impel-cli 0.17.7 → 0.17.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "impel-cli",
-  "version": "0.17.7",
+  "version": "0.17.8",
   "description": "Prepare isolated Claude and Codex workspaces for every accessible Impel tenant",
   "type": "module",
   "bin": {

package/src/cli.js

@@ -17,6 +17,7 @@ import { cmdDoctor } from "./commands/doctor.js";
 import { cmdSetup } from "./commands/setup.js";
 import { cmdSessions } from "./commands/sessions.js";
 import { cmdUpdate } from "./commands/update.js";
+import { cmdNuke } from "./commands/nuke.js";
 import { cmdExperimental } from "./commands/experimental.js";
 import { cmdConverge } from "./commands/converge.js";
 import { refuseElevatedMacExecution } from "./privileges.js";
@@ -48,6 +49,10 @@ Diagnostics:
   impel status                                Authentication, current tenant, and local readiness
   impel doctor [--tenant <org>|--all-tenants] Synthetic provider, routing, and latency checks
 
+Reset:
+  impel nuke [--yes]                          Erase ALL Impel-managed local state (apps, profiles,
+                                              caches, keychain items, auth) for a clean reinstall
+
   impel help                                  Show this help
   impel --version                             Show the installed version
 
@@ -134,6 +139,9 @@ export async function main(argv) {
     case "apps":
       return cmdApps(rest);
 
+    case "nuke":
+      return cmdNuke(rest);
+
     case "skills":
     case "skill":
       return cmdSkills(rest);

package/src/commands/nuke.js

@@ -0,0 +1,230 @@
+// `impel nuke` — erase every Impel-managed footprint on this machine so the
+// next `impel setup` runs as a true first install. Removes managed app
+// launchers (including stale staging/rotation artifacts), all isolated app and
+// CLI profiles, macOS system remnants (caches, preference domains, HTTP
+// storages, saved state, launch agents), Impel-owned Safe Storage Keychain
+// items, and the CLI's own config/auth state. Never touches vendor apps,
+// native `~/.claude`/`~/.codex` profiles, or the shared legacy "Claude" Safe
+// Storage item that the vendor Claude app also uses.
+
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { spawnSync } from "node:child_process";
+
+import { CONFIG_DIR } from "../config.js";
+import { parseFlags } from "../args.js";
+import { promptText } from "../prompt.js";
+import { appProcessPattern } from "../apps.js";
+import { windowsClaudeUserData } from "../windowsApps.js";
+
+// Launcher artifacts the CLI may have written into ~/Applications: the
+// tenant-scoped bundles, the pre-v0.8 global bundles, and any interrupted
+// `.tmp-<pid>` staging or `.previous-<pid>` rotation directories they left
+// behind. Anchored so unrelated apps that merely start with "Impel" survive.
+const MANAGED_LAUNCHER_RE = /^Impel (Claude|ChatGPT)(\.app| \()/u;
+
+// Every Impel-managed bundle identifier starts with this prefix; the vendor
+// apps use com.anthropic.* / com.openai.* and are never matched.
+const MANAGED_BUNDLE_PREFIX = "com.useimpel.";
+
+// macOS per-app state locations that accumulate entries keyed by bundle id.
+const MAC_LIBRARY_LOCATIONS = [
+  "Caches",
+  "Preferences",
+  "HTTPStorages",
+  "Saved Application State",
+  "Logs",
+  "Application Support",
+  "WebKit",
+  "Containers",
+  "Group Containers",
+  "LaunchAgents",
+];
+
+const HELP = `impel nuke - erase all Impel-managed state on this machine
+
+Removes managed desktop app launchers, every isolated app and CLI profile,
+macOS caches/preferences/keychain items owned by the managed apps, and the
+CLI's auth/config state, so \`impel setup\` runs as a true first install.
+
+Never touches the vendor Claude/ChatGPT apps, native ~/.claude or ~/.codex
+profiles, or non-Impel Keychain items.
+
+Usage:
+  impel nuke          Show what will be erased and ask for confirmation
+  impel nuke --yes    Erase without prompting (for scripts)
+`;
+
+function listEntries(directory) {
+  try {
+    return fs.readdirSync(directory);
+  } catch {
+    return [];
+  }
+}
+
+/**
+ * Electron keys Safe Storage entries as "<app name> Safe Storage". Collect the
+ * exact names our managed profiles recorded plus the deterministic
+ * tenant-derived names, so orphans from half-removed installs still match.
+ * The legacy shared "Claude" name is excluded unconditionally: the vendor
+ * Claude app keys the operator's own encrypted data under it.
+ */
+function keychainCandidates(appsRoot) {
+  const names = new Set();
+  const tenantsRoot = path.join(appsRoot, "tenants");
+  for (const tenantId of listEntries(tenantsRoot)) {
+    for (const target of ["Impel Claude", "Impel ChatGPT"]) {
+      names.add(`${target} [${tenantId}] Safe Storage`);
+    }
+    const metadataPath = path.join(tenantsRoot, tenantId, "claude", "safe-storage.json");
+    try {
+      const appName = JSON.parse(fs.readFileSync(metadataPath, "utf8"))?.appName;
+      if (typeof appName === "string" && appName.trim()) names.add(`${appName} Safe Storage`);
+    } catch {
+      // Absent or corrupt metadata leaves only the derived names.
+    }
+  }
+  names.delete("Claude Safe Storage");
+  return [...names].sort();
+}
+
+function managedLauncherEntries(homeDir) {
+  const applications = path.join(homeDir, "Applications");
+  return listEntries(applications)
+    .filter((entry) => MANAGED_LAUNCHER_RE.test(entry))
+    .map((entry) => path.join(applications, entry));
+}
+
+function macLibraryRemnants(homeDir) {
+  const remnants = [];
+  for (const location of MAC_LIBRARY_LOCATIONS) {
+    const root = path.join(homeDir, "Library", location);
+    for (const entry of listEntries(root)) {
+      if (entry.startsWith(MANAGED_BUNDLE_PREFIX)) remnants.push(path.join(root, entry));
+    }
+  }
+  return remnants;
+}
+
+function windowsProfileRemnants(appsRoot, environment) {
+  const remnants = [];
+  for (const tenantId of listEntries(path.join(appsRoot, "tenants"))) {
+    try {
+      const userData = windowsClaudeUserData(environment, tenantId);
+      if (userData && fs.existsSync(userData)) remnants.push(userData);
+    } catch {
+      // Windows vendor install absent; nothing tenant-scoped to remove.
+    }
+  }
+  return remnants;
+}
+
+/** Gracefully quit, then kill, every process from a managed launcher bundle. */
+function stopManagedProcesses(launcherPaths, run) {
+  const names = launcherPaths
+    .map((launcher) => path.basename(launcher))
+    .filter((entry) => entry.endsWith(".app"))
+    .map((entry) => entry.replace(/\.app$/u, ""));
+  for (const name of names) {
+    run("/usr/bin/osascript", ["-e", `quit app "${name}"`]);
+  }
+  for (const name of names) {
+    const pattern = appProcessPattern(name);
+    run("/usr/bin/pkill", ["-f", pattern]);
+    run("/usr/bin/pkill", ["-9", "-f", pattern]);
+  }
+}
+
+export async function cmdNuke(argv = [], overrides = {}) {
+  const { flags } = parseFlags(argv, {
+    yes: { type: "boolean" },
+    help: { type: "boolean" },
+  });
+  if (flags.help) {
+    console.log(HELP);
+    return;
+  }
+
+  const io = {
+    homeDir: os.homedir(),
+    configDir: CONFIG_DIR,
+    platform: process.platform,
+    environment: process.env,
+    log: (message) => console.log(message),
+    confirm: promptText,
+    run: (command, args) => spawnSync(command, args, { stdio: "ignore" }),
+    ...overrides,
+  };
+
+  const appsRoot = io.environment.IMPEL_APP_HOME || path.join(io.configDir, "apps");
+  const darwin = io.platform === "darwin";
+  const launchers = darwin ? managedLauncherEntries(io.homeDir) : [];
+  const libraryRemnants = darwin ? macLibraryRemnants(io.homeDir) : [];
+  const keychainItems = darwin ? keychainCandidates(appsRoot) : [];
+  const windowsRemnants = io.platform === "win32"
+    ? windowsProfileRemnants(appsRoot, io.environment)
+    : [];
+  const configDirExists = fs.existsSync(io.configDir);
+
+  const total = launchers.length + libraryRemnants.length + keychainItems.length
+    + windowsRemnants.length + (configDirExists ? 1 : 0);
+  if (total === 0) {
+    io.log("impel nuke: no Impel-managed state found; this machine is already clean.");
+    return;
+  }
+
+  io.log("impel nuke will erase ALL Impel-managed state on this machine:");
+  if (launchers.length) io.log(`  App launchers and staging artifacts: ${launchers.length}`);
+  if (libraryRemnants.length) io.log(`  macOS caches/preferences/state entries: ${libraryRemnants.length}`);
+  if (keychainItems.length) io.log(`  Keychain Safe Storage items: ${keychainItems.length}`);
+  if (windowsRemnants.length) io.log(`  Windows managed Claude profiles: ${windowsRemnants.length}`);
+  if (configDirExists) io.log(`  CLI state, profiles, vendor cache, and auth: ${io.configDir}`);
+  io.log("Vendor apps and native ~/.claude and ~/.codex profiles are not touched.");
+
+  if (!flags.yes) {
+    const answer = await io.confirm('Type "nuke" to erase everything (anything else aborts): ');
+    if (answer !== "nuke") {
+      io.log("impel nuke: aborted; nothing was changed.");
+      return;
+    }
+  }
+
+  if (darwin && launchers.length) {
+    stopManagedProcesses(launchers, io.run);
+  }
+
+  for (const launcher of launchers) {
+    fs.rmSync(launcher, { recursive: true, force: true });
+  }
+  if (launchers.length) io.log(`Removed ${launchers.length} managed launcher artifact${launchers.length === 1 ? "" : "s"}.`);
+
+  for (const remnant of libraryRemnants) {
+    // Preference domains are registered with cfprefsd; deleting the domain
+    // first stops the daemon from resurrecting the plist from its cache.
+    if (remnant.endsWith(".plist") && path.dirname(remnant).endsWith("Preferences")) {
+      io.run("/usr/bin/defaults", ["delete", path.basename(remnant, ".plist")]);
+    }
+    fs.rmSync(remnant, { recursive: true, force: true });
+  }
+  if (libraryRemnants.length) io.log(`Removed ${libraryRemnants.length} macOS state entr${libraryRemnants.length === 1 ? "y" : "ies"}.`);
+
+  for (const item of keychainItems) {
+    // Missing items exit non-zero; that just means there is nothing to remove.
+    io.run("/usr/bin/security", ["delete-generic-password", "-s", item]);
+  }
+  if (keychainItems.length) io.log(`Cleared ${keychainItems.length} Impel Safe Storage Keychain item${keychainItems.length === 1 ? "" : "s"}.`);
+
+  for (const remnant of windowsRemnants) {
+    fs.rmSync(remnant, { recursive: true, force: true });
+  }
+  if (windowsRemnants.length) io.log(`Removed ${windowsRemnants.length} Windows managed profile${windowsRemnants.length === 1 ? "" : "s"}.`);
+
+  if (configDirExists) {
+    fs.rmSync(io.configDir, { recursive: true, force: true });
+    io.log(`Removed ${io.configDir} (profiles, vendor cache, sessions, and auth).`);
+  }
+
+  io.log("impel nuke: complete. Run `impel setup` for a clean install.");
+}