web-agent-bridge 3.2.0 → 3.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +72 -72
- package/README.ar.md +1286 -1152
- package/README.md +1764 -1635
- package/bin/agent-runner.js +474 -474
- package/bin/cli.js +237 -138
- package/bin/wab.js +80 -80
- package/examples/bidi-agent.js +119 -119
- package/examples/cross-site-agent.js +91 -91
- package/examples/mcp-agent.js +94 -94
- package/examples/next-app-router/README.md +44 -44
- package/examples/puppeteer-agent.js +108 -108
- package/examples/saas-dashboard/README.md +55 -55
- package/examples/shopify-hydrogen/README.md +74 -74
- package/examples/vision-agent.js +171 -171
- package/examples/wordpress-elementor/README.md +77 -77
- package/package.json +16 -3
- package/public/.well-known/agent-tools.json +180 -180
- package/public/.well-known/ai-assets.json +59 -59
- package/public/.well-known/security.txt +8 -0
- package/public/agent-workspace.html +349 -349
- package/public/ai.html +198 -198
- package/public/api.html +413 -412
- package/public/browser.html +486 -486
- package/public/commander-dashboard.html +243 -243
- package/public/cookies.html +210 -210
- package/public/css/agent-workspace.css +1713 -1713
- package/public/css/premium.css +317 -317
- package/public/css/styles.css +1235 -1235
- package/public/dashboard.html +706 -706
- package/public/dns.html +507 -0
- package/public/docs.html +587 -587
- package/public/feed.xml +89 -89
- package/public/growth.html +463 -463
- package/public/index.html +1070 -982
- package/public/integrations.html +556 -0
- package/public/js/agent-workspace.js +1740 -1740
- package/public/js/auth-nav.js +31 -31
- package/public/js/auth-redirect.js +12 -12
- package/public/js/cookie-consent.js +56 -56
- package/public/js/wab-demo-page.js +721 -721
- package/public/js/ws-client.js +74 -74
- package/public/llms-full.txt +360 -360
- package/public/llms.txt +125 -125
- package/public/login.html +85 -85
- package/public/mesh-dashboard.html +328 -328
- package/public/openapi.json +580 -580
- package/public/phone-shield.html +281 -0
- package/public/premium-dashboard.html +2489 -2489
- package/public/premium.html +793 -793
- package/public/privacy.html +297 -297
- package/public/register.html +105 -105
- package/public/robots.txt +87 -87
- package/public/script/wab-consent.d.ts +36 -36
- package/public/script/wab-consent.js +104 -104
- package/public/script/wab-schema.js +131 -131
- package/public/script/wab.d.ts +108 -108
- package/public/script/wab.min.js +580 -580
- package/public/security.txt +8 -0
- package/public/terms.html +256 -256
- package/script/ai-agent-bridge.js +1754 -1754
- package/sdk/README.md +99 -99
- package/sdk/agent-mesh.js +449 -449
- package/sdk/commander.js +262 -262
- package/sdk/index.d.ts +464 -464
- package/sdk/index.js +12 -1
- package/sdk/multi-agent.js +318 -318
- package/sdk/package.json +1 -1
- package/sdk/safety-shield.js +219 -0
- package/sdk/schema-discovery.js +83 -83
- package/server/adapters/index.js +520 -520
- package/server/config/plans.js +367 -367
- package/server/config/secrets.js +102 -102
- package/server/control-plane/index.js +301 -301
- package/server/data-plane/index.js +354 -354
- package/server/index.js +531 -427
- package/server/llm/index.js +404 -404
- package/server/middleware/adminAuth.js +35 -35
- package/server/middleware/auth.js +50 -50
- package/server/middleware/featureGate.js +88 -88
- package/server/middleware/rateLimits.js +100 -100
- package/server/middleware/sensitiveAction.js +157 -0
- package/server/migrations/001_add_analytics_indexes.sql +7 -7
- package/server/migrations/002_premium_features.sql +418 -418
- package/server/migrations/003_ads_integer_cents.sql +33 -33
- package/server/migrations/004_agent_os.sql +158 -158
- package/server/migrations/005_marketplace_metering.sql +126 -126
- package/server/models/adapters/index.js +33 -33
- package/server/models/adapters/mysql.js +183 -183
- package/server/models/adapters/postgresql.js +172 -172
- package/server/models/adapters/sqlite.js +7 -7
- package/server/models/db.js +681 -681
- package/server/observability/failure-analysis.js +337 -337
- package/server/observability/index.js +394 -394
- package/server/protocol/capabilities.js +223 -223
- package/server/protocol/index.js +243 -243
- package/server/protocol/schema.js +584 -584
- package/server/registry/certification.js +271 -271
- package/server/registry/index.js +326 -326
- package/server/routes/admin-premium.js +671 -671
- package/server/routes/admin.js +261 -261
- package/server/routes/ads.js +130 -130
- package/server/routes/agent-workspace.js +540 -540
- package/server/routes/api.js +150 -150
- package/server/routes/auth.js +71 -71
- package/server/routes/billing.js +45 -45
- package/server/routes/commander.js +316 -316
- package/server/routes/demo-showcase.js +332 -332
- package/server/routes/demo-store.js +154 -0
- package/server/routes/discovery.js +417 -417
- package/server/routes/gateway.js +173 -157
- package/server/routes/license.js +251 -240
- package/server/routes/mesh.js +469 -469
- package/server/routes/noscript.js +543 -543
- package/server/routes/premium-v2.js +686 -686
- package/server/routes/premium.js +724 -724
- package/server/routes/runtime.js +2148 -2147
- package/server/routes/sovereign.js +465 -385
- package/server/routes/universal.js +200 -185
- package/server/routes/wab-api.js +850 -501
- package/server/runtime/container-worker.js +111 -111
- package/server/runtime/container.js +448 -448
- package/server/runtime/distributed-worker.js +362 -362
- package/server/runtime/event-bus.js +210 -210
- package/server/runtime/index.js +253 -253
- package/server/runtime/queue.js +599 -599
- package/server/runtime/replay.js +666 -666
- package/server/runtime/sandbox.js +266 -266
- package/server/runtime/scheduler.js +534 -534
- package/server/runtime/session-engine.js +293 -293
- package/server/runtime/state-manager.js +188 -188
- package/server/security/cross-site-redactor.js +196 -0
- package/server/security/dry-run.js +180 -0
- package/server/security/human-gate-rate-limit.js +147 -0
- package/server/security/human-gate-transports.js +178 -0
- package/server/security/human-gate.js +281 -0
- package/server/security/index.js +368 -368
- package/server/security/intent-engine.js +245 -0
- package/server/security/reward-guard.js +171 -0
- package/server/security/rollback-store.js +239 -0
- package/server/security/token-scope.js +404 -0
- package/server/security/url-policy.js +139 -0
- package/server/services/agent-chat.js +506 -506
- package/server/services/agent-learning.js +601 -575
- package/server/services/agent-memory.js +625 -625
- package/server/services/agent-mesh.js +555 -539
- package/server/services/agent-symphony.js +717 -717
- package/server/services/agent-tasks.js +1807 -1807
- package/server/services/api-key-engine.js +292 -261
- package/server/services/cluster.js +894 -894
- package/server/services/commander.js +738 -738
- package/server/services/edge-compute.js +440 -440
- package/server/services/email.js +204 -204
- package/server/services/hosted-runtime.js +205 -205
- package/server/services/lfd.js +635 -635
- package/server/services/local-ai.js +389 -389
- package/server/services/marketplace.js +270 -270
- package/server/services/metering.js +182 -182
- package/server/services/modules/affiliate-intelligence.js +93 -93
- package/server/services/modules/agent-firewall.js +90 -90
- package/server/services/modules/bounty.js +89 -89
- package/server/services/modules/collective-bargaining.js +92 -92
- package/server/services/modules/dark-pattern.js +66 -66
- package/server/services/modules/gov-intelligence.js +45 -45
- package/server/services/modules/neural.js +55 -55
- package/server/services/modules/notary.js +49 -49
- package/server/services/modules/price-time-machine.js +86 -86
- package/server/services/modules/protocol.js +104 -104
- package/server/services/negotiation.js +439 -439
- package/server/services/plugins.js +771 -771
- package/server/services/price-intelligence.js +566 -566
- package/server/services/price-shield.js +1137 -1137
- package/server/services/reputation.js +465 -465
- package/server/services/search-engine.js +357 -357
- package/server/services/security.js +513 -513
- package/server/services/self-healing.js +843 -843
- package/server/services/sovereign-shield.js +542 -0
- package/server/services/stripe.js +192 -192
- package/server/services/swarm.js +788 -788
- package/server/services/universal-scraper.js +662 -661
- package/server/services/verification.js +481 -481
- package/server/services/vision.js +1163 -1163
- package/server/utils/cache.js +125 -125
- package/server/utils/migrate.js +81 -81
- package/server/utils/safe-fetch.js +228 -0
- package/server/utils/secureFields.js +50 -50
- package/server/ws.js +161 -161
- package/templates/artisan-marketplace.yaml +104 -104
- package/templates/book-price-scout.yaml +98 -98
- package/templates/electronics-price-tracker.yaml +108 -108
- package/templates/flight-deal-hunter.yaml +113 -113
- package/templates/freelancer-direct.yaml +116 -116
- package/templates/grocery-price-compare.yaml +93 -93
- package/templates/hotel-direct-booking.yaml +113 -113
- package/templates/local-services.yaml +98 -98
- package/templates/olive-oil-tunisia.yaml +88 -88
- package/templates/organic-farm-fresh.yaml +101 -101
- package/templates/restaurant-direct.yaml +97 -97
- package/public/score.html +0 -263
- package/server/migrations/006_growth_suite.sql +0 -138
- package/server/routes/growth.js +0 -962
- package/server/services/fairness-engine.js +0 -409
- package/server/services/fairness.js +0 -420
package/server/config/plans.js
CHANGED
|
@@ -1,367 +1,367 @@
|
|
|
1
|
-
'use strict';
|
|
2
|
-
|
|
3
|
-
/**
|
|
4
|
-
* WAB Business Model Configuration
|
|
5
|
-
*
|
|
6
|
-
* Defines what is OPEN (free core for adoption) and what is CLOSED (paid for revenue).
|
|
7
|
-
*
|
|
8
|
-
* Principle: "Open what creates network effects. Close what creates operational value."
|
|
9
|
-
*
|
|
10
|
-
* OPEN (Core — free forever):
|
|
11
|
-
* - WAP Protocol (schema, discovery, permissions)
|
|
12
|
-
* - SDK + Client Runtime (JS, integrations)
|
|
13
|
-
* - Browser Execution Layer (basic)
|
|
14
|
-
* - Adapters (MCP, REST, Browser)
|
|
15
|
-
* - Registry (read-only — search commands, sites, templates)
|
|
16
|
-
* - Basic agent registration & authentication
|
|
17
|
-
*
|
|
18
|
-
* CLOSED (Paid — revenue layer):
|
|
19
|
-
* - Workspace / Control Plane (dashboard, monitoring, agent management)
|
|
20
|
-
* - Advanced Orchestration (scheduling, retries, pipelines, distributed exec)
|
|
21
|
-
* - Observability (tracing, analytics, performance insights)
|
|
22
|
-
* - Enterprise Security (signing, audit logs, compliance, IP allowlists)
|
|
23
|
-
* - Hosted Runtime (cloud execution, auto-scaling)
|
|
24
|
-
* - Marketplace commissions (10-20%)
|
|
25
|
-
*/
|
|
26
|
-
|
|
27
|
-
// ─── Plans ──────────────────────────────────────────────────────────────
|
|
28
|
-
|
|
29
|
-
const PLANS = {
|
|
30
|
-
free: {
|
|
31
|
-
id: 'free',
|
|
32
|
-
name: 'Free',
|
|
33
|
-
price: 0,
|
|
34
|
-
interval: 'month',
|
|
35
|
-
description: 'Core WAP protocol + SDK for developers & site integration',
|
|
36
|
-
limits: {
|
|
37
|
-
agents: 3,
|
|
38
|
-
tasksPerDay: 50,
|
|
39
|
-
executionsPerDay: 100,
|
|
40
|
-
sessions: 5,
|
|
41
|
-
maxConcurrency: 2,
|
|
42
|
-
replayRecordings: 10,
|
|
43
|
-
computeMinutesPerDay: 10,
|
|
44
|
-
storageMB: 50,
|
|
45
|
-
webhooks: 1,
|
|
46
|
-
customAgents: 1,
|
|
47
|
-
apiCallsPerMinute: 20,
|
|
48
|
-
},
|
|
49
|
-
features: {
|
|
50
|
-
// OPEN — always available
|
|
51
|
-
protocol: true,
|
|
52
|
-
sdk: true,
|
|
53
|
-
browserExecution: true,
|
|
54
|
-
adapters: true, // MCP, REST, Browser adapters
|
|
55
|
-
registryRead: true, // Browse commands, sites, templates
|
|
56
|
-
agentRegistration: true,
|
|
57
|
-
basicAuth: true,
|
|
58
|
-
discovery: true, // /.well-known/agent-tools.json
|
|
59
|
-
capabilityNegotiation: true,
|
|
60
|
-
semanticActions: true, // Basic semantic actions
|
|
61
|
-
communityTemplates: true,
|
|
62
|
-
|
|
63
|
-
// CLOSED — not available on free
|
|
64
|
-
workspace: false,
|
|
65
|
-
advancedOrchestration: false,
|
|
66
|
-
observability: false,
|
|
67
|
-
enterpriseSecurity: false,
|
|
68
|
-
hostedRuntime: false,
|
|
69
|
-
marketplace: false,
|
|
70
|
-
failureAnalysis: false,
|
|
71
|
-
replayEngine: false,
|
|
72
|
-
certification: false,
|
|
73
|
-
llmInference: false,
|
|
74
|
-
prioritySupport: false,
|
|
75
|
-
customDomain: false,
|
|
76
|
-
sla: false,
|
|
77
|
-
auditLog: false,
|
|
78
|
-
advancedAnalytics: false,
|
|
79
|
-
dataExtraction: false,
|
|
80
|
-
trafficIntelligence: false,
|
|
81
|
-
exploitShield: false,
|
|
82
|
-
visionAnalysis: false,
|
|
83
|
-
swarmExecution: false,
|
|
84
|
-
agentMemory: false,
|
|
85
|
-
},
|
|
86
|
-
},
|
|
87
|
-
|
|
88
|
-
starter: {
|
|
89
|
-
id: 'starter',
|
|
90
|
-
name: 'Starter',
|
|
91
|
-
price: 29,
|
|
92
|
-
interval: 'month',
|
|
93
|
-
stripePrice: process.env.STRIPE_PRICE_STARTER,
|
|
94
|
-
description: 'For developers building production agents',
|
|
95
|
-
limits: {
|
|
96
|
-
agents: 10,
|
|
97
|
-
tasksPerDay: 500,
|
|
98
|
-
executionsPerDay: 1000,
|
|
99
|
-
sessions: 25,
|
|
100
|
-
maxConcurrency: 5,
|
|
101
|
-
replayRecordings: 100,
|
|
102
|
-
computeMinutesPerDay: 60,
|
|
103
|
-
storageMB: 500,
|
|
104
|
-
webhooks: 5,
|
|
105
|
-
customAgents: 5,
|
|
106
|
-
apiCallsPerMinute: 60,
|
|
107
|
-
},
|
|
108
|
-
features: {
|
|
109
|
-
// OPEN
|
|
110
|
-
protocol: true,
|
|
111
|
-
sdk: true,
|
|
112
|
-
browserExecution: true,
|
|
113
|
-
adapters: true,
|
|
114
|
-
registryRead: true,
|
|
115
|
-
agentRegistration: true,
|
|
116
|
-
basicAuth: true,
|
|
117
|
-
discovery: true,
|
|
118
|
-
capabilityNegotiation: true,
|
|
119
|
-
semanticActions: true,
|
|
120
|
-
communityTemplates: true,
|
|
121
|
-
|
|
122
|
-
// PAID — now available
|
|
123
|
-
workspace: true,
|
|
124
|
-
advancedOrchestration: true,
|
|
125
|
-
observability: true, // Basic observability (metrics, logs)
|
|
126
|
-
failureAnalysis: true,
|
|
127
|
-
replayEngine: true,
|
|
128
|
-
llmInference: true,
|
|
129
|
-
advancedAnalytics: true,
|
|
130
|
-
dataExtraction: true,
|
|
131
|
-
agentMemory: true,
|
|
132
|
-
|
|
133
|
-
// Still closed
|
|
134
|
-
enterpriseSecurity: false,
|
|
135
|
-
hostedRuntime: false,
|
|
136
|
-
marketplace: false,
|
|
137
|
-
certification: false,
|
|
138
|
-
prioritySupport: false,
|
|
139
|
-
customDomain: false,
|
|
140
|
-
sla: false,
|
|
141
|
-
auditLog: false,
|
|
142
|
-
trafficIntelligence: false,
|
|
143
|
-
exploitShield: false,
|
|
144
|
-
visionAnalysis: false,
|
|
145
|
-
swarmExecution: false,
|
|
146
|
-
},
|
|
147
|
-
},
|
|
148
|
-
|
|
149
|
-
pro: {
|
|
150
|
-
id: 'pro',
|
|
151
|
-
name: 'Pro',
|
|
152
|
-
price: 99,
|
|
153
|
-
interval: 'month',
|
|
154
|
-
stripePrice: process.env.STRIPE_PRICE_PRO,
|
|
155
|
-
description: 'For teams & companies running agents at scale',
|
|
156
|
-
limits: {
|
|
157
|
-
agents: 50,
|
|
158
|
-
tasksPerDay: 5000,
|
|
159
|
-
executionsPerDay: 10000,
|
|
160
|
-
sessions: 100,
|
|
161
|
-
maxConcurrency: 20,
|
|
162
|
-
replayRecordings: 1000,
|
|
163
|
-
computeMinutesPerDay: 300,
|
|
164
|
-
storageMB: 5000,
|
|
165
|
-
webhooks: 25,
|
|
166
|
-
customAgents: 25,
|
|
167
|
-
apiCallsPerMinute: 200,
|
|
168
|
-
},
|
|
169
|
-
features: {
|
|
170
|
-
// All OPEN
|
|
171
|
-
protocol: true, sdk: true, browserExecution: true, adapters: true,
|
|
172
|
-
registryRead: true, agentRegistration: true, basicAuth: true,
|
|
173
|
-
discovery: true, capabilityNegotiation: true, semanticActions: true,
|
|
174
|
-
communityTemplates: true,
|
|
175
|
-
|
|
176
|
-
// All Starter features
|
|
177
|
-
workspace: true, advancedOrchestration: true, observability: true,
|
|
178
|
-
failureAnalysis: true, replayEngine: true, llmInference: true,
|
|
179
|
-
advancedAnalytics: true, dataExtraction: true, agentMemory: true,
|
|
180
|
-
|
|
181
|
-
// New in Pro
|
|
182
|
-
hostedRuntime: true,
|
|
183
|
-
marketplace: true, // Publish & sell on marketplace
|
|
184
|
-
certification: true,
|
|
185
|
-
trafficIntelligence: true,
|
|
186
|
-
exploitShield: true,
|
|
187
|
-
visionAnalysis: true,
|
|
188
|
-
swarmExecution: true,
|
|
189
|
-
auditLog: true,
|
|
190
|
-
customDomain: true,
|
|
191
|
-
|
|
192
|
-
// Enterprise only
|
|
193
|
-
enterpriseSecurity: false,
|
|
194
|
-
prioritySupport: false,
|
|
195
|
-
sla: false,
|
|
196
|
-
},
|
|
197
|
-
},
|
|
198
|
-
|
|
199
|
-
enterprise: {
|
|
200
|
-
id: 'enterprise',
|
|
201
|
-
name: 'Enterprise',
|
|
202
|
-
price: null, // Custom pricing
|
|
203
|
-
interval: 'month',
|
|
204
|
-
stripePrice: process.env.STRIPE_PRICE_ENTERPRISE,
|
|
205
|
-
description: 'For organizations needing security, compliance & dedicated support',
|
|
206
|
-
limits: {
|
|
207
|
-
agents: -1, // Unlimited
|
|
208
|
-
tasksPerDay: -1,
|
|
209
|
-
executionsPerDay: -1,
|
|
210
|
-
sessions: -1,
|
|
211
|
-
maxConcurrency: 100,
|
|
212
|
-
replayRecordings: -1,
|
|
213
|
-
computeMinutesPerDay: -1,
|
|
214
|
-
storageMB: -1,
|
|
215
|
-
webhooks: -1,
|
|
216
|
-
customAgents: -1,
|
|
217
|
-
apiCallsPerMinute: 1000,
|
|
218
|
-
},
|
|
219
|
-
features: {
|
|
220
|
-
// Everything
|
|
221
|
-
protocol: true, sdk: true, browserExecution: true, adapters: true,
|
|
222
|
-
registryRead: true, agentRegistration: true, basicAuth: true,
|
|
223
|
-
discovery: true, capabilityNegotiation: true, semanticActions: true,
|
|
224
|
-
communityTemplates: true,
|
|
225
|
-
workspace: true, advancedOrchestration: true, observability: true,
|
|
226
|
-
failureAnalysis: true, replayEngine: true, llmInference: true,
|
|
227
|
-
advancedAnalytics: true, dataExtraction: true, agentMemory: true,
|
|
228
|
-
hostedRuntime: true, marketplace: true, certification: true,
|
|
229
|
-
trafficIntelligence: true, exploitShield: true, visionAnalysis: true,
|
|
230
|
-
swarmExecution: true, auditLog: true, customDomain: true,
|
|
231
|
-
|
|
232
|
-
// Enterprise exclusive
|
|
233
|
-
enterpriseSecurity: true,
|
|
234
|
-
prioritySupport: true,
|
|
235
|
-
sla: true,
|
|
236
|
-
},
|
|
237
|
-
},
|
|
238
|
-
};
|
|
239
|
-
|
|
240
|
-
// ─── Usage-Based Pricing (Pay-as-you-go overages) ───────────────────
|
|
241
|
-
|
|
242
|
-
const USAGE_PRICING = {
|
|
243
|
-
execution: { unit: 'execution', price: 0.001, description: '$0.001 per execution beyond plan limit' },
|
|
244
|
-
computeMinute: { unit: 'minute', price: 0.01, description: '$0.01 per compute minute beyond plan limit' },
|
|
245
|
-
storage: { unit: 'MB', price: 0.05, description: '$0.05 per MB/month beyond plan limit' },
|
|
246
|
-
llmToken: { unit: '1K tokens', price: 0.002, description: '$0.002 per 1K tokens (pass-through + margin)' },
|
|
247
|
-
agent: { unit: 'agent', price: 2.00, description: '$2/month per additional agent beyond plan limit' },
|
|
248
|
-
};
|
|
249
|
-
|
|
250
|
-
// ─── Marketplace Commissions ────────────────────────────────────────
|
|
251
|
-
|
|
252
|
-
const MARKETPLACE = {
|
|
253
|
-
commission: 0.15, // 15% platform fee
|
|
254
|
-
minPrice: 0.99,
|
|
255
|
-
maxPrice: 999.99,
|
|
256
|
-
payoutThreshold: 25.00, // Minimum balance for payout
|
|
257
|
-
categories: [
|
|
258
|
-
'automation', 'scraping', 'commerce', 'analytics',
|
|
259
|
-
'security', 'integration', 'ai-agent', 'template',
|
|
260
|
-
'adapter', 'plugin',
|
|
261
|
-
],
|
|
262
|
-
};
|
|
263
|
-
|
|
264
|
-
// ─── Feature Gate Mapping ───────────────────────────────────────────
|
|
265
|
-
// Maps API path patterns to required features
|
|
266
|
-
|
|
267
|
-
const FEATURE_GATES = {
|
|
268
|
-
// Advanced orchestration
|
|
269
|
-
'/tasks': { feature: 'advancedOrchestration', methods: ['POST'] },
|
|
270
|
-
'/tasks/*/pause': { feature: 'advancedOrchestration', methods: ['POST'] },
|
|
271
|
-
'/tasks/*/resume': { feature: 'advancedOrchestration', methods: ['POST'] },
|
|
272
|
-
'/execute/pipeline': { feature: 'advancedOrchestration', methods: ['POST'] },
|
|
273
|
-
|
|
274
|
-
// Observability (write/analysis — reads are free for basic health)
|
|
275
|
-
'/observability/metrics': { feature: 'observability', methods: ['GET'] },
|
|
276
|
-
'/observability/traces': { feature: 'observability', methods: ['GET'] },
|
|
277
|
-
'/observability/logs': { feature: 'observability', methods: ['GET'] },
|
|
278
|
-
|
|
279
|
-
// Replay engine
|
|
280
|
-
'/replay': { feature: 'replayEngine', methods: ['GET', 'POST'] },
|
|
281
|
-
|
|
282
|
-
// Failure analysis
|
|
283
|
-
'/failures': { feature: 'failureAnalysis', methods: ['GET', 'POST'] },
|
|
284
|
-
|
|
285
|
-
// Sessions (beyond free limit)
|
|
286
|
-
'/sessions': { feature: 'workspace', methods: ['POST'] },
|
|
287
|
-
|
|
288
|
-
// Certification
|
|
289
|
-
'/certification/verify': { feature: 'certification', methods: ['POST'] },
|
|
290
|
-
|
|
291
|
-
// LLM
|
|
292
|
-
'/llm/complete': { feature: 'llmInference', methods: ['POST'] },
|
|
293
|
-
'/llm/embed': { feature: 'llmInference', methods: ['POST'] },
|
|
294
|
-
|
|
295
|
-
// Control plane
|
|
296
|
-
'/deployments': { feature: 'workspace', methods: ['POST'] },
|
|
297
|
-
'/policies': { feature: 'workspace', methods: ['POST'] },
|
|
298
|
-
|
|
299
|
-
// Signing (enterprise)
|
|
300
|
-
'/sign': { feature: 'enterpriseSecurity', methods: ['POST'] },
|
|
301
|
-
'/verify': { feature: 'enterpriseSecurity', methods: ['POST'] },
|
|
302
|
-
|
|
303
|
-
// Swarm
|
|
304
|
-
'/premium/v2/swarm': { feature: 'swarmExecution', methods: ['POST'] },
|
|
305
|
-
|
|
306
|
-
// Vision
|
|
307
|
-
'/premium/v2/vision': { feature: 'visionAnalysis', methods: ['POST'] },
|
|
308
|
-
|
|
309
|
-
// Marketplace
|
|
310
|
-
'/marketplace/publish': { feature: 'marketplace', methods: ['POST'] },
|
|
311
|
-
};
|
|
312
|
-
|
|
313
|
-
// ─── Helpers ────────────────────────────────────────────────────────
|
|
314
|
-
|
|
315
|
-
function getPlan(tier) {
|
|
316
|
-
return PLANS[tier] || PLANS.free;
|
|
317
|
-
}
|
|
318
|
-
|
|
319
|
-
function getLimit(tier, limitName) {
|
|
320
|
-
const plan = getPlan(tier);
|
|
321
|
-
return plan.limits[limitName] ?? 0;
|
|
322
|
-
}
|
|
323
|
-
|
|
324
|
-
function hasFeature(tier, featureName) {
|
|
325
|
-
const plan = getPlan(tier);
|
|
326
|
-
return plan.features[featureName] === true;
|
|
327
|
-
}
|
|
328
|
-
|
|
329
|
-
function isUnlimited(tier, limitName) {
|
|
330
|
-
return getLimit(tier, limitName) === -1;
|
|
331
|
-
}
|
|
332
|
-
|
|
333
|
-
function listPlans(includeEnterprise = true) {
|
|
334
|
-
const plans = Object.values(PLANS);
|
|
335
|
-
return includeEnterprise ? plans : plans.filter(p => p.id !== 'enterprise');
|
|
336
|
-
}
|
|
337
|
-
|
|
338
|
-
function getUpgradePath(currentTier) {
|
|
339
|
-
const order = ['free', 'starter', 'pro', 'enterprise'];
|
|
340
|
-
const idx = order.indexOf(currentTier);
|
|
341
|
-
if (idx === -1 || idx >= order.length - 1) return null;
|
|
342
|
-
return PLANS[order[idx + 1]];
|
|
343
|
-
}
|
|
344
|
-
|
|
345
|
-
function checkFeatureGate(path, method) {
|
|
346
|
-
for (const [pattern, gate] of Object.entries(FEATURE_GATES)) {
|
|
347
|
-
const regex = new RegExp('^' + pattern.replace(/\*/g, '[^/]+') + '(/|$)');
|
|
348
|
-
if (regex.test(path) && gate.methods.includes(method)) {
|
|
349
|
-
return gate.feature;
|
|
350
|
-
}
|
|
351
|
-
}
|
|
352
|
-
return null; // No gate — free access
|
|
353
|
-
}
|
|
354
|
-
|
|
355
|
-
module.exports = {
|
|
356
|
-
PLANS,
|
|
357
|
-
USAGE_PRICING,
|
|
358
|
-
MARKETPLACE,
|
|
359
|
-
FEATURE_GATES,
|
|
360
|
-
getPlan,
|
|
361
|
-
getLimit,
|
|
362
|
-
hasFeature,
|
|
363
|
-
isUnlimited,
|
|
364
|
-
listPlans,
|
|
365
|
-
getUpgradePath,
|
|
366
|
-
checkFeatureGate,
|
|
367
|
-
};
|
|
1
|
+
'use strict';
|
|
2
|
+
|
|
3
|
+
/**
|
|
4
|
+
* WAB Business Model Configuration
|
|
5
|
+
*
|
|
6
|
+
* Defines what is OPEN (free core for adoption) and what is CLOSED (paid for revenue).
|
|
7
|
+
*
|
|
8
|
+
* Principle: "Open what creates network effects. Close what creates operational value."
|
|
9
|
+
*
|
|
10
|
+
* OPEN (Core — free forever):
|
|
11
|
+
* - WAP Protocol (schema, discovery, permissions)
|
|
12
|
+
* - SDK + Client Runtime (JS, integrations)
|
|
13
|
+
* - Browser Execution Layer (basic)
|
|
14
|
+
* - Adapters (MCP, REST, Browser)
|
|
15
|
+
* - Registry (read-only — search commands, sites, templates)
|
|
16
|
+
* - Basic agent registration & authentication
|
|
17
|
+
*
|
|
18
|
+
* CLOSED (Paid — revenue layer):
|
|
19
|
+
* - Workspace / Control Plane (dashboard, monitoring, agent management)
|
|
20
|
+
* - Advanced Orchestration (scheduling, retries, pipelines, distributed exec)
|
|
21
|
+
* - Observability (tracing, analytics, performance insights)
|
|
22
|
+
* - Enterprise Security (signing, audit logs, compliance, IP allowlists)
|
|
23
|
+
* - Hosted Runtime (cloud execution, auto-scaling)
|
|
24
|
+
* - Marketplace commissions (10-20%)
|
|
25
|
+
*/
|
|
26
|
+
|
|
27
|
+
// ─── Plans ──────────────────────────────────────────────────────────────
|
|
28
|
+
|
|
29
|
+
const PLANS = {
|
|
30
|
+
free: {
|
|
31
|
+
id: 'free',
|
|
32
|
+
name: 'Free',
|
|
33
|
+
price: 0,
|
|
34
|
+
interval: 'month',
|
|
35
|
+
description: 'Core WAP protocol + SDK for developers & site integration',
|
|
36
|
+
limits: {
|
|
37
|
+
agents: 3,
|
|
38
|
+
tasksPerDay: 50,
|
|
39
|
+
executionsPerDay: 100,
|
|
40
|
+
sessions: 5,
|
|
41
|
+
maxConcurrency: 2,
|
|
42
|
+
replayRecordings: 10,
|
|
43
|
+
computeMinutesPerDay: 10,
|
|
44
|
+
storageMB: 50,
|
|
45
|
+
webhooks: 1,
|
|
46
|
+
customAgents: 1,
|
|
47
|
+
apiCallsPerMinute: 20,
|
|
48
|
+
},
|
|
49
|
+
features: {
|
|
50
|
+
// OPEN — always available
|
|
51
|
+
protocol: true,
|
|
52
|
+
sdk: true,
|
|
53
|
+
browserExecution: true,
|
|
54
|
+
adapters: true, // MCP, REST, Browser adapters
|
|
55
|
+
registryRead: true, // Browse commands, sites, templates
|
|
56
|
+
agentRegistration: true,
|
|
57
|
+
basicAuth: true,
|
|
58
|
+
discovery: true, // /.well-known/agent-tools.json
|
|
59
|
+
capabilityNegotiation: true,
|
|
60
|
+
semanticActions: true, // Basic semantic actions
|
|
61
|
+
communityTemplates: true,
|
|
62
|
+
|
|
63
|
+
// CLOSED — not available on free
|
|
64
|
+
workspace: false,
|
|
65
|
+
advancedOrchestration: false,
|
|
66
|
+
observability: false,
|
|
67
|
+
enterpriseSecurity: false,
|
|
68
|
+
hostedRuntime: false,
|
|
69
|
+
marketplace: false,
|
|
70
|
+
failureAnalysis: false,
|
|
71
|
+
replayEngine: false,
|
|
72
|
+
certification: false,
|
|
73
|
+
llmInference: false,
|
|
74
|
+
prioritySupport: false,
|
|
75
|
+
customDomain: false,
|
|
76
|
+
sla: false,
|
|
77
|
+
auditLog: false,
|
|
78
|
+
advancedAnalytics: false,
|
|
79
|
+
dataExtraction: false,
|
|
80
|
+
trafficIntelligence: false,
|
|
81
|
+
exploitShield: false,
|
|
82
|
+
visionAnalysis: false,
|
|
83
|
+
swarmExecution: false,
|
|
84
|
+
agentMemory: false,
|
|
85
|
+
},
|
|
86
|
+
},
|
|
87
|
+
|
|
88
|
+
starter: {
|
|
89
|
+
id: 'starter',
|
|
90
|
+
name: 'Starter',
|
|
91
|
+
price: 29,
|
|
92
|
+
interval: 'month',
|
|
93
|
+
stripePrice: process.env.STRIPE_PRICE_STARTER,
|
|
94
|
+
description: 'For developers building production agents',
|
|
95
|
+
limits: {
|
|
96
|
+
agents: 10,
|
|
97
|
+
tasksPerDay: 500,
|
|
98
|
+
executionsPerDay: 1000,
|
|
99
|
+
sessions: 25,
|
|
100
|
+
maxConcurrency: 5,
|
|
101
|
+
replayRecordings: 100,
|
|
102
|
+
computeMinutesPerDay: 60,
|
|
103
|
+
storageMB: 500,
|
|
104
|
+
webhooks: 5,
|
|
105
|
+
customAgents: 5,
|
|
106
|
+
apiCallsPerMinute: 60,
|
|
107
|
+
},
|
|
108
|
+
features: {
|
|
109
|
+
// OPEN
|
|
110
|
+
protocol: true,
|
|
111
|
+
sdk: true,
|
|
112
|
+
browserExecution: true,
|
|
113
|
+
adapters: true,
|
|
114
|
+
registryRead: true,
|
|
115
|
+
agentRegistration: true,
|
|
116
|
+
basicAuth: true,
|
|
117
|
+
discovery: true,
|
|
118
|
+
capabilityNegotiation: true,
|
|
119
|
+
semanticActions: true,
|
|
120
|
+
communityTemplates: true,
|
|
121
|
+
|
|
122
|
+
// PAID — now available
|
|
123
|
+
workspace: true,
|
|
124
|
+
advancedOrchestration: true,
|
|
125
|
+
observability: true, // Basic observability (metrics, logs)
|
|
126
|
+
failureAnalysis: true,
|
|
127
|
+
replayEngine: true,
|
|
128
|
+
llmInference: true,
|
|
129
|
+
advancedAnalytics: true,
|
|
130
|
+
dataExtraction: true,
|
|
131
|
+
agentMemory: true,
|
|
132
|
+
|
|
133
|
+
// Still closed
|
|
134
|
+
enterpriseSecurity: false,
|
|
135
|
+
hostedRuntime: false,
|
|
136
|
+
marketplace: false,
|
|
137
|
+
certification: false,
|
|
138
|
+
prioritySupport: false,
|
|
139
|
+
customDomain: false,
|
|
140
|
+
sla: false,
|
|
141
|
+
auditLog: false,
|
|
142
|
+
trafficIntelligence: false,
|
|
143
|
+
exploitShield: false,
|
|
144
|
+
visionAnalysis: false,
|
|
145
|
+
swarmExecution: false,
|
|
146
|
+
},
|
|
147
|
+
},
|
|
148
|
+
|
|
149
|
+
pro: {
|
|
150
|
+
id: 'pro',
|
|
151
|
+
name: 'Pro',
|
|
152
|
+
price: 99,
|
|
153
|
+
interval: 'month',
|
|
154
|
+
stripePrice: process.env.STRIPE_PRICE_PRO,
|
|
155
|
+
description: 'For teams & companies running agents at scale',
|
|
156
|
+
limits: {
|
|
157
|
+
agents: 50,
|
|
158
|
+
tasksPerDay: 5000,
|
|
159
|
+
executionsPerDay: 10000,
|
|
160
|
+
sessions: 100,
|
|
161
|
+
maxConcurrency: 20,
|
|
162
|
+
replayRecordings: 1000,
|
|
163
|
+
computeMinutesPerDay: 300,
|
|
164
|
+
storageMB: 5000,
|
|
165
|
+
webhooks: 25,
|
|
166
|
+
customAgents: 25,
|
|
167
|
+
apiCallsPerMinute: 200,
|
|
168
|
+
},
|
|
169
|
+
features: {
|
|
170
|
+
// All OPEN
|
|
171
|
+
protocol: true, sdk: true, browserExecution: true, adapters: true,
|
|
172
|
+
registryRead: true, agentRegistration: true, basicAuth: true,
|
|
173
|
+
discovery: true, capabilityNegotiation: true, semanticActions: true,
|
|
174
|
+
communityTemplates: true,
|
|
175
|
+
|
|
176
|
+
// All Starter features
|
|
177
|
+
workspace: true, advancedOrchestration: true, observability: true,
|
|
178
|
+
failureAnalysis: true, replayEngine: true, llmInference: true,
|
|
179
|
+
advancedAnalytics: true, dataExtraction: true, agentMemory: true,
|
|
180
|
+
|
|
181
|
+
// New in Pro
|
|
182
|
+
hostedRuntime: true,
|
|
183
|
+
marketplace: true, // Publish & sell on marketplace
|
|
184
|
+
certification: true,
|
|
185
|
+
trafficIntelligence: true,
|
|
186
|
+
exploitShield: true,
|
|
187
|
+
visionAnalysis: true,
|
|
188
|
+
swarmExecution: true,
|
|
189
|
+
auditLog: true,
|
|
190
|
+
customDomain: true,
|
|
191
|
+
|
|
192
|
+
// Enterprise only
|
|
193
|
+
enterpriseSecurity: false,
|
|
194
|
+
prioritySupport: false,
|
|
195
|
+
sla: false,
|
|
196
|
+
},
|
|
197
|
+
},
|
|
198
|
+
|
|
199
|
+
enterprise: {
|
|
200
|
+
id: 'enterprise',
|
|
201
|
+
name: 'Enterprise',
|
|
202
|
+
price: null, // Custom pricing
|
|
203
|
+
interval: 'month',
|
|
204
|
+
stripePrice: process.env.STRIPE_PRICE_ENTERPRISE,
|
|
205
|
+
description: 'For organizations needing security, compliance & dedicated support',
|
|
206
|
+
limits: {
|
|
207
|
+
agents: -1, // Unlimited
|
|
208
|
+
tasksPerDay: -1,
|
|
209
|
+
executionsPerDay: -1,
|
|
210
|
+
sessions: -1,
|
|
211
|
+
maxConcurrency: 100,
|
|
212
|
+
replayRecordings: -1,
|
|
213
|
+
computeMinutesPerDay: -1,
|
|
214
|
+
storageMB: -1,
|
|
215
|
+
webhooks: -1,
|
|
216
|
+
customAgents: -1,
|
|
217
|
+
apiCallsPerMinute: 1000,
|
|
218
|
+
},
|
|
219
|
+
features: {
|
|
220
|
+
// Everything
|
|
221
|
+
protocol: true, sdk: true, browserExecution: true, adapters: true,
|
|
222
|
+
registryRead: true, agentRegistration: true, basicAuth: true,
|
|
223
|
+
discovery: true, capabilityNegotiation: true, semanticActions: true,
|
|
224
|
+
communityTemplates: true,
|
|
225
|
+
workspace: true, advancedOrchestration: true, observability: true,
|
|
226
|
+
failureAnalysis: true, replayEngine: true, llmInference: true,
|
|
227
|
+
advancedAnalytics: true, dataExtraction: true, agentMemory: true,
|
|
228
|
+
hostedRuntime: true, marketplace: true, certification: true,
|
|
229
|
+
trafficIntelligence: true, exploitShield: true, visionAnalysis: true,
|
|
230
|
+
swarmExecution: true, auditLog: true, customDomain: true,
|
|
231
|
+
|
|
232
|
+
// Enterprise exclusive
|
|
233
|
+
enterpriseSecurity: true,
|
|
234
|
+
prioritySupport: true,
|
|
235
|
+
sla: true,
|
|
236
|
+
},
|
|
237
|
+
},
|
|
238
|
+
};
|
|
239
|
+
|
|
240
|
+
// ─── Usage-Based Pricing (Pay-as-you-go overages) ───────────────────
|
|
241
|
+
|
|
242
|
+
const USAGE_PRICING = {
|
|
243
|
+
execution: { unit: 'execution', price: 0.001, description: '$0.001 per execution beyond plan limit' },
|
|
244
|
+
computeMinute: { unit: 'minute', price: 0.01, description: '$0.01 per compute minute beyond plan limit' },
|
|
245
|
+
storage: { unit: 'MB', price: 0.05, description: '$0.05 per MB/month beyond plan limit' },
|
|
246
|
+
llmToken: { unit: '1K tokens', price: 0.002, description: '$0.002 per 1K tokens (pass-through + margin)' },
|
|
247
|
+
agent: { unit: 'agent', price: 2.00, description: '$2/month per additional agent beyond plan limit' },
|
|
248
|
+
};
|
|
249
|
+
|
|
250
|
+
// ─── Marketplace Commissions ────────────────────────────────────────
|
|
251
|
+
|
|
252
|
+
const MARKETPLACE = {
|
|
253
|
+
commission: 0.15, // 15% platform fee
|
|
254
|
+
minPrice: 0.99,
|
|
255
|
+
maxPrice: 999.99,
|
|
256
|
+
payoutThreshold: 25.00, // Minimum balance for payout
|
|
257
|
+
categories: [
|
|
258
|
+
'automation', 'scraping', 'commerce', 'analytics',
|
|
259
|
+
'security', 'integration', 'ai-agent', 'template',
|
|
260
|
+
'adapter', 'plugin',
|
|
261
|
+
],
|
|
262
|
+
};
|
|
263
|
+
|
|
264
|
+
// ─── Feature Gate Mapping ───────────────────────────────────────────
|
|
265
|
+
// Maps API path patterns to required features
|
|
266
|
+
|
|
267
|
+
const FEATURE_GATES = {
|
|
268
|
+
// Advanced orchestration
|
|
269
|
+
'/tasks': { feature: 'advancedOrchestration', methods: ['POST'] },
|
|
270
|
+
'/tasks/*/pause': { feature: 'advancedOrchestration', methods: ['POST'] },
|
|
271
|
+
'/tasks/*/resume': { feature: 'advancedOrchestration', methods: ['POST'] },
|
|
272
|
+
'/execute/pipeline': { feature: 'advancedOrchestration', methods: ['POST'] },
|
|
273
|
+
|
|
274
|
+
// Observability (write/analysis — reads are free for basic health)
|
|
275
|
+
'/observability/metrics': { feature: 'observability', methods: ['GET'] },
|
|
276
|
+
'/observability/traces': { feature: 'observability', methods: ['GET'] },
|
|
277
|
+
'/observability/logs': { feature: 'observability', methods: ['GET'] },
|
|
278
|
+
|
|
279
|
+
// Replay engine
|
|
280
|
+
'/replay': { feature: 'replayEngine', methods: ['GET', 'POST'] },
|
|
281
|
+
|
|
282
|
+
// Failure analysis
|
|
283
|
+
'/failures': { feature: 'failureAnalysis', methods: ['GET', 'POST'] },
|
|
284
|
+
|
|
285
|
+
// Sessions (beyond free limit)
|
|
286
|
+
'/sessions': { feature: 'workspace', methods: ['POST'] },
|
|
287
|
+
|
|
288
|
+
// Certification
|
|
289
|
+
'/certification/verify': { feature: 'certification', methods: ['POST'] },
|
|
290
|
+
|
|
291
|
+
// LLM
|
|
292
|
+
'/llm/complete': { feature: 'llmInference', methods: ['POST'] },
|
|
293
|
+
'/llm/embed': { feature: 'llmInference', methods: ['POST'] },
|
|
294
|
+
|
|
295
|
+
// Control plane
|
|
296
|
+
'/deployments': { feature: 'workspace', methods: ['POST'] },
|
|
297
|
+
'/policies': { feature: 'workspace', methods: ['POST'] },
|
|
298
|
+
|
|
299
|
+
// Signing (enterprise)
|
|
300
|
+
'/sign': { feature: 'enterpriseSecurity', methods: ['POST'] },
|
|
301
|
+
'/verify': { feature: 'enterpriseSecurity', methods: ['POST'] },
|
|
302
|
+
|
|
303
|
+
// Swarm
|
|
304
|
+
'/premium/v2/swarm': { feature: 'swarmExecution', methods: ['POST'] },
|
|
305
|
+
|
|
306
|
+
// Vision
|
|
307
|
+
'/premium/v2/vision': { feature: 'visionAnalysis', methods: ['POST'] },
|
|
308
|
+
|
|
309
|
+
// Marketplace
|
|
310
|
+
'/marketplace/publish': { feature: 'marketplace', methods: ['POST'] },
|
|
311
|
+
};
|
|
312
|
+
|
|
313
|
+
// ─── Helpers ────────────────────────────────────────────────────────
|
|
314
|
+
|
|
315
|
+
function getPlan(tier) {
|
|
316
|
+
return PLANS[tier] || PLANS.free;
|
|
317
|
+
}
|
|
318
|
+
|
|
319
|
+
function getLimit(tier, limitName) {
|
|
320
|
+
const plan = getPlan(tier);
|
|
321
|
+
return plan.limits[limitName] ?? 0;
|
|
322
|
+
}
|
|
323
|
+
|
|
324
|
+
function hasFeature(tier, featureName) {
|
|
325
|
+
const plan = getPlan(tier);
|
|
326
|
+
return plan.features[featureName] === true;
|
|
327
|
+
}
|
|
328
|
+
|
|
329
|
+
function isUnlimited(tier, limitName) {
|
|
330
|
+
return getLimit(tier, limitName) === -1;
|
|
331
|
+
}
|
|
332
|
+
|
|
333
|
+
function listPlans(includeEnterprise = true) {
|
|
334
|
+
const plans = Object.values(PLANS);
|
|
335
|
+
return includeEnterprise ? plans : plans.filter(p => p.id !== 'enterprise');
|
|
336
|
+
}
|
|
337
|
+
|
|
338
|
+
function getUpgradePath(currentTier) {
|
|
339
|
+
const order = ['free', 'starter', 'pro', 'enterprise'];
|
|
340
|
+
const idx = order.indexOf(currentTier);
|
|
341
|
+
if (idx === -1 || idx >= order.length - 1) return null;
|
|
342
|
+
return PLANS[order[idx + 1]];
|
|
343
|
+
}
|
|
344
|
+
|
|
345
|
+
function checkFeatureGate(path, method) {
|
|
346
|
+
for (const [pattern, gate] of Object.entries(FEATURE_GATES)) {
|
|
347
|
+
const regex = new RegExp('^' + pattern.replace(/\*/g, '[^/]+') + '(/|$)');
|
|
348
|
+
if (regex.test(path) && gate.methods.includes(method)) {
|
|
349
|
+
return gate.feature;
|
|
350
|
+
}
|
|
351
|
+
}
|
|
352
|
+
return null; // No gate — free access
|
|
353
|
+
}
|
|
354
|
+
|
|
355
|
+
module.exports = {
|
|
356
|
+
PLANS,
|
|
357
|
+
USAGE_PRICING,
|
|
358
|
+
MARKETPLACE,
|
|
359
|
+
FEATURE_GATES,
|
|
360
|
+
getPlan,
|
|
361
|
+
getLimit,
|
|
362
|
+
hasFeature,
|
|
363
|
+
isUnlimited,
|
|
364
|
+
listPlans,
|
|
365
|
+
getUpgradePath,
|
|
366
|
+
checkFeatureGate,
|
|
367
|
+
};
|