플러그인

Runs open-mcp-apps inside DSH: every MCP app gets its own sidebar container with a separate workspace, session, and App mode, an agent status strip under the app, and inline app rendering in ordinary chats.

Sidebar system monitor for the DSH Web UI: live host overview (CPU/memory/network/disk), process list, and Docker container status, all read-only.

타입이 지정되고 가드가 적용된 컨테이너 제어: ps/logs/inspect/exec/start/stop과 compose up/down을 JSON 출력, 프로젝트 인식 타겟팅, 승인 게이트가 적용된 파괴적 작업으로 제공

Container-isolated backend for the `ctx.codeRuntime` seam: each Code Mode program runs in a fresh container with no network, a read-only rootfs, dropped capabilities, and kernel-enforced memory, CPU and pid ceilings.