Flatsonar

Trace Commons

by Trace Commons

Review and contribute your coding sessions

Dangerous permissions Unverified publisher MIT OR Apache-2.0 v0.12.4
Install Source code

About

Trace Commons contributes the sessions you have with coding agents to an open corpus, with your explicit consent for each one. Nothing leaves your machine until you have seen exactly what it contains. The application watches the session folders you nominate, and nothing else. It will not guess: until you say which folders to watch, it watches none of them. Every session is scanned for secrets and personal information and shown to you in full before anything is sent. You decide per session, or arm a project you trust to contribute without asking.

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

  • unrestricted access to the session D-Bus (all your running apps)
    --socket=session-bus
  • your keyring / saved passwords
    --talk-name=org.freedesktop.secrets
  • Wayland display
    --socket=wayland
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • inter-process communication (needed for X11)
    --share=ipc
  • portal Flatpak
    --talk-name=org.freedesktop.portal.Flatpak
  • access to ~/.claude/projects
    --filesystem=~/.claude/projects:ro
  • access to ~/.codex/sessions
    --filesystem=~/.codex/sessions:ro

Who publishes this

Nobody has confirmed that the publisher controls this app id. Flatsonar warns before installing.

  • ai.tracecommons.Contributor claims the domain tracecommons.ai; only its owner can prove that
    publisher:namespace
  • installs a prebuilt binary instead of building from source (x2)
    source:prebuilt

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.