Agent Tree vs W&B Weave

Agent Tree 33

Local-package reading, as for superpowers and tokeneconomizer. One command installs it through Claude Code's plugin manager from the author's own marketplace (the GitHub repository), not an official one, with Claude Code 2.1.292 or later stated and 2.1.316 tested (15 of 20). No .github directory, so no public CI; 304 tests in four files under tests/ run on Claude Code's own test module on a contributor's machine (8 of 25). Issues couldn't be read, as github.com was unreachable from this session (5 of 25, unchecked). 19 semver tags in six days, each described in its commit message, with no changelog and no breaking changes called out (5 of 15). Version 0.5.4 (0). 33 in all.

W&B Weave 68

Graded as a hosted service on the Service API and OTLP endpoints at trace.wandb.ai. Statuspage site at status.forge.coreweave.com with ten components, a Weave backend component among them, and an incident history API (20). Since 10 July 2026 the history shows an API degradation on 1 September attributed to a Google Cloud incident, with no duration given, a 90 minute media error on 15 July, and metric ingestion and inference incidents outside Weave. None is on the Weave backend component, so minor only (20). No request rate limits for the multi-tenant Service API were found. The one limits page covers run logging on Dedicated Cloud (0). The SDK's retry schedule is documented, from 1 second doubling to 5 minutes with a 36 hour timeout, and the source retries 429 but no other 4xx. No Retry-After or idempotency guidance for direct API callers was found (8). SLA of 99.5 per cent monthly uptime for Enterprise Multi-tenant and Dedicated Cloud (10). Weave carries no preview label, though Agent Lens does (10).

Agent Tree 60

v0.5.4 tagged on 29 October 2026 and a commit on 31 October (30). 19 tags from v0.2.2 (24 October) to v0.5.4 (29 October), far more than three in 90 days (20). Issue and pull-request replies couldn't be read, as github.com was unreachable (5 of 25). Not in Claude's official plugin directory; claude.com/plugins/agent-tree answered 404 (0). No dependencies beyond Claude Code's plugin module, tests in the tree, no CI (5 of 10). 60 in all.

W&B Weave 87

Python SDK 0.53.11 released on 25 September 2026, 13 days before the check (30). Seven tagged releases between 31 July and 25 September (20). The repository's default branch had a commit on 8 October and 200 commits since 27 July. GitHub's API refused our reader, so issue reply times went unseen (14 of 25). Current Python and TypeScript SDKs, though the npm package is at 0.16.9 against 0.53.11 on PyPI (15). CI workflows for tests, nightly tests and Node tests, with lock files. 0.53.11 had to pin an OpenTelemetry exporter below 1.45 after weave.init() broke (8).

Agent Tree 60

Self-hosted rule. No payment protocol (0). Free under MIT with nothing to buy (20). No card or account (20). A person installs it with one command and no sign-up (20). 60 in all.

W&B Weave 35

No x402 or other machine payment (0). Plan prices and the ingestion overage, $0.10 per MB on Pro, are published without a login (20). Free includes 1 GB of Weave ingestion a month. The pricing page doesn't say whether a card is needed and the signup page is drawn by script, so 15 of 20. A person signs up in a browser and creates the key in the console (0).

Agent Tree 50

Framework reading, docs a model can follow, as superpowers was read. types/index.d.ts types the pane's state, and plugin.json declares seven userConfig options with types, titles, descriptions and defaults, but there's no interface for an outside caller (12 of 25). README in English and German, a nine-step GUIDE.md and PRIVACY.md, all Markdown in the repository; no llms.txt (10). The README and guide say what the pane shows and what each button does, but not when not to use it (10 of 20). Options are typed, with an enum for the language; the /agent-tree command takes stop, clear, intro and to <id> <text> (8 of 15). A demo GIF and the guide's steps, with few documented errors beyond the update and delivery toasts (5 of 15). Semver tags but no changelog or release notes read (5 of 15). 50 in all.

W&B Weave 74

A live OpenAPI 3.1 document at trace.wandb.ai/openapi.json with 114 paths, 127 operations and 334 schemas (25). llms.txt and a Markdown twin of every docs page (10). 76 of 127 operations carry a description, the document's title is the framework default, and when to use each endpoint is left to the guides (11). Request bodies are typed, with filter and sort objects, though query is a nested expression tree and several fields are marked beta and subject to change (11). The query guide has a curl example. The document lists only 200 and 422 responses (7). Dated SDK release notes per version. The API itself reports version 0.1.0 with a few /v2/ paths and no API changelog of its own (10).

Agent Tree 49

Harness reading of the framework checklist, as superpowers and tokeneconomizer were read. 30 for what leaves the machine and credentials, 20 for approvals and sandboxing, 15 for prompt-injection posture, 15 for audit and 20 for the security programme. No credentials of its own, and the only request is a daily GET of plugin.json from the main branch carrying nothing about the session. Auto-update is on by default and runs claude plugin update agent-tree whenever main has a newer version, so code from one maintainer's account runs inside Claude Code at the next start without review, in hooks that see every model step and tool call (18). Hooks act only after the person acts in the pane, per PRIVACY.md and the code. Stops, messages and model changes are explicit. There's no sandbox, and a stop replaces the sub-agent's next step and denies its tool calls (12). Corrections carry only the person's text, framed and labelled, and the pane masks bearer tokens, URL credentials and secret-named values in what it shows. No guidance on untrusted content in sub-agent output (9). Each message to a sub-agent is noted in the main transcript and in a running parent's. The event log stays in memory and isn't kept after the session (8). No SECURITY.md, no security.txt and no advisories found; GitHub's security page couldn't be read (2). 49 in all.

W&B Weave 63

Forge API keys in headers only, shown once, revocable by deletion and rotated by replacement. Service account keys are limited to a team or an organisation, and admins can enforce organisation-scoped keys. Keys have no per-permission scopes, and no expiry setting was found (22 of 30). Project roles and restricted projects, and the MCP server has a read-only mode that drops its write tools. No read-only API key (10 of 20). Traces hold whatever the application logged. PII redaction is documented, and no prompt-injection guidance for agents reading traces was found (4 of 15). Audit logs through an API, on Multi-tenant Cloud for Enterprise plans only (10 of 15). SOC 2 Type II, ISO 27001, 27017 and 27018, a private HackerOne bounty by invitation and a reporting address. No security.txt, and reporters must sign an NDA (17 of 20).

Agent Tree 63

MIT, an OSI licence (30). PRIVACY.md is the manifest's privacy page and matches the code. Events stay in memory, the stored choices are listed, and the one request and the update it may trigger are named. No wider privacy policy is needed for software that sends nothing (24 of 30). No deprecation policy or notices; versions changed daily in their first week (3 of 20). No telemetry in the source. The update check is disclosed in the README and PRIVACY.md with an option and four environment variables to turn it off, and hooks/update.ts reads the same switches. It was added and documented on 28 October 2026, a minute apart (20). 77 in all.

W&B Weave 75

The SDKs and the trace server source are Apache-2.0 on GitHub. The hosted service is proprietary under the Master Service Agreement, and self-managed deployment goes through an account representative (24 of 30). MSA, DPA, privacy policy and sub-processor list are all public. The MSA lets W&B use Customer Data to improve its services, develop new products and run AI functions, no retention period for trace data was found, and the documents name three entities, Weights and Biases, LLC, CoreWeave, Inc. and the Forge brand (18 of 30). SDK release notes flag deprecated methods. No dated deprecation policy for the Service API, and no end date for Weave now that Agent Lens is named its successor (8 of 20). Nine sub-processors and one affiliate are listed with locations and 10 days' notice of changes (18 of 20).