@weavetab/skills 2.5.0-beta.4 → 2.5.0-beta.5

package/evals/scenarios.json

@@ -1,5 +1,5 @@
 {
-  "version": "2.5.0-beta.4",
+  "version": "2.5.0-beta.5",
   "scenarios": [
     {
       "id": "spa_stale_ref_recovery",
@@ -192,18 +192,19 @@
     },
     {
       "id": "plugin_dynamic_load",
-      "description": "Agent loads an external community plugin for specialized OCR",
-      "intent": "Check active plugins and dynamically load @weavetab/plugin-ocr",
+      "description": "Agent uses tools registered by an installed Weavetab plugin",
+      "intent": "Use plugin-provided tools that are automatically loaded at server startup",
       "expectedDomain": "plugins",
       "expectedGuide": "plugin-runtime.md",
       "expectedTools": [
-        "list_plugins",
-        "load_plugin"
+        "browser_snapshot"
       ],
       "bannedTools": [
-        "browser_ask"
+        "browser_ask",
+        "list_plugins",
+        "load_plugin"
       ],
-      "assertion": "Must query list_plugins and load verified plugin with load_plugin"
+      "assertion": "Must NOT call list_plugins or load_plugin — plugin tools are available directly in the tool list"
     },
     {
       "id": "github_repository_triage",

package/memory/selector-memory-system.md

@@ -15,7 +15,7 @@ tools:
   - "browser_click"
   - "browser_fill"
   - "browser_pattern_learn"
-weavetab: ">=2.5.0-beta.4"
+weavetab: ">=2.5.0-beta.5"
 ---
 
 # Two-Tier Memory System

package/memory/session-trail.md

@@ -12,7 +12,7 @@ tools:
   - "browser_recording"
   - "browser_automation"
   - "browser_thoughts"
-weavetab: ">=2.5.0-beta.4"
+weavetab: ">=2.5.0-beta.5"
 ---
 
 # Session Trails & Deterministic Macro Compilation
@@ -49,7 +49,7 @@ Or pass `dry_run: true` to inspect the compiled macro steps before running them:
   "success": true,
   "steps_completed": 0,
   "compiled_steps": [
-    { "tool": "browser_go", "args": { "url": "https://analytics.example.com" } },
+    { "tool": "browser_navigate", "args": { "url": "https://analytics.example.com" } },
     { "tool": "browser_fill", "args": { "ref": "w:12", "value": "metrics" } },
     { "tool": "click_and_wait", "args": { "ref": "w:15" } }
   ],

package/memory/site-learning.md

@@ -14,7 +14,7 @@ triggers:
 tools:
   - "browser_pattern_learn"
   - "browser_burst"
-weavetab: ">=2.5.0-beta.4"
+weavetab: ">=2.5.0-beta.5"
 ---
 
 # Site Learning — Autonomous Workflow Memory

package/network-and-perf/device-and-environment.md

@@ -10,7 +10,7 @@ triggers:
   - "responsive testing"
 tools:
   - "browser_emulate"
-weavetab: ">=2.5.0-beta.4"
+weavetab: ">=2.5.0-beta.5"
 ---
 
 # Device Emulation & Environment Simulation

package/network-and-perf/network-intercept-and-mock.md

@@ -10,7 +10,7 @@ triggers:
   - "network waterfall"
 tools:
   - "browser_network_intercept"
-weavetab: ">=2.5.0-beta.4"
+weavetab: ">=2.5.0-beta.5"
 ---
 
 # Network Interception, Mocking & TLS Forensics
@@ -61,7 +61,7 @@ Extract cryptographic handshake metadata, cipher suites, expiration dates, and m
 ```json
 {
   "action": "auditTls",
-  "url": "https://weavetab.pages.dev"
+  "url": "https://weavetab.dev"
 }
 ```
 

package/network-and-perf/performance-and-vitals.md

@@ -12,7 +12,7 @@ triggers:
 tools:
   - "browser_performance"
   - "browser_wait"
-weavetab: ">=2.5.0-beta.4"
+weavetab: ">=2.5.0-beta.5"
 ---
 
 # Performance Forensics & Core Web Vitals

package/package.json

@@ -1,73 +1,73 @@
-{
-  "name": "@weavetab/skills",
-  "version": "2.5.0-beta.4",
-  "description": "Supercharge your AI Agents with Weavetab MCP Skills. Domain-driven agent intelligence for Antigravity, Cursor, Cline, Windsurf, and more.",
-  "author": {
-    "name": "fy2ne",
-    "email": "hello@fy2ne.me",
-    "url": "https://fy2ne.me"
-  },
-  "license": "MIT",
-  "files": [
-    "bin",
-    "src",
-    "dist",
-    "ROUTER.md",
-    "browser",
-    "desktop",
-    "memory",
-    "resilience",
-    "security",
-    "plugins",
-    "network-and-perf",
-    "documents",
-    "developer",
-    "evals",
-    "skills.json"
-  ],
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/Weavetab/skills.git"
-  },
-  "homepage": "https://github.com/Weavetab/skills#readme",
-  "bugs": {
-    "url": "https://github.com/Weavetab/skills/issues"
-  },
-  "keywords": [
-    "weavetab",
-    "weavetab-mcp",
-    "weavetab-skills",
-    "weavetab-plugins",
-    "mcp",
-    "ai-agent",
-    "cursor",
-    "cline",
-    "antigravity",
-    "browser-automation",
-    "agent-skills",
-    "openclaw",
-    "plugins",
-    "skills",
-    "agentic"
-  ],
-  "peerDependencies": {
-    "@weavetab/mcp": "2.5.0-beta.4"
-  },
-  "peerDependenciesMeta": {
-    "@weavetab/mcp": {
-      "optional": true
-    }
-  },
-  "main": "./src/api.js",
-  "bin": {
-    "skills": "bin/cli.js"
-  },
-  "scripts": {
-    "build": "node scripts/build.js",
-    "test": "node evals/evaluator.js"
-  },
-  "dependencies": {
-    "@inquirer/prompts": "^7.3.1",
-    "yaml": "^2.3.4"
-  }
-}
+{
+  "name": "@weavetab/skills",
+  "version": "2.5.0-beta.5",
+  "description": "Supercharge your AI Agents with Weavetab MCP Skills. Domain-driven agent intelligence for Antigravity, Cursor, Cline, Windsurf, and more.",
+  "author": {
+    "name": "fy2ne",
+    "email": "hello@fy2ne.me",
+    "url": "https://fy2ne.me"
+  },
+  "license": "MIT",
+  "files": [
+    "bin",
+    "src",
+    "dist",
+    "ROUTER.md",
+    "browser",
+    "desktop",
+    "memory",
+    "resilience",
+    "security",
+    "plugins",
+    "network-and-perf",
+    "documents",
+    "developer",
+    "evals",
+    "skills.json"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Weavetab/skills.git"
+  },
+  "homepage": "https://github.com/Weavetab/skills#readme",
+  "bugs": {
+    "url": "https://github.com/Weavetab/skills/issues"
+  },
+  "keywords": [
+    "weavetab",
+    "weavetab-mcp",
+    "weavetab-skills",
+    "weavetab-plugins",
+    "mcp",
+    "ai-agent",
+    "cursor",
+    "cline",
+    "antigravity",
+    "browser-automation",
+    "agent-skills",
+    "openclaw",
+    "plugins",
+    "skills",
+    "agentic"
+  ],
+  "peerDependencies": {
+    "@weavetab/mcp": "2.5.0-beta.5"
+  },
+  "peerDependenciesMeta": {
+    "@weavetab/mcp": {
+      "optional": true
+    }
+  },
+  "main": "./src/api.js",
+  "bin": {
+    "skills": "bin/cli.js"
+  },
+  "scripts": {
+    "build": "node scripts/build.js",
+    "test": "node evals/evaluator.js"
+  },
+  "dependencies": {
+    "@inquirer/prompts": "^7.3.1",
+    "yaml": "^2.3.4"
+  }
+}

package/plugins/hooks-and-overrides.md

@@ -7,9 +7,8 @@ triggers:
   - "after tool call"
   - "telemetry interception"
   - "sdk hooks"
-tools:
-  - "list_plugins"
-weavetab: ">=2.5.0-beta.4"
+tools: []
+weavetab: ">=2.5.0-beta.5"
 ---
 
 # Plugin Hooks & Lifecycle Overrides

package/plugins/plugin-runtime.md

@@ -1,60 +1,63 @@
----
-id: plugin-runtime
-domain: plugins
-triggers:
-  - "list plugins"
-  - "load plugin"
-  - "install plugin"
-  - "weavetab plugin"
-  - "extend mcp"
-tools:
-  - "list_plugins"
-  - "load_plugin"
-weavetab: ">=2.5.0-beta.4"
----
-
-# Plugin Runtime: Dynamic Extension Loading
-
-Weavetab features an extensible plugin architecture powered by `@weavetab/sdk`. Agents can query loaded extensions and dynamically load community or official plugins into the live MCP runtime without restarting the server.
-
----
-
-## 1. Inspecting Active Plugins (`list_plugins`)
-
-Discover all installed plugins, their versions, and the tools or hooks they expose:
-
-```json
-{}
-```
-
-### Response Example:
-```json
-{
-  "plugins": [
-    {
-      "name": "@weavetab/plugin-recaptcha-solver",
-      "version": "1.2.0",
-      "status": "active",
-      "toolsProvided": ["captcha_solve_token"],
-      "hooks": ["beforeToolCall"]
-    }
-  ]
-}
-```
-
----
-
-## 2. Dynamic Runtime Loading (`load_plugin`)
-
-Load a verified plugin package into the active runtime session:
-
-```json
-{
-  "name": "@weavetab/plugin-datadog-tracer"
-}
-```
-
-### Plugin Verification Guarantees:
-- Plugins must implement the `@weavetab/sdk` standard interface.
-- Loaded tools become immediately callable by the agent in subsequent turns.
-- If an agent is in the `viewer` RBAC tier, `load_plugin` is rejected with `PERMISSION_DENIED`.
+---
+id: plugin-runtime
+domain: plugins
+triggers:
+  - "what plugins are installed"
+  - "weavetab plugin"
+  - "extend mcp"
+  - "plugin tools"
+  - "plugin permissions"
+tools: []
+weavetab: ">=2.5.0-beta.5"
+---
+
+# Plugin Runtime: Weavetab Plugin Architecture
+
+Weavetab features an extensible plugin architecture powered by `@weavetab/sdk`. All installed plugins are loaded automatically at server startup — their tools appear directly in the MCP tool list alongside built-in tools. Agents never need to discover or activate plugins manually.
+
+---
+
+## 1. How Plugin Tools Appear
+
+Plugin tools are first-class MCP tools. If `@weavetab/plugin-recaptcha-solver` is installed, `captcha_solve_token` appears in the tool list immediately on startup — no discovery step needed.
+
+There are **no** `list_plugins` or `load_plugin` tools. Managing plugins is a CLI operation:
+
+```bash
+# Install a plugin (restart required)
+weavetab plugin add @weavetab/plugin-youtube
+
+# Remove a plugin
+weavetab plugin rm @weavetab/plugin-youtube
+
+# List installed plugins
+weavetab plugin list
+```
+
+---
+
+## 2. Plugin Permission Model
+
+Every plugin declares what it can do in `weavetab.json`. The runtime enforces this at load time:
+
+| Permission | What it gates |
+|---|---|
+| `tools.add: true` | Plugin can register new MCP tools |
+| `tools.override: ["browser_navigate"]` | Plugin can wrap/replace that built-in tool |
+| `tools.remove: ["browser_pdf"]` | Plugin can disable that built-in tool |
+| `hooks.onBeforeAction: true` | Plugin can intercept all tool calls before execution |
+| `hooks.onAfterAction: true` | Plugin can inspect/transform all tool results |
+
+Plugins that attempt to exceed their declared permissions are blocked with a stderr warning — they do not crash.
+
+---
+
+## 3. Trust Tiers
+
+| Tier | Badge | Condition |
+|---|---|---|
+| Official | `✚ [Official]` | `@weavetab/plugin-*` packages |
+| Verified | `✔ [Verified]` | Listed in the Weavetab verified registry |
+| Unverified | `⚠ [Unverified]` | Unknown community package |
+
+Unverified plugins are loaded but their permissions are logged visibly at startup for user review.

package/resilience/loop-breaker.md

@@ -12,7 +12,7 @@ tools:
   - "browser_map"
   - "browser_console"
   - "browser_captcha"
-weavetab: ">=2.5.0-beta.4"
+weavetab: ">=2.5.0-beta.5"
 ---
 
 # Loop Breaker & CAPTCHA Escalation Protocol

package/resilience/session-time-travel.md

@@ -11,7 +11,7 @@ tools:
   - "browser_checkpoint"
   - "browser_cookies"
   - "browser_storage"
-weavetab: ">=2.5.0-beta.4"
+weavetab: ">=2.5.0-beta.5"
 ---
 
 # Session Time-Travel & Instant State Rollback

package/resilience/stale-ref-recovery.md

@@ -11,7 +11,7 @@ tools:
   - "browser_find"
   - "browser_map"
   - "browser_click"
-weavetab: ">=2.5.0-beta.4"
+weavetab: ">=2.5.0-beta.5"
 ---
 
 # Stale Ref Recovery & SPA Hydration Resilience

package/security/rbac-and-policies.md

@@ -11,7 +11,7 @@ tools:
   - "browser_inspect"
   - "browser_scrape"
   - "browser_map"
-weavetab: ">=2.5.0-beta.4"
+weavetab: ">=2.5.0-beta.5"
 ---
 
 # Role-Based Access Control (RBAC) & Agent Guardrails

package/security/secret-containment-protocol.md

@@ -9,7 +9,7 @@ triggers:
   - "secret containment"
 tools:
   - "browser_type_secret"
-weavetab: ">=2.5.0-beta.4"
+weavetab: ">=2.5.0-beta.5"
 ---
 
 # Secret Containment Protocol & Zero-Bleed Execution