web-agent-bridge 3.12.0 → 3.14.0

package/examples/anthropic-tools-agent.js

@@ -0,0 +1,66 @@
+'use strict';
+
+/**
+ * Anthropic Claude tool-use example agent that uses the WAB system prompt
+ * and WABLiveTool to safely interact with a third-party site.
+ *
+ * Prerequisites:
+ *   npm install @anthropic-ai/sdk web-agent-bridge
+ *   export ANTHROPIC_API_KEY=sk-ant-...
+ *
+ * Run:
+ *   node examples/anthropic-tools-agent.js "Place an order on shop.example.com"
+ */
+
+const Anthropic = require('@anthropic-ai/sdk');
+const { systemPrompt, WABLiveTool } = require('web-agent-bridge');
+
+const client = new Anthropic();
+const tool = new WABLiveTool({ agentName: 'wab-anthropic-demo/1' });
+
+const CLAUDE_TOOL_SCHEMA = [{
+  name: tool.name,
+  description: tool.description,
+  input_schema: tool.schema
+}];
+
+async function run(userTask) {
+  const messages = [{ role: 'user', content: userTask }];
+  const system = systemPrompt({ agentName: 'wab-anthropic-demo', agentVersion: '1.0' });
+
+  for (let step = 0; step < 6; step++) {
+    const reply = await client.messages.create({
+      model: 'claude-3-5-sonnet-latest',
+      max_tokens: 1024,
+      system,
+      tools: CLAUDE_TOOL_SCHEMA,
+      messages
+    });
+
+    messages.push({ role: 'assistant', content: reply.content });
+
+    if (reply.stop_reason !== 'tool_use') {
+      const text = reply.content.filter(b => b.type === 'text').map(b => b.text).join('\n');
+      console.log('\n=== Final answer ===\n' + text);
+      return text;
+    }
+
+    const toolUses = reply.content.filter(b => b.type === 'tool_use');
+    const results = [];
+    for (const tu of toolUses) {
+      console.log(`→ tool call: ${tu.name} ${JSON.stringify(tu.input)}`);
+      const out = await (tool.invoke ? tool.invoke(tu.input) : tool._call(tu.input));
+      console.log('← tool result:', String(out).slice(0, 280));
+      results.push({ type: 'tool_result', tool_use_id: tu.id, content: typeof out === 'string' ? out : JSON.stringify(out) });
+    }
+    messages.push({ role: 'user', content: results });
+  }
+  console.warn('Max steps reached without a final answer.');
+}
+
+if (require.main === module) {
+  const task = process.argv.slice(2).join(' ') || 'Search shop.example.com for olive oil';
+  run(task).catch((e) => { console.error(e); process.exit(1); });
+}
+
+module.exports = { run };

package/examples/openai-tools-agent.js

@@ -0,0 +1,69 @@
+'use strict';
+
+/**
+ * OpenAI tool-calling example agent that uses the WAB system prompt
+ * and WABLiveTool to safely interact with a third-party site.
+ *
+ * Prerequisites:
+ *   npm install openai web-agent-bridge
+ *   export OPENAI_API_KEY=sk-...
+ *
+ * Run:
+ *   node examples/openai-tools-agent.js "Search shop.example.com for olive oil"
+ */
+
+const OpenAI = require('openai');
+const { systemPrompt, WABLiveTool } = require('web-agent-bridge');
+
+const client = new OpenAI();
+const tool = new WABLiveTool({ agentName: 'wab-openai-demo/1' });
+
+const OPENAI_TOOL_SCHEMA = [{
+  type: 'function',
+  function: {
+    name: tool.name,
+    description: tool.description,
+    parameters: tool.schema
+  }
+}];
+
+async function run(userTask) {
+  const messages = [
+    { role: 'system', content: systemPrompt({ agentName: 'wab-openai-demo', agentVersion: '1.0' }) },
+    { role: 'user', content: userTask }
+  ];
+
+  for (let step = 0; step < 6; step++) {
+    const reply = await client.chat.completions.create({
+      model: 'gpt-4o-mini',
+      messages,
+      tools: OPENAI_TOOL_SCHEMA,
+      tool_choice: 'auto'
+    });
+
+    const msg = reply.choices[0].message;
+    messages.push(msg);
+
+    if (!msg.tool_calls || msg.tool_calls.length === 0) {
+      console.log('\n=== Final answer ===\n' + msg.content);
+      return msg.content;
+    }
+
+    for (const tc of msg.tool_calls) {
+      let args = {};
+      try { args = JSON.parse(tc.function.arguments || '{}'); } catch (_) { /* ignore */ }
+      console.log(`→ tool call: ${tc.function.name} ${JSON.stringify(args)}`);
+      const out = await (tool.invoke ? tool.invoke(args) : tool._call(args));
+      console.log('← tool result:', String(out).slice(0, 280));
+      messages.push({ role: 'tool', tool_call_id: tc.id, content: typeof out === 'string' ? out : JSON.stringify(out) });
+    }
+  }
+  console.warn('Max steps reached without a final answer.');
+}
+
+if (require.main === module) {
+  const task = process.argv.slice(2).join(' ') || 'Search shop.example.com for olive oil';
+  run(task).catch((e) => { console.error(e); process.exit(1); });
+}
+
+module.exports = { run };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "web-agent-bridge",
-  "version": "3.12.0",
+  "version": "3.14.0",
   "description": "Agent Transaction Bridge — the trust + transaction layer for agentic commerce. Signed intent contracts, idempotent transactions, Ed25519-verifiable receipts, explicit compensation. Plus the original WAB stack: sovereign browser, ShieldQR, SSL health, DNS discovery, agent mesh, and unified gateway for safe AI–website interaction.",
   "author": "Web Agent Bridge <dev@webagentbridge.com>",
   "main": "server/index.js",

package/server/index.js

@@ -323,6 +323,10 @@ app.use('/api/revocations', apiLimiter, require('./routes/revocations'));
 // ── Agent-Driven Adoption v3.12.0 — canonical LLM agent system prompt ──
 app.use('/api/agent', apiLimiter, require('./routes/agent-prompt'));
 
+// ── Network Effect v3.14.0 — trusted-domains snapshot + revocations feeds ──
+// (apiLimiter already applies via /api mount above; do not stack it here.)
+app.use('/api', require('./routes/network'));
+
 // ── WAB Commercial Foundations v3.8.0 (Partners · Trust Graph API · Governance SaaS · Enterprise Mesh) ──
 app.use('/api/partners',         apiLimiter, require('./routes/partners'));
 app.use('/api/keys',             apiLimiter, require('./routes/api-keys'));

package/server/routes/network.js

@@ -0,0 +1,189 @@
+'use strict';
+
+/**
+ * Network-effect public endpoints (v3.14.0).
+ *
+ *   GET /api/trusted-domains.json — snapshot of currently-attested,
+ *     non-revoked WAB sites. Cached 1 hour. Designed for agent bootstrap
+ *     and third-party crawlers building "verified web" indexes.
+ *   GET /api/trusted-domains.txt  — same data, newline-separated domains.
+ *   GET /api/revocations/feed.json — JSON Feed 1.1 of the transparency log.
+ *   GET /api/revocations/feed.xml  — Atom 1.0 of the transparency log.
+ *
+ * Mounted at /api in server/index.js.
+ */
+
+const express = require('express');
+const router = express.Router();
+const { db } = require('../models/db');
+
+const SNAPSHOT_TTL_MS = 60 * 60 * 1000; // 1h
+let _snapshotCache = { ts: 0, data: null };
+
+function buildSnapshot() {
+  // Active sites that have no active blocking revocation.
+  let rows = [];
+  try {
+    rows = db.prepare(`
+      SELECT s.id, s.domain, s.name, s.description, s.tier, s.created_at
+      FROM sites s
+      WHERE s.active = 1
+        AND NOT EXISTS (
+          SELECT 1 FROM site_revocations r
+          WHERE r.site_id = s.id
+            AND r.status IN ('pending_appeal', 'appealed', 'final')
+            AND r.type IN ('suspended', 'revoked')
+        )
+      ORDER BY s.created_at ASC
+    `).all();
+  } catch (_) {
+    // site_revocations may not yet exist on a very first boot
+    rows = db.prepare(`
+      SELECT id, domain, name, description, tier, created_at
+      FROM sites WHERE active = 1 ORDER BY created_at ASC
+    `).all();
+  }
+
+  return {
+    schema: 'wab-trusted-domains/v1',
+    generated_at: new Date().toISOString(),
+    total: rows.length,
+    domains: rows.map(r => ({
+      domain: r.domain,
+      name: r.name,
+      tier: r.tier || 'free',
+      registered_at: r.created_at,
+      discovery_url: 'https://' + r.domain + '/.well-known/wab.json',
+      badge_url: 'https://webagentbridge.com/api/discovery/badge/' + r.domain + '.svg'
+    }))
+  };
+}
+
+function getSnapshot() {
+  const now = Date.now();
+  if (_snapshotCache.data && (now - _snapshotCache.ts) < SNAPSHOT_TTL_MS) {
+    return _snapshotCache.data;
+  }
+  const snap = buildSnapshot();
+  _snapshotCache = { ts: now, data: snap };
+  return snap;
+}
+
+router.get('/trusted-domains.json', (req, res) => {
+  const snap = getSnapshot();
+  res.set('Cache-Control', 'public, max-age=3600, s-maxage=3600');
+  res.set('X-WAB-Snapshot-Schema', snap.schema);
+  res.json(snap);
+});
+
+router.get('/trusted-domains.txt', (req, res) => {
+  const snap = getSnapshot();
+  res.set('Cache-Control', 'public, max-age=3600, s-maxage=3600');
+  res.type('text/plain; charset=utf-8');
+  res.send(snap.domains.map(d => d.domain).join('\n') + '\n');
+});
+
+// ── Revocation feeds ─────────────────────────────────────────────────
+
+function listRecentRevocations(limit) {
+  try {
+    return db.prepare(`
+      SELECT id, domain, type, reason_code, reason_text,
+             decided_at, appeal_deadline, status, updated_at
+      FROM site_revocations
+      WHERE type IN ('suspended', 'revoked')
+      ORDER BY decided_at DESC
+      LIMIT ?
+    `).all(limit);
+  } catch (_) { return []; }
+}
+
+function escapeXml(s) {
+  return String(s == null ? '' : s)
+    .replace(/&/g, '&amp;')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;')
+    .replace(/'/g, '&apos;');
+}
+
+router.get('/transparency/feed.json', (req, res) => {
+  const limit = Math.min(parseInt(req.query.limit, 10) || 50, 200);
+  const items = listRecentRevocations(limit);
+  res.set('Cache-Control', 'public, max-age=300, s-maxage=300');
+  res.json({
+    version: 'https://jsonfeed.org/version/1.1',
+    title: 'Web Agent Bridge — Revocations Transparency Log',
+    home_page_url: 'https://webagentbridge.com/revocations.html',
+    feed_url: 'https://webagentbridge.com/api/transparency/feed.json',
+    description: 'Live feed of WAB site revocations and suspensions.',
+    language: 'en',
+    items: items.map(r => ({
+      id: r.id,
+      url: 'https://webagentbridge.com/revocations.html#' + r.id,
+      title: '[' + r.type.toUpperCase() + '] ' + r.domain + ' — ' + (r.reason_code || 'unknown'),
+      content_text: (r.reason_text || '') +
+        (r.appeal_deadline ? '\nAppeal deadline: ' + r.appeal_deadline : '') +
+        '\nStatus: ' + r.status,
+      date_published: r.decided_at,
+      date_modified: r.updated_at || r.decided_at,
+      tags: [r.type, r.reason_code, r.status].filter(Boolean),
+      _wab: {
+        domain: r.domain,
+        type: r.type,
+        reason_code: r.reason_code,
+        status: r.status,
+        appeal_deadline: r.appeal_deadline
+      }
+    }))
+  });
+});
+
+router.get('/transparency/feed.xml', (req, res) => {
+  const limit = Math.min(parseInt(req.query.limit, 10) || 50, 200);
+  const items = listRecentRevocations(limit);
+  const updated = items[0] && items[0].decided_at
+    ? new Date(items[0].decided_at).toISOString()
+    : new Date().toISOString();
+
+  const entries = items.map(r => {
+    const url = 'https://webagentbridge.com/revocations.html#' + r.id;
+    const published = new Date(r.decided_at).toISOString();
+    const mod = new Date(r.updated_at || r.decided_at).toISOString();
+    const title = '[' + r.type.toUpperCase() + '] ' + r.domain + ' — ' + (r.reason_code || 'unknown');
+    const summary = (r.reason_text || '') +
+      (r.appeal_deadline ? ' Appeal deadline: ' + r.appeal_deadline + '.' : '') +
+      ' Status: ' + r.status + '.';
+    return [
+      '  <entry>',
+      '    <id>tag:webagentbridge.com,2026:' + r.id + '</id>',
+      '    <title>' + escapeXml(title) + '</title>',
+      '    <link rel="alternate" href="' + url + '"/>',
+      '    <published>' + published + '</published>',
+      '    <updated>' + mod + '</updated>',
+      '    <category term="' + escapeXml(r.type) + '"/>',
+      '    <category term="' + escapeXml(r.reason_code || '') + '"/>',
+      '    <summary>' + escapeXml(summary) + '</summary>',
+      '  </entry>'
+    ].join('\n');
+  }).join('\n');
+
+  const xml = '<?xml version="1.0" encoding="utf-8"?>\n' +
+    '<feed xmlns="http://www.w3.org/2005/Atom">\n' +
+    '  <id>https://webagentbridge.com/api/transparency/feed.xml</id>\n' +
+    '  <title>Web Agent Bridge — Revocations Transparency Log</title>\n' +
+    '  <updated>' + updated + '</updated>\n' +
+    '  <link rel="self" href="https://webagentbridge.com/api/transparency/feed.xml"/>\n' +
+    '  <link rel="alternate" href="https://webagentbridge.com/revocations.html"/>\n' +
+    (entries ? entries + '\n' : '') +
+    '</feed>\n';
+
+  res.set('Cache-Control', 'public, max-age=300, s-maxage=300');
+  res.type('application/atom+xml; charset=utf-8');
+  res.send(xml);
+});
+
+module.exports = router;
+module.exports._buildSnapshot = buildSnapshot;
+module.exports._listRecentRevocations = listRecentRevocations;
+module.exports.__resetCache = function () { _snapshotCache = { ts: 0, data: null }; };