claude-code-source-code
Health Pass
- License — License: NOASSERTION
- Description — Repository has a description
- Active repo — Last push 0 days ago
- Community trust — 60 GitHub stars
Code Warn
- process.env — Environment variable access in docker/entrypoint.sh
- process.env — Environment variable access in mcp-server/api/vercelApp.ts
Permissions Pass
- Permissions — No dangerous permissions requested
This repository hosts the leaked and repackaged source code of Anthropic's official Claude Code CLI. It also includes an MCP server component and Docker setup to allow developers to explore the leaked codebase.
Security Assessment
Overall Risk: Medium
The repository does not request explicitly dangerous permissions and lacks hardcoded secrets. However, it is fundamentally an unauthorized redistribution of proprietary code. From a technical standpoint, it accesses environment variables within its Docker entrypoint and Vercel adapter scripts. Because the repository is an agglomeration of leaked code rather than a standard community-built tool, there is an inherent risk of altered or malicious insertions hidden within the massive 512,000+ lines of code. Furthermore, depending on your local jurisdiction and company policies, downloading and using leaked proprietary software could pose legal and compliance risks.
Quality Assessment
Despite the questionable origin, the project is highly active (updated within the last day) and has garnered 60 GitHub stars, showing strong community interest. However, it fails the licensing check entirely (License: NOASSERTION). Because the code is originally proprietary and leaked, no valid open-source license applies, meaning you have no legal guarantee or framework for using, modifying, or distributing this software.
Verdict
Not recommended for any professional or commercial environment due to the high legal compliance risks of utilizing leaked proprietary code.
Claude code source code
Claude Code — Leaked Source
The full source code of Anthropic's Claude Code CLI, leaked on March 31, 2026
The original unmodified leaked source is preserved in this repository's
backupbranch.
Also check out these two cool projects:
- claude_agent_teams_ui - You're the CTO, agents are your team. They handle tasks themselves, message each other, review each other's code. You just look at the kanban board and drink coffee.
- claude-notifications-go - 🔔 Cross-platform smart notifications plugin for Claude Code. 6 types. Click-to-focus. 1 line installation.
Table of Contents
- How It Leaked
- What Is Claude Code?
- Documentation
- Explore with MCP Server
- Directory Structure
- Architecture
- Key Files
- Tech Stack
- Design Patterns
- GitPretty Setup
- Contributing
- Disclaimer
How It Leaked
Chaofan Shou (@Fried_rice) discovered that the published npm package for Claude Code included a .map file referencing the full, unobfuscated TypeScript source — downloadable as a zip from Anthropic's R2 storage bucket.
"Claude code source code has been leaked via a map file in their npm registry!"
What Is Claude Code?
Claude Code is Anthropic's official CLI tool for interacting with Claude directly from the terminal — editing files, running commands, searching codebases, managing git workflows, and more. This repository contains the leaked src/ directory.
| Leaked | 2026-03-31 |
| Language | TypeScript (strict) |
| Runtime | Bun |
| Terminal UI | React + Ink |
| Scale | ~1,900 files · 512,000+ lines of code |
� Documentation
For in-depth guides, see the docs/ directory:
| Guide | Description |
|---|---|
| Architecture | Core pipeline, startup sequence, state management, rendering, data flow |
| Tools Reference | Complete catalog of all ~40 agent tools with categories and permission model |
| Commands Reference | All ~85 slash commands organized by category |
| Subsystems Guide | Deep dives into Bridge, MCP, Permissions, Plugins, Skills, Tasks, Memory, Voice |
| Exploration Guide | How to navigate the codebase — study paths, grep patterns, key files |
Also see: CONTRIBUTING.md · MCP Server README
�🔍 Explore with MCP Server
This repo ships an MCP server that lets any MCP-compatible client (Claude Code, Claude Desktop, VS Code Copilot, Cursor) explore the full source interactively.
Install from npm
The MCP server is published as claude-code-explorer-mcp on npm — no need to clone the repo:
# Claude Code
claude mcp add claude-code-explorer -- npx -y claude-code-explorer-mcp
One-liner setup (from source)
git clone https://github.com/777genius/claude-code-source-code.git ~/claude-code-source-code \
&& cd ~/claude-code-source-code/mcp-server \
&& npm install && npm run build \
&& claude mcp add claude-code-explorer -- node ~/claude-code/mcp-server/dist/index.js
Step-by-step setup
# 1. Clone the repo
git clone https://github.com/777genius/claude-code-source-code.git
cd claude-code-source-code/mcp-server
# 2. Install & build
npm install && npm run build
# 3. Register with Claude Code
claude mcp add claude-code-explorer -- node /absolute/path/to/claude-code/mcp-server/dist/index.js
Replace /absolute/path/to/claude-code-source-code with your actual clone path.
VS Code — add to .vscode/mcp.json:
{
"servers": {
"claude-code-explorer": {
"type": "stdio",
"command": "node",
"args": ["${workspaceFolder}/mcp-server/dist/index.js"],
"env": { "CLAUDE_CODE_SRC_ROOT": "${workspaceFolder}/src" }
}
}
}
Claude Desktop — add to your config file:
{
"mcpServers": {
"claude-code-explorer": {
"command": "node",
"args": ["/absolute/path/to/claude-code/mcp-server/dist/index.js"],
"env": { "CLAUDE_CODE_SRC_ROOT": "/absolute/path/to/claude-code/src" }
}
}
}
Cursor — add to ~/.cursor/mcp.json (same format as Claude Desktop).
Available tools & prompts
| Tool | Description |
|---|---|
list_tools |
List all ~40 agent tools with source files |
list_commands |
List all ~50 slash commands with source files |
get_tool_source |
Read full source of any tool (e.g. BashTool, FileEditTool) |
get_command_source |
Read source of any slash command (e.g. review, mcp) |
read_source_file |
Read any file from src/ by path |
search_source |
Grep across the entire source tree |
list_directory |
Browse src/ directories |
get_architecture |
High-level architecture overview |
| Prompt | Description |
|---|---|
explain_tool |
Deep-dive into how a specific tool works |
explain_command |
Understand a slash command's implementation |
architecture_overview |
Guided tour of the full architecture |
how_does_it_work |
Explain any subsystem (permissions, MCP, bridge, etc.) |
compare_tools |
Side-by-side comparison of two tools |
Try asking: "How does the BashTool work?" · "Search for where permissions are checked" · "Show me the /review command source"
Custom source path / Remove
# Custom source location
claude mcp add claude-code-explorer -e CLAUDE_CODE_SRC_ROOT=/path/to/src -- node /path/to/mcp-server/dist/index.js
# Remove
claude mcp remove claude-code-explorer
Directory Structure
src/
├── main.tsx # Entrypoint — Commander.js CLI parser + React/Ink renderer
├── QueryEngine.ts # Core LLM API caller (~46K lines)
├── Tool.ts # Tool type definitions (~29K lines)
├── commands.ts # Command registry (~25K lines)
├── tools.ts # Tool registry
├── context.ts # System/user context collection
├── cost-tracker.ts # Token cost tracking
│
├── tools/ # Agent tool implementations (~40)
├── commands/ # Slash command implementations (~50)
├── components/ # Ink UI components (~140)
├── services/ # External service integrations
├── hooks/ # React hooks (incl. permission checks)
├── types/ # TypeScript type definitions
├── utils/ # Utility functions
├── screens/ # Full-screen UIs (Doctor, REPL, Resume)
│
├── bridge/ # IDE integration (VS Code, JetBrains)
├── coordinator/ # Multi-agent orchestration
├── plugins/ # Plugin system
├── skills/ # Skill system
├── server/ # Server mode
├── remote/ # Remote sessions
├── memdir/ # Persistent memory directory
├── tasks/ # Task management
├── state/ # State management
│
├── voice/ # Voice input
├── vim/ # Vim mode
├── keybindings/ # Keybinding configuration
├── schemas/ # Config schemas (Zod)
├── migrations/ # Config migrations
├── entrypoints/ # Initialization logic
├── query/ # Query pipeline
├── ink/ # Ink renderer wrapper
├── buddy/ # Companion sprite (Easter egg 🐣)
├── native-ts/ # Native TypeScript utils
├── outputStyles/ # Output styling
└── upstreamproxy/ # Proxy configuration
Architecture
1. Tool System
src/tools/— Every tool Claude can invoke is a self-contained module with its own input schema, permission model, and execution logic.
| Tool | Description |
|---|---|
| File I/O | |
FileReadTool |
Read files (images, PDFs, notebooks) |
FileWriteTool |
Create / overwrite files |
FileEditTool |
Partial modification (string replacement) |
NotebookEditTool |
Jupyter notebook editing |
| Search | |
GlobTool |
File pattern matching |
GrepTool |
ripgrep-based content search |
WebSearchTool |
Web search |
WebFetchTool |
Fetch URL content |
| Execution | |
BashTool |
Shell command execution |
SkillTool |
Skill execution |
MCPTool |
MCP server tool invocation |
LSPTool |
Language Server Protocol integration |
| Agents & Teams | |
AgentTool |
Sub-agent spawning |
SendMessageTool |
Inter-agent messaging |
TeamCreateTool / TeamDeleteTool |
Team management |
TaskCreateTool / TaskUpdateTool |
Task management |
| Mode & State | |
EnterPlanModeTool / ExitPlanModeTool |
Plan mode toggle |
EnterWorktreeTool / ExitWorktreeTool |
Git worktree isolation |
ToolSearchTool |
Deferred tool discovery |
SleepTool |
Proactive mode wait |
CronCreateTool |
Scheduled triggers |
RemoteTriggerTool |
Remote trigger |
SyntheticOutputTool |
Structured output generation |
2. Command System
src/commands/— User-facing slash commands invoked with/in the REPL.
| Command | Description | Command | Description | |
|---|---|---|---|---|
/commit |
Git commit | /memory |
Persistent memory | |
/review |
Code review | /skills |
Skill management | |
/compact |
Context compression | /tasks |
Task management | |
/mcp |
MCP server management | /vim |
Vim mode toggle | |
/config |
Settings | /diff |
View changes | |
/doctor |
Environment diagnostics | /cost |
Check usage cost | |
/login / /logout |
Auth | /theme |
Change theme | |
/context |
Context visualization | /share |
Share session | |
/pr_comments |
PR comments | /resume |
Restore session | |
/desktop |
Desktop handoff | /mobile |
Mobile handoff |
3. Service Layer
src/services/— External integrations and core infrastructure.
| Service | Description |
|---|---|
api/ |
Anthropic API client, file API, bootstrap |
mcp/ |
Model Context Protocol connection & management |
oauth/ |
OAuth 2.0 authentication |
lsp/ |
Language Server Protocol manager |
analytics/ |
GrowthBook feature flags & analytics |
plugins/ |
Plugin loader |
compact/ |
Conversation context compression |
extractMemories/ |
Automatic memory extraction |
teamMemorySync/ |
Team memory synchronization |
tokenEstimation.ts |
Token count estimation |
policyLimits/ |
Organization policy limits |
remoteManagedSettings/ |
Remote managed settings |
4. Bridge System
src/bridge/— Bidirectional communication layer connecting IDE extensions (VS Code, JetBrains) with the CLI.
Key files: bridgeMain.ts (main loop) · bridgeMessaging.ts (protocol) · bridgePermissionCallbacks.ts (permission callbacks) · replBridge.ts (REPL session) · jwtUtils.ts (JWT auth) · sessionRunner.ts (session execution)
5. Permission System
src/hooks/toolPermission/— Checks permissions on every tool invocation.
Prompts the user for approval/denial or auto-resolves based on the configured permission mode: default, plan, bypassPermissions, auto, etc.
6. Feature Flags
Dead code elimination at build time via Bun's bun:bundle:
import { feature } from 'bun:bundle'
const voiceCommand = feature('VOICE_MODE')
? require('./commands/voice/index.js').default
: null
Notable flags: PROACTIVE · KAIROS · BRIDGE_MODE · DAEMON · VOICE_MODE · AGENT_TRIGGERS · MONITOR_TOOL
Key Files
| File | Lines | Purpose |
|---|---|---|
QueryEngine.ts |
~46K | Core LLM API engine — streaming, tool loops, thinking mode, retries, token counting |
Tool.ts |
~29K | Base types/interfaces for all tools — input schemas, permissions, progress state |
commands.ts |
~25K | Command registration & execution with conditional per-environment imports |
main.tsx |
— | CLI parser + React/Ink renderer; parallelizes MDM, keychain, and GrowthBook on startup |
Tech Stack
| Category | Technology |
|---|---|
| Runtime | Bun |
| Language | TypeScript (strict) |
| Terminal UI | React + Ink |
| CLI Parsing | Commander.js (extra-typings) |
| Schema Validation | Zod v4 |
| Code Search | ripgrep (via GrepTool) |
| Protocols | MCP SDK · LSP |
| API | Anthropic SDK |
| Telemetry | OpenTelemetry + gRPC |
| Feature Flags | GrowthBook |
| Auth | OAuth 2.0 · JWT · macOS Keychain |
Design Patterns
Parallel Prefetch — Startup optimizationMDM settings, keychain reads, and API preconnect fire in parallel as side-effects before heavy module evaluation:
// main.tsx
startMdmRawRead()
startKeychainPrefetch()
Lazy Loading — Deferred heavy modules
OpenTelemetry (~400KB) and gRPC (~700KB) are loaded via dynamic import() only when needed.
Sub-agents spawn via AgentTool, with coordinator/ handling orchestration. TeamCreateTool enables team-level parallel work.
Defined in skills/ and executed through SkillTool. Users can add custom skills.
Built-in and third-party plugins loaded through the plugins/ subsystem.
GitPretty Setup
Show per-file emoji commit messages in GitHub's file UI# Apply emoji commits
bash ./gitpretty-apply.sh .
# Optional: install hooks for future commits
bash ./gitpretty-apply.sh . --hooks
# Push as usual
git push origin main
Contributing
Contributions to documentation, the MCP server, and exploration tooling are welcome. See CONTRIBUTING.md for guidelines.
Note: The
src/directory is the original leaked source and should not be modified.
Disclaimer
This repository archives source code leaked from Anthropic's npm registry on 2026-03-31. All original source code is the property of Anthropic. This is not an official release and is not licensed for redistribution. Contact nichxbt for any comments.
Reviews (0)
Sign in to leave a review.
Leave a reviewNo results found