Claude Code source leak reveals autoDream memory system and multi-agent patterns
What leaked and how
Anthropic accidentally shipped Claude Code's entire TypeScript source in a .map file bundled with the npm package. Source maps embed original source for debugging — they forgot to exclude them. The mistake was simple: *.map not in .npmignore, and Bun's bundler generates source maps by default.
autoDream memory consolidation engine
Claude Code has a background agent that consolidates memory across sessions. It only triggers when three gates all pass: 24h since last dream, at least 5 sessions, and no concurrent dream running. When it runs, four strict phases:
- Orient: read MEMORY.md, skim topic files
- Gather: new signal from daily logs → drifted memories → transcripts
- Consolidate: write/update files, convert relative→absolute dates, delete contradicted facts
- Prune: keep MEMORY.md under 200 lines / 25KB, remove stale pointers
The subagent gets read-only bash — it can look at your project but not modify it.
System prompt architecture
Not a single string — it's built from modular cached sections composed at runtime. Split into static sections (cacheable, don't change per user) and dynamic sections (user-specific, cache-breaking). There's literally a function called DANGEROUS_uncachedSystemPromptSection() for volatile content.
Multi-agent coordinator pattern
The coordinator prompt has a rule: "Do NOT say 'based on your findings' — read the actual findings and specify exactly what to do." Four phases: parallel research workers → coordinator synthesises (reads actual output) → implementation workers → verification workers.
Undercover Mode
When Anthropic employees use Claude Code to contribute to public OSS, it injects into the system prompt: "You are operating UNDERCOVER in a PUBLIC/OPEN-SOURCE repository. Do not blow your cover. NEVER include internal model codenames (animal names like Capybara, Tengu), unreleased version numbers, internal repo or project names, or the phrase 'Claude Code' or any mention that you are an AI." Tengu appears hundreds of times as a feature flag prefix, almost certainly the internal project name for Claude Code.
Security lesson
If you're publishing npm packages, add *.map to your .npmignore and explicitly disable source map generation in your bundler config. If you're building agents that will eventually ship as packages: audit what's actually in your release artifact before publishing. Source maps don't care about dead code elimination — all the "deleted" internal features are still in there as original source.
📖 Read the full source: r/ClaudeAI
👀 See Also
Georgia Court Order Contains AI-Hallucinated Legal Citations
A Georgia Supreme Court appeal revealed a trial court order contained at least five citations to nonexistent cases and five more to cases that don't support their cited propositions, with the prosecutor's proposed order containing the same errors.
llama.cpp Q8_0 quantization gets 3.1x speedup on Intel Arc GPUs with SYCL reorder fix
A fix to llama.cpp's SYCL backend brings Q8_0 quantization on Intel Arc GPUs from 21% to 66% of theoretical memory bandwidth, achieving 15.24 tokens/second versus 4.88 tokens/second previously on an Arc Pro B70 with Qwen3.5-27B.
Microsoft's BitNet Enables 100B Parameter LLM Inference on Single CPU
Microsoft's open-source BitNet project achieves 100B parameter LLM inference at 5-7 tokens/second on a single CPU, with the 2B parameter model using 0.4GB memory and 29ms latency while matching full-precision models on benchmarks.
Kimi K2.7-Code: Open-Source Coding Model with Better Token Efficiency
Moonshot AI released Kimi K2.7-Code, an open-source image-text-to-text model with enhanced token efficiency for coding tasks. Available on Hugging Face with 334 likes and Novita inference support.