@alphafox/cli 0.3.12 → 0.3.13

package/README.md

@@ -54,6 +54,32 @@ Locally modified Skills are reported and preserved; use
 `alphafox skills sync --force --yes` only when you intend to replace them.
 Restart the AI tool after a sync.
 
+## Uninstall
+
+This is **not** an `alphafox` subcommand. The script removes the global npm
+package, Agent Skills (including Claude / Cursor / Codex / Grok links), local
+config, login tokens, and Engine backtest caches. It does **not** delete
+server-side traders or account data.
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/alphafoxai/alphafox-cli/main/scripts/uninstall.cjs | node -- --yes
+```
+
+Preview first:
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/alphafoxai/alphafox-cli/main/scripts/uninstall.cjs | node -- --dry-run
+```
+
+From a git checkout:
+
+```bash
+node scripts/uninstall.cjs --dry-run
+node scripts/uninstall.cjs --yes
+```
+
+Restart AI tools afterwards so Skills unload.
+
 ## Quick start
 
 After Method 1 or 2:

package/dist/skills-manifest.json

@@ -1,153 +1,153 @@
 {
   "schemaVersion": 1,
   "packageName": "@alphafox/cli",
-  "packageVersion": "0.3.12",
+  "packageVersion": "0.3.13",
   "contractVersion": "2026-08-13",
-  "bundleHash": "5129a939b6c209ec5e5d1a08ee94fe3c4999c53bd251731314c27de29f8ff5f0",
+  "bundleHash": "6957fd9e293dff1afdc94922f9947590398cff0743f99eba5a2b2abb215df12c",
   "skills": [
     {
       "name": "alphafox",
-      "version": "0.3.12",
+      "version": "0.3.13",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "37dc3b595471e1130662a54d8aed35e12a32222d2f95d3fadf3c9f5636a52ac9",
-          "size": 7415
+          "sha256": "9662240fd4497442711c155723e94ae60a9de84d2f433bbfac81a25d11caf9bd",
+          "size": 7426
         }
       ],
-      "hash": "87347f1a8364fa982399b5641d6ff347c85376425e589ad6581001b1d1fefaac"
+      "hash": "8d4578a474c6063ff13ea22c45f9e2d75c1ab518567e077d838bd1bef6ec566e"
     },
     {
       "name": "alphafox-account",
-      "version": "0.3.12",
+      "version": "0.3.13",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "c4cdac0a980106ad110c306b5248b9b8f325d9de60e50f39d412b40854238a36",
+          "sha256": "74fa3573aa94a54d995f8f78412a06269fc3ef903009f8b7b590f87a23ef2271",
           "size": 784
         }
       ],
-      "hash": "743b0f52a8f707f568c8ba9fba28d648d67d7ed524c6b41b550b9dd8d56434a0"
+      "hash": "3f2644be04b0e3b1b4f4bc9c6f47708cb7576c715d50a8ac6d3ccc7143c75565"
     },
     {
       "name": "alphafox-admin",
-      "version": "0.3.12",
+      "version": "0.3.13",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "6f06d16bd52b3d8651b91b0b6e4dc606d1d98de5827fc5c164f6d23705de3910",
+          "sha256": "7fe8f8aa9f0031c46e3b0f5989eb5964fe0d64fc4be3d3ea187ebd11f8fde729",
           "size": 788
         }
       ],
-      "hash": "ccbca03ae872a794eb950897b8cac4f398014a9c014ac956245c89ffb08bf4f0"
+      "hash": "c0bf71914f23455168a3d7e0471a107f8d92de8c2edb958c4749d61ed413d418"
     },
     {
       "name": "alphafox-auth",
-      "version": "0.3.12",
+      "version": "0.3.13",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "5985bdd0663d806e8ae8ab08d2ef2e1c1aa99b541ff5a5e72b14337eff3f22e6",
+          "sha256": "f76da1d4e97f3bc7d71afe9487de0e87258afc0e5de85e3cee588b656dfcfef7",
           "size": 2371
         }
       ],
-      "hash": "a42814a37f6cddf2e21f6badd1f66254091d734d1210c87cff6e11ea17432241"
+      "hash": "d2fafe541e2be36e4672ad9ee9473113d8f4f4649247148ff5daacc2dfaefd21"
     },
     {
       "name": "alphafox-cache",
-      "version": "0.3.12",
+      "version": "0.3.13",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "9653fe4bc132b2f587a57cebf5c646527faf4f081d51f80645c3be34e952161e",
+          "sha256": "da4cd692abb0e5a62a892b8e8c30cb39c0c77c14ec5f388bdfccf3a692a06d0b",
           "size": 1530
         }
       ],
-      "hash": "e3c8c25d221c5b0574f17d455b2c29d8a8c075c2a007cac4302c0fa47ea1e226"
+      "hash": "bb6ee2004dc699d0392fedefd046520db202fffae856bc665bf6d79b21c2d26f"
     },
     {
       "name": "alphafox-engine-backtest",
-      "version": "0.3.12",
+      "version": "0.3.13",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "1bd19ba3222dd8ab90f69509c8c02db3e2b9ef460c0539816ad83fba396e8e64",
+          "sha256": "fbdf4e90837243fa7c4385e2078b4b80f6a8e0b1df97f5477ef69a9dfb340fef",
           "size": 8278
         }
       ],
-      "hash": "ff899b9199e5ac28ef77f6fc8bf582d341483d0617933f669ca4f9a40e8d5bef"
+      "hash": "d0222abf0dbced2551c049483d8381ff85f8ab36e9b89f44dca65adbaaf301d9"
     },
     {
       "name": "alphafox-exchange",
-      "version": "0.3.12",
+      "version": "0.3.13",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "0dd186a4f7c34b01ad19028da5ecdfe2f15a15e2dc00997e048a7caa54e9d5b2",
+          "sha256": "a82200ac4fd9b1ebb07f2be560f484e4cc39a5b6365b1cf8f09da237206b3b9f",
           "size": 744
         }
       ],
-      "hash": "b2a0a6d2ad588da804bbadfd505b395ecace330732b3be5dcc3110f3c4d0a2eb"
+      "hash": "49168e1b6cf992d1a357dd2e86a1cc2a41466aa3cb0c17cc058ef75027d309bb"
     },
     {
       "name": "alphafox-market",
-      "version": "0.3.12",
+      "version": "0.3.13",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "fba7e2e1a8a474234d984ab9bb99a91d003e8e365c10796687d6f7d8b20319ab",
+          "sha256": "a824b1a49a29cb36f0a9c1d74187420f570137566f3a74f1685a38f7c1023032",
           "size": 3079
         }
       ],
-      "hash": "9e804c4418f4745b18915a4c0b8f7b7ef1a2eb4e5263d43cb5f665523b547425"
+      "hash": "4d5fb1a2e765811c504decf024ab6260969486776b42da1534f977e238ca399b"
     },
     {
       "name": "alphafox-notification",
-      "version": "0.3.12",
+      "version": "0.3.13",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "02fc964294afa9630f220ff9bdaed283df15ddd92d52a9d9e48432072dfe87ed",
+          "sha256": "2425c81589f89db06eb361f61d3bcf817ed862a42d00174d31005385b736b681",
           "size": 699
         }
       ],
-      "hash": "acc77bfbd3f74625e80b4aeabcf2e29ff55eadb9a20a1a421f8be95ab6f2d84b"
+      "hash": "1d2d4243dba2410517c0d5add310709f20a3642bc5206e777bccd200d2fcb7ad"
     },
     {
       "name": "alphafox-shared",
-      "version": "0.3.12",
+      "version": "0.3.13",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "3d9d42c3e63c1f3c524923c9b2c544fe948464e3bf9ea1a7ec898023f68efe7c",
-          "size": 5643
+          "sha256": "895d98df84caa7813ed4083d23124bbb9572a93036578fdbaacb02574c29317d",
+          "size": 5960
         }
       ],
-      "hash": "68affee820b6b6d41d01c0b83cebcd9431fa70eafe975d98736e983d47059d89"
+      "hash": "df50ec696f3b3e4f58cc2f66b2ded0d4dd5b898e2a6aa822eb779f978d04062d"
     },
     {
       "name": "alphafox-strategy",
-      "version": "0.3.12",
+      "version": "0.3.13",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "956198df91f79ae2976d5aed8a5842a9e22c907ecafb28378e89fe5b942ee5c2",
+          "sha256": "ebf636f9d4656f98e9c5ba3ba7c00f0816d5e564dece2fbab3242ccd1138f325",
           "size": 4398
         }
       ],
-      "hash": "58e72dbd185c1fa033aa52c63a79478701e3a75c14583fca13459ad55d9b3622"
+      "hash": "4b4fcc5c20337ab2c50499bd58c33c5c0bf3eb167c48f2a53aa48ab06cedba5a"
     },
     {
       "name": "alphafox-trading",
-      "version": "0.3.12",
+      "version": "0.3.13",
       "files": [
         {
           "path": "SKILL.md",
-          "sha256": "09da55fd6ff864c6fdac0b79e106e62d7c3f083610ae71b4fad38439b529dd91",
+          "sha256": "da1c8504eafcd201b8b0d6a06ab2c3ac19185c03a60c723ef8cb7e1d06213ca8",
           "size": 3123
         }
       ],
-      "hash": "5ae19801df517c9c7f73c7d1b64fe0feeb0790ea660905f0971eea5ae9f209f9"
+      "hash": "154e7456e7abceacff29feeb082365fd81ed528004ebcb7899485a2dfef37f51"
     }
   ]
 }

package/dist/version.d.ts

@@ -1,4 +1,4 @@
 export declare const CLI_NAME = "alphafox";
 export declare const CLI_PACKAGE = "@alphafox/cli";
-export declare const CLI_VERSION = "0.3.12";
+export declare const CLI_VERSION = "0.3.13";
 export { CATALOG_VERSION as CLI_CONTRACT_VERSION } from "./catalog/operations";

package/dist/version.js

@@ -3,6 +3,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.CLI_CONTRACT_VERSION = exports.CLI_VERSION = exports.CLI_PACKAGE = exports.CLI_NAME = void 0;
 exports.CLI_NAME = "alphafox";
 exports.CLI_PACKAGE = "@alphafox/cli";
-exports.CLI_VERSION = "0.3.12";
+exports.CLI_VERSION = "0.3.13";
 var operations_1 = require("./catalog/operations");
 Object.defineProperty(exports, "CLI_CONTRACT_VERSION", { enumerable: true, get: function () { return operations_1.CATALOG_VERSION; } });

package/docs/alphafox-cli-installation-guide.md

@@ -113,3 +113,19 @@ npx @alphafox/cli@latest install
 That wizard installs the CLI globally, verifies and syncs the packaged Skills,
 and may prompt for `alphafox auth login --browser`. It is TTY-oriented.
 Agents must follow Steps 1–4 in this document rather than the wizard.
+
+## Uninstall
+
+Uninstall is a standalone script, not `alphafox uninstall`. After the user
+explicitly asks to uninstall:
+
+```shell
+curl -fsSL https://raw.githubusercontent.com/alphafoxai/alphafox-cli/main/scripts/uninstall.cjs | node -- --dry-run
+curl -fsSL https://raw.githubusercontent.com/alphafoxai/alphafox-cli/main/scripts/uninstall.cjs | node -- --yes
+```
+
+That removes the global `@alphafox/cli` package, Agent Skills under
+`~/.agents/skills` (and Claude / Cursor / Codex / Grok links),
+`~/.config/alphafox`, login tokens, and local Engine backtest caches.
+It does not delete running traders or other server-side data. Ask the user
+to restart the AI tool afterwards. Do not invent a CLI subcommand.

package/docs/release-supply-chain.md

@@ -19,7 +19,7 @@ named `@alphafoxai/cli` (that name was never published; npmjs returns 404).
 | License | MIT |
 | Node | LTS **≥ 20** (`engines.node`) |
 | OS | macOS, Linux, Windows (npm install; no standalone native binary in v1) |
-| Package contents | `bin/`, `dist/`, `skills/`, `README.md`, `docs/`, `LICENSE` |
+| Package contents | `bin/`, `dist/`, `skills/`, `README.md`, `docs/`, `scripts/uninstall.cjs`, `LICENSE` |
 
 v1 does **not** ship independent GitHub Release binaries, so there is no extra
 binary signing/checksum channel. Integrity is npm pack integrity plus
@@ -92,9 +92,9 @@ OIDC-provenance release.
 
 | Platform | Install | Update | Uninstall | Secrets |
 |----------|---------|--------|-----------|---------|
-| macOS | `npm install -g @alphafox/cli` or `npx @alphafox/cli` | `npm update -g @alphafox/cli` or pin `@<version>` | `npm uninstall -g @alphafox/cli` | Keychain Access |
-| Linux | same | same | same | Secret Service, or file fallback mode `0600` |
-| Windows | same | same | same | Credential Manager (`CredWrite`/`CredRead`); file fallback mode `0600` if unavailable |
+| macOS | `npm install -g @alphafox/cli` or `npx @alphafox/cli` | `npm update -g @alphafox/cli` or pin `@<version>` | `scripts/uninstall.cjs` (or `npm uninstall -g @alphafox/cli` plus local Skills/config/cache) | Keychain Access |
+| Linux | same | same | same (`scripts/uninstall.cjs`) | Secret Service, or file fallback mode `0600` |
+| Windows | same | same | same (`scripts/uninstall.cjs`) | Credential Manager (`CredWrite`/`CredRead`); file fallback mode `0600` if unavailable |
 
 Fresh-machine acceptance (release checklist, not optional):
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@alphafox/cli",
-  "version": "0.3.12",
+  "version": "0.3.13",
   "description": "AlphaFox CLI — Agent/Human entry for the public Application API.",
   "type": "commonjs",
   "bin": {
@@ -15,6 +15,7 @@
     "vendor",
     "README.md",
     "docs",
+    "scripts/uninstall.cjs",
     "LICENSE"
   ],
   "scripts": {

package/scripts/uninstall.cjs

@@ -0,0 +1,438 @@
+#!/usr/bin/env node
+"use strict";
+
+const { spawnSync } = require("node:child_process");
+const fs = require("node:fs");
+const os = require("node:os");
+const path = require("node:path");
+const readline = require("node:readline/promises");
+
+const CLI_PACKAGE = "@alphafox/cli";
+const PROFILES = Object.freeze(["production", "staging", "local"]);
+const NPM_TIMEOUT_MS = 120_000;
+const KEYCHAIN_TIMEOUT_MS = 10_000;
+const USAGE_EXIT = 64;
+const UNINSTALL_RAW_URL =
+  "https://raw.githubusercontent.com/alphafoxai/alphafox-cli/main/scripts/uninstall.cjs";
+const UNINSTALL_CURL = `curl -fsSL ${UNINSTALL_RAW_URL} | node -- --yes`;
+const UNINSTALL_DRY_RUN = `curl -fsSL ${UNINSTALL_RAW_URL} | node -- --dry-run`;
+
+function parseUninstallArgs(argv) {
+  let dryRun = false;
+  let yes = false;
+  let help = false;
+  const unknown = [];
+  for (const arg of argv.slice(1)) {
+    if (isLauncherArg(arg)) continue;
+    if (arg === "--dry-run") dryRun = true;
+    else if (arg === "--yes" || arg === "-y") yes = true;
+    else if (arg === "--help" || arg === "-h") help = true;
+    else unknown.push(arg);
+  }
+  return { dryRun, yes, help, unknown };
+}
+
+function isLauncherArg(arg) {
+  return (
+    arg === "-" ||
+    arg === "--" ||
+    arg.endsWith("uninstall.cjs") ||
+    arg.endsWith("uninstall.mjs")
+  );
+}
+
+function uninstallHelpText() {
+  return [
+    "卸载 AlphaFox CLI、Agent Skills、本机配置、登录凭据和回测缓存。",
+    "",
+    "用法：",
+    `  ${UNINSTALL_CURL}`,
+    `  ${UNINSTALL_DRY_RUN}`,
+    "  node scripts/uninstall.cjs [--dry-run|--yes]",
+    "",
+    "不会删除服务器上的策略实例或账户数据。完成后请重启 AI 工具。",
+  ].join("\n");
+}
+
+function homeDir(env) {
+  return env.ALPHAFOX_AGENT_HOME?.trim() || os.homedir();
+}
+
+function isAlphafoxSkillName(name) {
+  return name === "alphafox" || name.startsWith("alphafox-");
+}
+
+function readSkillName(skillMd) {
+  try {
+    const match = fs.readFileSync(skillMd, "utf8").match(
+      /^name:\s*["']?([^"'\s]+)["']?\s*$/m
+    );
+    return match?.[1] ?? null;
+  } catch {
+    return null;
+  }
+}
+
+function lexists(target) {
+  try {
+    fs.lstatSync(target);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function isAlphafoxSkillDir(target) {
+  if (isAlphafoxSkillName(path.basename(target))) return true;
+  const name = readSkillName(path.join(target, "SKILL.md"));
+  return name != null && isAlphafoxSkillName(name);
+}
+
+function skillRoots(env) {
+  const home = homeDir(env);
+  const claudeHome = env.CLAUDE_CONFIG_DIR?.trim() || path.join(home, ".claude");
+  const codexHome = env.CODEX_HOME?.trim() || path.join(home, ".codex");
+  return [
+    env.ALPHAFOX_SKILLS_DIR?.trim() || path.join(home, ".agents", "skills"),
+    path.join(claudeHome, "skills"),
+    path.join(home, ".cursor", "skills"),
+    path.join(codexHome, "skills"),
+    path.join(home, ".grok", "skills"),
+  ];
+}
+
+function configDir(env) {
+  return env.ALPHAFOX_CONFIG_DIR?.trim() || path.join(homeDir(env), ".config", "alphafox");
+}
+
+function tapeCacheDir(env) {
+  return (
+    env.ALPHAFOX_TAPE_CACHE_DIR?.trim() ||
+    path.join(homeDir(env), ".alphafox", "cache", "engine-backtest")
+  );
+}
+
+function runtimeCacheDir(env) {
+  if (env.ALPHAFOX_BACKTEST_RUNTIME_CACHE_DIR?.trim()) {
+    return env.ALPHAFOX_BACKTEST_RUNTIME_CACHE_DIR.trim();
+  }
+  const xdg = env.XDG_CACHE_HOME?.trim();
+  return path.join(xdg || path.join(homeDir(env), ".cache"), "alphafox", "engine-backtest");
+}
+
+function managedPath(target, env) {
+  const resolved = path.resolve(target);
+  const home = path.resolve(homeDir(env));
+  const roots = [
+    home,
+    env.ALPHAFOX_SKILLS_DIR,
+    env.ALPHAFOX_CONFIG_DIR,
+    env.ALPHAFOX_TAPE_CACHE_DIR,
+    env.ALPHAFOX_BACKTEST_RUNTIME_CACHE_DIR,
+    env.XDG_CACHE_HOME,
+    env.CLAUDE_CONFIG_DIR,
+    env.CODEX_HOME,
+  ]
+    .filter(Boolean)
+    .map((root) => path.resolve(root));
+  if (resolved === home || resolved === path.parse(resolved).root) return false;
+  return roots.some(
+    (root) => resolved === root || resolved.startsWith(root + path.sep)
+  );
+}
+
+function assertRemovable(target, env) {
+  const resolved = path.resolve(target);
+  if (!managedPath(resolved, env)) {
+    throw Object.assign(new Error(`Refusing to remove unmanaged path ${resolved}`), {
+      type: "usage",
+      subtype: "uninstall_path_unsafe",
+    });
+  }
+  return resolved;
+}
+
+function collectSkillPaths(env) {
+  const found = [];
+  for (const root of skillRoots(env)) {
+    if (!lexists(root)) continue;
+    let entries;
+    try {
+      entries = fs.readdirSync(root, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const entry of entries) {
+      if (!entry.isDirectory() && !entry.isSymbolicLink()) continue;
+      const target = path.join(root, entry.name);
+      if (isAlphafoxSkillDir(target)) found.push(target);
+    }
+  }
+  return found;
+}
+
+function collectDirPaths(env) {
+  const tape = path.resolve(tapeCacheDir(env));
+  const runtime = path.resolve(runtimeCacheDir(env));
+  const runtimeRoot =
+    path.basename(runtime) === "engine-backtest"
+      ? path.dirname(runtime)
+      : runtime;
+  return [configDir(env), tape, runtimeRoot];
+}
+
+function buildUninstallPlan(env = process.env) {
+  const paths = [...collectSkillPaths(env), ...collectDirPaths(env)]
+    .map((target) => path.resolve(target))
+    .filter((target, index, all) => all.indexOf(target) === index)
+    .filter((target) => lexists(target))
+    .map((target) => ({ kind: "path", path: assertRemovable(target, env) }));
+  return [
+    ...paths,
+    ...PROFILES.map((profile) => ({ kind: "keychain", profile })),
+    { kind: "npm", package: CLI_PACKAGE },
+  ];
+}
+
+function rmdirIfEmpty(dir) {
+  try {
+    fs.rmdirSync(dir);
+  } catch (err) {
+    if (err && (err.code === "ENOENT" || err.code === "ENOTEMPTY")) return;
+    throw err;
+  }
+}
+
+function pruneEmptyParents(target, env) {
+  const home = path.resolve(homeDir(env));
+  let current = path.dirname(path.resolve(target));
+  while (current !== home && current !== path.parse(current).root) {
+    const base = path.basename(current);
+    const parentName = path.basename(path.dirname(current));
+    const alphafoxCache = base === "cache" && parentName === ".alphafox";
+    if (base !== "alphafox" && base !== ".alphafox" && !alphafoxCache) break;
+    rmdirIfEmpty(current);
+    current = path.dirname(current);
+  }
+}
+
+function defaultRunCommand(command, args, options = {}) {
+  const timeout = options.timeoutMs ?? NPM_TIMEOUT_MS;
+  const env = options.env ?? process.env;
+  const platform = options.platform ?? process.platform;
+  const file = platform === "win32" ? "cmd.exe" : command;
+  const argv = platform === "win32" ? ["/c", command, ...args] : args;
+  const result = spawnSync(file, argv, {
+    encoding: "utf8",
+    env: { ...process.env, ...env },
+    timeout,
+    stdio: ["ignore", "pipe", "pipe"],
+  });
+  return {
+    status: result.status,
+    stdout: result.stdout ?? "",
+    stderr: result.stderr ?? "",
+    error: result.error,
+  };
+}
+
+function keychainPlatform(env) {
+  const raw = env.ALPHAFOX_KEYCHAIN_PLATFORM?.trim();
+  if (raw === "darwin" || raw === "linux" || raw === "win32") return raw;
+  return process.platform;
+}
+
+function keychainDeleteArgs(profile, env) {
+  const platform = keychainPlatform(env);
+  const service = `alphafox-cli.${profile}`;
+  if (platform === "darwin") {
+    return {
+      command: "security",
+      args: ["delete-generic-password", "-s", service, "-a", "oauth-tokens"],
+    };
+  }
+  if (platform === "linux") {
+    return {
+      command: env.ALPHAFOX_SECRET_TOOL?.trim() || "secret-tool",
+      args: ["clear", "service", service, "account", "oauth-tokens"],
+    };
+  }
+  return {
+    command: "cmdkey",
+    args: [`/delete:alphafox-cli/${profile}/oauth-tokens`],
+  };
+}
+
+function isMissingSecret(result) {
+  if (result.status === 0) return false;
+  const text = `${result.stdout}\n${result.stderr}`.toLowerCase();
+  return (
+    result.status === 44 ||
+    text.includes("could not be found") ||
+    text.includes("not found") ||
+    text.includes("no such") ||
+    text.includes("cannot find")
+  );
+}
+
+function applyPath(item, env) {
+  fs.rmSync(item.path, { recursive: true, force: true });
+  pruneEmptyParents(item.path, env);
+}
+
+function applyKeychain(item, env, runCommand) {
+  const spec = keychainDeleteArgs(item.profile, env);
+  const result = runCommand(spec.command, spec.args, {
+    env,
+    timeoutMs: KEYCHAIN_TIMEOUT_MS,
+  });
+  if (result.error && result.error.code === "ENOENT") return "skipped";
+  if (result.status === 0) return "removed";
+  if (isMissingSecret(result)) return "skipped";
+  throw new Error(
+    `删除 ${item.profile} 凭据失败：${result.stderr.trim() || result.error || result.status}`
+  );
+}
+
+function applyNpm(env, runCommand) {
+  const result = runCommand("npm", ["uninstall", "-g", CLI_PACKAGE], {
+    env,
+    timeoutMs: NPM_TIMEOUT_MS,
+  });
+  if (result.status === 0 && !result.error) return;
+  throw new Error(
+    `npm uninstall -g ${CLI_PACKAGE} 失败：${(result.stderr || result.stdout).trim() || result.error || result.status}`
+  );
+}
+
+async function confirmUninstall(confirm, isTty) {
+  if (typeof confirm === "function") return confirm();
+  if (!isTty()) return null;
+  const rl = readline.createInterface({
+    input: process.stdin,
+    output: process.stderr,
+  });
+  try {
+    const answer = await rl.question(
+      "将卸载全局 @alphafox/cli、本机 Agent Skills、配置、登录凭据和回测缓存。继续？ [Y/n] "
+    );
+    const token = answer.trim().toLowerCase();
+    return token === "" || token === "y" || token === "yes" || token === "是" || token === "好";
+  } finally {
+    rl.close();
+  }
+}
+
+function describeItem(item) {
+  if (item.kind === "path") return item.path;
+  if (item.kind === "keychain") return `keychain:${item.profile}`;
+  return `npm uninstall -g ${item.package}`;
+}
+
+function applyItem(item, env, runCommand, log) {
+  if (item.kind === "path") {
+    applyPath(item, env);
+    log(`已删除 ${item.path}`);
+    return describeItem(item);
+  }
+  if (item.kind === "keychain") {
+    if (applyKeychain(item, env, runCommand) !== "removed") return null;
+    log(`已删除 ${item.profile} 登录凭据`);
+    return describeItem(item);
+  }
+  applyNpm(env, runCommand);
+  log(`已卸载 ${CLI_PACKAGE}`);
+  return describeItem(item);
+}
+
+function usageError(error, hint) {
+  return { ok: false, exitCode: USAGE_EXIT, error, hint, plan: [], removed: [] };
+}
+
+async function approveUninstall(flags, input, isTty, log) {
+  if (flags.yes) return { ok: true };
+  const approved = await confirmUninstall(input.confirm, isTty);
+  if (approved === true) return { ok: true };
+  if (approved === false) {
+    log("已取消。");
+    return { ok: true, cancelled: true, plan: [], removed: [] };
+  }
+  return usageError("非交互卸载需要 --yes。", UNINSTALL_CURL);
+}
+
+async function runUninstall(input = {}) {
+  const env = input.env ?? process.env;
+  const flags = input.flags ?? parseUninstallArgs(process.argv);
+  const log = input.log ?? ((message) => process.stderr.write(`${message}\n`));
+  const runCommand = input.runCommand ?? defaultRunCommand;
+  const isTty =
+    input.isTty ?? (() => Boolean(process.stdin.isTTY && process.stderr.isTTY));
+
+  if (flags.unknown.length > 0) {
+    return usageError(
+      `未知的 uninstall 参数：${flags.unknown.join(" ")}`,
+      "用法：node scripts/uninstall.cjs [--dry-run|--yes]"
+    );
+  }
+  if (flags.help) {
+    log(uninstallHelpText());
+    return { ok: true, help: true, plan: [], removed: [] };
+  }
+
+  const plan = buildUninstallPlan(env);
+  if (flags.dryRun) {
+    log("这是 --dry-run，不会真正删除：");
+    for (const item of plan) log(`  ${describeItem(item)}`);
+    return { ok: true, dryRun: true, plan, removed: [] };
+  }
+
+  const approval = await approveUninstall(flags, input, isTty, log);
+  if (!approval.ok || approval.cancelled) return approval;
+
+  const removed = [];
+  const errors = [];
+  for (const item of plan) {
+    try {
+      const label = applyItem(item, env, runCommand, log);
+      if (label) removed.push(label);
+    } catch (err) {
+      errors.push(err instanceof Error ? err.message : String(err));
+    }
+  }
+  if (errors.length > 0) return { ok: false, exitCode: 1, plan, removed, errors };
+  log("卸载完成。请重启 AI 工具，以便卸载后的 Skills 生效。");
+  return { ok: true, plan, removed };
+}
+
+async function main() {
+  const result = await runUninstall();
+  if (result.error) process.stderr.write(`${result.error}\n`);
+  if (result.hint) process.stderr.write(`${result.hint}\n`);
+  if (result.errors) {
+    for (const line of result.errors) process.stderr.write(`${line}\n`);
+  }
+  process.exit(result.ok ? 0 : (result.exitCode ?? 1));
+}
+
+if (require.main === module) {
+  main().catch((err) => {
+    process.stderr.write(`${err instanceof Error ? err.message : String(err)}\n`);
+    process.exit(1);
+  });
+}
+
+module.exports = {
+  CLI_PACKAGE,
+  PROFILES,
+  UNINSTALL_CURL,
+  UNINSTALL_DRY_RUN,
+  UNINSTALL_RAW_URL,
+  USAGE_EXIT,
+  buildUninstallPlan,
+  isAlphafoxSkillDir,
+  isAlphafoxSkillName,
+  parseUninstallArgs,
+  runUninstall,
+  skillRoots,
+  uninstallHelpText,
+};

package/skills/account/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-account
 description: Account, wallet, and subscription read paths.
-version: 0.3.12
+version: 0.3.13
 ---
 
 # Account / wallet

package/skills/admin/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-admin
 description: Admin-only operations reusing Web role authorization.
-version: 0.3.12
+version: 0.3.13
 ---
 
 # Admin

package/skills/alphafox/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox
 description: AlphaFox CLI entry router. Use for any AlphaFox request — install, update, login, whoami, 回测, engine backtest, 清理回测缓存 / 历史数据, strategy definitions, create/list/start/stop a running strategy (trader), ticker/标的 resolve (美股 or crypto), market data, exchange connectors, wallet, subscriptions, notifications, or admin. After a successful install and login, present the 新人引导 in this file (Lite square 带单员 + classic strategies). If a CLI command prints `[alphafox] update available`, ask the user「检测到新的版本，是否需要我帮你升级？」and only then run `alphafox update --format json --no-input`. After a large backtest, if tape cache is large, ask「回测下载的历史数据比较大，要不要我帮你清理本地缓存？」then open `alphafox-cache`. Start here, then open the routed domain skill. Do not guess alphafox-engine-backtest vs alphafox-strategy vs alphafox-trading from memory.
-version: 0.3.12
+version: 0.3.13
 ---
 
 # AlphaFox
@@ -18,7 +18,7 @@ A **trader** is a running strategy instance (paper or live), not a person. Creat
 
 | User intent | Skill |
 |---|---|
-| Install, update, Skills status/sync, doctor, version, catalog, how to call the CLI | `alphafox-shared` |
+| Install, update, uninstall, Skills status/sync, doctor, version, catalog, how to call the CLI | `alphafox-shared` |
 | 刚安装完 / 新人引导 / 热门带单员 / 经典策略介绍 | this file, **After install** |
 | Login, logout, whoami, profile, staging vs production | `alphafox-auth` |
 | Ticker / 标的 / 美股 / crypto / resolve a misspelled symbol | `alphafox-market` |
@@ -41,7 +41,7 @@ If several rows apply, load **all** of them (typical: `alphafox-shared` + `alpha
 The CLI may print this on **stderr** at most once every 24 hours:
 
 ```text
-[alphafox] update available: 0.3.11 -> 0.3.12. After the user confirms, run: alphafox update --format json --no-input,
+[alphafox] update available: 0.3.12 -> 0.3.13. After the user confirms, run: alphafox update --format json --no-input,
 ```
 
 If you see that notice (or `updateAvailable: true` from `alphafox update --check`):

package/skills/alphafox-shared/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-shared
 description: Shared AlphaFox CLI rules for Agents — auth, profiles, envelopes, risk gates, and public operationIds only.
-version: 0.3.12
+version: 0.3.13
 ---
 
 # AlphaFox shared Agent contract
@@ -24,6 +24,13 @@ npx @alphafox/cli version --format json --no-input
 npx @alphafox/cli doctor --format json --no-input
 ```
 
+Uninstall is **not** `alphafox uninstall`. After an explicit user request:
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/alphafoxai/alphafox-cli/main/scripts/uninstall.cjs | node -- --dry-run
+curl -fsSL https://raw.githubusercontent.com/alphafoxai/alphafox-cli/main/scripts/uninstall.cjs | node -- --yes
+```
+
 After install, `auth status --verify` shows `session: active`, and the AI tool has restarted, follow skill `alphafox` **After install** (Lite square 带单员 + classic strategies). Do not skip that welcome.
 
 The CLI checks npm at most once every 24 hours and only prints a notice on

package/skills/auth/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-auth
 description: Login, status, logout, whoami, and environment isolation for AlphaFox CLI.
-version: 0.3.12
+version: 0.3.13
 ---
 
 # Auth Skill

package/skills/cache/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-cache
 description: Inspect and clean local Engine backtest caches (downloaded OHLCV tape and wasm runtime). Use when the user asks to 清理缓存, free disk, or after a large historical backtest.
-version: 0.3.12
+version: 0.3.13
 ---
 
 # Cache

package/skills/engine-backtest/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-engine-backtest
 description: Local Engine WASM backtest (alphafox engine-backtest run|sweep) vs catalog experiment CRUD.
-version: 0.3.12
+version: 0.3.13
 ---
 
 # Engine Backtest

package/skills/exchange/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-exchange
 description: Exchange connectors list and connection management via Public API.
-version: 0.3.12
+version: 0.3.13
 ---
 
 # Exchange connectors

package/skills/market/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-market
 description: Market data and ticker resolution for US equity perps, RWAs, and crypto on the same perp catalog. Use when the user names 美股, NVDA, AAPL, BTC, or any 标的. Keep the operator's asset class via symbolMetadata — do not rewrite NVDA into a crypto coin.
-version: 0.3.12
+version: 0.3.13
 ---
 
 # Market

package/skills/notification/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-notification
 description: Notification channels and subscriptions.
-version: 0.3.12
+version: 0.3.13
 ---
 
 # Notification

package/skills/strategy/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-strategy
 description: Strategy definitions — list types, read a definition's contract, and validate config. Creating a running strategy is creating a trader; use alphafox-trading for that. Local Engine backtest is alphafox-engine-backtest.
-version: 0.3.12
+version: 0.3.13
 ---
 
 # Strategy definitions

package/skills/trading/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: alphafox-trading
 description: Running strategies (traders) — create, list, start, and stop. A trader is a live or paper strategy instance (grid, dca, copy, …), not a person.
-version: 0.3.12
+version: 0.3.13
 ---
 
 # Running strategies (traders)