+ });
33
+
34
+ router.post('/embeddings', (req, res) => {
35
+ const { text } = req.body;
36
+ if (!text) return res.status(400).json({ error: 'text required' });
37
+ if (!neuralEngine) return res.status(503).json({ error: 'Neural engine not available', code: 'MODULE_UNAVAILABLE' });
38
+ const result = neuralEngine.embed(text);
39
+ res.json(result);
40
+ });
41
+
42
+ router.get('/models', (req, res) => {
43
+ if (!neuralEngine) return res.json({ models: [], message: 'Neural engine not loaded' });
44
+ res.json(neuralEngine.listModels());
45
+ });
46
+
47
+ router.get('/stats', (req, res) => {
48
+ if (!neuralEngine) return res.json({ status: 'offline' });
49
+ res.json(neuralEngine.getStats());
50
+ });
51
+
52
+ return router;
53
+ }
54
+
55
+ module.exports = { createRouter };
@@ -0,0 +1,49 @@
1
+ /**
2
+ * WAB Notary (02-notary) — FULLY CLOSED
3
+ * Cryptographic certificate system for price discrimination evidence.
4
+ * Signing algorithm is proprietary.
5
+ *
6
+ * Powered by WAB — Web Agent Bridge
7
+ * https://www.webagentbridge.com
8
+ */
9
+
10
+ 'use strict';
11
+
12
+ let notaryEngine;
13
+ try { notaryEngine = require('./notary-engine'); } catch { notaryEngine = null; }
14
+
15
+ function createRouter(express) {
16
+ const router = express.Router();
17
+
18
+ router.post('/price', (req, res) => {
19
+ const { platform, productId, priceShown } = req.body;
20
+ if (!platform || !productId || priceShown === undefined) {
21
+ return res.status(400).json({ error: 'platform, productId, and priceShown required' });
22
+ }
23
+ if (!notaryEngine) return res.status(503).json({ error: 'Notary engine not available', code: 'MODULE_UNAVAILABLE' });
24
+ const cert = notaryEngine.issuePriceCertificate(req.body);
25
+ res.status(201).json(cert);
26
+ });
27
+
28
+ router.post('/transaction', (req, res) => {
29
+ if (!notaryEngine) return res.status(503).json({ error: 'Notary engine not available', code: 'MODULE_UNAVAILABLE' });
30
+ const cert = notaryEngine.issueTransactionCertificate(req.body);
31
+ res.status(201).json(cert);
32
+ });
33
+
34
+ router.get('/verify/:certId', (req, res) => {
35
+ if (!notaryEngine) return res.status(503).json({ error: 'Notary engine not available', code: 'MODULE_UNAVAILABLE' });
36
+ const result = notaryEngine.verifyCertificate(req.params.certId);
37
+ if (!result) return res.status(404).json({ error: 'Certificate not found' });
38
+ res.json(result);
39
+ });
40
+
41
+ router.get('/stats', (req, res) => {
42
+ if (!notaryEngine) return res.json({ status: 'offline' });
43
+ res.json(notaryEngine.getStats());
44
+ });
45
+
46
+ return router;
47
+ }
48
+
49
+ module.exports = { createRouter };
@@ -0,0 +1,86 @@
1
+ /**
2
+ * WAB Price Time Machine (06-price-time-machine) — PUBLIC API, PRIVATE ENGINE
3
+ * Historical price tracking and fake discount detection.
4
+ * API is open, database and detection algorithm are closed.
5
+ *
6
+ * Powered by WAB — Web Agent Bridge
7
+ * https://www.webagentbridge.com
8
+ */
9
+
10
+ 'use strict';
11
+
12
+ const crypto = require('crypto');
13
+
14
+ const priceStore = new Map();
15
+ const alertStore = new Map();
16
+
17
+ let priceEngine;
18
+ try { priceEngine = require('./price-engine'); } catch { priceEngine = null; }
19
+
20
+ function createRouter(express) {
21
+ const router = express.Router();
22
+
23
+ router.post('/track', (req, res) => {
24
+ const { platform, product_id, product_name, price, currency, url: productUrl } = req.body;
25
+ if (!platform || !product_id || price === undefined) {
26
+ return res.status(400).json({ error: 'platform, product_id, and price are required' });
27
+ }
28
+
29
+ const key = `${platform}:${product_id}`;
30
+ if (!priceStore.has(key)) priceStore.set(key, { entries: [], metadata: { platform, product_id, product_name, currency: currency || 'USD', url: productUrl } });
31
+ const record = priceStore.get(key);
32
+ record.entries.push({ price: parseFloat(price), timestamp: Date.now(), date: new Date().toISOString() });
33
+ if (record.entries.length > 5000) record.entries.splice(0, record.entries.length - 5000);
34
+
35
+ const prices = record.entries.map(e => e.price);
36
+ const avg = prices.reduce((a, b) => a + b, 0) / prices.length;
37
+ const min = Math.min(...prices);
38
+ const max = Math.max(...prices);
39
+
40
+ let fakeDiscount = null;
41
+ if (priceEngine) {
42
+ fakeDiscount = priceEngine.detectFakeDiscount(record.entries);
43
+ }
44
+
45
+ res.json({
46
+ tracked: true, product_id, platform, current_price: price, data_points: record.entries.length,
47
+ statistics: { average: parseFloat(avg.toFixed(2)), min, max, range_pct: parseFloat(((max - min) / avg * 100).toFixed(1)) },
48
+ fake_discount: fakeDiscount,
49
+ });
50
+ });
51
+
52
+ router.get('/history/:platform/:productId', (req, res) => {
53
+ const key = `${req.params.platform}:${req.params.productId}`;
54
+ const record = priceStore.get(key);
55
+ if (!record) return res.status(404).json({ error: 'No price history for this product' });
56
+ const days = parseInt(req.query.days) || 30;
57
+ const cutoff = Date.now() - days * 86400000;
58
+ const filtered = record.entries.filter(e => e.timestamp >= cutoff);
59
+ res.json({ ...record.metadata, period_days: days, data_points: filtered.length, history: filtered });
60
+ });
61
+
62
+ router.get('/compare', (req, res) => {
63
+ const { product_name } = req.query;
64
+ if (!product_name) return res.status(400).json({ error: 'product_name query param required' });
65
+ const results = [];
66
+ const search = product_name.toLowerCase();
67
+ for (const [key, record] of priceStore) {
68
+ if (record.metadata.product_name && record.metadata.product_name.toLowerCase().includes(search)) {
69
+ const prices = record.entries.map(e => e.price);
70
+ results.push({ platform: record.metadata.platform, product_id: record.metadata.product_id, product_name: record.metadata.product_name,
71
+ current_price: prices[prices.length - 1], lowest_price: Math.min(...prices), highest_price: Math.max(...prices), data_points: prices.length });
72
+ }
73
+ }
74
+ res.json({ query: product_name, results: results.sort((a, b) => a.current_price - b.current_price) });
75
+ });
76
+
77
+ router.get('/stats', (req, res) => {
78
+ let totalPoints = 0;
79
+ for (const r of priceStore.values()) totalPoints += r.entries.length;
80
+ res.json({ products_tracked: priceStore.size, total_data_points: totalPoints, alerts_active: alertStore.size });
81
+ });
82
+
83
+ return router;
84
+ }
85
+
86
+ module.exports = { createRouter };
@@ -0,0 +1,104 @@
1
+ /**
2
+ * WAB Protocol Validator (08-protocol) — OPEN SOURCE
3
+ * Validates wab.json trust protocol files.
4
+ * This module is fully open to become a web standard.
5
+ *
6
+ * Powered by WAB — Web Agent Bridge
7
+ * https://www.webagentbridge.com
8
+ */
9
+
10
+ 'use strict';
11
+
12
+ const https = require('https');
13
+ const http = require('http');
14
+
15
+ const WAB_PROTOCOL_SCHEMA = {
16
+ required: ['wab_version', 'site', 'permissions'],
17
+ optional: ['pricing', 'returns', 'trust', 'accessibility', 'dark_patterns_policy'],
18
+ permissions_fields: ['ai_agents', 'price_comparison', 'automated_checkout', 'data_export'],
19
+ };
20
+
21
+ function validateWabJson(wabJson) {
22
+ const errors = [];
23
+ const warnings = [];
24
+ let score = 100;
25
+
26
+ if (!wabJson || typeof wabJson !== 'object') return { valid: false, score: 0, errors: ['Invalid JSON structure'] };
27
+
28
+ for (const field of WAB_PROTOCOL_SCHEMA.required) {
29
+ if (!wabJson[field]) { errors.push(`Missing required field: ${field}`); score -= 20; }
30
+ }
31
+
32
+ if (wabJson.wab_version && !/^\d+\.\d+(\.\d+)?$/.test(wabJson.wab_version)) {
33
+ errors.push('Invalid wab_version format. Expected semver (e.g., "1.0.0")'); score -= 10;
34
+ }
35
+
36
+ if (wabJson.permissions) {
37
+ const p = wabJson.permissions;
38
+ if (typeof p.ai_agents !== 'undefined' && typeof p.ai_agents !== 'boolean' && typeof p.ai_agents !== 'string') {
39
+ warnings.push('permissions.ai_agents should be boolean or policy string');
40
+ }
41
+ }
42
+
43
+ for (const field of WAB_PROTOCOL_SCHEMA.optional) {
44
+ if (wabJson[field]) score = Math.min(100, score + 3);
45
+ }
46
+
47
+ return {
48
+ valid: errors.length === 0, score: Math.max(0, score), errors, warnings,
49
+ fields_present: Object.keys(wabJson),
50
+ completeness: `${Object.keys(wabJson).length} fields`,
51
+ protocol_version: wabJson.wab_version || 'unknown',
52
+ };
53
+ }
54
+
55
+ async function fetchAndValidate(domain) {
56
+ const wabUrl = `https://${domain}/wab.json`;
57
+ return new Promise((resolve) => {
58
+ const protocol = wabUrl.startsWith('https') ? https : http;
59
+ const req = protocol.get(wabUrl, { timeout: 8000, headers: { 'User-Agent': 'WAB-Protocol-Validator/1.0' } }, (res) => {
60
+ if (res.statusCode !== 200) {
61
+ return resolve({ found: false, domain, url: wabUrl, error: `HTTP ${res.statusCode}`, recommendation: 'Add a wab.json file to your site root' });
62
+ }
63
+ let data = '';
64
+ res.on('data', c => data += c);
65
+ res.on('end', () => {
66
+ try {
67
+ const json = JSON.parse(data);
68
+ const result = validateWabJson(json);
69
+ resolve({ found: true, domain, url: wabUrl, ...result, raw: json });
70
+ } catch { resolve({ found: false, domain, url: wabUrl, error: 'Invalid JSON in wab.json' }); }
71
+ });
72
+ });
73
+ req.on('error', () => resolve({ found: false, domain, url: wabUrl, error: 'Could not reach domain' }));
74
+ req.on('timeout', () => { req.destroy(); resolve({ found: false, domain, url: wabUrl, error: 'Request timed out' }); });
75
+ });
76
+ }
77
+
78
+ function createRouter(express) {
79
+ const router = express.Router();
80
+
81
+ router.post('/validate', (req, res) => {
82
+ const { wab_json } = req.body;
83
+ if (!wab_json) return res.status(400).json({ error: 'wab_json object is required' });
84
+ res.json(validateWabJson(wab_json));
85
+ });
86
+
87
+ router.get('/check/:domain', async (req, res) => {
88
+ const result = await fetchAndValidate(req.params.domain);
89
+ res.json(result);
90
+ });
91
+
92
+ router.get('/schema', (req, res) => {
93
+ res.json({ version: '1.0', schema: WAB_PROTOCOL_SCHEMA, example: {
94
+ wab_version: '1.0.0', site: { name: 'Example Store', domain: 'example.com', type: 'e-commerce' },
95
+ permissions: { ai_agents: true, price_comparison: true, automated_checkout: false, data_export: true },
96
+ pricing: { transparency: 'full', currency: 'USD', includes_tax: false },
97
+ dark_patterns_policy: { commitment: 'none', last_audit: '2026-01-01' },
98
+ }});
99
+ });
100
+
101
+ return router;
102
+ }
103
+
104
+ module.exports = { createRouter, validateWabJson, fetchAndValidate };