# Provider compatibility inventory

Generated by `python tools/portability/provider_inventory.py`; validate with `--check`.
The companion [machine-readable source audit](provider-audit.json) records entry hashes,
native host calls, literal path evidence, fixture links and inspected gaps for every provider.

**I** = implemented, live credentials/app versions unverified. **P** = partial: a specific
method/path gap is recorded below. **U-cache** = this entry uses an unsupported CFNetwork
cache method on that OS; it does not mean the upstream provider/app is unsupported.
No row is marked credential-verified. Native CI and fixture coverage are separate evidence.
The obsolete “blocked on native build” baseline is removed: #3 is complete.

Manifest modes are declarations, not proof that the script implements distinct paths.
Scripts that do not branch on `sourceMode` may share one mechanism across declared modes;
the source audit records that fact rather than promising a separate web/OAuth/CLI flow.
Manual web credentials and automatic browser import are separate. See
[browser authentication](browser-authentication.md), [native paths](provider-paths.md),
[Codex auth](codex-authentication.md), and [IDE discovery](ide-discovery.md).

Inventory: 100 providers; 142 declared provider/source pairs.

| Provider | Source | Auto selects | Mechanisms in entry | Linux | macOS | Windows |
| --- | --- | --- | --- | --- | --- | --- |
| [abacus-ai](../plugins/abacus-ai/plugin.js) | web | web | manual web credential | I | I | I |
| [aiand](../plugins/aiand/plugin.js) | api | api | configured token/key | I | I | I |
| [aixy](../plugins/aixy/plugin.js) | api | api | configured token/key, native bundled-provider adapter | I | I | I |
| [alibaba](../plugins/alibaba/plugin.js) | web | web | configured token/key, manual web credential | I | I | I |
| [alibaba-token-plan](../plugins/alibaba-token-plan/plugin.js) | web | web | manual web credential | I | I | I |
| [amp](../plugins/amp/plugin.js) | api | local | configured token/key, files | P | P | P |
| [amp](../plugins/amp/plugin.js) | local | local | configured token/key, files | P | P | P |
| [antigravity](../plugins/antigravity/plugin.js) | oauth | oauth | configured token/key, files, SQLite, OS store, IDE process | I | I | I |
| [antigravity](../plugins/antigravity/plugin.js) | local | oauth | configured token/key, files, SQLite, OS store, IDE process | I | I | I |
| [antigravity-cli](../plugins/antigravity-cli/plugin.js) | oauth | oauth | files, OS store | I | I | I |
| [antigravity-cli](../plugins/antigravity-cli/plugin.js) | local | oauth | files, OS store | I | I | I |
| [antigravity-ide](../plugins/antigravity-ide/plugin.js) | local | local | IDE process | I | I | I |
| [atlascloud](../plugins/atlascloud/plugin.js) | api | api | configured token/key, native bundled-provider adapter | I | I | I |
| [augment](../plugins/augment/plugin.js) | oauth | oauth | files | P | P | P |
| [augment](../plugins/augment/plugin.js) | local | oauth | files | P | P | P |
| [aws-bedrock](../plugins/aws-bedrock/plugin.js) | api | api | provider-specific settings/HTTPS | I | I | I |
| [azure-openai](../plugins/azure-openai/plugin.js) | api | api | configured token/key | I | I | I |
| [bifrost](../plugins/bifrost/plugin.js) | api | api | configured token/key, native bundled-provider adapter | I | I | I |
| [chutes](../plugins/chutes/plugin.js) | api | api | configured token/key | I | I | I |
| [claude](../plugins/claude/plugin.js) | oauth | oauth | configured token/key, manual web credential, files, OS store, CLI helper, local/export collector | I | I | I |
| [claude](../plugins/claude/plugin.js) | cli | oauth | configured token/key, manual web credential, files, OS store, CLI helper, local/export collector | I | I | I |
| [claude](../plugins/claude/plugin.js) | web | oauth | configured token/key, manual web credential, files, OS store, CLI helper, local/export collector | I | I | I |
| [claude](../plugins/claude/plugin.js) | local | oauth | configured token/key, manual web credential, files, OS store, CLI helper, local/export collector | I | I | I |
| [claude](../plugins/claude/plugin.js) | api | oauth | configured token/key, manual web credential, files, OS store, CLI helper, local/export collector | I | I | I |
| [clawrouter](../plugins/clawrouter/plugin.js) | api | api | configured token/key | I | I | I |
| [clinepass](../plugins/clinepass/plugin.js) | api | api | configured token/key, files | I | I | I |
| [codebuddy](../plugins/codebuddy/plugin.js) | web | web | manual web credential, files | I | I | I |
| [codebuddy](../plugins/codebuddy/plugin.js) | local | web | manual web credential, files | I | I | I |
| [codebuff](../plugins/codebuff/plugin.js) | api | local | configured token/key, files | P | P | P |
| [codebuff](../plugins/codebuff/plugin.js) | local | local | configured token/key, files | P | P | P |
| [coderabbit](../plugins/coderabbit/plugin.js) | cli | cli | CLI helper | I | I | I |
| [codex](../plugins/codex/plugin.js) | oauth | oauth | configured token/key, files, OS store, local/export collector, native Codex auth adapter | I | I | I |
| [codex](../plugins/codex/plugin.js) | local | oauth | configured token/key, files, OS store, local/export collector, native Codex auth adapter | I | I | I |
| [codex](../plugins/codex/plugin.js) | web | oauth | configured token/key, files, OS store, local/export collector, native Codex auth adapter | I | I | I |
| [command-code](../plugins/command-code/plugin.js) | web | web | configured token/key, files | I | I | I |
| [copilot](../plugins/copilot/plugin.js) | oauth | local | manual web credential, files, OS store, CLI helper | I | I | I |
| [copilot](../plugins/copilot/plugin.js) | local | local | manual web credential, files, OS store, CLI helper | I | I | I |
| [copilot](../plugins/copilot/plugin.js) | cli | local | manual web credential, files, OS store, CLI helper | I | I | I |
| [crof](../plugins/crof/plugin.js) | api | api | configured token/key | I | I | I |
| [crofai](../plugins/crofai/plugin.js) | api | api | configured token/key | I | I | I |
| [cursor](../plugins/cursor/plugin.js) | oauth | local | configured token/key, files, SQLite, OS store, local/export collector | I | I | I |
| [cursor](../plugins/cursor/plugin.js) | local | local | configured token/key, files, SQLite, OS store, local/export collector | I | I | I |
| [cursor-nightly](../plugins/cursor-nightly/plugin.js) | oauth | local | configured token/key, files, SQLite, OS store, local/export collector | I | I | I |
| [cursor-nightly](../plugins/cursor-nightly/plugin.js) | local | local | configured token/key, files, SQLite, OS store, local/export collector | I | I | I |
| [deepgram](../plugins/deepgram/plugin.js) | api | api | configured token/key | I | I | I |
| [deepinfra](../plugins/deepinfra/plugin.js) | api | api | configured token/key | I | I | I |
| [deepseek](../plugins/deepseek/plugin.js) | api | api | configured token/key, manual web credential | I | I | I |
| [deepseek](../plugins/deepseek/plugin.js) | web | api | configured token/key, manual web credential | I | I | I |
| [devin](../plugins/devin/plugin.js) | local | local | configured token/key, manual web credential, files, SQLite | I | I | I |
| [devin](../plugins/devin/plugin.js) | web | local | configured token/key, manual web credential, files, SQLite | I | I | I |
| [devpass](../plugins/devpass/plugin.js) | api | api | configured token/key, native bundled-provider adapter | I | I | I |
| [doubao](../plugins/doubao/plugin.js) | api | api | configured token/key | I | I | I |
| [droid](../plugins/factory/plugin.js) | api | oauth | configured token/key, manual web credential, files, OS store | P | P | P |
| [droid](../plugins/factory/plugin.js) | oauth | oauth | configured token/key, manual web credential, files, OS store | P | P | P |
| [droid](../plugins/factory/plugin.js) | local | oauth | configured token/key, manual web credential, files, OS store | P | P | P |
| [droid](../plugins/factory/plugin.js) | web | oauth | configured token/key, manual web credential, files, OS store | P | P | P |
| [elevenlabs](../plugins/elevenlabs/plugin.js) | api | api | configured token/key | I | I | I |
| [factory](../plugins/factory/plugin.js) | api | oauth | configured token/key, manual web credential, files, OS store | P | P | P |
| [factory](../plugins/factory/plugin.js) | oauth | oauth | configured token/key, manual web credential, files, OS store | P | P | P |
| [factory](../plugins/factory/plugin.js) | local | oauth | configured token/key, manual web credential, files, OS store | P | P | P |
| [factory](../plugins/factory/plugin.js) | web | oauth | configured token/key, manual web credential, files, OS store | P | P | P |
| [fireworks-ai](../plugins/fireworks-ai/plugin.js) | api | api | configured token/key | I | I | I |
| [gemini](../plugins/gemini/plugin.js) | oauth | oauth | files | P | P | P |
| [gemini](../plugins/gemini/plugin.js) | local | oauth | files | P | P | P |
| [gemini-apps](../plugins/gemini-apps/plugin.js) | web | web | manual web credential | I | I | I |
| [gitkraken](../plugins/gitkraken/plugin.js) | api | api | native bundled-provider adapter | I | I | I |
| [grok](../plugins/grok/plugin.js) | cli | cli | files | I | I | I |
| [grok](../plugins/grok/plugin.js) | local | cli | files | I | I | I |
| [groqcloud](../plugins/groqcloud/plugin.js) | api | api | configured token/key | I | I | I |
| [helmcode](../plugins/helmcode/plugin.js) | web | web | manual web credential, native bundled-provider adapter | I | I | I |
| [huggingface](../plugins/huggingface/plugin.js) | api | api | manual web credential, native bundled-provider adapter | I | I | I |
| [hyper](../plugins/hyper/plugin.js) | api | api | configured token/key, manual web credential, native bundled-provider adapter | I | I | I |
| [hyper](../plugins/hyper/plugin.js) | web | api | configured token/key, manual web credential, native bundled-provider adapter | I | I | I |
| [ibmbob](../plugins/ibmbob/plugin.js) | api | api | configured token/key | I | I | I |
| [jetbrains-ai-assistant](../plugins/jetbrains-ai-assistant/plugin.js) | local | local | files | I | I | I |
| [kilo](../plugins/kilo/plugin.js) | api | local | configured token/key, files | P | P | P |
| [kilo](../plugins/kilo/plugin.js) | local | local | configured token/key, files | P | P | P |
| [kimi](../plugins/kimi/plugin.js) | api | oauth | configured token/key, manual web credential, files | I | I | I |
| [kimi](../plugins/kimi/plugin.js) | oauth | oauth | configured token/key, manual web credential, files | I | I | I |
| [kimi](../plugins/kimi/plugin.js) | cli | oauth | configured token/key, manual web credential, files | I | I | I |
| [kimi](../plugins/kimi/plugin.js) | web | oauth | configured token/key, manual web credential, files | I | I | I |
| [kimi-k2](../plugins/kimi-k2/plugin.js) | api | api | configured token/key | I | I | I |
| [kiro](../plugins/kiro/plugin.js) | oauth | local | files, SQLite | I | I | I |
| [kiro](../plugins/kiro/plugin.js) | local | local | files, SQLite | I | I | I |
| [litellm](../plugins/litellm/plugin.js) | api | api | configured token/key | I | I | I |
| [lithosai](../plugins/lithosai/plugin.js) | web | web | native bundled-provider adapter, manual web credential, native scoped cookie session | I | I | I |
| [llm-proxy](../plugins/llm-proxy/plugin.js) | api | api | configured token/key | I | I | I |
| [llmman](../plugins/llmman/plugin.js) | api | api | configured token/key, native bundled-provider adapter | I | I | I |
| [longcat](../plugins/longcat/plugin.js) | web | web | manual web credential | I | I | I |
| [manus](../plugins/manus/plugin.js) | web | web | manual web credential | I | I | I |
| [mimo](../plugins/mimo/plugin.js) | web | web | manual web credential | I | I | I |
| [minimax](../plugins/minimax/plugin.js) | api | api | configured token/key | I | I | I |
| [mistral](../plugins/mistral/plugin.js) | web | web | manual web credential | I | I | I |
| [moonshot](../plugins/moonshot/plugin.js) | api | api | configured token/key | I | I | I |
| [muse](../plugins/muse/plugin.js) | api | api | native bundled-provider adapter | I | I | I |
| [museai](../plugins/museai/plugin.js) | web | web | native bundled-provider adapter, manual web credential | I | I | I |
| [nanogpt](../plugins/nanogpt/plugin.js) | api | api | configured token/key | I | I | I |
| [neuralwatt](../plugins/neuralwatt/plugin.js) | api | api | configured token/key | I | I | I |
| [notion](../plugins/notion/plugin.js) | web | web | manual web credential | I | I | I |
| [nous](../plugins/nous/plugin.js) | api | api | configured token/key, native bundled-provider adapter | I | I | I |
| [ollama](../plugins/ollama/plugin.js) | api | web | configured token/key, manual web credential | I | I | I |
| [ollama](../plugins/ollama/plugin.js) | web | web | configured token/key, manual web credential | I | I | I |
| [openai-api](../plugins/openai-api/plugin.js) | api | api | configured token/key | I | I | I |
| [opencode](../plugins/opencode/plugin.js) | web | web | manual web credential | I | I | I |
| [opencode-go](../plugins/opencode-go/plugin.js) | api | api | configured token/key, manual web credential, files, SQLite | I | I | I |
| [opencode-go](../plugins/opencode-go/plugin.js) | local | api | configured token/key, manual web credential, files, SQLite | I | I | I |
| [opencode-go](../plugins/opencode-go/plugin.js) | web | api | configured token/key, manual web credential, files, SQLite | I | I | I |
| [openrouter](../plugins/openrouter/plugin.js) | api | api | configured token/key | I | I | I |
| [perplexity](../plugins/perplexity/plugin.js) | oauth | web | files, SQLite | U-cache | P | U-cache |
| [perplexity](../plugins/perplexity/plugin.js) | local | web | files, SQLite | U-cache | P | U-cache |
| [perplexity](../plugins/perplexity/plugin.js) | web | web | files, SQLite | U-cache | P | U-cache |
| [pi](../plugins/pi/plugin.js) | local | local | files | I | I | I |
| [poe](../plugins/poe/plugin.js) | api | api | configured token/key | I | I | I |
| [qoder](../plugins/qoder/plugin.js) | web | web | manual web credential | I | I | I |
| [qwencloud](../plugins/qwencloud/plugin.js) | web | web | manual web credential | I | I | I |
| [raycast](../plugins/raycast/plugin.js) | web | web | native bundled-provider adapter | I | I | I |
| [replicate](../plugins/replicate/plugin.js) | web | web | manual web credential, native bundled-provider adapter | I | I | I |
| [sakana](../plugins/sakana/plugin.js) | web | web | manual web credential | I | I | I |
| [stepfun](../plugins/stepfun/plugin.js) | web | web | configured token/key, manual web credential | I | I | I |
| [sub2api](../plugins/sub2api/plugin.js) | api | api | configured token/key | I | I | I |
| [synthetic](../plugins/synthetic/plugin.js) | api | local | configured token/key, files | P | P | P |
| [synthetic](../plugins/synthetic/plugin.js) | local | local | configured token/key, files | P | P | P |
| [t3chat](../plugins/t3chat/plugin.js) | web | web | manual web credential | I | I | I |
| [typesafe](../plugins/typesafe/plugin.js) | web | web | manual web credential, native bundled-provider adapter | I | I | I |
| [v0](../plugins/v0/plugin.js) | api | api | configured token/key, native bundled-provider adapter | I | I | I |
| [venice](../plugins/venice/plugin.js) | api | api | configured token/key, manual web credential | I | I | I |
| [venice](../plugins/venice/plugin.js) | web | api | configured token/key, manual web credential | I | I | I |
| [vercel](../plugins/vercel/plugin.js) | api | api | configured token/key, native bundled-provider adapter | I | I | I |
| [vertex-ai](../plugins/vertex-ai/plugin.js) | oauth | oauth | configured token/key, files, CLI helper | I | I | I |
| [vertex-ai](../plugins/vertex-ai/plugin.js) | local | oauth | configured token/key, files, CLI helper | I | I | I |
| [warp](../plugins/warp/plugin.js) | api | api | configured token/key | I | I | I |
| [wayfinder](../plugins/wayfinder/plugin.js) | local | local | provider-specific settings/HTTPS | I | I | I |
| [windsurf](../plugins/windsurf/plugin.js) | oauth | local | configured token/key, files, SQLite | I | I | I |
| [windsurf](../plugins/windsurf/plugin.js) | local | local | configured token/key, files, SQLite | I | I | I |
| [workbuddy](../plugins/workbuddy/plugin.js) | web | web | native bundled-provider adapter, manual web credential, native scoped cookie session | I | I | I |
| [xai](../plugins/xai/plugin.js) | api | api | configured token/key | I | I | I |
| [xkiro](../plugins/xkiro/plugin.js) | api | api | configured token/key, native bundled-provider adapter | I | I | I |
| [zai](../plugins/zai/plugin.js) | api | api | configured token/key | I | I | I |
| [zed](../plugins/zed/plugin.js) | api | api | configured token/key, files | I | I | I |
| [zed](../plugins/zed/plugin.js) | local | api | configured token/key, files | I | I | I |
| [zenmux](../plugins/zenmux/plugin.js) | api | api | configured token/key | I | I | I |
| [zoommate](../plugins/zoommate/plugin.js) | web | web | manual web credential | I | I | I |

## Inspected method gaps and fixture coverage

Source inspection is the evidence for I/P/U-cache classifications. Fixtures below use
synthetic data; file presence or a mocked HTTP response never verifies a real account.
The same entry is audited once when several manifest modes share it.

| Provider | Audit finding | Relevant fixtures |
| --- | --- | --- |
| [abacus-ai](../plugins/abacus-ai/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [aiand](../plugins/aiand/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [aixy](../plugins/aixy/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs) |
| [alibaba](../plugins/alibaba/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [alibaba-token-plan](../plugins/alibaba-token-plan/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [amp](../plugins/amp/plugin.js) | Home-relative CLI secrets layout carried from baseline; native upstream directories and overrides need verification. | Shared native host primitives only; provider fixture pending |
| [antigravity](../plugins/antigravity/plugin.js) | Native IDE roots and profile/cache isolation fixtures; private OAuth schema/current app still unverified. Grouped session/weekly quota fixtures cover Starter, unknown values, explicit cadence and legacy fallbacks. HTTP 403 quota permission denials remain distinct from expired authentication; fixtures preserve model fallback and one 401 refresh. | [provider-remaining-paths.test.cjs](../tests/provider-remaining-paths.test.cjs), [ide_discovery.py](../tools/portability/ide_discovery.py), [inspo-sync-20260929.test.cjs](../tests/inspo-sync-20260929.test.cjs), [antigravity-access.test.cjs](../tests/antigravity-access.test.cjs) |
| [antigravity-cli](../plugins/antigravity-cli/plugin.js) | Exact gemini/antigravity account only; upstream keyring target/encoding and CLI-state versions need verification. Grouped session/weekly quota fixtures cover Starter, unknown values, explicit cadence and legacy fallbacks. HTTP 403 quota permission denials remain distinct from expired authentication; fixtures preserve model fallback and one 401 refresh. | [inspo-sync-20260929.test.cjs](../tests/inspo-sync-20260929.test.cjs), [antigravity-access.test.cjs](../tests/antigravity-access.test.cjs) |
| [antigravity-ide](../plugins/antigravity-ide/plugin.js) | Native discovery/argument fixtures; real IDE version and process permissions pending #12/#20. Grouped session/weekly quota fixtures cover Starter, unknown values, explicit cadence and legacy fallbacks. | [ide_discovery.py](../tools/portability/ide_discovery.py), [inspo-sync-20260929.test.cjs](../tests/inspo-sync-20260929.test.cjs) |
| [atlascloud](../plugins/atlascloud/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs) |
| [augment](../plugins/augment/plugin.js) | Home auth file plus a Linux-only VS Code fallback; native IDE roots/profile selection remain to port. | Shared native host primitives only; provider fixture pending |
| [aws-bedrock](../plugins/aws-bedrock/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [azure-openai](../plugins/azure-openai/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [bifrost](../plugins/bifrost/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs) |
| [chutes](../plugins/chutes/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [claude](../plugins/claude/plugin.js) | Native local collectors and macOS profile/account isolation fixtures. OAuth/web/API credentials and real app versions unverified. | [provider-account-isolation.test.cjs](../tests/provider-account-isolation.test.cjs), [local_usage.py](../tools/portability/local_usage.py), [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs), [inspo-sync-20260927.test.cjs](../tests/inspo-sync-20260927.test.cjs) |
| [clawrouter](../plugins/clawrouter/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [clinepass](../plugins/clinepass/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs), [inspo-sync-20260927.test.cjs](../tests/inspo-sync-20260927.test.cjs) |
| [codebuddy](../plugins/codebuddy/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [codebuff](../plugins/codebuff/plugin.js) | Home-relative manicode credential path; XDG/native override behavior unverified. | Shared native host primitives only; provider fixture pending |
| [coderabbit](../plugins/coderabbit/plugin.js) | Bounded read-only coderabbit usage CLI helper and JSON fixtures. Installed CLI versions/authentication remain unverified. | [inspo-sync-20260927.test.cjs](../tests/inspo-sync-20260927.test.cjs) |
| [codex](../plugins/codex/plugin.js) | Native file/direct-keyring/age auth, canonical profile/revision/account guards and collectors. Encrypted store is read-only; config layers and non-OAuth auth modes are not interpreted. | [codex-auth.test.cjs](../tests/codex-auth.test.cjs), [codex_auth.py](../tools/portability/codex_auth.py), [local_usage.py](../tools/portability/local_usage.py), [codex_usage.rs](../crates/ai-usage-daemon/src/codex_usage.rs), [inspo-sync-20260927.test.cjs](../tests/inspo-sync-20260927.test.cjs) |
| [command-code](../plugins/command-code/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [inspo-sync-20260909.test.cjs](../tests/inspo-sync-20260909.test.cjs), [inspo-sync-20260927.test.cjs](../tests/inspo-sync-20260927.test.cjs) |
| [copilot](../plugins/copilot/plugin.js) | Bounded CLI helper host and native home expansion; real gh/Copilot auth stores, CLI versions and account mappings unverified. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [crof](../plugins/crof/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [crofai](../plugins/crofai/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [cursor](../plugins/cursor/plugin.js) | Native DB resolver and stable/custom-profile isolation. Shared CLI fallback only for default stable profile; SQLite refresh writeback capability needs audit. | [provider-account-isolation.test.cjs](../tests/provider-account-isolation.test.cjs), [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [cursor-nightly](../plugins/cursor-nightly/plugin.js) | Separate native DB and override; shared stable CLI auth/history excluded. SQLite refresh writeback capability needs audit. | [provider-account-isolation.test.cjs](../tests/provider-account-isolation.test.cjs), [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [deepgram](../plugins/deepgram/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [deepinfra](../plugins/deepinfra/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [deepseek](../plugins/deepseek/plugin.js) | API balance plus explicitly selected Platform wallet and bounded daily/monthly detail collection. Non-USD spend is never stored as USD. Synthetic fixtures only; live Platform schemas remain unverified. | [inspo-sync-20260927.test.cjs](../tests/inspo-sync-20260927.test.cjs) |
| [devin](../plugins/devin/plugin.js) | Explicit manual web bearer/organization routing plus native CLI/IDE account selection. Synthetic fixtures cover precedence, rejected credentials and quota shapes; live web sessions, CLI schemas and preview variants remain unverified. | [provider-remaining-paths.test.cjs](../tests/provider-remaining-paths.test.cjs), [devin-manual-auth.test.cjs](../tests/devin-manual-auth.test.cjs), [inspo-sync-20260927.test.cjs](../tests/inspo-sync-20260927.test.cjs) |
| [devpass](../plugins/devpass/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs) |
| [doubao](../plugins/doubao/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [droid](../plugins/factory/plugin.js) | Aliases Factory API/manual-web and legacy auth code; v2 encrypted files still require absent AES-GCM host methods. Live credentials remain unverified. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [elevenlabs](../plugins/elevenlabs/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [inspo-sync-20260909.test.cjs](../tests/inspo-sync-20260909.test.cjs) |
| [factory](../plugins/factory/plugin.js) | Configured API keys and manual web credentials are implemented; legacy file/keychain paths remain. V2 encrypted files still require absent AES-GCM host methods; real auth formats/account selection are unverified. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [fireworks-ai](../plugins/fireworks-ai/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [gemini](../plugins/gemini/plugin.js) | Home OAuth files exist; OAuth-client extraction searches Unix/macOS package layouts. Windows/global-node installation discovery and current schemas remain to port. | Shared native host primitives only; provider fixture pending |
| [gemini-apps](../plugins/gemini-apps/plugin.js) | Explicit web-session SAPISID hash authentication and HTTP/1 RPC fixtures. Browser-bound live sessions and current RPC schema remain unverified. | [inspo-sync-20260927.test.cjs](../tests/inspo-sync-20260927.test.cjs) |
| [gitkraken](../plugins/gitkraken/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs) |
| [grok](../plugins/grok/plugin.js) | Home credential-file method carried; CLI auth schema and declared cli/local equivalence need verification. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [groqcloud](../plugins/groqcloud/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [helmcode](../plugins/helmcode/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs) |
| [huggingface](../plugins/huggingface/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs) |
| [hyper](../plugins/hyper/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs) |
| [ibmbob](../plugins/ibmbob/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [jetbrains-ai-assistant](../plugins/jetbrains-ai-assistant/plugin.js) | Native settings roots and explicit IDE selection fixtures; XML cache schema, actual IDE versions and account permissions pending. | [provider-paths.test.cjs](../tests/provider-paths.test.cjs) |
| [kilo](../plugins/kilo/plugin.js) | Configured API credentials plus home-relative CLI auth path; native upstream data roots/overrides unverified. | Shared native host primitives only; provider fixture pending |
| [kimi](../plugins/kimi/plugin.js) | Configured Code API key, read-only isolated CLI-home OAuth and optional web membership enrichment. Exhausted monthly quota is primary. Real CLI/Desktop schemas and account stores remain unverified. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs), [kimi-updates.test.cjs](../tests/kimi-updates.test.cjs) |
| [kimi-k2](../plugins/kimi-k2/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [kiro](../plugins/kiro/plugin.js) | Native app-support/custom-root fixtures, included/overage credit parsing, and validated supported IDE API profile regions. CLI SQLite credential import and live app/account versions remain unverified. | [provider-paths.test.cjs](../tests/provider-paths.test.cjs), [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs), [inspo-sync-20260909.test.cjs](../tests/inspo-sync-20260909.test.cjs) |
| [litellm](../plugins/litellm/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [inspo-sync-20260927.test.cjs](../tests/inspo-sync-20260927.test.cjs) |
| [lithosai](../plugins/lithosai/plugin.js) | Instance-bound manual session plus same-origin CSRF echo on three permitted console routes. Signed prepaid balance and optional UTC spend; no fabricated quota. Rust/QuickJS and synthetic fixtures only; real sessions unverified. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs), [provider-inspo-20261004.test.cjs](../tests/provider-inspo-20261004.test.cjs), [cookie_sessions.rs](../crates/ai-usage-plugins/src/cookie_sessions.rs), [runtime.rs](../crates/ai-usage-plugins/src/runtime.rs) |
| [llm-proxy](../plugins/llm-proxy/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [llmman](../plugins/llmman/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs) |
| [longcat](../plugins/longcat/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [manus](../plugins/manus/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [mimo](../plugins/mimo/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [minimax](../plugins/minimax/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [inspo-sync-20260909.test.cjs](../tests/inspo-sync-20260909.test.cjs) |
| [mistral](../plugins/mistral/plugin.js) | Manual cookie billing fixtures match prices by event, metric, group, zone and tier; fine-tuning included. Missing rates produce an explicit partial spend total. Real account schemas remain unverified. | [inspo-sync-20260927.test.cjs](../tests/inspo-sync-20260927.test.cjs), [inspo-sync-20260929.test.cjs](../tests/inspo-sync-20260929.test.cjs) |
| [moonshot](../plugins/moonshot/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [inspo-sync-20260909.test.cjs](../tests/inspo-sync-20260909.test.cjs) |
| [muse](../plugins/muse/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs), [provider-inspo-20261004.test.cjs](../tests/provider-inspo-20261004.test.cjs) |
| [museai](../plugins/museai/plugin.js) | Separate muse.ai web provider; bounded action discovery and instance-local public action ID caching. Manual cookies only; weekly percentages and reported top-ups remain separate. Real sessions unverified. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs), [provider-inspo-20261004.test.cjs](../tests/provider-inspo-20261004.test.cjs) |
| [nanogpt](../plugins/nanogpt/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [neuralwatt](../plugins/neuralwatt/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [notion](../plugins/notion/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [nous](../plugins/nous/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs) |
| [ollama](../plugins/ollama/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [openai-api](../plugins/openai-api/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [opencode](../plugins/opencode/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [opencode-go](../plugins/opencode-go/plugin.js) | Upstream XDG roots, explicit channel/database selection, v2 current credential/logout authority, assistant/completed-compaction history and migrated-ID deduplication covered by fixtures. Real app/account/API versions remain unverified. | [provider-xdg-paths.test.cjs](../tests/provider-xdg-paths.test.cjs), [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs), [provider-inspo-20261004.test.cjs](../tests/provider-inspo-20261004.test.cjs) |
| [openrouter](../plugins/openrouter/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs), [inspo-sync-20260909.test.cjs](../tests/inspo-sync-20260909.test.cjs) |
| [perplexity](../plugins/perplexity/plugin.js) | Entry always uses legacy macOS CFNetwork cache, including declared web/oauth modes. Linux/Windows cache method explicitly unsupported; manual web-cookie implementation is absent. | [provider-remaining-paths.test.cjs](../tests/provider-remaining-paths.test.cjs) |
| [pi](../plugins/pi/plugin.js) | Bounded local Pi/OMP transcript collection, profile isolation and partial/unpriced history fixtures. Only explicitly recognized historical model prices are estimated; full model coverage and process discovery are pending. | [inspo-sync-20260927.test.cjs](../tests/inspo-sync-20260927.test.cjs) |
| [poe](../plugins/poe/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [inspo-sync-20260909.test.cjs](../tests/inspo-sync-20260909.test.cjs) |
| [qoder](../plugins/qoder/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [qwencloud](../plugins/qwencloud/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [raycast](../plugins/raycast/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs) |
| [replicate](../plugins/replicate/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs) |
| [sakana](../plugins/sakana/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [stepfun](../plugins/stepfun/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [sub2api](../plugins/sub2api/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [synthetic](../plugins/synthetic/plugin.js) | Configured API credentials plus several CLI fallback files; account ambiguity and upstream data roots/overrides need audit. | Shared native host primitives only; provider fixture pending |
| [t3chat](../plugins/t3chat/plugin.js) | Manual cookies/full-cURL capture fixtures on all OS conventions. Challenge preserves credentials and gives full-cURL guidance. Real browser/device-bound sessions unverified. | [browser-manual-auth.test.cjs](../tests/browser-manual-auth.test.cjs) |
| [typesafe](../plugins/typesafe/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. Cookie billing may be blocked by Cloudflare; challenge fixtures distinguish failed access from expired authentication. Reviewed upstream has no working challenge transport or documented API billing alternative. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs) |
| [v0](../plugins/v0/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs) |
| [venice](../plugins/venice/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [inspo-sync-20260927.test.cjs](../tests/inspo-sync-20260927.test.cjs) |
| [vercel](../plugins/vercel/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs) |
| [vertex-ai](../plugins/vertex-ai/plugin.js) | Bounded gcloud helper and explicit/application credentials; actual native SDK installs and account selection unverified. | Shared native host primitives only; provider fixture pending |
| [warp](../plugins/warp/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | Shared native host primitives only; provider fixture pending |
| [wayfinder](../plugins/wayfinder/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [windsurf](../plugins/windsurf/plugin.js) | Native stable/Next/Devin profile selection fixtures; carried auth schemas and current application versions unverified. | [provider-paths.test.cjs](../tests/provider-paths.test.cjs) |
| [workbuddy](../plugins/workbuddy/plugin.js) | Instance-bound manual cookie requests on three permitted billing routes, with the full cookie-owning browser User-Agent configured in dashboard setup. Credit balance and optional China cycle reset. No automatic browser/desktop credential import; live sessions unverified. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs), [provider-inspo-20261004.test.cjs](../tests/provider-inspo-20261004.test.cjs), [cookie_sessions.rs](../crates/ai-usage-plugins/src/cookie_sessions.rs), [runtime.rs](../crates/ai-usage-plugins/src/runtime.rs) |
| [xai](../plugins/xai/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [xkiro](../plugins/xkiro/plugin.js) | Vendored CodexBar provider with a bounded native asynchronous host adapter and explicit credential/endpoint routing. Disabled by default. Adapter fixtures do not qualify real credentials, browser import, or every optional upstream workflow; cache TTL is not persisted. | [bundled-providers.test.cjs](../tests/bundled-providers.test.cjs) |
| [zai](../plugins/zai/plugin.js) | Configured API quota fixtures preserve recognized windows and explicitly flag unavailable/unknown plan quota shapes. Real account responses remain unverified. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs), [inspo-sync-20260929.test.cjs](../tests/inspo-sync-20260929.test.cjs) |
| [zed](../plugins/zed/plugin.js) | Upstream native/Flatpak/custom data settings paths and JSONC fixtures. Explicit credentials available; real app versions and OS credential mappings unverified. | [provider-xdg-paths.test.cjs](../tests/provider-xdg-paths.test.cjs) |
| [zenmux](../plugins/zenmux/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |
| [zoommate](../plugins/zoommate/plugin.js) | Configured credentials and HTTP request code inspected; real credentials, API responses and provider/account behavior remain unverified on each OS. | [plugin-contracts.test.cjs](../tests/plugin-contracts.test.cjs), [provider-updates.test.cjs](../tests/provider-updates.test.cjs), [quota-regressions.test.cjs](../tests/quota-regressions.test.cjs) |

Real-credential acceptance requires dated OS, architecture, app/CLI/browser version,
authentication method, selected account/profile and expected-versus-observed normalized
usage. Record only sanitized outcomes in #20; never attach cookies, tokens, raw auth
files or browser database copies. Build floors and native session gates remain in
[the support contract](platform-support.md).