
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@kibitzsh/kibitz
Advanced tools
Real-time decoded feed of AI agent actions — monitor multiple Claude Code & Codex sessions, see exactly what each agent is doing, and coordinate swarms efficiently
Kibitz is a VS Code extension + CLI that watches Claude/Codex sessions, generates live commentary, and lets you dispatch prompts to existing or new sessions from one composer.
VS Code Extension — install from the VS Code Marketplace or search Kibitz in the Extensions panel.
CLI — Homebrew (macOS / Linux)
brew install kibitzsh/tap/kibitz
CLI — npm
npm install -g @kibitzsh/kibitz
| Platform | VS Code panel | Terminal CLI |
|---|---|---|
| macOS | Supported | Supported |
| Windows | Supported | Supported |
| Linux | Best effort | Best effort |
/help, /pause, /resume, /clear, /focus, /model, /preset/1, /2queued, started, sent, failed.Kibitz can send prompts to any active watched session (Claude or Codex), or start a new session on the current provider.
/1 New session (current provider)/2..N existing active sessions from the watcher list/1 and send your prompt./N (select only)/N <prompt> or N/ <prompt> (select + send)queued, started, sent, failed./sessions to list active sessions with numeric indexes./target <index|agent:sessionId|new-codex|new-claude>./target new-codex (or /target new-claude), then send plain text.queued, started, sent, failed.codex / codex.cmdclaude / claude.cmdnpm ci
npm run build
npm run deploy:vscode
This copies dist/ and package.json into your local extensions directory and replaces older Kibitz extension folders.
npm run build
node dist/cli/index.js
npm run typecheck
npm run check:compat
npm run test:ui
npm run test:all
Useful targeted checks:
npm run test:parsers
npm run check:session-names
npm run check:model-persistence
npm run deploy:vscode (local install to VS Code/Cursor)npm run package (builds .vsix)npm run crnpm run cr performs checks/build, bumps version, publishes VS Code Marketplace + npm, verifies versions, updates Homebrew formula, and pushes tags.VSCE_PAT (VS Marketplace publish PAT)NPM_TOKEN (npm publish token)HOMEBREW_TAP_TOKEN (GitHub token with write access to kibitzsh/homebrew-kibitz)npm run publish:vscode (VSCE_PAT required)..vsix artifacts in GitHub Releases for manual install/rollback.bin.kibitz pointing to dist/cli/index.js.kibitz.Two common paths:
npm install -g kibitz.For VS Code extensions specifically, Homebrew is optional and usually secondary to Marketplace/OpenVSX.
.vsix and changelog per version.code --install-extension <file>.vsixFor most users, start with:
.vsix artifact + release notes)Add Homebrew only if your CLI install demand is high and you want one-command setup for macOS/Linux.
Kibitz mirrors proven room patterns:
.cmd command mapping (claude.cmd, codex.cmd).FAQs
Real-time decoded feed of AI agent actions — monitor multiple Claude Code & Codex sessions, see exactly what each agent is doing, and coordinate swarms efficiently
We found that @kibitzsh/kibitz demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.