web-agent-bridge 3.3.0 → 3.4.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (83) hide show
  1. package/LICENSE +12 -0
  2. package/README.ar.md +18 -0
  3. package/README.md +198 -1664
  4. package/bin/wab-init.js +223 -0
  5. package/examples/azure-dns-wab.js +83 -0
  6. package/examples/cloudflare-wab-dns.js +121 -0
  7. package/examples/cpanel-wab-dns.js +114 -0
  8. package/examples/dns-discovery-agent.js +166 -0
  9. package/examples/gcp-dns-wab.js +76 -0
  10. package/examples/governance-agent.js +169 -0
  11. package/examples/plesk-wab-dns.js +103 -0
  12. package/examples/route53-wab-dns.js +144 -0
  13. package/examples/safe-mode-agent.js +96 -0
  14. package/examples/wab-sign.js +74 -0
  15. package/examples/wab-verify.js +60 -0
  16. package/package.json +5 -5
  17. package/public/.well-known/wab.json +28 -0
  18. package/public/activate.html +368 -0
  19. package/public/adoption-metrics.html +188 -0
  20. package/public/api.html +1 -1
  21. package/public/azure-dns-integration.html +289 -0
  22. package/public/cloudflare-integration.html +380 -0
  23. package/public/cpanel-integration.html +398 -0
  24. package/public/css/styles.css +28 -0
  25. package/public/dashboard.html +1 -0
  26. package/public/dns.html +101 -172
  27. package/public/docs.html +1 -0
  28. package/public/gcp-dns-integration.html +318 -0
  29. package/public/growth.html +4 -2
  30. package/public/index.html +227 -31
  31. package/public/integrations.html +1 -1
  32. package/public/js/activate.js +145 -0
  33. package/public/js/auth-nav.js +34 -0
  34. package/public/js/dns.js +438 -0
  35. package/public/openapi.json +89 -0
  36. package/public/plesk-integration.html +375 -0
  37. package/public/premium.html +1 -1
  38. package/public/provider-onboarding.html +172 -0
  39. package/public/provider-sandbox.html +134 -0
  40. package/public/providers.html +359 -0
  41. package/public/registrar-integrations.html +141 -0
  42. package/public/robots.txt +12 -0
  43. package/public/route53-integration.html +531 -0
  44. package/public/shieldqr.html +231 -0
  45. package/public/sitemap.xml +6 -0
  46. package/public/wab-trust.html +200 -0
  47. package/public/wab-vs-protocols.html +210 -0
  48. package/public/whitepaper.html +449 -0
  49. package/sdk/auto-discovery.js +288 -0
  50. package/sdk/governance.js +262 -0
  51. package/sdk/index.js +13 -0
  52. package/sdk/package.json +2 -2
  53. package/sdk/safe-mode.js +221 -0
  54. package/server/index.js +144 -5
  55. package/server/migrations/007_governance.sql +106 -0
  56. package/server/migrations/008_plans.sql +144 -0
  57. package/server/migrations/009_shieldqr.sql +30 -0
  58. package/server/migrations/010_extended_trust.sql +33 -0
  59. package/server/models/adapters/mysql.js +1 -1
  60. package/server/models/adapters/postgresql.js +1 -1
  61. package/server/models/db.js +60 -1
  62. package/server/routes/admin-plans.js +76 -0
  63. package/server/routes/admin-premium.js +4 -2
  64. package/server/routes/admin-shieldqr.js +90 -0
  65. package/server/routes/admin-trust-monitor.js +83 -0
  66. package/server/routes/admin.js +289 -1
  67. package/server/routes/billing.js +16 -4
  68. package/server/routes/discovery.js +1933 -2
  69. package/server/routes/governance.js +208 -0
  70. package/server/routes/plans.js +33 -0
  71. package/server/routes/providers.js +650 -0
  72. package/server/routes/shieldqr.js +88 -0
  73. package/server/services/email.js +29 -0
  74. package/server/services/governance.js +466 -0
  75. package/server/services/plans.js +214 -0
  76. package/server/services/premium.js +1 -1
  77. package/server/services/provider-clients.js +740 -0
  78. package/server/services/shieldqr.js +322 -0
  79. package/server/services/ssl-inspector.js +42 -0
  80. package/server/services/ssl-monitor.js +167 -0
  81. package/server/services/stripe.js +18 -5
  82. package/server/services/vision.js +1 -1
  83. package/server/services/wab-crypto.js +178 -0
package/public/adoption-metrics.html ADDED
@@ -0,0 +1,188 @@
1
+ <!DOCTYPE html>
2
+ <html lang="en" dir="ltr">
3
+ <head>
4
+ <meta charset="UTF-8">
5
+ <meta name="viewport" content="width=device-width, initial-scale=1.0">
6
+ <title>WAB Adoption Metrics — Live Dashboard</title>
7
+ <meta name="description" content="Live adoption metrics for the WAB DNS Discovery protocol: domain coverage, readiness rates, value scores, use-case distribution, and trend data over 30 days.">
8
+ <link rel="stylesheet" href="/css/styles.css?v=3.3.0">
9
+ <style>
10
+ body { background:#081123; color:#e8efff; }
11
+ .hero { padding:100px 20px 24px; text-align:center; }
12
+ .hero h1 { font-size:clamp(1.8rem,4vw,2.6rem); margin-bottom:6px; }
13
+ .hero p { color:#9eb1d8; max-width:820px; margin:0 auto; }
14
+ .wrap { max-width:1180px; margin:0 auto; padding:0 18px 70px; }
15
+ .kpis { display:grid; grid-template-columns:repeat(auto-fit,minmax(180px,1fr)); gap:12px; margin-bottom:18px; }
16
+ .kpi { background:linear-gradient(180deg,rgba(17,24,39,.92),rgba(10,16,30,.96)); border:1px solid rgba(148,163,184,.2); border-radius:14px; padding:14px; text-align:center; }
17
+ .kpi .v { font-size:1.7rem; font-weight:800; color:#fcd34d; line-height:1.1; }
18
+ .kpi .l { font-size:.78rem; color:#9eb1d8; margin-top:6px; text-transform:uppercase; letter-spacing:.6px; }
19
+ .panel { background:linear-gradient(180deg,rgba(17,24,39,.92),rgba(10,16,30,.96)); border:1px solid rgba(148,163,184,.2); border-radius:14px; padding:16px; margin-bottom:16px; }
20
+ .panel h3 { margin:0 0 10px; color:#fcd34d; font-size:1rem; }
21
+ .grid2 { display:grid; grid-template-columns:1fr 1fr; gap:14px; }
22
+ @media (max-width:760px) { .grid2 { grid-template-columns:1fr; } }
23
+ table { width:100%; border-collapse:collapse; font-size:.84rem; }
24
+ th, td { padding:8px 10px; text-align:left; border-bottom:1px solid rgba(148,163,184,.14); }
25
+ th { color:#a8b7d7; font-weight:600; font-size:.74rem; text-transform:uppercase; letter-spacing:.5px; }
26
+ td.num { text-align:right; font-variant-numeric:tabular-nums; color:#c4b5fd; }
27
+ .bar { display:inline-block; height:10px; background:linear-gradient(90deg,#f59e0b,#b45309); border-radius:6px; vertical-align:middle; }
28
+ .pill { display:inline-block; padding:2px 8px; border-radius:999px; background:#1f2937; color:#a8b7d7; font-size:.72rem; }
29
+ .pill.ok { background:#064e3b; color:#a7f3d0; }
30
+ .pill.warn { background:#78350f; color:#fcd34d; }
31
+ .empty { color:#7a8db0; font-size:.84rem; padding:14px; text-align:center; }
32
+ .meta { color:#7a8db0; font-size:.78rem; text-align:right; margin-bottom:8px; }
33
+ .spark { display:flex; gap:2px; align-items:flex-end; height:60px; padding-top:6px; }
34
+ .spark .b { flex:1; background:#fcd34d; min-height:2px; border-radius:2px 2px 0 0; }
35
+ .spark .b:hover { background:#fef3c7; }
36
+ .day-row { display:flex; align-items:center; gap:8px; font-size:.78rem; padding:3px 0; }
37
+ .day-row .d { width:90px; color:#9eb1d8; font-variant-numeric:tabular-nums; }
38
+ .day-row .n { width:38px; text-align:right; color:#c4b5fd; font-variant-numeric:tabular-nums; }
39
+ .day-row .b-track { flex:1; background:rgba(148,163,184,.1); border-radius:4px; overflow:hidden; height:8px; }
40
+ .day-row .b-fill { height:100%; background:linear-gradient(90deg,#f59e0b,#fcd34d); }
41
+ a { color:#fcd34d; }
42
+ </style>
43
+ </head>
44
+ <body>
45
+ <section class="hero">
46
+ <h1>WAB Adoption Metrics</h1>
47
+ <p>Live dashboard powered by every <code>/api/discovery/usage-proof</code> run. Tracks domain coverage, agent readiness, end-to-end value, and use-case distribution across the WAB DNS Discovery protocol.</p>
48
+ </section>
49
+
50
+ <div class="wrap">
51
+ <div class="meta" id="meta">Loading…</div>
52
+
53
+ <div class="kpis" id="kpis"></div>
54
+
55
+ <div class="grid2">
56
+ <div class="panel">
57
+ <h3>Daily activity (last 30 days)</h3>
58
+ <div id="daily" class="empty">Loading…</div>
59
+ </div>
60
+
61
+ <div class="panel">
62
+ <h3>Top use-cases</h3>
63
+ <div id="useCases" class="empty">Loading…</div>
64
+ </div>
65
+ </div>
66
+
67
+ <div class="grid2">
68
+ <div class="panel">
69
+ <h3>Top domains</h3>
70
+ <div id="topDomains" class="empty">Loading…</div>
71
+ </div>
72
+
73
+ <div class="panel">
74
+ <h3>Recent runs</h3>
75
+ <div id="recent" class="empty">Loading…</div>
76
+ </div>
77
+ </div>
78
+
79
+ <div class="panel" style="text-align:center;color:#9eb1d8;font-size:.86rem;">
80
+ Want your domain on this dashboard? Run any <a href="/dns">WAB DNS</a> usage proof —
81
+ verify cryptographic trust at <a href="/wab-trust">/wab-trust</a> —
82
+ or one-click enable via
83
+ <a href="/cloudflare-integration">Cloudflare</a>,
84
+ <a href="/route53-integration">Route 53</a>,
85
+ <a href="/azure-dns-integration">Azure DNS</a>,
86
+ <a href="/gcp-dns-integration">Google Cloud DNS</a>,
87
+ <a href="/cpanel-integration">cPanel</a>,
88
+ <a href="/plesk-integration">Plesk</a>, or
89
+ <a href="/registrar-integrations">GoDaddy / Namecheap</a>.
90
+ </div>
91
+ </div>
92
+
93
+ <script>
94
+ const fmt = (n, d = 0) => Number(n || 0).toLocaleString(undefined, { maximumFractionDigits: d });
95
+ const pct = (n) => (Number(n || 0) * 100).toFixed(1) + '%';
96
+
97
+ function kpi(label, value) {
98
+ return `<div class="kpi"><div class="v">${value}</div><div class="l">${label}</div></div>`;
99
+ }
100
+
101
+ function renderDaily(rows) {
102
+ if (!rows || !rows.length) { return '<div class="empty">No runs in the last 30 days yet.</div>'; }
103
+ const max = Math.max(...rows.map(r => r.runs), 1);
104
+ return rows.map(r => `
105
+ <div class="day-row">
106
+ <div class="d">${r.day}</div>
107
+ <div class="b-track"><div class="b-fill" style="width:${(r.runs / max) * 100}%"></div></div>
108
+ <div class="n">${r.runs}</div>
109
+ </div>
110
+ `).join('');
111
+ }
112
+
113
+ function renderUseCases(rows) {
114
+ if (!rows || !rows.length) { return '<div class="empty">No use-case data yet.</div>'; }
115
+ const max = Math.max(...rows.map(r => r.runs), 1);
116
+ return `<table>
117
+ <thead><tr><th>Use case</th><th class="num">Runs</th><th class="num">Ready</th><th class="num">Avg score</th></tr></thead>
118
+ <tbody>${rows.map(r => `
119
+ <tr>
120
+ <td>${r.use_case || '—'}</td>
121
+ <td class="num">${fmt(r.runs)}</td>
122
+ <td class="num">${fmt(r.ready)}</td>
123
+ <td class="num">${fmt(r.avg_value_score, 2)}</td>
124
+ </tr>
125
+ `).join('')}</tbody>
126
+ </table>`;
127
+ }
128
+
129
+ function renderTopDomains(rows) {
130
+ if (!rows || !rows.length) { return '<div class="empty">No domains tracked yet.</div>'; }
131
+ return `<table>
132
+ <thead><tr><th>Domain</th><th class="num">Runs</th><th class="num">Ready</th><th class="num">Avg score</th></tr></thead>
133
+ <tbody>${rows.map(r => `
134
+ <tr>
135
+ <td>${r.domain}</td>
136
+ <td class="num">${fmt(r.runs)}</td>
137
+ <td class="num">${fmt(r.ready)}</td>
138
+ <td class="num">${fmt(r.avg_value_score, 2)}</td>
139
+ </tr>
140
+ `).join('')}</tbody>
141
+ </table>`;
142
+ }
143
+
144
+ function renderRecent(rows) {
145
+ if (!rows || !rows.length) { return '<div class="empty">No recent runs.</div>'; }
146
+ return `<table>
147
+ <thead><tr><th>Domain</th><th>Use case</th><th class="num">Score</th><th class="num">When</th></tr></thead>
148
+ <tbody>${rows.map(r => `
149
+ <tr>
150
+ <td>${r.domain}</td>
151
+ <td>${r.preferred_use_case || '—'} ${r.readiness_ok ? '<span class="pill ok">ready</span>' : '<span class="pill warn">pending</span>'}</td>
152
+ <td class="num">${fmt(r.value_score, 2)}</td>
153
+ <td class="num">${r.created_at ? r.created_at.replace('T',' ').slice(0,16) : ''}</td>
154
+ </tr>
155
+ `).join('')}</tbody>
156
+ </table>`;
157
+ }
158
+
159
+ async function load() {
160
+ const r = await fetch('/api/discovery/adoption-metrics');
161
+ if (!r.ok) {
162
+ document.getElementById('meta').textContent = 'Failed to load metrics: HTTP ' + r.status;
163
+ return;
164
+ }
165
+ const data = await r.json();
166
+ const t = data.totals || {};
167
+ document.getElementById('kpis').innerHTML = [
168
+ kpi('Total runs', fmt(t.total_runs)),
169
+ kpi('Unique domains', fmt(t.unique_domains)),
170
+ kpi('Readiness rate', pct(t.readiness_rate)),
171
+ kpi('Avg value score', fmt(t.avg_value_score, 2)),
172
+ kpi('Avg end-to-end', fmt(t.avg_end_to_end_ms) + ' ms'),
173
+ kpi('Exec success rate', pct(t.success_rate)),
174
+ ].join('');
175
+
176
+ document.getElementById('daily').innerHTML = renderDaily(data.daily_last_30);
177
+ document.getElementById('useCases').innerHTML = renderUseCases(data.by_use_case);
178
+ document.getElementById('topDomains').innerHTML = renderTopDomains(data.top_domains);
179
+ document.getElementById('recent').innerHTML = renderRecent(data.recent_runs);
180
+ document.getElementById('meta').textContent = 'Live · generated ' + (data.generated_at || '').replace('T',' ').slice(0,19) + ' UTC';
181
+ }
182
+
183
+ load().catch(err => {
184
+ document.getElementById('meta').textContent = 'Error loading metrics: ' + err.message;
185
+ });
186
+ </script>
187
+ </body>
188
+ </html>
package/public/api.html CHANGED
@@ -76,7 +76,7 @@
76
76
  <a href="/dashboard" class="btn btn-ghost" data-wab-auth="signed-in" style="display:none">Dashboard</a>
77
77
  <a href="/register" class="btn btn-primary btn-sm" data-wab-auth="guest">Get Started</a>
78
78
  </div>
79
- <button class="mobile-menu-btn" onclick="document.querySelector('.navbar-links').classList.toggle('active')">☰</button>
79
+ <button class="mobile-menu-btn" >☰</button>
80
80
  </div>
81
81
  </nav>
82
82
 
package/public/azure-dns-integration.html ADDED
@@ -0,0 +1,289 @@
1
+ <!DOCTYPE html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="UTF-8">
5
+ <meta name="viewport" content="width=device-width,initial-scale=1">
6
+ <title>WAB DNS — Azure DNS Integration</title>
7
+ <link rel="stylesheet" href="/css/main.css">
8
+ <style>
9
+ body { font-family: system-ui, sans-serif; background: #0f172a; color: #e2e8f0; margin: 0; padding: 0; }
10
+ .page { max-width: 880px; margin: 0 auto; padding: 40px 20px 80px; }
11
+ h1 { font-size: 1.7rem; margin-bottom: 6px; }
12
+ .sub { color: #94a3b8; margin-bottom: 32px; font-size: .97rem; }
13
+ .card { background: #1e293b; border-radius: 10px; padding: 24px; margin-bottom: 24px; }
14
+ h2 { font-size: 1.1rem; margin: 0 0 14px; }
15
+ label { display: block; font-size: .85rem; color: #94a3b8; margin-bottom: 4px; margin-top: 14px; }
16
+ label:first-child { margin-top: 0; }
17
+ input[type=text], input[type=password] {
18
+ width: 100%; box-sizing: border-box; background: #0f172a; border: 1px solid #334155;
19
+ color: #e2e8f0; border-radius: 6px; padding: 9px 12px; font-size: .93rem;
20
+ }
21
+ input:focus { outline: 2px solid #6366f1; border-color: transparent; }
22
+ .row { display: flex; gap: 12px; }
23
+ .row > * { flex: 1; }
24
+ .actions { display: flex; gap: 10px; margin-top: 20px; flex-wrap: wrap; }
25
+ .btn { padding: 9px 20px; border-radius: 7px; border: none; cursor: pointer; font-size: .92rem; font-weight: 600; }
26
+ .btn:hover { opacity: .85; }
27
+ .btn:disabled { opacity: .45; cursor: not-allowed; }
28
+ .btn-enable { background: #0078d4; color: #fff; }
29
+ .btn-disable { background: #ef4444; color: #fff; }
30
+ .btn-verify { background: #6366f1; color: #fff; }
31
+ .btn-secondary { background: #334155; color: #e2e8f0; }
32
+ #statusBar { margin-top: 18px; min-height: 36px; padding: 10px 14px; border-radius: 7px; background: #0f172a; font-size: .88rem; color: #94a3b8; display: none; }
33
+ #statusBar.ok { display: block; color: #4ade80; border: 1px solid #166534; }
34
+ #statusBar.err { display: block; color: #f87171; border: 1px solid #7f1d1d; }
35
+ #statusBar.info { display: block; color: #93c5fd; border: 1px solid #1e3a5f; }
36
+ pre { background: #0f172a; border-radius: 7px; padding: 14px 16px; font-size: .82rem; color: #94a3b8; overflow-x: auto; white-space: pre-wrap; word-break: break-word; margin: 14px 0 0; }
37
+ code { background: #0f172a; padding: 1px 5px; border-radius: 4px; font-size: .88em; }
38
+ .tab-bar { display: flex; gap: 4px; margin-bottom: 14px; }
39
+ .tab { padding: 5px 14px; border-radius: 6px; cursor: pointer; font-size: .84rem; background: #0f172a; color: #94a3b8; border: 1px solid #334155; }
40
+ .tab.active { background: #6366f1; color: #fff; border-color: transparent; }
41
+ .tab-panel { display: none; }
42
+ .tab-panel.active { display: block; }
43
+ .info-box { background: #0c2340; border: 1px solid #1e3a5f; border-radius: 8px; padding: 12px 16px; font-size: .87rem; color: #93c5fd; margin-bottom: 18px; }
44
+ a { color: #818cf8; }
45
+ </style>
46
+ </head>
47
+ <body>
48
+ <div class="page">
49
+ <h1>Azure DNS × WAB Discovery</h1>
50
+ <p class="sub">
51
+ Enable or disable the WAB DNS Discovery TXT record on any Azure DNS zone via the
52
+ <a href="https://learn.microsoft.com/en-us/rest/api/dns/" target="_blank" rel="noopener">Azure DNS REST API</a>.
53
+ </p>
54
+
55
+ <div class="info-box">
56
+ ℹ <strong>Bearer token required.</strong>
57
+ Generate via: <code>az account get-access-token --resource https://management.azure.com/</code>
58
+ or use a Service Principal with the <code>DNS Zone Contributor</code> role.
59
+ Token expires in ~60 minutes.
60
+ </div>
61
+
62
+ <!-- ── STEP 1: token ── -->
63
+ <div class="card">
64
+ <h2>1. Authentication</h2>
65
+ <label>Azure Bearer Token <span style="color:#64748b;font-weight:400">(stays in browser memory)</span></label>
66
+ <input type="password" id="azToken" placeholder="eyJ0eXAiOi…" autocomplete="off">
67
+ <p style="margin:8px 0 0;font-size:.82rem;color:#64748b">
68
+ Quick command: <code>az account get-access-token --resource https://management.azure.com/ --query accessToken -o tsv</code>
69
+ </p>
70
+ </div>
71
+
72
+ <!-- ── STEP 2: zone ── -->
73
+ <div class="card">
74
+ <h2>2. Subscription, Resource Group, Zone</h2>
75
+ <div class="row">
76
+ <div>
77
+ <label>Subscription ID</label>
78
+ <input type="text" id="azSub" placeholder="00000000-0000-0000-0000-000000000000">
79
+ </div>
80
+ <div>
81
+ <label>Resource Group</label>
82
+ <input type="text" id="azRg" placeholder="my-resource-group">
83
+ </div>
84
+ </div>
85
+ <div class="row">
86
+ <div>
87
+ <label>DNS Zone Name</label>
88
+ <input type="text" id="azZone" placeholder="example.com">
89
+ </div>
90
+ <div>
91
+ <label>Domain <span style="color:#64748b;font-weight:400">(usually same as zone)</span></label>
92
+ <input type="text" id="azDomain" placeholder="example.com">
93
+ </div>
94
+ </div>
95
+ <label>Endpoint URL <span style="color:#64748b;font-weight:400">(blank = auto)</span></label>
96
+ <input type="text" id="azEndpoint" placeholder="https://example.com/.well-known/wab.json">
97
+ </div>
98
+
99
+ <!-- ── STEP 3: actions ── -->
100
+ <div class="card">
101
+ <h2>3. Actions</h2>
102
+ <div class="actions">
103
+ <button class="btn btn-enable" id="btnEnable" onclick="azAction('enable')">✓ Enable WAB Discovery</button>
104
+ <button class="btn btn-disable" id="btnDisable" onclick="azAction('disable')">✗ Disable WAB Discovery</button>
105
+ <button class="btn btn-verify" id="btnVerify" onclick="azVerify()">⟳ Verify Status</button>
106
+ <button class="btn btn-secondary" onclick="window.open('/provider-sandbox','_blank')">Open Sandbox</button>
107
+ </div>
108
+ <div id="statusBar"></div>
109
+ <pre id="jsonOut" style="display:none"></pre>
110
+ </div>
111
+
112
+ <!-- ── CODE SNIPPETS ── -->
113
+ <div class="card">
114
+ <h2>Code Snippets</h2>
115
+ <div class="tab-bar">
116
+ <div class="tab active" onclick="switchTab('cli')">Azure CLI</div>
117
+ <div class="tab" onclick="switchTab('ps')">PowerShell</div>
118
+ <div class="tab" onclick="switchTab('tf')">Terraform</div>
119
+ </div>
120
+ <div id="tab-cli" class="tab-panel active">
121
+ <pre># Enable
122
+ az network dns record-set txt add-record \
123
+ --resource-group my-rg \
124
+ --zone-name example.com \
125
+ --record-set-name _wab \
126
+ --value "v=wab1; endpoint=https://example.com/.well-known/wab.json"
127
+
128
+ # Disable
129
+ az network dns record-set txt delete \
130
+ --resource-group my-rg \
131
+ --zone-name example.com \
132
+ --name _wab \
133
+ --yes
134
+ </pre>
135
+ </div>
136
+ <div id="tab-ps" class="tab-panel">
137
+ <pre># PowerShell with Az.Dns module
138
+ $txt = New-AzDnsRecordConfig -Value "v=wab1; endpoint=https://example.com/.well-known/wab.json"
139
+ New-AzDnsRecordSet `
140
+ -Name "_wab" -RecordType TXT -Ttl 3600 `
141
+ -ZoneName "example.com" -ResourceGroupName "my-rg" `
142
+ -DnsRecords $txt
143
+
144
+ # Disable
145
+ Remove-AzDnsRecordSet -Name "_wab" -RecordType TXT `
146
+ -ZoneName "example.com" -ResourceGroupName "my-rg" -Confirm:$false
147
+ </pre>
148
+ </div>
149
+ <div id="tab-tf" class="tab-panel">
150
+ <pre>resource "azurerm_dns_txt_record" "wab_discovery" {
151
+ name = "_wab"
152
+ zone_name = "example.com"
153
+ resource_group_name = "my-rg"
154
+ ttl = 3600
155
+
156
+ record {
157
+ value = "v=wab1; endpoint=https://example.com/.well-known/wab.json"
158
+ }
159
+ }
160
+ </pre>
161
+ </div>
162
+ </div>
163
+
164
+ <!-- ── IAM ── -->
165
+ <div class="card">
166
+ <h2>Required Role</h2>
167
+ <p style="font-size:.85rem;color:#94a3b8;margin:0 0 10px">
168
+ Use the built-in <strong>DNS Zone Contributor</strong> role scoped to the zone (or RG).
169
+ Required actions:
170
+ </p>
171
+ <pre>Microsoft.Network/dnsZones/TXT/read
172
+ Microsoft.Network/dnsZones/TXT/write
173
+ Microsoft.Network/dnsZones/TXT/delete</pre>
174
+ </div>
175
+
176
+ <p style="text-align:center;margin-top:30px;font-size:.85rem;color:#475569">
177
+ <a href="/provider-onboarding">← Provider Onboarding</a> ·
178
+ <a href="/cloudflare-integration">Cloudflare</a> ·
179
+ <a href="/route53-integration">Route 53</a> ·
180
+ <a href="/gcp-dns-integration">Google Cloud DNS</a> ·
181
+ <a href="/dns">DNS Discovery</a>
182
+ </p>
183
+ </div>
184
+
185
+ <script>
186
+ function switchTab(name) {
187
+ document.querySelectorAll('.tab').forEach(t => t.classList.remove('active'));
188
+ document.querySelectorAll('.tab-panel').forEach(p => p.classList.remove('active'));
189
+ document.querySelector(`#tab-${name}`).classList.add('active');
190
+ event.target.classList.add('active');
191
+ }
192
+
193
+ function setStatus(msg, type) { const b = document.getElementById('statusBar'); b.textContent = msg; b.className = type; }
194
+ function showJson(o) { const p = document.getElementById('jsonOut'); p.textContent = JSON.stringify(o, null, 2); p.style.display = 'block'; }
195
+
196
+ function getInputs() {
197
+ return {
198
+ token: document.getElementById('azToken').value.trim(),
199
+ sub: document.getElementById('azSub').value.trim(),
200
+ rg: document.getElementById('azRg').value.trim(),
201
+ zone: document.getElementById('azZone').value.trim(),
202
+ domain: document.getElementById('azDomain').value.trim().toLowerCase().replace(/^https?:\/\//, '').replace(/\/$/, ''),
203
+ ep: document.getElementById('azEndpoint').value.trim(),
204
+ };
205
+ }
206
+
207
+ async function azReq(token, method, path, body) {
208
+ const r = await fetch(`https://management.azure.com${path}?api-version=2018-05-01`, {
209
+ method,
210
+ headers: { 'Authorization': `Bearer ${token}`, 'Content-Type': 'application/json' },
211
+ body: body ? JSON.stringify(body) : undefined,
212
+ });
213
+ const txt = await r.text();
214
+ if (r.status === 404) return null;
215
+ if (!r.ok) {
216
+ let parsed; try { parsed = JSON.parse(txt); } catch {}
217
+ throw new Error(`Azure ${r.status}: ${parsed?.error?.message || txt.slice(0, 300)}`);
218
+ }
219
+ try { return JSON.parse(txt); } catch { return txt; }
220
+ }
221
+
222
+ async function azAction(action) {
223
+ const inp = getInputs();
224
+ if (!inp.token) return setStatus('Please paste an Azure bearer token.', 'err');
225
+ if (!inp.sub) return setStatus('Please enter the Subscription ID.', 'err');
226
+ if (!inp.rg) return setStatus('Please enter the Resource Group.', 'err');
227
+ if (!inp.zone) return setStatus('Please enter the DNS zone name.', 'err');
228
+ if (!inp.domain) inp.domain = inp.zone;
229
+
230
+ document.getElementById('btnEnable').disabled = true;
231
+ document.getElementById('btnDisable').disabled = true;
232
+ try {
233
+ const ep = inp.ep || `https://${inp.domain}/.well-known/wab.json`;
234
+ setStatus('Fetching WAB record template…', 'info');
235
+ const tpl = await (await fetch(`/api/discovery/provider/record-template?domain=${encodeURIComponent(inp.domain)}&endpoint=${encodeURIComponent(ep)}`)).json();
236
+ const txtVal = tpl.record && tpl.record.value;
237
+ if (!txtVal) throw new Error('Could not fetch WAB record template.');
238
+
239
+ // Azure stores record name relative to zone — usually "_wab" if zone == domain, else "_wab.subdomain"
240
+ const recName = inp.domain === inp.zone ? '_wab' : `_wab.${inp.domain.replace(`.${inp.zone}`, '')}`;
241
+ const path = `/subscriptions/${inp.sub}/resourceGroups/${inp.rg}/providers/Microsoft.Network/dnsZones/${inp.zone}/TXT/${recName}`;
242
+
243
+ if (action === 'enable') {
244
+ // PUT replaces the record set entirely (atomic upsert)
245
+ const body = {
246
+ properties: {
247
+ TTL: 3600,
248
+ TXTRecords: [{ value: [txtVal] }]
249
+ }
250
+ };
251
+ setStatus(`Submitting PUT to Azure DNS for ${recName}.${inp.zone}…`, 'info');
252
+ const out = await azReq(inp.token, 'PUT', path, body);
253
+ setStatus(`✓ TXT record set for ${recName}.${inp.zone}. WAB Discovery is ENABLED.`, 'ok');
254
+ showJson(out);
255
+ } else {
256
+ setStatus('Deleting TXT record set…', 'info');
257
+ const out = await azReq(inp.token, 'DELETE', path);
258
+ if (out === null) {
259
+ setStatus(`No _wab TXT record found for ${inp.zone} — already disabled.`, 'ok');
260
+ showJson({ note: 'no record found' });
261
+ } else {
262
+ setStatus(`✓ TXT record deleted. WAB Discovery is DISABLED.`, 'ok');
263
+ showJson({ deleted: recName, zone: inp.zone });
264
+ }
265
+ }
266
+ } catch (err) {
267
+ setStatus(`Error: ${err.message}`, 'err');
268
+ } finally {
269
+ document.getElementById('btnEnable').disabled = false;
270
+ document.getElementById('btnDisable').disabled = false;
271
+ }
272
+ }
273
+
274
+ async function azVerify() {
275
+ const { domain, zone } = getInputs();
276
+ const d = domain || zone;
277
+ if (!d) return setStatus('Please enter a domain.', 'err');
278
+ setStatus('Checking WAB status…', 'info');
279
+ try {
280
+ const j = await (await fetch(`/api/discovery/provider/status?domain=${encodeURIComponent(d)}`)).json();
281
+ if (j.status === 'enabled') setStatus(`✓ ${d} — ENABLED.`, 'ok');
282
+ else if (j.status === 'partial') setStatus(`⚠ ${d} — partial.`, 'info');
283
+ else setStatus(`✗ ${d} — DISABLED.`, 'err');
284
+ showJson(j);
285
+ } catch (err) { setStatus(`Verify error: ${err.message}`, 'err'); }
286
+ }
287
+ </script>
288
+ </body>
289
+ </html>