Skip to content

DevStudio-AI/LyfPilot

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

LyfPilot Banner

LyfPilot

Built with VybeCoder Execution Verified

Your AI-Powered Personal Operating System

A cloud-based personal OS that uses your own AI keys to automate your life — while keeping you firmly in control. Every AI suggestion must pass through a policy engine before anything happens, so nothing runs without your approval.

Platforms Integrations AI Security Status


How It Works

LyfPilot connects to the tools you already use — Gmail, Calendar, Slack, GitHub, Notion, and more — and lets AI help you manage everything from a single dashboard. The key difference from other AI assistants: your AI never acts alone.

You ask something → AI proposes a plan → Policy engine checks it → Only then does it execute

This means you get the speed of AI automation with the safety of human-approved guardrails. You bring your own API keys (OpenAI, Anthropic, Google, etc.), so there's no vendor lock-in and your data stays yours.


Key Capabilities

🧠 Intelligent Automation

  • Natural language task execution — Tell it what you want in plain English
  • Smart model routing — Automatically picks the best AI model for each task (cost vs. speed vs. quality)
  • Long-term memory — Remembers your preferences and context across conversations
  • Workflow templates — Create reusable automations with custom triggers

🔐 Policy-Controlled Safety

  • Deterministic policy engine — Every AI action filtered through rule-based approval
  • Capability-based access — Fine-grained control over what AI can and can't do
  • Approval gates — Sensitive actions require explicit confirmation
  • Full audit trail — Every decision logged with immutable, append-only records

🔌 12+ Integrations

Google Workspace (Gmail, Calendar, Drive) Microsoft 365 (Outlook, Teams, OneDrive) Slack
GitHub Linear Notion
Todoist Spotify Jira
Trello Dropbox Zoom
Plaid (Banking) Google Maps OpenWeather

Each integration uses OAuth2 with PKCE, encrypted token storage, and least-privilege scopes.

📱 Multi-Platform

  • Web Dashboard — Full-featured Next.js interface
  • Mobile Apps — Native iOS/Android via React Native + Expo
  • AR Glasses — Experimental WebXR companion for hands-free interaction
  • Admin Console — Internal operations dashboard

🔑 Bring Your Own Keys (BYOK)

Use your own API keys for any supported AI provider:

  • OpenAI (GPT-4, GPT-4o)
  • Anthropic (Claude)
  • Google (Gemini)
  • Azure OpenAI
  • And more via extensible provider system

No middleman. No markup. Your keys, your models, your data.


Architecture Overview

LyfPilot is built as a service-oriented monorepo — 16 independent NestJS microservices coordinated through a central API gateway.

┌─────────────────────────────────────────────────────┐
│                    Client Apps                       │
│         Web  ·  Mobile  ·  AR Glasses               │
└──────────────────────┬──────────────────────────────┘
                       │ HTTPS + WebSocket
                       ▼
┌─────────────────────────────────────────────────────┐
│              API Gateway (NestJS)                    │
│      Auth · Validation · Rate Limiting · Routing    │
└──────────────────────┬──────────────────────────────┘
                       │
        ┌──────────────┼──────────────┐
        ▼              ▼              ▼
┌──────────────┐ ┌──────────┐ ┌──────────────┐
│ Orchestration│ │   LLM    │ │  Integrations│
│   Service    │ │  Service │ │   Service    │
│              │ │          │ │              │
│ Intent →     │ │ BYOK     │ │ 12+ Provider │
│ Plan →       │ │ Multi-   │ │ OAuth2/PKCE  │
│ Execute      │ │ Provider │ │ Token Vault  │
└──────┬───────┘ └────┬─────┘ └──────────────┘
       │              │
       ▼              ▼
┌──────────────┐ ┌──────────────┐
│   Policy     │ │   Executor   │
│   Engine     │ │   Service    │
│              │ │              │
│ Deterministic│ │ Sandboxed    │
│ Rule-Based   │ │ Idempotent   │
│ Decisions    │ │ Actions      │
└──────────────┘ └──────────────┘
       │
       ▼
┌─────────────────────────────────────────────────────┐
│                  Supporting Services                 │
│  Identity · Audit · Vault · Context Graph ·         │
│  Notifications · Scheduler · Billing · Analytics    │
└─────────────────────────────────────────────────────┘
       │
       ▼
┌─────────────────────────────────────────────────────┐
│               Data Layer                            │
│    PostgreSQL + pgvector  ·  Redis  ·  Object Store │
└─────────────────────────────────────────────────────┘

For the full architecture deep-dive, see ARCHITECTURE.md


Tech Stack

Layer Technologies
Runtime Node.js 20+, TypeScript 5.9 (strict ESM)
Backend NestJS 10, Prisma ORM, BullMQ
Frontend Next.js 14, React 18, Tamagui
Mobile React Native 0.76, Expo 52
Database PostgreSQL 14+ with pgvector
Cache Redis 7+
Auth Passwordless + OAuth + MFA/WebAuthn
Observability OpenTelemetry, Prometheus, Grafana, Pino
Testing Vitest, Playwright, Pact
Monorepo Turborepo + pnpm workspaces

Full breakdown in TECH_STACK.md


Security Model

Security isn't an afterthought — it's the architectural foundation.

Layer Protection
Network TLS 1.3, WAF, rate limiting (per-user/IP/tenant)
Authentication Passwordless magic links + MFA (TOTP + WebAuthn passkeys)
Authorization Capability-based access control, per-request policy checks
AI Safety LLM proposes → Policy decides → Executor acts (never direct execution)
Encryption AES-GCM at rest, TLS in transit, Argon2id hashing, EdDSA signing
Secrets Dedicated vault service with key rotation
Audit Append-only immutable event log with correlation IDs
Tenant Isolation Hard partitioning at database, cache, and log levels
Compliance GDPR (export/erasure/consent), SOC 2 readiness

Full security architecture in SECURITY.md


Screenshots

Screenshots coming soon — the product is in active development.


Project Status

LyfPilot is in active development. Core infrastructure is built and functional:

  • ✅ Service architecture (16 microservices)
  • ✅ Authentication system (passwordless + MFA + OAuth)
  • ✅ Policy engine with deterministic enforcement
  • ✅ BYOK LLM integration with multi-provider routing
  • ✅ 12+ third-party integrations with OAuth2
  • ✅ Real-time WebSocket communication
  • ✅ Multi-platform clients (web, mobile, AR)
  • ✅ Full audit trail and observability stack
  • 🔄 Public beta preparation

How This Was Built

This project was built using VybeCoder — an execution-verified AI software system that plans, generates, debugs, and verifies complete applications.

Unlike traditional AI coding assistants that generate snippets and leave you to debug, VybeCoder manages the entire lifecycle: architecture decisions, multi-file coordination, error detection, automated repair, and runtime verification.

What does that mean in practice?

  • Every file was planned, generated, and tested through VybeCoder's build pipeline
  • Errors were caught and fixed automatically — not manually
  • The final output was verified to run, not just compile

Want to build something like this? Start building with VybeCoder — no coding experience required.


License

This repository contains documentation and architecture references only. The source code is proprietary and not publicly available.

© 2024-2026 DevStudio AI Inc.. All rights reserved.

See LICENSE for details.