web-agent-bridge 3.4.0 → 3.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/LICENSE +84 -84
- package/README.ar.md +1565 -1304
- package/README.md +171 -298
- package/bin/agent-runner.js +474 -474
- package/bin/cli.js +237 -237
- package/bin/wab-init.js +244 -223
- package/bin/wab.js +80 -80
- package/examples/azure-dns-wab.js +83 -83
- package/examples/bidi-agent.js +119 -119
- package/examples/cloudflare-wab-dns.js +121 -121
- package/examples/cpanel-wab-dns.js +114 -114
- package/examples/cross-site-agent.js +91 -91
- package/examples/dns-discovery-agent.js +166 -166
- package/examples/gcp-dns-wab.js +76 -76
- package/examples/governance-agent.js +169 -169
- package/examples/mcp-agent.js +94 -94
- package/examples/next-app-router/README.md +44 -44
- package/examples/plesk-wab-dns.js +103 -103
- package/examples/puppeteer-agent.js +108 -108
- package/examples/route53-wab-dns.js +144 -144
- package/examples/saas-dashboard/README.md +55 -55
- package/examples/safe-mode-agent.js +96 -96
- package/examples/self-discovery.js +106 -0
- package/examples/shopify-hydrogen/README.md +74 -74
- package/examples/vision-agent.js +171 -171
- package/examples/wab-sign.js +74 -74
- package/examples/wab-verify.js +60 -60
- package/examples/wordpress-elementor/README.md +77 -77
- package/package.json +93 -93
- package/public/.well-known/agent-tools.json +180 -180
- package/public/.well-known/ai-assets.json +59 -59
- package/public/.well-known/security.txt +8 -8
- package/public/.well-known/wab.json +28 -28
- package/public/activate.html +448 -368
- package/public/adopt.html +236 -0
- package/public/adoption-metrics.html +188 -188
- package/public/agent-workspace.html +359 -349
- package/public/ai.html +198 -198
- package/public/api.html +397 -413
- package/public/atp.html +171 -0
- package/public/azure-dns-integration.html +289 -289
- package/public/browser.html +486 -486
- package/public/cloudflare-integration.html +380 -380
- package/public/commander-dashboard.html +243 -243
- package/public/cookies.html +210 -210
- package/public/cpanel-integration.html +398 -398
- package/public/css/agent-workspace.css +1713 -1713
- package/public/css/premium.css +317 -317
- package/public/css/styles.css +1401 -1263
- package/public/dashboard-shieldlink.html +295 -0
- package/public/dashboard.html +711 -707
- package/public/dns.html +436 -436
- package/public/docs.html +588 -588
- package/public/enterprise-mesh.ar.html +80 -0
- package/public/enterprise-mesh.html +81 -0
- package/public/feed.xml +89 -89
- package/public/gcp-dns-integration.html +318 -318
- package/public/governance.ar.html +70 -0
- package/public/governance.html +69 -0
- package/public/growth.html +465 -465
- package/public/index.html +1372 -1266
- package/public/integrations.html +556 -556
- package/public/js/activate.js +449 -145
- package/public/js/agent-workspace.js +1740 -1740
- package/public/js/auth-nav.js +117 -65
- package/public/js/auth-redirect.js +12 -12
- package/public/js/cookie-consent.js +56 -56
- package/public/js/dns.js +438 -438
- package/public/js/wab-demo-page.js +721 -721
- package/public/js/ws-client.js +74 -74
- package/public/l-preview.html +242 -0
- package/public/llms-full.txt +360 -360
- package/public/llms.txt +125 -125
- package/public/login.html +85 -85
- package/public/mesh-dashboard.html +328 -328
- package/public/milestones.html +346 -0
- package/public/one-click.html +779 -0
- package/public/openapi.json +669 -669
- package/public/partners.ar.html +145 -0
- package/public/partners.html +143 -0
- package/public/phone-shield.html +281 -281
- package/public/plesk-integration.html +375 -375
- package/public/premium-dashboard.html +2489 -2489
- package/public/premium.html +793 -793
- package/public/privacy.html +297 -297
- package/public/provider-onboarding.html +172 -172
- package/public/provider-sandbox.html +134 -134
- package/public/providers.html +359 -359
- package/public/refusals.html +172 -0
- package/public/register.html +105 -105
- package/public/registrar-integrations.html +141 -141
- package/public/ring4.html +292 -0
- package/public/robots.txt +99 -99
- package/public/route53-integration.html +531 -531
- package/public/score.html +263 -0
- package/public/script/wab-consent.d.ts +36 -36
- package/public/script/wab-consent.js +104 -104
- package/public/script/wab-schema.js +131 -131
- package/public/script/wab.d.ts +108 -108
- package/public/script/wab.min.js +580 -580
- package/public/security.txt +8 -8
- package/public/shieldlink.html +244 -0
- package/public/shieldqr.html +231 -231
- package/public/sitemap.xml +13 -1
- package/public/terms.html +256 -256
- package/public/trust-graph-api.ar.html +92 -0
- package/public/trust-graph-api.html +91 -0
- package/public/wab-features.html +560 -0
- package/public/wab-trust.html +200 -200
- package/public/wab-truth.html +375 -0
- package/public/wab-vs-protocols.html +210 -210
- package/public/whitepaper.html +449 -449
- package/script/ai-agent-bridge.js +1754 -1754
- package/sdk/README.md +99 -99
- package/sdk/agent-mesh.js +449 -449
- package/sdk/atp.js +103 -0
- package/sdk/auto-discovery.js +301 -288
- package/sdk/commander.js +262 -262
- package/sdk/governance.js +262 -262
- package/sdk/index.d.ts +464 -464
- package/sdk/index.js +653 -649
- package/sdk/multi-agent.js +318 -318
- package/sdk/safe-mode.js +221 -221
- package/sdk/safety-shield.js +219 -219
- package/sdk/schema-discovery.js +83 -83
- package/server/adapters/index.js +520 -520
- package/server/config/plans.js +412 -367
- package/server/config/secrets.js +102 -102
- package/server/control-plane/index.js +301 -301
- package/server/data-plane/index.js +354 -354
- package/server/index.js +793 -670
- package/server/llm/index.js +404 -404
- package/server/middleware/adminAuth.js +35 -35
- package/server/middleware/api-tier.js +170 -0
- package/server/middleware/auth.js +50 -50
- package/server/middleware/featureGate.js +88 -88
- package/server/middleware/rateLimits.js +100 -100
- package/server/middleware/sensitiveAction.js +157 -157
- package/server/middleware/wab-trust.js +141 -0
- package/server/migrations/001_add_analytics_indexes.sql +7 -7
- package/server/migrations/002_premium_features.sql +418 -418
- package/server/migrations/003_ads_integer_cents.sql +33 -33
- package/server/migrations/004_agent_os.sql +158 -158
- package/server/migrations/005_marketplace_metering.sql +126 -126
- package/server/migrations/006_growth_suite.sql +138 -0
- package/server/migrations/007_governance.sql +106 -106
- package/server/migrations/008_plans.sql +144 -144
- package/server/migrations/009_shieldqr.sql +30 -30
- package/server/migrations/010_extended_trust.sql +33 -33
- package/server/migrations/011_outreach.sql +47 -0
- package/server/migrations/012_shieldlink.sql +116 -0
- package/server/migrations/013_ct_monitor.sql +13 -0
- package/server/migrations/014_wab_advanced_features.sql +128 -0
- package/server/migrations/015_wab_truth_layer.sql +101 -0
- package/server/migrations/016_ring4_external_trust.sql +84 -0
- package/server/migrations/017_ring4_extensions.sql +69 -0
- package/server/migrations/018_commercial_foundations.sql +167 -0
- package/server/migrations/019_unify_tier_constraints.sql +133 -0
- package/server/migrations/020_agent_transaction_primitive.sql +119 -0
- package/server/models/adapters/index.js +33 -33
- package/server/models/adapters/mysql.js +183 -183
- package/server/models/adapters/postgresql.js +172 -172
- package/server/models/adapters/sqlite.js +7 -7
- package/server/models/db.js +740 -740
- package/server/observability/failure-analysis.js +337 -337
- package/server/observability/index.js +394 -394
- package/server/protocol/capabilities.js +223 -223
- package/server/protocol/index.js +243 -243
- package/server/protocol/schema.js +584 -584
- package/server/registry/certification.js +271 -271
- package/server/registry/index.js +326 -326
- package/server/routes/activate.js +478 -0
- package/server/routes/admin-outreach.js +239 -0
- package/server/routes/admin-plans.js +76 -76
- package/server/routes/admin-premium.js +674 -673
- package/server/routes/admin-shieldlink.js +137 -0
- package/server/routes/admin-shieldqr.js +90 -90
- package/server/routes/admin-trust-monitor.js +139 -83
- package/server/routes/admin.js +550 -549
- package/server/routes/adopt.js +61 -0
- package/server/routes/ads.js +130 -130
- package/server/routes/agent-workspace.js +540 -540
- package/server/routes/api-keys.js +127 -0
- package/server/routes/api.js +150 -150
- package/server/routes/auth.js +71 -71
- package/server/routes/billing.js +57 -57
- package/server/routes/commander.js +316 -316
- package/server/routes/customer-shieldlink.js +133 -0
- package/server/routes/demo-showcase.js +332 -332
- package/server/routes/demo-store.js +154 -154
- package/server/routes/diagnose.js +373 -0
- package/server/routes/discovery.js +2348 -2348
- package/server/routes/enterprise-mesh.js +170 -0
- package/server/routes/gateway.js +173 -173
- package/server/routes/governance-saas.js +203 -0
- package/server/routes/governance.js +208 -208
- package/server/routes/growth.js +1048 -0
- package/server/routes/intent.js +328 -0
- package/server/routes/license.js +251 -251
- package/server/routes/mesh.js +469 -469
- package/server/routes/noscript.js +543 -543
- package/server/routes/partners.js +201 -0
- package/server/routes/plans.js +33 -33
- package/server/routes/premium-v2.js +686 -686
- package/server/routes/premium.js +724 -724
- package/server/routes/providers.js +650 -650
- package/server/routes/reputation.js +411 -0
- package/server/routes/ring4.js +885 -0
- package/server/routes/runtime.js +2148 -2148
- package/server/routes/shieldlink.js +70 -0
- package/server/routes/shieldqr.js +88 -88
- package/server/routes/sovereign.js +465 -465
- package/server/routes/transactions.js +233 -0
- package/server/routes/truth-layer.js +670 -0
- package/server/routes/universal.js +200 -200
- package/server/routes/unsubscribe.js +51 -0
- package/server/routes/wab-api.js +850 -850
- package/server/routes/wab-cache.js +282 -0
- package/server/runtime/container-worker.js +111 -111
- package/server/runtime/container.js +448 -448
- package/server/runtime/distributed-worker.js +362 -362
- package/server/runtime/event-bus.js +210 -210
- package/server/runtime/index.js +253 -253
- package/server/runtime/queue.js +599 -599
- package/server/runtime/replay.js +666 -666
- package/server/runtime/sandbox.js +266 -266
- package/server/runtime/scheduler.js +534 -534
- package/server/runtime/session-engine.js +293 -293
- package/server/runtime/state-manager.js +188 -188
- package/server/secrets/wab-signing-key.pem +3 -0
- package/server/secrets/wab-signing-pub.pem +3 -0
- package/server/security/cross-site-redactor.js +196 -196
- package/server/security/dry-run.js +180 -180
- package/server/security/human-gate-rate-limit.js +147 -147
- package/server/security/human-gate-transports.js +178 -178
- package/server/security/human-gate.js +281 -281
- package/server/security/index.js +368 -368
- package/server/security/intent-engine.js +245 -245
- package/server/security/reward-guard.js +171 -171
- package/server/security/rollback-store.js +239 -239
- package/server/security/token-scope.js +404 -404
- package/server/security/url-policy.js +139 -139
- package/server/services/adoption-agent.js +182 -0
- package/server/services/agent-chat.js +506 -506
- package/server/services/agent-learning.js +601 -601
- package/server/services/agent-memory.js +625 -625
- package/server/services/agent-mesh.js +555 -555
- package/server/services/agent-symphony.js +717 -717
- package/server/services/agent-tasks.js +1807 -1807
- package/server/services/api-key-engine.js +292 -292
- package/server/services/cluster.js +894 -894
- package/server/services/commander.js +738 -738
- package/server/services/edge-compute.js +440 -440
- package/server/services/email.js +233 -233
- package/server/services/fairness-engine.js +409 -0
- package/server/services/fairness.js +420 -0
- package/server/services/governance.js +466 -466
- package/server/services/hosted-runtime.js +205 -205
- package/server/services/lfd.js +635 -635
- package/server/services/local-ai.js +389 -389
- package/server/services/marketplace.js +270 -270
- package/server/services/metering.js +182 -182
- package/server/services/modules/affiliate-intelligence.js +93 -93
- package/server/services/modules/agent-firewall.js +90 -90
- package/server/services/modules/bounty.js +89 -89
- package/server/services/modules/collective-bargaining.js +92 -92
- package/server/services/modules/dark-pattern.js +66 -66
- package/server/services/modules/gov-intelligence.js +45 -45
- package/server/services/modules/neural.js +55 -55
- package/server/services/modules/notary.js +49 -49
- package/server/services/modules/price-time-machine.js +86 -86
- package/server/services/modules/protocol.js +104 -104
- package/server/services/negotiation.js +439 -439
- package/server/services/outreach-agent.js +312 -0
- package/server/services/plans.js +214 -214
- package/server/services/plugins.js +771 -771
- package/server/services/price-intelligence.js +566 -566
- package/server/services/price-shield.js +1137 -1137
- package/server/services/provider-clients.js +740 -740
- package/server/services/reputation.js +465 -465
- package/server/services/search-engine.js +357 -357
- package/server/services/security.js +513 -513
- package/server/services/self-healing.js +843 -843
- package/server/services/shieldlink.js +492 -0
- package/server/services/shieldqr.js +322 -322
- package/server/services/sovereign-shield.js +542 -542
- package/server/services/ssl-ct-monitor.js +224 -0
- package/server/services/ssl-inspector.js +42 -42
- package/server/services/ssl-monitor.js +167 -167
- package/server/services/stripe.js +206 -205
- package/server/services/swarm.js +788 -788
- package/server/services/transactions.js +525 -0
- package/server/services/universal-scraper.js +662 -662
- package/server/services/verification.js +481 -481
- package/server/services/vision.js +1163 -1163
- package/server/services/wab-crypto.js +178 -178
- package/server/utils/cache.js +125 -125
- package/server/utils/migrate.js +81 -81
- package/server/utils/safe-fetch.js +228 -228
- package/server/utils/secureFields.js +50 -50
- package/server/ws.js +161 -161
- package/templates/artisan-marketplace.yaml +104 -104
- package/templates/book-price-scout.yaml +98 -98
- package/templates/electronics-price-tracker.yaml +108 -108
- package/templates/flight-deal-hunter.yaml +113 -113
- package/templates/freelancer-direct.yaml +116 -116
- package/templates/grocery-price-compare.yaml +93 -93
- package/templates/hotel-direct-booking.yaml +113 -113
- package/templates/local-services.yaml +98 -98
- package/templates/olive-oil-tunisia.yaml +88 -88
- package/templates/organic-farm-fresh.yaml +101 -101
- package/templates/restaurant-direct.yaml +97 -97
- package/templates/ring4/banking-sovereign.yaml +55 -0
- package/templates/ring4/ecommerce-sovereign.yaml +58 -0
- package/templates/ring4/healthcare-sovereign.yaml +60 -0
|
@@ -1,166 +1,166 @@
|
|
|
1
|
-
#!/usr/bin/env node
|
|
2
|
-
'use strict';
|
|
3
|
-
|
|
4
|
-
/**
|
|
5
|
-
* Official WAB DNS Discovery consumer (multi-site).
|
|
6
|
-
*
|
|
7
|
-
* Proves the full value chain per domain:
|
|
8
|
-
* 1) discover via _wab TXT
|
|
9
|
-
* 2) fetch wab.json endpoint
|
|
10
|
-
* 3) call agent endpoints (/api/wab/discover, /api/wab/ping)
|
|
11
|
-
*
|
|
12
|
-
* Usage:
|
|
13
|
-
* node examples/dns-discovery-agent.js webagentbridge.com example.com
|
|
14
|
-
*/
|
|
15
|
-
|
|
16
|
-
const { verify } = require('../packages/dns-verify/src');
|
|
17
|
-
const { safeFetch } = require('../server/utils/safe-fetch');
|
|
18
|
-
|
|
19
|
-
function sanitizeDomain(raw) {
|
|
20
|
-
return String(raw || '')
|
|
21
|
-
.trim()
|
|
22
|
-
.toLowerCase()
|
|
23
|
-
.replace(/^https?:\/\//, '')
|
|
24
|
-
.replace(/\/.*$/, '')
|
|
25
|
-
.replace(/:\d+$/, '')
|
|
26
|
-
.replace(/^www\./, '');
|
|
27
|
-
}
|
|
28
|
-
|
|
29
|
-
function parseEndpoint(record) {
|
|
30
|
-
if (!record || !record.parsed) return null;
|
|
31
|
-
return record.parsed.endpoint || null;
|
|
32
|
-
}
|
|
33
|
-
|
|
34
|
-
function logStep(ok, label, detail) {
|
|
35
|
-
const icon = ok ? 'OK' : 'NO';
|
|
36
|
-
const extra = detail ? ` - ${detail}` : '';
|
|
37
|
-
console.log(`[${icon}] ${label}${extra}`);
|
|
38
|
-
}
|
|
39
|
-
|
|
40
|
-
async function runDomain(domain) {
|
|
41
|
-
console.log('\n=== ' + domain + ' ===');
|
|
42
|
-
|
|
43
|
-
const result = {
|
|
44
|
-
domain,
|
|
45
|
-
dns: null,
|
|
46
|
-
endpoint: null,
|
|
47
|
-
wabJson: null,
|
|
48
|
-
discover: null,
|
|
49
|
-
ping: null,
|
|
50
|
-
ok: false,
|
|
51
|
-
};
|
|
52
|
-
|
|
53
|
-
const proof = await verify(domain, { timeoutMs: 6000 }).catch((err) => ({
|
|
54
|
-
ok: false,
|
|
55
|
-
records: [{ type: '_wab', error: err.message }],
|
|
56
|
-
}));
|
|
57
|
-
|
|
58
|
-
const wabRecord = (proof.records || []).find((r) => r.type === '_wab') || null;
|
|
59
|
-
result.dns = wabRecord;
|
|
60
|
-
logStep(!!(wabRecord && wabRecord.ok), 'DNS discovery', wabRecord && (wabRecord.error || wabRecord.fqdn));
|
|
61
|
-
|
|
62
|
-
const endpoint = parseEndpoint(wabRecord);
|
|
63
|
-
result.endpoint = endpoint;
|
|
64
|
-
if (!endpoint) {
|
|
65
|
-
logStep(false, 'wab.json endpoint', 'missing endpoint= in _wab record');
|
|
66
|
-
return result;
|
|
67
|
-
}
|
|
68
|
-
logStep(true, 'wab.json endpoint', endpoint);
|
|
69
|
-
|
|
70
|
-
const endpointUrl = new URL(endpoint);
|
|
71
|
-
const allowList = [domain, '*.' + domain, endpointUrl.hostname, '*.' + endpointUrl.hostname]
|
|
72
|
-
.filter((v, i, a) => a.indexOf(v) === i);
|
|
73
|
-
|
|
74
|
-
try {
|
|
75
|
-
const wabRes = await safeFetch(endpointUrl.toString(), { headers: { accept: 'application/json' } }, {
|
|
76
|
-
requireHttps: true,
|
|
77
|
-
allowList,
|
|
78
|
-
timeoutMs: 8000,
|
|
79
|
-
maxBytes: 1024 * 1024,
|
|
80
|
-
allowedContentTypes: ['application/json', 'application/ld+json', 'text/plain'],
|
|
81
|
-
});
|
|
82
|
-
const wabJson = await wabRes.json();
|
|
83
|
-
result.wabJson = wabJson;
|
|
84
|
-
logStep(wabRes.ok, 'Fetch wab.json', wabRes.status + ' ' + (wabJson.provider && wabJson.provider.name || 'unknown provider'));
|
|
85
|
-
} catch (err) {
|
|
86
|
-
logStep(false, 'Fetch wab.json', err.message);
|
|
87
|
-
return result;
|
|
88
|
-
}
|
|
89
|
-
|
|
90
|
-
const origin = endpointUrl.origin;
|
|
91
|
-
const discoverUrl = origin + '/api/wab/discover';
|
|
92
|
-
const fallbackDiscoverUrl = origin + '/agent-bridge.json';
|
|
93
|
-
|
|
94
|
-
try {
|
|
95
|
-
const discoverRes = await safeFetch(discoverUrl, { headers: { accept: 'application/json' } }, {
|
|
96
|
-
requireHttps: true,
|
|
97
|
-
allowList,
|
|
98
|
-
timeoutMs: 8000,
|
|
99
|
-
maxBytes: 1024 * 1024,
|
|
100
|
-
allowedContentTypes: ['application/json'],
|
|
101
|
-
});
|
|
102
|
-
if (discoverRes.ok) {
|
|
103
|
-
const discoverJson = await discoverRes.json();
|
|
104
|
-
result.discover = discoverJson;
|
|
105
|
-
logStep(true, 'Agent discover', 'GET /api/wab/discover');
|
|
106
|
-
} else {
|
|
107
|
-
const fallbackRes = await safeFetch(fallbackDiscoverUrl, { headers: { accept: 'application/json' } }, {
|
|
108
|
-
requireHttps: true,
|
|
109
|
-
allowList,
|
|
110
|
-
timeoutMs: 8000,
|
|
111
|
-
maxBytes: 1024 * 1024,
|
|
112
|
-
allowedContentTypes: ['application/json'],
|
|
113
|
-
});
|
|
114
|
-
const fallbackJson = await fallbackRes.json().catch(() => ({}));
|
|
115
|
-
if (fallbackRes.ok) {
|
|
116
|
-
result.discover = fallbackJson;
|
|
117
|
-
logStep(true, 'Agent discover', `fallback /agent-bridge.json (discover HTTP ${discoverRes.status})`);
|
|
118
|
-
} else {
|
|
119
|
-
logStep(false, 'Agent discover', `discover HTTP ${discoverRes.status}; fallback HTTP ${fallbackRes.status}`);
|
|
120
|
-
}
|
|
121
|
-
}
|
|
122
|
-
} catch (err) {
|
|
123
|
-
logStep(false, 'Agent discover', err.message);
|
|
124
|
-
}
|
|
125
|
-
|
|
126
|
-
try {
|
|
127
|
-
const pingRes = await safeFetch(origin + '/api/wab/ping', { headers: { accept: 'application/json' } }, {
|
|
128
|
-
requireHttps: true,
|
|
129
|
-
allowList,
|
|
130
|
-
timeoutMs: 8000,
|
|
131
|
-
maxBytes: 512 * 1024,
|
|
132
|
-
allowedContentTypes: ['application/json'],
|
|
133
|
-
});
|
|
134
|
-
const pingJson = await pingRes.json();
|
|
135
|
-
result.ping = pingJson;
|
|
136
|
-
logStep(pingRes.ok, 'Agent execute', 'GET /api/wab/ping => pong=' + !!(pingJson.result && pingJson.result.pong));
|
|
137
|
-
} catch (err) {
|
|
138
|
-
logStep(false, 'Agent execute', err.message);
|
|
139
|
-
}
|
|
140
|
-
|
|
141
|
-
result.ok = !!(result.dns && result.dns.ok && result.wabJson && result.ping);
|
|
142
|
-
return result;
|
|
143
|
-
}
|
|
144
|
-
|
|
145
|
-
async function main() {
|
|
146
|
-
const domains = process.argv.slice(2).map(sanitizeDomain).filter(Boolean);
|
|
147
|
-
if (domains.length === 0) {
|
|
148
|
-
console.error('Usage: node examples/dns-discovery-agent.js <domain1> [domain2] [...]');
|
|
149
|
-
process.exit(1);
|
|
150
|
-
}
|
|
151
|
-
|
|
152
|
-
const outputs = [];
|
|
153
|
-
for (const domain of domains) {
|
|
154
|
-
outputs.push(await runDomain(domain));
|
|
155
|
-
}
|
|
156
|
-
|
|
157
|
-
const passed = outputs.filter((o) => o.ok).length;
|
|
158
|
-
console.log('\nSummary: ' + passed + '/' + outputs.length + ' domains passed full flow');
|
|
159
|
-
|
|
160
|
-
if (passed !== outputs.length) process.exitCode = 2;
|
|
161
|
-
}
|
|
162
|
-
|
|
163
|
-
main().catch((err) => {
|
|
164
|
-
console.error('Fatal:', err && err.stack || err);
|
|
165
|
-
process.exit(1);
|
|
166
|
-
});
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
'use strict';
|
|
3
|
+
|
|
4
|
+
/**
|
|
5
|
+
* Official WAB DNS Discovery consumer (multi-site).
|
|
6
|
+
*
|
|
7
|
+
* Proves the full value chain per domain:
|
|
8
|
+
* 1) discover via _wab TXT
|
|
9
|
+
* 2) fetch wab.json endpoint
|
|
10
|
+
* 3) call agent endpoints (/api/wab/discover, /api/wab/ping)
|
|
11
|
+
*
|
|
12
|
+
* Usage:
|
|
13
|
+
* node examples/dns-discovery-agent.js webagentbridge.com example.com
|
|
14
|
+
*/
|
|
15
|
+
|
|
16
|
+
const { verify } = require('../packages/dns-verify/src');
|
|
17
|
+
const { safeFetch } = require('../server/utils/safe-fetch');
|
|
18
|
+
|
|
19
|
+
function sanitizeDomain(raw) {
|
|
20
|
+
return String(raw || '')
|
|
21
|
+
.trim()
|
|
22
|
+
.toLowerCase()
|
|
23
|
+
.replace(/^https?:\/\//, '')
|
|
24
|
+
.replace(/\/.*$/, '')
|
|
25
|
+
.replace(/:\d+$/, '')
|
|
26
|
+
.replace(/^www\./, '');
|
|
27
|
+
}
|
|
28
|
+
|
|
29
|
+
function parseEndpoint(record) {
|
|
30
|
+
if (!record || !record.parsed) return null;
|
|
31
|
+
return record.parsed.endpoint || null;
|
|
32
|
+
}
|
|
33
|
+
|
|
34
|
+
function logStep(ok, label, detail) {
|
|
35
|
+
const icon = ok ? 'OK' : 'NO';
|
|
36
|
+
const extra = detail ? ` - ${detail}` : '';
|
|
37
|
+
console.log(`[${icon}] ${label}${extra}`);
|
|
38
|
+
}
|
|
39
|
+
|
|
40
|
+
async function runDomain(domain) {
|
|
41
|
+
console.log('\n=== ' + domain + ' ===');
|
|
42
|
+
|
|
43
|
+
const result = {
|
|
44
|
+
domain,
|
|
45
|
+
dns: null,
|
|
46
|
+
endpoint: null,
|
|
47
|
+
wabJson: null,
|
|
48
|
+
discover: null,
|
|
49
|
+
ping: null,
|
|
50
|
+
ok: false,
|
|
51
|
+
};
|
|
52
|
+
|
|
53
|
+
const proof = await verify(domain, { timeoutMs: 6000 }).catch((err) => ({
|
|
54
|
+
ok: false,
|
|
55
|
+
records: [{ type: '_wab', error: err.message }],
|
|
56
|
+
}));
|
|
57
|
+
|
|
58
|
+
const wabRecord = (proof.records || []).find((r) => r.type === '_wab') || null;
|
|
59
|
+
result.dns = wabRecord;
|
|
60
|
+
logStep(!!(wabRecord && wabRecord.ok), 'DNS discovery', wabRecord && (wabRecord.error || wabRecord.fqdn));
|
|
61
|
+
|
|
62
|
+
const endpoint = parseEndpoint(wabRecord);
|
|
63
|
+
result.endpoint = endpoint;
|
|
64
|
+
if (!endpoint) {
|
|
65
|
+
logStep(false, 'wab.json endpoint', 'missing endpoint= in _wab record');
|
|
66
|
+
return result;
|
|
67
|
+
}
|
|
68
|
+
logStep(true, 'wab.json endpoint', endpoint);
|
|
69
|
+
|
|
70
|
+
const endpointUrl = new URL(endpoint);
|
|
71
|
+
const allowList = [domain, '*.' + domain, endpointUrl.hostname, '*.' + endpointUrl.hostname]
|
|
72
|
+
.filter((v, i, a) => a.indexOf(v) === i);
|
|
73
|
+
|
|
74
|
+
try {
|
|
75
|
+
const wabRes = await safeFetch(endpointUrl.toString(), { headers: { accept: 'application/json' } }, {
|
|
76
|
+
requireHttps: true,
|
|
77
|
+
allowList,
|
|
78
|
+
timeoutMs: 8000,
|
|
79
|
+
maxBytes: 1024 * 1024,
|
|
80
|
+
allowedContentTypes: ['application/json', 'application/ld+json', 'text/plain'],
|
|
81
|
+
});
|
|
82
|
+
const wabJson = await wabRes.json();
|
|
83
|
+
result.wabJson = wabJson;
|
|
84
|
+
logStep(wabRes.ok, 'Fetch wab.json', wabRes.status + ' ' + (wabJson.provider && wabJson.provider.name || 'unknown provider'));
|
|
85
|
+
} catch (err) {
|
|
86
|
+
logStep(false, 'Fetch wab.json', err.message);
|
|
87
|
+
return result;
|
|
88
|
+
}
|
|
89
|
+
|
|
90
|
+
const origin = endpointUrl.origin;
|
|
91
|
+
const discoverUrl = origin + '/api/wab/discover';
|
|
92
|
+
const fallbackDiscoverUrl = origin + '/agent-bridge.json';
|
|
93
|
+
|
|
94
|
+
try {
|
|
95
|
+
const discoverRes = await safeFetch(discoverUrl, { headers: { accept: 'application/json' } }, {
|
|
96
|
+
requireHttps: true,
|
|
97
|
+
allowList,
|
|
98
|
+
timeoutMs: 8000,
|
|
99
|
+
maxBytes: 1024 * 1024,
|
|
100
|
+
allowedContentTypes: ['application/json'],
|
|
101
|
+
});
|
|
102
|
+
if (discoverRes.ok) {
|
|
103
|
+
const discoverJson = await discoverRes.json();
|
|
104
|
+
result.discover = discoverJson;
|
|
105
|
+
logStep(true, 'Agent discover', 'GET /api/wab/discover');
|
|
106
|
+
} else {
|
|
107
|
+
const fallbackRes = await safeFetch(fallbackDiscoverUrl, { headers: { accept: 'application/json' } }, {
|
|
108
|
+
requireHttps: true,
|
|
109
|
+
allowList,
|
|
110
|
+
timeoutMs: 8000,
|
|
111
|
+
maxBytes: 1024 * 1024,
|
|
112
|
+
allowedContentTypes: ['application/json'],
|
|
113
|
+
});
|
|
114
|
+
const fallbackJson = await fallbackRes.json().catch(() => ({}));
|
|
115
|
+
if (fallbackRes.ok) {
|
|
116
|
+
result.discover = fallbackJson;
|
|
117
|
+
logStep(true, 'Agent discover', `fallback /agent-bridge.json (discover HTTP ${discoverRes.status})`);
|
|
118
|
+
} else {
|
|
119
|
+
logStep(false, 'Agent discover', `discover HTTP ${discoverRes.status}; fallback HTTP ${fallbackRes.status}`);
|
|
120
|
+
}
|
|
121
|
+
}
|
|
122
|
+
} catch (err) {
|
|
123
|
+
logStep(false, 'Agent discover', err.message);
|
|
124
|
+
}
|
|
125
|
+
|
|
126
|
+
try {
|
|
127
|
+
const pingRes = await safeFetch(origin + '/api/wab/ping', { headers: { accept: 'application/json' } }, {
|
|
128
|
+
requireHttps: true,
|
|
129
|
+
allowList,
|
|
130
|
+
timeoutMs: 8000,
|
|
131
|
+
maxBytes: 512 * 1024,
|
|
132
|
+
allowedContentTypes: ['application/json'],
|
|
133
|
+
});
|
|
134
|
+
const pingJson = await pingRes.json();
|
|
135
|
+
result.ping = pingJson;
|
|
136
|
+
logStep(pingRes.ok, 'Agent execute', 'GET /api/wab/ping => pong=' + !!(pingJson.result && pingJson.result.pong));
|
|
137
|
+
} catch (err) {
|
|
138
|
+
logStep(false, 'Agent execute', err.message);
|
|
139
|
+
}
|
|
140
|
+
|
|
141
|
+
result.ok = !!(result.dns && result.dns.ok && result.wabJson && result.ping);
|
|
142
|
+
return result;
|
|
143
|
+
}
|
|
144
|
+
|
|
145
|
+
async function main() {
|
|
146
|
+
const domains = process.argv.slice(2).map(sanitizeDomain).filter(Boolean);
|
|
147
|
+
if (domains.length === 0) {
|
|
148
|
+
console.error('Usage: node examples/dns-discovery-agent.js <domain1> [domain2] [...]');
|
|
149
|
+
process.exit(1);
|
|
150
|
+
}
|
|
151
|
+
|
|
152
|
+
const outputs = [];
|
|
153
|
+
for (const domain of domains) {
|
|
154
|
+
outputs.push(await runDomain(domain));
|
|
155
|
+
}
|
|
156
|
+
|
|
157
|
+
const passed = outputs.filter((o) => o.ok).length;
|
|
158
|
+
console.log('\nSummary: ' + passed + '/' + outputs.length + ' domains passed full flow');
|
|
159
|
+
|
|
160
|
+
if (passed !== outputs.length) process.exitCode = 2;
|
|
161
|
+
}
|
|
162
|
+
|
|
163
|
+
main().catch((err) => {
|
|
164
|
+
console.error('Fatal:', err && err.stack || err);
|
|
165
|
+
process.exit(1);
|
|
166
|
+
});
|
package/examples/gcp-dns-wab.js
CHANGED
|
@@ -1,76 +1,76 @@
|
|
|
1
|
-
#!/usr/bin/env node
|
|
2
|
-
/**
|
|
3
|
-
* gcp-dns-wab.js — enable/disable WAB DNS Discovery TXT record on Google Cloud DNS.
|
|
4
|
-
*
|
|
5
|
-
* Usage:
|
|
6
|
-
* node gcp-dns-wab.js enable example.com my-project example-com
|
|
7
|
-
* node gcp-dns-wab.js disable example.com my-project example-com
|
|
8
|
-
* node gcp-dns-wab.js status example.com
|
|
9
|
-
*
|
|
10
|
-
* Auth: uses Application Default Credentials (run `gcloud auth application-default login`)
|
|
11
|
-
* or set GOOGLE_APPLICATION_CREDENTIALS=/path/to/service-account.json
|
|
12
|
-
*
|
|
13
|
-
* Required: @google-cloud/dns
|
|
14
|
-
* npm install @google-cloud/dns
|
|
15
|
-
*/
|
|
16
|
-
|
|
17
|
-
'use strict';
|
|
18
|
-
|
|
19
|
-
const fetch = (() => { try { return require('node-fetch'); } catch { return globalThis.fetch; } })();
|
|
20
|
-
const { DNS } = require('@google-cloud/dns');
|
|
21
|
-
|
|
22
|
-
const [,, action, domain, projectId, zoneName] = process.argv;
|
|
23
|
-
const WAB_BASE = process.env.WAB_BASE_URL || 'https://www.webagentbridge.com';
|
|
24
|
-
const ENDPOINT = process.env.WAB_ENDPOINT || `https://${domain}/.well-known/wab.json`;
|
|
25
|
-
|
|
26
|
-
if (!action || !domain) { console.error('Usage: node gcp-dns-wab.js <enable|disable|status> <domain> [projectId] [zoneName]'); process.exit(1); }
|
|
27
|
-
if (!['enable','disable','status'].includes(action)) { console.error('Action must be: enable | disable | status'); process.exit(1); }
|
|
28
|
-
if (action !== 'status' && (!projectId || !zoneName)) { console.error('projectId and zoneName required for enable/disable'); process.exit(1); }
|
|
29
|
-
|
|
30
|
-
async function getRecordTemplate() {
|
|
31
|
-
const j = await (await fetch(`${WAB_BASE}/api/discovery/provider/record-template?domain=${encodeURIComponent(domain)}&endpoint=${encodeURIComponent(ENDPOINT)}`)).json();
|
|
32
|
-
if (!j.record || !j.record.value) throw new Error('Could not fetch WAB record template');
|
|
33
|
-
const v = j.record.value;
|
|
34
|
-
return v.startsWith('"') ? v : `"${v}"`;
|
|
35
|
-
}
|
|
36
|
-
|
|
37
|
-
async function main() {
|
|
38
|
-
console.log(`[WAB] Action: ${action} | Domain: ${domain}`);
|
|
39
|
-
|
|
40
|
-
if (action === 'status') {
|
|
41
|
-
const j = await (await fetch(`${WAB_BASE}/api/discovery/provider/status?domain=${encodeURIComponent(domain)}`)).json();
|
|
42
|
-
console.log(`[WAB] Status: ${j.status}`);
|
|
43
|
-
console.log(JSON.stringify(j, null, 2));
|
|
44
|
-
return;
|
|
45
|
-
}
|
|
46
|
-
|
|
47
|
-
const dns = new DNS({ projectId });
|
|
48
|
-
const zone = dns.zone(zoneName);
|
|
49
|
-
const fqdn = `_wab.${domain}.`;
|
|
50
|
-
|
|
51
|
-
const [existing] = await zone.getRecords({ type: 'TXT', name: fqdn });
|
|
52
|
-
console.log(`[GCP] Existing _wab TXT records: ${existing.length}`);
|
|
53
|
-
|
|
54
|
-
if (action === 'enable') {
|
|
55
|
-
const txtVal = await getRecordTemplate();
|
|
56
|
-
console.log(`[WAB] TXT value: ${txtVal}`);
|
|
57
|
-
const newRecord = zone.record('txt', { name: fqdn, ttl: 3600, data: txtVal });
|
|
58
|
-
if (existing.length) {
|
|
59
|
-
const [change] = await zone.createChange({ delete: existing, add: newRecord });
|
|
60
|
-
console.log(`[GCP] Replaced (change id=${change.id}, status=${change.metadata.status})`);
|
|
61
|
-
} else {
|
|
62
|
-
const [change] = await zone.createChange({ add: newRecord });
|
|
63
|
-
console.log(`[GCP] Created (change id=${change.id}, status=${change.metadata.status})`);
|
|
64
|
-
}
|
|
65
|
-
console.log('[WAB] WAB Discovery ENABLED.');
|
|
66
|
-
}
|
|
67
|
-
|
|
68
|
-
if (action === 'disable') {
|
|
69
|
-
if (!existing.length) { console.log('[GCP] No _wab record found — already disabled.'); return; }
|
|
70
|
-
const [change] = await zone.createChange({ delete: existing });
|
|
71
|
-
console.log(`[GCP] Deleted (change id=${change.id}, status=${change.metadata.status})`);
|
|
72
|
-
console.log('[WAB] WAB Discovery DISABLED.');
|
|
73
|
-
}
|
|
74
|
-
}
|
|
75
|
-
|
|
76
|
-
main().catch(err => { console.error('[ERROR]', err.message); process.exit(1); });
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
/**
|
|
3
|
+
* gcp-dns-wab.js — enable/disable WAB DNS Discovery TXT record on Google Cloud DNS.
|
|
4
|
+
*
|
|
5
|
+
* Usage:
|
|
6
|
+
* node gcp-dns-wab.js enable example.com my-project example-com
|
|
7
|
+
* node gcp-dns-wab.js disable example.com my-project example-com
|
|
8
|
+
* node gcp-dns-wab.js status example.com
|
|
9
|
+
*
|
|
10
|
+
* Auth: uses Application Default Credentials (run `gcloud auth application-default login`)
|
|
11
|
+
* or set GOOGLE_APPLICATION_CREDENTIALS=/path/to/service-account.json
|
|
12
|
+
*
|
|
13
|
+
* Required: @google-cloud/dns
|
|
14
|
+
* npm install @google-cloud/dns
|
|
15
|
+
*/
|
|
16
|
+
|
|
17
|
+
'use strict';
|
|
18
|
+
|
|
19
|
+
const fetch = (() => { try { return require('node-fetch'); } catch { return globalThis.fetch; } })();
|
|
20
|
+
const { DNS } = require('@google-cloud/dns');
|
|
21
|
+
|
|
22
|
+
const [,, action, domain, projectId, zoneName] = process.argv;
|
|
23
|
+
const WAB_BASE = process.env.WAB_BASE_URL || 'https://www.webagentbridge.com';
|
|
24
|
+
const ENDPOINT = process.env.WAB_ENDPOINT || `https://${domain}/.well-known/wab.json`;
|
|
25
|
+
|
|
26
|
+
if (!action || !domain) { console.error('Usage: node gcp-dns-wab.js <enable|disable|status> <domain> [projectId] [zoneName]'); process.exit(1); }
|
|
27
|
+
if (!['enable','disable','status'].includes(action)) { console.error('Action must be: enable | disable | status'); process.exit(1); }
|
|
28
|
+
if (action !== 'status' && (!projectId || !zoneName)) { console.error('projectId and zoneName required for enable/disable'); process.exit(1); }
|
|
29
|
+
|
|
30
|
+
async function getRecordTemplate() {
|
|
31
|
+
const j = await (await fetch(`${WAB_BASE}/api/discovery/provider/record-template?domain=${encodeURIComponent(domain)}&endpoint=${encodeURIComponent(ENDPOINT)}`)).json();
|
|
32
|
+
if (!j.record || !j.record.value) throw new Error('Could not fetch WAB record template');
|
|
33
|
+
const v = j.record.value;
|
|
34
|
+
return v.startsWith('"') ? v : `"${v}"`;
|
|
35
|
+
}
|
|
36
|
+
|
|
37
|
+
async function main() {
|
|
38
|
+
console.log(`[WAB] Action: ${action} | Domain: ${domain}`);
|
|
39
|
+
|
|
40
|
+
if (action === 'status') {
|
|
41
|
+
const j = await (await fetch(`${WAB_BASE}/api/discovery/provider/status?domain=${encodeURIComponent(domain)}`)).json();
|
|
42
|
+
console.log(`[WAB] Status: ${j.status}`);
|
|
43
|
+
console.log(JSON.stringify(j, null, 2));
|
|
44
|
+
return;
|
|
45
|
+
}
|
|
46
|
+
|
|
47
|
+
const dns = new DNS({ projectId });
|
|
48
|
+
const zone = dns.zone(zoneName);
|
|
49
|
+
const fqdn = `_wab.${domain}.`;
|
|
50
|
+
|
|
51
|
+
const [existing] = await zone.getRecords({ type: 'TXT', name: fqdn });
|
|
52
|
+
console.log(`[GCP] Existing _wab TXT records: ${existing.length}`);
|
|
53
|
+
|
|
54
|
+
if (action === 'enable') {
|
|
55
|
+
const txtVal = await getRecordTemplate();
|
|
56
|
+
console.log(`[WAB] TXT value: ${txtVal}`);
|
|
57
|
+
const newRecord = zone.record('txt', { name: fqdn, ttl: 3600, data: txtVal });
|
|
58
|
+
if (existing.length) {
|
|
59
|
+
const [change] = await zone.createChange({ delete: existing, add: newRecord });
|
|
60
|
+
console.log(`[GCP] Replaced (change id=${change.id}, status=${change.metadata.status})`);
|
|
61
|
+
} else {
|
|
62
|
+
const [change] = await zone.createChange({ add: newRecord });
|
|
63
|
+
console.log(`[GCP] Created (change id=${change.id}, status=${change.metadata.status})`);
|
|
64
|
+
}
|
|
65
|
+
console.log('[WAB] WAB Discovery ENABLED.');
|
|
66
|
+
}
|
|
67
|
+
|
|
68
|
+
if (action === 'disable') {
|
|
69
|
+
if (!existing.length) { console.log('[GCP] No _wab record found — already disabled.'); return; }
|
|
70
|
+
const [change] = await zone.createChange({ delete: existing });
|
|
71
|
+
console.log(`[GCP] Deleted (change id=${change.id}, status=${change.metadata.status})`);
|
|
72
|
+
console.log('[WAB] WAB Discovery DISABLED.');
|
|
73
|
+
}
|
|
74
|
+
}
|
|
75
|
+
|
|
76
|
+
main().catch(err => { console.error('[ERROR]', err.message); process.exit(1); });
|