v0.4.0

Why Podium

One catalog, every harness: what that claim means feature by feature, when Podium applies, when a simpler alternative is enough, and how it compares to adjacent products.

One catalog, every harness

Podium holds reusable AI agent artifacts in one catalog and translates them into the layout each runtime expects. An author writes an artifact once in the canonical format. A Claude Code workspace, a Cursor workspace, and a published plugin marketplace each receive their own translation of that same artifact, with no per-harness copy in the catalog.

An artifact is a directory, and the directory carries its dependencies. A skill that ships scripts/verify_revision.py alongside its SKILL.md delivers that script into every layout it reaches, workspace and marketplace alike. Selecting the artifact selects its files. See Bundled resources for what an artifact directory may hold.

Authored content includes skills (repeatable procedures), agents (delegated workers), contexts (reference material), commands (parameterized prompts), rules (policy), hooks (lifecycle observers), and MCP server registrations. Harnesses include developer-facing tools such as Claude Code, Cursor, Codex, Gemini CLI, and OpenCode, chat clients such as Claude Desktop, and any host with a published adapter.


The features behind the claim

Each feature below has one page that covers it in operational detail.

Cross-harness delivery

Write canonical artifacts once and let Podium translate them into the format the runtime expects. A harness adapter maps the canonical artifact onto Claude Code, Claude Desktop, Claude Cowork, Cursor, Codex, Gemini CLI, OpenCode, Pi, Hermes, or a custom runtime, and decides the on-disk destination for each artifact type. Adding a harness to a team means adding an adapter to a sync configuration.

Covered in Configure your harness.

Domains and subdomains

The directory layout defines the domain hierarchy. finance is a domain, finance/ap is a subdomain, and finance/ap/pay-invoice is the canonical ID of an artifact under it. A domain folder can carry a DOMAIN.md that adds a description, keywords, and featured artifacts. Authors get a place to put a new artifact, and agents get a tree to walk.

Covered in Domains.

Selective materialization

A workspace rarely needs the whole catalog. podium sync materializes the subset named by include globs, exclude globs, and artifact types, and a named profile stores that subset in sync.yaml so one command switches between scopes. A narrowed scope also removes the files a wider previous run wrote.

Covered in Selective materialization.

Progressive discovery

An agent that speaks MCP starts with an empty context window and a small set of meta-tools. It traverses domains with load_domain, finds candidates with search_domains and search_artifacts, and calls load_artifact on the one it picked. Only that last call materializes anything, and it materializes the artifact's bundled files at the same time. A catalog larger than any system prompt stays usable because the agent pays per artifact it actually loads. This path requires a registry server, reached through the MCP server or an SDK.

Covered in Browsing the catalog.

Layered composition

One catalog can be assembled from several independent sources. The layers compose in a declared order with deterministic merge. A higher layer overrides a lower one on a collision, and extends: lets an artifact inherit and refine a lower one without forking it. A catalog on disk composes its subdirectories as ordered layers through a .registry-config file. A registry server adds registered layers, remote Git sources, custom sources through the LayerSourceProvider SPI, and per-layer visibility.

Covered in Layered composition.

Access control

Each layer declares who can see it: everyone, every authenticated user in the organization, the members of named OIDC groups, or named users. The registry evaluates visibility on every call and composes the caller's effective view from the layers that pass. This requires a registry server with an identity provider configured.

Covered in Access control.


Boundaries

Podium catalogs authored artifacts and delivers them to harnesses. LLM application development platforms, evaluation frameworks, observability products, prompt-version-as-program-artifact tools, and agent runtimes solve different problems.


When Podium applies

Podium becomes valuable as any of these dimensions grow:

  • Catalog size. Progressive discovery and per-domain navigation handle catalogs that exceed what fits in a system prompt.
  • Cross-harness delivery. A canonical artifact format pays off as soon as a team targets more than one harness.
  • Multiple artifact types. A dependency graph across skills, agents, contexts, commands, rules, hooks, and MCP server registrations covers cross-type edges (extends:, delegates_to:, mcpServers:) that type-specific stores do not model.
  • Multiple contributors and audiences. Per-layer access control, classification, and audit address contributor and audience diversity.
  • Audiences beyond engineering. The same catalog feeds developers in coding harnesses and non-developers in desktop chat clients.

When a simpler alternative is enough

A solo author with a handful of skills in one harness does not benefit from Podium. A flat directory with the harness's native conventions handles that case. The minimum viable alternative is a short script that watches a Git repository and copies files into harness-specific directories. A single-team, single-type, single-vendor shop can use that script for a fraction of the engineering effort.

Podium addresses the intersection of multiple types, multiple teams, multiple harnesses, and governance requirements. Below that intersection, file-copy is sufficient.


How Podium compares

The adjacent landscape splits into categories. The comparisons below cover products that catalog or distribute authored AI agent artifacts into the harnesses an organization runs. LLM application development frameworks, evaluation suites, observability and tracing products, prompt-version-as-program-artifact tools, RAG-over-corpora knowledge bases, and agent runtimes solve different problems and are out of scope.

Catalogs of AI agent artifacts

The products in this section are the closest direct comparisons. All ship registries for SKILL.md or related authored content; the differences are scope, deployment, governance, and license.

ProductLicenseHostingArtifact typesLayered compositionPer-layer visibility
Vercel skills.sh (skills.sh)OSS Apache; registry is SaaSPublic registry; npx skills add <pkg>SKILL.md packagesNoPublic-only
iFlytek SkillHub (repo)OSSSelf-hosted (Docker / Kubernetes)SKILL.md packagesNoNamespace + RBAC; visibility flags per package
SkillReg (skillreg.dev)Closed commercial; SaaS-onlySaaSSKILL.md packagesNoOrg-scoped roles
Tessl (tessl.io)Closed commercial; SaaS-onlySaaSSkills, docs, rules, and commands bundled in tilesNoWorkspace-scoped private or public
Continue Hub (continue.dev/hub)Closed SaaS hub; Continue extension is Apache 2.0SaaS hub plus .continue/ in-repoAssistants, agents, rules, MCP servers, prompts, modelsNoAccount or org sharing

Where each applies. skills.sh fits public-content discovery. SkillHub fits an on-prem-only shop wanting a SKILL.md-only registry. SkillReg fits a SaaS-acceptable shop wanting registry-side approval workflows. Tessl fits a shop that wants registry-side evaluation of skills against agent task outcomes. Continue Hub fits a shop standardized on the Continue extension.

Where Podium applies. Podium applies when the catalog needs type heterogeneity beyond what each product holds, ordered-layer composition with extends:, per-OIDC-group visibility composed across multiple sources at request time, cross-type dependency edges, or MIT-licensed self-hosted deployment across the local, single-node, and clustered tiers.

Single-vendor private marketplaces and team-rule systems

Single-harness organizations get a shared catalog from the harness vendor's own enterprise tier. Podium delivers into these vendors via harness adapters. The comparison is the boundary at which a multi-harness organization stops fitting in any single one of them.

ProductCoverageWhere it appliesWhere Podium applies
Anthropic Cowork private plugin marketplacesClaude Code and Claude Cowork; org-private GitHub-hosted marketplace; per-user provisioning, auto-install, and auditClaude-only shop; managed by AnthropicMulti-harness shop; on-prem deployment; per-OIDC-group visibility composed across multiple sources
Cursor Team RulesCursor only; rules only; recommend / require flags from a cloud dashboardCursor-only shop; rules-only catalogMulti-harness; multi-type catalog; on-prem deployment
AWS Bedrock Registry with AgentCoreAWS-managed; Kiro resources; AgentCore harness; cross-harness skill rollout announcedAWS-tied shop; managed runtimeMulti-vendor; MIT-licensed; on-prem deployment
Per-harness skill systems (OpenAI Codex Skills, GitHub Copilot custom instructions, Goose, Roo Code, Windsurf, Trae, Amp, Factory)Single harness; each surface manages its own catalogOne-harness shopCross-harness delivery via the adapter set

Cross-harness skill installers and conventions

These tools translate one source SKILL.md into many harness-native locations on a developer's machine without a server. They operate per-machine; they do not compose multiple sources or apply per-OIDC-group visibility at request time.

Tool or patternWhat it does
agent-skill-creator (repo)Generates a SKILL.md plus an install.sh that targets multiple harnesses.
AGENTS.md plus sync hook (AGENTS.md spec)A single repo-rooted file plus a pre-commit hook copies it into .cursorrules, CLAUDE.md, .windsurfrules, .github/copilot-instructions.md, and similar.
Curated GitHub-hosted skill libraries (VoltAgent awesome-agent-skills, alirezarezvani/claude-skills, tech-leads-club/agent-skills, harness/harness-skills)git clone distribution.

Where they apply. These tools apply to a single team, a single type, and modest scale. The overhead of a registry server is not justified.

Where Podium applies. Podium applies when multiple sources compose into one effective view, per-OIDC-group visibility is required, cross-type dependency edges matter, or the catalog spans multiple types.

MCP server registries and gateways

These overlap with Podium's mcp-server built-in extension type and with the governance plane around MCP. Their scope is restricted to MCP server registrations.

ProductLicenseCoverage
Kong MCP Registry / Gateway (konghq.com)CommercialDiscovery, OAuth, observability, per-tool governance
TrueFoundry MCP Gateway (truefoundry.com)CommercialMCP catalog, OAuth, federated identity, request tracing
agentic-community/mcp-gateway-registry (repo)OSSKeycloak / Entra OAuth, dynamic discovery, allowlist
MACH Alliance MCP Registry, Docker MCP Catalog, GitHub VS Code internal MCP registry, ServiceNow MCP RegistryIndustry- or vendor-curatedCurated catalogs scoped to a platform

These coexist with Podium in a deployment. An MCP gateway brokers transport and runtime auth for MCP servers; Podium catalogs the registrations and the rest of the artifact graph under one governance plane.

Git monorepo with per-harness directory layout

A Git monorepo with per-harness directories is the original baseline.

Where it applies. This model applies to a single team, a single harness, one or two artifact types, and no formal governance requirements. It requires no additional infrastructure beyond an existing Git provider.

Where Podium applies. Podium applies when multi-source composition with deterministic merge across multiple Git repositories, per-layer visibility for cross-team catalogs, cross-type dependency-aware impact analysis, or lazy discovery at scale is required.


Project model

  • License. MIT.
  • Governance. Maintainer model with an RFC process for spec changes. See Governance.
  • Distribution. OSS-first development, with an optional commercial managed offering by the sponsoring entity (separate doc).
  • Multi-vendor neutrality. The project does not adopt contributions, governance changes, or roadmap pressure that would bind it to a single harness vendor's surface.
  • Standards engagement. Where adjacent open standards (MCP, AAIF-governed standards) overlap with Podium's concerns, the project participates upstream and harmonizes wherever doing so does not compromise the broader scope across artifact types.