@weavetab/mcp 2.5.0 → 2.5.1

package/mcp.json

@@ -1,805 +1,796 @@
-{
-  "name": "@weavetab/mcp",
-  "mcpName": "dev.weavetab/mcp",
-  "version": "2.5.0",
-  "description": "The open automation engine for AI agents. Control live browsers and desktop apps locally with instant execution.",
-  "icon": "icon.png",
-  "author": "fy2ne",
-  "license": "AGPL-3.0-only",
-  "homepage": "https://github.com/weavetab/mcp",
-  "repository": "https://github.com/weavetab/mcp",
-  "keywords": [
-    "weavetab",
-    "mcp",
-    "model context protocol",
-    "browser automation",
-    "electron automation",
-    "desktop automation",
-    "chrome devtools protocol",
-    "cdp",
-    "ai agent",
-    "claude mcp",
-    "cursor mcp",
-    "autonomous agent",
-    "browser control",
-    "tab management",
-    "web automation"
-  ],
-  "runtime": {
-    "command": "node",
-    "args": [
-      "dist/index.js"
-    ],
-    "env": {
-      "NODE_ENV": "production"
-    }
-  },
-  "capabilities": {
-    "tools": {
-      "browser_map": {
-        "category": "vision",
-        "description": "Snapshot interactive DOM with stable ref IDs (w:NN). For complex SPAs, use scope or query to constrain tokens. Supports delta temporal diffing (up to 97% token reduction), semantic pruning (dropping hidden elements), Set-of-Marks visual grounding (visual: true / \"auto\" for canvas/WebGL pages), AX tree fallback (Shadow DOM traversal), scope filtering, query filtering, and forced rebuilds with automatic loop strike reset (force: true).",
-        "features": [
-          "Semantic DOM pruning (up to 97% token reduction with delta)",
-          "Set-of-Marks visual grounding (visual: true / \"auto\")",
-          "Per-tab snapshot temporal diffing (delta mode)",
-          "Shadow DOM / AX tree fallback parsing",
-          "Scope and query filtering for complex SPAs",
-          "Framework auto-detection injection",
-          "Loop strike counter reset on forced re-mapping (force: true)"
-        ]
-      },
-      "browser_navigate": {
-        "category": "navigation",
-        "description": "Navigate to a URL. Enforces domain security policies and rate limits prior to navigation. Waits for network idle and DOM readiness. Supports internal protocol schemes (e.g. weavetab://).",
-        "features": [
-          "Domain policy engine and blocklist enforcement",
-          "Deterministic DOM stability and network idle waiting",
-          "weavetab:// internal protocol support",
-          "Targeted tab navigation via tab_id"
-        ]
-      },
-      "browser_click": {
-        "category": "input",
-        "description": "Click a DOM element. Physical click engine incorporating Bézier curve trajectory kinematics (Ghost Cursor). Multi-stage targeting fallback: mark number (SoM visual grounding) -> ref ID -> selector -> label -> intent -> coordinates -> backendNodeId.",
-        "features": [
-          "Direct mark number targeting (mark: N) from visual mode",
-          "Bézier curve trajectory kinematics",
-          "Humanized acceleration and velocity curves",
-          "Multi-stage fallback targeting resolution",
-          "Intent-based historical strategy resolution",
-          "Single-call post-click page map retrieval (include_map)",
-          "Shadow DOM element targeting"
-        ]
-      },
-      "browser_type": {
-        "category": "input",
-        "description": "Type text into a single input field. Keystroke dispatch engine with per-character temporal jitter and burst profiling. Real-time DOM-diffing monitors stuck input state. Supports atomic clearFirst and clipboard paste modes.",
-        "features": [
-          "Per-character temporal jitter simulation",
-          "Burst keystroke profiling",
-          "Stuck-typing loop detection via DOM diffing",
-          "Atomic input value resetting (clearFirst)",
-          "Clipboard paste injection for long text"
-        ]
-      },
-      "browser_type_secret": {
-        "category": "input",
-        "description": "Inject a secret from an environment variable / secrets.json. Blind Injection: securely injects credentials without exposing sensitive values to the LLM context. Permanently masked as [REDACTED] in DOM maps and logs.",
-        "features": [
-          "Zero LLM context exposure for credentials",
-          "Domain-scoped authorization checks",
-          "Shadow DOM input isolation",
-          "Permanent [REDACTED] masking across logs and snapshots"
-        ]
-      },
-      "browser_key": {
-        "category": "input",
-        "description": "Press a keyboard key. Dispatches native hardware key events with modifier key support (Ctrl, Shift, Alt, Meta) to focused elements.",
-        "features": [
-          "Native key code and key identifier mapping",
-          "Modifier key combination handling",
-          "Per-tab keyboard focus targeting"
-        ]
-      },
-      "browser_scroll": {
-        "category": "input",
-        "description": "Scroll the page or targeted element. Smooth scrolling engine via CDP Input.dispatchMouseEvent wheel events. Supports directional delta scrolling and element-relative scroll centering.",
-        "features": [
-          "Directional scrolling (up, down, left, right)",
-          "Configurable pixel scroll distance",
-          "Element-relative scroll targeting via ref ID or label"
-        ]
-      },
-      "browser_dialog": {
-        "category": "dialog_and_interaction",
-        "description": "Accept or dismiss JS dialogs (alert, confirm, prompt) via CDP Page.handleJavaScriptDialog.",
-        "features": [
-          "Handling of alert, confirm, and prompt modal types",
-          "Accept and dismiss actions",
-          "Prompt response text payload submission"
-        ]
-      },
-      "browser_burst": {
-        "category": "mission_execution",
-        "description": "HIGH-SPEED MULTI-ACTION PIPELINE: Executes 2 or more sequential browser actions in a single round-trip without waiting for LLM turns between steps. PREFER THIS over individual single-action calls to slash latency and token burn. Supports native primitives (browser_click, browser_fill, browser_type, browser_type_secret, browser_navigate, browser_key, browser_scroll, browser_wait, browser_map) plus compound macros (type_and_send, click_and_wait, navigate_and_read, scroll_and_read, fill_form). If compile_from_history: true is passed, automatically compiles and executes recent successful session trail actions into a burst macro.",
-        "features": [
-          "Single-request multi-action pipeline execution with zero intermediate LLM round-trips",
-          "Compound macro abstractions (type_and_send, click_and_wait, navigate_and_read, scroll_and_read, fill_form, drag_and_drop, hover_and_read)",
-          "Automatic session history compilation into replayable burst macros (compile_from_history: true)",
-          "Fail-fast execution guard (stop_on_error: true) to prevent cascading errors",
-          "Automatic loop counter reset on execution start"
-        ]
-      },
-      "browser_tabs": {
-        "category": "tabs",
-        "description": "Manage browser and Electron app tabs/windows (open, switch, close, list). Specify 'app' when targeting desktop apps (e.g. app: 'discord') to avoid opening web browser.",
-        "features": [
-          "Single and batch tab operations",
-          "Duplicate tab consolidation",
-          "Crash session recovery (heal)",
-          "Background tab targeting",
-          "URL tab reuse prevention"
-        ]
-      },
-      "browser_wait": {
-        "category": "navigation",
-        "description": "Pause until a condition is met ('element', 'text', 'url', 'stable', 'network', 'auto'). Deterministic wait engine for asynchronous web state synchronization.",
-        "features": [
-          "Element, text, URL, DOM stability, and network idle conditions",
-          "Configurable timeout thresholds",
-          "Per-tab asynchronous execution target",
-          "Heuristic auto-condition resolution"
-        ]
-      },
-      "browser_captcha": {
-        "category": "safety",
-        "description": "Autonomous zero-API detection and solving of Turnstile, reCAPTCHA, GeeTest, and hCaptcha bot challenges using local CDP behavioral solvers.",
-        "features": [
-          "Zero-API autonomous solving",
-          "Cloudflare Turnstile, reCAPTCHA v2/v3, GeeTest, and hCaptcha support",
-          "Human oversight fallback via wait_for_user"
-        ]
-      },
-      "browser_thoughts": {
-        "category": "dialog_and_interaction",
-        "description": "Agent-to-user communication layer rendered in the middle down of the page. Supports question mode (interactive prompt with answer submission) and feedback mode (status, observation, decision, or warning update). Supports contextual element anchoring (anchor: 'w:NN') and visual styles ('observation', 'decision', 'warning', 'question').",
-        "features": [
-          "Middle-down floating card HUD with precision dark styling",
-          "Contextual element anchoring (anchor: 'w:NN') with auto-highlighting",
-          "Feedback mode (observation, decision, warning updates)",
-          "Question mode (interactive user response directly on page)",
-          "Configurable auto-fade and response timeout"
-        ]
-      },
-      "browser_pointer": {
-        "category": "input",
-        "description": "Advanced pointer control (hover, click, double_click, drag_and_drop) with Bézier curve kinematics. Supports waitForChild pattern for dynamic flyout menus.",
-        "features": [
-          "Hover, click, double_click, and drag_and_drop actions",
-          "Bézier curve cursor motion",
-          "waitForChild trigger menu resolution",
-          "Configurable hold duration (holdMs)"
-        ]
-      },
-      "browser_select": {
-        "category": "input",
-        "description": "Select an option from a native dropdown by visible text or value. Uses native property setters and dispatches input/change events for framework compatibility (React, Vue, Angular).",
-        "features": [
-          "Option matching by visible text or value",
-          "Framework-safe prototype property setter invocation",
-          "Synthetic input and change event dispatch"
-        ]
-      },
-      "browser_fill": {
-        "category": "input",
-        "description": "Smart multi-field form-filling. Evaluates field control types (text, select, checkbox, radio, contenteditable) and processes inputs sequentially with atomic verification.",
-        "features": [
-          "Multi-field batch input execution",
-          "Automatic control type classification",
-          "Per-field post-input verification",
-          "Optional form submission click step"
-        ]
-      },
-      "browser_highlight": {
-        "category": "canvas_and_visual",
-        "description": "Highlight elements on page. Renders temporary visual overlays over target elements without DOM tree mutations. Supports multi-element consideration overlays (refs: ['w:12', 'w:15']), presentation styles ('consideration', 'target', 'danger', 'success', 'shimmer'), floating badges, and configurable durations.",
-        "features": [
-          "Multi-candidate consideration overlay (refs array)",
-          "Five visual styles: consideration, target lock, danger, success, shimmer",
-          "Floating label badge display above highlighted elements",
-          "Configurable duration and color override",
-          "Targeting via ref IDs (w:NN), CSS selectors, or CDP backendNodeId"
-        ]
-      },
-      "browser_upload": {
-        "category": "input",
-        "description": "Upload files to a file input. Bypasses OS native file pickers via CDP DOM.setFileInputFiles directly targeting file input node IDs using absolute file paths.",
-        "features": [
-          "Direct CDP file payload injection",
-          "Multi-file payload support",
-          "Zero OS file picker interaction required"
-        ]
-      },
-      "browser_find": {
-        "category": "vision",
-        "description": "Sub-5ms CDP text search. Zero token waste. Best for locating specific keywords/text on page without a full DOM walk.",
-        "features": [
-          "Native CDP search (zero DOM walk overhead)",
-          "Sub-5ms execution latency",
-          "Exact keyword matching and match indexing"
-        ]
-      },
-      "browser_storage": {
-        "category": "storage_and_cookies",
-        "description": "Manage localStorage and sessionStorage. Reads, writes, and clears key-value pairs for the active origin.",
-        "features": [
-          "localStorage and sessionStorage scope targeting",
-          "Atomic key-value retrieval and mutation",
-          "Origin storage purging"
-        ]
-      },
-      "browser_checkpoint": {
-        "category": "storage_and_cookies",
-        "description": "Snapshot and restore browser state (cookies, localStorage, sessionStorage, and scroll/URL) into named checkpoints to time-travel and rollback failed automation branches.",
-        "features": [
-          "Session state time-travel and rollback",
-          "Cookies backup and restoration (HttpOnly and Secure via CDP)",
-          "LocalStorage and SessionStorage snapshotting",
-          "URL, page title, and viewport scroll position persistence",
-          "Optional lightweight DOM snapshot capture"
-        ]
-      },
-      "browser_network_intercept": {
-        "category": "network",
-        "description": "Intercept/stub network responses (mock APIs, block tracking) and capture raw protocol network telemetry (TLS/SSL certificate metadata, microsecond timing breakdown, and OS-level network failure reasons).",
-        "features": [
-          "URL glob pattern matching and response mocking",
-          "TLS/SSL Certificate security metadata (issuer, protocol, validity, cipher)",
-          "Microsecond Network Timing breakdown (DNS, TCP, SSL, send, TTFB, download)",
-          "OS-level network failure diagnostics (net::ERR_* codes, blocked reasons)"
-        ]
-      },
-      "browser_console": {
-        "category": "vision",
-        "description": "1-5ms latency access to buffered browser console messages, JS exceptions, and network errors tracked via CDP Runtime.consoleAPICalled.",
-        "features": [
-          "Buffered console output stream retrieval",
-          "Buffer clearance actions",
-          "Runtime exception stack capture",
-          "Timestamped severity logging"
-        ]
-      },
-      "browser_pdf": {
-        "category": "output",
-        "description": "Print the current page to a PDF file via CDP Page.printToPDF with configurable orientation, scale, and page ranges.",
-        "features": [
-          "Landscape and portrait orientation options",
-          "Print scale factor adjustment",
-          "Page range subset printing",
-          "Direct filesystem destination output"
-        ]
-      },
-      "browser_eval": {
-        "category": "evaluation",
-        "description": "Run arbitrary JS via CDP in page context via CDP Runtime.evaluate. Supports asynchronous evaluation and structured JSON serialization.",
-        "features": [
-          "Page JS context execution",
-          "Async/await promise resolution",
-          "Structured JSON return serialization",
-          "Role-based authorization checks"
-        ]
-      },
-      "browser_cookies": {
-        "category": "storage_and_cookies",
-        "description": "Manage browser cookies. Full CRUD management for HTTP and document cookies via CDP Network domain.",
-        "features": [
-          "Cookie property retrieval, setting, and deletion",
-          "Domain and path attribute scoping"
-        ]
-      },
-      "browser_canvas": {
-        "category": "canvas_and_visual",
-        "description": "For ALL canvas content (charts, games, graphs). Use get_image to read pixel data as Base64 PNG, draw to simulate programmatic coordinate gesture paths.",
-        "features": [
-          "Base64 PNG pixel buffer export",
-          "Programmatic gesture path drawing",
-          "Canvas node targeting via ref ID or selector"
-        ]
-      },
-      "browser_scrape": {
-        "category": "vision",
-        "description": "Sub-5ms latency, zero waste extraction via CSS or XPath selectors in a single CDP evaluation step. Returns structured text/attribute arrays.",
-        "features": [
-          "CSS and XPath query evaluation",
-          "Targeted attribute extraction",
-          "Single-step execution (high throughput)",
-          "Single-element and array extraction modes"
-        ]
-      },
-      "browser_snapshot": {
-        "category": "vision",
-        "description": "Capture or restore an MHTML snapshot (DOM + inline assets). Facilitates offline state serialization, replay verification, and compliance auditing.",
-        "features": [
-          "Full DOM and asset stream serialization",
-          "Atomic capture and restore operations",
-          "Offline state audit capability"
-        ]
-      },
-      "browser_screenshot": {
-        "category": "vision",
-        "description": "95-135ms capture latency via CDP Page.captureScreenshot. Supports PNG and JPEG formats, full-page rendering, and clip region bounding boxes.",
-        "features": [
-          "Full-page and viewport bounding box capture",
-          "PNG and JPEG format encoding",
-          "Custom clip region bounding box support",
-          "In-memory Base64 data URL output (zero disk I/O)"
-        ]
-      },
-      "browser_viewport": {
-        "category": "device_and_environment",
-        "description": "Set viewport dimensions and device emulation (width, height, DPR, mobile, geolocation, timezone, locale, color scheme).",
-        "features": [
-          "Viewport width, height, and DPR emulation",
-          "Mobile viewport and touch event emulation",
-          "Geolocation coordinate override",
-          "IANA timezone and locale override",
-          "Color scheme preference override (light/dark)"
-        ]
-      },
-      "browser_clipboard": {
-        "category": "dialog_and_interaction",
-        "description": "Read or write to the system clipboard (plaintext or Base64 image payload data).",
-        "features": [
-          "Read and write data operations",
-          "Plaintext and Base64 image payload format support"
-        ]
-      },
-      "browser_inspect": {
-        "category": "vision",
-        "description": "15-35ms latency, zero waste. Deep DOM inspection returning computed styles, inline styles, box model dimensions, and attached event listener types.",
-        "features": [
-          "Computed CSS style property inspection",
-          "Event listener type registration enumeration",
-          "Box model geometry verification",
-          "Targeting via ref ID, selector, or nodeId"
-        ]
-      },
-      "browser_extract_design": {
-        "category": "vision",
-        "description": "Extract design tokens (colors, typography, spacing, shadows, CSS variables), semantic HTML layouts, and clean CSS into structured files and an LLM design blueprint. Ideal for cloning websites, UI components, and design systems with 100% pixel fidelity.",
-        "features": [
-          "CSS custom properties and design token harvesting",
-          "Palette extraction and typography hierarchy mapping",
-          "Semantic clean DOM extraction with inline SVGs preserved",
-          "Automatic file persistence into configurable designDir (~/.weavetab/designs/)",
-          "Tailwind CSS theme.extend preset generation",
-          "Compact LLM summary preventing context window bloat"
-        ]
-      },
-      "browser_automation": {
-        "category": "mission_execution",
-        "description": "Inject self-running background script for monitoring/polling. Inject persistent scripts into the page context for continuous event tracking.",
-        "features": [
-          "Background script context injection",
-          "Named automation script management",
-          "Decoupled event monitoring lifecycle"
-        ]
-      },
-      "browser_recording": {
-        "category": "output",
-        "description": "Record video screencasts of browser sessions. Automatically compiles captured frames into animated video files (.webp, .gif, .webm, .mp4) using native Node processing or system ffmpeg.",
-        "features": [
-          "Native WebP/GIF animation compilation in pure Node",
-          "Configurable FPS and frame limits",
-          "FFmpeg fallback for WebM/MP4 encoding",
-          "Automated raw frame cleanup"
-        ]
-      },
-      "browser_detect": {
-        "category": "tabs",
-        "description": "CRITICAL INITIALIZATION TOOL. Detect available browsers and configured desktop apps (Discord, Slack, etc.). Call this FIRST before interacting with the environment to know if apps are online/offline and what tabs they have open.",
-        "features": [
-          "Local browser engine discovery",
-          "Engine CDP API coverage analysis",
-          "Tool compatibility reporting per browser engine"
-        ]
-      },
-      "browser_performance": {
-        "category": "performance",
-        "description": "Retrieve page performance metrics. Collects Core Web Vitals (FCP, LCP, CLS) and detailed network resource timing distributions.",
-        "features": [
-          "First Contentful Paint (FCP) and Largest Contentful Paint (LCP) capture",
-          "Cumulative Layout Shift (CLS) tracking",
-          "Resource loading timing distributions"
-        ]
-      },
-      "browser_pattern_learn": {
-        "category": "memory",
-        "description": "Read (action=get), register (action=learn), update, or record execution outcome for a named workflow pattern on a given origin in ~/.weavetab-system/memory/sites/. Use action=get at session start to inspect site profiles and reliability scores. Use learn after completing a flow to persist it for future fast-path replay.",
-        "features": [
-          "Site profile inspection via action=get (reads ~/.weavetab-system/memory/sites/)",
-          "Named pattern creation and update (merge-on-write, no duplicates)",
-          "Volatile selector stabilization before persistence",
-          "EWMA reliability score update on execution outcome",
-          "3-strike degradation and re-learn flagging",
-          "Site quirk registration (cookie_banner, rate_limit, modal_popup)"
-        ]
-      },
-      "browser_github": {
-        "category": "github",
-        "description": "Interact with GitHub repositories without burning browser turns. Analyze repo trees, read raw source files, search/inspect issues, and examine PR diffs and review comments.",
-        "features": [
-          "Action-based repo analysis, file reading, issues, and PR review",
-          "Zero GitHub API token requirement for raw reads",
-          "Automated active tab repository context resolution",
-          "Line range subset reading and issue/PR search"
-        ]
-      },
-      "browser_office": {
-        "category": "documents",
-        "description": "Read and extract structured content from office documents (Excel, Word, PDF, CSV) via live browser session cookies or local downloads directory.",
-        "features": [
-          "In-session authenticated document fetching",
-          "Structured tabular extraction (.xlsx, .csv)",
-          "Document text and metadata extraction (.docx, .pdf)"
-        ]
-      },
-      "browser_emulate": {
-        "category": "environment",
-        "description": "Emulate browser environmental conditions over CDP: network throttling profiles, CPU slowdown multipliers, geolocation overrides, timezone IDs, and custom User-Agent strings.",
-        "features": [
-          "Network throttling (Offline, Slow 3G, Fast 3G, 4G)",
-          "CPU throttling multipliers",
-          "Geolocation and timezone overrides"
-        ]
-      }
-    },
-    "resources": {
-      "session_memory": {
-        "description": "Two-tier persistent memory system. Tier 1 (~/.weavetab-system/memory/): per-domain selector confidence cache tracking detected web frameworks, Shadow DOM utilization, and interaction strategies. Tier 2 (~/.weavetab-system/memory/sites/): named workflow patterns with EWMA reliability scores, site quirks (cookie banners, rate limits), and fast-path eligibility flags — all accumulated and refined across sessions.",
-        "features": [
-          "Framework detection (React, Vue, Angular, Lit, Svelte, Next, Nuxt, Gatsby)",
-          "Successful selector strategy caching with confidence decay (Tier 1)",
-          "Named workflow pattern compilation with EWMA reliability scoring (Tier 2)",
-          "Site quirk registration: cookie banners, rate limits, modal popups (Tier 2)",
-          "3-strike pattern degradation with re-learn flagging (Tier 2)",
-          "Fast-path eligibility: patterns with reliability ≥ 0.8 skip exploratory DOM navigation"
-        ]
-      },
-      "knowledge_hints": {
-        "description": "Domain-specific hint storage (~/.weavetab/knowledge/[domain].md) injecting context notes into session prompts.",
-        "features": [
-          "Domain quirk notes",
-          "Timestamped entry tracking",
-          "Prompt context injection budget (20 tokens)"
-        ]
-      },
-      "trail_log": {
-        "description": "Rolling 50-action window (~/.weavetab-system/sessions/context.json) powering strike-based loop detection algorithms.",
-        "features": [
-          "50-action rolling window tracking",
-          "Strike-based loop detection heuristics",
-          "Auto-reset triggers on navigation, tab switch, or burst start"
-        ]
-      },
-      "network_telemetry": {
-        "description": "Real-time network event tracking via CDP Network domain measuring request/response timing and HTTP error rates.",
-        "features": [
-          "Request and response latency tracking",
-          "Resource classification",
-          "HTTP status code tracking"
-        ]
-      },
-      "mutation_observer": {
-        "description": "CDP-driven DOM mutation tracking measuring dynamic subtree changes for SPA stabilization.",
-        "features": [
-          "Attribute mutation tracking",
-          "Node insertion/removal events",
-          "Subtree modification tracking"
-        ]
-      }
-    },
-    "intelligence": {
-      "semantic_delta_engine": {
-        "description": "Per-tab DOM state diffing engine returning strictly modified elements between snapshots, cutting prompt token consumption up to 97%.",
-        "features": [
-          "Per-tab baseline snapshot storage",
-          "Property-level change detection (label, value, state, class)",
-          "Action recommendation generation"
-        ]
-      },
-      "semantic_dom_pruner": {
-        "description": "AST-based DOM compression algorithm executed before snapshot returns. Removes non-interactive hidden elements and converts SVG icons to tokens.",
-        "features": [
-          "Hidden element pruning",
-          "SVG icon compression",
-          "Interactive tree preservation"
-        ]
-      },
-      "vision_fallback": {
-        "description": "Local pixel analysis pipeline using sharp for visual layout evaluation when accessibility trees return zero nodes.",
-        "pipeline": "AX Tree Check -> Screenshot -> Grayscale -> 4x4 Grid Heatmap -> Text Density -> Clickable Region Analysis",
-        "features": [
-          "Local execution (zero external API dependencies)",
-          "4x4 visual density grid heatmap",
-          "Clickable zone classification"
-        ]
-      },
-      "loop_detection": {
-        "description": "Strike-based loop detection algorithm over rolling 50-action windows with automated escalation.",
-        "thresholds": {
-          "0-4 strikes": "Normal execution",
-          "5-9 strikes": "Warning notification in HUD",
-          "10+ strikes": "Stuck state classification and auto-recovery activation"
-        },
-        "features": [
-          "Rolling action window evaluation",
-          "Escalating alert tiers",
-          "Manual reset via browser_map({ force: true }) or browser_wait({ reset_loop: true })"
-        ]
-      },
-      "framework_detection": {
-        "description": "Heuristic detection of web application frameworks via CDP Runtime.evaluate probes.",
-        "detectedFrameworks": [
-          "React",
-          "Vue",
-          "Angular",
-          "Lit",
-          "Svelte",
-          "Next",
-          "Nuxt",
-          "Gatsby"
-        ],
-        "features": [
-          "Zero-overhead runtime probing",
-          "Shadow DOM usage identification",
-          "Domain memory persistence"
-        ]
-      },
-      "intent_resolution": {
-        "description": "Semantic element resolution resolving natural language action descriptions to DOM ref IDs using session memory scoring.",
-        "features": [
-          "Natural language intent scoring",
-          "Historical selector memory integration",
-          "Live DOM context matching"
-        ]
-      }
-    },
-    "security": {
-      "rbac": {
-        "description": "Role-Based Access Control enforcing tool execution boundaries based on configured session role.",
-        "roles": {
-          "admin": "Full access to all 44 tools and system operations",
-          "system": "Full tool access excluding system-level operations",
-          "viewer": "Read-only access (browser_map, browser_find, browser_scrape, browser_screenshot, browser_inspect, browser_snapshot, browser_console, browser_pdf, browser_storage, browser_cookies, browser_tabs, browser_wait, browser_github)",
-          "automation": "Restricted execution set for non-interactive automated workflows"
-        }
-      },
-      "domain_policy": {
-        "description": "Domain-level access control policy engine configured via ~/.weavetab/policy.json with enforced security domain blocklists.",
-        "modes": {
-          "allow": "Unrestricted tool access",
-          "read-only": "Mutation tool execution blocked",
-          "deny": "Navigation and interaction blocked",
-          "audit": "Unrestricted access with enhanced audit logging"
-        }
-      },
-      "rate_limiting": {
-        "description": "Mutex-guarded rate limiter enforcing maximum action frequencies.",
-        "features": [
-          "Configurable action per minute threshold (default 60)",
-          "Mutex lock enforcement",
-          "Clear rate limit exception messaging"
-        ]
-      },
-      "blind_injection": {
-        "description": "Credential injection via browser_type_secret. Resolves secret values server-side from secrets.json without context exposure to the LLM.",
-        "secretsFormat": {
-          "KEY_NAME": {
-            "value": "secret-value",
-            "domains": [
-              "example.com"
-            ],
-            "description": "Secret description"
-          }
-        },
-        "resolutionOrder": [
-          "./.weavetab/secrets.json (project)",
-          "~/.weavetab/secrets.json (global)"
-        ]
-      },
-      "input_filter": {
-        "description": "Sanitizes DOM snapshots before context return by stripping prompt injection patterns and invisible characters.",
-        "features": [
-          "Prompt injection pattern filtering",
-          "Control character stripping",
-          "Excessive label length truncation"
-        ]
-      },
-      "additional_mechanisms": {
-        "localhost_binding": "CDP WebSocket connection restricted strictly to 127.0.0.1",
-        "root_guard": "Startup execution block for root/superuser processes (Unix)",
-        "storage_blocker": "Configurable nullification of web storage and document.cookie",
-        "atomic_config_writes": "Atomic configuration file writes via temporary file renaming",
-        "path_traversal_protection": "Strict validation of download and profile directories against path traversal",
-        "two_factor_lock_validation": "Browser lock verification via PID liveness and TCP port checks"
-      }
-    },
-    "transport": {
-      "stdio": {
-        "description": "Standard JSON-RPC over stdio streams. Default mode for MCP clients.",
-        "default": true,
-        "cli": "weavetab"
-      },
-      "websocket": {
-        "description": "JSON-RPC over WebSocket for distributed agent pipelines.",
-        "default": false,
-        "configurable": true
-      }
-    },
-    "overlay": {
-      "hud": {
-        "description": "Shadow DOM HUD overlay injected into browser tabs displaying execution state and thoughts.",
-        "features": [
-          "Mission status display",
-          "Thought bubble rendering",
-          "Task plan visualization",
-          "Shadow DOM isolation"
-        ]
-      },
-      "ghost_cursor": {
-        "description": "Visual pointer trajectory overlay displaying humanized Bézier motion during interaction.",
-        "features": [
-          "Bézier trajectory visualization",
-          "Acceleration curve rendering",
-          "Target element highlight overlay"
-        ]
-      }
-    },
-    "plugins": {
-      "description": "Dynamic plugin system discovering any npm package containing weavetab.json and @weavetab/plugin-* packages at startup.",
-      "manifest": "weavetab.json",
-      "features": [
-        "Automatic package discovery",
-        "Native MCP tool registration",
-        "Unified security pipeline integration"
-      ]
-    },
-    "skills": {
-      "description": "Optional companion package (@weavetab/skills) providing mission templates.",
-      "package": "@weavetab/skills",
-      "repository": "https://github.com/weavetab/skills",
-      "install": "npm install -g @weavetab/skills",
-      "availableSkills": [
-        "Multi-step Form Automation",
-        "E-commerce Checkout",
-        "Data Extraction Pipelines",
-        "Content Management Systems",
-        "API Testing & Validation"
-      ]
-    }
-  },
-  "configuration": {
-    "configLocations": {
-      "global": "~/.weavetab/config.json",
-      "project": ".weavetab/config.json (precedes global)"
-    },
-    "options": {
-      "browserType": {
-        "type": "string",
-        "default": "chromium",
-        "options": [
-          "chromium",
-          "firefox",
-          "webkit"
-        ],
-        "description": "Browser engine target"
-      },
-      "headless": {
-        "type": "boolean",
-        "default": false,
-        "description": "Headless mode toggle"
-      },
-      "devMode": {
-        "type": "boolean",
-        "default": false,
-        "description": "Verbose CDP logging and HUD overlay toggle"
-      },
-      "maxActionsPerMinute": {
-        "type": "number",
-        "default": 60,
-        "description": "Action rate limit threshold"
-      },
-      "role": {
-        "type": "string",
-        "default": "admin",
-        "options": [
-          "admin",
-          "system",
-          "viewer",
-          "automation"
-        ],
-        "description": "Session RBAC role"
-      },
-      "telemetry": {
-        "type": "boolean",
-        "default": false,
-        "description": "Opt-in anonymous usage telemetry toggle"
-      },
-      "attachPort": {
-        "type": "number",
-        "default": 0,
-        "description": "Chrome DevTools Protocol attach port"
-      },
-      "extension": {
-        "type": "boolean",
-        "default": true,
-        "description": "Enable Weavetab Chrome extension integration"
-      },
-      "maxTabs": {
-        "type": "number",
-        "default": 10,
-        "description": "Maximum tracked tab count"
-      },
-      "navigationTimeout": {
-        "type": "number",
-        "default": 3600,
-        "description": "Navigation timeout in seconds"
-      },
-      "actionabilityTimeoutMs": {
-        "type": "number",
-        "default": 500,
-        "description": "Element actionability wait timeout in ms"
-      }
-    },
-    "domainPolicy": {
-      "location": "~/.weavetab/policy.json",
-      "format": {
-        "policies": [
-          {
-            "pattern": "*.example.com",
-            "mode": "allow | read-only | deny | audit"
-          }
-        ]
-      }
-    },
-    "secretsManagement": {
-      "locations": [
-        ".weavetab/secrets.json (project-scoped)",
-        "~/.weavetab/secrets.json (global default)"
-      ],
-      "cli": [
-        "weavetab secrets set KEY_NAME",
-        "weavetab secrets list",
-        "weavetab secrets rm KEY_NAME",
-        "weavetab secrets init --project"
-      ],
-      "format": {
-        "KEY_NAME": {
-          "value": "secret-value",
-          "domains": [
-            "example.com"
-          ],
-          "description": "Secret description"
-        }
-      }
-    }
-  },
-  "metadata": {
-    "total_tools": 50,
-    "tool_categories": 15,
-    "latency": "3-8ms mean",
-    "token_efficiency": "Up to 97% reduction via semantic delta engine + DOM pruner",
-    "architecture": "Direct CDP WebSocket (Layer 0) — zero WebDriver, Playwright, or Puppeteer wrapper overhead",
-    "security": "Domain blacklist + RBAC (4 roles) + rate limiting + Blind Injection (secrets.json)",
-    "session_memory": "Persistent per-domain profiles with framework detection and strategy caching",
-    "loop_detection": "Strike-based (50-action window), auto-recovery at 10+ strikes",
-    "plugin_system": "Dynamic universal weavetab.json & @weavetab/plugin-* auto-discovery",
-    "skills_package": "@weavetab/skills — https://github.com/weavetab/skills",
-    "transport": "stdio (default) or WebSocket (--ws)",
-    "binary": [
-      "weavetab"
-    ]
-  }
-}
+{
+  "name": "@weavetab/mcp",
+  "mcpName": "dev.weavetab/mcp",
+  "version": "2.5.1",
+  "description": "The open automation engine for AI agents. Control live browsers and desktop apps locally with instant execution.",
+  "icon": "icon.png",
+  "author": "fy2ne",
+  "license": "AGPL-3.0-only",
+  "homepage": "https://github.com/weavetab/mcp",
+  "repository": "https://github.com/weavetab/mcp",
+  "keywords": [
+    "weavetab",
+    "mcp",
+    "model context protocol",
+    "browser automation",
+    "electron automation",
+    "desktop automation",
+    "chrome devtools protocol",
+    "cdp",
+    "ai agent",
+    "claude mcp",
+    "cursor mcp",
+    "autonomous agent",
+    "browser control",
+    "tab management",
+    "web automation"
+  ],
+  "runtime": {
+    "command": "node",
+    "args": [
+      "dist/index.js"
+    ],
+    "env": {
+      "NODE_ENV": "production"
+    }
+  },
+  "capabilities": {
+    "tools": {
+      "browser_map": {
+        "category": "vision",
+        "description": "Snapshot interactive DOM with stable ref IDs (w:NN). For complex SPAs, use scope or query to constrain tokens. Supports delta temporal diffing (up to 97% token reduction), semantic pruning (dropping hidden elements), Set-of-Marks visual grounding (visual: true / \"auto\" for canvas/WebGL pages), AX tree fallback (Shadow DOM traversal), scope filtering, query filtering, and forced rebuilds with automatic loop strike reset (force: true).",
+        "features": [
+          "Semantic DOM pruning (up to 97% token reduction with delta)",
+          "Set-of-Marks visual grounding (visual: true / \"auto\")",
+          "Per-tab snapshot temporal diffing (delta mode)",
+          "Shadow DOM / AX tree fallback parsing",
+          "Scope and query filtering for complex SPAs",
+          "Framework auto-detection injection",
+          "Loop strike counter reset on forced re-mapping (force: true)"
+        ]
+      },
+      "browser_navigate": {
+        "category": "navigation",
+        "description": "Navigate to a URL. Enforces domain security policies and rate limits prior to navigation. Waits for network idle and DOM readiness. Supports internal protocol schemes (e.g. weavetab://).",
+        "features": [
+          "Domain policy engine and blocklist enforcement",
+          "Deterministic DOM stability and network idle waiting",
+          "weavetab:// internal protocol support",
+          "Targeted tab navigation via tab_id"
+        ]
+      },
+      "browser_click": {
+        "category": "input",
+        "description": "Click a DOM element. Physical click engine incorporating Bézier curve trajectory kinematics (Ghost Cursor). Multi-stage targeting fallback: mark number (SoM visual grounding) -> ref ID -> selector -> label -> intent -> coordinates -> backendNodeId.",
+        "features": [
+          "Direct mark number targeting (mark: N) from visual mode",
+          "Bézier curve trajectory kinematics",
+          "Humanized acceleration and velocity curves",
+          "Multi-stage fallback targeting resolution",
+          "Intent-based historical strategy resolution",
+          "Single-call post-click page map retrieval (include_map)",
+          "Shadow DOM element targeting"
+        ]
+      },
+      "browser_type": {
+        "category": "input",
+        "description": "Type text into a single input field. Keystroke dispatch engine with per-character temporal jitter and burst profiling. Real-time DOM-diffing monitors stuck input state. Supports atomic clearFirst and clipboard paste modes.",
+        "features": [
+          "Per-character temporal jitter simulation",
+          "Burst keystroke profiling",
+          "Stuck-typing loop detection via DOM diffing",
+          "Atomic input value resetting (clearFirst)",
+          "Clipboard paste injection for long text"
+        ]
+      },
+      "browser_type_secret": {
+        "category": "input",
+        "description": "Inject a secret from an environment variable / secrets.json. Blind Injection: securely injects credentials without exposing sensitive values to the LLM context. Permanently masked as [REDACTED] in DOM maps and logs.",
+        "features": [
+          "Zero LLM context exposure for credentials",
+          "Domain-scoped authorization checks",
+          "Shadow DOM input isolation",
+          "Permanent [REDACTED] masking across logs and snapshots"
+        ]
+      },
+      "browser_key": {
+        "category": "input",
+        "description": "Press a keyboard key. Dispatches native hardware key events with modifier key support (Ctrl, Shift, Alt, Meta) to focused elements.",
+        "features": [
+          "Native key code and key identifier mapping",
+          "Modifier key combination handling",
+          "Per-tab keyboard focus targeting"
+        ]
+      },
+      "browser_scroll": {
+        "category": "input",
+        "description": "Scroll the page or targeted element. Smooth scrolling engine via CDP Input.dispatchMouseEvent wheel events. Supports directional delta scrolling and element-relative scroll centering.",
+        "features": [
+          "Directional scrolling (up, down, left, right)",
+          "Configurable pixel scroll distance",
+          "Element-relative scroll targeting via ref ID or label"
+        ]
+      },
+      "browser_dialog": {
+        "category": "dialog_and_interaction",
+        "description": "Accept or dismiss JS dialogs (alert, confirm, prompt) via CDP Page.handleJavaScriptDialog.",
+        "features": [
+          "Handling of alert, confirm, and prompt modal types",
+          "Accept and dismiss actions",
+          "Prompt response text payload submission"
+        ]
+      },
+      "browser_burst": {
+        "category": "mission_execution",
+        "description": "HIGH-SPEED MULTI-ACTION PIPELINE: Executes 2 or more sequential browser actions in a single round-trip without waiting for LLM turns between steps. PREFER THIS over individual single-action calls to slash latency and token burn. Supports native primitives (browser_click, browser_fill, browser_type, browser_type_secret, browser_navigate, browser_key, browser_scroll, browser_wait, browser_map) plus compound macros (type_and_send, click_and_wait, navigate_and_read, scroll_and_read, fill_form). If compile_from_history: true is passed, automatically compiles and executes recent successful session trail actions into a burst macro.",
+        "features": [
+          "Single-request multi-action pipeline execution with zero intermediate LLM round-trips",
+          "Compound macro abstractions (type_and_send, click_and_wait, navigate_and_read, scroll_and_read, fill_form, drag_and_drop, hover_and_read)",
+          "Automatic session history compilation into replayable burst macros (compile_from_history: true)",
+          "Fail-fast execution guard (stop_on_error: true) to prevent cascading errors",
+          "Automatic loop counter reset on execution start"
+        ]
+      },
+      "browser_tabs": {
+        "category": "tabs",
+        "description": "Manage browser and Electron app tabs/windows (open, switch, close, list). Specify 'app' when targeting desktop apps (e.g. app: 'discord') to avoid opening web browser.",
+        "features": [
+          "Single and batch tab operations",
+          "Duplicate tab consolidation",
+          "Crash session recovery (heal)",
+          "Background tab targeting",
+          "URL tab reuse prevention"
+        ]
+      },
+      "browser_wait": {
+        "category": "navigation",
+        "description": "Pause until a condition is met ('element', 'text', 'url', 'stable', 'network', 'auto'). Deterministic wait engine for asynchronous web state synchronization.",
+        "features": [
+          "Element, text, URL, DOM stability, and network idle conditions",
+          "Configurable timeout thresholds",
+          "Per-tab asynchronous execution target",
+          "Heuristic auto-condition resolution"
+        ]
+      },
+      "browser_captcha": {
+        "category": "safety",
+        "description": "Autonomous zero-API detection and solving of Turnstile, reCAPTCHA, GeeTest, and hCaptcha bot challenges using local CDP behavioral solvers.",
+        "features": [
+          "Zero-API autonomous solving",
+          "Cloudflare Turnstile, reCAPTCHA v2/v3, GeeTest, and hCaptcha support",
+          "Human oversight fallback via wait_for_user"
+        ]
+      },
+      "browser_thoughts": {
+        "category": "dialog_and_interaction",
+        "description": "Agent-to-user communication layer rendered in the middle down of the page. Supports question mode (interactive prompt with answer submission) and feedback mode (status, observation, decision, or warning update). Supports contextual element anchoring (anchor: 'w:NN') and visual styles ('observation', 'decision', 'warning', 'question').",
+        "features": [
+          "Middle-down floating card HUD with precision dark styling",
+          "Contextual element anchoring (anchor: 'w:NN') with auto-highlighting",
+          "Feedback mode (observation, decision, warning updates)",
+          "Question mode (interactive user response directly on page)",
+          "Configurable auto-fade and response timeout"
+        ]
+      },
+      "browser_pointer": {
+        "category": "input",
+        "description": "Advanced pointer control (hover, click, double_click, drag_and_drop) with Bézier curve kinematics. Supports waitForChild pattern for dynamic flyout menus.",
+        "features": [
+          "Hover, click, double_click, and drag_and_drop actions",
+          "Bézier curve cursor motion",
+          "waitForChild trigger menu resolution",
+          "Configurable hold duration (holdMs)"
+        ]
+      },
+      "browser_select": {
+        "category": "input",
+        "description": "Select an option from a native dropdown by visible text or value. Uses native property setters and dispatches input/change events for framework compatibility (React, Vue, Angular).",
+        "features": [
+          "Option matching by visible text or value",
+          "Framework-safe prototype property setter invocation",
+          "Synthetic input and change event dispatch"
+        ]
+      },
+      "browser_fill": {
+        "category": "input",
+        "description": "Smart multi-field form-filling. Evaluates field control types (text, select, checkbox, radio, contenteditable) and processes inputs sequentially with atomic verification.",
+        "features": [
+          "Multi-field batch input execution",
+          "Automatic control type classification",
+          "Per-field post-input verification",
+          "Optional form submission click step"
+        ]
+      },
+      "browser_highlight": {
+        "category": "canvas_and_visual",
+        "description": "Highlight elements on page. Renders temporary visual overlays over target elements without DOM tree mutations. Supports multi-element consideration overlays (refs: ['w:12', 'w:15']), presentation styles ('consideration', 'target', 'danger', 'success', 'shimmer'), floating badges, and configurable durations.",
+        "features": [
+          "Multi-candidate consideration overlay (refs array)",
+          "Five visual styles: consideration, target lock, danger, success, shimmer",
+          "Floating label badge display above highlighted elements",
+          "Configurable duration and color override",
+          "Targeting via ref IDs (w:NN), CSS selectors, or CDP backendNodeId"
+        ]
+      },
+      "browser_upload": {
+        "category": "input",
+        "description": "Upload files to a file input. Bypasses OS native file pickers via CDP DOM.setFileInputFiles directly targeting file input node IDs using absolute file paths.",
+        "features": [
+          "Direct CDP file payload injection",
+          "Multi-file payload support",
+          "Zero OS file picker interaction required"
+        ]
+      },
+      "browser_find": {
+        "category": "vision",
+        "description": "Sub-5ms CDP text search. Zero token waste. Best for locating specific keywords/text on page without a full DOM walk.",
+        "features": [
+          "Native CDP search (zero DOM walk overhead)",
+          "Sub-5ms execution latency",
+          "Exact keyword matching and match indexing"
+        ]
+      },
+      "browser_storage": {
+        "category": "storage_and_cookies",
+        "description": "Manage localStorage and sessionStorage. Reads, writes, and clears key-value pairs for the active origin.",
+        "features": [
+          "localStorage and sessionStorage scope targeting",
+          "Atomic key-value retrieval and mutation",
+          "Origin storage purging"
+        ]
+      },
+      "browser_checkpoint": {
+        "category": "storage_and_cookies",
+        "description": "Snapshot and restore browser state (cookies, localStorage, sessionStorage, and scroll/URL) into named checkpoints to time-travel and rollback failed automation branches.",
+        "features": [
+          "Session state time-travel and rollback",
+          "Cookies backup and restoration (HttpOnly and Secure via CDP)",
+          "LocalStorage and SessionStorage snapshotting",
+          "URL, page title, and viewport scroll position persistence",
+          "Optional lightweight DOM snapshot capture"
+        ]
+      },
+      "browser_network_intercept": {
+        "category": "network",
+        "description": "Intercept/stub network responses (mock APIs, block tracking) and capture raw protocol network telemetry (TLS/SSL certificate metadata, microsecond timing breakdown, and OS-level network failure reasons).",
+        "features": [
+          "URL glob pattern matching and response mocking",
+          "TLS/SSL Certificate security metadata (issuer, protocol, validity, cipher)",
+          "Microsecond Network Timing breakdown (DNS, TCP, SSL, send, TTFB, download)",
+          "OS-level network failure diagnostics (net::ERR_* codes, blocked reasons)"
+        ]
+      },
+      "browser_console": {
+        "category": "vision",
+        "description": "1-5ms latency access to buffered browser console messages, JS exceptions, and network errors tracked via CDP Runtime.consoleAPICalled.",
+        "features": [
+          "Buffered console output stream retrieval",
+          "Buffer clearance actions",
+          "Runtime exception stack capture",
+          "Timestamped severity logging"
+        ]
+      },
+      "browser_pdf": {
+        "category": "output",
+        "description": "Print the current page to a PDF file via CDP Page.printToPDF with configurable orientation, scale, and page ranges.",
+        "features": [
+          "Landscape and portrait orientation options",
+          "Print scale factor adjustment",
+          "Page range subset printing",
+          "Direct filesystem destination output"
+        ]
+      },
+      "browser_eval": {
+        "category": "evaluation",
+        "description": "Run arbitrary JS via CDP in page context via CDP Runtime.evaluate. Supports asynchronous evaluation and structured JSON serialization.",
+        "features": [
+          "Page JS context execution",
+          "Async/await promise resolution",
+          "Structured JSON return serialization",
+          "Role-based authorization checks"
+        ]
+      },
+      "browser_cookies": {
+        "category": "storage_and_cookies",
+        "description": "Manage browser cookies. Full CRUD management for HTTP and document cookies via CDP Network domain.",
+        "features": [
+          "Cookie property retrieval, setting, and deletion",
+          "Domain and path attribute scoping"
+        ]
+      },
+      "browser_canvas": {
+        "category": "canvas_and_visual",
+        "description": "For ALL canvas content (charts, games, graphs). Use get_image to read pixel data as Base64 PNG, draw to simulate programmatic coordinate gesture paths.",
+        "features": [
+          "Base64 PNG pixel buffer export",
+          "Programmatic gesture path drawing",
+          "Canvas node targeting via ref ID or selector"
+        ]
+      },
+      "browser_scrape": {
+        "category": "vision",
+        "description": "Sub-5ms latency, zero waste extraction via CSS or XPath selectors in a single CDP evaluation step. Returns structured text/attribute arrays.",
+        "features": [
+          "CSS and XPath query evaluation",
+          "Targeted attribute extraction",
+          "Single-step execution (high throughput)",
+          "Single-element and array extraction modes"
+        ]
+      },
+      "browser_snapshot": {
+        "category": "vision",
+        "description": "Capture or restore an MHTML snapshot (DOM + inline assets). Facilitates offline state serialization, replay verification, and compliance auditing.",
+        "features": [
+          "Full DOM and asset stream serialization",
+          "Atomic capture and restore operations",
+          "Offline state audit capability"
+        ]
+      },
+      "browser_screenshot": {
+        "category": "vision",
+        "description": "95-135ms capture latency via CDP Page.captureScreenshot. Supports PNG and JPEG formats, full-page rendering, and clip region bounding boxes.",
+        "features": [
+          "Full-page and viewport bounding box capture",
+          "PNG and JPEG format encoding",
+          "Custom clip region bounding box support",
+          "In-memory Base64 data URL output (zero disk I/O)"
+        ]
+      },
+      "browser_viewport": {
+        "category": "device_and_environment",
+        "description": "Set viewport dimensions and device emulation (width, height, DPR, mobile, geolocation, timezone, locale, color scheme).",
+        "features": [
+          "Viewport width, height, and DPR emulation",
+          "Mobile viewport and touch event emulation",
+          "Geolocation coordinate override",
+          "IANA timezone and locale override",
+          "Color scheme preference override (light/dark)"
+        ]
+      },
+      "browser_clipboard": {
+        "category": "dialog_and_interaction",
+        "description": "Read or write to the system clipboard (plaintext or Base64 image payload data).",
+        "features": [
+          "Read and write data operations",
+          "Plaintext and Base64 image payload format support"
+        ]
+      },
+      "browser_inspect": {
+        "category": "vision",
+        "description": "15-35ms latency, zero waste. Deep DOM inspection returning computed styles, inline styles, box model dimensions, and attached event listener types.",
+        "features": [
+          "Computed CSS style property inspection",
+          "Event listener type registration enumeration",
+          "Box model geometry verification",
+          "Targeting via ref ID, selector, or nodeId"
+        ]
+      },
+      "browser_extract_design": {
+        "category": "vision",
+        "description": "Extract design tokens (colors, typography, spacing, shadows, CSS variables), semantic HTML layouts, and clean CSS into structured files and an LLM design blueprint. Ideal for cloning websites, UI components, and design systems with 100% pixel fidelity.",
+        "features": [
+          "CSS custom properties and design token harvesting",
+          "Palette extraction and typography hierarchy mapping",
+          "Semantic clean DOM extraction with inline SVGs preserved",
+          "Automatic file persistence into configurable designDir (~/.weavetab/designs/)",
+          "Tailwind CSS theme.extend preset generation",
+          "Compact LLM summary preventing context window bloat"
+        ]
+      },
+      "browser_automation": {
+        "category": "mission_execution",
+        "description": "Inject self-running background script for monitoring/polling. Inject persistent scripts into the page context for continuous event tracking.",
+        "features": [
+          "Background script context injection",
+          "Named automation script management",
+          "Decoupled event monitoring lifecycle"
+        ]
+      },
+      "browser_recording": {
+        "category": "output",
+        "description": "Record video screencasts of browser sessions. Automatically compiles captured frames into animated video files (.webp, .gif, .webm, .mp4) using native Node processing or system ffmpeg.",
+        "features": [
+          "Native WebP/GIF animation compilation in pure Node",
+          "Configurable FPS and frame limits",
+          "FFmpeg fallback for WebM/MP4 encoding",
+          "Automated raw frame cleanup"
+        ]
+      },
+      "browser_detect": {
+        "category": "tabs",
+        "description": "CRITICAL INITIALIZATION TOOL. Detect available browsers and configured desktop apps (Discord, Slack, etc.). Call this FIRST before interacting with the environment to know if apps are online/offline and what tabs they have open.",
+        "features": [
+          "Local browser engine discovery",
+          "Engine CDP API coverage analysis",
+          "Tool compatibility reporting per browser engine"
+        ]
+      },
+      "browser_performance": {
+        "category": "performance",
+        "description": "Retrieve page performance metrics. Collects Core Web Vitals (FCP, LCP, CLS) and detailed network resource timing distributions.",
+        "features": [
+          "First Contentful Paint (FCP) and Largest Contentful Paint (LCP) capture",
+          "Cumulative Layout Shift (CLS) tracking",
+          "Resource loading timing distributions"
+        ]
+      },
+      "browser_pattern_learn": {
+        "category": "memory",
+        "description": "Read (action=get), register (action=learn), update, or record execution outcome for a named workflow pattern on a given origin in ~/.weavetab-system/memory/sites/. Use action=get at session start to inspect site profiles and reliability scores. Use learn after completing a flow to persist it for future fast-path replay.",
+        "features": [
+          "Site profile inspection via action=get (reads ~/.weavetab-system/memory/sites/)",
+          "Named pattern creation and update (merge-on-write, no duplicates)",
+          "Volatile selector stabilization before persistence",
+          "EWMA reliability score update on execution outcome",
+          "3-strike degradation and re-learn flagging",
+          "Site quirk registration (cookie_banner, rate_limit, modal_popup)"
+        ]
+      },
+      "browser_office": {
+        "category": "documents",
+        "description": "Read and extract structured content from office documents (Excel, Word, PDF, CSV) via live browser session cookies or local downloads directory.",
+        "features": [
+          "In-session authenticated document fetching",
+          "Structured tabular extraction (.xlsx, .csv)",
+          "Document text and metadata extraction (.docx, .pdf)"
+        ]
+      },
+      "browser_emulate": {
+        "category": "environment",
+        "description": "Emulate browser environmental conditions over CDP: network throttling profiles, CPU slowdown multipliers, geolocation overrides, timezone IDs, and custom User-Agent strings.",
+        "features": [
+          "Network throttling (Offline, Slow 3G, Fast 3G, 4G)",
+          "CPU throttling multipliers",
+          "Geolocation and timezone overrides"
+        ]
+      }
+    },
+    "resources": {
+      "session_memory": {
+        "description": "Two-tier persistent memory system. Tier 1 (~/.weavetab-system/memory/): per-domain selector confidence cache tracking detected web frameworks, Shadow DOM utilization, and interaction strategies. Tier 2 (~/.weavetab-system/memory/sites/): named workflow patterns with EWMA reliability scores, site quirks (cookie banners, rate limits), and fast-path eligibility flags — all accumulated and refined across sessions.",
+        "features": [
+          "Framework detection (React, Vue, Angular, Lit, Svelte, Next, Nuxt, Gatsby)",
+          "Successful selector strategy caching with confidence decay (Tier 1)",
+          "Named workflow pattern compilation with EWMA reliability scoring (Tier 2)",
+          "Site quirk registration: cookie banners, rate limits, modal popups (Tier 2)",
+          "3-strike pattern degradation with re-learn flagging (Tier 2)",
+          "Fast-path eligibility: patterns with reliability ≥ 0.8 skip exploratory DOM navigation"
+        ]
+      },
+      "knowledge_hints": {
+        "description": "Domain-specific hint storage (~/.weavetab/knowledge/[domain].md) injecting context notes into session prompts.",
+        "features": [
+          "Domain quirk notes",
+          "Timestamped entry tracking",
+          "Prompt context injection budget (20 tokens)"
+        ]
+      },
+      "trail_log": {
+        "description": "Rolling 50-action window (~/.weavetab-system/sessions/context.json) powering strike-based loop detection algorithms.",
+        "features": [
+          "50-action rolling window tracking",
+          "Strike-based loop detection heuristics",
+          "Auto-reset triggers on navigation, tab switch, or burst start"
+        ]
+      },
+      "network_telemetry": {
+        "description": "Real-time network event tracking via CDP Network domain measuring request/response timing and HTTP error rates.",
+        "features": [
+          "Request and response latency tracking",
+          "Resource classification",
+          "HTTP status code tracking"
+        ]
+      },
+      "mutation_observer": {
+        "description": "CDP-driven DOM mutation tracking measuring dynamic subtree changes for SPA stabilization.",
+        "features": [
+          "Attribute mutation tracking",
+          "Node insertion/removal events",
+          "Subtree modification tracking"
+        ]
+      }
+    },
+    "intelligence": {
+      "semantic_delta_engine": {
+        "description": "Per-tab DOM state diffing engine returning strictly modified elements between snapshots, cutting prompt token consumption up to 97%.",
+        "features": [
+          "Per-tab baseline snapshot storage",
+          "Property-level change detection (label, value, state, class)",
+          "Action recommendation generation"
+        ]
+      },
+      "semantic_dom_pruner": {
+        "description": "AST-based DOM compression algorithm executed before snapshot returns. Removes non-interactive hidden elements and converts SVG icons to tokens.",
+        "features": [
+          "Hidden element pruning",
+          "SVG icon compression",
+          "Interactive tree preservation"
+        ]
+      },
+      "vision_fallback": {
+        "description": "Local pixel analysis pipeline using sharp for visual layout evaluation when accessibility trees return zero nodes.",
+        "pipeline": "AX Tree Check -> Screenshot -> Grayscale -> 4x4 Grid Heatmap -> Text Density -> Clickable Region Analysis",
+        "features": [
+          "Local execution (zero external API dependencies)",
+          "4x4 visual density grid heatmap",
+          "Clickable zone classification"
+        ]
+      },
+      "loop_detection": {
+        "description": "Strike-based loop detection algorithm over rolling 50-action windows with automated escalation.",
+        "thresholds": {
+          "0-4 strikes": "Normal execution",
+          "5-9 strikes": "Warning notification in HUD",
+          "10+ strikes": "Stuck state classification and auto-recovery activation"
+        },
+        "features": [
+          "Rolling action window evaluation",
+          "Escalating alert tiers",
+          "Manual reset via browser_map({ force: true }) or browser_wait({ reset_loop: true })"
+        ]
+      },
+      "framework_detection": {
+        "description": "Heuristic detection of web application frameworks via CDP Runtime.evaluate probes.",
+        "detectedFrameworks": [
+          "React",
+          "Vue",
+          "Angular",
+          "Lit",
+          "Svelte",
+          "Next",
+          "Nuxt",
+          "Gatsby"
+        ],
+        "features": [
+          "Zero-overhead runtime probing",
+          "Shadow DOM usage identification",
+          "Domain memory persistence"
+        ]
+      },
+      "intent_resolution": {
+        "description": "Semantic element resolution resolving natural language action descriptions to DOM ref IDs using session memory scoring.",
+        "features": [
+          "Natural language intent scoring",
+          "Historical selector memory integration",
+          "Live DOM context matching"
+        ]
+      }
+    },
+    "security": {
+      "rbac": {
+        "description": "Role-Based Access Control enforcing tool execution boundaries based on configured session role.",
+        "roles": {
+          "admin": "Full access to all tools and system operations",
+          "operator": "Full access to all tools and system operations (same as admin)",
+          "system": "System-level tools only (browser_thoughts, browser_detect, browser_performance, browser_checkpoint, browser_pattern_learn)",
+          "viewer": "Read-only access (browser_map, browser_find, browser_scrape, browser_console, browser_eval, browser_inspect, browser_extract_design, browser_snapshot, browser_screenshot, browser_pdf, browser_cookies, browser_tabs, browser_wait, browser_pattern_learn)",
+          "automation": "Full tool access excluding browser_thoughts (automation agents must be non-interactive)"
+        }
+      },
+      "domain_policy": {
+        "description": "Domain-level access control policy engine configured via the top-level policies array in ~/.weavetab/config.json with enforced security domain blocklists.",
+        "modes": {
+          "allow": "Unrestricted tool access",
+          "read-only": "Mutation tool execution blocked",
+          "deny": "Navigation and interaction blocked",
+          "audit": "Unrestricted access with enhanced audit logging"
+        }
+      },
+      "rate_limiting": {
+        "description": "Mutex-guarded rate limiter enforcing maximum action frequencies.",
+        "features": [
+          "Configurable action per minute threshold (default 60)",
+          "Mutex lock enforcement",
+          "Clear rate limit exception messaging"
+        ]
+      },
+      "blind_injection": {
+        "description": "Credential injection via browser_type_secret. Resolves secret values server-side from secrets.json without context exposure to the LLM.",
+        "secretsFormat": {
+          "KEY_NAME": {
+            "value": "secret-value",
+            "domains": [
+              "example.com"
+            ],
+            "description": "Secret description"
+          }
+        },
+        "resolutionOrder": [
+          "./.weavetab/secrets.json (project)",
+          "~/.weavetab/secrets.json (global)"
+        ]
+      },
+      "input_filter": {
+        "description": "Sanitizes DOM snapshots before context return by stripping prompt injection patterns and invisible characters.",
+        "features": [
+          "Prompt injection pattern filtering",
+          "Control character stripping",
+          "Excessive label length truncation"
+        ]
+      },
+      "additional_mechanisms": {
+        "localhost_binding": "CDP WebSocket connection restricted strictly to 127.0.0.1",
+        "root_guard": "Startup execution block for root/superuser processes (Unix)",
+        "storage_blocker": "Configurable nullification of web storage and document.cookie",
+        "atomic_config_writes": "Atomic configuration file writes via temporary file renaming",
+        "path_traversal_protection": "Strict validation of download and profile directories against path traversal",
+        "two_factor_lock_validation": "Browser lock verification via PID liveness and TCP port checks"
+      }
+    },
+    "transport": {
+      "stdio": {
+        "description": "Standard JSON-RPC over stdio streams. Default mode for MCP clients.",
+        "default": true,
+        "cli": "weavetab"
+      },
+      "websocket": {
+        "description": "JSON-RPC over WebSocket for distributed agent pipelines.",
+        "default": false,
+        "configurable": true
+      }
+    },
+    "overlay": {
+      "hud": {
+        "description": "Shadow DOM HUD overlay injected into browser tabs displaying execution state and thoughts.",
+        "features": [
+          "Mission status display",
+          "Thought bubble rendering",
+          "Task plan visualization",
+          "Shadow DOM isolation"
+        ]
+      },
+      "ghost_cursor": {
+        "description": "Visual pointer trajectory overlay displaying humanized Bézier motion during interaction.",
+        "features": [
+          "Bézier trajectory visualization",
+          "Acceleration curve rendering",
+          "Target element highlight overlay"
+        ]
+      }
+    },
+    "plugins": {
+      "description": "Dynamic plugin system discovering any npm package containing weavetab.json and @weavetab/plugin-* packages at startup.",
+      "manifest": "weavetab.json",
+      "features": [
+        "Automatic package discovery",
+        "Native MCP tool registration",
+        "Unified security pipeline integration"
+      ]
+    },
+    "skills": {
+      "description": "Optional companion package (@weavetab/skills) providing mission templates.",
+      "package": "@weavetab/skills",
+      "repository": "https://github.com/weavetab/skills",
+      "install": "npm install -g @weavetab/skills",
+      "availableSkills": [
+        "Multi-step Form Automation",
+        "E-commerce Checkout",
+        "Data Extraction Pipelines",
+        "Content Management Systems",
+        "API Testing & Validation"
+      ]
+    }
+  },
+  "configuration": {
+    "configLocations": {
+      "global": "~/.weavetab/config.json",
+      "project": ".weavetab/config.json (precedes global)"
+    },
+    "options": {
+      "browserType": {
+        "type": "string",
+        "default": "chromium",
+        "options": [
+          "chromium",
+          "firefox",
+          "webkit"
+        ],
+        "description": "Browser engine target"
+      },
+      "headless": {
+        "type": "boolean",
+        "default": false,
+        "description": "Headless mode toggle"
+      },
+      "devMode": {
+        "type": "boolean",
+        "default": false,
+        "description": "Verbose CDP logging and HUD overlay toggle"
+      },
+      "maxActionsPerMinute": {
+        "type": "number",
+        "default": 60,
+        "description": "Action rate limit threshold"
+      },
+      "role": {
+        "type": "string",
+        "default": "admin",
+        "options": [
+          "admin",
+          "system",
+          "viewer",
+          "automation"
+        ],
+        "description": "Session RBAC role"
+      },
+      "telemetry": {
+        "type": "boolean",
+        "default": false,
+        "description": "Opt-in anonymous usage telemetry toggle"
+      },
+      "attachPort": {
+        "type": "number",
+        "default": 0,
+        "description": "Chrome DevTools Protocol attach port"
+      },
+      "extension": {
+        "type": "boolean",
+        "default": true,
+        "description": "Enable Weavetab Chrome extension integration"
+      },
+      "maxTabs": {
+        "type": "number",
+        "default": 10,
+        "description": "Maximum tracked tab count"
+      },
+      "navigationTimeout": {
+        "type": "number",
+        "default": 3600,
+        "description": "Navigation timeout in seconds"
+      },
+      "actionabilityTimeoutMs": {
+        "type": "number",
+        "default": 500,
+        "description": "Element actionability wait timeout in ms"
+      }
+    },
+    "domainPolicy": {
+      "location": "~/.weavetab/config.json (top-level \"policies\" array)",
+      "format": {
+        "policies": [
+          {
+            "pattern": "*.example.com",
+            "mode": "allow | read-only | deny | audit"
+          }
+        ]
+      }
+    },
+    "secretsManagement": {
+      "locations": [
+        ".weavetab/secrets.json (project-scoped)",
+        "~/.weavetab/secrets.json (global default)"
+      ],
+      "cli": [
+        "weavetab secrets set KEY_NAME",
+        "weavetab secrets list",
+        "weavetab secrets rm KEY_NAME",
+        "weavetab secrets init --project"
+      ],
+      "format": {
+        "KEY_NAME": {
+          "value": "secret-value",
+          "domains": [
+            "example.com"
+          ],
+          "description": "Secret description"
+        }
+      }
+    }
+  },
+  "metadata": {
+    "total_tools": 41,
+    "tool_categories": 15,
+    "latency": "3-8ms mean",
+    "token_efficiency": "Up to 97% reduction via semantic delta engine + DOM pruner",
+    "architecture": "Direct CDP WebSocket (Layer 0) — zero WebDriver, Playwright, or Puppeteer wrapper overhead",
+    "security": "Domain blacklist + RBAC (5 roles) + rate limiting + Blind Injection (secrets.json)",
+    "session_memory": "Persistent per-domain profiles with framework detection and strategy caching",
+    "loop_detection": "Strike-based (50-action window), auto-recovery at 10+ strikes",
+    "plugin_system": "Dynamic universal weavetab.json & @weavetab/plugin-* auto-discovery",
+    "skills_package": "@weavetab/skills — https://github.com/weavetab/skills",
+    "transport": "stdio (default) or WebSocket (--ws)",
+    "binary": [
+      "weavetab"
+    ]
+  }
+}