web-agent-bridge 3.3.0 → 3.8.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (312) hide show
  1. package/LICENSE +84 -72
  2. package/README.ar.md +1563 -1286
  3. package/README.md +137 -1764
  4. package/bin/agent-runner.js +474 -474
  5. package/bin/cli.js +237 -237
  6. package/bin/wab-init.js +244 -0
  7. package/bin/wab.js +80 -80
  8. package/examples/azure-dns-wab.js +83 -0
  9. package/examples/bidi-agent.js +119 -119
  10. package/examples/cloudflare-wab-dns.js +121 -0
  11. package/examples/cpanel-wab-dns.js +114 -0
  12. package/examples/cross-site-agent.js +91 -91
  13. package/examples/dns-discovery-agent.js +166 -0
  14. package/examples/gcp-dns-wab.js +76 -0
  15. package/examples/governance-agent.js +169 -0
  16. package/examples/mcp-agent.js +94 -94
  17. package/examples/next-app-router/README.md +44 -44
  18. package/examples/plesk-wab-dns.js +103 -0
  19. package/examples/puppeteer-agent.js +108 -108
  20. package/examples/route53-wab-dns.js +144 -0
  21. package/examples/saas-dashboard/README.md +55 -55
  22. package/examples/safe-mode-agent.js +96 -0
  23. package/examples/self-discovery.js +106 -0
  24. package/examples/shopify-hydrogen/README.md +74 -74
  25. package/examples/vision-agent.js +171 -171
  26. package/examples/wab-sign.js +74 -0
  27. package/examples/wab-verify.js +60 -0
  28. package/examples/wordpress-elementor/README.md +77 -77
  29. package/package.json +93 -93
  30. package/public/.well-known/agent-tools.json +180 -180
  31. package/public/.well-known/ai-assets.json +59 -59
  32. package/public/.well-known/security.txt +8 -8
  33. package/public/.well-known/wab.json +28 -0
  34. package/public/activate.html +448 -0
  35. package/public/adopt.html +236 -0
  36. package/public/adoption-metrics.html +188 -0
  37. package/public/agent-workspace.html +359 -349
  38. package/public/ai.html +198 -198
  39. package/public/api.html +397 -413
  40. package/public/azure-dns-integration.html +289 -0
  41. package/public/browser.html +486 -486
  42. package/public/cloudflare-integration.html +380 -0
  43. package/public/commander-dashboard.html +243 -243
  44. package/public/cookies.html +210 -210
  45. package/public/cpanel-integration.html +398 -0
  46. package/public/css/agent-workspace.css +1713 -1713
  47. package/public/css/premium.css +317 -317
  48. package/public/css/styles.css +1401 -1235
  49. package/public/dashboard-shieldlink.html +295 -0
  50. package/public/dashboard.html +711 -706
  51. package/public/dns.html +436 -507
  52. package/public/docs.html +588 -587
  53. package/public/enterprise-mesh.ar.html +80 -0
  54. package/public/enterprise-mesh.html +81 -0
  55. package/public/feed.xml +89 -89
  56. package/public/gcp-dns-integration.html +318 -0
  57. package/public/governance.ar.html +70 -0
  58. package/public/governance.html +69 -0
  59. package/public/growth.html +465 -463
  60. package/public/index.html +1372 -1070
  61. package/public/integrations.html +556 -556
  62. package/public/js/activate.js +449 -0
  63. package/public/js/agent-workspace.js +1740 -1740
  64. package/public/js/auth-nav.js +117 -31
  65. package/public/js/auth-redirect.js +12 -12
  66. package/public/js/cookie-consent.js +56 -56
  67. package/public/js/dns.js +438 -0
  68. package/public/js/wab-demo-page.js +721 -721
  69. package/public/js/ws-client.js +74 -74
  70. package/public/l-preview.html +242 -0
  71. package/public/llms-full.txt +360 -360
  72. package/public/llms.txt +125 -125
  73. package/public/login.html +85 -85
  74. package/public/mesh-dashboard.html +328 -328
  75. package/public/milestones.html +346 -0
  76. package/public/one-click.html +779 -0
  77. package/public/openapi.json +669 -580
  78. package/public/partners.ar.html +145 -0
  79. package/public/partners.html +143 -0
  80. package/public/phone-shield.html +281 -281
  81. package/public/plesk-integration.html +375 -0
  82. package/public/premium-dashboard.html +2489 -2489
  83. package/public/premium.html +793 -793
  84. package/public/privacy.html +297 -297
  85. package/public/provider-onboarding.html +172 -0
  86. package/public/provider-sandbox.html +134 -0
  87. package/public/providers.html +359 -0
  88. package/public/refusals.html +172 -0
  89. package/public/register.html +105 -105
  90. package/public/registrar-integrations.html +141 -0
  91. package/public/ring4.html +292 -0
  92. package/public/robots.txt +99 -87
  93. package/public/route53-integration.html +531 -0
  94. package/public/score.html +263 -0
  95. package/public/script/wab-consent.d.ts +36 -36
  96. package/public/script/wab-consent.js +104 -104
  97. package/public/script/wab-schema.js +131 -131
  98. package/public/script/wab.d.ts +108 -108
  99. package/public/script/wab.min.js +580 -580
  100. package/public/security.txt +8 -8
  101. package/public/shieldlink.html +244 -0
  102. package/public/shieldqr.html +231 -0
  103. package/public/sitemap.xml +19 -1
  104. package/public/terms.html +256 -256
  105. package/public/trust-graph-api.ar.html +92 -0
  106. package/public/trust-graph-api.html +91 -0
  107. package/public/wab-features.html +560 -0
  108. package/public/wab-trust.html +200 -0
  109. package/public/wab-truth.html +375 -0
  110. package/public/wab-vs-protocols.html +210 -0
  111. package/public/whitepaper.html +449 -0
  112. package/script/ai-agent-bridge.js +1754 -1754
  113. package/sdk/README.md +99 -99
  114. package/sdk/agent-mesh.js +449 -449
  115. package/sdk/auto-discovery.js +301 -0
  116. package/sdk/commander.js +262 -262
  117. package/sdk/governance.js +262 -0
  118. package/sdk/index.d.ts +464 -464
  119. package/sdk/index.js +649 -636
  120. package/sdk/multi-agent.js +318 -318
  121. package/sdk/package.json +2 -2
  122. package/sdk/safe-mode.js +221 -0
  123. package/sdk/safety-shield.js +219 -219
  124. package/sdk/schema-discovery.js +83 -83
  125. package/server/adapters/index.js +520 -520
  126. package/server/config/plans.js +412 -367
  127. package/server/config/secrets.js +102 -102
  128. package/server/control-plane/index.js +301 -301
  129. package/server/data-plane/index.js +354 -354
  130. package/server/index.js +790 -531
  131. package/server/llm/index.js +404 -404
  132. package/server/middleware/adminAuth.js +35 -35
  133. package/server/middleware/api-tier.js +170 -0
  134. package/server/middleware/auth.js +50 -50
  135. package/server/middleware/featureGate.js +88 -88
  136. package/server/middleware/rateLimits.js +100 -100
  137. package/server/middleware/sensitiveAction.js +157 -157
  138. package/server/middleware/wab-trust.js +141 -0
  139. package/server/migrations/001_add_analytics_indexes.sql +7 -7
  140. package/server/migrations/002_premium_features.sql +418 -418
  141. package/server/migrations/003_ads_integer_cents.sql +33 -33
  142. package/server/migrations/004_agent_os.sql +158 -158
  143. package/server/migrations/005_marketplace_metering.sql +126 -126
  144. package/server/migrations/006_growth_suite.sql +138 -0
  145. package/server/migrations/007_governance.sql +106 -0
  146. package/server/migrations/008_plans.sql +144 -0
  147. package/server/migrations/009_shieldqr.sql +30 -0
  148. package/server/migrations/010_extended_trust.sql +33 -0
  149. package/server/migrations/011_outreach.sql +47 -0
  150. package/server/migrations/012_shieldlink.sql +116 -0
  151. package/server/migrations/013_ct_monitor.sql +13 -0
  152. package/server/migrations/014_wab_advanced_features.sql +128 -0
  153. package/server/migrations/015_wab_truth_layer.sql +101 -0
  154. package/server/migrations/016_ring4_external_trust.sql +84 -0
  155. package/server/migrations/017_ring4_extensions.sql +69 -0
  156. package/server/migrations/018_commercial_foundations.sql +167 -0
  157. package/server/migrations/019_unify_tier_constraints.sql +133 -0
  158. package/server/models/adapters/index.js +33 -33
  159. package/server/models/adapters/mysql.js +183 -183
  160. package/server/models/adapters/postgresql.js +172 -172
  161. package/server/models/adapters/sqlite.js +7 -7
  162. package/server/models/db.js +740 -681
  163. package/server/observability/failure-analysis.js +337 -337
  164. package/server/observability/index.js +394 -394
  165. package/server/protocol/capabilities.js +223 -223
  166. package/server/protocol/index.js +243 -243
  167. package/server/protocol/schema.js +584 -584
  168. package/server/registry/certification.js +271 -271
  169. package/server/registry/index.js +326 -326
  170. package/server/routes/activate.js +478 -0
  171. package/server/routes/admin-outreach.js +239 -0
  172. package/server/routes/admin-plans.js +76 -0
  173. package/server/routes/admin-premium.js +674 -671
  174. package/server/routes/admin-shieldlink.js +137 -0
  175. package/server/routes/admin-shieldqr.js +90 -0
  176. package/server/routes/admin-trust-monitor.js +139 -0
  177. package/server/routes/admin.js +550 -261
  178. package/server/routes/adopt.js +61 -0
  179. package/server/routes/ads.js +130 -130
  180. package/server/routes/agent-workspace.js +540 -540
  181. package/server/routes/api-keys.js +127 -0
  182. package/server/routes/api.js +150 -150
  183. package/server/routes/auth.js +71 -71
  184. package/server/routes/billing.js +57 -45
  185. package/server/routes/commander.js +316 -316
  186. package/server/routes/customer-shieldlink.js +133 -0
  187. package/server/routes/demo-showcase.js +332 -332
  188. package/server/routes/demo-store.js +154 -154
  189. package/server/routes/diagnose.js +373 -0
  190. package/server/routes/discovery.js +2348 -417
  191. package/server/routes/enterprise-mesh.js +170 -0
  192. package/server/routes/gateway.js +173 -173
  193. package/server/routes/governance-saas.js +203 -0
  194. package/server/routes/governance.js +208 -0
  195. package/server/routes/growth.js +1048 -0
  196. package/server/routes/intent.js +328 -0
  197. package/server/routes/license.js +251 -251
  198. package/server/routes/mesh.js +469 -469
  199. package/server/routes/noscript.js +543 -543
  200. package/server/routes/partners.js +201 -0
  201. package/server/routes/plans.js +33 -0
  202. package/server/routes/premium-v2.js +686 -686
  203. package/server/routes/premium.js +724 -724
  204. package/server/routes/providers.js +650 -0
  205. package/server/routes/reputation.js +411 -0
  206. package/server/routes/ring4.js +885 -0
  207. package/server/routes/runtime.js +2148 -2148
  208. package/server/routes/shieldlink.js +70 -0
  209. package/server/routes/shieldqr.js +88 -0
  210. package/server/routes/sovereign.js +465 -465
  211. package/server/routes/truth-layer.js +670 -0
  212. package/server/routes/universal.js +200 -200
  213. package/server/routes/unsubscribe.js +51 -0
  214. package/server/routes/wab-api.js +850 -850
  215. package/server/routes/wab-cache.js +282 -0
  216. package/server/runtime/container-worker.js +111 -111
  217. package/server/runtime/container.js +448 -448
  218. package/server/runtime/distributed-worker.js +362 -362
  219. package/server/runtime/event-bus.js +210 -210
  220. package/server/runtime/index.js +253 -253
  221. package/server/runtime/queue.js +599 -599
  222. package/server/runtime/replay.js +666 -666
  223. package/server/runtime/sandbox.js +266 -266
  224. package/server/runtime/scheduler.js +534 -534
  225. package/server/runtime/session-engine.js +293 -293
  226. package/server/runtime/state-manager.js +188 -188
  227. package/server/secrets/wab-signing-key.pem +3 -0
  228. package/server/secrets/wab-signing-pub.pem +3 -0
  229. package/server/security/cross-site-redactor.js +196 -196
  230. package/server/security/dry-run.js +180 -180
  231. package/server/security/human-gate-rate-limit.js +147 -147
  232. package/server/security/human-gate-transports.js +178 -178
  233. package/server/security/human-gate.js +281 -281
  234. package/server/security/index.js +368 -368
  235. package/server/security/intent-engine.js +245 -245
  236. package/server/security/reward-guard.js +171 -171
  237. package/server/security/rollback-store.js +239 -239
  238. package/server/security/token-scope.js +404 -404
  239. package/server/security/url-policy.js +139 -139
  240. package/server/services/adoption-agent.js +182 -0
  241. package/server/services/agent-chat.js +506 -506
  242. package/server/services/agent-learning.js +601 -601
  243. package/server/services/agent-memory.js +625 -625
  244. package/server/services/agent-mesh.js +555 -555
  245. package/server/services/agent-symphony.js +717 -717
  246. package/server/services/agent-tasks.js +1807 -1807
  247. package/server/services/api-key-engine.js +292 -292
  248. package/server/services/cluster.js +894 -894
  249. package/server/services/commander.js +738 -738
  250. package/server/services/edge-compute.js +440 -440
  251. package/server/services/email.js +233 -204
  252. package/server/services/fairness-engine.js +409 -0
  253. package/server/services/fairness.js +420 -0
  254. package/server/services/governance.js +466 -0
  255. package/server/services/hosted-runtime.js +205 -205
  256. package/server/services/lfd.js +635 -635
  257. package/server/services/local-ai.js +389 -389
  258. package/server/services/marketplace.js +270 -270
  259. package/server/services/metering.js +182 -182
  260. package/server/services/modules/affiliate-intelligence.js +93 -93
  261. package/server/services/modules/agent-firewall.js +90 -90
  262. package/server/services/modules/bounty.js +89 -89
  263. package/server/services/modules/collective-bargaining.js +92 -92
  264. package/server/services/modules/dark-pattern.js +66 -66
  265. package/server/services/modules/gov-intelligence.js +45 -45
  266. package/server/services/modules/neural.js +55 -55
  267. package/server/services/modules/notary.js +49 -49
  268. package/server/services/modules/price-time-machine.js +86 -86
  269. package/server/services/modules/protocol.js +104 -104
  270. package/server/services/negotiation.js +439 -439
  271. package/server/services/outreach-agent.js +312 -0
  272. package/server/services/plans.js +214 -0
  273. package/server/services/plugins.js +771 -771
  274. package/server/services/premium.js +1 -1
  275. package/server/services/price-intelligence.js +566 -566
  276. package/server/services/price-shield.js +1137 -1137
  277. package/server/services/provider-clients.js +740 -0
  278. package/server/services/reputation.js +465 -465
  279. package/server/services/search-engine.js +357 -357
  280. package/server/services/security.js +513 -513
  281. package/server/services/self-healing.js +843 -843
  282. package/server/services/shieldlink.js +492 -0
  283. package/server/services/shieldqr.js +322 -0
  284. package/server/services/sovereign-shield.js +542 -542
  285. package/server/services/ssl-ct-monitor.js +224 -0
  286. package/server/services/ssl-inspector.js +42 -0
  287. package/server/services/ssl-monitor.js +167 -0
  288. package/server/services/stripe.js +206 -192
  289. package/server/services/swarm.js +788 -788
  290. package/server/services/universal-scraper.js +662 -662
  291. package/server/services/verification.js +481 -481
  292. package/server/services/vision.js +1163 -1163
  293. package/server/services/wab-crypto.js +178 -0
  294. package/server/utils/cache.js +125 -125
  295. package/server/utils/migrate.js +81 -81
  296. package/server/utils/safe-fetch.js +228 -228
  297. package/server/utils/secureFields.js +50 -50
  298. package/server/ws.js +161 -161
  299. package/templates/artisan-marketplace.yaml +104 -104
  300. package/templates/book-price-scout.yaml +98 -98
  301. package/templates/electronics-price-tracker.yaml +108 -108
  302. package/templates/flight-deal-hunter.yaml +113 -113
  303. package/templates/freelancer-direct.yaml +116 -116
  304. package/templates/grocery-price-compare.yaml +93 -93
  305. package/templates/hotel-direct-booking.yaml +113 -113
  306. package/templates/local-services.yaml +98 -98
  307. package/templates/olive-oil-tunisia.yaml +88 -88
  308. package/templates/organic-farm-fresh.yaml +101 -101
  309. package/templates/restaurant-direct.yaml +97 -97
  310. package/templates/ring4/banking-sovereign.yaml +55 -0
  311. package/templates/ring4/ecommerce-sovereign.yaml +58 -0
  312. package/templates/ring4/healthcare-sovereign.yaml +60 -0
@@ -0,0 +1,200 @@
1
+ <!DOCTYPE html>
2
+ <html lang="en" dir="ltr">
3
+ <head>
4
+ <meta charset="UTF-8">
5
+ <meta name="viewport" content="width=device-width, initial-scale=1.0">
6
+ <title>WAB Trust — Cryptographic Verification (v1.3)</title>
7
+ <meta name="description" content="WAB DNS Discovery v1.3 trust layer: DNSSEC + Ed25519 signed manifests anchored in domain ownership. Verify any domain's cryptographic trust score live.">
8
+ <link rel="stylesheet" href="/css/styles.css?v=3.3.0">
9
+ <style>
10
+ body { background:#081123; color:#e8efff; }
11
+ .hero { padding:100px 20px 26px; text-align:center; }
12
+ .hero .badge { display:inline-block; background:linear-gradient(135deg,#10b981,#059669); padding:4px 12px; border-radius:999px; font-size:.78rem; font-weight:700; letter-spacing:.5px; margin-bottom:12px; }
13
+ .hero h1 { font-size:clamp(1.9rem,4vw,2.8rem); margin:6px 0 8px; }
14
+ .hero p { color:#9eb1d8; max-width:840px; margin:0 auto; font-size:1rem; }
15
+ .wrap { max-width:1180px; margin:0 auto; padding:0 18px 70px; }
16
+ .panel { background:linear-gradient(180deg,rgba(17,24,39,.92),rgba(10,16,30,.96)); border:1px solid rgba(148,163,184,.2); border-radius:14px; padding:18px; margin-bottom:16px; }
17
+ .panel h3 { margin:0 0 10px; color:#fcd34d; font-size:1rem; }
18
+ .grid2 { display:grid; grid-template-columns:1.2fr 1fr; gap:14px; }
19
+ @media (max-width:880px) { .grid2 { grid-template-columns:1fr; } }
20
+ label { display:block; font-size:.78rem; color:#a8b7d7; margin-bottom:5px; }
21
+ input, textarea, select { width:100%; background:#0b162a; border:1px solid rgba(148,163,184,.28); color:#e8efff; border-radius:10px; padding:10px; font-family:Consolas,monospace; font-size:.85rem; }
22
+ button { background:linear-gradient(135deg,#10b981,#047857); color:#fff; border:none; border-radius:10px; padding:10px 14px; cursor:pointer; font-weight:700; font-size:.85rem; }
23
+ button.alt { background:linear-gradient(135deg,#334155,#1f2937); }
24
+ button.warn { background:linear-gradient(135deg,#f59e0b,#b45309); }
25
+ .actions { display:flex; gap:8px; flex-wrap:wrap; margin-top:8px; }
26
+ pre { background:#020617; border:1px solid rgba(148,163,184,.26); border-radius:10px; padding:12px; color:#c4b5fd; overflow:auto; font-size:.78rem; }
27
+ .score-card { text-align:center; padding:20px; border-radius:14px; }
28
+ .score-num { font-size:3.4rem; font-weight:800; line-height:1; }
29
+ .score-label { font-size:.86rem; text-transform:uppercase; letter-spacing:1.4px; margin-top:6px; }
30
+ .platinum { background:linear-gradient(135deg,#a855f7,#6366f1); color:#fff; }
31
+ .gold { background:linear-gradient(135deg,#fbbf24,#d97706); color:#1f2937; }
32
+ .silver { background:linear-gradient(135deg,#cbd5e1,#94a3b8); color:#1f2937; }
33
+ .bronze { background:linear-gradient(135deg,#f97316,#c2410c); color:#fff; }
34
+ .basic { background:linear-gradient(135deg,#475569,#1f2937); color:#fff; }
35
+ .unverified { background:#1f2937; color:#a8b7d7; border:1px solid rgba(148,163,184,.26); }
36
+ .check-row { display:flex; align-items:center; gap:10px; padding:8px 0; border-bottom:1px solid rgba(148,163,184,.12); font-size:.9rem; }
37
+ .check-row:last-child { border-bottom:0; }
38
+ .check-icon { width:22px; height:22px; border-radius:50%; display:flex; align-items:center; justify-content:center; font-weight:800; font-size:.78rem; }
39
+ .check-icon.ok { background:#064e3b; color:#a7f3d0; }
40
+ .check-icon.no { background:#7f1d1d; color:#fecaca; }
41
+ .findings { background:#0b162a; border-left:3px solid #f59e0b; padding:10px 14px; border-radius:6px; font-size:.84rem; color:#fde68a; margin-top:10px; }
42
+ .findings ul { margin:6px 0 0 18px; padding:0; }
43
+ table { width:100%; border-collapse:collapse; font-size:.84rem; }
44
+ th, td { padding:8px 10px; text-align:left; border-bottom:1px solid rgba(148,163,184,.14); }
45
+ th { color:#a8b7d7; font-weight:600; font-size:.74rem; text-transform:uppercase; letter-spacing:.5px; }
46
+ .pill { display:inline-block; padding:2px 8px; border-radius:999px; font-size:.7rem; font-weight:700; }
47
+ .pill.ok { background:#064e3b; color:#a7f3d0; }
48
+ .pill.no { background:#7f1d1d; color:#fecaca; }
49
+ .keyout { display:none; }
50
+ a { color:#fcd34d; }
51
+ .small { font-size:.8rem; color:#9eb1d8; }
52
+ </style>
53
+ </head>
54
+ <body>
55
+ <section class="hero">
56
+ <span class="badge">WAB v1.3 · Trust Layer</span>
57
+ <h1>Cryptographic Trust for Agent Discovery</h1>
58
+ <p>WAB v1.3 binds every domain's discovery manifest to an <strong>Ed25519 signature</strong>, with the public key published in DNS and protected by <strong>DNSSEC</strong>. No CA. No central registry. Trust is rooted exactly where it should be — in domain ownership.</p>
59
+ </section>
60
+
61
+ <div class="wrap">
62
+
63
+ <div class="grid2">
64
+ <!-- LIVE VERIFIER -->
65
+ <div class="panel">
66
+ <h3>Verify any domain</h3>
67
+ <p class="small">Runs the full 5-check trust report: DNS · DNSSEC · public key · HTTPS manifest · signature.</p>
68
+ <label>Domain</label>
69
+ <input id="vDomain" placeholder="example.com" value="webagentbridge.com" />
70
+ <div class="actions">
71
+ <button onclick="runVerify()">Run Trust Check</button>
72
+ <button class="alt" onclick="loadLeaderboard()">View Leaderboard</button>
73
+ </div>
74
+ <div id="vResult" style="margin-top:14px;"></div>
75
+ </div>
76
+
77
+ <!-- KEY GENERATOR -->
78
+ <div class="panel">
79
+ <h3>Generate Ed25519 keypair</h3>
80
+ <p class="small">Stateless. The server never stores your private key — save it offline and use it to sign your <code>wab.json</code>.</p>
81
+ <div class="actions">
82
+ <button class="warn" onclick="genKeys()">Generate New Keypair</button>
83
+ <button class="alt" onclick="document.getElementById('keyout').style.display='none'">Hide</button>
84
+ </div>
85
+ <div id="keyout" class="keyout" style="margin-top:14px;">
86
+ <label>TXT record (publish in DNS)</label>
87
+ <pre id="kTxt"></pre>
88
+ <label>Public key (base64)</label>
89
+ <pre id="kPub"></pre>
90
+ <label>Private key (base64) — save offline NOW</label>
91
+ <pre id="kPriv" style="border-color:#7f1d1d;color:#fecaca;"></pre>
92
+ <p class="small" style="color:#fde68a;">⚠ This is the only time the private key is shown. Copy it now.</p>
93
+ </div>
94
+ </div>
95
+ </div>
96
+
97
+ <!-- LEADERBOARD -->
98
+ <div class="panel" id="leaderboardPanel" style="display:none;">
99
+ <h3>Trust Leaderboard</h3>
100
+ <div id="leaderboard">Loading…</div>
101
+ </div>
102
+
103
+ <!-- HOW IT WORKS -->
104
+ <div class="panel">
105
+ <h3>How WAB v1.3 trust works</h3>
106
+ <ol style="color:#cbd5e1;font-size:.9rem;line-height:1.7;padding-left:20px;">
107
+ <li><strong>Generate keypair</strong> (Ed25519, 32 bytes each) — offline or via the button above.</li>
108
+ <li><strong>Publish public key in DNS</strong>: <code>_wab IN TXT "v=wab1; endpoint=https://example.com/.well-known/wab.json; pk=ed25519:&lt;BASE64&gt;"</code>.</li>
109
+ <li><strong>Enable DNSSEC</strong> on your zone (most registrars: 1-click). DNSSEC chain protects the key from spoofing.</li>
110
+ <li><strong>Sign your manifest</strong> with the private key: <code>node wab-sign.js sign wab.json key.priv</code> → <code>wab.signed.json</code>.</li>
111
+ <li><strong>Upload signed manifest</strong> to <code>https://example.com/.well-known/wab.json</code>.</li>
112
+ <li>Agents fetch the TXT (verify DNSSEC) → fetch the manifest (verify signature with DNS-published key) → trust established.</li>
113
+ </ol>
114
+ <p class="small" style="margin-top:10px;">Compare to ANS, sitemap.xml, llms.txt, ai.txt:
115
+ <a href="/wab-vs-protocols">WAB vs other protocols →</a></p>
116
+ <p class="small">Offline tools: <a href="/examples/wab-sign.js" target="_blank">wab-sign.js</a> · <a href="/examples/wab-verify.js" target="_blank">wab-verify.js</a></p>
117
+ </div>
118
+
119
+ </div>
120
+
121
+ <script>
122
+ const tick = (b) => b ? '<div class="check-icon ok">✓</div>' : '<div class="check-icon no">✗</div>';
123
+
124
+ async function runVerify() {
125
+ const d = document.getElementById('vDomain').value.trim();
126
+ if (!d) return;
127
+ const out = document.getElementById('vResult');
128
+ out.innerHTML = '<p class="small">Running trust check…</p>';
129
+ try {
130
+ const r = await fetch(`/api/discovery/trust/${encodeURIComponent(d)}`);
131
+ const data = await r.json();
132
+ if (!r.ok) { out.innerHTML = `<p style="color:#fecaca;">Error: ${data.error || r.status}</p>`; return; }
133
+ const c = data.checks || {};
134
+ const cls = data.trust_label || 'unverified';
135
+ out.innerHTML = `
136
+ <div class="score-card ${cls}">
137
+ <div class="score-num">${data.trust_score}<span style="font-size:1.2rem;opacity:.7">/100</span></div>
138
+ <div class="score-label">${cls}</div>
139
+ </div>
140
+ <div style="margin-top:10px;">
141
+ <div class="check-row">${tick(c.dns_resolved)}<span>DNS <code>_wab</code> record present</span></div>
142
+ <div class="check-row">${tick(c.dnssec_verified)}<span>DNSSEC verified (AD flag set)</span></div>
143
+ <div class="check-row">${tick(c.has_public_key)}<span>Public key in DNS (<code>pk=${c.pk_algorithm || '—'}</code>)</span></div>
144
+ <div class="check-row">${tick(c.https_endpoint && c.manifest_fetched)}<span>HTTPS manifest reachable</span></div>
145
+ <div class="check-row">${tick(c.signature_valid)}<span>Manifest signature valid (Ed25519)</span></div>
146
+ </div>
147
+ ${data.public_key ? `<p class="small" style="margin-top:10px;">Key fingerprint: <code>${data.public_key.fingerprint}</code></p>` : ''}
148
+ ${data.findings && data.findings.length ? `<div class="findings"><strong>Findings:</strong><ul>${data.findings.map(f=>`<li>${f}</li>`).join('')}</ul></div>` : ''}
149
+ `;
150
+ } catch (err) {
151
+ out.innerHTML = `<p style="color:#fecaca;">Error: ${err.message}</p>`;
152
+ }
153
+ }
154
+
155
+ async function genKeys() {
156
+ try {
157
+ const r = await fetch('/api/discovery/keys/generate', { method:'POST' });
158
+ const k = await r.json();
159
+ document.getElementById('keyout').style.display = 'block';
160
+ document.getElementById('kTxt').textContent = k.txt_record_snippet;
161
+ document.getElementById('kPub').textContent = k.public_key;
162
+ document.getElementById('kPriv').textContent = k.private_key;
163
+ } catch (err) {
164
+ alert('Key generation failed: ' + err.message);
165
+ }
166
+ }
167
+
168
+ async function loadLeaderboard() {
169
+ const panel = document.getElementById('leaderboardPanel');
170
+ panel.style.display = 'block';
171
+ const out = document.getElementById('leaderboard');
172
+ try {
173
+ const r = await fetch('/api/discovery/trust-leaderboard');
174
+ const data = await r.json();
175
+ if (!data.domains || !data.domains.length) {
176
+ out.innerHTML = '<p class="small">No trust runs recorded yet. Run a verify to populate.</p>';
177
+ return;
178
+ }
179
+ out.innerHTML = `<table>
180
+ <thead><tr><th>#</th><th>Domain</th><th>Score</th><th>DNSSEC</th><th>pk</th><th>Signed</th><th>Sig OK</th><th>Last check</th></tr></thead>
181
+ <tbody>${data.domains.map((d,i)=>`
182
+ <tr>
183
+ <td>${i+1}</td>
184
+ <td>${d.domain}</td>
185
+ <td><strong>${d.score}</strong></td>
186
+ <td>${d.dnssec === 'verified' ? '<span class="pill ok">✓</span>' : '<span class="pill no">'+d.dnssec+'</span>'}</td>
187
+ <td>${d.has_pk ? '<span class="pill ok">✓</span>' : '<span class="pill no">—</span>'}</td>
188
+ <td>${d.signed_manifest ? '<span class="pill ok">✓</span>' : '<span class="pill no">—</span>'}</td>
189
+ <td>${d.signature_valid ? '<span class="pill ok">✓</span>' : '<span class="pill no">—</span>'}</td>
190
+ <td class="small">${(d.last_checked||'').replace('T',' ').slice(0,16)}</td>
191
+ </tr>
192
+ `).join('')}</tbody>
193
+ </table>`;
194
+ } catch (err) {
195
+ out.innerHTML = `<p style="color:#fecaca;">Error: ${err.message}</p>`;
196
+ }
197
+ }
198
+ </script>
199
+ </body>
200
+ </html>
@@ -0,0 +1,375 @@
1
+ <!doctype html>
2
+ <html lang="en">
3
+ <head>
4
+ <meta charset="utf-8">
5
+ <meta name="viewport" content="width=device-width, initial-scale=1">
6
+ <title>WAB Truth Layer — The Network's Shared Reality</title>
7
+ <meta name="description" content="WAB Truth Layer: Semantic Memory Network + Temporal Trust + Intent-to-Action Bridge + Reality Anchor. The collective intelligence layer for AI agents.">
8
+ <link rel="icon" href="/favicon.ico">
9
+ <style>
10
+ :root {
11
+ --bg:#0a0e1a; --card:#111827; --line:#1f2937; --text:#e5e7eb; --muted:#94a3b8;
12
+ --accent:#8b5cf6; --accent2:#6366f1; --ok:#10b981; --warn:#f59e0b; --err:#ef4444;
13
+ }
14
+ * { box-sizing: border-box; }
15
+ html, body { margin:0; padding:0; background:var(--bg); color:var(--text); font:15px/1.55 system-ui, -apple-system, "Segoe UI", Roboto, Helvetica, Arial, sans-serif; }
16
+ [dir="rtl"] body { font-family: "Segoe UI", "Tahoma", "Cairo", system-ui, sans-serif; }
17
+ a { color:var(--accent); text-decoration: none; }
18
+ a:hover { text-decoration: underline; }
19
+ .wrap { max-width: 1180px; margin: 0 auto; padding: 28px 22px 80px; }
20
+ header.hero { text-align:center; padding: 40px 0 30px; border-bottom:1px solid var(--line); margin-bottom: 36px; }
21
+ header.hero h1 { margin:0 0 12px; font-size: clamp(28px, 4.4vw, 46px); letter-spacing:-.02em;
22
+ background: linear-gradient(135deg, #a78bfa 0%, #6366f1 60%, #06b6d4 100%);
23
+ -webkit-background-clip:text; background-clip:text; -webkit-text-fill-color: transparent;
24
+ }
25
+ header.hero p { color: var(--muted); margin: 0 auto; max-width: 760px; font-size: 17px; }
26
+ .lang-toggle { position: absolute; top: 18px; right: 18px; display:flex; gap:6px; }
27
+ [dir="rtl"] .lang-toggle { right: auto; left: 18px; }
28
+ .lang-toggle button { background:var(--card); color:var(--text); border:1px solid var(--line); border-radius:8px; padding:6px 12px; cursor:pointer; }
29
+ .lang-toggle button.active { background:var(--accent); border-color:var(--accent); }
30
+ .back-link { display:inline-block; margin-top: 14px; color: var(--muted); font-size: 14px; }
31
+
32
+ .feature-grid { display:grid; gap: 22px; grid-template-columns: repeat(auto-fit, minmax(320px, 1fr)); }
33
+ .feature-card { background:var(--card); border:1px solid var(--line); border-radius:14px; padding: 22px; }
34
+ .feature-card h2 { margin: 0 0 8px; font-size: 20px; display:flex; align-items:center; gap:10px; }
35
+ .feature-card .lead { color: var(--muted); margin: 0 0 14px; font-size: 14px; }
36
+ .feature-card .demo { background: #0b1220; border:1px solid var(--line); border-radius: 10px; padding: 14px; margin-top: 12px; }
37
+ .feature-card label { display:block; font-size: 13px; color: var(--muted); margin: 8px 0 4px; }
38
+ .feature-card input, .feature-card select, .feature-card textarea {
39
+ width:100%; background:#0a0e1a; border:1px solid var(--line); color:var(--text);
40
+ border-radius:8px; padding:8px 10px; font-size: 14px; font-family: inherit;
41
+ }
42
+ .feature-card textarea { font-family: ui-monospace, Menlo, monospace; font-size:12px; min-height: 84px; }
43
+ .feature-card button.run {
44
+ margin-top: 10px; background:var(--accent); color:#fff; border:0; padding: 9px 16px; border-radius:8px; cursor:pointer; font-weight:600;
45
+ }
46
+ .feature-card button.run:hover { background:var(--accent2); }
47
+ .feature-card pre.result {
48
+ background:#020617; border:1px solid var(--line); border-radius: 8px; padding: 12px; font-size: 12px;
49
+ overflow:auto; max-height: 280px; margin-top: 10px; color:#e5e7eb;
50
+ }
51
+ .badge { display:inline-block; padding:2px 8px; border-radius:999px; font-size:11px; font-weight:600;
52
+ background:rgba(139,92,246,.15); color:#a78bfa; border:1px solid rgba(139,92,246,.3); }
53
+ .badge.ok { background:rgba(16,185,129,.15); color:#34d399; border-color:rgba(16,185,129,.3); }
54
+ .badge.warn { background:rgba(245,158,11,.15); color:#fbbf24; border-color:rgba(245,158,11,.3); }
55
+
56
+ section.api-ref { margin-top: 50px; }
57
+ section.api-ref h2 { font-size: 22px; margin-bottom: 16px; }
58
+ table.api { width:100%; border-collapse: collapse; background:var(--card); border:1px solid var(--line); border-radius: 10px; overflow:hidden; }
59
+ table.api th, table.api td { padding: 10px 14px; text-align:left; border-bottom:1px solid var(--line); font-size: 13px; }
60
+ [dir="rtl"] table.api th, [dir="rtl"] table.api td { text-align:right; }
61
+ table.api th { background:#0b1220; color:var(--muted); font-weight:600; }
62
+ table.api code { font-size: 12px; color:#a78bfa; }
63
+ .method-GET { color:#10b981; font-weight:600; }
64
+ .method-POST { color:#f59e0b; font-weight:600; }
65
+
66
+ .hero-cta { display:flex; gap:10px; justify-content:center; margin-top: 18px; flex-wrap:wrap; }
67
+ .hero-cta a { padding: 10px 18px; border-radius:10px; background:var(--accent); color:#fff; font-weight:600; }
68
+ .hero-cta a.secondary { background:var(--card); border:1px solid var(--line); color: var(--text); }
69
+ </style>
70
+ </head>
71
+ <body>
72
+ <div class="lang-toggle">
73
+ <button id="btn-en" class="active" onclick="setLang('en')">EN</button>
74
+ <button id="btn-ar" onclick="setLang('ar')">ع</button>
75
+ </div>
76
+
77
+ <div class="wrap">
78
+ <header class="hero">
79
+ <h1 data-i18n="title">WAB Truth Layer</h1>
80
+ <p data-i18n="subtitle">The collective intelligence layer for AI agents. Semantic Memory · Temporal Trust · Action Graphs · Reality Anchor.</p>
81
+ <div class="hero-cta">
82
+ <a href="/wab-features" data-i18n="cta_features">← WAB Advanced Features</a>
83
+ <a href="/" class="secondary" data-i18n="cta_home">Home</a>
84
+ </div>
85
+ <a class="back-link" href="/" data-i18n="back">← Back to home</a>
86
+ </header>
87
+
88
+ <div class="feature-grid">
89
+
90
+ <!-- 1. Semantic Memory -->
91
+ <div class="feature-card">
92
+ <h2>🧬 <span data-i18n="f1_title">Semantic Memory Network</span></h2>
93
+ <p class="lead" data-i18n="f1_lead">Anonymized observations agents share about how sites behave for each intent. New agents inherit collective knowledge — no PII.</p>
94
+ <div class="demo">
95
+ <label data-i18n="domain">Domain</label>
96
+ <input id="sm-domain" value="webagentbridge.com">
97
+ <label data-i18n="intent_category">Intent category</label>
98
+ <select id="sm-intent">
99
+ <option>booking</option><option>payment</option><option>search</option>
100
+ <option>auth</option><option selected>checkout</option><option>support</option>
101
+ <option>navigation</option><option>content</option><option>other</option>
102
+ </select>
103
+ <label data-i18n="observation">Observation</label>
104
+ <select id="sm-obs">
105
+ <option>fast</option><option>slow</option><option>reliable</option><option>flaky</option>
106
+ <option selected>success</option><option>failure</option><option>blocked</option><option>rate_limited</option>
107
+ </select>
108
+ <button class="run" onclick="smObserve()" data-i18n="btn_observe">Submit observation</button>
109
+ <button class="run" style="background:#0b1220;border:1px solid var(--line)" onclick="smRead()" data-i18n="btn_read">Read summary</button>
110
+ <pre class="result" id="sm-result">—</pre>
111
+ </div>
112
+ </div>
113
+
114
+ <!-- 2. Temporal Trust -->
115
+ <div class="feature-card">
116
+ <h2>⏳ <span data-i18n="f2_title">Temporal Trust</span></h2>
117
+ <p class="lead" data-i18n="f2_lead">Time-stability score. Detects fly-by-night domains, ranks established sites as <em>flagship</em>, flags volatility as <em>suspect</em>.</p>
118
+ <div class="demo">
119
+ <label data-i18n="domain">Domain</label>
120
+ <input id="tt-domain" value="webagentbridge.com">
121
+ <button class="run" onclick="ttRead()" data-i18n="btn_temporal">Get temporal trust</button>
122
+ <button class="run" style="background:#0b1220;border:1px solid var(--line)" onclick="ttSnapshot()" data-i18n="btn_snapshot">Record snapshot (demo)</button>
123
+ <pre class="result" id="tt-result">—</pre>
124
+ </div>
125
+ </div>
126
+
127
+ <!-- 3. Action Graphs -->
128
+ <div class="feature-card">
129
+ <h2>🗺️ <span data-i18n="f3_title">Intent → Action Graph</span></h2>
130
+ <p class="lead" data-i18n="f3_lead">Sites publish ActionGraphs per intent. Agents send a natural-language intent and receive a structured graph of nodes/edges to follow.</p>
131
+ <div class="demo">
132
+ <label data-i18n="domain">Domain</label>
133
+ <input id="ag-domain" value="webagentbridge.com">
134
+ <label data-i18n="intent_text">Intent text</label>
135
+ <input id="ag-intent" placeholder="e.g. activate WAB for my site" value="activate WAB on my site">
136
+ <button class="run" onclick="agResolve()" data-i18n="btn_resolve">Resolve intent</button>
137
+ <button class="run" style="background:#0b1220;border:1px solid var(--line)" onclick="agRegisterDemo()" data-i18n="btn_register_demo">Register demo graph</button>
138
+ <pre class="result" id="ag-result">—</pre>
139
+ </div>
140
+ </div>
141
+
142
+ <!-- 4. Reality Anchor -->
143
+ <div class="feature-card">
144
+ <h2>⚓ <span data-i18n="f4_title">Reality Anchor</span></h2>
145
+ <p class="lead" data-i18n="f4_lead">Agents cross-check facts (prices, availability, ratings) across the WAB network. Defeats LLM hallucination with multi-source consensus.</p>
146
+ <div class="demo">
147
+ <label data-i18n="fact_key">Fact key</label>
148
+ <input id="ra-key" value="demo:wab-price:annual-plan">
149
+ <label data-i18n="fact_type">Fact type</label>
150
+ <select id="ra-type">
151
+ <option selected>price</option><option>availability</option><option>rating</option>
152
+ <option>event</option><option>count</option><option>status</option>
153
+ </select>
154
+ <label data-i18n="value">Value (JSON)</label>
155
+ <textarea id="ra-value">{"amount":299,"currency":"USD"}</textarea>
156
+ <label data-i18n="domain">Source domain</label>
157
+ <input id="ra-domain" value="webagentbridge.com">
158
+ <button class="run" onclick="raSubmit()" data-i18n="btn_submit">Submit fact</button>
159
+ <button class="run" style="background:#0b1220;border:1px solid var(--line)" onclick="raVerify()" data-i18n="btn_verify">Verify consensus</button>
160
+ <pre class="result" id="ra-result">—</pre>
161
+ </div>
162
+ </div>
163
+
164
+ <!-- Unified profile -->
165
+ <div class="feature-card" style="grid-column: 1 / -1;">
166
+ <h2>🌐 <span data-i18n="f5_title">Unified Truth Profile</span></h2>
167
+ <p class="lead" data-i18n="f5_lead">Full Truth Layer view for a domain: reputation, semantic, temporal, action graphs, and reality contributions — in one call.</p>
168
+ <div class="demo">
169
+ <label data-i18n="domain">Domain</label>
170
+ <input id="pr-domain" value="webagentbridge.com">
171
+ <button class="run" onclick="prRead()" data-i18n="btn_profile">Get Truth Profile</button>
172
+ <pre class="result" id="pr-result">—</pre>
173
+ </div>
174
+ </div>
175
+
176
+ </div>
177
+
178
+ <section class="api-ref">
179
+ <h2 data-i18n="api_title">📘 API Reference</h2>
180
+ <table class="api">
181
+ <thead><tr><th>Method</th><th data-i18n="endpoint">Endpoint</th><th data-i18n="description">Description</th></tr></thead>
182
+ <tbody>
183
+ <tr><td><span class="method-POST">POST</span></td><td><code>/api/truth/memory/observe</code></td><td data-i18n="ep1">Submit anonymized observation</td></tr>
184
+ <tr><td><span class="method-GET">GET</span></td><td><code>/api/truth/memory/:domain</code></td><td data-i18n="ep2">Semantic summary for domain</td></tr>
185
+ <tr><td><span class="method-GET">GET</span></td><td><code>/api/truth/memory/:domain/:intent</code></td><td data-i18n="ep3">Per-intent semantic summary</td></tr>
186
+ <tr><td><span class="method-GET">GET</span></td><td><code>/api/truth/temporal/:domain</code></td><td data-i18n="ep4">Temporal trust profile</td></tr>
187
+ <tr><td><span class="method-POST">POST</span></td><td><code>/api/truth/temporal/snapshot</code></td><td data-i18n="ep5">Record trust snapshot</td></tr>
188
+ <tr><td><span class="method-POST">POST</span></td><td><code>/api/truth/action/register</code></td><td data-i18n="ep6">Register an ActionGraph</td></tr>
189
+ <tr><td><span class="method-GET">GET</span></td><td><code>/api/truth/action/:domain/:intent</code></td><td data-i18n="ep7">Fetch an ActionGraph</td></tr>
190
+ <tr><td><span class="method-POST">POST</span></td><td><code>/api/truth/action/resolve</code></td><td data-i18n="ep8">Resolve intent text → graph</td></tr>
191
+ <tr><td><span class="method-POST">POST</span></td><td><code>/api/truth/reality/submit</code></td><td data-i18n="ep9">Submit an observed fact</td></tr>
192
+ <tr><td><span class="method-GET">GET</span></td><td><code>/api/truth/reality/:fact_key</code></td><td data-i18n="ep10">Verify a fact (consensus)</td></tr>
193
+ <tr><td><span class="method-POST">POST</span></td><td><code>/api/truth/reality/verify</code></td><td data-i18n="ep11">Bulk verify (up to 50 keys)</td></tr>
194
+ <tr><td><span class="method-GET">GET</span></td><td><code>/api/truth/profile/:domain</code></td><td data-i18n="ep12">Unified Truth profile</td></tr>
195
+ </tbody>
196
+ </table>
197
+ </section>
198
+
199
+ </div>
200
+
201
+ <script>
202
+ const translations = {
203
+ en: {
204
+ title: "WAB Truth Layer",
205
+ subtitle: "The collective intelligence layer for AI agents. Semantic Memory · Temporal Trust · Action Graphs · Reality Anchor.",
206
+ back: "← Back to home", cta_features: "← WAB Advanced Features", cta_home: "Home",
207
+ f1_title: "Semantic Memory Network",
208
+ f1_lead: "Anonymized observations agents share about how sites behave for each intent. New agents inherit collective knowledge — no PII.",
209
+ f2_title: "Temporal Trust",
210
+ f2_lead: "Time-stability score. Detects fly-by-night domains, ranks established sites as flagship, flags volatility as suspect.",
211
+ f3_title: "Intent → Action Graph",
212
+ f3_lead: "Sites publish ActionGraphs per intent. Agents send a natural-language intent and receive a structured graph of nodes/edges.",
213
+ f4_title: "Reality Anchor",
214
+ f4_lead: "Agents cross-check facts across the WAB network. Defeats hallucination with multi-source consensus.",
215
+ f5_title: "Unified Truth Profile",
216
+ f5_lead: "Full Truth Layer view for a domain in one API call.",
217
+ domain: "Domain", intent_category: "Intent category", observation: "Observation",
218
+ intent_text: "Intent text", fact_key: "Fact key", fact_type: "Fact type", value: "Value (JSON)",
219
+ btn_observe: "Submit observation", btn_read: "Read summary",
220
+ btn_temporal: "Get temporal trust", btn_snapshot: "Record snapshot (demo)",
221
+ btn_resolve: "Resolve intent", btn_register_demo: "Register demo graph",
222
+ btn_submit: "Submit fact", btn_verify: "Verify consensus",
223
+ btn_profile: "Get Truth Profile",
224
+ api_title: "📘 API Reference", endpoint: "Endpoint", description: "Description",
225
+ ep1:"Submit anonymized observation", ep2:"Semantic summary for domain",
226
+ ep3:"Per-intent semantic summary", ep4:"Temporal trust profile",
227
+ ep5:"Record trust snapshot", ep6:"Register an ActionGraph",
228
+ ep7:"Fetch an ActionGraph", ep8:"Resolve intent text → graph",
229
+ ep9:"Submit an observed fact", ep10:"Verify a fact (consensus)",
230
+ ep11:"Bulk verify (up to 50 keys)", ep12:"Unified Truth profile",
231
+ },
232
+ ar: {
233
+ title: "طبقة الحقيقة WAB",
234
+ subtitle: "طبقة الذكاء الجماعي للوكلاء. ذاكرة دلالية · ثقة زمنية · رسوم الإجراءات · مرساة الواقع.",
235
+ back: "← العودة للرئيسية", cta_features: "← الميزات المتقدمة", cta_home: "الرئيسية",
236
+ f1_title: "شبكة الذاكرة الدلالية",
237
+ f1_lead: "ملاحظات مجهولة الهوية يشاركها الوكلاء عن سلوك المواقع لكل نية. الوكلاء الجدد يرثون المعرفة الجماعية — بدون بيانات شخصية.",
238
+ f2_title: "الثقة الزمنية",
239
+ f2_lead: "درجة الاستقرار عبر الزمن. تكشف المواقع المؤقتة، وتصنف المواقع الراسخة كـ flagship وتنبه على التقلب كـ suspect.",
240
+ f3_title: "النية → شجرة الإجراءات",
241
+ f3_lead: "المواقع تنشر ActionGraph لكل نية. الوكلاء يرسلون نية بلغة طبيعية ويستلمون شجرة منظمة من العقد والحواف.",
242
+ f4_title: "مرساة الواقع",
243
+ f4_lead: "الوكلاء يتحققون من الحقائق عبر شبكة WAB. تهزم الهلوسة باتفاق متعدد المصادر.",
244
+ f5_title: "ملف الحقيقة الموحّد",
245
+ f5_lead: "عرض كامل لطبقة الحقيقة لأي نطاق في طلب API واحد.",
246
+ domain: "النطاق", intent_category: "تصنيف النية", observation: "الملاحظة",
247
+ intent_text: "نص النية", fact_key: "مفتاح الحقيقة", fact_type: "نوع الحقيقة", value: "القيمة (JSON)",
248
+ btn_observe: "إرسال ملاحظة", btn_read: "قراءة الملخّص",
249
+ btn_temporal: "جلب الثقة الزمنية", btn_snapshot: "تسجيل لقطة (تجريبي)",
250
+ btn_resolve: "حلّ النية", btn_register_demo: "تسجيل رسم تجريبي",
251
+ btn_submit: "إرسال حقيقة", btn_verify: "التحقق من الإجماع",
252
+ btn_profile: "جلب ملف الحقيقة",
253
+ api_title: "📘 مرجع API", endpoint: "نقطة النهاية", description: "الوصف",
254
+ ep1:"إرسال ملاحظة مجهولة", ep2:"ملخّص دلالي للنطاق",
255
+ ep3:"ملخّص لنية محددة", ep4:"ملف الثقة الزمنية",
256
+ ep5:"تسجيل لقطة ثقة", ep6:"تسجيل ActionGraph",
257
+ ep7:"جلب ActionGraph", ep8:"حلّ نص النية ← شجرة",
258
+ ep9:"إرسال حقيقة مرصودة", ep10:"التحقق من الحقيقة (إجماع)",
259
+ ep11:"تحقق جماعي (50 مفتاح)", ep12:"ملف الحقيقة الموحّد",
260
+ }
261
+ };
262
+
263
+ function setLang(lang) {
264
+ const t = translations[lang]; if (!t) return;
265
+ document.documentElement.lang = lang;
266
+ document.documentElement.dir = (lang === 'ar') ? 'rtl' : 'ltr';
267
+ document.querySelectorAll('[data-i18n]').forEach(el => {
268
+ const k = el.getAttribute('data-i18n');
269
+ if (t[k]) el.textContent = t[k];
270
+ });
271
+ document.getElementById('btn-en').classList.toggle('active', lang === 'en');
272
+ document.getElementById('btn-ar').classList.toggle('active', lang === 'ar');
273
+ try { localStorage.setItem('wab_lang', lang); } catch {}
274
+ }
275
+ try {
276
+ const stored = localStorage.getItem('wab_lang');
277
+ if (stored && translations[stored]) setLang(stored);
278
+ } catch {}
279
+
280
+ function show(id, data) {
281
+ document.getElementById(id).textContent = (typeof data === 'string') ? data : JSON.stringify(data, null, 2);
282
+ }
283
+ async function jfetch(url, opts) {
284
+ try {
285
+ const r = await fetch(url, opts);
286
+ const text = await r.text();
287
+ let data; try { data = JSON.parse(text); } catch { data = text; }
288
+ return { status: r.status, data };
289
+ } catch (e) { return { status: 0, data: { error: String(e.message || e) } }; }
290
+ }
291
+
292
+ async function smObserve() {
293
+ const body = {
294
+ domain: smDomain(), intent_category: document.getElementById('sm-intent').value,
295
+ observation: document.getElementById('sm-obs').value, latency_ms: 80 + Math.floor(Math.random() * 400),
296
+ success: Math.random() > 0.15, agent_id: 'demo-' + Math.random().toString(36).slice(2, 9)
297
+ };
298
+ const r = await jfetch('/api/truth/memory/observe', { method:'POST', headers:{'Content-Type':'application/json'}, body: JSON.stringify(body) });
299
+ show('sm-result', r.data);
300
+ }
301
+ async function smRead() {
302
+ const r = await jfetch('/api/truth/memory/' + encodeURIComponent(smDomain()));
303
+ show('sm-result', r.data);
304
+ }
305
+ function smDomain() { return document.getElementById('sm-domain').value.trim(); }
306
+
307
+ async function ttRead() {
308
+ const r = await jfetch('/api/truth/temporal/' + encodeURIComponent(document.getElementById('tt-domain').value.trim()));
309
+ show('tt-result', r.data);
310
+ }
311
+ async function ttSnapshot() {
312
+ const body = {
313
+ domain: document.getElementById('tt-domain').value.trim(),
314
+ score: 80 + Math.random()*20,
315
+ dns_stable: true,
316
+ manifest_hash: Math.random().toString(36).slice(2, 14),
317
+ observations: 1
318
+ };
319
+ const r = await jfetch('/api/truth/temporal/snapshot', { method:'POST', headers:{'Content-Type':'application/json'}, body: JSON.stringify(body) });
320
+ show('tt-result', r.data);
321
+ }
322
+
323
+ async function agResolve() {
324
+ const body = { domain: document.getElementById('ag-domain').value.trim(), intent_text: document.getElementById('ag-intent').value };
325
+ const r = await jfetch('/api/truth/action/resolve', { method:'POST', headers:{'Content-Type':'application/json'}, body: JSON.stringify(body) });
326
+ show('ag-result', r.data);
327
+ }
328
+ async function agRegisterDemo() {
329
+ const body = {
330
+ domain: document.getElementById('ag-domain').value.trim(),
331
+ intent_key: 'activate_wab',
332
+ graph: {
333
+ keywords: ['activate','setup','integrate','install'],
334
+ nodes: [
335
+ { id: 'start', type: 'start', label: 'Start' },
336
+ { id: 'verify', type: 'requirement', label: 'Verify domain ownership' },
337
+ { id: 'install', type: 'action', label: 'Install /wab-manifest.json' },
338
+ { id: 'test', type: 'action', label: 'Run /api/activate/check' },
339
+ { id: 'done', type: 'outcome', label: 'Activated' },
340
+ ],
341
+ edges: [
342
+ { from: 'start', to: 'verify' },
343
+ { from: 'verify', to: 'install' },
344
+ { from: 'install', to: 'test' },
345
+ { from: 'test', to: 'done' },
346
+ ]
347
+ }
348
+ };
349
+ const r = await jfetch('/api/truth/action/register', { method:'POST', headers:{'Content-Type':'application/json'}, body: JSON.stringify(body) });
350
+ show('ag-result', r.data);
351
+ }
352
+
353
+ async function raSubmit() {
354
+ let value; try { value = JSON.parse(document.getElementById('ra-value').value); } catch { value = document.getElementById('ra-value').value; }
355
+ const body = {
356
+ fact_key: document.getElementById('ra-key').value.trim(),
357
+ fact_type: document.getElementById('ra-type').value,
358
+ domain: document.getElementById('ra-domain').value.trim(),
359
+ value, agent_id: 'demo-' + Math.random().toString(36).slice(2, 9)
360
+ };
361
+ const r = await jfetch('/api/truth/reality/submit', { method:'POST', headers:{'Content-Type':'application/json'}, body: JSON.stringify(body) });
362
+ show('ra-result', r.data);
363
+ }
364
+ async function raVerify() {
365
+ const r = await jfetch('/api/truth/reality/' + encodeURIComponent(document.getElementById('ra-key').value.trim()));
366
+ show('ra-result', r.data);
367
+ }
368
+
369
+ async function prRead() {
370
+ const r = await jfetch('/api/truth/profile/' + encodeURIComponent(document.getElementById('pr-domain').value.trim()));
371
+ show('pr-result', r.data);
372
+ }
373
+ </script>
374
+ </body>
375
+ </html>