Nine plugins ship with the app. All are first-party, all are signed with the Grid Console publisher key, and all run under the same process sandbox as anything you install. The table is the registry index the app itself reads.
| PLUGIN | KIND | STABILITY | SHIPS |
|---|---|---|---|
| Claude-Provider (Claude Code support) | Agent provider | stable | 0.2.0 |
| Codex-Provider (Codex support) | Agent provider | unstable | 0.1.0 |
| Copilot-Provider (GitHub Copilot support) | Agent provider | unstable | 0.1.0 |
| Grid-SDLC-Default (Task workflow) | Workflow | stable | 0.1.0 |
| GitHub-Deliver (Pull requests) | Delivery | stable | 0.1.0 |
| Grid-Explain (Code explanations) | Code view | stable | 0.1.0 |
| Grid-Themes (Colour themes) | Themes | stable | 0.1.0 |
| Grid-Usage (Tokens and costs) | Insights | stable | 0.1.0 |
| Grid-Redact (Report redaction) | Problem reports | stable | 0.1.0 |
None of the nine asks for network, filesystem, shell or card write, so all nine share one locked-down process. claude-provider and copilot-provider each declare permissions.spawn as well, naming the program Grid runs on their behalf, and that is a separate question from the sandbox: a spawn block describes a program that runs outside the plugin's process altogether, as you, fenced by the trust and approval rules a spawn contract carries (see Adding a provider). It grants the plugin's own process nothing, so it is no part of what decides which plugins share one. Each plugin is on by default and can be switched off in Settings › Plugins. Switching a provider off leaves the built-in fallback prompts in place, so a card still starts with a message.
The bundled set is part way through the move from core to plugins, and it says so. Three of the nine change behaviour today; the rest are descriptors that name a subsystem while its code stays in core. Spawning itself is nearly out of core. copilot-provider was the first provider whose own manifest (a signed permissions.spawn block rather than a line in core) said how to start it, tail its transcript and wire its hooks. claude-provider now says the same. codex-provider is the last one core still starts itself, and not for want of a contract: a Codex session is a WebSocket App Server bridge Grid opens, observes and sends turns through, which "run this program with these arguments" cannot describe.
| PLUGIN | TODAY |
|---|---|
claude-provider |
Real. The provider a session spawns with and every word a stage starts with come from here, and so is the spawn contract that starts claude, reads its transcript and installs its hooks. See providers. |
codex-provider |
Real for the prompts and the roster, and the one provider core still spawns with its own hardcoded code. Its session is a WebSocket bridge rather than a program with arguments, so no spawn contract can describe it yet. See providers. |
copilot-provider |
Real: every word a stage starts with is here, as usual, and so is the spawn contract that starts the copilot process, tails its transcript and installs its hooks. Unstable, and not the default. See Adding a provider. |
grid-sdlc-default |
Real. The transition table Settings › SDLC draws, the stage contracts, and the one registered gate, before:review, which holds a card to its Review section and is switched off by its requireSections setting. before:deliver is declared and not registered, because nothing in the engine can observe "app starts locally". |
grid-explain |
Half real. The Describe this selection row in the code view's right-click menu and its keymap command are this plugin's. Core writes no file summaries or inline notes. |
github-deliver |
A descriptor: an id, a name and the action string on the Review to Deliver arrow. What Deliver does is decided by the thread's delivery policy in core. |
grid-themes |
Names and ids. The colour tokens live in the app's stylesheet. |
grid-usage |
A descriptor. The ledger is core, derived from Claude Code transcripts. |
grid-redact |
A descriptor. The obfuscation rules are core. |
The phone companion is a core surface of the app and cannot be swapped for a plugin in this build.
No tier is checked when a plugin loads. Every bundled plugin runs on every plan, writing and sideloading your own is free on every plan including Free, and the paid plans add no plugins today. What they do add is in pricing.
Arrives with the public beta, except where the milestone says otherwise. The premium set below comes with the plan named; the optional set is free to install on any plan, from a file or your own build. None of these exists as code today, so none carries a version.
| PLUGIN | WHAT | PLAN | MILESTONE |
|---|---|---|---|
grid-sync |
Cards, plans and boards across your devices, encrypted. | Solo and up | Public beta |
grid-collaboration |
Shared boards, seats, roles and viewer seats. | Crew and up | Public beta |
grid-audit |
Who decided what, kept 90 days. | Crew and up | Public beta |
slack-notify, teams-notify |
Decisions and failures into a channel. | Crew and up | Public beta |
jira-sync |
Read cards from Jira, write the outcome back. | Crew and up | Public beta |
grid-saml |
SAML sign-in and SCIM provisioning. | Fleet | November 2026 |
grid-registry |
Private plugin registry, signed builds only. | Fleet | November 2026 |
grid-policy |
Admin-locked safety rules and plugin policy. | Fleet | November 2026 |
gitlab-deliver, azure-deliver |
Deliver as a GitLab MR, or into Azure DevOps. | Any | Public beta |
ollama-provider |
Locally served models. The spawn contract it needed shipped 2026-09-02 (see Adding a provider); nobody has written this plugin against it yet. | Any | After 1.0 |
conventional-commits |
Rewrites the Deliver commit message. | Any | Public beta |
sentry-context |
The production error on the card before Prepare. | Any | Public beta |
vim-motions |
A Vim keymap for the code view. | Any | Public beta |
Every bundled plugin and the @gridconsole/plugin SDK are open source under Apache-2.0 at github.com/gridconsole/gridconsole-plugins. Each plugin is its own folder with a manifest and an entry point, so the fastest way to write your own is to copy the closest one. The signed artefacts and the index the app reads are published at gridconsole.dev/registry/index.json.
Ask about a bundled plugin, or propose a new one, in the Discord.