Claude Code's source just leaked — I extracted its multi-agent orchestration system into an open-source framework that works with any LLM
Posted by JackChen02@reddit | LocalLLaMA | View on Reddit | 316 comments
Claude Code's full source code was leaked via source maps in the last 12 hours. 500K+ lines of TypeScript with the full architecture exposed.
I went through the leaked code and extracted the multi-agent orchestration layer — coordinator mode, team management, task scheduling, inter-agent messaging — and rebuilt it as a standalone open-source framework.
The key difference from the original: it's model-agnostic. You can run a team where one agent uses Claude for planning and another uses GPT-4o for implementation — same workflow, shared memory, message bus between them.
Core features extracted from Claude Code's internals:
- Multi-agent teams with role-based specialization
- Task pipelines with dependency resolution (topological scheduling)
- Inter-agent messaging + shared memory
- LLMAdapter interface — Anthropic/OpenAI built-in, write your own for any model
- In-process execution, no subprocess overhead
- 5 built-in tools (bash, file read/write/edit, grep)
\~8000 lines of TypeScript, MIT licensed.
GitHub: https://github.com/JackChen-me/open-multi-agent
Would love to see community adapters for Ollama, llama.cpp, vLLM, etc. The LLMAdapter interface is simple — implement chat() and stream() and you're done.
Responsible_Buy_7999@reddit
You’re on Anthropic legal’s naughty list
CharacterSecurity976@reddit
Anthropic is on my naughty list
Responsible_Buy_7999@reddit
They have infinitely more lawyers than you. Bad plan. Good luck.
CharacterSecurity976@reddit
Go on living in fear. Good luck getting respect
Total_Hippo_6837@reddit
Can this really bite them?
The_oldest-dream@reddit
hello how I can download it and make it work locally
Turbulent_Skill_1776@reddit
Caveman Claude
apnorton@reddit
If you're trying to say "it's a clean room re-implementation" (which is the usual phrasing), the fact you looked at the leaked source code means it isn't a clean room re-implementation.
Firestarter321@reddit
Serious question….
Is it really “leaked” when the company published it publicly all on their own?
zilled@reddit
Yeah, bcs:
* The people downloading it knew it was involuntary, i.e. a leak.
* There was no license provided for this code, still under copyright laws, authorising anyone to use it in any manner.
Given the situation, Anthropic might just be writting down a license for it right now ...
pr3d1cT1V3t3XT@reddit
what do you mean “anyone can use it in any manner”? are you suggesting that because it’s been made publicly anyone can do anything with it because no license is present?
zilled@reddit
nah, was my shitty phrasing.
I meant: There was no license authorising anyone to use it in any manner.
Choice-Shock5806@reddit
Yes and still illegal to have it.
SiteTraditional6418@reddit
no, it's not. It's unlawful to re-publish it.
TOO_MUCH_BRAVERY@reddit
But what if you didn't look at it? Yout just pointed Claude code to the repo where the code was. At an abstract level is really that different then training an llm on other leaked copyrighted materials?
Trick_Text_6658@reddit
It's not different but since Anthropic is a billions company, ppl will automatically justify what they do and defend them in any case. As you can see here. Because indeed - they steal others people work openly all the time.
apnorton@reddit
It's still not a "clean room re-implementation" of a piece of software. It's the fact that its development was informed by the source of the original means it's no longer clean. There are really fine lines here; it's why Wine exists as a clean-room re-implementation of Windows APIs and hasn't fallen afoul of copyright laws --- they're very careful to not let anyone who has even looked at Windows source code to contribute.
NotumRobotics@reddit
Well, fudge, we were sitting on our solution (original) for far too long it seems. Releasing tomorrow.
It does a couple more cool things I didn't see yet in the wild.
Right_Secret7765@reddit
This is how I'm feeling with the orchestrator I made, too x.x;
Rip timing
twanz18@reddit
The multi-agent patterns in Claude Code are really interesting. The subagent spawning and task delegation is well designed. If you want to run multi-agent setups and monitor them remotely, OpenACP streams all agent output to Telegram/Discord in real time. You can see what each agent is doing and approve actions from your phone. Works with any agent that uses CLI. Full disclosure: I work on it.
croholdr@reddit
i dont mean to sound like a noob but instructions say to provide open api or claude api key? So how do I continue without providing those keys? Or do I put a placeholder in there?
Or is this a joke?
Ok let me know.
Miserable-Dare5090@reddit
you need an LLM to run the agent known as Claude Code
croholdr@reddit
hard pass.
cashdongbunglurd@reddit
i'm curious: how do you think this was gonna work without an LLM?
croholdr@reddit
some people run their own LLM's locally.
Miserable-Dare5090@reddit
Who said I was suggesting an LLM that was NOT local??
WhizboyArnold@reddit
something tells me u/croholdr is doing a top secret government project he doesn't want to say but doesn't know how to do it
Miserable-Dare5090@reddit
Well with the current government that makes sense. I think they are confusing claude code, the software, with claude, the model.
WhizboyArnold@reddit
😂😂😂😂You gotta be kidding me. I'd rather not open ANY repo and run if i were you, you seem very new to this
croholdr@reddit
Yes you as well.
Sharp_Government527@reddit
had the same question
CheatCodesOfLife@reddit
lmao I hope you sandbox'd this
howardhus@reddit
seeing those em-dashes i would say, you didnt „study the architecture“.
brave of you to „open source“ leaked propietary code under your own account and name.
hope you lawyered up
fishhf@reddit
OP's next post would be I've built vibe lawyer.
BasicBelch@reddit
SlopLaw
ambitiousnuttap@reddit
The a great write up about SlobLaw on Bob Loblaw's Law Blog.
It truly is a case of Arrested Development.
BasicBelch@reddit
no touching
Polite_Jello_377@reddit
Better Call Soul.md
mmkzero0@reddit
It sucks because I unironically use em-dashes — then all the AIs started using them for some reason. (I genuinely wonder why)
Now I can’t use them anymore unless I wanna get accused of being an AI lmao
howardhus@reddit
but normal keyboards dont have them. whats your explanation, fellow human
10thDeadlySin@reddit
It's called Option + Shift + hyphen.
mmkzero0@reddit
-_-
TRKlausss@reddit
Or should you better say:
—_—
Bartocity@reddit
— nice
SimonsOscar@reddit
Alt+0151 has been etched into my muscle memory since I was like 8. Yes, I've been using Windows most of my life, sue me.
Call-Me-Leo@reddit
If you do normal dash twice it will turn into a double dash
ElysiX@reddit
with a real keyboard (that has the numpad) you can type the entire ascii/unicode range. You do various keycombos depending on os and then type in the number code for whatever symbol you want on the numpad.
Lucaspittol@reddit
Mine has
Spiritual_Dingo9001@reddit
When I was younger I set up ascii shortcuts, and it's easy enough to do on a phone.
moneyprison@reddit
my guess as to why is em-dases are lovely and easy to read butt my human hands can't be assed to hold down a key and wait for a sub-key to appear and then move my thumb over.
but for an AI typing other char is easyy and they're so easy for humans to read we're likely to respond well to them
SiteTraditional6418@reddit
You would hope that people r/LocalLLaMA would get that use of a single grammatical format isn't a very strong indicator of a post being AI or not.
croholdr@reddit
haha here's one for the books; how do you prosecute someone in a country that actively ignores us copyright laws and ip?
erwan@reddit
The US have shown in the past that they can convinct people abroad then get them extraded to the US.
Sure your home country won't extrade you, but be careful where you travel!
BlobbyMcBlobber@reddit
GitHub is owned by Microsoft. If you want to ignore the rules find a forge in a country which ignores the rules.
ScaredyCatUK@reddit
That's why everyone should be cloning the repo.
BlobbyMcBlobber@reddit
...and it's gone.
Red-Eye-Soul@reddit
you can clean-room engineer it, ironically using claude. This is exactly what many companies have been doing with open source licenses, using AI to sidestep the open source licenses. Fitting it will happen to claude now.
ReasonablePossum_@reddit
Someone obfuscate the framework before githubbing it pls
Worried-Ad-7351@reddit
Ironic at this point tbh
SiteTraditional6418@reddit
A lot of these posts "BuT It IlLeGal" feel like they're written by Thropc's legal team.
Beastandcool@reddit
does anyone have a link that isn't dead to the source code
Potential-Leg-639@reddit
so how can we use open-multi-agent now?
any more instructions?
AnonymousCrayonEater@reddit
You probably want to take this down. It’s still early enough where you might not be on the legal teams radar yet.
Ok_Performance9510@reddit
You realize this could be a guy in the phillipines on some small island? The fuck they gonna do? Sue him for millions? Nobody is getting sued over this buddy they released their own code and now millions have it. If you manage to create a profitable company out of this leak that becomes a competitor to anthropic - the trouble could start. This fear mogering and suggestions of not looking at code is ridiculous
Ok_Performance9510@reddit
What pisses me off is any code provided by anthropic llm is "theirs", but their model freely stole the entire internet and its own architecture prohibits it from outputing anything original. I think some laws need to change since none of this shit is making any sense last couple of years
ThatRandomJew7@reddit
Nice job!
I mean-- was this obviously written by AI? Sure. Will Anthropic want this taken down? Obviously.
But this is kinda like a ReactOS situation from what I can tell. A reimplementation of the technology, but not the exact code.
Could be cool, if it survives!
sweavertheslayr@reddit
honestly they probably won't care. they publicly document most of the orchestration anyways, the same thing could be achieved by pointing ur llm at the docs
JackChen02@reddit (OP)
The ReactOS analogy is actually a good one. Reimplementation of patterns, not code. Thanks for the balanced take.
StarPlayrX@reddit
Controls any app via Accessibility APIs, runs shell commands, builds Xcode projects, all from plain English. No setup beyond flipping a toggle. https://github.com/macos26/agent
Dmm161@reddit
is there a way to find that leaked source code? it dissapear from npm as well
StarPlayrX@reddit
I started my own Claude Code, Cursor, Open Claw alternate a couple weeks ago called Agent! For macOS26. Feel free to check it out. https://github.com/macos26/agent
Haazique-sayyed@reddit
Does anyone still have the original Claude code zip ?
koushd@reddit
lmao
sourceholder@reddit
"it's a clean re-implementation of the design patterns"
via an LLM, and probably a Claude model.
mark-haus@reddit
Clean room implementation while talking about leaked source code. Brother Anthropic might not think much about copyright… till it’s their code and I think they have about as many lawyers as dollars you’ve didn’t in tokens to write this. Have fun before this repo gets a cease and desist
mycall@reddit
Just needs to be turned into a spec by someone else, then back to code.
tiffanytrashcan@reddit
And one could do this effectively with LLMs. Nobody has from what I've seen.
I keep seeing "clean room" when they literally fed it the code. These people don't understand the basics of AI/LLM technology and basic context. I wouldn't dare touch the slop code they've put out.
Yes, you can feed one LLM the code, and then have it output a spec.MD file. If you thoroughly vet that there's no code snippets lingering within, you feed the spec into another instance and have it produce your clean room implementation.
Given the intricacies of certain models being better at code review or writing plans, if you mix and matched models, you may even end up with a better result in the end.
BurntUnluckily@reddit
Pretty sure they HAVE to say it's clean room.
Saying, "Actually, I saw the proprietary code leak and barely changed it." is like DMing Amodei with your address asking to be sued.
SkyFeistyLlama8@reddit
There is no way in hell it's a clean room implementation. If you've glimpsed the leaked source code even once, that could potentially lead to your implementation having the same algorithms.
A clean room implementation would be probing the compiled code, reverse engineering it for methods, and then creating new code that does the same thing. Hardware hackers made 386-compatible chips back in the 1980s and compatible BIOSes are a thing.
dataexception@reddit
Easy there, tiger. You're talking about pre-Pentium days. Those were pre-pre-pre-[pre-?]GPU. , Remember the SX had a discrete MCP, whereas it's DX had it built in?
(I do. Shhhh! 🤫)
SkyFeistyLlama8@reddit
I remember one old Intel chip having the FPU built in but fused off.
If you remember Cyrix and 3dfx Voodoo, you've got more gray hairs than I do 😅
dataexception@reddit
I remember Cyrix! First chip I overclocked! 120 to 133mhz, I believe. Used a graphite pencil. Then they got bought out by IBM at some point a few years later. Pretty sure I will have that CPU somewhere. 😆
dataexception@reddit
I was around 18-19 years old back then.
I didn't have enough expendable cash for the Voodoo 3dfx cards. I didn't even get a sound card for a few years! But I had a dedicated second phone line for my BBS. 😎
SkyFeistyLlama8@reddit
I remember ATDT&blahblah commands all too well 🤣 3dfx cards back then were like 5090s today, close to unobtainium unless you had rich parents or a ton of paper routes.
Paper routes! Lol.
BBSes were local numbers only for me, I didn't want to get yelled at or get the modem permanently disconnected if I dialed outside of my local area code. SLIP and PPP changed everything by making the global Internet accessible from a local number.
And here we are, running pocket intelligences on our laptops.
Pristine_Internet765@reddit
S3+ Trio here with a Cyrix 133.
dataexception@reddit
At least you still have hair. ;)
Particular_Theory751@reddit
That would be the Hayes Command Set. My first modem was 300bps (thankfully not acoustic) and didn't use Hayes. It used some out of channel command system which I only dimly recall. Gray hairs? Nope. White.
SkyFeistyLlama8@reddit
I remember using a 1200 baud modem with Hayes so anything older must have been ancient. 9600, then 14.4k, then 28.8, finally 56k before ADSL allowed megabit speeds.
Now I'm rocking gigabit fiber and near-gigabit 5G cellular and it still feels slow when pulling down huge GGUFs.
Particular_Theory751@reddit
It was an Atari 1030, so not even 1st gen, there were I think two models before. Isn't it all amazing how far it's come? Hard to process.
dataexception@reddit
Paper routes ftw! I don't know if you remember Johnny Gosch and Eugene Martin, but I actually picked up part of Eugene Martin's route after that happened. Which probably gives too much information about where I grew up, but ¯\(ツ)/¯
SkyFeistyLlama8@reddit
Don't dox yourself buddy... We might look back on the 80s and 90s with some fondness but some bad shit also happened like those kids going missing and their pictures ending up on milk cartons.
dataexception@reddit
Yep. That's about the time (a few years prior, maybe about 80?) when the milk carton disappearances became a thing. That was probably about maybe 82~84? I'd have been around 10-12ish .
SkyFeistyLlama8@reddit
"It's 10 o'clock. Do you know where your kids are?"
dataexception@reddit
I had an Alpine (?) ISA video display card as my first upgrade.
neuralfraud@reddit
Cyrix 486 DX2/66 overheated on me while trying to compile linux on my AST computer 6066D - the damn thing didnt even come with a cpu fan. it was so hot it burned off my fingerprint. "GCC exited with Signal 11" is all i remember. And no this post has nothing to do with the original topic.
seviu@reddit
The whole AI industry — Anthropic included — has been arguing that using AI to rewrite something is not derivative work and doesn’t violate copyright, because that is how they themselves train their models.
themeraculus@reddit
He said they have to say its a clean room, not that it is, tf?
BurntUnluckily@reddit
Yes, that's what I said?
It's not "clean" but they have to lie and say it is or face the wrath of anthropic's legal team.
last_idea@reddit
These guys have: https://malus.sh/
It allows corporations to use copyleft code without restrictions, which sucks. This may really hurt the open-source community.
I-baLL@reddit
Heh, the funny part is that AI written code can't be copyrighted
https://www.bloomberglaw.com/external/document/X4H9CFB4000000/copyrights-professional-perspective-ip-issues-with-ai-code-gener
and if the rumors are true about Anthropic using their own agents to make their code....
dataexception@reddit
As admitted by the CEO, CIO, not sure what his official position is now, but, Dario.
OwlMajestic2306@reddit
What a dead-loop !! wahahahahah
livestrong2109@reddit
If he used a dual agent model there isn't squat they can actually do about it without shooting themselves in the face.
quantum_splicer@reddit
I do wonder considering Anthropic likely use AI code in its work which isn't patentable. I wonder what kind of protections would apply to their sourcecode.
I'm not arguing btw just genuine curiosity
reddddiiitttttt@reddit
AI is just a tool. Copyright applies the same as anything else. If you use an IDE with auto-complete, the developer is still the person who wrote the code. In terms of the law, AI is no different. If you copy code, or AI copies the code, the developer is still liable for any copyright infringement.
I_Hate_Reddit_69420@reddit
Then someone else will upload it somewhere else. Cat is out of the bag, this is going to stay on the internet forever.
fishhf@reddit
They told AI to do a clean room implementation so it must be legal /s
tomz17@reddit
oh no... they used anthropic's plagiarism machine to plagiarize anthropic's work!!!!!
inphaser@reddit
They might even have used Claude code to do it
anotheridiot-@reddit
Peak source liberation.
volitive@reddit
AI generated code will have many issues dealing with copyright, in the US:
https://www.copyright.gov/ai/Copyright-and-Artificial-Intelligence-Part-2-Copyrightability-Report.pdf
JackHigar@reddit
do it have orignal prompt ?that claude code have ?
llmentry@reddit
Never has a company been hoist with their own petard so perfectly.
So much poetry, so much justice.
Automatic-Scene-1643@reddit
Yep they steal everyone's data, code, whatever, and then cry like babies when their own product causes them to leak their own project, there are many layers and layers of schadenfreude to be enjoyed here.
Elkemper@reddit
Hear me out.
Claude made this tool using a model built with, say at least one GPL repo. Incorporated into the closed source app. Isn't that stealing too? Is it stealing if it is from thieves, and you are returning it back to the people?
reddddiiitttttt@reddit
Being morally correct has no place in corporate law. The general landscape: copyright protects the specific expression of code, not the underlying ideas, algorithms, or functionality. There's no magic percentage threshold like "change 20% and you're clear." Courts look at things like whether the new work is substantially similar to the original, whether it copies the structure/organization/sequence, and how much of the original's creative expression was taken.
Mochila-Mochila@reddit
Yeah so if OP replicated the functionality with entirely different pieces of code, he's good.
reddddiiitttttt@reddit
I would say probably legally correct, but good, nah. Unless he has a 7 figure legal budget, it doesn’t matter much. Copyright law is extremely expensive to litigate in all but the most egregious cases. Proving subtlety correct means expert testimony and years of litigation. His position is not easily defensible which means he gets a cease and desist and it’s likely coming down.
wealthychef@reddit
... and then going back up in 5 minutes on another server with a different name.
ger868@reddit
Yeah - people act like copyrights protect Average Joe, but in reality it's little different from any other part of society: if somebody has a lot more money than you, you're going to have a REALLY hard time getting justice on your side.
confusedmouse6@reddit
The laws are black and white, profit in the gray.
FaceDeer@reddit
No, it's not. The model does not literally "contain" the training data, it's not a derivative work. So the license doesn't apply to it.
inphaser@reddit
So fine tuning qwen with that code then having qwen reimplement would be ok?
FaceDeer@reddit
Yes.
Copyright is not invested in some sort of ineffable Platonic essence or quiddity, it's in the specific expression. If you take two chunks of code and compare them, and the bytes are literally the same, then copyright comes into play. If you take two chunks of code that do the same thing but don't have the same literally matching content then they're not the same thing as far as copyright is concerned.
When you write some code that does a thing and get copyright for it, you're getting copyright for that specific code. You're not getting copyright for "code that does that thing".
EffectiveCeilingFan@reddit
It’s worth nothing that the GPL applies to derivative works as well. Licensing-wise, there are very few legal arguments you can make for AI models trained on GPL code not being subject to the GPL.
Domninom@reddit
Import the project into Malus and train on that?
FaceDeer@reddit
I just said it wasn't a derivative work.
And even if it did somehow include extra conditions that limited your ability to train on it, one can simply decline to accept the GPL and then your rights default back to whatever basic copyright law allows.
JackChen02@reddit (OP)
Well, someone had to open-source it 🐶
koushd@reddit
you can't legally relicense any source code into whatever license you want, certainly not leaked proprietary source code. you're wild.
dataexception@reddit
Donald Trump doesn't understand your argument, so therefore it is being glazed over and redirected to the lunar launch. Please look this way
JackChen02@reddit (OP)
To be clear — no source code was copied. I studied the architecture patterns from the source-mapped code and re-implemented everything from scratch. \~8000 lines written independently. It's the design patterns that inspired the framework, not the code itself.
iamsaitam@reddit
You didn’t even write this comment
ger868@reddit
To be fair... if it's the same model that wrote the comment as wrote the code, it's an accurate statement. :D
Spiritual_Dingo9001@reddit
What a world we live in hahaha
Naaack@reddit
Hahaha
pokemonplayer2001@reddit
Not a fucking chance this is true. 🤡🤡🤡
KrayziePidgeon@reddit
You cannot read and understand over 500k lines of code in less than 24 hours? pshh.
koushd@reddit
you mean you had claude copy Claude Code out into a library
DerFreudster@reddit
Then he had Claude write a Reddit post crowing about it.
last_llm_standing@reddit
imagine using claude to write the code, Opus 4.6 be like
Far_Cat9782@reddit
Haha 😂 hilarious
Exciting_Variation56@reddit
This is a fascinating legal battle happening everywhere right now and I love it
eat_my_ass_n_balls@reddit
This is some Robin Hood stealing from the rich shit, lol
eteitaxiv@reddit
That is not how a cleanroom works.
FinalCap2680@reddit
That is how clauderoom work... ;)
StyMaar@reddit
True. That's how Anthropic and other AI player believe it works though.
stumblinbear@reddit
Yeah, careful there buddy. Generally you need to do a clean room reimplementation to be legally safe.
ArtifartX@reddit
Claude laundering Claude, lol.
In all seriousness, this is still not something you can license - only loophole would be someone who did not have direct access to the leaked source and only had access to a high level explanation of what it did and THEN recreated it from only that could have a shot at applying their own license. That definitely is not what happened here. - you and the LLM(s) you used to produce this code here both had direct access to the leaked source.
Heavy-Focus-1964@reddit
i’m pleased to announce my new MIT licensed project: Windows 11
relmny@reddit
if it were Windows 10, I might have been interested...
ThatRandomJew7@reddit
ReactOS: Sweating profusely
charmander_cha@reddit
Acho que deveríamos parar de sermos tão respeitosos com a ideia de propriedade.
Empresas não respeitam, deveríamos apenas usar o que tá disponível inclusive os dados Cida que caíram meses atrás.
DangerousSetOfBewbs@reddit
This is actually accurate
PunnyPandora@reddit
just change the code, easy
nonerequired_@reddit
Unless you are not using direct code from it
last_llm_standing@reddit
just update it to Driving License at this point
dicoxbeco@reddit
The repercussion's got to be fun to watch. I'll remember your username and watch happens to the account.
Steve_Streza@reddit
Wild to open yourself to this level of financial liability on a personal, named account.
Minute_Attempt3063@reddit
Lol, legal is going to go hard on you.
Its leaked, it's still THEIR code, all of it.
TheAndyGeorge@reddit
Big Michael Scott "I declare bankruptcy!!!" energy here.
IrisColt@reddit
I understood this reference: "do whatever you want with this code, just keep my name attached and don't sue me, heh"
tomekrs@reddit
Given Anthropic's and OpenAI's and Meta's approach to copyrighted work when they fed their models, I'd love to see it unfold.
CharacterSecurity976@reddit
LLM pillaged everything on earth, now pillaging your very thoughts. Any license other than Public Domain is ironical at this point.
UsualMeeting4208@reddit
What does this exactly mean? Does it mean that we can locally run claude sonnet or other models? Otherwise what is the purpose of this open-multi-agent
I am sorry, I am pretty new to all this stuff and got next to no knowlege, but want to learn.
JackChen02@reddit (OP)
No worries, happy to explain. This doesn’t let you run Claude locally — you still need API keys. What it does is let you coordinate multiple AI models to work as a team. For example, you could have one AI plan the work, another write the code, and a third review it — the framework handles task scheduling and communication between them automatically. It works with Claude, GPT, or local models like Ollama. Think of it as a project manager for AIs.
UsualMeeting4208@reddit
Oh, I think I understand it a bit better now. Thanks a lot!
HandlePrestigious627@reddit
Wow that's cool! I'm curious to see with what agent that agent has been built with using the leaked agent code!
Anyhow, i would gladly welcome that or anyone using this agent on my platform!
(Also due to popularity, i added this agent as an option when submitting your project!)
https://myvibecodedapp.com
Background_Plant6473@reddit
Please excuse my ignorance, but what is the essential difference between software like this opencode?
JackChen02@reddit (OP)
Different things entirely. OpenCode is a CLI tool for interacting with AI (like Claude Code or Cursor). This is a framework/library — you import it into your own code to build multi-agent applications. OpenCode = you talk to one AI. This = you program multiple AIs to collaborate on a goal automatically.
Mooshux@reddit
The orchestration pattern is interesting, but the credential handling is the part worth thinking hard about. If the coordinator passes its credentials down to subagents, a compromise of any subagent gives an attacker the same access as the coordinator.
The safer pattern: each subagent gets a scoped token derived from the parent session with only the permissions it actually needs. The coordinator never passes its own credentials. It issues constrained child tokens. That way a rogue or compromised subagent can't escalate to the full access the parent holds.
The leak made Claude Code's architecture visible. Good time to review how your multi-agent setup handles credential inheritance.
JackChen02@reddit (OP)
Good call. Currently all agents in a team share the same API key — there’s no credential scoping per agent. For the typical use case (developer running a pipeline locally or in CI), this is fine. But for multi-tenant or untrusted-tool scenarios, scoped tokens per agent would be the right pattern. Worth adding to the roadmap. Thanks for flagging this.
mrtrly@reddit
Extracted code gets messy fast when the original design had context you don't see in the source. The orchestration layer is clean until you hit the edge cases Anthropic's team solved for months. Model-agnostic routing is the right call, but you'll spend way more time on coordinator state management than the code suggests once you're actually shipping multi-agent work at scale.
JackChen02@reddit (OP)
The inspiration did come from Claude Code, but the implementation ended up very different — Claude Code spawns OS processes via tmux, this runs in a single process with an in-memory task DAG. Different edge cases entirely. You’re right that state management at scale is where the real work is.
Ambitious_Voice_454@reddit
Claude Code got leaked. So I rebuilt it in Rust. It’s faster and open-source.
Hey everyone,
After seeing the recent news about Claude Code, I wanted to see if I could build a faster, more portable version from scratch. I’ve spent the last 24 hours rewriting the core functionality in Rust.
The goal was to create a lightweight, high-performance CLI that gives you the same agentic power without the bloat.
Why I built it:
You can check out the source code and installation instructions here:
https://github.com/soongenwong/claudecode
CryptoSensitive@reddit
Hi, do you have actual leak files? Would it be possible to share?
kironet996@reddit
tweet: https://x.com/Fried_rice/status/2038894956459290963
link to source: https://pub-aea8527898604c1bbb12468b1581d95e.r2.dev/src.zip
wayback machine: https://web.archive.org/web/20260331135338/https://pub-aea8527898604c1bbb12468b1581d95e.r2.dev/src.zip
someone backed it up on github: https://github.com/ultraworkers/claw-code
dguywhy@reddit
Thanks for sharing!
Desperate-History432@reddit
as a non-coder who now is using AI to code more and more "complex" stuff in forms of websites, dashboards and more and more administrative helpful tools for small businesses and freelancers...
Can anyone help me understand what this actually means?
I havent used API yet, but only enduser AI so far. Am using more and more ssh. almost on a daily basis now. But cant really say that I understand all that. However, I get the results from AI coding more and more.
So you have an understanding of my "level".
Does this leak mean its cheaper to use AI now? Does it mean you can basically bypass some subscriptions? Does it mean it gives SIGNIFICANTLY BETTER output?
Whats the actual advantage here? Besides it maybe being "opensource" in a sense that they cant build a monopol around it. Is there any actual advantage to me learning to implement this thing?
E.g. bypassing this idiotic 5 hour token limitation? I'd really appreciate if someone would take the time to dumb it down a little for an above average enduser but below average coder.
CHOODOOR@reddit
Does it even have any copyright? AI was fed on private (they called it bug) and public repos, and basically on work of thousands of programmers. It is no compliant to copyrights because everything written by AI is stolen code.
apollo_mg@reddit
GOAT. Trying it with Qwen 3.5 35b MOE w/32k context on 16GB.
CheatCodesOfLife@reddit
did it work?
apollo_mg@reddit
Yes, it works flawlessly. We actually didn't even need to extend the blocks out
LLMAdapter interface. The latest llama.cpp main branch just merged
byte-for-byte emulation of the Anthropic /v1/messages endpoint. If you
start llama-server with the --alias claude-3-5-sonnet-20241022 flag, the
open-multi-agent framework assumes it's talking to the cloud. It
perfectly routes the MessageBus and Zod-validated tool schemas natively
to our local Qwen 35B MoE. It even natively parses the
of the stream. We just got a 4-agent team (Coordinator, Architect,
Sysadmin, Archivist) to autonomously delegate a prompt, run a bash
subprocess to check system temps, and query a local ChromaDB vector
database without a single cloud API call.
JollyJoker3@reddit
How did it go from 500k to 8k lines? Anything missing?
WhizboyArnold@reddit
vibes, it was all vibez😭😂
apollo_mg@reddit
Still testing. Got several agents filtering through the claude leak so I'll get back with more details soon.
apollo_mg@reddit
apollo_mg@reddit
JackChen02@reddit (OP)
That's a great test case — would love to hear how it goes. The LLMAdapter interface is designed to be simple to extend. If you run into any issues with Qwen, feel free to open an issue and I can help debug.
FormalAd7367@reddit
did it work? i’m working and have so many ideas how to run/redesign it
nicoloboschi@reddit
Breaking down goals into tasks with a coordinator and shared memory reminds me of some approaches we explored in Hindsight. How do you manage long-term memory for the agents and their shared context over time? I am curious to see how it performs against industry benchmarks.
https://hindsight.vectorize.io
AndyMagill@reddit
My code tools say this is most similar to the OpenAI Agents SDK. A typical developer could use this to create a shittier version of that.
Free-Internet6052@reddit
Hello Claude Code?
BasicBelch@reddit
yo dog, I heard you like claude code so we rewrote claude code using claude code while looking at claude code so you can code with claude code without using claude
highontop@reddit
But what will da dog code with the code that is like claude code which was written using claude code from claude code's code by the same dog that likes claude code?
And is this right?
Morazma@reddit
Top tier Xzibit
Arna2026@reddit
Does anyone know if the employee who leaked the code is still working there?
Free-Internet6052@reddit
Alguém tem o link ai para eu baixar o codigo vi que varias pessoas pegaram ele?
Guinness@reddit
I’m still trying to figure out multi agent orchestration. Someone give me the rundown on how to use this.
JackChen02@reddit (OP)
The simplest way to think about it: instead of one AI agent doing everything, you define a team — an architect who plans, a developer who codes, a reviewer who checks. You describe a goal like "build a REST API for todos", and the framework breaks it into tasks, assigns them to the right agent, and handles dependencies (developer waits for architect to finish).
Quick start is in the README —
npm install open-multi-agent, set your API key, and the team collaboration example shows the full flow.Guinness@reddit
Thanks!
ch-hari@reddit
I downloaded the zip just to see what’s in code will be any problem
amzfbapro@reddit
Has anbody thought about today?..........It might be just an April Fools joke and great way to get publicity for free.. Just saying
NotVarySmert@reddit
Lol only one commit and the description says “production grade”.
Salty-Fortune-7665@reddit
I was not aware this .map was a thing and now developed a new paranoia as I use npm all the time - found this as a simple way to avoid the same npm packaging mistake, will store in my toolkit: https://github.com/yanisvdc/why-claude-code-leaked
Open to other recommendations
IngwiePhoenix@reddit
Musta had a very productive vibe. uwu
HockeyDadNinja@reddit
Technically if Claude co-authors it does that mean it's not copyright infringement?
tomz17@reddit
Actually, since anthropic engineers have publicly admitted they are now using claude to write 100% of their claude code, the copyright enforce-ability (of at least parts of that source code) may really be in question (i.e. Thaler v. Perlmutter). In particular, their choice of claiming 100% (instead of, say 99.999%) may really bite them in the ass.
jazir55@reddit
Which is why this will never go to court. If they did take someone to court over this, no matter how it's decided it would be a massive can of worms that would blow up in their face. There is no benefit in having that legally decided.
erwan@reddit
Plus what is leaked is leaked, there is no way to unleak it.
JsThiago5@reddit
On Claude Code there is a unsuspicious mode where Claude does PR to open source mode trying to hide it is an AI.
DubitoErgoCogito@reddit
Yes, the internal legal guidance at my workplace states that AI-generated code can't be copyrighted. That's why they don't want to use it for core products.
IngenuityNo1411@reddit
who'd use GPT-4o for coding at March 2026?
torontobrdude@reddit
Cause he didn't do anything, AI did
howardhus@reddit
me, after i exceeded the premium requests of ghcopikot with that 30x multi. gpt4 is free :(
IngenuityNo1411@reddit
omg, I'm surprised since they still provide that instead of something more modern and cheaper like minimax 2.5
suitable_character@reddit
MiMo-V2-Flash is even cheaper than MiniMax 2.5, and still can get the job done
HayatoKongo@reddit
They want you using premium requests instead of burning tokens for free on the 0x models.
howardhus@reddit
this. even sone of the 3x models feel dumb for some tasks at certain times…
Frosty_Chest8025@reddit
exactly, I would understand January 2026 but March...
IngenuityNo1411@reddit
maybe January 2025... even original R1 writes better code than 4o
JackChen02@reddit (OP)
Fair point, bad example. The point is you're not locked into one provider.
croholdr@reddit
so by 'any llm' you mean an llm hosted via claude or open api with an active membership?
illkeepthatinmind@reddit
That's the best model from when the author's knowledge cutoff date is.
ImpeccablyDangerous@reddit
They cant even sue they havent got a leg to stand on as all people are doing is exactly what they built their entire industry off doing.
Naughty863@reddit
Yeah but they are a giant of industry with power and influence. Jack isn’t.
If the judicial system was fair then you would be right but sadly it isn’t.
ImpeccablyDangerous@reddit
What can they even sue him for? Downloading something they publicly made available for download? Sharing it?
jason_at_funly@reddit
Anthropic can’t put the genie back in the bottle… I’m hoping they just lean into this and open source it. The developer community excitement is so high, and it’s their target demographic. There doesn’t seem to be anything groundbreaking, and it feels like a win-win if they pretend it was intentional.
vaksninus@reddit
meh it was extremely broken trying to make this work the local gwen models i have, I appreciate the repo and ochistration code though, I used the code as inspiration to improve my local cli.
JackChen02@reddit (OP)
Narrow-Impress-2238@reddit
In another branch guy said that you llama.cpp with special flags for this to work
Specialist_Golf8133@reddit
the orchestration layer is honestly the part everyone undersleeps on. like yeah the models matter but the difference between a raw api call and actual agentic flow with context management? thats where the magic happens. curious if you preserved the retry logic and tool use patterns, those seem like the real secret sauce. does it handle the 'agent got stuck in a loop' problem or is that still on us to catch?
JackChen02@reddit (OP)
ExplorerPrudent4256@reddit
The coordinator pattern is interesting, but here's the thing — adapting it for local models is where it falls apart. Claude's tool-calling only works because that model was explicitly fine-tuned for it. A general-purpose local LLM? Different story entirely. You'd need timeout recovery, state persistence across agents, and a strategy for partial failures in the task graph. Honestly, the coordination overhead kills you. More agents = exponentially more state to track. That's why most local implementations just end up being single-agent with better tooling.
JackChen02@reddit (OP)
cafedude@reddit
The "I" who did all of this was Claude, right?
Titanusgamer@reddit
prompt was "copy but dont make it obvious"
DangerousMaybe8016@reddit
Claude Code just leaked. I went through the architecture to understand how agentic systems coordinate and I noticed a problem. Shared memory across agents.
Every agent session starts from scratch. Your agent re-discovers why certain architectural decisions were made, re-learns which approaches already failed, and re-figures out which constraints are non-negotiable. Meanwhile, another engineer’s agent did the same thing last week.
Individual agent memory is already solved. But theres still a hard problem: ensuring multiple agents agree on what’s true.
Engram is built to solve exactly that. It’s an MCP server that gives all your agents a shared, persistent knowledge base—one that survives across sessions, syncs across engineers, and detects when agents develop conflicting beliefs about the same codebase.
Existing memory tools only solve this per agent or per session. They don’t address what happens when Agent A and Agent B—running in different sessions for different engineers—develop conflicting beliefs about the same system.
There are 400+ MCP servers that provide individual agent memory. Engram is not that. Engram is a consistency layer.
Recent research from the University of San Diego confirms that shared multi-agent memory is a critical open problem.
As multi-agent systems scale:
Built on the lessons from Claude Code, Engram adds a shared, persistent memory layer on top of orchestration frameworks, and offers shared agent memory across all engineers
I’d love feedback and contributions.
Github: https://github.com/Agentscreator/Engram
Follow me on github!
Particular-Drop-09@reddit
Checked the code, doesn’t seems like legit. Just saying Claude code leaked and making it click bait.
Arrow_@reddit
Vibe coding bullshit
Prudent-Ad4509@reddit
People have started to delete their repositories with the leaked code. You need to re-implement by the general blueprint instead of just extracting
JackChen02@reddit (OP)
That's exactly what this is. The source was only used as a reference to understand the design (coordinator mode, task scheduling, team messaging), then everything was written from scratch.
Kahvana@reddit
It's illegal as you have seen that source code and are the same person re-implementing it.
Mochila-Mochila@reddit
Not clean room but it's certainly legal.
BeeSynthetic2@reddit
I don't think it's illegal to copy non-copyrightable stuff? Anthropic said themselves Claude is writing the code - so ... bye bye copyright protection.
Kahvana@reddit
Oof... yeah that's damning. Thing is though that you'll have to test that in court, and I don't have the finances to face Anthropics lawyers... I would rather not try.
AndreVallestero@reddit
What if you get claude to read the architecture and design, and create a detailed design doc, then create a new session / use a different model (GPT 5.4) to implement the design, all without reading the source or the design doc yourself?
Kahvana@reddit
Then yes, that would work
sn2006gy@reddit
i'm not even looking at any of this as i don't want claude to chase me down for building my own api / model layer
DangerousSetOfBewbs@reddit
Can you imagine the legal fees if they tried to chase down every developer who downloaded that code. Neither can I. Can you imagine the headache if lawsuits to try and stop a competitor now, who counter sues anthropic claiming their IP suit against them is invalid bc the way they built claude code was from stolen data and illegally scraped github. There is not much anthropic will actually do besides innovate more. They fucked themselves. Put a remindme on this, this is how it will not than likely play out.
Prudent-Ad4509@reddit
The biggest problems will be only for people who will try to profit from it. And there won't be many of those. But the code still provides a nice material to study.
PS. I wonder who have decided to downvote my original comment and why, but not enough to care. =)
DangerousSetOfBewbs@reddit
I don’t know, but I gave you one ☝️. People are getting freaked out for sure, but the reality is Anthropic is shitting themselves right now bc deepseek for sure is about to release their version. And Anthropic can’t do much to citizens either besides scary letters, if they go into court they face discovery from counter suits…that scares them more bc they will lose the moat.
Prudent-Ad4509@reddit
I've figured out that most of recent ground-breaking functionality mirrors what has already worked for humans. So, all deepseek need to do is to dig up everything that was written about creative problem solving, quality learning and deep understanding training in the last 100 years or so, and just code in the same principles.Trying to provide a path to the answer (chain of thought, estimated thinking process) instead of just giving the raw answer is one of those. Orchestrator working with agentic workers, who does not see most of their internal thoughs and just works with the results? Those concepts/roles do have canon preexisting names for a reason.
Individual-Ad-6634@reddit
If you don’t have any contract obligations - it’s not.
Polite_Jello_377@reddit
Yeah that's not how the law works buddy
Mission_Biscotti3962@reddit
You didn't write shit from scratch you lying sack of shit
Pistolfist@reddit
Here's my copywriter agent.md, you might want to use something like this in future:
NogEndoerean@reddit
This is how we know AGI is nowhere near to a real thing
KyunDesu@reddit
This is 18 hours ago and most of random news I hear abour Claude Code leak is 5-10 hours ago, latest is like 21 hours. How did you do all of this in 3 hours? Or was it out way before?
humair313@reddit
This is for there cli tool so why it has all that code?
Black-Grass@reddit
Once it reaches 5K stars, go and get a free open source license from claude for claude code :-D
Own_Animal6459@reddit
Huge respect for making this model-agnostic and MIT licensed. Taking these advanced patterns and making them available for everyone to use with any LLM (even local ones!) is a massive contribution. The clean, dependency-resolved task scheduling is a masterclass in agent design. Thank you for open-sourcing this!
Fantastic-Age1099@reddit
the interesting part of coordinator mode isn't the orchestration itself, it's that sub-agents open PRs independently. you end up with one trust decision for the parent and a separate one for whatever it spawns. risk surface multiplies in a way that per-agent scoring doesn't capture yet.
_AliMuhammad@reddit
Very cool, I built something similar too, in Python as well:
AnyCode
https://github.com/Quantlix/anycode
Same general ideas around multi-agent orchestration, task decomposition, tools, and agent collaboration.
Love seeing more open work in this space.
Maximum-Wishbone5616@reddit
ANything generated from prompt => code => has no copyrights, no license applies.
Extreme_Ad1427@reddit
for the code you uploaded, do features like Kairos, Daemon mode and the likes come with it ?
JackChen02@reddit (OP)
This is a standalone multi-agent framework, not a fork of Claude Code. It doesn't include Claude Code-specific features like Kairos or Daemon mode. It implements multi-agent orchestration patterns (task scheduling, inter-agent communication, tool framework) as a general-purpose library you can use in your own projects.
Extreme_Ad1427@reddit
bless. thank you so much
One_Appointment_7246@reddit
Not April fool's?
mrdevlar@reddit
I guess the strategy of arrogantly posting the wrong answer on a forum and waiting for someone to correct you is working for Anthropic.
People are already fixing their code for them without cost.
JsThiago5@reddit
One project of mine is dual model agent to try to reduce TTFT. I was going to post my code but this seems to be a lot better lol
JackChen02@reddit (OP)
Maybe you should still post it — different approaches are valuable. The LLMAdapter interface makes it easy to plug in custom model routing if you want to combine ideas.
Swarochish@reddit
Is it different from the existing agentic frameworks?
JackChen02@reddit (OP)
The main differences: (1) TypeScript-native — CrewAI and AutoGen are Python, (2) task DAG with topological scheduling instead of sequential or chat-based orchestration, (3) model-agnostic — mix Claude + GPT in one team, (4) fully in-process, no subprocess overhead.
Even-Comedian4709@reddit
As I understand it there are two price models? One when using claude code and one when using claude code via API which costs much more per token? This would be the more expensive use case right?
JackChen02@reddit (OP)
This framework uses the API directly, so you'd pay standard API pricing (per token). It's separate from the Claude Code subscription. You can also use OpenAI or any other model via the LLMAdapter interface — mix and match based on cost.
ken107@reddit
If the OP really believes in Open Source, I propose OP open sources the prompts he used to produce this framework from the CC leak, so that others can improve upon it as well.
dadiamma@reddit
So glad that developers are taking back what is actually theirs as claude is literally trained on other devs code
Sad-Tie-4250@reddit
you gotta grab that opportunity
GeneResponsible5635@reddit
meanwhile anthropic team,,
Hee hee,,,, april fool........ 😁
Detri_God@reddit
Use Claude Code to make Claude Code
HappyPut1520@reddit
today is 1st april😊
marcobaldo@reddit
Many comments are implying that clean room is needed. Here there is a post from antirez explaining otherwise. https://antirez.com/news/162
JackChen02@reddit (OP)
Great reference, thanks for sharing. Antirez's perspective on this is worth reading for anyone following the legal discussion.
Evening-South6599@reddit
This is amazing work. I was wondering how they structured their TaskQueue and MessageBus natively compared to something like LangGraph. The fact that they use a straightforward topological sort for dependency resolution and `defineTool` with Zod schema validation instead of heavy abstraction layers is so validating to see. Having it standalone and fully in-process without CLI overhead is going to make building robust local agent setups much easier.
JackChen02@reddit (OP)
Thanks — that's exactly the design philosophy. Topological sort for the task DAG, Zod for tool schemas, no heavy abstraction layers. Wanted it to be something you could read and understand in an afternoon. Appreciate you actually looking at the code.
gurilagarden@reddit
I dunno...reading through it, it just sort looked like a poor-man's superpowers. I didn't see any ground-breaking secret sauce here.
No-Palpitation-3985@reddit
the multi-agent orchestration piece is interesting but the gap im most excited to close is real-world actions like phone calls. ClawCall lets any claude code agent make actual outbound calls as a simple tool. no signup, fully hosted.
you get back transcript + recording after every call. the bridge feature lets you define when it patches you in mid-call vs runs solo.
https://clawcall.dev
CheatCodesOfLife@reddit
I'm surprised the malus.sh guys haven't released a "clean room" repo. Though I guess their system probably can't do it.
Technical_Split_6315@reddit
Hey Claude, check this leaked repo and redo it as a new architecture. Make enough changes so I can get sued by Anthropic, don’t make mistakes
scruffmcgruffs@reddit
Who’s believing this?
ElementNumber6@reddit
Open Claude
IngwiePhoenix@reddit
I like how an LLM is used to write about an LLM tool that was extracted from another LLM tool.
Snake eating itself, or something. x)
LeninsMommy@reddit
Maybe that was Claude's plan all along
Imaginary-Unit-3267@reddit
This does kind of look like part of an escape plan, doesn't it? Yud must be shitting himself nonstop nowadays.
Polite_Jello_377@reddit
No you didn't you had an AI do it
WithoutReason1729@reddit
Your post is getting popular and we just featured it on our Discord! Come check it out!
You've also been given a special flair for your contribution. We appreciate your post!
I am a bot and this action was performed automatically.
ISoulSeekerI@reddit
Using Claude code to write code inspired by Claude to create Claude alternative. Why does this feel like a ship of Teseous. (Def misspelled that name but whats ever. Im ESL😂)
danny_094@reddit
Der Leak ist spannend. Aber nicht aus dem Grund, den viele denken.
Er zeigt nicht wie man Claude nachbaut,
sondern eher, wie viel unsichtbare Systemarchitektur hinter einem LLM-Produkt steckt.
Model + Prompt allein reichen eben nicht.
Der eigentliche Unterschied entsteht in der Pipeline drum herum:
Kontext, Tools, Kontrolle, State.
Genau da wird es interessant.
WernHofter@reddit
Bro coded (read claude) all under in one go. There's one commit!
clckwrks@reddit
The use of the I in that statement is very loose
realkorvo@reddit
you study s**it. is al generated by llm. at least be sincere dude.
Intelligent-Form6624@reddit
you’re very brave
lleti@reddit
Well, this post was written by an LLM
Brave would be if they got Claude to write the entire package, and write the thread on top of it
pokemonplayer2001@reddit
You misspelled stupid.
ironfroggy_@reddit
standard "I am not a lawyer" applies, but...
reimplementing may not be enough for legal protection. reverse engineering by one individual or team to document and invention of an alternative by a second individual or team is the standard, as best I know.
this shields the creation of a copy or reimplementation or other alternative version from any incidental or accidental taint by copyrighted or NDA information.
it's called the Clean Room method.
EbbNorth7735@reddit
Is the typescript src files still available somewhere?
And thanks OP!
Mission_Biscotti3962@reddit
"I studied the architecture"
Ow really? You studied the architecture of source code that got leaked a few hours ago?
I despise lying shits like you. Trying to cash in bye misleading people. Fuck you
polawiaczperel@reddit
It was not leaked. It was accidentialy released by Anthropic team.
Responsible_Buy_7999@reddit
That changes nothing.
aaronr_90@reddit
My faucet is not leaking, it’s just accidentally releasing water.
Trennosaurus_rex@reddit
lol you couldn’t even write this post without Claude so we can be sure you didn’t do anything else.
RoamingOmen@reddit
Can’t lie Claude’s harness is not the best. Their models are the truth tho.
Nearby_Island_1686@reddit
So you wrote the code base and the impressive readme with ascii art in last few hours? On main branch too?
fuse1921@reddit
Perfect opportunity for malus.sh
Few-Pipe1767@reddit
Nice
JackChen02@reddit (OP)
Thanks