# Compatibility

Evidence updated: 2026-10-12. Package validation confirms shipped files and manifest contracts. Loader probes confirm the specific resources and tool schemas they observe. Neither establishes model judgment, live behavior across versions, or enforcement beyond the host's controls. The [host verification register](https://github.com/agustinusnathaniel/maestria/blob/main/docs/plugin-host-verification.md) records reproducible methods and limits for plugin hosts.

## Current Package Contracts

| Host or surface | Packaged contract | Verification boundary |
| --- | --- | --- |
| Portable Agent Plugins v1 | `handoff`, `iteration-limits`, `create-pull-request`, `docs-update`, `diagnose`, and `plan`; no MCP server | Package and archive validation. The portable format does not declare native profiles, commands, rules, or hooks. |
| Claude Code | Four shared specialists (`agents/<role>.md`) and three shared commands, listed explicitly in the manifest; six skills | `claude plugin validate --strict` passes on `2.1.295`. The offline CLI fixture (`scripts/e2e/claude-skill-preload.ts`, 2026-10-12) loaded the reviewer from the shared profile with Write and Edit unavailable and the full role and global policy in the child context; on 2026-10-13 the same fixture's parent request listed all four skills then shipped (the 2026-10-13 four-skill listing describes the previous layout; the package now ships six skills). Model judgment, shell isolation, other roles, account sync, Cowork, Chat, and Desktop behavior remain unverified. |
| Cursor | Four shared profiles, three shared commands, always-apply rule (`rules/cursor/`); six skills | Live probe on Cursor CLI `2026.10.01` (2026-10-12): plugin-supplied agents did not enforce `readonly` (a write succeeded), while a project `.cursor/agents/` profile with `readonly: true` was blocked. Other hosts' frontmatter keys do not affect loading. A second CLI probe (2026-10-13) listed the four skills from the plugin then shipped (previous layout; the package now ships six skills). Cursor desktop untested. |
| Codex CLI `0.153.4` | Six marketplace skills; companion CLI installs complete native TOMLs and marked global instructions | Inspected AgentPlugin loader discovers root `skills/` and ignores the overlay selector. Package and installer tests cover companion payloads. Fresh consolidated-package CLI model E2E unverified. |
| Codex desktop | Six marketplace skills | Documented personal npm marketplace setup. Native companion and desktop behavior unverified. |
| Kimi Code | Four shared specialists, three shared commands, and the root `AGENTS.md` through `systemPromptPath`; six skills | Documented native contract and package checks. Read-only roles (adventurer, architect, reviewer) deny `Write` and `Edit`, the tool names registered by Kimi `v0.38.0` and `v2.1.1` source; earlier `WriteFile`/`StrReplaceFile` names matched nothing. Unknown keys are ignored. No per-agent model field. Not live-run: Kimi CLI 2.1.1 needs a Kimi Code subscription. |
| Devin | Root agents and `AGENTS.md`; six skills. No plugin commands component, so modes are triggered by keywords | Documented conventions and package checks. Devin CLI 3000.11.3 listed the previous layout's 7 profiles and 4 skills (2026-10-13; the current 4 profiles and 6 skills are not re-probed), `AGENTS.md` always on, `rules/global.md` manual, and ignores `.toml` and per-host rules. Native plugin agents are local CLI/Desktop only. No denylist field; read-only is prompt-level. Agent execution not run. |
| ZCode | Four shared specialists (discovered from `agents/`) and three shared commands (directory selector); six skills | ZCode source: `disallowedTools` removes `Write`/`Edit` from the subagent's tools (shell remains), unknown keys are dropped, only `.md` agents load, and there is no plugin rules component. Not live-run. |
| OMP `18.4.8` | Four task profiles, three commands, one always-apply rule, six skills | The real OMP loader probe (`scripts/e2e/omp-plugin-discovery.ts`, 2026-10-13) on archive and git root found 7 agents, 3 commands, 1 rule, and 4 skills for the previous layout; the package now ships 4 profiles and 6 skills and `.toml` files are not loaded. A real isolated install lifecycle run (2026-10-13: install, disable, reinstall, uninstall) passed 39 of 39 checks with the previous four skills. No inference or task spawning ran; no denylist, so read-only is prompt-level. |
| Hermes | Six portable skills; optional manually configured host context | Documented portable and context-loader contracts. Current six-skill archive smoke requires separate evidence. Context is not automatically imported and does not register specialists. |

OpenCode and Pi retain their separate native packages and guides. The Agent Plugins archive intentionally ships no executable adapter, hooks, automation, or MCP server; this does not imply those capabilities are unsupported by a host.

**Activation remains client-owned:** Follow the host's section in [Installation](/agent-plugins/installation/), enable the plugin when
  required, and start a fresh session. Confirm the expected utilities and native resources appear
  before relying on them. A package check or documented setup is not a live runtime compatibility
  result.