For developers who work for more than one company

One laptop. Many clients.
Nothing mixed.

Each client gets a workspace signed in to their own GitHub, Claude, and API accounts — and your personal projects stay yours. Open a project: the right accounts are already there.

Download for macOS Why it exists

Lead>code — Dashboard

Personas Personal Northwind Acme Co ✓ secrets in Keychain · never in repos

Storefront Redesign running

personal ~/dev/storefront

                ❯
                claude · refactoring checkout
              

claude → Personal

Billing API needs input

northwind ~/work/nw-billing

                ❯
                claude · awaiting migration approval
              

claude → Northwind

Infra Review running

acme co ~/work/acme-infra

                ❯
                claude · reviewing PR #214
              

claude + gh → Acme Co

            Activity
            
              Northwind · Billing API — Rebuild 3 tables in staging?
            
            3 live

Three clients, three separate sets of accounts — all signed in, all running, none mixed.

          Fails closed·Keychain-backed secrets·No ambient credentials·Real CLIs on a PTY·Config home per account·Sessions survive focus·53 tests·No cloud service·
        

              
              Account soup
            
              The ritual
            
              The mistake

//01 The problem

Three employers. One laptop. Nine credentials.

                
                this laptop
              

claude · you@gmailclaude · you@northwindclaude · acme-devgh · you-personalgh · acme-botsk-ant-…a41sk-ant-…nw7sk-ant-…x93sk-ant-…p08sk-ant-…k22gemini · …g3
❯ claude
signed in as… which of the three? no label anywhere.

Every project change is a login ritual.

                
                switching to the bank project…
              

❯ claude /logout
❯ claude /login — pick the right account, again
❯ export ANTHROPIC_API_KEY=sk-ant-…nw7
❯ gh auth switch --user you-northwind
❯ cd ~/work/nw-billing && claude
five minutes gone — focus went with it

Until the wrong account does the work.

                
                one month later
              

✗ side project billed to Northwind — sk-ant-…nw41
✗ personal repo — commits authored as acme-bot
nobody noticed for a month

scroll ↓

          //02The fix
          persona → router → session
        

One workspace per client, wired to their accounts.

              01One persona per client
            

                
                Personal
                accounts/acc_personal/
              
                Northwind
                accounts/acc_northwind/
              
                Acme Co
                accounts/acc_acme/

Sign in once per account. Each gets its own config home — CLAUDE_CONFIG_DIR, GH_CONFIG_DIR — so client work never touches your personal ~/.claude.

              02The router fails closed
            

Ambient credentials scrubbed

ANTHROPIC_API_KEY CLAUDE_CODE_OAUTH_TOKEN GH_TOKEN GITHUB_TOKEN

Declared binding injected

CLAUDE_CONFIG_DIR →
accounts/acc_northwind/claude-code

no binding → no launch. Never a fallback to your shell.

              03Sessions outlive attention
            

                
                Personal · storefront
                pid 4101
              
                Northwind · nw-billing
                pid 4102
              
                Acme Co · acme-infra
                pid 4108

Navigate anywhere — nothing tears down. Questions from every workspace land in one inbox; answer inline, only that session advances.

              //03The terminal
            

The CLI your are already familiar with.

A real PTY running the provider's own claude or codex — identity-injected, ambient-scrubbed, fail-closed. Every feature they ship works on day zero.

slash commands plan mode image paste rewind MCP

              
              claude · Northwind · ~/work/nw-billing
              pid 4102

CLAUDE_CONFIG_DIR=accounts/acc_northwind/claude-code
ANTHROPIC_API_KEY scrubbed · GH_TOKEN scrubbed
❯ claude
Claude Code · signed in as Northwind
⚙ Read src/billing/migrate.ts
⚙ Grep "rebuildTables"
The migration drops and rebuilds 3 tables.
Run it against staging first?
❯ yes, staging only

identity injected by the Provider Router · keystrokes go straight to the PTY

          //04Runtime specification
          v0.9 · beta
        

Small, local, auditable.

Footprint

8 MB binary · 80 MB idle — native WebView, not Electron's ~150 MB

Secrets

macOS Keychain only — never on disk, never in repos, byte-level leak audit built in

Router

Fail-closed — scrubs ambient credentials, injects the declared binding, refuses over guessing

Isolation

Config home per account + scrubbed env — process isolation, not containers; sandbox boundary is next

Sessions

Real CLIs on a PTY — survive focus changes, stay interactive between turns

Providers

Claude Code · OpenAI Codex · GitHub — Antigravity in simulated demo; AWS & gcloud profiles planned

Storage

SQLite on disk, in Application Support — no cloud service, nothing to keep online

Verification

53 tests on the promises — 29 against the runtime, 24 against the real UI

Platform

macOS 13+ · Apple Silicon and Intel — Linux and Windows planned

          //05Pricing
          we never see a token
        

Priced per human, not per token.

Solo

Free

One account per provider. Everything else is the full app.

✓Unlimited workspaces

✓Terminal sessions + Activity Center

Download

The product

Pro

$12/ month

Unlimited accounts per provider — the reason Leadcode exists.

✓Unlimited accounts and personas

✓Parallel sessions across accounts

✓Secret-leak audit

Start free trial

Team

$20/ seat / month

For agencies and contractors who answer to more than one company.

✓Everything in Pro

✓Shared persona + binding templates

Talk to us

Sign in once per client. Then it just works.

Download for macOS

macOS 13+ · setup in about a minute · no account required to try

One laptop. Many clients.Nothing mixed.