プラグイン

Runs open-mcp-apps inside DSH: every MCP app gets its own sidebar container with a separate workspace, session, and App mode, an agent status strip under the app, and inline app rendering in ordinary chats.

Sidebar system monitor for the DSH Web UI: live host overview (CPU/memory/network/disk), process list, and Docker container status, all read-only.

型付きで保護されたコンテナ操作。ps/logs/inspect/exec/start/stop と compose up/down を JSON 出力付きで提供し、プロジェクトを意識したターゲット指定と、破壊的操作への承認ゲートに対応します。

Container-isolated backend for the `ctx.codeRuntime` seam: each Code Mode program runs in a fresh container with no network, a read-only rootfs, dropped capabilities, and kernel-enforced memory, CPU and pid ceilings.