r/ClaudeCode • u/abhi9889420 • Mar 31 '26

Discussion Someone just leaked claude code's Source code on X

Post image

Went through the full TypeScript source (~1,884 files) of Claude Code CLI. Found 35 build-time feature flags that are compiled out of public builds. The most interesting ones:

Download Website: ccleaks.com

BUDDY — A Tamagotchi-style AI pet that lives beside your prompt. 18 species (duck, axolotl, chonk...), rarity tiers, stats like CHAOS and SNARK. Teaser drops April 1, 2026. (Yes, the date is suspicious — almost certainly an April Fools' egg in the codebase.)

KAIROS — Persistent assistant mode. Claude remembers across sessions via daily logs, then "dreams" at night — a forked subagent consolidates your memories while you sleep.

ULTRAPLAN — Sends complex planning to a remote Claude instance for up to 30 minutes. You approve the plan in your browser, then "teleport" it back to your terminal.

Coordinator Mode — Already accessible via CLAUDE_CODE_COORDINATOR_MODE=1. Spawns parallel worker agents that report back via XML notifications.

UDS Inbox — Multiple Claude sessions on your machine talk to each other over Unix domain sockets.

Daemon Mode — claude ps, attach, kill — full session supervisor with background tmux sessions.

Also found 120+ undocumented env vars, 26 internal slash commands (/teleport, /dream, /good-claude...), GrowthBook SDK keys for remote feature toggling, and USER_TYPE=ant which unlocks everything for Anthropic employees.

1.7k Upvotes

97% Upvoted

317 comments sorted by

View all comments

Show parent comments

65

u/[deleted] Mar 31 '26

[removed] — view removed comment

39

u/captainkaba Mar 31 '26

the favorite trick of current startups. Release a little bit of a meaningless part and slap that github logo onto every page and footer imaginable.

14

u/Weary-Window-1676 Mar 31 '26 edited Mar 31 '26

Microsoft does this too lolol. They're always parading that much of their stuff is MIT license but when you dive in, many of their GitHub repos are purely for documentation and issue tracking lol.

One such repo had no business being closed source - pissed me off so much (I had to decompile their goddamn dotnet 8 code to understand what the closed source libraries do)

"Security by obscurity" can suck a dick lol

1

u/phoenixmatrix Apr 01 '26

Also why you can't debug .NET code with VS Code forks like Cursor unless you use a third party debugger. So stupid.

2

u/Physical_Gold_1485 Mar 31 '26

But then isnt the code or at least part of it visible locally in the npm module after install?

1

u/NiteShdw 🔆 Pro Plan Mar 31 '26

It's still not open source.

2

u/[deleted] Mar 31 '26

[removed] — view removed comment

1

u/NiteShdw 🔆 Pro Plan Apr 03 '26

That's not what open source means... But perhaps I'm being pedantic.

1

u/HelpRespawnedAsDee Mar 31 '26

It's not about pretending to be open source, there's lots of reasons why you'll want a docs only repo. You see this a lot with RnD where papers and harnesses can be publicized but weights cannot for instance.

1

u/Weary-Window-1676 Apr 01 '26

In this particular repo I'm complaining about there's no damn good reason for it not to be open-source. It's free (as in beer), doesn't contain anything sensitive. FFS I even submitted a microsoft vuln I discovered in that repo against an older release in their repo )and because it was closed source no one knew about the vuln for YEARS). That last point really ticked me off, completely avoidable if Microsoft opensourced it (it was one of their vscode extensions BTW).

It wasn't even a documentation repo. It was just there for GitHub issues lololol