dsh-disk-cleaner 1.6.2 → 1.6.3

package/README.md

@@ -5,7 +5,7 @@
 <!-- badges -->
 | | |
 | --- | --- |
-| **version** | `1.6.2` |
+| **version** | `1.6.3` |
 | **DSH** | `0.2.1-rc.5`（开发与实测版本；用到 `plugins.bundle.config`、`settings.section`） |
 | **license** | [MIT](LICENSE) |
 | **Node** | `>= 22`（仅运行冒烟测试需要） |
@@ -16,7 +16,7 @@
 
 **dsh-disk-cleaner** is a disk-space plugin for [DeepSeek Harness](https://github.com/deepseek-ai) (DSH). It does two different jobs, and keeps them apart on purpose:
 
-1. **Clean** — thirty-two known-safe locations (temp folders, package manager stores, browser caches, crash dumps, the Recycle Bin, leftover update installers, per-app caches and logs, superseded plugin versions and applied update packages). Only these are ever deleted.
+1. **Clean** — thirty-two known locations (temp folders, package manager stores, browser caches, crash dumps, the Recycle Bin, leftover update installers, per-app caches and logs, superseded plugin versions and applied update packages). Only these are ever deleted, and the ones that cannot be rebuilt are never preselected.
 2. **Assess** — everything the plugin will *not* delete (installed programs, the WSL virtual disk, the Windows component store, chat-app data, your own folders). Measured and listed, never removed.
 
 The assessment ends with a **plan**: the same numbers ordered by what it costs you to act, with the exact Windows command for the steps the plugin cannot perform itself.
@@ -29,7 +29,7 @@ Both the panel and the agent reach the *same* operations: the cleaning logic liv
 | --- | --- |
 | Scan | Measures all thirty-two targets concurrently and shows what each occupies |
 | Per-drive filter | Chip row of mounted volumes; scanning or cleaning can be limited to one drive, and rows with nothing on that drive disappear |
-| Risk labels | Every target is `safe` or `caution`, with a one-line reason (`in-use` / `rebuild` / `elevation` / `pending-update` / `rollback` / `superseded` / `history` / `duplicate` / `database-backup` / `orphan`) and a permanent legend, so "caution" never means "unspecified" |
+| Risk labels | Every target is `safe` or `caution`, with a one-line reason (`in-use` / `rebuild` / `elevation` / `pending-update` / `rollback` / `superseded` / `history` / `duplicate` / `database-backup` / `orphan` / `irreversible`) and a permanent legend, so "caution" never means "unspecified" |
 | Aged deletion | `temp` and `windows-temp` only remove files older than one day; files a running program still holds are skipped |
 | Space assessment | Walks the disk read-only and groups the result into Windows / installed software / your own files, plus the ten largest app-data folders. Any row opens its folder in Explorer — click, right click, or Enter |
 | Honest re-run | Re-running the assessment re-measures; a plain call still answers from the ten-minute cache |
@@ -58,7 +58,7 @@ Every path is built from this table — a caller selects an **id**, never a path
 | `edge-cache` | same set, Edge profiles | purge | caution | rebuilt; next open is slower |
 | `code-cache` | `%APPDATA%\Code\{Cache,CachedData,CachedExtensionVSIXs}` | purge | caution | rebuilt; next start is slower |
 | `windows-update` | `C:\Windows\SoftwareDistribution\Download` | purge | caution | needs elevation |
-| `recycle-bin` | `$Recycle.Bin\S-1-5-*` on every mounted volume | purge | safe | it is the Recycle Bin |
+| `recycle-bin` | `$Recycle.Bin\S-1-5-*` on every mounted volume | purge | caution | emptying it cannot be undone; never preselected |
 | `inet-cache` | `%LOCALAPPDATA%\Microsoft\Windows\INetCache` | purge | caution | rebuilt |
 | `app-updaters` | `*-updater` folders under `%LOCALAPPDATA%` and `%APPDATA%` — the installers app updaters leave behind | aged, 3 days | caution | a download from the last three days may still be a pending update |
 | `app-caches` | named cache folders inside `%APPDATA%`: the WPS CEF cache, FTNN `cef_cache`, and the `Cache` / `Code Cache` / `CachedData` / `GPUCache` of Qoder, Trae, the DSH desktop app, PersonalCenter, the WeChat devtools and QQ PC Manager | purge | caution | CEF and Chromium caches rebuild on next start |
@@ -166,16 +166,16 @@ These are enforced in `lib/catalog.js` and must not be relaxed:
 
 A catalog entry has been submitted to the curated [awesome-dsh-plugin](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin) list, which powers **dshmarket → Discover** ([PR #12970](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/12970), pending review) — once it merges, search **dsh-disk-cleaner** there and install it in one click. Until then, use a direct install below.
 
-Published on npm as [`dsh-disk-cleaner`](https://www.npmjs.com/package/dsh-disk-cleaner) — latest `1.6.2`:
+Published on npm as [`dsh-disk-cleaner`](https://www.npmjs.com/package/dsh-disk-cleaner) — latest `1.6.3`:
 
 ```bash
 npm i dsh-disk-cleaner
 ```
 
-A prebuilt tarball is attached to the [v1.6.2 Release](https://github.com/stallenlu/dsh-disk-cleaner/releases/tag/v1.6.2); installing from it skips DSH's build-approval step:
+A prebuilt tarball is attached to the [v1.6.3 Release](https://github.com/stallenlu/dsh-disk-cleaner/releases/tag/v1.6.3); installing from it skips DSH's build-approval step:
 
 ```bash
-dsh plugin --profile <profile> add https://github.com/stallenlu/dsh-disk-cleaner/releases/download/v1.6.2/dsh-disk-cleaner-1.6.2.tgz
+dsh plugin --profile <profile> add https://github.com/stallenlu/dsh-disk-cleaner/releases/download/v1.6.3/dsh-disk-cleaner-1.6.3.tgz
 ```
 
 Then enable it in the profile — in `$DSH_PROFILE_DIR/package.json`:
@@ -183,7 +183,7 @@ Then enable it in the profile — in `$DSH_PROFILE_DIR/package.json`:
 ```json
 {
   "dependencies": {
-    "dsh-disk-cleaner": "^1.6.2"
+    "dsh-disk-cleaner": "^1.6.3"
   },
   "dsh": {
     "profile": {
@@ -274,6 +274,7 @@ Client-half slots: `sidebar.panellist` (order 50, disposed in settings-only mode
 
 ### What's new
 
+- **1.6.3** — Safety and honesty rather than new features. The Recycle Bin is no longer filed under `safe`: emptying it cannot be undone, so it is never preselected, never picked by "select all", and carries its own `irreversible` note instead of the generic "rebuilt; next start is slower". The confirm dialog now names each target and the total instead of asking a generic "delete these?". A target that names no environment root is bounded by the volume it sits on rather than skipping the boundary check. `measure` and `purge` now count entries in the same unit, and a walk that hits the 2,000,000-entry cap says so (`truncated`) instead of claiming exact totals. A directory removal refused for a reason other than "not empty" is counted as `blocked` instead of being swallowed, and a clean that left files behind reports a warning rather than a green success. The orphan target is named for what it actually measures (the QQGuild folder).
 - **1.6.2** — Documentation only: the README, the in-source comment, the panel's zh/en explanations and the tool's note legend now describe `orphan-app-data` as it actually behaves (the QQGuild folder is offered for full deletion once no file in it has been written for 30 days), instead of claiming four independent signals and a two-year idle period. No behaviour change; the refreshed README ships in the npm package and the [v1.6.2 Release](https://github.com/stallenlu/dsh-disk-cleaner/releases/tag/v1.6.2) tarball.
 - **1.6.1** — Fixed the `disk_cleaner` agent tool: `output.schema` now declares `type: 'string'`, matching the text `execute()` returns (previously every call was rejected by the host's output validator with `tool "disk_cleaner" returned invalid output: "value" must be an object`). A real delete through the agent tool now invalidates the assessment cache, the same way the panel's HTTP route does. Two regression assertions added; a prebuilt tarball ships on the [v1.6.1 Release](https://github.com/stallenlu/dsh-disk-cleaner/releases/tag/v1.6.1).
 - **1.6.0** — The 32 targets are grouped under seven foldable headings.
@@ -285,7 +286,7 @@ Client-half slots: `sidebar.panellist` (order 50, disposed in settings-only mode
 
 **dsh-disk-cleaner** 是 [DeepSeek Harness](https://github.com/deepseek-ai)（DSH）的磁盘空间插件。它做两件不同的事，并且刻意分开：
 
-1. **清理** —— 三十二个已知安全的位置（临时目录、包管理器存储、浏览器缓存、崩溃转储、回收站、更新安装包残留、各应用的缓存与日志、被淘汰的插件版本与已应用的更新包）。只有这些会被删除。
+1. **清理** —— 三十二个已知位置（临时目录、包管理器存储、浏览器缓存、崩溃转储、回收站、更新安装包残留、各应用的缓存与日志、被淘汰的插件版本与已应用的更新包）。只有这些会被删除，其中无法重建的项目永远不会被预选。
 2. **评估** —— 所有本插件**不会**删的东西（已装程序、WSL 虚拟磁盘、Windows 组件库、聊天软件数据、你自己的文件夹）。只测量、只列出，绝不删除。
 
 评估的最后是一份**处理方案**：同一批数字按「你要付出多少代价」排序，本插件做不到的步骤附上确切的 Windows 命令。
@@ -298,7 +299,7 @@ Client-half slots: `sidebar.panellist` (order 50, disposed in settings-only mode
 | --- | --- |
 | 扫描 | 并发测量全部三十二个目标，显示各自占用 |
 | 按盘过滤 | 已挂载卷的胶囊按钮；扫描与清理都可限定单盘，该盘上为空的项会隐藏 |
-| 风险标注 | 每个目标都标 `安全` 或 `注意`，并给一行理由（`in-use` / `rebuild` / `elevation` / `pending-update` / `rollback` / `superseded` / `history` / `duplicate` / `database-backup` / `orphan`），图例常驻，所以「注意」永远不是「说不清」 |
+| 风险标注 | 每个目标都标 `安全` 或 `注意`，并给一行理由（`in-use` / `rebuild` / `elevation` / `pending-update` / `rollback` / `superseded` / `history` / `duplicate` / `database-backup` / `orphan` / `irreversible`），图例常驻，所以「注意」永远不是「说不清」 |
 | 保留期删除 | `temp` 与 `windows-temp` 只删一天前的文件；被运行中程序占住的自动跳过 |
 | 空间评估 | 只读遍历磁盘，按 Windows 自身 / 已装软件 / 你自己的文件 分组，另列占用最大的十个应用数据目录。每一行都能打开所在目录——单击、右键或回车 |
 | 重新评估真的重测 | 「重新评估」会重新测量；普通调用仍然走十分钟缓存 |
@@ -327,7 +328,7 @@ Client-half slots: `sidebar.panellist` (order 50, disposed in settings-only mode
 | `edge-cache` | 同上，Edge 的配置目录 | 全清 | 注意 | 会重建，下次打开更慢 |
 | `code-cache` | `%APPDATA%\Code\{Cache,CachedData,CachedExtensionVSIXs}` | 全清 | 注意 | 会重建，下次启动更慢 |
 | `windows-update` | `C:\Windows\SoftwareDistribution\Download` | 全清 | 注意 | 需要管理员权限 |
-| `recycle-bin` | 各已挂载卷的 `$Recycle.Bin\S-1-5-*` | 全清 | 安全 | 就是回收站 |
+| `recycle-bin` | 各已挂载卷的 `$Recycle.Bin\S-1-5-*` | 全清 | 注意 | 清空不可恢复，永不被预选 |
 | `inet-cache` | `%LOCALAPPDATA%\Microsoft\Windows\INetCache` | 全清 | 注意 | 会重建 |
 | `app-updaters` | `%LOCALAPPDATA%` 与 `%APPDATA%` 下的 `*-updater` 目录——升级程序留下的安装包 | 保留期 3 天 | 注意 | 三天内的下载可能还是待安装的更新 |
 | `app-caches` | `%APPDATA%` 里点名列出的缓存目录：WPS 的 CEF 缓存、FTNN 的 `cef_cache`，以及 Qoder、Trae、DSH 桌面端、PersonalCenter、微信开发者工具、腾讯电脑管家的 `Cache` / `Code Cache` / `CachedData` / `GPUCache` | 全清 | 注意 | CEF 与 Chromium 缓存会在下次启动时重建 |
@@ -434,16 +435,16 @@ Client-half slots: `sidebar.panellist` (order 50, disposed in settings-only mode
 
 已向精选目录 [awesome-dsh-plugin](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin) 提交收录，它是 **dshmarket → 发现** 的数据源（[PR #12970](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin/pull/12970)，审核中）——合并后即可在 dshmarket 里搜索 **dsh-disk-cleaner** 一键安装。在那之前，用下面任一种直接安装方式。
 
-已发布到 npm：[`dsh-disk-cleaner`](https://www.npmjs.com/package/dsh-disk-cleaner)，最新版 `1.6.2`。
+已发布到 npm：[`dsh-disk-cleaner`](https://www.npmjs.com/package/dsh-disk-cleaner)，最新版 `1.6.3`。
 
 ```bash
 npm i dsh-disk-cleaner
 ```
 
-[v1.6.2 Release](https://github.com/stallenlu/dsh-disk-cleaner/releases/tag/v1.6.2) 还附带一个预构建 tarball，从它安装可跳过 DSH 的构建授权步骤：
+[v1.6.3 Release](https://github.com/stallenlu/dsh-disk-cleaner/releases/tag/v1.6.3) 还附带一个预构建 tarball，从它安装可跳过 DSH 的构建授权步骤：
 
 ```bash
-dsh plugin --profile <profile> add https://github.com/stallenlu/dsh-disk-cleaner/releases/download/v1.6.2/dsh-disk-cleaner-1.6.2.tgz
+dsh plugin --profile <profile> add https://github.com/stallenlu/dsh-disk-cleaner/releases/download/v1.6.3/dsh-disk-cleaner-1.6.3.tgz
 ```
 
 然后在 profile 里启用 —— 在 `$DSH_PROFILE_DIR/package.json`：
@@ -451,7 +452,7 @@ dsh plugin --profile <profile> add https://github.com/stallenlu/dsh-disk-cleaner
 ```json
 {
   "dependencies": {
-    "dsh-disk-cleaner": "^1.6.2"
+    "dsh-disk-cleaner": "^1.6.3"
   },
   "dsh": {
     "profile": {
@@ -542,6 +543,7 @@ Client 半面注册的 slot：`sidebar.panellist`（order 50，仅设置页模
 
 ### 更新记录
 
+- **1.6.3** — 改的是安全与诚实，不是新功能。回收站不再归入「安全」：清空不可恢复，所以它永不被预选、不被「全选」勾中，并单独带 `irreversible` 注意码，而不是笼统的「重建，下次启动慢一些」。确认框现在逐条列出目标名与合计字节，不再只问一句「删除选中缓存目录里的文件？」。没有声明根目录的目标，改为按所在卷做边界校验，而不是直接跳过检查。`measure` 与 `purge` 现在用同一单位计数，走查触到 200 万条上限时会如实标 `truncated`，不再声称精确总量。目录删除失败若原因不是「非空」会计入 `blocked`（此前被静默吞掉），清理后仍有残留的目标会报警告而不是绿色成功。orphan 目标按它实际测量的东西重新命名（QQ 频道目录）。
 - **1.6.2** — 仅文档修正：README、源码注释、面板中英文说明和工具里的注意码释义，现在都按真实行为描述 `orphan-app-data`（QQGuild 目录内 30 天没有文件写入时会被整目录列为可全清），不再声称「四条独立证据 / 两年未写」。行为不变；更新后的 README 也随 npm 包与 [v1.6.2 Release](https://github.com/stallenlu/dsh-disk-cleaner/releases/tag/v1.6.2) 的 tarball 一起发布。
 - **1.6.1** — 修复了 `disk_cleaner` agent 工具：`output.schema` 现在声明 `type: 'string'`，与 `execute()` 返回的文本一致（此前每次调用都被宿主的输出校验器拒绝，报 `tool "disk_cleaner" returned invalid output: "value" must be an object`）。经由 agent 工具真删后也会让评估缓存失效，与面板的 HTTP 路径一致。新增两条回归断言；[v1.6.1 Release](https://github.com/stallenlu/dsh-disk-cleaner/releases/tag/v1.6.1) 附带预构建 tarball。
 - **1.6.0** — 32 个目标按七个可折叠分组归类。

package/lib/catalog.js

@@ -642,7 +642,7 @@ const CATALOG = [
     // service still holds, which the age limit already handles. Calling it `elevation` sent
     // the user to an elevated prompt that changed nothing and hid the bytes from the plan.
     note: 'in-use',
-    roots: [],
+    roots: ['SystemRoot'],
     paths: () => ['C:\\Windows\\Temp'],
   },
   {
@@ -716,13 +716,16 @@ const CATALOG = [
     kind: 'purge',
     risk: 'caution',
     note: 'elevation',
-    roots: [],
+    roots: ['SystemRoot'],
     paths: () => ['C:\\Windows\\SoftwareDistribution\\Download'],
   },
   {
     id: 'recycle-bin',
     kind: 'purge',
-    risk: 'safe',
+    // Everything in here was already deleted once; emptying it is not a cache rebuild, so it
+    // is never preselected and never counted as a safe win.
+    risk: 'caution',
+    note: 'irreversible',
     roots: [],
     paths: () => recycleBins(),
   },
@@ -965,8 +968,11 @@ export function resolveTargets(only, drive) {
       if (tooBroad(candidate)) continue;
       if (!isDir(candidate) && !isFile(candidate)) continue;
       if (!onDrive(candidate, drive)) continue;
-      const roots = entry.roots.map((name) => env(name)).filter(Boolean);
-      if (roots.length > 0 && !roots.some((root) => within(candidate, root))) continue;
+      // A target that names no root is still bounded by the volume it sits on. An empty list
+      // used to skip this check outright, so any path that passed the earlier tests was taken.
+      const declared = entry.roots.map((name) => env(name)).filter(Boolean);
+      const roots = declared.length > 0 ? declared : [path.parse(path.resolve(candidate)).root];
+      if (!roots.some((root) => within(candidate, root))) continue;
       if (!found.includes(candidate)) found.push(candidate);
     }
     // The volume each target sits on, so a caller can group or filter by drive.
@@ -996,10 +1002,10 @@ export async function measurePath(abs, cutoff) {
       const stat = statReal(abs);
       const eligible = cutoff === undefined || stat.mtimeMs <= cutoff;
       return eligible
-        ? { bytes: stat.size, files: 1, totalBytes: stat.size, totalFiles: 1 }
-        : { bytes: 0, files: 0, totalBytes: stat.size, totalFiles: 1 };
+        ? { bytes: stat.size, files: 1, totalBytes: stat.size, totalFiles: 1, truncated: false }
+        : { bytes: 0, files: 0, totalBytes: stat.size, totalFiles: 1, truncated: false };
     } catch {
-      return { bytes: 0, files: 0, totalBytes: 0, totalFiles: 0 };
+      return { bytes: 0, files: 0, totalBytes: 0, totalFiles: 0, truncated: false };
     }
   }
   let bytes = 0;
@@ -1040,7 +1046,9 @@ export async function measurePath(abs, cutoff) {
       /* an unreadable directory ends this branch */
     }
   }
-  return { bytes, files, totalBytes, totalFiles };
+  // A tree larger than the cap was only partly measured, which the caller must say out loud:
+  // the dry run no longer equals what a real run frees.
+  return { bytes, files, totalBytes, totalFiles, truncated: stack.length > 0 };
 }
 
 /**
@@ -1058,14 +1066,16 @@ export async function scan(only, drive) {
       let files = 0;
       let totalBytes = 0;
       let totalFiles = 0;
+      let truncated = false;
       for (const abs of target.paths) {
         const size = await measurePath(abs, cutoff);
         bytes += size.bytes;
         files += size.files;
         totalBytes += size.totalBytes;
         totalFiles += size.totalFiles;
+        truncated = truncated || size.truncated === true;
       }
-      return { ...target, bytes, files, totalBytes, totalFiles };
+      return { ...target, bytes, files, totalBytes, totalFiles, truncated };
     }),
   );
   return measured;
@@ -1077,7 +1087,10 @@ async function purgePath(abs, cutoff) {
   let failed = 0;
   const dirs = [];
   const stack = [abs];
-  while (stack.length > 0 && dirs.length < MAX_ENTRIES) {
+  // The cap is counted in entries visited, the same unit measurePath uses; counting directories
+  // here meant the two walks stopped at wildly different depths.
+  let seen = 0;
+  while (stack.length > 0 && seen < MAX_ENTRIES) {
     const dir = stack.pop();
     dirs.push(dir);
     let handle;
@@ -1089,6 +1102,7 @@ async function purgePath(abs, cutoff) {
     }
     try {
       for await (const entry of handle) {
+        seen += 1;
         const full = path.join(dir, entry.name);
         if (entry.isSymbolicLink()) continue;
         if (entry.isDirectory()) {
@@ -1111,14 +1125,19 @@ async function purgePath(abs, cutoff) {
     }
   }
   // Deepest first; index 0 is the target itself, which stays as an empty directory.
+  let blocked = 0;
   for (let i = dirs.length - 1; i > 0; i -= 1) {
     try {
       await fsp.rmdir(dirs[i]);
-    } catch {
-      /* still holds a kept or undeletable file, which is expected */
+    } catch (error) {
+      // A folder that still holds a file past the age limit is expected and costs nothing.
+      // A folder Windows refuses to remove is not: its bytes stay on disk, so they are counted.
+      const code = error && error.code;
+      if (code === 'ENOTEMPTY' || code === 'EEXIST') continue;
+      blocked += 1;
     }
   }
-  return { bytes, removed, failed };
+  return { bytes, removed, failed, blocked, truncated: stack.length > 0 };
 }
 
 /** Delete the contents of the selected targets, or with `dryRun` only report what it would delete. */
@@ -1131,17 +1150,27 @@ export async function clean(ids, options = {}) {
     if (dryRun) {
       let bytes = 0;
       let files = 0;
+      let failed = 0;
+      let truncated = false;
       for (const abs of target.paths) {
+        // The real run refuses a path this broad, so the estimate has to refuse it too, or it
+        // promises bytes the deletion will never free.
+        if (tooBroad(abs)) {
+          failed += 1;
+          continue;
+        }
         const size = await measurePath(abs, cutoff);
         bytes += size.bytes;
         files += size.files;
+        truncated = truncated || size.truncated === true;
       }
-      results.push({ id: target.id, bytes, removed: files, failed: 0 });
+      results.push({ id: target.id, bytes, removed: files, failed, truncated });
       continue;
     }
     let bytes = 0;
     let removed = 0;
     let failed = 0;
+    let truncated = false;
     for (const abs of target.paths) {
       if (tooBroad(abs)) {
         failed += 1;
@@ -1162,9 +1191,10 @@ export async function clean(ids, options = {}) {
       const outcome = await purgePath(abs, cutoff);
       bytes += outcome.bytes;
       removed += outcome.removed;
-      failed += outcome.failed;
+      failed += outcome.failed + (outcome.blocked ?? 0);
+      truncated = truncated || outcome.truncated === true;
     }
-    results.push({ id: target.id, bytes, removed, failed });
+    results.push({ id: target.id, bytes, removed, failed, truncated });
   }
   return results;
 }

package/lib/client.js

@@ -42,6 +42,7 @@ window.__ModuleLoader__.load({
       why_rollback: '每个插件/程序只留版本号最高的一份，其余是回滚副本',
       why_superseded: '版本号不高于已装版本的更新包，装着的那份已经生效',
       why_orphan: 'QQ 频道数据目录：目录内 30 天没有任何文件写入时会被整目录清除',
+      why_irreversible: '回收站里的东西已经被删过一次，清空后无法恢复',
       why_history: '每个会话的整文件备份，删了不影响会话本身',
       why_duplicate: '内容完全相同的重复副本，保留最新那份',
       'why_database-backup': '升级前的数据库副本，正在用的数据库还在旁边',
@@ -52,6 +53,9 @@ window.__ModuleLoader__.load({
       scanError: '扫描失败',
       cleanError: '清理失败',
       cleanConfirm: '删除选中缓存目录里的文件？正在使用的文件会被跳过。',
+      cleanConfirmList: '即将清理 {n} 项，合计 {bytes}：\n\n{list}\n\n回收站等不可恢复的项目会单独标出。',
+      cleanConfirmIrreversible: '\n\n注意：其中「回收站」清空后无法恢复。',
+      truncatedHint: '这个目录太大，只统计/清理了前 {n} 条，实际释放可能少于这个数。',
       'target_temp': '用户临时文件',
       'target_windows-temp': 'Windows 临时文件',
       'target_npm-cache': 'npm 缓存',
@@ -64,7 +68,7 @@ window.__ModuleLoader__.load({
       'target_code-cache': 'VS Code 缓存',
       'target_inet-cache': '系统网络缓存',
       'target_windows-update': 'Windows 更新缓存',
-      'target_recycle-bin': '回收站',
+      'target_recycle-bin': '回收站（清空不可恢复）',
       'target_app-updaters': '更新安装包残留',
       'target_app-caches': '各应用缓存',
       'target_app-logs': '各应用日志',
@@ -81,7 +85,7 @@ window.__ModuleLoader__.load({
       'target_rewind-snapshots': '过期的回滚快照',
       'target_rotated-logs': '轮转掉的日志',
       'target_qoder-old-versions': '编辑器少用的旧版本目录',
-      'target_orphan-app-data': '已卸载程序的残留数据',
+      'target_orphan-app-data': 'QQ 频道数据（长期未写入）',
       'target_app-data-caches': '已停用应用的缓存',
       'target_office-update-cache': 'Office 更新暂存包',
       group_system: '系统临时与回收站',
@@ -90,7 +94,7 @@ window.__ModuleLoader__.load({
       group_app: '应用缓存与日志',
       group_updates: '升级残留',
       group_history: '历史备份与快照',
-      group_orphan: '已卸载程序残留',
+      group_orphan: '长期未动的应用数据',
       group_other: '其他',
       groupExpanded: '收起这一类',
       groupFolded: '展开这一类',
@@ -214,6 +218,7 @@ window.__ModuleLoader__.load({
       why_rollback: 'only the highest version of each family stays; the rest are rollback copies',
       why_superseded: 'the update package version is not above what is installed, so it is already applied',
       why_orphan: 'the QQGuild data folder, deleted in full when no file in it has been written for 30 days',
+      why_irreversible: 'everything here was already deleted once; emptying it cannot be undone',
       why_history: 'a whole-file backup per session; removing it does not touch the session',
       why_duplicate: 'an identical copy; the newest one is kept',
       'why_database-backup': 'a copy made before an upgrade; the live database is beside it',
@@ -224,6 +229,9 @@ window.__ModuleLoader__.load({
       scanError: 'Scan failed',
       cleanError: 'Clean failed',
       cleanConfirm: 'Delete the files in the selected cache directories? Files in use are skipped.',
+      cleanConfirmList: 'About to clean {n} target(s), {bytes} in total:\n\n{list}\n\nAnything irreversible is called out separately.',
+      cleanConfirmIrreversible: '\n\nNote: emptying the Recycle Bin cannot be undone.',
+      truncatedHint: 'This folder is too large: only the first {n} entries were measured or removed, so less may be freed.',
       'target_temp': 'User temp files',
       'target_windows-temp': 'Windows temp files',
       'target_npm-cache': 'npm cache',
@@ -236,7 +244,7 @@ window.__ModuleLoader__.load({
       'target_code-cache': 'VS Code cache',
       'target_inet-cache': 'System internet cache',
       'target_windows-update': 'Windows update cache',
-      'target_recycle-bin': 'Recycle Bin',
+      'target_recycle-bin': 'Recycle Bin (emptying is permanent)',
       'target_app-updaters': 'Leftover update installers',
       'target_app-caches': 'App caches',
       'target_app-logs': 'App logs',
@@ -253,7 +261,7 @@ window.__ModuleLoader__.load({
       'target_rewind-snapshots': 'Expired rewind snapshots',
       'target_rotated-logs': 'Rotated-out log files',
       'target_qoder-old-versions': 'Old versions the editor no longer runs',
-      'target_orphan-app-data': 'Leftover data from an uninstalled app',
+      'target_orphan-app-data': 'QQ Guild data (long untouched)',
       'target_app-data-caches': 'Caches of apps that stopped writing',
       'target_office-update-cache': 'Office update staging packages',
       group_system: 'System temp and recycle bin',
@@ -262,7 +270,7 @@ window.__ModuleLoader__.load({
       group_app: 'App caches and logs',
       group_updates: 'Leftover updaters',
       group_history: 'Backups and snapshots',
-      group_orphan: 'Data from uninstalled apps',
+      group_orphan: 'Long-untouched app data',
       group_other: 'Other',
       groupExpanded: 'Collapse this group',
       groupFolded: 'Expand this group',
@@ -413,6 +421,7 @@ window.__ModuleLoader__.load({
       .dsc-notice { margin-top: 10px; padding: 8px 10px; border-radius: 7px; font-size: 12px; line-height: 1.6; background: var(--dsw-alias-bg-layer-2); }
       .dsc-notice.dsc-ok { border-left: 3px solid var(--dsw-alias-state-success-primary); }
       .dsc-notice.dsc-err { border-left: 3px solid var(--dsw-alias-state-error-primary); color: var(--dsw-alias-state-error-primary); }
+      .dsc-notice.dsc-warn { border-left: 3px solid var(--dsw-alias-state-warn-primary); }
       .dsc-audit-hint { color: var(--dsw-alias-label-secondary); font-size: 12px; line-height: 1.7; margin: -4px 0 10px; }
       .dsc-plan { margin-top: 14px; padding-top: 12px; border-top: 1px solid var(--dsw-alias-border-l2); }
       .dsc-plan-step { display: flex; flex-direction: column; gap: 6px; padding: 10px 0; border-bottom: 1px solid var(--dsw-alias-border-l2); }
@@ -461,6 +470,12 @@ window.__ModuleLoader__.load({
       };
     }
 
+    /**
+     * Targets a clean cannot undo. These are never preselected and never swept in by "select
+     * all": emptying the recycle bin is not a cache rebuild, it is the second half of a delete.
+     */
+    const IRREVERSIBLE = new Set(['recycle-bin']);
+
     function formatBytes(bytes) {
       if (!Number.isFinite(bytes) || bytes <= 0) return '0 B';
       const units = ['B', 'KB', 'MB', 'GB', 'TB'];
@@ -723,10 +738,14 @@ window.__ModuleLoader__.load({
           const targets = Array.isArray(data.targets) ? data.targets : [];
           setRows(targets);
           const want = defaultPick.get();
+          // "all" means every rebuildable target; it never means the irreversible ones.
           const preselect =
             want === 'none'
               ? []
-              : targets.filter((row) => row.bytes > 0 && (want === 'all' || row.risk === 'safe')).map((row) => row.id);
+              : targets
+                  .filter((row) => row.bytes > 0 && !IRREVERSIBLE.has(row.id))
+                  .filter((row) => want === 'all' || row.risk === 'safe')
+                  .map((row) => row.id);
           setPicked(new Set(preselect));
         } catch (err) {
           setError(`${t('scanError')}: ${err instanceof Error ? err.message : String(err)}`);
@@ -755,13 +774,29 @@ window.__ModuleLoader__.load({
 
       const pickAll = (on) => {
         if (!shown) return;
-        setPicked(on ? new Set(visibleRows().filter((row) => row.bytes > 0).map((row) => row.id)) : new Set());
+        // "Select all" means every rebuildable, non-empty row on screen; it never reaches an
+        // irreversible target. One line, because the shape is asserted in smoke.mjs.
+        const eligible = on ? visibleRows().filter((row) => row.bytes > 0 && !IRREVERSIBLE.has(row.id)).map((row) => row.id) : [];
+        setPicked(new Set(eligible));
       };
 
       const runClean = async () => {
         if (!rows || picked.size === 0) return;
-        if (confirmFirst.get() === 'always' && !window.confirm(t('cleanConfirm'))) return;
-        const ids = shown.filter((row) => picked.has(row.id)).map((row) => row.id);
+        const chosen = shown.filter((row) => picked.has(row.id));
+        if (confirmFirst.get() === 'always') {
+          // A confirm box that does not say what it deletes is not a confirmation. Name the
+          // targets and the total, and call out anything that cannot be undone.
+          const bytes = chosen.reduce((sum, row) => sum + (row.bytes || 0), 0);
+          const list = chosen.map((row) => `· ${targetName(t, row.id)} — ${formatBytes(row.bytes)}`).join('\n');
+          const irreversible = chosen.some((row) => IRREVERSIBLE.has(row.id));
+          const text =
+            t('cleanConfirmList')
+              .replace('{n}', String(chosen.length))
+              .replace('{bytes}', formatBytes(bytes))
+              .replace('{list}', list) + (irreversible ? t('cleanConfirmIrreversible') : '');
+          if (!window.confirm(text)) return;
+        }
+        const ids = chosen.map((row) => row.id);
         setBusy('clean');
         setError('');
         setNotice(null);
@@ -771,10 +806,14 @@ window.__ModuleLoader__.load({
           const bytes = results.reduce((sum, item) => sum + (item.bytes || 0), 0);
           const files = results.reduce((sum, item) => sum + (item.removed || 0), 0);
           const failed = results.reduce((sum, item) => sum + (item.failed || 0), 0);
-          setNotice({
-            kind: 'ok',
-            text: `${t('done')} ${formatBytes(bytes)} · ${files} ${t('files')}${failed > 0 ? ` · ${t('failed')} ${failed} (${t('failedHint')})` : ''}`,
-          });
+          const truncated = results.filter((item) => item.truncated === true).length > 0;
+          // A run that left files behind is not a success banner: an all-ok green line over
+          // "12 skipped" reads as done when it is not.
+          const kind = failed > 0 ? 'warn' : 'ok';
+          const parts = [`${t('done')} ${formatBytes(bytes)}`, `${files} ${t('files')}`];
+          if (failed > 0) parts.push(`${t('failed')} ${failed} (${t('failedHint')})`);
+          if (truncated) parts.push(t('truncatedHint').replace('{n}', String(results.length)));
+          setNotice({ kind, text: parts.join(' · ') });
           await scan();
         } catch (err) {
           setError(`${t('cleanError')}: ${err instanceof Error ? err.message : String(err)}`);
@@ -1152,7 +1191,19 @@ window.__ModuleLoader__.load({
 
       /** Run a plan step the plugin is allowed to run, then re-measure so the plan is honest. */
       const runStep = async (step) => {
-        if (confirmFirst.get() === 'always' && !window.confirm(t('cleanConfirm'))) return;
+        if (confirmFirst.get() === 'always') {
+          // The same confirmation as the main button: a plan step is still a delete, and
+          // `reclaim-caution` can hold an irreversible target.
+          const ids = Array.isArray(step.ids) ? step.ids : [];
+          const list = ids.map((id) => `· ${targetName(t, id)}`).join('\n');
+          const irreversible = ids.some((id) => IRREVERSIBLE.has(id));
+          const text =
+            t('cleanConfirmList')
+              .replace('{n}', String(ids.length))
+              .replace('{bytes}', formatBytes(step.bytes || 0))
+              .replace('{list}', list) + (irreversible ? t('cleanConfirmIrreversible') : '');
+          if (!window.confirm(text)) return;
+        }
         setBusy(true);
         setError('');
         try {

package/lib/index.js

@@ -164,6 +164,8 @@ async function run(action, payload) {
         // it a folder holding 261 MB reads as "0.2 MB" and looks like nothing was found.
         totalBytes: target.totalBytes,
         totalFiles: target.totalFiles,
+        // Set when the walk hit its cap, so a caller can say the totals are a lower bound.
+        truncated: target.truncated === true,
       })),
     };
   }
@@ -211,6 +213,7 @@ const NOTE_MEANING = {
   duplicate: 'a byte-identical copy of a directory that is still present',
   'database-backup': 'a copy of a database file taken before an upgrade; the live database is beside it',
   orphan: 'the QQGuild data folder is deleted in full when no file in it has been written for 30 days',
+  irreversible: 'the recycle bin: everything in it was already deleted once, and emptying it cannot be undone',
 };
 
 const formatBytes = (bytes) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-disk-cleaner",
-  "version": "1.6.2",
+  "version": "1.6.3",
   "type": "module",
   "description": "Disk Cleaner for DSH: scan known-safe cache locations, see what they occupy, and reclaim the space from a panel or from the agent.",
   "keywords": [

package/smoke.mjs

@@ -350,5 +350,66 @@ check('audit imports measuring only, never the deleter', Boolean(auditImport) &&
 const pkg = JSON.parse(read('package.json'));
 check('package lists every runtime file', ['lib/index.js', 'lib/client.js', 'lib/catalog.js', 'lib/audit.js', 'lib/plan.js'].every((f) => pkg.files.includes(f)));
 
+// --- 1.6.3: the delete-safety regressions ------------------------------------------------
+check(
+  'the recycle bin is never filed as a safe, preselected target',
+  /id: 'recycle-bin',[\s\S]{0,200}?risk: 'caution'/.test(catalog) &&
+    !/id: 'recycle-bin',[\s\S]{0,200}?risk: 'safe'/.test(catalog) &&
+    /const IRREVERSIBLE = new Set\(\['recycle-bin'\]\)/.test(source),
+  'emptying the recycle bin cannot be undone, so it must not sit under "safe" or in "select all"',
+);
+check(
+  'no target skips the boundary check by naming no root',
+  /const roots = declared\.length > 0 \? declared : \[path\.parse/.test(catalog) &&
+    catalog
+      .split(/\n  \{\n/)
+      .filter((block) => /roots: \[\]/.test(block))
+      .every((block) => /id: 'recycle-bin'/.test(block)),
+  'an empty roots list used to disable `within` entirely; only the recycle bin, which spans volumes, may declare none',
+);
+check(
+  'preselection and select-all both exclude irreversible targets',
+  /!IRREVERSIBLE\.has\(row\.id\)/.test(source) &&
+    (source.match(/!IRREVERSIBLE\.has\(row\.id\)/g) ?? []).length >= 2,
+);
+check(
+  'every confirm box names the targets and the total',
+  (source.match(/t\('cleanConfirmList'\)/g) ?? []).length === 2 &&
+    (source.match(/t\('cleanConfirmIrreversible'\)/g) ?? []).length === 2 &&
+    !/window\.confirm\(t\('cleanConfirm'\)\)/.test(source),
+  'a bare "delete these?" is not a confirmation, and the plan step is still a delete',
+);
+check(
+  'a clean that left files behind is not reported as a green success',
+  /const kind = failed > 0 \? 'warn' : 'ok'/.test(source) && /\.dsc-notice\.dsc-warn/.test(source),
+);
+check(
+  'a truncated walk says so instead of claiming exact totals',
+  catalog.includes('truncated: stack.length > 0') &&
+    catalog.includes('truncated = truncated || size.truncated === true') &&
+    index.includes('truncated: target.truncated === true') &&
+    source.includes("t('truncatedHint')"),
+);
+check(
+  'measure and purge count entries in the same unit',
+  /let seen = 0;\n  while \(stack\.length > 0 && seen < MAX_ENTRIES\)/.test(catalog) && /seen \+= 1;/.test(catalog),
+);
+check(
+  'a refused directory removal is counted, a legitimately full one is not',
+  /code === 'ENOTEMPTY' \|\| code === 'EEXIST'/.test(catalog) && /blocked \+= 1/.test(catalog),
+);
+check(
+  'the dry run applies the same too-broad guard as the real run',
+  (catalog.match(/if \(tooBroad\(abs\)\) \{/g) ?? []).length === 2,
+  'an estimate that skips the guard promises bytes the delete will refuse',
+);
+check(
+  'the orphan target is named for what it actually measures',
+  !/已卸载程序的残留数据|Leftover data from an uninstalled app|已卸载程序残留|Data from uninstalled apps/.test(source) &&
+    source.includes('QQ') ,
+  'it only ever measures the QQGuild folder',
+);
+check('the version badge and package agree', pkg.version === '1.6.3');
+
 console.log(`\n${pass} passed, ${fail} failed`);
 if (fail > 0) process.exit(1);