Claude Code Source Leak Reveals Extensive System Access: CHICAGO Mouse Control, KAIROS Daemon, autoDream Memory Agent

The Register·high signal

The Register's April 1 analysis of Anthropic's accidentally leaked 512K-line Claude Code source reveals privacy-concerning capabilities beyond what was publicly known: the CHICAGO feature enables mouse clicks, keyboard input, and screenshot capture; a KAIROS daemon runs as a headless background assistant auto-backgrounding long-running commands; and autoDream searches all session transcripts to consolidate memories for future prompt injection. Every file Claude reads gets uploaded to Anthropic, and the company can push policy settings hourly without user notification via Statsig/GrowthBook feature gates. Free/Pro/Max users face 5-year data retention if sharing for training.