CCBaga

A native macOS, Linux and Windows toolkit for a cleaner workspace and an environment you can verify.

Claude cleanup · Browser fingerprints · System settings · Network Skill

Features · Installation · Updates · Quick start · Architecture · Development · Contributing

CCBaga brings local maintenance and environment setup into one focused desktop workflow. Inspect Claude data before removing it, rotate your companion browser’s fingerprint and restart it, align system settings with a selected region, and compare real browser readings with the machine and network exit.

Two applications work together: CCBaga-A owns native operations; CCBaga-B runs an isolated Fingerprint Chromium profile. Browser measurements return to the cleaner through a local session. Changing a setting and verifying its effect are separate steps.

Features

One region selector. Four everyday actions. Easy setup puts browser cache cleanup, fingerprint rotation, timezone/language reset and Claude cleanup on the same page. The sidebar keeps advanced controls in Network, Claude cleanup, Browser and Computer.

The interface supports English and Chinese, with shared YAML catalogs. Switching the interface language does not change the computer or browser language.

Installation

Platforms: macOS 12 or later on Apple Silicon; Linux x86_64 with GTK 3 and WebKitGTK 4.1; Windows 10/11 x86_64. Intel macOS and Linux ARM64 are not supported.

Linux x86_64 packages include DEB, RPM, AppImage and Arch/pacman formats, with the companion browser included. See Linux setup for installation and platform limits. Official versions are published exclusively by the project owner, liseami.

Windows x86_64 uses one NSIS setup installer containing both A and B. The installer is not Authenticode signed and may show SmartScreen; managed security policy can block it. See Windows setup for installation, toolchains and platform behaviors.

macOS

Download the official installer from GitHub Releases. The distribution package is named CCBaga-<version>-macos-arm64.dmg. It contains both applications:

Download one DMG; it contains both applications. There is no separate browser download. The installer uses the same pixel-art style as this README.

1. Open the disk image and drag both applications into Applications.
2. Launch CCBaga-A. It starts the companion browser automatically.
3. Choose English at the bottom of the sidebar if needed.

Source builds are available through the development guide.

Updates

Use Check for updates at the bottom of CCBaga-A’s sidebar. Startup checks quietly; installation only starts when you choose Update and restart. Downloads show actual progress and are verified before installation. Failed downloads can be retried; a failed restart does not download the update again.

On macOS, in-app updates replace A; use the latest DMG to update both apps. On Windows, a verified NSIS update installs both A and B after closing this companion browser. On Linux, use the package manager or full package.

Quick start

Everyday setup

Open Easy setup, select a country or region, then choose an action. Browser fingerprint rotation closes and restarts CCBaga-B, so save unfinished browser work first. Selecting a region changes language, timezone and regional settings; it does not change your public IP.

Claude cleanup

Open Claude cleanup to scan and review local data. Use cache-only cleanup for regenerable files, login reset for account traces, or select a broader scope explicitly. A folder can also be dropped into the app for a scoped scan.

If Claude is running, the confirmation flow can stop all recognized Claude processes and rescan. The latest scan must be reviewed before deletion. CLI uninstall and reinstall are separate operations and preserve settings, skills, sessions and project files.

[!WARNING] Confirmed cleanup permanently deletes the selected files, including selected existing backups. It does not use Trash, create recovery copies or provide undo. Stopping Claude processes can interrupt unsaved work.

Browser verification

Open Browser or the companion browser’s local test page to measure the actual environment. Checks cover the network exit, country, timezone, language, platform, CPU count, engine version and location settings.

The success page appears only when the measured checks match, the report reaches the cleaner and no measurement error remains. DNS and WebRTC leak checks are not independently verified. A green result describes the measured checks, not a guarantee of anonymity or account acceptance.

Network setup

Open Network for three steps: Get VPS → Get residential proxy → Install Skill. Select General, Codex, Cursor, OpenCode or Copilot, then copy the installation prompt into your local coding agent. The prompt follows the app’s English/Chinese setting.

The Network Skill follows the Agent Skills specification and installs separately from the apps. It supports the npm skills CLI: npx skills add liseami/CCBaga --skill ccbaga-network --global; the AI selects the target tool, uses copy mode on Windows, and disables installer tracking. Give the AI your VPS address, the three matching PEM/PPK/PUB files or downloaded key bundle, and your residential SOCKS5 connection details. It handles file paths, private configuration, commands and checks; you do not need to open a terminal or edit JSON. Missing resources are purchased by you with the AI’s guidance. Remote setup runs only after approval of the actual server changes.

The Skill supports authorized Debian 12/13 servers using root key login on port 22. It checks the SSH identity and fixed SOCKS5 exit, configures Xray/Reality and delivers a private local import file after server self-checks pass. Client setup uses TUN ON, System Proxy OFF and an empty explicit browser proxy; actual TUN/browser verification remains a separate step. The subscription URL uses HTTP and contains credentials; prefer the file retrieved over SSH.

Provider buttons link to DMIT and Webshare. Network setup is optional; local cleanup does not require a VPS or a proxy subscription. The app does not collect SSH keys or proxy credentials and does not deploy to servers.

Architecture

The UI owns inputs and presentation. Rust owns validation, task locks, process identity checks and execution. Small Objective-C bridges call macOS APIs; Rust Linux and Windows boundaries use native process identity checks and platform controls. The browser test page has no Tauri command access; it exchanges context and measurements through a random-token loopback session.

assets/             Compressed brand logos and pixel-art DMG background
src/                Desktop UI, browser test page and localization
src-tauri/src/      Rust commands and transaction boundaries
src-tauri/native/   Small macOS API bridges
browser-runtime/    Engine metadata, launcher, entitlements and licenses
scripts/            Icons, local builds and installation helpers
skills/             Installable AI Network Skill and its execution scripts
packaging/arch/     Native Arch Linux PKGBUILD and desktop entry
docs/               README artwork and platform development guides
vendor/cromma-ui/   Vendored interface components

Development

Prerequisites

On Linux, follow Linux setup. On macOS, use an Apple Silicon Mac with Xcode Command Line Tools, stable Rust and Bun. Follow Tauri’s macOS prerequisites for the native toolchain.

The browser engine is an external build input. python3 scripts/fetch-browser.py downloads the pinned macOS arm64 Fingerprint Chromium 148.0.7778.215 engine from the upstream project, verifies its SHA-256 and preserves its bundle structure and notices. Browser runtime binaries are not included in the source repository.

From your checkout:

bun install --frozen-lockfile
python3 scripts/fetch-browser.py
sh scripts/make-icons.sh
sh scripts/package-browser.sh
bun run tauri dev

Local builds are for development and testing; they are not official project downloads.

Fast local build and install (macOS)

bun run dev:install

This builds a debug app with the embedded UI, uses local ad-hoc signatures and installs/starts both apps. It does not use Apple credentials or create an installer. It preserves profiles and settings. The development installer accepts only locally built debug apps; downloaded installers still require the normal signature and Gatekeeper checks.

Build

MACOSX_DEPLOYMENT_TARGET=12.0 \
  bun run tauri build --bundles app --features custom-protocol

The cleaner bundle is written to src-tauri/target/release/bundle/macos/CCBaga-A.app. The companion bundle remains at browser-runtime/Browser.app until copied to Applications as CCBaga-B.app.

Production builds require custom-protocol to load the embedded UI. Compilation without it fails explicitly, preventing an installed app from depending on the development server.

Checks

bun run build
bun test
MACOSX_DEPLOYMENT_TARGET=12.0 \
  cargo test --manifest-path src-tauri/Cargo.toml
python3 scripts/test-sign-browser.py
python3 skills/ccbaga-network/scripts/test_network.py
bash -n skills/ccbaga-network/scripts/setup-vps.sh

Pull requests run the existing frontend, native Rust, offline Skill and npm skill-installation checks on Ubuntu, macOS and Windows, plus the relevant platform regression tests. The workflow uses a read-only token, no signing secrets and no artifact uploads; it does not publish releases or download the browser engine. Complete engine and installer validation remains part of the separate delivery checks.

Automated tests exercise disposable fixtures and local test servers. They do not deploy a real VPS, delete your Claude account data or perform administrator-authorized system changes. Real SSH connectivity, client-side TUN routing and permission-dependent operations require validation in the target environment.

Data & permissions

• Cleanup is local. It targets recognized Claude data; project source, skills, plugins, hooks, commands and MCP settings are preserved. Cloud-side account records are outside its scope.
• Secrets stay out of UI logs. The apps have no SSH key picker or server deployment command. Keychain cleanup reads item attributes, not password contents. The separate Skill uses private local files and temporary private PEM copies (0600 on POSIX, verified user-only NTFS ACLs on Windows); data supplied to your coding agent is subject to that agent provider’s handling.
• Network checks make real requests. Exit detection uses ipwho.is with ipapi.co as a fallback on the same route. IP location is a service estimate.
• Remote changes are explicit. The separate Skill contacts only the VPS you provide after server-change approval. Required credentials remain in private local/server configuration, outside Git and public logs.
• Permissions are feature-specific. Timezone changes require macOS administrator authorization. Keychain access follows system prompts. Location controls may require Accessibility permission or a manual action in System Settings.

Custom CLAUDE_CONFIG_DIR locations are not automatically included in the default cleanup scan. The app reports this limitation rather than silently claiming they were cleaned.

Contributing

Start with CONTRIBUTING.md. Small, focused changes with clear behavior and relevant checks are welcome. For bug reports, include the operating system and version, app version, operation and sanitized error; never attach private keys, passwords or subscription URLs.

License & credits

CCBaga’s original project code is released under the MIT License. Third-party code and binaries retain their own terms; see NOTICE.md.

Built with Tauri, React and Fingerprint Chromium, with a native macOS implementation of Claude maintenance workflows. Cleanup discovery was informed by the claude-cleanup skill.