[FinnMacd]

Summary

• Adds an opt-in unsafe host shell capability gated by both server env config and per-Dot permission.
• Requires owner approval before executing each host command and stores exact approved command details.
• Adds UI for reviewing/approving host-shell commands and Dot-level enablement.
• Adds tests covering availability gates, stored approvals, one-shot execution, nonzero exits, and timeouts.

Validation

• npm test -- --run tests/host-shell.test.ts
• npm run typecheck
• npm run build

Safety notes

• Disabled by default via OPENDOTS_ENABLE_UNSAFE_HOST_SHELL.
• Per-Dot opt-in required.
• Commands run on the OpenDots host, not the isolated computer.
• Every command requires owner approval before execution.

Replaces CopilotKit#172, opened against the fork by request.