opencode-session-port 0.1.0 → 0.1.3

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "opencode-session-port",
-  "version": "0.1.0",
+  "version": "0.1.3",
   "private": false,
   "license": "MIT",
-  "description": "SessionPort: experimental Windows-first OpenCode TUI plugin for password-encrypted session checkpoint and restore.",
+  "description": "SessionPort: experimental OpenCode TUI plugin for password-encrypted session checkpoint and restore.",
   "keywords": [
     "opencode",
     "opencode-plugin",
@@ -17,15 +17,18 @@
   "files": [
     "tui.ts",
     "src/**",
+    "dist/**",
     "tsconfig.json"
   ],
   "exports": {
-    "./tui": "./src/tui.ts"
+    "./tui": "./dist/tui.js"
   },
   "scripts": {
     "typecheck": "tsc --noEmit",
     "test": "bun test",
-    "verify:package": "bun run scripts/package-verify/verify.ts"
+    "verify:package": "bun run scripts/package-verify/verify.ts",
+    "build:tui": "bun run scripts/build-tui.ts",
+    "prepack": "bun run build:tui"
   },
   "dependencies": {
     "@opencode/plugin": "2.0.22",
@@ -33,26 +36,15 @@
     "pako": "3.0.2"
   },
   "peerDependencies": {
-    "@opentui/core": ">=0.5.14",
-    "@opentui/solid": ">=0.5.14",
-    "solid-js": ">=1.9.0"
-  },
-  "peerDependenciesMeta": {
-    "@opentui/core": {
-      "optional": true
-    },
-    "@opentui/solid": {
-      "optional": true
-    },
-    "solid-js": {
-      "optional": true
-    }
+    "@opentui/core": "0.5.14",
+    "@opentui/solid": "0.5.14",
+    "solid-js": "1.9.12"
   },
   "devDependencies": {
     "@opentui/core": "0.5.14",
     "@opentui/solid": "0.5.14",
     "@types/node": "24.12.2",
-    "solid-js": "1.9.15",
+    "solid-js": "1.9.12",
     "typescript": "5.9.3"
   }
 }

package/src/tui/adapters/location-resolver.ts

@@ -1,6 +1,6 @@
 /**
  * Experimental project-location resolver over the public TUI client
- * `context.client.location.get` method (Windows-first experimental lane).
+ * `context.client.location.get` method (experimental wiring lane).
  *
  * Scope and boundaries (owner decision 2026-10-11, decision-log F):
  * - `Plugin.Context.location` carries only a directory, so the experimental

package/src/tui/ui/sessionport-commands.tsx

@@ -17,7 +17,10 @@ export interface SessionPortCommandHost {
 }
 
 /**
- * Register native slash commands from an app-slot component scope. The slot
+ * Register native slash commands from an app-slot component scope. The layer
+ * opts out of the default `base` input mode with `mode: "global"` so the
+ * commands are reachable from every OpenCode input mode (palette and slash
+ * discovery included); without it the host hides them outside `base`. The slot
  * disposer is returned unchanged so the plugin can clean up its contribution.
  * Command input is forwarded as received; parsing belongs to the injected
  * handlers.
@@ -30,6 +33,7 @@ export function installSessionPortCommands(
 		append: "app",
 		render() {
 			context.keymap.layer(() => ({
+				mode: "global",
 				commands: [
 					{
 						id: SESSIONPORT_COMMAND_IDS.checkpoint,

package/src/tui/wiring/composition.ts

@@ -1,5 +1,5 @@
 /**
- * SessionPort TUI command composition (Phase 2 experimental Windows wiring).
+ * SessionPort TUI command composition (Phase 2 experimental wiring).
  *
  * `createSessionPortHandlers` composes the completed Phase 2-4 seams into the
  * two injected command callbacks consumed by `installSessionPortCommands`:
@@ -112,7 +112,7 @@ export interface SessionPortHandlerDependencies {
 	readonly showRestoreReport: (model: RestoreReportPresentationModel) => void;
 	/** Masked password provider (real UI or a fake in tests). */
 	readonly requestPassword: SessionPortPasswordProvider;
-	/** Initialized crypto factory; production uses the experimental Windows profile. */
+	/** Initialized crypto factory; production uses the experimental profile (historical `-win-` selector name). */
 	readonly cryptoFactory: CheckpointCryptoFactory;
 	/** Remapped-ID deriver for restore planning. */
 	readonly idDeriver: RemappedIdDeriver;

package/src/tui/wiring/experimental-profile.ts

@@ -1,10 +1,17 @@
 /**
- * Windows-first experimental runtime defaults (Phase 2 wiring).
+ * Experimental runtime defaults (Phase 2 wiring; originally recorded for the
+ * Windows-first lane).
+ *
+ * The `sessionport-experimental-win-v1` selector name is historical and is NOT
+ * portability evidence: enabling macOS/Linux changes no profile, format, or cap
+ * value below.
  *
  * These are the explicitly selected, owner-authorized experimental values
- * recorded in `docs/v1/decision-log.md` (2026-10-11 entries) for a Windows
- * experimental build only. They are NOT a production approval, not a format
- * freeze, and not a general memory budget, compatibility, or support claim.
+ * recorded in `docs/v1/decision-log.md` (2026-10-11 entries) for the Windows
+ * experimental build; they now apply unchanged to the experimental macOS/Linux
+ * enablement, which is NOT host-tested. They are NOT a production approval, not
+ * a format freeze, and not a general memory budget, compatibility, or support
+ * claim.
  *
  * - Crypto profile `sessionport-experimental-win-v1`: profile code 1,
  *   Argon2id13 `crypto_pwhash`, `opslimit=2`, `memlimit=128 MiB`, the current
@@ -22,7 +29,7 @@ import type { CryptoPolicy } from "../../core/contracts/index.ts";
 import type { CryptoPolicyDefinition } from "../../core/crypto/index.ts";
 import type { SessionCollectionPolicy } from "../../core/sessions/index.ts";
 
-/** Explicit allow-listed policy id for the Windows experimental profile. */
+/** Explicit allow-listed policy id for the experimental profile (historical `-win-` name). */
 export const EXPERIMENTAL_CRYPTO_POLICY_ID = "sessionport-experimental-win-v1";
 
 /** The explicit policy selector passed to the crypto factory; never read from an artifact. */

package/src/tui/wiring/index.ts

@@ -2,10 +2,10 @@
  * SessionPort TUI wiring (Phase 2 experimental Windows lane).
  *
  * Public surface:
- * - `installSessionPortWiring(context, options?)` — Windows-only install root:
- *   pinned-sodium initialization, real adapters/artifact I/O/password modal,
- *   command registration through the existing component-scoped seam, and the
- *   slot disposer returned unchanged.
+ * - `installSessionPortWiring(context, options?)` — install root gated to the
+ *   explicit `win32`/`darwin`/`linux` allowlist: pinned-sodium initialization,
+ *   real adapters/artifact I/O/password modal, command registration through the
+ *   existing component-scoped seam, and the slot disposer returned unchanged.
  * - `createSessionPortHandlers(dependencies)` — fully injected composition of
  *   the `/checkpoint` and `/restore` command callbacks (fake-based testable).
  * - Experimental runtime defaults (crypto profile + collection bounds +
@@ -16,7 +16,8 @@
  * is written, only encrypted artifacts are read, and every failure report is
  * generic/sanitized. No production approval, format freeze, or platform-support
  * claim is made (O-01/O-02/O-03 remain PARTIALLY RESOLVED for the experimental
- * Windows build only; OQ-16 stays OPEN).
+ * build only — the `-win-` profile selector name is historical; OQ-16 stays
+ * OPEN).
  */
 
 export {

package/src/tui/wiring/install.ts

@@ -1,13 +1,16 @@
 /// <reference types="node" />
 /**
- * SessionPort TUI install/composition root (Phase 2 experimental Windows wiring).
+ * SessionPort TUI install/composition root (Phase 2 experimental wiring).
  *
  * `installSessionPortWiring` is the only host-facing composition entry:
  *
- * - **Windows-first experimental only.** On any non-`win32` platform it returns
- *   `undefined` immediately: no sodium initialization, no host-context access,
- *   no command registration, and no platform-support claim.
- * - On Windows it initializes the pinned `libsodium-wrappers-sumo@0.8.4`
+ * - **Explicit platform allowlist (`win32`/`darwin`/`linux`), experimental
+ *   only.** On any other platform it returns `undefined` immediately: no sodium
+ *   initialization, no host-context access, no command registration, and no
+ *   platform-support claim. Windows has bounded actual-host evidence; macOS and
+ *   Linux are enabled but NOT host-tested, and cross-OS artifact interchange is
+ *   UNVERIFIED.
+ * - On an allowed platform it initializes the pinned `libsodium-wrappers-sumo@0.8.4`
  *   runtime first (`await sodium.ready` plus primitive/constant validation
  *   through `createCheckpointCryptoFactory`; `createRemappedIdDeriver` also
  *   awaits/validates it) and fails closed: a rejected initialization aborts
@@ -25,8 +28,8 @@
  * This module statically imports the designer-owned UI modules (password modal
  * and restore report dialog), which import the optional UI peers
  * (`@opentui/solid`, `solid-js`). The entry (`src/tui.ts`) imports this module
- * dynamically only after its `process.platform === "win32"` check, so
- * non-Windows plugin setup never evaluates those modules.
+ * dynamically only after its own allowlist check, so unsupported-platform
+ * plugin setup never evaluates those modules.
  *
  * Test seams (platform/factory/deriver/password provider) exist only for
  * fake-based tests; production calls use the real defaults. The real password
@@ -49,7 +52,7 @@ import { EXPERIMENTAL_CRYPTO_POLICY_DEFINITION } from "./experimental-profile.ts
 export interface SessionPortInstallOptions {
 	/** Platform gate override for tests; defaults to `process.platform`. */
 	readonly platform?: string;
-	/** Crypto-factory seam; the default creates the experimental Windows profile and awaits pinned sodium. */
+	/** Crypto-factory seam; the default creates the experimental profile (historical `-win-` selector name) and awaits pinned sodium. */
 	readonly createCryptoFactory?: () => Promise<CheckpointCryptoFactory>;
 	/** Remapped-ID deriver seam; the default awaits/validates pinned sodium. */
 	readonly createIdDeriver?: () => Promise<RemappedIdDeriver>;
@@ -57,18 +60,21 @@ export interface SessionPortInstallOptions {
 	readonly requestPassword?: SessionPortPasswordProvider;
 }
 
+/** Explicit platform allowlist; unsupported platforms fail closed before any host access. */
+const SUPPORTED_PLATFORMS: readonly string[] = ["win32", "darwin", "linux"];
+
 /**
- * Installs the SessionPort commands for the experimental Windows lane and
- * returns the slot disposer, or `undefined` when this platform is not
- * registered. Fails closed (rejects) when the pinned runtime or the host
- * command surface is unavailable; nothing is registered in that case.
+ * Installs the SessionPort commands for the experimental lane and returns the
+ * slot disposer, or `undefined` when this platform is not registered. Fails
+ * closed (rejects) when the pinned runtime or the host command surface is
+ * unavailable; nothing is registered in that case.
  */
 export async function installSessionPortWiring(
 	context: Plugin.Context,
 	options: SessionPortInstallOptions = {},
 ): Promise<(() => void) | undefined> {
-	// Windows-first experimental gate: no registration and no host access anywhere else.
-	if ((options.platform ?? process.platform) !== "win32") return undefined;
+	// Explicit allowlist gate: no registration and no host access on unsupported platforms.
+	if (!SUPPORTED_PLATFORMS.includes(options.platform ?? process.platform)) return undefined;
 
 	// Pinned-runtime initialization (fail closed): the default factory awaits
 	// `sodium.ready` and validates every primitive the provisional format needs;
@@ -102,7 +108,11 @@ export async function installSessionPortWiring(
 	return installSessionPortCommands(context, handlers);
 }
 
-/** Default factory: the experimental Windows profile over the pinned runtime. */
+/**
+ * Default factory: the experimental profile over the pinned runtime. The
+ * `sessionport-experimental-win-v1` selector name is historical and is not
+ * portability evidence; macOS/Linux enablement changes no profile value.
+ */
 async function createExperimentalCryptoFactory(): Promise<CheckpointCryptoFactory> {
 	return createCheckpointCryptoFactory([EXPERIMENTAL_CRYPTO_POLICY_DEFINITION]);
 }

package/src/tui.ts

@@ -1,13 +1,13 @@
 import { Plugin } from "@opencode/plugin/tui"
 
 /**
- * SessionPort TUI plugin entrypoint (Phase 2 experimental Windows wiring).
+ * SessionPort TUI plugin entrypoint (Phase 2 experimental wiring).
  *
- * Setup checks `process.platform` first and only on Windows dynamically imports
+ * Setup checks `process.platform` first and only on an explicitly allowed
+ * platform (`win32`, `darwin`, or `linux`) dynamically imports
  * `installSessionPortWiring`, which:
- * - registers `/checkpoint` and `/restore` only on Windows (`process.platform
- *   === "win32"`); every other platform gets no registration and no
- *   platform-support claim;
+ * - registers `/checkpoint` and `/restore` only on those platforms; every other
+ *   platform gets no registration and no platform-support claim;
  * - initializes the pinned `libsodium-wrappers-sumo@0.8.4` runtime first and
  *   fails closed if it is unavailable (setup rejects; nothing is registered);
  * - registers commands inside the existing app-slot/keymap component scope
@@ -15,19 +15,25 @@ import { Plugin } from "@opencode/plugin/tui"
  *
  * The platform gate deliberately runs before the dynamic import: the wiring
  * module statically imports the designer-owned UI modules, which import the
- * optional UI peers (`@opentui/solid`, `solid-js`). Non-Windows plugin setup
- * therefore never evaluates them, and no OpenTUI dependency is added to the
- * package surface.
+ * optional UI peers (`@opentui/solid`, `solid-js`). Unsupported-platform plugin
+ * setup therefore never evaluates them, and no OpenTUI dependency is added to
+ * the package surface.
  *
- * Command handlers own their errors and report sanitized copy; no raw host
- * error crosses to the host. The active Windows experimental defaults are
- * recorded in `docs/v1/decision-log.md`; this is not a production approval or
- * format freeze.
+ * Platform status: Windows has bounded actual-host evidence; macOS and Linux
+ * are owner-approved experimental targets enabled here but NOT host-tested, and
+ * cross-OS artifact interchange is UNVERIFIED. Command handlers own their
+ * errors and report sanitized copy; no raw host error crosses to the host. The
+ * active experimental defaults are recorded in `docs/v1/decision-log.md`; this
+ * is not a production approval or format freeze.
  */
+
+/** Explicit allowlist; unsupported platforms fail closed before any host call. */
+const SUPPORTED_PLATFORMS: readonly string[] = ["win32", "darwin", "linux"]
+
 export default Plugin.define({
   id: "sessionport",
   async setup(context) {
-    if (process.platform !== "win32") return undefined
+    if (!SUPPORTED_PLATFORMS.includes(process.platform)) return undefined
     const { installSessionPortWiring } = await import("./tui/wiring/index.ts")
     return installSessionPortWiring(context)
   },

package/tui.ts

@@ -2,11 +2,16 @@
  * SessionPort TUI entrypoint shim for the host's directory-based plugin
  * resolution (`Host.resolve` probes `<directory>/tui` by path, before any
  * package `exports` lookup). It re-exports the product entrypoint unchanged;
- * all behavior (Windows platform gate, pinned-sodium initialization, deferred
+ * all behavior (platform allowlist gate, pinned-sodium initialization, deferred
  * `./tui/wiring/index.ts` import) stays in `src/tui.ts`.
  *
  * This file is part of the packaged `files` allowlist so an installed copy of
  * the package resolves under the pinned Host.resolve convention. It adds no
  * registration, host access, or activation of its own.
+ *
+ * The re-export targets the compiled bundle `dist/tui.js`, not the TSX source:
+ * the directory loader probes `<directory>/tui` by path and would otherwise
+ * bypass the `exports["./tui"]` bundle entirely. `dist/tui.js` is produced by
+ * `build:tui` (wired as `prepack`) from `src/tui.ts`.
  */
-export { default } from "./src/tui.ts"
+export { default } from "./dist/tui.js"