claude-access-for-all 0.1.0 → 0.2.0

package/README.md

@@ -57,19 +57,20 @@ Choose an action from the interactive menu, or call one directly:
 ```sh
 claude-access doctor
 claude-access audit
-claude-access cli --timezone UTC
-claude-access app --timezone UTC
-claude-access web --browser chrome --timezone UTC
+claude-access score
+claude-access cli --timezone America/Los_Angeles
+claude-access app --timezone America/Los_Angeles
+claude-access web --browser chrome --timezone America/Los_Angeles
 claude-access inspect
 claude-access reminder --renewal 2026-12-01 --days-before 3 > renewal.ics
 open renewal.ics
 ```
 
-To install directly from GitHub, use `npm install -g github:AMark-CS/claude-access-for-all`. Use `claude-access help` to see the complete command list. `inspect` opens the local graphical browser inspector in your default browser. To check a separate browser profile, open its local file in that profile instead; see the [privacy inspector guide](docs/privacy-inspector.md).
+To install directly from GitHub, use `npm install -g github:AMark-CS/claude-access-for-all`. Use `claude-access help` to see the complete command list. Diagnostics display a readable summary by default. `inspect` opens the local graphical browser inspector in your default browser. To check a separate browser profile, open its local file in that profile instead; see the [privacy inspector guide](docs/privacy-inspector.md).
 
 For the calendar reminder, replace the example date with the next billing date shown by your billing provider. The file contains one all-day review event with an alert; import it into Apple Calendar and check your notification settings. It neither cancels nor renews anything, and must be regenerated when the billing date changes.
 
-The diagnostics run offline and do not print environment-variable values. The scoped launchers request process-local timezone and language settings; Desktop and browsers may behave differently. The browser launcher opens Claude in a separate profile and prints its private data directory. Review the [privacy guide](docs/privacy-inspector.md) for limitations before use.
+The diagnostics run offline and do not print environment-variable values. The `score` command uses the third-party reference weights for timezone and UTC offset only, with its partial denominator and unmeasured browser signals clearly labeled; it is not a ban prediction. Scoped launchers default to the Los Angeles timezone. The scoped launchers request process-local timezone and language settings; Desktop and browsers may behave differently. The browser launcher opens Claude in a separate profile and prints its private data directory. Review the [privacy guide](docs/privacy-inspector.md) for limitations before use.
 
 To run the source version directly without npm, use `python3 tools/access.py doctor` or `python3 tools/privacy.py audit` from a clone. Review the short [source](tools/access.py) before running it.
 

package/bin/claude-access.js

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import { spawnSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
 import { createInterface } from 'node:readline/promises';
 import { fileURLToPath } from 'node:url';
 import { dirname, join } from 'node:path';
@@ -12,6 +13,7 @@ Usage: claude-access [command] [options]
   menu                   Open the interactive menu (default)
   doctor                 Check local installation and configuration presence
   audit                  Inspect CLI environment signals locally
+  score                  Score locally observable timezone signals
   cli [options] [-- ...] Launch Claude Code with scoped locale settings
   app [options]          Launch Claude Desktop with scoped locale settings
   web [options]          Launch Claude in a separate browser profile
@@ -22,8 +24,8 @@ Usage: claude-access [command] [options]
   version                Show the package version
 
 Examples:
-  claude-access cli --timezone UTC -- --version
-  claude-access web --browser edge --timezone UTC
+  claude-access cli --timezone America/Los_Angeles -- --version
+  claude-access web --browser edge --timezone America/Los_Angeles
   claude-access reminder --renewal 2026-12-01 --days-before 3 > renewal.ics
 
 Requires macOS, Node.js 18+, and Python 3.9+. Launching Claude requires the
@@ -46,6 +48,7 @@ function dispatch(command, args = []) {
   switch (command) {
     case 'doctor': return run('python3', [join(root, 'tools/access.py'), 'doctor', ...args]);
     case 'audit': return run('python3', [join(root, 'tools/privacy.py'), 'audit', ...args]);
+    case 'score': return run('python3', [join(root, 'tools/score.py'), ...args]);
     case 'cli': case 'app': case 'web':
       return run('python3', [join(root, 'tools/privacy.py'), command, ...args]);
     case 'reminder': return run('python3', [join(root, 'tools/access.py'), 'reminder', ...args]);
@@ -56,7 +59,7 @@ function dispatch(command, args = []) {
       if (process.platform !== 'darwin') { console.error('The guide launcher requires macOS.'); return 1; }
       return run('/usr/bin/open', ['https://github.com/AMark-CS/claude-access-for-all/blob/main/docs/privacy-inspector.md']);
     case 'help': case '--help': case '-h': console.log(help); return 0;
-    case 'version': case '--version': case '-v': console.log('0.1.0'); return 0;
+    case 'version': case '--version': case '-v': console.log(JSON.parse(readFileSync(join(root, 'package.json'), 'utf8')).version); return 0;
     default: console.error(`Unknown command: ${command}\n\n${help}`); return 2;
   }
 }
@@ -68,10 +71,10 @@ async function menu() {
   }
   const rl = createInterface({ input: process.stdin, output: process.stdout });
   try {
-    console.log(`\nClaude Access for All\n\n  1  Check local environment\n  2  Inspect CLI signals\n  3  Start Claude Code\n  4  Start Claude Desktop\n  5  Start Claude in a separate browser profile\n  6  Open browser signal inspector\n  7  Open the privacy guide\n  8  Create a renewal calendar file\n  0  Exit\n`);
+    console.log(`\nClaude Access for All\n\n  1  Check local environment\n  2  Inspect CLI signals\n  3  Start Claude Code\n  4  Start Claude Desktop\n  5  Start Claude in a separate browser profile\n  6  Open browser signal inspector\n  7  Open the privacy guide\n  8  Create a renewal calendar file\n  9  Score local timezone signals\n  0  Exit\n`);
     const choice = (await rl.question('Choose an option: ')).trim();
     if (choice === '0') return 0;
-    const simple = { '1': 'doctor', '2': 'audit', '3': 'cli', '4': 'app', '6': 'inspect', '7': 'guide' };
+    const simple = { '1': 'doctor', '2': 'audit', '3': 'cli', '4': 'app', '6': 'inspect', '7': 'guide', '9': 'score' };
     if (simple[choice]) { rl.close(); return dispatch(simple[choice]); }
     if (choice === '5') {
       const browser = (await rl.question('Browser (chrome/edge) [chrome]: ')).trim() || 'chrome';
@@ -92,7 +95,7 @@ async function menu() {
       console.log(`Created ${output}. Import it into Calendar and check notification settings.`);
       return 0;
     }
-    console.error('Unknown option. Run the menu again to choose 0–8.');
+    console.error('Unknown option. Run the menu again to choose 0–9.');
     return 2;
   } finally { rl.close(); }
 }

package/docs/privacy-inspector.md

@@ -1,26 +1,30 @@
 # Client privacy inspector and scoped launchers
 
-Reviewed October 27, 2026. This toolkit borrows the idea of independently inspecting timezone, language, browser identity, and fonts from [Fuck Claude](https://fuck-claude.com/). Its scoring and claims are third-party interpretations, not verified Anthropic enforcement rules. This project does not copy its scoring algorithm or claim that these signals cause a ban.
+Reviewed October 27, 2026. This toolkit borrows the idea of independently inspecting timezone, language, browser identity, and fonts from [Fuck Claude](https://fuck-claude.com/). Its scoring and claims are third-party interpretations, not verified Anthropic enforcement rules. The CLI adapts its timezone and offset scoring rules with attribution; the limited result is not a ban prediction. See the bundled [MIT notice](../third-party/FuckClaude-LICENSE.txt).
 
 Each client has its own process and network path. A change applied to Terminal does not necessarily affect Desktop or an existing browser. Nothing here changes the macOS system timezone, system language, global proxy settings, the installed Claude apps, or existing browser profiles.
 
+## Local partial score
+
+Run `claude-access score` in the terminal to score the current process timezone and current UTC offset. The result uses the reference project's 24-point timezone rule and 3-point offset rule. It shows earned points and only the maximum for signals actually available, so it is **not** the reference browser's 100-point score. Other reference signals require a browser and are marked unmeasured; IP, credentials, billing and account state are not checked. A missing timezone is excluded rather than treated as zero. `TZ=America/Los_Angeles claude-access score` checks the requested launcher timezone in a child process, not your existing browser or Desktop application. Rules are third-party heuristics and do not establish an Anthropic enforcement decision.
+
 ## 1. Claude Code CLI
 
 ```sh
 python3 tools/privacy.py audit
-python3 tools/privacy.py cli --timezone UTC --locale en_US.UTF-8
+python3 tools/privacy.py cli --timezone America/Los_Angeles --locale en_US.UTF-8
 # Pass CLI arguments after --, for example:
-python3 tools/privacy.py cli --timezone UTC -- --version
+python3 tools/privacy.py cli --timezone America/Los_Angeles -- --version
 ```
 
 The audit reports the current shell's timezone names and whether known locale, routing, and authentication environment variables are set. It does not print their values. Treat even local timezone output as private. It cannot inspect values in Claude settings, other running processes, system proxies, DNS, or server-side checks.
 
-The launcher starts `claude` with `TZ`, `LANG`, and `LC_ALL` changed only in the new process and its child processes. Select another installed IANA timezone with `--timezone`, and another available locale with `--locale`. An invalid timezone is rejected. Locale availability and application behavior vary. Inherited endpoint, proxy, and authentication variables are preserved; check `/status` for the actual authentication route. Shell hooks, settings files, plugins and background services may affect behavior. In particular, a previously running Claude Code background supervisor can have its own environment.
+The launcher defaults to `America/Los_Angeles` and starts `claude` with `TZ`, `LANG`, and `LC_ALL` changed only in the new process and its child processes. Select another installed IANA timezone with `--timezone`, and another available locale with `--locale`. An invalid timezone is rejected. Locale availability and application behavior vary. Inherited endpoint, proxy, and authentication variables are preserved; check `/status` for the actual authentication route. Shell hooks, settings files, plugins and background services may affect behavior. In particular, a previously running Claude Code background supervisor can have its own environment.
 
 ## 2. Claude Desktop for macOS
 
 ```sh
-python3 tools/privacy.py app --timezone UTC --locale en_US.UTF-8
+python3 tools/privacy.py app --timezone America/Los_Angeles --locale en_US.UTF-8
 # If installed under a different name:
 python3 tools/privacy.py app --app '/Applications/Claude.app'
 ```
@@ -30,9 +34,9 @@ This asks macOS Launch Services to open a new app instance with the specified en
 ## 3. Claude on the web
 
 ```sh
-python3 tools/privacy.py web --browser chrome --timezone UTC --language en-US
+python3 tools/privacy.py web --browser chrome --timezone America/Los_Angeles --language en-US
 # Or use Microsoft Edge:
-python3 tools/privacy.py web --browser edge --timezone UTC --language en-US
+python3 tools/privacy.py web --browser edge --timezone America/Los_Angeles --language en-US
 ```
 
 The launcher creates a fresh, private browser data directory and opens `https://claude.ai/` in a separate profile. It prints that path locally. The profile can contain login cookies and other sensitive data; it is not deleted automatically. To reuse it, pass `--profile '/absolute/path/printed/earlier'`. Close the browser before manually deleting a profile you no longer need. Browser launches require the chosen browser to be installed.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-access-for-all",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "A macOS guide and local privacy toolkit for Claude Code, Desktop, and web",
   "license": "MIT",
   "type": "module",
@@ -14,7 +14,8 @@
     "docs/",
     "README.md",
     "LICENSE",
-    "SECURITY.md"
+    "SECURITY.md",
+    "third-party/"
   ],
   "engines": {
     "node": ">=18"

package/third-party/FuckClaude-LICENSE.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 LinXiaoTao (https://github.com/LinXiaoTao/FuckClaude)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/tools/access.py

@@ -2,13 +2,14 @@
 """Offline environment checks and a one-time subscription review calendar."""
 import argparse
 from datetime import date, datetime, timedelta, timezone
-import json
 import os
 import platform
 import shutil
 import sys
 import uuid
 
+from report import render_doctor
+
 VARIABLES = (
     'ANTHROPIC_API_KEY', 'ANTHROPIC_AUTH_TOKEN', 'ANTHROPIC_BASE_URL',
     'CLAUDE_CODE_USE_BEDROCK', 'CLAUDE_CODE_USE_VERTEX', 'CLAUDE_CODE_USE_FOUNDRY',
@@ -92,13 +93,14 @@ def reminder(renewal, lead, today=None):
 def main():
     parser = argparse.ArgumentParser(description=__doc__)
     commands = parser.add_subparsers(dest='command', required=True)
-    commands.add_parser('doctor', help='Print an offline JSON report; values stay private.')
+    commands.add_parser('doctor', help='Print an offline environment report.')
     calendar = commands.add_parser('reminder', help='Print a one-time .ics calendar to stdout.')
     calendar.add_argument('--renewal', type=parse_date, required=True)
     calendar.add_argument('--days-before', type=days_before, default=3)
     args = parser.parse_args()
     if args.command == 'doctor':
-        print(json.dumps(doctor(), indent=2))
+        result = doctor()
+        print(render_doctor(result))
     else:
         try:
             content = reminder(args.renewal, args.days_before)

package/tools/privacy.py

@@ -1,7 +1,6 @@
 #!/usr/bin/env python3
 """Inspect and launch Claude clients with explicit, process-scoped locale settings."""
 import argparse
-import json
 import os
 from pathlib import Path
 import platform
@@ -12,6 +11,8 @@ import sys
 import tempfile
 import time
 
+from report import render_audit
+
 ROUTING = ('ANTHROPIC_BASE_URL', 'HTTP_PROXY', 'HTTPS_PROXY', 'ALL_PROXY', 'NO_PROXY',
            'http_proxy', 'https_proxy', 'all_proxy', 'no_proxy')
 AUTH = ('ANTHROPIC_API_KEY', 'ANTHROPIC_AUTH_TOKEN')
@@ -65,10 +66,10 @@ def browser_command(browser, profile, language, timezone, locale):
 def main():
     parser = argparse.ArgumentParser(description=__doc__)
     sub = parser.add_subparsers(dest='command', required=True)
-    sub.add_parser('audit', help='Show local signal presence without exposing secret values.')
+    sub.add_parser('audit', help='Show local signals without exposing secret values.')
     for name in ('cli', 'app', 'web'):
         command = sub.add_parser(name, help='Launch ' + name + ' with process-scoped settings.')
-        command.add_argument('--timezone', type=validate_timezone, default='UTC')
+        command.add_argument('--timezone', type=validate_timezone, default='America/Los_Angeles')
         command.add_argument('--locale', type=validate_locale, default='en_US.UTF-8')
         if name == 'cli':
             command.add_argument('claude_args', nargs=argparse.REMAINDER)
@@ -80,7 +81,8 @@ def main():
             command.add_argument('--language', default='en-US', type=validate_locale)
     args = parser.parse_args()
     if args.command == 'audit':
-        print(json.dumps(audit(), indent=2))
+        result = audit()
+        print(render_audit(result))
         return
     if sys.platform != 'darwin':
         parser.error('Launch commands require macOS.')

package/tools/report.py

@@ -0,0 +1,85 @@
+"""Readable, privacy-conscious CLI reports."""
+import os
+import sys
+
+
+def style(text, code):
+    if sys.stdout.isatty() and not os.environ.get('NO_COLOR') and os.environ.get('TERM') != 'dumb':
+        return f'\033[{code}m{text}\033[0m'
+    return text
+
+
+def title(name, subtitle):
+    return [
+        '',
+        '  ' + style('CLAUDE ACCESS', '1;36') + style('  /  ' + name.upper(), '1'),
+        '  ' + style(subtitle, '2'),
+        '',
+    ]
+
+
+def row(label, value):
+    return f'  {label:<20} {value}'
+
+
+def section(name):
+    return '\n  ' + style(name, '1')
+
+
+def group(label, names, values):
+    active = [name for name in names if values.get(name)]
+    if active:
+        return row(label, style('Set', '33') + '  ' + ', '.join(active))
+    return row(label, style('Not set', '2'))
+
+
+def render_doctor(report):
+    env = report['environment_set']
+    system = report['system']
+    if system == 'Darwin':
+        system = 'macOS ' + (report['macos_version'] or '(version unavailable)')
+    lines = title('Environment check', 'Local diagnostic · no network requests')
+    lines += [
+        row('System', system + '  ·  ' + report['architecture']),
+        row('Claude Code', style('Found on PATH', '32') if report['claude_on_path'] else style('Not found on PATH', '33')),
+        section('Environment variables'),
+        group('Authentication', ('ANTHROPIC_API_KEY', 'ANTHROPIC_AUTH_TOKEN'), env),
+        group('Service endpoint', ('ANTHROPIC_BASE_URL',), env),
+        group('Cloud providers', ('CLAUDE_CODE_USE_BEDROCK', 'CLAUDE_CODE_USE_VERTEX', 'CLAUDE_CODE_USE_FOUNDRY'), env),
+        group('Proxy variables', ('HTTP_PROXY', 'HTTPS_PROXY', 'ALL_PROXY', 'NO_PROXY', 'http_proxy', 'https_proxy', 'all_proxy', 'no_proxy'), env),
+        group('TLS settings', ('NODE_EXTRA_CA_CERTS', 'NODE_TLS_REJECT_UNAUTHORIZED'), env),
+        '',
+    ]
+    if report['warnings']:
+        lines.append('  ' + style('Things to review', '1;33'))
+        lines.extend('  • ' + warning for warning in report['warnings'])
+    else:
+        lines.append('  ' + style('No local configuration warnings.', '32'))
+    lines += ['', '  Values are never shown. System proxies, app settings, credentials,',
+              '  billing, account eligibility and network access were not checked.', '']
+    return '\n'.join(lines)
+
+
+def render_audit(report):
+    names = list(dict.fromkeys(name for name in report['process_timezone_names'] if name))
+    tz = ' / '.join(names) if names else 'Unavailable'
+    lines = title('CLI signal audit', 'Current terminal process · offline')
+    lines += [
+        row('System', report['system']),
+        row('Claude Code', style('Found on PATH', '32') if report['claude_on_path'] else style('Not found on PATH', '33')),
+        section('Locale & time'),
+        row('Timezone names', tz),
+        row('TZ override', style('Set', '33') if report['timezone_override_set'] else style('Not set', '2')),
+        group('Locale variables', ('LANG', 'LC_ALL', 'LC_TIME'), report['locale_overrides_set']),
+        section('Connection & authentication'),
+        group('Endpoint & proxies', report['routing_overrides_set'].keys(), report['routing_overrides_set']),
+        group('Credentials', report['credential_overrides_set'].keys(), report['credential_overrides_set']),
+        '',
+        '  Values are never shown. HKT and other abbreviations are timezone names,',
+        '  not proof of an exact location. Browser, Desktop, network, IP and',
+        '  account status were not checked.',
+        '',
+        '  Next: run ' + style('claude-access inspect', '1') + ' to inspect your default browser.',
+        '',
+    ]
+    return '\n'.join(lines)

package/tools/score.py

@@ -0,0 +1,99 @@
+"""Local partial signal score, adapted from LinXiaoTao/FuckClaude (MIT)."""
+import argparse
+import datetime
+import os
+from pathlib import Path
+
+from report import section, style, title
+
+# Based on src/config/signals.ts in LinXiaoTao/FuckClaude, master as reviewed
+# 2026-10-27. Browser-only measurements are deliberately not substituted.
+MAINLAND_ZONES = frozenset(('Asia/Shanghai', 'Asia/Urumqi', 'Asia/Chongqing',
+                            'Asia/Chungking', 'Asia/Harbin', 'Asia/Kashgar'))
+OTHER_ZONES = frozenset(('Asia/Hong_Kong', 'Asia/Macau'))
+
+
+def timezone_name(env=None, localtime='/etc/localtime'):
+    env = os.environ if env is None else env
+    if 'TZ' in env:
+        # POSIX strings and empty values are not necessarily IANA timezones.
+        value = env['TZ'].lstrip(':')
+        if value == 'UTC':
+            return value
+        parts = value.split('/')
+        if len(parts) > 1 and all(part and part not in ('.', '..') for part in parts):
+            if (Path('/usr/share/zoneinfo') / value).is_file():
+                return value
+        return None
+    try:
+        target = str(Path(localtime).resolve(strict=True))
+    except (OSError, RuntimeError):
+        return None
+    marker = '/zoneinfo/'
+    return target.split(marker, 1)[1] if marker in target else None
+
+
+def timezone_weight(name):
+    if name is None:
+        return None
+    if name in MAINLAND_ZONES:
+        return 1.0
+    if name in OTHER_ZONES:
+        return 0.6
+    return 0.0
+
+
+def collect():
+    name = timezone_name()
+    offset = datetime.datetime.now().astimezone().utcoffset()
+    minutes = int(offset.total_seconds() / 60) if offset is not None else None
+    return {'timezone': name, 'offset_minutes': minutes}
+
+
+def render_score(data):
+    name = data['timezone']
+    ratio = timezone_weight(name)
+    minutes = data['offset_minutes']
+    tz_points = None if ratio is None else ratio * 24
+    offset_points = None if minutes is None else (2.1 if minutes == 480 else 0)
+    values = [x for x in (tz_points, offset_points) if x is not None]
+    possible = (24 if tz_points is not None else 0) + (3 if offset_points is not None else 0)
+    points = sum(values)
+    bar_filled = round(points / possible * 24) if possible else 0
+    bar = '█' * bar_filled + '░' * (24 - bar_filled)
+    lines = title('Local signal score', 'Terminal-only snapshot · offline')
+    if possible:
+        lines += ['  ' + style(f'{points:g} / {possible} points', '1;36'),
+                  '  ' + style(bar, '36'),
+                  '  Partial score · available signals only · not a 100-point result', '']
+    else:
+        lines += ['  Score unavailable · no supported signals could be read', '']
+    lines += [section('Measured signals')]
+    lines += [f"  {'Timezone':<16} {(name or 'Unavailable'):<28} " +
+              (f'{tz_points:g} / 24' if tz_points is not None else 'not scored')]
+    if minutes is None:
+        offset_text = 'Unavailable'
+    else:
+        hours, mins = divmod(abs(minutes), 60)
+        offset_text = f"UTC{'+' if minutes >= 0 else '-'}{hours:02d}:{mins:02d}"
+    lines += [f"  {'UTC offset':<16} {offset_text:<28} " +
+              (f'{offset_points:g} / 3' if offset_points is not None else 'not scored')]
+    lines += [section('Not measured'),
+              '  Browser language & Intl locale     Browser fonts & vendor fonts',
+              '  Browser / device identity          WebRTC & emoji rendering',
+              '',
+              '  This is a third-party heuristic, not an Anthropic risk score or',
+              '  ban prediction. It cannot assess IP, billing or account status.',
+              '  Browser signals need a browser; run claude-access inspect.',
+              '  To inspect the launcher timezone, run:',
+              '  TZ=America/Los_Angeles claude-access score', '']
+    return '\n'.join(lines)
+
+
+def main():
+    argparse.ArgumentParser(description=__doc__).parse_args()
+    print(render_score(collect()))
+
+
+if __name__ == '__main__':
+    main()