Great project! I have had conversations along these lines with my colleagues for quite some time now. Will definitely try.

The docs mention cloudinabottle.toml but the app repos all have openhost.toml. Did you folks change the name of the platform?

Also, can you point to how the unified auth works? Couldn't find anything in the manifest spec.

Yeah, it was called Openhost for a while before changing to Cloud in a Bottle. Either filename works.

It proxies requests from the user to installed apps, and adds a header 'is-owner'. Apps have to be built to respect that header - some apps do this by running their own little proxy/sidecar that will detect that header and inject saved credentials.