opencode-session-port 0.1.1 → 0.1.3

package/README.md

@@ -4,7 +4,7 @@
 
 SessionPort is a local plugin for the OpenCode TUI. It captures the sessions of your current project into a single password-encrypted artifact and restores them in another checkout, worktree, or machine. Artifacts travel with Git or any other channel you choose — SessionPort never runs Git commands itself.
 
-> **Status: experimental pre-release (0.1.1).** SessionPort completed one bounded synthetic checkpoint/restore round trip on Windows with OpenCode v2.0.22. That test used test-only password and project-selector seams and staged source, not the npm tarball. Real modal interactions and loading the packed package in OpenCode have not been verified. The checkpoint format may change; no compatibility, security, or platform-support guarantee is made.
+> **Status: experimental pre-release (0.1.3).** SessionPort completed one bounded synthetic checkpoint/restore round trip on Windows with OpenCode v2.0.22. That test used test-only password and project-selector seams and staged source, not the npm tarball. On one real Windows OpenCode v2.0.22 host, a bounded diagnostic observed both commands registered (`commands=yes`) but hidden from the command palette and slash list until the keymap layer opted into global mode; 0.1.2 applies that global-mode registration fix, with focused command-registration tests and the TUI build passing. 0.1.3 additionally enables the commands on macOS and Linux through an explicit platform allowlist (`win32`/`darwin`/`linux`); macOS and Linux have NOT been host-tested, and cross-OS artifact interchange is UNVERIFIED. End-to-end execution from the packed package has not been host-tested. Real modal interactions and loading the packed package in OpenCode have not been verified. The checkpoint format may change; no compatibility, security, or platform-support guarantee is made.
 
 ## Commands
 
@@ -16,26 +16,25 @@ Both commands are registered by the plugin as `sessionport.checkpoint` and `sess
 ## Requirements
 
 - OpenCode with the v2 TUI plugin API (exercised with OpenCode v2.0.22).
-- Windows. The current build enables the commands on Windows only; macOS and Linux are intended targets but are not yet enabled or validated.
+- Windows, macOS, or Linux. The build enables the commands on all three through an explicit platform allowlist (`win32`/`darwin`/`linux`); other platforms are not enabled. Windows has the bounded host evidence above; macOS and Linux are enabled but NOT host-tested, and cross-OS artifact interchange is UNVERIFIED.
 
 ## Install
 
-Install the package plugin with the OpenCode CLI:
+Add the plugin to the `plugins` array in your global CLI-only config (`cli.json`):
 
-```sh
-opencode plugin add opencode-session-port@0.1.1
+```json
+{
+  "plugins": ["opencode-session-port@0.1.3"]
+}
 ```
 
-Or add it to the `plugins` array in your `opencode.jsonc` (or `opencode.json`):
+Or install the package plugin with the OpenCode CLI:
 
-```jsonc
-{
-  "$schema": "https://opencode.ai/config.json",
-  "plugins": ["opencode-session-port@0.1.1"]
-}
+```sh
+opencode plugin add opencode-session-port@0.1.3
 ```
 
-These are the documented OpenCode v2 setup paths; the published tarball has not yet been loaded by OpenCode. The final tarball passed npm consumer checks, but a direct Bun package-manager install timed out in the verification environment, so that install path remains unverified.
+`cli.json` is the documented OpenCode v2 config for CLI-only plugins: they run locally in the terminal and remain active when the CLI connects to a remote server. No published tarball exists yet, so no published artifact has been loaded by OpenCode. The 0.1.1 tarball passed npm consumer checks, but a direct Bun package-manager install timed out in the verification environment, so that install path remains unverified. The 0.1.2 tarball passed manifest/allowlist and packed-entry checks only. The 0.1.3 metadata/platform-allowlist update has not been package-verified, published, or loaded by OpenCode.
 
 ## Usage
 

package/dist/tui.js

@@ -10149,6 +10149,7 @@ function installSessionPortCommands(context, handlers) {
     append: "app",
     render() {
       context.keymap.layer(() => ({
+        mode: "global",
         commands: [{
           id: SESSIONPORT_COMMAND_IDS.checkpoint,
           title: "Checkpoint project sessions",
@@ -10193,7 +10194,7 @@ var init_sessionport_commands = __esm(() => {
 
 // src/tui/wiring/install.ts
 async function installSessionPortWiring(context, options = {}) {
-  if ((options.platform ?? process.platform) !== "win32")
+  if (!SUPPORTED_PLATFORMS.includes(options.platform ?? process.platform))
     return;
   const cryptoFactory = await (options.createCryptoFactory ?? createExperimentalCryptoFactory)();
   const idDeriver = await (options.createIdDeriver ?? createRemappedIdDeriver)();
@@ -10221,6 +10222,7 @@ async function installSessionPortWiring(context, options = {}) {
 async function createExperimentalCryptoFactory() {
   return createCheckpointCryptoFactory([EXPERIMENTAL_CRYPTO_POLICY_DEFINITION]);
 }
+var SUPPORTED_PLATFORMS;
 var init_install = __esm(() => {
   init_crypto();
   init_restore();
@@ -10230,6 +10232,7 @@ var init_install = __esm(() => {
   init_sessionport_commands();
   init_composition();
   init_experimental_profile();
+  SUPPORTED_PLATFORMS = ["win32", "darwin", "linux"];
 });
 
 // src/tui/wiring/index.ts
@@ -10262,10 +10265,11 @@ var init_wiring = __esm(() => {
 
 // src/tui.ts
 import { Plugin } from "@opencode/plugin/tui";
+var SUPPORTED_PLATFORMS2 = ["win32", "darwin", "linux"];
 var tui_default = Plugin.define({
   id: "sessionport",
   async setup(context) {
-    if (process.platform !== "win32")
+    if (!SUPPORTED_PLATFORMS2.includes(process.platform))
       return;
     const { installSessionPortWiring: installSessionPortWiring2 } = await Promise.resolve().then(() => (init_wiring(), exports_wiring));
     return installSessionPortWiring2(context);

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "opencode-session-port",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "private": false,
   "license": "MIT",
-  "description": "SessionPort: experimental Windows-first OpenCode TUI plugin for password-encrypted session checkpoint and restore.",
+  "description": "SessionPort: experimental OpenCode TUI plugin for password-encrypted session checkpoint and restore.",
   "keywords": [
     "opencode",
     "opencode-plugin",

package/src/tui/adapters/location-resolver.ts

@@ -1,6 +1,6 @@
 /**
  * Experimental project-location resolver over the public TUI client
- * `context.client.location.get` method (Windows-first experimental lane).
+ * `context.client.location.get` method (experimental wiring lane).
  *
  * Scope and boundaries (owner decision 2026-10-11, decision-log F):
  * - `Plugin.Context.location` carries only a directory, so the experimental

package/src/tui/ui/sessionport-commands.tsx

@@ -17,7 +17,10 @@ export interface SessionPortCommandHost {
 }
 
 /**
- * Register native slash commands from an app-slot component scope. The slot
+ * Register native slash commands from an app-slot component scope. The layer
+ * opts out of the default `base` input mode with `mode: "global"` so the
+ * commands are reachable from every OpenCode input mode (palette and slash
+ * discovery included); without it the host hides them outside `base`. The slot
  * disposer is returned unchanged so the plugin can clean up its contribution.
  * Command input is forwarded as received; parsing belongs to the injected
  * handlers.
@@ -30,6 +33,7 @@ export function installSessionPortCommands(
 		append: "app",
 		render() {
 			context.keymap.layer(() => ({
+				mode: "global",
 				commands: [
 					{
 						id: SESSIONPORT_COMMAND_IDS.checkpoint,

package/src/tui/wiring/composition.ts

@@ -1,5 +1,5 @@
 /**
- * SessionPort TUI command composition (Phase 2 experimental Windows wiring).
+ * SessionPort TUI command composition (Phase 2 experimental wiring).
  *
  * `createSessionPortHandlers` composes the completed Phase 2-4 seams into the
  * two injected command callbacks consumed by `installSessionPortCommands`:
@@ -112,7 +112,7 @@ export interface SessionPortHandlerDependencies {
 	readonly showRestoreReport: (model: RestoreReportPresentationModel) => void;
 	/** Masked password provider (real UI or a fake in tests). */
 	readonly requestPassword: SessionPortPasswordProvider;
-	/** Initialized crypto factory; production uses the experimental Windows profile. */
+	/** Initialized crypto factory; production uses the experimental profile (historical `-win-` selector name). */
 	readonly cryptoFactory: CheckpointCryptoFactory;
 	/** Remapped-ID deriver for restore planning. */
 	readonly idDeriver: RemappedIdDeriver;

package/src/tui/wiring/experimental-profile.ts

@@ -1,10 +1,17 @@
 /**
- * Windows-first experimental runtime defaults (Phase 2 wiring).
+ * Experimental runtime defaults (Phase 2 wiring; originally recorded for the
+ * Windows-first lane).
+ *
+ * The `sessionport-experimental-win-v1` selector name is historical and is NOT
+ * portability evidence: enabling macOS/Linux changes no profile, format, or cap
+ * value below.
  *
  * These are the explicitly selected, owner-authorized experimental values
- * recorded in `docs/v1/decision-log.md` (2026-10-11 entries) for a Windows
- * experimental build only. They are NOT a production approval, not a format
- * freeze, and not a general memory budget, compatibility, or support claim.
+ * recorded in `docs/v1/decision-log.md` (2026-10-11 entries) for the Windows
+ * experimental build; they now apply unchanged to the experimental macOS/Linux
+ * enablement, which is NOT host-tested. They are NOT a production approval, not
+ * a format freeze, and not a general memory budget, compatibility, or support
+ * claim.
  *
  * - Crypto profile `sessionport-experimental-win-v1`: profile code 1,
  *   Argon2id13 `crypto_pwhash`, `opslimit=2`, `memlimit=128 MiB`, the current
@@ -22,7 +29,7 @@ import type { CryptoPolicy } from "../../core/contracts/index.ts";
 import type { CryptoPolicyDefinition } from "../../core/crypto/index.ts";
 import type { SessionCollectionPolicy } from "../../core/sessions/index.ts";
 
-/** Explicit allow-listed policy id for the Windows experimental profile. */
+/** Explicit allow-listed policy id for the experimental profile (historical `-win-` name). */
 export const EXPERIMENTAL_CRYPTO_POLICY_ID = "sessionport-experimental-win-v1";
 
 /** The explicit policy selector passed to the crypto factory; never read from an artifact. */

package/src/tui/wiring/index.ts

@@ -2,10 +2,10 @@
  * SessionPort TUI wiring (Phase 2 experimental Windows lane).
  *
  * Public surface:
- * - `installSessionPortWiring(context, options?)` — Windows-only install root:
- *   pinned-sodium initialization, real adapters/artifact I/O/password modal,
- *   command registration through the existing component-scoped seam, and the
- *   slot disposer returned unchanged.
+ * - `installSessionPortWiring(context, options?)` — install root gated to the
+ *   explicit `win32`/`darwin`/`linux` allowlist: pinned-sodium initialization,
+ *   real adapters/artifact I/O/password modal, command registration through the
+ *   existing component-scoped seam, and the slot disposer returned unchanged.
  * - `createSessionPortHandlers(dependencies)` — fully injected composition of
  *   the `/checkpoint` and `/restore` command callbacks (fake-based testable).
  * - Experimental runtime defaults (crypto profile + collection bounds +
@@ -16,7 +16,8 @@
  * is written, only encrypted artifacts are read, and every failure report is
  * generic/sanitized. No production approval, format freeze, or platform-support
  * claim is made (O-01/O-02/O-03 remain PARTIALLY RESOLVED for the experimental
- * Windows build only; OQ-16 stays OPEN).
+ * build only — the `-win-` profile selector name is historical; OQ-16 stays
+ * OPEN).
  */
 
 export {

package/src/tui/wiring/install.ts

@@ -1,13 +1,16 @@
 /// <reference types="node" />
 /**
- * SessionPort TUI install/composition root (Phase 2 experimental Windows wiring).
+ * SessionPort TUI install/composition root (Phase 2 experimental wiring).
  *
  * `installSessionPortWiring` is the only host-facing composition entry:
  *
- * - **Windows-first experimental only.** On any non-`win32` platform it returns
- *   `undefined` immediately: no sodium initialization, no host-context access,
- *   no command registration, and no platform-support claim.
- * - On Windows it initializes the pinned `libsodium-wrappers-sumo@0.8.4`
+ * - **Explicit platform allowlist (`win32`/`darwin`/`linux`), experimental
+ *   only.** On any other platform it returns `undefined` immediately: no sodium
+ *   initialization, no host-context access, no command registration, and no
+ *   platform-support claim. Windows has bounded actual-host evidence; macOS and
+ *   Linux are enabled but NOT host-tested, and cross-OS artifact interchange is
+ *   UNVERIFIED.
+ * - On an allowed platform it initializes the pinned `libsodium-wrappers-sumo@0.8.4`
  *   runtime first (`await sodium.ready` plus primitive/constant validation
  *   through `createCheckpointCryptoFactory`; `createRemappedIdDeriver` also
  *   awaits/validates it) and fails closed: a rejected initialization aborts
@@ -25,8 +28,8 @@
  * This module statically imports the designer-owned UI modules (password modal
  * and restore report dialog), which import the optional UI peers
  * (`@opentui/solid`, `solid-js`). The entry (`src/tui.ts`) imports this module
- * dynamically only after its `process.platform === "win32"` check, so
- * non-Windows plugin setup never evaluates those modules.
+ * dynamically only after its own allowlist check, so unsupported-platform
+ * plugin setup never evaluates those modules.
  *
  * Test seams (platform/factory/deriver/password provider) exist only for
  * fake-based tests; production calls use the real defaults. The real password
@@ -49,7 +52,7 @@ import { EXPERIMENTAL_CRYPTO_POLICY_DEFINITION } from "./experimental-profile.ts
 export interface SessionPortInstallOptions {
 	/** Platform gate override for tests; defaults to `process.platform`. */
 	readonly platform?: string;
-	/** Crypto-factory seam; the default creates the experimental Windows profile and awaits pinned sodium. */
+	/** Crypto-factory seam; the default creates the experimental profile (historical `-win-` selector name) and awaits pinned sodium. */
 	readonly createCryptoFactory?: () => Promise<CheckpointCryptoFactory>;
 	/** Remapped-ID deriver seam; the default awaits/validates pinned sodium. */
 	readonly createIdDeriver?: () => Promise<RemappedIdDeriver>;
@@ -57,18 +60,21 @@ export interface SessionPortInstallOptions {
 	readonly requestPassword?: SessionPortPasswordProvider;
 }
 
+/** Explicit platform allowlist; unsupported platforms fail closed before any host access. */
+const SUPPORTED_PLATFORMS: readonly string[] = ["win32", "darwin", "linux"];
+
 /**
- * Installs the SessionPort commands for the experimental Windows lane and
- * returns the slot disposer, or `undefined` when this platform is not
- * registered. Fails closed (rejects) when the pinned runtime or the host
- * command surface is unavailable; nothing is registered in that case.
+ * Installs the SessionPort commands for the experimental lane and returns the
+ * slot disposer, or `undefined` when this platform is not registered. Fails
+ * closed (rejects) when the pinned runtime or the host command surface is
+ * unavailable; nothing is registered in that case.
  */
 export async function installSessionPortWiring(
 	context: Plugin.Context,
 	options: SessionPortInstallOptions = {},
 ): Promise<(() => void) | undefined> {
-	// Windows-first experimental gate: no registration and no host access anywhere else.
-	if ((options.platform ?? process.platform) !== "win32") return undefined;
+	// Explicit allowlist gate: no registration and no host access on unsupported platforms.
+	if (!SUPPORTED_PLATFORMS.includes(options.platform ?? process.platform)) return undefined;
 
 	// Pinned-runtime initialization (fail closed): the default factory awaits
 	// `sodium.ready` and validates every primitive the provisional format needs;
@@ -102,7 +108,11 @@ export async function installSessionPortWiring(
 	return installSessionPortCommands(context, handlers);
 }
 
-/** Default factory: the experimental Windows profile over the pinned runtime. */
+/**
+ * Default factory: the experimental profile over the pinned runtime. The
+ * `sessionport-experimental-win-v1` selector name is historical and is not
+ * portability evidence; macOS/Linux enablement changes no profile value.
+ */
 async function createExperimentalCryptoFactory(): Promise<CheckpointCryptoFactory> {
 	return createCheckpointCryptoFactory([EXPERIMENTAL_CRYPTO_POLICY_DEFINITION]);
 }

package/src/tui.ts

@@ -1,13 +1,13 @@
 import { Plugin } from "@opencode/plugin/tui"
 
 /**
- * SessionPort TUI plugin entrypoint (Phase 2 experimental Windows wiring).
+ * SessionPort TUI plugin entrypoint (Phase 2 experimental wiring).
  *
- * Setup checks `process.platform` first and only on Windows dynamically imports
+ * Setup checks `process.platform` first and only on an explicitly allowed
+ * platform (`win32`, `darwin`, or `linux`) dynamically imports
  * `installSessionPortWiring`, which:
- * - registers `/checkpoint` and `/restore` only on Windows (`process.platform
- *   === "win32"`); every other platform gets no registration and no
- *   platform-support claim;
+ * - registers `/checkpoint` and `/restore` only on those platforms; every other
+ *   platform gets no registration and no platform-support claim;
  * - initializes the pinned `libsodium-wrappers-sumo@0.8.4` runtime first and
  *   fails closed if it is unavailable (setup rejects; nothing is registered);
  * - registers commands inside the existing app-slot/keymap component scope
@@ -15,19 +15,25 @@ import { Plugin } from "@opencode/plugin/tui"
  *
  * The platform gate deliberately runs before the dynamic import: the wiring
  * module statically imports the designer-owned UI modules, which import the
- * optional UI peers (`@opentui/solid`, `solid-js`). Non-Windows plugin setup
- * therefore never evaluates them, and no OpenTUI dependency is added to the
- * package surface.
+ * optional UI peers (`@opentui/solid`, `solid-js`). Unsupported-platform plugin
+ * setup therefore never evaluates them, and no OpenTUI dependency is added to
+ * the package surface.
  *
- * Command handlers own their errors and report sanitized copy; no raw host
- * error crosses to the host. The active Windows experimental defaults are
- * recorded in `docs/v1/decision-log.md`; this is not a production approval or
- * format freeze.
+ * Platform status: Windows has bounded actual-host evidence; macOS and Linux
+ * are owner-approved experimental targets enabled here but NOT host-tested, and
+ * cross-OS artifact interchange is UNVERIFIED. Command handlers own their
+ * errors and report sanitized copy; no raw host error crosses to the host. The
+ * active experimental defaults are recorded in `docs/v1/decision-log.md`; this
+ * is not a production approval or format freeze.
  */
+
+/** Explicit allowlist; unsupported platforms fail closed before any host call. */
+const SUPPORTED_PLATFORMS: readonly string[] = ["win32", "darwin", "linux"]
+
 export default Plugin.define({
   id: "sessionport",
   async setup(context) {
-    if (process.platform !== "win32") return undefined
+    if (!SUPPORTED_PLATFORMS.includes(process.platform)) return undefined
     const { installSessionPortWiring } = await import("./tui/wiring/index.ts")
     return installSessionPortWiring(context)
   },

package/tui.ts

@@ -2,7 +2,7 @@
  * SessionPort TUI entrypoint shim for the host's directory-based plugin
  * resolution (`Host.resolve` probes `<directory>/tui` by path, before any
  * package `exports` lookup). It re-exports the product entrypoint unchanged;
- * all behavior (Windows platform gate, pinned-sodium initialization, deferred
+ * all behavior (platform allowlist gate, pinned-sodium initialization, deferred
  * `./tui/wiring/index.ts` import) stays in `src/tui.ts`.
  *
  * This file is part of the packaged `files` allowlist so an installed copy of