FormlessHost
Formless Host

Every plugin.
Contained.

Run OCI plugins with gVisor isolation, typed capabilities, exact network grants, deterministic lifecycle, and causal traces.

Read the docs →See the stack
No trackersStatic Click clientYour Host, your data
One software stack

Fluid at the edge.
Strict at the core.

Click owns presentation and interaction. Host owns authority and execution. Between them, capabilities—not credentials or arbitrary transport handles—cross the boundary.

Presentation

Click

A browser-delivered C++ / Dear ImGui workspace that feels native on desktop and intentional on touch.

  • Workspaces, docking and mobile split views
  • Canvas, daScript and trusted ABI v2 panels
  • Permissions, approvals, tasks and diagnostics
↔
Authority

Host

A Rust control plane that owns plugin policy, resources, data, secrets, lifecycle and evidence.

  • OCI + Podman + gVisor/runsc
  • HPP/2 over generation-private Unix sockets
  • Revisioned commands and causal traces
  1. PanelDeclares a capability and operation.
  2. Click brokerChecks declaration and user grant.
  3. Host authorityResolves policy and provider.
  4. HPP/2 pluginRuns inside an owned scope.
  5. TraceCorrelates result, lifecycle and teardown.
Designed as a system

Isolation you can explain.

Security controls are explicit and local to a generation. The normal management path remains simple enough for people and deterministic enough for agents.

⬡

Immutable OCI plugins

Install exact image digests and reconcile every generation through a revisioned command authority.

◎

gVisor isolation

runsc mediates the Linux surface while Podman supplies image and lifecycle operations.

↗

Exact outbound grants

HTTPS and WSS travel end-to-end through generation-private, hostname-and-port allowlisted egress.

⌁

HPP/2 sessions

One plugin-initiated bidirectional gRPC session over a private Unix socket carries typed operations.

◌

Causal traces

Lifecycle, policy, broker calls, subscriptions, and failures form replayable, supportable evidence.

✦

Agent-ready control

REST, CLI, Click, and authenticated MCP share the same idempotent revisioned command log.

See the real product

Authority you can actually operate.

Host has no fake control-panel GUI. These real Click operator views show the Host lifecycle, tasks, persistent terminals, workspaces, and mobile management surfaces.

One-minute product tour

See the whole stack move.

A continuous operator recording of the real stack: inspect isolated runtimes, change workspace presentation, open Host management, and move through agent-ready controls.

20 sec interactive cut · real runtime captureDownload 60 sec full interaction ↓

“A plugin should be easy to install, hard to abuse, and obvious to debug.”

Start with the architecture

Run your first isolated plugin.

The documentation starts from a clean Host and walks through the complete stack.

Read Formless Host docs →View architecture