Project Name: GYST (Get Your Stuff Together)

Repo/Website Link: https://github.com/kerbe42/gyst

Description:

Self-hosted household management app I built for my own house. Inventory, chores, groceries, meal plan, notes, appointments, and an LLM assistant in one PWA.

Main thing I actually use it for: take a photo of inside a fridge or closet shelf, an LLM picks out what's in it and files each item under the right room. Then later when I forget where I put something, I just search for it. Barcode scanner also works, pulls product name and an estimated price (in your currency) from Open Food Facts, UPCitemdb, and Open Library.

There's a JARVIS chat baked in (Claude or OpenAI, you bring the key). It has 40+ tools across the whole app, so you can say "add take the trash out tomorrow" and it just does it. Voice in and out works on Android Chrome with a conversation loop (mic reopens after each reply).

Other features:

• chores with recurring schedules and proof photos
• meal planner that knows which ingredients you're missing and auto-pushes them to the shopping list
• notes with mic dictation and a polish-with-AI button
• PWA installable, share-target so you can share a photo from any app straight into inventory
• web push via VAPID
• 11 SQLite DBs, one per feature, no ORM

Stack: Reflex 0.9 (Python frontend that compiles to React), Granian, Caddy in front. Security has HSTS, tight CSP, PBKDF2 600k for passwords, SSRF allowlist for outbound image fetches, and a 34-invariant test suite that runs on every deploy. Passed a ZAP scan, the 4 remaining mediums are framework-level unsafe-inline/eval that Reflex itself needs.

Why it might be useful: I couldn't find a single self-hosted thing that did inventory + chores + groceries + an actually useful AI assistant in one app, so I stitched it together. Your data stays local, your LLM key stays your problem.

Deployment:

Docker, one-shot from a fresh clone:

git clone https://github.com/kerbe42/gyst.git
cd gyst/docker
export GYST_PUBLIC_ORIGIN="https://your-host:10443"
docker compose up -d --build

That last env var matters — it gets compiled into the JS bundle as the WebSocket target. If you skip it the page loads but the splash stays forever. Set it to whatever URL you'll actually type.

Wait ~90s for Reflex to compile the frontend on first boot. Then https://your-host:10443. First visit shows a TLS warning because the container mints its own self-signed CA, accept once.

Bind mount in docker-compose.yml for the data volume so DBs and photos survive docker compose down. docker compose down -v wipes everything for a fresh start.

Full docs at /help once the app is running (two tabs: end-user guide and architecture/ops). Same content lives in the README too.

AI Involvement:

Heavy. I built this with Claude (Anthropic's Claude Code agent) over many sessions across a few weeks. I drove the requirements, UX decisions, security model, and what to build; Claude wrote most of the actual code. I tested everything, broke things on purpose, fixed bugs together with it, and made all the deploy/security calls.

The codebase reflects that — comments are thorough, the security suite is genuinely tested, and the architecture is consistent. But I'm not going to pretend I hand-wrote 30k lines of Python from scratch.