dsh-disk-cleaner 1.1.0 → 1.2.0

package/README.md

@@ -5,7 +5,7 @@
 <!-- badges -->
 | | |
 | --- | --- |
-| **version** | `1.1.0` |
+| **version** | `1.2.0` |
 | **DSH** | `0.2.1-rc.5`（开发与实测版本；用到 `plugins.bundle.config`、`settings.section`） |
 | **license** | [MIT](LICENSE) |
 | **Node** | `>= 22`（仅运行冒烟测试需要） |
@@ -16,7 +16,7 @@
 
 **dsh-disk-cleaner** is a disk-space plugin for [DeepSeek Harness](https://github.com/deepseek-ai) (DSH). It does two different jobs, and keeps them apart on purpose:
 
-1. **Clean** — fourteen known-safe locations (temp folders, package manager stores, browser caches, crash dumps, the Recycle Bin, leftover update installers). Only these are ever deleted.
+1. **Clean** — nineteen known-safe locations (temp folders, package manager stores, browser caches, crash dumps, the Recycle Bin, leftover update installers, per-app caches and logs, superseded plugin versions and applied update packages). Only these are ever deleted.
 2. **Assess** — everything the plugin will *not* delete (installed programs, the WSL virtual disk, the Windows component store, chat-app data, your own folders). Measured and listed, never removed.
 
 The assessment ends with a **plan**: the same numbers ordered by what it costs you to act, with the exact Windows command for the steps the plugin cannot perform itself.
@@ -27,9 +27,9 @@ Both the panel and the agent reach the *same* operations: the cleaning logic liv
 
 | Feature | Description |
 | --- | --- |
-| Scan | Measures all fourteen targets concurrently and shows what each occupies |
+| Scan | Measures all nineteen targets concurrently and shows what each occupies |
 | Per-drive filter | Chip row of mounted volumes; scanning or cleaning can be limited to one drive, and rows with nothing on that drive disappear |
-| Risk labels | Every target is `safe` or `caution`, with a one-line reason (`in-use` / `rebuild` / `elevation` / `pending-update`) and a permanent legend, so "caution" never means "unspecified" |
+| Risk labels | Every target is `safe` or `caution`, with a one-line reason (`in-use` / `rebuild` / `elevation` / `pending-update` / `rollback` / `superseded`) and a permanent legend, so "caution" never means "unspecified" |
 | Aged deletion | `temp` and `windows-temp` only remove files older than one day; files a running program still holds are skipped |
 | Space assessment | Walks the disk read-only and groups the result into Windows / installed software / your own files, plus the ten largest app-data folders. Any row opens its folder in Explorer — click, right click, or Enter |
 | Honest re-run | Re-running the assessment re-measures; a plain call still answers from the ten-minute cache |
@@ -60,6 +60,11 @@ Every path is built from this table — a caller selects an **id**, never a path
 | `recycle-bin` | `$Recycle.Bin\S-1-5-*` on every mounted volume | purge | safe | it is the Recycle Bin |
 | `inet-cache` | `%LOCALAPPDATA%\Microsoft\Windows\INetCache` | purge | caution | rebuilt |
 | `app-updaters` | `*-updater` folders under `%LOCALAPPDATA%` and `%APPDATA%` — the installers app updaters leave behind | aged, 3 days | caution | a download from the last three days may still be a pending update |
+| `app-caches` | named cache folders inside `%APPDATA%`: the WPS CEF cache, FTNN `cef_cache`, and the `Cache` / `Code Cache` / `CachedData` / `GPUCache` of Qoder, Trae, the DSH desktop app, PersonalCenter, the WeChat devtools and QQ PC Manager | purge | caution | CEF and Chromium caches rebuild on next start |
+| `app-logs` | log folders inside `%APPDATA%`: FTNN, WeChat, Qoder, Trae, DingTalk, PersonalCenter, Clash Verge | purge | safe | nothing reads an old log back at runtime |
+| `app-temp` | scratch folders apps keep inside their own `%APPDATA%` folder instead of `%TEMP%`: `WorkDaddy\client-tmp`, `PersonalCenter\Temp` | aged, 2 days | caution | the owning app may be running and holding files |
+| `plugin-old-versions` | every version but the newest of each family in the WPS plugin pool `kingsoft\wps\addons\pool\win-i386` | purge | caution | the manager loads the newest; the rest are rollback copies |
+| `update-packages` | update packages already applied: FTNN `.spd` patches whose build number is below the newest `Program Files\FTNN\app\[version]`, and `WorkDaddy\update` installers below the installed version | purge | caution | decided by version comparison, not by age |
 
 `aged` targets skip anything modified within the retention window; `purge` targets remove every entry. Both keep the target directory itself and leave locked entries alone, counting them as skipped.
 
@@ -218,11 +223,11 @@ What the smoke test deliberately does **not** cover: anything that walks a real
 ```
 ├─ package.json           dsh.bundle.patch + dsh.client { platform: "web" }
 ├─ cordis.patch.yml       - insert:  id: dsh-disk-cleaner
-├─ lib/index.js    (403)  Host: HTTP route + disk_cleaner tool, same run() for both; reveal
-├─ lib/catalog.js  (500)  The 14 targets, measurePath / purgePath / resolveTargets / drives
+├─ lib/index.js    (405)  Host: HTTP route + disk_cleaner tool, same run() for both; reveal
+├─ lib/catalog.js  (688)  The 19 targets, measurePath / purgePath / resolveTargets / drives
 ├─ lib/audit.js    (365)  Read-only assessment, 10-minute cache, areaPaths, exposes no deletion
 ├─ lib/plan.js     (150)  Pure: measurements → ordered steps
-├─ lib/client.js  (1341)  Client half: slots, panel, preferences, zh/en dictionaries, CSS
+├─ lib/client.js  (1355)  Client half: slots, panel, preferences, zh/en dictionaries, CSS
 ├─ locale/{en,zh}.json    Display metadata (meta.title / meta.description)
 ├─ icon.svg               Plugin icon
 ├─ README.md              This file
@@ -239,7 +244,7 @@ Client-half slots: `sidebar.panellist` (order 50, disposed in settings-only mode
 
 **dsh-disk-cleaner** 是 [DeepSeek Harness](https://github.com/deepseek-ai)（DSH）的磁盘空间插件。它做两件不同的事，并且刻意分开：
 
-1. **清理** —— 十四个已知安全的位置（临时目录、包管理器存储、浏览器缓存、崩溃转储、回收站、更新安装包残留）。只有这些会被删除。
+1. **清理** —— 十九个已知安全的位置（临时目录、包管理器存储、浏览器缓存、崩溃转储、回收站、更新安装包残留、各应用的缓存与日志、被淘汰的插件版本与已应用的更新包）。只有这些会被删除。
 2. **评估** —— 所有本插件**不会**删的东西（已装程序、WSL 虚拟磁盘、Windows 组件库、聊天软件数据、你自己的文件夹）。只测量、只列出，绝不删除。
 
 评估的最后是一份**处理方案**：同一批数字按「你要付出多少代价」排序，本插件做不到的步骤附上确切的 Windows 命令。
@@ -250,9 +255,9 @@ Client-half slots: `sidebar.panellist` (order 50, disposed in settings-only mode
 
 | 功能 | 说明 |
 | --- | --- |
-| 扫描 | 并发测量全部十四个目标，显示各自占用 |
+| 扫描 | 并发测量全部十九个目标，显示各自占用 |
 | 按盘过滤 | 已挂载卷的胶囊按钮；扫描与清理都可限定单盘，该盘上为空的项会隐藏 |
-| 风险标注 | 每个目标都标 `安全` 或 `注意`，并给一行理由（`in-use` / `rebuild` / `elevation` / `pending-update`），图例常驻，所以「注意」永远不是「说不清」 |
+| 风险标注 | 每个目标都标 `安全` 或 `注意`，并给一行理由（`in-use` / `rebuild` / `elevation` / `pending-update` / `rollback` / `superseded`），图例常驻，所以「注意」永远不是「说不清」 |
 | 保留期删除 | `temp` 与 `windows-temp` 只删一天前的文件；被运行中程序占住的自动跳过 |
 | 空间评估 | 只读遍历磁盘，按 Windows 自身 / 已装软件 / 你自己的文件 分组，另列占用最大的十个应用数据目录。每一行都能打开所在目录——单击、右键或回车 |
 | 重新评估真的重测 | 「重新评估」会重新测量；普通调用仍然走十分钟缓存 |
@@ -283,6 +288,11 @@ Client-half slots: `sidebar.panellist` (order 50, disposed in settings-only mode
 | `recycle-bin` | 各已挂载卷的 `$Recycle.Bin\S-1-5-*` | 全清 | 安全 | 就是回收站 |
 | `inet-cache` | `%LOCALAPPDATA%\Microsoft\Windows\INetCache` | 全清 | 注意 | 会重建 |
 | `app-updaters` | `%LOCALAPPDATA%` 与 `%APPDATA%` 下的 `*-updater` 目录——升级程序留下的安装包 | 保留期 3 天 | 注意 | 三天内的下载可能还是待安装的更新 |
+| `app-caches` | `%APPDATA%` 里点名列出的缓存目录：WPS 的 CEF 缓存、FTNN 的 `cef_cache`，以及 Qoder、Trae、DSH 桌面端、PersonalCenter、微信开发者工具、腾讯电脑管家的 `Cache` / `Code Cache` / `CachedData` / `GPUCache` | 全清 | 注意 | CEF 与 Chromium 缓存会在下次启动时重建 |
+| `app-logs` | `%APPDATA%` 里的日志目录：FTNN、微信、Qoder、Trae、钉钉、PersonalCenter、Clash Verge | 全清 | 安全 | 旧日志运行时不会被读回 |
+| `app-temp` | 应用自己放在 `%APPDATA%` 里的临时目录（不走 `%TEMP%`）：`WorkDaddy\client-tmp`、`PersonalCenter\Temp` | 保留期 2 天 | 注意 | 应用可能正在运行并占用其中的文件 |
+| `plugin-old-versions` | WPS 插件池 `kingsoft\wps\addons\pool\win-i386` 里，每个插件族除最高版本以外的全部版本 | 全清 | 注意 | 管理器加载最高版本，其余是回滚副本 |
+| `update-packages` | 已应用的更新包：FTNN 的 `.spd` 补丁（build 号低于 `Program Files\FTNN\app\[版本]` 中最新者），以及 `WorkDaddy\update` 里低于已装版本的安装包 | 全清 | 注意 | 按版本号比较判断，不按时间 |
 
 保留期方式会跳过保留期内修改过的文件；全清方式清掉全部条目。两者都保留目标目录本身，并把锁定或无权限的条目跳过计数。
 
@@ -445,11 +455,11 @@ node --check lib/client.js           # 以及 lib/index.js、lib/catalog.js、li
 ```
 ├─ package.json           dsh.bundle.patch + dsh.client { platform: "web" }
 ├─ cordis.patch.yml       - insert:  id: dsh-disk-cleaner
-├─ lib/index.js    (403)  Host：HTTP 路由 + disk_cleaner 工具，共用同一个 run()，含 reveal
-├─ lib/catalog.js  (500)  14 个目标，measurePath / purgePath / resolveTargets / drives
+├─ lib/index.js    (405)  Host：HTTP 路由 + disk_cleaner 工具，共用同一个 run()，含 reveal
+├─ lib/catalog.js  (688)  19 个目标，measurePath / purgePath / resolveTargets / drives
 ├─ lib/audit.js    (365)  只读评估，10 分钟缓存，带 areaPaths，不暴露任何删除
 ├─ lib/plan.js     (150)  纯函数：测量结果 → 有序步骤
-├─ lib/client.js  (1341)  Client 半面：slot、面板、偏好、zh/en 字典、CSS
+├─ lib/client.js  (1355)  Client 半面：slot、面板、偏好、zh/en 字典、CSS
 ├─ locale/{en,zh}.json    展示元数据（meta.title / meta.description）
 ├─ icon.svg               插件图标
 ├─ README.md              本文件

package/lib/catalog.js

@@ -158,6 +158,122 @@ const browserCaches = (userData) => {
   return out;
 };
 
+/**
+ * Per-app cache folders inside `%APPDATA%`. Every one is spelled out instead of discovered by
+ * a `*cache*` sweep: a folder is only safe to delete when somebody has looked at what it
+ * holds, and the same sweep that finds this WPS cache also finds WeChat's profile store and
+ * VS Code's web storage, which cost a re-login to rebuild.
+ */
+const appCaches = () => {
+  const roaming = env('APPDATA') ?? '';
+  return [
+    path.join(roaming, 'kingsoft', 'wps', 'addons', 'data', 'win-i386', 'cef', '2', 'cache'),
+    path.join(roaming, 'FTNN', '2.0', 'Common', 'cef_cache'),
+    ...subdirs(path.join(roaming, 'com.qoder.app.stable'), ['Cache', 'Code Cache']),
+    ...subdirs(path.join(roaming, 'Trae CN'), ['Cache', 'CachedData']),
+    ...subdirs(path.join(roaming, 'Trae'), ['Cache', 'CachedData']),
+    ...subdirs(path.join(roaming, '@deepseek-ai', 'dsh-desktop'), ['Cache', 'Code Cache', 'GPUCache', 'GrShaderCache']),
+    ...subdirs(path.join(roaming, 'PersonalCenter'), ['Cache']),
+    ...subdirs(path.join(roaming, '微信开发者工具'), ['Cache']),
+    ...subdirs(path.join(roaming, '腾讯电脑管家-全局搜'), ['Cache']),
+    ...subdirs(path.join(roaming, 'appGallery'), ['Crashpad']),
+  ];
+};
+
+/** Log folders that only ever hold history: nothing reads an old log back at runtime. */
+const appLogs = () => {
+  const roaming = env('APPDATA') ?? '';
+  return [
+    path.join(roaming, 'FTNN', '2.0', 'Logs'),
+    path.join(roaming, 'Tencent', 'xwechat', 'log'),
+    ...subdirs(path.join(roaming, 'com.qoder.app.stable'), ['logs']),
+    ...subdirs(path.join(roaming, 'Trae CN'), ['logs']),
+    ...subdirs(path.join(roaming, 'Trae'), ['logs']),
+    ...subdirs(path.join(roaming, 'DingTalk'), ['log']),
+    ...subdirs(path.join(roaming, 'PersonalCenter'), ['log']),
+    ...subdirs(path.join(roaming, 'io.github.clash-verge-rev.clash-verge-rev'), ['logs']),
+    ...subdirs(path.join(roaming, 'MAXHUBShare'), ['log']),
+  ];
+};
+
+/**
+ * Scratch directories an app keeps inside its own roaming folder rather than in `%TEMP%`.
+ * These belong to an app that may be running right now, so the target keeps a two-day floor
+ * instead of being purged outright.
+ */
+const appTempDirs = () => [
+  path.join(env('APPDATA') ?? '', 'WorkDaddy', 'client-tmp'),
+  path.join(env('APPDATA') ?? '', 'PersonalCenter', 'Temp'),
+];
+
+/**
+ * A plugin pool keeps every version it ever installed, because the manager picks one by name
+ * instead of replacing it in place. WPS alone had 347 folders across 131 families here. The
+ * highest version of each family stays — it is what the manager loads — and the rest are dead
+ * weight it never reads again. Families with a single member are skipped: nothing then proves
+ * which one is live.
+ */
+const pooledOldVersions = (pool, pattern) => {
+  if (!isDir(pool)) return [];
+  const families = new Map();
+  for (const entry of listDir(pool)) {
+    if (entry.isSymbolicLink()) continue;
+    const match = pattern.exec(entry.name);
+    if (match === null) continue;
+    const [, base, version] = match;
+    if (!families.has(base)) families.set(base, []);
+    families.get(base).push({ name: entry.name, version });
+  }
+  const out = [];
+  for (const list of families.values()) {
+    if (list.length < 2) continue;
+    list.sort((a, b) => compareVersion(a.version, b.version));
+    for (const older of list.slice(0, -1)) out.push(path.join(pool, older.name));
+  }
+  return out;
+};
+
+const wpsPluginOldVersions = () =>
+  pooledOldVersions(path.join(env('APPDATA') ?? '', 'kingsoft', 'wps', 'addons', 'pool', 'win-i386'), /^(.+)_([0-9][0-9._]*)$/);
+
+/** The version folders an installer left under its own `app` directory, such as FTNN's. */
+const installedAppVersions = (appRoot) => {
+  if (!isDir(appRoot)) return [];
+  return listDir(appRoot)
+    .filter((entry) => entry.isDirectory() && !entry.isSymbolicLink())
+    .map((entry) => entry.name)
+    .filter((name) => /^[0-9][0-9._]*$/.test(name));
+};
+
+/**
+ * Update packages the vendor has already applied, decided by comparison rather than by age.
+ * FTNN names a patch `Download-<from>-<to>-<hash>.spd` with bare build numbers while it keeps
+ * full `16.35.27108` folders in Program Files, so the comparison is build number against the
+ * newest installed build. A patch at or above that build may still be pending, so it stays.
+ */
+const ftnnAppliedPatches = () => {
+  const programFiles = env('ProgramFiles');
+  if (programFiles === undefined) return [];
+  const installed = installedAppVersions(path.join(programFiles, 'FTNN', 'app')).sort(compareVersion);
+  if (installed.length === 0) return [];
+  const newestBuild = Number(installed[installed.length - 1].split('.').pop());
+  if (!Number.isFinite(newestBuild)) return [];
+  const liveUpdate = path.join(env('APPDATA') ?? '', 'FTNN', '2.0', 'LiveUpdate', 'win_qtnn');
+  const out = [];
+  for (const entry of listDir(liveUpdate)) {
+    if (!entry.isFile() || entry.isSymbolicLink()) continue;
+    const match = /^Download-[0-9]+-([0-9]+)-[0-9a-f]+\.spd$/i.exec(entry.name);
+    if (match === null) continue;
+    if (Number(match[1]) < newestBuild) out.push(path.join(liveUpdate, entry.name));
+  }
+  return out;
+};
+
+const supersededUpdatePackages = () => [
+  ...ftnnAppliedPatches(),
+  ...pooledOldVersions(path.join(env('APPDATA') ?? '', 'WorkDaddy', 'update'), /^(.+)-([0-9][0-9._]*)(\.[A-Za-z0-9]+)?$/),
+];
+
 /**
  * `purge` targets drop every entry under the path. `aged` targets keep anything modified
  * within `minAgeDays`, because those files may belong to a process that is still running.
@@ -281,6 +397,46 @@ const CATALOG = [
     roots: ['LOCALAPPDATA', 'APPDATA'],
     paths: () => appUpdaters(),
   },
+  {
+    id: 'app-caches',
+    kind: 'purge',
+    risk: 'caution',
+    note: 'rebuild',
+    roots: ['APPDATA'],
+    paths: () => appCaches(),
+  },
+  {
+    id: 'app-logs',
+    kind: 'purge',
+    risk: 'safe',
+    roots: ['APPDATA'],
+    paths: () => appLogs(),
+  },
+  {
+    id: 'app-temp',
+    kind: 'aged',
+    minAgeDays: 2,
+    risk: 'caution',
+    note: 'in-use',
+    roots: ['APPDATA'],
+    paths: () => appTempDirs(),
+  },
+  {
+    id: 'plugin-old-versions',
+    kind: 'purge',
+    risk: 'caution',
+    note: 'rollback',
+    roots: ['APPDATA'],
+    paths: () => wpsPluginOldVersions(),
+  },
+  {
+    id: 'update-packages',
+    kind: 'purge',
+    risk: 'caution',
+    note: 'superseded',
+    roots: ['APPDATA'],
+    paths: () => supersededUpdatePackages(),
+  },
 ];
 
 const byId = new Map(CATALOG.map((entry) => [entry.id, entry]));
@@ -309,6 +465,19 @@ const within = (abs, root) => {
 /** A volume such as `C:\`; anything else (including undefined) means every volume. */
 const onDrive = (abs, drive) => drive === undefined || path.parse(abs).root.toLowerCase() === drive.toLowerCase();
 
+/**
+ * Some targets are single files (an already-applied update package) rather than directories,
+ * so every step below answers both. A file target is unlinked directly and never has its
+ * parent removed.
+ */
+const isFile = (p) => {
+  try {
+    return fs.statSync(p).isFile();
+  } catch {
+    return false;
+  }
+};
+
 /** Resolve catalog ids to the concrete directories that exist right now, optionally on one volume. */
 export function resolveTargets(only, drive) {
   const selected = only === undefined ? CATALOG : CATALOG.filter((entry) => only.includes(entry.id));
@@ -317,7 +486,7 @@ export function resolveTargets(only, drive) {
     for (const candidate of entry.paths()) {
       if (typeof candidate !== 'string' || candidate === '') continue;
       if (tooBroad(candidate)) continue;
-      if (!isDir(candidate)) continue;
+      if (!isDir(candidate) && !isFile(candidate)) continue;
       if (!onDrive(candidate, drive)) continue;
       const roots = entry.roots.map((name) => env(name)).filter(Boolean);
       if (roots.length > 0 && !roots.some((root) => within(candidate, root))) continue;
@@ -338,6 +507,13 @@ export function resolveTargets(only, drive) {
 }
 
 export async function measurePath(abs) {
+  if (isFile(abs)) {
+    try {
+      return { bytes: fs.statSync(abs).size, files: 1 };
+    } catch {
+      return { bytes: 0, files: 0 };
+    }
+  }
   let bytes = 0;
   let files = 0;
   let seen = 0;
@@ -467,6 +643,18 @@ export async function clean(ids, options = {}) {
         failed += 1;
         continue;
       }
+      if (isFile(abs)) {
+        try {
+          const stat = await fsp.stat(abs);
+          if (cutoff !== undefined && stat.mtimeMs > cutoff) continue;
+          await fsp.unlink(abs);
+          bytes += stat.size;
+          removed += 1;
+        } catch {
+          failed += 1;
+        }
+        continue;
+      }
       const outcome = await purgePath(abs, cutoff);
       bytes += outcome.bytes;
       removed += outcome.removed;

package/lib/client.js

@@ -39,6 +39,8 @@ window.__ModuleLoader__.load({
       why_rebuild: '缓存会自动重建，下次打开略慢',
       why_elevation: '需要管理员权限；普通窗口下会被系统拒绝',
       'why_pending-update': '只清 {n} 天前的下载，避免删掉还没装的更新',
+      why_rollback: '每个插件/程序只留版本号最高的一份，其余是回滚副本',
+      why_superseded: '版本号不高于已装版本的更新包，装着的那份已经生效',
       pathCount: '{n} 处',
       driveLabel: '清理范围',
       allDrives: '全部磁盘',
@@ -59,6 +61,11 @@ window.__ModuleLoader__.load({
       'target_windows-update': 'Windows 更新缓存',
       'target_recycle-bin': '回收站',
       'target_app-updaters': '更新安装包残留',
+      'target_app-caches': '各应用缓存',
+      'target_app-logs': '各应用日志',
+      'target_app-temp': '各应用临时目录',
+      'target_plugin-old-versions': '插件旧版本',
+      'target_update-packages': '已应用的更新包',
       auditTitle: '空间评估（本插件不会删除）',
       auditHint: '统计缓存之外真正占空间的东西：已装软件、WSL 虚拟磁盘、Windows 组件库，以及你自己的文件。这些一律不由本插件删除，只列出供你判断。',
       auditRun: '开始评估',
@@ -176,6 +183,8 @@ window.__ModuleLoader__.load({
       why_rebuild: 'rebuilt automatically; the next open is slower',
       why_elevation: 'needs an elevated prompt; a normal window is refused by Windows',
       'why_pending-update': 'only downloads older than {n} day(s), so a pending update survives',
+      why_rollback: 'only the highest version of each family stays; the rest are rollback copies',
+      why_superseded: 'the update package version is not above what is installed, so it is already applied',
       pathCount: '{n} location(s)',
       driveLabel: 'Limit to',
       allDrives: 'All drives',
@@ -196,6 +205,11 @@ window.__ModuleLoader__.load({
       'target_windows-update': 'Windows update cache',
       'target_recycle-bin': 'Recycle Bin',
       'target_app-updaters': 'Leftover update installers',
+      'target_app-caches': 'App caches',
+      'target_app-logs': 'App logs',
+      'target_app-temp': 'App scratch folders',
+      'target_plugin-old-versions': 'Old plugin versions',
+      'target_update-packages': 'Applied update packages',
       auditTitle: 'Space assessment (this plugin deletes none of it)',
       auditHint: 'What actually takes up room outside caches: installed programs, WSL disk images, the Windows component store, and your own files. None of it is removed here; it is listed so you can decide.',
       auditRun: 'Run assessment',

package/lib/index.js

@@ -195,6 +195,8 @@ const NOTE_MEANING = {
   'in-use': 'a running program may hold some of these files; only files older than the age limit go',
   rebuild: 'the owner rebuilds these, so the next start or page load is slower',
   elevation: 'Windows refuses an unelevated delete here; run the plugin elevated to reach these bytes',
+  rollback: 'an older version the app keeps for rollback; what it runs now is the newest of that family',
+  superseded: 'an update package whose version is at or below what is already installed',
 };
 
 const formatBytes = (bytes) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-disk-cleaner",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "type": "module",
   "description": "Disk Cleaner for DSH: scan known-safe cache locations, see what they occupy, and reclaim the space from a panel or from the agent.",
   "keywords": [

package/smoke.mjs

@@ -262,9 +262,9 @@ check('tool description warns audit is read-only', /read-only: it never removes
 check('every effect is labelled', applied.every((label) => typeof label === 'string' && label.startsWith('dsh-disk-cleaner:')));
 
 const ids = [...catalog.matchAll(/^\s{4}id: '([a-z-]+)',$/gm)].map((m) => m[1]);
-check('catalog has the documented 14 targets', ids.length === 14, `got ${ids.length}`);
+check('catalog has the documented 19 targets', ids.length === 19, `got ${ids.length}`);
 check('every catalog id has a client label', ids.every((id) => zhKeys.includes(`target_${id}`) && enKeys.includes(`target_${id}`)));
-check('every note code has an explanation', ['why_safe', 'why_in-use', 'why_rebuild', 'why_elevation', 'why_pending-update'].every((k) => zhKeys.includes(k)));
+check('every note code has an explanation', ['why_safe', 'why_in-use', 'why_rebuild', 'why_elevation', 'why_pending-update', 'why_rollback', 'why_superseded'].every((k) => zhKeys.includes(k) && enKeys.includes(k)));
 const areaIds = [...auditSrc.matchAll(/^\s{6}id: '([a-z-]+)',$/gm)].map((m) => m[1]);
 check('every assessment area has a translated label and reason', areaIds.length > 0 && areaIds.every((id) => zhKeys.includes(`area_${id}`) && zhKeys.includes(`area_${id}_why`) && enKeys.includes(`area_${id}`) && enKeys.includes(`area_${id}_why`)), `areas: ${areaIds.join(',')}`);
 check('a reveal request names an area, never a path', index.includes("action === 'reveal'") && auditSrc.includes('export function areaPaths') && !/revealPath[\s\S]{0,200}payload\.path/.test(index));