web-agent-bridge 3.3.0 → 3.8.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (312) hide show
  1. package/LICENSE +84 -72
  2. package/README.ar.md +1563 -1286
  3. package/README.md +137 -1764
  4. package/bin/agent-runner.js +474 -474
  5. package/bin/cli.js +237 -237
  6. package/bin/wab-init.js +244 -0
  7. package/bin/wab.js +80 -80
  8. package/examples/azure-dns-wab.js +83 -0
  9. package/examples/bidi-agent.js +119 -119
  10. package/examples/cloudflare-wab-dns.js +121 -0
  11. package/examples/cpanel-wab-dns.js +114 -0
  12. package/examples/cross-site-agent.js +91 -91
  13. package/examples/dns-discovery-agent.js +166 -0
  14. package/examples/gcp-dns-wab.js +76 -0
  15. package/examples/governance-agent.js +169 -0
  16. package/examples/mcp-agent.js +94 -94
  17. package/examples/next-app-router/README.md +44 -44
  18. package/examples/plesk-wab-dns.js +103 -0
  19. package/examples/puppeteer-agent.js +108 -108
  20. package/examples/route53-wab-dns.js +144 -0
  21. package/examples/saas-dashboard/README.md +55 -55
  22. package/examples/safe-mode-agent.js +96 -0
  23. package/examples/self-discovery.js +106 -0
  24. package/examples/shopify-hydrogen/README.md +74 -74
  25. package/examples/vision-agent.js +171 -171
  26. package/examples/wab-sign.js +74 -0
  27. package/examples/wab-verify.js +60 -0
  28. package/examples/wordpress-elementor/README.md +77 -77
  29. package/package.json +93 -93
  30. package/public/.well-known/agent-tools.json +180 -180
  31. package/public/.well-known/ai-assets.json +59 -59
  32. package/public/.well-known/security.txt +8 -8
  33. package/public/.well-known/wab.json +28 -0
  34. package/public/activate.html +448 -0
  35. package/public/adopt.html +236 -0
  36. package/public/adoption-metrics.html +188 -0
  37. package/public/agent-workspace.html +359 -349
  38. package/public/ai.html +198 -198
  39. package/public/api.html +397 -413
  40. package/public/azure-dns-integration.html +289 -0
  41. package/public/browser.html +486 -486
  42. package/public/cloudflare-integration.html +380 -0
  43. package/public/commander-dashboard.html +243 -243
  44. package/public/cookies.html +210 -210
  45. package/public/cpanel-integration.html +398 -0
  46. package/public/css/agent-workspace.css +1713 -1713
  47. package/public/css/premium.css +317 -317
  48. package/public/css/styles.css +1401 -1235
  49. package/public/dashboard-shieldlink.html +295 -0
  50. package/public/dashboard.html +711 -706
  51. package/public/dns.html +436 -507
  52. package/public/docs.html +588 -587
  53. package/public/enterprise-mesh.ar.html +80 -0
  54. package/public/enterprise-mesh.html +81 -0
  55. package/public/feed.xml +89 -89
  56. package/public/gcp-dns-integration.html +318 -0
  57. package/public/governance.ar.html +70 -0
  58. package/public/governance.html +69 -0
  59. package/public/growth.html +465 -463
  60. package/public/index.html +1372 -1070
  61. package/public/integrations.html +556 -556
  62. package/public/js/activate.js +449 -0
  63. package/public/js/agent-workspace.js +1740 -1740
  64. package/public/js/auth-nav.js +117 -31
  65. package/public/js/auth-redirect.js +12 -12
  66. package/public/js/cookie-consent.js +56 -56
  67. package/public/js/dns.js +438 -0
  68. package/public/js/wab-demo-page.js +721 -721
  69. package/public/js/ws-client.js +74 -74
  70. package/public/l-preview.html +242 -0
  71. package/public/llms-full.txt +360 -360
  72. package/public/llms.txt +125 -125
  73. package/public/login.html +85 -85
  74. package/public/mesh-dashboard.html +328 -328
  75. package/public/milestones.html +346 -0
  76. package/public/one-click.html +779 -0
  77. package/public/openapi.json +669 -580
  78. package/public/partners.ar.html +145 -0
  79. package/public/partners.html +143 -0
  80. package/public/phone-shield.html +281 -281
  81. package/public/plesk-integration.html +375 -0
  82. package/public/premium-dashboard.html +2489 -2489
  83. package/public/premium.html +793 -793
  84. package/public/privacy.html +297 -297
  85. package/public/provider-onboarding.html +172 -0
  86. package/public/provider-sandbox.html +134 -0
  87. package/public/providers.html +359 -0
  88. package/public/refusals.html +172 -0
  89. package/public/register.html +105 -105
  90. package/public/registrar-integrations.html +141 -0
  91. package/public/ring4.html +292 -0
  92. package/public/robots.txt +99 -87
  93. package/public/route53-integration.html +531 -0
  94. package/public/score.html +263 -0
  95. package/public/script/wab-consent.d.ts +36 -36
  96. package/public/script/wab-consent.js +104 -104
  97. package/public/script/wab-schema.js +131 -131
  98. package/public/script/wab.d.ts +108 -108
  99. package/public/script/wab.min.js +580 -580
  100. package/public/security.txt +8 -8
  101. package/public/shieldlink.html +244 -0
  102. package/public/shieldqr.html +231 -0
  103. package/public/sitemap.xml +19 -1
  104. package/public/terms.html +256 -256
  105. package/public/trust-graph-api.ar.html +92 -0
  106. package/public/trust-graph-api.html +91 -0
  107. package/public/wab-features.html +560 -0
  108. package/public/wab-trust.html +200 -0
  109. package/public/wab-truth.html +375 -0
  110. package/public/wab-vs-protocols.html +210 -0
  111. package/public/whitepaper.html +449 -0
  112. package/script/ai-agent-bridge.js +1754 -1754
  113. package/sdk/README.md +99 -99
  114. package/sdk/agent-mesh.js +449 -449
  115. package/sdk/auto-discovery.js +301 -0
  116. package/sdk/commander.js +262 -262
  117. package/sdk/governance.js +262 -0
  118. package/sdk/index.d.ts +464 -464
  119. package/sdk/index.js +649 -636
  120. package/sdk/multi-agent.js +318 -318
  121. package/sdk/package.json +2 -2
  122. package/sdk/safe-mode.js +221 -0
  123. package/sdk/safety-shield.js +219 -219
  124. package/sdk/schema-discovery.js +83 -83
  125. package/server/adapters/index.js +520 -520
  126. package/server/config/plans.js +412 -367
  127. package/server/config/secrets.js +102 -102
  128. package/server/control-plane/index.js +301 -301
  129. package/server/data-plane/index.js +354 -354
  130. package/server/index.js +790 -531
  131. package/server/llm/index.js +404 -404
  132. package/server/middleware/adminAuth.js +35 -35
  133. package/server/middleware/api-tier.js +170 -0
  134. package/server/middleware/auth.js +50 -50
  135. package/server/middleware/featureGate.js +88 -88
  136. package/server/middleware/rateLimits.js +100 -100
  137. package/server/middleware/sensitiveAction.js +157 -157
  138. package/server/middleware/wab-trust.js +141 -0
  139. package/server/migrations/001_add_analytics_indexes.sql +7 -7
  140. package/server/migrations/002_premium_features.sql +418 -418
  141. package/server/migrations/003_ads_integer_cents.sql +33 -33
  142. package/server/migrations/004_agent_os.sql +158 -158
  143. package/server/migrations/005_marketplace_metering.sql +126 -126
  144. package/server/migrations/006_growth_suite.sql +138 -0
  145. package/server/migrations/007_governance.sql +106 -0
  146. package/server/migrations/008_plans.sql +144 -0
  147. package/server/migrations/009_shieldqr.sql +30 -0
  148. package/server/migrations/010_extended_trust.sql +33 -0
  149. package/server/migrations/011_outreach.sql +47 -0
  150. package/server/migrations/012_shieldlink.sql +116 -0
  151. package/server/migrations/013_ct_monitor.sql +13 -0
  152. package/server/migrations/014_wab_advanced_features.sql +128 -0
  153. package/server/migrations/015_wab_truth_layer.sql +101 -0
  154. package/server/migrations/016_ring4_external_trust.sql +84 -0
  155. package/server/migrations/017_ring4_extensions.sql +69 -0
  156. package/server/migrations/018_commercial_foundations.sql +167 -0
  157. package/server/migrations/019_unify_tier_constraints.sql +133 -0
  158. package/server/models/adapters/index.js +33 -33
  159. package/server/models/adapters/mysql.js +183 -183
  160. package/server/models/adapters/postgresql.js +172 -172
  161. package/server/models/adapters/sqlite.js +7 -7
  162. package/server/models/db.js +740 -681
  163. package/server/observability/failure-analysis.js +337 -337
  164. package/server/observability/index.js +394 -394
  165. package/server/protocol/capabilities.js +223 -223
  166. package/server/protocol/index.js +243 -243
  167. package/server/protocol/schema.js +584 -584
  168. package/server/registry/certification.js +271 -271
  169. package/server/registry/index.js +326 -326
  170. package/server/routes/activate.js +478 -0
  171. package/server/routes/admin-outreach.js +239 -0
  172. package/server/routes/admin-plans.js +76 -0
  173. package/server/routes/admin-premium.js +674 -671
  174. package/server/routes/admin-shieldlink.js +137 -0
  175. package/server/routes/admin-shieldqr.js +90 -0
  176. package/server/routes/admin-trust-monitor.js +139 -0
  177. package/server/routes/admin.js +550 -261
  178. package/server/routes/adopt.js +61 -0
  179. package/server/routes/ads.js +130 -130
  180. package/server/routes/agent-workspace.js +540 -540
  181. package/server/routes/api-keys.js +127 -0
  182. package/server/routes/api.js +150 -150
  183. package/server/routes/auth.js +71 -71
  184. package/server/routes/billing.js +57 -45
  185. package/server/routes/commander.js +316 -316
  186. package/server/routes/customer-shieldlink.js +133 -0
  187. package/server/routes/demo-showcase.js +332 -332
  188. package/server/routes/demo-store.js +154 -154
  189. package/server/routes/diagnose.js +373 -0
  190. package/server/routes/discovery.js +2348 -417
  191. package/server/routes/enterprise-mesh.js +170 -0
  192. package/server/routes/gateway.js +173 -173
  193. package/server/routes/governance-saas.js +203 -0
  194. package/server/routes/governance.js +208 -0
  195. package/server/routes/growth.js +1048 -0
  196. package/server/routes/intent.js +328 -0
  197. package/server/routes/license.js +251 -251
  198. package/server/routes/mesh.js +469 -469
  199. package/server/routes/noscript.js +543 -543
  200. package/server/routes/partners.js +201 -0
  201. package/server/routes/plans.js +33 -0
  202. package/server/routes/premium-v2.js +686 -686
  203. package/server/routes/premium.js +724 -724
  204. package/server/routes/providers.js +650 -0
  205. package/server/routes/reputation.js +411 -0
  206. package/server/routes/ring4.js +885 -0
  207. package/server/routes/runtime.js +2148 -2148
  208. package/server/routes/shieldlink.js +70 -0
  209. package/server/routes/shieldqr.js +88 -0
  210. package/server/routes/sovereign.js +465 -465
  211. package/server/routes/truth-layer.js +670 -0
  212. package/server/routes/universal.js +200 -200
  213. package/server/routes/unsubscribe.js +51 -0
  214. package/server/routes/wab-api.js +850 -850
  215. package/server/routes/wab-cache.js +282 -0
  216. package/server/runtime/container-worker.js +111 -111
  217. package/server/runtime/container.js +448 -448
  218. package/server/runtime/distributed-worker.js +362 -362
  219. package/server/runtime/event-bus.js +210 -210
  220. package/server/runtime/index.js +253 -253
  221. package/server/runtime/queue.js +599 -599
  222. package/server/runtime/replay.js +666 -666
  223. package/server/runtime/sandbox.js +266 -266
  224. package/server/runtime/scheduler.js +534 -534
  225. package/server/runtime/session-engine.js +293 -293
  226. package/server/runtime/state-manager.js +188 -188
  227. package/server/secrets/wab-signing-key.pem +3 -0
  228. package/server/secrets/wab-signing-pub.pem +3 -0
  229. package/server/security/cross-site-redactor.js +196 -196
  230. package/server/security/dry-run.js +180 -180
  231. package/server/security/human-gate-rate-limit.js +147 -147
  232. package/server/security/human-gate-transports.js +178 -178
  233. package/server/security/human-gate.js +281 -281
  234. package/server/security/index.js +368 -368
  235. package/server/security/intent-engine.js +245 -245
  236. package/server/security/reward-guard.js +171 -171
  237. package/server/security/rollback-store.js +239 -239
  238. package/server/security/token-scope.js +404 -404
  239. package/server/security/url-policy.js +139 -139
  240. package/server/services/adoption-agent.js +182 -0
  241. package/server/services/agent-chat.js +506 -506
  242. package/server/services/agent-learning.js +601 -601
  243. package/server/services/agent-memory.js +625 -625
  244. package/server/services/agent-mesh.js +555 -555
  245. package/server/services/agent-symphony.js +717 -717
  246. package/server/services/agent-tasks.js +1807 -1807
  247. package/server/services/api-key-engine.js +292 -292
  248. package/server/services/cluster.js +894 -894
  249. package/server/services/commander.js +738 -738
  250. package/server/services/edge-compute.js +440 -440
  251. package/server/services/email.js +233 -204
  252. package/server/services/fairness-engine.js +409 -0
  253. package/server/services/fairness.js +420 -0
  254. package/server/services/governance.js +466 -0
  255. package/server/services/hosted-runtime.js +205 -205
  256. package/server/services/lfd.js +635 -635
  257. package/server/services/local-ai.js +389 -389
  258. package/server/services/marketplace.js +270 -270
  259. package/server/services/metering.js +182 -182
  260. package/server/services/modules/affiliate-intelligence.js +93 -93
  261. package/server/services/modules/agent-firewall.js +90 -90
  262. package/server/services/modules/bounty.js +89 -89
  263. package/server/services/modules/collective-bargaining.js +92 -92
  264. package/server/services/modules/dark-pattern.js +66 -66
  265. package/server/services/modules/gov-intelligence.js +45 -45
  266. package/server/services/modules/neural.js +55 -55
  267. package/server/services/modules/notary.js +49 -49
  268. package/server/services/modules/price-time-machine.js +86 -86
  269. package/server/services/modules/protocol.js +104 -104
  270. package/server/services/negotiation.js +439 -439
  271. package/server/services/outreach-agent.js +312 -0
  272. package/server/services/plans.js +214 -0
  273. package/server/services/plugins.js +771 -771
  274. package/server/services/premium.js +1 -1
  275. package/server/services/price-intelligence.js +566 -566
  276. package/server/services/price-shield.js +1137 -1137
  277. package/server/services/provider-clients.js +740 -0
  278. package/server/services/reputation.js +465 -465
  279. package/server/services/search-engine.js +357 -357
  280. package/server/services/security.js +513 -513
  281. package/server/services/self-healing.js +843 -843
  282. package/server/services/shieldlink.js +492 -0
  283. package/server/services/shieldqr.js +322 -0
  284. package/server/services/sovereign-shield.js +542 -542
  285. package/server/services/ssl-ct-monitor.js +224 -0
  286. package/server/services/ssl-inspector.js +42 -0
  287. package/server/services/ssl-monitor.js +167 -0
  288. package/server/services/stripe.js +206 -192
  289. package/server/services/swarm.js +788 -788
  290. package/server/services/universal-scraper.js +662 -662
  291. package/server/services/verification.js +481 -481
  292. package/server/services/vision.js +1163 -1163
  293. package/server/services/wab-crypto.js +178 -0
  294. package/server/utils/cache.js +125 -125
  295. package/server/utils/migrate.js +81 -81
  296. package/server/utils/safe-fetch.js +228 -228
  297. package/server/utils/secureFields.js +50 -50
  298. package/server/ws.js +161 -161
  299. package/templates/artisan-marketplace.yaml +104 -104
  300. package/templates/book-price-scout.yaml +98 -98
  301. package/templates/electronics-price-tracker.yaml +108 -108
  302. package/templates/flight-deal-hunter.yaml +113 -113
  303. package/templates/freelancer-direct.yaml +116 -116
  304. package/templates/grocery-price-compare.yaml +93 -93
  305. package/templates/hotel-direct-booking.yaml +113 -113
  306. package/templates/local-services.yaml +98 -98
  307. package/templates/olive-oil-tunisia.yaml +88 -88
  308. package/templates/organic-farm-fresh.yaml +101 -101
  309. package/templates/restaurant-direct.yaml +97 -97
  310. package/templates/ring4/banking-sovereign.yaml +55 -0
  311. package/templates/ring4/ecommerce-sovereign.yaml +58 -0
  312. package/templates/ring4/healthcare-sovereign.yaml +60 -0
package/public/security.txt CHANGED
@@ -1,8 +1,8 @@
1
- Contact: mailto:security@webagentbridge.com
2
- Expires: 2027-04-26T00:00:00.000Z
3
- Encryption: https://www.webagentbridge.com/.well-known/pgp-key.txt
4
- Acknowledgments: https://www.webagentbridge.com/security#hall-of-fame
5
- Preferred-Languages: en, ar
6
- Canonical: https://www.webagentbridge.com/.well-known/security.txt
7
- Policy: https://www.webagentbridge.com/security
8
- Hiring: https://www.webagentbridge.com/security#bug-bounty
1
+ Contact: mailto:security@webagentbridge.com
2
+ Expires: 2027-04-26T00:00:00.000Z
3
+ Encryption: https://www.webagentbridge.com/.well-known/pgp-key.txt
4
+ Acknowledgments: https://www.webagentbridge.com/security#hall-of-fame
5
+ Preferred-Languages: en, ar
6
+ Canonical: https://www.webagentbridge.com/.well-known/security.txt
7
+ Policy: https://www.webagentbridge.com/security
8
+ Hiring: https://www.webagentbridge.com/security#bug-bounty
package/public/shieldlink.html ADDED
@@ -0,0 +1,244 @@
1
+ <!doctype html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="utf-8" />
5
+ <meta name="viewport" content="width=device-width,initial-scale=1" />
6
+ <title>WAB ShieldLink — Verified Links for Banks &amp; Brands</title>
7
+ <meta name="description" content="Sender-signed, anti-phishing links from verified brands. Cryptographically signed, DNS-anchored, no install required for end users." />
8
+ <meta property="og:title" content="WAB ShieldLink — Verified Links" />
9
+ <meta property="og:description" content="Anti-phishing verified links for banks, payment processors, and businesses. Anyone can verify; no app install required." />
10
+ <meta property="og:url" content="https://www.webagentbridge.com/shieldlink" />
11
+ <link rel="canonical" href="https://www.webagentbridge.com/shieldlink" />
12
+ <style>
13
+ :root{--bg:#0b1220;--fg:#fff;--muted:#94a3b8;--card:#111a2e;--border:#1f2a44;--accent:#22d3a3;--warn:#f59e0b;--bad:#ef4444}
14
+ *{box-sizing:border-box}
15
+ body{margin:0;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,Arial,sans-serif;background:var(--bg);color:var(--fg);line-height:1.6}
16
+ .wrap{max-width:1100px;margin:0 auto;padding:24px}
17
+ header{display:flex;justify-content:space-between;align-items:center;padding:18px 0}
18
+ header a.logo{color:#fff;text-decoration:none;font-weight:700;font-size:18px}
19
+ nav a{color:var(--muted);margin-left:20px;text-decoration:none;font-size:14px}
20
+ nav a:hover{color:#fff}
21
+ [dir="rtl"] nav a{margin-left:0;margin-right:20px}
22
+ .hero{padding:60px 0 40px;text-align:center}
23
+ .pill{display:inline-block;background:rgba(34,211,163,.15);color:var(--accent);padding:6px 14px;border-radius:99px;font-size:12px;font-weight:600;letter-spacing:.5px;text-transform:uppercase}
24
+ h1{font-size:44px;line-height:1.15;margin:18px 0 16px}
25
+ .lede{color:var(--muted);font-size:18px;max-width:720px;margin:0 auto 26px}
26
+ .cta{display:inline-block;background:var(--accent);color:#0b1220;font-weight:700;padding:14px 28px;border-radius:8px;text-decoration:none;margin:6px}
27
+ .cta.ghost{background:transparent;color:#fff;border:1px solid var(--border)}
28
+ .grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(260px,1fr));gap:18px;margin:42px 0}
29
+ .card{background:var(--card);border:1px solid var(--border);border-radius:12px;padding:20px}
30
+ .card h3{margin:0 0 8px;font-size:18px}
31
+ .card p{color:var(--muted);font-size:14px;margin:0}
32
+ .demo{background:var(--card);border:1px solid var(--border);border-radius:12px;padding:24px;margin:28px 0}
33
+ .demo h2{margin:0 0 14px}
34
+ .preview{display:flex;gap:16px;flex-wrap:wrap}
35
+ .preview .col{flex:1;min-width:220px;background:#0f1730;border:1px solid var(--border);border-radius:10px;overflow:hidden}
36
+ .preview .head{padding:12px;color:#fff;font-weight:600;font-size:14px}
37
+ .preview .head.ok{background:#0a9d58}
38
+ .preview .head.warn{background:#f59e0b;color:#1f2933}
39
+ .preview .head.bad{background:#dc2626}
40
+ .preview ul{margin:0;padding:14px 18px;color:var(--muted);font-size:13px}
41
+ .preview li{margin:4px 0}
42
+ section{padding:36px 0;border-top:1px solid var(--border)}
43
+ h2{font-size:28px;margin:0 0 14px}
44
+ .steps{counter-reset:step;list-style:none;padding:0}
45
+ .steps li{padding:14px 0 14px 56px;position:relative;color:var(--muted)}
46
+ .steps li::before{counter-increment:step;content:counter(step);position:absolute;left:0;top:14px;width:36px;height:36px;border-radius:50%;background:var(--accent);color:#0b1220;font-weight:700;display:flex;align-items:center;justify-content:center}
47
+ [dir="rtl"] .steps li{padding:14px 56px 14px 0}
48
+ [dir="rtl"] .steps li::before{left:auto;right:0}
49
+ .steps li b{color:#fff;display:block;margin-bottom:2px}
50
+ table{width:100%;border-collapse:collapse;margin:20px 0;font-size:14px}
51
+ th,td{text-align:left;padding:12px;border-bottom:1px solid var(--border)}
52
+ th{color:var(--accent);font-size:13px;text-transform:uppercase;letter-spacing:.4px}
53
+ [dir="rtl"] th,[dir="rtl"] td{text-align:right}
54
+ .price{display:grid;grid-template-columns:repeat(auto-fit,minmax(220px,1fr));gap:18px}
55
+ .plan{background:var(--card);border:1px solid var(--border);border-radius:12px;padding:24px}
56
+ .plan.pro{border-color:var(--accent)}
57
+ .plan h3{margin:0 0 4px}
58
+ .plan .p{font-size:32px;font-weight:700;margin:6px 0 12px}
59
+ .plan ul{padding-left:18px;color:var(--muted);font-size:14px;margin:0}
60
+ [dir="rtl"] .plan ul{padding-left:0;padding-right:18px}
61
+ footer{text-align:center;color:var(--muted);font-size:13px;padding:36px 0;border-top:1px solid var(--border)}
62
+ .lang{cursor:pointer;color:var(--muted);text-decoration:none}
63
+ .lang:hover{color:#fff}
64
+ @media(max-width:640px){h1{font-size:32px}.hero{padding:36px 0 24px}}
65
+ </style>
66
+ </head>
67
+ <body>
68
+ <div class="wrap">
69
+ <header>
70
+ <a class="logo" href="/">Web Agent Bridge</a>
71
+ <nav>
72
+ <a href="/">Home</a>
73
+ <a href="/pricing.html" data-en="Pricing" data-ar="الأسعار">Pricing</a>
74
+ <a href="/dashboard.html" data-en="Dashboard" data-ar="لوحة التحكم">Dashboard</a>
75
+ <a class="lang" id="lang-toggle">عربي</a>
76
+ </nav>
77
+ </header>
78
+
79
+ <div class="hero">
80
+ <span class="pill" data-en="WAB ShieldLink · New" data-ar="شيلد لينك · جديد">WAB ShieldLink · New</span>
81
+ <h1 data-en="Verified links from real banks &amp; brands."
82
+ data-ar="روابط موثّقة من البنوك والعلامات الحقيقية.">
83
+ Verified links from real banks &amp; brands.
84
+ </h1>
85
+ <p class="lede" data-en="Stop phishing at the link layer. Banks, payment processors, telcos, and businesses sign every link they send. Anyone who clicks sees a Trust Preview before reaching the destination. No install. No browser extension. Just better trust on the open web."
86
+ data-ar="أوقف التصيّد عند طبقة الرابط. البنوك ومزوّدو الدفع والشركات يوقّعون كل رابط يرسلونه، وعند فتحه يظهر لأي مستخدم معاينة موثوقة قبل الوصول إلى الوجهة. بدون أي تطبيق أو إضافة متصفح.">
87
+ Stop phishing at the link layer. Banks, payment processors, telcos, and businesses sign every link they send. Anyone who clicks sees a Trust Preview before reaching the destination. No install. No browser extension.
88
+ </p>
89
+ <a class="cta" href="/register.html" data-en="Get verified — start free" data-ar="ابدأ التوثيق — مجاناً">Get verified — start free</a>
90
+ <a class="cta ghost" href="#how" data-en="How it works" data-ar="كيف يعمل">How it works</a>
91
+ </div>
92
+
93
+ <div class="demo">
94
+ <h2 data-en="What end-users see" data-ar="ما يراه المستخدم">What end-users see</h2>
95
+ <p style="color:var(--muted);margin:0 0 16px" data-en="Every signed link opens a Trust Preview before redirecting. Recipients see the real brand, the real amount, and the real expiry — verified by Ed25519 signature."
96
+ data-ar="كل رابط موقّع يفتح معاينة موثوقة قبل إعادة التوجيه. يرى المستخدم اسم الجهة الحقيقية والمبلغ ومدة الصلاحية، مُتحقَّق منها بتوقيع Ed25519.">
97
+ </p>
98
+ <div class="preview">
99
+ <div class="col"><div class="head ok">✓ <span data-en="Verified — Bank Example" data-ar="موثّق — بنك مثال">Verified — Bank Example</span></div>
100
+ <ul>
101
+ <li><b data-en="Brand:" data-ar="الجهة:">Brand:</b> Bank Example <span style="color:var(--accent)">●</span></li>
102
+ <li><b data-en="Payee:" data-ar="المستفيد:">Payee:</b> ACME LLC</li>
103
+ <li><b data-en="Amount:" data-ar="المبلغ:">Amount:</b> 240.00 SAR</li>
104
+ <li><b data-en="Domain match:" data-ar="مطابقة النطاق:">Domain match:</b> ✓</li>
105
+ <li><b data-en="Signature:" data-ar="التوقيع:">Signature:</b> ✓ Ed25519</li>
106
+ </ul>
107
+ </div>
108
+ <div class="col"><div class="head warn">⚠ <span data-en="Caution — pending review" data-ar="تنبيه — قيد المراجعة">Caution — pending review</span></div>
109
+ <ul>
110
+ <li><b data-en="Brand:" data-ar="الجهة:">Brand:</b> NewMerchant</li>
111
+ <li><b data-en="Status:" data-ar="الحالة:">Status:</b> brand_unverified</li>
112
+ <li><b data-en="Signature:" data-ar="التوقيع:">Signature:</b> ✓</li>
113
+ </ul>
114
+ </div>
115
+ <div class="col"><div class="head bad">✕ <span data-en="Blocked — phishing" data-ar="محظور — تصيّد">Blocked — phishing</span></div>
116
+ <ul>
117
+ <li><b data-en="Reason:" data-ar="السبب:">Reason:</b> revoked · many_reports</li>
118
+ <li><b data-en="Signature:" data-ar="التوقيع:">Signature:</b> ✕</li>
119
+ </ul>
120
+ </div>
121
+ </div>
122
+ </div>
123
+
124
+ <section id="how">
125
+ <h2 data-en="How it works" data-ar="كيف يعمل">How it works</h2>
126
+ <ol class="steps">
127
+ <li><b data-en="Verify your domain (DNS TXT)" data-ar="وثّق نطاقك عبر سجل DNS TXT">Verify your domain (DNS TXT)</b>
128
+ <span data-en="Add the WAB trust record to your DNS — the same root every modern protocol uses (no CA required)."
129
+ data-ar="أضف سجل ثقة WAB إلى DNS الخاص بك — نفس الأساس الذي تستخدمه البروتوكولات الحديثة (بدون مرجع تصديق).">
130
+ </span>
131
+ </li>
132
+ <li><b data-en="Apply for a Verified Brand badge" data-ar="قدّم طلب شارة الجهة الموثّقة">Apply for a Verified Brand badge</b>
133
+ <span data-en="Submit your display name. Lookalikes (Levenshtein distance ≤ 2) are auto-rejected, and reserved names like 'mada' or 'paypal' require admin review."
134
+ data-ar="أدخل اسم الجهة. الأسماء المتشابهة (مسافة Levenshtein ≤ 2) تُرفض تلقائياً، والأسماء المحجوزة مثل 'مدى' أو 'PayPal' تتطلب مراجعة الإدارة.">
135
+ </span>
136
+ </li>
137
+ <li><b data-en="Sign every link you send" data-ar="وقّع كل رابط ترسله">Sign every link you send</b>
138
+ <span data-en="Call POST /api/customer/shieldlink/sites/:siteId/sign with the destination, amount, payee, and expiry. Get back a short link like https://www.webagentbridge.com/l/abc123."
139
+ data-ar="استدعِ POST /api/customer/shieldlink/sites/:siteId/sign بالوجهة والمبلغ والمستفيد ومدة الصلاحية، لتحصل على رابط قصير مثل https://www.webagentbridge.com/l/abc123.">
140
+ </span>
141
+ </li>
142
+ <li><b data-en="Anyone verifies — no app needed" data-ar="أي شخص يتحقق — بدون تطبيق">Anyone verifies — no app needed</b>
143
+ <span data-en="When the recipient opens the link, the Trust Preview verifies the Ed25519 signature, fetches your DNS-anchored public key, and shows a green / yellow / red verdict before redirect."
144
+ data-ar="عند فتح المستلم للرابط، تتحقق المعاينة الموثوقة من التوقيع، وتجلب المفتاح العام من DNS، ثم تعرض حكماً أخضر/أصفر/أحمر قبل التحويل.">
145
+ </span>
146
+ </li>
147
+ </ol>
148
+ </section>
149
+
150
+ <section>
151
+ <h2 data-en="Why it stops phishing" data-ar="لماذا يوقف التصيّد">Why it stops phishing</h2>
152
+ <div class="grid">
153
+ <div class="card"><h3 data-en="Identity = domain ownership" data-ar="الهوية = ملكية النطاق">Identity = domain ownership</h3>
154
+ <p data-en="Only the proven owner of bank.example can sign links carrying the brand 'Bank Example'. No CA, no manual paperwork — DNS + DNSSEC are the trust root."
155
+ data-ar="فقط المالك الموثّق لـ bank.example يستطيع توقيع روابط تحمل اسم 'Bank Example'. لا حاجة لمرجع تصديق ولا أوراق — DNS وDNSSEC هما جذر الثقة.">
156
+ </p></div>
157
+ <div class="card"><h3 data-en="Lookalike protection" data-ar="حماية من الأسماء المتشابهة">Lookalike protection</h3>
158
+ <p data-en="The registry rejects any display name within Levenshtein distance 2 of an existing verified brand, plus a reserved-name list for high-value targets (banks, payment networks)."
159
+ data-ar="السجل يرفض أي اسم بمسافة Levenshtein ≤ 2 من جهة موثّقة قائمة، إضافة لقائمة أسماء محجوزة للأهداف عالية القيمة (البنوك وشبكات الدفع).">
160
+ </p></div>
161
+ <div class="card"><h3 data-en="Cryptographic, not cosmetic" data-ar="تشفير، وليس مجرد شكل">Cryptographic, not cosmetic</h3>
162
+ <p data-en="Every link is signed with Ed25519. Tampering invalidates the signature. The Trust Preview won't show green unless the math checks out."
163
+ data-ar="كل رابط موقّع بـ Ed25519. أي تعديل يُبطل التوقيع، ولن تظهر المعاينة باللون الأخضر إلا إذا تحققت الرياضيات.">
164
+ </p></div>
165
+ <div class="card"><h3 data-en="Community reports" data-ar="بلاغات المجتمع">Community reports</h3>
166
+ <p data-en="Recipients can report a link in one tap. Multiple open reports flip the verdict to red and trigger admin review automatically."
167
+ data-ar="يمكن للمستلم الإبلاغ عن أي رابط بضغطة واحدة. تعدد البلاغات يحوّل الحكم إلى الأحمر ويفعّل المراجعة تلقائياً.">
168
+ </p></div>
169
+ <div class="card"><h3 data-en="Revocable in real time" data-ar="قابل للإلغاء فوراً">Revocable in real time</h3>
170
+ <p data-en="If a campaign goes wrong, revoke a single link or rotate your signing key from the dashboard — every future verification reflects it instantly."
171
+ data-ar="إذا حدث خطأ في حملة ما، يمكنك إلغاء رابط واحد أو تدوير مفتاح التوقيع من لوحة التحكم — كل تحقق لاحق ينعكس فوراً.">
172
+ </p></div>
173
+ <div class="card"><h3 data-en="Zero install for end users" data-ar="بدون تثبيت لدى المستخدم">Zero install for end users</h3>
174
+ <p data-en="Anyone with a browser benefits. The sender pays for verification; the recipient just clicks."
175
+ data-ar="أي مستخدم لديه متصفح يستفيد. المرسل يدفع مقابل التوثيق، والمستلم يضغط فقط.">
176
+ </p></div>
177
+ </div>
178
+ </section>
179
+
180
+ <section>
181
+ <h2 data-en="API" data-ar="واجهة البرمجة">API</h2>
182
+ <table>
183
+ <thead><tr>
184
+ <th data-en="Endpoint" data-ar="نقطة النهاية">Endpoint</th>
185
+ <th data-en="Auth" data-ar="المصادقة">Auth</th>
186
+ <th data-en="Purpose" data-ar="الغرض">Purpose</th>
187
+ </tr></thead>
188
+ <tbody>
189
+ <tr><td><code>POST /api/customer/shieldlink/sites/:siteId/brand</code></td><td>User</td><td data-en="Apply for verified brand" data-ar="طلب جهة موثّقة">Apply for verified brand</td></tr>
190
+ <tr><td><code>POST /api/customer/shieldlink/sites/:siteId/sign</code></td><td>User · Pro+</td><td data-en="Sign a link" data-ar="توقيع رابط">Sign a link</td></tr>
191
+ <tr><td><code>GET /api/customer/shieldlink/sites/:siteId/links</code></td><td>User · Pro+</td><td data-en="List signed links" data-ar="قائمة الروابط الموقّعة">List signed links</td></tr>
192
+ <tr><td><code>POST /api/customer/shieldlink/sites/:siteId/links/:id/revoke</code></td><td>User · Pro+</td><td data-en="Revoke a link" data-ar="إلغاء رابط">Revoke a link</td></tr>
193
+ <tr><td><code>GET /api/shieldlink/verify?token=…</code></td><td data-en="Public" data-ar="عام">Public</td><td data-en="Verify a token (used by Trust Preview)" data-ar="التحقق من رمز رابط">Verify a token</td></tr>
194
+ <tr><td><code>POST /api/shieldlink/report</code></td><td data-en="Public" data-ar="عام">Public</td><td data-en="Report a phishing link" data-ar="الإبلاغ عن رابط تصيّد">Report a phishing link</td></tr>
195
+ </tbody>
196
+ </table>
197
+ </section>
198
+
199
+ <section>
200
+ <h2 data-en="Pricing" data-ar="الأسعار">Pricing</h2>
201
+ <div class="price">
202
+ <div class="plan"><h3>Free / Starter</h3><div class="p" data-en="Not included" data-ar="غير متاح">Not included</div>
203
+ <ul><li data-en="Verify links others sent" data-ar="التحقق من روابط الآخرين">Verify links others sent</li><li data-en="Submit phishing reports" data-ar="إرسال البلاغات">Submit phishing reports</li></ul>
204
+ </div>
205
+ <div class="plan pro"><h3>Pro · $99/mo</h3><div class="p">✓</div>
206
+ <ul>
207
+ <li data-en="Verified Brand badge (after review)" data-ar="شارة الجهة الموثّقة (بعد المراجعة)">Verified Brand badge (after review)</li>
208
+ <li data-en="Sign unlimited links" data-ar="توقيع روابط غير محدودة">Sign unlimited links</li>
209
+ <li data-en="Revocation + key rotation" data-ar="إلغاء + تدوير المفاتيح">Revocation + key rotation</li>
210
+ <li data-en="Per-link analytics" data-ar="تحليلات لكل رابط">Per-link analytics</li>
211
+ </ul>
212
+ </div>
213
+ <div class="plan"><h3>Enterprise</h3><div class="p" data-en="Custom" data-ar="مخصّص">Custom</div>
214
+ <ul>
215
+ <li data-en="Everything in Pro" data-ar="كل ما في Pro">Everything in Pro</li>
216
+ <li data-en="Custom domain for /l/ links" data-ar="نطاق مخصّص لروابط /l/">Custom domain for /l/ links</li>
217
+ <li data-en="BYOK signing keys, on-prem option" data-ar="مفاتيح خاصة بك أو نشر داخلي">BYOK signing keys, on-prem option</li>
218
+ <li data-en="Priority brand review &amp; SLA" data-ar="مراجعة فورية واتفاقية مستوى خدمة">Priority review &amp; SLA</li>
219
+ </ul>
220
+ </div>
221
+ </div>
222
+ <p style="text-align:center;margin-top:24px"><a class="cta" href="/register.html" data-en="Start with Pro" data-ar="ابدأ بخطة Pro">Start with Pro</a></p>
223
+ </section>
224
+
225
+ <footer>
226
+ <p>© Web Agent Bridge · <a href="/" style="color:var(--muted)">webagentbridge.com</a></p>
227
+ </footer>
228
+ </div>
229
+ <script>
230
+ (function(){
231
+ const html = document.documentElement;
232
+ const btn = document.getElementById('lang-toggle');
233
+ function set(lang){
234
+ html.setAttribute('lang', lang);
235
+ html.setAttribute('dir', lang === 'ar' ? 'rtl' : 'ltr');
236
+ document.querySelectorAll('[data-en]').forEach(el => el.textContent = el.getAttribute('data-' + lang) || el.getAttribute('data-en'));
237
+ btn.textContent = lang === 'ar' ? 'English' : 'عربي';
238
+ }
239
+ btn.onclick = () => set(html.getAttribute('lang') === 'ar' ? 'en' : 'ar');
240
+ if ((navigator.language||'').startsWith('ar')) set('ar');
241
+ })();
242
+ </script>
243
+ </body>
244
+ </html>
package/public/shieldqr.html ADDED
@@ -0,0 +1,231 @@
1
+ <!DOCTYPE html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="UTF-8">
5
+ <meta name="viewport" content="width=device-width, initial-scale=1.0">
6
+ <title>WAB ShieldQR — Scan QR codes safely</title>
7
+ <meta name="description" content="Scan any QR code in your browser and instantly verify the destination with WAB ShieldQR — DNS trust, Ed25519 signatures, SSL inspection.">
8
+ <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&display=swap" rel="stylesheet">
9
+ <link rel="stylesheet" href="/css/styles.css">
10
+ <style>
11
+ body { font-family: 'Inter', system-ui, sans-serif; margin:0; background:#0f172a; color:#e2e8f0; min-height:100vh; }
12
+ .wrap { max-width: 720px; margin: 0 auto; padding: 28px 18px 60px; }
13
+ h1 { font-size: 1.8rem; margin: 0 0 6px; display:flex; align-items:center; gap:10px; }
14
+ .sub { color:#94a3b8; margin: 0 0 22px; }
15
+ .card { background:#1e293b; border:1px solid #334155; border-radius:14px; padding:18px; margin-bottom:16px; }
16
+ #reader { width:100%; border-radius:10px; overflow:hidden; background:#000; }
17
+ #reader video { width:100%; max-height:60vh; }
18
+ .controls { display:flex; gap:8px; flex-wrap:wrap; margin-top:10px; }
19
+ .btn { padding:10px 16px; border-radius:8px; border:none; font-weight:600; cursor:pointer; font-size:.95rem; }
20
+ .btn-primary { background:#6366f1; color:#fff; }
21
+ .btn-primary:hover { background:#4f46e5; }
22
+ .btn-secondary { background:#334155; color:#e2e8f0; }
23
+ .btn-danger { background:#dc2626; color:#fff; }
24
+ .btn-success { background:#16a34a; color:#fff; }
25
+ input[type=text] { flex:1; min-width:200px; padding:10px 12px; border-radius:8px; border:1px solid #475569; background:#0f172a; color:#e2e8f0; font-size:.95rem; }
26
+ .verdict { padding:18px; border-radius:14px; border:2px solid; }
27
+ .verdict.green { border-color:#16a34a; background:rgba(22,163,74,.08); }
28
+ .verdict.yellow { border-color:#ca8a04; background:rgba(202,138,4,.08); }
29
+ .verdict.red { border-color:#dc2626; background:rgba(220,38,38,.08); }
30
+ .verdict h2 { margin:0 0 6px; font-size:1.4rem; }
31
+ .verdict .score { font-size:2.4rem; font-weight:800; }
32
+ .verdict .url { font-family: ui-monospace, Menlo, monospace; font-size:.85rem; word-break: break-all; color:#cbd5e1; margin: 6px 0 12px; }
33
+ .signals { margin-top:10px; }
34
+ .signal { padding:8px 10px; border-radius:8px; background:#0f172a; margin-bottom:6px; font-size:.85rem; display:flex; gap:8px; align-items:flex-start; }
35
+ .signal .sev { font-size:.7rem; font-weight:700; padding:1px 6px; border-radius:4px; text-transform:uppercase; flex-shrink:0; }
36
+ .sev-low { background:#0ea5e9; color:#fff; }
37
+ .sev-medium { background:#ca8a04; color:#fff; }
38
+ .sev-high { background:#dc2626; color:#fff; }
39
+ .meta { display:grid; grid-template-columns:repeat(auto-fit, minmax(140px,1fr)); gap:8px; margin-top:10px; font-size:.85rem; }
40
+ .meta div { background:#0f172a; padding:8px 10px; border-radius:8px; }
41
+ .meta .lbl { color:#94a3b8; font-size:.7rem; text-transform:uppercase; letter-spacing:.04em; }
42
+ .hidden { display:none !important; }
43
+ .footer-note { color:#64748b; font-size:.8rem; text-align:center; margin-top:30px; }
44
+ a { color:#a5b4fc; }
45
+ </style>
46
+ <!-- html5-qrcode loader (CSP-allowed origin) -->
47
+ <script src="https://unpkg.com/html5-qrcode@2.3.8/html5-qrcode.min.js"></script>
48
+ </head>
49
+ <body>
50
+ <div class="wrap">
51
+ <h1>🛡️ WAB ShieldQR</h1>
52
+ <p class="sub">Scan any QR code in your browser. We verify the destination with DNS trust records, Ed25519 signatures, and live SSL inspection — <strong>before</strong> you ever open the link.</p>
53
+
54
+ <div class="card">
55
+ <div id="reader"></div>
56
+ <div class="controls">
57
+ <button id="startCam" class="btn btn-primary">📷 Start camera</button>
58
+ <button id="stopCam" class="btn btn-secondary hidden">⏹ Stop</button>
59
+ </div>
60
+ </div>
61
+
62
+ <div class="card">
63
+ <strong>Or paste a URL manually:</strong>
64
+ <div class="controls" style="margin-top:8px;">
65
+ <input id="manualUrl" type="text" placeholder="https://example.com/...">
66
+ <button id="manualScan" class="btn btn-primary">Verify</button>
67
+ </div>
68
+ </div>
69
+
70
+ <div id="result" class="card hidden"></div>
71
+
72
+ <p class="footer-note">
73
+ Powered by <a href="/">Web Agent Bridge</a> · ShieldQR is open and free for everyone ·
74
+ <a href="/api/shieldqr/recent" target="_blank">Recent scans</a>
75
+ </p>
76
+ </div>
77
+
78
+ <script>
79
+ (function () {
80
+ const el = (id) => document.getElementById(id);
81
+ const H = (s) => String(s == null ? '' : s).replace(/[&<>"']/g, (c) =>
82
+ ({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]));
83
+
84
+ let scanner = null; let lastResult = null;
85
+
86
+ function startCamera() {
87
+ if (typeof Html5Qrcode === 'undefined') {
88
+ alert('QR library failed to load. Check your network or use the manual URL field.');
89
+ return;
90
+ }
91
+ el('startCam').classList.add('hidden');
92
+ el('stopCam').classList.remove('hidden');
93
+ scanner = new Html5Qrcode('reader');
94
+ scanner.start(
95
+ { facingMode: 'environment' },
96
+ { fps: 10, qrbox: { width: 260, height: 260 } },
97
+ (decodedText) => {
98
+ scanner.stop().catch(() => {});
99
+ el('startCam').classList.remove('hidden');
100
+ el('stopCam').classList.add('hidden');
101
+ verify(decodedText);
102
+ },
103
+ () => {} // ignore per-frame errors
104
+ ).catch((err) => {
105
+ alert('Camera error: ' + err);
106
+ el('startCam').classList.remove('hidden');
107
+ el('stopCam').classList.add('hidden');
108
+ });
109
+ }
110
+
111
+ function stopCamera() {
112
+ if (!scanner) return;
113
+ scanner.stop().catch(() => {}).finally(() => {
114
+ el('startCam').classList.remove('hidden');
115
+ el('stopCam').classList.add('hidden');
116
+ scanner = null;
117
+ });
118
+ }
119
+
120
+ async function verify(url) {
121
+ const result = el('result');
122
+ result.classList.remove('hidden');
123
+ result.innerHTML = '<div style="text-align:center;padding:20px;">⏳ Verifying <strong>' + H(url) + '</strong>…</div>';
124
+ try {
125
+ const r = await fetch('/api/shieldqr/scan', {
126
+ method: 'POST',
127
+ headers: { 'Content-Type': 'application/json' },
128
+ body: JSON.stringify({ url }),
129
+ });
130
+ const data = await r.json();
131
+ if (!r.ok) throw new Error(data.error || 'scan failed');
132
+ lastResult = data;
133
+ renderVerdict(data, url);
134
+ } catch (err) {
135
+ result.innerHTML = '<div style="color:#fca5a5;text-align:center;padding:20px;">❌ ' + H(err.message) + '</div>';
136
+ }
137
+ }
138
+
139
+ function renderVerdict(d, url) {
140
+ const lvl = d.level || 'yellow';
141
+ const icon = { green: '✅', yellow: '⚠️', red: '🛑' }[lvl] || '⚠️';
142
+ const headline = { green: 'Safe — verified', yellow: 'Caution — incomplete trust', red: 'Dangerous — do not open' }[lvl];
143
+ const sslDays = d.ssl && d.ssl.days_until_expiry != null ? d.ssl.days_until_expiry : '—';
144
+ const trustOk = d.trust && d.trust.ok ? '✅ Signed' : '—';
145
+ const dnsOk = d.dns && Array.isArray(d.dns.discovery) && d.dns.discovery.length ? '✅ Present' : '—';
146
+ const signals = (d.signals || []).map((s) => `
147
+ <div class="signal">
148
+ <span class="sev sev-${H(s.severity || 'low')}">${H(s.severity || 'low')}</span>
149
+ <div><strong>${H(s.id || '')}</strong> — ${H(s.message || '')}</div>
150
+ </div>
151
+ `).join('') || '<div class="signal"><span class="sev sev-low">ok</span><div>No signals raised.</div></div>';
152
+
153
+ const openBtn = lvl === 'green'
154
+ ? `<a class="btn btn-success" href="${H(url)}" target="_blank" rel="noopener noreferrer">Open destination →</a>`
155
+ : `<button class="btn btn-danger" data-action="forceOpen">Open anyway (risky)</button>`;
156
+
157
+ el('result').innerHTML = `
158
+ <div class="verdict ${H(lvl)}">
159
+ <div style="display:flex;justify-content:space-between;align-items:flex-start;gap:14px;flex-wrap:wrap;">
160
+ <div>
161
+ <h2>${icon} ${H(headline)}</h2>
162
+ <div class="url">${H(url)}</div>
163
+ </div>
164
+ <div style="text-align:right;">
165
+ <div class="score">${d.score ?? '—'}</div>
166
+ <div style="font-size:.7rem;color:#94a3b8;text-transform:uppercase;letter-spacing:.05em;">score / 100</div>
167
+ </div>
168
+ </div>
169
+
170
+ <div class="meta">
171
+ <div><div class="lbl">Host</div>${H(d.host || '—')}</div>
172
+ <div><div class="lbl">DNS _wab</div>${dnsOk}</div>
173
+ <div><div class="lbl">Signed wab.json</div>${trustOk}</div>
174
+ <div><div class="lbl">SSL valid for</div>${sslDays} days</div>
175
+ </div>
176
+
177
+ <div class="signals">${signals}</div>
178
+
179
+ <div class="controls" style="margin-top:14px;">
180
+ ${openBtn}
181
+ <button class="btn btn-secondary" data-action="rescan">Scan another</button>
182
+ <button class="btn btn-danger" data-action="report">Report this URL</button>
183
+ </div>
184
+ </div>
185
+ `;
186
+
187
+ el('result').querySelector('[data-action="rescan"]').addEventListener('click', () => {
188
+ el('result').classList.add('hidden');
189
+ el('manualUrl').value = '';
190
+ });
191
+ const forceBtn = el('result').querySelector('[data-action="forceOpen"]');
192
+ if (forceBtn) {
193
+ forceBtn.addEventListener('click', () => {
194
+ if (confirm('This site has not been verified as safe. Open anyway?')) {
195
+ window.open(url, '_blank', 'noopener,noreferrer');
196
+ }
197
+ });
198
+ }
199
+ el('result').querySelector('[data-action="report"]').addEventListener('click', () => reportUrl(url));
200
+ }
201
+
202
+ async function reportUrl(url) {
203
+ const reason = prompt('Why are you reporting this URL? (e.g. phishing, malware, scam)');
204
+ if (!reason || reason.trim().length < 4) return;
205
+ try {
206
+ const r = await fetch('/api/shieldqr/report', {
207
+ method: 'POST',
208
+ headers: { 'Content-Type': 'application/json' },
209
+ body: JSON.stringify({ url, reason: reason.trim(), scan_id: lastResult && lastResult.scan_id }),
210
+ });
211
+ const data = await r.json();
212
+ if (!r.ok) throw new Error(data.error || 'report failed');
213
+ alert('Thank you — your report has been submitted.');
214
+ } catch (err) {
215
+ alert('Report failed: ' + err.message);
216
+ }
217
+ }
218
+
219
+ el('startCam').addEventListener('click', startCamera);
220
+ el('stopCam').addEventListener('click', stopCamera);
221
+ el('manualScan').addEventListener('click', () => {
222
+ const u = el('manualUrl').value.trim();
223
+ if (u) verify(u);
224
+ });
225
+ el('manualUrl').addEventListener('keydown', (e) => {
226
+ if (e.key === 'Enter') { e.preventDefault(); el('manualScan').click(); }
227
+ });
228
+ })();
229
+ </script>
230
+ </body>
231
+ </html>
package/public/sitemap.xml CHANGED
@@ -2,16 +2,34 @@
2
2
  <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
3
3
  <url>
4
4
  <loc>https://webagentbridge.com/</loc>
5
- <lastmod>2026-03-28</lastmod>
5
+ <lastmod>2026-05-13</lastmod>
6
6
  <changefreq>weekly</changefreq>
7
7
  <priority>1.0</priority>
8
8
  </url>
9
+ <url>
10
+ <loc>https://webagentbridge.com/ring4</loc>
11
+ <lastmod>2026-05-13</lastmod>
12
+ <changefreq>weekly</changefreq>
13
+ <priority>0.95</priority>
14
+ </url>
15
+ <url>
16
+ <loc>https://webagentbridge.com/milestones</loc>
17
+ <lastmod>2026-05-13</lastmod>
18
+ <changefreq>weekly</changefreq>
19
+ <priority>0.9</priority>
20
+ </url>
9
21
  <url>
10
22
  <loc>https://webagentbridge.com/docs</loc>
11
23
  <lastmod>2026-03-28</lastmod>
12
24
  <changefreq>weekly</changefreq>
13
25
  <priority>0.9</priority>
14
26
  </url>
27
+ <url>
28
+ <loc>https://webagentbridge.com/whitepaper</loc>
29
+ <lastmod>2026-05-03</lastmod>
30
+ <changefreq>yearly</changefreq>
31
+ <priority>0.95</priority>
32
+ </url>
15
33
  <url>
16
34
  <loc>https://webagentbridge.com/premium</loc>
17
35
  <lastmod>2026-03-28</lastmod>