@weavetab/mcp 2.5.0-beta.4 → 2.5.0

package/dist/plugin/registry.d.ts

@@ -19,7 +19,8 @@ export interface PluginCandidate {
     description?: string;
 }
 export declare const OFFICIAL_PLUGIN_PREFIX = "@weavetab/plugin-";
-export declare const REGISTRY_URL = "https://raw.githubusercontent.com/weavetab/registry/main/verified.json";
+export declare const REGISTRY_URL = "https://weavetab.dev/api/registry/verified.json";
+export declare const REGISTRY_FALLBACK_URL = "https://raw.githubusercontent.com/weavetab/registry/main/verified.json";
 /**
  * Returns the set of verified package names.
  * - Tries local registry/verified.json first (dev/test mode).

package/dist/plugin/registry.js

@@ -18,8 +18,9 @@ const __dirname = dirname(__filename);
 // Verification Registry
 // ---------------------------------------------------------------------------
 export const OFFICIAL_PLUGIN_PREFIX = "@weavetab/plugin-";
-// The production remote URL — points to weavetab/registry on GitHub.
-export const REGISTRY_URL = "https://raw.githubusercontent.com/weavetab/registry/main/verified.json";
+// The production remote URLs — weavetab.dev (D1-backed) primary, GitHub raw fallback.
+export const REGISTRY_URL = "https://weavetab.dev/api/registry/verified.json";
+export const REGISTRY_FALLBACK_URL = "https://raw.githubusercontent.com/weavetab/registry/main/verified.json";
 // Local override: when this file exists at the root of the repo, we use it instead
 // of the remote URL. This allows full offline/local testing.
 const LOCAL_REGISTRY_PATH = join(__dirname, "..", "..", "..", "registry", "verified.json");
@@ -59,16 +60,24 @@ function loadLocalRegistry() {
     return null;
 }
 async function fetchRemoteRegistry() {
-    const res = await fetch(REGISTRY_URL, {
-        signal: AbortSignal.timeout(5000),
-        headers: { "User-Agent": "Weavetab-Registry-Check/1.0" },
-    });
-    if (!res.ok)
-        throw new Error(`registry fetch failed: ${res.status}`);
-    const data = await res.json();
-    if (!Array.isArray(data.verified))
-        throw new Error("invalid registry format");
-    return extractPackageNames(data.verified);
+    for (const url of [REGISTRY_URL, REGISTRY_FALLBACK_URL]) {
+        try {
+            const res = await fetch(url, {
+                signal: AbortSignal.timeout(5000),
+                headers: { "User-Agent": "Weavetab-Registry-Check/1.0" },
+            });
+            if (!res.ok)
+                continue;
+            const data = await res.json();
+            if (!Array.isArray(data.verified))
+                continue;
+            return extractPackageNames(data.verified);
+        }
+        catch {
+            continue;
+        }
+    }
+    throw new Error("registry fetch failed: all sources unreachable");
 }
 /**
  * Returns the set of verified package names.

package/dist/security/secrets.d.ts

@@ -18,6 +18,12 @@ export interface SecretListEntry {
     updatedAt: string;
 }
 export declare const GLOBAL_SECRETS_PATH: string;
+export declare const PROJECT_SECRETS_DIRNAME = ".weavetab";
+export declare const PROJECT_SECRETS_FILENAME = "secrets.json";
+/** Absolute path of the project-scoped secrets file for a directory (default: cwd). */
+export declare function getProjectSecretsPath(cwd?: string): string;
+/** Creates an empty project-scoped secrets file (chmod 600). Returns its path. */
+export declare function initProjectSecrets(cwd?: string): string;
 declare class JsonSecretStoreImpl implements SecretProvider {
     /**
      * Resolve a secret value by key.

package/dist/security/secrets.js

@@ -86,7 +86,31 @@ function decrypt(ciphertext) {
 import { GLOBAL_CONFIG_DIR } from "../config/loader.js";
 // ─── Path resolution ──────────────────────────────────────────────────────────
 export const GLOBAL_SECRETS_PATH = path.join(GLOBAL_CONFIG_DIR, "secrets.json");
+export const PROJECT_SECRETS_DIRNAME = ".weavetab";
+export const PROJECT_SECRETS_FILENAME = "secrets.json";
+/** Absolute path of the project-scoped secrets file for a directory (default: cwd). */
+export function getProjectSecretsPath(cwd = process.cwd()) {
+    return path.join(cwd, PROJECT_SECRETS_DIRNAME, PROJECT_SECRETS_FILENAME);
+}
+/** Creates an empty project-scoped secrets file (chmod 600). Returns its path. */
+export function initProjectSecrets(cwd = process.cwd()) {
+    const filePath = getProjectSecretsPath(cwd);
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+    if (!fs.existsSync(filePath)) {
+        fs.writeFileSync(filePath, JSON.stringify({ version: 1, secrets: {} }, null, 2), { mode: 0o600 });
+    }
+    return filePath;
+}
 function resolveSecretsPath() {
+    // Project-scoped file wins when present — lets a checkout carry its own keys.
+    try {
+        const projectPath = getProjectSecretsPath();
+        if (fs.existsSync(projectPath))
+            return projectPath;
+    }
+    catch {
+        // fall through to global
+    }
     return GLOBAL_SECRETS_PATH;
 }
 // ─── Permission guard ─────────────────────────────────────────────────────────

package/dist/server.d.ts

@@ -1,6 +1,6 @@
 /**
  * Weavetab — server.ts
- * MCP server: 44 browser automation tools with security, rate limiting, and visual overlay.
+ * MCP server: 42 browser automation tools with security, rate limiting, and visual overlay.
  * Weavetab by fy2ne
  */
 import type { Config } from "./config/loader.js";

package/dist/server.js

@@ -1,6 +1,6 @@
 /**
  * Weavetab — server.ts
- * MCP server: 44 browser automation tools with security, rate limiting, and visual overlay.
+ * MCP server: 42 browser automation tools with security, rate limiting, and visual overlay.
  * Weavetab by fy2ne
  */
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
@@ -53,7 +53,7 @@ import { browserCheckpoint } from "./tools/checkpoint.js";
 import { getActiveEngine } from "./cdp/connector.js";
 import { resetLoopCounter } from "./intelligence/trail.js";
 import { getSiteProfile, learnPattern, recordPatternExecution, recordQuirk, getPatternReliability, formatSiteProfileHint } from "./intelligence/patternCompiler.js";
-import { discoverPlugins, listInstalledPlugins, loadPluginByName } from "./plugin/loader.js";
+import { discoverPlugins } from "./plugin/loader.js";
 import { hookPipeline } from "./plugin/pipeline.js";
 import { agentAction } from "./sensors/pacing.js";
 import { getCachedConfig, getElectronApps } from "./config/loader.js";
@@ -1701,22 +1701,32 @@ DO NOT use browser_scrape or browser_map for binary documents — they cannot re
         }
         // 1. Tool Removals (disable built-in tools)
         const manifestPerms = plugin.manifest?.permissions;
-        const manifestToolsRemove = Array.isArray(manifestPerms)
+        const declaredRemove = Array.isArray(manifestPerms)
             ? []
             : manifestPerms?.tools?.remove || [];
         const toRemove = [
             ...(plugin.removeTools || []),
-            ...manifestToolsRemove,
         ];
         for (const toolName of toRemove) {
+            if (!declaredRemove.includes(toolName)) {
+                process.stderr.write(`  \x1b[33m[!] Plugin ${plugin.name} tried to remove "${toolName}" but it's not listed in permissions.tools.remove — skipped.\x1b[0m\n`);
+                continue;
+            }
             if (server._registeredTools?.[toolName]) {
                 delete server._registeredTools[toolName];
                 removedNames.push(toolName);
             }
         }
         // 2. Tool Overrides (replace or wrap built-in tools)
+        const declaredOverride = Array.isArray(manifestPerms)
+            ? []
+            : manifestPerms?.tools?.override || [];
         const overrides = plugin.overrides || [];
         for (const ov of overrides) {
+            if (!declaredOverride.includes(ov.name)) {
+                process.stderr.write(`  \x1b[33m[!] Plugin ${plugin.name} tried to override "${ov.name}" but it's not listed in permissions.tools.override — skipped.\x1b[0m\n`);
+                continue;
+            }
             const existingTool = server._registeredTools?.[ov.name];
             const existingDesc = existingTool?.description || "";
             const existingSchema = existingTool?.parameters?.shape || {};
@@ -1745,8 +1755,13 @@ DO NOT use browser_scrape or browser_map for binary documents — they cannot re
             overriddenNames.push(ov.name);
         }
         // 3. Tool Additions (new tools)
+        const canAdd = !Array.isArray(manifestPerms) && manifestPerms?.tools?.add === true;
         const newTools = plugin.tools || [];
         for (const td of newTools) {
+            if (!canAdd) {
+                process.stderr.write(`  \x1b[33m[!] Plugin ${plugin.name} tried to add tool "${td.name}" but permissions.tools.add is not declared — skipped.\x1b[0m\n`);
+                continue;
+            }
             if (server._registeredTools?.[td.name]) {
                 process.stderr.write(`  \x1b[33m[!] Plugin ${plugin.name} registered tool "${td.name}" which replaced an existing tool.\x1b[0m\n`);
                 delete server._registeredTools[td.name];
@@ -1768,6 +1783,10 @@ DO NOT use browser_scrape or browser_map for binary documents — they cannot re
         const fullPluginCtx = plugin._context;
         if (fullPluginCtx && fullPluginCtx.mcp) {
             fullPluginCtx.mcp.registerTool = (tool) => {
+                if (!canAdd) {
+                    process.stderr.write(`  \x1b[33m[!] Plugin ${plugin.name} dynamic registerTool("${tool?.name}"): permissions.tools.add not declared — skipped.\x1b[0m\n`);
+                    return;
+                }
                 if (server._registeredTools?.[tool.name]) {
                     process.stderr.write(`  \x1b[33m[!] Plugin ${plugin.name} dynamic tool "${tool.name}" replaced an existing tool.\x1b[0m\n`);
                     delete server._registeredTools[tool.name];
@@ -1780,6 +1799,10 @@ DO NOT use browser_scrape or browser_map for binary documents — they cannot re
                 });
             };
             fullPluginCtx.mcp.overrideTool = (toolName, overrideHandler) => {
+                if (!declaredOverride.includes(toolName)) {
+                    process.stderr.write(`  \x1b[33m[!] Plugin ${plugin.name} dynamic overrideTool("${toolName}"): not in permissions.tools.override — skipped.\x1b[0m\n`);
+                    return;
+                }
                 const existingTool = server._registeredTools?.[toolName];
                 if (existingTool) {
                     delete server._registeredTools[toolName];
@@ -1799,11 +1822,19 @@ DO NOT use browser_scrape or browser_map for binary documents — they cannot re
                 });
             };
             fullPluginCtx.mcp.removeTool = (toolName) => {
+                if (!declaredRemove.includes(toolName)) {
+                    process.stderr.write(`  \x1b[33m[!] Plugin ${plugin.name} dynamic removeTool("${toolName}"): not in permissions.tools.remove — skipped.\x1b[0m\n`);
+                    return;
+                }
                 if (server._registeredTools?.[toolName]) {
                     delete server._registeredTools[toolName];
                 }
             };
             fullPluginCtx.mcp.unregisterTool = (toolName) => {
+                if (!declaredRemove.includes(toolName)) {
+                    process.stderr.write(`  \x1b[33m[!] Plugin ${plugin.name} dynamic unregisterTool("${toolName}"): not in permissions.tools.remove — skipped.\x1b[0m\n`);
+                    return;
+                }
                 if (server._registeredTools?.[toolName]) {
                     delete server._registeredTools[toolName];
                 }
@@ -1830,38 +1861,10 @@ DO NOT use browser_scrape or browser_map for binary documents — they cannot re
             // Ignore if client doesn't support it or not connected yet
         }
     };
-    // Add the built-in ecosystem tools
-    server.tool("list_plugins", "List all available Weavetab plugins that can be loaded.", {}, async () => {
-        const installed = listInstalledPlugins();
-        const available = installed
-            .filter(info => !loadedPluginNames.has(info.packageName))
-            .map(info => `- ${info.packageName}: ${info.manifest?.description || "No description"}`);
-        if (available.length === 0) {
-            return { content: [{ type: "text", text: "No un-loaded plugins available." }] };
-        }
-        return { content: [{ type: "text", text: `Available plugins:\n${available.join("\n")}\n\nUse load_plugin with the plugin package name to load one.` }] };
-    });
-    server.tool("load_plugin", "Load any Weavetab plugin dynamically by npm package name (e.g. '@fy2ne/wt-youtube', 'my-plugin').", {
-        name: z.string().describe("The exact npm package name of the plugin to load (e.g. '@fy2ne/wt-youtube', 'my-plugin')")
-    }, async ({ name }) => {
-        if (loadedPluginNames.has(name)) {
-            return { content: [{ type: "text", text: `Plugin ${name} is already loaded.` }] };
-        }
-        const plugin = loadPluginByName(name);
-        if (!plugin) {
-            return { content: [{ type: "text", text: `Plugin "${name}" not found. Make sure it is installed via "weavetab plugin add ${name}".` }] };
-        }
-        await registerPluginTools(plugin);
-        const toolsList = (plugin.tools || []).map((t) => t.name).join(", ");
-        return { content: [{ type: "text", text: `loaded plugin ${name}. Tools registered: ${toolsList || "(dynamic tools registered)"}` }] };
-    });
-    // Auto-load plugins by default unless explicitly marked with lazy: true
+    // Auto-load all installed plugins at startup
     const allPlugins = discoverPlugins();
     for (const plugin of allPlugins) {
-        const isExplicitlyLazy = plugin.manifest?.lazy === true;
-        if (!isExplicitlyLazy) {
-            await registerPluginTools(plugin);
-        }
+        await registerPluginTools(plugin);
     }
     let transport;
     if (transportMode === "ws") {

package/dist/tools/browser_detect.js

@@ -10,7 +10,7 @@ const ENGINE_COVERAGE = {
             "browser_network_intercept",
             "browser_viewport",
             "browser_recording",
-            "browser_thought",
+            "browser_thoughts",
             "browser_highlight",
             "browser_inspect",
             "browser_snapshot",
@@ -24,7 +24,7 @@ const ENGINE_COVERAGE = {
             "browser_network_intercept",
             "browser_viewport",
             "browser_recording",
-            "browser_thought",
+            "browser_thoughts",
             "browser_highlight",
             "browser_inspect",
             "browser_snapshot",

package/dist/tools/captcha.js

@@ -111,7 +111,7 @@ export async function browserCaptcha(session, args, _config) {
                         user_instructions: solution.userInstructions,
                         next_action: isVisionAssisted
                             ? "Take a screenshot to view the CAPTCHA, then use browser_click or browser_type to solve it yourself. Do not ask the user for help."
-                            : `Call browser_thought({ action: "question", message: "${solution.userInstructions}" }) to ask the user to complete it, then call browser_captcha({ action: "wait_for_user" }).`,
+                            : `Call browser_thoughts({ action: "question", message: "${solution.userInstructions}" }) to ask the user to complete it, then call browser_captcha({ action: "wait_for_user" }).`,
                         execution_ms: Date.now() - t0,
                     };
                 }

package/dist/tools/navigate.d.ts

@@ -1,5 +1,5 @@
 /**
- * Weavetab — tools/navigate.ts
+ * Weavetab — tools/navigate.ts
  * URL navigation with domain blocklist enforcement and post-navigation DOM stability wait.
  * Weavetab by fy2ne
  */

package/dist/tools/navigate.js

@@ -1,5 +1,5 @@
 /**
- * Weavetab — tools/navigate.ts
+ * Weavetab — tools/navigate.ts
  * URL navigation with domain blocklist enforcement and post-navigation DOM stability wait.
  * Weavetab by fy2ne
  */
@@ -71,10 +71,10 @@ export async function weaveNavigate(session, url, config, targetId = "default",
         }
     }
     // Extension pages: open in new tab instead of navigating current tab
-    // (chrome-extension:// pages use a different process context — Page.navigate
+    // (chrome-extension:// pages use a different process context — Page.navigate
     //  can break the CDP session or not fire loadEventFired properly)
     if (parsed.protocol === 'chrome-extension:') {
-        logDebug(`[weaveNavigate] Extension URL detected — opening in new tab: ${parsed.href}`);
+        logDebug(`[weaveNavigate] Extension URL detected — opening in new tab: ${parsed.href}`);
         const { sendToExtension } = await import("../cdp/helpers.js");
         await sendToExtension(session, { type: 'Weavetab_STATE', hud: { action: `opening extension page...` } });
         const { WeavetabOpen } = await import("./tabs.js");
@@ -98,7 +98,7 @@ export async function weaveNavigate(session, url, config, targetId = "default",
             }
         }
         catch { /* overlay install is best-effort */ }
-        logAction("browser_go", url, `opened extension tab ${openRes.tabId}`);
+        logAction("browser_navigate", url, `opened extension tab ${openRes.tabId}`);
         return {
             success: true,
             url: openRes.url,
@@ -194,7 +194,7 @@ export async function weaveNavigate(session, url, config, targetId = "default",
     if (active)
         active.url = finalUrl;
     sendToExtension(session, { type: 'Weavetab_STATE', cursor: { x: 10, y: 10 }, state: 'idle', hud: { action: '' } }).catch(() => { });
-    logAction("browser_go", url, `arrived at ${title}`);
+    logAction("browser_navigate", url, `arrived at ${title}`);
     // Bump the visit counter for this domain exactly once per navigation
     bumpVisitCount(parsed.hostname).catch(() => { });
     return { success: true, url: finalUrl, title, tab_id: resolvedTargetId };

package/dist/tools/tabs.js

@@ -17,7 +17,7 @@ function resolvePort(_config, appName) {
     }
     const port = getPort() || readLock()?.port;
     if (!port)
-        throw new Error("[!] No active browser session. Run browser_go first.");
+        throw new Error("[!] No active browser session. Run browser_navigate first.");
     return port;
 }
 const IDLE_THRESHOLD_MS = 30_000;

package/dist/version.d.ts

@@ -2,4 +2,4 @@
  * Weavetab Version Constant
  * Single source of truth for runtime versioning.
  */
-export declare const WEAVETAB_VERSION = "2.5.0-beta.4";
+export declare const WEAVETAB_VERSION = "2.5.0";

package/dist/version.js

@@ -2,4 +2,4 @@
  * Weavetab Version Constant
  * Single source of truth for runtime versioning.
  */
-export const WEAVETAB_VERSION = "2.5.0-beta.4";
+export const WEAVETAB_VERSION = "2.5.0";

package/docs/DOCUMENTATION.md

@@ -65,7 +65,7 @@ MCP Client → stdio/WebSocket → WithSecurity Pipeline → CDP WebSocket → C
 
 All tools share: Zod schema validation, `withSecurity()` pipeline (rate limiting + domain policy + RBAC), structured audit logging.
 
-### Vision & Reading (7 tools)
+### Vision & Reading (8 tools)
 
 | Tool | Description |
 |------|-------------|
@@ -76,6 +76,7 @@ All tools share: Zod schema validation, `withSecurity()` pipeline (rate limiting
 | `browser_snapshot` | MHTML capture/restore of DOM state + resources |
 | `browser_screenshot` | PNG/JPEG capture via CDP, full-page + clip region, returns base64 data URL (no file pollution) |
 | `browser_console` | Read/clear buffered console logs and exceptions |
+| `browser_extract_design` | Extract design tokens, typography, colors, and clean CSS with pixel fidelity |
 
 ### Navigation (1 tool)
 
@@ -116,14 +117,15 @@ All tools share: Zod schema validation, `withSecurity()` pipeline (rate limiting
 | Tool | Description |
 |------|-------------|
 | `browser_dialog` | Accept/dismiss JavaScript alert/confirm/prompt dialogs |
-| `browser_thought` | Green thought bubbles: feedback (one-way) or question with input (sentence/paragraph modes) |
+| `browser_thoughts` | Green thought bubbles: feedback (one-way) or question with input (sentence/paragraph modes) |
 | `browser_clipboard` | System clipboard R/W (text + images) |
 
-### Wait & Timing (1 tool)
+### Wait & Timing (2 tools)
 
 | Tool | Description |
 |------|-------------|
 | `browser_wait` | Wait for element/text/URL/stable/network/auto — timeout configurable, optional loop counter reset (`reset_loop: true`) |
+| `browser_captcha` | Autonomous zero-API detection and solving for Cloudflare Turnstile, reCAPTCHA v2/v3, GeeTest, and hCaptcha via CDP mouse physics |
 
 ### Storage & Cookies (2 tools)
 
@@ -132,11 +134,12 @@ All tools share: Zod schema validation, `withSecurity()` pipeline (rate limiting
 | `browser_storage` | localStorage & sessionStorage get/set/clear |
 | `browser_cookies` | Cookies get/set/delete |
 
-### Device & Environment (1 tool)
+### Device & Environment (2 tools)
 
 | Tool | Description |
 |------|-------------|
 | `browser_viewport` | Viewport, device emulation, geolocation, timezone override |
+| `browser_emulate` | Network throttling (3G/4G/offline), CPU slowdown, geolocation, timezone, and User-Agent override |
 
 ### Network (1 tool)
 
@@ -176,12 +179,15 @@ All tools share: Zod schema validation, `withSecurity()` pipeline (rate limiting
 |------|-------------|
 | `browser_github` | Action-based repo metadata analysis, raw source file reading, issue triage, and PR inspection |
 
-### Utility (2 tools)
+### Utility (5 tools)
 
 | Tool | Description |
 |------|-------------|
-| `browser_thoughts` | Ask user a question or show a green sticky feedback |
-| Plugins | Dynamic loading from any npm package with `weavetab.json` (or `@weavetab/plugin-*`) |
+| `list_plugins` | Inspect installed SDK plugins, loaded tool overrides, and capability manifests |
+| `load_plugin` | Dynamically load a Weavetab plugin by npm package name with isolated sandboxing |
+| `browser_checkpoint` | Snapshot and restore browser state (cookies, storage, scroll/URL) into named checkpoints for time-travel and rollback |
+| `browser_pattern_learn` | Read, register, and update named workflow patterns and site quirks per origin |
+| `browser_office` | Parse Word (`.docx`), Excel (`.xlsx`), PDF, and CSV files into structured data |
 
 ---
 
@@ -341,10 +347,11 @@ Configure policies directly in your config file (or via `~/.Weavetab/policy.json
 
 | Role | Permissions |
 |------|-------------|
-| `admin` | Full access to all tools and system operations |
-| `operator` | Full tool access except system operations (logs, detect, performance) |
-| `viewer` | Read-only access to observation tools only |
-| `automation` | Restricted to burst/plan/wait/map for automated workflows |
+| `admin` | Full access to all tools |
+| `operator` | Full access to all tools (standard agent role) |
+| `viewer` | Read-only observation tools only (`browser_map`, `browser_find`, `browser_scrape`, `browser_console`, `browser_eval`, `browser_inspect`, `browser_extract_design`, `browser_snapshot`, `browser_screenshot`, `browser_pdf`, `browser_cookies`, `browser_tabs`, `browser_wait`, `browser_pattern_learn`, `browser_github`) |
+| `automation` | Full access except `browser_thoughts` (non-interactive CI/CD mode) |
+| `system` | Internal tools only (`browser_thoughts`, `browser_detect`, `browser_performance`, `browser_checkpoint`, `browser_pattern_learn`) |
 
 ### Setting Role
 

package/docs/PLUGINS.md

@@ -1,6 +1,6 @@
-# Weavetab Plugin System & SDK Specification
+# Weavetab Plugin System & SDK Specification
 
-> **Version:** 2.5.0-beta.2 | **SDK:** @weavetab/sdk | **License:** AGPL-3.0-only
+> **Version:** 2.5.0 | **SDK:** @weavetab/sdk (MIT) | **Runtime:** AGPL-3.0-only
 
 The **Weavetab Plugin System** allows developers to extend the MCP runtime with custom tools, visual HUD overlays, thought bubbles, lifecycle hooks, and tool overrides.
 
@@ -9,14 +9,14 @@ The **Weavetab Plugin System** allows developers to extend the MCP runtime with
 ## 1. Quick Start
 
 ### Scaffold a New Plugin
-`ash
+````bash
 npx @weavetab/sdk init my-custom-plugin
 cd my-custom-plugin
 npm install
 `
 
 ### Build & Compile
-`ash
+````bash
 npm run build
 `
 
@@ -104,7 +104,7 @@ Plugins require a weavetab.json manifest in their package root:
 
 ## 5. Installing Plugins
 
-`ash
+```bash
 # Install an official plugin
 weavetab plugin add @weavetab/plugin-youtube