Weavetab

██╗    ██╗███████╗ █████╗ ██╗   ██╗███████╗████████╗ █████╗ ██████╗ 
██║    ██║██╔════╝██╔══██╗██║   ██║██╔════╝╚══██╔══╝██╔══██╗██╔══██╗
██║ █╗ ██║█████╗  ███████║██║   ██║█████╗     ██║   ███████║██████╔╝
██║███╗██║██╔══╝  ██╔══██║╚██╗ ██╔╝██╔══╝     ██║   ██╔══██║██╔══██╗
╚███╔███╔╝███████╗██║  ██║ ╚████╔╝ ███████╗   ██║   ██║  ██║██████╔╝
 ╚══╝╚══╝ ╚══════╝╚═╝  ╚═╝  ╚═══╝  ╚══════╝   ╚═╝   ╚═╝  ╚═╝╚═════╝ 

WeaveTab is the foundational Layer 0 interface that connects autonomous artificial intelligence agents to live Chromium execution environments (Google Chrome, Microsoft Edge, Brave).

Conventional agent automation architectures rely on heavy virtualization, brittle screenshot-loop latency, or cloud-hosted headless browsers that compromise user credentials and leak internal enterprise network surfaces.

WeaveTab replaces this with a direct, multiplexed Chrome DevTools Protocol (CDP) engine bound strictly to local loopback (127.0.0.1). AI agents interact with the web through typed Model Context Protocol (MCP) tool definitions with sub-10ms dispatch, deterministic state awareness, and zero telemetry.

┌────────────────────────────────────────────────────────────────────────┐
│                          AGENT RUNTIME LAYER                           │
│     Claude Desktop  │  Cursor  │  Cline  │  Antigravity  │  Custom LLM │
└───────────────────────────────────┬────────────────────────────────────┘
                                    │ Model Context Protocol (JSON-RPC)
┌───────────────────────────────────▼────────────────────────────────────┐
│                  WEAVETAB LAYER 0 CORE ENGINE (@weavetab/mcp)          │
│  ┌───────────────────────┬───────────────────────┬──────────────────┐  │
│  │   44+ MCP Toolset     │  Blind Injection      │  DOM Pruning &   │  │
│  │   (click, fill, eval) │  Secret Shield        │  Delta Streaming │  │
│  └───────────┬───────────┴───────────┬───────────┴──────────┬───────┘  │
│              │                       │                      │          │
│              │ Chrome DevTools       │ Local Chrome         │ Live CDP │
│              │ Protocol (WebSocket)  │ Extension API        │ Sessions │
└──────────────┼───────────────────────┼──────────────────────┼──────────┘
               │                       │                      │
┌──────────────▼───────────────────────▼──────────────────────▼──────────┐
│                      LOCAL CHROMIUM RUNTIME                            │
│           Google Chrome   │   Microsoft Edge   │   Brave               │
└────────────────────────────────────────────────────────────────────────┘

Agents do not guess clicks through lossy vision grids or fragile heuristic selectors. WeaveTab drives Chrome directly at the protocol level. Clicks dispatch through Chromium's native Input domain, scripts execute in exact isolated contexts, and DOM snapshots are pruned semantically to save 90%+ prompt tokens.

Enterprise credentials never enter the agent's LLM context window. Through browser_type_secret, credentials resolve dynamically from local AES-protected keyrings directly into form inputs within the browser, replacing values with [REDACTED] tokens across all subsequent logs, DOM dumps, and debug artifacts.

• Zero remote servers or telemetry collectors.
• All IPC traffic strictly restricted to 127.0.0.1.
• Built-in domain access controls (allow, read-only, deny) and hard-blocked sensitive domains (banking consoles, IAM portals).

Run the server directly via npx:

npx -y @weavetab/mcp

Add to your MCP Client Configuration (cline_mcp_settings.json, Claude Desktop, or Antigravity):

{
  "mcpServers": {
    "weavetab": {
      "command": "npx",
      "args": ["-y", "@weavetab/mcp"]
    }
  }
}

For developers building custom plugins and domain tools:

npm install @weavetab/sdk

import { definePlugin, ToolBuilder } from "@weavetab/sdk";

export default definePlugin({
  name: "custom-automation",
  version: "1.0.0",
  tools: [
    new ToolBuilder("extract_metrics")
      .description("Extract custom performance metrics from active tab")
      .handler(async ({ session }) => {
        const metrics = await session.send("Performance.getMetrics");
        return { success: true, metrics };
      })
  ]
});

WeaveTab is built for environments where security is non-negotiable.

• Vulnerability Disclosure: Report security findings via private advisory or directly to security@weavetab.pages.dev. See SECURITY.md.
• Contributing: All contributions follow strict conventional commits and surgical pull request workflows. See CONTRIBUTING.md.
• Architecture Decision Records: Major architectural decisions are preserved in docs/decisions/.