npm - web-agent-bridge - Versions diffs - 3.4.0 → 3.8.1 - Mend

web-agent-bridge 3.4.0 → 3.8.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (310) hide show

package/LICENSE +84 -84
package/README.ar.md +1563 -1304
package/README.md +137 -298
package/bin/agent-runner.js +474 -474
package/bin/cli.js +237 -237
package/bin/wab-init.js +244 -223
package/bin/wab.js +80 -80
package/examples/azure-dns-wab.js +83 -83
package/examples/bidi-agent.js +119 -119
package/examples/cloudflare-wab-dns.js +121 -121
package/examples/cpanel-wab-dns.js +114 -114
package/examples/cross-site-agent.js +91 -91
package/examples/dns-discovery-agent.js +166 -166
package/examples/gcp-dns-wab.js +76 -76
package/examples/governance-agent.js +169 -169
package/examples/mcp-agent.js +94 -94
package/examples/next-app-router/README.md +44 -44
package/examples/plesk-wab-dns.js +103 -103
package/examples/puppeteer-agent.js +108 -108
package/examples/route53-wab-dns.js +144 -144
package/examples/saas-dashboard/README.md +55 -55
package/examples/safe-mode-agent.js +96 -96
package/examples/self-discovery.js +106 -0
package/examples/shopify-hydrogen/README.md +74 -74
package/examples/vision-agent.js +171 -171
package/examples/wab-sign.js +74 -74
package/examples/wab-verify.js +60 -60
package/examples/wordpress-elementor/README.md +77 -77
package/package.json +93 -93
package/public/.well-known/agent-tools.json +180 -180
package/public/.well-known/ai-assets.json +59 -59
package/public/.well-known/security.txt +8 -8
package/public/.well-known/wab.json +28 -28
package/public/activate.html +448 -368
package/public/adopt.html +236 -0
package/public/adoption-metrics.html +188 -188
package/public/agent-workspace.html +359 -349
package/public/ai.html +198 -198
package/public/api.html +397 -413
package/public/azure-dns-integration.html +289 -289
package/public/browser.html +486 -486
package/public/cloudflare-integration.html +380 -380
package/public/commander-dashboard.html +243 -243
package/public/cookies.html +210 -210
package/public/cpanel-integration.html +398 -398
package/public/css/agent-workspace.css +1713 -1713
package/public/css/premium.css +317 -317
package/public/css/styles.css +1401 -1263
package/public/dashboard-shieldlink.html +295 -0
package/public/dashboard.html +711 -707
package/public/dns.html +436 -436
package/public/docs.html +588 -588
package/public/enterprise-mesh.ar.html +80 -0
package/public/enterprise-mesh.html +81 -0
package/public/feed.xml +89 -89
package/public/gcp-dns-integration.html +318 -318
package/public/governance.ar.html +70 -0
package/public/governance.html +69 -0
package/public/growth.html +465 -465
package/public/index.html +1372 -1266
package/public/integrations.html +556 -556
package/public/js/activate.js +449 -145
package/public/js/agent-workspace.js +1740 -1740
package/public/js/auth-nav.js +117 -65
package/public/js/auth-redirect.js +12 -12
package/public/js/cookie-consent.js +56 -56
package/public/js/dns.js +438 -438
package/public/js/wab-demo-page.js +721 -721
package/public/js/ws-client.js +74 -74
package/public/l-preview.html +242 -0
package/public/llms-full.txt +360 -360
package/public/llms.txt +125 -125
package/public/login.html +85 -85
package/public/mesh-dashboard.html +328 -328
package/public/milestones.html +346 -0
package/public/one-click.html +779 -0
package/public/openapi.json +669 -669
package/public/partners.ar.html +145 -0
package/public/partners.html +143 -0
package/public/phone-shield.html +281 -281
package/public/plesk-integration.html +375 -375
package/public/premium-dashboard.html +2489 -2489
package/public/premium.html +793 -793
package/public/privacy.html +297 -297
package/public/provider-onboarding.html +172 -172
package/public/provider-sandbox.html +134 -134
package/public/providers.html +359 -359
package/public/refusals.html +172 -0
package/public/register.html +105 -105
package/public/registrar-integrations.html +141 -141
package/public/ring4.html +292 -0
package/public/robots.txt +99 -99
package/public/route53-integration.html +531 -531
package/public/score.html +263 -0
package/public/script/wab-consent.d.ts +36 -36
package/public/script/wab-consent.js +104 -104
package/public/script/wab-schema.js +131 -131
package/public/script/wab.d.ts +108 -108
package/public/script/wab.min.js +580 -580
package/public/security.txt +8 -8
package/public/shieldlink.html +244 -0
package/public/shieldqr.html +231 -231
package/public/sitemap.xml +13 -1
package/public/terms.html +256 -256
package/public/trust-graph-api.ar.html +92 -0
package/public/trust-graph-api.html +91 -0
package/public/wab-features.html +560 -0
package/public/wab-trust.html +200 -200
package/public/wab-truth.html +375 -0
package/public/wab-vs-protocols.html +210 -210
package/public/whitepaper.html +449 -449
package/script/ai-agent-bridge.js +1754 -1754
package/sdk/README.md +99 -99
package/sdk/agent-mesh.js +449 -449
package/sdk/auto-discovery.js +301 -288
package/sdk/commander.js +262 -262
package/sdk/governance.js +262 -262
package/sdk/index.d.ts +464 -464
package/sdk/index.js +649 -649
package/sdk/multi-agent.js +318 -318
package/sdk/safe-mode.js +221 -221
package/sdk/safety-shield.js +219 -219
package/sdk/schema-discovery.js +83 -83
package/server/adapters/index.js +520 -520
package/server/config/plans.js +412 -367
package/server/config/secrets.js +102 -102
package/server/control-plane/index.js +301 -301
package/server/data-plane/index.js +354 -354
package/server/index.js +790 -670
package/server/llm/index.js +404 -404
package/server/middleware/adminAuth.js +35 -35
package/server/middleware/api-tier.js +170 -0
package/server/middleware/auth.js +50 -50
package/server/middleware/featureGate.js +88 -88
package/server/middleware/rateLimits.js +100 -100
package/server/middleware/sensitiveAction.js +157 -157
package/server/middleware/wab-trust.js +141 -0
package/server/migrations/001_add_analytics_indexes.sql +7 -7
package/server/migrations/002_premium_features.sql +418 -418
package/server/migrations/003_ads_integer_cents.sql +33 -33
package/server/migrations/004_agent_os.sql +158 -158
package/server/migrations/005_marketplace_metering.sql +126 -126
package/server/migrations/006_growth_suite.sql +138 -0
package/server/migrations/007_governance.sql +106 -106
package/server/migrations/008_plans.sql +144 -144
package/server/migrations/009_shieldqr.sql +30 -30
package/server/migrations/010_extended_trust.sql +33 -33
package/server/migrations/011_outreach.sql +47 -0
package/server/migrations/012_shieldlink.sql +116 -0
package/server/migrations/013_ct_monitor.sql +13 -0
package/server/migrations/014_wab_advanced_features.sql +128 -0
package/server/migrations/015_wab_truth_layer.sql +101 -0
package/server/migrations/016_ring4_external_trust.sql +84 -0
package/server/migrations/017_ring4_extensions.sql +69 -0
package/server/migrations/018_commercial_foundations.sql +167 -0
package/server/migrations/019_unify_tier_constraints.sql +133 -0
package/server/models/adapters/index.js +33 -33
package/server/models/adapters/mysql.js +183 -183
package/server/models/adapters/postgresql.js +172 -172
package/server/models/adapters/sqlite.js +7 -7
package/server/models/db.js +740 -740
package/server/observability/failure-analysis.js +337 -337
package/server/observability/index.js +394 -394
package/server/protocol/capabilities.js +223 -223
package/server/protocol/index.js +243 -243
package/server/protocol/schema.js +584 -584
package/server/registry/certification.js +271 -271
package/server/registry/index.js +326 -326
package/server/routes/activate.js +478 -0
package/server/routes/admin-outreach.js +239 -0
package/server/routes/admin-plans.js +76 -76
package/server/routes/admin-premium.js +674 -673
package/server/routes/admin-shieldlink.js +137 -0
package/server/routes/admin-shieldqr.js +90 -90
package/server/routes/admin-trust-monitor.js +139 -83
package/server/routes/admin.js +550 -549
package/server/routes/adopt.js +61 -0
package/server/routes/ads.js +130 -130
package/server/routes/agent-workspace.js +540 -540
package/server/routes/api-keys.js +127 -0
package/server/routes/api.js +150 -150
package/server/routes/auth.js +71 -71
package/server/routes/billing.js +57 -57
package/server/routes/commander.js +316 -316
package/server/routes/customer-shieldlink.js +133 -0
package/server/routes/demo-showcase.js +332 -332
package/server/routes/demo-store.js +154 -154
package/server/routes/diagnose.js +373 -0
package/server/routes/discovery.js +2348 -2348
package/server/routes/enterprise-mesh.js +170 -0
package/server/routes/gateway.js +173 -173
package/server/routes/governance-saas.js +203 -0
package/server/routes/governance.js +208 -208
package/server/routes/growth.js +1048 -0
package/server/routes/intent.js +328 -0
package/server/routes/license.js +251 -251
package/server/routes/mesh.js +469 -469
package/server/routes/noscript.js +543 -543
package/server/routes/partners.js +201 -0
package/server/routes/plans.js +33 -33
package/server/routes/premium-v2.js +686 -686
package/server/routes/premium.js +724 -724
package/server/routes/providers.js +650 -650
package/server/routes/reputation.js +411 -0
package/server/routes/ring4.js +885 -0
package/server/routes/runtime.js +2148 -2148
package/server/routes/shieldlink.js +70 -0
package/server/routes/shieldqr.js +88 -88
package/server/routes/sovereign.js +465 -465
package/server/routes/truth-layer.js +670 -0
package/server/routes/universal.js +200 -200
package/server/routes/unsubscribe.js +51 -0
package/server/routes/wab-api.js +850 -850
package/server/routes/wab-cache.js +282 -0
package/server/runtime/container-worker.js +111 -111
package/server/runtime/container.js +448 -448
package/server/runtime/distributed-worker.js +362 -362
package/server/runtime/event-bus.js +210 -210
package/server/runtime/index.js +253 -253
package/server/runtime/queue.js +599 -599
package/server/runtime/replay.js +666 -666
package/server/runtime/sandbox.js +266 -266
package/server/runtime/scheduler.js +534 -534
package/server/runtime/session-engine.js +293 -293
package/server/runtime/state-manager.js +188 -188
package/server/secrets/wab-signing-key.pem +3 -0
package/server/secrets/wab-signing-pub.pem +3 -0
package/server/security/cross-site-redactor.js +196 -196
package/server/security/dry-run.js +180 -180
package/server/security/human-gate-rate-limit.js +147 -147
package/server/security/human-gate-transports.js +178 -178
package/server/security/human-gate.js +281 -281
package/server/security/index.js +368 -368
package/server/security/intent-engine.js +245 -245
package/server/security/reward-guard.js +171 -171
package/server/security/rollback-store.js +239 -239
package/server/security/token-scope.js +404 -404
package/server/security/url-policy.js +139 -139
package/server/services/adoption-agent.js +182 -0
package/server/services/agent-chat.js +506 -506
package/server/services/agent-learning.js +601 -601
package/server/services/agent-memory.js +625 -625
package/server/services/agent-mesh.js +555 -555
package/server/services/agent-symphony.js +717 -717
package/server/services/agent-tasks.js +1807 -1807
package/server/services/api-key-engine.js +292 -292
package/server/services/cluster.js +894 -894
package/server/services/commander.js +738 -738
package/server/services/edge-compute.js +440 -440
package/server/services/email.js +233 -233
package/server/services/fairness-engine.js +409 -0
package/server/services/fairness.js +420 -0
package/server/services/governance.js +466 -466
package/server/services/hosted-runtime.js +205 -205
package/server/services/lfd.js +635 -635
package/server/services/local-ai.js +389 -389
package/server/services/marketplace.js +270 -270
package/server/services/metering.js +182 -182
package/server/services/modules/affiliate-intelligence.js +93 -93
package/server/services/modules/agent-firewall.js +90 -90
package/server/services/modules/bounty.js +89 -89
package/server/services/modules/collective-bargaining.js +92 -92
package/server/services/modules/dark-pattern.js +66 -66
package/server/services/modules/gov-intelligence.js +45 -45
package/server/services/modules/neural.js +55 -55
package/server/services/modules/notary.js +49 -49
package/server/services/modules/price-time-machine.js +86 -86
package/server/services/modules/protocol.js +104 -104
package/server/services/negotiation.js +439 -439
package/server/services/outreach-agent.js +312 -0
package/server/services/plans.js +214 -214
package/server/services/plugins.js +771 -771
package/server/services/price-intelligence.js +566 -566
package/server/services/price-shield.js +1137 -1137
package/server/services/provider-clients.js +740 -740
package/server/services/reputation.js +465 -465
package/server/services/search-engine.js +357 -357
package/server/services/security.js +513 -513
package/server/services/self-healing.js +843 -843
package/server/services/shieldlink.js +492 -0
package/server/services/shieldqr.js +322 -322
package/server/services/sovereign-shield.js +542 -542
package/server/services/ssl-ct-monitor.js +224 -0
package/server/services/ssl-inspector.js +42 -42
package/server/services/ssl-monitor.js +167 -167
package/server/services/stripe.js +206 -205
package/server/services/swarm.js +788 -788
package/server/services/universal-scraper.js +662 -662
package/server/services/verification.js +481 -481
package/server/services/vision.js +1163 -1163
package/server/services/wab-crypto.js +178 -178
package/server/utils/cache.js +125 -125
package/server/utils/migrate.js +81 -81
package/server/utils/safe-fetch.js +228 -228
package/server/utils/secureFields.js +50 -50
package/server/ws.js +161 -161
package/templates/artisan-marketplace.yaml +104 -104
package/templates/book-price-scout.yaml +98 -98
package/templates/electronics-price-tracker.yaml +108 -108
package/templates/flight-deal-hunter.yaml +113 -113
package/templates/freelancer-direct.yaml +116 -116
package/templates/grocery-price-compare.yaml +93 -93
package/templates/hotel-direct-booking.yaml +113 -113
package/templates/local-services.yaml +98 -98
package/templates/olive-oil-tunisia.yaml +88 -88
package/templates/organic-farm-fresh.yaml +101 -101
package/templates/restaurant-direct.yaml +97 -97
package/templates/ring4/banking-sovereign.yaml +55 -0
package/templates/ring4/ecommerce-sovereign.yaml +58 -0
package/templates/ring4/healthcare-sovereign.yaml +60 -0

package/public/cookies.html CHANGED Viewed

@@ -1,210 +1,210 @@
-<!DOCTYPE html>
-<html lang="en" dir="ltr">
-<head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>Cookie Policy — Web Agent Bridge</title>
-  <meta name="description" content="Cookie Policy for Web Agent Bridge. ePrivacy and GDPR compliant.">
-  <link rel="preconnect" href="https://fonts.googleapis.com">
-  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
-  <style>body{background:#0a0e1a;color:#f0f4ff;font-family:Inter,-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;margin:0;min-height:100vh}</style>
-  <link rel="preload" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900&family=JetBrains+Mono:wght@400;500;600&display=swap" as="style" onload="this.onload=null;this.rel='stylesheet'">
-  <noscript><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900&family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet"></noscript>
-  <link rel="stylesheet" href="/css/styles.css?v=3.0.1">
-</head>
-<body>
-  <nav class="navbar" id="navbar">
-    <div class="container">
-      <a href="/" class="navbar-brand">
-        <div class="brand-icon">⚡</div>
-        <span>WAB</span>
-      </a>
-      <ul class="navbar-links">
-        <li><a href="/#features">Features</a></li>
-        <li><a href="/#pricing">Pricing</a></li>
-        <li><a href="/docs">Docs</a></li>
-      </ul>
-      <div class="navbar-actions">
-        <a href="/login" class="btn btn-ghost">Sign In</a>
-        <a href="/register" class="btn btn-primary btn-sm">Get Started</a>
-      </div>
-    </div>
-  </nav>
-  <div class="container" style="padding-top: 120px; padding-bottom: 80px; max-width: 800px;">
-    <div class="section-header" style="text-align: left;">
-      <span class="label">Legal</span>
-      <h1 style="font-size: 2.2rem;">Cookie Policy</h1>
-      <p style="max-width: 100%;">Last updated: March 22, 2026</p>
-    </div>
-    <div class="docs-content">
-      <h2 id="what-are-cookies">1. What Are Cookies</h2>
-      <p>
-        Cookies are small text files placed on your device when you visit a website. They are widely
-        used to make websites work, provide analytics, and remember your preferences.
-      </p>
-      <p>
-        This Cookie Policy complies with the <strong>EU ePrivacy Directive (2002/58/EC)</strong>,
-        the <strong>GDPR (EU 2016/679)</strong>, and the
-        <strong>Dutch Telecommunications Act (Telecommunicatiewet, Art. 11.7a)</strong>.
-      </p>
-      <h2 id="cookies-we-use">2. Cookies We Use</h2>
-      <p>WAB uses a <strong>minimal cookie approach</strong>. We only use what is strictly necessary.</p>
-      <h3>2.1 Strictly Necessary Cookies</h3>
-      <p>These cookies are essential for the Service to function. No consent is required under the ePrivacy Directive.</p>
-      <table style="width: 100%; border-collapse: collapse; margin: 16px 0;">
-        <thead>
-          <tr style="border-bottom: 2px solid var(--border-color);">
-            <th style="text-align: left; padding: 12px; color: var(--text-primary);">Name</th>
-            <th style="text-align: left; padding: 12px; color: var(--text-primary);">Purpose</th>
-            <th style="text-align: left; padding: 12px; color: var(--text-primary);">Duration</th>
-            <th style="text-align: left; padding: 12px; color: var(--text-primary);">Type</th>
-          </tr>
-        </thead>
-        <tbody>
-          <tr style="border-bottom: 1px solid var(--border-color);">
-            <td style="padding: 12px; color: var(--text-secondary);"><code style="font-family: var(--font-mono); background: var(--bg-surface); padding: 2px 6px; border-radius: 4px;">token</code></td>
-            <td style="padding: 12px; color: var(--text-secondary);">Authentication session (JWT)</td>
-            <td style="padding: 12px; color: var(--text-secondary);">Session / until logout</td>
-            <td style="padding: 12px; color: var(--text-secondary);">localStorage</td>
-          </tr>
-          <tr style="border-bottom: 1px solid var(--border-color);">
-            <td style="padding: 12px; color: var(--text-secondary);"><code style="font-family: var(--font-mono); background: var(--bg-surface); padding: 2px 6px; border-radius: 4px;">adminToken</code></td>
-            <td style="padding: 12px; color: var(--text-secondary);">Admin authentication session</td>
-            <td style="padding: 12px; color: var(--text-secondary);">Session / until logout</td>
-            <td style="padding: 12px; color: var(--text-secondary);">localStorage</td>
-          </tr>
-          <tr>
-            <td style="padding: 12px; color: var(--text-secondary);"><code style="font-family: var(--font-mono); background: var(--bg-surface); padding: 2px 6px; border-radius: 4px;">wab_cookie_consent</code></td>
-            <td style="padding: 12px; color: var(--text-secondary);">Remembers your cookie consent choice</td>
-            <td style="padding: 12px; color: var(--text-secondary);">365 days</td>
-            <td style="padding: 12px; color: var(--text-secondary);">localStorage</td>
-          </tr>
-        </tbody>
-      </table>
-      <h3>2.2 Analytics Cookies</h3>
-      <p>
-        <strong>We do not use any analytics cookies.</strong> We do not use Google Analytics, Facebook Pixel,
-        Hotjar, or any third-party tracking service. Our analytics system tracks AI agent behavior only
-        (not human visitors) and does not use cookies.
-      </p>
-      <h3>2.3 Marketing Cookies</h3>
-      <p><strong>We do not use marketing or advertising cookies.</strong></p>
-      <h3>2.4 Third-Party Cookies</h3>
-      <p>
-        We load Google Fonts for typography. Google may set cookies when fonts are loaded.
-        See <a href="https://policies.google.com/privacy" style="color: var(--accent-blue);" target="_blank" rel="noopener">Google's Privacy Policy</a>.
-      </p>
-      <p>
-        When you interact with payment flows, <strong>Stripe</strong> may set cookies for fraud prevention.
-        See <a href="https://stripe.com/cookie-settings" style="color: var(--accent-blue);" target="_blank" rel="noopener">Stripe's Cookie Policy</a>.
-      </p>
-      <h2 id="consent">3. Cookie Consent</h2>
-      <p>
-        Under the Dutch Telecommunicatiewet and the ePrivacy Directive:
-      </p>
-      <ul>
-        <li><strong>Strictly necessary cookies</strong> do not require consent (they are exempt under Art. 11.7a(3) Tw)</li>
-        <li><strong>Non-essential cookies</strong> require informed, prior consent — we obtain this via our cookie banner</li>
-      </ul>
-      <p>
-        Since WAB currently uses <strong>only strictly necessary storage</strong>, we inform you via the cookie
-        banner but no opt-in is required for our cookies. Third-party cookies from Google Fonts and Stripe
-        are noted for transparency.
-      </p>
-      <h2 id="manage">4. How to Manage Cookies</h2>
-      <p>You can control cookies through your browser settings:</p>
-      <ul>
-        <li><strong>Chrome</strong>: Settings → Privacy and security → Cookies</li>
-        <li><strong>Firefox</strong>: Settings → Privacy & Security → Cookies</li>
-        <li><strong>Safari</strong>: Preferences → Privacy → Cookies</li>
-        <li><strong>Edge</strong>: Settings → Cookies and site permissions</li>
-      </ul>
-      <p>
-        Note: Blocking essential cookies (like the authentication token) will prevent you from logging
-        into your WAB account.
-      </p>
-      <h2 id="local-storage">5. Local Storage</h2>
-      <p>
-        WAB uses <strong>localStorage</strong> (not traditional cookies) for authentication tokens.
-        While localStorage is technically not a "cookie," it serves a similar purpose and is covered
-        by the ePrivacy Directive's rules on storing information on user devices. We treat it with
-        the same transparency requirements.
-      </p>
-      <h2 id="bridge-script">6. The WAB Bridge Script</h2>
-      <p>
-        The WAB bridge script (<code style="font-family: var(--font-mono); background: var(--bg-surface); padding: 2px 6px; border-radius: 4px;">ai-agent-bridge.js</code>)
-        that Site Owners embed on their websites:
-      </p>
-      <ul>
-        <li><strong>Does not set any cookies</strong> on website visitors' browsers</li>
-        <li><strong>Does not use localStorage</strong> on website visitors' browsers</li>
-        <li><strong>Does not track human visitors</strong> — it only creates an interface for AI agents</li>
-        <li>Uses temporary in-memory session tokens (not persisted to disk)</li>
-      </ul>
-      <h2 id="changes">7. Changes to This Policy</h2>
-      <p>
-        We will update this Cookie Policy if we change our cookie practices. Changes will be posted on
-        this page with an updated date.
-      </p>
-      <h2 id="contact">8. Contact</h2>
-      <p>
-        For questions about our cookie practices:<br>
-        Email: <a href="mailto:privacy@webagentbridge.com" style="color: var(--accent-blue);">privacy@webagentbridge.com</a>
-      </p>
-    </div>
-  </div>
-  <footer class="footer">
-    <div class="container">
-      <div class="footer-grid">
-        <div class="footer-brand">
-          <a href="/" class="navbar-brand"><div class="brand-icon">⚡</div><span>Web Agent Bridge</span></a>
-          <p>Open-source middleware for AI agent and website interaction.</p>
-        </div>
-        <div class="footer-col">
-          <h4>Product</h4>
-          <ul>
-            <li><a href="/#features">Features</a></li>
-            <li><a href="/#pricing">Pricing</a></li>
-            <li><a href="/docs">Documentation</a></li>
-          </ul>
-        </div>
-        <div class="footer-col">
-          <h4>Developers</h4>
-          <ul>
-            <li><a href="/docs#quick-start">Quick Start</a></li>
-            <li><a href="/docs#api-reference">API Reference</a></li>
-            <li><a href="https://github.com/abokenan444/web-agent-bridge" target="_blank" rel="noopener">GitHub</a></li>
-          </ul>
-        </div>
-        <div class="footer-col">
-          <h4>Legal</h4>
-          <ul>
-            <li><a href="/privacy">Privacy Policy</a></li>
-            <li><a href="/terms">Terms of Service</a></li>
-            <li><a href="/cookies">Cookie Policy</a></li>
-          </ul>
-        </div>
-      </div>
-      <div class="footer-bottom">
-        <span>&copy; 2026 Web Agent Bridge. MIT License. Operated from the Netherlands.</span>
-      </div>
-    </div>
-  </footer>
-</body>
-</html>
+<!DOCTYPE html>
+<html lang="en" dir="ltr">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Cookie Policy — Web Agent Bridge</title>
+  <meta name="description" content="Cookie Policy for Web Agent Bridge. ePrivacy and GDPR compliant.">
+  <link rel="preconnect" href="https://fonts.googleapis.com">
+  <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+  <style>body{background:#0a0e1a;color:#f0f4ff;font-family:Inter,-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;margin:0;min-height:100vh}</style>
+  <link rel="preload" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900&family=JetBrains+Mono:wght@400;500;600&display=swap" as="style" onload="this.onload=null;this.rel='stylesheet'">
+  <noscript><link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900&family=JetBrains+Mono:wght@400;500;600&display=swap" rel="stylesheet"></noscript>
+  <link rel="stylesheet" href="/css/styles.css?v=3.0.1">
+</head>
+<body>
+  <nav class="navbar" id="navbar">
+    <div class="container">
+      <a href="/" class="navbar-brand">
+        <div class="brand-icon">⚡</div>
+        <span>WAB</span>
+      </a>
+      <ul class="navbar-links">
+        <li><a href="/#features">Features</a></li>
+        <li><a href="/#pricing">Pricing</a></li>
+        <li><a href="/docs">Docs</a></li>
+      </ul>
+      <div class="navbar-actions">
+        <a href="/login" class="btn btn-ghost">Sign In</a>
+        <a href="/register" class="btn btn-primary btn-sm">Get Started</a>
+      </div>
+    </div>
+  </nav>
+  <div class="container" style="padding-top: 120px; padding-bottom: 80px; max-width: 800px;">
+    <div class="section-header" style="text-align: left;">
+      <span class="label">Legal</span>
+      <h1 style="font-size: 2.2rem;">Cookie Policy</h1>
+      <p style="max-width: 100%;">Last updated: March 22, 2026</p>
+    </div>
+    <div class="docs-content">
+      <h2 id="what-are-cookies">1. What Are Cookies</h2>
+      <p>
+        Cookies are small text files placed on your device when you visit a website. They are widely
+        used to make websites work, provide analytics, and remember your preferences.
+      </p>
+      <p>
+        This Cookie Policy complies with the <strong>EU ePrivacy Directive (2002/58/EC)</strong>,
+        the <strong>GDPR (EU 2016/679)</strong>, and the
+        <strong>Dutch Telecommunications Act (Telecommunicatiewet, Art. 11.7a)</strong>.
+      </p>
+      <h2 id="cookies-we-use">2. Cookies We Use</h2>
+      <p>WAB uses a <strong>minimal cookie approach</strong>. We only use what is strictly necessary.</p>
+      <h3>2.1 Strictly Necessary Cookies</h3>
+      <p>These cookies are essential for the Service to function. No consent is required under the ePrivacy Directive.</p>
+      <table style="width: 100%; border-collapse: collapse; margin: 16px 0;">
+        <thead>
+          <tr style="border-bottom: 2px solid var(--border-color);">
+            <th style="text-align: left; padding: 12px; color: var(--text-primary);">Name</th>
+            <th style="text-align: left; padding: 12px; color: var(--text-primary);">Purpose</th>
+            <th style="text-align: left; padding: 12px; color: var(--text-primary);">Duration</th>
+            <th style="text-align: left; padding: 12px; color: var(--text-primary);">Type</th>
+          </tr>
+        </thead>
+        <tbody>
+          <tr style="border-bottom: 1px solid var(--border-color);">
+            <td style="padding: 12px; color: var(--text-secondary);"><code style="font-family: var(--font-mono); background: var(--bg-surface); padding: 2px 6px; border-radius: 4px;">token</code></td>
+            <td style="padding: 12px; color: var(--text-secondary);">Authentication session (JWT)</td>
+            <td style="padding: 12px; color: var(--text-secondary);">Session / until logout</td>
+            <td style="padding: 12px; color: var(--text-secondary);">localStorage</td>
+          </tr>
+          <tr style="border-bottom: 1px solid var(--border-color);">
+            <td style="padding: 12px; color: var(--text-secondary);"><code style="font-family: var(--font-mono); background: var(--bg-surface); padding: 2px 6px; border-radius: 4px;">adminToken</code></td>
+            <td style="padding: 12px; color: var(--text-secondary);">Admin authentication session</td>
+            <td style="padding: 12px; color: var(--text-secondary);">Session / until logout</td>
+            <td style="padding: 12px; color: var(--text-secondary);">localStorage</td>
+          </tr>
+          <tr>
+            <td style="padding: 12px; color: var(--text-secondary);"><code style="font-family: var(--font-mono); background: var(--bg-surface); padding: 2px 6px; border-radius: 4px;">wab_cookie_consent</code></td>
+            <td style="padding: 12px; color: var(--text-secondary);">Remembers your cookie consent choice</td>
+            <td style="padding: 12px; color: var(--text-secondary);">365 days</td>
+            <td style="padding: 12px; color: var(--text-secondary);">localStorage</td>
+          </tr>
+        </tbody>
+      </table>
+      <h3>2.2 Analytics Cookies</h3>
+      <p>
+        <strong>We do not use any analytics cookies.</strong> We do not use Google Analytics, Facebook Pixel,
+        Hotjar, or any third-party tracking service. Our analytics system tracks AI agent behavior only
+        (not human visitors) and does not use cookies.
+      </p>
+      <h3>2.3 Marketing Cookies</h3>
+      <p><strong>We do not use marketing or advertising cookies.</strong></p>
+      <h3>2.4 Third-Party Cookies</h3>
+      <p>
+        We load Google Fonts for typography. Google may set cookies when fonts are loaded.
+        See <a href="https://policies.google.com/privacy" style="color: var(--accent-blue);" target="_blank" rel="noopener">Google's Privacy Policy</a>.
+      </p>
+      <p>
+        When you interact with payment flows, <strong>Stripe</strong> may set cookies for fraud prevention.
+        See <a href="https://stripe.com/cookie-settings" style="color: var(--accent-blue);" target="_blank" rel="noopener">Stripe's Cookie Policy</a>.
+      </p>
+      <h2 id="consent">3. Cookie Consent</h2>
+      <p>
+        Under the Dutch Telecommunicatiewet and the ePrivacy Directive:
+      </p>
+      <ul>
+        <li><strong>Strictly necessary cookies</strong> do not require consent (they are exempt under Art. 11.7a(3) Tw)</li>
+        <li><strong>Non-essential cookies</strong> require informed, prior consent — we obtain this via our cookie banner</li>
+      </ul>
+      <p>
+        Since WAB currently uses <strong>only strictly necessary storage</strong>, we inform you via the cookie
+        banner but no opt-in is required for our cookies. Third-party cookies from Google Fonts and Stripe
+        are noted for transparency.
+      </p>
+      <h2 id="manage">4. How to Manage Cookies</h2>
+      <p>You can control cookies through your browser settings:</p>
+      <ul>
+        <li><strong>Chrome</strong>: Settings → Privacy and security → Cookies</li>
+        <li><strong>Firefox</strong>: Settings → Privacy & Security → Cookies</li>
+        <li><strong>Safari</strong>: Preferences → Privacy → Cookies</li>
+        <li><strong>Edge</strong>: Settings → Cookies and site permissions</li>
+      </ul>
+      <p>
+        Note: Blocking essential cookies (like the authentication token) will prevent you from logging
+        into your WAB account.
+      </p>
+      <h2 id="local-storage">5. Local Storage</h2>
+      <p>
+        WAB uses <strong>localStorage</strong> (not traditional cookies) for authentication tokens.
+        While localStorage is technically not a "cookie," it serves a similar purpose and is covered
+        by the ePrivacy Directive's rules on storing information on user devices. We treat it with
+        the same transparency requirements.
+      </p>
+      <h2 id="bridge-script">6. The WAB Bridge Script</h2>
+      <p>
+        The WAB bridge script (<code style="font-family: var(--font-mono); background: var(--bg-surface); padding: 2px 6px; border-radius: 4px;">ai-agent-bridge.js</code>)
+        that Site Owners embed on their websites:
+      </p>
+      <ul>
+        <li><strong>Does not set any cookies</strong> on website visitors' browsers</li>
+        <li><strong>Does not use localStorage</strong> on website visitors' browsers</li>
+        <li><strong>Does not track human visitors</strong> — it only creates an interface for AI agents</li>
+        <li>Uses temporary in-memory session tokens (not persisted to disk)</li>
+      </ul>
+      <h2 id="changes">7. Changes to This Policy</h2>
+      <p>
+        We will update this Cookie Policy if we change our cookie practices. Changes will be posted on
+        this page with an updated date.
+      </p>
+      <h2 id="contact">8. Contact</h2>
+      <p>
+        For questions about our cookie practices:<br>
+        Email: <a href="mailto:privacy@webagentbridge.com" style="color: var(--accent-blue);">privacy@webagentbridge.com</a>
+      </p>
+    </div>
+  </div>
+  <footer class="footer">
+    <div class="container">
+      <div class="footer-grid">
+        <div class="footer-brand">
+          <a href="/" class="navbar-brand"><div class="brand-icon">⚡</div><span>Web Agent Bridge</span></a>
+          <p>Open-source middleware for AI agent and website interaction.</p>
+        </div>
+        <div class="footer-col">
+          <h4>Product</h4>
+          <ul>
+            <li><a href="/#features">Features</a></li>
+            <li><a href="/#pricing">Pricing</a></li>
+            <li><a href="/docs">Documentation</a></li>
+          </ul>
+        </div>
+        <div class="footer-col">
+          <h4>Developers</h4>
+          <ul>
+            <li><a href="/docs#quick-start">Quick Start</a></li>
+            <li><a href="/docs#api-reference">API Reference</a></li>
+            <li><a href="https://github.com/abokenan444/web-agent-bridge" target="_blank" rel="noopener">GitHub</a></li>
+          </ul>
+        </div>
+        <div class="footer-col">
+          <h4>Legal</h4>
+          <ul>
+            <li><a href="/privacy">Privacy Policy</a></li>
+            <li><a href="/terms">Terms of Service</a></li>
+            <li><a href="/cookies">Cookie Policy</a></li>
+          </ul>
+        </div>
+      </div>
+      <div class="footer-bottom">
+        <span>&copy; 2026 Web Agent Bridge. MIT License. Operated from the Netherlands.</span>
+      </div>
+    </div>
+  </footer>
+</body>
+</html>