feat(install)!: refuse forced uninstall data purge without a store receipt (AB7009)

[ScriptedAlchemy]

Summary

Owner decision, following up the #841 review, which left the no-receipt purge as a separate product decision. agent-bundle uninstall claude|codex --force --purge-data --confirm-purge on a host-registered copy with no store receipt (forced-missing) used to delete the web-data root and Claude's plugins/data/<id>/ anyway. Now it is refused with AB7009 before any host verb runs, and --plan refuses the same way. --force without --purge-data still uninstalls through the host CLI and keeps the data. The refusal applies even when no data exists: it fails closed and is easy to predict. Without --confirm-purge, AB7008 still comes first.

• packages/agent-bundle/src/install/uninstall.ts: the refusal is in the receipt === undefined branch of uninstallPublicCli.
• Unaffected: a Cursor local copy without a receipt is already foreign (AB7007, even with --force), a Cursor marketplace holds no data, and Amp refuses without a receipt even with --force. The emitted standalone install.mjs only uninstalls Cursor copies and requires a receipt in local mode, so it has no no-receipt purge path. Only its generated Claude/Codex README text changed.
• Docs: docs/diagnostics.md (managed-uninstall prose and the AB7009 row) and the en and zh versions of website/docs/*/reference/cli.mdx and website/docs/*/guide/distribution/installation.mdx.
• Tests: uninstall.test.ts (Claude and Codex) asserts AB7009 for the forced purge and its plan, that only plugin list --json ran, and that the web-data and plugins/data files survive. It then runs a plain --force uninstall and checks the data is kept. The host-install proof (tests/support/host-install.ts, used by the integration and packed proofs) asserts AB7009 for --force --purge-data --confirm-purge without a receipt.
• .changeset/refuse-unreceipted-purge.md (minor, agent-bundle).

Local gate

On b672f50, which contains current origin/main cf82ffe:

• pnpm build: pass
• pnpm typecheck: pass
• pnpm lint: pass
• pnpm test:unit: pass (4,324 tests, 0 failed)

On 9b216cb. The only change after it is the #844 merge from main, which touches src/rstest only and doesn't overlap the install code:

• rstest --config rstest.integration.config.ts packages/agent-bundle/tests/host-install-proof.test.ts packages/agent-bundle/tests/dev-host-install.test.ts: pass (21 passed, 0 skipped)
• pnpm test:packed packages/agent-bundle/tests/packed-host-install-proof.test.ts packages/agent-bundle/tests/packed-install-bin.test.ts: pass (8 passed, 0 skipped)
• pnpm docs:site:build: pass (language parity OK, 0 broken links)

Review

Independent change-risk review (Claude Opus 5.5) found no material issues. It confirmed:

• The refusal runs before any mutation, and plan mode matches the run.
• No other uninstall path purges without a receipt: the dangling-marketplace path needs a receipt, Amp and Cursor already refuse, and the dev host-install manager never passes purgeData.

Two low notes:

• The generated Codex README didn't mention the refusal. Fixed in be11d6b.
• The refusal also fires when there is no data to delete. Kept on purpose: it fails closed, and the docs describe it as unconditional.

Codex bot threads:

• P1, missing changeset: already added in 6795db8. Replied and resolved.
• P2, docs should say --force --purge-data --confirm-purge, since the shorter form is AB7008: fixed in 9b216cb. Replied and resolved.

[changeset-bot]

🦋 Changeset detected

Latest commit: b672f50

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 2 packages

Name	Type
agent-bundle	Minor
create-agent-bundle	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-25T04:17:01.917256Z	1b122a9	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 1b122a9026

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[pkg-pr-new]

npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle@853

npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle/create-agent-bundle@853

npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle/rsc-markdown-stream@853

npm i https://pkg.pr.new/ScriptedAlchemy/agent-bundle/@agent-bundle/runtime@853

commit: 9b216cb