web-agent-bridge 3.3.0 → 3.4.0

package/public/index.html

@@ -7,7 +7,9 @@
   <meta name="description" content="The open AI↔Web protocol & agent platform: standardized command interface, sovereign browser, phone shield, DNS discovery, agent mesh, and unified API gateway.">
   <link rel="preconnect" href="https://fonts.googleapis.com">
   <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-  <style>body{background:#0a0e1a;color:#f0f4ff;font-family:Inter,-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;margin:0;min-height:100vh}</style>
+  <style>body{background:#0a0e1a;color:#f0f4ff;font-family:Inter,-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;margin:0;min-height:100vh}
+
+  </style>
   <link rel="preload" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900&family=JetBrains+Mono:wght@400;500;600&display=swap" as="style" onload="this.onload=null;this.rel='stylesheet'">
   <noscript><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900&family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet"></noscript>
   <link rel="stylesheet" href="/css/styles.css?v=3.0.1">
@@ -23,6 +25,7 @@
       </a>
       <ul class="navbar-links">
         <li><a href="#features">Features</a></li>
+        <li><a href="#governance">Governance</a></li>
         <li><a href="#packages">Packages</a></li>
         <li><a href="#integrations">Integrations</a></li>
         <li><a href="#how-it-works">How It Works</a></li>
@@ -38,13 +41,14 @@
         <li><a href="/growth">Growth Suite</a></li>
         <li><a href="/api">API</a></li>
         <li><a href="/docs">Docs</a></li>
+        <li><a href="/whitepaper">Whitepaper</a></li>
       </ul>
       <div class="navbar-actions">
         <a href="/login" class="btn btn-ghost" data-wab-auth="guest">Sign In</a>
         <a href="/dashboard" class="btn btn-ghost" data-wab-auth="signed-in" style="display:none">Dashboard</a>
         <a href="/register" class="btn btn-primary btn-sm" data-wab-auth="guest">Get Started</a>
       </div>
-      <button class="mobile-menu-btn" onclick="document.querySelector('.navbar-links').classList.toggle('active')">☰</button>
+      <button class="mobile-menu-btn" >☰</button>
     </div>
   </nav>
 
@@ -67,6 +71,7 @@
         <div class="hero-actions">
           <a href="/register" class="btn btn-primary btn-lg">Start Free</a>
           <a href="/docs" class="btn btn-secondary btn-lg">Read the Docs</a>
+          <a href="/whitepaper" class="btn btn-secondary btn-lg" style="background:linear-gradient(135deg,#4ea3ff,#8b5cf6);color:#fff;border:none">📄 Read the Whitepaper</a>
           <a href="/browser" class="btn btn-secondary btn-lg" style="background:linear-gradient(135deg,#0ea5e9,#10b981);color:#fff;border:none">🌐 Download WAB Browser</a>
           <a href="/pwa/" class="btn btn-secondary btn-lg" style="background:linear-gradient(135deg,#8b5cf6,#0ea5e9);color:#fff;border:none">📱 Mobile PWA</a>
           <a href="/workspace" class="btn btn-secondary btn-lg" style="background:linear-gradient(135deg,#f59e0b,#ef4444);color:#fff;border:none">🤖 Agent Workspace</a>
@@ -164,6 +169,74 @@
     </div>
   </section>
 
+  <!-- ═══════════ GOVERNANCE LAYER ═══════════ -->
+  <section class="section" id="governance" style="background: linear-gradient(180deg, var(--bg-primary) 0%, #f1f5f9 100%);">
+    <div class="container">
+      <div class="section-header">
+        <span class="label" style="background:#0ea5e9; color:#fff;">Enterprise Security &amp; Compliance</span>
+        <h2>Governance Layer — for agents that touch real money</h2>
+        <p>The missing layer above the protocol: per-agent permissions, human-in-the-loop approvals, tamper-evident audit, kill-switch and spend caps — all server-enforced, all open-source, all one SDK call away.</p>
+        <div style="display:flex; gap:10px; flex-wrap:wrap; justify-content:center; margin-top:18px;">
+          <img alt="Tamper-Evident Audit" src="https://img.shields.io/badge/Audit-Tamper--Evident_HMAC_Chain-0ea5e9?style=for-the-badge&logo=keybase&logoColor=white" />
+          <img alt="Human-in-the-Loop Approvals" src="https://img.shields.io/badge/Approvals-Human--in--the--Loop-22c55e?style=for-the-badge&logo=checkmarx&logoColor=white" />
+          <img alt="Kill Switch" src="https://img.shields.io/badge/Kill_Switch-Per--Agent-ef4444?style=for-the-badge&logo=stopsign&logoColor=white" />
+          <img alt="Tests" src="https://img.shields.io/badge/Governance_Tests-26%2F26-22c55e?style=for-the-badge&logo=jest&logoColor=white" />
+        </div>
+      </div>
+
+      <div class="grid-3" style="margin-top:32px;">
+        <div class="card fade-in">
+          <div class="card-icon blue">🔐</div>
+          <h3>Permission Boundaries</h3>
+          <p>Per-agent <code>resource × action × scope</code> policies with <code>allow</code> or <code>deny</code> effect. Most-specific scope wins. Deny-by-default.</p>
+        </div>
+        <div class="card fade-in fade-in-delay-1">
+          <div class="card-icon green">🙋</div>
+          <h3>Human-in-the-Loop Approvals</h3>
+          <p>Mark any policy <code>requires_approval: true</code>. Sensitive actions wait for an explicit human <em>approve</em> or <em>reject</em> with TTL. SDK <code>onApprovalRequired</code> hook routes to Slack, email or webhook.</p>
+        </div>
+        <div class="card fade-in fade-in-delay-2">
+          <div class="card-icon cyan">🧾</div>
+          <h3>Tamper-Evident Audit</h3>
+          <p>Every event hash-chained with HMAC: <code>hash<sub>n</sub> = HMAC(secret, prev_hash ‖ row)</code>. <code>verifyAuditChain()</code> rebuilds the chain and reports the first divergence — a single altered byte breaks every subsequent hash.</p>
+        </div>
+        <div class="card fade-in fade-in-delay-1">
+          <div class="card-icon" style="background:#fee2e2; color:#dc2626;">🛑</div>
+          <h3>Kill Switch</h3>
+          <p>One <code>POST /agents/:id/kill</code> disables the agent globally. All pending approvals are auto-cancelled — no resurrection via stale approval requests.</p>
+        </div>
+        <div class="card fade-in fade-in-delay-2">
+          <div class="card-icon orange">💰</div>
+          <h3>Spend &amp; Rate Limits</h3>
+          <p>Per-call <code>max_amount</code>, rolling 24-hour <code>daily_cap</code>, per-minute <code>per_call_rate</code>. Runaway loops can't drain your Stripe balance.</p>
+        </div>
+        <div class="card fade-in fade-in-delay-3">
+          <div class="card-icon purple">🕵️</div>
+          <h3>Auto-Redaction</h3>
+          <p>Fields named <code>password</code>, <code>api_key</code>, <code>token</code>, <code>cookie</code>, <code>cvv</code>, <code>ssn</code> are automatically replaced with <code>[redacted]</code> before audit storage. Token itself is sha256-hashed at rest.</p>
+        </div>
+      </div>
+
+      <div class="card fade-in" style="margin-top:32px; max-width:880px; margin-left:auto; margin-right:auto; background:#0f172a; color:#e2e8f0;">
+        <div style="font-family: 'JetBrains Mono', Menlo, monospace; font-size:13px; line-height:1.6; overflow-x:auto;">
+<pre style="margin:0; color:#e2e8f0; background:transparent;"><span style="color:#64748b;">// One call wraps permission check + approval gate + execute + audit</span>
+<span style="color:#7dd3fc;">await</span> gov.<span style="color:#fbbf24;">guard</span>(
+  { resource: <span style="color:#86efac;">'stripe'</span>, action: <span style="color:#86efac;">'write'</span>, scope: <span style="color:#86efac;">'refunds'</span>, amount: <span style="color:#fda4af;">49.99</span> },
+  <span style="color:#7dd3fc;">async</span> () =&gt; stripe.refunds.<span style="color:#fbbf24;">create</span>({ charge: <span style="color:#86efac;">'ch_x'</span> }),
+);</pre>
+        </div>
+        <p style="margin-top:18px; color:#cbd5e1; font-size:14px;">
+          ▶ Run the full 9-step demo:
+          <code style="background:#1e293b; padding:4px 10px; border-radius:4px; color:#86efac;">node examples/governance-agent.js</code>
+        </p>
+      </div>
+
+      <p style="text-align:center; margin-top:24px; color:#64748b;">
+        Verified by <a href="https://github.com/abokenan444/web-agent-bridge/blob/master/tests/governance.test.js" style="color:#0ea5e9; font-weight:600;">26 automated tests</a> covering security (10), operational (10), and SDK (6) scenarios.
+      </p>
+    </div>
+  </section>
+
   <!-- ═══════════ V2 FEATURES ═══════════ -->
   <section class="section" id="v2-features" style="background: var(--bg-secondary);">
     <div class="container">
@@ -465,58 +538,116 @@ console.<span class="fn">log</span>(actions);
         <p>Start free, upgrade when you need advanced features. Open source forever.</p>
       </div>
 
-      <div class="grid-3">
+      <div class="grid-3" id="pricing-grid" data-pricing-grid>
+        <!-- Server-rendered fallback. Replaced live by /api/plans on page load. -->
         <div class="pricing-card">
           <div class="pricing-tier">Free</div>
-          <div class="pricing-price">$0 <span>/mo</span></div>
-          <div class="pricing-desc">Perfect for personal projects and experimentation.</div>
+          <div class="pricing-price">€0 <span>/mo</span></div>
+          <div class="pricing-desc">Open-source core, free forever.</div>
           <ul class="pricing-features">
-            <li>Auto-discovery of actions</li>
-            <li>Click &amp; scroll permissions</li>
-            <li>Rate limiting (60/min)</li>
-            <li>Basic logging</li>
-            <li>1 site</li>
-            <li class="disabled">Form filling</li>
-            <li class="disabled">API access</li>
-            <li class="disabled">Analytics dashboard</li>
+            <li>WAP protocol &amp; SDK</li>
+            <li>DNS / .well-known discovery</li>
+            <li>Browser execution layer</li>
+            <li>MCP / REST adapters</li>
+            <li>Basic agent registration</li>
           </ul>
           <a href="/register" class="btn btn-secondary" style="width:100%;">Get Started Free</a>
         </div>
 
         <div class="pricing-card featured">
           <div class="pricing-tier">Pro</div>
-          <div class="pricing-price">$29 <span>/mo</span></div>
-          <div class="pricing-desc">For businesses that want full AI agent integration.</div>
+          <div class="pricing-price">€10 <span>/mo</span></div>
+          <div class="pricing-desc">For developers shipping production agents.</div>
           <ul class="pricing-features">
             <li>Everything in Free</li>
-            <li>Form filling &amp; submission</li>
-            <li>Internal API access</li>
-            <li>Advanced analytics</li>
-            <li>Up to 10 sites</li>
-            <li>Automated login support</li>
-            <li>Data extraction</li>
-            <li>Priority support</li>
+            <li>Workspace &amp; observability</li>
+            <li>Replay engine</li>
+            <li>Advanced orchestration</li>
+            <li>Advanced analytics &amp; data extraction</li>
           </ul>
-          <a href="/register" class="btn btn-primary" style="width:100%;">Start Pro Trial</a>
+          <a href="/register" class="btn btn-primary" style="width:100%;">Start Pro</a>
+        </div>
+
+        <div class="pricing-card">
+          <div class="pricing-tier">Business</div>
+          <div class="pricing-price">€29 <span>/mo</span></div>
+          <div class="pricing-desc">All paid features, ready for scale.</div>
+          <ul class="pricing-features">
+            <li>Everything in Pro</li>
+            <li>Hosted runtime &amp; marketplace</li>
+            <li>Vision, swarm, traffic intel</li>
+            <li>Audit logs &amp; custom domain</li>
+            <li>Agent governance layer</li>
+          </ul>
+          <a href="/register" class="btn btn-secondary" style="width:100%;">Start Business</a>
         </div>
 
         <div class="pricing-card">
           <div class="pricing-tier">Enterprise</div>
           <div class="pricing-price">Custom</div>
-          <div class="pricing-desc">Custom solutions for large-scale deployments.</div>
+          <div class="pricing-desc">Custom-built for organisations.</div>
           <ul class="pricing-features">
-            <li>Everything in Pro</li>
-            <li>Unlimited sites</li>
-            <li>Custom rate limits</li>
-            <li>Webhook integrations</li>
-            <li>SSO / SAML</li>
-            <li>Dedicated support</li>
-            <li>SLA guarantee</li>
+            <li>Everything in Business</li>
+            <li>Enterprise security &amp; SSO</li>
+            <li>Dedicated infrastructure</li>
+            <li>Priority support &amp; SLA</li>
             <li>Custom development</li>
           </ul>
           <a href="mailto:sales@webagentbridge.com" class="btn btn-secondary" style="width:100%;">Contact Sales</a>
         </div>
       </div>
+      <script>
+      (function () {
+        var GRID = document.getElementById('pricing-grid');
+        if (!GRID) return;
+        var FEATURED_ID = 'pro';
+        function esc(s){return String(s==null?'':s).replace(/[&<>"']/g,function(c){return ({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'})[c];});}
+        function fmtPrice(p){
+          if (p.billing_period === 'custom' || p.cta_type === 'contact') return 'Custom';
+          if (!p.price_cents) return (p.currency==='EUR'?'€':p.currency==='USD'?'$':p.currency+' ') + '0 <span>/' + esc(p.billing_period) + '</span>';
+          var sym = p.currency === 'EUR' ? '€' : (p.currency === 'USD' ? '$' : p.currency + ' ');
+          return sym + (p.price_cents/100).toFixed(p.price_cents % 100 === 0 ? 0 : 2) + ' <span>/' + esc(p.billing_period) + '</span>';
+        }
+        function ctaHref(p){
+          if (p.cta_type === 'contact')  return p.cta_url || 'mailto:sales@webagentbridge.com';
+          if (p.cta_type === 'external') return p.cta_url || '/register';
+          if (p.cta_type === 'register') return p.cta_url || '/register';
+          // checkout — send authenticated users straight to dashboard?plan=…, anonymous to register first.
+          return '/register?plan=' + encodeURIComponent(p.id);
+        }
+        function topFeatures(plan, catalog, max){
+          var labels = catalog.reduce(function(m,f){m[f.key]=f.label;return m;},{});
+          var keys = Object.keys(plan.features||{}).filter(function(k){return plan.features[k];});
+          // Prefer non-open-source labels (the differentiators) when listing.
+          var nonOpen = keys.filter(function(k){var f=catalog.find(function(x){return x.key===k;});return f && !f.is_open_source;});
+          var pick = nonOpen.length ? nonOpen : keys;
+          return pick.slice(0, max).map(function(k){return labels[k] || k;});
+        }
+        function render(plans, catalog){
+          if (!plans || !plans.length) return;
+          var html = plans.map(function(p){
+            var feats = topFeatures(p, catalog, 6);
+            var ctaCls = p.highlight ? 'btn-primary' : 'btn-secondary';
+            return ''
+              + '<div class="pricing-card' + (p.highlight ? ' featured' : '') + '">'
+              +   '<div class="pricing-tier">' + esc(p.name) + '</div>'
+              +   '<div class="pricing-price">' + fmtPrice(p) + '</div>'
+              +   '<div class="pricing-desc">' + esc(p.tagline || p.description || '') + '</div>'
+              +   '<ul class="pricing-features">'
+              +     feats.map(function(f){return '<li>' + esc(f) + '</li>';}).join('')
+              +   '</ul>'
+              +   '<a href="' + esc(ctaHref(p)) + '" class="btn ' + ctaCls + '" style="width:100%;">' + esc(p.cta_label || 'Get started') + '</a>'
+              + '</div>';
+          }).join('');
+          GRID.innerHTML = html;
+          GRID.style.gridTemplateColumns = 'repeat(' + Math.min(4, plans.length) + ', 1fr)';
+        }
+        fetch('/api/plans', { credentials: 'omit' })
+          .then(function(r){ return r.ok ? r.json() : null; })
+          .then(function(d){ if (d && d.plans) render(d.plans, d.features || []); })
+          .catch(function(){ /* keep server fallback */ });
+      })();
+      </script>
     </div>
   </section>
 
@@ -988,6 +1119,20 @@ console.<span class="fn">log</span>(actions);
     </div>
   </section>
 
+  <!-- ═══════════ LIVE DNS ADOPTION ═══════════ -->
+  <section class="section" id="live-dns-adoption">
+    <div class="container">
+      <div class="section-header">
+        <span class="label">Live Adoption</span>
+        <h2>Businesses Using WAB DNS Discovery</h2>
+        <p>This list is auto-generated from real registry registrations only. No static seeded entries.</p>
+      </div>
+      <div id="indexLiveAdoptionStatus" style="margin-bottom:14px;color:var(--text-secondary);">Loading live registry…</div>
+      <div id="indexLiveAdoptionList" class="grid-3" style="display:none;"></div>
+    </div>
+  </section>
+
+
   <!-- ═══════════ CTA ═══════════ -->
   <section class="section" style="text-align:center;">
     <div class="container">
@@ -1064,6 +1209,57 @@ console.<span class="fn">log</span>(actions);
         ? 'rgba(10, 14, 26, 0.95)' 
         : 'rgba(10, 14, 26, 0.8)';
     });
+
+    function escapeHtml(v) {
+      return String(v)
+        .replace(/&/g, '&amp;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;')
+        .replace(/\"/g, '&quot;')
+        .replace(/'/g, '&#39;');
+    }
+
+    async function loadIndexLiveAdoption() {
+      const status = document.getElementById('indexLiveAdoptionStatus');
+      const list = document.getElementById('indexLiveAdoptionList');
+      if (!status || !list) return;
+
+      status.textContent = 'Loading live registry…';
+      list.style.display = 'none';
+      list.innerHTML = '';
+
+      try {
+        const res = await fetch('/api/discovery/registry?limit=12');
+        const data = await res.json();
+        const entries = Array.isArray(data && data.listings) ? data.listings : [];
+
+        if (!entries.length) {
+          status.textContent = 'No businesses are currently listed. New real registrations will appear here automatically.';
+          return;
+        }
+
+        list.innerHTML = entries.map((entry) => {
+          const name = escapeHtml(entry.name || entry.domain || 'Unnamed site');
+          const domain = escapeHtml(entry.domain || '');
+          const category = escapeHtml(entry.category || 'general');
+          const desc = escapeHtml(entry.description || 'WAB-enabled website');
+          const score = Number.isFinite(Number(entry.neutrality_score)) ? Number(entry.neutrality_score) : 0;
+          return '<div class="card fade-in" style="border-left:3px solid #10b981;">' +
+            '<h3 style="margin-bottom:8px">' + name + '</h3>' +
+            '<p style="margin-bottom:10px">' + desc + '</p>' +
+            '<p style="color:var(--text-secondary);font-size:.88rem;margin:0">' + domain + '</p>' +
+            '<p style="color:var(--text-secondary);font-size:.82rem;margin-top:6px">' + category + ' · neutrality ' + score + '</p>' +
+          '</div>';
+        }).join('');
+
+        list.style.display = 'grid';
+        status.textContent = 'Live list loaded from registry.';
+      } catch (err) {
+        status.textContent = 'Failed to load live registry: ' + ((err && err.message) || err);
+      }
+    }
+
+    loadIndexLiveAdoption();
   </script>
   <script src="/js/cookie-consent.js?v=3.0.1"></script>
 </body>

package/public/integrations.html

@@ -116,7 +116,7 @@
         <a href="/dashboard" class="btn btn-ghost" data-wab-auth="signed-in" style="display:none">Dashboard</a>
         <a href="/register" class="btn btn-primary btn-sm" data-wab-auth="guest">Get Started</a>
       </div>
-      <button class="mobile-menu-btn" onclick="document.querySelector('.navbar-links').classList.toggle('active')">☰</button>
+      <button class="mobile-menu-btn" >☰</button>
     </div>
   </nav>
 

package/public/js/activate.js

@@ -0,0 +1,145 @@
+/* activate.js — WAB DNS Discovery Activation Page */
+(function () {
+  'use strict';
+
+  /* ── Translations ── */
+  var i18n = {
+    en: {
+      nav_home: 'Home', nav_integrations: 'Integrations', nav_dns: 'DNS Discovery',
+      nav_phone: 'Phone Shield', nav_sovereign: 'Sovereign', nav_docs: 'Docs',
+      hero_title: 'Activate WAB Discovery<br><span class="gradient-text">in One Click</span>',
+      hero_sub: 'Add a single DNS TXT record and make your website instantly discoverable by AI agents — no code changes required.',
+      cta_guide: 'View Setup Guide', cta_verify: 'Live Verifier',
+      video_title: 'Watch: Full Setup in 40 Seconds',
+      video_fallback: 'Your browser does not support the video tag.',
+      steps_title: 'Step-by-Step Setup Guide',
+      step1_title: 'Log In to Your DNS Provider',
+      step1_desc: 'Sign in to your domain registrar or DNS hosting dashboard. Common providers include Cloudflare, cPanel, GoDaddy, and Namecheap. Navigate to the DNS Management or DNS Records section.',
+      prov_cloudflare: 'Go to <strong>dash.cloudflare.com</strong> → Select your domain → Click <strong>DNS</strong> in the top navigation → Click <strong>+ Add record</strong>.',
+      prov_cpanel: 'Log in to cPanel → Scroll to <strong>Domains</strong> section → Click <strong>Zone Editor</strong> → Click <strong>Manage</strong> next to your domain → Click <strong>+ Add Record</strong>.',
+      prov_godaddy: 'Log in to <strong>godaddy.com</strong> → My Products → Click <strong>DNS</strong> next to your domain → Click <strong>Add New Record</strong>.',
+      prov_namecheap: 'Log in to <strong>namecheap.com</strong> → Domain List → Click <strong>Manage</strong> → Click <strong>Advanced DNS</strong> tab → Click <strong>Add New Record</strong>.',
+      step2_title: 'Add the TXT Record',
+      step2_desc: 'Create a new DNS TXT record with exactly these values. Replace <code style="color:#a5f3fc">yourdomain.com</code> with your actual domain.',
+      step3_title: 'Create the wab.json Capabilities File',
+      step3_desc: 'Create the file <code style="color:#a5f3fc">/.well-known/wab.json</code> on your web server. This file describes your site\'s capabilities to AI agents.',
+      step4_title: 'Verify Your Setup',
+      step4_desc: 'DNS propagation takes a few minutes. Use the Live Verifier to confirm your record is active. The verifier queries DNS over HTTPS (DoH) — no data is sent to our servers.',
+      verify_btn: 'Verify Now',
+      cta_title: 'Your Domain is Now AI-Ready',
+      cta_desc: 'Once verified, AI agents using the WAB protocol can discover your site\'s capabilities automatically — no manual configuration needed on their end.',
+      cta_full_guide: 'Full DNS Guide', cta_docs: 'Read the Docs'
+    },
+    ar: {
+      nav_home: 'الرئيسية', nav_integrations: 'التكاملات', nav_dns: 'اكتشاف DNS',
+      nav_phone: 'درع الهاتف', nav_sovereign: 'سيادي', nav_docs: 'التوثيق',
+      hero_title: 'فعّل اكتشاف WAB<br><span class="gradient-text">بنقرة واحدة</span>',
+      hero_sub: 'أضف سجل DNS TXT واحداً واجعل موقعك قابلاً للاكتشاف فوراً من قِبَل وكلاء الذكاء الاصطناعي — دون أي تغييرات في الكود.',
+      cta_guide: 'عرض دليل الإعداد', cta_verify: 'المدقق المباشر',
+      video_title: 'شاهد: الإعداد الكامل في 40 ثانية',
+      video_fallback: 'متصفحك لا يدعم تشغيل الفيديو.',
+      steps_title: 'دليل الإعداد خطوة بخطوة',
+      step1_title: 'سجّل الدخول إلى مزود DNS',
+      step1_desc: 'سجّل الدخول إلى مسجّل نطاقك أو لوحة تحكم استضافة DNS. المزودون الشائعون: Cloudflare وcPanel وGoDaddy وNamecheap. انتقل إلى قسم إدارة DNS أو سجلات DNS.',
+      prov_cloudflare: 'اذهب إلى <strong>dash.cloudflare.com</strong> → اختر نطاقك → انقر على <strong>DNS</strong> في التنقل العلوي → انقر على <strong>+ إضافة سجل</strong>.',
+      prov_cpanel: 'سجّل الدخول إلى cPanel → مرّر إلى قسم <strong>النطاقات</strong> → انقر على <strong>محرر المنطقة</strong> → انقر على <strong>إدارة</strong> بجانب نطاقك → انقر على <strong>+ إضافة سجل</strong>.',
+      prov_godaddy: 'سجّل الدخول إلى <strong>godaddy.com</strong> → منتجاتي → انقر على <strong>DNS</strong> بجانب نطاقك → انقر على <strong>إضافة سجل جديد</strong>.',
+      prov_namecheap: 'سجّل الدخول إلى <strong>namecheap.com</strong> → قائمة النطاقات → انقر على <strong>إدارة</strong> → انقر على تبويب <strong>Advanced DNS</strong> → انقر على <strong>إضافة سجل جديد</strong>.',
+      step2_title: 'أضف سجل TXT',
+      step2_desc: 'أنشئ سجل DNS TXT جديداً بهذه القيم بالضبط. استبدل <code style="color:#a5f3fc">yourdomain.com</code> بنطاقك الفعلي.',
+      step3_title: 'أنشئ ملف قدرات wab.json',
+      step3_desc: 'أنشئ الملف <code style="color:#a5f3fc">/.well-known/wab.json</code> على خادم الويب الخاص بك. يصف هذا الملف قدرات موقعك لوكلاء الذكاء الاصطناعي.',
+      step4_title: 'تحقق من إعدادك',
+      step4_desc: 'قد يستغرق انتشار DNS بضع دقائق. استخدم المدقق المباشر للتأكد من أن سجلك نشط. يستعلم المدقق عبر DNS over HTTPS (DoH) — لا يُرسَل أي بيانات إلى خوادمنا.',
+      verify_btn: 'تحقق الآن',
+      cta_title: 'نطاقك جاهز للذكاء الاصطناعي',
+      cta_desc: 'بمجرد التحقق، يمكن لوكلاء الذكاء الاصطناعي الذين يستخدمون بروتوكول WAB اكتشاف قدرات موقعك تلقائياً — دون الحاجة إلى أي إعداد يدوي من جانبهم.',
+      cta_full_guide: 'الدليل الكامل لـ DNS', cta_docs: 'اقرأ التوثيق'
+    }
+  };
+
+  var currentLang = 'en';
+
+  window.setActivateLang = function (lang) {
+    currentLang = lang;
+    var t = i18n[lang];
+    var html = document.documentElement;
+    html.setAttribute('lang', lang);
+    html.setAttribute('dir', lang === 'ar' ? 'rtl' : 'ltr');
+
+    document.querySelectorAll('[data-i18n]').forEach(function (el) {
+      var key = el.getAttribute('data-i18n');
+      if (t[key] !== undefined) el.innerHTML = t[key];
+    });
+
+    var btnEn = document.getElementById('btnEn');
+    var btnAr = document.getElementById('btnAr');
+    if (btnEn && btnAr) {
+      btnEn.classList.toggle('active', lang === 'en');
+      btnAr.classList.toggle('active', lang === 'ar');
+    }
+  };
+
+  /* ── Provider tabs ── */
+  window.showProvider = function (name, btn) {
+    document.querySelectorAll('.provider-content').forEach(function (el) { el.classList.remove('active'); });
+    document.querySelectorAll('.provider-tab').forEach(function (el) { el.classList.remove('active'); });
+    var content = document.getElementById('prov-' + name);
+    if (content) content.classList.add('active');
+    if (btn) btn.classList.add('active');
+  };
+
+  /* ── Live Verifier ── */
+  function verifyDomain() {
+    var input = document.getElementById('activateDomain');
+    var result = document.getElementById('activateResult');
+    if (!input || !result) return;
+    var domain = input.value.trim().replace(/^https?:\/\//, '').replace(/\/.*$/, '');
+    if (!domain) { input.focus(); return; }
+
+    result.style.display = 'block';
+    result.style.color = '#94a3b8';
+    result.innerHTML = currentLang === 'ar' ? '⏳ جارٍ التحقق...' : '⏳ Verifying...';
+
+    var url = 'https://cloudflare-dns.com/dns-query?name=_wab.' + encodeURIComponent(domain) + '&type=TXT';
+    fetch(url, { headers: { 'Accept': 'application/dns-json' } })
+      .then(function (r) { return r.json(); })
+      .then(function (data) {
+        var answers = (data.Answer || []).filter(function (a) { return a.type === 16; });
+        if (answers.length === 0) {
+          result.style.color = '#f87171';
+          result.innerHTML = currentLang === 'ar'
+            ? '✗ لم يُعثر على سجل _wab. تأكد من إضافة السجل وانتظر انتشار DNS.'
+            : '✗ No _wab record found. Make sure you added the record and wait for DNS propagation.';
+          return;
+        }
+        var raw = answers[0].data.replace(/^"|"$/g, '');
+        if (raw.indexOf('v=wab1') !== -1) {
+          result.style.color = '#34d399';
+          result.innerHTML = (currentLang === 'ar' ? '✓ سجل WAB صالح. ' : '✓ Valid WAB record found. ') +
+            '<br><span style="color:#a5f3fc">' + raw + '</span>';
+        } else {
+          result.style.color = '#fbbf24';
+          result.innerHTML = (currentLang === 'ar' ? '⚠ سجل TXT موجود لكن ليس سجل WAB صالحاً: ' : '⚠ TXT record found but not a valid WAB record: ') +
+            '<br><span style="color:#a5f3fc">' + raw + '</span>';
+        }
+      })
+      .catch(function () {
+        result.style.color = '#f87171';
+        result.innerHTML = currentLang === 'ar' ? '✗ خطأ في الاتصال. حاول مجدداً.' : '✗ Connection error. Please try again.';
+      });
+  }
+
+  document.addEventListener('DOMContentLoaded', function () {
+    var btn = document.getElementById('activateVerifyBtn');
+    if (btn) btn.addEventListener('click', verifyDomain);
+    var inp = document.getElementById('activateDomain');
+    if (inp) inp.addEventListener('keydown', function (e) { if (e.key === 'Enter') verifyDomain(); });
+
+    /* Lang buttons */
+    var btnEn = document.getElementById('btnEn');
+    var btnAr = document.getElementById('btnAr');
+    if (btnEn) btnEn.addEventListener('click', function () { setActivateLang('en'); });
+    if (btnAr) btnAr.addEventListener('click', function () { setActivateLang('ar'); });
+  });
+})();

package/public/js/auth-nav.js

@@ -29,3 +29,37 @@
     apply();
   }
 })();
+
+// ─── Mobile hamburger menu (CSP-safe, no onclick attributes) ───
+(function () {
+  function initMobileMenu() {
+    var btn = document.querySelector('.mobile-menu-btn');
+    var links = document.querySelector('.navbar-links');
+    if (!btn || !links) return;
+    btn.addEventListener('click', function (e) {
+      e.stopPropagation();
+      links.classList.toggle('active');
+      // Toggle icon ☰ ↔ ✕
+      btn.textContent = links.classList.contains('active') ? '✕' : '☰';
+    });
+    // Close menu when clicking outside
+    document.addEventListener('click', function (e) {
+      if (!e.target.closest('nav') && links.classList.contains('active')) {
+        links.classList.remove('active');
+        btn.textContent = '☰';
+      }
+    });
+    // Close menu when a nav link is clicked
+    links.querySelectorAll('a').forEach(function (a) {
+      a.addEventListener('click', function () {
+        links.classList.remove('active');
+        btn.textContent = '☰';
+      });
+    });
+  }
+  if (document.readyState === 'loading') {
+    document.addEventListener('DOMContentLoaded', initMobileMenu);
+  } else {
+    initMobileMenu();
+  }
+})();