
Security News
Open VSX Unblocks Extension IDs Used in Malware Campaign
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.
llm-deep-trace
Advanced tools
The session browser for coding agents — Claude Code, Codex, Kimi, Gemini CLI, OpenClaw, Cursor, Aider, and more.
Browse, search, and analyze every conversation your agents have ever had.
All local. No accounts. No cloud.
You use coding agents. They leave behind session logs. Those logs are gold — decisions made, code written, reasoning traced, subagents spawned. But they're just JSONL files buried in ~/.claude/ or ~/.kimi/.
llm-deep-trace turns those files into a proper interface: threaded conversations, subagent trees, a conversation map, analytics, live tail, and full-text search across everything.
It runs entirely on your machine. It reads your local files. That's it.
| Agent | Sessions | Subagents | Notes |
|---|---|---|---|
| Claude Code (Anthropic) | ✓ | ✓ | Full support incl. agent teams |
| Codex | ✓ | — | |
| Kimi | ✓ | — | Think-block rendering |
| Gemini CLI (Google) | ✓ | — | |
| OpenClaw | ✓ | ✓ | |
| Cursor | ✓ | — | Partial — some metadata missing |
| Aider | ✓ | — | Chat history format |
| Continue.dev | ✓ | — | |
| GitHub Copilot | ✓ | — | |
| Factory Droid | ✓ | — | |
| OpenCode | ✓ | — |
git clone https://github.com/userFRM/llm-deep-trace
cd llm-deep-trace
npm install
npm run dev
Open http://localhost:3000. No config needed — it finds your sessions automatically.
Requirements: Node.js 18+
Session browser
Conversation view
Subagent tree + conversation map
Live tail
Analytics
Search
llm-deep-trace reads files from the machine it runs on. If your agent sessions live on a remote server (VPS, home lab, cloud box), you have a few options:
SSH tunnel — forward the port to your local machine:
ssh -L 3000:localhost:3000 user@your-server
# then open http://localhost:3000 locally
Tailscale — start the server bound to your Tailscale IP:
npx next start --hostname <tailscale-ip> --port 3000
# accessible at http://<tailscale-ip>:3000 from any device on your Tailscale network
VPS / cloud — same as SSH tunnel, or bind to a private network interface. Do not expose port 3000 to the public internet — there's no auth.
In all cases: the app runs on the machine where your ~/.claude/, ~/.kimi/, etc. directories live.
Right now: clone and run locally. That's the intended workflow for a local devtool.
Planned:
npm install -g llm-deep-trace + llm-deep-trace CLI commandPRs welcome on any of these.
Being straight with you:
~/.claude/, ~/.kimi/, etc. on the machine it runs on. Remote sessions not supported.jazzyalex/agent-sessions — the closest thing. Native macOS Swift app (macOS 14+), v2.11.2, actively maintained. Supports 7 agents: Codex, Claude Code, Gemini, Copilot, Factory Droid, OpenCode, OpenClaw. Has unified search, analytics, rate limits tracker, image browser, Homebrew install, and — notably — session resume (reopen a session directly in your terminal). If you're on a Mac and want a native app, it's worth looking at.
Where llm-deep-trace is different:
npm run devWhat they have that we don't (yet):
Next.js 16 · React 19 · TypeScript · React Flow · Zustand · highlight.js · Marked
MIT
FAQs
The session browser for coding agents — Claude Code, Codex, Kimi, Gemini CLI, OpenClaw, Cursor, Aider, and more.
The npm package llm-deep-trace receives a total of 2 weekly downloads. As such, llm-deep-trace popularity was classified as not popular.
We found that llm-deep-trace demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Open VSX has removed three extension IDs from its malicious-extension list as the legitimate publishers they impersonated move to claim the names for themselves.

Product
Socket’s PHP and Composer support is now in Beta for all customers, with PHP reachability analysis generally available.

Product
Socket is bringing experimental protection to Firefox, scanning 97,000+ extensions in Mozilla's official directory for malware and risky updates.