dsh-disk-cleaner 1.6.1 → 1.6.3

package/README.md

@@ -5,7 +5,7 @@
 <!-- badges -->
 | | |
 | --- | --- |
-| **version** | `1.6.0` |
+| **version** | `1.6.3` |
 | **DSH** | `0.2.1-rc.5`（开发与实测版本；用到 `plugins.bundle.config`、`settings.section`） |
 | **license** | [MIT](LICENSE) |
 | **Node** | `>= 22`（仅运行冒烟测试需要） |
@@ -16,7 +16,7 @@
 
 **dsh-disk-cleaner** is a disk-space plugin for [DeepSeek Harness](https://github.com/deepseek-ai) (DSH). It does two different jobs, and keeps them apart on purpose:
 
-1. **Clean** — thirty-two known-safe locations (temp folders, package manager stores, browser caches, crash dumps, the Recycle Bin, leftover update installers, per-app caches and logs, superseded plugin versions and applied update packages). Only these are ever deleted.
+1. **Clean** — thirty-two known locations (temp folders, package manager stores, browser caches, crash dumps, the Recycle Bin, leftover update installers, per-app caches and logs, superseded plugin versions and applied update packages). Only these are ever deleted, and the ones that cannot be rebuilt are never preselected.
 2. **Assess** — everything the plugin will *not* delete (installed programs, the WSL virtual disk, the Windows component store, chat-app data, your own folders). Measured and listed, never removed.
 
 The assessment ends with a **plan**: the same numbers ordered by what it costs you to act, with the exact Windows command for the steps the plugin cannot perform itself.
@@ -29,7 +29,7 @@ Both the panel and the agent reach the *same* operations: the cleaning logic liv
 | --- | --- |
 | Scan | Measures all thirty-two targets concurrently and shows what each occupies |
 | Per-drive filter | Chip row of mounted volumes; scanning or cleaning can be limited to one drive, and rows with nothing on that drive disappear |
-| Risk labels | Every target is `safe` or `caution`, with a one-line reason (`in-use` / `rebuild` / `elevation` / `pending-update` / `rollback` / `superseded` / `history` / `duplicate` / `database-backup` / `orphan`) and a permanent legend, so "caution" never means "unspecified" |
+| Risk labels | Every target is `safe` or `caution`, with a one-line reason (`in-use` / `rebuild` / `elevation` / `pending-update` / `rollback` / `superseded` / `history` / `duplicate` / `database-backup` / `orphan` / `irreversible`) and a permanent legend, so "caution" never means "unspecified" |
 | Aged deletion | `temp` and `windows-temp` only remove files older than one day; files a running program still holds are skipped |
 | Space assessment | Walks the disk read-only and groups the result into Windows / installed software / your own files, plus the ten largest app-data folders. Any row opens its folder in Explorer — click, right click, or Enter |
 | Honest re-run | Re-running the assessment re-measures; a plain call still answers from the ten-minute cache |
@@ -58,7 +58,7 @@ Every path is built from this table — a caller selects an **id**, never a path
 | `edge-cache` | same set, Edge profiles | purge | caution | rebuilt; next open is slower |
 | `code-cache` | `%APPDATA%\Code\{Cache,CachedData,CachedExtensionVSIXs}` | purge | caution | rebuilt; next start is slower |
 | `windows-update` | `C:\Windows\SoftwareDistribution\Download` | purge | caution | needs elevation |
-| `recycle-bin` | `$Recycle.Bin\S-1-5-*` on every mounted volume | purge | safe | it is the Recycle Bin |
+| `recycle-bin` | `$Recycle.Bin\S-1-5-*` on every mounted volume | purge | caution | emptying it cannot be undone; never preselected |
 | `inet-cache` | `%LOCALAPPDATA%\Microsoft\Windows\INetCache` | purge | caution | rebuilt |
 | `app-updaters` | `*-updater` folders under `%LOCALAPPDATA%` and `%APPDATA%` — the installers app updaters leave behind | aged, 3 days | caution | a download from the last three days may still be a pending update |
 | `app-caches` | named cache folders inside `%APPDATA%`: the WPS CEF cache, FTNN `cef_cache`, and the `Cache` / `Code Cache` / `CachedData` / `GPUCache` of Qoder, Trae, the DSH desktop app, PersonalCenter, the WeChat devtools and QQ PC Manager | purge | caution | CEF and Chromium caches rebuild on next start |
@@ -76,7 +76,7 @@ Every path is built from this table — a caller selects an **id**, never a path
 | `rewind-snapshots` | `session-*` folders under `%USERPROFILE%\.dsh\rewind-snapshots` | aged, 30 days | caution | a recent session stays restorable |
 | `rotated-logs` | `*.old.log` and `*.log.N` files in the `logs` folders of the agent apps | aged, 3 days | safe | nothing reads a rotated file back |
 | `qoder-old-versions` | version folders under `%LOCALAPPDATA%\Programs\Qoder\.qoder-versions` other than the one the launcher names | purge | caution | the launcher's `state.ini` names the build it runs; an unreadable one means nothing is removed |
-| `orphan-app-data` | `%LOCALAPPDATA%\Tencent\QQGuild` - left by an app with no shortcut, no uninstall entry and nothing written for over two years | purge | caution | all four signals must agree before the folder is offered |
+| `orphan-app-data` | `%LOCALAPPDATA%\Tencent\QQGuild` - the QQGuild data folder | purge | caution | the whole folder is offered for deletion once no file in it has been written for 30 days |
 | `app-data-caches` | Chromium caches under `%LOCALAPPDATA%` for Electron, DingTalk, JianyingPro and the WeChat devtools | aged, 7 days | caution | an app that still runs rewrites its cache constantly, so only a week-old tree qualifies |
 | `office-update-cache` | `%LOCALAPPDATA%\Microsoft\Office\SolutionPackages` - update packages Office already applied | purge | caution | Office stages them before applying; nothing reads them back afterwards |
 
@@ -159,23 +159,31 @@ These are enforced in `lib/catalog.js` and must not be relaxed:
 - `editor-builds` drops a build only when `bin\code.cmd` exists and names a different build that is also on disk; `old_x` goes only while `x` is still beside it.
 - `database-backups` matches `.sqlite*.bak` by name only; the live `zotero.sqlite` is never a candidate.
 - `qoder-old-versions` reads the launcher's `state.ini` for the build it runs; a missing or unparsable file, or a named build that is not on disk, removes nothing.
-- `orphan-app-data` needs four independent signals to agree: no Start-menu shortcut, no uninstall entry, no folder under either `Program Files`, and no file written for two years. Any one missing and the folder is not offered.
+- `orphan-app-data` is offered when the QQGuild folder exists and no file in it has been written in the last 30 days; the whole folder is then a full-delete target. It does not check shortcuts, uninstall entries, or Program Files.
 - The directory Windows refuses to let an unelevated process write (`SoftwareDistribution\Download`) is labelled `elevation` and excluded from "reclaimable now". `C:\Windows\Temp` is **not** one of them on a default ACL: it grants `BUILTIN\Users` create and delete, so only EBUSY on a live file stops a delete there, which the age limit covers.
 
 ### Install
 
-Published on npm as [`dsh-disk-cleaner`](https://www.npmjs.com/package/dsh-disk-cleaner):
+A catalog entry has been submitted to the curated [awesome-dsh-plugin](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin) list, which powers **dshmarket → Discover** ([PR #12970](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/12970), pending review) — once it merges, search **dsh-disk-cleaner** there and install it in one click. Until then, use a direct install below.
+
+Published on npm as [`dsh-disk-cleaner`](https://www.npmjs.com/package/dsh-disk-cleaner) — latest `1.6.3`:
 
 ```bash
 npm i dsh-disk-cleaner
 ```
 
+A prebuilt tarball is attached to the [v1.6.3 Release](https://github.com/stallenlu/dsh-disk-cleaner/releases/tag/v1.6.3); installing from it skips DSH's build-approval step:
+
+```bash
+dsh plugin --profile <profile> add https://github.com/stallenlu/dsh-disk-cleaner/releases/download/v1.6.3/dsh-disk-cleaner-1.6.3.tgz
+```
+
 Then enable it in the profile — in `$DSH_PROFILE_DIR/package.json`:
 
 ```json
 {
   "dependencies": {
-    "dsh-disk-cleaner": "^1.0.0"
+    "dsh-disk-cleaner": "^1.6.3"
   },
   "dsh": {
     "profile": {
@@ -196,7 +204,7 @@ The bundle's own `cordis.patch.yml` inserts the plugin row; no profile patch edi
 ### Development
 
 ```bash
-node smoke.mjs                       # 82 assertions, zero dependencies
+node smoke.mjs                       # 85 assertions, zero dependencies
 node --check lib/client.js           # and lib/index.js, lib/catalog.js, lib/audit.js, lib/plan.js
 ```
 
@@ -225,6 +233,8 @@ What the smoke test deliberately does **not** cover: anything that walks a real
 | A dry run reports what a real run frees | The 30-day rewind window reports 263 KB not 283 MB, and scan matches the dry run |
 | Grouping and folding | The real `groupRows` runs out of the bundle against a mixed list: fixed order, per-section totals, an unknown group lands in "other", an empty section is the folded one. A click on a section head folds that section and only that one, and a folded section's rows drop out of bulk select |
 | Visual layout | Checked by hand in the running Web UI. No browser automation here, so this one is a human check, not a test. |
+| Agent tool returns a string matching its output schema | `node smoke.mjs` regression assertion (the 1.6.1 fix) |
+| A real agent-tool delete invalidates the assessment cache | `node smoke.mjs` regression assertion (the 1.6.1 fix) |
 
 ### Implementation notes
 
@@ -248,20 +258,27 @@ What the smoke test deliberately does **not** cover: anything that walks a real
 ```
 ├─ package.json           dsh.bundle.patch + dsh.client { platform: "web" }
 ├─ cordis.patch.yml       - insert:  id: dsh-disk-cleaner
-├─ lib/index.js    (411)  Host: HTTP route + disk_cleaner tool, same run() for both; reveal
+├─ lib/index.js    (431)  Host: HTTP route + disk_cleaner tool, same run() for both; reveal
 ├─ lib/catalog.js  (1192)  The 32 targets, measurePath / purgePath / resolveTargets / drives
 ├─ lib/audit.js    (365)  Read-only assessment, 10-minute cache, areaPaths, exposes no deletion
 ├─ lib/plan.js     (150)  Pure: measurements → ordered steps
-├─ lib/client.js  (1492)  Client half: slots, panel, preferences, zh/en dictionaries, CSS
+├─ lib/client.js  (1493)  Client half: slots, panel, preferences, zh/en dictionaries, CSS
 ├─ locale/{en,zh}.json    Display metadata (meta.title / meta.description)
 ├─ icon.svg               Plugin icon
 ├─ README.md              This file
 ├─ LICENSE                MIT
-└─ smoke.mjs              82 assertions, zero dependencies
+└─ smoke.mjs              85 assertions, zero dependencies
 ```
 
 Client-half slots: `sidebar.panellist` (order 50, disposed in settings-only mode), `main` (keyed by the package name), `settings.section` (order 30, disposed in sidebar-only mode), `plugins.bundle.config` (keyed by the package name).
 
+### What's new
+
+- **1.6.3** — Safety and honesty rather than new features. The Recycle Bin is no longer filed under `safe`: emptying it cannot be undone, so it is never preselected, never picked by "select all", and carries its own `irreversible` note instead of the generic "rebuilt; next start is slower". The confirm dialog now names each target and the total instead of asking a generic "delete these?". A target that names no environment root is bounded by the volume it sits on rather than skipping the boundary check. `measure` and `purge` now count entries in the same unit, and a walk that hits the 2,000,000-entry cap says so (`truncated`) instead of claiming exact totals. A directory removal refused for a reason other than "not empty" is counted as `blocked` instead of being swallowed, and a clean that left files behind reports a warning rather than a green success. The orphan target is named for what it actually measures (the QQGuild folder).
+- **1.6.2** — Documentation only: the README, the in-source comment, the panel's zh/en explanations and the tool's note legend now describe `orphan-app-data` as it actually behaves (the QQGuild folder is offered for full deletion once no file in it has been written for 30 days), instead of claiming four independent signals and a two-year idle period. No behaviour change; the refreshed README ships in the npm package and the [v1.6.2 Release](https://github.com/stallenlu/dsh-disk-cleaner/releases/tag/v1.6.2) tarball.
+- **1.6.1** — Fixed the `disk_cleaner` agent tool: `output.schema` now declares `type: 'string'`, matching the text `execute()` returns (previously every call was rejected by the host's output validator with `tool "disk_cleaner" returned invalid output: "value" must be an object`). A real delete through the agent tool now invalidates the assessment cache, the same way the panel's HTTP route does. Two regression assertions added; a prebuilt tarball ships on the [v1.6.1 Release](https://github.com/stallenlu/dsh-disk-cleaner/releases/tag/v1.6.1).
+- **1.6.0** — The 32 targets are grouped under seven foldable headings.
+
 ---
 
 <a id="中文"></a>
@@ -269,7 +286,7 @@ Client-half slots: `sidebar.panellist` (order 50, disposed in settings-only mode
 
 **dsh-disk-cleaner** 是 [DeepSeek Harness](https://github.com/deepseek-ai)（DSH）的磁盘空间插件。它做两件不同的事，并且刻意分开：
 
-1. **清理** —— 三十二个已知安全的位置（临时目录、包管理器存储、浏览器缓存、崩溃转储、回收站、更新安装包残留、各应用的缓存与日志、被淘汰的插件版本与已应用的更新包）。只有这些会被删除。
+1. **清理** —— 三十二个已知位置（临时目录、包管理器存储、浏览器缓存、崩溃转储、回收站、更新安装包残留、各应用的缓存与日志、被淘汰的插件版本与已应用的更新包）。只有这些会被删除，其中无法重建的项目永远不会被预选。
 2. **评估** —— 所有本插件**不会**删的东西（已装程序、WSL 虚拟磁盘、Windows 组件库、聊天软件数据、你自己的文件夹）。只测量、只列出，绝不删除。
 
 评估的最后是一份**处理方案**：同一批数字按「你要付出多少代价」排序，本插件做不到的步骤附上确切的 Windows 命令。
@@ -282,7 +299,7 @@ Client-half slots: `sidebar.panellist` (order 50, disposed in settings-only mode
 | --- | --- |
 | 扫描 | 并发测量全部三十二个目标，显示各自占用 |
 | 按盘过滤 | 已挂载卷的胶囊按钮；扫描与清理都可限定单盘，该盘上为空的项会隐藏 |
-| 风险标注 | 每个目标都标 `安全` 或 `注意`，并给一行理由（`in-use` / `rebuild` / `elevation` / `pending-update` / `rollback` / `superseded` / `history` / `duplicate` / `database-backup` / `orphan`），图例常驻，所以「注意」永远不是「说不清」 |
+| 风险标注 | 每个目标都标 `安全` 或 `注意`，并给一行理由（`in-use` / `rebuild` / `elevation` / `pending-update` / `rollback` / `superseded` / `history` / `duplicate` / `database-backup` / `orphan` / `irreversible`），图例常驻，所以「注意」永远不是「说不清」 |
 | 保留期删除 | `temp` 与 `windows-temp` 只删一天前的文件；被运行中程序占住的自动跳过 |
 | 空间评估 | 只读遍历磁盘，按 Windows 自身 / 已装软件 / 你自己的文件 分组，另列占用最大的十个应用数据目录。每一行都能打开所在目录——单击、右键或回车 |
 | 重新评估真的重测 | 「重新评估」会重新测量；普通调用仍然走十分钟缓存 |
@@ -311,7 +328,7 @@ Client-half slots: `sidebar.panellist` (order 50, disposed in settings-only mode
 | `edge-cache` | 同上，Edge 的配置目录 | 全清 | 注意 | 会重建，下次打开更慢 |
 | `code-cache` | `%APPDATA%\Code\{Cache,CachedData,CachedExtensionVSIXs}` | 全清 | 注意 | 会重建，下次启动更慢 |
 | `windows-update` | `C:\Windows\SoftwareDistribution\Download` | 全清 | 注意 | 需要管理员权限 |
-| `recycle-bin` | 各已挂载卷的 `$Recycle.Bin\S-1-5-*` | 全清 | 安全 | 就是回收站 |
+| `recycle-bin` | 各已挂载卷的 `$Recycle.Bin\S-1-5-*` | 全清 | 注意 | 清空不可恢复，永不被预选 |
 | `inet-cache` | `%LOCALAPPDATA%\Microsoft\Windows\INetCache` | 全清 | 注意 | 会重建 |
 | `app-updaters` | `%LOCALAPPDATA%` 与 `%APPDATA%` 下的 `*-updater` 目录——升级程序留下的安装包 | 保留期 3 天 | 注意 | 三天内的下载可能还是待安装的更新 |
 | `app-caches` | `%APPDATA%` 里点名列出的缓存目录：WPS 的 CEF 缓存、FTNN 的 `cef_cache`，以及 Qoder、Trae、DSH 桌面端、PersonalCenter、微信开发者工具、腾讯电脑管家的 `Cache` / `Code Cache` / `CachedData` / `GPUCache` | 全清 | 注意 | CEF 与 Chromium 缓存会在下次启动时重建 |
@@ -329,7 +346,7 @@ Client-half slots: `sidebar.panellist` (order 50, disposed in settings-only mode
 | `rewind-snapshots` | `%USERPROFILE%\.dsh\rewind-snapshots` 下的 `session-*` 目录 | 保留期 30 天 | 注意 | 最近的会话仍然可以回滚 |
 | `rotated-logs` | 各 agent 应用 `logs` 目录下的 `*.old.log` 与 `*.log.N` 文件 | 保留期 3 天 | 安全 | 轮转掉的日志不会被读回 |
 | `qoder-old-versions` | `%LOCALAPPDATA%\Programs\Qoder\.qoder-versions` 下不是启动器所指的那个版本目录 | 全清 | 注意 | 启动器 `state.ini` 写明它跑哪个版本；读不到就一个都不删 |
-| `orphan-app-data` | `%LOCALAPPDATA%\Tencent\QQGuild` —— 没有快捷方式、没有卸载项、两年多没写过文件的程序留下的数据 | 全清 | 注意 | 四条证据必须同时成立才会被列为可删 |
+| `orphan-app-data` | `%LOCALAPPDATA%\Tencent\QQGuild` —— QQ 频道数据目录 | 全清 | 注意 | 目录内 30 天没有任何文件写入时，整个目录会被列为全清目标 |
 | `app-data-caches` | `%LOCALAPPDATA%` 下 Electron、钉钉、剪映、微信开发者工具的 Chromium 缓存 | 保留期 7 天 | 注意 | 还在跑的程序会不停改写缓存，所以只有一周没动过的才算 |
 | `office-update-cache` | `%LOCALAPPDATA%\Microsoft\Office\SolutionPackages` —— Office 已应用的更新暂存包 | 全清 | 注意 | Office 先暂存再应用，应用后没有东西会读回 |
 
@@ -411,23 +428,31 @@ Client-half slots: `sidebar.panellist` (order 50, disposed in settings-only mode
 - `editor-builds` 只有在 `bin\code.cmd` 存在且指向另一份确实在磁盘上的构建时才删；`old_x` 也只有在 `x` 仍在旁边时才删。
 - `database-backups` 只按名字匹配 `.sqlite*.bak`，正在用的 `zotero.sqlite` 永不成为候选。
 - `qoder-old-versions` 从启动器的 `state.ini` 读出它实际运行哪个版本；文件缺失、解析不出、或它指的版本不在磁盘上，一律一个都不删。
-- `orphan-app-data` 要求四条独立证据同时成立：开始菜单没有快捷方式、注册表没有卸载项、两个 `Program Files` 下都没有目录、两年内没有任何文件被写过。缺一条就不会列为可删。
+- `orphan-app-data` 的判据只有一条：QQGuild 目录存在，且目录内 30 天内没有任何文件被写入过，此时整个目录被列为全清目标。它不检查快捷方式、卸载项或 Program Files。
 - 那个拒绝普通权限写入的 Windows 目录标为 `elevation`，并排除在「现在能回收」之外。
 
 ### 安装
 
-已发布到 npm：[`dsh-disk-cleaner`](https://www.npmjs.com/package/dsh-disk-cleaner)。
+已向精选目录 [awesome-dsh-plugin](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin) 提交收录，它是 **dshmarket → 发现** 的数据源（[PR #12970](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/12970)，审核中）——合并后即可在 dshmarket 里搜索 **dsh-disk-cleaner** 一键安装。在那之前，用下面任一种直接安装方式。
+
+已发布到 npm：[`dsh-disk-cleaner`](https://www.npmjs.com/package/dsh-disk-cleaner)，最新版 `1.6.3`。
 
 ```bash
 npm i dsh-disk-cleaner
 ```
 
+[v1.6.3 Release](https://github.com/stallenlu/dsh-disk-cleaner/releases/tag/v1.6.3) 还附带一个预构建 tarball，从它安装可跳过 DSH 的构建授权步骤：
+
+```bash
+dsh plugin --profile <profile> add https://github.com/stallenlu/dsh-disk-cleaner/releases/download/v1.6.3/dsh-disk-cleaner-1.6.3.tgz
+```
+
 然后在 profile 里启用 —— 在 `$DSH_PROFILE_DIR/package.json`：
 
 ```json
 {
   "dependencies": {
-    "dsh-disk-cleaner": "^1.0.0"
+    "dsh-disk-cleaner": "^1.6.3"
   },
   "dsh": {
     "profile": {
@@ -445,14 +470,10 @@ git clone https://github.com/stallenlu/dsh-disk-cleaner
 
 bundle 自带的 `cordis.patch.yml` 会插入插件行，无需改 profile 的 patch。`link:` 依赖是符号链接，所以改 **client** 刷新页面即生效，改 **host**（`lib/index.js`）需要重新启用该 bundle 或重启 DSH。从 npm 装则是相反的一面：要升级就改版本号。
 
-```bash
-git clone https://github.com/stallenlu/dsh-disk-cleaner
-```
-
 ### 开发
 
 ```bash
-node smoke.mjs                       # 82 条断言，零依赖
+node smoke.mjs                       # 85 条断言，零依赖
 node --check lib/client.js           # 以及 lib/index.js、lib/catalog.js、lib/audit.js、lib/plan.js
 ```
 
@@ -481,6 +502,8 @@ node --check lib/client.js           # 以及 lib/index.js、lib/catalog.js、li
 | 预演报告的字节数等于真删能释放的字节数 | 30 天的回滚窗口报 263 KB 而不是 283 MB，且扫描结果与预演一致 |
 | 分类与折叠 | 从 bundle 里取出真正的 `groupRows` 跑一组混合数据：顺序固定、按类合计、未知类别落到「其他」、空的类别是收起来的那个。点某一类的标题只折叠这一类，折叠里的行不参与批量选择 |
 | 视觉排版 | 在运行中的 Web UI 里手工确认过。本环境没有浏览器自动化，所以这条是人眼检查，不是测试。 |
+| agent 工具返回字符串且与 output.schema 一致 | `node smoke.mjs` 回归断言（1.6.1 修复） |
+| agent 工具真删后评估缓存失效 | `node smoke.mjs` 回归断言（1.6.1 修复） |
 
 ### 实现要点
 
@@ -504,20 +527,27 @@ node --check lib/client.js           # 以及 lib/index.js、lib/catalog.js、li
 ```
 ├─ package.json           dsh.bundle.patch + dsh.client { platform: "web" }
 ├─ cordis.patch.yml       - insert:  id: dsh-disk-cleaner
-├─ lib/index.js    (411)  Host：HTTP 路由 + disk_cleaner 工具，共用同一个 run()，含 reveal
+├─ lib/index.js    (431)  Host：HTTP 路由 + disk_cleaner 工具，共用同一个 run()，含 reveal
 ├─ lib/catalog.js  (1192)  32 个目标，measurePath / purgePath / resolveTargets / drives
 ├─ lib/audit.js    (365)  只读评估，10 分钟缓存，带 areaPaths，不暴露任何删除
 ├─ lib/plan.js     (150)  纯函数：测量结果 → 有序步骤
-├─ lib/client.js  (1492)  Client 半面：slot、面板、偏好、zh/en 字典、CSS
+├─ lib/client.js  (1493)  Client 半面：slot、面板、偏好、zh/en 字典、CSS
 ├─ locale/{en,zh}.json    展示元数据（meta.title / meta.description）
 ├─ icon.svg               插件图标
 ├─ README.md              本文件
 ├─ LICENSE                MIT
-└─ smoke.mjs              82 条断言，零依赖
+└─ smoke.mjs              85 条断言，零依赖
 ```
 
 Client 半面注册的 slot：`sidebar.panellist`（order 50，仅设置页模式下拆除）、`main`（以包名为 key）、`settings.section`（order 30，仅侧边栏模式下拆除）、`plugins.bundle.config`（以包名为 key）。
 
+### 更新记录
+
+- **1.6.3** — 改的是安全与诚实，不是新功能。回收站不再归入「安全」：清空不可恢复，所以它永不被预选、不被「全选」勾中，并单独带 `irreversible` 注意码，而不是笼统的「重建，下次启动慢一些」。确认框现在逐条列出目标名与合计字节，不再只问一句「删除选中缓存目录里的文件？」。没有声明根目录的目标，改为按所在卷做边界校验，而不是直接跳过检查。`measure` 与 `purge` 现在用同一单位计数，走查触到 200 万条上限时会如实标 `truncated`，不再声称精确总量。目录删除失败若原因不是「非空」会计入 `blocked`（此前被静默吞掉），清理后仍有残留的目标会报警告而不是绿色成功。orphan 目标按它实际测量的东西重新命名（QQ 频道目录）。
+- **1.6.2** — 仅文档修正：README、源码注释、面板中英文说明和工具里的注意码释义，现在都按真实行为描述 `orphan-app-data`（QQGuild 目录内 30 天没有文件写入时会被整目录列为可全清），不再声称「四条独立证据 / 两年未写」。行为不变；更新后的 README 也随 npm 包与 [v1.6.2 Release](https://github.com/stallenlu/dsh-disk-cleaner/releases/tag/v1.6.2) 的 tarball 一起发布。
+- **1.6.1** — 修复了 `disk_cleaner` agent 工具：`output.schema` 现在声明 `type: 'string'`，与 `execute()` 返回的文本一致（此前每次调用都被宿主的输出校验器拒绝，报 `tool "disk_cleaner" returned invalid output: "value" must be an object`）。经由 agent 工具真删后也会让评估缓存失效，与面板的 HTTP 路径一致。新增两条回归断言；[v1.6.1 Release](https://github.com/stallenlu/dsh-disk-cleaner/releases/tag/v1.6.1) 附带预构建 tarball。
+- **1.6.0** — 32 个目标按七个可折叠分组归类。
+
 ## License
 
 [MIT](LICENSE)

package/lib/catalog.js

@@ -642,7 +642,7 @@ const CATALOG = [
     // service still holds, which the age limit already handles. Calling it `elevation` sent
     // the user to an elevated prompt that changed nothing and hid the bytes from the plan.
     note: 'in-use',
-    roots: [],
+    roots: ['SystemRoot'],
     paths: () => ['C:\\Windows\\Temp'],
   },
   {
@@ -716,13 +716,16 @@ const CATALOG = [
     kind: 'purge',
     risk: 'caution',
     note: 'elevation',
-    roots: [],
+    roots: ['SystemRoot'],
     paths: () => ['C:\\Windows\\SoftwareDistribution\\Download'],
   },
   {
     id: 'recycle-bin',
     kind: 'purge',
-    risk: 'safe',
+    // Everything in here was already deleted once; emptying it is not a cache rebuild, so it
+    // is never preselected and never counted as a safe win.
+    risk: 'caution',
+    note: 'irreversible',
     roots: [],
     paths: () => recycleBins(),
   },
@@ -872,9 +875,9 @@ const CATALOG = [
     roots: ['LOCALAPPDATA'],
     paths: () => {
       const guild = path.join(env('LOCALAPPDATA') ?? '', 'Tencent', 'QQGuild');
-      // Measured: no Start-menu shortcut, no uninstall entry, no Program Files folder and no
-      // file touched for over two years. The folder also carries its own `Uninstall QQGuild.exe`,
-      // which only a real install does. Every one of those signals has to agree before it goes.
+      // The QQGuild data folder is offered for full deletion when it exists and no file
+      // inside it has been written in the last 30 days. Nothing else is checked - no
+      // shortcut, uninstall entry or Program Files probe. Keep the docs in step with this.
       const recent = newestMtime(guild) > Date.now() - 30 * DAY;
       return isDir(guild) && !recent ? [guild] : [];
     },
@@ -965,8 +968,11 @@ export function resolveTargets(only, drive) {
       if (tooBroad(candidate)) continue;
       if (!isDir(candidate) && !isFile(candidate)) continue;
       if (!onDrive(candidate, drive)) continue;
-      const roots = entry.roots.map((name) => env(name)).filter(Boolean);
-      if (roots.length > 0 && !roots.some((root) => within(candidate, root))) continue;
+      // A target that names no root is still bounded by the volume it sits on. An empty list
+      // used to skip this check outright, so any path that passed the earlier tests was taken.
+      const declared = entry.roots.map((name) => env(name)).filter(Boolean);
+      const roots = declared.length > 0 ? declared : [path.parse(path.resolve(candidate)).root];
+      if (!roots.some((root) => within(candidate, root))) continue;
       if (!found.includes(candidate)) found.push(candidate);
     }
     // The volume each target sits on, so a caller can group or filter by drive.
@@ -996,10 +1002,10 @@ export async function measurePath(abs, cutoff) {
       const stat = statReal(abs);
       const eligible = cutoff === undefined || stat.mtimeMs <= cutoff;
       return eligible
-        ? { bytes: stat.size, files: 1, totalBytes: stat.size, totalFiles: 1 }
-        : { bytes: 0, files: 0, totalBytes: stat.size, totalFiles: 1 };
+        ? { bytes: stat.size, files: 1, totalBytes: stat.size, totalFiles: 1, truncated: false }
+        : { bytes: 0, files: 0, totalBytes: stat.size, totalFiles: 1, truncated: false };
     } catch {
-      return { bytes: 0, files: 0, totalBytes: 0, totalFiles: 0 };
+      return { bytes: 0, files: 0, totalBytes: 0, totalFiles: 0, truncated: false };
     }
   }
   let bytes = 0;
@@ -1040,7 +1046,9 @@ export async function measurePath(abs, cutoff) {
       /* an unreadable directory ends this branch */
     }
   }
-  return { bytes, files, totalBytes, totalFiles };
+  // A tree larger than the cap was only partly measured, which the caller must say out loud:
+  // the dry run no longer equals what a real run frees.
+  return { bytes, files, totalBytes, totalFiles, truncated: stack.length > 0 };
 }
 
 /**
@@ -1058,14 +1066,16 @@ export async function scan(only, drive) {
       let files = 0;
       let totalBytes = 0;
       let totalFiles = 0;
+      let truncated = false;
       for (const abs of target.paths) {
         const size = await measurePath(abs, cutoff);
         bytes += size.bytes;
         files += size.files;
         totalBytes += size.totalBytes;
         totalFiles += size.totalFiles;
+        truncated = truncated || size.truncated === true;
       }
-      return { ...target, bytes, files, totalBytes, totalFiles };
+      return { ...target, bytes, files, totalBytes, totalFiles, truncated };
     }),
   );
   return measured;
@@ -1077,7 +1087,10 @@ async function purgePath(abs, cutoff) {
   let failed = 0;
   const dirs = [];
   const stack = [abs];
-  while (stack.length > 0 && dirs.length < MAX_ENTRIES) {
+  // The cap is counted in entries visited, the same unit measurePath uses; counting directories
+  // here meant the two walks stopped at wildly different depths.
+  let seen = 0;
+  while (stack.length > 0 && seen < MAX_ENTRIES) {
     const dir = stack.pop();
     dirs.push(dir);
     let handle;
@@ -1089,6 +1102,7 @@ async function purgePath(abs, cutoff) {
     }
     try {
       for await (const entry of handle) {
+        seen += 1;
         const full = path.join(dir, entry.name);
         if (entry.isSymbolicLink()) continue;
         if (entry.isDirectory()) {
@@ -1111,14 +1125,19 @@ async function purgePath(abs, cutoff) {
     }
   }
   // Deepest first; index 0 is the target itself, which stays as an empty directory.
+  let blocked = 0;
   for (let i = dirs.length - 1; i > 0; i -= 1) {
     try {
       await fsp.rmdir(dirs[i]);
-    } catch {
-      /* still holds a kept or undeletable file, which is expected */
+    } catch (error) {
+      // A folder that still holds a file past the age limit is expected and costs nothing.
+      // A folder Windows refuses to remove is not: its bytes stay on disk, so they are counted.
+      const code = error && error.code;
+      if (code === 'ENOTEMPTY' || code === 'EEXIST') continue;
+      blocked += 1;
     }
   }
-  return { bytes, removed, failed };
+  return { bytes, removed, failed, blocked, truncated: stack.length > 0 };
 }
 
 /** Delete the contents of the selected targets, or with `dryRun` only report what it would delete. */
@@ -1131,17 +1150,27 @@ export async function clean(ids, options = {}) {
     if (dryRun) {
       let bytes = 0;
       let files = 0;
+      let failed = 0;
+      let truncated = false;
       for (const abs of target.paths) {
+        // The real run refuses a path this broad, so the estimate has to refuse it too, or it
+        // promises bytes the deletion will never free.
+        if (tooBroad(abs)) {
+          failed += 1;
+          continue;
+        }
         const size = await measurePath(abs, cutoff);
         bytes += size.bytes;
         files += size.files;
+        truncated = truncated || size.truncated === true;
       }
-      results.push({ id: target.id, bytes, removed: files, failed: 0 });
+      results.push({ id: target.id, bytes, removed: files, failed, truncated });
       continue;
     }
     let bytes = 0;
     let removed = 0;
     let failed = 0;
+    let truncated = false;
     for (const abs of target.paths) {
       if (tooBroad(abs)) {
         failed += 1;
@@ -1162,9 +1191,10 @@ export async function clean(ids, options = {}) {
       const outcome = await purgePath(abs, cutoff);
       bytes += outcome.bytes;
       removed += outcome.removed;
-      failed += outcome.failed;
+      failed += outcome.failed + (outcome.blocked ?? 0);
+      truncated = truncated || outcome.truncated === true;
     }
-    results.push({ id: target.id, bytes, removed, failed });
+    results.push({ id: target.id, bytes, removed, failed, truncated });
   }
   return results;
 }

package/lib/client.js

@@ -41,7 +41,8 @@ window.__ModuleLoader__.load({
       'why_pending-update': '只清 {n} 天前的下载，避免删掉还没装的更新',
       why_rollback: '每个插件/程序只留版本号最高的一份，其余是回滚副本',
       why_superseded: '版本号不高于已装版本的更新包，装着的那份已经生效',
-      why_orphan: '写这个目录的程序已经不在这台机器上了：没有快捷方式、没有卸载项，两年多没写过文件',
+      why_orphan: 'QQ 频道数据目录：目录内 30 天没有任何文件写入时会被整目录清除',
+      why_irreversible: '回收站里的东西已经被删过一次，清空后无法恢复',
       why_history: '每个会话的整文件备份，删了不影响会话本身',
       why_duplicate: '内容完全相同的重复副本，保留最新那份',
       'why_database-backup': '升级前的数据库副本，正在用的数据库还在旁边',
@@ -52,6 +53,9 @@ window.__ModuleLoader__.load({
       scanError: '扫描失败',
       cleanError: '清理失败',
       cleanConfirm: '删除选中缓存目录里的文件？正在使用的文件会被跳过。',
+      cleanConfirmList: '即将清理 {n} 项，合计 {bytes}：\n\n{list}\n\n回收站等不可恢复的项目会单独标出。',
+      cleanConfirmIrreversible: '\n\n注意：其中「回收站」清空后无法恢复。',
+      truncatedHint: '这个目录太大，只统计/清理了前 {n} 条，实际释放可能少于这个数。',
       'target_temp': '用户临时文件',
       'target_windows-temp': 'Windows 临时文件',
       'target_npm-cache': 'npm 缓存',
@@ -64,7 +68,7 @@ window.__ModuleLoader__.load({
       'target_code-cache': 'VS Code 缓存',
       'target_inet-cache': '系统网络缓存',
       'target_windows-update': 'Windows 更新缓存',
-      'target_recycle-bin': '回收站',
+      'target_recycle-bin': '回收站（清空不可恢复）',
       'target_app-updaters': '更新安装包残留',
       'target_app-caches': '各应用缓存',
       'target_app-logs': '各应用日志',
@@ -81,7 +85,7 @@ window.__ModuleLoader__.load({
       'target_rewind-snapshots': '过期的回滚快照',
       'target_rotated-logs': '轮转掉的日志',
       'target_qoder-old-versions': '编辑器少用的旧版本目录',
-      'target_orphan-app-data': '已卸载程序的残留数据',
+      'target_orphan-app-data': 'QQ 频道数据（长期未写入）',
       'target_app-data-caches': '已停用应用的缓存',
       'target_office-update-cache': 'Office 更新暂存包',
       group_system: '系统临时与回收站',
@@ -90,7 +94,7 @@ window.__ModuleLoader__.load({
       group_app: '应用缓存与日志',
       group_updates: '升级残留',
       group_history: '历史备份与快照',
-      group_orphan: '已卸载程序残留',
+      group_orphan: '长期未动的应用数据',
       group_other: '其他',
       groupExpanded: '收起这一类',
       groupFolded: '展开这一类',
@@ -213,7 +217,8 @@ window.__ModuleLoader__.load({
       'why_pending-update': 'only downloads older than {n} day(s), so a pending update survives',
       why_rollback: 'only the highest version of each family stays; the rest are rollback copies',
       why_superseded: 'the update package version is not above what is installed, so it is already applied',
-      why_orphan: 'the app that wrote this folder is gone: no shortcut, no uninstall entry, nothing written for over two years',
+      why_orphan: 'the QQGuild data folder, deleted in full when no file in it has been written for 30 days',
+      why_irreversible: 'everything here was already deleted once; emptying it cannot be undone',
       why_history: 'a whole-file backup per session; removing it does not touch the session',
       why_duplicate: 'an identical copy; the newest one is kept',
       'why_database-backup': 'a copy made before an upgrade; the live database is beside it',
@@ -224,6 +229,9 @@ window.__ModuleLoader__.load({
       scanError: 'Scan failed',
       cleanError: 'Clean failed',
       cleanConfirm: 'Delete the files in the selected cache directories? Files in use are skipped.',
+      cleanConfirmList: 'About to clean {n} target(s), {bytes} in total:\n\n{list}\n\nAnything irreversible is called out separately.',
+      cleanConfirmIrreversible: '\n\nNote: emptying the Recycle Bin cannot be undone.',
+      truncatedHint: 'This folder is too large: only the first {n} entries were measured or removed, so less may be freed.',
       'target_temp': 'User temp files',
       'target_windows-temp': 'Windows temp files',
       'target_npm-cache': 'npm cache',
@@ -236,7 +244,7 @@ window.__ModuleLoader__.load({
       'target_code-cache': 'VS Code cache',
       'target_inet-cache': 'System internet cache',
       'target_windows-update': 'Windows update cache',
-      'target_recycle-bin': 'Recycle Bin',
+      'target_recycle-bin': 'Recycle Bin (emptying is permanent)',
       'target_app-updaters': 'Leftover update installers',
       'target_app-caches': 'App caches',
       'target_app-logs': 'App logs',
@@ -253,7 +261,7 @@ window.__ModuleLoader__.load({
       'target_rewind-snapshots': 'Expired rewind snapshots',
       'target_rotated-logs': 'Rotated-out log files',
       'target_qoder-old-versions': 'Old versions the editor no longer runs',
-      'target_orphan-app-data': 'Leftover data from an uninstalled app',
+      'target_orphan-app-data': 'QQ Guild data (long untouched)',
       'target_app-data-caches': 'Caches of apps that stopped writing',
       'target_office-update-cache': 'Office update staging packages',
       group_system: 'System temp and recycle bin',
@@ -262,7 +270,7 @@ window.__ModuleLoader__.load({
       group_app: 'App caches and logs',
       group_updates: 'Leftover updaters',
       group_history: 'Backups and snapshots',
-      group_orphan: 'Data from uninstalled apps',
+      group_orphan: 'Long-untouched app data',
       group_other: 'Other',
       groupExpanded: 'Collapse this group',
       groupFolded: 'Expand this group',
@@ -413,6 +421,7 @@ window.__ModuleLoader__.load({
       .dsc-notice { margin-top: 10px; padding: 8px 10px; border-radius: 7px; font-size: 12px; line-height: 1.6; background: var(--dsw-alias-bg-layer-2); }
       .dsc-notice.dsc-ok { border-left: 3px solid var(--dsw-alias-state-success-primary); }
       .dsc-notice.dsc-err { border-left: 3px solid var(--dsw-alias-state-error-primary); color: var(--dsw-alias-state-error-primary); }
+      .dsc-notice.dsc-warn { border-left: 3px solid var(--dsw-alias-state-warn-primary); }
       .dsc-audit-hint { color: var(--dsw-alias-label-secondary); font-size: 12px; line-height: 1.7; margin: -4px 0 10px; }
       .dsc-plan { margin-top: 14px; padding-top: 12px; border-top: 1px solid var(--dsw-alias-border-l2); }
       .dsc-plan-step { display: flex; flex-direction: column; gap: 6px; padding: 10px 0; border-bottom: 1px solid var(--dsw-alias-border-l2); }
@@ -461,6 +470,12 @@ window.__ModuleLoader__.load({
       };
     }
 
+    /**
+     * Targets a clean cannot undo. These are never preselected and never swept in by "select
+     * all": emptying the recycle bin is not a cache rebuild, it is the second half of a delete.
+     */
+    const IRREVERSIBLE = new Set(['recycle-bin']);
+
     function formatBytes(bytes) {
       if (!Number.isFinite(bytes) || bytes <= 0) return '0 B';
       const units = ['B', 'KB', 'MB', 'GB', 'TB'];
@@ -723,10 +738,14 @@ window.__ModuleLoader__.load({
           const targets = Array.isArray(data.targets) ? data.targets : [];
           setRows(targets);
           const want = defaultPick.get();
+          // "all" means every rebuildable target; it never means the irreversible ones.
           const preselect =
             want === 'none'
               ? []
-              : targets.filter((row) => row.bytes > 0 && (want === 'all' || row.risk === 'safe')).map((row) => row.id);
+              : targets
+                  .filter((row) => row.bytes > 0 && !IRREVERSIBLE.has(row.id))
+                  .filter((row) => want === 'all' || row.risk === 'safe')
+                  .map((row) => row.id);
           setPicked(new Set(preselect));
         } catch (err) {
           setError(`${t('scanError')}: ${err instanceof Error ? err.message : String(err)}`);
@@ -755,13 +774,29 @@ window.__ModuleLoader__.load({
 
       const pickAll = (on) => {
         if (!shown) return;
-        setPicked(on ? new Set(visibleRows().filter((row) => row.bytes > 0).map((row) => row.id)) : new Set());
+        // "Select all" means every rebuildable, non-empty row on screen; it never reaches an
+        // irreversible target. One line, because the shape is asserted in smoke.mjs.
+        const eligible = on ? visibleRows().filter((row) => row.bytes > 0 && !IRREVERSIBLE.has(row.id)).map((row) => row.id) : [];
+        setPicked(new Set(eligible));
       };
 
       const runClean = async () => {
         if (!rows || picked.size === 0) return;
-        if (confirmFirst.get() === 'always' && !window.confirm(t('cleanConfirm'))) return;
-        const ids = shown.filter((row) => picked.has(row.id)).map((row) => row.id);
+        const chosen = shown.filter((row) => picked.has(row.id));
+        if (confirmFirst.get() === 'always') {
+          // A confirm box that does not say what it deletes is not a confirmation. Name the
+          // targets and the total, and call out anything that cannot be undone.
+          const bytes = chosen.reduce((sum, row) => sum + (row.bytes || 0), 0);
+          const list = chosen.map((row) => `· ${targetName(t, row.id)} — ${formatBytes(row.bytes)}`).join('\n');
+          const irreversible = chosen.some((row) => IRREVERSIBLE.has(row.id));
+          const text =
+            t('cleanConfirmList')
+              .replace('{n}', String(chosen.length))
+              .replace('{bytes}', formatBytes(bytes))
+              .replace('{list}', list) + (irreversible ? t('cleanConfirmIrreversible') : '');
+          if (!window.confirm(text)) return;
+        }
+        const ids = chosen.map((row) => row.id);
         setBusy('clean');
         setError('');
         setNotice(null);
@@ -771,10 +806,14 @@ window.__ModuleLoader__.load({
           const bytes = results.reduce((sum, item) => sum + (item.bytes || 0), 0);
           const files = results.reduce((sum, item) => sum + (item.removed || 0), 0);
           const failed = results.reduce((sum, item) => sum + (item.failed || 0), 0);
-          setNotice({
-            kind: 'ok',
-            text: `${t('done')} ${formatBytes(bytes)} · ${files} ${t('files')}${failed > 0 ? ` · ${t('failed')} ${failed} (${t('failedHint')})` : ''}`,
-          });
+          const truncated = results.filter((item) => item.truncated === true).length > 0;
+          // A run that left files behind is not a success banner: an all-ok green line over
+          // "12 skipped" reads as done when it is not.
+          const kind = failed > 0 ? 'warn' : 'ok';
+          const parts = [`${t('done')} ${formatBytes(bytes)}`, `${files} ${t('files')}`];
+          if (failed > 0) parts.push(`${t('failed')} ${failed} (${t('failedHint')})`);
+          if (truncated) parts.push(t('truncatedHint').replace('{n}', String(results.length)));
+          setNotice({ kind, text: parts.join(' · ') });
           await scan();
         } catch (err) {
           setError(`${t('cleanError')}: ${err instanceof Error ? err.message : String(err)}`);
@@ -1152,7 +1191,19 @@ window.__ModuleLoader__.load({
 
       /** Run a plan step the plugin is allowed to run, then re-measure so the plan is honest. */
       const runStep = async (step) => {
-        if (confirmFirst.get() === 'always' && !window.confirm(t('cleanConfirm'))) return;
+        if (confirmFirst.get() === 'always') {
+          // The same confirmation as the main button: a plan step is still a delete, and
+          // `reclaim-caution` can hold an irreversible target.
+          const ids = Array.isArray(step.ids) ? step.ids : [];
+          const list = ids.map((id) => `· ${targetName(t, id)}`).join('\n');
+          const irreversible = ids.some((id) => IRREVERSIBLE.has(id));
+          const text =
+            t('cleanConfirmList')
+              .replace('{n}', String(ids.length))
+              .replace('{bytes}', formatBytes(step.bytes || 0))
+              .replace('{list}', list) + (irreversible ? t('cleanConfirmIrreversible') : '');
+          if (!window.confirm(text)) return;
+        }
         setBusy(true);
         setError('');
         try {

package/lib/index.js

@@ -164,6 +164,8 @@ async function run(action, payload) {
         // it a folder holding 261 MB reads as "0.2 MB" and looks like nothing was found.
         totalBytes: target.totalBytes,
         totalFiles: target.totalFiles,
+        // Set when the walk hit its cap, so a caller can say the totals are a lower bound.
+        truncated: target.truncated === true,
       })),
     };
   }
@@ -210,7 +212,8 @@ const NOTE_MEANING = {
   history: 'a backup snapshot of file edits that nothing reads back; the live state sits beside it',
   duplicate: 'a byte-identical copy of a directory that is still present',
   'database-backup': 'a copy of a database file taken before an upgrade; the live database is beside it',
-  orphan: 'the app that wrote this folder is no longer installed: no shortcut, no uninstall entry, and nothing written for over two years',
+  orphan: 'the QQGuild data folder is deleted in full when no file in it has been written for 30 days',
+  irreversible: 'the recycle bin: everything in it was already deleted once, and emptying it cannot be undone',
 };
 
 const formatBytes = (bytes) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-disk-cleaner",
-  "version": "1.6.1",
+  "version": "1.6.3",
   "type": "module",
   "description": "Disk Cleaner for DSH: scan known-safe cache locations, see what they occupy, and reclaim the space from a panel or from the agent.",
   "keywords": [

package/smoke.mjs

@@ -262,6 +262,9 @@ check('tool description warns audit is read-only', /read-only: it never removes
 check('every effect is labelled', applied.every((label) => typeof label === 'string' && label.startsWith('dsh-disk-cleaner:')));
 check('tool output schema matches its string reply', definition.output.schema.type === 'string' && typeof (await definition.execute({ action: 'overview' })) === 'string');
 check('the read-only agent clean keeps the audit cache in sync', /if \(!dryRun\) invalidateAudit\(\);[\s\S]*const freed = results\.reduce/.test(index));
+check('orphan target descriptions state the real 30-day rule, not four signals / two years',
+  /30 days/.test(catalog) && /30 days/.test(index) && /QQGuild data folder/.test(source) &&
+  !/four independent signals|over two years|no Start-menu shortcut|two years/.test(catalog + index + source));
 
 const ids = [...catalog.matchAll(/^\s{4}id: '([a-z-]+)',$/gm)].map((m) => m[1]);
 check('catalog has the documented 32 targets', ids.length === 32, `got ${ids.length}`);
@@ -347,5 +350,66 @@ check('audit imports measuring only, never the deleter', Boolean(auditImport) &&
 const pkg = JSON.parse(read('package.json'));
 check('package lists every runtime file', ['lib/index.js', 'lib/client.js', 'lib/catalog.js', 'lib/audit.js', 'lib/plan.js'].every((f) => pkg.files.includes(f)));
 
+// --- 1.6.3: the delete-safety regressions ------------------------------------------------
+check(
+  'the recycle bin is never filed as a safe, preselected target',
+  /id: 'recycle-bin',[\s\S]{0,200}?risk: 'caution'/.test(catalog) &&
+    !/id: 'recycle-bin',[\s\S]{0,200}?risk: 'safe'/.test(catalog) &&
+    /const IRREVERSIBLE = new Set\(\['recycle-bin'\]\)/.test(source),
+  'emptying the recycle bin cannot be undone, so it must not sit under "safe" or in "select all"',
+);
+check(
+  'no target skips the boundary check by naming no root',
+  /const roots = declared\.length > 0 \? declared : \[path\.parse/.test(catalog) &&
+    catalog
+      .split(/\n  \{\n/)
+      .filter((block) => /roots: \[\]/.test(block))
+      .every((block) => /id: 'recycle-bin'/.test(block)),
+  'an empty roots list used to disable `within` entirely; only the recycle bin, which spans volumes, may declare none',
+);
+check(
+  'preselection and select-all both exclude irreversible targets',
+  /!IRREVERSIBLE\.has\(row\.id\)/.test(source) &&
+    (source.match(/!IRREVERSIBLE\.has\(row\.id\)/g) ?? []).length >= 2,
+);
+check(
+  'every confirm box names the targets and the total',
+  (source.match(/t\('cleanConfirmList'\)/g) ?? []).length === 2 &&
+    (source.match(/t\('cleanConfirmIrreversible'\)/g) ?? []).length === 2 &&
+    !/window\.confirm\(t\('cleanConfirm'\)\)/.test(source),
+  'a bare "delete these?" is not a confirmation, and the plan step is still a delete',
+);
+check(
+  'a clean that left files behind is not reported as a green success',
+  /const kind = failed > 0 \? 'warn' : 'ok'/.test(source) && /\.dsc-notice\.dsc-warn/.test(source),
+);
+check(
+  'a truncated walk says so instead of claiming exact totals',
+  catalog.includes('truncated: stack.length > 0') &&
+    catalog.includes('truncated = truncated || size.truncated === true') &&
+    index.includes('truncated: target.truncated === true') &&
+    source.includes("t('truncatedHint')"),
+);
+check(
+  'measure and purge count entries in the same unit',
+  /let seen = 0;\n  while \(stack\.length > 0 && seen < MAX_ENTRIES\)/.test(catalog) && /seen \+= 1;/.test(catalog),
+);
+check(
+  'a refused directory removal is counted, a legitimately full one is not',
+  /code === 'ENOTEMPTY' \|\| code === 'EEXIST'/.test(catalog) && /blocked \+= 1/.test(catalog),
+);
+check(
+  'the dry run applies the same too-broad guard as the real run',
+  (catalog.match(/if \(tooBroad\(abs\)\) \{/g) ?? []).length === 2,
+  'an estimate that skips the guard promises bytes the delete will refuse',
+);
+check(
+  'the orphan target is named for what it actually measures',
+  !/已卸载程序的残留数据|Leftover data from an uninstalled app|已卸载程序残留|Data from uninstalled apps/.test(source) &&
+    source.includes('QQ') ,
+  'it only ever measures the QQGuild folder',
+);
+check('the version badge and package agree', pkg.version === '1.6.3');
+
 console.log(`\n${pass} passed, ${fail} failed`);
 if (fail > 0) process.exit(1);