@remeic/ccm 0.3.0 → 0.4.0

package/README.md

@@ -13,13 +13,30 @@
   </table>
 </div>
 
+## IMPORTANT: Claude Code ToS (Multi-Terminal Use)
+
+> **Mandatory compliance rule for this project**
+> Do **not** use the **same Claude account** from multiple terminals at the same time.
+> We enforce: **1 account = 1 person = 1 active terminal session**.
+
+- `ccm` isolates profiles. It does **not** grant any extra rights under Anthropic terms.
+- For parallel work, use separate licensed accounts/seats (or API keys under Commercial Terms).
+- No credential sharing, no shared account handoff, no "one account used by multiple people".
+- This is an intentionally strict project rule to remove ambiguity and reduce compliance risk.
+- The CLI also surfaces this via `ccm compliance` (alias: `ccm tos`) and after every successful `ccm create`.
+
+Official basis (as of April 8, 2026):
+- [Claude Code Legal & Compliance](https://code.claude.com/docs/en/legal-and-compliance): usage limits for Pro/Max assume ordinary, individual use; Anthropic may enforce auth restrictions without notice.
+- [Anthropic Consumer Terms](https://www.anthropic.com/legal/consumer-terms): account credentials/API keys must not be shared or made available to others; Anthropic may suspend/terminate for material breach.
+- [Anthropic Commercial Terms](https://www.anthropic.com/legal/commercial-terms): customer is responsible for all activity under its account.
+
 [![CI](https://github.com/remeic/ccm/actions/workflows/ci.yml/badge.svg)](https://github.com/remeic/ccm/actions/workflows/ci.yml)
 [![npm version](https://img.shields.io/npm/v/%40remeic%2Fccm.svg)](https://www.npmjs.com/package/@remeic/ccm)
 [![Homebrew tap](https://img.shields.io/badge/Homebrew-tap-FBB040?logo=homebrew&logoColor=white)](https://github.com/Remeic/homebrew-tap)
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
 [![Node.js](https://img.shields.io/badge/node-%3E%3D18-brightgreen)](https://nodejs.org)
 [![codecov](https://codecov.io/github/Remeic/ccm/graph/badge.svg?token=E16LCLDHYV)](https://codecov.io/github/Remeic/ccm)
-[![mutation testing](https://img.shields.io/badge/mutation%20testing-100%25-brightgreen)](https://stryker-mutator.io/)
+[![Mutation testing badge](https://img.shields.io/endpoint?style=flat&url=https%3A%2F%2Fbadge-api.stryker-mutator.io%2Fgithub.com%2FRemeic%2Fccm%2Fmain)](https://dashboard.stryker-mutator.io/reports/github.com/Remeic/ccm/main)
 
 Manage separate Claude Code profiles for personal, work, and client accounts without repeated logout/login cycles. `ccm` keeps each profile isolated so switching is immediate and parallel sessions stay clean.
 
@@ -30,11 +47,13 @@ Manage separate Claude Code profiles for personal, work, and client accounts wit
 ## Table of Contents
 
 - [Table of Contents](#table-of-contents)
+- [IMPORTANT: Claude Code ToS (Multi-Terminal Use)](#important-claude-code-tos-multi-terminal-use)
 - [Why](#why)
 - [Prerequisites](#prerequisites)
 - [Install](#install)
 - [Quick Start](#quick-start)
 - [Commands](#commands)
+- [Compliance Notice](#compliance-notice)
 - [Passing Flags and Environment Variables](#passing-flags-and-environment-variables)
 - [Multi-Account Login](#multi-account-login)
   - [Different Browser per Profile](#different-browser-per-profile)
@@ -91,6 +110,11 @@ The installed command remains `ccm`.
 ```
 $ ccm create work
 ✓ Profile "work" created
+! Compliance notice
+  ccm isolates profiles but does not expand Anthropic usage rights.
+  Use each Claude account with one person and one active terminal session.
+  Do not share credentials or API keys across users or parallel operators.
+  Details: ccm compliance
   Next: ccm login work
 
 $ ccm login work
@@ -105,6 +129,7 @@ $ ccm use work
 | Command                                                  | Description                                                   |
 | -------------------------------------------------------- | ------------------------------------------------------------- |
 | `ccm create <name> [-l label] [-b browser]`              | Create a profile. `-b` sets the browser for OAuth             |
+| `ccm compliance` / `ccm tos`                             | Show the compliance notice, disclaimer, and official sources  |
 | `ccm list`                                               | List all profiles with auth status, including drifted entries |
 | `ccm use <name> [-- args]`                               | Launch Claude Code. Args after `--` are passed to Claude      |
 | `ccm login <name> [--console] [-b browser] [--url-only]` | Authenticate a profile                                        |
@@ -113,6 +138,23 @@ $ ccm use work
 | `ccm remove <name> [-f]`                                 | Remove a profile. `-f` skips confirmation                     |
 | `ccm run <name> -p <prompt>`                             | Run a prompt non-interactively                                |
 
+## Compliance Notice
+
+Every successful `ccm create` prints a short compliance warning. Users can re-open the full text at any time with:
+
+```bash
+ccm compliance
+ccm tos
+```
+
+The notice is intentionally conservative:
+
+- `ccm` is a profile-isolation tool, not a license-expansion tool.
+- This project treats each Claude account as single-user and single-session.
+- Shared credentials, shared operators, and parallel use of the same account are out of scope.
+- If a team needs parallel access, they should use separate seats/accounts or API-key-based access under applicable Anthropic commercial terms.
+- The notice is compliance guidance, not legal advice. Users remain responsible for reviewing Anthropic terms for their exact workflow.
+
 ## Passing Flags and Environment Variables
 
 Everything after `--` in `ccm use` is forwarded to `claude`. Env vars from your shell are inherited.
@@ -199,8 +241,10 @@ src/
 │   ├── profiles.ts          # Profile directory management and validation
 │   ├── profile-store.ts     # Reconciled config/filesystem profile view
 │   ├── claude.ts            # Claude binary discovery, spawning, auth status
+│   ├── compliance.ts        # Centralized compliance notice text and official sources
 │   └── browsers.ts          # Browser wrapper generation and validation
 └── commands/
+    ├── compliance.ts        # Dedicated compliance/TOS command
     ├── create.ts            # Create profile (with rollback on failure)
     ├── list.ts              # List profiles with auth status and drift state
     ├── login.ts             # Authenticate via Claude TUI or --console

package/dist/index.js

@@ -7,6 +7,68 @@ import { z } from 'zod';
 import { spawn, execFileSync } from 'child_process';
 import { createInterface } from 'readline';
 
+// src/lib/compliance.ts
+var COMPLIANCE_CHECKED_AT = "2026-04-08";
+var COMPLIANCE_SOURCES = [
+  {
+    label: "Claude Code Legal & Compliance",
+    url: "https://code.claude.com/docs/en/legal-and-compliance",
+    summary: "Pro and Max usage limits assume ordinary, individual use. Anthropic may enforce authentication restrictions without notice."
+  },
+  {
+    label: "Anthropic Consumer Terms",
+    url: "https://www.anthropic.com/legal/consumer-terms",
+    summary: "Account login information, API keys, and account credentials must not be shared or made available to anyone else."
+  },
+  {
+    label: "Anthropic Commercial Terms",
+    url: "https://www.anthropic.com/legal/commercial-terms",
+    summary: "Commercial customers are responsible for all activity and fees incurred under their account."
+  }
+];
+function buildRuleLines() {
+  return [
+    "Project compliance boundary:",
+    "- ccm isolates profiles, but it does not grant any extra rights under Anthropic terms.",
+    "- Treat each Claude account as single-user and single-session: 1 account = 1 person = 1 active terminal session.",
+    "- Do not share account credentials or API keys, and do not hand off the same account between multiple operators.",
+    "- For parallel operators, separate seats/accounts or API-key-based access under Commercial Terms are required."
+  ];
+}
+function getCompactComplianceNoticeLines() {
+  return [
+    "\x1B[33m!\x1B[0m Compliance notice",
+    "  ccm isolates profiles but does not expand Anthropic usage rights.",
+    "  Use each Claude account with one person and one active terminal session.",
+    "  Do not share credentials or API keys across users or parallel operators.",
+    "  Details: ccm compliance"
+  ];
+}
+function getFullComplianceNoticeLines() {
+  const sourceLines = COMPLIANCE_SOURCES.flatMap((source) => [
+    `- ${source.label}: ${source.url}`,
+    `  ${source.summary}`
+  ]);
+  return [
+    "Claude Code compliance notice",
+    "This project publishes an intentionally conservative operational rule to reduce misuse and ambiguity.",
+    ...buildRuleLines(),
+    "Important:",
+    "- This notice is compliance guidance for ccm users. It is not legal advice and it does not replace review of Anthropic terms for your specific use case.",
+    "- If you are building a product, automation, or shared workflow around Claude access, verify your model with Anthropic before deployment.",
+    `Official sources reviewed on ${COMPLIANCE_CHECKED_AT}:`,
+    ...sourceLines
+  ];
+}
+
+// src/commands/compliance.ts
+function registerCompliance(program2) {
+  program2.command("compliance").alias("tos").description("Show the Claude Code compliance notice and official source links").action(() => {
+    for (const line of getFullComplianceNoticeLines()) {
+      console.log(line);
+    }
+  });
+}
 var CCM_HOME = join(homedir(), ".ccm");
 var PROFILES_DIR = join(CCM_HOME, "profiles");
 var CONFIG_FILE = join(CCM_HOME, "config.json");
@@ -256,6 +318,9 @@ function registerCreate(program2) {
         throw configErr;
       }
       console.log(`\x1B[32m\u2713\x1B[0m Profile "${name}" created`);
+      for (const line of getCompactComplianceNoticeLines()) {
+        console.log(line);
+      }
       console.log(`  Next: ccm login ${name}`);
     } catch (e) {
       console.error(`\x1B[31m\u2717\x1B[0m ${e instanceof Error ? e.message : String(e)}`);
@@ -701,8 +766,9 @@ function registerUse(program2) {
 }
 
 // src/index.ts
-var program = new Command().name("ccm").version("0.3.0").description("Manage multiple Claude Code profiles");
+var program = new Command().name("ccm").version("0.4.0").description("Manage multiple Claude Code profiles");
 registerCreate(program);
+registerCompliance(program);
 registerList(program);
 registerRemove(program);
 registerRename(program);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remeic/ccm",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "nvm-like manager for Claude Code profiles",
   "license": "MIT",
   "author": "Giulio Fagioli",