@sealant/mend 0.25.0 → 0.26.0

package/dist/main.js

@@ -21,11 +21,11 @@ import {
 
 // src/main.ts
 import { spawn as spawn3, spawnSync as spawnSync2 } from "node:child_process";
-import * as fs8 from "node:fs";
+import * as fs9 from "node:fs";
 import { createRequire } from "node:module";
 import * as net3 from "node:net";
 import * as os6 from "node:os";
-import * as path9 from "node:path";
+import * as path10 from "node:path";
 
 // src/agent-share.ts
 import * as net from "node:net";
@@ -1213,6 +1213,30 @@ var COMMANDS = [
     description: ["Other terminals and devices keep their own tokens."],
     see: ["login"]
   },
+  {
+    name: "uninstall",
+    section: "this machine",
+    summary: "remove the server, this machine's Mend files, or both",
+    synopsis: ["[--all | --server | --home] [--yes]"],
+    description: [
+      "Asks which scope to remove when none is given, prints exactly what will go, and requires the word delete before the server is touched. The server scope removes the local Compose installation: its containers, every volume it owns (repositories, worktrees, the database), its release image, and the private configuration with its generations and backups. The home scope revokes this terminal's device token, then removes cli.json, the workspace SSH key, and the managed block in ~/.ssh/config.",
+      "Nothing else under the configuration directory is touched; a host-run store or keys root is listed and left in place. Workspace containers carry no label Mend can filter on, so they are named with the command that removes them, never removed."
+    ],
+    options: [
+      { flag: "--all", text: "the server and this machine's Mend files" },
+      { flag: "--server", text: "only the local server installation" },
+      { flag: "--home", text: "only this machine's sign-in, ssh key and config block" },
+      { flag: "--yes", text: "skip the confirmation; required without a terminal" }
+    ],
+    examples: [
+      { command: "mend uninstall", text: "choose a scope, then confirm" },
+      {
+        command: "mend uninstall --home --yes",
+        text: "forget this machine's sign-in without asking"
+      }
+    ],
+    see: ["server stop", "logout"]
+  },
   {
     name: "completions",
     section: "this machine",
@@ -4009,6 +4033,26 @@ var removeManagedBlock = (config, beginMarker, endMarker) => {
   }
   return success(`${config.slice(0, begin)}${after}`);
 };
+var stripManagedWorkspaceSshBlocks = (existing) => {
+  let config = existing;
+  let removed = 0;
+  const aliases = [
+    ...config.matchAll(/^# >>> mend workspace ssh (mend-ws-[a-z0-9-]+) \(managed\) >>>$/gm)
+  ].map((match) => match[1]).filter((alias) => alias !== void 0);
+  for (const alias of new Set(aliases)) {
+    const stripped = removeManagedBlock(config, blockBegin(alias), blockEnd(alias));
+    if (!stripped.ok) return stripped;
+    config = stripped.value;
+    removed += 1;
+  }
+  if (config.includes(LEGACY_BLOCK_BEGIN)) {
+    const stripped = removeManagedBlock(config, LEGACY_BLOCK_BEGIN, LEGACY_BLOCK_END);
+    if (!stripped.ok) return stripped;
+    config = stripped.value;
+    removed += 1;
+  }
+  return success({ config, removed });
+};
 var containsExactHost = (config, alias) => config.split("\n").some((line) => {
   const match = /^\s*Host\s+(.+?)\s*$/i.exec(line);
   return match?.[1]?.split(/\s+/).includes(alias) === true;
@@ -4353,22 +4397,315 @@ var sshCommand = async (args, api2, cliHome, serverUrl) => {
   }
 };
 
+// src/uninstall.ts
+import * as fs8 from "node:fs";
+import * as path9 from "node:path";
+var UNINSTALL_USAGE = "usage: mend uninstall [--all | --server | --home] [--yes]";
+var parseUninstallArgs = (args) => {
+  let scope = null;
+  let yes = false;
+  for (const arg of args) {
+    if (arg === "--yes" || arg === "-y") {
+      yes = true;
+      continue;
+    }
+    const next = arg === "--all" ? "all" : arg === "--server" ? "server" : arg === "--home" ? "home" : null;
+    if (next === null) return { error: `${UNINSTALL_USAGE} \xB7 "${arg}" is not an option` };
+    if (scope !== null && scope !== next) {
+      return { error: `${UNINSTALL_USAGE} \xB7 pick one scope` };
+    }
+    scope = next;
+  }
+  return { scope, yes };
+};
+var SERVER_FILES = ["identity.env", "active", "generations", "backups"];
+var countEntries = (directory) => {
+  try {
+    return fs8.readdirSync(directory).length;
+  } catch {
+    return 0;
+  }
+};
+var exists = (file) => {
+  try {
+    fs8.lstatSync(file);
+    return true;
+  } catch {
+    return false;
+  }
+};
+var managedBlockCount = (sshConfigFile) => {
+  let config;
+  try {
+    config = fs8.readFileSync(sshConfigFile, "utf8");
+  } catch {
+    return 0;
+  }
+  const stripped = stripManagedWorkspaceSshBlocks(config);
+  return stripped.ok ? stripped.value.removed : 0;
+};
+var describeUninstall = async (runtime, scope) => {
+  let server = null;
+  if (scope !== "home") {
+    const configDir = runtime.server.configDir;
+    const read = await withServerStore(
+      configDir,
+      async (store) => {
+        const installation = readServerInstallation(store);
+        if (installation._tag === "error") throw installation.error;
+        return installation.value;
+      },
+      { create: false }
+    );
+    if (read._tag === "error") {
+      if (!read.error.message.startsWith("No Mend server is configured")) throw read.error;
+      server = "none";
+    } else if (read.value === null) {
+      server = exists(path9.join(configDir, "identity.env")) ? {
+        version: "(no active generation)",
+        appUrl: "",
+        dockerContext: "",
+        generations: countEntries(path9.join(configDir, "generations")),
+        backups: countEntries(path9.join(configDir, "backups"))
+      } : "none";
+    } else {
+      server = {
+        version: read.value.config.serverVersion,
+        appUrl: read.value.config.appUrl,
+        dockerContext: read.value.config.dockerContext,
+        generations: countEntries(path9.join(configDir, "generations")),
+        backups: countEntries(path9.join(configDir, "backups"))
+      };
+    }
+  }
+  let home = null;
+  if (scope !== "server") {
+    const cliConfig = path9.join(runtime.cliHome, "cli.json");
+    const sshDirectory = path9.join(runtime.cliHome, "ssh");
+    home = {
+      cliConfig: exists(cliConfig) ? cliConfig : null,
+      sshDirectory: exists(sshDirectory) ? sshDirectory : null,
+      managedSshBlocks: managedBlockCount(runtime.sshConfigFile),
+      signedIn: runtime.signedIn
+    };
+  }
+  return { scope, server, home };
+};
+var plural = (count, noun) => `${count} ${noun}${count === 1 ? "" : "s"}`;
+var planLines = (plan, configDir) => {
+  const lines = [];
+  if (plan.server === "none") {
+    lines.push(`server   none installed under ${configDir}`);
+  } else if (plan.server !== null) {
+    const { version, appUrl, dockerContext, generations, backups } = plan.server;
+    lines.push(
+      `server   Mend ${version}${appUrl === "" ? "" : ` at ${appUrl}`}${dockerContext === "" ? "" : ` \xB7 docker context ${dockerContext}`}`
+    );
+    if (dockerContext !== "") {
+      lines.push(
+        `         containers mend, postgres \xB7 volumes ${[MEND_DOCKER_NAMESPACE.store, MEND_DOCKER_NAMESPACE.control, "mend-config", "mend-ssh", "mend-postgres"].join(", ")} \xB7 image ghcr.io/sealant-sh/mend:${version}`
+      );
+    }
+    lines.push(
+      `         ${configDir}: identity.env, active, ${plural(generations, "generation")}, ${plural(backups, "backup")}`
+    );
+  }
+  if (plan.home !== null) {
+    const parts = [];
+    if (plan.home.cliConfig !== null) {
+      parts.push(
+        plan.home.signedIn === null ? plan.home.cliConfig : `${plan.home.cliConfig} (signed in to ${plan.home.signedIn.url})`
+      );
+    }
+    if (plan.home.sshDirectory !== null) parts.push(plan.home.sshDirectory);
+    if (plan.home.managedSshBlocks > 0) {
+      parts.push(`${plural(plan.home.managedSshBlocks, "managed block")} in ~/.ssh/config`);
+    }
+    lines.push(parts.length === 0 ? "home     nothing of Mend's here" : `home     ${parts[0]}`);
+    for (const part of parts.slice(1)) lines.push(`         ${part}`);
+  }
+  return lines;
+};
+var planDeletesData = (plan) => plan.server !== null && plan.server !== "none";
+var dockerArgs = (context, ...rest) => [
+  "--context",
+  context,
+  ...rest
+];
+var removeServer = async (runtime, failures, leftovers) => {
+  const { server } = runtime;
+  const configDir = server.configDir;
+  const result = await withServerStore(
+    configDir,
+    async (store) => {
+      const read = readServerInstallation(store);
+      if (read._tag === "error") throw read.error;
+      const installation = read.value;
+      if (installation !== null) {
+        const context = installation.config.dockerContext;
+        const down = await server.run(
+          "docker",
+          serverComposeArgs({ directory: installation.directory, dockerContext: context }, [
+            "down",
+            "--volumes",
+            "--remove-orphans",
+            "--timeout",
+            "30"
+          ]),
+          { timeoutMs: serverProcessDeadlines.stop }
+        );
+        if (down.status !== 0) {
+          throw new Error(
+            `docker compose down failed: ${(down.error ?? down.stderr.trim()) || "no output"}. Containers and files are retained; fix Docker and run mend uninstall again.`
+          );
+        }
+        server.writeLine("removed containers mend, postgres and the Compose-owned volumes");
+        const identity = store.readIdentity();
+        if (identity._tag === "error") throw identity.error;
+        const owned = identity.value === null ? null : await verifyServerDockerVolumes(server, {
+          dockerContext: context,
+          identityBytes: Buffer.from(identity.value)
+        });
+        if (owned !== null && owned._tag === "ok") {
+          const removed = await server.run(
+            "docker",
+            dockerArgs(
+              context,
+              "volume",
+              "rm",
+              MEND_DOCKER_NAMESPACE.store,
+              MEND_DOCKER_NAMESPACE.control
+            )
+          );
+          if (removed.status === 0) {
+            server.writeLine(
+              `removed volumes ${MEND_DOCKER_NAMESPACE.store}, ${MEND_DOCKER_NAMESPACE.control}`
+            );
+          } else {
+            failures.push(
+              `could not remove volumes ${MEND_DOCKER_NAMESPACE.store}, ${MEND_DOCKER_NAMESPACE.control}: ${(removed.error ?? removed.stderr.trim()) || "no output"}`
+            );
+          }
+        } else if (owned !== null && owned.error.reason === "missing") {
+          server.writeLine(
+            `volumes ${MEND_DOCKER_NAMESPACE.store}, ${MEND_DOCKER_NAMESPACE.control} were already gone`
+          );
+        } else {
+          leftovers.push(
+            `volumes ${MEND_DOCKER_NAMESPACE.store}, ${MEND_DOCKER_NAMESPACE.control}: ownership could not be confirmed for this installation, so they stay (docker --context ${context} volume ls)`
+          );
+        }
+        const image = `ghcr.io/sealant-sh/mend:${installation.config.serverVersion}`;
+        const untagged = await server.run("docker", dockerArgs(context, "image", "rm", image));
+        if (untagged.status === 0) server.writeLine(`removed image ${image}`);
+        else leftovers.push(`image ${image}: not removed (${untagged.stderr.trim() || "absent"})`);
+        const workspaces = await server.run(
+          "docker",
+          dockerArgs(
+            context,
+            "container",
+            "ls",
+            "--all",
+            "--filter",
+            "name=^sealant-",
+            "--format",
+            "{{.Names}}"
+          )
+        );
+        const names = workspaces.stdout.split(/\s+/).filter((name) => name !== "");
+        if (workspaces.status === 0 && names.length > 0) {
+          leftovers.push(
+            `${plural(names.length, "workspace container")} left on docker context ${context} (${names.slice(0, 3).join(", ")}${names.length > 3 ? ", \u2026" : ""}): docker --context ${context} rm -f ${names.join(" ")}`
+          );
+        }
+      }
+      for (const name of SERVER_FILES) {
+        fs8.rmSync(path9.join(configDir, name), { recursive: true, force: true });
+      }
+      server.writeLine(`removed ${configDir}/{identity.env, active, generations, backups}`);
+    },
+    { create: false }
+  );
+  if (result._tag === "error") failures.push(result.error.message);
+};
+var removeHome = async (runtime, plan, failures, leftovers) => {
+  const { server } = runtime;
+  if (plan.cliConfig !== null) {
+    fs8.rmSync(plan.cliConfig, { force: true });
+    server.writeLine(`removed ${plan.cliConfig}`);
+  }
+  if (plan.sshDirectory !== null) {
+    fs8.rmSync(plan.sshDirectory, { recursive: true, force: true });
+    server.writeLine(`removed ${plan.sshDirectory}`);
+  }
+  if (plan.managedSshBlocks > 0) {
+    try {
+      const before = fs8.readFileSync(runtime.sshConfigFile, "utf8");
+      const stripped = stripManagedWorkspaceSshBlocks(before);
+      if (!stripped.ok) throw stripped.error;
+      if (stripped.value.removed > 0) {
+        fs8.writeFileSync(runtime.sshConfigFile, stripped.value.config, { mode: 384 });
+        server.writeLine(
+          `removed ${plural(stripped.value.removed, "managed block")} from ${runtime.sshConfigFile}`
+        );
+      }
+    } catch (cause) {
+      failures.push(
+        `${runtime.sshConfigFile}: ${cause instanceof Error ? cause.message : String(cause)}`
+      );
+    }
+  }
+  let remaining = [];
+  try {
+    remaining = fs8.readdirSync(runtime.cliHome);
+  } catch {
+    return;
+  }
+  if (remaining.length === 0) {
+    fs8.rmdirSync(runtime.cliHome);
+    server.writeLine(`removed ${runtime.cliHome}`);
+  } else {
+    leftovers.push(
+      `${runtime.cliHome} kept: ${remaining.join(", ")} ${remaining.length === 1 ? "is" : "are"} not this CLI's (a host-run server's store or keys, or another tool's files)`
+    );
+  }
+};
+var executeUninstall = async (runtime, plan) => {
+  const failures = [];
+  const leftovers = [];
+  if (plan.home?.signedIn !== null && plan.home?.signedIn?.deviceId != null) {
+    const failure2 = await runtime.revokeDevice();
+    if (failure2 === null) {
+      runtime.server.writeLine(`revoked this terminal's device on ${plan.home.signedIn.url}`);
+    } else {
+      leftovers.push(
+        `device token on ${plan.home.signedIn.url}: ${failure2} (end it under Settings \u2192 Devices)`
+      );
+    }
+  }
+  if (plan.server !== null && plan.server !== "none") {
+    await removeServer(runtime, failures, leftovers);
+  }
+  if (plan.home !== null) await removeHome(runtime, plan.home, failures, leftovers);
+  return { failures, leftovers };
+};
+
 // src/main.ts
 var mendCliHome = () => {
   const xdg = process.env["XDG_CONFIG_HOME"];
-  const preferred = path9.join(
-    xdg === void 0 || xdg === "" ? path9.join(os6.homedir(), ".config") : xdg,
+  const preferred = path10.join(
+    xdg === void 0 || xdg === "" ? path10.join(os6.homedir(), ".config") : xdg,
     "mend"
   );
-  const legacy = path9.join(os6.homedir(), ".mend");
-  return !fs8.existsSync(preferred) && fs8.existsSync(legacy) ? legacy : preferred;
+  const legacy = path10.join(os6.homedir(), ".mend");
+  return !fs9.existsSync(preferred) && fs9.existsSync(legacy) ? legacy : preferred;
 };
-var CONFIG_PATH = path9.join(mendCliHome(), "cli.json");
+var CONFIG_PATH = path10.join(mendCliHome(), "cli.json");
 var loadConfig = () => {
   let fileConfig = {};
-  if (fs8.existsSync(CONFIG_PATH)) {
+  if (fs9.existsSync(CONFIG_PATH)) {
     try {
-      fileConfig = JSON.parse(fs8.readFileSync(CONFIG_PATH, "utf8"));
+      fileConfig = JSON.parse(fs9.readFileSync(CONFIG_PATH, "utf8"));
     } catch {
       fail4(`could not parse ${CONFIG_PATH}`);
     }
@@ -4505,7 +4842,7 @@ var adopt = async (config, args) => {
   }
   const sourceIssue = repositoryCloneUrlIssue(source);
   if (sourceIssue !== null) return fail4(sourceIssue);
-  const projectName = name ?? normalizeProjectName(path9.basename(source, ".git"));
+  const projectName = name ?? normalizeProjectName(path10.basename(source, ".git"));
   const auth = authFlagIndex !== -1 && args[authFlagIndex + 1] !== void 0 ? String(args[authFlagIndex + 1]) : null;
   if (auth !== null && auth !== "ambient" && auth !== "mend-key" && auth !== "bridge") {
     return fail4(`--auth takes "ambient", "mend-key", or "bridge", not "${auth}"`);
@@ -4550,7 +4887,7 @@ var findProject = async (config, explicit, adoptCwd = false) => {
   const sourceIssue = repositoryCloneUrlIssue(facts.originUrl);
   if (sourceIssue !== null) return fail4(sourceIssue);
   const adopted = await api(config, "POST", "/projects", {
-    name: normalizeProjectName(path9.basename(facts.repoRoot)),
+    name: normalizeProjectName(path10.basename(facts.repoRoot)),
     source: facts.originUrl
   });
   say4(`${green4("\u2713")} adopted \xB7 ${adopted.name} \xB7 ${dim4(adopted.storePath)}`);
@@ -5341,13 +5678,13 @@ var serviceRestart = async (config, args) => {
 };
 var serviceInit = async (args) => {
   const root = gitTopLevel(process.cwd()) ?? process.cwd();
-  const target = path9.join(root, "mend.toml");
-  if (fs8.existsSync(target)) {
+  const target = path10.join(root, "mend.toml");
+  if (fs9.existsSync(target)) {
     return fail4(`${target} already exists \u2014 edit it directly (init never merges)`);
   }
-  const rootFiles = fs8.readdirSync(root);
+  const rootFiles = fs9.readdirSync(root);
   const proposals = [];
-  const readRoot = (name) => fs8.readFileSync(path9.join(root, name), "utf8");
+  const readRoot = (name) => fs9.readFileSync(path10.join(root, name), "utf8");
   if (rootFiles.includes("package.json")) {
     proposals.push(...proposeFromPackageJson(readRoot("package.json"), rootFiles));
   }
@@ -5357,13 +5694,13 @@ var serviceInit = async (args) => {
   );
   for (const glob of globs) {
     const parent = glob.replace(/\/?\*+$/, "");
-    const dirs = glob.endsWith("*") ? fs8.existsSync(path9.join(root, parent)) ? fs8.readdirSync(path9.join(root, parent)).map((dir) => path9.join(parent, dir)) : [] : [glob];
+    const dirs = glob.endsWith("*") ? fs9.existsSync(path10.join(root, parent)) ? fs9.readdirSync(path10.join(root, parent)).map((dir) => path10.join(parent, dir)) : [] : [glob];
     for (const dir of dirs) {
-      const manifest = path9.join(root, dir, "package.json");
-      if (!fs8.existsSync(manifest)) continue;
+      const manifest = path10.join(root, dir, "package.json");
+      if (!fs9.existsSync(manifest)) continue;
       for (const proposal of proposeFromWorkspacePackage(
-        path9.basename(dir),
-        fs8.readFileSync(manifest, "utf8"),
+        path10.basename(dir),
+        fs9.readFileSync(manifest, "utf8"),
         rootFiles
       )) {
         if (!proposals.some((existing) => existing.name === proposal.name)) {
@@ -5407,7 +5744,7 @@ var serviceInit = async (args) => {
       return;
     }
   }
-  fs8.writeFileSync(target, toml);
+  fs9.writeFileSync(target, toml);
   say4(`${green4("\u2713")} wrote ${target} \u2014 commit it, then: mend service run ${proposals[0]?.name}`);
 };
 var tunnelServices = async (config, services, portOverride) => {
@@ -5500,18 +5837,18 @@ var serviceCommand = async (config, args) => {
   }
 };
 var isProvider = (value) => value === "claude" || value === "codex" || value === "github";
-var readIfExists = (file) => fs8.existsSync(file) ? fs8.readFileSync(file, "utf8") : null;
+var readIfExists = (file) => fs9.existsSync(file) ? fs9.readFileSync(file, "utf8") : null;
 var localCredential = (provider) => {
   const home = os6.homedir();
   switch (provider) {
     case "codex":
       return readIfExists(
-        path9.join(process.env["CODEX_HOME"] ?? path9.join(home, ".codex"), "auth.json")
+        path10.join(process.env["CODEX_HOME"] ?? path10.join(home, ".codex"), "auth.json")
       );
     case "claude":
       return readIfExists(
-        path9.join(
-          process.env["CLAUDE_CONFIG_DIR"] ?? path9.join(home, ".claude"),
+        path10.join(
+          process.env["CLAUDE_CONFIG_DIR"] ?? path10.join(home, ".claude"),
           ".credentials.json"
         )
       );
@@ -5565,7 +5902,7 @@ var connectCommand = async (config, args) => {
   }
   let secret;
   if (flags.includes("--from-stdin")) {
-    secret = fs8.readFileSync(0, "utf8").trim();
+    secret = fs9.readFileSync(0, "utf8").trim();
     if (secret === "") return fail4("nothing on stdin");
   } else {
     secret = localCredential(provider);
@@ -5586,14 +5923,14 @@ var takeFlagValue3 = (args, flag) => {
   return at !== -1 && args[at + 1] !== void 0 ? String(args[at + 1]) : null;
 };
 var saveCliConfig = (next) => {
-  fs8.mkdirSync(path9.dirname(CONFIG_PATH), { recursive: true, mode: 448 });
-  fs8.writeFileSync(
+  fs9.mkdirSync(path10.dirname(CONFIG_PATH), { recursive: true, mode: 448 });
+  fs9.writeFileSync(
     CONFIG_PATH,
     `${JSON.stringify({ url: next.url, token: next.token, deviceId: next.deviceId }, null, 2)}
 `,
     { mode: 384 }
   );
-  fs8.chmodSync(CONFIG_PATH, 384);
+  fs9.chmodSync(CONFIG_PATH, 384);
 };
 var login = async (config, args) => {
   await loginCommand(args, {
@@ -5606,7 +5943,7 @@ var login = async (config, args) => {
   });
 };
 var logout = async (config) => {
-  if (!fs8.existsSync(CONFIG_PATH) && config.token === null) {
+  if (!fs9.existsSync(CONFIG_PATH) && config.token === null) {
     say4(dim4("nothing saved \u2014 already signed out"));
     return;
   }
@@ -5621,6 +5958,80 @@ var logout = async (config) => {
   saveCliConfig({ ...config, token: null, deviceId: null });
   say4(`${green4("\u2713")} signed out \xB7 ${dim4(`token removed from ${CONFIG_PATH}`)}`);
 };
+var UNINSTALL_CHOICES = [
+  { scope: "all", text: "everything \xB7 the server on this machine and this machine's Mend files" },
+  { scope: "server", text: "the server only \xB7 containers, volumes, configuration, backups" },
+  {
+    scope: "home",
+    text: "this machine's files only \xB7 sign-in, workspace ssh key, ~/.ssh/config block"
+  }
+];
+var askUninstallScope = async () => {
+  if (process.stdin.isTTY !== true || process.stdout.isTTY !== true) {
+    return fail4(`${UNINSTALL_USAGE} \xB7 no terminal to ask on`);
+  }
+  say4("what should go?");
+  UNINSTALL_CHOICES.forEach((choice, index) => say4(`  ${index + 1}. ${choice.text}`));
+  const readline = await import("node:readline/promises");
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  const answer = (await rl.question("  1, 2 or 3: ")).trim();
+  rl.close();
+  const chosen = UNINSTALL_CHOICES[Number(answer) - 1];
+  if (chosen === void 0) return fail4(`"${answer}" is not one of the choices`);
+  return chosen.scope;
+};
+var confirmUninstall = async (word) => {
+  if (process.stdin.isTTY !== true) return fail4("non-interactive \u2014 pass --yes to remove");
+  const readline = await import("node:readline/promises");
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  const answer = (await rl.question(word === "y" ? "remove? [y/N] " : `type ${word} to remove: `)).trim().toLowerCase();
+  rl.close();
+  return answer === word;
+};
+var uninstallCommand = async (config, args) => {
+  const parsed = parseUninstallArgs(args);
+  if ("error" in parsed) return fail4(parsed.error);
+  const scope = parsed.scope ?? await askUninstallScope();
+  const server = nodeServerRuntime();
+  const runtime = {
+    server,
+    cliHome: mendCliHome(),
+    sshConfigFile: path10.join(os6.homedir(), ".ssh", "config"),
+    signedIn: config.token === null || !fs9.existsSync(CONFIG_PATH) ? null : { url: config.url, deviceId: config.deviceId },
+    revokeDevice: async () => {
+      if (config.deviceId === null) return "no device id saved";
+      try {
+        await request(config, "DELETE", `/me/devices/${config.deviceId}`);
+        return null;
+      } catch (error) {
+        return error instanceof Error ? error.message : String(error);
+      }
+    }
+  };
+  const plan = await describeUninstall(runtime, scope);
+  say4(dim4(`mend uninstall \xB7 ${scope === "all" ? "everything" : scope}`));
+  for (const line of planLines(plan, server.configDir)) say4(`  ${line}`);
+  const nothing = (plan.server === null || plan.server === "none") && (plan.home === null || plan.home.cliConfig === null && plan.home.sshDirectory === null && plan.home.managedSshBlocks === 0);
+  if (nothing) {
+    say4(dim4("nothing to remove"));
+    return;
+  }
+  if (planDeletesData(plan)) {
+    say4("repositories, worktrees, the database and its backups are deleted with the server");
+  }
+  if (!parsed.yes && !await confirmUninstall(planDeletesData(plan) ? "delete" : "y")) {
+    say4(dim4("nothing removed"));
+    return;
+  }
+  const outcome = await executeUninstall(runtime, plan);
+  for (const line of outcome.leftovers) say4(dim4(`  kept \xB7 ${line}`));
+  if (outcome.failures.length > 0) {
+    return fail4(outcome.failures.join("\n"));
+  }
+  say4(
+    `${green4("\u2713")} ${scope === "all" ? "Mend is gone from this machine" : scope === "server" ? "the server is gone from this machine" : "this machine no longer holds Mend files"}`
+  );
+};
 var printGitKey = (key) => {
   if (key.publicKey === null) return;
   say4(key.publicKey);
@@ -5795,10 +6206,10 @@ var envLoad = async (config, args) => {
   const positional = args.filter(
     (arg, i) => !arg.startsWith("--") && args[i - 1] !== "--project" && !consumed.has(i)
   );
-  const file = path9.resolve(positional[0] ?? ".env");
+  const file = path10.resolve(positional[0] ?? ".env");
   let contents;
   try {
-    contents = fs8.readFileSync(file, "utf8");
+    contents = fs9.readFileSync(file, "utf8");
   } catch {
     return fail4(`cannot read ${file} \u2014 pass a path: mend env load path/to/.env`);
   }
@@ -5814,10 +6225,10 @@ var envLoad = async (config, args) => {
     { contents, allSecret, secretNames }
   );
   if (report.loaded.length === 0 && report.rejected.length === 0 && report.malformedLines.length === 0) {
-    say4(dim4(`${path9.basename(file)} has no variables`));
+    say4(dim4(`${path10.basename(file)} has no variables`));
     return;
   }
-  say4(`${green4("\u2713")} loaded ${path9.basename(file)} into ${project2.name}`);
+  say4(`${green4("\u2713")} loaded ${path10.basename(file)} into ${project2.name}`);
   for (const line of formatLoadReport(report, { dim: dim4, warn: amber })) say4(line);
   const plaintextUrls = report.loaded.filter(
     (entry) => entry.lane === "configuration" && /_(URL|URI|DSN)$/.test(entry.name)
@@ -6006,7 +6417,7 @@ var skillsList = async (config, args) => {
 };
 var skillsPush = async (config, args) => {
   const dirFlag = takeFlagValue3(args, "--dir");
-  const root = dirFlag === null ? path9.join(os6.homedir(), DEFAULT_SKILLS_DIR) : path9.resolve(dirFlag);
+  const root = dirFlag === null ? path10.join(os6.homedir(), DEFAULT_SKILLS_DIR) : path10.resolve(dirFlag);
   const scanned = scanSkillLibrary(root);
   if ("error" in scanned) return fail4(scanned.error);
   for (const note of scanned.notes) say4(dim4(`  ${note.skill}: ${note.message}`));
@@ -6076,6 +6487,7 @@ _mend() {
     'shell:open a shell in a live session workspace'
     'service:reachable ports \u2014 add, list, stop'
     'server:local server setup, lifecycle and upgrades'
+    'uninstall:remove the server, local Mend files, or both'
     'keys:the machine Mend deploy key \u2014 init, show, share'
     'skills:skill libraries \u2014 list, push'
     'accounts:your connected accounts on the platform'
@@ -6115,7 +6527,7 @@ _mend "$@"
 var BASH_COMPLETIONS = `_mend() {
   local cur=\${COMP_WORDS[COMP_CWORD]}
   if [ "$COMP_CWORD" -eq 1 ]; then
-    COMPREPLY=( $(compgen -W "adopt codex claude opencode run attach stop shell service server keys skills pair doctor continue resume rejoin refresh projects sessions status ui help" -- "$cur") )
+    COMPREPLY=( $(compgen -W "adopt codex claude opencode run attach stop shell service server uninstall keys skills pair doctor continue resume rejoin refresh projects sessions status ui help" -- "$cur") )
     return
   fi
   case \${COMP_WORDS[1]} in
@@ -6720,10 +7132,10 @@ var manCommand = (words) => {
   }
   const version = cliVersion();
   const page = doc === null ? renderManIndex(version) : renderManPage(doc, version);
-  const file = path9.join(os6.tmpdir(), `mend-man-${process.pid}-${manFileName(doc)}`);
-  fs8.writeFileSync(file, page);
+  const file = path10.join(os6.tmpdir(), `mend-man-${process.pid}-${manFileName(doc)}`);
+  fs9.writeFileSync(file, page);
   const result = spawnSync2("man", ["-l", file], { stdio: "inherit" });
-  fs8.rmSync(file, { force: true });
+  fs9.rmSync(file, { force: true });
   if (result.error !== void 0 || result.status !== 0) {
     say4(doc === null ? renderIndex() : renderCommand(doc));
   }
@@ -6760,6 +7172,8 @@ var main = async () => {
       return login(config, rest);
     case "logout":
       return logout(config);
+    case "uninstall":
+      return uninstallCommand(config, rest);
     case "keys":
       return keysCommand(config, rest);
     case "dotfiles":

package/man/mend-accounts.1

@@ -1,4 +1,4 @@
-.TH MEND-ACCOUNTS 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-ACCOUNTS 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-accounts \- your connected accounts on the platform
 .SH SYNOPSIS

package/man/mend-adopt.1

@@ -1,4 +1,4 @@
-.TH MEND-ADOPT 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-ADOPT 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-adopt \- adopt a repository into the store
 .SH SYNOPSIS

package/man/mend-attach.1

@@ -1,4 +1,4 @@
-.TH MEND-ATTACH 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-ATTACH 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-attach \- reattach this terminal to a running session
 .SH SYNOPSIS

package/man/mend-codex.1

@@ -1,4 +1,4 @@
-.TH MEND-CODEX 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-CODEX 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-codex \- launch codex, claude, or opencode in a recorded worktree
 .SH SYNOPSIS

package/man/mend-completions.1

@@ -1,4 +1,4 @@
-.TH MEND-COMPLETIONS 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-COMPLETIONS 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-completions \- print the TAB\-completion hook
 .SH SYNOPSIS

package/man/mend-connect.1

@@ -1,4 +1,4 @@
-.TH MEND-CONNECT 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-CONNECT 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-connect \- send this machine's provider credential to the platform
 .SH SYNOPSIS

package/man/mend-continue.1

@@ -1,4 +1,4 @@
-.TH MEND-CONTINUE 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-CONTINUE 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-continue \- resume a session with its pending review follow\-up
 .SH SYNOPSIS

package/man/mend-doctor.1

@@ -1,4 +1,4 @@
-.TH MEND-DOCTOR 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-DOCTOR 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-doctor \- check this machine's setup
 .SH SYNOPSIS

package/man/mend-dotfiles-sync.1

@@ -1,4 +1,4 @@
-.TH MEND-DOTFILES-SYNC 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-DOTFILES-SYNC 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-dotfiles\-sync \- capture config files from this machine into your store
 .SH SYNOPSIS

package/man/mend-dotfiles.1

@@ -1,4 +1,4 @@
-.TH MEND-DOTFILES 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-DOTFILES 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-dotfiles \- your dotfiles on the server: repo and synced files
 .SH SYNOPSIS

package/man/mend-env-cluster.1

@@ -1,4 +1,4 @@
-.TH MEND-ENV-CLUSTER 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-ENV-CLUSTER 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-env\-cluster \- bind Kubernetes secrets and configmaps to the workspaces
 .SH SYNOPSIS

package/man/mend-env-load.1

@@ -1,4 +1,4 @@
-.TH MEND-ENV-LOAD 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-ENV-LOAD 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-env\-load \- load a .env into the project
 .SH SYNOPSIS

package/man/mend-env-show.1

@@ -1,4 +1,4 @@
-.TH MEND-ENV-SHOW 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-ENV-SHOW 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-env\-show \- what the project store holds: names only, never values
 .SH SYNOPSIS

package/man/mend-help.1

@@ -1,4 +1,4 @@
-.TH MEND-HELP 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-HELP 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-help \- this index, or one command's page
 .SH SYNOPSIS

package/man/mend-keys-init.1

@@ -1,4 +1,4 @@
-.TH MEND-KEYS-INIT 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-KEYS-INIT 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-keys\-init \- create your Mend key (ed25519) on the server
 .SH SYNOPSIS

package/man/mend-keys-mode.1

@@ -1,4 +1,4 @@
-.TH MEND-KEYS-MODE 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-KEYS-MODE 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-keys\-mode \- how your remotes are reached: mend\-key or bridge
 .SH SYNOPSIS

package/man/mend-keys-share.1

@@ -1,4 +1,4 @@
-.TH MEND-KEYS-SHARE 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-KEYS-SHARE 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-keys\-share \- relay this machine's ssh\-agent to the server
 .SH SYNOPSIS

package/man/mend-keys-show.1

@@ -1,4 +1,4 @@
-.TH MEND-KEYS-SHOW 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-KEYS-SHOW 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-keys\-show \- print your Mend public key
 .SH SYNOPSIS

package/man/mend-login.1

@@ -1,4 +1,4 @@
-.TH MEND-LOGIN 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-LOGIN 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-login \- sign this terminal in through the browser
 .SH SYNOPSIS

package/man/mend-logout.1

@@ -1,4 +1,4 @@
-.TH MEND-LOGOUT 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-LOGOUT 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-logout \- revoke this terminal's device token and forget it
 .SH SYNOPSIS

package/man/mend-man.1

@@ -1,4 +1,4 @@
-.TH MEND-MAN 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-MAN 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-man \- one command's page, or the whole manual, in man
 .SH SYNOPSIS

package/man/mend-pair.1

@@ -1,4 +1,4 @@
-.TH MEND-PAIR 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-PAIR 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-pair \- pair a phone or a second machine
 .SH SYNOPSIS

package/man/mend-projects.1

@@ -1,4 +1,4 @@
-.TH MEND-PROJECTS 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-PROJECTS 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-projects \- adopted projects and their live sessions
 .SH SYNOPSIS

package/man/mend-refresh.1

@@ -1,4 +1,4 @@
-.TH MEND-REFRESH 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-REFRESH 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-refresh \- fetch origin's branches into the store
 .SH SYNOPSIS

package/man/mend-rejoin.1

@@ -1,4 +1,4 @@
-.TH MEND-REJOIN 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-REJOIN 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-rejoin \- attach if live, otherwise resume
 .SH SYNOPSIS

package/man/mend-resume.1

@@ -1,4 +1,4 @@
-.TH MEND-RESUME 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-RESUME 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-resume \- rejoin a settled session with its state restored
 .SH SYNOPSIS

package/man/mend-run.1

@@ -1,4 +1,4 @@
-.TH MEND-RUN 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-RUN 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-run \- run any command as a session
 .SH SYNOPSIS

package/man/mend-server-logs.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVER-LOGS 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SERVER-LOGS 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-server\-logs \- print a bounded tail of the installation's container logs
 .SH SYNOPSIS

package/man/mend-server-restart.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVER-RESTART 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SERVER-RESTART 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-server\-restart \- restart Mend using the same generation and pin
 .SH SYNOPSIS

package/man/mend-server-setup.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVER-SETUP 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SERVER-SETUP 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-server\-setup \- install or repair the local Mend server
 .SH SYNOPSIS

package/man/mend-server-start.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVER-START 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SERVER-START 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-server\-start \- start the selected server generation
 .SH SYNOPSIS

package/man/mend-server-status.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVER-STATUS 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SERVER-STATUS 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-server\-status \- show the saved pin, generation and container state
 .SH SYNOPSIS

package/man/mend-server-stop.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVER-STOP 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SERVER-STOP 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-server\-stop \- stop Mend and Postgres without deleting data
 .SH SYNOPSIS

package/man/mend-server-upgrade.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVER-UPGRADE 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SERVER-UPGRADE 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-server\-upgrade \- upgrade to an explicit version with a database backup
 .SH SYNOPSIS

package/man/mend-server.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVER 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SERVER 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-server \- install and manage this machine's Mend server
 .SH SYNOPSIS

package/man/mend-service-add.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVICE-ADD 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SERVICE-ADD 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-service\-add \- adopt a port something in the workspace already listens on
 .SH SYNOPSIS

package/man/mend-service-connect.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVICE-CONNECT 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SERVICE-CONNECT 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-service\-connect \- bring live Services to this machine's loopback
 .SH SYNOPSIS

package/man/mend-service-init.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVICE-INIT 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SERVICE-INIT 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-service\-init \- scaffold mend.toml from package.json and compose ports
 .SH SYNOPSIS

package/man/mend-service-list.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVICE-LIST 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SERVICE-LIST 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-service\-list \- every live service and its observed state
 .SH SYNOPSIS

package/man/mend-service-logs.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVICE-LOGS 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SERVICE-LOGS 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-service\-logs \- follow a supervised service's output
 .SH SYNOPSIS

package/man/mend-service-restart.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVICE-RESTART 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SERVICE-RESTART 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-service\-restart \- re\-run a service's recorded command, same URL
 .SH SYNOPSIS

package/man/mend-service-run.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVICE-RUN 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SERVICE-RUN 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-service\-run \- start and supervise a server in the session's workspace
 .SH SYNOPSIS

package/man/mend-service-stop.1

@@ -1,4 +1,4 @@
-.TH MEND-SERVICE-STOP 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SERVICE-STOP 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-service\-stop \- stop a service and close its host port
 .SH SYNOPSIS

package/man/mend-sessions.1

@@ -1,4 +1,4 @@
-.TH MEND-SESSIONS 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SESSIONS 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-sessions \- sessions with their review facts
 .SH SYNOPSIS

package/man/mend-shell.1

@@ -1,4 +1,4 @@
-.TH MEND-SHELL 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SHELL 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-shell \- open a shell in a live session's workspace
 .SH SYNOPSIS

package/man/mend-skills-push.1

@@ -1,4 +1,4 @@
-.TH MEND-SKILLS-PUSH 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SKILLS-PUSH 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-skills\-push \- upload ~/.agents/skills into the library
 .SH SYNOPSIS

package/man/mend-skills.1

@@ -1,4 +1,4 @@
-.TH MEND-SKILLS 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SKILLS 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-skills \- your skill library on the server, or a project's
 .SH SYNOPSIS

package/man/mend-ssh-setup.1

@@ -1,4 +1,4 @@
-.TH MEND-SSH-SETUP 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SSH-SETUP 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-ssh\-setup \- make this machine ready to ssh into workspaces, once
 .SH SYNOPSIS

package/man/mend-ssh.1

@@ -1,4 +1,4 @@
-.TH MEND-SSH 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-SSH 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-ssh \- workspace SSH status: gateway, registered keys, ssh config
 .SH SYNOPSIS

package/man/mend-stop.1

@@ -1,4 +1,4 @@
-.TH MEND-STOP 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-STOP 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-stop \- stop the agent; the record and the review remain
 .SH SYNOPSIS

package/man/mend-ui.1

@@ -1,4 +1,4 @@
-.TH MEND-UI 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-UI 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-ui \- the dashboard: every project and session, live
 .SH SYNOPSIS

package/man/mend-uninstall.1

@@ -0,0 +1,35 @@
+.TH MEND-UNINSTALL 1 "" "mend 0.26.0" "mend manual"
+.SH NAME
+mend\-uninstall \- remove the server, this machine's Mend files, or both
+.SH SYNOPSIS
+.B mend uninstall [\-\-all | \-\-server | \-\-home] [\-\-yes]
+.br
+.SH DESCRIPTION
+.PP
+Asks which scope to remove when none is given, prints exactly what will go, and requires the word delete before the server is touched. The server scope removes the local Compose installation: its containers, every volume it owns (repositories, worktrees, the database), its release image, and the private configuration with its generations and backups. The home scope revokes this terminal's device token, then removes cli.json, the workspace SSH key, and the managed block in ~/.ssh/config.
+.PP
+Nothing else under the configuration directory is touched; a host\-run store or keys root is listed and left in place. Workspace containers carry no label Mend can filter on, so they are named with the command that removes them, never removed.
+.SH OPTIONS
+.TP
+.B \-\-all
+the server and this machine's Mend files
+.TP
+.B \-\-server
+only the local server installation
+.TP
+.B \-\-home
+only this machine's sign\-in, ssh key and config block
+.TP
+.B \-\-yes
+skip the confirmation; required without a terminal
+.SH EXAMPLES
+.PP
+.B mend uninstall
+.br
+choose a scope, then confirm
+.PP
+.B mend uninstall \-\-home \-\-yes
+.br
+forget this machine's sign\-in without asking
+.SH SEE ALSO
+mend(1), mend\-server\-stop(1), mend\-logout(1)

package/man/mend-version.1

@@ -1,4 +1,4 @@
-.TH MEND-VERSION 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-VERSION 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-version \- this CLI's version, and the server's when it answers
 .SH SYNOPSIS

package/man/mend-worktrees.1

@@ -1,4 +1,4 @@
-.TH MEND-WORKTREES 1 "" "mend 0.25.0" "mend manual"
+.TH MEND-WORKTREES 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend\-worktrees \- every worktree and the sessions inside it
 .SH SYNOPSIS

package/man/mend.1

@@ -1,4 +1,4 @@
-.TH MEND 1 "" "mend 0.25.0" "mend manual"
+.TH MEND 1 "" "mend 0.26.0" "mend manual"
 .SH NAME
 mend \- the agent workbench
 .SH SYNOPSIS
@@ -160,6 +160,9 @@ your connected accounts on the platform
 .B mend logout
 revoke this terminal's device token and forget it
 .TP
+.B mend uninstall
+remove the server, this machine's Mend files, or both
+.TP
 .B mend completions
 print the TAB\-completion hook
 .TP
@@ -189,4 +192,4 @@ url, token, and device id from mend login
 .B ~/.config/mend/keys/
 the deploy key from mend keys init
 .SH SEE ALSO
-mend\-login(1), mend\-connect(1), mend\-adopt(1), mend\-codex(1), mend\-pair(1), mend\-doctor(1), mend\-ui(1), mend\-attach(1), mend\-stop(1), mend\-shell(1), mend\-run(1), mend\-continue(1), mend\-resume(1), mend\-rejoin(1), mend\-sessions(1), mend\-worktrees(1), mend\-projects(1), mend\-refresh(1), mend\-service\-run(1), mend\-service\-add(1), mend\-service\-connect(1), mend\-service\-list(1), mend\-service\-logs(1), mend\-service\-restart(1), mend\-service\-stop(1), mend\-service\-init(1), mend\-env\-show(1), mend\-env\-load(1), mend\-env\-cluster(1), mend\-skills(1), mend\-skills\-push(1), mend\-dotfiles(1), mend\-dotfiles\-sync(1), mend\-keys\-init(1), mend\-keys\-show(1), mend\-keys\-mode(1), mend\-keys\-share(1), mend\-server(1), mend\-server\-setup(1), mend\-server\-status(1), mend\-server\-start(1), mend\-server\-stop(1), mend\-server\-restart(1), mend\-server\-logs(1), mend\-server\-upgrade(1), mend\-ssh(1), mend\-ssh\-setup(1), mend\-accounts(1), mend\-logout(1), mend\-completions(1), mend\-version(1), mend\-help(1), mend\-man(1)
+mend\-login(1), mend\-connect(1), mend\-adopt(1), mend\-codex(1), mend\-pair(1), mend\-doctor(1), mend\-ui(1), mend\-attach(1), mend\-stop(1), mend\-shell(1), mend\-run(1), mend\-continue(1), mend\-resume(1), mend\-rejoin(1), mend\-sessions(1), mend\-worktrees(1), mend\-projects(1), mend\-refresh(1), mend\-service\-run(1), mend\-service\-add(1), mend\-service\-connect(1), mend\-service\-list(1), mend\-service\-logs(1), mend\-service\-restart(1), mend\-service\-stop(1), mend\-service\-init(1), mend\-env\-show(1), mend\-env\-load(1), mend\-env\-cluster(1), mend\-skills(1), mend\-skills\-push(1), mend\-dotfiles(1), mend\-dotfiles\-sync(1), mend\-keys\-init(1), mend\-keys\-show(1), mend\-keys\-mode(1), mend\-keys\-share(1), mend\-server(1), mend\-server\-setup(1), mend\-server\-status(1), mend\-server\-start(1), mend\-server\-stop(1), mend\-server\-restart(1), mend\-server\-logs(1), mend\-server\-upgrade(1), mend\-ssh(1), mend\-ssh\-setup(1), mend\-accounts(1), mend\-logout(1), mend\-uninstall(1), mend\-completions(1), mend\-version(1), mend\-help(1), mend\-man(1)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sealant/mend",
-  "version": "0.25.0",
+  "version": "0.26.0",
   "description": "The mend CLI: adopt a repository into Mend's store, launch your coding agent in a recorded session worktree, detach and reattach from any terminal",
   "keywords": [
     "claude-code",
@@ -48,8 +48,8 @@
     "typescript": "^5.7.2",
     "vitest": "^3.0.5",
     "@mend/domain": "0.0.0",
-    "@mend/workspace-ssh": "0.0.0",
-    "@mend/typescript": "0.0.0"
+    "@mend/typescript": "0.0.0",
+    "@mend/workspace-ssh": "0.0.0"
   },
   "engines": {
     "node": ">=22"