How to Enable Hidden Features
The Four Layers of Defense
Section titled “The Four Layers of Defense”Based on our source code analysis, hidden features are protected by four layers of gating:
| Layer | Mechanism | Bypassable? |
|---|---|---|
| Build-time | USER_TYPE === 'ant' + feature() flags — code is physically stripped from public builds via dead-code elimination | Requires rebuilding from source |
| Runtime | GrowthBook tengu_* flags — server-side checks against Anthropic’s servers | Requires local override (CLAUDE_INTERNAL_FC_OVERRIDES) |
| Auth | Anthropic OAuth tokens tied to employee accounts | Not bypassable |
| Infrastructure | CCR, remote triggers, push notifications depend on Anthropic’s internal backend | Not bypassable |
Environment Variables Worth Noting
Section titled “Environment Variables Worth Noting”Some features are partially gated by environment variables:
CLAUDE_CODE_COORDINATOR_MODE=1 # Coordinator modeCLAUDE_CODE_EXPERIMENTAL_AGENT_TEAMS=1 # Agent teams (+ --agent-teams flag)CLAUDE_CODE_PROACTIVE=1 # Proactive modeCLAUDE_INTERNAL_FC_OVERRIDES='{...}' # GrowthBook flag overrides (JSON)Quick Feasibility Assessment
Section titled “Quick Feasibility Assessment”| Feature | Feasibility | Reason |
|---|---|---|
| Coordinator Mode | Speculative — may partially work | Most self-contained; env var + source rebuild |
| Agent Teams | Speculative — may partially work | Env var + CLI flag + source rebuild |
| Auto Permission Mode | Speculative — may partially work | Client-side classifier |
| Kairos (local tasks) | Speculative — partial | Local daemon works, but no push/webhooks |
| Voice Mode | Unlikely | May depend on server-side audio pipeline |
| CCR / Remote Triggers | Not possible | Requires Anthropic’s backend infrastructure |
| Bridge / SSH Remote | Not possible | Requires Anthropic’s remote backend |
Speculative Approach: Building from Source
Section titled “Speculative Approach: Building from Source”Based on the source code structure, a theoretical approach might look like:
# 1. Clone the sourcegit clone https://github.com/instructkr/claude-codecd claude-code
# 2. Install Bun (the runtime/bundler used by Claude Code)curl -fsSL https://bun.sh/install | bash
# 3. Install dependenciesbun installThe key file to look for is the build configuration — likely a build.ts, bundle.ts, or a section in package.json scripts. Somewhere in the build pipeline, there should be --define flags like:
// Hypothetical build config (speculative)Bun.build({ define: { 'process.env.USER_TYPE': JSON.stringify('ant'), // Change 'external' to 'ant' // feature() flags are likely defined here too },})You would need to:
- Find the build entry point that sets
USER_TYPEand thefeature()defines - Change
USER_TYPEfrom its default (likely'external') to'ant' - Enable specific feature flags:
COORDINATOR_MODE: true,KAIROS: true, etc. - Rebuild with
bun buildor whatever the project’s build script is - Replace your installed Claude Code binary with the custom build
The GrowthBook Problem
Section titled “The GrowthBook Problem”Even with a custom build, runtime tengu_* flags query Anthropic’s GrowthBook server. The override env var might help:
# Override specific GrowthBook flags locallyexport CLAUDE_INTERNAL_FC_OVERRIDES='{ "tengu_amber_flint": true, "tengu_kairos_cron": true, "tengu_onyx_plover": { "enabled": true, "minHours": 24, "minSessions": 5 }, "tengu_scratch": true, "tengu_auto_mode_config": { "enabled": "enabled" }}'But this only works if:
- The
CLAUDE_INTERNAL_FC_OVERRIDEScode path exists in your build (it’s behindUSER_TYPE === 'ant') - The feature code itself wasn’t tree-shaken away
The Most Promising Targets
Section titled “The Most Promising Targets”If we had to guess which features are most likely to work with a source rebuild:
- Coordinator Mode — self-contained, env var activated, no backend dependency
- Agent Teams — env var + CLI flag, uses local tmux/iTerm
- Auto Dream — local file-based, forked subagent runs locally
- Auto Permission Mode — client-side classifier, no server dependency
- Scratchpad — just a directory with permission bypass, trivial
What Definitely Won’t Work
Section titled “What Definitely Won’t Work”No amount of source hacking can replicate:
- CCR cloud environments — Anthropic’s private cloud infrastructure
- Remote triggers API (
/v1/code/triggers) — Anthropic’s backend - Push notifications — Anthropic’s notification service
- Bridge remote sessions — Anthropic’s environments API
- Features behind API beta headers — server-side rejection
To Be Continued…
Section titled “To Be Continued…”We’re continuing to explore the build system and will update this page with verified steps if we find a reliable approach. In the meantime, the real value is in understanding how these features are designed — these architectural patterns (coordinator/worker, cache-safe forking, background memory consolidation, intelligent permission classification) can inspire your own AI tooling.