numbat

NetWatch is a real-time network diagnostics tool that runs in the terminal as a single, configuration-free binary. It captures network activity, attributes connections to processes where available, decodes application-layer protocols, fingerprints clients with JA4, tracks streams, and displays connections, interfaces, packets, protocol statistics, topology, timelines, per-process bandwidth, and egress destinations. Its diagnostic engine learns baselines, applies diagnostic rules, ranks possible causes, and records issues through verified closure. Egress linting observes destinations, promotes policies, and alerts when activity drifts from them; the tool also supports TLS 1.3 decryption for user traffic, PCAP export, display filters, beaconing and DNS-tunneling analysis, and Prometheus metrics. NetWatch provides full, lite, and dense terminal views and can run without elevated privileges for basic information, while capture features may require sudo or Linux capabilities. It is distributed for macOS, Linux, Windows, and other platforms through package managers, binaries, and a container. The repository is MIT-licensed; optional LLM commentary in the Diagnose view is disabled by default.

netmon is a self-hosted local-network monitor that periodically measures download and upload speed, ping latency, ISP, and test-server details, then scans the local subnet with nmap ARP scanning to count active devices. It stores the measurements and device counts in a local SQLite database and uses matplotlib to produce 24-hour trend graphs. The monitor sends status updates and periodic reports to Telegram or Discord. Reports can include sarcastic LLM-generated analysis through an OpenAI-compatible API, including a local LLM server. It runs on macOS or Linux, uses Python and uv, and requires system installations of nmap and speedtest-cli; device counting requires passwordless sudo access for nmap.

Nightingale is an open-source monitoring and alerting platform initially developed by DiDi and donated to the China Computer Federation Open Source Development Technical Committee. It connects to existing metric and log data sources such as Prometheus, VictoriaMetrics, Elasticsearch, Loki, ClickHouse, MySQL, and PostgreSQL, but does not collect monitoring data itself. Collectors such as Categraf can send data through Prometheus Remote Write, after which Nightingale evaluates alerting, mute, subscription, notification, and event-pipeline rules and distributes alarms through supported notification channels. It also provides dashboards, historical alarm queries, business-group permissions, alert-rule imports, self-healing scripts, and distributed edge alerting through n9e-edge. The n9e process includes a built-in MCP endpoint at /mcp and an A2A endpoint at /a2a. MCP exposes read tools by default for alerts, targets, data sources, metrics, logs, dashboards, and related resources; write tools can be enabled explicitly, with authentication and permissions applied through Nightingale's own access controls. The project is distributed under the Apache License 2.0.

Apache Maka (Incubating) is a local-first agent workspace developed under the Apache Software Foundation. It inspects projects and runs tools through a shared Runtime Host within a sandbox boundary; tools that leave the sandbox require approval. Model messages, tool calls, tool results, and how a turn ended are stored as recoverable execution facts on the user's machine, while older tool output can be omitted from later prompts without deleting the saved history. Model connections can use cloud APIs, local models, or compatible gateways, with sessions, settings, and run records kept local by default. Maka provides an Electron and React desktop application with streaming sessions, tool timelines, branching, search, recovery, artifacts, and model and sandbox settings. Its TUI/CLI supports work in a project directory and non-interactive turns, while its evaluation surface runs declarative multi-arm experiments across Maka and external subjects. Built-in tools include Read, Write, Edit, Bash, Glob, and Grep; Computer Use and catalog skills are optional. The project is under active development and Apache incubation; the README describes the macOS Apple Silicon desktop build as an early public release and notes that data formats, CLI commands, and experimental capabilities may change.

agentacct is a local-first audit and observability tool for coding-agent work. It reads session logs from Claude Code, Codex, OpenCode, and Hermes, combines them with recorded tasks and test evidence, and produces a Work Receipt for each task covering commands run, files touched, tools used, time and token usage, cost, outcome, and evidence strength. Agent claims and machine verification are kept as separate axes, with verified status reserved for tasks whose live checks pass after the latest recorded work. The data is available through a macOS app, the live terminal dashboard launched with `agentacct tui`, and a local JSON API. State is stored in local files; the API listens only on loopback, and the project states that it has no login, cloud sync, or telemetry and does not request provider API keys.