uninstall.sh

#!/usr/bin/env bash
# GreyMatter — Copyright (c) 2026 Dylan Peellaert.
# Licensed under the Apache License, Version 2.0. See LICENSE and NOTICE.
# uninstall.sh — undoes what install.sh did, and NOTHING else.
#
# Absolute rule: **your trunk is never deleted**. Your notes are your work, not a
# dependency of GreyMatter. The trunk loses its links to the engine; it keeps all of
# its content.
#
# Usage: ./uninstall.sh [--yes] [--purge-engine]
set -euo pipefail

# ⚠ CANONICAL, on the SAME rule as install.sh — and it has to be, because the two
# compare strings. The installer resolves $HOME with `pwd -P` before writing the
# Finder shortcut, so the link holds `/private/var/…` wherever $HOME goes through
# a symlink (every `mktemp -d` on macOS, and the CI runner). Uninstall read
# `$HOME/.greymatter/trunk` unresolved, the two spellings of the same directory did
# not match, and the uninstaller decided the shortcut IT had just made belonged
# to somebody else and left it behind. install.sh already carries this warning
# for the ownership record; this is the same trap, one file further on.
GM="$HOME/.greymatter"
# An install that never ran an update since the rename still lives under the old
# name: uninstall it where it is, rather than report an empty ~/.greymatter.
[ -e "$GM" ] || [ ! -d "$HOME/.c-brain" ] || GM="$HOME/.c-brain"   # pre-rename
if [ -d "$GM" ]; then
  GM="$(cd "$GM" && pwd -P)"
else
  GM="$(cd "$HOME" 2>/dev/null && pwd -P || echo "$HOME")/.greymatter"
fi
TRUNK="$GM/trunk"
MANIFEST="$GM/manifest.txt"

ASSUME_YES=0; PURGE_ENGINE=0
for a in "$@"; do
  case "$a" in
    --yes) ASSUME_YES=1 ;;
    --purge-engine) PURGE_ENGINE=1 ;;
    *) echo "Unknown option: $a"; exit 1 ;;
  esac
done

say() { echo "  $*"; }

echo "🧠 GreyMatter — uninstall"
echo
echo "  Will be removed:"
echo "    · the GreyMatter hooks from ~/.claude/settings.json (the rest untouched)"
echo "    · the engine links inside $TRUNK (hooks, agents, capsule, planet, companion, tests)"
echo "    · ~/.local/bin/brain, the Desktop launcher, the Finder shortcut, the launchd jobs"
echo
echo "  Will be KEPT:"
echo "    · $TRUNK and ALL your notes"
echo "    · the backups in $GM/backups/"
echo

if [ "$ASSUME_YES" = "0" ]; then
  printf "  Continue? [y/N] "
  read -r ans
  case "$ans" in y|Y|o|O) ;; *) echo "  Cancelled."; exit 0 ;; esac
fi

# ─── 1. Hooks ─────────────────────────────────────────────────────────────
echo
echo "▸ Hooks"
if [ -f "$HOME/.claude/settings.json" ] && [ -f "$GM/engine/merge_settings.py" ]; then
  python3 "$GM/engine/merge_settings.py" remove
else
  say "(settings.json or merge_settings.py missing — nothing to do)"
fi

# ─── 2. Scheduled jobs ────────────────────────────────────────────────────
echo
echo "▸ Scheduled jobs"
# FAIL CLOSED. Without the library there is no way to tell our jobs from
# somebody else's, and the safe answer to "whose is this?" is to leave it.
if [ -f "$GM/engine/greymatter/launchd-lib.sh" ]; then
  . "$GM/engine/greymatter/launchd-lib.sh"
  for label in com.greymatter.resume com.greymatter.machiniste \
               com.claudebrain.resume com.claudebrain.machiniste; do   # pre-rename labels too
    t="${label##*.}"
    p="$HOME/Library/LaunchAgents/$label.plist"
    if [ -f "$p" ] || gm_launchd_registered "$label"; then
      gm_launchd_uninstall "$label" "$p" || :
    fi
  done
else
  say "(greymatter/launchd-lib.sh missing — the launchd jobs are LEFT ALONE:"
  say " removing them would mean touching identities this script cannot prove are ours)"
fi

# The menu bar pill runs from the trunk's capsule link. Left running, it would
# stay in the menu bar after its engine is gone, reading a trunk nobody feeds.
# Matched on the trunk path only: a pill from another trunk is not ours to stop.
if pgrep -f "$TRUNK/capsule/macos/.build/release/Capsule" >/dev/null 2>&1; then
  pkill -f "$TRUNK/capsule/macos/.build/release/Capsule" 2>/dev/null || true
  say "- menu bar pill stopped"
fi
# The v2.1.x Electron orb, where Node really runs it: the resolved capsule folder,
# or the shared runtime of a managed install (orb_patterns in engine-lib.sh says
# why). Inline, like the rest of this script: the engine may already be gone.
rx() { printf '%s' "$1" | sed 's/[][\.*^$+?(){}|]/\\&/g'; }
d="$(cd "$TRUNK/capsule" 2>/dev/null && pwd -P)" \
  && { pkill -f "$(rx "$d")/node_modules/electron/dist/" 2>/dev/null || true; }
d="$(cd "$GM/runtime" 2>/dev/null && pwd -P)" \
  && { pkill -f "$(rx "$d")/capsule-[^/]*/node_modules/electron/dist/" 2>/dev/null || true; }

# ─── 3. Links ─────────────────────────────────────────────────────────────
# We delete symlinks ONLY. If something has become a real folder, that is
# content — we leave it alone.
echo
echo "▸ Engine links"
for d in hooks agents capsule planet companion tests; do
  p="$TRUNK/$d"
  if [ -L "$p" ]; then rm -f "$p"; say "- $p"
  elif [ -e "$p" ]; then say "! $p is not a link — left in place (that is content)"; fi
done
for p in "$HOME/.claude/agents" "$HOME/.local/bin/brain"; do
  if [ -L "$p" ]; then rm -f "$p"; say "- $p"; fi
done

# ─── 4. Odds and ends ─────────────────────────────────────────────────────
echo
echo "▸ Odds and ends"
[ -f "$HOME/Desktop/Planete-C-Brain.command" ] && { rm -f "$HOME/Desktop/Planete-C-Brain.command"; say "- Desktop launcher (old .command)"; }   # pre-rename
# The launcher became an app bundle on 2026-08-14 — a DIRECTORY, so `rm -f` walks
# straight past it. An uninstaller that leaves a launcher on the Desktop leaves
# the impression the tool is still installed, and the icon still points at a
# trunk we may just have unlinked.
if [ -d "$HOME/Desktop/GreyMatter.app" ] && grep -q org.greymatter.planet "$HOME/Desktop/GreyMatter.app/Contents/Info.plist" 2>/dev/null; then
  if rm -rf "$HOME/Desktop/GreyMatter.app"; then say "- Desktop launcher (GreyMatter.app)"
  else say "! $HOME/Desktop/GreyMatter.app could not be removed (a locked file?) — left in place"; fi
fi
# …and wherever the user moved or renamed it: found by what it is, not where it
# was left. The same lines as map_apps in engine-lib.sh, inline because the
# engine may already be gone; that comment says why each condition is there.
map_apps() {
  local a h
  h="$(cd "$HOME" && pwd -P)"   # mdfind answers /private/var where $HOME says /var
  { mdfind -onlyin "$HOME" 'kMDItemCFBundleIdentifier == "org.greymatter.planet"'
    mdfind -onlyin /Applications 'kMDItemCFBundleIdentifier == "org.greymatter.planet"'
    for a in "$HOME/Desktop"/*.app "$HOME/Desktop"/*/*.app "$HOME/Applications"/*.app \
             "$HOME/Applications"/*/*.app /Applications/*.app; do echo "$a"; done
  } 2>/dev/null | while IFS= read -r a; do
    a="$(cd "$a" 2>/dev/null && pwd -P)" || continue
    case "$a" in "$h/.Trash"/*) continue ;; esac
    if grep -q org.greymatter.planet "$a/Contents/Info.plist" 2>/dev/null \
       && grep -qsF "$1/" "$a/Contents/Info.plist" "$a/Contents/MacOS/planet"; then echo "$a"; fi
  done | sort -u
  return 0
}
# A locked copy is named and left, never the reason the uninstall stops halfway.
map_apps "$TRUNK" | while IFS= read -r a; do
  if rm -rf "$a"; then say "- the map app, moved to $a"
  else say "! $a could not be removed (a locked file?) — left in place"; fi
done

OLD_APP="$HOME/Desktop/C Brain Planet.app"   # pre-rename
if [ -d "$OLD_APP" ] && grep -q org.cbrain.planet "$OLD_APP/Contents/Info.plist" 2>/dev/null; then  # pre-rename
  rm -rf "$OLD_APP"; say "- Desktop launcher (under the old name)"
fi

# The Finder shortcut: a symlink we made, removed only if it still points at
# the trunk. If the user re-aimed it somewhere, it stopped being ours.
SHORTCUT="$HOME/GreyMatter"
if [ -L "$SHORTCUT" ] && [ "$(readlink "$SHORTCUT")" = "$TRUNK" ]; then
  rm -f "$SHORTCUT"; say "- $SHORTCUT"
elif [ -e "$SHORTCUT" ]; then
  say "! $SHORTCUT is not our shortcut — left in place"
fi
OLD_SHORTCUT="$HOME/C Brain"   # pre-rename
if [ -L "$OLD_SHORTCUT" ] && [ "$(cd "$OLD_SHORTCUT" 2>/dev/null && pwd -P)" = "$(cd "$TRUNK" 2>/dev/null && pwd -P)" ]; then
  rm -f "$OLD_SHORTCUT"; say "- the shortcut under the old name"
fi
# …and the tag we put on the folder. Cosmetic, but we added it, so we take it back.
xattr -d com.apple.metadata:_kMDItemUserTags "$TRUNK" 2>/dev/null && say "- Finder tag on the trunk" || true

# Deterministic rule: if the file is IDENTICAL to the engine's, it is ours →
# remove it. If it differs, it is the user's (pre-existing or since edited) →
# do not touch it.
SL="$HOME/.claude/statusline.py"
if [ -f "$SL" ]; then
  if [ -f "$GM/engine/statusline.py" ] && cmp -s "$SL" "$GM/engine/statusline.py"; then
    rm -f "$SL"; say "- ~/.claude/statusline.py (ours, byte for byte)"
  else
    say "! ~/.claude/statusline.py differs from ours — left in place (it is yours)"
  fi
fi

# The pieces declined at install. Kept, it would make the next install decline
# them again without being asked: an install after an uninstall starts afresh.
[ -f "$GM/state/install-choices" ] && rm -f "$GM/state/install-choices" && say "- the install choices" || true

# ─── 5. Engine ────────────────────────────────────────────────────────────
echo
echo "▸ Engine"
if [ "$PURGE_ENGINE" = "1" ]; then
  rm -f "$GM/engine" "$MANIFEST" "$GM/VERSION"
  # ⚠ THIS CAN NOW ACTUALLY DELETE THE ENGINE, and it could not before. While
  # `~/.greymatter/engine` was a link to the user's own clone, the only honest thing
  # to remove was the link — deleting the target would have deleted a repository
  # somebody else made. Since 2026-08-17 the installer BUILDS what it mounts:
  # `versions/`, the source mirror and the shared runtime (the native pill's build) are all ours,
  # so `--purge-engine` finally removes what its name promises.
  #
  # The user's clone is still never touched. It was a source, it stays a source.
  for d in "$GM/versions" "$GM/source.git" "$GM/runtime"; do
    [ -e "$d" ] || continue
    rm -rf "$d" && say "- $(basename "$d") removed (built by the installer)"
  done
  rm -f "$GM/state/engine-managed" "$GM/state/engine-dev" "$GM/state/previous-version"
  say "  (the repository you cloned is untouched — it was the source, not the engine)"
else
  say "= $GM kept (versions + backups). Use --purge-engine to wipe it."
fi

echo
echo "✅ Uninstalled. $TRUNK and your notes are intact."
echo "   Backups: $GM/backups/"