windowsweep 1.0.0 → 1.0.1

package/CHANGELOG.md

@@ -7,6 +7,35 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ---
 
+## [1.0.1] - 2026-09-03
+
+### Fixed
+
+- **Sections 17, 18 and 19 no longer pre-select every item under `--yes`.** In the walkthrough and the menu
+  with auto-yes on, section 17 could remove every listed build artefact without a person choosing one, and
+  18/19 pre-selected everything before their final question. The selection prompt now appears even with
+  `--yes`, defaults to none, and section 17's final confirmation is never auto-answered. Batch mode already
+  refused these sections and is unchanged. (RW-002)
+- Section 19's title no longer names Desktop; only Downloads is scanned. (RW-003)
+- Sections 18 and 19 report the tier `recycle` instead of `permanent` in `--list`. (RW-004)
+- `--purge-all` from a console asks you to type `purge` once per run, as documented; `--yes` remains the
+  confirmation in batch runs. (RW-005)
+- A running editor's VSIX download cache is cleared as documented: it is its own target without the
+  running-editor guard. (RW-006)
+- `--install-task` and `--install-alias` refuse to run under `npx` (exit 3) and print the global-install
+  steps; the npx cache is evicted and the task or alias would break later. (RW-007)
+- The engine exits 130 when a run is interrupted before it finished; previously only the Node launcher
+  did. (RW-008)
+- `--uninstall-data` always asks; `--yes` no longer removes your history unattended. (RW-010)
+
+### Changed
+
+- Internal rename `Write-Log` -> `Write-LogLine` (18 call sites) so PSScriptAnalyzer's
+  `PSAvoidOverwritingBuiltInCmdlets` passes under PowerShell 7 in CI. No behaviour change.
+- Self-test: four new checks prove the `--yes` asymmetry at the helper and at the section 17/18/19 call sites,
+  and that every picker call in `modules/` carries `-NoAutoYes` (114 checks).
+- Keywords trimmed to twelve (`temp-files` dropped). (RW-011)
+
 ## [1.0.0] - 2026-09-03
 
 First release. The Windows member of the cleanup family beside

package/README.md

@@ -34,12 +34,12 @@ It is the Windows member of a family with [linux-cleanup](https://github.com/aon
 
 | | |
 |---|---|
-| **Version** | `1.0.0` |
+| **Version** | `1.0.1` |
 | **License** | MIT |
 | **Node** | `>=14` (launcher only) |
 | **Runtime** | Windows PowerShell 5.1 (built in) or PowerShell 7 |
 | **Platforms** | Windows 10 (1809+) and Windows 11 |
-| **Install size** | ~78 kB packed · ~263 kB unpacked · 37 files · no dependencies |
+| **Install size** | ~81 kB packed · ~273 kB unpacked · 38 files · no dependencies |
 | **Undo** | Recycle Bin for personal files; none for caches (they regenerate) |
 | **Status** | Stable · actively maintained |
 
@@ -119,8 +119,8 @@ security scanner or a registry cleaner. It reclaims disk space, nothing else.
 - **Running-app guard** - an open browser, editor or app keeps its caches; the tool tells you which to close.
 - **Session reports** - schema-versioned JSON, exportable to Markdown or a self-contained HTML page, plus
   `--json` for scripts.
-- **Self-test** - proves the guards on your machine with a real junction, a 400-character path and a dry-run
-  fixture before you trust it.
+- **Self-test** - 114 checks prove the guards on your machine with a real junction, a 400-character path and
+  a dry-run fixture before you trust it.
 - **Offline by design** - zero network calls, no telemetry, no update check. Crash bundles stay on disk.
 
 <a id="platform-support"></a>
@@ -128,9 +128,9 @@ security scanner or a registry cleaner. It reclaims disk space, nothing else.
 
 | Platform | Supported | Notes |
 |---|---|---|
-| Windows 11 | ✅ | Windows PowerShell 5.1 or PowerShell 7 |
-| Windows 10 (1809 and later) | ✅ | The primary development target |
-| Windows Server 2019+ | ⚠️ | Uses nothing newer than 1809, but Server is not in the test matrix |
+| Windows 11 | ✅ | Same engine and PowerShell hosts; a real run on Windows 11 is on the verification list ([roadmap](https://github.com/aoneahsan/windowsweep/blob/main/remaining-work-summary.md)) |
+| Windows 10 (1809 and later) | ✅ | The primary development target; every real run so far |
+| Windows Server 2019+ | ⚠️ | Uses nothing newer than 1809; CI runs the self-test and a dry-run on Windows Server (`windows-latest`) on every push, but no real cleanup has been run on Server |
 | Linux | ❌ | `os: ["win32"]` makes npm refuse to install; use [linux-cleanup](https://github.com/aoneahsan/linux-cleanup) |
 | macOS | ❌ | Use [macleanup](https://github.com/aoneahsan/macleanup) |
 
@@ -195,8 +195,8 @@ section with `a` run / `s` skip / `q` quit and a running total.
 ### The sections
 
 **Tier** says what happens to the data: *report* deletes nothing, *rebuilds* comes back on its own, *slow*
-comes back but costs minutes, *Recycle Bin* is recoverable until you empty it, *permanent* is not, *config*
-changes a setting.
+comes back but costs minutes, *Recycle Bin* is recoverable until you empty it (`--list` shows this tier as
+`recycle`), *permanent* is not, *config* changes a setting.
 
 | # | Section | Tier | Admin | Batch |
 |---|---|---|:-:|---|
@@ -408,11 +408,13 @@ More: [FAQ](https://github.com/aoneahsan/windowsweep/blob/main/docs/faq.md).
 | [Admin sections and elevation](https://github.com/aoneahsan/windowsweep/blob/main/docs/admin-and-elevation.md) | before running the system profile or touching the hibernation file |
 | [Reports and logs](https://github.com/aoneahsan/windowsweep/blob/main/docs/reports-and-logs.md) | parsing the JSON or finding a log |
 | [Troubleshooting](https://github.com/aoneahsan/windowsweep/blob/main/docs/troubleshooting.md) | something failed |
+| [Roadmap and remaining work](https://github.com/aoneahsan/windowsweep/blob/main/remaining-work-summary.md) | you want to know what is verified, what is planned (1.1, the docs site) and what is still open |
 
 <a id="changelog"></a>
 ## 🔄 Changelog&nbsp;[#](#changelog)
 
-Latest release: **`1.0.0`** - first release: 22 sections, developer mode, the deletion chokepoint, dry-run, reports.
+Latest release: **`1.0.1`** - `--yes` never selects personal or project items; installers refuse under npx;
+exit 130 from the engine; documentation fixes.
 Full history: [CHANGELOG.md](https://github.com/aoneahsan/windowsweep/blob/main/CHANGELOG.md).
 
 <a id="contributing"></a>
@@ -478,5 +480,5 @@ this tool deletes files, so review what it proposes before confirming.
 <a id="keywords"></a>
 ## 🏷️ Keywords&nbsp;[#](#keywords)
 
-*windows · cleanup · disk-cleanup · cache-cleanup · disk-space · temp-files · node-modules · npm-cache ·
+*windows · cleanup · disk-cleanup · cache-cleanup · disk-space · node-modules · npm-cache ·
 yarn-cache · developer-tools · powershell · cli · dry-run*

package/VERSION

@@ -1 +1 @@
-1.0.0
+1.0.1

package/lib/actions.ps1

@@ -4,7 +4,7 @@
 $Script:WS_CHROMIUM_PROFILE_CACHES = @('Cache', 'Code Cache', 'GPUCache', 'DawnCache', 'DawnGraphiteCache', 'DawnWebGPUCache', 'GrShaderCache', 'ShaderCache', 'Service Worker\ScriptCache')
 $Script:WS_CHROMIUM_ROOT_CACHES = @('ShaderCache', 'GrShaderCache', 'GraphiteDawnCache', 'Crashpad\completed', 'Crashpad\reports', 'SwReporter')
 $Script:WS_ELECTRON_CACHES = @('Cache', 'Code Cache', 'GPUCache', 'DawnCache', 'DawnGraphiteCache', 'DawnWebGPUCache', 'GrShaderCache', 'ShaderCache', 'Service Worker\CacheStorage', 'Service Worker\ScriptCache', 'Crashpad\completed', 'Crashpad\reports')
-$Script:WS_EDITOR_CACHES = @('Cache', 'CachedData', 'CachedProfilesData', 'CachedExtensionVSIXs', 'Code Cache', 'GPUCache', 'DawnCache', 'DawnGraphiteCache', 'DawnWebGPUCache', 'Service Worker\CacheStorage', 'Service Worker\ScriptCache', 'Crashpad\completed', 'Crashpad\reports')
+$Script:WS_EDITOR_CACHES = @('Cache', 'CachedData', 'CachedProfilesData', 'Code Cache', 'GPUCache', 'DawnCache', 'DawnGraphiteCache', 'DawnWebGPUCache', 'Service Worker\CacheStorage', 'Service Worker\ScriptCache', 'Crashpad\completed', 'Crashpad\reports')
 $Script:WS_FIREFOX_CACHES = @('cache2', 'startupCache', 'thumbnails', 'jumpListCache', 'OfflineCache', 'shader-cache')
 
 function Get-ChromiumProfileDirs {

package/lib/config.ps1

@@ -88,3 +88,12 @@ function Resolve-DeveloperMode {
   $ws.DeveloperSource = 'default'
   Write-Note 'developer question not asked (non-interactive run) - defaulting to developer mode ON, the conservative choice; pass --not-developer to override'
 }
+
+function Confirm-PurgeAllOnce {
+  <# .SYNOPSIS --purge-all from a console asks for a typed word once per run; --yes is the confirmation in batch runs. #>
+  $ws = $Script:WS
+  if (-not $ws.PurgeAll -or $ws.DryRun -or $ws.Yes) { return }
+  if (Confirm-Typed -Prompt 'FULL PURGE: --purge-all empties every cache target completely, including files you used yesterday.' -Word 'purge') { Write-Ok 'purge-all confirmed for this run'; return }
+  $ws.PurgeAll = $false
+  Write-Info 'purge-all declined - this run prunes by the idle window instead'
+}

package/lib/constants.ps1

@@ -4,7 +4,7 @@
 # Single source of truth for the version is package.json: the Node launcher exports it as
 # WINDOWSWEEP_VERSION. A direct checkout falls back to this literal; the version:check script
 # asserts the two never drift.
-$Script:WS_VERSION_FALLBACK = '1.0.0'
+$Script:WS_VERSION_FALLBACK = '1.0.1'
 
 $Script:WS_NAME = 'windowsweep'
 $Script:WS_TAGLINE = 'Safe-by-default Windows cleanup CLI - developer-aware, dry-run first, zero install via npx.'
@@ -29,7 +29,7 @@ $Script:WS_EXIT_INTERRUPT = 130
 
 # Section catalogue. Numbering is a public contract frozen at 1.0.0: a section may be retired
 # (kept as a no-op that says so) but a number is never reused for something else.
-#   Tier:  report | rebuilds | slow | permanent | config
+#   Tier:  report | rebuilds | slow | recycle | permanent | config
 #   Batch: safe (in --all) | optin (--only/--profile with --yes) | deep (needs --i-understand-deep)
 #          | interactive (never batch; dry-run/report allowed)
 $Script:WS_SECTIONS = @(
@@ -51,8 +51,8 @@ $Script:WS_SECTIONS = @(
   @{ Id = 15; Key = 'hiberfil';   Title = 'Hibernation file (off / reduced)';                         Tier = 'config';    Admin = $true;  Batch = 'deep';        Dev = $false; Fn = 'Invoke-Section15' }
   @{ Id = 16; Key = 'eventlogs';  Title = 'Clear Windows Event Logs - PERMANENT';                     Tier = 'permanent'; Admin = $true;  Batch = 'deep';        Dev = $false; Fn = 'Invoke-Section16' }
   @{ Id = 17; Key = 'projects';   Title = 'Stale project build artefacts (node_modules, dist, .next, target, ...)'; Tier = 'rebuilds'; Admin = $false; Batch = 'interactive'; Dev = $true; Fn = 'Invoke-Section17' }
-  @{ Id = 18; Key = 'partials';   Title = 'Partial / orphan downloads -> Recycle Bin';                Tier = 'permanent'; Admin = $false; Batch = 'interactive'; Dev = $false; Fn = 'Invoke-Section18' }
-  @{ Id = 19; Key = 'large';      Title = 'Large stale personal files (Downloads, Desktop) -> Recycle Bin'; Tier = 'permanent'; Admin = $false; Batch = 'interactive'; Dev = $false; Fn = 'Invoke-Section19' }
+  @{ Id = 18; Key = 'partials';   Title = 'Partial / orphan downloads -> Recycle Bin';                Tier = 'recycle';   Admin = $false; Batch = 'interactive'; Dev = $false; Fn = 'Invoke-Section18' }
+  @{ Id = 19; Key = 'large';      Title = 'Large stale personal files (Downloads) -> Recycle Bin';    Tier = 'recycle';   Admin = $false; Batch = 'interactive'; Dev = $false; Fn = 'Invoke-Section19' }
   @{ Id = 20; Key = 'vhdx';       Title = 'Docker Desktop / WSL disk image compaction (stops Docker + WSL)'; Tier = 'config'; Admin = $true; Batch = 'deep';    Dev = $true;  Fn = 'Invoke-Section20' }
   @{ Id = 21; Key = 'diskusage';  Title = 'Disk usage report (largest entries, drives, disk images)'; Tier = 'report';    Admin = $false; Batch = 'safe';        Dev = $false; Fn = 'Invoke-Section21' }
 )

package/lib/log.ps1

@@ -29,7 +29,7 @@ function Initialize-Log {
   try { [IO.File]::WriteAllLines($ws.LogFile, $header) } catch { $ws.LogFile = $null }
 }
 
-function Write-Log {
+function Write-LogLine {
   <# .SYNOPSIS Append one timestamped line to the run log; never throws. #>
   param([string] $Text)
   $f = $Script:WS.LogFile

package/lib/safety.ps1

@@ -155,7 +155,7 @@ function Remove-TreeInternal {
     try {
       if ($isLink) {
         if ($isDir) { [IO.Directory]::Delete($e.FullName, $false) } else { [IO.File]::Delete($e.FullName) }
-        Write-Log ("removed link (not followed): " + (Remove-LongPrefix $e.FullName))
+        Write-LogLine ("removed link (not followed): " + (Remove-LongPrefix $e.FullName))
       } elseif ($isDir) {
         if (-not (Remove-TreeInternal -Path $e.FullName -Result $Result)) { $allClear = $false }
       } else {
@@ -206,24 +206,24 @@ function Remove-PathSafe {
     if ($isLink) {
       if ($isDir) { [IO.Directory]::Delete($lp, $false) } else { [IO.File]::Delete($lp) }
       $r.Removed = $true
-      Write-Log "removed link (not followed): $p$tag"
+      Write-LogLine "removed link (not followed): $p$tag"
     } elseif ($isDir) {
       $r.Removed = Remove-TreeInternal -Path $p -Result $r
       $r.Bytes = [math]::Max([long]0, $bytes - $r.SkippedBytes)
       if ($r.Skipped -gt 0) { Write-Note "$($r.Skipped) item(s) in use or inaccessible, left in place under $p" }
-      Write-Log ("removed dir: $p ($($r.Bytes) bytes, skipped $($r.Skipped))$tag")
+      Write-LogLine ("removed dir: $p ($($r.Bytes) bytes, skipped $($r.Skipped))$tag")
     } else {
       Remove-ReadOnlyAttribute $lp
       [IO.File]::Delete($lp)
       $r.Removed = $true; $r.Bytes = $bytes; $r.Files = 1
-      Write-Log "removed file: $p ($bytes bytes)$tag"
+      Write-LogLine "removed file: $p ($bytes bytes)$tag"
     }
     Add-Freed $r.Bytes
   } catch {
     $r.Skipped++
     $r.Reason = 'in use or access denied'
     Write-Note "in use or inaccessible, skipped: $p"
-    Write-Log "skip (locked): $p - $($_.Exception.Message)"
+    Write-LogLine "skip (locked): $p - $($_.Exception.Message)"
   }
   return $r
 }
@@ -272,7 +272,7 @@ function Remove-StaleFiles {
     } catch { $null = $_ }
   }
   Add-Freed $out.Freed
-  Write-Log ("pruned $($out.Files) files ($($out.Freed) bytes) idle $Days+ days from $root; skipped $($out.Skipped)")
+  Write-LogLine ("pruned $($out.Files) files ($($out.Freed) bytes) idle $Days+ days from $root; skipped $($out.Skipped)")
   Write-Ok ("$Label - pruned {0} in {1} files idle {2}+ days ({3} skipped in use)" -f (Format-Bytes $out.Freed), $out.Files, $Days, $out.Skipped)
   return $out
 }
@@ -405,7 +405,7 @@ function Send-ToRecycleBin {
     }
     $r.Removed = $true; $r.Bytes = $bytes
     Add-Freed $bytes
-    Write-Log "recycled: $p ($bytes bytes)"
+    Write-LogLine "recycled: $p ($bytes bytes)"
     Write-Ok ("moved to Recycle Bin: {0} ({1})" -f $p, (Format-Bytes $bytes))
   } catch {
     $r.Skipped++; $r.Reason = $_.Exception.Message
@@ -424,14 +424,14 @@ function Invoke-External {
     Write-DryRun "would run: $display"
     return [pscustomobject]@{ Ran = $false; ExitCode = 0; Output = @() }
   }
-  Write-Log "run${tag}: $display"
+  Write-LogLine "run${tag}: $display"
   $lines = @()
   try {
     $raw = & $FilePath @ArgumentList 2>&1
     foreach ($l in $raw) {
       $s = [string]$l
       $lines += $s
-      if (-not $Quiet) { Write-Note $s } else { Write-Log $s }
+      if (-not $Quiet) { Write-Note $s } else { Write-LogLine $s }
     }
     $code = $LASTEXITCODE
     if ($null -eq $code) { $code = 0 }
@@ -439,7 +439,7 @@ function Invoke-External {
     $lines += $_.Exception.Message
     $code = 1
   }
-  Write-Log "exit $code$tag : $display"
+  Write-LogLine "exit $code$tag : $display"
   return [pscustomobject]@{ Ran = $true; ExitCode = $code; Output = $lines }
 }
 

package/lib/ui.ps1

@@ -37,7 +37,7 @@ function Write-UiLine {
   <# .SYNOPSIS Print one line (coloured when allowed) and append it to the log. #>
   param([string] $Text = '', [string] $Color = 'Gray', [switch] $NoLog, [switch] $NoNewline)
   $ws = $Script:WS
-  if (-not $NoLog) { Write-Log $Text }
+  if (-not $NoLog) { Write-LogLine $Text }
   if ($ws.Mute) { return }
   if ($ws.JsonMode) { [Console]::Error.WriteLine($Text); return }
   if ($ws.Color) {
@@ -49,7 +49,7 @@ function Write-UiLine {
 
 function Write-Info {
   param([string] $Text)
-  if ($Script:WS.Quiet) { Write-Log "INFO $Text"; return }
+  if ($Script:WS.Quiet) { Write-LogLine "INFO $Text"; return }
   Write-UiLine ("$($Script:WS.Glyph.info) $Text") 'Cyan'
 }
 
@@ -70,7 +70,7 @@ function Write-Err {
 
 function Write-Note {
   param([string] $Text)
-  if ($Script:WS.Quiet) { Write-Log "NOTE $Text"; return }
+  if ($Script:WS.Quiet) { Write-LogLine "NOTE $Text"; return }
   Write-UiLine ("    $Text") 'DarkGray'
 }
 
@@ -154,7 +154,7 @@ function Read-Line {
   if ($Prompt) { Write-UiLine $Prompt 'White' -NoNewline -NoLog }
   try { $line = [Console]::In.ReadLine() } catch { return $null }
   if ($null -eq $line) { return $null }
-  Write-Log ("> $line")
+  Write-LogLine ("> $line")
   return $line
 }
 
@@ -187,10 +187,13 @@ function Confirm-Typed {
 }
 
 function Read-MultiSelect {
-  <# .SYNOPSIS Parse "1,3,5-7" / all / none into a sorted unique list of 1-based indexes. #>
-  param([int] $Total)
+  <# .SYNOPSIS Parse "1,3,5-7" / all / none into a sorted unique list of 1-based indexes.
+     --yes answers "all" only for callers that do not pass -NoAutoYes. The personal and project pickers pass
+     it, so under --yes they still ask when a console is present and select nothing when it is not. #>
+  param([int] $Total, [switch] $NoAutoYes)
   if ($Total -le 0) { return @() }
-  if ($Script:WS.Yes) { return @(1..$Total) }
+  if ($Script:WS.Yes -and -not $NoAutoYes) { return @(1..$Total) }
+  if (-not $Script:WS.Interactive) { Write-Note 'non-interactive session: nothing selected (a person has to pick these)'; return @() }
   Write-UiLine "  Selection: 1,3,5-10 | all | none (Enter = none)" 'DarkGray' -NoLog
   $reply = Read-Line ("  Select items (1..$Total): ")
   return (ConvertTo-IndexList -Text $reply -Total $Total)

package/modules/crash_trap.ps1

@@ -73,8 +73,8 @@ function Invoke-CrashBundle {
   $ws = $Script:WS
   $msg = $ErrorRecord.Exception.Message
   $where = $ErrorRecord.InvocationInfo.PositionMessage
-  Write-Log "CRASH: $msg"
-  Write-Log $ErrorRecord.ScriptStackTrace
+  Write-LogLine "CRASH: $msg"
+  Write-LogLine $ErrorRecord.ScriptStackTrace
   $extra = @("=== Error ===", $msg, $where, '', '=== Stack ===', $ErrorRecord.ScriptStackTrace) -join "`r`n"
   $zip = New-BundleZip -Prefix 'crash' -Manifest (New-SystemManifest -Kind 'CRASH REPORT' -Extra $extra)
   Write-UiLine '' 'Gray'

package/modules/docker.ps1

@@ -69,7 +69,7 @@ function Invoke-Section20 {
   foreach ($img in $images) { Write-UiLine ("  {0,3}  {1,10}  {2}" -f $i, (Format-Bytes $img.Length), $img.FullName) 'Gray'; $i++ }
   if (-not (Test-CommandPresent 'diskpart.exe')) { Write-Warn 'diskpart.exe not found - skipped'; return }
   $picks = @()
-  if ($ws.Yes) { $picks = @(1..$images.Count) } else { $picks = Read-MultiSelect -Total $images.Count }
+  if ($ws.Yes) { $picks = @(1..$images.Count) } else { $picks = @(Read-MultiSelect -Total $images.Count -NoAutoYes) }
   if ($picks.Count -eq 0) { Write-Info 'nothing selected'; return }
   if (-not (Confirm-Section 'Stop Docker Desktop and WSL now and compact the selected disks?' 'n')) { Write-Info 'skipped'; return }
   if ($ws.DryRun) { foreach ($k in $picks) { Write-DryRun "would compact $($images[$k - 1].FullName)" }; return }

package/modules/editors.ps1

@@ -13,7 +13,8 @@ function Get-Targets06 {
   $t = @()
   foreach ($e in $Script:WS_EDITORS) {
     $root = Join-Path $P.A $e.Root
-    $t += (New-Target 6 "$($e.Name) caches" $root -Kind editor -Guard $e.Proc -Note 'Cache, CachedData, Code Cache, GPUCache, VSIX cache, crash reports')
+    $t += (New-Target 6 "$($e.Name) caches" $root -Kind editor -Guard $e.Proc -Note 'Cache, CachedData, Code Cache, GPUCache, crash reports; skipped while the editor runs')
+    $t += (New-Target 6 "$($e.Name) VSIX download cache" (Join-Path $root 'CachedExtensionVSIXs') -Mode clear -Note 'extension installers already unpacked; safe while the editor runs')
     $t += (New-Target 6 "$($e.Name) logs" (Join-Path $root 'logs') -Mode clear-old -Days 7)
     $t += (New-Target 6 "$($e.Name) stale workspace storage" (Join-Path $root 'User\workspaceStorage') -Kind cmd -Guard $e.Proc -Note 'entries whose folder no longer exists')
     $t += (New-Target 6 "$($e.Name) superseded extension versions" (Join-Path $P.U "$($e.Ext)\extensions") -Kind cmd -Guard $e.Proc -Note 'older versions and .obsolete entries; newest kept')

package/modules/personal.ps1

@@ -84,7 +84,7 @@ function Invoke-PersonalPicker {
   $dest = 'the Recycle Bin'
   if ($ws.Permanent) { $dest = 'PERMANENT deletion (--permanent)' }
   Write-Note "selected files go to $dest"
-  $picks = Read-MultiSelect -Total $Rows.Count
+  $picks = @(Read-MultiSelect -Total $Rows.Count -NoAutoYes)
   if ($picks.Count -eq 0) { Write-Info 'nothing selected'; return }
   if (-not $ws.DryRun) {
     # Personal files never auto-confirm: --yes does not apply here.

package/modules/projects.ps1

@@ -129,9 +129,12 @@ function Invoke-Section17 {
     $out = Join-Path $ws.ReportsDir ('stale-builds-' + $ws.Stamp + '.txt')
     try { [IO.File]::WriteAllLines($out, $reportLines); Write-Note "list saved: $out" } catch { $null = $_ }
   }
-  $picks = Read-MultiSelect -Total ([math]::Min($found.Count, 200))
+  $picks = @(Read-MultiSelect -Total ([math]::Min($found.Count, 200)) -NoAutoYes)
   if ($picks.Count -eq 0) { Write-Info 'nothing selected'; return }
-  if (-not (Confirm-Section "Remove $($picks.Count) artefact folder(s)? (rebuild with the project's install/build command)" 'n')) { Write-Info 'skipped'; return }
+  if (-not $ws.DryRun) {
+    # Project artefacts never auto-confirm: --yes does not apply, and the walkthrough's step answer is not a selection.
+    if (-not (Confirm-Ui -Prompt "Remove $($picks.Count) artefact folder(s)? (rebuild with the project's install/build command)" -Default 'n' -NoAutoYes)) { Write-Info 'skipped'; return }
+  }
   foreach ($k in $picks) {
     $f = $found[$k - 1]
     $r = Remove-PathSafe -Path $f.Path -Within $f.Root -Label (Split-Path -Leaf $f.Path)

package/modules/release_helpers.ps1

@@ -241,6 +241,12 @@ function Invoke-SelfTest {
     try { $probe = Join-Path $d ('.write-test-' + [guid]::NewGuid().ToString('N')); Set-Content -LiteralPath $probe -Value 'x'; Remove-Item -LiteralPath $probe -Force; Write-Ok "$d writable" } catch { Write-Err "$d not writable"; $fails++ }
   }
 
+  if (Get-Command Invoke-SelfTestExtra -ErrorAction SilentlyContinue) {
+    $extra = Invoke-SelfTestExtra
+    $checks += [int]$extra.Checks
+    $fails += [int]$extra.Fails
+  }
+
   Write-Separator
   if ($fails -eq 0) { Write-Ok "all $checks checks passed - $Script:WS_NAME is ready"; return $Script:WS_EXIT_OK }
   Write-Err "$fails of $checks checks FAILED"
@@ -317,8 +323,21 @@ function Get-LaunchCommand {
   return [pscustomobject]@{ Exe = "$env:SystemRoot\System32\WindowsPowerShell\v1.0\powershell.exe"; Args = @('-NoProfile', '-NoLogo', '-ExecutionPolicy', 'Bypass', '-File', "`"$($ws.ScriptPath)`"") }
 }
 
+function Test-NpxInstallerRefusal {
+  <# .SYNOPSIS Under npx the package lives in a cache npm evicts; a task or alias pointing there would break later. #>
+  param([string] $Flag)
+  if (-not $Script:WS.Npx) { return $false }
+  Write-Err "$Flag is refused under npx: it would point at the npx cache, which npm evicts."
+  Write-Plain '  Install once, then register from the global command:'
+  Write-Plain '    npm install -g windowsweep'
+  Write-Plain "    windowsweep $Flag"
+  $Script:WS.ExitCode = $Script:WS_EXIT_REFUSED
+  return $true
+}
+
 function Install-WeeklyTask {
   Write-Box 'Install weekly Scheduled Task' "$Script:WS_TASK_NAME - Sundays 03:00, safe batch, no prompts"
+  if (Test-NpxInstallerRefusal '--install-task') { return }
   if (Get-ScheduledTask -TaskName $Script:WS_TASK_NAME -ErrorAction SilentlyContinue) { Write-Info 'task already exists'; return }
   $lc = Get-LaunchCommand
   $argLine = (@($lc.Args) + @('--all', '--yes', '--quiet', '--no-color')) -join ' '
@@ -347,6 +366,7 @@ $Script:WS_ALIAS_MARK = '# windowsweep alias'
 
 function Install-ProfileAlias {
   Write-Box 'Install profile alias' "Adds a 'cleanup' function to your PowerShell profile"
+  if (Test-NpxInstallerRefusal '--install-alias') { return }
   $profilePath = $PROFILE.CurrentUserAllHosts
   $lc = Get-LaunchCommand
   $line = "function cleanup { & `"$($lc.Exe)`" $($lc.Args -join ' ') @args }"
@@ -388,7 +408,7 @@ function Remove-ToolData {
   $bytes = Get-DirectoryBytes $ws.Home
   Write-Info ("$($ws.Home) holds " + (Format-Bytes $bytes) + ' of logs, reports, bundles and config')
   if ($ws.DryRun) { Write-DryRun "would remove $($ws.Home)"; return }
-  if (-not (Confirm-Ui -Prompt 'Delete it all (logs, reports, your developer answer)?' -Default 'n')) { Write-Info 'skipped'; return }
+  if (-not (Confirm-Ui -Prompt 'Delete it all (logs, reports, your developer answer)?' -Default 'n' -NoAutoYes)) { Write-Info 'skipped'; return }
   $ws.LogFile = $null
   try { [IO.Directory]::Delete((Get-LongPath $ws.Home), $true); Write-Ok 'removed' } catch { Write-Err "could not remove: $($_.Exception.Message)" }
 }

package/modules/runner.ps1

@@ -86,7 +86,7 @@ function Invoke-SectionById {
   } catch {
     $status = 'failed'
     Write-Err "section $Id failed: $($_.Exception.Message)"
-    Write-Log ("section $Id error: " + $_.ScriptStackTrace)
+    Write-LogLine ("section $Id error: " + $_.ScriptStackTrace)
     $ws.ExitCode = $Script:WS_EXIT_FAIL
   }
   $after = Get-SystemDriveFree

package/modules/self_test_extra.ps1

@@ -0,0 +1,86 @@
+# self_test_extra.ps1 - extra self-test groups: the --yes asymmetry and its call sites (RW-002), pure helpers
+# and fixtures for logic that is invisible when wrong (RW-030). Called by Invoke-SelfTest; verdict lines only.
+
+function Invoke-SelfTestExtra {
+  <# .SYNOPSIS Run groups [12]-[14]. Returns an object with Checks and Fails counts. #>
+  $ws = $Script:WS
+  $checks = 0; $fails = 0
+  $saved = @{ DryRun = $ws.DryRun; Yes = $ws.Yes; Interactive = $ws.Interactive; Quiet = $ws.Quiet; NoReport = $ws.NoReport
+    ScanRoots = $ws.ScanRoots; AllowOwnData = $ws.AllowOwnData; Mute = $ws.Mute; Days = $ws.Days }
+  $fx = Join-Path $ws.Home ('selftest-extra-' + [guid]::NewGuid().ToString('N'))
+  $mute = { $Script:WS.Mute = $true }
+  $unmute = { $Script:WS.Mute = $false }
+  $ancient = (Get-Date).AddDays(-400)
+  try {
+    New-Item -ItemType Directory -Force -Path $fx | Out-Null
+    $ws.AllowOwnData = $true
+    $ws.NoReport = $true
+    $ws.DryRun = $false
+    $ws.Days = 100
+
+    Write-Section '[12] Prompts: --yes never selects personal or project items'
+    # 12a - the helper asymmetry
+    $checks++
+    $ws.Yes = $true; $ws.Interactive = $false
+    & $mute
+    $none = @(Read-MultiSelect -Total 5 -NoAutoYes)
+    $all = @(Read-MultiSelect -Total 5)
+    & $unmute
+    if ($none.Count -eq 0 -and ($all -join ',') -eq '1,2,3,4,5') { Write-Ok 'Read-MultiSelect: -NoAutoYes selects nothing under --yes; without it every index' } else { Write-Err "Read-MultiSelect asymmetry broken: none=[$($none -join ',')] all=[$($all -join ',')]"; $fails++ }
+    # 12b - section 17 call site (a fixture project with an artefact idle 400 days)
+    $checks++
+    $proj = Join-Path $fx 'proj17\app'
+    New-Item -ItemType Directory -Force -Path (Join-Path $proj 'node_modules') | Out-Null
+    Set-Content -LiteralPath (Join-Path $proj 'package.json') -Value '{"name":"fixture"}'
+    Set-Content -LiteralPath (Join-Path $proj 'node_modules\x.txt') -Value 'x'
+    foreach ($ts in 'LastWriteTime', 'LastAccessTime', 'CreationTime') { Set-ItemProperty -LiteralPath (Join-Path $proj 'package.json') -Name $ts -Value $ancient }
+    $ws.ScanRoots = @((Join-Path $fx 'proj17'))
+    & $mute
+    # The fixture must be a real candidate, or the removal check below proves nothing.
+    $listed = @(Find-StaleArtefacts -Roots $ws.ScanRoots -Days 100)
+    Invoke-Section17
+    & $unmute
+    if ($listed.Count -eq 1 -and (Test-Path -LiteralPath (Join-Path $proj 'node_modules\x.txt'))) {
+      Write-Ok 'section 17 under --yes with no console lists the artefact and removes nothing'
+    } elseif ($listed.Count -ne 1) {
+      Write-Err "section 17 fixture not detected as a candidate ($($listed.Count) listed) - the check cannot prove anything"; $fails++
+    } else {
+      Write-Err 'DANGEROUS: section 17 removed an artefact under --yes with no selection'; $fails++
+    }
+    # 12c - personal picker call site (sections 18/19)
+    $checks++
+    $pfile = Join-Path $fx 'personal\old.iso'
+    New-Item -ItemType Directory -Force -Path (Split-Path -Parent $pfile) | Out-Null
+    Set-Content -LiteralPath $pfile -Value 'x'
+    $row = [pscustomobject]@{ Path = $pfile; Bytes = [long]1; Idle = 400; Root = (Split-Path -Parent $pfile) }
+    & $mute
+    Invoke-PersonalPicker -Rows @($row) -Prompt 'fixture'
+    & $unmute
+    if (Test-Path -LiteralPath $pfile) { Write-Ok 'sections 18/19 under --yes with no console recycle nothing' } else { Write-Err 'DANGEROUS: the personal picker removed a file under --yes with no selection'; $fails++ }
+    # 12d - every Read-MultiSelect call in modules/ carries -NoAutoYes (AST, not text)
+    $checks++
+    $offenders = @()
+    foreach ($f in (Get-ChildItem -LiteralPath (Join-Path $Script:WS_ROOT 'modules') -Filter '*.ps1' -File)) {
+      if ($f.Name -like 'self_test_extra*') { continue }
+      $tokens = $null; $errors = $null
+      $ast = [System.Management.Automation.Language.Parser]::ParseFile($f.FullName, [ref]$tokens, [ref]$errors)
+      $calls = $ast.FindAll({ param($n) ($n -is [System.Management.Automation.Language.CommandAst]) -and ($n.GetCommandName() -eq 'Read-MultiSelect') }, $true)
+      foreach ($c in $calls) {
+        $has = $false
+        foreach ($el in $c.CommandElements) { if (($el -is [System.Management.Automation.Language.CommandParameterAst]) -and ($el.ParameterName -eq 'NoAutoYes')) { $has = $true } }
+        if (-not $has) { $offenders += "$($f.Name):$($c.Extent.StartLineNumber)" }
+      }
+    }
+    if ($offenders.Count -eq 0) { Write-Ok 'every Read-MultiSelect call in modules/ carries -NoAutoYes' } else { Write-Err "Read-MultiSelect without -NoAutoYes: $($offenders -join ', ')"; $fails++ }
+    $ws.Yes = $saved.Yes; $ws.Interactive = $saved.Interactive; $ws.ScanRoots = $saved.ScanRoots
+
+  } catch {
+    & $unmute
+    Write-Err "extra self-test crashed: $($_.Exception.Message)"; $fails++
+  } finally {
+    & $unmute
+    foreach ($k in @($saved.Keys)) { $ws[$k] = $saved[$k] }
+    try { if (Test-Path -LiteralPath $fx) { [IO.Directory]::Delete((Get-LongPath $fx), $true) } } catch { $null = $_ }
+  }
+  return [pscustomobject]@{ Checks = $checks; Fails = $fails }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "windowsweep",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Safe-by-default Windows cleanup CLI - developer-aware, dry-run first, zero install via npx.",
   "bin": {
     "windowsweep": "bin/windowsweep.js"
@@ -38,7 +38,6 @@
     "disk-cleanup",
     "cache-cleanup",
     "disk-space",
-    "temp-files",
     "node-modules",
     "npm-cache",
     "yarn-cache",

package/windowsweep.ps1

@@ -275,7 +275,7 @@ if ($Script:WS.Elevate -and -not $Script:WS.IsAdmin) {
 }
 if ($Script:WS.Elevate -and $Script:WS.IsAdmin) { Write-Note 'already elevated; --elevate is a no-op' }
 
-if ($Script:WS.Mode -in @('walkthrough', 'menu', 'all', 'only')) { Resolve-DeveloperMode }
+if ($Script:WS.Mode -in @('walkthrough', 'menu', 'all', 'only')) { Resolve-DeveloperMode; Confirm-PurgeAllOnce }
 
 try {
   Invoke-Main
@@ -288,5 +288,9 @@ try {
   if ($Script:WS.CleanupLogs -and $Script:WS.LogFile -and (Test-Path -LiteralPath $Script:WS.LogFile)) {
     try { Remove-Item -LiteralPath $Script:WS.LogFile -Force -ErrorAction SilentlyContinue } catch { $null = $_ }
   }
+  if (-not $Script:WS.Finished -and $Script:WS.ExitCode -eq 0) {
+    Write-LogLine 'run interrupted before it finished (Ctrl-C or host stop) - exit 130'
+    exit $Script:WS_EXIT_INTERRUPT
+  }
 }
 exit $Script:WS.ExitCode