llm-lens-web 0.2.1

Local web UI for browsing and managing LLM CLI conversation history (currently: Claude Code).

llm-lens-web

A local, offline web UI for auditing, pruning, and cleaning the conversation history your LLM CLI has written to disk. Currently supports Claude Code; the architecture accommodates other providers (Codex, Gemini) but only Claude is implemented today.

Local only. No API key. No auth. No outbound network. Never invokes claude. Reads and rewrites ~/.claude/projects/*.jsonl on your machine, nothing else.

Status: alpha. Active development, fast-moving surface. APIs, JSONL marker formats, sidecar layouts, and word-list semantics all change without notice between commits. Pin a version if you depend on any of it. Bug reports and pull requests welcome; expect churn.

Why you'd use it

1. Know what you're spending

Token counts and USD costs come from the actual message.usage fields Anthropic returned for each turn — not estimates. Per-model breakdowns, per-project rollups, per-day/week/month buckets. The overview chart shows where your money went and which sessions were expensive. Pricing table in utils.js (captured from claude.com/pricing on 2026-04-14; update when rates change).

2. Make future /resume cheaper

This is the lever that's easy to miss. Anything you remove from a conversation shrinks what Claude Code sends as context the next time you /resume it. Less context sent → fewer input tokens billed per turn going forward. The editing tools aren't just cleanup; they're direct downstream cost reduction:

• Scrub — redact a message's text to .. Original usage is preserved (historical accuracy), but on resume the scrubbed content is what gets sent.
• Normalize whitespace — collapse runs of spaces/tabs and 3+ newlines.
• Strip agent-priming language. Two curated lists for the two flavors, both stored at ~/.cache/llm-lens/word_lists.json and editable in-app:
  • Swears — emotionally charged words that prime an agent toward worse output. Word-bounded, with a * stem syntax for safe conjugation matching (fuck* catches fuck/fucks/fucker/fucking; ass stays exact so assistant survives).
  • Filler / drift phrases — sycophancy and meta-commentary that nudge the agent off task: "You're absolutely right!", "Let me think step by step.", "I apologize for the confusion.", etc. Same mechanism, different register.
• Extract a pruned subset into a new conversation, leaving the original untouched.

3. Stay honest about history

Deletes don't vanish from your accounting. Per-conversation deleted_delta tombstones are stored in the sidecar cache so project- and overview-level rollups still reflect what you actually spent. Duplicating a conversation writes a sidecar recording the shared-prefix stats so the copy doesn't double-count against the parent while both exist.

4. See what the agent actually ran

Every Bash tool_use block is parsed for the underlying command name and counted: grep × 42, git × 31, sed × 8. Wrappers like sudo, env FOO=1, and bash -c '...' are stripped (the inner script is what counts); pipelines attribute to the first command. The per-conversation stats modal has a Bash commands section with the breakdown.

In the Messages view, Bash badges expand inline to show the actual command — truncated preview by default, click show full for the whole thing. Strings that look like API keys, GitHub/Slack/AWS/OpenAI/Anthropic tokens, Bearer headers, *_KEY=/*_SECRET=/*_PASSWORD= env assignments, or URLs with embedded passwords are masked as [sensitive] and require a click to reveal — safer to screenshot or share-screen with this on.

5. Read the file like an IDE when you need to

A whitespace-rendering toggle (· for spaces, → for tabs) on the Messages view, useful when tracking down stray characters in scrubbed/normalized text or comparing what the agent wrote to what you expected. Off by default; off doesn't affect on-disk content.

Workflows

Audit a month

Open the Overview chart at the top of Projects or Conversations. Range → Month, Mode → Tokens or Cost. Click into the heavy days. Drill from Projects → Conversations → Messages. Archive stuff you're done with; delete stuff you'll never need; leave the rest.

Prune a runaway conversation

1. Duplicate it (the copy gets a fresh sessionId and rewritten message UUIDs so /resume doesn't collide with the parent).
2. Open the duplicate in Edit mode. Select the noise. Bulk-scrub, bulk-delete, or extract the signal to a new convo.
3. Keep the original around as a fallback. There's no in-tool way to confirm the edited copy will /resume cleanly — that's a separate claude --resume <id> from the terminal, and undocumented invariants mean a pass today doesn't guarantee a pass tomorrow.

Redact before sharing a transcript

Select the messages to redact. Scrub. The chain, UUIDs, and token counts stay intact — only the visible text becomes .. Safe to paste the file into a bug report or share the session ID.

Cut agent-priming language across a session

Open the Messages view. Edit mode → Select all → split-button ▾ → Remove swears or Remove filler / drift phrases. Both are doing the same job — stripping language that degrades the next turn's output, whether by emotional priming (swears) or sycophancy-induced drift (filler). Curate either list via Curate word lists… (stored at ~/.cache/llm-lens/word_lists.json).

Audit shell activity in a session

Open a conversation's stats modal → Bash commands section. See the frequency-ranked list of what was run. For specific calls, scroll the Messages view: each Bash badge is expandable inline and shows the full command (with sensitive-pattern masking on by default).

Safety model

This tool is non-destructive by default. Every editing action has a preserving alternative:

You want to	Non-destructive option
Hide a conversation	Archive (moves to ~/.cache/llm-lens/archive/, reversible)
Remove messages	Extract to new convo (leaves original intact)
Edit a message	Scrub text, keeping usage and chain
Try a risky edit	Duplicate first, edit the copy

Destructive actions (delete-convo, delete-message, in-place normalize/scrub) rewrite files on disk. Claude Code's /resume replay semantics aren't publicly documented, so any in-place edit is best-effort — the tool re-links parentUuid chains and strips orphan tool_use/tool_result blocks to stay resume-safe, but we can't guarantee it against invariants we can't see. If resume-ability of a specific conversation matters to you, duplicate before editing.

Deleting a whole conversation or project is low-risk — that's just file removal, no chain-surgery.

What it shows

Three views, each paginated + sortable + searchable:

• Projects — one entry per ~/.claude/projects/* subdirectory. Convo count, total size, preview, aggregate stats.
• Conversations — all .jsonl sessions in a project. Toggle active/archived. Card view shows inline stats. Delete/archive/duplicate per-row.
• Messages — chat view. Tool calls and results render as inline badges; Bash badges expand to show the actual command with sensitive-string masking. Thinking blocks collapsed by default. Toggle to render whitespace (· for spaces, → for tabs) when you care about exact text. Edit mode surfaces per-message Copy / Scrub (split-button with transform variants: scrub / normalize whitespace / remove swears / remove filler) / Delete, plus a bulk action bar with select-all when messages are selected.

Overview chart on Projects and Conversations views: activity over day/week/month buckets, with modes for message count, tokens, or USD cost. Aggregate totals and cost estimates for the selected window.

Install + run

Requirements: Python 3.8+, a browser, Claude Code installed at least once (so ~/.claude/projects/ exists).

pipx install llm-lens-web     # or: uv tool install llm-lens-web
llm-lens-web                  # opens http://localhost:5111

Custom port: llm-lens-web 8080. The server binds 0.0.0.0 — reachable on your LAN. There's no auth, so don't run it on an untrusted network.

Upgrade / uninstall: pipx upgrade llm-lens-web / pipx uninstall llm-lens-web (substitute uv tool if that's what you used).

---

For developers

Layout

pyproject.toml          Package metadata
llm_lens/
  __init__.py           Flask backend: REST API, static serving, main()
  peek_cache.py         Persistent sidecar cache (token stats, titles, tombstones)
  static/
    index.html          SPA shell
    css/styles.css      All styles; dark/light via CSS vars
    js/
      main.js           Routing + delegated click handler
      state.js          Shared state + localStorage
      api.js            Fetch wrappers
      router.js         Hash router
      toolbar.js        Toolbar helper
      modal.js          Confirm dialogs
      utils.js          Formatting + PRICING table
      views/
        projects.js
        conversations.js
        messages.js

No build step. Plain ES modules.

Running locally

git clone <repo>
cd llm-cli-session-web
pip install -e .
LLM_LENS_DEBUG=1 llm-lens-web

-e + LLM_LENS_DEBUG=1 gives edit-reload.

Design notes

• Data source. CLAUDE_PROJECTS_DIR = ~/.claude/projects/ is hardcoded. Each subdirectory is a project; each .jsonl is a conversation. Main provider coupling.
• Sidecar cache. ~/.cache/llm-lens/sessions.json, keyed on (filepath, mtime, size) so entries auto-invalidate. Debounced atomic writes; in-process @lru_cache in front for hot reads.
• Tombstones. Deleted conversations leave a deleted_delta entry preserving final stats so project/overview rollups stay honest. Path-reuse handled by keying on (pre-delete mtime, size).
• Archive. rename to ~/.cache/llm-lens/archive/<folder>/, mtime preserved so time-bucketed stats don't shift.
• Duplicate. New file UUID and rewritten sessionId/uuid/parentUuid inside so /resume doesn't collide with the parent. Sidecar <new-id>.dup.json records the shared-prefix stats so aggregation subtracts them while the parent still exists.
• Word lists. User-curated at ~/.cache/llm-lens/word_lists.json ({swears, filler}). Empty list = opt-out (not "fall back to defaults"). Defaults shipped in code and exposed via GET /api/word-lists/defaults.
• Bash command extraction. _extract_command_name(cmd) parses each Bash tool_use's input.command, strips wrappers (sudo, env VAR=…, bash -c '…' recurses into the inner script) and pipeline tail, returns the first real command. Aggregated per-conversation as stats.commands: {name: count}. Tool-use markers in parsed messages are now [Tool: Bash:<tool_use_id>] so the frontend can correlate a badge with the command attached to the message via the commands: [{id, command}] field.
• Secret masking. Frontend-only. SECRET_PATTERNS in views/messages.js matches well-known credential shapes (Anthropic/OpenAI/GitHub/Slack/AWS/Google keys, Bearer …, *_KEY=/*_SECRET=/*_PASSWORD= env-style, URL-embedded passwords). Matches render as [sensitive] chips with the original in data-secret; revealSecret(el) swaps the chip for the raw text on click. Conservative — high-entropy strings without a known prefix won't match.
• Mutations. Plain filesystem ops: unlink, rename, shutil.copy2, line-filtered rewrites. No database.

API

Method	Path	Description
GET	/api/overview	Activity buckets (range, mode, group_by, offset)
GET	/api/projects	All projects + metadata
POST	/api/projects/stats	Aggregate token stats across projects
GET	/api/projects/:folder/conversations	Paginated conversations
GET	/api/projects/:folder/archived	Archived conversations
POST	/api/projects/:folder/stats	Aggregate stats for a project
POST	/api/projects/:folder/names	Bulk custom-title fetch
POST	/api/projects/:folder/refresh-cache	Re-scan + flush sidecar
GET	/api/projects/:folder/conversations/:id	Paginated messages
GET	/api/projects/:folder/conversations/:id/stats	Stats for one conversation
DELETE	/api/projects/:folder/conversations/:id	Delete (stats tombstoned)
POST	/api/projects/:folder/conversations/:id/archive	Archive
POST	/api/projects/:folder/conversations/:id/unarchive	Unarchive
POST	/api/projects/:folder/conversations/:id/duplicate	Duplicate (rewrites IDs, writes sidecar)
DELETE	/api/projects/:folder/conversations/:id/messages/:uuid	Delete one message
POST	/api/projects/:folder/conversations/:id/messages/:uuid/scrub	Transform one message. Body: {kind: "scrub"|"normalize_whitespace"|"remove_swears"|"remove_filler"}
POST	/api/projects/:folder/conversations/:id/extract	New convo from selected UUIDs
POST	/api/projects/:folder/conversations/bulk-delete	Bulk delete
POST	/api/projects/:folder/conversations/bulk-archive	Bulk archive
POST	/api/projects/:folder/conversations/bulk-unarchive	Bulk unarchive
DELETE	/api/projects/:folder	Delete an entire project
GET	/api/word-lists	Effective swears + filler lists
POST	/api/word-lists	Persist user-curated lists
GET	/api/word-lists/defaults	Shipped defaults

All mutations invalidate the sidecar cache for affected files and return {"ok": true} on success.

Adding features

• New backend endpoint: add a route in __init__.py following the pattern (route → fs op → cache invalidation → JSON).
• New frontend action: register in the actions map in main.js, implement in the relevant view, tag the HTML element with data-action="...".

---

Extending to other providers

Claude-specific surface is small:

• CLAUDE_PROJECTS_DIR — discovery path
• _peek_jsonl_cached / _parse_messages_cached — JSONL shape (message.role, content blocks, isSidechain, isMeta, file-history-snapshot, uuid, cwd, timestamp)
• Mutation endpoints — line-level JSONL ops

When adding a second provider:

1. Define a Provider protocol with discover_projects(), list_conversations(), read_messages(), delete_conversation(), etc.
2. Move current logic to llm_lens/providers/claude_code.py behind it.
3. Add the new provider as a sibling module.
4. Add :provider to API routes and a provider selector to the frontend.
5. Declare per-provider deps as [project.optional-dependencies] extras.

Don't pre-build the abstraction before there's a second implementation — extract from two working ones, not from guesses.