opencode-session-port 0.1.2 → 0.1.4

package/README.md

@@ -4,7 +4,7 @@
 
 SessionPort is a local plugin for the OpenCode TUI. It captures the sessions of your current project into a single password-encrypted artifact and restores them in another checkout, worktree, or machine. Artifacts travel with Git or any other channel you choose — SessionPort never runs Git commands itself.
 
-> **Status: experimental pre-release (0.1.2).** SessionPort completed one bounded synthetic checkpoint/restore round trip on Windows with OpenCode v2.0.22. That test used test-only password and project-selector seams and staged source, not the npm tarball. On one real Windows OpenCode v2.0.22 host, a bounded diagnostic observed both commands registered (`commands=yes`) but hidden from the command palette and slash list until the keymap layer opted into global mode; 0.1.2 applies that global-mode registration fix, with focused command-registration tests and the TUI build passing. End-to-end execution from the packed package has not been host-tested. Real modal interactions and loading the packed package in OpenCode have not been verified. The checkpoint format may change; no compatibility, security, or platform-support guarantee is made.
+> **Status: experimental pre-release (0.1.4).** SessionPort completed one bounded synthetic checkpoint/restore round trip on Windows with OpenCode v2.0.22. That test used test-only password and project-selector seams and staged source, not the npm tarball. On one real Windows OpenCode v2.0.22 host, a bounded diagnostic observed both commands registered (`commands=yes`) but hidden from the command palette and slash list until the keymap layer opted into global mode; 0.1.2 applies that global-mode registration fix, with focused command-registration tests and the TUI build passing. 0.1.3 additionally enables the commands on macOS and Linux through an explicit platform allowlist (`win32`/`darwin`/`linux`). 0.1.2 and 0.1.3 are published to npm (0.1.3 latest, per a read-only registry check); 0.1.4 is the current local candidate. 0.1.4 is a diagnostics/copy patch only: a failed checkpoint collection now appends a fixed sanitized reason and the known machine code (`Reason: <fixed reason> (<code>).`) for the 17 current collection codes; unknown codes keep the generic text and raw host/exception text is never shown. Collector behavior is unchanged, and no root cause is established for an earlier Windows collection failure; a user later reported a local checkpoint succeeding from the repository checkout, which is not attributed to this patch. macOS has one user-reported successful checkpoint only; Linux is untested; restore and cross-OS artifact interchange remain unestablished. End-to-end execution from the packed package has not been host-tested. Real modal interactions and loading the packed package in OpenCode have not been verified. The checkpoint format may change; no compatibility, security, or platform-support guarantee is made.
 
 ## Commands
 
@@ -16,7 +16,7 @@ Both commands are registered by the plugin as `sessionport.checkpoint` and `sess
 ## Requirements
 
 - OpenCode with the v2 TUI plugin API (exercised with OpenCode v2.0.22).
-- Windows. The current build enables the commands on Windows only; macOS and Linux are intended targets but are not yet enabled or validated.
+- Windows, macOS, or Linux. The build enables the commands on all three through an explicit platform allowlist (`win32`/`darwin`/`linux`); other platforms are not enabled. Windows has the bounded host evidence above; macOS and Linux are enabled but NOT host-tested, and cross-OS artifact interchange is UNVERIFIED.
 
 ## Install
 
@@ -24,17 +24,17 @@ Add the plugin to the `plugins` array in your global CLI-only config (`cli.json`
 
 ```json
 {
-  "plugins": ["opencode-session-port@0.1.2"]
+  "plugins": ["opencode-session-port@0.1.4"]
 }
 ```
 
 Or install the package plugin with the OpenCode CLI:
 
 ```sh
-opencode plugin add opencode-session-port@0.1.2
+opencode plugin add opencode-session-port@0.1.4
 ```
 
-`cli.json` is the documented OpenCode v2 config for CLI-only plugins: they run locally in the terminal and remain active when the CLI connects to a remote server. The published tarball has not yet been loaded by OpenCode. The final tarball passed npm consumer checks, but a direct Bun package-manager install timed out in the verification environment, so that install path remains unverified.
+`cli.json` is the documented OpenCode v2 config for CLI-only plugins: they run locally in the terminal and remain active when the CLI connects to a remote server. The npm registry shows 0.1.2 and 0.1.3 published (0.1.3 latest; read-only registry check); no published artifact has been loaded by OpenCode here, and no local package-verification record exists for the published 0.1.3 tarball. The 0.1.1 tarball passed npm consumer checks, but a direct Bun package-manager install timed out in the verification environment, so that install path remains unverified. The 0.1.2 tarball passed manifest/allowlist and packed-entry checks only. The 0.1.4 candidate tarball passed the same local manifest/allowlist and packed-entry checks (including the sanitized collection-failure copy); it is not published.
 
 ## Usage
 

package/dist/tui.js

@@ -5866,7 +5866,7 @@ function reportCheckpointFailure(error) {
     case "capability":
       return checkpointFailure("This OpenCode host does not expose the required session-listing capability; no artifact was written.");
     case "collection":
-      return checkpointFailure("Collecting the project's sessions failed; no artifact was written.");
+      return checkpointFailure(checkpointCollectionFailureMessage(error));
     case "path-exists":
       return checkpointFailure("An artifact already exists at that path; nothing was overwritten.");
     case "artifact-path":
@@ -5885,6 +5885,15 @@ function reportCheckpointFailure(error) {
 function checkpointFailure(message) {
   return { title: "Checkpoint failed", message, variant: "error" };
 }
+function checkpointCollectionFailureMessage(error) {
+  if (!(error instanceof SessionCollectionError))
+    return CHECKPOINT_COLLECTION_FAILURE;
+  const code = error.code;
+  if (!Object.hasOwn(CHECKPOINT_COLLECTION_REASONS, code))
+    return CHECKPOINT_COLLECTION_FAILURE;
+  const reason = CHECKPOINT_COLLECTION_REASONS[code];
+  return `${CHECKPOINT_COLLECTION_FAILURE} Reason: ${reason} (${code}).`;
+}
 function reportRestoreUsage() {
   return {
     title: "Restore needs an artifact path",
@@ -6039,6 +6048,7 @@ function classifyFailure(error) {
   }
   return "unknown";
 }
+var CHECKPOINT_COLLECTION_FAILURE = "Collecting the project's sessions failed; no artifact was written.", CHECKPOINT_COLLECTION_REASONS;
 var init_reports = __esm(() => {
   init_files();
   init_adapters();
@@ -6047,6 +6057,25 @@ var init_reports = __esm(() => {
   init_planner();
   init_sessions();
   init_orchestration();
+  CHECKPOINT_COLLECTION_REASONS = {
+    "invalid-request": "the session collection request was invalid",
+    "invalid-policy": "the session collection policy was invalid",
+    "session-list-failed": "the host session list could not be read",
+    "message-list-failed": "a session's message history could not be read",
+    "malformed-session-page": "the host returned a malformed session list page",
+    "malformed-message-page": "the host returned a malformed message list page",
+    "malformed-session-record": "the host returned a malformed session record",
+    "malformed-message-record": "the host returned a malformed message record",
+    "session-project-mismatch": "a listed session did not belong to the requested project",
+    "duplicate-session-id": "the host returned a session more than once",
+    "duplicate-message-id": "the host returned a message more than once",
+    "repeated-session-cursor": "the host repeated a session list cursor",
+    "repeated-message-cursor": "the host repeated a message list cursor",
+    "session-limit-exceeded": "the session count exceeded the configured limit",
+    "message-limit-exceeded": "a session's message count exceeded the configured limit",
+    "total-message-limit-exceeded": "the total message count exceeded the configured limit",
+    "unsettled-message": "the project history contains an unfinished message"
+  };
 });
 
 // src/tui/wiring/composition.ts
@@ -10194,7 +10223,7 @@ var init_sessionport_commands = __esm(() => {
 
 // src/tui/wiring/install.ts
 async function installSessionPortWiring(context, options = {}) {
-  if ((options.platform ?? process.platform) !== "win32")
+  if (!SUPPORTED_PLATFORMS.includes(options.platform ?? process.platform))
     return;
   const cryptoFactory = await (options.createCryptoFactory ?? createExperimentalCryptoFactory)();
   const idDeriver = await (options.createIdDeriver ?? createRemappedIdDeriver)();
@@ -10222,6 +10251,7 @@ async function installSessionPortWiring(context, options = {}) {
 async function createExperimentalCryptoFactory() {
   return createCheckpointCryptoFactory([EXPERIMENTAL_CRYPTO_POLICY_DEFINITION]);
 }
+var SUPPORTED_PLATFORMS;
 var init_install = __esm(() => {
   init_crypto();
   init_restore();
@@ -10231,6 +10261,7 @@ var init_install = __esm(() => {
   init_sessionport_commands();
   init_composition();
   init_experimental_profile();
+  SUPPORTED_PLATFORMS = ["win32", "darwin", "linux"];
 });
 
 // src/tui/wiring/index.ts
@@ -10263,10 +10294,11 @@ var init_wiring = __esm(() => {
 
 // src/tui.ts
 import { Plugin } from "@opencode/plugin/tui";
+var SUPPORTED_PLATFORMS2 = ["win32", "darwin", "linux"];
 var tui_default = Plugin.define({
   id: "sessionport",
   async setup(context) {
-    if (process.platform !== "win32")
+    if (!SUPPORTED_PLATFORMS2.includes(process.platform))
       return;
     const { installSessionPortWiring: installSessionPortWiring2 } = await Promise.resolve().then(() => (init_wiring(), exports_wiring));
     return installSessionPortWiring2(context);

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "opencode-session-port",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "private": false,
   "license": "MIT",
-  "description": "SessionPort: experimental Windows-first OpenCode TUI plugin for password-encrypted session checkpoint and restore.",
+  "description": "SessionPort: experimental OpenCode TUI plugin for password-encrypted session checkpoint and restore.",
   "keywords": [
     "opencode",
     "opencode-plugin",

package/src/tui/adapters/location-resolver.ts

@@ -1,6 +1,6 @@
 /**
  * Experimental project-location resolver over the public TUI client
- * `context.client.location.get` method (Windows-first experimental lane).
+ * `context.client.location.get` method (experimental wiring lane).
  *
  * Scope and boundaries (owner decision 2026-10-11, decision-log F):
  * - `Plugin.Context.location` carries only a directory, so the experimental

package/src/tui/wiring/composition.ts

@@ -1,5 +1,5 @@
 /**
- * SessionPort TUI command composition (Phase 2 experimental Windows wiring).
+ * SessionPort TUI command composition (Phase 2 experimental wiring).
  *
  * `createSessionPortHandlers` composes the completed Phase 2-4 seams into the
  * two injected command callbacks consumed by `installSessionPortCommands`:
@@ -112,7 +112,7 @@ export interface SessionPortHandlerDependencies {
 	readonly showRestoreReport: (model: RestoreReportPresentationModel) => void;
 	/** Masked password provider (real UI or a fake in tests). */
 	readonly requestPassword: SessionPortPasswordProvider;
-	/** Initialized crypto factory; production uses the experimental Windows profile. */
+	/** Initialized crypto factory; production uses the experimental profile (historical `-win-` selector name). */
 	readonly cryptoFactory: CheckpointCryptoFactory;
 	/** Remapped-ID deriver for restore planning. */
 	readonly idDeriver: RemappedIdDeriver;

package/src/tui/wiring/experimental-profile.ts

@@ -1,10 +1,17 @@
 /**
- * Windows-first experimental runtime defaults (Phase 2 wiring).
+ * Experimental runtime defaults (Phase 2 wiring; originally recorded for the
+ * Windows-first lane).
+ *
+ * The `sessionport-experimental-win-v1` selector name is historical and is NOT
+ * portability evidence: enabling macOS/Linux changes no profile, format, or cap
+ * value below.
  *
  * These are the explicitly selected, owner-authorized experimental values
- * recorded in `docs/v1/decision-log.md` (2026-10-11 entries) for a Windows
- * experimental build only. They are NOT a production approval, not a format
- * freeze, and not a general memory budget, compatibility, or support claim.
+ * recorded in `docs/v1/decision-log.md` (2026-10-11 entries) for the Windows
+ * experimental build; they now apply unchanged to the experimental macOS/Linux
+ * enablement, which is NOT host-tested. They are NOT a production approval, not
+ * a format freeze, and not a general memory budget, compatibility, or support
+ * claim.
  *
  * - Crypto profile `sessionport-experimental-win-v1`: profile code 1,
  *   Argon2id13 `crypto_pwhash`, `opslimit=2`, `memlimit=128 MiB`, the current
@@ -22,7 +29,7 @@ import type { CryptoPolicy } from "../../core/contracts/index.ts";
 import type { CryptoPolicyDefinition } from "../../core/crypto/index.ts";
 import type { SessionCollectionPolicy } from "../../core/sessions/index.ts";
 
-/** Explicit allow-listed policy id for the Windows experimental profile. */
+/** Explicit allow-listed policy id for the experimental profile (historical `-win-` name). */
 export const EXPERIMENTAL_CRYPTO_POLICY_ID = "sessionport-experimental-win-v1";
 
 /** The explicit policy selector passed to the crypto factory; never read from an artifact. */

package/src/tui/wiring/index.ts

@@ -2,10 +2,10 @@
  * SessionPort TUI wiring (Phase 2 experimental Windows lane).
  *
  * Public surface:
- * - `installSessionPortWiring(context, options?)` — Windows-only install root:
- *   pinned-sodium initialization, real adapters/artifact I/O/password modal,
- *   command registration through the existing component-scoped seam, and the
- *   slot disposer returned unchanged.
+ * - `installSessionPortWiring(context, options?)` — install root gated to the
+ *   explicit `win32`/`darwin`/`linux` allowlist: pinned-sodium initialization,
+ *   real adapters/artifact I/O/password modal, command registration through the
+ *   existing component-scoped seam, and the slot disposer returned unchanged.
  * - `createSessionPortHandlers(dependencies)` — fully injected composition of
  *   the `/checkpoint` and `/restore` command callbacks (fake-based testable).
  * - Experimental runtime defaults (crypto profile + collection bounds +
@@ -16,7 +16,8 @@
  * is written, only encrypted artifacts are read, and every failure report is
  * generic/sanitized. No production approval, format freeze, or platform-support
  * claim is made (O-01/O-02/O-03 remain PARTIALLY RESOLVED for the experimental
- * Windows build only; OQ-16 stays OPEN).
+ * build only — the `-win-` profile selector name is historical; OQ-16 stays
+ * OPEN).
  */
 
 export {

package/src/tui/wiring/install.ts

@@ -1,13 +1,16 @@
 /// <reference types="node" />
 /**
- * SessionPort TUI install/composition root (Phase 2 experimental Windows wiring).
+ * SessionPort TUI install/composition root (Phase 2 experimental wiring).
  *
  * `installSessionPortWiring` is the only host-facing composition entry:
  *
- * - **Windows-first experimental only.** On any non-`win32` platform it returns
- *   `undefined` immediately: no sodium initialization, no host-context access,
- *   no command registration, and no platform-support claim.
- * - On Windows it initializes the pinned `libsodium-wrappers-sumo@0.8.4`
+ * - **Explicit platform allowlist (`win32`/`darwin`/`linux`), experimental
+ *   only.** On any other platform it returns `undefined` immediately: no sodium
+ *   initialization, no host-context access, no command registration, and no
+ *   platform-support claim. Windows has bounded actual-host evidence; macOS and
+ *   Linux are enabled but NOT host-tested, and cross-OS artifact interchange is
+ *   UNVERIFIED.
+ * - On an allowed platform it initializes the pinned `libsodium-wrappers-sumo@0.8.4`
  *   runtime first (`await sodium.ready` plus primitive/constant validation
  *   through `createCheckpointCryptoFactory`; `createRemappedIdDeriver` also
  *   awaits/validates it) and fails closed: a rejected initialization aborts
@@ -25,8 +28,8 @@
  * This module statically imports the designer-owned UI modules (password modal
  * and restore report dialog), which import the optional UI peers
  * (`@opentui/solid`, `solid-js`). The entry (`src/tui.ts`) imports this module
- * dynamically only after its `process.platform === "win32"` check, so
- * non-Windows plugin setup never evaluates those modules.
+ * dynamically only after its own allowlist check, so unsupported-platform
+ * plugin setup never evaluates those modules.
  *
  * Test seams (platform/factory/deriver/password provider) exist only for
  * fake-based tests; production calls use the real defaults. The real password
@@ -49,7 +52,7 @@ import { EXPERIMENTAL_CRYPTO_POLICY_DEFINITION } from "./experimental-profile.ts
 export interface SessionPortInstallOptions {
 	/** Platform gate override for tests; defaults to `process.platform`. */
 	readonly platform?: string;
-	/** Crypto-factory seam; the default creates the experimental Windows profile and awaits pinned sodium. */
+	/** Crypto-factory seam; the default creates the experimental profile (historical `-win-` selector name) and awaits pinned sodium. */
 	readonly createCryptoFactory?: () => Promise<CheckpointCryptoFactory>;
 	/** Remapped-ID deriver seam; the default awaits/validates pinned sodium. */
 	readonly createIdDeriver?: () => Promise<RemappedIdDeriver>;
@@ -57,18 +60,21 @@ export interface SessionPortInstallOptions {
 	readonly requestPassword?: SessionPortPasswordProvider;
 }
 
+/** Explicit platform allowlist; unsupported platforms fail closed before any host access. */
+const SUPPORTED_PLATFORMS: readonly string[] = ["win32", "darwin", "linux"];
+
 /**
- * Installs the SessionPort commands for the experimental Windows lane and
- * returns the slot disposer, or `undefined` when this platform is not
- * registered. Fails closed (rejects) when the pinned runtime or the host
- * command surface is unavailable; nothing is registered in that case.
+ * Installs the SessionPort commands for the experimental lane and returns the
+ * slot disposer, or `undefined` when this platform is not registered. Fails
+ * closed (rejects) when the pinned runtime or the host command surface is
+ * unavailable; nothing is registered in that case.
  */
 export async function installSessionPortWiring(
 	context: Plugin.Context,
 	options: SessionPortInstallOptions = {},
 ): Promise<(() => void) | undefined> {
-	// Windows-first experimental gate: no registration and no host access anywhere else.
-	if ((options.platform ?? process.platform) !== "win32") return undefined;
+	// Explicit allowlist gate: no registration and no host access on unsupported platforms.
+	if (!SUPPORTED_PLATFORMS.includes(options.platform ?? process.platform)) return undefined;
 
 	// Pinned-runtime initialization (fail closed): the default factory awaits
 	// `sodium.ready` and validates every primitive the provisional format needs;
@@ -102,7 +108,11 @@ export async function installSessionPortWiring(
 	return installSessionPortCommands(context, handlers);
 }
 
-/** Default factory: the experimental Windows profile over the pinned runtime. */
+/**
+ * Default factory: the experimental profile over the pinned runtime. The
+ * `sessionport-experimental-win-v1` selector name is historical and is not
+ * portability evidence; macOS/Linux enablement changes no profile value.
+ */
 async function createExperimentalCryptoFactory(): Promise<CheckpointCryptoFactory> {
 	return createCheckpointCryptoFactory([EXPERIMENTAL_CRYPTO_POLICY_DEFINITION]);
 }

package/src/tui/wiring/reports.ts

@@ -4,7 +4,10 @@
  * Every function here returns a fixed, generic notification object; raw host
  * or exception text is NEVER interpolated. Classification uses stable error
  * classes/codes only, never message text, so a failure report cannot leak
- * session IDs, paths, host internals, or password material. Exact user-facing
+ * session IDs, paths, host internals, or password material. Checkpoint
+ * collection failures additionally append a fixed human reason and the exact
+ * machine code, but only for `SessionCollectionError` codes on an explicit
+ * allowlist; unknown or forged codes keep the generic text. Exact user-facing
  * copy remains OPEN (OQ-15); these strings are the wiring lane's generic
  * sanitized categories.
  *
@@ -31,7 +34,7 @@ import { HostAdapterError, ProjectDestinationError } from "../adapters/index.ts"
 import { LocationResolutionError } from "../adapters/location-resolver.ts";
 import { CryptoContainerError } from "../../core/crypto/errors.ts";
 import { RestorePlanError } from "../../core/restore/planner.ts";
-import { SessionCollectionError } from "../../core/sessions/index.ts";
+import { SessionCollectionError, type SessionCollectionErrorCode } from "../../core/sessions/index.ts";
 import { RESTORE_PASSWORD_ATTEMPT_LIMIT } from "../orchestration/index.ts";
 import type { CheckpointOutcome, RestoreExecutionResult } from "../orchestration/index.ts";
 import type {
@@ -94,7 +97,7 @@ export function reportCheckpointFailure(error: unknown): SessionPortNotification
 		case "capability":
 			return checkpointFailure("This OpenCode host does not expose the required session-listing capability; no artifact was written.");
 		case "collection":
-			return checkpointFailure("Collecting the project's sessions failed; no artifact was written.");
+			return checkpointFailure(checkpointCollectionFailureMessage(error));
 		case "path-exists":
 			return checkpointFailure("An artifact already exists at that path; nothing was overwritten.");
 		case "artifact-path":
@@ -116,6 +119,51 @@ function checkpointFailure(message: string): SessionPortNotification {
 	return { title: "Checkpoint failed", message, variant: "error" };
 }
 
+/** Existing generic checkpoint collection failure copy; also the fallback for unknown codes. */
+const CHECKPOINT_COLLECTION_FAILURE = "Collecting the project's sessions failed; no artifact was written.";
+
+/**
+ * Fixed human reason per known `SessionCollectionError` code. This record is
+ * the explicit allowlist: the raw code is echoed to the user only when it
+ * exactly matches one of these keys, and the raw `error.message` (which can
+ * contain session/project IDs, paths, and host error text) is never used.
+ * Adding a code to `SessionCollectionErrorCode` fails compilation until a
+ * fixed reason is added here.
+ */
+const CHECKPOINT_COLLECTION_REASONS: Readonly<Record<SessionCollectionErrorCode, string>> = {
+	"invalid-request": "the session collection request was invalid",
+	"invalid-policy": "the session collection policy was invalid",
+	"session-list-failed": "the host session list could not be read",
+	"message-list-failed": "a session's message history could not be read",
+	"malformed-session-page": "the host returned a malformed session list page",
+	"malformed-message-page": "the host returned a malformed message list page",
+	"malformed-session-record": "the host returned a malformed session record",
+	"malformed-message-record": "the host returned a malformed message record",
+	"session-project-mismatch": "a listed session did not belong to the requested project",
+	"duplicate-session-id": "the host returned a session more than once",
+	"duplicate-message-id": "the host returned a message more than once",
+	"repeated-session-cursor": "the host repeated a session list cursor",
+	"repeated-message-cursor": "the host repeated a message list cursor",
+	"session-limit-exceeded": "the session count exceeded the configured limit",
+	"message-limit-exceeded": "a session's message count exceeded the configured limit",
+	"total-message-limit-exceeded": "the total message count exceeded the configured limit",
+	"unsettled-message": "the project history contains an unfinished message",
+};
+
+/**
+ * Checkpoint collection failure copy: the existing generic message plus
+ * `Reason: <fixed human reason> (<known code>).` for a `SessionCollectionError`
+ * whose code is on the allowlist. Any other error or code keeps the generic
+ * text; only allowlisted literal code strings are ever echoed.
+ */
+function checkpointCollectionFailureMessage(error: unknown): string {
+	if (!(error instanceof SessionCollectionError)) return CHECKPOINT_COLLECTION_FAILURE;
+	const code: string = error.code;
+	if (!Object.hasOwn(CHECKPOINT_COLLECTION_REASONS, code)) return CHECKPOINT_COLLECTION_FAILURE;
+	const reason = CHECKPOINT_COLLECTION_REASONS[code as SessionCollectionErrorCode];
+	return `${CHECKPOINT_COLLECTION_FAILURE} Reason: ${reason} (${code}).`;
+}
+
 /* ------------------------------------------------------------------------- */
 /* Restore reports                                                           */
 /* ------------------------------------------------------------------------- */

package/src/tui.ts

@@ -1,13 +1,13 @@
 import { Plugin } from "@opencode/plugin/tui"
 
 /**
- * SessionPort TUI plugin entrypoint (Phase 2 experimental Windows wiring).
+ * SessionPort TUI plugin entrypoint (Phase 2 experimental wiring).
  *
- * Setup checks `process.platform` first and only on Windows dynamically imports
+ * Setup checks `process.platform` first and only on an explicitly allowed
+ * platform (`win32`, `darwin`, or `linux`) dynamically imports
  * `installSessionPortWiring`, which:
- * - registers `/checkpoint` and `/restore` only on Windows (`process.platform
- *   === "win32"`); every other platform gets no registration and no
- *   platform-support claim;
+ * - registers `/checkpoint` and `/restore` only on those platforms; every other
+ *   platform gets no registration and no platform-support claim;
  * - initializes the pinned `libsodium-wrappers-sumo@0.8.4` runtime first and
  *   fails closed if it is unavailable (setup rejects; nothing is registered);
  * - registers commands inside the existing app-slot/keymap component scope
@@ -15,19 +15,25 @@ import { Plugin } from "@opencode/plugin/tui"
  *
  * The platform gate deliberately runs before the dynamic import: the wiring
  * module statically imports the designer-owned UI modules, which import the
- * optional UI peers (`@opentui/solid`, `solid-js`). Non-Windows plugin setup
- * therefore never evaluates them, and no OpenTUI dependency is added to the
- * package surface.
+ * optional UI peers (`@opentui/solid`, `solid-js`). Unsupported-platform plugin
+ * setup therefore never evaluates them, and no OpenTUI dependency is added to
+ * the package surface.
  *
- * Command handlers own their errors and report sanitized copy; no raw host
- * error crosses to the host. The active Windows experimental defaults are
- * recorded in `docs/v1/decision-log.md`; this is not a production approval or
- * format freeze.
+ * Platform status: Windows has bounded actual-host evidence; macOS and Linux
+ * are owner-approved experimental targets enabled here but NOT host-tested, and
+ * cross-OS artifact interchange is UNVERIFIED. Command handlers own their
+ * errors and report sanitized copy; no raw host error crosses to the host. The
+ * active experimental defaults are recorded in `docs/v1/decision-log.md`; this
+ * is not a production approval or format freeze.
  */
+
+/** Explicit allowlist; unsupported platforms fail closed before any host call. */
+const SUPPORTED_PLATFORMS: readonly string[] = ["win32", "darwin", "linux"]
+
 export default Plugin.define({
   id: "sessionport",
   async setup(context) {
-    if (process.platform !== "win32") return undefined
+    if (!SUPPORTED_PLATFORMS.includes(process.platform)) return undefined
     const { installSessionPortWiring } = await import("./tui/wiring/index.ts")
     return installSessionPortWiring(context)
   },

package/tui.ts

@@ -2,7 +2,7 @@
  * SessionPort TUI entrypoint shim for the host's directory-based plugin
  * resolution (`Host.resolve` probes `<directory>/tui` by path, before any
  * package `exports` lookup). It re-exports the product entrypoint unchanged;
- * all behavior (Windows platform gate, pinned-sodium initialization, deferred
+ * all behavior (platform allowlist gate, pinned-sodium initialization, deferred
  * `./tui/wiring/index.ts` import) stays in `src/tui.ts`.
  *
  * This file is part of the packaged `files` allowlist so an installed copy of