Enables multiple DSH plugin/session agents to share trust-labeled Markdown memory and query on-demand cross-plugin digests, with write access isolated per channel so untrusted third-party content cannot become instructions.

Enables a single owner to use private Slack app credentials with a self-hosted Streamable HTTP MCP server to read allowlisted public channel messages, inspect thread context, send event-scoped replies, and notify the owner.