Repository navigation
FAQ
Retrace is a deterministic, offline terminal intelligence tool. It records your terminal activity locally, redacts secrets at the boundary, runs rule-based detection, and gives you a local web UI to analyze charts, download reports, and configure everything from the browser.
No. Retrace is agentic-free by design. The core value — capture, redact, store, detect, analyze — is delivered by deterministic, offline code. No LLM is required. Optional local model analysis is opt-in and advisory only.
No. Everything runs locally: capture, redaction, storage, detection, the web UI, and report generation. The web UI binds to 127.0.0.1 and fetches nothing from a CDN. Data leaves your machine only if you explicitly export a report or trigger remote collection.
No. The core works with zero models and zero API calls. Model analysis is an optional add-on that runs against a local model server (e.g., Ollama) — never a cloud API.
No pip dependencies means no supply-chain risk, no venv hassle, and no version drift. The core is Python 3.9+ stdlib only. If a change needs a third-party package, it's proposed in an issue first and likely rejected unless there's a compelling reason.
retrace webOpens at http://127.0.0.1:8765. On Windows, if you get WinError 10013 (security software blocking the port), use retrace web --port 55555.
Since v0.2.0 the dashboard is backed by materialized summary tables. Cold loads take ~2s on a 1.1M-row DB (was ~16s); warm loads are ~3ms. You can also prune old data from the Maintenance tab.
Maintenance tab → pick 30/60/90/180 days → Prune. Or via API:
curl -X POST http://127.0.0.1:8765/api/maintenance/retain \
-H "Content-Type: application/json" -d '{"days": 60}'Yes. Since v0.2.0 the Settings tab covers: model config, detector CRUD with live regex testing, remote host management, and one-click CLI actions (ingest, detect, agent cycle, win-events, collect remotes) — all running as background jobs.
Privately, via GitHub Security Advisories — not a public issue: https://github.com/Nooran3994/Retrace/security/advisories
Read CONTRIBUTING, follow the Code of Conduct, use Conventional Commits, and open a PR with the PR template.
- Stdlib only — no new pip dependencies without prior discussion.
- Local-first — no telemetry, no CDN, no network calls unless explicitly user-triggered.
- Deterministic over agentic — capture/detect never depends on a model.
- Redaction-first — new data sources pass through the redaction engine before storage.
- Append-only — no UPDATE/DELETE paths on the core tables.