Capability matrix reference

August 9, 2026 · View on GitHub

Generated file — do not edit by hand. This matrix is generated from the capability registry by scripts/gen-capability-matrix.cjs and kept honest by a drift guard (tests/capability-matrix-sync.test.cjs runs --check). Any manual edit is overwritten on the next generation run. To change a capability's declared metadata, edit the corresponding capabilities/<id>/capability.json and run node scripts/gen-capability-matrix.cjs --write.

See also: ADR-1244Capability manifest fieldsThe capability trust model


Column definitions

ColumnDescription
idCanonical capability identifier; unique across first- and third-party capabilities. Reserved prefixes: gsd-, gsd-core-, anthropic-.
rolefeature — extends what the loop does; runtime — adapts GSD to a specific AI runtime/IDE; reviewer — declares a cross-AI reviewer lane (ADR-2782). A capability may be both a runtime and a reviewer.
tiercore — always active; standard — active when the runtime supports it; full — opt-in or runtime-specific.
engines.gsdSemver RANGE expressing host-version compatibility. A hard gate at install and at load. means the capability declares no range.
extension pointsThe loop points this capability registers hooks into (from the registry's byLoopPoint index). means it registers none (typical for runtime capabilities, whose job is surface emission).
hook kindsWhich of step, contribution, gate the capability's hooks use. means none.
sourcefirst-party — ships with GSD Core; third-party — installed from an external source via gsd capability install.

On versions. This matrix intentionally omits a per-capability version column. First-party capabilities are versioned in lockstep with the GSD Core package (their capability.json version always equals the GSD release version), so a per-row version would simply repeat the package version and churn the committed file on every release. The stable host-compatibility signal — engines.gsd — is shown instead. A third-party capability's exact version is recorded in the per-runtime ledger (.gsd-capabilities.json) at install time.


Native (first-party) capabilities

First-party capabilities are implicitly trusted: they ship as part of the GSD Core package and are stamped with the package version at release (per ADR-1244 D6). They are not subject to the consent or integrity-pin flow applied to third-party capabilities.

Feature capabilities (role: feature) — 21

Feature capabilities extend what the loop does — contributing research, planning, execution, verification, or ship artefacts at the loop extension points.

idroletierengines.gsdextension pointshook kindssource
ai-integrationfeaturefull>=1.6.0plan:pre, verify:prestep, contribution, gatefirst-party
assumption-deltafeaturefull>=1.6.0plan:precontributionfirst-party
auditfeaturefull>=1.6.0first-party
broken-windowsfeaturefull>=1.7.0ship:pregatefirst-party
claude-orchestrationfeaturefull>=1.7.0plan:post, execute:wave:precontributionfirst-party
code-reviewfeaturefull>=1.6.0execute:poststepfirst-party
driftfeaturefull>=1.6.0plan:pre, execute:wave:postgatefirst-party
external-jobfeaturefull>=1.7.0plan:post, execute:wave:postcontributionfirst-party
gap-analysisfeaturestandard>=1.6.0plan:postgatefirst-party
graphifyfeaturefull>=1.6.0first-party
intelfeaturefull>=1.6.0plan:prestepfirst-party
mempalacefeaturefull>=1.6.0discuss:pre, discuss:post, plan:pre, plan:post, execute:wave:post, verify:post, ship:poststep, contributionfirst-party
nyquistfeaturefull>=1.6.0verify:poststepfirst-party
pattern-mapperfeaturefull>=1.6.0plan:prestepfirst-party
profile-pipelinefeaturefull>=1.6.0first-party
refactor-triggerfeaturefull>=1.10.0execute:poststepfirst-party
researchfeaturestandard>=1.6.0plan:prestepfirst-party
schema-gatefeaturefull>=1.6.0plan:precontributionfirst-party
securityfeaturefull>=1.6.0plan:pre, verify:post, ship:prestep, contribution, gatefirst-party
tddfeaturefull>=1.6.0plan:pre, execute:postcontribution, gatefirst-party
uifeaturefull>=1.6.0plan:pre, execute:wave:post, verify:poststep, gatefirst-party

Runtime capabilities (role: runtime) — 19

Runtime capabilities adapt GSD to a specific AI runtime or IDE — emitting skills, agents, hooks configuration, and surface files for that host. They typically register no loop hooks (their primary responsibility is surface emission), so their extension-point and hook-kind cells are .

idroletierengines.gsdextension pointshook kindssource
antigravityruntimecore>=1.6.0first-party
augmentruntimecore>=1.6.0first-party
clauderuntimecore>=1.6.0first-party
clineruntimecore>=1.6.0first-party
codebuddyruntimecore>=1.6.0first-party
codexruntimecore>=1.6.0first-party
copilotruntimecore>=1.6.0first-party
cursorruntimecore>=1.6.0first-party
hermesruntimecore>=1.6.0first-party
kiloruntimecore>=1.6.0first-party
kimiruntimecore>=1.6.0first-party
kimi-coderuntimecore>=1.7.0first-party
opencoderuntimecore>=1.6.0first-party
piruntimecore>=1.7.0first-party
qwenruntimecore>=1.6.0first-party
traeruntimecore>=1.6.0first-party
vscoderuntimecore>=1.7.0first-party
windsurfruntimecore>=1.6.0first-party
zcoderuntimecore>=1.6.0first-party

Reviewer capabilities (role: reviewer) — 5

Reviewer capabilities declare a cross-AI reviewer lane — one external CLI or model endpoint /gsd-review hands a plan to (ADR-2782 D3). They are not install targets: they emit no skills, agents, hooks or surface files, so their extension-point and hook-kind cells are . A host that is also a reviewer (Claude, Codex, Cursor, OpenCode, Qwen, Antigravity) keeps one manifest and appears under runtime above, carrying its lane alongside its runtime body; only lanes that GSD never installs into appear here.

Because a lane receives the plan text, requirements, research findings and CONTEXT.md decisions, it is a disclosed executable surface and is consent-gated at install like any other — see the trust model.

idroletierengines.gsdextension pointshook kindssource
coderabbitreviewerfull>=1.8.0first-party
geminireviewerfull>=1.8.0first-party
llama-cppreviewerfull>=1.8.0first-party
lm-studioreviewerfull>=1.8.0first-party
ollamareviewerfull>=1.8.0first-party

Third-party capabilities

This matrix is the first-party catalogue: it is generated from the committed registry and therefore lists only the capabilities that ship with GSD Core. Installed third-party capabilities are NOT written into this committed file. Once a user installs one via gsd capability install <spec> it enters the runtime registry overlay (ADR-1244 D2); the overlay-aware view of what is installed on a given machine is gsd capability list (see the gsd capability command reference), which reports first-party and installed third-party capabilities together using the same column fields described below, with source = third-party.

Column values for third-party rows

ColumnValue
idAs declared in capability.json. Must not use reserved prefixes (gsd-, gsd-core-, anthropic-).
rolefeature, runtime, or reviewer, as declared.
tiercore, standard, or full, as declared.
engines.gsdRange from capability.json; verified at install and at each load.
extension pointsThe loop points the capability registers into, validated against the known 12 identifiers.
hook kindsstep, contribution, and/or gate as declared. Disclosed in the consent summary at install.
sourcethird-party

Community registry

Whether GSD operates or advertises a central community registry of third-party capabilities is TBD/TBA (PRD). The matrix mechanic and all manifest fields ship regardless of that decision; URL/git/npm/tarball import does not depend on a central registry.


Manifest field reference

The fields below are defined in capability.json and govern how a capability appears in this matrix. For the full schema, see ADR-1244 D1 and the capability manifest reference.

FieldRequiredTypePurpose
versionYessemver stringCapability version. The registry rejects manifests without it.
engines.gsdRecommendedsemver rangeHost-version compatibility gate. Enforced at install and load.
compatVersionsNoobject: cap-version → gsd-rangeGraceful-downgrade table for sources that enumerate versions (git tags, registry, npm).
integrityNosha512-<base64>SHA-512 digest of the fetched bundle. Verified before extraction when present; mismatch aborts.
provenanceNo{ sourceRepo, commit }Source provenance; populated in CI for first-party/curated capabilities.