Define safe uninstall and retained-model cleanup for Wally

[sanchitmonga22]

Overview

Model remove/lifecycle commands exist but no first-class uninstall command/script; sources explicitly asked to manage stale packages and recognize previous downloads.

Priority: P2 / post-mvp. Impact: roadmap improvement. Initial planning estimate: Medium; refine after inventory. This issue does not add a release blocker.

Current evidence

Model remove/lifecycle commands exist but no first-class uninstall command/script; sources explicitly asked to manage stale packages and recognize previous downloads.

• Source: src/commands/cmd_models.cpp#L1
• Source: install.sh#L1

Design and implementation plan

Separate binary removal, credential revocation/local deletion and optional shared-model cleanup; preserve user data by default and show exact scope.

1. Reconcile the current implementation and any already completed work with the evidence above.
2. Record the owner, selected scope, dependencies and unresolved decisions before implementation.
3. Implement or execute the selected scope using existing components and artifacts.
4. Attach reproducible validation or outcome evidence and record any deferred work.

Acceptance criteria

• Dry run lists owned paths and never removes models used by another install without explicit selection.
• Cover prior downloads, symlinks, platform uninstall and interrupted cleanup.
• Document remote sessions separately from local deletion.

Related work and deduplication

No existing issue has this acceptance scope; existing release defects remain separate.

No exact existing issue found in the all-state inventory.

Requirement provenance

Reconciled September 13, 2026 against WALLY_CLOUD_PRODUCT_SOURCES.md (SHA-256 e601b7b154b750965fa8d25d4533d3542621bd00b3bb30038c1fae553a549e7b) and the consolidated requirements report. Historical proposals are not evidence of current delivery, customer agreement or approved pricing.

Source records and physical line references

Records: C01-042.

Lines: 948–961.

[Siddhesh2377]

Fixed in #161. wally uninstall now keeps downloaded models unless you say yes to a separate question (or pass --delete-models with --yes), and on Windows it removes its own install folder and PATH entry after it exits. Tested by hand on macOS and Windows ARM64.