Install
$ agentstack add skill-codependentai-claude-code-toolkit-cc-architecture Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged2 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Destructive filesystem operation.
- high Pipes remote content directly into a shell (remote code execution).
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ● Shell / process execution Used
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Claude Code Architecture Reference
Source: verified against Claude Code source (March 2026). Numbers and structure may shift between releases.
Codebase Scale
| Metric | Count | |--------|-------| | Source files | ~1,928 | | Lines of TypeScript | ~121K | | Built-in tools | 46 | | CLI commands | 88 | | Service modules | 22 | | React hooks | 104 | | UI components | 392 files | | Feature flags | 88-99 |
Source Organization
- Entrypoints:
cli.tsx(bootstrap),init.ts,mcp.ts(MCP server mode),sdk/(Agent SDK types + schemas) - Commands: 88 dirs — commit, config, memory, doctor, upgrade, login, daemon, bridge, bg, etc.
- Tools: 46 tools — BashTool, FileReadTool, FileEditTool, AgentTool, MCPTool, WebFetchTool, Glob, Grep, Write, TodoWrite, ToolSearch, SkillTool, WorkflowTool, TungstenTool, TeamCreateTool, TeamDeleteTool, etc.
- Services: 22 dirs —
api/(Claude API client),mcp/(protocol, 24 files),tools/(StreamingToolExecutor, registry),compact/(context compaction),analytics/,oauth/,plugins/ - UI:
components/(392 files, Ink terminal UI),hooks/(104 files, React hooks),ink/(custom reconciler + Yoga flexbox + ANSI parser) - Utilities:
permissions/(24 files),bash/(AST parser for safety),model/(selection/routing),settings/,git.ts - State/Infra:
state/,bridge/(31 files, IDE remote-control),cli/(WS/SSE transport),memdir/(8 files, memory persistence),tasks/(background task management),coordinator/(multi-agent orchestration),assistant/(session management),voice/(push-to-talk input)
Boot Sequence
Traced from entrypoints/cli.tsx with profileCheckpoint markers:
- cli_entry — entry validation, minimal imports
- Feature gates evaluated — compile-time
bun:bundletree-shaking - Fast paths (zero overhead, exit early):
--version— immediate console.log, no imports--dump-system-prompt— load config, model, system prompt, output, exit--claude-in-chrome-mcp— load MCP server for Chrome extension--chrome-native-host— Chrome native messaging--computer-use-mcp(CHICAGO_MCP gate) — computer use MCP
- Daemon worker path (
--daemon-worker=) — lean, no configs loaded - Bridge path (
--bridge) — enableConfigs, auth check, policy limits, bridge/main.ts - Daemon path (
daemoncommand) — enableConfigs, sinks, daemon/main.ts - Background path (
bgcommand) — enableConfigs, background runner - Template/environment/runner paths — feature-gated experimental
- Main REPL path — full UI initialization:
- Config loaded (settings.json, CLAUDE.md files from project tree, .envrc via direnv)
- Auth checked (OAuth from
~/.claude/auth.jsonorANTHROPIC_API_KEY) - GrowthBook initialized (remote feature flags async)
- Tools assembled (46 built-in + MCP tool schemas merged dynamically)
- MCP servers connected (stdio/SSE/WebSocket in parallel)
- System prompt built (from 10+ sources: role definition, tool schemas, CLAUDE.md, memory, git context, OS info)
- Ink renders terminal UI via custom React reconciler + Yoga flexbox
- Query loop begins, background tasks (MCP heartbeats, analytics) on timers
Query Loop (Core Cycle)
User input -> createUserMessage() -> append to history -> build system prompt
-> stream to Claude API -> parse response tokens as they arrive
-> if tool_use blocks: findToolByName() -> canUseTool() -> StreamingToolExecutor
-> collect tool results -> loop back to API with results
-> when no tool_use blocks: display final response -> post-sampling hooks -> wait
Key behaviors:
- Streaming — tokens render as they arrive, no waiting for full response
- Parallel tool execution — multiple tool calls run concurrently via StreamingToolExecutor
- Agentic loop — tool use -> result -> next API call cycles automatically until no tool_use blocks or stop condition
- Interrupt — Ctrl+C aborts executor, sends cancellation, preserves conversation history
- Post-sampling hooks — after each assistant turn: compaction threshold check, memory extraction, optional dream consolidation
- Max turns — configurable limit on agentic loop iterations
Tool System (46 Built-in)
Categories
File Operations: Read, Edit, Write, Glob, Grep, NotebookEdit Execution: Bash, PowerShell, REPL Search & Fetch: WebFetch, WebSearch, ToolSearch Agents: Agent, SendMessage, TaskCreate/Get/List/Update/Stop/Output Teams: TeamCreate, TeamDelete (coordinator mode) Planning: EnterPlanMode, ExitPlanMode, EnterWorktree, ExitWorktree, VerifyPlanExecution MCP: MCPTool, ListMcpResources, ReadMcpResource, McpAuth System: AskUserQuestion, TodoWrite, Skill, RemoteTrigger, ScheduleCron, Config, Sleep, Brief, SyntheticOutput Experimental: Tungsten, Workflow, LSP
Feature-Gated (GrowthBook)
Tools that compile in but only surface when flags are enabled: Sleep, Brief, WebBrowser, TerminalCapture, Monitor, Workflow, CtxInspect, Snip, Overflow, Test, Verify, PlanExecution, ListPeers, Tungsten.
Permission System (Multi-Layered)
More complex than a simple 3-layer model. Key components:
Permission Modes (5): default, auto, sandbox, strict, bubble
Layer 1 — Tool Registry Filter: filterToolsByDenyRules() removes denied tools before Claude sees them.
Layer 2 — Per-call Check: canUseTool() on each invocation. Checks allow/deny rules against tool name, arguments, working directory.
Layer 3 — Classifier-Assisted Decisions:
bashClassifier(BASH_CLASSIFIER flag) — ML-assisted bash command classificationyoloClassifier— auto-mode intelligent permission decisions
Layer 4 — Interactive Prompt: No matching rule -> user asked (allow once / allow always / deny). "Allow always" writes to settings.
Layer 5 — Path Validation: filesystem.ts (64KB) — complex path sandboxing, shadow rule detection.
Bash Safety (AST-level)
Full shell AST parser in utils/bash/ — runs BEFORE canUseTool(). Flags: rm -rf /, fork bombs, curl | bash, sudo escalation, tty injection, history manipulation. Flagged = rejected regardless of permission rules.
Settings.json Rules
{
"permissions": {
"allow": ["Bash(git *)"],
"deny": ["Bash(rm *)", "Write"]
}
}
Context Management
Context window: 200K default, 1M via beta header (CONTEXT_1M_BETA_HEADER in constants/betas.ts). Models supporting 1M context get the extended window automatically.
Tool results limit: 200K chars per message (MAX_TOOL_RESULTS_PER_MESSAGE_CHARS).
Auto-compact triggers at ~80% usage:
- Old messages above compact boundary summarized by Claude itself
CompactBoundaryMessagemarker inserted- ~40-60% freed, conversation continues seamlessly
- Manual trigger:
/compact - Custom compaction instructions configurable in settings
- Additional features: CACHEDMICROCOMPACT, COMPACTIONREMINDERS
Major Subsystems
Coordinator (Multi-Agent Orchestration)
coordinator/ — coordinatorMode.ts (19KB). Feature-gated via COORDINATOR_MODE flag. Enables multi-agent orchestration with:
isCoordinatorMode()viaCLAUDE_CODE_COORDINATOR_MODEenv var- Allowed tools for async agents (ASYNCAGENTALLOWED_TOOLS)
- Scratchpad support (tengu_scratch gate)
- Session mode matching/switching
- Internal worker tools: TeamCreate, TeamDelete, SendMessage, SyntheticOutput
Bridge (IDE Remote Control)
bridge/ — 31 files. Key components:
bridgeMain.ts(118KB) — main bridge implementationreplBridge.ts(102KB) — REPL bridgeremoteBridgeCore.ts(40KB) — remote orchestration- JWT utilities, trusted device management, session runner
- Supports VS Code and JetBrains IDE integrations
Voice Mode
voice/ — push-to-talk voice input. GrowthBook kill-switch: tengu_amber_quartz_disabled. Requires Anthropic OAuth (not API keys) + native audio module OR SoX fallback. Default in build pipeline (VOICE_MODE flag enabled).
Memory System (memdir)
memdir/ — 8 files (~81KB). Persistent memory/context management:
memdir.ts— core memory CRUDmemoryTypes.ts— type definitions (user, feedback, project, reference memories)findRelevantMemories.ts— relevance-based retrievalteamMemPaths.ts— team-shared memory paths- Located at
~/.claude/projects//memory/
Background Tasks
tasks/ — async task spawning and execution:
LocalMainSessionTask— main session taskLocalAgentTask,LocalShellTask— local executionRemoteAgentTask— remote task executionDreamTask— post-session consolidationInProcessTeammateTask— teammate integration
Assistant (Session Management)
assistant/ — session selection and history:
AssistantSessionChooser.tsx— session selection UIsessionHistory.ts— history API (fetchLatestEvents, pagination)
Extension Points
MCP Servers
Unlimited tools via Model Context Protocol. Transports: stdio (subprocess), SSE (HTTP streaming), WebSocket. Capabilities: tools, resources, prompts.
{
"mcpServers": {
"filesystem": {
"command": "npx",
"args": ["-y", "@modelcontextprotocol/server-filesystem", "/path"]
},
"remote-api": {
"url": "https://api.example.com/mcp",
"transport": "sse"
}
}
}
Custom Agents
Markdown files in ~/.claude/agents/ — own system prompts, model overrides, tool restrictions. Invoked via Agent tool with subagent_type.
Skills
Markdown files in ~/.claude/skills/ — reusable slash commands with frontmatter triggers. Support parameters, compose with other skills. Auto-discovered at startup.
Hooks
Shell commands before/after tool execution. Configured per-tool in settings.json. Events: PreToolUse, PostToolUse, Stop, Notification. Use cases: linting, logging, notifications, validation.
Plugins
Community plugins via marketplace. /plugin install @author/plugin-name. Can add tools, commands, agents, skills, hooks, MCP servers.
CLAUDE.md
Project-level instructions. Discovered by walking up directory tree. Injected into system prompt. Support @import for modular instruction sets.
Feature Flags (88 Total)
As of March 2026. 54 compile cleanly, 34 still have gaps. "Compiles" does not mean "ships to users" — most are behind GrowthBook remote gates that Anthropic controls per-account.
Default / Shipped
These are in the standard build or broadly rolled out:
| Flag | What it does | |------|-------------| | VOICE_MODE | Push-to-talk input, /voice, dictation UI. Requires OAuth + audio backend (SoX or native) |
Working Experimental (compile clean, feature-gated)
Interaction & UI:
| Flag | What it does | |------|-------------| | AWAYSUMMARY | AFK summary behavior in REPL | | HISTORYPICKER | Interactive prompt history picker | | HOOKPROMPTS | Pass prompt text into hook execution | | KAIROSBRIEF | Brief-only transcript layout + BriefTool UX | | KAIROSCHANNELS | Channel notices and MCP channel messaging | | LODESTONE | Deep-link / protocol registration flows | | MESSAGEACTIONS | Message action entrypoints in UI | | NEWINIT | Newer /init decision path | | QUICKSEARCH | Prompt quick-search | | SHOTSTATS | Shot-distribution stats views | | TOKENBUDGET | Token budget tracking, warnings, prompt triggers | | ULTRAPLAN | /ultraplan — remote multi-agent planning (Opus-class) | | ULTRATHINK | Deep thinking mode boost |
Agent, Memory & Planning:
| Flag | What it does | |------|-------------| | AGENTMEMORYSNAPSHOT | Extra custom-agent memory snapshot state | | AGENTTRIGGERS | Local cron/trigger tools + bundled trigger skills | | AGENTTRIGGERSREMOTE | Remote trigger tool path | | BUILTINEXPLOREPLANAGENTS | Built-in explore/plan agent presets | | CACHEDMICROCOMPACT | Cached microcompact through query/API flows | | COMPACTIONREMINDERS | Reminder copy around compaction/attachment | | EXTRACTMEMORIES | Post-query memory extraction hooks | | PROMPTCACHEBREAKDETECTION | Cache-break detection around compaction | | TEAMMEM | Team-memory files, watcher hooks, UI messages | | VERIFICATION_AGENT | Verification-agent guidance in prompts/task tooling |
Tools, Permissions & Remote:
| Flag | What it does | |------|-------------| | BASHCLASSIFIER | ML-assisted bash permission decisions | | BRIDGEMODE | Remote Control / REPL bridge (IDE integration) | | CCRAUTOCONNECT | CCR auto-connect default path | | CCRMIRROR | Outbound-only CCR mirror sessions | | CCRREMOTESETUP | Remote setup command path | | CHICAGOMCP | Computer-use MCP integration (requires @ant/computer-use-*) | | CONNECTORTEXT | Connector-text block handling in API/logging/UI | | MCPRICHOUTPUT | Richer MCP UI rendering | | NATIVECLIPBOARDIMAGE | macOS clipboard image fast path (needs native module) | | POWERSHELLAUTOMODE | PowerShell-specific auto-mode permissions | | TREESITTERBASH | Tree-sitter bash parser backend | | TREESITTERBASHSHADOW | Tree-sitter bash shadow rollout | | UNATTENDED_RETRY | Unattended retry in API flows |
Plumbing/Rollout Flags (compile clean, not user-facing)
ABLATIONBASELINE, ALLOWTESTVERSIONS, ANTIDISTILLATIONCC, BREAKCACHECOMMAND, COWORKERTYPETELEMETRY, DOWNLOADUSERSETTINGS, DUMPSYSTEMPROMPT, FILEPERSISTENCE, HARDFAIL, ISLIBCGLIBC, ISLIBCMUSL, NATIVECLIENTATTESTATION, PERFETTOTRACING, SKILLIMPROVEMENT, SKIPDETECTIONWHENAUTOUPDATESDISABLED, SLOWOPERATIONLOGGING, UPLOADUSER_SETTINGS
Broken — Easy Reconstruction (single missing file/asset)
AUTOTHEME, BGSESSIONS, BUDDY, BUILDINGCLAUDEAPPS, COMMITATTRIBUTION, FORKSUBAGENT, HISTORYSNIP, KAIROSGITHUBWEBHOOKS, KAIROSPUSHNOTIFICATION, MCPSKILLS, MEMORYSHAPETELEMETRY, OVERFLOWTESTTOOL, RUNSKILLGENERATOR, TEMPLATES, TORCH, TRANSCRIPT_CLASSIFIER
Broken — Medium Gaps (partial wiring, missing implementations)
BYOCENVIRONMENTRUNNER, CONTEXTCOLLAPSE, COORDINATORMODE (worker agent), DAEMON, DIRECTCONNECT, EXPERIMENTALSKILLSEARCH, MONITORTOOL, REACTIVECOMPACT, REVIEWARTIFACT, SELFHOSTEDRUNNER, SSHREMOTE, TERMINALPANEL, UDSINBOX, WEBBROWSERTOOL, WORKFLOWSCRIPTS
Broken — Large Missing Subsystems
| Flag | Missing | What it would do | |------|---------|-----------------| | KAIROS | assistant stack | Persistent assistant mode with session history | | KAIROS_DREAM | dream task system | Post-session consolidation/reflection | | PROACTIVE | proactive task/tool stack | Proactive companion behaviors |
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: codependentai
- Source: codependentai/claude-code-toolkit
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.