fix: resolve Linux FFI signature mismatch for main_l_get_tab_owner

Author: 989tqT

CHANGELOG.md

@@ -9,6 +9,9 @@
 * Shared WASM compilation module `tests/build_utils.py` to enforce `--allow-undefined` linker flags globally across all plugin builds.
 * Automated target binary copying and caching for Linux production builds.
 * Custom structured issue templates (Bug Report, Feature Request, Plugin Submission) and a Pull Request template in `.github/`.
+* Platform-agnostic OS detection FFI `host_get_platform` returning compile-time host platform evaluation (0 for Windows, 1 for Linux) to eliminate brittle environment variable parsing.
+* Linux shell executor backend (`sh.rs`) executing `/bin/sh -c` queries for the `pTerm` plugin.
+* Shell blacklisting security reinforcement: added `dash` shell to the banned executable list in the sandbox to block unauthorized access by untrusted plugins.
 
 ### Fixed
 * Linux CI cross-compilation failure (`x86_64-pc-windows-gnu` target) — removed orphaned `.cargo/config.toml` that forced incorrect target resolution on Linux runners.
@@ -21,6 +24,10 @@
 * Linux production linker `undefined reference to 'g_headless_mode'` — guarded `extern "C"` declaration in `main_l.cpp` under `#ifdef PLUG_ENABLE_HEADLESS_MODE`; production builds now use `static constexpr bool g_headless_mode = false` with zero runtime cost.
 * GCC `-Wextern-initializer` warning in `main.cpp` — changed `extern "C" bool g_headless_mode = false` to block-form `extern "C" { bool g_headless_mode = false; }`.
 * Process hang on `/e` exit in headless mode — `g_cmd_thread` was blocking indefinitely on `g_cmd_cv.wait()`; `main_l_cleanup()` now sets `g_cmd_thread_running = false`, notifies the CV, and joins the thread before returning so the process exits cleanly within the test timeout window.
+* Headless CI broken pipe (`test_cli_lifecycle`) — moved `g_cmd_thread` and `g_headless_stdin_thread` startup from `on_tick()` frame-clock callback to `on_activate()` so stdin reader is live before any test data arrives; frame-clock callbacks are not guaranteed to fire before GApplication idle-hold expires under `xvfb-run`.
+* Linux `test_sandbox_rules` 120s timeout — plugin directory was hardcoded to `C:\.plug\plugins` (Windows-only); corrected to `$HOME/.plug/plugins` matching `proc.rs` `c_init()` runtime logic.
+* FFI Windows-centric symbol leakage — renamed `main_w_add_tab` to platform-neutral `host_add_tab` across `plugin_mgr.rs`, pTerm manifests, source plugin files, and test mocks (`ok_plugin.rs`, `rogue_plugin.rs`, `rogue_plugin_runtime.rs`) to prevent load-time link failures.
+* `pTerm` Linux shell execution compatibility — resolved execution errors on Linux hosts by adding `/sh` routing to the command parser, introducing the Linux shell backend, defaulting shell mode dynamically on Unix targets, and mapping E2E test assertions to platform-specific outputs.
 
 ---
 

README.md

@@ -54,6 +54,9 @@ cd plug.cross/linux && ./make.sh
 | `/?` | None | Displays help details. |
 | `/a` | None | Displays system environment and memory statistics. |
 | `/tab` | None | Spawns a new workspace tab. |
+| `/cmd` | `[query]` | Spawns a Windows Command Prompt tab or executes a CMD query. |
+| `/ps` | `[query]` | Spawns a Windows PowerShell tab or executes a PowerShell query. |
+| `/sh` | `[query]` | Spawns a Linux shell tab or executes a shell query. |
 | `/plug*` | None | Lists available online registry plugins and hashes. |
 | `/plug` | `[hash]` | Downloads and initializes a plugin. |
 | `/plug-` | `[hash]` | Unloads the specified plugin. |

docs/ARCHITECTURE.md

@@ -18,9 +18,9 @@ The framework splits operations into two layers connected via C FFI:
 
 ### C++ Functions (Called by Rust / Plugins)
 - `main_*_print_info(str)` / `main_*_print_error(str)`: Output logs to active text buffers.
-- `main_*_add_tab(name)`: Spawns a new tab context.
+- `main_*_add_tab(name)`: Spawns a new tab context. Note that the WASM FFI layer exposes a platform-neutral import named `host_add_tab` which the host runtime routes to these platform-specific functions.
 - `main_*_set_prompt_visibility(visible)`: Controls standard input prompt fields.
-- `main_*_get_tab_owner(idx)` / `main_*_set_tab_owner(idx, name)`: Syncs tab ownership state.
+- `main_*_get_tab_owner(idx, buf, max_len)` / `main_*_set_tab_owner(idx, name)`: Syncs tab ownership state. The `get` function writes the owner string into `buf` up to `max_len` to ensure buffer safety and avoid ABI crashes.
 
 ---
 

docs/PLUGIN_DEVELOPMENT.md

@@ -40,7 +40,7 @@ author = "Dev"
 api_version = "xxx"
 permissions = [
   "host_exec",         # Spawning local commands (CMD / PowerShell)
-  "main_w_add_tab",    # Spawning new tabs
+  "host_add_tab",      # Spawning new tabs
   "host_set_tab_owner" # Taking tab ownership
 ]
 ```

docs/TESTING_SYSTEM.md

@@ -65,7 +65,7 @@ Manifest configurations (`plugin.toml`) define the permission scope of the WASM
   ```toml
   [[plugin]]
   name = "ok_plugin"
-  permissions = ["main_w_add_tab", "host_exec"]
+  permissions = ["host_add_tab", "host_exec"]
   ```
 - **`rogue_plugin` Manifest (Load-time)**:
   ```toml

docs/plugins/README.md

@@ -8,4 +8,4 @@ Currently, the following official plugins are deployed and verified:
 
 | Plugin Name | Version | Description | Documentation Link |
 |---|---|---|---|
-| **pTerm** | `1.0.0` | Default core terminal runner plugin bridging WASM container to host shells. | [Details](catalog/pTerm.md) |
+| **pTerm** | `1.0.1` | Default core terminal runner plugin bridging WASM container to host shells. | [Details](CATALOG/pTerm.md) |

docs/plugins/catalog/pTerm.md

@@ -6,8 +6,8 @@
 
 ## 1. Specifications
 
-- **Role**: Spawns and manages CMD and PowerShell sessions inside dedicated UI tabs.
-- **Required Permissions**: `host_exec`, `main_w_add_tab`, `host_set_tab_owner`, `host_get_tab_label`.
+- **Role**: Spawns and manages CMD, PowerShell (Windows), and sh (Linux) sessions inside dedicated UI tabs.
+- **Required Permissions**: `host_exec`, `host_add_tab`, `host_set_tab_owner`, `host_get_tab_label`.
 - **Trust Tier**: Recognized as a trusted core utility by matching the compile-time hardcoded SHA-256 hash list. Bypasses the sandbox interpreter bans (shells block) and canonical-path allowlist checks.
 
 ---
@@ -27,9 +27,9 @@ The diagram below illustrates the exact control flow when a user runs a shell co
      |
      v
 [WASM Sandbox (pTerm.wasm)]
-  1. Calls `get_args` to retrieve input ("dir")
-  2. Resolves active tab mode (PowerShell vs CMD)
-  3. Prepend shell execution wrapper (e.g. `cmd /c dir` or `powershell -Command "dir"`)
+  1. Calls `get_args` to retrieve input (e.g. "dir" or "ls")
+  2. Resolves active tab mode (PowerShell, CMD, or SH)
+  3. Prepend shell execution wrapper (e.g. `cmd /c dir`, `powershell -Command "dir"`, or `sh -c "ls"`)
      |
      v
 [Rust Host Runtime] -> 1. Verifies memory buffer SHA-256 matches compile-time TRUSTED_PLUGIN_HASHES
@@ -43,16 +43,18 @@ The diagram below illustrates the exact control flow when a user runs a shell co
 
 ## 3. Operations Routing
 
-### Spawning a new Sub-Shell (`/cmd` or `/ps`)
-1. User types `/cmd` or `/ps`.
+### Spawning a new Sub-Shell (`/cmd`, `/ps`, or `/sh`)
+1. User types `/cmd`, `/ps`, or `/sh`.
 2. Rust router catches the command and invokes the `pTerm` module with initialization arguments.
-3. `pTerm` calls `main_w_add_tab("pTerm")` to request a new UI tab from the host.
-4. `pTerm` labels the tab owner name as `"CMD"` or `"PS"` using the `host_set_tab_owner` hook.
+3. `pTerm` calls `host_add_tab("pTerm")` to request a new UI tab from the host.
+4. `pTerm` labels the tab owner name as `"CMD"`, `"PS"`, or `"SH"` using the `host_set_tab_owner` hook.
 5. The tab context is initialized, and the user can now type terminal commands directly.
 
 ### Running Subprocess Commands
-1. User types `git status` in a tab labeled `"PS"`.
+1. User types `git status` in a tab labeled `"PS"` (or `ls -la` in a tab labeled `"SH"`).
 2. The input does not start with `/`, so Rust router resolves the active tab owner (`"pTerm"`) and delegates the call.
-3. `pTerm` checks the tab label, matches it to `"PS"`, and reformats the command:
-   `powershell -NoProfile -Command "git status"`
+3. `pTerm` checks the tab label:
+   - Matches `"PS"` -> reformats to: `powershell -NoProfile -Command "git status"`
+   - Matches `"CMD"` -> reformats to: `cmd /c "git status"`
+   - Matches `"SH"` -> reformats to: `sh -c "ls -la"`
 4. `pTerm` calls `host_exec` to execute the string on the host OS, streaming the outputs directly to the UI rendering buffers.

plug.app/cmn/inc/sys/api/linux/main_l.h

@@ -94,6 +94,14 @@ void main_l_cleanup(void);
 void main_l_print_banner(void);
 void main_l_print_info(const char* msg);
 void main_l_print_error(const char* msg);
+void main_l_set_prompt_visibility(int visible);
+void main_l_add_tab(const char* owner);
+void main_l_request_close(void);
+void main_l_replace_last_line(const char* msg);
+void main_l_set_tab_owner(int tab_idx, const char* owner);
+int main_l_get_tab_owner(int tab_idx, char* buf, int max_len);
+void main_l_set_tab_cwd(int tab_idx, const char* cwd);
+int main_l_get_current_print_tab(void);
 
 #ifdef __cplusplus
 }

plug.app/cmn/inc/sys/api/windows/main_w.h

@@ -73,6 +73,10 @@ int main_w_print_tab(void);
 void main_w_request_close(void);
 void main_w_set_prompt_visibility(int visible);
 void main_w_add_tab(const char* owner);
+void main_w_set_tab_owner(int tab_idx, const char* owner);
+int main_w_get_tab_owner(int tab_idx, char* buf, int max_len);
+void main_w_set_tab_cwd(int tab_idx, const char* cwd);
+int main_w_get_current_print_tab(void);
 
 void main_w_run_message_loop(void);