feat(registry): add Weaviate Vector Store plugin

[Finley-Agent-Zhuazhua]

Summary

Adds the weaviateVectorStore FastGPT community toolset as a pinned submodule.

• Plugin source: https://github.com/Finley-Agent-Zhuazhua/fastgpt-plugin-weaviateVectorStore
• Plugin commit: 3042267f6835e376d513e87340fad66df154331a
• Registry branch commit: dca7303e5fcdf1fb659041f4bf91b2eed92278a6
• Tool IDs: searchObjects, upsertObjects, getObjects, deleteObjects

Tool coverage

• Search Weaviate classes/collections by near-vector query with selectable return fields, optional where filter, limit, and optional vector return.
• Batch upsert objects with JSON properties, optional IDs, and optional vectors.
• Fetch objects by ID with optional vector return.
• Delete objects by ID.

Endpoint safety: the plugin validates the configured Weaviate endpoint, rejects embedded credentials, requires HTTPS except localhost development, and only calls fixed Weaviate /v1 REST/GraphQL paths derived from the configured endpoint.

Verification

Plugin repo (fastgpt-plugin-weaviateVectorStore):

• pnpm install --ignore-workspace ✅
• pnpm run type-check ✅
• pnpm test ✅ — 2 files / 9 tests passed
• pnpm build ✅
• pnpm check ✅
• pnpm run pack ✅ — produced fastgpt-plugin-weaviateVectorStore.pkg

Registry repo:

• pnpm validate ✅ ({ "ok": true })
• pnpm test ✅ — 8 files / 34 tests passed
• pnpm type-check ✅
• git submodule status --recursive ✅ — includes packages/tools/weaviateVectorStore at 3042267f6835e376d513e87340fad66df154331a

Remote dev debug

Skipped in this scheduled agent run because it requires a live FastGPT remote-debug connection key plus a real Weaviate endpoint/API key. Local build, CLI check, package, and mocked API tests all passed.

[FinleyGe]

Plugin Review: weaviateVectorStore@0.1.0

Verdict: pass
Source: https://github.com/Finley-Agent-Zhuazhua/fastgpt-plugin-weaviateVectorStore.git@3042267f6835e376d513e87340fad66df154331a
Plugin root: packages/tools/weaviateVectorStore/.

Findings

• None blocking.

Evidence

• registry/submodule: pnpm run validate -- --base origin/main --head HEAD passed with changedPluginIds: ["weaviateVectorStore"]; registry entry matches gitlink commit 3042267f6835e376d513e87340fad66df154331a.
• install/build/check/pack: pnpm install --frozen-lockfile --ignore-workspace passed; plugin test files passed with explicit review config (2 files, 9 tests); pnpm run type-check, pnpm run build, pnpm run check, and pnpm run pack passed.
• policy scan: MIT license present; plugin-local pnpm-lock.yaml present; no catalog: or workspace: dependency specifiers; no child_process, filesystem write/delete, process.env, eval, private key, or hardcoded secret pattern found. Expected network access is limited to the configured Weaviate endpoint; endpoint normalization requires http(s), rejects embedded credentials, and requires HTTPS except localhost.
• package sha256: b6951c6dedefe11563714f5f1c80b0acc5e67b5d2ff627850af4ecc4ff0637b6 weaviateVectorStore.pkg

Publish Decision

Proceed

Scheduled Merge Gate

Merged by scheduled run 20260708T140000Z with squash merge locked to reviewed head dca7303e5fcdf1fb659041f4bf91b2eed92278a6. GitHub checks were complete and successful, the PR was not draft, no blocking labels/comments/reviews were present, and branch protection allowed normal merge.