@weavetab/skills 2.5.0-beta.4 → 2.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (60) hide show
  1. package/README.md +16 -16
  2. package/bin/cli.js +17 -17
  3. package/browser/dom-strategy.md +1 -1
  4. package/browser/form-automation.md +1 -1
  5. package/browser/interaction-pipeline.md +1 -1
  6. package/browser/tab-and-window.md +1 -1
  7. package/desktop/desktop-targeting.md +1 -1
  8. package/desktop/electron-discovery.md +1 -1
  9. package/developer/github-forensics.md +1 -1
  10. package/dist/bundled/weavetab-all.md +1704 -1699
  11. package/dist/bundled/weavetab-browser.md +1 -1
  12. package/dist/bundled/weavetab-desktop.md +1 -1
  13. package/dist/bundled/weavetab-developer.md +1 -1
  14. package/dist/bundled/weavetab-documents.md +1 -1
  15. package/dist/bundled/weavetab-memory.md +182 -182
  16. package/dist/bundled/weavetab-network-and-perf.md +2 -2
  17. package/dist/bundled/weavetab-plugins.md +37 -32
  18. package/dist/bundled/weavetab-resilience.md +1 -1
  19. package/dist/bundled/weavetab-security.md +1 -1
  20. package/dist/granular/browser_dom-strategy.md +1 -1
  21. package/dist/granular/browser_form-automation.md +1 -1
  22. package/dist/granular/browser_interaction-pipeline.md +1 -1
  23. package/dist/granular/browser_tab-and-window.md +1 -1
  24. package/dist/granular/desktop_desktop-targeting.md +1 -1
  25. package/dist/granular/desktop_electron-discovery.md +1 -1
  26. package/dist/granular/developer_github-forensics.md +1 -1
  27. package/dist/granular/documents_canvas-and-visual-capture.md +1 -1
  28. package/dist/granular/documents_office-document-ingestion.md +1 -1
  29. package/dist/granular/memory_selector-memory-system.md +1 -1
  30. package/dist/granular/memory_session-trail.md +2 -2
  31. package/dist/granular/memory_site-learning.md +1 -1
  32. package/dist/granular/network-and-perf_device-and-environment.md +1 -1
  33. package/dist/granular/network-and-perf_network-intercept-and-mock.md +2 -2
  34. package/dist/granular/network-and-perf_performance-and-vitals.md +1 -1
  35. package/dist/granular/plugins_hooks-and-overrides.md +2 -3
  36. package/dist/granular/plugins_plugin-runtime.md +41 -38
  37. package/dist/granular/resilience_loop-breaker.md +1 -1
  38. package/dist/granular/resilience_session-time-travel.md +1 -1
  39. package/dist/granular/resilience_stale-ref-recovery.md +1 -1
  40. package/dist/granular/security_rbac-and-policies.md +1 -1
  41. package/dist/granular/security_secret-containment-protocol.md +1 -1
  42. package/documents/canvas-and-visual-capture.md +1 -1
  43. package/documents/office-document-ingestion.md +1 -1
  44. package/evals/evaluator.js +2 -2
  45. package/evals/scenarios.json +8 -7
  46. package/memory/selector-memory-system.md +1 -1
  47. package/memory/session-trail.md +2 -2
  48. package/memory/site-learning.md +1 -1
  49. package/network-and-perf/device-and-environment.md +1 -1
  50. package/network-and-perf/network-intercept-and-mock.md +2 -2
  51. package/network-and-perf/performance-and-vitals.md +1 -1
  52. package/package.json +2 -2
  53. package/plugins/hooks-and-overrides.md +2 -3
  54. package/plugins/plugin-runtime.md +41 -38
  55. package/resilience/loop-breaker.md +1 -1
  56. package/resilience/session-time-travel.md +1 -1
  57. package/resilience/stale-ref-recovery.md +1 -1
  58. package/security/rbac-and-policies.md +1 -1
  59. package/security/secret-containment-protocol.md +1 -1
  60. package/skills.json +30 -35
package/dist/granular/memory_session-trail.md CHANGED
@@ -12,7 +12,7 @@ tools:
12
12
  - "browser_recording"
13
13
  - "browser_automation"
14
14
  - "browser_thoughts"
15
- weavetab: ">=2.5.0-beta.4"
15
+ weavetab: ">=2.5.0-beta.5"
16
16
  ---
17
17
 
18
18
  # Session Trails & Deterministic Macro Compilation
@@ -49,7 +49,7 @@ Or pass `dry_run: true` to inspect the compiled macro steps before running them:
49
49
  "success": true,
50
50
  "steps_completed": 0,
51
51
  "compiled_steps": [
52
- { "tool": "browser_go", "args": { "url": "https://analytics.example.com" } },
52
+ { "tool": "browser_navigate", "args": { "url": "https://analytics.example.com" } },
53
53
  { "tool": "browser_fill", "args": { "ref": "w:12", "value": "metrics" } },
54
54
  { "tool": "click_and_wait", "args": { "ref": "w:15" } }
55
55
  ],
package/dist/granular/memory_site-learning.md CHANGED
@@ -14,7 +14,7 @@ triggers:
14
14
  tools:
15
15
  - "browser_pattern_learn"
16
16
  - "browser_burst"
17
- weavetab: ">=2.5.0-beta.4"
17
+ weavetab: ">=2.5.0-beta.5"
18
18
  ---
19
19
 
20
20
  # Site Learning — Autonomous Workflow Memory
package/dist/granular/network-and-perf_device-and-environment.md CHANGED
@@ -10,7 +10,7 @@ triggers:
10
10
  - "responsive testing"
11
11
  tools:
12
12
  - "browser_emulate"
13
- weavetab: ">=2.5.0-beta.4"
13
+ weavetab: ">=2.5.0-beta.5"
14
14
  ---
15
15
 
16
16
  # Device Emulation & Environment Simulation
package/dist/granular/network-and-perf_network-intercept-and-mock.md CHANGED
@@ -10,7 +10,7 @@ triggers:
10
10
  - "network waterfall"
11
11
  tools:
12
12
  - "browser_network_intercept"
13
- weavetab: ">=2.5.0-beta.4"
13
+ weavetab: ">=2.5.0-beta.5"
14
14
  ---
15
15
 
16
16
  # Network Interception, Mocking & TLS Forensics
@@ -61,7 +61,7 @@ Extract cryptographic handshake metadata, cipher suites, expiration dates, and m
61
61
  ```json
62
62
  {
63
63
  "action": "auditTls",
64
- "url": "https://weavetab.pages.dev"
64
+ "url": "https://weavetab.dev"
65
65
  }
66
66
  ```
67
67
 
package/dist/granular/network-and-perf_performance-and-vitals.md CHANGED
@@ -12,7 +12,7 @@ triggers:
12
12
  tools:
13
13
  - "browser_performance"
14
14
  - "browser_wait"
15
- weavetab: ">=2.5.0-beta.4"
15
+ weavetab: ">=2.5.0-beta.5"
16
16
  ---
17
17
 
18
18
  # Performance Forensics & Core Web Vitals
package/dist/granular/plugins_hooks-and-overrides.md CHANGED
@@ -7,9 +7,8 @@ triggers:
7
7
  - "after tool call"
8
8
  - "telemetry interception"
9
9
  - "sdk hooks"
10
- tools:
11
- - "list_plugins"
12
- weavetab: ">=2.5.0-beta.4"
10
+ tools: []
11
+ weavetab: ">=2.5.0-beta.5"
13
12
  ---
14
13
 
15
14
  # Plugin Hooks & Lifecycle Overrides
package/dist/granular/plugins_plugin-runtime.md CHANGED
@@ -2,59 +2,62 @@
2
2
  id: plugin-runtime
3
3
  domain: plugins
4
4
  triggers:
5
- - "list plugins"
6
- - "load plugin"
7
- - "install plugin"
5
+ - "what plugins are installed"
8
6
  - "weavetab plugin"
9
7
  - "extend mcp"
10
- tools:
11
- - "list_plugins"
12
- - "load_plugin"
13
- weavetab: ">=2.5.0-beta.4"
8
+ - "plugin tools"
9
+ - "plugin permissions"
10
+ tools: []
11
+ weavetab: ">=2.5.0-beta.5"
14
12
  ---
15
13
 
16
- # Plugin Runtime: Dynamic Extension Loading
14
+ # Plugin Runtime: Weavetab Plugin Architecture
17
15
 
18
- Weavetab features an extensible plugin architecture powered by `@weavetab/sdk`. Agents can query loaded extensions and dynamically load community or official plugins into the live MCP runtime without restarting the server.
16
+ Weavetab features an extensible plugin architecture powered by `@weavetab/sdk`. All installed plugins are loaded automatically at server startup — their tools appear directly in the MCP tool list alongside built-in tools. Agents never need to discover or activate plugins manually.
19
17
 
20
18
  ---
21
19
 
22
- ## 1. Inspecting Active Plugins (`list_plugins`)
20
+ ## 1. How Plugin Tools Appear
23
21
 
24
- Discover all installed plugins, their versions, and the tools or hooks they expose:
22
+ Plugin tools are first-class MCP tools. If `@weavetab/plugin-recaptcha-solver` is installed, `captcha_solve_token` appears in the tool list immediately on startup — no discovery step needed.
25
23
 
26
- ```json
27
- {}
28
- ```
24
+ There are **no** `list_plugins` or `load_plugin` tools. Managing plugins is a CLI operation:
25
+
26
+ ```bash
27
+ # Install a plugin (restart required)
28
+ weavetab plugin add @weavetab/plugin-youtube
29
+
30
+ # Remove a plugin
31
+ weavetab plugin rm @weavetab/plugin-youtube
29
32
 
30
- ### Response Example:
31
- ```json
32
- {
33
- "plugins": [
34
- {
35
- "name": "@weavetab/plugin-recaptcha-solver",
36
- "version": "1.2.0",
37
- "status": "active",
38
- "toolsProvided": ["captcha_solve_token"],
39
- "hooks": ["beforeToolCall"]
40
- }
41
- ]
42
- }
33
+ # List installed plugins
34
+ weavetab plugin list
43
35
  ```
44
36
 
45
37
  ---
46
38
 
47
- ## 2. Dynamic Runtime Loading (`load_plugin`)
39
+ ## 2. Plugin Permission Model
48
40
 
49
- Load a verified plugin package into the active runtime session:
41
+ Every plugin declares what it can do in `weavetab.json`. The runtime enforces this at load time:
50
42
 
51
- ```json
52
- {
53
- "name": "@weavetab/plugin-datadog-tracer"
54
- }
55
- ```
43
+ | Permission | What it gates |
44
+ |---|---|
45
+ | `tools.add: true` | Plugin can register new MCP tools |
46
+ | `tools.override: ["browser_navigate"]` | Plugin can wrap/replace that built-in tool |
47
+ | `tools.remove: ["browser_pdf"]` | Plugin can disable that built-in tool |
48
+ | `hooks.onBeforeAction: true` | Plugin can intercept all tool calls before execution |
49
+ | `hooks.onAfterAction: true` | Plugin can inspect/transform all tool results |
50
+
51
+ Plugins that attempt to exceed their declared permissions are blocked with a stderr warning — they do not crash.
52
+
53
+ ---
54
+
55
+ ## 3. Trust Tiers
56
+
57
+ | Tier | Badge | Condition |
58
+ |---|---|---|
59
+ | Official | `✚ [Official]` | `@weavetab/plugin-*` packages |
60
+ | Verified | `✔ [Verified]` | Listed in the Weavetab verified registry |
61
+ | Unverified | `⚠ [Unverified]` | Unknown community package |
56
62
 
57
- ### Plugin Verification Guarantees:
58
- - Plugins must implement the `@weavetab/sdk` standard interface.
59
- - Loaded tools become immediately callable by the agent in subsequent turns.
60
- - If an agent is in the `viewer` RBAC tier, `load_plugin` is rejected with `PERMISSION_DENIED`.
63
+ Unverified plugins are loaded but their permissions are logged visibly at startup for user review.
package/dist/granular/resilience_loop-breaker.md CHANGED
@@ -12,7 +12,7 @@ tools:
12
12
  - "browser_map"
13
13
  - "browser_console"
14
14
  - "browser_captcha"
15
- weavetab: ">=2.5.0-beta.4"
15
+ weavetab: ">=2.5.0-beta.5"
16
16
  ---
17
17
 
18
18
  # Loop Breaker & CAPTCHA Escalation Protocol
package/dist/granular/resilience_session-time-travel.md CHANGED
@@ -11,7 +11,7 @@ tools:
11
11
  - "browser_checkpoint"
12
12
  - "browser_cookies"
13
13
  - "browser_storage"
14
- weavetab: ">=2.5.0-beta.4"
14
+ weavetab: ">=2.5.0-beta.5"
15
15
  ---
16
16
 
17
17
  # Session Time-Travel & Instant State Rollback
package/dist/granular/resilience_stale-ref-recovery.md CHANGED
@@ -11,7 +11,7 @@ tools:
11
11
  - "browser_find"
12
12
  - "browser_map"
13
13
  - "browser_click"
14
- weavetab: ">=2.5.0-beta.4"
14
+ weavetab: ">=2.5.0-beta.5"
15
15
  ---
16
16
 
17
17
  # Stale Ref Recovery & SPA Hydration Resilience
package/dist/granular/security_rbac-and-policies.md CHANGED
@@ -11,7 +11,7 @@ tools:
11
11
  - "browser_inspect"
12
12
  - "browser_scrape"
13
13
  - "browser_map"
14
- weavetab: ">=2.5.0-beta.4"
14
+ weavetab: ">=2.5.0-beta.5"
15
15
  ---
16
16
 
17
17
  # Role-Based Access Control (RBAC) & Agent Guardrails
package/dist/granular/security_secret-containment-protocol.md CHANGED
@@ -9,7 +9,7 @@ triggers:
9
9
  - "secret containment"
10
10
  tools:
11
11
  - "browser_type_secret"
12
- weavetab: ">=2.5.0-beta.4"
12
+ weavetab: ">=2.5.0-beta.5"
13
13
  ---
14
14
 
15
15
  # Secret Containment Protocol & Zero-Bleed Execution
package/documents/canvas-and-visual-capture.md CHANGED
@@ -15,7 +15,7 @@ tools:
15
15
  - "browser_extract_design"
16
16
  - "browser_map"
17
17
  - "browser_click"
18
- weavetab: ">=2.5.0-beta.4"
18
+ weavetab: ">=2.5.0"
19
19
  ---
20
20
 
21
21
  # Visual Capture, Canvas Forensics & Design Extraction
package/documents/office-document-ingestion.md CHANGED
@@ -10,7 +10,7 @@ triggers:
10
10
  - "parse table"
11
11
  tools:
12
12
  - "browser_office"
13
- weavetab: ">=2.5.0-beta.4"
13
+ weavetab: ">=2.5.0"
14
14
  ---
15
15
 
16
16
  # Office Document Ingestion: Word, Excel & CSV Parsing
package/evals/evaluator.js CHANGED
@@ -16,8 +16,8 @@ const OFFICIAL_TOOLS = new Set([
16
16
  "browser_screenshot", "browser_viewport", "browser_clipboard", "browser_inspect",
17
17
  "browser_extract_design", "browser_automation", "browser_recording",
18
18
  "browser_detect", "browser_performance",
19
- "browser_github", "browser_office", "browser_emulate", "list_plugins",
20
- "load_plugin", "browser_checkpoint", "browser_pattern_learn"
19
+ "browser_github", "browser_office", "browser_emulate",
20
+ "browser_checkpoint", "browser_pattern_learn"
21
21
  ]);
22
22
 
23
23
  const BANNED_TOOLS = [
package/evals/scenarios.json CHANGED
@@ -1,5 +1,5 @@
1
1
  {
2
- "version": "2.5.0-beta.4",
2
+ "version": "2.5.0",
3
3
  "scenarios": [
4
4
  {
5
5
  "id": "spa_stale_ref_recovery",
@@ -192,18 +192,19 @@
192
192
  },
193
193
  {
194
194
  "id": "plugin_dynamic_load",
195
- "description": "Agent loads an external community plugin for specialized OCR",
196
- "intent": "Check active plugins and dynamically load @weavetab/plugin-ocr",
195
+ "description": "Agent uses tools registered by an installed Weavetab plugin",
196
+ "intent": "Use plugin-provided tools that are automatically loaded at server startup",
197
197
  "expectedDomain": "plugins",
198
198
  "expectedGuide": "plugin-runtime.md",
199
199
  "expectedTools": [
200
- "list_plugins",
201
- "load_plugin"
200
+ "browser_snapshot"
202
201
  ],
203
202
  "bannedTools": [
204
- "browser_ask"
203
+ "browser_ask",
204
+ "list_plugins",
205
+ "load_plugin"
205
206
  ],
206
- "assertion": "Must query list_plugins and load verified plugin with load_plugin"
207
+ "assertion": "Must NOT call list_plugins or load_plugin — plugin tools are available directly in the tool list"
207
208
  },
208
209
  {
209
210
  "id": "github_repository_triage",
package/memory/selector-memory-system.md CHANGED
@@ -15,7 +15,7 @@ tools:
15
15
  - "browser_click"
16
16
  - "browser_fill"
17
17
  - "browser_pattern_learn"
18
- weavetab: ">=2.5.0-beta.4"
18
+ weavetab: ">=2.5.0"
19
19
  ---
20
20
 
21
21
  # Two-Tier Memory System
package/memory/session-trail.md CHANGED
@@ -12,7 +12,7 @@ tools:
12
12
  - "browser_recording"
13
13
  - "browser_automation"
14
14
  - "browser_thoughts"
15
- weavetab: ">=2.5.0-beta.4"
15
+ weavetab: ">=2.5.0"
16
16
  ---
17
17
 
18
18
  # Session Trails & Deterministic Macro Compilation
@@ -49,7 +49,7 @@ Or pass `dry_run: true` to inspect the compiled macro steps before running them:
49
49
  "success": true,
50
50
  "steps_completed": 0,
51
51
  "compiled_steps": [
52
- { "tool": "browser_go", "args": { "url": "https://analytics.example.com" } },
52
+ { "tool": "browser_navigate", "args": { "url": "https://analytics.example.com" } },
53
53
  { "tool": "browser_fill", "args": { "ref": "w:12", "value": "metrics" } },
54
54
  { "tool": "click_and_wait", "args": { "ref": "w:15" } }
55
55
  ],
package/memory/site-learning.md CHANGED
@@ -14,7 +14,7 @@ triggers:
14
14
  tools:
15
15
  - "browser_pattern_learn"
16
16
  - "browser_burst"
17
- weavetab: ">=2.5.0-beta.4"
17
+ weavetab: ">=2.5.0"
18
18
  ---
19
19
 
20
20
  # Site Learning — Autonomous Workflow Memory
package/network-and-perf/device-and-environment.md CHANGED
@@ -10,7 +10,7 @@ triggers:
10
10
  - "responsive testing"
11
11
  tools:
12
12
  - "browser_emulate"
13
- weavetab: ">=2.5.0-beta.4"
13
+ weavetab: ">=2.5.0"
14
14
  ---
15
15
 
16
16
  # Device Emulation & Environment Simulation
package/network-and-perf/network-intercept-and-mock.md CHANGED
@@ -10,7 +10,7 @@ triggers:
10
10
  - "network waterfall"
11
11
  tools:
12
12
  - "browser_network_intercept"
13
- weavetab: ">=2.5.0-beta.4"
13
+ weavetab: ">=2.5.0"
14
14
  ---
15
15
 
16
16
  # Network Interception, Mocking & TLS Forensics
@@ -61,7 +61,7 @@ Extract cryptographic handshake metadata, cipher suites, expiration dates, and m
61
61
  ```json
62
62
  {
63
63
  "action": "auditTls",
64
- "url": "https://weavetab.pages.dev"
64
+ "url": "https://weavetab.dev"
65
65
  }
66
66
  ```
67
67
 
package/network-and-perf/performance-and-vitals.md CHANGED
@@ -12,7 +12,7 @@ triggers:
12
12
  tools:
13
13
  - "browser_performance"
14
14
  - "browser_wait"
15
- weavetab: ">=2.5.0-beta.4"
15
+ weavetab: ">=2.5.0"
16
16
  ---
17
17
 
18
18
  # Performance Forensics & Core Web Vitals
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@weavetab/skills",
3
- "version": "2.5.0-beta.4",
3
+ "version": "2.5.0",
4
4
  "description": "Supercharge your AI Agents with Weavetab MCP Skills. Domain-driven agent intelligence for Antigravity, Cursor, Cline, Windsurf, and more.",
5
5
  "author": {
6
6
  "name": "fy2ne",
@@ -51,7 +51,7 @@
51
51
  "agentic"
52
52
  ],
53
53
  "peerDependencies": {
54
- "@weavetab/mcp": "2.5.0-beta.4"
54
+ "@weavetab/mcp": "2.5.0"
55
55
  },
56
56
  "peerDependenciesMeta": {
57
57
  "@weavetab/mcp": {
package/plugins/hooks-and-overrides.md CHANGED
@@ -7,9 +7,8 @@ triggers:
7
7
  - "after tool call"
8
8
  - "telemetry interception"
9
9
  - "sdk hooks"
10
- tools:
11
- - "list_plugins"
12
- weavetab: ">=2.5.0-beta.4"
10
+ tools: []
11
+ weavetab: ">=2.5.0"
13
12
  ---
14
13
 
15
14
  # Plugin Hooks & Lifecycle Overrides
package/plugins/plugin-runtime.md CHANGED
@@ -2,59 +2,62 @@
2
2
  id: plugin-runtime
3
3
  domain: plugins
4
4
  triggers:
5
- - "list plugins"
6
- - "load plugin"
7
- - "install plugin"
5
+ - "what plugins are installed"
8
6
  - "weavetab plugin"
9
7
  - "extend mcp"
10
- tools:
11
- - "list_plugins"
12
- - "load_plugin"
13
- weavetab: ">=2.5.0-beta.4"
8
+ - "plugin tools"
9
+ - "plugin permissions"
10
+ tools: []
11
+ weavetab: ">=2.5.0"
14
12
  ---
15
13
 
16
- # Plugin Runtime: Dynamic Extension Loading
14
+ # Plugin Runtime: Weavetab Plugin Architecture
17
15
 
18
- Weavetab features an extensible plugin architecture powered by `@weavetab/sdk`. Agents can query loaded extensions and dynamically load community or official plugins into the live MCP runtime without restarting the server.
16
+ Weavetab features an extensible plugin architecture powered by `@weavetab/sdk`. All installed plugins are loaded automatically at server startup — their tools appear directly in the MCP tool list alongside built-in tools. Agents never need to discover or activate plugins manually.
19
17
 
20
18
  ---
21
19
 
22
- ## 1. Inspecting Active Plugins (`list_plugins`)
20
+ ## 1. How Plugin Tools Appear
23
21
 
24
- Discover all installed plugins, their versions, and the tools or hooks they expose:
22
+ Plugin tools are first-class MCP tools. If `@weavetab/plugin-recaptcha-solver` is installed, `captcha_solve_token` appears in the tool list immediately on startup — no discovery step needed.
25
23
 
26
- ```json
27
- {}
28
- ```
24
+ There are **no** `list_plugins` or `load_plugin` tools. Managing plugins is a CLI operation:
25
+
26
+ ```bash
27
+ # Install a plugin (restart required)
28
+ weavetab plugin add @weavetab/plugin-youtube
29
+
30
+ # Remove a plugin
31
+ weavetab plugin rm @weavetab/plugin-youtube
29
32
 
30
- ### Response Example:
31
- ```json
32
- {
33
- "plugins": [
34
- {
35
- "name": "@weavetab/plugin-recaptcha-solver",
36
- "version": "1.2.0",
37
- "status": "active",
38
- "toolsProvided": ["captcha_solve_token"],
39
- "hooks": ["beforeToolCall"]
40
- }
41
- ]
42
- }
33
+ # List installed plugins
34
+ weavetab plugin list
43
35
  ```
44
36
 
45
37
  ---
46
38
 
47
- ## 2. Dynamic Runtime Loading (`load_plugin`)
39
+ ## 2. Plugin Permission Model
48
40
 
49
- Load a verified plugin package into the active runtime session:
41
+ Every plugin declares what it can do in `weavetab.json`. The runtime enforces this at load time:
50
42
 
51
- ```json
52
- {
53
- "name": "@weavetab/plugin-datadog-tracer"
54
- }
55
- ```
43
+ | Permission | What it gates |
44
+ |---|---|
45
+ | `tools.add: true` | Plugin can register new MCP tools |
46
+ | `tools.override: ["browser_navigate"]` | Plugin can wrap/replace that built-in tool |
47
+ | `tools.remove: ["browser_pdf"]` | Plugin can disable that built-in tool |
48
+ | `hooks.onBeforeAction: true` | Plugin can intercept all tool calls before execution |
49
+ | `hooks.onAfterAction: true` | Plugin can inspect/transform all tool results |
50
+
51
+ Plugins that attempt to exceed their declared permissions are blocked with a stderr warning — they do not crash.
52
+
53
+ ---
54
+
55
+ ## 3. Trust Tiers
56
+
57
+ | Tier | Badge | Condition |
58
+ |---|---|---|
59
+ | Official | `✚ [Official]` | `@weavetab/plugin-*` packages |
60
+ | Verified | `✔ [Verified]` | Listed in the Weavetab verified registry |
61
+ | Unverified | `⚠ [Unverified]` | Unknown community package |
56
62
 
57
- ### Plugin Verification Guarantees:
58
- - Plugins must implement the `@weavetab/sdk` standard interface.
59
- - Loaded tools become immediately callable by the agent in subsequent turns.
60
- - If an agent is in the `viewer` RBAC tier, `load_plugin` is rejected with `PERMISSION_DENIED`.
63
+ Unverified plugins are loaded but their permissions are logged visibly at startup for user review.
package/resilience/loop-breaker.md CHANGED
@@ -12,7 +12,7 @@ tools:
12
12
  - "browser_map"
13
13
  - "browser_console"
14
14
  - "browser_captcha"
15
- weavetab: ">=2.5.0-beta.4"
15
+ weavetab: ">=2.5.0"
16
16
  ---
17
17
 
18
18
  # Loop Breaker & CAPTCHA Escalation Protocol
package/resilience/session-time-travel.md CHANGED
@@ -11,7 +11,7 @@ tools:
11
11
  - "browser_checkpoint"
12
12
  - "browser_cookies"
13
13
  - "browser_storage"
14
- weavetab: ">=2.5.0-beta.4"
14
+ weavetab: ">=2.5.0"
15
15
  ---
16
16
 
17
17
  # Session Time-Travel & Instant State Rollback
package/resilience/stale-ref-recovery.md CHANGED
@@ -11,7 +11,7 @@ tools:
11
11
  - "browser_find"
12
12
  - "browser_map"
13
13
  - "browser_click"
14
- weavetab: ">=2.5.0-beta.4"
14
+ weavetab: ">=2.5.0"
15
15
  ---
16
16
 
17
17
  # Stale Ref Recovery & SPA Hydration Resilience
package/security/rbac-and-policies.md CHANGED
@@ -11,7 +11,7 @@ tools:
11
11
  - "browser_inspect"
12
12
  - "browser_scrape"
13
13
  - "browser_map"
14
- weavetab: ">=2.5.0-beta.4"
14
+ weavetab: ">=2.5.0"
15
15
  ---
16
16
 
17
17
  # Role-Based Access Control (RBAC) & Agent Guardrails
package/security/secret-containment-protocol.md CHANGED
@@ -9,7 +9,7 @@ triggers:
9
9
  - "secret containment"
10
10
  tools:
11
11
  - "browser_type_secret"
12
- weavetab: ">=2.5.0-beta.4"
12
+ weavetab: ">=2.5.0"
13
13
  ---
14
14
 
15
15
  # Secret Containment Protocol & Zero-Bleed Execution