Openhost Sculptor

OpenHost Sculptor: deploy / verify / reset

Operate the self-hosted Sculptor app on an OpenHost compute space. Sculptor is deployed there as an OpenHost app built from source (not a released binary): OpenHost clones the repo at a branch, builds openhost.Dockerfile, runs the container under rootless podman, and reverse-proxies HTTPS to it behind OpenHost's owner login.

Everything here drives the oh CLI (OpenHost's app-management CLI) — no SSH into the host for any normal flow. The four common flows are wrapped in scripts under scripts/; the raw oh commands they run are shown alongside so you know what each does.

Config

This skill is Sculptor-specific, so the values are baked into the scripts — no config file to set up:

• APP — sculptor, hardcoded in each script.
• REPO — https://github.com/imbue-ai/sculptor, hardcoded in each script.
• BRANCH — the repo's current git branch (git rev-parse --abbrev-ref HEAD).
• HOST — the public URL host that verify.sh curls (e.g. sculptor.<your-zone>). This is the only per-machine value — it embeds a personal subdomain, so it isn't committed. It lives in .sculptor/.env (gitignored via **/.env) as OPENHOST_HOST. verify.sh takes it as an argument; getting it from .sculptor/.env is the caller's job (see Verify below) — the script does no file I/O or prompting.

When you need HOST and .sculptor/.env doesn't have it yet, ask the user for their instance host and save it so future runs don't have to ask:

echo "OPENHOST_HOST=sculptor.<your-zone>" >>.sculptor/.env   # gitignored

To run ad-hoc oh commands in a shell, just use those values directly, e.g.:

oh app status sculptor   # see "Gotchas": older instances need the app_id, not the name
oh app deploy "https://github.com/imbue-ai/sculptor@$(git rev-parse --abbrev-ref HEAD)" \
  --name sculptor --wait

Prereqs

• oh CLI installed and authenticated on this machine.
  • Install (it's not on PyPI — installs from the private openhost repo):

    uv tool install "oh @ git+https://github.com/imbue-ai/openhost.git#subdirectory=compute_space_cli"

    uv drops the binary at ~/.local/bin/oh; add that to PATH if needed.
  • Authenticate once with oh login (prompts for the compute-space URL and a token). Sanity check: oh status should print <url> — up (HTTP 200). (Don't rely on oh app list for the check — it crashes against older instances; see "Gotchas".)
• The branch must be pushed to GitHub first. The deploy builds from $REPO@$BRANCH — OpenHost clones from GitHub, so unpushed local commits are invisible to it. Push (with the user's permission) before deploying.
• Repo root carries the deploy artifacts: openhost.toml (the app manifest — name, port 5050, health check, persistent app_data) and openhost.Dockerfile (the from-source build recipe). The build context is always the repo root.

How it runs

Knowing how the container is wired explains the deploy and reset behavior below.

• The Dockerfile CMD runs python -m sculptor.cli.main --no-open-browser /workspace from the built uv venv at /app/.venv — the backend serves the bundled web UI itself. No Electron, no just start. It's effectively just backend with static serving on and /workspace (a minimal pre-initialized git repo) as the initial project.
• The backend listens on 0.0.0.0:5050 inside the container; OpenHost proxies HTTPS at https://$HOST/ behind its SSO owner login.
• Persistent state lives under /data/app_data/sculptor (env SCULPTOR_FOLDER) — DB, workspaces, downloaded agent binaries, and config. This dir is an OpenHost backed-up app_data mount, so it survives rebuilds and oh app remove --keep-data. Claude Code OAuth creds persist there too (CLAUDE_CONFIG_DIR=/data/app_data/sculptor/claude).

Deploy / update

Each script deploys the current git branch (BRANCH) and runs oh with --wait (the from-source build takes ~10 min — uv sync, frontend pnpm install / generate-api / build; don't assume it's instant).

Fresh deploy — app name not yet in use

.claude/skills/openhost-sculptor/scripts/deploy.sh
# → oh app deploy "$REPO@$BRANCH" --name "$APP" --wait

Update, or switch branches — keep data

oh app deploy refuses an existing app name ("App name already in use"), so redeploys remove first. redeploy.sh removes with --keep-data (persistent app_data survives), then deploys the same or a different $BRANCH. oh app remove blocks until the app is gone, so the deploy reuses the name cleanly.

.claude/skills/openhost-sculptor/scripts/redeploy.sh
# → oh app remove "$APP" --keep-data
# → oh app deploy "$REPO@$BRANCH" --name "$APP" --wait

Note: oh app reload "$APP" --update only git pulls and rebuilds the same branch already deployed — it does not switch branches. Switching branches always means remove + deploy (i.e. redeploy.sh).