dsh-install-radar 1.0.0 → 1.1.1

package/README.md

@@ -10,7 +10,20 @@
 | **目录快照对比**（基线 vs 现在） | 已知监视根里凭空多出来的条目、明显变大的目录 | 需要先立基线；监视根以外的目录看不见 |
 | **时间戳扫描**（`今天` 栏） | 「今天/近 N 天，哪个目录在吃盘」——包括临时目录、其它工具偷偷写的 | 只看时间窗口，不判断「该不该存在」 |
 
-## v0.12 变更
+## v1.1.1 变更
+
+- **卸载结果有回执**：点「一键卸载」后出一张结果条——成功是绿色 `✅ 卸载成功 · 释放 X`（+ 输出尾部），失败是红色 `❌ 卸载失败：winget 退出码 5`，下面跟 `🛠 解决办法` 列表（按工具给：程序还在运行 / 需要管理员 / 包 id 不对 / 指定解释器 / 路径被占用……）与「知道了」收起。
+  - 特别处理「退出码 0 但其实没装」：`pip` 的 `Skipping … not installed`、`winget` 的 `No installed package found` 都会被判为失败并给出对应提示。
+  - 目录型卸载失败（路径不存在 / 被占用 / 权限不足）同样给提示，不再静默。
+- **所有行都能多选**：`非会话新增` 里每一行都有勾选框（含 🔴 danger、含 <50 MB 的小项）；单行的「清理」按钮仍保留门槛（≥50 MB 且非 danger），但**批量删除对所有勾选项开放**。
+- **批量结果条**：删完显示 `✅ 删除 N 项 · 释放 X`；若其中有被拒（不在临时目录白名单、被占用等），变红并逐条列出 `路径 — 原因`，一眼知道哪些没删掉、为什么。
+
+
+- **风险筛选**：`非会话新增` 顶部三个彩色按钮 `🟢 N / 🟡 N / 🔴 N`，点一下只看该档，再点取消；右侧显示 `当前显示 / 总数`。
+- **一键卸载**：会话条目多了 `一键卸载` 按钮（两步确认，先显示将执行的命令）。按生态真正执行：`winget uninstall --id … --silent`、`python -m pip uninstall -y …`、`npm rm -g …`（项目内依赖 `npm rm …` 用项目 cwd）、`conda env remove -n … -y`；目录型（git clone / venv / 安装包）走删除。结果回显退出码与命令输出尾部，并写 `uninstall-log.jsonl`。
+- **首次扫描进度**：面板在扫描期间每秒轮询 `/api/install-radar/progress`，显示阶段文字（扫描安装根目录 → 比对基线 → 读注册表 → 解析会话日志 → 解析条目 → 整理报告）与百分比进度条。
+- **临时目录根可勾选**：`%LOCALAPPDATA%\Temp` 这类根行现在也能勾，语义是「清空里面的子项」——服务端会把根展开成它的一级子项逐个判定（仍受白名单、50 MB 门槛、danger 排除约束），不会整根删除。
+
 
 - **条目分卡**：展开一个会话后，每条安装记录都是一张独立小卡（交替底色 + 左侧 3px 色条 + 8px 间距），相邻两行不再糊成一片。
 - **「为什么装」**：每条记录多一行 `🎯 为什么装：…`。来源优先级：

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-install-radar",
-  "version": "1.0.0",
+  "version": "1.1.1",
   "description": "Per-session install radar for DeepSeek Harness: what each conversation installed (Python / npm / git / winget), with size, path, created time, purpose, why it was installed and what removing it costs — plus a sidebar panel and process→disk causal audit.",
   "type": "module",
   "main": "src/index.js",

package/src/client.js

@@ -49,6 +49,13 @@ window.__ModuleLoader__.load({
         copy: '复制路径',
         copied: '已复制',
         uninstall: '卸载命令',
+        uninstallNow: '一键卸载',
+        confirmUninstall: '确认卸载',
+        doUninstall: '执行卸载',
+        gotIt: '知道了',
+        uninstallOk: '卸载成功',
+        uninstallFail: '卸载失败',
+        howToFix: '解决办法',
         openFolder: '打开文件夹',
         tabSessions: '按会话',
         tabEco: '按类型',
@@ -88,6 +95,8 @@ window.__ModuleLoader__.load({
         freed: '已释放',
         noTime: '未知时间',
         recentHead: '今天零点以来新增/写入的东西（不看基线，直接按时间戳扫）',
+        riskFilter: '按风险筛选',
+        scanningDetail: '首次扫描要遍历安装根目录、会话日志和注册表，通常 20-60 秒。',
         recentEmpty: '今天没有扫到新增文件。',
         error: '出错了',
       },
@@ -116,6 +125,13 @@ window.__ModuleLoader__.load({
         copy: 'Copy path',
         copied: 'Copied',
         uninstall: 'Uninstall',
+        uninstallNow: 'Uninstall now',
+        confirmUninstall: 'Confirm uninstall',
+        doUninstall: 'Run uninstall',
+        gotIt: 'Got it',
+        uninstallOk: 'Uninstalled',
+        uninstallFail: 'Uninstall failed',
+        howToFix: 'How to fix',
         openFolder: 'Open folder',
         tabSessions: 'Sessions',
         tabEco: 'By kind',
@@ -155,6 +171,8 @@ window.__ModuleLoader__.load({
         freed: 'freed',
         noTime: 'no date',
         recentHead: 'Written or created since midnight (timestamps, not baseline)',
+        riskFilter: 'Filter by risk',
+        scanningDetail: 'First scan walks install roots, session logs and the registry — usually 20-60s.',
         recentEmpty: 'Nothing new today.',
         error: 'Failed',
       },
@@ -257,6 +275,11 @@ window.__ModuleLoader__.load({
 .dsh-ir-itemCard--alt{border-left-color:rgba(148,163,184,.7);background:rgba(148,163,184,.085)}
 .dsh-ir-itemCard .dsh-ir-item{background:transparent;border-left:none;margin-left:0}
 .dsh-ir-why{padding:2px 12px 2px;font-size:12px;color:var(--dsw-alias-state-business-primary,#6ea8ff);opacity:.95}
+.dsh-ir-prog{padding:18px 22px}
+.dsh-ir-progHead{font-size:12px;color:var(--dsw-alias-label-secondary,#666);margin-bottom:8px;display:flex;gap:8px;align-items:center}
+.dsh-ir-progBar{height:6px;border-radius:3px;background:var(--dsw-alias-bg-l2,rgba(0,0,0,.1));overflow:hidden}
+.dsh-ir-progFill{height:100%;border-radius:3px;background:linear-gradient(90deg,#4d90f0,#6ea8ff);transition:width .4s ease}
+.dsh-ir-progTip{font-size:11px;color:var(--dsw-alias-label-tertiary,#8a8a8a);margin-top:8px}
 .dsh-ir-risk{display:inline-flex;align-items:center;gap:5px;font-size:11px;margin-top:3px}
 .dsh-ir-risk::before{content:'';width:6px;height:6px;border-radius:50%;background:currentColor;flex:none}
 .dsh-ir-risk--safe{color:#2f9e5f}
@@ -412,6 +435,26 @@ window.__ModuleLoader__.load({
       if (item.confidence === 'none') tags.push(t('notFound'))
       if (item.confidence === 'low') tags.push(t('guessed'))
       const alt = typeof index === 'number' && index % 2 === 1
+      const [confirming, setConfirming] = useState(false)
+      const [running, setRunning] = useState(false)
+      const [result, setResult] = useState(null)
+
+      const runUninstall = () => {
+        if (!rpc) return
+        setRunning(true)
+        callRpc(rpc, 'uninstall', { eco: item.eco, name: item.name, path: item.path, confirm: true })
+          .then((value) => {
+            setResult(value)
+            setRunning(false)
+            setConfirming(false)
+          })
+          .catch((err) => {
+            setResult({ error: err && err.message ? err.message : String(err) })
+            setRunning(false)
+            setConfirming(false)
+          })
+      }
+
       return h(
         'div',
         { className: `dsh-ir-itemCard${alt ? ' dsh-ir-itemCard--alt' : ''}` },
@@ -449,7 +492,65 @@ window.__ModuleLoader__.load({
               )
             : null,
           item.uninstall ? h(CopyChip, { key: 'un', text: item.uninstall, label: t('uninstall'), title: item.uninstall }) : null,
+          item.eco || item.path
+            ? h(
+                'button',
+                {
+                  key: 'run',
+                  type: 'button',
+                  className: 'dsh-ir-chip dsh-ir-chip--danger',
+                  disabled: running,
+                  onClick: () => setConfirming(true),
+                  title: item.uninstall || '',
+                },
+                running ? '…' : t('uninstallNow'),
+              )
+            : null,
         ]),
+        confirming
+          ? h(
+              'div',
+              { className: 'dsh-ir-confirm' },
+              h('span', null, `🔴 ${t('confirmUninstall')} ${item.name}（${item.eco || 'path'}）`),
+              item.uninstall ? h('code', { className: 'dsh-ir-path' }, item.uninstall) : null,
+              h('button', { type: 'button', className: 'dsh-ir-chip dsh-ir-chip--danger', disabled: running, onClick: runUninstall }, t('doUninstall')),
+              h('button', { type: 'button', className: 'dsh-ir-chip', disabled: running, onClick: () => setConfirming(false) }, t('cancelClean')),
+            )
+          : null,
+        result
+          ? h(
+              'div',
+              {
+                className: 'dsh-ir-confirm',
+                style: {
+                  background: result.ok === false ? 'rgba(221,51,51,.10)' : 'rgba(47,158,95,.12)',
+                  borderColor: result.ok === false ? 'rgba(221,51,51,.35)' : 'rgba(47,158,95,.4)',
+                  flexWrap: 'wrap',
+                },
+              },
+              h(
+                'span',
+                null,
+                result.ok === false
+                  ? `❌ ${t('uninstallFail')}${result.error ? `：${result.error}` : ''}`
+                  : result.mode === 'delete'
+                    ? `✅ ${t('uninstallOk')} · 释放 ${formatSize(result.freed || 0)}`
+                    : `✅ ${t('uninstallOk')}（退出码 0）`,
+              ),
+              result.ok !== false && result.results && result.results[0] && result.results[0].tail
+                ? h('div', { className: 'dsh-ir-evidence', style: { width: '100%', padding: 0 } }, String(result.results[0].tail).slice(0, 300))
+                : null,
+              result.ok === false && result.hints && result.hints.length > 0
+                ? h(
+                    'div',
+                    { style: { width: '100%' } },
+                    h('div', { className: 'dsh-ir-eco' }, `🛠 ${t('howToFix')}：`),
+                    ...result.hints.map((hint, index) => h('div', { key: `hint-${index}`, className: 'dsh-ir-eco' }, `${index + 1}. ${hint}`)),
+                  )
+                : null,
+              h('button', { type: 'button', className: 'dsh-ir-chip', onClick: () => setResult(null) }, t('gotIt')),
+            )
+          : null,
         item.why && item.why.text
           ? h('div', { className: 'dsh-ir-why' }, `🎯 ${t('whyInstalled')}：${item.why.text}`)
           : null,
@@ -489,7 +590,8 @@ window.__ModuleLoader__.load({
 
     /** 「今天」的一行：一个归属目录（可勾选批量清理 / 单条两段式清理） */
     function RecentRow({ item, rpc, pending, cleanBusy, onAsk, onCancel, onConfirm, selected, onToggle }) {
-      const checkable = item.cleanable !== false
+      const checkable = item.selectable !== false
+      const perRowClean = item.cleanable !== false
       return h(
         'div',
         { className: `dsh-ir-recent${selected ? ' dsh-ir-recent--picked' : ''}` },
@@ -507,7 +609,8 @@ window.__ModuleLoader__.load({
                   onChange: () => onToggle && onToggle(item.path),
                   title: item.path,
                 })
-              : h('span', { title: '不可一键删（风险高或小于 50 MB）' }, '🔴'),
+              : null,
+            h('span', { title: item.risk ? `风险：${item.risk}` : '' }, item.risk === 'danger' ? '🔴' : item.risk === 'safe' ? '🟢' : '🟡'),
             h('span', { className: 'dsh-ir-size' }, item.size),
           ),
           h(
@@ -522,7 +625,7 @@ window.__ModuleLoader__.load({
             { style: { display: 'flex', gap: 6, flexWrap: 'wrap' } },
             h('button', { type: 'button', className: 'dsh-ir-chip', onClick: () => openTarget(rpc, item.path) }, t('openFolder')),
             h(CopyChip, { text: item.path, label: t('copy') }),
-            onAsk && checkable
+            onAsk && perRowClean
               ? h(
                   'button',
                   { type: 'button', className: 'dsh-ir-chip dsh-ir-chip--danger', onClick: onAsk, disabled: cleanBusy },
@@ -805,6 +908,9 @@ window.__ModuleLoader__.load({
       const [cleanBusy, setCleanBusy] = useState(false)
       const [selected, setSelected] = useState([])
       const [batchPending, setBatchPending] = useState(false)
+      const [riskFilter, setRiskFilter] = useState('all')
+      const [progress, setProgress] = useState(null)
+      const [batchResult, setBatchResult] = useState(null)
       const [trend, setTrend] = useState(null)
       const [trendBusy, setTrendBusy] = useState(false)
       const [autoClean, setAutoClean] = useState(null)
@@ -848,6 +954,27 @@ window.__ModuleLoader__.load({
         }
       }, [load])
 
+      /** 扫描进度：报告还在跑时每秒问一次宿主 */
+      useEffect(() => {
+        if (!busy || !rpc) {
+          setProgress(null)
+          return undefined
+        }
+        let alive = true
+        const tick = () =>
+          callRpc(rpc, 'progress', {})
+            .then((value) => {
+              if (alive) setProgress(value)
+            })
+            .catch(() => {})
+        tick()
+        const timer = setInterval(tick, 1000)
+        return () => {
+          alive = false
+          clearInterval(timer)
+        }
+      }, [busy, rpc])
+
       const loadRecent = useCallback(
         (days) => {
           if (!rpc) return
@@ -985,6 +1112,13 @@ window.__ModuleLoader__.load({
               setCleanBusy(false)
               setBatchPending(false)
               applyRemoved(value)
+              const failed = (value && value.items ? value.items : []).filter((item) => item.ok === false)
+              setBatchResult({
+                freed: (value && value.freed) || 0,
+                removed: (value && value.removed) || 0,
+                rejected: failed.slice(0, 12),
+                rejectedCount: failed.length,
+              })
             })
             .catch((err) => {
               setCleanBusy(false)
@@ -1074,7 +1208,14 @@ window.__ModuleLoader__.load({
       ]
 
       // 多选：只有「可一键清理」的行能勾（>=50 MB 且不是 danger）
-      const cleanableItems = ((recent && recent.items) || []).filter((item) => item.cleanable !== false)
+      const allRecent = (recent && recent.items) || []
+      const riskCount = {
+        safe: allRecent.filter((item) => item.risk === 'safe').length,
+        caution: allRecent.filter((item) => item.risk === 'caution').length,
+        danger: allRecent.filter((item) => item.risk === 'danger').length,
+      }
+      const visibleItems = riskFilter === 'all' ? allRecent : allRecent.filter((item) => item.risk === riskFilter)
+      const cleanableItems = ((recent && recent.items) || []).filter((item) => item.selectable !== false)
       const safeItems = cleanableItems.filter((item) => item.risk === 'safe')
       const selectedSet = new Set(selected)
       const selectedBytes = cleanableItems
@@ -1121,7 +1262,19 @@ window.__ModuleLoader__.load({
               data.generatedAt ? h('span', { style: { marginLeft: 'auto' } }, formatWhen(data.generatedAt)) : null,
             )
           : null,
-        busy && !data ? h('div', { className: 'dsh-ir-empty' }, `${t('scanning')} 首次扫描要遍历 Program Files 等目录，十几秒左右。`) : null,
+        busy && !data
+          ? h(
+              'div',
+              { className: 'dsh-ir-prog' },
+              h(
+                'div',
+                { className: 'dsh-ir-progHead' },
+                h('span', null, `${progress && progress.phase ? progress.phase : t('scanning')} · ${progress && progress.pct ? progress.pct : 0}%`),
+              ),
+              h('div', { className: 'dsh-ir-progBar' }, h('div', { className: 'dsh-ir-progFill', style: { width: `${(progress && progress.pct) || 2}%` } })),
+              h('div', { className: 'dsh-ir-progTip' }, t('scanningDetail')),
+            )
+          : null,
         error ? h('div', { className: 'dsh-ir-empty' }, `${t('error')}: ${error}`) : null,
         h(
           'div',
@@ -1198,6 +1351,31 @@ window.__ModuleLoader__.load({
                   ? h('div', { key: 'head', className: 'dsh-ir-recentHead' }, `${t('recentHead')} · 起点 ${recent.sinceLabel} · 合计 ${formatSize(recent.totalBytes ?? 0)}`)
                   : null,
                 recent && recent.items.length === 0 ? h('div', { key: 'empty2', className: 'dsh-ir-empty' }, t('recentEmpty')) : null,
+                batchResult
+                  ? h(
+                      'div',
+                      {
+                        key: 'batchResult',
+                        className: 'dsh-ir-confirm',
+                        style: {
+                          background: batchResult.rejectedCount > 0 ? 'rgba(221,51,51,.10)' : 'rgba(47,158,95,.12)',
+                          borderColor: batchResult.rejectedCount > 0 ? 'rgba(221,51,51,.35)' : 'rgba(47,158,95,.4)',
+                          flexWrap: 'wrap',
+                        },
+                      },
+                      h(
+                        'span',
+                        null,
+                        batchResult.rejectedCount > 0
+                          ? `⚠️ 删除 ${batchResult.removed} 项 · 释放 ${formatSize(batchResult.freed)} · 被拒 ${batchResult.rejectedCount} 项`
+                          : `✅ 删除 ${batchResult.removed} 项 · 释放 ${formatSize(batchResult.freed)}`,
+                      ),
+                      ...batchResult.rejected.map((item, index) =>
+                        h('div', { key: `rj-${index}`, className: 'dsh-ir-eco', style: { width: '100%' } }, `${item.path} — ${item.reason || '被拒绝'}`),
+                      ),
+                      h('button', { key: 'close', type: 'button', className: 'dsh-ir-chip', onClick: () => setBatchResult(null) }, t('gotIt')),
+                    )
+                  : null,
                 recent && recent.items.length > 0
                   ? h(SelBar, {
                       key: 'selbar',
@@ -1216,8 +1394,36 @@ window.__ModuleLoader__.load({
                       onCancel: () => setBatchPending(false),
                     })
                   : null,
+                recent && recent.items.length > 0
+                  ? h(
+                      'div',
+                      { key: 'riskbar', className: 'dsh-ir-selbarWrap', style: { position: 'static', background: 'transparent', boxShadow: 'none', borderBottom: 'none' } },
+                      h('span', { className: 'dsh-ir-eco' }, t('riskFilter')),
+                      ...[
+                        ['safe', '🟢'],
+                        ['caution', '🟡'],
+                        ['danger', '🔴'],
+                      ].map(([level, emoji]) =>
+                        h(
+                          'button',
+                          {
+                            key: level,
+                            type: 'button',
+                            className: `dsh-ir-subtab${riskFilter === level ? ' dsh-ir-subtab--on' : ''}`,
+                            onClick: () => setRiskFilter((prev) => (prev === level ? 'all' : level)),
+                          },
+                          `${emoji} ${riskCount[level]}`,
+                        ),
+                      ),
+                      riskFilter !== 'all'
+                        ? h('button', { key: 'all', type: 'button', className: 'dsh-ir-chip', onClick: () => setRiskFilter('all') }, t('clearSel'))
+                        : null,
+                      h('span', { key: 'sp', className: 'dsh-ir-selbarSpacer' }),
+                      h('span', { className: 'dsh-ir-eco' }, `${visibleItems.length} / ${allRecent.length}`),
+                    )
+                  : null,
                 recent
-                  ? recent.items.map((item, index) =>
+                  ? visibleItems.map((item, index) =>
                       h(RecentRow, {
                         key: `${item.path}-${index}`,
                         item,

package/src/engine/clean.js

@@ -58,7 +58,19 @@ export async function cleanTargets(paths, opts = {}) {
   const list = Array.isArray(paths) ? paths : []
   const items = []
   for (const raw of list) {
-    const expanded = await expand(raw)
+    let expanded = await expand(raw)
+    // 临时目录根本身不允许整根删：自动展开成里面的子项，逐个判定
+    if (expanded.length === 1 && !checkAllowed(expanded[0]).ok) {
+      const root = resolve(expanded[0])
+      if (root.toLowerCase() === String(expanded[0]).toLowerCase() && allowedRoots().includes(root.toLowerCase())) {
+        try {
+          const children = await readdir(root, { withFileTypes: true })
+          expanded = children.map((child) => join(root, child.name))
+        } catch {
+          expanded = []
+        }
+      }
+    }
     if (expanded.length === 0) {
       items.push({ path: raw, ok: false, reason: '没有匹配到目录', bytes: 0 })
       continue

package/src/engine/procs.js

@@ -10,6 +10,17 @@ import { execFile } from 'node:child_process'
 import { appendFile, mkdir, readFile, writeFile } from 'node:fs/promises'
 import { join } from 'node:path'
 
+/** 把命令行里的密钥类片段打码，避免审计日志变成泄密文件 */
+export function redact(text) {
+  if (typeof text !== 'string' || text.length === 0) return ''
+  return text
+    .replace(/\b(ghp|gho|ghu|ghs|ghr)_[A-Za-z0-9]{8,}\b/g, '$1_[REDACTED]')
+    .replace(/\bnpm_[A-Za-z0-9]{8,}\b/g, 'npm_[REDACTED]')
+    .replace(/\b(sk|pk|rk)-[A-Za-z0-9_-]{8,}\b/g, '$1-[REDACTED]')
+    .replace(/(_authToken=|_auth=|--otp=|token=)([^\s"'&]+)/gi, '$1[REDACTED]')
+    .replace(/\b(Bearer|Basic)\s+[A-Za-z0-9._~+/=-]{12,}/g, '$1 [REDACTED]')
+}
+
 /** 类别 → 命令行特征 */
 const PATTERNS = [
   { key: 'cdp', re: /--remote-debugging-(port|pipe)/i, label: 'CDP 调试端口' },
@@ -106,7 +117,7 @@ export async function findWatchedProcesses() {
     const chain = []
     let cursor = byPid.get(proc.ppid)
     for (let depth = 0; cursor && depth < 4; depth++) {
-      chain.push({ pid: cursor.pid, name: cursor.name, command: cursor.command.slice(0, 400) })
+      chain.push({ pid: cursor.pid, name: cursor.name, command: redact(cursor.command).slice(0, 400) })
       cursor = byPid.get(cursor.ppid)
     }
     const dataDir = /--user-data-dir=("[^"]+"|\S+)/i.exec(proc.command)
@@ -114,7 +125,7 @@ export async function findWatchedProcesses() {
     hits.push({
       pid: proc.pid,
       name: proc.name,
-      command: proc.command.slice(0, 600),
+      command: redact(proc.command).slice(0, 600),
       categories,
       userDataDir: dataDir ? dataDir[1].replace(/^["']|["']*$/g, '') : '',
       port: port ? Number(port[1]) : null,
@@ -164,7 +175,7 @@ export async function sampleWatchedProcesses({ home }) {
         label: category.label,
         pid: hit.pid,
         name: hit.name,
-        command: hit.command,
+        command: redact(hit.command),
         paths: hit.paths,
         userDataDir: hit.userDataDir,
         startedAt: hit.startedAt,
@@ -231,7 +242,7 @@ export async function readProcWatch({ home, limit = 200 }) {
       bucket.lastAt = Math.max(bucket.lastAt, record.at || 0)
       for (const path of item.paths || []) bucket.paths.add(path)
       if (item.userDataDir) bucket.paths.add(item.userDataDir)
-      if (bucket.samples.length < 2) bucket.samples.push(item.command.slice(0, 160))
+      if (bucket.samples.length < 2) bucket.samples.push(redact(item.command).slice(0, 160))
       rows.set(key, bucket)
 
       const cat = byCategory.get(item.category) || { category: item.category, label: item.label, count: 0 }

package/src/engine/radar.js

@@ -148,13 +148,18 @@ export function diffSnapshot(baseline, snapshot) {
  */
 export async function buildReport(opts = {}) {
   const home = opts.home || dshHome()
+  const progress = typeof opts.onProgress === 'function' ? opts.onProgress : () => {}
+  progress('扫描安装根目录', 5)
   await initSizeCache(home)
   const snapshot = await currentSnapshot({ ...opts, home })
+  progress('比对基线', 40)
   const ensured = await ensureBaseline({ ...opts, home, snapshot })
   const baseline = ensured.baseline
   const delta = diffSnapshot(baseline, snapshot)
+  progress('读取已安装程序注册表', 45)
   const env = await probeEnvironment()
   const programs = await loadInstalledPrograms()
+  progress('解析会话日志', 55)
 
   let sessions = []
   let scannedSessions = 0
@@ -163,6 +168,7 @@ export async function buildReport(opts = {}) {
     sessions = collected.sessions
     scannedSessions = collected.scannedSessions
   }
+  progress(`解析安装条目（${sessions.length} 个会话）`, 65)
 
   let audit = null
   try {
@@ -227,6 +233,7 @@ export async function buildReport(opts = {}) {
     })
   }
   perSession.sort((a, b) => (b.lastActive ?? 0) - (a.lastActive ?? 0))
+  progress('整理报告', 95)
 
   const unattributed = delta.newEntries.slice(0, 60).map((entry) => {
     const info = classify(entry.name, entry.path)
@@ -303,7 +310,11 @@ export async function buildRecent(opts = {}) {
     const risk = assessRisk(item.path, { bytes: item.bytes })
     item.risk = risk.level
     item.consequence = risk.consequence
-    item.cleanable = item.bytes >= CLEAN_MIN_BYTES && risk.level !== 'danger' && risk.isRoot !== true
+    // 临时目录根本身也可以勾：服务端会把它展开成里面的子项逐个处理
+    item.isRoot = risk.isRoot === true
+    // 勾选不设门槛：所有行都能多选（danger 也能勾，提交后服务端会逐条拒绝并给原因）
+    item.selectable = true
+    item.cleanable = item.bytes >= CLEAN_MIN_BYTES && risk.level !== 'danger'
   }
   raw.sinceLabel = new Date(raw.since).toLocaleString('sv-SE')
   raw.totalSize = formatBytes(raw.totalBytes)

package/src/index.js

@@ -49,7 +49,7 @@ export const name = 'install-radar'
 export const inject = ['tools']
 
 const ROUTE_PREFIX = '/api/install-radar/'
-const METHODS = ['report', 'sessions', 'baseline', 'diff', 'refresh', 'recent', 'open', 'procs', 'clean', 'history', 'repro', 'trend', 'autoclean']
+const METHODS = ['report', 'sessions', 'baseline', 'diff', 'refresh', 'recent', 'open', 'procs', 'clean', 'history', 'repro', 'trend', 'autoclean', 'uninstall', 'progress']
 
 const OUTPUT = {
   type: 'object',
@@ -141,6 +141,160 @@ function renderSessionTable(report) {
 export function apply(ctx, config = {}) {
   const base = sessionConfig(config)
 
+  /** 首次扫描进度：report 路由在跑的时候，面板轮询这里画进度条 */
+  let progressState = null
+
+  /** 有些工具「没装」也返回 0（pip / winget 都有这种），必须看输出才能判失败 */
+  function saysNotInstalled(text) {
+    return /not installed|no installed package|找不到与输入条件匹配|未找到已安装|is not installed/i.test(String(text || ''))
+  }
+
+  /** 卸载失败时给「怎么办」，按工具 + 报错内容挑 */
+  function hintsFor(step, outcome) {
+    const tail = `${outcome.err || ''}\n${outcome.out || ''}`.toLowerCase()
+    if (outcome.code === -1 || /enoent|不是内部或外部命令|not recognized/.test(tail)) {
+      return [`没找到 ${step.cmd} 命令：确认它已安装并在 PATH 里`, '或者复制「卸载命令」到终端里手动执行']
+    }
+    if (/elevat|admin|access is denied|拒绝访问|0x80070005/.test(tail)) {
+      return ['需要管理员权限：用「以管理员身份运行」的终端重试这条命令']
+    }
+    if (step.cmd === 'winget') {
+      return [
+        'winget 卸载最常见的原因是程序还在运行——先完全退出（含托盘图标）再试',
+        '包 id 可能不准确：先跑 winget list 查确切 id',
+        '源没更新：winget source update 后再试',
+        '仍失败就把「卸载命令」复制到管理员终端手动执行，看完整报错',
+      ]
+    }
+    if (step.cmd === 'npm') {
+      return ['全局卸载偶尔因权限失败：用管理员终端重试', '确认用的是 npm 包名（不是 import 名）', '可先跑 npm ls -g --depth=0 核对']
+    }
+    if (step.cmd === 'python') {
+      return ['确认这个包装在当前 python 下：python -m pip show <包名>', '多个 Python 并存时指定解释器：py -3.14 -m pip uninstall <包名>', '权限问题可试 --user']
+    }
+    if (step.cmd === 'conda') {
+      return ['确认环境名：conda env list', '环境正在被使用时无法删除，先退出该环境里的程序']
+    }
+    return ['查看下方原始输出定位原因', '或复制命令到终端手动执行']
+  }
+
+  /** 删除型卸载失败的提示 */
+  function deleteHints(items) {
+    if (!items.some((item) => item.ok === false)) return []
+    return [
+      '文件被占用：先退出正在使用它的程序（浏览器 / 编辑器 / 正在跑的脚本）',
+      '权限不足：用管理员终端重试',
+      '路径可能变了：点「重扫」刷新后再看',
+    ]
+  }
+
+  /**
+   * 一键卸载：按生态执行真正的卸载命令（面板里两步确认后才调到这里）。
+   * 只接受报告里出现过的条目，避免被当成任意命令执行器。
+   */
+  async function runUninstall(payload) {
+    const eco = String(payload?.eco || '')
+    const name = String(payload?.name || '')
+    const target = String(payload?.path || '')
+    const confirmed = payload?.confirm === true
+    if (!confirmed) return { confirm: false, eco, name, target }
+    if (!name && !target) throw new Error('缺少 name / path')
+
+    const plan = []
+    if (eco === 'winget') plan.push({ cmd: 'winget', args: ['uninstall', '--id', name, '-e', '--silent', '--accept-source-agreements'] })
+    else if (eco === 'choco') plan.push({ cmd: 'choco', args: ['uninstall', name, '-y'] })
+    else if (eco === 'python') plan.push({ cmd: 'python', args: ['-m', 'pip', 'uninstall', '-y', name] })
+    else if (eco === 'node') {
+      if (/[\\/]node_modules[\\/]/i.test(target)) {
+        const project = target.split(/[\\/]node_modules[\\/]/i)[0]
+        plan.push({ cmd: 'npm', args: ['rm', name], cwd: project })
+      } else plan.push({ cmd: 'npm', args: ['rm', '-g', name] })
+    } else if (eco === 'conda') plan.push({ cmd: 'conda', args: ['env', 'remove', '-n', name, '-y'] })
+
+    // 目录型（git clone / venv / 安装包 / 其它）：走删除
+    if (plan.length === 0) {
+      if (!target || !existsSync(target)) {
+        return {
+          confirm: true,
+          mode: 'delete',
+          ok: false,
+          error: `路径不存在：${target || '(空)'}`,
+          hints: ['这个东西可能已经被手动删掉了', '点「重扫」刷新后再看当前状态'],
+          freed: 0,
+          removed: 0,
+          items: [],
+        }
+      }
+      const result = await cleanTargets([target], { confirm: true, home: base.home, note: 'uninstall' })
+      const failed = result.items.filter((item) => item.ok === false)
+      return {
+        confirm: true,
+        mode: 'delete',
+        ok: failed.length === 0,
+        freed: result.freed,
+        removed: result.removed,
+        items: result.items,
+        hints: deleteHints(result.items),
+        error: failed.length > 0 ? failed.map((item) => `${item.path}：${item.reason}`).join('；') : '',
+      }
+    }
+
+    const results = []
+    for (const step of plan) {
+      const started = Date.now()
+      const outcome = await new Promise((done) => {
+        let out = ''
+        let err = ''
+        const child = spawn(step.cmd, step.args, { cwd: step.cwd, windowsHide: true, shell: process.platform === 'win32' })
+        child.stdout?.on('data', (chunk) => (out += chunk))
+        child.stderr?.on('data', (chunk) => (err += chunk))
+        child.on('error', (error) => done({ ok: false, code: -1, out, err: String(error.message) }))
+        child.on('close', (code) => done({ ok: code === 0, code, out, err }))
+      })
+      const tail = (outcome.err || outcome.out || '').slice(-400)
+      const notInstalled = saysNotInstalled(tail)
+      const ok = outcome.ok && !notInstalled
+      results.push({
+        ...step,
+        ...outcome,
+        ok,
+        notInstalled,
+        ms: Date.now() - started,
+        tail,
+        hints: ok
+          ? []
+          : notInstalled
+            ? [
+                `这条在 ${step.cmd} 里没找到，说明它可能装在别的解释器/别的用户下`,
+                step.cmd === 'python' ? '先确认解释器：py -0p，再用对应版本重试 python -m pip uninstall <包名>' : '先跑一次 list 命令（winget list / npm ls -g）核对确切名字',
+                '也可能已经被卸掉了——点「重扫」看当前状态',
+              ]
+            : hintsFor(step, outcome),
+      })
+    }
+
+    const ok = results.every((row) => row.ok)
+    try {
+      const dir = stateDir(base.home)
+      await mkdir(dir, { recursive: true })
+      await writeFile(
+        join(dir, 'uninstall-log.jsonl'),
+        `${JSON.stringify({ at: Date.now(), eco, name, target, ok, results: results.map((r) => ({ cmd: r.cmd, code: r.code })) })}\n`,
+        { encoding: 'utf8', flag: 'a' },
+      )
+    } catch {
+      /* 日志写失败不影响结果 */
+    }
+    return {
+      confirm: true,
+      mode: 'command',
+      ok,
+      results,
+      hints: results.flatMap((row) => row.hints || []),
+      error: ok ? '' : results.filter((row) => !row.ok).map((row) => `${row.cmd} 退出码 ${row.code}`).join('；'),
+    }
+  }
+
   /**
    * 复现线索要挑「哪一轮」：优先用历史侧写的第一名；
    * 如果临时目录已经被清掉了，就退回到「浏览器命令最多的那一轮」。
@@ -485,7 +639,20 @@ export function apply(ctx, config = {}) {
     async function reportPayload(force) {
       const ttl = 45_000
       if (!force && cached.value && Date.now() - cached.at < ttl) return cached.value
-      const report = await buildReport({ ...base, includeSessions: true, force })
+      progressState = { phase: '开始扫描', pct: 2, startedAt: Date.now() }
+      let report
+      try {
+        report = await buildReport({
+          ...base,
+          includeSessions: true,
+          force,
+          onProgress: (phase, pct) => {
+            progressState = { phase, pct, startedAt: progressState?.startedAt || Date.now() }
+          },
+        })
+      } finally {
+        progressState = null
+      }
       const value = panelPayload(report)
       const config = await readConfig(base.home)
       value.autoClean = { enabled: false, minAgeDays: 7, ...(config.autoClean || {}) }
@@ -603,6 +770,12 @@ export function apply(ctx, config = {}) {
         }
         return { autoClean: settings, result }
       },
+      async uninstall(body) {
+        return runUninstall(body?.payload || {})
+      },
+      async progress() {
+        return progressState || { phase: '', pct: 0, idle: true }
+      },
       async repro(body) {
         const payload = body?.payload || {}
         const picked = await pickSessionForRepro(payload.sessionId)