Formless Host

Every plugin.
Contained.

Run OCI plugins with gVisor isolation, typed capabilities, exact network grants, deterministic lifecycle, and causal traces.

Read the docs →See the stack

No trackersStatic Click clientYour Host, your data

host://plugins

Formless Host plugin management in Click

One software stack

Fluid at the edge.
Strict at the core.

Click owns presentation and interaction. Host owns authority and execution. Between them, capabilities—not credentials or arbitrary transport handles—cross the boundary.

Presentation

Click

A browser-delivered C++ / Dear ImGui workspace that feels native on desktop and intentional on touch.

Workspaces, docking and mobile split views
Canvas, daScript and trusted ABI v2 panels
Permissions, approvals, tasks and diagnostics

↔

Authority

Host

A Rust control plane that owns plugin policy, resources, data, secrets, lifecycle and evidence.

OCI + Podman + gVisor/runsc
HPP/2 over generation-private Unix sockets
Revisioned commands and causal traces

PanelDeclares a capability and operation.
Click brokerChecks declaration and user grant.
Host authorityResolves policy and provider.
HPP/2 pluginRuns inside an owned scope.
TraceCorrelates result, lifecycle and teardown.

Designed as a system

Isolation you can explain.

Security controls are explicit and local to a generation. The normal management path remains simple enough for people and deterministic enough for agents.

⬡

Immutable OCI plugins

Install exact image digests and reconcile every generation through a revisioned command authority.

◎

gVisor isolation

runsc mediates the Linux surface while Podman supplies image and lifecycle operations.

↗

Exact outbound grants

HTTPS and WSS travel end-to-end through generation-private, hostname-and-port allowlisted egress.

⌁

HPP/2 sessions

One plugin-initiated bidirectional gRPC session over a private Unix socket carries typed operations.

◌

Causal traces

Lifecycle, policy, broker calls, subscriptions, and failures form replayable, supportable evidence.

✦

Agent-ready control

REST, CLI, Click, and authenticated MCP share the same idempotent revisioned command log.

Same product, every screen

Built for the way
you actually work.

Real Click captures, rendered from deterministic fixtures: dense desktop operations, full-screen mobile management, and a touch-first single-panel view.