claude-access-for-all 0.0.0-stage → 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Mark Zhang
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,88 @@
-# Temporary Holding Version
+# Claude Access for All
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+**Frontier intelligence should serve humanity, in every corner of the world.**
+
+An open, English-language field guide and local toolkit for accessing Claude Code on macOS: subscription choices, network reliability, billing hygiene, account security, and recovery.
+
+## Why this exists
+
+The next great scientific idea may come from a student with an aging laptop. The next useful piece of software may begin in a small town, far from a technology hub. Talent is everywhere. Access to the tools that multiply it is still uneven.
+
+We believe AI should benefit all of humanity. The ability to learn, build, and participate in the future should reach people across borders, languages, and economic circumstances. That includes developers in corners of the world where access is currently restricted, communities overlooked by product rollouts, and people for whom a failed subscription is a meaningful financial loss.
+
+Claude Code is the starting point for this project because we want more people to experience frontier AI in their daily work. Our ambition is a world where the best available models are within everyone's reach. We treat that as a mission, not a permanent benchmark ranking for any single model or company.
+
+Open knowledge can reduce confusion, expose misleading promises, help people protect their money and accounts, and make barriers visible to the people who can remove them. We hope this repository becomes a small piece of that shared infrastructure.
+
+## Start here
+
+1. Read [availability and access paths](docs/availability.md) before spending money.
+2. Follow the [macOS quickstart](docs/macos-quickstart.md).
+3. Choose and manage a plan with the [subscription playbook](docs/subscriptions.md).
+4. Diagnose connectivity with the [network and “clean IP” guide](docs/network.md).
+5. Protect your account with the [account continuity guide](docs/account-continuity.md).
+6. Review the [client privacy inspector](docs/privacy-inspector.md) for CLI, Desktop, and web.
+7. Use the [troubleshooting decision table](docs/troubleshooting.md) when something breaks.
+
+## What you get
+
+| Area | Practical outcome |
+| --- | --- |
+| macOS setup | Install, authenticate, and verify your billing route |
+| Network reliability | Separate proxy, TLS, service, and account problems |
+| Subscription management | Record billing ownership and review renewals |
+| Account continuity | Secure access, preserve work, and prepare an appeal |
+| Local tools | Offline diagnostics, scoped launchers, browser signal inspector, and calendar reminder |
+| Evidence | Dated official sources and a contribution standard |
+
+## Install and run
+
+Requires macOS, Node.js 18+, Python 3.9+, and Git for the GitHub install. Install Claude Code or Claude Desktop separately when needed. Install the CLI from the npm registry or directly from GitHub.
+
+Run the interactive menu without a permanent install:
+
+```sh
+npx --yes claude-access-for-all
+```
+
+Or install the command globally:
+
+```sh
+npm install -g claude-access-for-all
+claude-access
+```
+
+Choose an action from the interactive menu, or call one directly:
+
+```sh
+claude-access doctor
+claude-access audit
+claude-access cli --timezone UTC
+claude-access app --timezone UTC
+claude-access web --browser chrome --timezone UTC
+claude-access inspect
+claude-access reminder --renewal 2026-12-01 --days-before 3 > renewal.ics
+open renewal.ics
+```
+
+To install directly from GitHub, use `npm install -g github:AMark-CS/claude-access-for-all`. Use `claude-access help` to see the complete command list. `inspect` opens the local graphical browser inspector in your default browser. To check a separate browser profile, open its local file in that profile instead; see the [privacy inspector guide](docs/privacy-inspector.md).
+
+For the calendar reminder, replace the example date with the next billing date shown by your billing provider. The file contains one all-day review event with an alert; import it into Apple Calendar and check your notification settings. It neither cancels nor renews anything, and must be regenerated when the billing date changes.
+
+The diagnostics run offline and do not print environment-variable values. The scoped launchers request process-local timezone and language settings; Desktop and browsers may behave differently. The browser launcher opens Claude in a separate profile and prints its private data directory. Review the [privacy guide](docs/privacy-inspector.md) for limitations before use.
+
+To run the source version directly without npm, use `python3 tools/access.py doctor` or `python3 tools/privacy.py audit` from a clone. Review the short [source](tools/access.py) before running it.
+
+## Honest boundaries
+
+Anthropic currently limits availability by location. A working connection or successful payment does not establish eligibility. This project cannot grant access, reverse a suspension, or guarantee that an account stays active. See the [official availability list](https://support.claude.com/en/articles/8461763-where-can-i-access-claude).
+
+We document practical access issues and advocate broader availability. We do not sell accounts, proxy subscriptions, credentials, or guarantees of immunity from account review. No VPN vendor, IP reputation score, or “account warming” ritual is endorsed as a solution to eligibility restrictions.
+
+## Help build this
+
+Contribute a reproducible fix, a clearer explanation, an accessibility improvement, or a dated policy correction. Please read [CONTRIBUTING.md](CONTRIBUTING.md), the [evidence register](docs/sources.md), and [SECURITY.md](SECURITY.md) first. Never put account identifiers, IP addresses, receipts, tokens, or payment details in public issues.
+
+Potential next steps: a macOS menu bar companion, additional billing-provider walkthroughs, and a structured history of access barriers. These are roadmap ideas.
+
+Independent community project. Not affiliated with or endorsed by Anthropic. Claude and Claude Code are their respective owners' trademarks. MIT licensed. Official sources last reviewed **October 27, 2026**; recheck them before purchasing.

package/SECURITY.md

@@ -0,0 +1,9 @@
+# Security and privacy
+
+The offline diagnostics read the local platform, timezone names, and the presence of an allowlist of environment variables. It does not inspect browser cookies, Keychain entries, shell history, Claude settings, or token files. The optional launchers start locally installed apps with requested process-scoped locale and timezone settings. The web launcher opens Claude and creates or reuses a dedicated profile. The local browser inspector collects browser-visible signals only within the page. The tools do not authenticate on your behalf, install software, alter system network settings, or initiate purchases.
+
+Calendar output is written to standard output. Shell redirection creates the destination file; the program does not import it into Calendar or change a subscription. No telemetry is collected.
+
+Do not post secrets or personal account evidence in public issues. For a code vulnerability, use the repository's private vulnerability reporting feature if enabled. If it is unavailable, open a minimal issue asking for a private reporting channel without disclosing exploit details or sensitive data. For a Claude account problem, contact Anthropic support directly.
+
+If a credential is exposed, revoke it with its issuer, review account activity, and remove it from public history as appropriate. Deleting the latest copy of a file does not remove earlier Git commits.

package/bin/claude-access.js

@@ -0,0 +1,101 @@
+#!/usr/bin/env node
+import { spawnSync } from 'node:child_process';
+import { createInterface } from 'node:readline/promises';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+
+const root = dirname(dirname(fileURLToPath(import.meta.url)));
+const help = `Claude Access for All
+
+Usage: claude-access [command] [options]
+
+  menu                   Open the interactive menu (default)
+  doctor                 Check local installation and configuration presence
+  audit                  Inspect CLI environment signals locally
+  cli [options] [-- ...] Launch Claude Code with scoped locale settings
+  app [options]          Launch Claude Desktop with scoped locale settings
+  web [options]          Launch Claude in a separate browser profile
+  inspect                Open the local browser signal inspector
+  reminder [options]     Write a one-time calendar event to stdout
+  guide                  Open the English privacy and access guide
+  help                   Show this help
+  version                Show the package version
+
+Examples:
+  claude-access cli --timezone UTC -- --version
+  claude-access web --browser edge --timezone UTC
+  claude-access reminder --renewal 2026-12-01 --days-before 3 > renewal.ics
+
+Requires macOS, Node.js 18+, and Python 3.9+. Launching Claude requires the
+relevant installed app and a valid account. Local signal checks are not a ban
+prediction or an eligibility test. For options run a command with --help.`;
+
+function run(command, args) {
+  const result = spawnSync(command, args, { stdio: 'inherit' });
+  if (result.error) {
+    const hint = result.error.code === 'ENOENT' && command === 'python3'
+      ? 'Python 3.9+ is required. Install Python from https://www.python.org/downloads/macos/.'
+      : `Could not start ${command}: ${result.error.message}`;
+    console.error(hint);
+    return 1;
+  }
+  return result.status ?? 1;
+}
+
+function dispatch(command, args = []) {
+  switch (command) {
+    case 'doctor': return run('python3', [join(root, 'tools/access.py'), 'doctor', ...args]);
+    case 'audit': return run('python3', [join(root, 'tools/privacy.py'), 'audit', ...args]);
+    case 'cli': case 'app': case 'web':
+      return run('python3', [join(root, 'tools/privacy.py'), command, ...args]);
+    case 'reminder': return run('python3', [join(root, 'tools/access.py'), 'reminder', ...args]);
+    case 'inspect':
+      if (process.platform !== 'darwin') { console.error('The inspector launcher requires macOS.'); return 1; }
+      return run('/usr/bin/open', [join(root, 'web/fingerprint.html')]);
+    case 'guide':
+      if (process.platform !== 'darwin') { console.error('The guide launcher requires macOS.'); return 1; }
+      return run('/usr/bin/open', ['https://github.com/AMark-CS/claude-access-for-all/blob/main/docs/privacy-inspector.md']);
+    case 'help': case '--help': case '-h': console.log(help); return 0;
+    case 'version': case '--version': case '-v': console.log('0.1.0'); return 0;
+    default: console.error(`Unknown command: ${command}\n\n${help}`); return 2;
+  }
+}
+
+async function menu() {
+  if (!process.stdin.isTTY || !process.stdout.isTTY) {
+    console.error('The interactive menu needs a terminal. Use claude-access help for commands.');
+    return 1;
+  }
+  const rl = createInterface({ input: process.stdin, output: process.stdout });
+  try {
+    console.log(`\nClaude Access for All\n\n  1  Check local environment\n  2  Inspect CLI signals\n  3  Start Claude Code\n  4  Start Claude Desktop\n  5  Start Claude in a separate browser profile\n  6  Open browser signal inspector\n  7  Open the privacy guide\n  8  Create a renewal calendar file\n  0  Exit\n`);
+    const choice = (await rl.question('Choose an option: ')).trim();
+    if (choice === '0') return 0;
+    const simple = { '1': 'doctor', '2': 'audit', '3': 'cli', '4': 'app', '6': 'inspect', '7': 'guide' };
+    if (simple[choice]) { rl.close(); return dispatch(simple[choice]); }
+    if (choice === '5') {
+      const browser = (await rl.question('Browser (chrome/edge) [chrome]: ')).trim() || 'chrome';
+      if (!['chrome', 'edge'].includes(browser)) { console.error('Choose chrome or edge.'); return 2; }
+      rl.close(); return dispatch('web', ['--browser', browser]);
+    }
+    if (choice === '8') {
+      const renewal = (await rl.question('Next renewal date (YYYY-MM-DD): ')).trim();
+      const output = (await rl.question('Output file path [renewal.ics]: ')).trim() || 'renewal.ics';
+      const lead = (await rl.question('Days before renewal [3]: ')).trim() || '3';
+      rl.close();
+      const result = spawnSync('python3', [join(root, 'tools/access.py'), 'reminder', '--renewal', renewal, '--days-before', lead], { encoding: 'utf8' });
+      if (result.error) { console.error('Could not start Python 3.9+.'); return 1; }
+      if (result.status !== 0) { console.error(result.stderr.trim()); return result.status ?? 1; }
+      const { writeFileSync } = await import('node:fs');
+      try { writeFileSync(output, result.stdout, { flag: 'wx', mode: 0o600 }); }
+      catch (error) { console.error(`Could not create calendar file: ${error.message}`); return 1; }
+      console.log(`Created ${output}. Import it into Calendar and check notification settings.`);
+      return 0;
+    }
+    console.error('Unknown option. Run the menu again to choose 0–8.');
+    return 2;
+  } finally { rl.close(); }
+}
+
+const [command = 'menu', ...args] = process.argv.slice(2);
+process.exitCode = command === 'menu' ? await menu() : dispatch(command, args);

package/docs/account-continuity.md

@@ -0,0 +1,36 @@
+# Account continuity and recovery
+
+Last reviewed: October 27, 2026.
+
+## Build habits that protect your work
+
+Use an email account you control and secure its recovery methods. Use available authentication protections. Keep your device updated, restrict untrusted browser extensions, and avoid sharing signed-in sessions. Never provide a reseller with a password, one-time code, OAuth token, session cookie, or remote access to your Mac.
+
+Record billing ownership privately and export important work when appropriate. Keep source code in version control and project knowledge in portable files. Avoid making your only copy of an important deliverable dependent on a service login.
+
+Treat changes in travel, billing, organization membership, and network setup as occasions to recheck the current requirements. There is no documented “warm-up” chat schedule, minimum account age, or daily activity pattern that this project can verify as protection against suspension. Anecdotes should remain labeled as anecdotes.
+
+## If access changes
+
+First distinguish a service incident, failed renewal, wrong login, usage limit, and account restriction. Each requires a different remedy. The troubleshooting table gives a starting point. Do not assume that every error is a ban or that every ban is an IP issue.
+
+For a restriction, preserve the message and date privately and follow [Anthropic's safeguards and appeals process](https://support.claude.com/en/articles/8241253-safeguards-warnings-and-appeals). The official page lists several possible reasons, including unsupported-location account creation and policy violations. The account's own notice and support response are the relevant evidence; outside observers cannot reliably diagnose its enforcement reason.
+
+## Prepare a factual appeal
+
+Submit through the official logged-in appeal flow. Use a short factual description:
+
+```text
+I am requesting a review of my account restriction.
+Observed message: [exact text, excluding secrets]
+First observed: [date and timezone]
+Relevant context: [accurate account and access facts]
+Troubleshooting already attempted: [brief list]
+Please clarify the reason and whether any corrective action is available.
+```
+
+Provide identifying or verification material only through a verified private support channel when requested. This template does not promise reinstatement. The official appeals page also describes available data-export and deletion options for restricted accounts.
+
+## Protect your billing separately
+
+If access is lost, verify whether renewal remains active through the actual purchase platform. Contact [official support](https://privacy.claude.com/en/articles/9015913-how-to-get-support) if you cannot reach billing settings. Recovery and billing are separate questions; do not assume either reinstatement or an automatic refund.

package/docs/availability.md

@@ -0,0 +1,19 @@
+# Availability and access paths
+
+Last reviewed: October 27, 2026.
+
+Start with the [official supported locations](https://support.claude.com/en/articles/8461763-where-can-i-access-claude). Check the live list for your actual situation rather than relying on a copied country table or an IP lookup. For travel, relocation, or an apparent classification error, ask support how the current rules apply before purchasing.
+
+| Situation | Next step |
+| --- | --- |
+| You are eligible and need individual coding access | Review Pro/Max and the macOS quickstart |
+| Your employer provides access | Ask the workspace administrator about your seat and billing |
+| You need programmatic API use | Review Console or an officially supported cloud provider's own terms, regions, and charges |
+| You are outside supported availability | Seek clarification from support; monitor official expansion announcements |
+| Your eligible account appears misclassified | Collect a private, minimal problem description and request review |
+
+The [official setup documentation](https://code.claude.com/docs/en/setup) describes subscription, Console, and supported cloud-provider authentication. These routes have different billing and eligibility requirements. A cloud provider is not a guaranteed alternative in an unsupported region.
+
+While waiting for availability, keep developing with tools available to you, including locally runnable open-weight models suitable for your hardware and license requirements. They do not provide Claude subscriptions or equivalent model behavior. Keep project instructions, source code, and tests portable so changing tools does not strand your work.
+
+Our advocacy priorities are broader regional availability, affordable access, clear eligibility explanations, useful appeal mechanisms, and protection against paying for access that cannot be used. Contributions documenting barriers should omit personal information and distinguish observed failures from inferred causes.

package/docs/macos-quickstart.md

@@ -0,0 +1,40 @@
+# macOS quickstart
+
+Last reviewed: October 27, 2026. Source: [official installation guide](https://code.claude.com/docs/en/setup).
+
+## Prepare
+
+Confirm eligibility first. The official setup page currently lists macOS 13+ and 4 GB+ RAM, with Intel and Apple Silicon support. Keep your operating system updated. Save your project in a folder you control.
+
+## Install
+
+If you already use Homebrew:
+
+```sh
+brew install --cask claude-code
+claude --version
+claude doctor
+```
+
+The official setup page also provides a native installer. Read that page directly before executing its download command. Choose one installation method to make updates easier to understand. Homebrew installations can be updated with `brew upgrade claude-code`.
+
+If a native installation is missing from your PATH, consult the official troubleshooting documentation before changing shell files. Do not use `sudo` to repair a user installation blindly.
+
+## Sign in and verify
+
+Open Terminal in your project directory and run `claude`. Complete the browser sign-in with the account that owns the subscription. In the interactive session, use `/login` to change accounts and `/status` to inspect the active authentication method.
+
+An approved `ANTHROPIC_API_KEY` can select API billing even when you have a subscription. For a subscription session, remove it from the current shell:
+
+```sh
+unset ANTHROPIC_API_KEY
+claude
+```
+
+Then check `/status` again. If it returns after opening a new terminal, review your shell startup files or environment manager locally. Do not paste their contents into a public issue. See [official authentication guidance](https://support.claude.com/en/articles/12304248-manage-api-key-environment-variables-in-claude-code).
+
+## First session
+
+Start with a small request such as explaining a function. Review proposed edits and permissions before granting them. Commit your work regularly. Use the account's available model selector rather than assuming every plan always includes every new model.
+
+For a graphical workflow, follow the Desktop link from the official setup page. Terminal environment variables and graphical app settings can differ; see the network guide.

package/docs/network.md

@@ -0,0 +1,53 @@
+# Network reliability and the “clean IP” question
+
+Last reviewed: October 27, 2026. Technical reference: [official network configuration](https://code.claude.com/docs/en/network-config).
+
+## Define the problem before buying a solution
+
+“Clean IP” is a marketing phrase, not a standardized eligibility certificate. An address can have different reputation scores in different databases. Neither those scores nor a residential address establish that Anthropic will accept an account. This project has no verified threshold that predicts suspension or signup success.
+
+For ordinary troubleshooting, focus on a connection you trust, correctly configured DNS, valid TLS, and a route you can explain to your network administrator. Public IP geolocation databases can disagree. When your actual eligible location is misclassified, request support review with minimal private evidence rather than treating a vendor's country label as definitive.
+
+## Inspect locally
+
+Run `python3 tools/access.py doctor` first. It reports presence of common environment overrides without printing their values. On macOS, you can additionally inspect the system proxy configuration locally:
+
+```sh
+scutil --proxy
+```
+
+Do not publish that raw output: it may reveal internal infrastructure. Browser success does not establish that a terminal process uses the same route. Check which shell and app you launched before changing settings.
+
+## Configure an authorized proxy
+
+For a proxy you operate or your organization provides, use its actual HTTP proxy endpoint in the shell that launches Claude Code:
+
+```sh
+# Example only: replace with your authorized proxy endpoint.
+export HTTPS_PROXY=http://127.0.0.1:8080
+claude
+```
+
+Claude Code documents HTTP/HTTPS proxy variables and does not support SOCKS directly. Restart the relevant terminal session after changing its environment. For Desktop sessions, consult the official page's settings-scope rules rather than assuming shell exports reach every app workflow.
+
+For an enterprise inspection certificate, ask IT for the authorized CA configuration. Keep TLS validation enabled. Do not install an unknown root certificate supplied by an account reseller.
+
+## Test one symptom at a time
+
+Use a request without account credentials to check basic HTTPS behavior:
+
+```sh
+curl -I --connect-timeout 5 --max-time 15 https://claude.ai
+```
+
+This sends your ordinary network metadata, including the connection's source IP, to the destination and any configured proxy. It is optional and is not run by the doctor. An HTTP response establishes only that this request received a response; it does not validate the full login, subscription, API, or streaming path. A 403 alone cannot distinguish account policy from routing or other denials.
+
+| Observation | Investigate next |
+| --- | --- |
+| DNS or connection timeout | Local network, captive portal, proxy endpoint, firewall |
+| Certificate error | Clock, certificate chain, authorized corporate inspection |
+| Browser works, terminal fails | Process-specific proxy and certificate configuration |
+| Login succeeds, model request fails | Authentication, entitlement, service status, actual error |
+| Official region restriction | Eligibility and support review |
+
+Before paying a network vendor, ask who operates the exit, what traffic is logged, whether TLS is intercepted, how credentials are handled, and what refund terms apply. Avoid sellers claiming guaranteed account safety or asking for Claude cookies. A network purchase cannot promise account eligibility.

package/docs/privacy-inspector.md

@@ -0,0 +1,52 @@
+# Client privacy inspector and scoped launchers
+
+Reviewed October 27, 2026. This toolkit borrows the idea of independently inspecting timezone, language, browser identity, and fonts from [Fuck Claude](https://fuck-claude.com/). Its scoring and claims are third-party interpretations, not verified Anthropic enforcement rules. This project does not copy its scoring algorithm or claim that these signals cause a ban.
+
+Each client has its own process and network path. A change applied to Terminal does not necessarily affect Desktop or an existing browser. Nothing here changes the macOS system timezone, system language, global proxy settings, the installed Claude apps, or existing browser profiles.
+
+## 1. Claude Code CLI
+
+```sh
+python3 tools/privacy.py audit
+python3 tools/privacy.py cli --timezone UTC --locale en_US.UTF-8
+# Pass CLI arguments after --, for example:
+python3 tools/privacy.py cli --timezone UTC -- --version
+```
+
+The audit reports the current shell's timezone names and whether known locale, routing, and authentication environment variables are set. It does not print their values. Treat even local timezone output as private. It cannot inspect values in Claude settings, other running processes, system proxies, DNS, or server-side checks.
+
+The launcher starts `claude` with `TZ`, `LANG`, and `LC_ALL` changed only in the new process and its child processes. Select another installed IANA timezone with `--timezone`, and another available locale with `--locale`. An invalid timezone is rejected. Locale availability and application behavior vary. Inherited endpoint, proxy, and authentication variables are preserved; check `/status` for the actual authentication route. Shell hooks, settings files, plugins and background services may affect behavior. In particular, a previously running Claude Code background supervisor can have its own environment.
+
+## 2. Claude Desktop for macOS
+
+```sh
+python3 tools/privacy.py app --timezone UTC --locale en_US.UTF-8
+# If installed under a different name:
+python3 tools/privacy.py app --app '/Applications/Claude.app'
+```
+
+This asks macOS Launch Services to open a new app instance with the specified environment values. Desktop may read OS preferences directly, reuse existing services, or use app-managed settings instead; these process overrides are an experiment, not a verified masking mechanism. Browser-based sign-in runs in its own browser process. Verify Desktop-specific behavior separately and use [official network settings](https://code.claude.com/docs/en/network-config) for network configuration.
+
+## 3. Claude on the web
+
+```sh
+python3 tools/privacy.py web --browser chrome --timezone UTC --language en-US
+# Or use Microsoft Edge:
+python3 tools/privacy.py web --browser edge --timezone UTC --language en-US
+```
+
+The launcher creates a fresh, private browser data directory and opens `https://claude.ai/` in a separate profile. It prints that path locally. The profile can contain login cookies and other sensitive data; it is not deleted automatically. To reuse it, pass `--profile '/absolute/path/printed/earlier'`. Close the browser before manually deleting a profile you no longer need. Browser launches require the chosen browser to be installed.
+
+Open `web/fingerprint.html` in that same browser profile and click **Inspect this browser**. It reports time zone, offset, languages, Intl locale, user agent, platform and a short list of approximate font-width probes. It has no network requests, analytics, WebRTC probes, IP lookup, or persistent storage. Browser, privacy settings, fallbacks and process reuse can change the result. The `--lang` flag is only a requested interface preference; browser `Accept-Language`, `navigator.languages`, and timezone behavior may differ. Verify the actual browser output before relying on it.
+
+The browser launcher requests timezone/locale via Launch Services environment variables, but Chromium or macOS may obtain timezone from the OS or an existing service instead. The browser page is the verification mechanism; the launcher does not patch browser APIs or hide installed fonts. Browser extensions, WebRTC, server-side headers, account state, IP reputation and geolocation are outside this page's visibility.
+
+## What these controls can and cannot do
+
+| Surface | Controls | Verify | Important blind spots |
+| --- | --- | --- | --- |
+| CLI | Child-process timezone and locale | `audit` in the same environment; app-specific behavior separately | Existing background services, settings, server checks |
+| Desktop | Launch Services environment request | App behavior separately | OS settings, app-managed services, browser sign-in |
+| Web | Dedicated browser profile, language and environment requests | Open local inspector in that profile | Server headers, WebRTC, IP, fonts not covered, browser implementation |
+
+These tools do not modify IP addresses, intercept traffic, bypass TLS, spoof account identity, or alter provider rules. A clean local inspection cannot establish access eligibility or account safety. Anthropic's [supported locations](https://support.claude.com/en/articles/8461763-where-can-i-access-claude), [data usage](https://code.claude.com/docs/en/data-usage), and [appeals](https://support.claude.com/en/articles/8241253-safeguards-warnings-and-appeals) are the relevant official references.

package/docs/sources.md

@@ -0,0 +1,21 @@
+# Evidence register
+
+Reviewed October 27, 2026. Official documentation can change; follow live pages before purchasing or changing account settings.
+
+| Topic | Primary source | Used for |
+| --- | --- | --- |
+| Availability | [Where can I access Claude?](https://support.claude.com/en/articles/8461763-where-can-i-access-claude) | Live supported-location list |
+| Installation | [Advanced setup](https://code.claude.com/docs/en/setup) | macOS requirements, install, updates |
+| Subscription access | [Use Claude Code with Pro or Max](https://support.claude.com/en/articles/11145838-use-claude-code-with-your-pro-or-max-plan) | Individual subscription access |
+| Plans | [Pro overview](https://support.claude.com/en/articles/8325606-what-is-the-pro-plan) | Live pricing reference |
+| Billing | [Paid plan billing FAQ](https://support.claude.com/en/articles/8325618-paid-plan-billing-faqs) | Purchase channels and receipts |
+| Cancellation | [Cancel Pro or Max](https://support.claude.com/en/articles/8325617-cancel-your-pro-or-max-subscription) | Timing and purchase-platform management |
+| Authentication | [API key environment variables](https://support.claude.com/en/articles/12304248-manage-api-key-environment-variables-in-claude-code) | Key precedence and billing checks |
+| Networks | [Enterprise network configuration](https://code.claude.com/docs/en/network-config) | Proxy and certificate configuration |
+| Recovery | [Safeguards, warnings, appeals](https://support.claude.com/en/articles/8241253-safeguards-warnings-and-appeals) | Official restriction review |
+| Locked-account billing | [How to get support](https://privacy.claude.com/en/articles/9015913-how-to-get-support) | Cancellation and refund inquiries |
+| Errors | [Installation and authentication troubleshooting](https://support.claude.com/en/articles/14552646-troubleshoot-claude-code-installation-and-authentication) | Callback and entitlement failures |
+
+Use three evidence labels in contributions: **Official** for a directly supported vendor statement; **Observed** for a reproducible observation with date and environment; **Unverified** for a hypothesis. Local privacy and account-management recommendations are this project's guidance, not a claim about Anthropic's private risk systems.
+
+No IP reputation threshold, residential-IP guarantee, account-warming recipe, or permanent “best model” ranking has been verified by this project. Vendor advertising and affiliate anecdotes are not evidence of guaranteed access.

package/docs/subscriptions.md

@@ -0,0 +1,43 @@
+# Subscription playbook
+
+Last reviewed: October 27, 2026.
+
+## Choose a billing route
+
+Individual [Pro and Max subscriptions include Claude Code](https://support.claude.com/en/articles/11145838-use-claude-code-with-your-pro-or-max-plan). Check current limits and model availability before choosing. A higher tier should solve a demonstrated need; keep a short record of how often limits interrupt useful work.
+
+Use the live [Pro overview](https://support.claude.com/en/articles/8325606-what-is-the-pro-plan) and checkout for regional pricing, taxes, and monthly versus annual terms. This repository intentionally does not freeze a global price table.
+
+According to the [billing FAQ](https://support.claude.com/en/articles/8325618-paid-plan-billing-faqs), web subscriptions accept credit or debit cards; app-store purchases are managed by that store. Store availability and payment eligibility require their own checks. An iOS purchase is a separate purchase channel, not a special macOS entitlement or a guarantee of regional access.
+
+## Before checkout
+
+- Verify current eligibility and your intended account.
+- Check whether an active subscription already exists on the web or in an app store.
+- Use accurate billing information and a payment method you are authorized to use.
+- Review the amount, currency, taxes, renewal frequency, and cancellation route.
+- Keep the receipt privately; do not share it with a reseller or public issue.
+
+If a charge is declined, stop repeating attempts. Check the entered details privately, then ask your issuer or the billing provider for the actual failure reason. A decline alone does not prove an IP problem. Do not buy prepaid balances solely on a promise that they will make an ineligible subscription work.
+
+## Keep a private subscription record
+
+Store these fields in your own notes, outside this repository:
+
+```text
+Plan: Pro / Max / organization-provided
+Purchase channel: Web / Apple / Google / employer
+Next billing date: YYYY-MM-DD (confirm in provider UI)
+Amount and currency: as displayed on invoice
+Cancellation location: billing provider
+Receipt location: private storage reference
+Last review: YYYY-MM-DD
+```
+
+The record needs no card number, password, token, or full billing address. Review usage and any separately enabled extra charges before each renewal. A Claude subscription and Console/API billing are distinct; confirm your actual billing route with `/status` when using Code.
+
+## Renewals, cancellation, and refunds
+
+[Official cancellation instructions](https://support.claude.com/en/articles/8325617-cancel-your-pro-or-max-subscription) say to cancel at least 24 hours before the next billing date to avoid the next charge. Manage cancellation through the purchase platform; paid access normally continues to the end of the current period. Confirm the displayed end date and save the confirmation privately.
+
+Use the local reminder tool three or more days ahead to leave time for review. Its date is an estimate you enter, not a live billing lookup. Refunds require a request to the relevant billing provider and are not guaranteed. For a locked account, use [official support](https://privacy.claude.com/en/articles/9015913-how-to-get-support) to ask about cancellation or refund eligibility.

package/docs/troubleshooting.md

@@ -0,0 +1,22 @@
+# Troubleshooting decision table
+
+Use the exact error and the smallest relevant check. Redact screenshots before sharing them.
+
+| Symptom | First check | Next action |
+| --- | --- | --- |
+| `claude` not found | Installation method and PATH | Run the official setup checks |
+| Paid account appears free | Signed-in account and provider receipt | Check the purchase channel before buying again |
+| Unexpected API charges | `/status`, API-key presence | Remove an unintended override; review Console billing |
+| Login callback never completes | Local browser/terminal context | Follow the manual authentication flow in official troubleshooting |
+| TLS failure | System clock and authorized CA setup | Ask IT to fix trust configuration |
+| Browser works, CLI times out | Proxy environment in that shell | Compare process configuration privately |
+| Model unavailable | Current entitlement and selected model | Choose an available model or contact your administrator |
+| Usage limit | Account's displayed limit and reset | Wait for reset or evaluate a tier change |
+| Widespread errors | Official status page | Check incident updates before changing local settings |
+| Region unavailable | Official availability list | Request clarification if apparently misclassified |
+| Account disabled | Restriction notice | Use the official appeal and review billing separately |
+| Payment declined | Checkout details and issuer response | Ask issuer/provider; avoid repeated blind retries |
+
+References: [installation/authentication troubleshooting](https://support.claude.com/en/articles/14552646-troubleshoot-claude-code-installation-and-authentication), [API-key precedence](https://support.claude.com/en/articles/12304248-manage-api-key-environment-variables-in-claude-code), [service status](https://status.claude.com/), and [appeals](https://support.claude.com/en/articles/8241253-safeguards-warnings-and-appeals).
+
+The local doctor does not make network requests or inspect account state. Its successful completion is not a service-health or eligibility result.

package/package.json

@@ -1,6 +1,43 @@
 {
   "name": "claude-access-for-all",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.0",
+  "description": "A macOS guide and local privacy toolkit for Claude Code, Desktop, and web",
+  "license": "MIT",
+  "type": "module",
+  "bin": {
+    "claude-access": "bin/claude-access.js"
+  },
+  "files": [
+    "bin/",
+    "tools/*.py",
+    "web/",
+    "docs/",
+    "README.md",
+    "LICENSE",
+    "SECURITY.md"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "os": [
+    "darwin"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/AMark-CS/claude-access-for-all.git"
+  },
+  "bugs": {
+    "url": "https://github.com/AMark-CS/claude-access-for-all/issues"
+  },
+  "homepage": "https://github.com/AMark-CS/claude-access-for-all#readme",
+  "keywords": [
+    "claude",
+    "claude-code",
+    "macos",
+    "privacy",
+    "cli"
+  ],
+  "scripts": {
+    "test": "node --test tests/cli.test.js && python3 -m unittest discover -s tests -v && python3 tools/check_docs.py"
+  }
+}

package/tools/access.py

@@ -0,0 +1,111 @@
+#!/usr/bin/env python3
+"""Offline environment checks and a one-time subscription review calendar."""
+import argparse
+from datetime import date, datetime, timedelta, timezone
+import json
+import os
+import platform
+import shutil
+import sys
+import uuid
+
+VARIABLES = (
+    'ANTHROPIC_API_KEY', 'ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_BASE_URL',
+    'CLAUDE_CODE_USE_BEDROCK', 'CLAUDE_CODE_USE_VERTEX', 'CLAUDE_CODE_USE_FOUNDRY',
+    'HTTP_PROXY', 'HTTPS_PROXY', 'ALL_PROXY', 'NO_PROXY',
+    'http_proxy', 'https_proxy', 'all_proxy', 'no_proxy',
+    'NODE_EXTRA_CA_CERTS', 'NODE_TLS_REJECT_UNAUTHORIZED',
+)
+
+
+def doctor():
+    """Report presence only; never serialize environment values or local paths."""
+    present = {name: bool(os.environ.get(name)) for name in VARIABLES}
+    warnings = []
+    if platform.system() != 'Darwin':
+        warnings.append('This guide targets macOS; this machine uses another OS.')
+    if not shutil.which('claude'):
+        warnings.append('Claude Code is not on PATH. See docs/macos-quickstart.md.')
+    if any(present[n] for n in ('ANTHROPIC_API_KEY', 'ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_BASE_URL')):
+        warnings.append('Authentication or endpoint overrides are set. Verify /status before use.')
+    if present['ALL_PROXY'] or present['all_proxy']:
+        warnings.append('ALL_PROXY is set; do not assume Claude Code uses it. Check the network guide.')
+    if present['NODE_TLS_REJECT_UNAUTHORIZED']:
+        warnings.append('A TLS validation override is set. Review it privately; keep verification enabled.')
+    return {
+        'mode': 'offline; no network requests; no account eligibility check',
+        'system': platform.system(),
+        'macos_version': platform.mac_ver()[0] if platform.system() == 'Darwin' else None,
+        'architecture': platform.machine(),
+        'claude_on_path': bool(shutil.which('claude')),
+        'environment_set': present,
+        'warnings': warnings,
+        'limitations': 'Does not inspect system proxies, Claude settings, credentials, or billing state.',
+    }
+
+
+def parse_date(value):
+    try:
+        parsed = date.fromisoformat(value)
+        if parsed.isoformat() != value:
+            raise ValueError
+        return parsed
+    except ValueError:
+        raise argparse.ArgumentTypeError('Use a valid date in YYYY-MM-DD format.')
+
+
+def days_before(value):
+    try:
+        number = int(value)
+        if not 1 <= number <= 365:
+            raise ValueError
+        return number
+    except ValueError:
+        raise argparse.ArgumentTypeError('Choose a whole number from 1 to 365.')
+
+
+def reminder(renewal, lead, today=None):
+    """Generate a bounded ASCII RFC 5545 event; all dates are local calendar dates."""
+    today = today or date.today()
+    review = renewal - timedelta(days=lead)
+    if review < today:
+        raise ValueError('Review date is in the past. Choose a later renewal or shorter lead time.')
+    end = review + timedelta(days=1)
+    lines = [
+        'BEGIN:VCALENDAR', 'VERSION:2.0',
+        'PRODID:-//Claude Access for All//Subscription Review//EN',
+        'CALSCALE:GREGORIAN', 'BEGIN:VEVENT',
+        'UID:' + str(uuid.uuid4()) + '@claude-access-for-all',
+        'DTSTAMP:' + datetime.now(timezone.utc).strftime('%Y%m%dT%H%M%SZ'),
+        'DTSTART;VALUE=DATE:' + review.strftime('%Y%m%d'),
+        'DTEND;VALUE=DATE:' + end.strftime('%Y%m%d'),
+        'SUMMARY:Review Claude subscription renewal',
+        'DESCRIPTION:Check billing provider and renewal date before any charge.',
+        'TRANSP:TRANSPARENT', 'BEGIN:VALARM', 'ACTION:DISPLAY',
+        'TRIGGER;RELATED=START:PT9H',
+        'DESCRIPTION:Review Claude subscription in your billing provider.',
+        'END:VALARM', 'END:VEVENT', 'END:VCALENDAR', '',
+    ]
+    return '\r\n'.join(lines)
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    commands = parser.add_subparsers(dest='command', required=True)
+    commands.add_parser('doctor', help='Print an offline JSON report; values stay private.')
+    calendar = commands.add_parser('reminder', help='Print a one-time .ics calendar to stdout.')
+    calendar.add_argument('--renewal', type=parse_date, required=True)
+    calendar.add_argument('--days-before', type=days_before, default=3)
+    args = parser.parse_args()
+    if args.command == 'doctor':
+        print(json.dumps(doctor(), indent=2))
+    else:
+        try:
+            content = reminder(args.renewal, args.days_before)
+        except (ValueError, OverflowError) as exc:
+            parser.error(str(exc))
+        sys.stdout.buffer.write(content.encode('ascii'))
+
+
+if __name__ == '__main__':
+    main()

package/tools/check_docs.py

@@ -0,0 +1,24 @@
+#!/usr/bin/env python3
+"""Check repository-local Markdown targets without network access."""
+from pathlib import Path
+import re
+import sys
+
+root = Path(__file__).resolve().parents[1]
+errors = []
+for path in root.rglob('*.md'):
+    if '.git' in path.parts:
+        continue
+    content = path.read_text()
+    if re.search(r'[\u4e00-\u9fff]', content):
+        errors.append(f'{path.relative_to(root)}: expected English documentation')
+    for match in re.finditer(r'\[[^\]]*\]\(([^)]+)\)', content):
+        target = match.group(1).split('#')[0]
+        if not target or '://' in target or target.startswith('mailto:'):
+            continue
+        if not (path.parent / target).exists():
+            errors.append(f'{path.relative_to(root)}: missing target {target}')
+if errors:
+    print('\n'.join(errors), file=sys.stderr)
+    sys.exit(1)
+print('Local Markdown links and English-documentation checks passed.')

package/tools/privacy.py

@@ -0,0 +1,121 @@
+#!/usr/bin/env python3
+"""Inspect and launch Claude clients with explicit, process-scoped locale settings."""
+import argparse
+import json
+import os
+from pathlib import Path
+import platform
+import re
+import shutil
+import subprocess
+import sys
+import tempfile
+import time
+
+ROUTING = ('ANTHROPIC_BASE_URL', 'HTTP_PROXY', 'HTTPS_PROXY', 'ALL_PROXY', 'NO_PROXY',
+           'http_proxy', 'https_proxy', 'all_proxy', 'no_proxy')
+AUTH = ('ANTHROPIC_API_KEY', 'ANTHROPIC_AUTH_TOKEN')
+
+
+def audit(environ=None):
+    env = os.environ if environ is None else environ
+    return {
+        'scope': 'This terminal process only; not the browser, Desktop app, or server.',
+        'timezone_override_set': bool(env.get('TZ')),
+        'process_timezone_names': list(time.tzname),
+        'locale_overrides_set': {key: bool(env.get(key)) for key in ('LANG', 'LC_ALL', 'LC_TIME')},
+        'routing_overrides_set': {key: bool(env.get(key)) for key in ROUTING},
+        'credential_overrides_set': {key: bool(env.get(key)) for key in AUTH},
+        'claude_on_path': bool(shutil.which('claude')),
+        'system': platform.system(),
+        'limits': 'No network, IP lookup, application inspection, account check, or ban prediction.',
+    }
+
+
+def scoped_environment(source, timezone, locale):
+    env = source.copy()
+    env.update({'TZ': timezone, 'LANG': locale, 'LC_ALL': locale})
+    return env
+
+
+def validate_timezone(value):
+    if value == 'UTC':
+        return value
+    if not re.fullmatch(r'[A-Za-z][A-Za-z0-9_+-]*(/[A-Za-z0-9_+.-]+)+', value):
+        raise argparse.ArgumentTypeError('Use UTC or an IANA timezone such as Europe/London.')
+    path = Path('/usr/share/zoneinfo') / value
+    if not path.is_file():
+        raise argparse.ArgumentTypeError('Timezone is not present in /usr/share/zoneinfo.')
+    return value
+
+
+def validate_locale(value):
+    if not re.fullmatch(r'[A-Za-z0-9_.@-]{1,64}', value):
+        raise argparse.ArgumentTypeError('Use a locale such as en_US.UTF-8.')
+    return value
+
+
+def browser_command(browser, profile, language, timezone, locale):
+    app = {'chrome': 'Google Chrome', 'edge': 'Microsoft Edge'}[browser]
+    return ['/usr/bin/open', '-n', '-a', app, '--env', 'TZ=' + timezone,
+            '--env', 'LANG=' + locale, '--env', 'LC_ALL=' + locale, '--args',
+            '--user-data-dir=' + str(profile), '--lang=' + language, 'https://claude.ai/']
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    sub = parser.add_subparsers(dest='command', required=True)
+    sub.add_parser('audit', help='Show local signal presence without exposing secret values.')
+    for name in ('cli', 'app', 'web'):
+        command = sub.add_parser(name, help='Launch ' + name + ' with process-scoped settings.')
+        command.add_argument('--timezone', type=validate_timezone, default='UTC')
+        command.add_argument('--locale', type=validate_locale, default='en_US.UTF-8')
+        if name == 'cli':
+            command.add_argument('claude_args', nargs=argparse.REMAINDER)
+        if name == 'app':
+            command.add_argument('--app', default='Claude', help='macOS application name or absolute .app path.')
+        if name == 'web':
+            command.add_argument('--browser', choices=('chrome', 'edge'), default='chrome')
+            command.add_argument('--profile', type=Path, help='Existing dedicated profile directory; omit for a new private directory.')
+            command.add_argument('--language', default='en-US', type=validate_locale)
+    args = parser.parse_args()
+    if args.command == 'audit':
+        print(json.dumps(audit(), indent=2))
+        return
+    if sys.platform != 'darwin':
+        parser.error('Launch commands require macOS.')
+    env = scoped_environment(os.environ, args.timezone, args.locale)
+    if args.command == 'cli':
+        executable = shutil.which('claude')
+        if not executable:
+            parser.error('Claude Code was not found on PATH.')
+        extra = args.claude_args
+        if extra and extra[0] == '--':
+            extra = extra[1:]
+        print('Launching Claude Code with process-scoped TZ and locale; see /status for auth.', file=sys.stderr, flush=True)
+        os.execve(executable, [executable, *extra], env)
+    if args.command == 'app':
+        command = ['/usr/bin/open', '-n', '-a', args.app,
+                   '--env', 'TZ=' + args.timezone, '--env', 'LANG=' + args.locale,
+                   '--env', 'LC_ALL=' + args.locale]
+        print('Launching a new app instance; verify actual app behavior independently.', file=sys.stderr, flush=True)
+    else:
+        if args.profile:
+            profile = args.profile.expanduser().resolve()
+            if not profile.is_dir():
+                parser.error('The dedicated browser profile directory must already exist.')
+        else:
+            profile = Path(tempfile.mkdtemp(prefix='claude-access-browser-'))
+        command = browser_command(args.browser, profile, args.language, args.timezone, args.locale)
+        print('Dedicated browser data directory: ' + str(profile), file=sys.stderr, flush=True)
+        print('This directory may contain login data. Keep it private; remove it manually when finished.', file=sys.stderr, flush=True)
+    try:
+        result = subprocess.run(command, env=env, check=False)
+    except OSError as error:
+        parser.error(str(error))
+    if result.returncode:
+        raise SystemExit(result.returncode)
+
+
+if __name__ == '__main__':
+    main()

package/web/fingerprint.css

@@ -0,0 +1 @@
+:root{color-scheme:light;font:16px/1.6 -apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif;background:#f7f6f2;color:#202826}body{margin:0}main{max-width:760px;margin:7vh auto;padding:0 24px 64px}.eyebrow{font-size:.72rem;letter-spacing:.13em;color:#526d60;font-weight:700}h1{font-size:clamp(2.4rem,6vw,4rem);line-height:1.05;letter-spacing:-.04em;margin:22px 0}h2{margin-top:32px}.notice{background:#e8eee9;border-left:4px solid #477760;padding:18px}button{border:0;background:#275b46;color:white;border-radius:8px;padding:13px 20px;font-weight:700;font-size:1rem;cursor:pointer}button:focus-visible{outline:3px solid #bb7c34;outline-offset:3px}dl{display:grid;grid-template-columns:minmax(130px,1fr) 2fr;border-top:1px solid #d5ddd7}dt,dd{padding:12px 0;border-bottom:1px solid #d5ddd7;overflow-wrap:anywhere}dt{font-weight:700}dd{margin:0}.foot{color:#58635d;font-size:.88rem}@media(max-width:520px){dl{display:block}dt{border:0;padding-bottom:0}dd{padding-top:4px}}

package/web/fingerprint.html

@@ -0,0 +1,24 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'self'; style-src 'self'; base-uri 'none'; form-action 'none'">
+<title>Claude Access — Browser Signal Inspector</title>
+<link rel="stylesheet" href="fingerprint.css">
+<script src="fingerprint.js" defer></script>
+</head>
+<body>
+<main>
+  <p class="eyebrow">CLAUDE ACCESS FOR ALL / LOCAL TOOL</p>
+  <h1>Browser signal inspector</h1>
+  <p>See what this browser exposes to a local page. Run it in the same browser and profile you use for Claude.</p>
+  <p class="notice">This is not a Claude account check or a ban prediction. It makes no network requests and cannot see server-side signals, IP reputation, Desktop app state, or Claude's private rules.</p>
+  <button id="scan" type="button">Inspect this browser</button>
+  <div id="status" role="status" aria-live="polite"></div>
+  <section id="results" hidden><h2>Local results</h2><dl id="signals"></dl>
+  <p>Font results are approximate; a blocked or substituted font may look installed. User-agent hints can be absent or reduced. This tool does not query WebRTC, public IP, DNS, or geolocation.</p></section>
+  <p class="foot">Values stay in this page. Avoid sharing screenshots of your results.</p>
+</main>
+</body>
+</html>

package/web/fingerprint.js

@@ -0,0 +1,41 @@
+'use strict';
+
+// This local page intentionally performs no fetch, analytics, STUN, or storage.
+function signals() {
+  const intl = Intl.DateTimeFormat().resolvedOptions();
+  const fonts = ['PingFang SC', 'Microsoft YaHei', 'MiSans', 'HarmonyOS Sans', 'OPPO Sans'];
+  const canvas = document.createElement('canvas');
+  const ctx = canvas.getContext('2d');
+  const sample = '汉字测试ABCwW0123';
+  const bases = ['monospace', 'serif', 'sans-serif'];
+  const measure = font => { ctx.font = `32px ${font}`; return ctx.measureText(sample).width; };
+  const available = ctx ? fonts.filter(name => bases.some(base =>
+    measure(`"${name}",${base}`) !== measure(base))) : [];
+  return [
+    ['Time zone', intl.timeZone || 'Unavailable'],
+    ['UTC offset', String(-new Date().getTimezoneOffset() / 60) + ' hours'],
+    ['Browser languages', (navigator.languages || [navigator.language]).join(', ') || 'Unavailable'],
+    ['Intl locale', intl.locale || 'Unavailable'],
+    ['User agent', navigator.userAgent || 'Unavailable'],
+    ['Platform', navigator.platform || 'Unavailable'],
+    ['Font width probes', ctx ? (available.join(', ') || 'No listed font distinguished from fallbacks') : 'Unavailable'],
+  ];
+}
+
+document.getElementById('scan').addEventListener('click', () => {
+  const list = document.getElementById('signals');
+  list.replaceChildren();
+  try {
+    for (const [name, value] of signals()) {
+      const term = document.createElement('dt');
+      const description = document.createElement('dd');
+      term.textContent = name;
+      description.textContent = value;
+      list.append(term, description);
+    }
+    document.getElementById('results').hidden = false;
+    document.getElementById('status').textContent = 'Inspection complete. Results are local to this page.';
+  } catch (error) {
+    document.getElementById('status').textContent = 'Inspection failed in this browser.';
+  }
+});