web-agent-bridge 3.2.0 → 3.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (256) hide show
  1. package/LICENSE +84 -72
  2. package/README.ar.md +1304 -1152
  3. package/README.md +298 -1635
  4. package/bin/agent-runner.js +474 -474
  5. package/bin/cli.js +237 -138
  6. package/bin/wab-init.js +223 -0
  7. package/bin/wab.js +80 -80
  8. package/examples/azure-dns-wab.js +83 -0
  9. package/examples/bidi-agent.js +119 -119
  10. package/examples/cloudflare-wab-dns.js +121 -0
  11. package/examples/cpanel-wab-dns.js +114 -0
  12. package/examples/cross-site-agent.js +91 -91
  13. package/examples/dns-discovery-agent.js +166 -0
  14. package/examples/gcp-dns-wab.js +76 -0
  15. package/examples/governance-agent.js +169 -0
  16. package/examples/mcp-agent.js +94 -94
  17. package/examples/next-app-router/README.md +44 -44
  18. package/examples/plesk-wab-dns.js +103 -0
  19. package/examples/puppeteer-agent.js +108 -108
  20. package/examples/route53-wab-dns.js +144 -0
  21. package/examples/saas-dashboard/README.md +55 -55
  22. package/examples/safe-mode-agent.js +96 -0
  23. package/examples/shopify-hydrogen/README.md +74 -74
  24. package/examples/vision-agent.js +171 -171
  25. package/examples/wab-sign.js +74 -0
  26. package/examples/wab-verify.js +60 -0
  27. package/examples/wordpress-elementor/README.md +77 -77
  28. package/package.json +19 -6
  29. package/public/.well-known/agent-tools.json +180 -180
  30. package/public/.well-known/ai-assets.json +59 -59
  31. package/public/.well-known/security.txt +8 -0
  32. package/public/.well-known/wab.json +28 -0
  33. package/public/activate.html +368 -0
  34. package/public/adoption-metrics.html +188 -0
  35. package/public/agent-workspace.html +349 -349
  36. package/public/ai.html +198 -198
  37. package/public/api.html +413 -412
  38. package/public/azure-dns-integration.html +289 -0
  39. package/public/browser.html +486 -486
  40. package/public/cloudflare-integration.html +380 -0
  41. package/public/commander-dashboard.html +243 -243
  42. package/public/cookies.html +210 -210
  43. package/public/cpanel-integration.html +398 -0
  44. package/public/css/agent-workspace.css +1713 -1713
  45. package/public/css/premium.css +317 -317
  46. package/public/css/styles.css +1263 -1235
  47. package/public/dashboard.html +707 -706
  48. package/public/dns.html +436 -0
  49. package/public/docs.html +588 -587
  50. package/public/feed.xml +89 -89
  51. package/public/gcp-dns-integration.html +318 -0
  52. package/public/growth.html +465 -463
  53. package/public/index.html +1266 -982
  54. package/public/integrations.html +556 -0
  55. package/public/js/activate.js +145 -0
  56. package/public/js/agent-workspace.js +1740 -1740
  57. package/public/js/auth-nav.js +65 -31
  58. package/public/js/auth-redirect.js +12 -12
  59. package/public/js/cookie-consent.js +56 -56
  60. package/public/js/dns.js +438 -0
  61. package/public/js/wab-demo-page.js +721 -721
  62. package/public/js/ws-client.js +74 -74
  63. package/public/llms-full.txt +360 -360
  64. package/public/llms.txt +125 -125
  65. package/public/login.html +85 -85
  66. package/public/mesh-dashboard.html +328 -328
  67. package/public/openapi.json +669 -580
  68. package/public/phone-shield.html +281 -0
  69. package/public/plesk-integration.html +375 -0
  70. package/public/premium-dashboard.html +2489 -2489
  71. package/public/premium.html +793 -793
  72. package/public/privacy.html +297 -297
  73. package/public/provider-onboarding.html +172 -0
  74. package/public/provider-sandbox.html +134 -0
  75. package/public/providers.html +359 -0
  76. package/public/register.html +105 -105
  77. package/public/registrar-integrations.html +141 -0
  78. package/public/robots.txt +99 -87
  79. package/public/route53-integration.html +531 -0
  80. package/public/script/wab-consent.d.ts +36 -36
  81. package/public/script/wab-consent.js +104 -104
  82. package/public/script/wab-schema.js +131 -131
  83. package/public/script/wab.d.ts +108 -108
  84. package/public/script/wab.min.js +580 -580
  85. package/public/security.txt +8 -0
  86. package/public/shieldqr.html +231 -0
  87. package/public/sitemap.xml +6 -0
  88. package/public/terms.html +256 -256
  89. package/public/wab-trust.html +200 -0
  90. package/public/wab-vs-protocols.html +210 -0
  91. package/public/whitepaper.html +449 -0
  92. package/script/ai-agent-bridge.js +1754 -1754
  93. package/sdk/README.md +99 -99
  94. package/sdk/agent-mesh.js +449 -449
  95. package/sdk/auto-discovery.js +288 -0
  96. package/sdk/commander.js +262 -262
  97. package/sdk/governance.js +262 -0
  98. package/sdk/index.d.ts +464 -464
  99. package/sdk/index.js +25 -1
  100. package/sdk/multi-agent.js +318 -318
  101. package/sdk/package.json +2 -2
  102. package/sdk/safe-mode.js +221 -0
  103. package/sdk/safety-shield.js +219 -0
  104. package/sdk/schema-discovery.js +83 -83
  105. package/server/adapters/index.js +520 -520
  106. package/server/config/plans.js +367 -367
  107. package/server/config/secrets.js +102 -102
  108. package/server/control-plane/index.js +301 -301
  109. package/server/data-plane/index.js +354 -354
  110. package/server/index.js +670 -427
  111. package/server/llm/index.js +404 -404
  112. package/server/middleware/adminAuth.js +35 -35
  113. package/server/middleware/auth.js +50 -50
  114. package/server/middleware/featureGate.js +88 -88
  115. package/server/middleware/rateLimits.js +100 -100
  116. package/server/middleware/sensitiveAction.js +157 -0
  117. package/server/migrations/001_add_analytics_indexes.sql +7 -7
  118. package/server/migrations/002_premium_features.sql +418 -418
  119. package/server/migrations/003_ads_integer_cents.sql +33 -33
  120. package/server/migrations/004_agent_os.sql +158 -158
  121. package/server/migrations/005_marketplace_metering.sql +126 -126
  122. package/server/migrations/007_governance.sql +106 -0
  123. package/server/migrations/008_plans.sql +144 -0
  124. package/server/migrations/009_shieldqr.sql +30 -0
  125. package/server/migrations/010_extended_trust.sql +33 -0
  126. package/server/models/adapters/index.js +33 -33
  127. package/server/models/adapters/mysql.js +183 -183
  128. package/server/models/adapters/postgresql.js +172 -172
  129. package/server/models/adapters/sqlite.js +7 -7
  130. package/server/models/db.js +740 -681
  131. package/server/observability/failure-analysis.js +337 -337
  132. package/server/observability/index.js +394 -394
  133. package/server/protocol/capabilities.js +223 -223
  134. package/server/protocol/index.js +243 -243
  135. package/server/protocol/schema.js +584 -584
  136. package/server/registry/certification.js +271 -271
  137. package/server/registry/index.js +326 -326
  138. package/server/routes/admin-plans.js +76 -0
  139. package/server/routes/admin-premium.js +673 -671
  140. package/server/routes/admin-shieldqr.js +90 -0
  141. package/server/routes/admin-trust-monitor.js +83 -0
  142. package/server/routes/admin.js +549 -261
  143. package/server/routes/ads.js +130 -130
  144. package/server/routes/agent-workspace.js +540 -540
  145. package/server/routes/api.js +150 -150
  146. package/server/routes/auth.js +71 -71
  147. package/server/routes/billing.js +57 -45
  148. package/server/routes/commander.js +316 -316
  149. package/server/routes/demo-showcase.js +332 -332
  150. package/server/routes/demo-store.js +154 -0
  151. package/server/routes/discovery.js +2348 -417
  152. package/server/routes/gateway.js +173 -157
  153. package/server/routes/governance.js +208 -0
  154. package/server/routes/license.js +251 -240
  155. package/server/routes/mesh.js +469 -469
  156. package/server/routes/noscript.js +543 -543
  157. package/server/routes/plans.js +33 -0
  158. package/server/routes/premium-v2.js +686 -686
  159. package/server/routes/premium.js +724 -724
  160. package/server/routes/providers.js +650 -0
  161. package/server/routes/runtime.js +2148 -2147
  162. package/server/routes/shieldqr.js +88 -0
  163. package/server/routes/sovereign.js +465 -385
  164. package/server/routes/universal.js +200 -185
  165. package/server/routes/wab-api.js +850 -501
  166. package/server/runtime/container-worker.js +111 -111
  167. package/server/runtime/container.js +448 -448
  168. package/server/runtime/distributed-worker.js +362 -362
  169. package/server/runtime/event-bus.js +210 -210
  170. package/server/runtime/index.js +253 -253
  171. package/server/runtime/queue.js +599 -599
  172. package/server/runtime/replay.js +666 -666
  173. package/server/runtime/sandbox.js +266 -266
  174. package/server/runtime/scheduler.js +534 -534
  175. package/server/runtime/session-engine.js +293 -293
  176. package/server/runtime/state-manager.js +188 -188
  177. package/server/security/cross-site-redactor.js +196 -0
  178. package/server/security/dry-run.js +180 -0
  179. package/server/security/human-gate-rate-limit.js +147 -0
  180. package/server/security/human-gate-transports.js +178 -0
  181. package/server/security/human-gate.js +281 -0
  182. package/server/security/index.js +368 -368
  183. package/server/security/intent-engine.js +245 -0
  184. package/server/security/reward-guard.js +171 -0
  185. package/server/security/rollback-store.js +239 -0
  186. package/server/security/token-scope.js +404 -0
  187. package/server/security/url-policy.js +139 -0
  188. package/server/services/agent-chat.js +506 -506
  189. package/server/services/agent-learning.js +601 -575
  190. package/server/services/agent-memory.js +625 -625
  191. package/server/services/agent-mesh.js +555 -539
  192. package/server/services/agent-symphony.js +717 -717
  193. package/server/services/agent-tasks.js +1807 -1807
  194. package/server/services/api-key-engine.js +292 -261
  195. package/server/services/cluster.js +894 -894
  196. package/server/services/commander.js +738 -738
  197. package/server/services/edge-compute.js +440 -440
  198. package/server/services/email.js +233 -204
  199. package/server/services/governance.js +466 -0
  200. package/server/services/hosted-runtime.js +205 -205
  201. package/server/services/lfd.js +635 -635
  202. package/server/services/local-ai.js +389 -389
  203. package/server/services/marketplace.js +270 -270
  204. package/server/services/metering.js +182 -182
  205. package/server/services/modules/affiliate-intelligence.js +93 -93
  206. package/server/services/modules/agent-firewall.js +90 -90
  207. package/server/services/modules/bounty.js +89 -89
  208. package/server/services/modules/collective-bargaining.js +92 -92
  209. package/server/services/modules/dark-pattern.js +66 -66
  210. package/server/services/modules/gov-intelligence.js +45 -45
  211. package/server/services/modules/neural.js +55 -55
  212. package/server/services/modules/notary.js +49 -49
  213. package/server/services/modules/price-time-machine.js +86 -86
  214. package/server/services/modules/protocol.js +104 -104
  215. package/server/services/negotiation.js +439 -439
  216. package/server/services/plans.js +214 -0
  217. package/server/services/plugins.js +771 -771
  218. package/server/services/premium.js +1 -1
  219. package/server/services/price-intelligence.js +566 -566
  220. package/server/services/price-shield.js +1137 -1137
  221. package/server/services/provider-clients.js +740 -0
  222. package/server/services/reputation.js +465 -465
  223. package/server/services/search-engine.js +357 -357
  224. package/server/services/security.js +513 -513
  225. package/server/services/self-healing.js +843 -843
  226. package/server/services/shieldqr.js +322 -0
  227. package/server/services/sovereign-shield.js +542 -0
  228. package/server/services/ssl-inspector.js +42 -0
  229. package/server/services/ssl-monitor.js +167 -0
  230. package/server/services/stripe.js +205 -192
  231. package/server/services/swarm.js +788 -788
  232. package/server/services/universal-scraper.js +662 -661
  233. package/server/services/verification.js +481 -481
  234. package/server/services/vision.js +1163 -1163
  235. package/server/services/wab-crypto.js +178 -0
  236. package/server/utils/cache.js +125 -125
  237. package/server/utils/migrate.js +81 -81
  238. package/server/utils/safe-fetch.js +228 -0
  239. package/server/utils/secureFields.js +50 -50
  240. package/server/ws.js +161 -161
  241. package/templates/artisan-marketplace.yaml +104 -104
  242. package/templates/book-price-scout.yaml +98 -98
  243. package/templates/electronics-price-tracker.yaml +108 -108
  244. package/templates/flight-deal-hunter.yaml +113 -113
  245. package/templates/freelancer-direct.yaml +116 -116
  246. package/templates/grocery-price-compare.yaml +93 -93
  247. package/templates/hotel-direct-booking.yaml +113 -113
  248. package/templates/local-services.yaml +98 -98
  249. package/templates/olive-oil-tunisia.yaml +88 -88
  250. package/templates/organic-farm-fresh.yaml +101 -101
  251. package/templates/restaurant-direct.yaml +97 -97
  252. package/public/score.html +0 -263
  253. package/server/migrations/006_growth_suite.sql +0 -138
  254. package/server/routes/growth.js +0 -962
  255. package/server/services/fairness-engine.js +0 -409
  256. package/server/services/fairness.js +0 -420
package/public/phone-shield.html ADDED
@@ -0,0 +1,281 @@
1
+ <!DOCTYPE html>
2
+ <html lang="en" dir="ltr">
3
+ <head>
4
+ <meta charset="UTF-8">
5
+ <meta name="viewport" content="width=device-width, initial-scale=1.0">
6
+ <title>WAB Sovereign Phone Shield</title>
7
+ <meta name="description" content="Communication protection layer for WAB: threat-intel feed, behavioral IDS, community reporting, and personal vault encryption.">
8
+ <link rel="preconnect" href="https://fonts.googleapis.com">
9
+ <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
10
+ <link rel="preload" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&family=JetBrains+Mono:wght@400;500&display=swap" as="style" onload="this.onload=null;this.rel='stylesheet'">
11
+ <noscript><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&family=JetBrains+Mono:wght@400;500&display=swap" rel="stylesheet"></noscript>
12
+ <link rel="stylesheet" href="/css/styles.css?v=3.2.0">
13
+ <style>
14
+ body{background:#070d19;color:#e5edff}
15
+ .hero{padding:110px 24px 42px;text-align:center}
16
+ .hero h1{font-size:clamp(2rem,4vw,3rem);margin-bottom:10px}
17
+ .hero p{max-width:860px;margin:0 auto;color:#99a8c7;line-height:1.7}
18
+ .lang{display:flex;gap:10px;justify-content:center;margin:0 0 22px}
19
+ .lang button{border:1px solid rgba(255,255,255,.15);background:rgba(255,255,255,.04);color:#e5edff;padding:8px 14px;border-radius:10px;cursor:pointer}
20
+ .lang button.active{background:linear-gradient(135deg,#0ea5e9,#2563eb);border-color:transparent}
21
+ .grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(340px,1fr));gap:18px;max-width:1300px;margin:0 auto;padding:0 20px 32px}
22
+ .card{background:linear-gradient(180deg,rgba(17,24,39,.9),rgba(12,18,31,.95));border:1px solid rgba(148,163,184,.18);border-radius:16px;padding:18px}
23
+ .card h3{margin:0 0 8px;font-size:1.07rem}
24
+ .muted{color:#96a7c7;font-size:.92rem;line-height:1.65}
25
+ .badge{display:inline-block;background:rgba(16,185,129,.14);border:1px solid rgba(16,185,129,.36);color:#6ee7b7;padding:4px 9px;border-radius:999px;font-size:.73rem;font-weight:700;margin-top:8px}
26
+ .box{background:rgba(2,6,23,.72);border:1px solid rgba(148,163,184,.2);border-radius:13px;padding:14px;margin-top:12px}
27
+ .row{display:grid;grid-template-columns:1fr 1fr;gap:10px}
28
+ @media (max-width:780px){.row{grid-template-columns:1fr}}
29
+ label{display:block;font-size:.78rem;color:#9fb0ce;margin-bottom:4px}
30
+ input,textarea,select{width:100%;background:#0a1324;border:1px solid rgba(148,163,184,.27);border-radius:10px;color:#e2e8f0;padding:10px;font-family:Inter,sans-serif}
31
+ textarea{min-height:98px;resize:vertical}
32
+ .btn{margin-top:10px;background:linear-gradient(135deg,#0284c7,#1d4ed8);color:#fff;border:none;padding:10px 14px;border-radius:10px;cursor:pointer;font-weight:700}
33
+ .btn.secondary{background:linear-gradient(135deg,#334155,#1e293b)}
34
+ pre{background:#020617;border:1px solid rgba(148,163,184,.25);padding:10px;border-radius:10px;font-size:.78rem;color:#a5b4fc;overflow:auto;font-family:'JetBrains Mono',monospace;line-height:1.55;max-height:260px}
35
+ .stats{display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:10px}
36
+ .stat{background:rgba(2,6,23,.66);border:1px solid rgba(148,163,184,.19);border-radius:12px;padding:12px}
37
+ .stat .k{color:#93a6c7;font-size:.75rem}
38
+ .stat .v{font-size:1.45rem;font-weight:800;color:#7dd3fc}
39
+ .status{font-size:.84rem;margin-top:10px}
40
+ .ok{color:#4ade80}.warn{color:#facc15}.danger{color:#f87171}
41
+ </style>
42
+ </head>
43
+ <body>
44
+ <nav class="navbar" id="navbar">
45
+ <div class="container">
46
+ <a href="/" class="navbar-brand"><div class="brand-icon">⚡</div><span>WAB</span></a>
47
+ <ul class="navbar-links">
48
+ <li><a href="/">Home</a></li>
49
+ <li><a href="/integrations">Integrations</a></li>
50
+ <li><a href="/phone-shield" class="active">Phone Shield</a></li>
51
+ <li><a href="/sovereign">Sovereign</a></li>
52
+ <li><a href="/docs">Docs</a></li>
53
+ </ul>
54
+ </div>
55
+ </nav>
56
+
57
+ <section class="hero">
58
+ <div class="lang">
59
+ <button id="enBtn" class="active" onclick="setLang('en')">English</button>
60
+ <button id="arBtn" onclick="setLang('ar')">العربية</button>
61
+ </div>
62
+ <h1 data-en="Sovereign Phone Shield" data-ar="درع الهاتف السيادي">Sovereign Phone Shield</h1>
63
+ <p data-en="WAB now extends from browser protection into communication protection: behavioral IDS, local connection risk analysis, community threat intelligence, and personal vault cryptography. This page is fully connected to live endpoints under /api/sovereign/shield." data-ar="يمتد WAB الآن من حماية التصفح إلى حماية الاتصال: كشف سلوكي، تحليل مخاطر الاتصالات محلياً، استخبارات تهديدات مجتمعية، وتشفير الحصن الشخصي. هذه الصفحة متصلة فعلياً بنقاط النهاية الحية تحت /api/sovereign/shield.">WAB now extends from browser protection into communication protection: behavioral IDS, local connection risk analysis, community threat intelligence, and personal vault cryptography. This page is fully connected to live endpoints under /api/sovereign/shield.</p>
64
+ </section>
65
+
66
+ <section class="grid">
67
+ <div class="card">
68
+ <h3 data-en="Live Shield Telemetry" data-ar="قياسات الدرع الحية">Live Shield Telemetry</h3>
69
+ <p class="muted" data-en="Real-time global stats from the sovereign shield service." data-ar="إحصاءات عالمية لحظية من خدمة الدرع السيادي.">Real-time global stats from the sovereign shield service.</p>
70
+ <div class="stats" id="stats"></div>
71
+ <div class="box">
72
+ <button class="btn secondary" onclick="loadStats()" data-en="Refresh Stats" data-ar="تحديث الإحصاءات">Refresh Stats</button>
73
+ <button class="btn secondary" onclick="loadEvents()" data-en="Load Events" data-ar="تحميل الأحداث">Load Events</button>
74
+ <pre id="eventsOut">[]</pre>
75
+ </div>
76
+ </div>
77
+
78
+ <div class="card">
79
+ <h3 data-en="Connection Risk Analyzer" data-ar="محلل مخاطر الاتصال">Connection Risk Analyzer</h3>
80
+ <p class="muted" data-en="Simulate app traffic and run behavioral analysis to decide: allow, warn, or block." data-ar="حاكي حركة تطبيق وشغّل التحليل السلوكي لتحديد: السماح أو التحذير أو الحجب.">Simulate app traffic and run behavioral analysis to decide: allow, warn, or block.</p>
81
+ <div class="row">
82
+ <div><label>App</label><input id="aApp" value="whatsapp"></div>
83
+ <div><label>Destination</label><input id="aDst" value="cdn-whatsapp-secure.com"></div>
84
+ </div>
85
+ <div class="row">
86
+ <div><label>bytesOut</label><input id="aOut" value="6200000" type="number"></div>
87
+ <div><label>bytesIn</label><input id="aIn" value="120000" type="number"></div>
88
+ </div>
89
+ <div class="row">
90
+ <div><label>Background</label><select id="aBg"><option value="true">true</option><option value="false">false</option></select></div>
91
+ <div><label>Mic Access</label><select id="aMic"><option value="true">true</option><option value="false" selected>false</option></select></div>
92
+ </div>
93
+ <button class="btn" onclick="analyzeConnection()" data-en="Analyze Connection" data-ar="تحليل الاتصال">Analyze Connection</button>
94
+ <div id="analysisStatus" class="status"></div>
95
+ <pre id="analysisOut">{}</pre>
96
+ </div>
97
+
98
+ <div class="card">
99
+ <h3 data-en="Personal Cloud Vault (AES-256-GCM)" data-ar="الحصن السحابي الشخصي (AES-256-GCM)">Personal Cloud Vault (AES-256-GCM)</h3>
100
+ <p class="muted" data-en="Encrypt sensitive text locally via API cryptography endpoint, then decrypt with passphrase." data-ar="شفّر النصوص الحساسة محلياً عبر نقطة تشفير API ثم فكها بكلمة المرور.">Encrypt sensitive text locally via API cryptography endpoint, then decrypt with passphrase.</p>
101
+ <label data-en="Sensitive Data" data-ar="بيانات حساسة">Sensitive Data</label>
102
+ <textarea id="vaultPlain">Private notes, credentials, recovery phrase...</textarea>
103
+ <label data-en="Passphrase" data-ar="عبارة المرور">Passphrase</label>
104
+ <input id="vaultPass" value="StrongPassphrase-2026">
105
+ <div class="row">
106
+ <button class="btn" onclick="encryptVault()" data-en="Encrypt to Vault" data-ar="تشفير إلى الحصن">Encrypt to Vault</button>
107
+ <button class="btn secondary" onclick="decryptVault()" data-en="Decrypt" data-ar="فك التشفير">Decrypt</button>
108
+ </div>
109
+ <pre id="vaultOut">{}</pre>
110
+ </div>
111
+
112
+ <div class="card">
113
+ <h3 data-en="Community Threat Intelligence" data-ar="استخبارات التهديدات المجتمعية">Community Threat Intelligence</h3>
114
+ <p class="muted" data-en="Submit suspicious host fingerprints. After multiple independent reports, indicators are promoted automatically." data-ar="أرسل بصمات مضيفات مشبوهة. بعد تقارير مستقلة متعددة، تتم الترقية تلقائياً كمؤشر تهديد.">Submit suspicious host fingerprints. After multiple independent reports, indicators are promoted automatically.</p>
115
+ <div class="row">
116
+ <div><label>Host</label><input id="rHost" value="suspicious-c2-node.xyz"></div>
117
+ <div><label>Reporter Fingerprint</label><input id="rFinger" value="device-AR-001"></div>
118
+ </div>
119
+ <div class="row">
120
+ <div><label>Severity</label><select id="rSeverity"><option>critical</option><option selected>medium</option><option>low</option></select></div>
121
+ <div><label>Notes</label><input id="rNotes" value="background exfiltration pattern"></div>
122
+ </div>
123
+ <button class="btn" onclick="submitReport()" data-en="Submit Report" data-ar="إرسال التقرير">Submit Report</button>
124
+ <pre id="reportOut">{}</pre>
125
+ </div>
126
+
127
+ <div class="card">
128
+ <h3 data-en="Android/iOS Local Tunnel Integration" data-ar="دمج النفق المحلي لأندرويد و iOS">Android/iOS Local Tunnel Integration</h3>
129
+ <p class="muted" data-en="Use these production endpoints from your mobile VPN service / Network Extension: register device, heartbeat, then stream packet metadata in batches." data-ar="استخدم نقاط النهاية الإنتاجية التالية من خدمة VPN في الهاتف / Network Extension: سجّل الجهاز، أرسل heartbeat، ثم أرسل ميتاداتا الاتصالات على دفعات.">Use these production endpoints from your mobile VPN service / Network Extension: register device, heartbeat, then stream packet metadata in batches.</p>
130
+ <div class="box">
131
+ <pre>POST /api/sovereign/shield/devices/register
132
+ {
133
+ "deviceFingerprint": "android-uuid-001",
134
+ "platform": "android",
135
+ "appVersion": "1.0.0",
136
+ "osVersion": "14",
137
+ "model": "Pixel 8"
138
+ }
139
+
140
+ POST /api/sovereign/shield/devices/heartbeat
141
+ {
142
+ "deviceFingerprint": "android-uuid-001",
143
+ "platform": "android",
144
+ "batteryLevel": 77,
145
+ "networkType": "wifi"
146
+ }
147
+
148
+ POST /api/sovereign/shield/devices/telemetry
149
+ {
150
+ "deviceFingerprint": "android-uuid-001",
151
+ "connections": [
152
+ {
153
+ "app": "whatsapp",
154
+ "destination": "example-host.com",
155
+ "bytesOut": 220000,
156
+ "bytesIn": 130000,
157
+ "background": true,
158
+ "micAccess": false,
159
+ "cameraAccess": false,
160
+ "contactsAccess": false
161
+ }
162
+ ]
163
+ }</pre>
164
+ </div>
165
+ <div style="display:flex;gap:10px;flex-wrap:wrap;margin-top:10px;">
166
+ <a class="btn secondary" href="/api/sovereign/shield/devices?limit=20" target="_blank">Devices API</a>
167
+ <a class="btn secondary" href="/api/sovereign/shield/intel-feed" target="_blank">Intel Feed API</a>
168
+ </div>
169
+ </div>
170
+ </section>
171
+
172
+ <script>
173
+ const API = '/api/sovereign/shield';
174
+ let lastVaultPayload = null;
175
+
176
+ function setLang(lang){
177
+ const ar = lang === 'ar';
178
+ document.documentElement.lang = lang;
179
+ document.documentElement.dir = ar ? 'rtl' : 'ltr';
180
+ document.getElementById('enBtn').classList.toggle('active', !ar);
181
+ document.getElementById('arBtn').classList.toggle('active', ar);
182
+ document.querySelectorAll('[data-en]').forEach(el => el.innerHTML = el.getAttribute(ar ? 'data-ar' : 'data-en'));
183
+ localStorage.setItem('wab-phone-shield-lang', lang);
184
+ }
185
+
186
+ async function j(url, opts){
187
+ const r = await fetch(url, opts);
188
+ const t = await r.text();
189
+ try { return JSON.parse(t); } catch { return { raw: t, status: r.status }; }
190
+ }
191
+
192
+ async function loadStats(){
193
+ const s = await j(API + '/stats');
194
+ const statsEl = document.getElementById('stats');
195
+ const rows = [
196
+ ['Analyzed', s.analyzed || 0],
197
+ ['Blocked', s.blocked || 0],
198
+ ['Warned', s.warned || 0],
199
+ ['Indicators', s.indicators || 0],
200
+ ['Reports', s.communityReports || 0],
201
+ ['Intel Ver', s.intelVersion || 0]
202
+ ];
203
+ statsEl.innerHTML = rows.map(([k,v]) => `<div class="stat"><div class="k">${k}</div><div class="v">${v}</div></div>`).join('');
204
+ }
205
+
206
+ async function loadEvents(){
207
+ const e = await j(API + '/events?limit=20');
208
+ document.getElementById('eventsOut').textContent = JSON.stringify(e, null, 2);
209
+ }
210
+
211
+ async function analyzeConnection(){
212
+ const body = {
213
+ app: document.getElementById('aApp').value,
214
+ destination: document.getElementById('aDst').value,
215
+ bytesOut: Number(document.getElementById('aOut').value || 0),
216
+ bytesIn: Number(document.getElementById('aIn').value || 0),
217
+ background: document.getElementById('aBg').value === 'true',
218
+ micAccess: document.getElementById('aMic').value === 'true'
219
+ };
220
+ const out = await j(API + '/analyze-connection', {
221
+ method: 'POST',
222
+ headers: { 'Content-Type': 'application/json' },
223
+ body: JSON.stringify(body)
224
+ });
225
+ document.getElementById('analysisOut').textContent = JSON.stringify(out, null, 2);
226
+ const st = document.getElementById('analysisStatus');
227
+ st.className = 'status ' + (out.decision === 'block' ? 'danger' : out.decision === 'warn' ? 'warn' : 'ok');
228
+ st.textContent = out.decision ? ('Decision: ' + out.decision.toUpperCase() + ' | Risk: ' + out.riskScore) : 'No decision';
229
+ await loadStats();
230
+ }
231
+
232
+ async function encryptVault(){
233
+ const out = await j(API + '/vault/encrypt', {
234
+ method: 'POST',
235
+ headers: { 'Content-Type': 'application/json' },
236
+ body: JSON.stringify({
237
+ plaintext: document.getElementById('vaultPlain').value,
238
+ passphrase: document.getElementById('vaultPass').value
239
+ })
240
+ });
241
+ if (out && out.payload) lastVaultPayload = out.payload;
242
+ document.getElementById('vaultOut').textContent = JSON.stringify(out, null, 2);
243
+ await loadStats();
244
+ }
245
+
246
+ async function decryptVault(){
247
+ if (!lastVaultPayload) return;
248
+ const out = await j(API + '/vault/decrypt', {
249
+ method: 'POST',
250
+ headers: { 'Content-Type': 'application/json' },
251
+ body: JSON.stringify({ payload: lastVaultPayload, passphrase: document.getElementById('vaultPass').value })
252
+ });
253
+ document.getElementById('vaultOut').textContent = JSON.stringify(out, null, 2);
254
+ await loadStats();
255
+ }
256
+
257
+ async function submitReport(){
258
+ const out = await j(API + '/report', {
259
+ method: 'POST',
260
+ headers: { 'Content-Type': 'application/json' },
261
+ body: JSON.stringify({
262
+ host: document.getElementById('rHost').value,
263
+ reporterFingerprint: document.getElementById('rFinger').value,
264
+ severity: document.getElementById('rSeverity').value,
265
+ notes: document.getElementById('rNotes').value
266
+ })
267
+ });
268
+ document.getElementById('reportOut').textContent = JSON.stringify(out, null, 2);
269
+ await loadStats();
270
+ }
271
+
272
+ (function boot(){
273
+ const lang = localStorage.getItem('wab-phone-shield-lang');
274
+ if (lang === 'ar') setLang('ar');
275
+ loadStats();
276
+ loadEvents();
277
+ setInterval(loadStats, 10000);
278
+ })();
279
+ </script>
280
+ </body>
281
+ </html>
package/public/plesk-integration.html ADDED
@@ -0,0 +1,375 @@
1
+ <!DOCTYPE html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="UTF-8">
5
+ <meta name="viewport" content="width=device-width,initial-scale=1">
6
+ <title>WAB DNS — Plesk Integration</title>
7
+ <link rel="stylesheet" href="/css/main.css">
8
+ <style>
9
+ body { font-family: system-ui, sans-serif; background: #0f172a; color: #e2e8f0; margin: 0; padding: 0; }
10
+ .page { max-width: 880px; margin: 0 auto; padding: 40px 20px 80px; }
11
+ h1 { font-size: 1.7rem; margin-bottom: 6px; }
12
+ .sub { color: #94a3b8; margin-bottom: 32px; font-size: .97rem; }
13
+ .card { background: #1e293b; border-radius: 10px; padding: 24px; margin-bottom: 24px; }
14
+ h2 { font-size: 1.1rem; margin: 0 0 14px; }
15
+ label { display: block; font-size: .85rem; color: #94a3b8; margin-bottom: 4px; margin-top: 14px; }
16
+ label:first-child { margin-top: 0; }
17
+ input[type=text], input[type=password], input[type=number] {
18
+ width: 100%; box-sizing: border-box; background: #0f172a; border: 1px solid #334155;
19
+ color: #e2e8f0; border-radius: 6px; padding: 9px 12px; font-size: .93rem;
20
+ }
21
+ input:focus { outline: 2px solid #6366f1; border-color: transparent; }
22
+ .row { display: flex; gap: 12px; }
23
+ .row > * { flex: 1; }
24
+ .actions { display: flex; gap: 10px; margin-top: 20px; flex-wrap: wrap; }
25
+ .btn { padding: 9px 20px; border-radius: 7px; border: none; cursor: pointer; font-size: .92rem; font-weight: 600; transition: opacity .15s; }
26
+ .btn:hover { opacity: .85; }
27
+ .btn:disabled { opacity: .45; cursor: not-allowed; }
28
+ .btn-enable { background: #06b6d4; color: #000; }
29
+ .btn-disable { background: #ef4444; color: #fff; }
30
+ .btn-verify { background: #6366f1; color: #fff; }
31
+ .btn-secondary { background: #334155; color: #e2e8f0; }
32
+ #statusBar { margin-top: 18px; min-height: 36px; padding: 10px 14px; border-radius: 7px; background: #0f172a; font-size: .88rem; color: #94a3b8; display: none; }
33
+ #statusBar.ok { display: block; color: #4ade80; border: 1px solid #166534; }
34
+ #statusBar.err { display: block; color: #f87171; border: 1px solid #7f1d1d; }
35
+ #statusBar.info { display: block; color: #93c5fd; border: 1px solid #1e3a5f; }
36
+ pre { background: #0f172a; border-radius: 7px; padding: 14px 16px; font-size: .82rem; color: #94a3b8; overflow-x: auto; white-space: pre-wrap; word-break: break-word; margin: 14px 0 0; }
37
+ code { background: #0f172a; padding: 1px 5px; border-radius: 4px; font-size: .88em; }
38
+ .tab-bar { display: flex; gap: 4px; margin-bottom: 14px; }
39
+ .tab { padding: 5px 14px; border-radius: 6px; cursor: pointer; font-size: .84rem; background: #0f172a; color: #94a3b8; border: 1px solid #334155; }
40
+ .tab.active { background: #6366f1; color: #fff; border-color: transparent; }
41
+ .tab-panel { display: none; }
42
+ .tab-panel.active { display: block; }
43
+ .step { display: flex; gap: 14px; margin-bottom: 18px; }
44
+ .step-num { flex-shrink: 0; width: 28px; height: 28px; border-radius: 50%; background: #334155; color: #e2e8f0; font-size: .82rem; font-weight: 700; display: flex; align-items: center; justify-content: center; }
45
+ .step-body { flex: 1; padding-top: 3px; }
46
+ .warning-box { background: #431407; border: 1px solid #9a3412; border-radius: 8px; padding: 12px 16px; font-size: .87rem; color: #fdba74; margin-bottom: 18px; }
47
+ a { color: #818cf8; }
48
+ </style>
49
+ </head>
50
+ <body>
51
+ <div class="page">
52
+ <h1>Plesk × WAB DNS Discovery</h1>
53
+ <p class="sub">
54
+ Enable or disable the WAB DNS Discovery TXT record on any Plesk-managed domain via the
55
+ <a href="https://docs.plesk.com/en-US/obsidian/api-rpc/" target="_blank" rel="noopener">Plesk REST API</a>.
56
+ </p>
57
+
58
+ <div class="warning-box">
59
+ ⚠ <strong>Security note:</strong> Plesk credentials and host details are used only client-side to call the Plesk REST API directly.
60
+ Always use a dedicated <strong>API Key</strong> (Server → Tools &amp; Settings → API Keys) instead of admin password.
61
+ </div>
62
+
63
+ <!-- ── STEP 1: credentials ── -->
64
+ <div class="card">
65
+ <h2>1. Plesk Server Credentials</h2>
66
+ <div class="row">
67
+ <div>
68
+ <label>Plesk Host (FQDN or IP)</label>
69
+ <input type="text" id="pkHost" placeholder="plesk.example.com">
70
+ </div>
71
+ <div>
72
+ <label>Port</label>
73
+ <input type="number" id="pkPort" value="8443" min="1" max="65535" style="max-width:120px">
74
+ </div>
75
+ </div>
76
+ <label>Authentication mode</label>
77
+ <div style="display:flex;gap:14px;margin-top:6px;font-size:.9rem;color:#cbd5e1">
78
+ <label style="margin:0"><input type="radio" name="pkAuthMode" value="apikey" checked> API Key (recommended)</label>
79
+ <label style="margin:0"><input type="radio" name="pkAuthMode" value="basic"> Username + Password</label>
80
+ </div>
81
+ <div id="pkApiKeyBlock">
82
+ <label>Plesk API Key</label>
83
+ <input type="password" id="pkApiKey" placeholder="Paste API key" autocomplete="off">
84
+ </div>
85
+ <div id="pkBasicBlock" style="display:none">
86
+ <div class="row">
87
+ <div>
88
+ <label>Username</label>
89
+ <input type="text" id="pkUser" placeholder="admin" autocomplete="off">
90
+ </div>
91
+ <div>
92
+ <label>Password</label>
93
+ <input type="password" id="pkPass" autocomplete="off">
94
+ </div>
95
+ </div>
96
+ </div>
97
+ </div>
98
+
99
+ <!-- ── STEP 2: domain ── -->
100
+ <div class="card">
101
+ <h2>2. Domain</h2>
102
+ <div class="row">
103
+ <div>
104
+ <label>Domain</label>
105
+ <input type="text" id="pkDomain" placeholder="example.com">
106
+ </div>
107
+ <div>
108
+ <label>Endpoint URL <span style="color:#64748b;font-weight:400">(blank = auto)</span></label>
109
+ <input type="text" id="pkEndpoint" placeholder="https://example.com/.well-known/wab.json">
110
+ </div>
111
+ </div>
112
+ </div>
113
+
114
+ <!-- ── STEP 3: actions ── -->
115
+ <div class="card">
116
+ <h2>3. Actions</h2>
117
+ <div class="actions">
118
+ <button class="btn btn-enable" id="btnEnable" onclick="pkAction('enable')">✓ Enable WAB Discovery</button>
119
+ <button class="btn btn-disable" id="btnDisable" onclick="pkAction('disable')">✗ Disable WAB Discovery</button>
120
+ <button class="btn btn-verify" id="btnVerify" onclick="pkVerify()">⟳ Verify Status</button>
121
+ <button class="btn btn-secondary" onclick="window.open('/provider-sandbox','_blank')">Open Sandbox</button>
122
+ </div>
123
+ <div id="statusBar"></div>
124
+ <pre id="jsonOut" style="display:none"></pre>
125
+ </div>
126
+
127
+ <!-- ── HOW IT WORKS ── -->
128
+ <div class="card">
129
+ <h2>How it works</h2>
130
+ <div class="step"><div class="step-num">1</div><div class="step-body">Fetch WAB record template (<code>GET /api/discovery/provider/record-template</code>) for TXT value.</div></div>
131
+ <div class="step"><div class="step-num">2</div><div class="step-body">Resolve the Plesk site ID via <code>GET /api/v2/domains?name=…</code>.</div></div>
132
+ <div class="step"><div class="step-num">3</div><div class="step-body">Call <code>GET /api/v2/dns/records?domain=…</code> to look up existing <code>_wab</code> TXT records.</div></div>
133
+ <div class="step"><div class="step-num">4</div><div class="step-body"><strong>Enable:</strong> if missing, <code>POST /api/v2/dns/records</code>; if exists with different value, <code>DELETE</code> + <code>POST</code> (Plesk doesn't support TXT update in place).<br>
134
+ <strong>Disable:</strong> <code>DELETE /api/v2/dns/records/{id}</code>.</div></div>
135
+ <div class="step"><div class="step-num">5</div><div class="step-body">Confirm via <code>/api/discovery/provider/status</code>. Run <code>dns-on</code> for the domain if updates aren't propagating.</div></div>
136
+ </div>
137
+
138
+ <!-- ── CODE SNIPPETS ── -->
139
+ <div class="card">
140
+ <h2>Code Snippets</h2>
141
+ <div class="tab-bar">
142
+ <div class="tab active" onclick="switchTab('nodejs')">Node.js</div>
143
+ <div class="tab" onclick="switchTab('curl')">cURL</div>
144
+ <div class="tab" onclick="switchTab('python')">Python</div>
145
+ </div>
146
+ <div id="tab-nodejs" class="tab-panel active">
147
+ <pre>// npm install node-fetch@2
148
+ const fetch = require('node-fetch');
149
+
150
+ const HOST = 'plesk.example.com';
151
+ const PORT = 8443;
152
+ const APIKEY = process.env.PLESK_API_KEY;
153
+ const DOMAIN = 'example.com';
154
+ const TXT_VAL = `v=wab1; endpoint=https://${DOMAIN}/.well-known/wab.json`;
155
+
156
+ const headers = { 'X-API-Key': APIKEY, 'Content-Type': 'application/json' };
157
+ const base = `https://${HOST}:${PORT}/api/v2`;
158
+
159
+ async function getDomainId() {
160
+ const r = await fetch(`${base}/domains?name=${DOMAIN}`, { headers });
161
+ const j = await r.json();
162
+ return j[0] && j[0].id;
163
+ }
164
+
165
+ async function listWabRecords() {
166
+ const r = await fetch(`${base}/dns/records?domain=${DOMAIN}&type=TXT`, { headers });
167
+ const j = await r.json();
168
+ return (j || []).filter(rec => rec.host === `_wab.${DOMAIN}.` || rec.host === `_wab.${DOMAIN}`);
169
+ }
170
+
171
+ async function enableWAB() {
172
+ const records = await listWabRecords();
173
+ if (records.length) {
174
+ // remove old, then add new (Plesk REST API doesn't allow in-place TXT edit)
175
+ await fetch(`${base}/dns/records/${records[0].id}`, { method: 'DELETE', headers });
176
+ }
177
+ await fetch(`${base}/dns/records`, {
178
+ method: 'POST', headers,
179
+ body: JSON.stringify({ domain: DOMAIN, type: 'TXT', host: `_wab.${DOMAIN}`, value: TXT_VAL })
180
+ });
181
+ console.log('WAB Discovery ENABLED');
182
+ }
183
+
184
+ async function disableWAB() {
185
+ const records = await listWabRecords();
186
+ if (!records.length) return console.log('Already disabled.');
187
+ await fetch(`${base}/dns/records/${records[0].id}`, { method: 'DELETE', headers });
188
+ console.log('WAB Discovery DISABLED');
189
+ }
190
+
191
+ enableWAB().catch(console.error);
192
+ </pre>
193
+ </div>
194
+ <div id="tab-curl" class="tab-panel">
195
+ <pre># Plesk API Key auth
196
+ KEY="your-api-key"
197
+ HOST="plesk.example.com:8443"
198
+ DOMAIN="example.com"
199
+ TXT='v=wab1; endpoint=https://example.com/.well-known/wab.json'
200
+
201
+ # 1. List existing _wab TXT records
202
+ curl -sk -H "X-API-Key: $KEY" "https://$HOST/api/v2/dns/records?domain=$DOMAIN&type=TXT"
203
+
204
+ # 2. Add (enable)
205
+ curl -sk -X POST -H "X-API-Key: $KEY" -H "Content-Type: application/json" \
206
+ "https://$HOST/api/v2/dns/records" \
207
+ -d "{\"domain\":\"$DOMAIN\",\"type\":\"TXT\",\"host\":\"_wab.$DOMAIN\",\"value\":\"$TXT\"}"
208
+
209
+ # 3. Delete (disable) — replace REC_ID
210
+ curl -sk -X DELETE -H "X-API-Key: $KEY" "https://$HOST/api/v2/dns/records/REC_ID"
211
+ </pre>
212
+ </div>
213
+ <div id="tab-python" class="tab-panel">
214
+ <pre>import os, requests
215
+
216
+ HOST = 'plesk.example.com'
217
+ PORT = 8443
218
+ APIKEY = os.environ['PLESK_API_KEY']
219
+ DOMAIN = 'example.com'
220
+ TXT_VAL = f'v=wab1; endpoint=https://{DOMAIN}/.well-known/wab.json'
221
+ HEADERS = {'X-API-Key': APIKEY, 'Content-Type': 'application/json'}
222
+ BASE = f'https://{HOST}:{PORT}/api/v2'
223
+
224
+ def list_wab():
225
+ r = requests.get(f'{BASE}/dns/records', params={'domain': DOMAIN, 'type': 'TXT'}, headers=HEADERS, verify=False)
226
+ return [rec for rec in r.json() if rec['host'].rstrip('.') == f'_wab.{DOMAIN}']
227
+
228
+ def enable_wab():
229
+ for rec in list_wab():
230
+ requests.delete(f'{BASE}/dns/records/{rec["id"]}', headers=HEADERS, verify=False)
231
+ requests.post(f'{BASE}/dns/records',
232
+ json={'domain': DOMAIN, 'type': 'TXT', 'host': f'_wab.{DOMAIN}', 'value': TXT_VAL},
233
+ headers=HEADERS, verify=False)
234
+ print('WAB ENABLED')
235
+
236
+ def disable_wab():
237
+ recs = list_wab()
238
+ if not recs: return print('Already disabled')
239
+ requests.delete(f'{BASE}/dns/records/{recs[0]["id"]}', headers=HEADERS, verify=False)
240
+ print('WAB DISABLED')
241
+
242
+ enable_wab()
243
+ </pre>
244
+ </div>
245
+ </div>
246
+
247
+ <p style="text-align:center;margin-top:30px;font-size:.85rem;color:#475569">
248
+ <a href="/provider-onboarding">← Provider Onboarding</a> ·
249
+ <a href="/cloudflare-integration">Cloudflare</a> ·
250
+ <a href="/cpanel-integration">cPanel</a> ·
251
+ <a href="/route53-integration">Route 53</a> ·
252
+ <a href="/dns">DNS Discovery</a>
253
+ </p>
254
+ </div>
255
+
256
+ <script>
257
+ function switchTab(name) {
258
+ document.querySelectorAll('.tab').forEach(t => t.classList.remove('active'));
259
+ document.querySelectorAll('.tab-panel').forEach(p => p.classList.remove('active'));
260
+ document.querySelector(`#tab-${name}`).classList.add('active');
261
+ event.target.classList.add('active');
262
+ }
263
+
264
+ document.querySelectorAll('input[name=pkAuthMode]').forEach(r =>
265
+ r.addEventListener('change', e => {
266
+ document.getElementById('pkApiKeyBlock').style.display = e.target.value === 'apikey' ? '' : 'none';
267
+ document.getElementById('pkBasicBlock').style.display = e.target.value === 'basic' ? '' : 'none';
268
+ })
269
+ );
270
+
271
+ function setStatus(msg, type) { const b = document.getElementById('statusBar'); b.textContent = msg; b.className = type; }
272
+ function showJson(o) { const p = document.getElementById('jsonOut'); p.textContent = JSON.stringify(o, null, 2); p.style.display = 'block'; }
273
+
274
+ function getInputs() {
275
+ const mode = document.querySelector('input[name=pkAuthMode]:checked').value;
276
+ return {
277
+ host: document.getElementById('pkHost').value.trim().replace(/^https?:\/\//, '').replace(/\/$/, ''),
278
+ port: document.getElementById('pkPort').value.trim() || '8443',
279
+ mode,
280
+ apikey: document.getElementById('pkApiKey').value.trim(),
281
+ user: document.getElementById('pkUser').value.trim(),
282
+ pass: document.getElementById('pkPass').value.trim(),
283
+ domain: document.getElementById('pkDomain').value.trim().toLowerCase().replace(/^https?:\/\//, '').replace(/\/$/, ''),
284
+ ep: document.getElementById('pkEndpoint').value.trim(),
285
+ };
286
+ }
287
+
288
+ function pkHeaders(inp) {
289
+ const h = { 'Content-Type': 'application/json' };
290
+ if (inp.mode === 'apikey') h['X-API-Key'] = inp.apikey;
291
+ else h['Authorization'] = 'Basic ' + btoa(`${inp.user}:${inp.pass}`);
292
+ return h;
293
+ }
294
+
295
+ async function pkRequest(inp, method, path, body) {
296
+ const url = `https://${inp.host}:${inp.port}/api/v2${path}`;
297
+ const opts = { method, headers: pkHeaders(inp), mode: 'cors' };
298
+ if (body) opts.body = JSON.stringify(body);
299
+ const r = await fetch(url, opts);
300
+ const t = await r.text();
301
+ if (!r.ok) throw new Error(`Plesk ${r.status}: ${t.slice(0, 300)}`);
302
+ try { return JSON.parse(t); } catch { return t; }
303
+ }
304
+
305
+ async function pkAction(action) {
306
+ const inp = getInputs();
307
+ if (!inp.host) return setStatus('Please enter Plesk host.', 'err');
308
+ if (!inp.domain) return setStatus('Please enter the domain.', 'err');
309
+ if (inp.mode === 'apikey' && !inp.apikey) return setStatus('Please enter Plesk API Key.', 'err');
310
+ if (inp.mode === 'basic' && (!inp.user || !inp.pass)) return setStatus('Please enter username and password.', 'err');
311
+
312
+ document.getElementById('btnEnable').disabled = true;
313
+ document.getElementById('btnDisable').disabled = true;
314
+ try {
315
+ const ep = inp.ep || `https://${inp.domain}/.well-known/wab.json`;
316
+ setStatus('Fetching WAB record template…', 'info');
317
+ const tpl = await (await fetch(`/api/discovery/provider/record-template?domain=${encodeURIComponent(inp.domain)}&endpoint=${encodeURIComponent(ep)}`)).json();
318
+ const txtVal = tpl.record && tpl.record.value;
319
+ if (!txtVal) throw new Error('Could not fetch WAB record template.');
320
+
321
+ setStatus('Listing existing _wab TXT records…', 'info');
322
+ const all = await pkRequest(inp, 'GET', `/dns/records?domain=${encodeURIComponent(inp.domain)}&type=TXT`);
323
+ const existing = (all || []).filter(rec => {
324
+ const h = (rec.host || '').replace(/\.$/, '');
325
+ return h === `_wab.${inp.domain}` || h === '_wab';
326
+ });
327
+
328
+ if (action === 'enable') {
329
+ // Plesk doesn't support in-place TXT edit; delete then create
330
+ for (const rec of existing) {
331
+ setStatus(`Deleting old record id=${rec.id}…`, 'info');
332
+ await pkRequest(inp, 'DELETE', `/dns/records/${rec.id}`);
333
+ }
334
+ setStatus('Creating new _wab TXT record…', 'info');
335
+ const out = await pkRequest(inp, 'POST', '/dns/records', {
336
+ domain: inp.domain, type: 'TXT', host: `_wab.${inp.domain}`, value: txtVal
337
+ });
338
+ setStatus(`✓ _wab TXT record created for ${inp.domain}. WAB Discovery is ENABLED.`, 'ok');
339
+ showJson(out);
340
+ } else {
341
+ if (!existing.length) {
342
+ setStatus(`No _wab TXT record found for ${inp.domain} — already disabled.`, 'ok');
343
+ showJson({ note: 'no record found', domain: inp.domain });
344
+ return;
345
+ }
346
+ for (const rec of existing) {
347
+ setStatus(`Deleting record id=${rec.id}…`, 'info');
348
+ await pkRequest(inp, 'DELETE', `/dns/records/${rec.id}`);
349
+ }
350
+ setStatus(`✓ _wab TXT record deleted for ${inp.domain}. WAB Discovery is DISABLED.`, 'ok');
351
+ showJson({ deleted: existing.map(r => r.id), domain: inp.domain });
352
+ }
353
+ } catch (err) {
354
+ setStatus(`Error: ${err.message}`, 'err');
355
+ } finally {
356
+ document.getElementById('btnEnable').disabled = false;
357
+ document.getElementById('btnDisable').disabled = false;
358
+ }
359
+ }
360
+
361
+ async function pkVerify() {
362
+ const { domain } = getInputs();
363
+ if (!domain) return setStatus('Please enter a domain.', 'err');
364
+ setStatus('Checking WAB status…', 'info');
365
+ try {
366
+ const j = await (await fetch(`/api/discovery/provider/status?domain=${encodeURIComponent(domain)}`)).json();
367
+ if (j.status === 'enabled') setStatus(`✓ ${domain} — ENABLED.`, 'ok');
368
+ else if (j.status === 'partial') setStatus(`⚠ ${domain} — partial (DNS ok, endpoint issue).`, 'info');
369
+ else setStatus(`✗ ${domain} — DISABLED.`, 'err');
370
+ showJson(j);
371
+ } catch (err) { setStatus(`Verify error: ${err.message}`, 'err'); }
372
+ }
373
+ </script>
374
+ </body>
375
+ </html>