CCBaga

English · 简体中文

A native macOS, Linux and Windows toolkit for a cleaner workspace and an environment you can verify.

Claude identities · Browser fingerprints · System settings · Network Skill

Features · Installation · Updates · Quick start · Usage guide · Architecture · Development · Contributing

Intended use: CCBaga is intended solely for people residing or traveling abroad to manage their own Claude identities. Use that violates Anthropic's official terms of service is prohibited.

CCBaga brings local maintenance and environment setup into one focused desktop workflow. Inspect Claude data before removing it, rotate your companion browser's fingerprint and restart it, align system settings with a selected region, and compare real browser readings with the machine and network exit.

Two applications work together: CCBaga-A owns native operations; CCBaga-B runs an isolated Fingerprint Chromium profile. Browser measurements return to the host through a local session. Changing a setting and verifying its effect are separate steps.

One region selector. Four everyday actions. Easy setup puts browser cache cleanup, fingerprint rotation, timezone/language reset and identity archiving on the same page. The sidebar keeps advanced controls in Network, Claude identities, Browser and Computer.

The interface supports English and Chinese, with shared YAML catalogs. Switching the interface language does not change the computer or browser language.

The bilingual Usage guide covers common actions and data boundaries. See the full guide.

Platforms: macOS 12 or later on Apple Silicon; Linux x86_64 with GTK 3 and WebKitGTK 4.1; Windows 10/11 x86_64. Intel macOS and Linux ARM64 are not supported.

Linux x86_64 packages include DEB, RPM and AppImage built on Ubuntu 22.04 (glibc 2.35), plus a separate package for current Arch/pacman systems. All include the companion browser. See Linux setup for installation and platform limits. Official versions are published exclusively by the project owner, liseami.

Windows x86_64 uses one NSIS setup installer containing both A and B. The installer is not Authenticode signed and may show SmartScreen; managed security policy can block it. See Windows setup for installation, toolchains and platform behaviors.

Download the official installer from GitHub Releases. The distribution package is named CCBaga-<version>-macos-arm64.dmg. It contains both applications:

Download one DMG; it contains both applications. There is no separate browser download. The installer uses the same pixel-art style as this README.

1. Open the disk image and drag both applications into Applications.
2. Launch CCBaga-A. It starts the companion browser automatically.
3. Choose English at the bottom of the sidebar if needed.

Source builds are available through the development guide.

Use Check for updates at the bottom of CCBaga-A’s sidebar. Startup checks quietly; installation only starts when you choose Update and restart. Downloads show actual progress and are verified before installation. Failed downloads can be retried; a failed restart does not download the update again.

On macOS, in-app updates replace A; use the latest DMG to update both apps. On Windows, a verified NSIS update installs both A and B after closing this companion browser. On Linux, use the package manager or full package.

Open Easy setup, select a country or region, then choose an action. Browser fingerprint rotation closes and restarts CCBaga-B, so save unfinished browser work first. Selecting a region changes language, timezone and regional settings; it does not change your public IP.

Open Claude identities to manage the local state of both Claude Code and Claude Desktop. Choose Empty identity to archive the current state before leaving a fresh workspace, or choose a saved identity to restore it. Every switch saves the outgoing identity first.

Expand Keep in workspace to choose retention for skills and commands, plugins, MCP configuration, personal settings, project records, conversation history, and caches/logs. Login data always moves with an archived identity. Project source outside Claude's own data directories is not scanned. A confirmation names the outgoing identity and summarizes what stays in the workspace before closing recognized Claude processes.

Portrait identity cards scroll horizontally with spring motion and subtle hover tilt. The white empty identity stays first, followed by the current local account with available name, email and organization information. Save backup / Update backup saves the selected current state while retaining the workspace, sign-in and browser binding. Empty identity archives the outgoing state before leaving a fresh workspace. Select a saved card to restore that identity. Direct delete removes selected current data without creating an archive; deleting a saved card removes only that archive. Both deletion actions require an explicit confirmation.

Saved cards support password-protected Export / Import between devices with the same operating system. Import adds a saved identity without switching or overwriting existing accounts. Optional fingerprint settings exclude browser cookies, passwords and proxy settings; see transfer limits. Local plan/expiry badges are metadata, not server authentication results.

A local SQLite database tracks names, policies and recovery state. Data is compressed into an authenticated, encrypted .baga container outside Claude's working directories. Archive verification precedes workspace changes; failed switches roll back, and an interrupted switch exposes recovery. Recovery also saves the pre-recovery state. Ordinary archive tools cannot open this container directly; filesystem ownership or administrator access is not an absolute secrecy boundary.

Expired or revoked server-side logins may need authentication again. The app manages the default local directories, not every custom Claude profile. The program-maintenance controls uninstall or reinstall Claude Code without removing the identity vault.

Open Browser or the companion browser's local test page to measure the actual environment. Checks cover the network exit, country, timezone, language, platform, CPU count, engine version and location settings.

Clear cache retains sign-ins and personal browser data. Clear all browser data permanently resets the current identity's entire browser profile, including saved passwords, encryption metadata, bookmarks, history, extensions, settings and website sessions. It requires a separate confirmation and creates no backup. Other identities' profiles and the identity vault are retained; the selected fingerprint configuration applies when the browser opens again.

The success page appears only when the measured checks match, the report reaches the cleaner and no measurement error remains. DNS and WebRTC leak checks are not independently verified. A green result describes the measured checks, not a guarantee of anonymity or account acceptance.

Open Network for three steps: Get VPS → Get residential proxy → Install Skill. Select General, Codex, Cursor, OpenCode or Copilot, then copy the installation prompt into your local coding agent. The prompt follows the app's English/Chinese setting.

The Network Skill follows the Agent Skills specification and installs separately from the apps. It supports the npm skills CLI: npx skills add liseami/CCBaga --skill ccbaga-network --global; the AI selects the target tool, uses copy mode on Windows, and disables installer tracking. Give the AI your VPS address, the three matching PEM/PPK/PUB files or downloaded key bundle, and your residential SOCKS5 connection details. It handles file paths, private configuration, commands and checks; you do not need to open a terminal or edit JSON. Missing resources are purchased by you with the AI's guidance. Remote setup runs only after approval of the actual server changes.

The Skill supports authorized Debian 12/13 servers using root key login on port 22. It checks the SSH identity and fixed SOCKS5 exit, configures Xray/Reality and delivers a private local import file after server self-checks pass. Client setup uses TUN ON, System Proxy OFF and an empty explicit browser proxy; actual TUN/browser verification remains a separate step. The subscription URL uses HTTP and contains credentials; prefer the file retrieved over SSH.

Provider buttons link to DMIT and Webshare. Network setup is optional; local cleanup does not require a VPS or a proxy subscription. The app does not collect SSH keys or proxy credentials and does not deploy to servers.

The UI owns inputs and presentation. Rust owns validation, task locks, process identity checks and execution. Small Objective-C bridges call macOS APIs; Rust Linux and Windows boundaries use native process identity checks and platform controls. The browser test page has no Tauri command access; it exchanges context and measurements through a random-token loopback session.

assets/             Compressed brand logos and pixel-art DMG background
src/                Desktop UI, browser test page and localization
src-tauri/src/      Rust commands and transaction boundaries
src-tauri/native/   Small macOS API bridges
browser-runtime/    Engine metadata, launcher, entitlements and licenses
scripts/            Icons, local builds and installation helpers
skills/             Installable AI Network Skill and its execution scripts
packaging/arch/     Native Arch Linux PKGBUILD and desktop entry
docs/               README artwork and platform development guides
vendor/cromma-ui/   Vendored interface components

On Linux, follow Linux setup. On macOS, use an Apple Silicon Mac with Xcode Command Line Tools, stable Rust and Bun. Follow Tauri's macOS prerequisites for the native toolchain.

The browser engine is an external build input. python3 scripts/fetch-browser.py downloads the pinned macOS arm64 Fingerprint Chromium 148.0.7778.215 engine from the upstream project, verifies its SHA-256 and preserves its bundle structure and notices. Browser runtime binaries are not included in the source repository.

From your checkout:

bun install --frozen-lockfile
python3 scripts/fetch-browser.py
sh scripts/make-icons.sh
sh scripts/package-browser.sh
bun run tauri dev

Local builds are for development and testing; they are not official project downloads.

bun run dev:install

This builds a debug app with the embedded UI, uses local ad-hoc signatures and installs/starts both apps. It does not use Apple credentials or create an installer. It preserves profiles and settings. The development installer accepts only locally built debug apps; downloaded installers still require the normal signature and Gatekeeper checks.

MACOSX_DEPLOYMENT_TARGET=12.0 \
  bun run tauri build --bundles app --features custom-protocol

The host bundle is written to src-tauri/target/release/bundle/macos/CCBaga-A.app. The companion bundle remains at browser-runtime/Browser.app until copied to Applications as CCBaga-B.app.

Production builds require custom-protocol to load the embedded UI. Compilation without it fails explicitly, preventing an installed app from depending on the development server.

bun run build
bun test
MACOSX_DEPLOYMENT_TARGET=12.0 \
  cargo test --manifest-path src-tauri/Cargo.toml
python3 scripts/test-sign-browser.py
python3 skills/ccbaga-network/scripts/test_network.py
bash -n skills/ccbaga-network/scripts/setup-vps.sh

Pull requests run the existing frontend, native Rust, offline Skill and npm skill-installation checks on Ubuntu, macOS and Windows, plus the relevant platform regression tests. The workflow uses a read-only token, no signing secrets and no artifact uploads; it does not publish releases or download the browser engine. Complete engine and installer validation remains part of the separate delivery checks.

The identity UI simulation uses 40 fictitious accounts, mocked Tauri IPC and an isolated headless context with external requests blocked. It covers card navigation, retention choices, switching, irreversible-delete alerts, failure recovery and both languages. Run bun run test:identities with Node.js 22.23.2 or later after preparing the pinned browser engine. The browser receives a temporary HOME/XDG configuration. Native archive tests use temporary SQLite databases and files; the macOS credential bridge is also checked against a separate disposable Keychain.

Automated tests exercise disposable fixtures and local test servers. They do not deploy a real VPS, delete your Claude account data or perform administrator-authorized system changes. Real SSH connectivity, client-side TUN routing and permission-dependent operations require validation in the target environment.

• Identities are local. Login state is archived before switching. You choose which personal data stays in the workspace and which is stored with the identity. Actual project source and cloud-side account records are outside this scope.
• Secrets stay out of UI logs. The apps have no SSH key picker or server deployment command. After explicit confirmation, the native identity vault reads only the recognized default Claude credentials needed for restoration; credential contents never enter the GUI, command-line arguments or network. The separate Skill uses private local files and temporary private PEM copies (0600 on POSIX, verified user-only NTFS ACLs on Windows); data supplied to your coding agent is subject to that agent provider’s handling.
• Network checks make real requests. Exit detection uses ipwho.is with ipapi.co as a fallback on the same route. IP location is a service estimate.
• Remote changes are explicit. The separate Skill contacts only the VPS you provide after server-change approval. Required credentials remain in private local/server configuration, outside Git and public logs.
• Permissions are feature-specific. Timezone changes require macOS administrator authorization. Keychain access follows system prompts. Location controls may require Accessibility permission or a manual action in System Settings.

Custom CLAUDE_CONFIG_DIR locations are not automatically included in the default identity scope. The app reports this limitation rather than silently claiming they were switched.

Start with CONTRIBUTING.md. Small, focused changes with clear behavior and relevant checks are welcome. For bug reports, include the operating system and version, app version, operation and sanitized error; never attach private keys, passwords or subscription URLs.

CCBaga's original project code is released under the MIT License. Third-party code and binaries retain their own terms; see NOTICE.md.

Built with Tauri, React and Fingerprint Chromium, with a native macOS implementation of Claude maintenance workflows. Cleanup discovery was informed by the claude-cleanup skill.