Harness Support
skilltap registers targets independently from the authority to mutate them. Support is evaluated for the installed version, component, and concrete global or project scope. Use skilltap harness list, skilltap status, and skilltap plan for the machine-specific result.
Support tiers
- Verified — skilltap can safely perform the operation and verify the native or managed result.
- Declaration-managed — an documented file surface can be owned, preserved, rolled back, removed, and repeated safely, but no safe native observer proves that the harness loaded it. Foreground
--yesis required and status remains effective-unverified. - Observe-only — skilltap can inspect safe documented surfaces but exposes no mutation authority.
- Unsupported — the component or scope has no safe contract. It remains blocked without preventing unrelated supported work.
Harness versions do not gate operations. Native commands require a supported capability contract and compatible runtime output. The daemon never acknowledges declaration-managed operations.
Current target matrix
| Target id | Harness | Current contract |
|---|---|---|
codex | Codex | Verified native and managed behavior through compiled capability contracts. |
claude | Claude Code | Verified native marketplace/plugin behavior and managed compatibility. |
droid | Factory Droid | Verified native/managed coexistence; project marketplace operations remain unsupported where the native lifecycle lacks them. |
qwen | Qwen Code | Verified native extension conversion and managed skill/MCP projection. |
agy | Antigravity CLI | Complete global/project skills plus declaration-managed global MCP through the documented schema; project MCP and native plugin lifecycle are unsupported. |
opencode | OpenCode | Verified file-managed skills and MCP for the attested profile. |
copilot | GitHub Copilot CLI | Mixed: managed MCP has structured observation; complete skills are declaration-managed; incomplete native plugin lifecycle is unsupported. |
kiro | Kiro CLI | Complete skills and MCP declarations for the attested profile; plugin/MCP projection is declaration-managed and never invokes login. |
kimi | Kimi Code CLI | Global MCP declaration-managed; project MCP and unsupported auth/transports remain blocked. |
vibe | Mistral Vibe | Global/trusted-project static MCP declaration-managed through syntax-preserving TOML edits; OAuth and interactive effective observation are unsupported. |
kilo | Kilo Code | Valid global/project JSON/JSONC declarations are declaration-managed; side-effectful debug/list/auth probes are never invoked. |
junie | Junie | Complete skills and MCP are declaration-managed; ambiguous cross-scope MCP names block and interactive /mcp is never invoked. |
amp | Amp | Complete skills and MCP are declaration-managed; doctor, OAuth, login, browser, and trust approval are never invoked. |
pi | Pi | Observe-only compound profile with separate Pi, MCP companion, and hook companion observations. |
cursor | Cursor | Observe-only using documented agent detection and safe skill/MCP read surfaces; no mutation profile. |
zoo | Zoo Code | File-only observe-only target; editor storage, installed identity, and effective reload remain unresolved. |
zcode | ZCode | File-only observe-only target for documented global skill and MCP files; project skills and effective reload remain unresolved. |
Codex and Claude Code remain the only first-party bootstrap plugin targets. Other registered harnesses participate through ordinary enablement, status, planning, synchronization, and update behavior according to the matrix above.
Declaration-managed safety
An acknowledged declaration-managed operation does not mean the harness loaded or activated the resource. skilltap still guarantees:
- supported commands and validated native schemas;
- explicit files and consequences in the plan;
- no overwrite of unmanaged or ambiguous same-name entries;
- preservation of unrelated documented fields and credential references;
- root-confined no-follow writes;
- lock-time executable and file revalidation;
- rollback and target-local ownership;
- immediate-repeat no change;
- no daemon execution, browser, authentication, trust approval, TUI, editor automation, or side-effectful status probe.