refactor: move all site adapters to independent plugins

.github/workflows/ci.yml

@@ -47,10 +47,22 @@ jobs:
       - name: Build
         run: npm run build
 
+      - name: Build plugin command manifest
+        if: runner.os == 'Linux'
+        run: npm run build-plugin-manifest
+
+      - name: Check plugin command parity
+        if: runner.os == 'Linux'
+        run: npm run check:plugin-parity
+
       - name: Check generated contract artifacts
         if: runner.os == 'Linux'
         run: npm run check:hosted-contract
 
+      - name: Check all generated artifacts are committed
+        if: runner.os == 'Linux'
+        run: git diff --exit-code -- cli-manifest.json hosted-contract.json webcmd-plugin.json README.md
+
       - name: Verify packed CLI executables
         run: npm run check:package-bin
 
@@ -85,10 +97,14 @@ jobs:
       - name: Run unit tests
         run: npx vitest run --project unit --reporter=verbose --shard=${{ matrix.shard }}/2
 
-  adapter-test:
-    name: Adapter tests
+  plugin-test:
+    name: Plugin tests (${{ matrix.os }})
     needs: build
-    runs-on: ubuntu-latest
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
     steps:
       - uses: actions/checkout@v6
 
@@ -100,8 +116,11 @@ jobs:
       - name: Install dependencies
         run: npm ci
 
-      - name: Run adapter tests
-        run: npm run test:adapter -- --reporter=verbose
+      - name: Build
+        run: npm run build
+
+      - name: Run plugin tests
+        run: npm run test:plugin -- --reporter=verbose
 
   bun-test:
     name: Bun compatibility

.github/workflows/reconcile-hosted-plugins.yml

@@ -0,0 +1,51 @@
+# Required repository secrets:
+#   GCP_WORKLOAD_IDENTITY_PROVIDER — workload identity provider resource name
+#   GCP_RECONCILE_SERVICE_ACCOUNT  — service account with run.jobs.run on the job
+#   GCP_REGION                     — region hosting webcmd-reconcile-marketplace
+#
+# The Cloud Run Job webcmd-reconcile-marketplace must exist and run
+# `npm run job:reconcile-marketplace` with DATABASE_URL, WEBCMD_ARTIFACT_ROOT,
+# and GITHUB_TOKEN configured.
+
+name: Reconcile hosted plugin catalog
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'plugins/**'
+      - 'webcmd-plugin.json'
+  workflow_dispatch:
+    # Note: manual runs should be triggered against main to ensure github.sha
+    # points to the current tip. Reconciling an older ref would delist plugins
+    # added since that commit.
+
+concurrency:
+  group: reconcile-hosted-plugins
+  cancel-in-progress: false
+
+jobs:
+  reconcile:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Authenticate to Google Cloud
+        uses: google-github-actions/auth@v2
+        with:
+          workload_identity_provider: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }}
+          service_account: ${{ secrets.GCP_RECONCILE_SERVICE_ACCOUNT }}
+
+      - name: Set up gcloud CLI
+        uses: google-github-actions/setup-gcloud@v2
+
+      - name: Execute Cloud Run Job
+        run: |
+          # Note: --update-env-vars on 'execute' (not 'update') is a per-execution
+          # override that does not modify the job's stored configuration. See:
+          # "environment variables overrides for an execution of a job"
+          gcloud run jobs execute webcmd-reconcile-marketplace \
+            --region "${{ secrets.GCP_REGION }}" \
+            --update-env-vars "WEBCMD_PLUGINS_COMMIT=${{ github.sha }}" \
+            --wait

.github/workflows/release.yml

@@ -68,10 +68,26 @@ jobs:
         if: ${{ steps.release.outputs.release_created || inputs.publish_tag != '' }}
         run: npm run build
 
+      - name: Build plugin command manifest
+        if: ${{ steps.release.outputs.release_created || inputs.publish_tag != '' }}
+        run: npm run build-plugin-manifest
+
+      - name: Check plugin command parity
+        if: ${{ steps.release.outputs.release_created || inputs.publish_tag != '' }}
+        run: npm run check:plugin-parity
+
+      - name: Check community plugin metadata
+        if: ${{ steps.release.outputs.release_created || inputs.publish_tag != '' }}
+        run: npm run check-community-plugins
+
       - name: Check generated contract artifacts
         if: ${{ steps.release.outputs.release_created || inputs.publish_tag != '' }}
         run: npm run check:hosted-contract
 
+      - name: Check all generated artifacts are committed
+        if: ${{ steps.release.outputs.release_created || inputs.publish_tag != '' }}
+        run: git diff --exit-code -- cli-manifest.json hosted-contract.json webcmd-plugin.json README.md
+
       - name: Check Codex plugin metadata
         if: ${{ steps.release.outputs.release_created || inputs.publish_tag != '' }}
         run: npm run check:codex-plugin

.gitignore

@@ -3,6 +3,7 @@ dist/
 !extension/dist/
 *.tsbuildinfo
 hosted-contract.json
+plugin-command-manifest.json
 .webcmd/
 .superpowers/
 .worktrees/

README.md

@@ -61,12 +61,21 @@ skills with `webcmd skills add` in Codex.
 
 ### Other agents or plugin-free setup
 
-Webcmd requires Node.js 20+.
+Webcmd requires Node.js 20.6+.
 
 ```bash
 npm install -g @agentrhq/webcmd
 ```
 
+The npm package ships the Webcmd core and browser commands, but no site
+adapters. Search the plugin catalog and explicitly install the adapter you
+need:
+
+```bash
+webcmd plugin search <site> -f json
+webcmd plugin install <installSource-from-search>
+```
+
 ```bash
 webcmd skills add
 ```
@@ -110,7 +119,8 @@ Beyond website adapters, Webcmd can work through authenticated browser sessions,
 | AI tools | ChatGPT, Claude, Gemini, NotebookLM | Retrieve conversations, research outputs, notebooks, and generated materials from the tools you already use. |
 | shopping and bookings | Amazon, Blinkit, Zepto, BigBasket, District, Practo | Compare products, availability, prices, appointments, events, and delivery options. |
 
-This list is illustrative; ask your agent to use webcmd to discover what is currently available.
+This list is illustrative; availability comes from installed plugins. Ask your
+agent to search and install the relevant plugin when a site is not installed.
 
 ## Learn More
 
@@ -130,7 +140,7 @@ Webcmd Cloud can run supported commands and browser sessions on hosted infrastru
 
 | Plugin | Description | Author |
 | --- | --- | --- |
-| [`pypi`](./plugins/pypi/) | Inspect public Python package metadata and releases from PyPI | [Kemal Kaya](https://github.com/yoldaolmak) |
+| [`pypi`](./plugins/pypi/) | Inspect public Python package metadata, downloads, and releases from PyPI | [Kemal Kaya](https://github.com/yoldaolmak) |
 | [`skyscanner`](./plugins/skyscanner/) | Skyscanner flight search commands for Webcmd | [Rishabh](https://github.com/rishabhraj36) |
 <!-- webcmd-community-plugins:end -->
 

TESTING.md

@@ -5,15 +5,21 @@
 ```bash
 npm run typecheck
 npm run build
+npm run build-plugin-manifest
 npm test
 ```
 
+`npm run build` must run before plugin tests because repository plugins import
+the compiled public package exports. The core package contains no site
+adapters; `npm test` runs the unit and generic plugin projects.
+
 ## Focused Checks
 
 ```bash
 npx vitest run --project unit src/skills.test.ts
 npx vitest run --project unit src/package-exports.test.ts
 npx vitest run --project unit src/convention-audit.test.ts src/runtime-copy.test.ts
+npm run test:plugin -- --reporter=verbose
 ```
 
 ## Cloak Runtime Smoke