Capability Discovery
The pipeline should never invent tools. Before drafting a kit that references
GitHub Actions, Supabase, Codex, or any other external dependency, check what
actually exists.
What we detect
- CLI tools on $PATH:
gh, git, node, go, rustc, cargo,
python3, pip, docker, vercel, supabase, firebase, wrangler,
ffmpeg, playwright, codex, graphify.
- MCP servers: parsed from
.mcp.json in the project root and
~/.claude.json (user level).
- Claude Code plugins: parsed from
~/.claude/plugins/installed_plugins.json.
- Codex: presence of the
codex CLI (enables peer-review commands).
- Knowledge graph: presence of
graphify-out/graph.json (enables the
graphify-integration skill).
Running discovery
node "${CLAUDE_PLUGIN_ROOT}/scripts/cavekit-tools.cjs" discover
Writes .cavekit/capabilities.json:
{
"discovered_at": "2026-04-17T14:22Z",
"cli_tools": {
"gh": true, "git": true, "node": true, "codex": false
},
"mcp_servers": ["codex-reviewer", "graphify"],
"plugins": [],
"codex": { "available": false }
}
How other commands use it
/ck:sketch — reads capabilities before proposing integrations. If a
kit would need a missing tool, it either adds a "Setup" task to the build
site or asks the user whether to proceed without it./ck:map — flags tasks that depend on missing capabilities as
blocked: setup-required./ck:make — refuses to dispatch subagents that require a missing MCP
server./ck:check — includes a "Capability Coverage" section in the inspect
report.
When to re-run
- After installing a new CLI tool.
- After adding or removing an MCP server.
- At the start of every new project (via
/ck:init).
- Whenever a task fails with "command not found".
The file is cheap to regenerate — always discover, never guess.
What we deliberately do not detect
- Network-accessible APIs behind credentials. Availability is not reachability;
kits should record credentials as a separate concern (never committed).
- IDE extensions. They are not scriptable from the loop and would create false
assurances.
- Language versions. Version-pinning is the project's responsibility
(package.json / go.mod / pyproject.toml); discovery only confirms
executables exist.
1---2name: capability-discovery3description: |4 Detect which MCP servers, Claude Code plugins, and CLI tools are available5 in the current environment, so kits and build sites can bind to real6 capabilities instead of imagined ones. Runs via /ck:init --tools-only or7 `cavekit-tools.cjs discover`. Writes .cavekit/capabilities.json. Trigger8 phrases: "what do we have available", "what's installed", "detect tools",9 "can we use X", "setup tools".10---1112# Capability Discovery1314The pipeline should never invent tools. Before drafting a kit that references15GitHub Actions, Supabase, Codex, or any other external dependency, check what16actually exists.1718## What we detect1920- **CLI tools on $PATH**: `gh`, `git`, `node`, `go`, `rustc`, `cargo`,21 `python3`, `pip`, `docker`, `vercel`, `supabase`, `firebase`, `wrangler`,22 `ffmpeg`, `playwright`, `codex`, `graphify`.23- **MCP servers**: parsed from `.mcp.json` in the project root and24 `~/.claude.json` (user level).25- **Claude Code plugins**: parsed from `~/.claude/plugins/installed_plugins.json`.26- **Codex**: presence of the `codex` CLI (enables peer-review commands).27- **Knowledge graph**: presence of `graphify-out/graph.json` (enables the28 `graphify-integration` skill).2930## Running discovery3132```bash33node "${CLAUDE_PLUGIN_ROOT}/scripts/cavekit-tools.cjs" discover34```3536Writes `.cavekit/capabilities.json`:3738```json39{40 "discovered_at": "2026-04-17T14:22Z",41 "cli_tools": {42 "gh": true, "git": true, "node": true, "codex": false43 },44 "mcp_servers": ["codex-reviewer", "graphify"],45 "plugins": [],46 "codex": { "available": false }47}48```4950## How other commands use it5152- **`/ck:sketch`** — reads capabilities before proposing integrations. If a53 kit would need a missing tool, it either adds a "Setup" task to the build54 site or asks the user whether to proceed without it.55- **`/ck:map`** — flags tasks that depend on missing capabilities as56 `blocked: setup-required`.57- **`/ck:make`** — refuses to dispatch subagents that require a missing MCP58 server.59- **`/ck:check`** — includes a "Capability Coverage" section in the inspect60 report.6162## When to re-run6364- After installing a new CLI tool.65- After adding or removing an MCP server.66- At the start of every new project (via `/ck:init`).67- Whenever a task fails with "command not found".6869The file is cheap to regenerate — always discover, never guess.7071## What we deliberately do not detect7273- Network-accessible APIs behind credentials. Availability is not reachability;74 kits should record credentials as a separate concern (never committed).75- IDE extensions. They are not scriptable from the loop and would create false76 assurances.77- Language versions. Version-pinning is the project's responsibility78 (package.json / go.mod / pyproject.toml); discovery only confirms79 executables exist.
hashgraph-online