ccm-account-manager 1.13.0

package/docs/board.svg

@@ -0,0 +1,122 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 880 470" font-family="ui-monospace, 'Cascadia Mono', Consolas, 'SF Mono', Menlo, monospace" font-size="14">
+  <!-- window -->
+  <rect x="0.5" y="0.5" width="879" height="469" rx="10" fill="#1A1A19" stroke="#33322E"/>
+  <circle cx="24" cy="22" r="6" fill="#3A3935"/>
+  <circle cx="44" cy="22" r="6" fill="#3A3935"/>
+  <circle cx="64" cy="22" r="6" fill="#3A3935"/>
+  <text x="440" y="27" text-anchor="middle" fill="#595750" font-size="12">ccm</text>
+
+  <!-- wordmark + clock -->
+  <text x="28" y="72" fill="#F5F3EA">█▀▀▀ █▀▀▀ █▀▄▀█</text>
+  <text x="28" y="90" fill="#595750">█    █    █ ▀ █</text>
+  <text x="28" y="108" fill="#F5F3EA">▀▀▀▀ ▀▀▀▀ ▀   ▀</text>
+  <text x="852" y="72" text-anchor="end" fill="#FAB219" font-weight="bold">14:32:07</text>
+
+  <!-- header -->
+  <text x="28" y="142" fill="#FAB219" letter-spacing="6">CLAUDE CODE ACCOUNT BOARD</text>
+  <line x1="28" y1="156" x2="852" y2="156" stroke="#4A4944" stroke-dasharray="6 3"/>
+
+  <!-- row 1: WORK (selected, most headroom) -->
+  <rect x="28" y="168" width="4" height="15" fill="#FAB219"/>
+  <circle cx="45" cy="175" r="5.5" fill="#3987E5"/>
+  <text x="58" y="180" fill="#F5F3EA" font-weight="bold">WORK</text>
+  <text x="170" y="180" fill="#898781">jawad@work.com</text>
+  <text x="430" y="180" fill="#898781">MAX</text>
+  <text x="852" y="180" text-anchor="end" fill="#0CA30C">✦ MOST HEADROOM</text>
+
+  <text x="58" y="204" fill="#898781">5H</text>
+  <rect x="95"  y="193" width="18" height="13" rx="2" fill="#F5F3EA"/>
+  <rect x="120" y="193" width="18" height="13" rx="2" fill="#F5F3EA"/>
+  <rect x="145" y="193" width="18" height="13" rx="2" fill="#F5F3EA"/>
+  <rect x="170" y="193" width="18" height="13" rx="2" fill="#26251F"/>
+  <rect x="195" y="193" width="18" height="13" rx="2" fill="#26251F"/>
+  <rect x="220" y="193" width="18" height="13" rx="2" fill="#26251F"/>
+  <rect x="245" y="193" width="18" height="13" rx="2" fill="#26251F"/>
+  <rect x="270" y="193" width="18" height="13" rx="2" fill="#26251F"/>
+  <text x="300" y="204" fill="#C3C2B7">38%</text>
+  <text x="352" y="204" fill="#898781">RESETS</text>
+  <text x="418" y="204" fill="#FAB219">IN 2H 41M</text>
+
+  <text x="58" y="226" fill="#898781">WK</text>
+  <rect x="95"  y="215" width="18" height="13" rx="2" fill="#F5F3EA"/>
+  <rect x="120" y="215" width="18" height="13" rx="2" fill="#26251F"/>
+  <rect x="145" y="215" width="18" height="13" rx="2" fill="#26251F"/>
+  <rect x="170" y="215" width="18" height="13" rx="2" fill="#26251F"/>
+  <rect x="195" y="215" width="18" height="13" rx="2" fill="#26251F"/>
+  <rect x="220" y="215" width="18" height="13" rx="2" fill="#26251F"/>
+  <rect x="245" y="215" width="18" height="13" rx="2" fill="#26251F"/>
+  <rect x="270" y="215" width="18" height="13" rx="2" fill="#26251F"/>
+  <text x="300" y="226" fill="#C3C2B7">12%</text>
+  <text x="352" y="226" fill="#898781">RESETS</text>
+  <text x="418" y="226" fill="#FAB219">IN 4D 9H</text>
+
+  <!-- row 2: PERSONAL (in session) -->
+  <circle cx="45" cy="261" r="5.5" fill="#D55181"/>
+  <text x="58" y="266" fill="#F5F3EA">PERSONAL</text>
+  <text x="170" y="266" fill="#898781">me@personal.dev</text>
+  <text x="430" y="266" fill="#898781">PRO</text>
+  <text x="852" y="266" text-anchor="end" fill="#0CA30C">● IN SESSION</text>
+
+  <text x="58" y="290" fill="#898781">5H</text>
+  <rect x="95"  y="279" width="18" height="13" rx="2" fill="#F5F3EA"/>
+  <rect x="120" y="279" width="18" height="13" rx="2" fill="#F5F3EA"/>
+  <rect x="145" y="279" width="18" height="13" rx="2" fill="#F5F3EA"/>
+  <rect x="170" y="279" width="18" height="13" rx="2" fill="#F5F3EA"/>
+  <rect x="195" y="279" width="18" height="13" rx="2" fill="#F5F3EA"/>
+  <rect x="220" y="279" width="18" height="13" rx="2" fill="#F5F3EA"/>
+  <rect x="245" y="279" width="18" height="13" rx="2" fill="#26251F"/>
+  <rect x="270" y="279" width="18" height="13" rx="2" fill="#26251F"/>
+  <text x="300" y="290" fill="#C3C2B7">71%</text>
+  <text x="352" y="290" fill="#898781">RESETS</text>
+  <text x="418" y="290" fill="#FAB219">IN 1H 03M</text>
+
+  <text x="58" y="312" fill="#898781">WK</text>
+  <rect x="95"  y="301" width="18" height="13" rx="2" fill="#F5F3EA"/>
+  <rect x="120" y="301" width="18" height="13" rx="2" fill="#F5F3EA"/>
+  <rect x="145" y="301" width="18" height="13" rx="2" fill="#F5F3EA"/>
+  <rect x="170" y="301" width="18" height="13" rx="2" fill="#F5F3EA"/>
+  <rect x="195" y="301" width="18" height="13" rx="2" fill="#26251F"/>
+  <rect x="220" y="301" width="18" height="13" rx="2" fill="#26251F"/>
+  <rect x="245" y="301" width="18" height="13" rx="2" fill="#26251F"/>
+  <rect x="270" y="301" width="18" height="13" rx="2" fill="#26251F"/>
+  <text x="300" y="312" fill="#C3C2B7">54%</text>
+  <text x="352" y="312" fill="#898781">RESETS</text>
+  <text x="418" y="312" fill="#FAB219">IN 2D 16H</text>
+
+  <!-- row 3: SIDE (full) -->
+  <circle cx="45" cy="347" r="5.5" fill="#199E70"/>
+  <text x="58" y="352" fill="#F5F3EA">SIDE</text>
+  <text x="170" y="352" fill="#898781">side@gmail.com</text>
+  <text x="430" y="352" fill="#898781">PRO</text>
+  <text x="852" y="352" text-anchor="end" fill="#D03B3B" font-weight="bold">■ FULL</text>
+
+  <text x="58" y="376" fill="#898781">5H</text>
+  <rect x="95"  y="365" width="18" height="13" rx="2" fill="#D03B3B"/>
+  <rect x="120" y="365" width="18" height="13" rx="2" fill="#D03B3B"/>
+  <rect x="145" y="365" width="18" height="13" rx="2" fill="#D03B3B"/>
+  <rect x="170" y="365" width="18" height="13" rx="2" fill="#D03B3B"/>
+  <rect x="195" y="365" width="18" height="13" rx="2" fill="#D03B3B"/>
+  <rect x="220" y="365" width="18" height="13" rx="2" fill="#D03B3B"/>
+  <rect x="245" y="365" width="18" height="13" rx="2" fill="#D03B3B"/>
+  <rect x="270" y="365" width="18" height="13" rx="2" fill="#D03B3B"/>
+  <text x="300" y="376" fill="#C3C2B7">97%</text>
+  <text x="352" y="376" fill="#898781">RESETS</text>
+  <text x="418" y="376" fill="#FAB219">IN 22M</text>
+
+  <text x="58" y="398" fill="#898781">WK</text>
+  <rect x="95"  y="387" width="18" height="13" rx="2" fill="#FAB219"/>
+  <rect x="120" y="387" width="18" height="13" rx="2" fill="#FAB219"/>
+  <rect x="145" y="387" width="18" height="13" rx="2" fill="#FAB219"/>
+  <rect x="170" y="387" width="18" height="13" rx="2" fill="#FAB219"/>
+  <rect x="195" y="387" width="18" height="13" rx="2" fill="#FAB219"/>
+  <rect x="220" y="387" width="18" height="13" rx="2" fill="#FAB219"/>
+  <rect x="245" y="387" width="18" height="13" rx="2" fill="#26251F"/>
+  <rect x="270" y="387" width="18" height="13" rx="2" fill="#26251F"/>
+  <text x="300" y="398" fill="#C3C2B7">80%</text>
+  <text x="352" y="398" fill="#898781">RESETS</text>
+  <text x="418" y="398" fill="#FAB219">IN 5D 2H</text>
+
+  <!-- footer -->
+  <line x1="28" y1="422" x2="852" y2="422" stroke="#4A4944" stroke-dasharray="6 3"/>
+  <text x="28" y="448"><tspan fill="#FAB219">↑↓</tspan><tspan fill="#898781"> select   </tspan><tspan fill="#FAB219">enter</tspan><tspan fill="#898781"> launch   </tspan><tspan fill="#FAB219">a</tspan><tspan fill="#898781"> add account   </tspan><tspan fill="#FAB219">s</tspan><tspan fill="#898781"> departures   </tspan><tspan fill="#FAB219">r</tspan><tspan fill="#898781"> refresh   </tspan><tspan fill="#FAB219">d</tspan><tspan fill="#898781"> doctor   </tspan><tspan fill="#FAB219">q</tspan><tspan fill="#898781"> quit</tspan></text>
+</svg>

package/package.json

@@ -0,0 +1,43 @@
+{
+  "name": "ccm-account-manager",
+  "version": "1.13.0",
+  "description": "Claude Code account manager — unlimited named profiles, instant switching, simultaneous sessions, quota dashboard, statusline integration",
+  "type": "module",
+  "bin": {
+    "ccm": "bin/ccm.js"
+  },
+  "files": [
+    "bin/",
+    "src/",
+    "docs/board.svg"
+  ],
+  "keywords": [
+    "claude",
+    "claude-code",
+    "anthropic",
+    "account-manager",
+    "multi-account",
+    "cli",
+    "profiles",
+    "oauth",
+    "quota",
+    "tui"
+  ],
+  "homepage": "https://github.com/Jawad-Adas/ccm#readme",
+  "bugs": {
+    "url": "https://github.com/Jawad-Adas/ccm/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Jawad-Adas/ccm.git"
+  },
+  "author": "Jawad Adas (https://github.com/Jawad-Adas)",
+  "license": "MIT",
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "test": "node --test",
+    "prepublishOnly": "node --test"
+  }
+}

package/src/compose.js

@@ -0,0 +1,92 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import {
+  SHARED_DIR, SHARED_MCP, MCP_RECORD_DIR,
+  overrideSettingsPath, overrideClaudeMdPath,
+} from './paths.js';
+import { readJson, writeJson, deepMerge } from './util.js';
+import { getProfile } from './registry.js';
+import { seedFromDefault, syncMemory } from './memory.js';
+
+function newestMtime(...files) {
+  let m = 0;
+  for (const f of files) {
+    try { m = Math.max(m, fs.statSync(f).mtimeMs); } catch {}
+  }
+  return m;
+}
+
+function mtimeOf(file) {
+  try { return fs.statSync(file).mtimeMs; } catch { return 0; }
+}
+
+// Compose a profile's config from the shared layer + per-profile overrides.
+// Settings and CLAUDE.md use a newer-mtime rule so edits made inside a session
+// (/config) survive until the shared/override sources actually change.
+export function composeProfile(name, dir) {
+  composeSettings(name, dir);
+  composeClaudeMd(name, dir);
+  const warnings = composeMcp(name, dir);
+  seedFromDefault();
+  warnings.push(...syncMemory(dir, getProfile(name)?.memory === 'private' ? 'private' : 'shared'));
+  return warnings;
+}
+
+function composeSettings(name, dir) {
+  const sharedFile = path.join(SHARED_DIR, 'settings.json');
+  const ovFile = overrideSettingsPath(name);
+  const src = newestMtime(sharedFile, ovFile);
+  if (!src || src <= mtimeOf(path.join(dir, 'settings.json'))) return;
+  writeJson(path.join(dir, 'settings.json'), deepMerge(readJson(sharedFile, {}), readJson(ovFile, {})));
+}
+
+function composeClaudeMd(name, dir) {
+  const sharedFile = path.join(SHARED_DIR, 'CLAUDE.md');
+  const fragFile = overrideClaudeMdPath(name);
+  const src = newestMtime(sharedFile, fragFile);
+  if (!src || src <= mtimeOf(path.join(dir, 'CLAUDE.md'))) return;
+  let content = '';
+  try { content = fs.readFileSync(sharedFile, 'utf8'); } catch {}
+  let frag = '';
+  try { frag = fs.readFileSync(fragFile, 'utf8'); } catch {}
+  if (frag.trim()) {
+    content = content.trimEnd() + `\n\n<!-- ccm: profile "${name}" additions -->\n` + frag.trim() + '\n';
+  }
+  fs.writeFileSync(path.join(dir, 'CLAUDE.md'), content);
+}
+
+// Pure merge of shared MCP servers into a profile's .mcp.json.
+// `injected` records which server names ccm owns in this profile; servers the
+// profile added itself always win over a same-named shared server.
+export function mergeMcpServers(current, shared, injected) {
+  const next = { ...current, mcpServers: { ...(current.mcpServers ?? {}) } };
+  const warnings = [];
+  const record = [];
+  const injectedSet = new Set(injected);
+  for (const name of injected) {
+    if (!(name in shared)) delete next.mcpServers[name];
+  }
+  for (const [name, def] of Object.entries(shared)) {
+    if (name in next.mcpServers && !injectedSet.has(name)) {
+      warnings.push(`mcp server "${name}" exists in this profile; keeping the profile's own version`);
+      continue;
+    }
+    next.mcpServers[name] = def;
+    record.push(name);
+  }
+  const changed = JSON.stringify(next) !== JSON.stringify({ ...current, mcpServers: current.mcpServers ?? {} });
+  return { next, record, warnings, changed };
+}
+
+function composeMcp(name, dir) {
+  const shared = readJson(SHARED_MCP, {})?.mcpServers ?? {};
+  const recordFile = path.join(MCP_RECORD_DIR, `${name}.json`);
+  const injected = readJson(recordFile, []);
+  if (!Object.keys(shared).length && !injected.length) return [];
+  const mcpFile = path.join(dir, '.mcp.json');
+  const current = readJson(mcpFile, {}) ?? {};
+  const { next, record, warnings, changed } = mergeMcpServers(current, shared, injected);
+  if (changed) writeJson(mcpFile, next);
+  if (JSON.stringify(record) !== JSON.stringify(injected)) writeJson(recordFile, record);
+  return warnings;
+}

package/src/doctor.js

@@ -0,0 +1,142 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { spawnSync } from 'node:child_process';
+import {
+  CCM_HOME, CONFIG_PATH, SHARED_DIR, PROFILES_DIR, profileDir,
+  overrideSettingsPath, overrideClaudeMdPath,
+} from './paths.js';
+import { readJson, colorize, bold, dim, timeUntil } from './util.js';
+import { listProfiles } from './registry.js';
+import { SHARED_SUBDIRS } from './shared.js';
+import { readOauth, fetchUsage } from './usage.js';
+import { sameAccountValidSource } from './oauth.js';
+import { wtDetected, wtInstalled, wtInSync } from './wt.js';
+import { memoryStatus } from './memory.js';
+
+const ok = (msg) => ({ level: 'ok', msg });
+const warn = (msg) => ({ level: 'warn', msg });
+const err = (msg) => ({ level: 'err', msg });
+
+function claudeVersion() {
+  let r = spawnSync('claude', ['--version'], { encoding: 'utf8' });
+  if (r.error?.code === 'ENOENT') r = spawnSync('claude', ['--version'], { encoding: 'utf8', shell: true });
+  return r.status === 0 ? r.stdout.trim() : null;
+}
+
+function checkProfile(p) {
+  const results = [];
+  const dir = profileDir(p.name);
+  if (!fs.existsSync(dir)) return [err(`profile dir missing: ${dir} — remove with: ccm remove ${p.name}`)];
+
+  const oauth = readOauth(p.name);
+  if (!oauth?.accessToken) {
+    const other = sameAccountValidSource(p.name);
+    results.push(warn(`logged out — run: ccm login ${p.name}`
+      + (other ? ` (this account is still logged in via ${other}; that rotated the shared token)` : '')));
+  } else if (oauth.expiresAt && oauth.expiresAt < Date.now()) {
+    results.push(warn('token expired — refreshes automatically on next launch'));
+  } else if (oauth.expiresAt) {
+    results.push(ok(`token valid, expires in ${timeUntil(new Date(oauth.expiresAt).toISOString())}`));
+  }
+  if (!p.email) results.push(warn('identity unknown — launch once so ccm can read the account email'));
+
+  for (const d of SHARED_SUBDIRS) {
+    const link = path.join(dir, d);
+    let st = null;
+    try { st = fs.lstatSync(link); } catch {}
+    if (!st) {
+      try {
+        fs.symlinkSync(path.join(SHARED_DIR, d), link, 'junction');
+        results.push(ok(`re-created missing ${d} junction`));
+      } catch (e) {
+        results.push(err(`${d} junction missing and could not be created (${e.code ?? e.message})`));
+      }
+    } else if (st.isSymbolicLink()) {
+      if (!fs.existsSync(link)) results.push(err(`${d} junction is broken (target gone)`));
+    } else {
+      results.push(warn(`${d} is a plain copy, not a junction — edits are not shared`));
+    }
+  }
+
+  const lockFile = path.join(dir, 'ccm.lock');
+  const lock = readJson(lockFile, null);
+  if (lock?.pid) {
+    let alive = false;
+    try { process.kill(lock.pid, 0); alive = true; } catch {}
+    if (alive) results.push(ok('session running'));
+    else {
+      try { fs.rmSync(lockFile); results.push(ok('cleaned stale lock file')); } catch {}
+    }
+  }
+
+  const overrides = [];
+  if (fs.existsSync(overrideSettingsPath(p.name))) overrides.push('settings');
+  if (fs.existsSync(overrideClaudeMdPath(p.name))) overrides.push('CLAUDE.md');
+  if (overrides.length) results.push(ok(`overrides active: ${overrides.join(', ')}`));
+
+  const mem = memoryStatus(dir);
+  if (p.memory === 'private') results.push(ok('auto-memory: private (opted out of pooling)'));
+  else if (mem.local > 0) results.push(warn(`auto-memory: ${mem.local} project(s) pool on next launch (${mem.linked} pooled)`));
+  else if (mem.linked > 0) results.push(ok(`auto-memory: pooled across accounts (${mem.linked} project(s))`));
+  return results;
+}
+
+// Structured results: [{group, level, msg}] — group '' = system-wide.
+export async function collectDoctor() {
+  const entries = [];
+  const add = (group, r) => entries.push({ group, ...r });
+
+  const version = claudeVersion();
+  add('', version ? ok(`claude on PATH (${version})`) : err('claude not found on PATH — install Claude Code'));
+  add('', fs.existsSync(CCM_HOME) ? ok(`ccm home: ${CCM_HOME}`) : err(`ccm home missing: ${CCM_HOME}`));
+  add('', readJson(CONFIG_PATH, null)?.profiles ? ok('registry parses') : warn('registry missing/corrupt — will be rebuilt from profile dirs'));
+
+  const sharedSettings = readJson(path.join(SHARED_DIR, 'settings.json'), null);
+  add('', sharedSettings?.statusLine?.command === 'ccm statusline'
+    ? ok('statusline integration installed')
+    : warn('statusline not installed — run: ccm statusline install'));
+
+  if (wtDetected()) {
+    add('', !wtInstalled() ? warn('Windows Terminal fragment not installed — run: ccm wt install')
+      : wtInSync() ? ok('Windows Terminal fragment in sync')
+      : warn('Windows Terminal fragment out of date — run: ccm wt install'));
+  }
+
+  const profiles = listProfiles();
+  if (!profiles.length) add('', warn('no profiles yet — run: ccm import <name>'));
+  for (const p of profiles) {
+    for (const r of checkProfile(p)) add(p.name, r);
+  }
+
+  const probe = profiles.find((p) => {
+    const o = readOauth(p.name);
+    return o?.accessToken && (!o.expiresAt || o.expiresAt > Date.now());
+  });
+  if (probe) {
+    const res = await fetchUsage(probe.name);
+    add('', res.windows ? ok('usage API reachable') : warn(`usage API: ${res.error}`));
+  }
+
+  let orphans = [];
+  try {
+    const known = new Set(profiles.map((p) => p.name));
+    orphans = fs.readdirSync(PROFILES_DIR).filter((n) => !known.has(n));
+  } catch {}
+  if (orphans.length) add('', warn(`unregistered profile dirs: ${orphans.join(', ')}`));
+
+  const failures = entries.filter((e) => e.level === 'err').length;
+  return { entries, failures };
+}
+
+export async function runDoctor() {
+  const { entries, failures } = await collectDoctor();
+  const icon = { ok: colorize('green', '✔'), warn: colorize('yellow', '!'), err: colorize('red', '✖') };
+  const lines = [];
+  let lastGroup = '';
+  for (const e of entries) {
+    if (e.group && e.group !== lastGroup) lines.push(bold(e.group));
+    lastGroup = e.group;
+    lines.push(`${icon[e.level]} ${e.group ? dim(' ') : ''}${e.msg}`);
+  }
+  return { text: lines.join('\n'), failures, entries };
+}

package/src/launch.js

@@ -0,0 +1,71 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { profileDir } from './paths.js';
+import { readJson, writeJson, colorize, bold, dim } from './util.js';
+import { getProfile, updateProfile, refreshIdentity } from './registry.js';
+import { ensureShared, linkIntoProfile } from './shared.js';
+import { composeProfile } from './compose.js';
+import { authState, sameAccountValidSource } from './oauth.js';
+
+// Returned by launchProfile when it refuses to start a logged-out account,
+// so callers can tell "blocked" apart from a real Claude exit code.
+export const LOGGED_OUT_EXIT = 4;
+
+function lockPath(name) {
+  return path.join(profileDir(name), 'ccm.lock');
+}
+
+export function isRunning(name) {
+  const lock = readJson(lockPath(name), null);
+  if (!lock?.pid) return false;
+  try {
+    process.kill(lock.pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// Launch Claude Code bound to a profile. Blocks until the session exits.
+// opts.cwd runs the session in another folder (resuming a session from a
+// different project must happen in that project's directory).
+export function launchProfile(name, args = [], opts = {}) {
+  if (!getProfile(name)) throw new Error(`unknown profile "${name}" — run: ccm list`);
+
+  // Preflight: never hand off to a silent Claude login screen. If the saved
+  // token was cleared, starting a session would just dead-end at /login — so
+  // stop with an explanation instead. `intent: 'login'` (ccm login / add) is the
+  // one path that WANTS the login screen and skips this.
+  if (opts.intent !== 'login' && authState(name) === 'logged-out') {
+    const other = sameAccountValidSource(name);
+    console.error(colorize('yellow', `\n"${name}" is logged out — its saved token was cleared, so starting a session would just drop you at Claude's login screen.`));
+    if (other) console.error(dim(`This account is still logged in via ${other}; using one account in two places rotates its single-use token and logs the other out.`));
+    console.error(`Sign back in with:  ${bold(`ccm login ${name}`)}\n`);
+    return LOGGED_OUT_EXIT;
+  }
+
+  const dir = profileDir(name);
+  fs.mkdirSync(dir, { recursive: true });
+  ensureShared();
+  for (const w of [...linkIntoProfile(dir), ...composeProfile(name, dir)]) {
+    console.error(colorize('yellow', `warn: ${w}`));
+  }
+  updateProfile(name, { lastUsed: new Date().toISOString() });
+
+  writeJson(lockPath(name), { pid: process.pid, startedAt: new Date().toISOString() });
+  const env = { ...process.env, CLAUDE_CONFIG_DIR: dir };
+  const cwd = opts.cwd && fs.existsSync(opts.cwd) ? opts.cwd : undefined;
+  let res = spawnSync('claude', args, { stdio: 'inherit', env, cwd });
+  if (res.error?.code === 'ENOENT') {
+    res = spawnSync('claude', args, { stdio: 'inherit', env, cwd, shell: true });
+  }
+  try { fs.rmSync(lockPath(name)); } catch {}
+  refreshIdentity(name);
+
+  if (res.error) {
+    console.error(colorize('red', `error: could not start "claude" (${res.error.message}). Is Claude Code installed and on PATH?`));
+    return 1;
+  }
+  return res.status ?? 0;
+}

package/src/mcp.js

@@ -0,0 +1,165 @@
+import fs from 'node:fs';
+import path from 'node:path';
+import { SHARED_MCP, profileDir, DEFAULT_CLAUDE_DIR, HOME_CLAUDE_JSON } from './paths.js';
+import { readJson, writeJson, bold, dim, colorize } from './util.js';
+import { listProfiles } from './registry.js';
+
+function sharedServers() {
+  return readJson(SHARED_MCP, {})?.mcpServers ?? {};
+}
+
+// The ccm-injected file inside a profile dir (legacy shared-server view).
+function profileServers(dir) {
+  return readJson(path.join(dir, '.mcp.json'), {})?.mcpServers ?? {};
+}
+
+// Where Claude Code actually stores a config dir's MCP servers. For the default
+// ~/.claude account this lives at ~/.claude.json (beside, not inside, the dir).
+export function claudeJsonPath(dir) {
+  return dir === DEFAULT_CLAUDE_DIR ? HOME_CLAUDE_JSON : path.join(dir, '.claude.json');
+}
+
+// Claude Code keys projects by their forward-slash absolute path (even on
+// Windows). A local-scoped server only loads when its key matches the running
+// cwd in this exact form.
+export function normalizeProjectKey(p) {
+  return path.resolve(p).replace(/\\/g, '/');
+}
+
+function writeClaudeJson(dir, obj) {
+  const file = claudeJsonPath(dir);
+  fs.mkdirSync(path.dirname(file), { recursive: true });
+  const tmp = `${file}.ccm-tmp`;
+  fs.writeFileSync(tmp, JSON.stringify(obj, null, 2) + '\n');
+  fs.renameSync(tmp, file); // atomic: never leave .claude.json half-written
+}
+
+// An account's own MCP servers (from its .claude.json), each tagged with the
+// scope Claude Code loads it at: 'user' (everywhere) or 'local' (one project,
+// with `project` set). Shared/ccm-injected servers are not included here — they
+// already exist in every account.
+export function listAccountServers(name) {
+  const cj = readJson(claudeJsonPath(profileDir(name)), {}) ?? {};
+  const out = [];
+  for (const [n, def] of Object.entries(cj.mcpServers ?? {})) {
+    out.push({ name: n, def, scope: 'user' });
+  }
+  for (const [project, entry] of Object.entries(cj.projects ?? {})) {
+    for (const [n, def] of Object.entries(entry?.mcpServers ?? {})) {
+      out.push({ name: n, def, scope: 'local', project });
+    }
+  }
+  return out;
+}
+
+// Copy one MCP server from account `from` into account `to`, landing it at the
+// chosen scope in the target's .claude.json. Returns { replaced } (true when the
+// target already had a server of that name at that scope) or { error }.
+export function copyServer({ from, name, sourceScope, sourceProject, to, targetScope, targetProject }) {
+  const matches = listAccountServers(from).filter((s) => s.name === name);
+  const src = matches.find((s) =>
+    (!sourceScope || s.scope === sourceScope) &&
+    (sourceScope !== 'local' || !sourceProject || normalizeProjectKey(s.project) === normalizeProjectKey(sourceProject)),
+  );
+  if (!src) return { error: `no MCP server "${name}" in ${from}` };
+  const def = JSON.parse(JSON.stringify(src.def)); // independent clone
+
+  const targetDir = profileDir(to);
+  const cj = readJson(claudeJsonPath(targetDir), {}) ?? {};
+  let replaced = false;
+  let project = null;
+  if (targetScope === 'local') {
+    project = normalizeProjectKey(targetProject);
+    cj.projects = cj.projects ?? {};
+    cj.projects[project] = cj.projects[project] ?? {};
+    cj.projects[project].mcpServers = cj.projects[project].mcpServers ?? {};
+    replaced = name in cj.projects[project].mcpServers;
+    cj.projects[project].mcpServers[name] = def;
+  } else {
+    cj.mcpServers = cj.mcpServers ?? {};
+    replaced = name in cj.mcpServers;
+    cj.mcpServers[name] = def;
+  }
+  writeClaudeJson(targetDir, cj);
+  return { replaced, scope: targetScope, project };
+}
+
+// Default the target scope/project from the source when not explicitly chosen:
+// a local server stays local to its own project; a user server stays user-scoped.
+export function resolveCopyTarget({ from, name, scope, project }, cwd) {
+  const matches = listAccountServers(from).filter((s) => s.name === name);
+  const src = matches.find((s) => !scope || s.scope === scope) ?? matches[0];
+  const targetScope = scope ?? (src?.scope === 'local' ? 'local' : 'user');
+  const targetProject = targetScope === 'local' ? (project ?? src?.project ?? cwd) : null;
+  return { sourceScope: src?.scope ?? null, sourceProject: src?.project ?? null, targetScope, targetProject };
+}
+
+// `ccm mcp copy <server> --from A --to B [--scope user|local] [--project P]`
+export function parseMcpCopy(args) {
+  const opts = { name: null, from: null, to: null, scope: null, project: null };
+  const rest = [];
+  for (let i = 0; i < args.length; i++) {
+    const a = args[i];
+    if (a === '--from') opts.from = args[++i];
+    else if (a === '--to') opts.to = args[++i];
+    else if (a === '--scope') opts.scope = args[++i];
+    else if (a === '--project') opts.project = args[++i];
+    else rest.push(a);
+  }
+  opts.name = rest[0] ?? null;
+  return opts;
+}
+
+export function mcpList() {
+  const shared = sharedServers();
+  const out = [bold('Shared (injected into every profile):')];
+  const names = Object.keys(shared);
+  out.push(names.length ? names.map((n) => `  ${colorize('green', '●')} ${n}`).join('\n') : dim('  (none)'));
+  for (const p of listProfiles()) {
+    const own = listAccountServers(p.name);
+    const user = own.filter((s) => s.scope === 'user').map((s) => s.name);
+    const local = own.filter((s) => s.scope === 'local');
+    const parts = [];
+    if (user.length) parts.push(`user: ${user.join(', ')}`);
+    if (local.length) parts.push(`local: ${local.map((s) => `${s.name} @ ${path.basename(s.project)}`).join(', ')}`);
+    out.push(`${bold(p.name)}: ${parts.length ? parts.join('   ') : dim('shared only')}`);
+  }
+  return out.join('\n');
+}
+
+// Find a server definition by name: given profile first, then all profiles,
+// then the default ~/.claude. Searches both the legacy .mcp.json and .claude.json.
+function findServerDef(name, fromProfile) {
+  const sources = [
+    ...(fromProfile ? [{ label: fromProfile, dir: profileDir(fromProfile) }] : []),
+    ...listProfiles().map((p) => ({ label: p.name, dir: profileDir(p.name) })),
+    { label: '~/.claude', dir: DEFAULT_CLAUDE_DIR },
+  ];
+  for (const src of sources) {
+    const legacy = profileServers(src.dir)[name];
+    if (legacy) return { def: legacy, from: src.label };
+    const cj = readJson(claudeJsonPath(src.dir), {}) ?? {};
+    if (cj.mcpServers?.[name]) return { def: cj.mcpServers[name], from: src.label };
+    for (const entry of Object.values(cj.projects ?? {})) {
+      if (entry?.mcpServers?.[name]) return { def: entry.mcpServers[name], from: src.label };
+    }
+  }
+  return null;
+}
+
+export function mcpShare(name, fromProfile) {
+  const found = findServerDef(name, fromProfile);
+  if (!found) return { error: `no MCP server "${name}" found in any profile or ~/.claude` };
+  const cfg = readJson(SHARED_MCP, {}) ?? {};
+  cfg.mcpServers = { ...(cfg.mcpServers ?? {}), [name]: found.def };
+  writeJson(SHARED_MCP, cfg);
+  return { from: found.from };
+}
+
+export function mcpUnshare(name) {
+  const cfg = readJson(SHARED_MCP, {}) ?? {};
+  if (!cfg.mcpServers?.[name]) return { error: `"${name}" is not a shared MCP server` };
+  delete cfg.mcpServers[name];
+  writeJson(SHARED_MCP, cfg);
+  return {};
+}