npm - web-agent-bridge - Versions diffs - 3.2.0 → 3.3.0 - Mend

web-agent-bridge 3.2.0 → 3.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (202) hide show

package/LICENSE +72 -72
package/README.ar.md +1286 -1152
package/README.md +1764 -1635
package/bin/agent-runner.js +474 -474
package/bin/cli.js +237 -138
package/bin/wab.js +80 -80
package/examples/bidi-agent.js +119 -119
package/examples/cross-site-agent.js +91 -91
package/examples/mcp-agent.js +94 -94
package/examples/next-app-router/README.md +44 -44
package/examples/puppeteer-agent.js +108 -108
package/examples/saas-dashboard/README.md +55 -55
package/examples/shopify-hydrogen/README.md +74 -74
package/examples/vision-agent.js +171 -171
package/examples/wordpress-elementor/README.md +77 -77
package/package.json +16 -3
package/public/.well-known/agent-tools.json +180 -180
package/public/.well-known/ai-assets.json +59 -59
package/public/.well-known/security.txt +8 -0
package/public/agent-workspace.html +349 -349
package/public/ai.html +198 -198
package/public/api.html +413 -412
package/public/browser.html +486 -486
package/public/commander-dashboard.html +243 -243
package/public/cookies.html +210 -210
package/public/css/agent-workspace.css +1713 -1713
package/public/css/premium.css +317 -317
package/public/css/styles.css +1235 -1235
package/public/dashboard.html +706 -706
package/public/dns.html +507 -0
package/public/docs.html +587 -587
package/public/feed.xml +89 -89
package/public/growth.html +463 -463
package/public/index.html +1070 -982
package/public/integrations.html +556 -0
package/public/js/agent-workspace.js +1740 -1740
package/public/js/auth-nav.js +31 -31
package/public/js/auth-redirect.js +12 -12
package/public/js/cookie-consent.js +56 -56
package/public/js/wab-demo-page.js +721 -721
package/public/js/ws-client.js +74 -74
package/public/llms-full.txt +360 -360
package/public/llms.txt +125 -125
package/public/login.html +85 -85
package/public/mesh-dashboard.html +328 -328
package/public/openapi.json +580 -580
package/public/phone-shield.html +281 -0
package/public/premium-dashboard.html +2489 -2489
package/public/premium.html +793 -793
package/public/privacy.html +297 -297
package/public/register.html +105 -105
package/public/robots.txt +87 -87
package/public/script/wab-consent.d.ts +36 -36
package/public/script/wab-consent.js +104 -104
package/public/script/wab-schema.js +131 -131
package/public/script/wab.d.ts +108 -108
package/public/script/wab.min.js +580 -580
package/public/security.txt +8 -0
package/public/terms.html +256 -256
package/script/ai-agent-bridge.js +1754 -1754
package/sdk/README.md +99 -99
package/sdk/agent-mesh.js +449 -449
package/sdk/commander.js +262 -262
package/sdk/index.d.ts +464 -464
package/sdk/index.js +12 -1
package/sdk/multi-agent.js +318 -318
package/sdk/package.json +1 -1
package/sdk/safety-shield.js +219 -0
package/sdk/schema-discovery.js +83 -83
package/server/adapters/index.js +520 -520
package/server/config/plans.js +367 -367
package/server/config/secrets.js +102 -102
package/server/control-plane/index.js +301 -301
package/server/data-plane/index.js +354 -354
package/server/index.js +531 -427
package/server/llm/index.js +404 -404
package/server/middleware/adminAuth.js +35 -35
package/server/middleware/auth.js +50 -50
package/server/middleware/featureGate.js +88 -88
package/server/middleware/rateLimits.js +100 -100
package/server/middleware/sensitiveAction.js +157 -0
package/server/migrations/001_add_analytics_indexes.sql +7 -7
package/server/migrations/002_premium_features.sql +418 -418
package/server/migrations/003_ads_integer_cents.sql +33 -33
package/server/migrations/004_agent_os.sql +158 -158
package/server/migrations/005_marketplace_metering.sql +126 -126
package/server/models/adapters/index.js +33 -33
package/server/models/adapters/mysql.js +183 -183
package/server/models/adapters/postgresql.js +172 -172
package/server/models/adapters/sqlite.js +7 -7
package/server/models/db.js +681 -681
package/server/observability/failure-analysis.js +337 -337
package/server/observability/index.js +394 -394
package/server/protocol/capabilities.js +223 -223
package/server/protocol/index.js +243 -243
package/server/protocol/schema.js +584 -584
package/server/registry/certification.js +271 -271
package/server/registry/index.js +326 -326
package/server/routes/admin-premium.js +671 -671
package/server/routes/admin.js +261 -261
package/server/routes/ads.js +130 -130
package/server/routes/agent-workspace.js +540 -540
package/server/routes/api.js +150 -150
package/server/routes/auth.js +71 -71
package/server/routes/billing.js +45 -45
package/server/routes/commander.js +316 -316
package/server/routes/demo-showcase.js +332 -332
package/server/routes/demo-store.js +154 -0
package/server/routes/discovery.js +417 -417
package/server/routes/gateway.js +173 -157
package/server/routes/license.js +251 -240
package/server/routes/mesh.js +469 -469
package/server/routes/noscript.js +543 -543
package/server/routes/premium-v2.js +686 -686
package/server/routes/premium.js +724 -724
package/server/routes/runtime.js +2148 -2147
package/server/routes/sovereign.js +465 -385
package/server/routes/universal.js +200 -185
package/server/routes/wab-api.js +850 -501
package/server/runtime/container-worker.js +111 -111
package/server/runtime/container.js +448 -448
package/server/runtime/distributed-worker.js +362 -362
package/server/runtime/event-bus.js +210 -210
package/server/runtime/index.js +253 -253
package/server/runtime/queue.js +599 -599
package/server/runtime/replay.js +666 -666
package/server/runtime/sandbox.js +266 -266
package/server/runtime/scheduler.js +534 -534
package/server/runtime/session-engine.js +293 -293
package/server/runtime/state-manager.js +188 -188
package/server/security/cross-site-redactor.js +196 -0
package/server/security/dry-run.js +180 -0
package/server/security/human-gate-rate-limit.js +147 -0
package/server/security/human-gate-transports.js +178 -0
package/server/security/human-gate.js +281 -0
package/server/security/index.js +368 -368
package/server/security/intent-engine.js +245 -0
package/server/security/reward-guard.js +171 -0
package/server/security/rollback-store.js +239 -0
package/server/security/token-scope.js +404 -0
package/server/security/url-policy.js +139 -0
package/server/services/agent-chat.js +506 -506
package/server/services/agent-learning.js +601 -575
package/server/services/agent-memory.js +625 -625
package/server/services/agent-mesh.js +555 -539
package/server/services/agent-symphony.js +717 -717
package/server/services/agent-tasks.js +1807 -1807
package/server/services/api-key-engine.js +292 -261
package/server/services/cluster.js +894 -894
package/server/services/commander.js +738 -738
package/server/services/edge-compute.js +440 -440
package/server/services/email.js +204 -204
package/server/services/hosted-runtime.js +205 -205
package/server/services/lfd.js +635 -635
package/server/services/local-ai.js +389 -389
package/server/services/marketplace.js +270 -270
package/server/services/metering.js +182 -182
package/server/services/modules/affiliate-intelligence.js +93 -93
package/server/services/modules/agent-firewall.js +90 -90
package/server/services/modules/bounty.js +89 -89
package/server/services/modules/collective-bargaining.js +92 -92
package/server/services/modules/dark-pattern.js +66 -66
package/server/services/modules/gov-intelligence.js +45 -45
package/server/services/modules/neural.js +55 -55
package/server/services/modules/notary.js +49 -49
package/server/services/modules/price-time-machine.js +86 -86
package/server/services/modules/protocol.js +104 -104
package/server/services/negotiation.js +439 -439
package/server/services/plugins.js +771 -771
package/server/services/price-intelligence.js +566 -566
package/server/services/price-shield.js +1137 -1137
package/server/services/reputation.js +465 -465
package/server/services/search-engine.js +357 -357
package/server/services/security.js +513 -513
package/server/services/self-healing.js +843 -843
package/server/services/sovereign-shield.js +542 -0
package/server/services/stripe.js +192 -192
package/server/services/swarm.js +788 -788
package/server/services/universal-scraper.js +662 -661
package/server/services/verification.js +481 -481
package/server/services/vision.js +1163 -1163
package/server/utils/cache.js +125 -125
package/server/utils/migrate.js +81 -81
package/server/utils/safe-fetch.js +228 -0
package/server/utils/secureFields.js +50 -50
package/server/ws.js +161 -161
package/templates/artisan-marketplace.yaml +104 -104
package/templates/book-price-scout.yaml +98 -98
package/templates/electronics-price-tracker.yaml +108 -108
package/templates/flight-deal-hunter.yaml +113 -113
package/templates/freelancer-direct.yaml +116 -116
package/templates/grocery-price-compare.yaml +93 -93
package/templates/hotel-direct-booking.yaml +113 -113
package/templates/local-services.yaml +98 -98
package/templates/olive-oil-tunisia.yaml +88 -88
package/templates/organic-farm-fresh.yaml +101 -101
package/templates/restaurant-direct.yaml +97 -97
package/public/score.html +0 -263
package/server/migrations/006_growth_suite.sql +0 -138
package/server/routes/growth.js +0 -962
package/server/services/fairness-engine.js +0 -409
package/server/services/fairness.js +0 -420

package/public/cookies.html CHANGED Viewed

@@ -1,210 +1,210 @@
-<!DOCTYPE html>
-<html lang="en" dir="ltr">
-<head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>Cookie Policy — Web Agent Bridge</title>
-  <meta name="description" content="Cookie Policy for Web Agent Bridge. ePrivacy and GDPR compliant.">
-  <link rel="preconnect" href="https://fonts.googleapis.com">
-  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-  <style>body{background:#0a0e1a;color:#f0f4ff;font-family:Inter,-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;margin:0;min-height:100vh}</style>
-  <link rel="preload" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900&family=JetBrains+Mono:wght@400;500;600&display=swap" as="style" onload="this.onload=null;this.rel='stylesheet'">
-  <noscript><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900&family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet"></noscript>
-  <link rel="stylesheet" href="/css/styles.css?v=3.0.1">
-</head>
-<body>
-  <nav class="navbar" id="navbar">
-    <div class="container">
-      <a href="/" class="navbar-brand">
-        <div class="brand-icon">⚡</div>
-        <span>WAB</span>
-      </a>
-      <ul class="navbar-links">
-        <li><a href="/#features">Features</a></li>
-        <li><a href="/#pricing">Pricing</a></li>
-        <li><a href="/docs">Docs</a></li>
-      </ul>
-      <div class="navbar-actions">
-        <a href="/login" class="btn btn-ghost">Sign In</a>
-        <a href="/register" class="btn btn-primary btn-sm">Get Started</a>
-      </div>
-    </div>
-  </nav>
-  <div class="container" style="padding-top: 120px; padding-bottom: 80px; max-width: 800px;">
-    <div class="section-header" style="text-align: left;">
-      <span class="label">Legal</span>
-      <h1 style="font-size: 2.2rem;">Cookie Policy</h1>
-      <p style="max-width: 100%;">Last updated: March 22, 2026</p>
-    </div>
-    <div class="docs-content">
-      <h2 id="what-are-cookies">1. What Are Cookies</h2>
-      <p>
-        Cookies are small text files placed on your device when you visit a website. They are widely
-        used to make websites work, provide analytics, and remember your preferences.
-      </p>
-      <p>
-        This Cookie Policy complies with the <strong>EU ePrivacy Directive (2002/58/EC)</strong>,
-        the <strong>GDPR (EU 2016/679)</strong>, and the
-        <strong>Dutch Telecommunications Act (Telecommunicatiewet, Art. 11.7a)</strong>.
-      </p>
-      <h2 id="cookies-we-use">2. Cookies We Use</h2>
-      <p>WAB uses a <strong>minimal cookie approach</strong>. We only use what is strictly necessary.</p>
-      <h3>2.1 Strictly Necessary Cookies</h3>
-      <p>These cookies are essential for the Service to function. No consent is required under the ePrivacy Directive.</p>
-      <table style="width: 100%; border-collapse: collapse; margin: 16px 0;">
-        <thead>
-          <tr style="border-bottom: 2px solid var(--border-color);">
-            <th style="text-align: left; padding: 12px; color: var(--text-primary);">Name</th>
-            <th style="text-align: left; padding: 12px; color: var(--text-primary);">Purpose</th>
-            <th style="text-align: left; padding: 12px; color: var(--text-primary);">Duration</th>
-            <th style="text-align: left; padding: 12px; color: var(--text-primary);">Type</th>
-          </tr>
-        </thead>
-        <tbody>
-          <tr style="border-bottom: 1px solid var(--border-color);">
-            <td style="padding: 12px; color: var(--text-secondary);"><code style="font-family: var(--font-mono); background: var(--bg-surface); padding: 2px 6px; border-radius: 4px;">token</code></td>
-            <td style="padding: 12px; color: var(--text-secondary);">Authentication session (JWT)</td>
-            <td style="padding: 12px; color: var(--text-secondary);">Session / until logout</td>
-            <td style="padding: 12px; color: var(--text-secondary);">localStorage</td>
-          </tr>
-          <tr style="border-bottom: 1px solid var(--border-color);">
-            <td style="padding: 12px; color: var(--text-secondary);"><code style="font-family: var(--font-mono); background: var(--bg-surface); padding: 2px 6px; border-radius: 4px;">adminToken</code></td>
-            <td style="padding: 12px; color: var(--text-secondary);">Admin authentication session</td>
-            <td style="padding: 12px; color: var(--text-secondary);">Session / until logout</td>
-            <td style="padding: 12px; color: var(--text-secondary);">localStorage</td>
-          </tr>
-          <tr>
-            <td style="padding: 12px; color: var(--text-secondary);"><code style="font-family: var(--font-mono); background: var(--bg-surface); padding: 2px 6px; border-radius: 4px;">wab_cookie_consent</code></td>
-            <td style="padding: 12px; color: var(--text-secondary);">Remembers your cookie consent choice</td>
-            <td style="padding: 12px; color: var(--text-secondary);">365 days</td>
-            <td style="padding: 12px; color: var(--text-secondary);">localStorage</td>
-          </tr>
-        </tbody>
-      </table>
-      <h3>2.2 Analytics Cookies</h3>
-      <p>
-        <strong>We do not use any analytics cookies.</strong> We do not use Google Analytics, Facebook Pixel,
-        Hotjar, or any third-party tracking service. Our analytics system tracks AI agent behavior only
-        (not human visitors) and does not use cookies.
-      </p>
-      <h3>2.3 Marketing Cookies</h3>
-      <p><strong>We do not use marketing or advertising cookies.</strong></p>
-      <h3>2.4 Third-Party Cookies</h3>
-      <p>
-        We load Google Fonts for typography. Google may set cookies when fonts are loaded.
-        See <a href="https://policies.google.com/privacy" style="color: var(--accent-blue);" target="_blank" rel="noopener">Google's Privacy Policy</a>.
-      </p>
-      <p>
-        When you interact with payment flows, <strong>Stripe</strong> may set cookies for fraud prevention.
-        See <a href="https://stripe.com/cookie-settings" style="color: var(--accent-blue);" target="_blank" rel="noopener">Stripe's Cookie Policy</a>.
-      </p>
-      <h2 id="consent">3. Cookie Consent</h2>
-      <p>
-        Under the Dutch Telecommunicatiewet and the ePrivacy Directive:
-      </p>
-      <ul>
-        <li><strong>Strictly necessary cookies</strong> do not require consent (they are exempt under Art. 11.7a(3) Tw)</li>
-        <li><strong>Non-essential cookies</strong> require informed, prior consent — we obtain this via our cookie banner</li>
-      </ul>
-      <p>
-        Since WAB currently uses <strong>only strictly necessary storage</strong>, we inform you via the cookie
-        banner but no opt-in is required for our cookies. Third-party cookies from Google Fonts and Stripe
-        are noted for transparency.
-      </p>
-      <h2 id="manage">4. How to Manage Cookies</h2>
-      <p>You can control cookies through your browser settings:</p>
-      <ul>
-        <li><strong>Chrome</strong>: Settings → Privacy and security → Cookies</li>
-        <li><strong>Firefox</strong>: Settings → Privacy & Security → Cookies</li>
-        <li><strong>Safari</strong>: Preferences → Privacy → Cookies</li>
-        <li><strong>Edge</strong>: Settings → Cookies and site permissions</li>
-      </ul>
-      <p>
-        Note: Blocking essential cookies (like the authentication token) will prevent you from logging
-        into your WAB account.
-      </p>
-      <h2 id="local-storage">5. Local Storage</h2>
-      <p>
-        WAB uses <strong>localStorage</strong> (not traditional cookies) for authentication tokens.
-        While localStorage is technically not a "cookie," it serves a similar purpose and is covered
-        by the ePrivacy Directive's rules on storing information on user devices. We treat it with
-        the same transparency requirements.
-      </p>
-      <h2 id="bridge-script">6. The WAB Bridge Script</h2>
-      <p>
-        The WAB bridge script (<code style="font-family: var(--font-mono); background: var(--bg-surface); padding: 2px 6px; border-radius: 4px;">ai-agent-bridge.js</code>)
-        that Site Owners embed on their websites:
-      </p>
-      <ul>
-        <li><strong>Does not set any cookies</strong> on website visitors' browsers</li>
-        <li><strong>Does not use localStorage</strong> on website visitors' browsers</li>
-        <li><strong>Does not track human visitors</strong> — it only creates an interface for AI agents</li>
-        <li>Uses temporary in-memory session tokens (not persisted to disk)</li>
-      </ul>
-      <h2 id="changes">7. Changes to This Policy</h2>
-      <p>
-        We will update this Cookie Policy if we change our cookie practices. Changes will be posted on
-        this page with an updated date.
-      </p>
-      <h2 id="contact">8. Contact</h2>
-      <p>
-        For questions about our cookie practices:<br>
-        Email: <a href="mailto:privacy@webagentbridge.com" style="color: var(--accent-blue);">privacy@webagentbridge.com</a>
-      </p>
-    </div>
-  </div>
-  <footer class="footer">
-    <div class="container">
-      <div class="footer-grid">
-        <div class="footer-brand">
-          <a href="/" class="navbar-brand"><div class="brand-icon">⚡</div><span>Web Agent Bridge</span></a>
-          <p>Open-source middleware for AI agent and website interaction.</p>
-        </div>
-        <div class="footer-col">
-          <h4>Product</h4>
-          <ul>
-            <li><a href="/#features">Features</a></li>
-            <li><a href="/#pricing">Pricing</a></li>
-            <li><a href="/docs">Documentation</a></li>
-          </ul>
-        </div>
-        <div class="footer-col">
-          <h4>Developers</h4>
-          <ul>
-            <li><a href="/docs#quick-start">Quick Start</a></li>
-            <li><a href="/docs#api-reference">API Reference</a></li>
-            <li><a href="https://github.com/abokenan444/web-agent-bridge" target="_blank" rel="noopener">GitHub</a></li>
-          </ul>
-        </div>
-        <div class="footer-col">
-          <h4>Legal</h4>
-          <ul>
-            <li><a href="/privacy">Privacy Policy</a></li>
-            <li><a href="/terms">Terms of Service</a></li>
-            <li><a href="/cookies">Cookie Policy</a></li>
-          </ul>
-        </div>
-      </div>
-      <div class="footer-bottom">
-        <span>&copy; 2026 Web Agent Bridge. MIT License. Operated from the Netherlands.</span>
-      </div>
-    </div>
-  </footer>
-</body>
-</html>
+<!DOCTYPE html>
+<html lang="en" dir="ltr">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Cookie Policy — Web Agent Bridge</title>
+  <meta name="description" content="Cookie Policy for Web Agent Bridge. ePrivacy and GDPR compliant.">
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <style>body{background:#0a0e1a;color:#f0f4ff;font-family:Inter,-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;margin:0;min-height:100vh}</style>
+  <link rel="preload" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900&family=JetBrains+Mono:wght@400;500;600&display=swap" as="style" onload="this.onload=null;this.rel='stylesheet'">
+  <noscript><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900&family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet"></noscript>
+  <link rel="stylesheet" href="/css/styles.css?v=3.0.1">
+</head>
+<body>
+  <nav class="navbar" id="navbar">
+    <div class="container">
+      <a href="/" class="navbar-brand">
+        <div class="brand-icon">⚡</div>
+        <span>WAB</span>
+      </a>
+      <ul class="navbar-links">
+        <li><a href="/#features">Features</a></li>
+        <li><a href="/#pricing">Pricing</a></li>
+        <li><a href="/docs">Docs</a></li>
+      </ul>
+      <div class="navbar-actions">
+        <a href="/login" class="btn btn-ghost">Sign In</a>
+        <a href="/register" class="btn btn-primary btn-sm">Get Started</a>
+      </div>
+    </div>
+  </nav>
+  <div class="container" style="padding-top: 120px; padding-bottom: 80px; max-width: 800px;">
+    <div class="section-header" style="text-align: left;">
+      <span class="label">Legal</span>
+      <h1 style="font-size: 2.2rem;">Cookie Policy</h1>
+      <p style="max-width: 100%;">Last updated: March 22, 2026</p>
+    </div>
+    <div class="docs-content">
+      <h2 id="what-are-cookies">1. What Are Cookies</h2>
+      <p>
+        Cookies are small text files placed on your device when you visit a website. They are widely
+        used to make websites work, provide analytics, and remember your preferences.
+      </p>
+      <p>
+        This Cookie Policy complies with the <strong>EU ePrivacy Directive (2002/58/EC)</strong>,
+        the <strong>GDPR (EU 2016/679)</strong>, and the
+        <strong>Dutch Telecommunications Act (Telecommunicatiewet, Art. 11.7a)</strong>.
+      </p>
+      <h2 id="cookies-we-use">2. Cookies We Use</h2>
+      <p>WAB uses a <strong>minimal cookie approach</strong>. We only use what is strictly necessary.</p>
+      <h3>2.1 Strictly Necessary Cookies</h3>
+      <p>These cookies are essential for the Service to function. No consent is required under the ePrivacy Directive.</p>
+      <table style="width: 100%; border-collapse: collapse; margin: 16px 0;">
+        <thead>
+          <tr style="border-bottom: 2px solid var(--border-color);">
+            <th style="text-align: left; padding: 12px; color: var(--text-primary);">Name</th>
+            <th style="text-align: left; padding: 12px; color: var(--text-primary);">Purpose</th>
+            <th style="text-align: left; padding: 12px; color: var(--text-primary);">Duration</th>
+            <th style="text-align: left; padding: 12px; color: var(--text-primary);">Type</th>
+          </tr>
+        </thead>
+        <tbody>
+          <tr style="border-bottom: 1px solid var(--border-color);">
+            <td style="padding: 12px; color: var(--text-secondary);"><code style="font-family: var(--font-mono); background: var(--bg-surface); padding: 2px 6px; border-radius: 4px;">token</code></td>
+            <td style="padding: 12px; color: var(--text-secondary);">Authentication session (JWT)</td>
+            <td style="padding: 12px; color: var(--text-secondary);">Session / until logout</td>
+            <td style="padding: 12px; color: var(--text-secondary);">localStorage</td>
+          </tr>
+          <tr style="border-bottom: 1px solid var(--border-color);">
+            <td style="padding: 12px; color: var(--text-secondary);"><code style="font-family: var(--font-mono); background: var(--bg-surface); padding: 2px 6px; border-radius: 4px;">adminToken</code></td>
+            <td style="padding: 12px; color: var(--text-secondary);">Admin authentication session</td>
+            <td style="padding: 12px; color: var(--text-secondary);">Session / until logout</td>
+            <td style="padding: 12px; color: var(--text-secondary);">localStorage</td>
+          </tr>
+          <tr>
+            <td style="padding: 12px; color: var(--text-secondary);"><code style="font-family: var(--font-mono); background: var(--bg-surface); padding: 2px 6px; border-radius: 4px;">wab_cookie_consent</code></td>
+            <td style="padding: 12px; color: var(--text-secondary);">Remembers your cookie consent choice</td>
+            <td style="padding: 12px; color: var(--text-secondary);">365 days</td>
+            <td style="padding: 12px; color: var(--text-secondary);">localStorage</td>
+          </tr>
+        </tbody>
+      </table>
+      <h3>2.2 Analytics Cookies</h3>
+      <p>
+        <strong>We do not use any analytics cookies.</strong> We do not use Google Analytics, Facebook Pixel,
+        Hotjar, or any third-party tracking service. Our analytics system tracks AI agent behavior only
+        (not human visitors) and does not use cookies.
+      </p>
+      <h3>2.3 Marketing Cookies</h3>
+      <p><strong>We do not use marketing or advertising cookies.</strong></p>
+      <h3>2.4 Third-Party Cookies</h3>
+      <p>
+        We load Google Fonts for typography. Google may set cookies when fonts are loaded.
+        See <a href="https://policies.google.com/privacy" style="color: var(--accent-blue);" target="_blank" rel="noopener">Google's Privacy Policy</a>.
+      </p>
+      <p>
+        When you interact with payment flows, <strong>Stripe</strong> may set cookies for fraud prevention.
+        See <a href="https://stripe.com/cookie-settings" style="color: var(--accent-blue);" target="_blank" rel="noopener">Stripe's Cookie Policy</a>.
+      </p>
+      <h2 id="consent">3. Cookie Consent</h2>
+      <p>
+        Under the Dutch Telecommunicatiewet and the ePrivacy Directive:
+      </p>
+      <ul>
+        <li><strong>Strictly necessary cookies</strong> do not require consent (they are exempt under Art. 11.7a(3) Tw)</li>
+        <li><strong>Non-essential cookies</strong> require informed, prior consent — we obtain this via our cookie banner</li>
+      </ul>
+      <p>
+        Since WAB currently uses <strong>only strictly necessary storage</strong>, we inform you via the cookie
+        banner but no opt-in is required for our cookies. Third-party cookies from Google Fonts and Stripe
+        are noted for transparency.
+      </p>
+      <h2 id="manage">4. How to Manage Cookies</h2>
+      <p>You can control cookies through your browser settings:</p>
+      <ul>
+        <li><strong>Chrome</strong>: Settings → Privacy and security → Cookies</li>
+        <li><strong>Firefox</strong>: Settings → Privacy & Security → Cookies</li>
+        <li><strong>Safari</strong>: Preferences → Privacy → Cookies</li>
+        <li><strong>Edge</strong>: Settings → Cookies and site permissions</li>
+      </ul>
+      <p>
+        Note: Blocking essential cookies (like the authentication token) will prevent you from logging
+        into your WAB account.
+      </p>
+      <h2 id="local-storage">5. Local Storage</h2>
+      <p>
+        WAB uses <strong>localStorage</strong> (not traditional cookies) for authentication tokens.
+        While localStorage is technically not a "cookie," it serves a similar purpose and is covered
+        by the ePrivacy Directive's rules on storing information on user devices. We treat it with
+        the same transparency requirements.
+      </p>
+      <h2 id="bridge-script">6. The WAB Bridge Script</h2>
+      <p>
+        The WAB bridge script (<code style="font-family: var(--font-mono); background: var(--bg-surface); padding: 2px 6px; border-radius: 4px;">ai-agent-bridge.js</code>)
+        that Site Owners embed on their websites:
+      </p>
+      <ul>
+        <li><strong>Does not set any cookies</strong> on website visitors' browsers</li>
+        <li><strong>Does not use localStorage</strong> on website visitors' browsers</li>
+        <li><strong>Does not track human visitors</strong> — it only creates an interface for AI agents</li>
+        <li>Uses temporary in-memory session tokens (not persisted to disk)</li>
+      </ul>
+      <h2 id="changes">7. Changes to This Policy</h2>
+      <p>
+        We will update this Cookie Policy if we change our cookie practices. Changes will be posted on
+        this page with an updated date.
+      </p>
+      <h2 id="contact">8. Contact</h2>
+      <p>
+        For questions about our cookie practices:<br>
+        Email: <a href="mailto:privacy@webagentbridge.com" style="color: var(--accent-blue);">privacy@webagentbridge.com</a>
+      </p>
+    </div>
+  </div>
+  <footer class="footer">
+    <div class="container">
+      <div class="footer-grid">
+        <div class="footer-brand">
+          <a href="/" class="navbar-brand"><div class="brand-icon">⚡</div><span>Web Agent Bridge</span></a>
+          <p>Open-source middleware for AI agent and website interaction.</p>
+        </div>
+        <div class="footer-col">
+          <h4>Product</h4>
+          <ul>
+            <li><a href="/#features">Features</a></li>
+            <li><a href="/#pricing">Pricing</a></li>
+            <li><a href="/docs">Documentation</a></li>
+          </ul>
+        </div>
+        <div class="footer-col">
+          <h4>Developers</h4>
+          <ul>
+            <li><a href="/docs#quick-start">Quick Start</a></li>
+            <li><a href="/docs#api-reference">API Reference</a></li>
+            <li><a href="https://github.com/abokenan444/web-agent-bridge" target="_blank" rel="noopener">GitHub</a></li>
+          </ul>
+        </div>
+        <div class="footer-col">
+          <h4>Legal</h4>
+          <ul>
+            <li><a href="/privacy">Privacy Policy</a></li>
+            <li><a href="/terms">Terms of Service</a></li>
+            <li><a href="/cookies">Cookie Policy</a></li>
+          </ul>
+        </div>
+      </div>
+      <div class="footer-bottom">
+        <span>&copy; 2026 Web Agent Bridge. MIT License. Operated from the Netherlands.</span>
+      </div>
+    </div>
+  </footer>
+</body>
+</html>