lifebot-v2

Zero-knowledge health platform: one headless API feeding a web dashboard and (later) iOS/Android apps. All health data is encrypted client-side under a master-password-derived key — the server stores ciphertext only, so a full server compromise yields no readable health data. Implements the design explored in [[SAAS-Lifebot/README]]; supersedes the personal-scale [[Bobs-lifebot/README]].

type readmestatus activelifebot · health · zero-knowledge · e2ee

Status

Stage 1 (local): done — gate passed 2026-07-21, PR #1 merged.
Stage 2 (Linux box): in progress — prod compose, Cloudflare Tunnel, Clerk sign-in, backups (PR #2).
Stage 3 (SaaS platform): pulled forward — ixartz/SaaS-Boilerplate vendored as control plane.
Stages 4–5 (iOS/Android): scaffold typechecks; deferred until owner provides device/accounts.
Roadmap of record: PROGRESS.md in the repo.

Docs

lifebot-v2/HLD — architecture, trust boundaries, key hierarchy
lifebot-v2/LLD — monorepo map, schema, API, crypto envelope, sync protocol
lifebot-v2/security-design — threat model, controls, residual risks
ADRs: lifebot-v2/adr/0001-zero-knowledge-e2ee · lifebot-v2/adr/0002-one-libsodium-master-password-key · lifebot-v2/adr/0003-saas-boilerplate-control-plane · lifebot-v2/adr/0004-client-side-ai-coach-gemini
Runbooks: lifebot-v2/runbooks/local-dev · lifebot-v2/runbooks/linux-deploy

Stack

FastAPI + asyncpg + Postgres (FORCE RLS) · libsodium (Argon2id, XChaCha20-Poly1305) · React + Vite + Tailwind 3.4 + Storybook · React Native (Expo, NativeWind) · Next.js 16 control plane (SaaS-Boilerplate, Clerk, Drizzle) · Docker Compose · Cloudflare Tunnel · OpenTelemetry · Gemini (coach, client-direct)

Source

Product: ~/Terraform/lifebot-v2 · GitHub BobMck/lifebot-v2 (private)

SAAS-Lifebot/README · Bobs-lifebot/README · Cloudflare-Tunnel · Project-Overview

Compiled from wiki/projects/lifebot-v2/README.md · git is the source of truth

Status

Docs

Stack

Source

Related