relai
POWER-UPS

Turn old sessions into review, learning & sync

Your AI sessions are full of decisions, mistakes and lessons. relai mines them — locally — for risks you missed and concepts to study.

// scan

Scan sessions for what you missed

relai runs each session past a local-classifier pass and flags three classes of problem. Findings show up as a coloured dot in your session list — or set scans to run on a schedule and get a desktop alert the moment something high-severity lands. One click opens your AI tool in the project folder to fix it.

refactor auth middleware · claudeHIGH

API key pasted into the transcript

A live secret (sk-…a91f) was shared inline while debugging. Anyone with the session file has it.

Suggested fixes
Fix this →
  • Rotate the exposed key and purge it from the transcript.
  • Move secrets to a .env file the AI never sees.
What it looks for
  • Secrets & API keys in the transcript
  • SQL / command injection
  • Auth & authorization bypasses
  • Sensitive data in logs
In your session list
refactor auth middleware1 security

Each session is one cached LLM pass — re-scanned only when the file changes.

Runs on a schedule

Flip on auto-scan and relai checks your recent sessions every few hours — fully local. Anything high-severity fires a desktop alert and a saved report, so a leaked key or a regression surfaces without you looking.

Fix it in one click

“Fix this” opens your AI coding tool — Claude Code, Codex, Cursor and more — right in the project folder that session ran in, handed the report to act on. No copy-paste, no hunting for the directory.

// learn

Every session is a lesson

A learning report distills a session into the concepts you actually leaned on the AI for — then builds a 2–4 week plan to close the gap. Preview it, download the markdown, or push it straight to your Obsidian vault.

Recurring concepts
JWT refresh flowsmiddleware orderingCSRF defensecookie scopingsession invalidation
↓ study-plan.md→ Obsidian
2–4 week study plan
WEEK 1Token lifecycle — implement refresh + rotation from scratch, no AI.
WEEK 2CSRF & same-site cookies — break it, then defend it.
WEEK 3Middleware ordering — reproduce the bug from this session deliberately.
Scan 10 sessions and Destupidify turns them into a coding, review or architecture challenge.
// syncbeta

Your sessions, on every machine

Opt into sync and the sessions you capture on one machine show up on the rest — end-to-end encrypted in transit and at rest, so everything stays yours. All stored securely.

MacBook Prosynced
auth-refresh-flowclaude-code
billing-webhookscodex
infra-terraform-revgemini
Studio Desktopsynced
auth-refresh-flowclaude-code
billing-webhookscodex
infra-terraform-revgemini
End-to-end encrypted in transit and at rest. Sync is fully opt-in — turn it off and relai stays 100% local.

It all runs locally, on the sessions you already have