squeaky-clean 0.4.18 → 0.5.0

package/dist/safety/index.d.ts

@@ -0,0 +1,47 @@
+import { CacheCategory, SafetyTier } from "../types";
+/**
+ * Safety tiers ordered from least to most restricted. Used to compare and
+ * filter categories against a cleaning profile.
+ */
+export declare const SAFETY_TIER_ORDER: SafetyTier[];
+export declare function isSafetyTier(value: string): value is SafetyTier;
+/**
+ * Display metadata per tier. Colors reference chalk method names so UI code
+ * can apply them without this module depending on chalk.
+ */
+export declare const SAFETY_TIER_INFO: Record<SafetyTier, {
+    label: string;
+    color: "green" | "cyan" | "yellow" | "red";
+    summary: string;
+}>;
+/**
+ * Effective safety tier for a category. Categories that predate the safety
+ * field derive a tier from their priority: critical (active in the last day)
+ * maps to caution, low (untouched for 30+ days) maps to safe, everything
+ * else is probably-safe. "manual" is never derived - cleaners must opt in
+ * explicitly.
+ */
+export declare function effectiveSafety(category: CacheCategory): SafetyTier;
+/**
+ * Cleaning profiles: named presets mapping to the set of tiers cleaned
+ * without per-item confirmation. The "manual" tier is intentionally part of
+ * no profile - manual categories always need explicit consent.
+ */
+export type CleaningProfileName = "conservative" | "balanced" | "aggressive";
+export declare const CLEANING_PROFILES: Record<CleaningProfileName, {
+    tiers: SafetyTier[];
+    description: string;
+}>;
+export declare const DEFAULT_PROFILE: CleaningProfileName;
+export declare function isCleaningProfileName(value: string): value is CleaningProfileName;
+/**
+ * Resolve the allowed tiers for a profile name; unknown names fall back to
+ * the default profile.
+ */
+export declare function tiersForProfile(profile?: string): SafetyTier[];
+/**
+ * Parse a user-supplied comma-separated tier list (e.g. "safe,caution").
+ * Returns null when any entry is invalid so callers can report it.
+ */
+export declare function parseSafetyTiers(input: string): SafetyTier[] | null;
+//# sourceMappingURL=index.d.ts.map

package/dist/safety/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/safety/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAErD;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,UAAU,EAKzC,CAAC;AAEF,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,UAAU,CAE/D;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,MAAM,CACnC,UAAU,EACV;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAwB/E,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,aAAa,GAAG,UAAU,CAWnE;AAED;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,cAAc,GAAG,UAAU,GAAG,YAAY,CAAC;AAE7E,eAAO,MAAM,iBAAiB,EAAE,MAAM,CACpC,mBAAmB,EACnB;IAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAgB7C,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,mBAAgC,CAAC;AAE/D,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,GACZ,KAAK,IAAI,mBAAmB,CAE9B;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,UAAU,EAAE,CAK9D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,EAAE,GAAG,IAAI,CAanE"}

package/dist/safety/index.js

@@ -0,0 +1,115 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_PROFILE = exports.CLEANING_PROFILES = exports.SAFETY_TIER_INFO = exports.SAFETY_TIER_ORDER = void 0;
+exports.isSafetyTier = isSafetyTier;
+exports.effectiveSafety = effectiveSafety;
+exports.isCleaningProfileName = isCleaningProfileName;
+exports.tiersForProfile = tiersForProfile;
+exports.parseSafetyTiers = parseSafetyTiers;
+/**
+ * Safety tiers ordered from least to most restricted. Used to compare and
+ * filter categories against a cleaning profile.
+ */
+exports.SAFETY_TIER_ORDER = [
+    "safe",
+    "probably-safe",
+    "caution",
+    "manual",
+];
+function isSafetyTier(value) {
+    return exports.SAFETY_TIER_ORDER.includes(value);
+}
+/**
+ * Display metadata per tier. Colors reference chalk method names so UI code
+ * can apply them without this module depending on chalk.
+ */
+exports.SAFETY_TIER_INFO = {
+    safe: {
+        label: "SAFE",
+        color: "green",
+        summary: "Regenerated transparently; no observable downside to cleaning",
+    },
+    "probably-safe": {
+        label: "PROBABLY SAFE",
+        color: "cyan",
+        summary: "Regenerable; apps may start slower or re-download data once",
+    },
+    caution: {
+        label: "CAUTION",
+        color: "yellow",
+        summary: "May lose useful state (offline content, large re-downloads) or upset running apps",
+    },
+    manual: {
+        label: "MANUAL",
+        color: "red",
+        summary: "User-data adjacent; requires explicit per-item confirmation, never cleaned implicitly",
+    },
+};
+/**
+ * Effective safety tier for a category. Categories that predate the safety
+ * field derive a tier from their priority: critical (active in the last day)
+ * maps to caution, low (untouched for 30+ days) maps to safe, everything
+ * else is probably-safe. "manual" is never derived - cleaners must opt in
+ * explicitly.
+ */
+function effectiveSafety(category) {
+    if (category.safety)
+        return category.safety;
+    switch (category.priority) {
+        case "critical":
+            return "caution";
+        case "low":
+            return "safe";
+        default:
+            return "probably-safe";
+    }
+}
+exports.CLEANING_PROFILES = {
+    conservative: {
+        tiers: ["safe"],
+        description: "Only caches that are definitely safe to clean",
+    },
+    balanced: {
+        tiers: ["safe", "probably-safe"],
+        description: "Safe caches plus regenerable ones that may cost a slower next launch (default)",
+    },
+    aggressive: {
+        tiers: ["safe", "probably-safe", "caution"],
+        description: "Everything except manual-confirmation items; includes caches with re-download or running-app risks",
+    },
+};
+exports.DEFAULT_PROFILE = "balanced";
+function isCleaningProfileName(value) {
+    return value in exports.CLEANING_PROFILES;
+}
+/**
+ * Resolve the allowed tiers for a profile name; unknown names fall back to
+ * the default profile.
+ */
+function tiersForProfile(profile) {
+    if (profile && isCleaningProfileName(profile)) {
+        return exports.CLEANING_PROFILES[profile].tiers;
+    }
+    return exports.CLEANING_PROFILES[exports.DEFAULT_PROFILE].tiers;
+}
+/**
+ * Parse a user-supplied comma-separated tier list (e.g. "safe,caution").
+ * Returns null when any entry is invalid so callers can report it.
+ */
+function parseSafetyTiers(input) {
+    const parts = input
+        .split(",")
+        .map((p) => p.trim().toLowerCase())
+        .filter(Boolean);
+    if (parts.length === 0)
+        return null;
+    const tiers = [];
+    for (const part of parts) {
+        if (!isSafetyTier(part))
+            return null;
+        if (!tiers.includes(part))
+            tiers.push(part);
+    }
+    return tiers;
+}
+//# sourceMappingURL=index.js.map

package/dist/safety/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/safety/index.ts"],"names":[],"mappings":";;;AAaA,oCAEC;AAyCD,0CAWC;AA+BD,sDAIC;AAMD,0CAKC;AAMD,4CAaC;AAlID;;;GAGG;AACU,QAAA,iBAAiB,GAAiB;IAC7C,MAAM;IACN,eAAe;IACf,SAAS;IACT,QAAQ;CACT,CAAC;AAEF,SAAgB,YAAY,CAAC,KAAa;IACxC,OAAQ,yBAA8B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED;;;GAGG;AACU,QAAA,gBAAgB,GAGzB;IACF,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM;QACb,KAAK,EAAE,OAAO;QACd,OAAO,EAAE,+DAA+D;KACzE;IACD,eAAe,EAAE;QACf,KAAK,EAAE,eAAe;QACtB,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,6DAA6D;KACvE;IACD,OAAO,EAAE;QACP,KAAK,EAAE,SAAS;QAChB,KAAK,EAAE,QAAQ;QACf,OAAO,EACL,mFAAmF;KACtF;IACD,MAAM,EAAE;QACN,KAAK,EAAE,QAAQ;QACf,KAAK,EAAE,KAAK;QACZ,OAAO,EACL,uFAAuF;KAC1F;CACF,CAAC;AAEF;;;;;;GAMG;AACH,SAAgB,eAAe,CAAC,QAAuB;IACrD,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC;IAE5C,QAAQ,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC1B,KAAK,UAAU;YACb,OAAO,SAAS,CAAC;QACnB,KAAK,KAAK;YACR,OAAO,MAAM,CAAC;QAChB;YACE,OAAO,eAAe,CAAC;IAC3B,CAAC;AACH,CAAC;AASY,QAAA,iBAAiB,GAG1B;IACF,YAAY,EAAE;QACZ,KAAK,EAAE,CAAC,MAAM,CAAC;QACf,WAAW,EAAE,+CAA+C;KAC7D;IACD,QAAQ,EAAE;QACR,KAAK,EAAE,CAAC,MAAM,EAAE,eAAe,CAAC;QAChC,WAAW,EACT,gFAAgF;KACnF;IACD,UAAU,EAAE;QACV,KAAK,EAAE,CAAC,MAAM,EAAE,eAAe,EAAE,SAAS,CAAC;QAC3C,WAAW,EACT,oGAAoG;KACvG;CACF,CAAC;AAEW,QAAA,eAAe,GAAwB,UAAU,CAAC;AAE/D,SAAgB,qBAAqB,CACnC,KAAa;IAEb,OAAO,KAAK,IAAI,yBAAiB,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,SAAgB,eAAe,CAAC,OAAgB;IAC9C,IAAI,OAAO,IAAI,qBAAqB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,OAAO,yBAAiB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC;IAC1C,CAAC;IACD,OAAO,yBAAiB,CAAC,uBAAe,CAAC,CAAC,KAAK,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAAC,KAAa;IAC5C,MAAM,KAAK,GAAG,KAAK;SAChB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;SAClC,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/safety/rules.d.ts

@@ -0,0 +1,27 @@
+import { SafetyTier } from "../types";
+/**
+ * Verdict for a discovered cache path. Beyond the four user-facing safety
+ * tiers, the rule engine can also exclude paths entirely:
+ * - "never": not a cache (or user-data adjacent enough that deleting it can
+ *   destroy data). Never shown, never cleaned.
+ * - "claimed": already covered by a dedicated cleaner module; excluded from
+ *   discovery to avoid double-counting and double-cleaning.
+ */
+export type RuleVerdict = SafetyTier | "never" | "claimed";
+export interface RuleMatch {
+    verdict: RuleVerdict;
+    reason: string;
+}
+/**
+ * Classify a discovered cache directory. First-match-wins over the ordered
+ * rule list; unmatched paths default to "probably-safe" because every
+ * discovery root is a platform cache/log location whose contents apps must
+ * tolerate losing (Apple's Caches API contract, XDG cache spec).
+ */
+export declare function classifyCachePath(absolutePath: string): RuleMatch;
+/**
+ * Top-level discovery roots for the current platform. Computed at call time
+ * so os.homedir()/env mocks and changes are respected.
+ */
+export declare function getDiscoveryRoots(): string[];
+//# sourceMappingURL=rules.d.ts.map

package/dist/safety/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../../src/safety/rules.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEtC;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,CAAC;AAE3D,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,WAAW,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;CAChB;AA+YD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CA+BjE;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CA6B5C"}

package/dist/safety/rules.js

@@ -0,0 +1,465 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.classifyCachePath = classifyCachePath;
+exports.getDiscoveryRoots = getDiscoveryRoots;
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+/** Predicate factory: basename matches. */
+const base = (re) => (ctx) => re.test(ctx.base);
+/** Predicate factory: normalized full path matches. */
+const full = (re) => (ctx) => re.test(ctx.full);
+/**
+ * Ordered, first-match-wins classification rules. Priority:
+ * never > claimed > manual > caution > safe; anything unmatched falls
+ * through to the "probably-safe" default in classifyCachePath().
+ */
+const RULES = [
+    // ---------------------------------------------------------------- never
+    {
+        test: /^com\.apple\.bird$/i,
+        verdict: "never",
+        reason: "iCloud Drive daemon state; deleting can corrupt iCloud sync",
+    },
+    {
+        test: /^cloudkit$/i,
+        verdict: "never",
+        reason: "CloudKit sync state; deleting can corrupt iCloud sync",
+    },
+    {
+        test: /^com\.apple\.cloudkit/i,
+        verdict: "never",
+        reason: "CloudKit daemon state; deleting can corrupt iCloud sync",
+    },
+    {
+        test: /^com\.apple\.mail/i,
+        verdict: "never",
+        reason: "Mail attachments and message index; user-data adjacent",
+    },
+    {
+        test: /^com\.apple\.mobilesync/i,
+        verdict: "never",
+        reason: "Device backups (MobileSync); deleting destroys backups",
+    },
+    {
+        test: /^com\.docker\.docker$/i,
+        verdict: "never",
+        reason: "Docker VM disk image; not a cache",
+    },
+    {
+        test: /^com\.apple\.photolibraryd/i,
+        verdict: "never",
+        reason: "Photos library daemon state; user-data adjacent",
+    },
+    {
+        test: /^com\.apple\.photos/i,
+        verdict: "never",
+        reason: "Photos app state; user-data adjacent",
+    },
+    {
+        test: full(/\.photoslibrary(\/|$)/i),
+        verdict: "never",
+        reason: "Inside a Photos library bundle; user data",
+    },
+    {
+        test: /1password/i,
+        verdict: "never",
+        reason: "Password manager data; never touched",
+    },
+    {
+        test: /bitwarden/i,
+        verdict: "never",
+        reason: "Password manager data; never touched",
+    },
+    {
+        test: /keepass/i,
+        verdict: "never",
+        reason: "Password manager data; never touched",
+    },
+    {
+        test: /^keychains$/i,
+        verdict: "never",
+        reason: "Keychain storage; never touched",
+    },
+    {
+        test: /^signal$/i,
+        verdict: "never",
+        reason: "Signal messenger data; messages are user data",
+    },
+    {
+        test: /^com\.apple\.security/i,
+        verdict: "never",
+        reason: "Security daemon state; never touched",
+    },
+    {
+        test: /^clouddocs$/i,
+        verdict: "never",
+        reason: "iCloud Documents sync state; deleting can corrupt sync",
+    },
+    // -------------------------------------------------------------- claimed
+    {
+        test: /^homebrew$/i,
+        verdict: "claimed",
+        reason: "Covered by the brew cleaner",
+    },
+    {
+        test: /^portable-ruby$/i,
+        verdict: "claimed",
+        reason: "Covered by the brew cleaner",
+    },
+    {
+        test: /^cask$/i,
+        verdict: "claimed",
+        reason: "Covered by the brew cleaner",
+    },
+    {
+        test: /^\.?npm$/i,
+        verdict: "claimed",
+        reason: "Covered by the npm cleaner",
+    },
+    {
+        test: /^\.?yarn$/i,
+        verdict: "claimed",
+        reason: "Covered by the yarn cleaner",
+    },
+    {
+        test: /^\.?bun$/i,
+        verdict: "claimed",
+        reason: "Covered by the bun cleaner",
+    },
+    {
+        test: /^pip$/i,
+        verdict: "claimed",
+        reason: "Covered by the pip cleaner",
+    },
+    {
+        test: /^pip-tools$/i,
+        verdict: "claimed",
+        reason: "Covered by the pip cleaner",
+    },
+    {
+        test: /^pipenv$/i,
+        verdict: "claimed",
+        reason: "Covered by the pipenv cleaner",
+    },
+    {
+        test: /^node-gyp$/i,
+        verdict: "claimed",
+        reason: "Covered by the node-gyp cleaner",
+    },
+    {
+        test: /^go-build$/i,
+        verdict: "claimed",
+        reason: "Covered by the go-build cleaner",
+    },
+    {
+        test: /^org\.swift\.swiftpm$/i,
+        verdict: "claimed",
+        reason: "Covered by the swiftpm cleaner",
+    },
+    {
+        test: /^cocoapods$/i,
+        verdict: "claimed",
+        reason: "Covered by the cocoapods cleaner",
+    },
+    {
+        test: /^turborepo$/i,
+        verdict: "claimed",
+        reason: "Covered by the turbo cleaner",
+    },
+    {
+        test: /^ms-playwright/i,
+        verdict: "claimed",
+        reason: "Covered by the playwright cleaner",
+    },
+    {
+        test: full(/\/google\/chrome(\/|$)/i),
+        verdict: "claimed",
+        reason: "Covered by the chrome cleaner",
+    },
+    {
+        test: full(/\/mozilla\/firefox(\/|$)/i),
+        verdict: "claimed",
+        reason: "Covered by the firefox cleaner",
+    },
+    {
+        test: /^firefox$/i,
+        verdict: "claimed",
+        reason: "Covered by the firefox cleaner",
+    },
+    {
+        test: /^com\.microsoft\.vscode/i,
+        verdict: "claimed",
+        reason: "Covered by the vscode cleaner",
+    },
+    {
+        test: /^com\.vscodium/i,
+        verdict: "claimed",
+        reason: "Covered by the vscode cleaner",
+    },
+    {
+        test: /^com\.todesktop\./i,
+        verdict: "claimed",
+        reason: "Covered by the cursor cleaner",
+    },
+    {
+        test: /^com\.exafunction\.windsurf/i,
+        verdict: "claimed",
+        reason: "Covered by the windsurf cleaner",
+    },
+    {
+        test: /^com\.google\.antigravity/i,
+        verdict: "claimed",
+        reason: "Covered by an existing IDE cleaner",
+    },
+    {
+        test: /^dev\.zed\.zed/i,
+        verdict: "claimed",
+        reason: "Covered by the zed cleaner",
+    },
+    {
+        test: /^jetbrains$/i,
+        verdict: "claimed",
+        reason: "Covered by the jetbrains cleaner",
+    },
+    {
+        test: /^androidstudio/i,
+        verdict: "claimed",
+        reason: "Covered by the androidstudio cleaner",
+    },
+    {
+        test: /^com\.apple\.dt\./i,
+        verdict: "claimed",
+        reason: "Covered by the xcode cleaner",
+    },
+    {
+        test: /\.shipit$/i,
+        verdict: "claimed",
+        reason: "Covered by the shipit cleaner",
+    },
+    {
+        test: /keystone/i,
+        verdict: "claimed",
+        reason: "Covered by the shipit cleaner (Google Keystone)",
+    },
+    // --------------------------------------------------------------- manual
+    {
+        test: /^huggingface$/i,
+        verdict: "manual",
+        reason: "ML model store; regenerable but re-downloads can exceed 100GB",
+    },
+    {
+        test: /^torch$/i,
+        verdict: "manual",
+        reason: "ML model store; regenerable but re-downloads can exceed 100GB",
+    },
+    {
+        test: /^whisper$/i,
+        verdict: "manual",
+        reason: "ML model store; regenerable but re-downloads can exceed 100GB",
+    },
+    {
+        test: /^suno$/i,
+        verdict: "manual",
+        reason: "ML model store; regenerable but re-downloads can exceed 100GB",
+    },
+    {
+        test: /^modelscope$/i,
+        verdict: "manual",
+        reason: "ML model store; regenerable but re-downloads can exceed 100GB",
+    },
+    {
+        test: /^ollama$/i,
+        verdict: "manual",
+        reason: "ML model store; regenerable but re-downloads can exceed 100GB",
+    },
+    {
+        // Exact segment match: "spotify-ui-widgets" or "my-spotify-backup"
+        // must NOT be pulled into the manual tier.
+        test: (ctx) => ctx.segments.some((s) => s === "spotify" || s === "com.spotify.client") &&
+            ctx.segments.some((s) => s === "persistentcache"),
+        verdict: "manual",
+        reason: "Spotify PersistentCache; offline downloads may live here",
+    },
+    // -------------------------------------------------------------- caution
+    {
+        test: /^com\.apple\./i,
+        verdict: "caution",
+        reason: "Apple system daemon cache; long-running daemons may misbehave",
+    },
+    {
+        test: /^arc$/i,
+        verdict: "caution",
+        reason: "Browser cache; risky while the browser is running",
+    },
+    {
+        test: /^company\.thebrowser\./i,
+        verdict: "caution",
+        reason: "Browser cache; risky while the browser is running",
+    },
+    {
+        test: /^dia$/i,
+        verdict: "caution",
+        reason: "Browser cache; risky while the browser is running",
+    },
+    {
+        test: /^slack$/i,
+        verdict: "caution",
+        reason: "Chat/meeting app cache; risky while the app is running",
+    },
+    {
+        test: /^discord$/i,
+        verdict: "caution",
+        reason: "Chat/meeting app cache; risky while the app is running",
+    },
+    {
+        test: /^microsoft teams$/i,
+        verdict: "caution",
+        reason: "Chat/meeting app cache; risky while the app is running",
+    },
+    {
+        test: /^teams$/i,
+        verdict: "caution",
+        reason: "Chat/meeting app cache; risky while the app is running",
+    },
+    {
+        test: /^skype$/i,
+        verdict: "caution",
+        reason: "Chat/meeting app cache; risky while the app is running",
+    },
+    {
+        test: /^zoom\.us$/i,
+        verdict: "caution",
+        reason: "Chat/meeting app cache; risky while the app is running",
+    },
+    {
+        test: /^uv$/i,
+        verdict: "caution",
+        reason: "uv package cache; 80GB-class re-downloads, prefer `uv cache clean`",
+    },
+    // ----------------------------------------------------------------- safe
+    {
+        test: base(/^(gpucache|code cache|shadercache|grshadercache|dawncache|dawngraphitecache|cacheddata)$/i),
+        verdict: "safe",
+        reason: "GPU/shader/code cache; regenerated transparently",
+    },
+    {
+        test: (ctx) => ctx.full.includes("/application support/caches/") &&
+            /(-updater|\.update)$/i.test(ctx.base),
+        verdict: "safe",
+        reason: "Electron updater staging directory; regenerated transparently",
+    },
+    {
+        test: base(/^\.?thumbnails$/i),
+        verdict: "safe",
+        reason: "Thumbnail cache; regenerated transparently",
+    },
+    {
+        test: base(/^fontconfig$/i),
+        verdict: "safe",
+        reason: "Font cache; regenerated transparently",
+    },
+    {
+        test: base(/^mesa_shader_cache$/i),
+        verdict: "safe",
+        reason: "Shader cache; regenerated transparently",
+    },
+];
+/**
+ * Classify a discovered cache directory. First-match-wins over the ordered
+ * rule list; unmatched paths default to "probably-safe" because every
+ * discovery root is a platform cache/log location whose contents apps must
+ * tolerate losing (Apple's Caches API contract, XDG cache spec).
+ */
+function classifyCachePath(absolutePath) {
+    const normalized = absolutePath.replace(/\\/g, "/").toLowerCase();
+    const segments = normalized.split("/").filter(Boolean);
+    const ctx = {
+        full: normalized,
+        segments,
+        base: segments[segments.length - 1] ?? "",
+    };
+    for (const rule of RULES) {
+        const test = rule.test;
+        const matched = test instanceof RegExp
+            ? segments.some((segment) => test.test(segment))
+            : test(ctx);
+        if (matched) {
+            return { verdict: rule.verdict, reason: rule.reason };
+        }
+    }
+    if (ctx.full.includes("/library/logs/")) {
+        return {
+            verdict: "probably-safe",
+            reason: "Log directory; regenerable, apps recreate logs as needed",
+        };
+    }
+    return {
+        verdict: "probably-safe",
+        reason: "App cache; apps must tolerate cache deletion, next launch may rebuild",
+    };
+}
+/**
+ * Top-level discovery roots for the current platform. Computed at call time
+ * so os.homedir()/env mocks and changes are respected.
+ */
+function getDiscoveryRoots() {
+    const home = os.homedir();
+    let roots;
+    switch (os.platform()) {
+        case "darwin":
+            roots = [
+                path.join(home, "Library", "Caches"),
+                path.join(home, "Library", "Application Support", "Caches"),
+                path.join(home, "Library", "Application Support"),
+                path.join(home, "Library", "Logs"),
+                path.join(home, ".cache"),
+            ];
+            break;
+        case "win32": {
+            const local = process.env.LOCALAPPDATA || path.join(home, "AppData", "Local");
+            const roaming = process.env.APPDATA || path.join(home, "AppData", "Roaming");
+            roots = [local, roaming];
+            break;
+        }
+        default:
+            roots = [process.env.XDG_CACHE_HOME || path.join(home, ".cache")];
+    }
+    // Drop any relative root. An empty os.homedir() (stripped env in some CI or
+    // service accounts) would otherwise yield paths like "Library/Caches" that
+    // resolve against the current working directory.
+    return roots.filter((root) => path.isAbsolute(root));
+}
+//# sourceMappingURL=rules.js.map

package/dist/safety/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../../src/safety/rules.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsaA,8CA+BC;AAMD,8CA6BC;AAxeD,uCAAyB;AACzB,2CAA6B;AAqC7B,2CAA2C;AAC3C,MAAM,IAAI,GACR,CAAC,EAAU,EAAiB,EAAE,CAC9B,CAAC,GAAG,EAAE,EAAE,CACN,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAEtB,uDAAuD;AACvD,MAAM,IAAI,GACR,CAAC,EAAU,EAAiB,EAAE,CAC9B,CAAC,GAAG,EAAE,EAAE,CACN,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AAEtB;;;;GAIG;AACH,MAAM,KAAK,GAAyB;IAClC,yEAAyE;IACzE;QACE,IAAI,EAAE,qBAAqB;QAC3B,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,6DAA6D;KACtE;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,uDAAuD;KAChE;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,yDAAyD;KAClE;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,wDAAwD;KACjE;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,wDAAwD;KACjE;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,mCAAmC;KAC5C;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,iDAAiD;KAC1D;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,sCAAsC;KAC/C;IACD;QACE,IAAI,EAAE,IAAI,CAAC,wBAAwB,CAAC;QACpC,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,2CAA2C;KACpD;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,sCAAsC;KAC/C;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,sCAAsC;KAC/C;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,sCAAsC;KAC/C;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,iCAAiC;KAC1C;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,+CAA+C;KACxD;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,sCAAsC;KAC/C;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,wDAAwD;KACjE;IAED,yEAAyE;IACzE;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,6BAA6B;KACtC;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,6BAA6B;KACtC;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,6BAA6B;KACtC;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,4BAA4B;KACrC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,6BAA6B;KACtC;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,4BAA4B;KACrC;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,4BAA4B;KACrC;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,4BAA4B;KACrC;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,+BAA+B;KACxC;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,iCAAiC;KAC1C;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,iCAAiC;KAC1C;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,gCAAgC;KACzC;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,kCAAkC;KAC3C;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,8BAA8B;KACvC;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,mCAAmC;KAC5C;IACD;QACE,IAAI,EAAE,IAAI,CAAC,yBAAyB,CAAC;QACrC,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,+BAA+B;KACxC;IACD;QACE,IAAI,EAAE,IAAI,CAAC,2BAA2B,CAAC;QACvC,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,gCAAgC;KACzC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,gCAAgC;KACzC;IACD;QACE,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,+BAA+B;KACxC;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,+BAA+B;KACxC;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,+BAA+B;KACxC;IACD;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,iCAAiC;KAC1C;IACD;QACE,IAAI,EAAE,4BAA4B;QAClC,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,oCAAoC;KAC7C;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,4BAA4B;KACrC;IACD;QACE,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,kCAAkC;KAC3C;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,sCAAsC;KAC/C;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,8BAA8B;KACvC;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,+BAA+B;KACxC;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,iDAAiD;KAC1D;IAED,yEAAyE;IACzE;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,+DAA+D;KACxE;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,+DAA+D;KACxE;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,+DAA+D;KACxE;IACD;QACE,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,+DAA+D;KACxE;IACD;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,+DAA+D;KACxE;IACD;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,+DAA+D;KACxE;IACD;QACE,mEAAmE;QACnE,2CAA2C;QAC3C,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,oBAAoB,CAAC;YACvE,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,iBAAiB,CAAC;QACnD,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,0DAA0D;KACnE;IAED,yEAAyE;IACzE;QACE,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,+DAA+D;KACxE;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,mDAAmD;KAC5D;IACD;QACE,IAAI,EAAE,yBAAyB;QAC/B,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,mDAAmD;KAC5D;IACD;QACE,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,mDAAmD;KAC5D;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,wDAAwD;KACjE;IACD;QACE,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,wDAAwD;KACjE;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,wDAAwD;KACjE;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,wDAAwD;KACjE;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,wDAAwD;KACjE;IACD;QACE,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,SAAS;QAClB,MAAM,EAAE,wDAAwD;KACjE;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,SAAS;QAClB,MAAM,EACJ,oEAAoE;KACvE;IAED,yEAAyE;IACzE;QACE,IAAI,EAAE,IAAI,CACR,2FAA2F,CAC5F;QACD,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,kDAAkD;KAC3D;IACD;QACE,IAAI,EAAE,CAAC,GAAG,EAAE,EAAE,CACZ,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,8BAA8B,CAAC;YACjD,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QACxC,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,+DAA+D;KACxE;IACD;QACE,IAAI,EAAE,IAAI,CAAC,kBAAkB,CAAC;QAC9B,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,4CAA4C;KACrD;IACD;QACE,IAAI,EAAE,IAAI,CAAC,eAAe,CAAC;QAC3B,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,uCAAuC;KAChD;IACD;QACE,IAAI,EAAE,IAAI,CAAC,sBAAsB,CAAC;QAClC,OAAO,EAAE,MAAM;QACf,MAAM,EAAE,yCAAyC;KAClD;CACF,CAAC;AAEF;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,YAAoB;IACpD,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAClE,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvD,MAAM,GAAG,GAAgB;QACvB,IAAI,EAAE,UAAU;QAChB,QAAQ;QACR,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE;KAC1C,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;QACvB,MAAM,OAAO,GACX,IAAI,YAAY,MAAM;YACpB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAChD,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IAED,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACxC,OAAO;YACL,OAAO,EAAE,eAAe;YACxB,MAAM,EAAE,0DAA0D;SACnE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,OAAO,EAAE,eAAe;QACxB,MAAM,EACJ,uEAAuE;KAC1E,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,iBAAiB;IAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,IAAI,KAAe,CAAC;IACpB,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;QACtB,KAAK,QAAQ;YACX,KAAK,GAAG;gBACN,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC;gBACpC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,EAAE,QAAQ,CAAC;gBAC3D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,qBAAqB,CAAC;gBACjD,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC;gBAClC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;aAC1B,CAAC;YACF,MAAM;QACR,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,KAAK,GACT,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;YAClE,MAAM,OAAO,GACX,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YAC/D,KAAK,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACzB,MAAM;QACR,CAAC;QACD;YACE,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,4EAA4E;IAC5E,2EAA2E;IAC3E,iDAAiD;IACjD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC"}