windowsweep 1.0.0

package/modules/docker.ps1

@@ -0,0 +1,93 @@
+# docker.ps1 - section 5 (Docker prune) and section 20 (disk image compaction).
+
+function Get-Targets05 {
+  return @(
+    (New-Target 5 'docker image prune (dangling layers)' 'docker image prune -f' -Kind cmd)
+    (New-Target 5 'docker builder prune (build cache idle N+ days)' 'docker builder prune -f --filter until=<N>h' -Kind cmd)
+    (New-Target 5 'docker image prune (unused images older than N days)' 'docker image prune -a -f --filter until=<N>h' -Kind cmd)
+  )
+}
+
+function Test-DockerDaemon {
+  if (-not (Test-CommandPresent 'docker')) { return $false }
+  $r = Invoke-External -FilePath 'docker' -ArgumentList @('info', '--format', '{{.ServerVersion}}') -Quiet -Label 'docker info'
+  return ($r.Ran -and $r.ExitCode -eq 0)
+}
+
+function Invoke-DockerPrune {
+  param([string[]] $Arguments, [string] $Label)
+  $r = Invoke-External -FilePath 'docker' -ArgumentList $Arguments -Destructive -Quiet -Label $Label
+  if (-not $r.Ran) { return [long]0 }
+  $freed = [long]0
+  foreach ($l in $r.Output) { if ($l -match 'Total reclaimed space:\s*(.+)$') { $freed += ConvertFrom-SizeText $Matches[1] } }
+  if ($r.ExitCode -eq 0) { Write-Ok ("$Label - reclaimed " + (Format-Bytes $freed)) } else { Write-Warn "$Label - docker returned $($r.ExitCode)" }
+  Add-Freed $freed
+  return $freed
+}
+
+function Invoke-Section05 {
+  $ws = $Script:WS
+  Write-SectionIntro @(
+    'Docker keeps every image layer and build step it ever produced. Dangling layers and the build cache are',
+    'safe to drop; images no container uses go only when older than the idle window. Volumes are never touched',
+    '(review them yourself with: docker volume ls  /  docker volume prune).'
+  ) -Dev $true
+  if (-not (Test-CommandPresent 'docker')) { Write-Info 'docker CLI not found - skipped'; return }
+  if (-not (Test-DockerDaemon)) { Write-Warn 'Docker daemon is not running (start Docker Desktop) - skipped'; $ws.Hints += 'Start Docker Desktop and re-run:  windowsweep --only 5 --yes'; return }
+  $df = Invoke-External -FilePath 'docker' -ArgumentList @('system', 'df') -Quiet -Label 'docker system df'
+  foreach ($l in $df.Output) { Write-Plain "  $l" }
+  if (-not (Confirm-Section 'Prune Docker now?')) { Write-Info 'skipped'; return }
+  $hours = [int]($ws.Days * 24)
+  if ($ws.PurgeAll -or $ws.Developer -eq $false) {
+    if ($ws.Developer -ne $false -and -not (Confirm-Ui -Prompt 'FULL PURGE removes every image no container uses right now (they re-pull later). Continue?' -Default 'n')) { Write-Info 'full purge declined; doing the conservative prune instead' }
+    else { $null = Invoke-DockerPrune -Arguments @('system', 'prune', '-a', '-f') -Label 'docker system prune -a'; return }
+  }
+  $null = Invoke-DockerPrune -Arguments @('image', 'prune', '-f') -Label 'dangling image layers'
+  $null = Invoke-DockerPrune -Arguments @('builder', 'prune', '-f', '--filter', "until=${hours}h") -Label "build cache idle $($ws.Days)+ days"
+  $null = Invoke-DockerPrune -Arguments @('image', 'prune', '-a', '-f', '--filter', "until=${hours}h") -Label "unused images older than $($ws.Days) days"
+  Write-Note 'the Docker disk image (docker_data.vhdx) does not shrink by itself - section 20 compacts it (admin, stops Docker)'
+}
+
+# ---------------------------------------------------------------------------------------------
+# Section 20 - disk image compaction
+# ---------------------------------------------------------------------------------------------
+
+function Get-Targets20 {
+  return @((New-Target 20 'Docker Desktop / WSL virtual disks (*.vhdx)' "$($Script:P.L)\Docker\wsl\*\*.vhdx and Packages\*\LocalState\*.vhdx" -Kind cmd -Note 'diskpart compact vdisk; Docker Desktop and WSL are stopped first'))
+}
+
+function Invoke-Section20 {
+  $ws = $Script:WS
+  Write-SectionIntro @(
+    'A WSL/Docker virtual disk grows as data is written but never shrinks when it is deleted. Compaction hands the',
+    'free space back to Windows. It needs Administrator rights and STOPS Docker Desktop and every WSL distro first;',
+    'restart Docker Desktop afterwards.'
+  )
+  $images = @(Get-DiskImageFiles)
+  if ($images.Count -eq 0) { Write-Info 'no .vhdx disk images found'; return }
+  $i = 1
+  foreach ($img in $images) { Write-UiLine ("  {0,3}  {1,10}  {2}" -f $i, (Format-Bytes $img.Length), $img.FullName) 'Gray'; $i++ }
+  if (-not (Test-CommandPresent 'diskpart.exe')) { Write-Warn 'diskpart.exe not found - skipped'; return }
+  $picks = @()
+  if ($ws.Yes) { $picks = @(1..$images.Count) } else { $picks = Read-MultiSelect -Total $images.Count }
+  if ($picks.Count -eq 0) { Write-Info 'nothing selected'; return }
+  if (-not (Confirm-Section 'Stop Docker Desktop and WSL now and compact the selected disks?' 'n')) { Write-Info 'skipped'; return }
+  if ($ws.DryRun) { foreach ($k in $picks) { Write-DryRun "would compact $($images[$k - 1].FullName)" }; return }
+  Write-Info 'stopping Docker Desktop and WSL...'
+  Get-Process -Name 'Docker Desktop' -ErrorAction SilentlyContinue | Stop-Process -Force -ErrorAction SilentlyContinue
+  $null = Invoke-External -FilePath 'wsl.exe' -ArgumentList @('--shutdown') -Destructive -Quiet -Label 'wsl --shutdown'
+  Start-Sleep -Seconds 8
+  foreach ($k in $picks) {
+    $img = $images[$k - 1]
+    $before = (Get-Item -LiteralPath $img.FullName).Length
+    $script = Join-Path $env:TEMP ("windowsweep-diskpart-" + [guid]::NewGuid().ToString('N') + '.txt')
+    [IO.File]::WriteAllLines($script, @("select vdisk file=`"$($img.FullName)`"", 'attach vdisk readonly', 'compact vdisk', 'detach vdisk', 'exit'))
+    $r = Invoke-External -FilePath 'diskpart.exe' -ArgumentList @('/s', $script) -Destructive -Quiet -Label "diskpart compact $($img.Name)"
+    Remove-Item -LiteralPath $script -Force -ErrorAction SilentlyContinue
+    $after = (Get-Item -LiteralPath $img.FullName).Length
+    $gain = [math]::Max([long]0, $before - $after)
+    if ($r.ExitCode -eq 0) { Write-Ok ("$($img.Name): " + (Format-Bytes $before) + ' -> ' + (Format-Bytes $after) + ' (freed ' + (Format-Bytes $gain) + ')') } else { Write-Warn "$($img.Name): diskpart returned $($r.ExitCode)"; foreach ($l in $r.Output) { Write-Note $l } }
+    Add-Freed $gain
+  }
+  Write-Info 'done - start Docker Desktop again when you need it'
+}

package/modules/editors.ps1

@@ -0,0 +1,149 @@
+# editors.ps1 - section 6: editor caches, stale workspace storage, superseded extension versions.
+
+$Script:WS_EDITORS = @(
+  @{ Name = 'VS Code'; Root = 'Code'; Ext = '.vscode'; Proc = @('Code') }
+  @{ Name = 'VS Code Insiders'; Root = 'Code - Insiders'; Ext = '.vscode-insiders'; Proc = @('Code - Insiders') }
+  @{ Name = 'VSCodium'; Root = 'VSCodium'; Ext = '.vscode-oss'; Proc = @('VSCodium') }
+  @{ Name = 'Cursor'; Root = 'Cursor'; Ext = '.cursor'; Proc = @('Cursor') }
+  @{ Name = 'Windsurf'; Root = 'Windsurf'; Ext = '.windsurf'; Proc = @('Windsurf') }
+)
+
+function Get-Targets06 {
+  $P = $Script:P
+  $t = @()
+  foreach ($e in $Script:WS_EDITORS) {
+    $root = Join-Path $P.A $e.Root
+    $t += (New-Target 6 "$($e.Name) caches" $root -Kind editor -Guard $e.Proc -Note 'Cache, CachedData, Code Cache, GPUCache, VSIX cache, crash reports')
+    $t += (New-Target 6 "$($e.Name) logs" (Join-Path $root 'logs') -Mode clear-old -Days 7)
+    $t += (New-Target 6 "$($e.Name) stale workspace storage" (Join-Path $root 'User\workspaceStorage') -Kind cmd -Guard $e.Proc -Note 'entries whose folder no longer exists')
+    $t += (New-Target 6 "$($e.Name) superseded extension versions" (Join-Path $P.U "$($e.Ext)\extensions") -Kind cmd -Guard $e.Proc -Note 'older versions and .obsolete entries; newest kept')
+  }
+  $t += (New-Target 6 'Visual Studio ComponentModelCache' "$($P.L)\Microsoft\VisualStudio\*\ComponentModelCache" -Kind glob -Mode clear -Guard @('devenv'))
+  $t += (New-Target 6 'Visual Studio designer shadow cache' "$($P.L)\Microsoft\VisualStudio\*\Designer\ShadowCache" -Kind glob -Mode clear -Guard @('devenv'))
+  $t += (New-Target 6 'Visual Studio telemetry (AppInsights)' "$($P.L)\Microsoft\VSApplicationInsights" -Mode clear)
+  $t += (New-Target 6 'Visual Studio SQM logs' "$($P.L)\Microsoft\VSCommon\*\SQM" -Kind glob -Mode clear)
+  return $t
+}
+
+function Remove-StaleWorkspaceStorage {
+  <# .SYNOPSIS workspaceStorage entries pointing at a folder/workspace file that no longer exists. #>
+  param([string] $Root, [string] $Label)
+  if (-not (Test-DirPresent $Root)) { return }
+  $stale = @()
+  foreach ($e in (Get-ChildEntries $Root)) {
+    if (-not ($e -is [IO.DirectoryInfo])) { continue }
+    $json = Join-Path (Remove-LongPrefix $e.FullName) 'workspace.json'
+    if (-not (Test-PathPresent $json)) { continue }
+    try {
+      $w = Get-Content -LiteralPath $json -Raw -ErrorAction Stop | ConvertFrom-Json -ErrorAction Stop
+      $uri = $w.folder
+      if (-not $uri) { $uri = $w.workspace }
+      if (-not $uri -or $uri -notmatch '^file:///') { continue }
+      $local = [Uri]::UnescapeDataString(($uri -replace '^file:///', '')) -replace '/', '\'
+      if (-not (Test-PathPresent $local)) { $stale += [pscustomobject]@{ Path = (Remove-LongPrefix $e.FullName); Target = $local } }
+    } catch { $null = $_ }
+  }
+  if ($stale.Count -eq 0) { Write-Info "$Label - none stale"; return }
+  Write-Info "$Label - $($stale.Count) entries point at folders that no longer exist:"
+  foreach ($s in $stale) { Write-Note "  $($s.Target)" }
+  foreach ($s in $stale) { $null = Remove-PathSafe -Path $s.Path -Within $Root -Label $Label }
+  if (-not $Script:WS.DryRun) { Write-Ok "$Label - removed $($stale.Count) stale entries" }
+}
+
+function Read-JsonFile {
+  <# .SYNOPSIS Parse a JSON file. A top-level array always comes back as an array (PowerShell 5.1's ConvertFrom-Json
+     emits an array as ONE pipeline object, which silently turns 16 entries into a single bogus one when wrapped). #>
+  param([string] $Path)
+  $parsed = Get-Content -LiteralPath $Path -Raw -ErrorAction Stop | ConvertFrom-Json -ErrorAction Stop
+  if ($parsed -is [array]) { return $parsed }
+  return @($parsed)
+}
+
+function Get-SupersededExtensionPlan {
+  <# .SYNOPSIS Decide which extension folders are leftovers. Pure logic (exercised by the self-test).
+     A folder is a victim only when the editor's extensions.json does NOT reference it AND either the .obsolete marker
+     names it or a different version of the same extension IS referenced. Without extensions.json: .obsolete entries
+     plus every version older than the newest one present. #>
+  param([string] $Root, [object[]] $Folders)
+  $victims = @()
+  $obsolete = @{}
+  $obsFile = Join-Path $Root '.obsolete'
+  if (Test-PathPresent $obsFile) {
+    try { $o = Get-Content -LiteralPath $obsFile -Raw -ErrorAction Stop | ConvertFrom-Json -ErrorAction Stop; foreach ($p in $o.PSObject.Properties) { if ($p.Value) { $obsolete[$p.Name] = $true } } } catch { $null = $_ }
+  }
+  $installed = $null
+  $manifest = Join-Path $Root 'extensions.json'
+  if (Test-PathPresent $manifest) {
+    try {
+      $installed = @{}
+      foreach ($entry in (Read-JsonFile $manifest)) {
+        $loc = $entry.relativeLocation
+        if ($loc -is [string] -and $loc) { $installed[$loc] = $true }
+      }
+    } catch { $installed = $null }
+  }
+  if ($null -ne $installed -and $installed.Count -gt 0) {
+    $installedIds = @{}
+    foreach ($f in $Folders) { if ($installed.ContainsKey($f.Name)) { $installedIds[$f.Id] = $true } }
+    foreach ($f in $Folders) {
+      if ($installed.ContainsKey($f.Name)) { continue }
+      if ($obsolete.ContainsKey($f.Name) -or $installedIds.ContainsKey($f.Id)) { $victims += $f }
+    }
+    $note = "extensions.json lists $($installed.Count) installed extension(s); $($victims.Count) leftover folder(s)"
+  } else {
+    foreach ($group in @($Folders | Where-Object { -not $obsolete.ContainsKey($_.Name) } | Group-Object Id)) {
+      if ($group.Count -lt 2) { continue }
+      $newest = $group.Group | Sort-Object Version -Descending | Select-Object -First 1
+      foreach ($v in $group.Group) { if ($v.Path -ne $newest.Path) { $victims += $v } }
+    }
+    foreach ($f in $Folders) { if ($obsolete.ContainsKey($f.Name)) { $victims += $f } }
+    $note = "no extensions.json; using .obsolete + newest-version rule: $($victims.Count) leftover folder(s)"
+  }
+  return [pscustomobject]@{ Victims = @($victims); Note = $note }
+}
+
+function Remove-SupersededExtensions {
+  <# .SYNOPSIS Extension folders the editor no longer uses.
+     The editor's own extensions.json is the source of truth: every versioned folder it does not reference is a leftover
+     (uninstalled, or superseded by the version it does reference). Without that file, fall back to the .obsolete marker
+     plus keep-the-newest-version-per-extension. #>
+  param([string] $Root, [string] $Label)
+  if (-not (Test-DirPresent $Root)) { return }
+  $folders = @()
+  foreach ($e in @(Get-ChildEntries $Root)) {
+    if (-not ($e -is [IO.DirectoryInfo]) -or (Test-ReparsePoint $e)) { continue }
+    if ($e.Name -match '^(.+?)-(\d+\.\d+\.\d+)([^\\]*)$') {
+      $ver = $null
+      try { $ver = [version]$Matches[2] } catch { continue }
+      $folders += [pscustomobject]@{ Name = $e.Name; Id = $Matches[1]; Path = (Remove-LongPrefix $e.FullName); Version = $ver }
+    }
+  }
+  if ($folders.Count -eq 0) { Write-Info "$Label - none superseded"; return }
+  $plan = Get-SupersededExtensionPlan -Root $Root -Folders $folders
+  Write-Note "$Label - $($plan.Note)"
+  $victims = @($plan.Victims)
+  if ($victims.Count -eq 0) { Write-Info "$Label - none superseded"; return }
+  foreach ($v in $victims) {
+    $r = Remove-PathSafe -Path $v.Path -Within $Root -Label $Label
+    if ($r.Removed -and -not $Script:WS.DryRun) { Write-Ok ("$Label - removed $($v.Name) (" + (Format-Bytes $r.Bytes) + ')') }
+  }
+}
+
+function Invoke-Section06 {
+  Write-SectionIntro @(
+    'Editors rebuild their caches on the next start. Settings, keybindings, snippets, globalStorage and local',
+    'History are protected. A running editor is left alone except for its VSIX download cache and old logs.'
+  )
+  $targets = Get-Targets06
+  $null = Show-TargetSizes $targets
+  if (-not (Confirm-Section 'Clean editor caches now?')) { Write-Info 'skipped'; return }
+  $null = Invoke-TargetList @($targets | Where-Object { $_.Kind -ne 'cmd' })
+  foreach ($e in $Script:WS_EDITORS) {
+    $root = Join-Path $Script:P.A $e.Root
+    $extRoot = Join-Path $Script:P.U "$($e.Ext)\extensions"
+    if (-not (Test-DirPresent $root) -and -not (Test-DirPresent $extRoot)) { continue }
+    if (Test-ProcessRunning $e.Proc) { Write-Warn "$($e.Name) is running - workspace storage and extension versions left alone"; continue }
+    Remove-StaleWorkspaceStorage -Root (Join-Path $root 'User\workspaceStorage') -Label "$($e.Name) workspace storage"
+    Remove-SupersededExtensions -Root $extRoot -Label "$($e.Name) extensions"
+  }
+}

package/modules/health.ps1

@@ -0,0 +1,101 @@
+# health.ps1 - section 0: read-only system health report.
+
+function Get-Targets00 { return @() }
+
+function Get-HiberfilInfo {
+  $p = Join-Path $Script:P.SD '\hiberfil.sys'
+  $size = [long]0
+  # Get-Item cannot open the hibernation file without elevation, but FileInfo reads its size from the directory entry.
+  try { $f = New-Object IO.FileInfo($p); if ($f.Exists) { $size = [long]$f.Length } } catch { $size = 0 }
+  $state = 'unknown'
+  try {
+    $a = (& powercfg.exe /a 2>$null) -join ' '
+    if ($a -match 'Hibernate' -and $a -notmatch 'Hibernation has not been enabled') { $state = 'available' } else { $state = 'off' }
+  } catch { $null = $_ }
+  return [pscustomobject]@{ Path = $p; Bytes = $size; State = $state }
+}
+
+function Get-DiskImageFiles {
+  <# .SYNOPSIS Docker Desktop / WSL virtual disks (they grow but never shrink on their own). #>
+  $L = $Script:P.L
+  $out = @()
+  foreach ($root in @((Join-Path $L 'Docker\wsl'), (Join-Path $L 'Packages'))) {
+    if (-not (Test-DirPresent $root)) { continue }
+    try { $out += Get-ChildItem -LiteralPath $root -Recurse -Filter '*.vhdx' -File -Depth 4 -ErrorAction SilentlyContinue } catch { $null = $_ }
+  }
+  return $out
+}
+
+function Get-BlockingApps {
+  <# .SYNOPSIS Running apps whose caches this tool skips while they run. #>
+  $map = [ordered]@{ chrome = 'Chrome'; msedge = 'Edge'; brave = 'Brave'; firefox = 'Firefox'; vivaldi = 'Vivaldi'; opera = 'Opera'; Code = 'VS Code'; Cursor = 'Cursor'; Windsurf = 'Windsurf'; Discord = 'Discord'; slack = 'Slack'; 'ms-teams' = 'Teams'; Zoom = 'Zoom'; Spotify = 'Spotify'; Postman = 'Postman'; Figma = 'Figma'; Notion = 'Notion' }
+  $out = @()
+  foreach ($k in $map.Keys) { if (Test-ProcessRunning @($k)) { $out += $map[$k] } }
+  return $out
+}
+
+function Invoke-Section00 {
+  $ws = $Script:WS
+  Write-SectionIntro @('Read-only snapshot of the machine: nothing is changed here.')
+  try {
+    $os = Get-CimInstance Win32_OperatingSystem -ErrorAction Stop
+    Write-Kv 'Windows:' "$($os.Caption) $($os.Version) (build $($os.BuildNumber))"
+    $up = (Get-Date) - $os.LastBootUpTime
+    Write-Kv 'Uptime:' ("{0}d {1}h {2}m" -f $up.Days, $up.Hours, $up.Minutes)
+    Write-Kv 'RAM:' ("{0} total, {1} free" -f (Format-Bytes ($os.TotalVisibleMemorySize * 1KB)), (Format-Bytes ($os.FreePhysicalMemory * 1KB)))
+  } catch { Write-Kv 'Windows:' $ws.OsCaption }
+  Write-Kv 'PowerShell:' "$($PSVersionTable.PSVersion) ($($PSVersionTable.PSEdition))"
+  $adm = 'no'
+  if ($ws.IsAdmin) { $adm = 'yes' } elseif (Test-CanElevate) { $adm = 'no (your account can elevate: --elevate)' } else { $adm = 'no (standard user; admin sections need an administrator)' }
+  Write-Kv 'Elevated:' $adm
+  $dev = 'not decided yet'
+  if ($null -ne $ws.Developer) { if ($ws.Developer) { $dev = "on ($($ws.DeveloperSource))" } else { $dev = "off ($($ws.DeveloperSource))" } }
+  Write-Kv 'Developer mode:' $dev
+  $hints = @(Get-ToolchainHints)
+  if ($hints.Count -gt 0) { Write-Kv 'Dev tooling found:' ($hints -join ', ') }
+  Write-UiLine '' 'Gray'
+  Show-DriveTable
+  try {
+    $sys = New-Object IO.DriveInfo($Script:P.SD)
+    $pct = 100.0 * $sys.AvailableFreeSpace / $sys.TotalSize
+    if ($sys.AvailableFreeSpace -lt 10GB -or $pct -lt 10) { Write-Warn ("system drive has only {0} free ({1:N1}%) - Windows slows down badly below ~10%; this run should help" -f (Format-Bytes $sys.AvailableFreeSpace), $pct) }
+  } catch { $null = $_ }
+  Write-UiLine '' 'Gray'
+  $h = Get-HiberfilInfo
+  if ($h.Bytes -gt 0) { Write-Kv 'hiberfil.sys:' ("{0} (hibernation {1}) - section 15 can shrink or remove it (admin)" -f (Format-Bytes $h.Bytes), $h.State) } else { Write-Kv 'hiberfil.sys:' 'absent (hibernation off)' }
+  try {
+    foreach ($pf in (Get-CimInstance Win32_PageFileUsage -ErrorAction Stop)) { Write-Kv 'pagefile:' ("{0}  {1} allocated" -f $pf.Name, (Format-Bytes ($pf.AllocatedBaseSize * 1MB))) }
+  } catch { $null = $_ }
+  foreach ($img in (Get-DiskImageFiles)) { Write-Kv 'disk image:' ("{0}  {1} (section 20 compacts it, admin)" -f $img.FullName, (Format-Bytes $img.Length)) }
+  if (Test-CommandPresent 'wsl.exe') {
+    try {
+      $raw = & wsl.exe --list --verbose 2>$null
+      $txt = (($raw | ForEach-Object { [string]$_ }) -join "`n") -replace "`0", ''
+      $lines = @($txt -split "`n" | ForEach-Object { $_.Trim() } | Where-Object { $_ -and $_ -notmatch '^NAME' })
+      if ($lines.Count -gt 0) { Write-Kv 'WSL distros:' (($lines | ForEach-Object { ($_ -replace '\s+', ' ') }) -join ' | ') }
+    } catch { $null = $_ }
+  }
+  Write-UiLine '' 'Gray'
+  try { $n = @(Get-CimInstance Win32_StartupCommand -ErrorAction Stop).Count; Write-Kv 'Startup items:' "$n (review in Task Manager > Startup; this tool does not change them)" } catch { $null = $_ }
+  try {
+    $ss = (Get-ItemProperty 'HKCU:\Software\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy' -ErrorAction Stop).'01'
+    $ssText = 'off'
+    if ($ss -eq 1) { $ssText = 'on' }
+    Write-Kv 'Storage Sense:' $ssText
+  } catch { $null = $_ }
+  try {
+    $la = (& fsutil.exe behavior query disablelastaccess 2>$null) -join ' '
+    if ($la -match '=\s*(\d)') {
+      $v = [int]$Matches[1]
+      $laText = 'disabled - idle age uses write/creation times (the safe reading)'
+      if ($v -eq 1 -or $v -eq 3) { $laText = 'enabled - last-access times are reliable' }
+      Write-Kv 'Last-access tracking:' $laText
+    }
+  } catch { $null = $_ }
+  $blocking = @(Get-BlockingApps)
+  if ($blocking.Count -gt 0) {
+    Write-UiLine '' 'Gray'
+    Write-Warn ("running now, their caches will be skipped until closed: " + ($blocking -join ', '))
+  }
+  Add-Freed 0
+}

package/modules/menu.ps1

@@ -0,0 +1,61 @@
+# menu.ps1 - jump-to menu: run one section at a time; toggle dry-run and auto-yes.
+
+function Show-Menu {
+  $ws = $Script:WS
+  Write-UiLine '' 'Gray'
+  Write-Banner
+  $sys = New-Object IO.DriveInfo($Script:P.SD)
+  $dry = 'OFF'
+  if ($ws.DryRun) { $dry = 'ON' }
+  $yes = 'OFF'
+  if ($ws.Yes) { $yes = 'ON' }
+  $adm = 'no'
+  if ($ws.IsAdmin) { $adm = 'yes' }
+  Write-UiLine ("  system drive free: {0}   dry-run: {1}   auto-yes: {2}   elevated: {3}" -f (Format-Bytes $sys.AvailableFreeSpace), $dry, $yes, $adm) 'Cyan'
+  Write-UiLine '' 'Gray'
+  foreach ($s in $Script:WS_SECTIONS) {
+    $mark = ' '
+    if ($ws.Report.steps | Where-Object { $_.section -eq $s.Id -and $_.status -in 'ran', 'dry-run' }) { $mark = $ws.Glyph.ok }
+    $flags = ''
+    if ($s.Admin) { $flags += ' [admin]' }
+    if ($s.Batch -eq 'deep') { $flags += ' [deep]' }
+    if ($s.Batch -eq 'interactive') { $flags += ' [interactive]' }
+    $color = 'Gray'
+    if ($s.Admin -and -not $ws.IsAdmin) { $color = 'DarkGray' }
+    Write-UiLine ("  {0} [{1,2}] {2}{3}" -f $mark, $s.Id, $s.Title, $flags) $color
+  }
+  Write-UiLine '' 'Gray'
+  Write-UiLine '   [A] run the safe batch     [D] toggle dry-run     [Y] toggle auto-yes     [S] summary     [Q] quit' 'White'
+}
+
+function Invoke-Menu {
+  $ws = $Script:WS
+  if (-not $ws.Interactive) {
+    Write-Err 'The menu needs an interactive console. For unattended runs use:  windowsweep --all --yes'
+    $ws.ExitCode = $Script:WS_EXIT_USAGE
+    return
+  }
+  while ($true) {
+    Show-Menu
+    $choice = Read-Choice -Prompt '  Select [0-21 / A / D / Y / S / Q]: ' -Default ''
+    if ($choice -eq '') { continue }
+    switch -Regex ($choice) {
+      '^q' { Show-SessionSummary; return }
+      '^a' {
+        $ids = @($Script:WS_SAFE_BATCH)
+        if ($ws.IsAdmin) { $ids += $Script:WS_SAFE_BATCH_ADMIN }
+        $ws.BatchMode = $true
+        try { foreach ($id in $ids) { Invoke-SectionById -Id $id } } finally { $ws.BatchMode = $false }
+        Wait-Enter
+      }
+      '^d' { $ws.DryRun = -not $ws.DryRun }
+      '^y' { $ws.Yes = -not $ws.Yes }
+      '^s' { Show-SessionSummary; Wait-Enter }
+      '^\d+$' {
+        $id = [int]$choice
+        if (Get-Section $id) { Invoke-SectionById -Id $id; Wait-Enter } else { Write-Warn "no section $id" }
+      }
+      default { Write-Warn "unrecognised choice: $choice" }
+    }
+  }
+}

package/modules/personal.ps1

@@ -0,0 +1,124 @@
+# personal.ps1 - sections 18 and 19: personal files in Downloads. Interactive only; the Recycle Bin is the destination.
+
+$Script:WS_PARTIAL_PATTERNS = @('*.crdownload', '*.part', '*.partial', '*.fdmdownload', '*.opdownload', '*.!ut', '*.aria2', '*.download', '*.bc!', '*.tmp')
+
+function Get-PersonalRoots {
+  $roots = @()
+  $d = Join-Path $Script:P.U 'Downloads'
+  if (Test-DirPresent $d) { $roots += (Get-FullPath $d) }
+  return $roots
+}
+
+function Get-Targets18 {
+  $t = @()
+  foreach ($r in (Get-PersonalRoots)) { $t += (New-Target 18 'Partial / orphan downloads' $r -Kind cmd -Note ($Script:WS_PARTIAL_PATTERNS -join ' ')) }
+  return $t
+}
+
+function Get-Targets19 {
+  $t = @()
+  foreach ($r in (Get-PersonalRoots)) { $t += (New-Target 19 "Files >= $($Script:WS.LargeFileMb) MB idle $($Script:WS.Days)+ days" $r -Kind cmd -Note 'moved to the Recycle Bin after you pick them') }
+  return $t
+}
+
+function Get-FilesUnder {
+  <# .SYNOPSIS Files under Root up to MaxDepth, never following links, never entering protected folders. #>
+  param([string] $Root, [int] $MaxDepth = 4)
+  $out = New-Object System.Collections.Generic.List[object]
+  $stack = New-Object System.Collections.Generic.Stack[object]
+  $stack.Push(@($Root, 0))
+  while ($stack.Count -gt 0) {
+    $item = $stack.Pop()
+    foreach ($e in (Get-ChildEntries ([string]$item[0]))) {
+      if (Test-ReparsePoint $e) { continue }
+      if ($e -is [IO.DirectoryInfo]) { if ([int]$item[1] -lt $MaxDepth) { $stack.Push(@((Remove-LongPrefix $e.FullName), [int]$item[1] + 1)) }; continue }
+      $out.Add($e)
+    }
+  }
+  return $out
+}
+
+function Get-PartialDownloads {
+  $list = @()
+  foreach ($root in (Get-PersonalRoots)) {
+    foreach ($f in (Get-FilesUnder -Root $root -MaxDepth 4)) {
+      foreach ($pat in $Script:WS_PARTIAL_PATTERNS) {
+        if ($f.Name -like $pat) { $list += [pscustomobject]@{ Path = (Remove-LongPrefix $f.FullName); Bytes = [long]$f.Length; Idle = [int][math]::Floor(([datetime]::UtcNow - (Get-NewestTimestampUtc $f)).TotalDays); Root = $root }; break }
+      }
+    }
+  }
+  return @($list | Sort-Object Bytes -Descending)
+}
+
+function Get-LargeStaleFiles {
+  $ws = $Script:WS
+  $min = [long]$ws.LargeFileMb * 1MB
+  $list = @()
+  foreach ($root in (Get-PersonalRoots)) {
+    foreach ($f in (Get-FilesUnder -Root $root -MaxDepth 4)) {
+      if ([long]$f.Length -lt $min) { continue }
+      $idle = [int][math]::Floor(([datetime]::UtcNow - (Get-NewestTimestampUtc $f)).TotalDays)
+      if ($idle -lt $ws.Days) { continue }
+      $list += [pscustomobject]@{ Path = (Remove-LongPrefix $f.FullName); Bytes = [long]$f.Length; Idle = $idle; Root = $root }
+    }
+  }
+  return @($list | Sort-Object Bytes -Descending | Select-Object -First 100)
+}
+
+function Show-FileTable {
+  param([object[]] $Rows)
+  Write-UiLine ("  {0,3}  {1,10} {2,6}  {3}" -f '#', 'SIZE', 'IDLE', 'FILE') 'White'
+  $i = 1
+  foreach ($r in $Rows) { Write-UiLine ("  {0,3}  {1,10} {2,5}d  {3}" -f $i, (Format-Bytes $r.Bytes), $r.Idle, $r.Path) 'Gray'; $i++ }
+}
+
+function Invoke-PersonalPicker {
+  param([object[]] $Rows, [string] $Prompt)
+  $ws = $Script:WS
+  $Rows = @($Rows)
+  if ($Rows.Count -eq 0) { Write-Info 'none found'; return }
+  Show-FileTable $Rows
+  $total = [long]0
+  foreach ($r in $Rows) { $total += $r.Bytes }
+  Write-Info ("total: " + (Format-Bytes $total))
+  $dest = 'the Recycle Bin'
+  if ($ws.Permanent) { $dest = 'PERMANENT deletion (--permanent)' }
+  Write-Note "selected files go to $dest"
+  $picks = Read-MultiSelect -Total $Rows.Count
+  if ($picks.Count -eq 0) { Write-Info 'nothing selected'; return }
+  if (-not $ws.DryRun) {
+    # Personal files never auto-confirm: --yes does not apply here.
+    if (-not (Confirm-Ui -Prompt "$Prompt ($($picks.Count) file(s))?" -Default 'n' -NoAutoYes)) { Write-Info 'skipped'; return }
+  }
+  foreach ($k in $picks) { $null = Send-ToRecycleBin -Path $Rows[$k - 1].Path -Within $Rows[$k - 1].Root }
+}
+
+function Invoke-Section18 {
+  Write-SectionIntro @(
+    'Half-finished downloads left behind by browsers and download managers (.crdownload, .part, .tmp, ...).',
+    'You pick what goes; it lands in the Recycle Bin. Desktop and cloud-synced folders are never scanned.'
+  )
+  if (@(Get-PersonalRoots).Count -eq 0) { Write-Info 'no Downloads folder found'; return }
+  Invoke-PersonalPicker -Rows @(Get-PartialDownloads) -Prompt 'Move the selected partial downloads to the Recycle Bin'
+}
+
+function Invoke-Section19 {
+  $ws = $Script:WS
+  Write-SectionIntro @(
+    "Files of $($ws.LargeFileMb) MB or more in Downloads that nothing has touched for $($ws.Days)+ days: old installers, ISOs,",
+    'archives you already extracted. You pick what goes; it lands in the Recycle Bin.'
+  )
+  if (@(Get-PersonalRoots).Count -eq 0) { Write-Info 'no Downloads folder found'; return }
+  Invoke-PersonalPicker -Rows @(Get-LargeStaleFiles) -Prompt 'Move the selected files to the Recycle Bin'
+}
+
+function Show-PersonalScan {
+  <# .SYNOPSIS Read-only listing used by --scan. #>
+  Write-Box 'Personal files (read-only)' 'Sections 18 and 19 are interactive only - nothing here is deleted'
+  Write-Section 'Partial / orphan downloads'
+  $p = @(Get-PartialDownloads)
+  if ($p.Count -eq 0) { Write-Info 'none found' } else { Show-FileTable @($p | Select-Object -First 30) }
+  Write-Section "Files >= $($Script:WS.LargeFileMb) MB idle $($Script:WS.Days)+ days in Downloads"
+  $l = @(Get-LargeStaleFiles)
+  if ($l.Count -eq 0) { Write-Info 'none found' } else { Show-FileTable @($l | Select-Object -First 30) }
+}

package/modules/pkg_managers.ps1

@@ -0,0 +1,69 @@
+# pkg_managers.ps1 - section 1: package-manager caches. All regenerable; the idle gate keeps recent work fast.
+
+function Get-Targets01 {
+  $P = $Script:P
+  $npm = Get-NpmCacheDir
+  return @(
+    (New-Target 1 'npm cache (_cacache)' (Join-Path $npm '_cacache') -Mode prune -Dev $true -Note 'regenerated on the next npm install')
+    (New-Target 1 'npx package cache (_npx)' (Join-Path $npm '_npx') -Mode prune -Dev $true)
+    (New-Target 1 'npm logs' (Join-Path $npm '_logs') -Mode clear-old -Days 7)
+    (New-Target 1 'Yarn v1 cache' "$($P.L)\Yarn\Cache" -Mode prune -Dev $true -Note 'yarn classic offline mirror')
+    (New-Target 1 'Yarn Berry global cache' "$($P.L)\Yarn\Berry\cache" -Mode prune -Dev $true)
+    (New-Target 1 'pnpm content store' "$($P.L)\pnpm\store" -Mode prune -Dev $true -Note 'pnpm store prune is used instead when pnpm is installed')
+    (New-Target 1 'pnpm metadata cache' "$($P.L)\pnpm-cache" -Mode prune -Dev $true)
+    (New-Target 1 'bun install cache' "$($P.U)\.bun\install\cache" -Mode prune -Dev $true -Note 'global bun packages stay')
+    (New-Target 1 'deno deps cache' "$($P.L)\deno\deps" -Mode prune -Dev $true -Note 'installed deno scripts (~\.deno\bin) stay')
+    (New-Target 1 'deno gen cache' "$($P.L)\deno\gen" -Mode prune -Dev $true)
+    (New-Target 1 'deno npm cache' "$($P.L)\deno\npm" -Mode prune -Dev $true)
+    (New-Target 1 'deno remote cache' "$($P.L)\deno\remote" -Mode prune -Dev $true)
+    (New-Target 1 'pip cache' "$($P.L)\pip\cache" -Mode prune -Dev $true)
+    (New-Target 1 'uv cache' "$($P.L)\uv\cache" -Mode prune -Dev $true -Note 'uv cache prune runs first when uv is installed')
+    (New-Target 1 'poetry cache' "$($P.L)\pypoetry\Cache" -Mode prune -Dev $true)
+    (New-Target 1 'Composer cache (files)' "$($P.L)\Composer\files" -Mode prune -Dev $true)
+    (New-Target 1 'Composer cache (roaming)' "$($P.A)\Composer\cache" -Mode prune -Dev $true)
+    (New-Target 1 'NuGet http cache' "$($P.L)\NuGet\v3-cache" -Mode clear)
+    (New-Target 1 'NuGet plugins cache' "$($P.L)\NuGet\plugins-cache" -Mode clear)
+    (New-Target 1 'NuGet scratch' "$($P.L)\Temp\NuGetScratch" -Mode clear)
+    (New-Target 1 'NuGet global packages' "$($P.U)\.nuget\packages" -Mode prune -Dev $true -Note 'restored on the next dotnet restore')
+    (New-Target 1 'Cargo registry cache' "$($P.U)\.cargo\registry\cache" -Mode prune -Dev $true -Note 'installed cargo binaries (~\.cargo\bin) stay')
+    (New-Target 1 'Cargo registry sources' "$($P.U)\.cargo\registry\src" -Mode prune -Dev $true)
+    (New-Target 1 'Cargo git checkouts' "$($P.U)\.cargo\git\checkouts" -Mode prune -Dev $true)
+    (New-Target 1 'Go build cache' "$($P.L)\go-build" -Mode prune -Dev $true)
+    (New-Target 1 'Go module download cache' "$($P.U)\go\pkg\mod\cache\download" -Mode prune -Dev $true)
+    (New-Target 1 'Dart/Flutter pub cache' "$($P.L)\Pub\Cache" -Mode prune -Dev $true -Note 'redownloaded by flutter pub get')
+    (New-Target 1 'Dart/Flutter pub cache (legacy)' "$($P.A)\Pub\Cache" -Mode prune -Dev $true)
+    (New-Target 1 'Dart analysis server cache' "$($P.U)\.dartServer" -Mode prune -Dev $true)
+    (New-Target 1 'Electron download cache' "$($P.L)\electron\Cache" -Mode prune -Dev $true)
+    (New-Target 1 'electron-builder cache' "$($P.L)\electron-builder\Cache" -Mode prune -Dev $true)
+    (New-Target 1 'node-gyp headers cache' "$($P.L)\node-gyp\Cache" -Mode prune -Dev $true)
+    (New-Target 1 'Scoop installer cache' "$($P.U)\scoop\cache" -Mode prune -Dev $true)
+  )
+}
+
+function Invoke-Section01 {
+  $ws = $Script:WS
+  Write-SectionIntro @(
+    'Package-manager caches only re-download what a future install needs. Globally installed packages,',
+    'toolchain managers (nvm, Volta, corepack, pnpm global, cargo bin, go bin) are protected and never touched.'
+  ) -Dev $true
+  $targets = Get-Targets01
+  $null = Show-TargetSizes $targets
+  if (-not (Confirm-Section 'Prune package-manager caches now?')) { Write-Info 'skipped'; return }
+  # Tool-native smart prunes first: they know which entries are still referenced.
+  if ((Test-CommandPresent 'pnpm') -and $ws.Developer -ne $false -and -not $ws.PurgeAll) {
+    Write-Info 'pnpm store prune - removes packages no project references'
+    $r = Invoke-External -FilePath 'pnpm' -ArgumentList @('store', 'prune') -Destructive -Quiet -Label 'pnpm store prune'
+    if ($r.Ran -and $r.ExitCode -eq 0) { Write-Ok 'pnpm store pruned' }
+    $targets = @($targets | Where-Object { $_.Label -ne 'pnpm content store' })
+  }
+  if ((Test-CommandPresent 'uv') -and $ws.Developer -ne $false -and -not $ws.PurgeAll) {
+    Write-Info 'uv cache prune - removes unreachable wheels and sources'
+    $r = Invoke-External -FilePath 'uv' -ArgumentList @('cache', 'prune') -Destructive -Quiet -Label 'uv cache prune'
+    if ($r.Ran -and $r.ExitCode -eq 0) { Write-Ok 'uv cache pruned' }
+  }
+  if ((Test-CommandPresent 'npm') -and $ws.PurgeAll) {
+    Write-Info 'npm cache clean --force'
+    $null = Invoke-External -FilePath 'npm' -ArgumentList @('cache', 'clean', '--force') -Destructive -Quiet -Label 'npm cache clean'
+  }
+  $null = Invoke-TargetList $targets
+}