← all entries
B-TIER news

Cursor 'Grok Bot' source-map leak — readable agent runtime rewired to any model

stridejosh.ai · 2026-08-25T19:51:31.000Z · in AI Saves, Vol. 8
Open post ↗

100k ft — What is this?

Cursor 'Grok Bot' source-map leak — readable agent runtime rewired to any model
newsB-tier

50k ft — Why care?

Claims Cursor shipped its $200-300/month agent with source maps enabled, exposing the TypeScript coordinator, execution daemons and protocol; the community restored it (minus front end) and rewired it to run Claude Code, Codex or OpenRouter models. Compares it to Claude Code's March source-map leak and DMCA takedowns. Archive gated behind a comment.
UI/UXagentsarchivesnewssecuritysoftware development

10k ft — Key takeaways

• Leaked runtimes reveal how commercial agent harnesses coordinate tasks. • Legal risk: DMCA takedowns follow quickly. • Strip source maps from production builds.

5k ft — Tools & techniques

Claude, Claude Code, Codex, Cursor, OpenRouter, TypeScript AI agents, agent orchestration, code generation

1k ft — Deep-dive / try it

Comment MAPS and I’ll send you the full archive before it disappears. Cursor accidentally leaked Grok Bot, their $200-$300/month AI agent. They shipped it to production with the source maps still on, so the entire runtime is now free to read. Same mistake Claude Code made in March. That one ended in DMCA takedowns within a day, which is why this repo already has more forks than stars. Even the developer behind it says it gets archived soon, “if not taken down.” I saved everything first. Would you read a competitor’s leaked code? Yes or no? #ai #aiagents #claudecode #cursor #coding
Transcript excerpt
Cursor just accidentally leaked Grog bought their own $200 to $300 a month AI agent. It's now free to read. They shipped it to production with source maps still on. So the whole runtime is now readable TypeScript, the coordinator, the execution daemons, the protocol, and it's already been rewired to run any model. Cloud code, codex, open router. That's what readable source unlocks. Now it got retooled online as full source code restored. Not quite. The front end source was never recovered. It just borrows Cursor's own packaged UI to run. And we've seen this movie before when cloud code shipped the same mistake in March, half a million lines of code. Then the DMCA came, which is why this has more forks than stars, 2800 copies. Even the developer says this repo gets archived soon quote, if not taken down comment maps, and I'll send you an entire guide with the repo and everything archived before this gets taken down and fall for more AI.

Collection: AI Saves, Vol. 8