Uninstall Atlan Trident Desktop

aireg self uninstall --dry-run
aireg self uninstall -y

sudo ./uninstall-atlan-desktop.sh --dry-run

#!/usr/bin/env bash
# Uninstall the Atlan desktop app. Deploy from your MDM as a root script.
#   --user <name>  only this user's data (default: all local users)
#   --dry-run      print what would be removed, remove nothing
#   --keep-data    remove the app and runtime but keep the user signed in
set -uo pipefail

APP="/Applications/Atlan.app"
BUNDLE_ID="com.atlan.dashboard"
KEYCHAIN_SERVICES=("$BUNDLE_ID" "$BUNDLE_ID.harness-env")
MAX_KEYCHAIN_ITEMS=200

ONLY_USER=""
DRY_RUN=0
KEEP_DATA=0
while [ $# -gt 0 ]; do
  case "$1" in
    --user) ONLY_USER="$2"; shift 2 ;;
    --dry-run) DRY_RUN=1; shift ;;
    --keep-data) KEEP_DATA=1; shift ;;
    *) echo "unknown argument: $1" >&2; exit 2 ;;
  esac
done

if [ "$(id -u)" -ne 0 ]; then
  echo "must run as root" >&2
  exit 2
fi

# A mistyped --user would skip every home and still report success.
if [ -n "$ONLY_USER" ] && [ ! -d "/Users/$ONLY_USER" ]; then
  echo "no home directory for user '$ONLY_USER'" >&2
  exit 2
fi

run() {
  if [ "$DRY_RUN" -eq 1 ]; then echo "would remove: $*"; else rm -rf "$@"; fi
}

[ "$DRY_RUN" -eq 1 ] || pkill -f "$APP/Contents/MacOS/" 2>/dev/null || true
[ -d "$APP" ] && run "$APP"

for home in /Users/*; do
  [ -d "$home" ] || continue
  user="$(basename "$home")"
  case "$user" in Shared | .*) continue ;; esac
  [ -n "$ONLY_USER" ] && [ "$user" != "$ONLY_USER" ] && continue

  # The background service starts at login and uploads without the app.
  # Let aireg remove itself, then clear anything it could not.
  aireg=""
  for candidate in "$home/.aireg/bin/aireg" "$home/.aireg/cli/current/aireg"; do
    if [ -x "$candidate" ]; then aireg="$candidate"; break; fi
  done
  if [ -n "$aireg" ] && [ "$DRY_RUN" -eq 0 ]; then
    sudo -u "$user" -H "$aireg" self uninstall -y >/dev/null 2>&1 ||
      echo "aireg self uninstall failed for $user; removing its files directly" >&2
  fi
  uid="$(id -u "$user" 2>/dev/null || true)"
  if [ -n "$uid" ] && [ "$DRY_RUN" -eq 0 ]; then
    launchctl bootout "gui/$uid/sh.aireg.daemon" 2>/dev/null || true
    pkill -u "$uid" -f "$home/.aireg/" 2>/dev/null || true
  fi
  for path in \
    "$home/.aireg" \
    "$home/Library/LaunchAgents/sh.aireg.daemon.plist" \
    "$home/Library/LaunchAgents/com.atlan.app.login.plist" \
    "$home/Library/Application Support/Atlan"; do
    [ -e "$path" ] && run "$path"
  done

  if [ "$KEEP_DATA" -eq 0 ]; then
    for path in \
      "$home/Library/Application Support/$BUNDLE_ID" \
      "$home/Library/Caches/$BUNDLE_ID" \
      "$home/Library/Preferences/$BUNDLE_ID.plist" \
      "$home/Library/Saved Application State/$BUNDLE_ID.savedState" \
      "$home/Library/Logs/$BUNDLE_ID" \
      "$home/.atlanai/auth.json"; do
      [ -e "$path" ] && run "$path"
    done
    # Each call removes one item, and a service can hold several, so drain it (capped).
    for service in "${KEYCHAIN_SERVICES[@]}"; do
      [ "$DRY_RUN" -eq 1 ] && echo "would clear keychain: $service ($user)" && continue
      drained=0
      while [ "$drained" -lt "$MAX_KEYCHAIN_ITEMS" ] &&
        sudo -u "$user" security delete-generic-password -s "$service" >/dev/null 2>&1; do
        drained=$((drained + 1))
      done
      [ "$drained" -eq "$MAX_KEYCHAIN_ITEMS" ] &&
        echo "stopped after $MAX_KEYCHAIN_ITEMS items for $service ($user); check the keychain by hand" >&2
    done
  fi
done

echo "Done. Remove any Atlan configuration profile from your MDM separately."