VARNIT KUMAR

Posted on Oct 25

SlothDesk 🦥: You Do Nothing. Your Desktop Clutter Sorts, Renames, and Audits Itself

#devchallenge #hf26challenge

Hacktoberfest Open-Source AI Challenge Week 3: Slow and Steady Submission 🦥

This is a submission for the Hacktoberfest Open-Source AI Challenge Week 3: Slow and Steady

What I Built

Every modern knowledge worker dreads the Downloads and Desktop Black Hole. Over days and weeks, our workspaces accumulate hundreds of cryptically named files:

Screenshot_2026-03-12_at_11.23.41.png
INV_82910_final(1).pdf
receipt_unnamed.jpg
analytics_churn_export_raw(3).csv
mutual_nda_acme_unsigned.pdf

Organizing them manually requires opening each file, deciphering invoice numbers, typing dates, creating nested folders, resolving duplicate collisions, and dragging files — wasting 3+ hours every month.

SlothDesk 🦥 is an autonomous ambient background daemon that operates at a calm, deliberate "Sloth Pace". As chaotic downloads hit your drop zone:

Magic Header Inspection: Inspects raw binary magic bytes to verify genuine file types and isolate malicious executables (MZ, ELF) into a quarantined vault.
On-Device Gemma 3 (4B Vision/Text): Inspects textual contents and visual screenshots locally with zero cloud surveillance, extracting dates, vendors, amounts, and subjects.
Deterministic Semantic Renaming: Renames files using clean ISO-8601 timestamps and extracted entities (e.g., 2026-10-18_GitHub_Enterprise_Invoice_$21.pdf).
Cryptographic Proof of Zero Data Loss: Computes dual SHA-256 checksums before and after movement, guaranteeing 100% data integrity with zero data alteration.
ElevenLabs Ambient Morning Digest: While you sleep, SlothDesk synthesizes a soothing 30-second audio morning brief with an interactive waveform player: > "Good morning. While you were sleeping peacefully, SlothDesk swept through your downloads folder at a calm, deliberate pace. I sorted 18 messy files into clean tax and code vaults. All SHA-256 checksums verified. You did zero manual work. Go back to sleep."

Demo

🌐 Live Web Application: https://sloth-desk-lemon.vercel.app
🚀 Production DNS: https://slothdesk.tech
📖 Interactive API Documentation (Swagger): Available under /docs on the backend.

Key Interactive Features:

One-Click "Seed Chaotic Desktop": Injects realistic messy downloads (invoices, coffee receipts, UI screenshots, specs) so you can test automated sorting instantly.
Interactive File Comparison Drawer: Split-view showing original chaotic metadata side-by-side with Gemma 3's semantic extraction and confidence pills.
Tactile Sloth Governor: Toggle between Hibernate (25s idle-only batching) and Active Sweep (8s cadence).
Bespoke Waveform Scrubber: Play, seek, and adjust speeds (0.75x Sloth speed) on the ElevenLabs morning voice brief.
Real Client-Side Blob Export: Generate and download dynamic CSV and JSON audit manifests directly in the browser with cryptographic SHA-256 proofs.

Code

vannu07 / SlothDesk

SlothDesk 🦥

"You do nothing. Your desktop clutter sorts, renames, and audits itself."
Built for Hacktoberfest 2026 Open-Source AI Challenge — Week 3: "Slow and Steady" (International Sloth Day).

🏆 Partner Track Submissions & Winning Criteria

Partner Track	Implementation Highlight	Technical Proof
Best Use of Gemma ($200)	Autonomous local Gemma 3 (4B Vision/Text) multimodal pipeline via Ollama REST API with deterministic structured JSON schemas. Extracts entities, vendors, amounts, dates, and assigns standardized semantic names (`YYYY-MM-DD_Vendor_Subject.ext`). Zero cloud surveillance.	`classifier.py`
Best Use of Render ($200)	Production containerization via multi-stage non-privileged Docker image (`UID 10001`), 10GB persistent disk mount `/app/data`, zero-downtime health probes (`/api/health/live`, `/api/health/ready`), and 1-click blueprint.	`render.yaml` & `Dockerfile`
Best Use of ElevenLabs ($100)	Ambient sleepy morning audio digest narrated via ElevenLabs text-to-speech (`George` / `JBFqnCBsd6RMkjVDRZzb` warm voice) with custom interactive waveform scrubber and audio synthesis fallback.	`voice_digest.py` & `MorningBriefPlayer.tsx`
Best

…

View on GitHub

GitHub Repository: https://github.com/vannu07/SlothDesk
License: MIT Open Source

How I Built It

1. Architecture & Tech Stack

Open-Weight AI Pipeline: Google Gemma 3 (4B Multimodal Vision/Text) running on-device via Ollama REST API with deterministic JSON schema enforcement and a deterministic mock fallback for CI/CD.
Backend & Security Middleware: Python FastAPI + SQLModel (async SQLAlchemy + aiosqlite):
- Path traversal containment guard (os.path.commonpath).
- Raw magic byte validator (%PDF, PNG, JFIF, RIFF/WEBP).
- Token-bucket in-memory rate limiter on ingest endpoints.
- Dual SHA-256 cryptographic verification before and after moving.
Ambient Audio Narration: ElevenLabs Text-to-Speech API (warm ambient narrator setting) paired with an offline pure-Python harmonic synthesizer generating gentle ambient chords.
Frontend Design System: Next.js 16 (App Router + Turbopack) crafted with a bespoke Swiss-inspired technical dark mode (deep slate #090a0f, titanium borders #1e2230, subtle emerald and warm amber status lights).
Deployment Pipelines:
- Turnkey Render Blueprint (render.yaml) with 10GB persistent disk storage and zero-downtime health probes (/api/health/live, /api/health/ready).
- Root Vercel Multi-Service Configuration (vercel.json) linking Next.js and FastAPI with internal service bindings (INTERNAL_BACKEND_URL).

flowchart TD
    A[Chaotic Desktop & Downloads] --> B[Magic Byte Header Guard]
    B --> C[Pre-Move SHA-256 Hash]
    C --> D[Gemma 3 4B Multimodal Classifier]
    D --> E[Semantic Renamer & Collision Resolver]
    E --> F[Atomic Move to Standardized Vault]
    F --> G[Post-Move SHA-256 Proof Verification]
    G --> H[ElevenLabs Morning Audio Briefing]
    G --> I[Live Audit Log & Manifest Export]

Why Does Open Innovation Matter?

Your downloads folder contains your most sensitive personal data: tax returns (W-2, 1099), medical receipts, bank statements, client NDAs, and private codebase screenshots.

Sending all of these unvetted files to closed, proprietary cloud APIs exposes users to data harvesting, cloud surveillance, and third-party data breaches.

Open innovation makes privacy-first desktop automation possible:

On-Device Autonomy: By utilizing open-weight models like Gemma 3 (4B), SlothDesk processes private invoices and documents locally on your own machine. Your sensitive financial receipts never leave your hard drive.
Determinism & Auditability: Open-source models allow developers to inspect, audit, and constrain AI outputs with exact JSON schema enforcement, removing arbitrary cloud model deprecations.
Zero Cloud Rent: You don't need a $20/month subscription or cloud API credits just to organize files on your own computer.

The Lazy Payoff

Zero Clicks. Zero Effort.

Normally, an organized desktop requires:

Opening the file to see what it is (10 seconds).
Figuring out the date, vendor, and amount (15 seconds).
Renaming INV_82910_final(1).pdf $\to$ 2026-10-18_GitHub_Enterprise_Invoice_$21.pdf (15 seconds).
Creating or finding the right folder and moving the file (10 seconds).
Resolving duplicate names if they collide (10 seconds).

Total manual effort: ~1 minute per file. Across 180 files accumulated in a month, that is 3 full hours of tedious, dreaded manual chore.

With SlothDesk:

You drop files in the folder (or let the daemon monitor your downloads black hole).
You walk away or go to sleep.
SlothDesk sorts, renames, resolves duplicate collisions, computes SHA-256 proofs, and narrates a 30-second audio summary.
Effort required: 0 clicks. 0 seconds.

Prize Categories

1. Best Use of Gemma ($200)

SlothDesk runs on-device Gemma 3 (4B Vision/Text) through an Ollama REST pipeline with strict JSON schema enforcement. Gemma inspects visual UI captures and textual document previews to infer structured metadata (vendor, date, amount, topic), assigning standardized ISO-8601 semantic names and sorting items into dedicated vaults.

2. Best Use of Render ($200)

Containerized deployment with a multi-stage production Dockerfile running as non-root appuser (UID 10001). SlothDesk utilizes Render's Persistent Disk (/app/data) to preserve sorted file vaults across redeploys, accompanied by zero-downtime health probes (/api/health/live, /api/health/ready) defined in render.yaml.

3. Best Use of ElevenLabs ($100)

SlothDesk leverages the ElevenLabs API to synthesize an ambient, sleepy morning brief narrated by a warm voice (JBFqnCBsd6RMkjVDRZzb). Paired with a bespoke waveform scrubber in the Next.js frontend, users can wake up, listen to their clutter briefing at 0.75x "Sloth Speed", and inspect what the daemon sorted while they slept.

4. Best Use of a .tech Domain ($100)

Configured with production DNS mappings for https://slothdesk.tech and https://api.slothdesk.tech, hardened with strict security headers (CSP, HSTS, X-Frame-Options: DENY) and CORS origins.

DEV Community