@remeic/ccm 0.2.2 → 0.4.0

package/README.md

@@ -13,13 +13,30 @@
   </table>
 </div>
 
+## IMPORTANT: Claude Code ToS (Multi-Terminal Use)
+
+> **Mandatory compliance rule for this project**
+> Do **not** use the **same Claude account** from multiple terminals at the same time.
+> We enforce: **1 account = 1 person = 1 active terminal session**.
+
+- `ccm` isolates profiles. It does **not** grant any extra rights under Anthropic terms.
+- For parallel work, use separate licensed accounts/seats (or API keys under Commercial Terms).
+- No credential sharing, no shared account handoff, no "one account used by multiple people".
+- This is an intentionally strict project rule to remove ambiguity and reduce compliance risk.
+- The CLI also surfaces this via `ccm compliance` (alias: `ccm tos`) and after every successful `ccm create`.
+
+Official basis (as of April 8, 2026):
+- [Claude Code Legal & Compliance](https://code.claude.com/docs/en/legal-and-compliance): usage limits for Pro/Max assume ordinary, individual use; Anthropic may enforce auth restrictions without notice.
+- [Anthropic Consumer Terms](https://www.anthropic.com/legal/consumer-terms): account credentials/API keys must not be shared or made available to others; Anthropic may suspend/terminate for material breach.
+- [Anthropic Commercial Terms](https://www.anthropic.com/legal/commercial-terms): customer is responsible for all activity under its account.
+
 [![CI](https://github.com/remeic/ccm/actions/workflows/ci.yml/badge.svg)](https://github.com/remeic/ccm/actions/workflows/ci.yml)
 [![npm version](https://img.shields.io/npm/v/%40remeic%2Fccm.svg)](https://www.npmjs.com/package/@remeic/ccm)
 [![Homebrew tap](https://img.shields.io/badge/Homebrew-tap-FBB040?logo=homebrew&logoColor=white)](https://github.com/Remeic/homebrew-tap)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 [![Node.js](https://img.shields.io/badge/node-%3E%3D18-brightgreen)](https://nodejs.org)
 [![codecov](https://codecov.io/github/Remeic/ccm/graph/badge.svg?token=E16LCLDHYV)](https://codecov.io/github/Remeic/ccm)
-[![mutation testing](https://img.shields.io/badge/mutation%20testing-100%25-brightgreen)](https://stryker-mutator.io/)
+[![Mutation testing badge](https://img.shields.io/endpoint?style=flat&url=https%3A%2F%2Fbadge-api.stryker-mutator.io%2Fgithub.com%2FRemeic%2Fccm%2Fmain)](https://dashboard.stryker-mutator.io/reports/github.com/Remeic/ccm/main)
 
 Manage separate Claude Code profiles for personal, work, and client accounts without repeated logout/login cycles. `ccm` keeps each profile isolated so switching is immediate and parallel sessions stay clean.
 
@@ -30,11 +47,13 @@ Manage separate Claude Code profiles for personal, work, and client accounts wit
 ## Table of Contents
 
 - [Table of Contents](#table-of-contents)
+- [IMPORTANT: Claude Code ToS (Multi-Terminal Use)](#important-claude-code-tos-multi-terminal-use)
 - [Why](#why)
 - [Prerequisites](#prerequisites)
 - [Install](#install)
 - [Quick Start](#quick-start)
 - [Commands](#commands)
+- [Compliance Notice](#compliance-notice)
 - [Passing Flags and Environment Variables](#passing-flags-and-environment-variables)
 - [Multi-Account Login](#multi-account-login)
   - [Different Browser per Profile](#different-browser-per-profile)
@@ -91,6 +110,11 @@ The installed command remains `ccm`.
 ```
 $ ccm create work
 ✓ Profile "work" created
+! Compliance notice
+  ccm isolates profiles but does not expand Anthropic usage rights.
+  Use each Claude account with one person and one active terminal session.
+  Do not share credentials or API keys across users or parallel operators.
+  Details: ccm compliance
   Next: ccm login work
 
 $ ccm login work
@@ -105,13 +129,32 @@ $ ccm use work
 | Command                                                  | Description                                                   |
 | -------------------------------------------------------- | ------------------------------------------------------------- |
 | `ccm create <name> [-l label] [-b browser]`              | Create a profile. `-b` sets the browser for OAuth             |
+| `ccm compliance` / `ccm tos`                             | Show the compliance notice, disclaimer, and official sources  |
 | `ccm list`                                               | List all profiles with auth status, including drifted entries |
 | `ccm use <name> [-- args]`                               | Launch Claude Code. Args after `--` are passed to Claude      |
 | `ccm login <name> [--console] [-b browser] [--url-only]` | Authenticate a profile                                        |
 | `ccm status [name]`                                      | Show auth status and storage state for one or all profiles    |
+| `ccm rename <old-name> <new-name>`                       | Rename a profile (config, directory, and browser wrapper)      |
 | `ccm remove <name> [-f]`                                 | Remove a profile. `-f` skips confirmation                     |
 | `ccm run <name> -p <prompt>`                             | Run a prompt non-interactively                                |
 
+## Compliance Notice
+
+Every successful `ccm create` prints a short compliance warning. Users can re-open the full text at any time with:
+
+```bash
+ccm compliance
+ccm tos
+```
+
+The notice is intentionally conservative:
+
+- `ccm` is a profile-isolation tool, not a license-expansion tool.
+- This project treats each Claude account as single-user and single-session.
+- Shared credentials, shared operators, and parallel use of the same account are out of scope.
+- If a team needs parallel access, they should use separate seats/accounts or API-key-based access under applicable Anthropic commercial terms.
+- The notice is compliance guidance, not legal advice. Users remain responsible for reviewing Anthropic terms for their exact workflow.
+
 ## Passing Flags and Environment Variables
 
 Everything after `--` in `ccm use` is forwarded to `claude`. Env vars from your shell are inherited.
@@ -198,13 +241,16 @@ src/
 │   ├── profiles.ts          # Profile directory management and validation
 │   ├── profile-store.ts     # Reconciled config/filesystem profile view
 │   ├── claude.ts            # Claude binary discovery, spawning, auth status
+│   ├── compliance.ts        # Centralized compliance notice text and official sources
 │   └── browsers.ts          # Browser wrapper generation and validation
 └── commands/
+    ├── compliance.ts        # Dedicated compliance/TOS command
     ├── create.ts            # Create profile (with rollback on failure)
     ├── list.ts              # List profiles with auth status and drift state
     ├── login.ts             # Authenticate via Claude TUI or --console
     ├── use.ts               # Launch Claude with profile config dir
     ├── status.ts            # Show auth status and drift state
+    ├── rename.ts            # Rename profile with atomic rollback
     ├── remove.ts            # Remove profile with staged rollback
     └── run.ts               # Run prompt with specific profile
 ```

package/dist/index.js

@@ -7,6 +7,68 @@ import { z } from 'zod';
 import { spawn, execFileSync } from 'child_process';
 import { createInterface } from 'readline';
 
+// src/lib/compliance.ts
+var COMPLIANCE_CHECKED_AT = "2026-04-08";
+var COMPLIANCE_SOURCES = [
+  {
+    label: "Claude Code Legal & Compliance",
+    url: "https://code.claude.com/docs/en/legal-and-compliance",
+    summary: "Pro and Max usage limits assume ordinary, individual use. Anthropic may enforce authentication restrictions without notice."
+  },
+  {
+    label: "Anthropic Consumer Terms",
+    url: "https://www.anthropic.com/legal/consumer-terms",
+    summary: "Account login information, API keys, and account credentials must not be shared or made available to anyone else."
+  },
+  {
+    label: "Anthropic Commercial Terms",
+    url: "https://www.anthropic.com/legal/commercial-terms",
+    summary: "Commercial customers are responsible for all activity and fees incurred under their account."
+  }
+];
+function buildRuleLines() {
+  return [
+    "Project compliance boundary:",
+    "- ccm isolates profiles, but it does not grant any extra rights under Anthropic terms.",
+    "- Treat each Claude account as single-user and single-session: 1 account = 1 person = 1 active terminal session.",
+    "- Do not share account credentials or API keys, and do not hand off the same account between multiple operators.",
+    "- For parallel operators, separate seats/accounts or API-key-based access under Commercial Terms are required."
+  ];
+}
+function getCompactComplianceNoticeLines() {
+  return [
+    "\x1B[33m!\x1B[0m Compliance notice",
+    "  ccm isolates profiles but does not expand Anthropic usage rights.",
+    "  Use each Claude account with one person and one active terminal session.",
+    "  Do not share credentials or API keys across users or parallel operators.",
+    "  Details: ccm compliance"
+  ];
+}
+function getFullComplianceNoticeLines() {
+  const sourceLines = COMPLIANCE_SOURCES.flatMap((source) => [
+    `- ${source.label}: ${source.url}`,
+    `  ${source.summary}`
+  ]);
+  return [
+    "Claude Code compliance notice",
+    "This project publishes an intentionally conservative operational rule to reduce misuse and ambiguity.",
+    ...buildRuleLines(),
+    "Important:",
+    "- This notice is compliance guidance for ccm users. It is not legal advice and it does not replace review of Anthropic terms for your specific use case.",
+    "- If you are building a product, automation, or shared workflow around Claude access, verify your model with Anthropic before deployment.",
+    `Official sources reviewed on ${COMPLIANCE_CHECKED_AT}:`,
+    ...sourceLines
+  ];
+}
+
+// src/commands/compliance.ts
+function registerCompliance(program2) {
+  program2.command("compliance").alias("tos").description("Show the Claude Code compliance notice and official source links").action(() => {
+    for (const line of getFullComplianceNoticeLines()) {
+      console.log(line);
+    }
+  });
+}
 var CCM_HOME = join(homedir(), ".ccm");
 var PROFILES_DIR = join(CCM_HOME, "profiles");
 var CONFIG_FILE = join(CCM_HOME, "config.json");
@@ -48,6 +110,14 @@ function getStagedPath(path) {
 function getBrowserWrapperPath(profileName, browsersDir = BROWSERS_DIR) {
   return join(browsersDir, `${profileName}.sh`);
 }
+function renameBrowserWrapper(oldName, newName, browsersDir = BROWSERS_DIR) {
+  const oldPath = getBrowserWrapperPath(oldName, browsersDir);
+  if (!existsSync(oldPath)) {
+    return;
+  }
+  const newPath = getBrowserWrapperPath(newName, browsersDir);
+  renameSync(oldPath, newPath);
+}
 function removeBrowserWrapper(profileName, browsersDir = BROWSERS_DIR) {
   const wrapperPath = getBrowserWrapperPath(profileName, browsersDir);
   if (!existsSync(wrapperPath)) {
@@ -131,6 +201,18 @@ function removeProfile(name, configFile = CONFIG_FILE) {
   delete config.profiles[name];
   saveConfig(config, configFile);
 }
+function renameProfile(oldName, newName, configFile = CONFIG_FILE) {
+  const config = loadConfig(configFile);
+  if (!config.profiles[oldName]) {
+    throw new Error(`Profile "${oldName}" not found`);
+  }
+  if (config.profiles[newName]) {
+    throw new Error(`Profile "${newName}" already exists`);
+  }
+  config.profiles[newName] = { ...config.profiles[oldName], name: newName };
+  delete config.profiles[oldName];
+  saveConfig(config, configFile);
+}
 function getProfile(name, configFile = CONFIG_FILE) {
   return loadConfig(configFile).profiles[name];
 }
@@ -155,6 +237,17 @@ function createProfileDir(name, profilesDir = PROFILES_DIR) {
   mkdirSync(dir, { recursive: true });
   return dir;
 }
+function renameProfileDir(oldName, newName, profilesDir = PROFILES_DIR) {
+  const oldDir = join(profilesDir, oldName);
+  const newDir = join(profilesDir, newName);
+  if (!existsSync(oldDir)) {
+    throw new Error(`Profile directory "${oldName}" does not exist`);
+  }
+  if (existsSync(newDir)) {
+    throw new Error(`Profile directory "${newName}" already exists`);
+  }
+  renameSync(oldDir, newDir);
+}
 function removeProfileDir(name, profilesDir = PROFILES_DIR) {
   const dir = join(profilesDir, name);
   if (!existsSync(dir)) {
@@ -225,6 +318,9 @@ function registerCreate(program2) {
         throw configErr;
       }
       console.log(`\x1B[32m\u2713\x1B[0m Profile "${name}" created`);
+      for (const line of getCompactComplianceNoticeLines()) {
+        console.log(line);
+      }
       console.log(`  Next: ccm login ${name}`);
     } catch (e) {
       console.error(`\x1B[31m\u2717\x1B[0m ${e instanceof Error ? e.message : String(e)}`);
@@ -288,8 +384,6 @@ function getAuthStatus(profileDir) {
     });
   });
 }
-
-// src/lib/profile-store.ts
 function getProfileState(hasConfig, hasDirectory) {
   if (hasConfig && hasDirectory) return "ready";
   if (hasDirectory) return "orphaned";
@@ -383,6 +477,74 @@ function removeStoredProfile(name, configFile = CONFIG_FILE, profilesDir = PROFI
     throw error;
   }
 }
+function renameStoredProfile(oldName, newName, configFile = CONFIG_FILE, profilesDir = PROFILES_DIR, browsersDir = BROWSERS_DIR) {
+  validateProfileName(newName);
+  if (oldName === newName) {
+    throw new Error("Old and new profile names are the same");
+  }
+  const profile = getStoredProfile(oldName, configFile, profilesDir);
+  if (!profile) {
+    throw new Error(`Profile "${oldName}" does not exist`);
+  }
+  if (getProfile(newName, configFile)) {
+    throw new Error(`Profile "${newName}" already exists`);
+  }
+  if (profileExists(newName, profilesDir)) {
+    throw new Error(`Profile directory "${newName}" already exists`);
+  }
+  if (profile.hasDirectory) {
+    renameProfileDir(oldName, newName, profilesDir);
+  }
+  const hadWrapper = existsSync(getBrowserWrapperPath(oldName, browsersDir));
+  if (hadWrapper) {
+    try {
+      renameBrowserWrapper(oldName, newName, browsersDir);
+    } catch (error) {
+      try {
+        rollbackRename(oldName, newName, profile.hasDirectory, false, profilesDir, browsersDir);
+      } catch (rollbackError) {
+        throw new Error(
+          `Failed to rename profile "${oldName}" to "${newName}": ${formatError(error)}. Rollback failed: ${formatError(rollbackError)}`
+        );
+      }
+      throw error;
+    }
+  }
+  try {
+    renameProfile(oldName, newName, configFile);
+  } catch (error) {
+    try {
+      rollbackRename(oldName, newName, profile.hasDirectory, hadWrapper, profilesDir, browsersDir);
+    } catch (rollbackError) {
+      throw new Error(
+        `Failed to rename profile "${oldName}" to "${newName}": ${formatError(error)}. Rollback failed: ${formatError(rollbackError)}`
+      );
+    }
+    throw error;
+  }
+}
+function rollbackRename(oldName, newName, hadDirectory, hadWrapper, profilesDir, browsersDir) {
+  const rollbackErrors = [];
+  if (hadWrapper) {
+    try {
+      renameBrowserWrapper(newName, oldName, browsersDir);
+    } catch (error) {
+      rollbackErrors.push(`browser wrapper: ${formatError(error)}`);
+    }
+  }
+  if (hadDirectory) {
+    try {
+      renameProfileDir(newName, oldName, profilesDir);
+    } catch (error) {
+      rollbackErrors.push(`profile dir: ${formatError(error)}`);
+    }
+  }
+  if (rollbackErrors.length > 0) {
+    throw new Error(
+      `Rollback failed for rename "${oldName}" to "${newName}": ${rollbackErrors.join("; ")}`
+    );
+  }
+}
 function rollbackStorage(name, stagedDir, stagedWrapper, profilesDir, browsersDir) {
   const rollbackErrors = [];
   if (stagedDir) {
@@ -507,6 +669,19 @@ function registerRemove(program2) {
   });
 }
 
+// src/commands/rename.ts
+function registerRename(program2) {
+  program2.command("rename <old-name> <new-name>").description("Rename a profile").action((oldName, newName) => {
+    try {
+      renameStoredProfile(oldName, newName);
+      console.log(`\x1B[32m\u2713\x1B[0m Profile "${oldName}" renamed to "${newName}"`);
+    } catch (e) {
+      console.error(`\x1B[31m\u2717\x1B[0m ${e instanceof Error ? e.message : String(e)}`);
+      process.exit(1);
+    }
+  });
+}
+
 // src/commands/run.ts
 function registerRun(program2) {
   program2.command("run <name>").description("Run Claude Code with a prompt using a profile").requiredOption("-p, --prompt <prompt>", "Prompt to send").action((name, opts) => {
@@ -591,10 +766,12 @@ function registerUse(program2) {
 }
 
 // src/index.ts
-var program = new Command().name("ccm").version("0.2.2").description("Manage multiple Claude Code profiles");
+var program = new Command().name("ccm").version("0.4.0").description("Manage multiple Claude Code profiles");
 registerCreate(program);
+registerCompliance(program);
 registerList(program);
 registerRemove(program);
+registerRename(program);
 registerLogin(program);
 registerStatus(program);
 registerUse(program);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remeic/ccm",
-  "version": "0.2.2",
+  "version": "0.4.0",
   "description": "nvm-like manager for Claude Code profiles",
   "license": "MIT",
   "author": "Giulio Fagioli",