windowsweep 1.0.1 → 1.2.0

package/modules/self_test_extra.ps1

@@ -1,86 +1,537 @@
-# self_test_extra.ps1 - extra self-test groups: the --yes asymmetry and its call sites (RW-002), pure helpers
-# and fixtures for logic that is invisible when wrong (RW-030). Called by Invoke-SelfTest; verdict lines only.
-
-function Invoke-SelfTestExtra {
-  <# .SYNOPSIS Run groups [12]-[14]. Returns an object with Checks and Fails counts. #>
-  $ws = $Script:WS
-  $checks = 0; $fails = 0
-  $saved = @{ DryRun = $ws.DryRun; Yes = $ws.Yes; Interactive = $ws.Interactive; Quiet = $ws.Quiet; NoReport = $ws.NoReport
-    ScanRoots = $ws.ScanRoots; AllowOwnData = $ws.AllowOwnData; Mute = $ws.Mute; Days = $ws.Days }
-  $fx = Join-Path $ws.Home ('selftest-extra-' + [guid]::NewGuid().ToString('N'))
-  $mute = { $Script:WS.Mute = $true }
-  $unmute = { $Script:WS.Mute = $false }
-  $ancient = (Get-Date).AddDays(-400)
-  try {
-    New-Item -ItemType Directory -Force -Path $fx | Out-Null
-    $ws.AllowOwnData = $true
-    $ws.NoReport = $true
-    $ws.DryRun = $false
-    $ws.Days = 100
-
-    Write-Section '[12] Prompts: --yes never selects personal or project items'
-    # 12a - the helper asymmetry
-    $checks++
-    $ws.Yes = $true; $ws.Interactive = $false
-    & $mute
-    $none = @(Read-MultiSelect -Total 5 -NoAutoYes)
-    $all = @(Read-MultiSelect -Total 5)
-    & $unmute
-    if ($none.Count -eq 0 -and ($all -join ',') -eq '1,2,3,4,5') { Write-Ok 'Read-MultiSelect: -NoAutoYes selects nothing under --yes; without it every index' } else { Write-Err "Read-MultiSelect asymmetry broken: none=[$($none -join ',')] all=[$($all -join ',')]"; $fails++ }
-    # 12b - section 17 call site (a fixture project with an artefact idle 400 days)
-    $checks++
-    $proj = Join-Path $fx 'proj17\app'
-    New-Item -ItemType Directory -Force -Path (Join-Path $proj 'node_modules') | Out-Null
-    Set-Content -LiteralPath (Join-Path $proj 'package.json') -Value '{"name":"fixture"}'
-    Set-Content -LiteralPath (Join-Path $proj 'node_modules\x.txt') -Value 'x'
-    foreach ($ts in 'LastWriteTime', 'LastAccessTime', 'CreationTime') { Set-ItemProperty -LiteralPath (Join-Path $proj 'package.json') -Name $ts -Value $ancient }
-    $ws.ScanRoots = @((Join-Path $fx 'proj17'))
-    & $mute
-    # The fixture must be a real candidate, or the removal check below proves nothing.
-    $listed = @(Find-StaleArtefacts -Roots $ws.ScanRoots -Days 100)
-    Invoke-Section17
-    & $unmute
-    if ($listed.Count -eq 1 -and (Test-Path -LiteralPath (Join-Path $proj 'node_modules\x.txt'))) {
-      Write-Ok 'section 17 under --yes with no console lists the artefact and removes nothing'
-    } elseif ($listed.Count -ne 1) {
-      Write-Err "section 17 fixture not detected as a candidate ($($listed.Count) listed) - the check cannot prove anything"; $fails++
-    } else {
-      Write-Err 'DANGEROUS: section 17 removed an artefact under --yes with no selection'; $fails++
-    }
-    # 12c - personal picker call site (sections 18/19)
-    $checks++
-    $pfile = Join-Path $fx 'personal\old.iso'
-    New-Item -ItemType Directory -Force -Path (Split-Path -Parent $pfile) | Out-Null
-    Set-Content -LiteralPath $pfile -Value 'x'
-    $row = [pscustomobject]@{ Path = $pfile; Bytes = [long]1; Idle = 400; Root = (Split-Path -Parent $pfile) }
-    & $mute
-    Invoke-PersonalPicker -Rows @($row) -Prompt 'fixture'
-    & $unmute
-    if (Test-Path -LiteralPath $pfile) { Write-Ok 'sections 18/19 under --yes with no console recycle nothing' } else { Write-Err 'DANGEROUS: the personal picker removed a file under --yes with no selection'; $fails++ }
-    # 12d - every Read-MultiSelect call in modules/ carries -NoAutoYes (AST, not text)
-    $checks++
-    $offenders = @()
-    foreach ($f in (Get-ChildItem -LiteralPath (Join-Path $Script:WS_ROOT 'modules') -Filter '*.ps1' -File)) {
-      if ($f.Name -like 'self_test_extra*') { continue }
-      $tokens = $null; $errors = $null
-      $ast = [System.Management.Automation.Language.Parser]::ParseFile($f.FullName, [ref]$tokens, [ref]$errors)
-      $calls = $ast.FindAll({ param($n) ($n -is [System.Management.Automation.Language.CommandAst]) -and ($n.GetCommandName() -eq 'Read-MultiSelect') }, $true)
-      foreach ($c in $calls) {
-        $has = $false
-        foreach ($el in $c.CommandElements) { if (($el -is [System.Management.Automation.Language.CommandParameterAst]) -and ($el.ParameterName -eq 'NoAutoYes')) { $has = $true } }
-        if (-not $has) { $offenders += "$($f.Name):$($c.Extent.StartLineNumber)" }
-      }
-    }
-    if ($offenders.Count -eq 0) { Write-Ok 'every Read-MultiSelect call in modules/ carries -NoAutoYes' } else { Write-Err "Read-MultiSelect without -NoAutoYes: $($offenders -join ', ')"; $fails++ }
-    $ws.Yes = $saved.Yes; $ws.Interactive = $saved.Interactive; $ws.ScanRoots = $saved.ScanRoots
-
-  } catch {
-    & $unmute
-    Write-Err "extra self-test crashed: $($_.Exception.Message)"; $fails++
-  } finally {
-    & $unmute
-    foreach ($k in @($saved.Keys)) { $ws[$k] = $saved[$k] }
-    try { if (Test-Path -LiteralPath $fx) { [IO.Directory]::Delete((Get-LongPath $fx), $true) } } catch { $null = $_ }
-  }
-  return [pscustomobject]@{ Checks = $checks; Fails = $fails }
-}
+# self_test_extra.ps1 - extra self-test groups: the --yes asymmetry and its call sites (RW-002), pure helpers
+# and fixtures for logic that is invisible when wrong (RW-030). Called by Invoke-SelfTest; verdict lines only.
+
+function Invoke-SelfTestExtra {
+  <# .SYNOPSIS Run groups [12]-[17]. Returns an object with Checks and Fails counts. #>
+  $ws = $Script:WS
+  $checks = 0; $fails = 0
+  $saved = @{ DryRun = $ws.DryRun; Yes = $ws.Yes; Interactive = $ws.Interactive; Quiet = $ws.Quiet; NoReport = $ws.NoReport
+    ScanRoots = $ws.ScanRoots; AllowOwnData = $ws.AllowOwnData; Mute = $ws.Mute; Days = $ws.Days
+    SelectQueue = $ws.SelectQueue; SelectPaths = $ws.SelectPaths; SelectActive = $ws.SelectActive
+    LastSelectionScripted = $ws.LastSelectionScripted; Candidates = $ws.Candidates; ScanTargets = $ws.ScanTargets
+    JsonMode = $ws.JsonMode; Notify = $ws.Notify }
+  $fx = Join-Path $ws.Home ('selftest-extra-' + [guid]::NewGuid().ToString('N'))
+  $mute = { $Script:WS.Mute = $true }
+  $unmute = { $Script:WS.Mute = $false }
+  $ancient = (Get-Date).AddDays(-400)
+  try {
+    New-Item -ItemType Directory -Force -Path $fx | Out-Null
+    $ws.AllowOwnData = $true
+    $ws.NoReport = $true
+    $ws.DryRun = $false
+    $ws.Days = 100
+
+    Write-Section '[12] Prompts: --yes never selects personal or project items'
+    # 12a - the helper asymmetry
+    $checks++
+    $ws.Yes = $true; $ws.Interactive = $false
+    & $mute
+    $none = @(Read-MultiSelect -Total 5 -NoAutoYes)
+    $all = @(Read-MultiSelect -Total 5)
+    & $unmute
+    if ($none.Count -eq 0 -and ($all -join ',') -eq '1,2,3,4,5') { Write-Ok 'Read-MultiSelect: -NoAutoYes selects nothing under --yes; without it every index' } else { Write-Err "Read-MultiSelect asymmetry broken: none=[$($none -join ',')] all=[$($all -join ',')]"; $fails++ }
+    # 12b - section 17 call site (a fixture project with an artefact idle 400 days)
+    $checks++
+    $proj = Join-Path $fx 'proj17\app'
+    New-Item -ItemType Directory -Force -Path (Join-Path $proj 'node_modules') | Out-Null
+    Set-Content -LiteralPath (Join-Path $proj 'package.json') -Value '{"name":"fixture"}'
+    Set-Content -LiteralPath (Join-Path $proj 'node_modules\x.txt') -Value 'x'
+    foreach ($ts in 'LastWriteTime', 'LastAccessTime', 'CreationTime') { Set-ItemProperty -LiteralPath (Join-Path $proj 'package.json') -Name $ts -Value $ancient }
+    $ws.ScanRoots = @((Join-Path $fx 'proj17'))
+    & $mute
+    # The fixture must be a real candidate, or the removal check below proves nothing.
+    $listed = @(Find-StaleArtefacts -Roots $ws.ScanRoots -Days 100)
+    Invoke-Section17
+    & $unmute
+    if ($listed.Count -eq 1 -and (Test-Path -LiteralPath (Join-Path $proj 'node_modules\x.txt'))) {
+      Write-Ok 'section 17 under --yes with no console lists the artefact and removes nothing'
+    } elseif ($listed.Count -ne 1) {
+      Write-Err "section 17 fixture not detected as a candidate ($($listed.Count) listed) - the check cannot prove anything"; $fails++
+    } else {
+      Write-Err 'DANGEROUS: section 17 removed an artefact under --yes with no selection'; $fails++
+    }
+    # 12c - personal picker call site (sections 18/19)
+    $checks++
+    $pfile = Join-Path $fx 'personal\old.iso'
+    New-Item -ItemType Directory -Force -Path (Split-Path -Parent $pfile) | Out-Null
+    Set-Content -LiteralPath $pfile -Value 'x'
+    $row = [pscustomobject]@{ Path = $pfile; Bytes = [long]1; Idle = 400; Root = (Split-Path -Parent $pfile) }
+    & $mute
+    Invoke-PersonalPicker -Rows @($row) -Prompt 'fixture'
+    & $unmute
+    if (Test-Path -LiteralPath $pfile) { Write-Ok 'sections 18/19 under --yes with no console recycle nothing' } else { Write-Err 'DANGEROUS: the personal picker removed a file under --yes with no selection'; $fails++ }
+    # 12d - every Read-MultiSelect call in modules/ carries -NoAutoYes (AST, not text)
+    $checks++
+    $offenders = @()
+    foreach ($f in (Get-ChildItem -LiteralPath (Join-Path $Script:WS_ROOT 'modules') -Filter '*.ps1' -File)) {
+      if ($f.Name -like 'self_test_extra*') { continue }
+      $tokens = $null; $errors = $null
+      $ast = [System.Management.Automation.Language.Parser]::ParseFile($f.FullName, [ref]$tokens, [ref]$errors)
+      $calls = $ast.FindAll({ param($n) ($n -is [System.Management.Automation.Language.CommandAst]) -and ($n.GetCommandName() -eq 'Read-MultiSelect') }, $true)
+      foreach ($c in $calls) {
+        $has = $false
+        foreach ($el in $c.CommandElements) { if (($el -is [System.Management.Automation.Language.CommandParameterAst]) -and ($el.ParameterName -eq 'NoAutoYes')) { $has = $true } }
+        if (-not $has) { $offenders += "$($f.Name):$($c.Extent.StartLineNumber)" }
+      }
+    }
+    if ($offenders.Count -eq 0) { Write-Ok 'every Read-MultiSelect call in modules/ carries -NoAutoYes' } else { Write-Err "Read-MultiSelect without -NoAutoYes: $($offenders -join ', ')"; $fails++ }
+    $ws.Yes = $saved.Yes; $ws.Interactive = $saved.Interactive; $ws.ScanRoots = $saved.ScanRoots
+
+    Write-Section '[13] Pure helpers: arguments, section lists, sizes, cache leaves, JSON summary'
+    # 13a - argument parser
+    $checks++
+    $keep = @{}
+    foreach ($k in 'Mode', 'BatchMode', 'OnlyList', 'ExportFmt', 'ExportId', 'Days', 'ScanRoots', 'ExcludePaths', 'RawArgs') { $keep[$k] = $ws[$k] }
+    $ok = $false
+    try {
+      $ws.RawArgs = @('--only=1,3', '--export', 'html', '2', '--days=30', '--scan-roots', 'a;b', '--exclude-path', 'x', '--exclude-path', 'y')
+      $ws.ExcludePaths = @()
+      Read-Arguments
+      $ok = ($ws.OnlyList -eq '1,3') -and ($ws.ExportFmt -eq 'html') -and ($ws.ExportId -eq '2') -and ($ws.Days -eq 30) -and (($ws.ScanRoots -join ',') -eq 'a,b') -and (($ws.ExcludePaths -join ',') -eq 'x,y')
+    } catch { $ok = $false }
+    $threw = $false
+    try { $ws.RawArgs = @('--days', 'x'); Read-Arguments } catch { $threw = $true }
+    foreach ($k in @($keep.Keys)) { $ws[$k] = $keep[$k] }
+    if ($ok -and $threw) { Write-Ok 'Read-Arguments: --only=, --export F ID, --days=, --scan-roots, repeated --exclude-path; --days x throws' } else { Write-Err "Read-Arguments wrong (values ok=$ok, bad --days threw=$threw)"; $fails++ }
+    # 13b - section id list
+    $checks++
+    & $mute
+    $ids = @(Get-SectionIdList '1,3,5-7,9-8,99,x')
+    & $unmute
+    if (($ids -join ',') -eq '1,3,5,6,7,8,9') { Write-Ok "Get-SectionIdList '1,3,5-7,9-8,99,x' -> $($ids -join ',')" } else { Write-Err "Get-SectionIdList wrong: $($ids -join ',')"; $fails++ }
+    # 13c - docker size text (decimal units)
+    $checks++
+    $sizes = @(@('2.891GB', 2891000000), @('12.5 MB', 12500000), @('20.48kB', 20480), @('0B', 0))
+    $badSizes = @($sizes | Where-Object { [math]::Abs((ConvertFrom-SizeText $_[0]) - [long]$_[1]) -gt 1 })
+    if ($badSizes.Count -eq 0) { Write-Ok 'ConvertFrom-SizeText: 2.891GB, 12.5 MB, 20.48kB, 0B' } else { Write-Err "ConvertFrom-SizeText wrong for: $(($badSizes | ForEach-Object { $_[0] }) -join ', ')"; $fails++ }
+    # 13d - cache leaf guard
+    $checks++
+    if ((Test-KnownCacheLeaf "$fx\User Data\Default\Cache") -and -not (Test-KnownCacheLeaf "$fx\User Data\Default\Local Storage") -and -not (Test-KnownCacheLeaf "$fx\User Data\Default")) { Write-Ok 'Test-KnownCacheLeaf: Cache yes; Local Storage and a profile root no' } else { Write-Err 'Test-KnownCacheLeaf is wrong'; $fails++ }
+    # 13e - JSON summary shape
+    $checks++
+    $json = (Get-JsonSummary) | ConvertTo-Json -Depth 5 -Compress
+    $back = $null
+    try { $back = $json | ConvertFrom-Json } catch { $back = $null }
+    $need = @('tool', 'version', 'mode', 'dry_run', 'freed_bytes', 'sections', 'refusals')
+    $missing = @($need | Where-Object { ($null -eq $back) -or ($null -eq $back.PSObject.Properties[$_]) })
+    if ($back -and $missing.Count -eq 0 -and -not $json.Contains("`n")) { Write-Ok 'Get-JsonSummary: one line, parses back, required keys present' } else { Write-Err "Get-JsonSummary wrong (missing: $($missing -join ','))"; $fails++ }
+
+    Write-Section '[14] Fixtures: superseded versions, Chromium layout, workspace storage, stale artefacts, report export'
+    # 14a - superseded Squirrel versions (version order, not string order)
+    $checks++
+    $sq = Join-Path $fx 'squirrel'
+    foreach ($v in 'app-1.0.0', 'app-1.9.0', 'app-1.10.0') { New-Item -ItemType Directory -Force -Path (Join-Path $sq $v) | Out-Null; Set-Content -LiteralPath (Join-Path $sq "$v\f.txt") -Value $v }
+    & $mute
+    $null = Remove-SupersededVersions -Root $sq -Prefix 'app-' -Label 'fixture'
+    & $unmute
+    if ((Test-Path -LiteralPath (Join-Path $sq 'app-1.10.0')) -and -not (Test-Path -LiteralPath (Join-Path $sq 'app-1.9.0')) -and -not (Test-Path -LiteralPath (Join-Path $sq 'app-1.0.0'))) { Write-Ok 'Remove-SupersededVersions keeps app-1.10.0 and removes 1.9.0 and 1.0.0' } else { Write-Err 'Remove-SupersededVersions kept the wrong folder'; $fails++ }
+    # 14b - Chromium layout: cache folders only, never profile data
+    $checks++
+    $ud = Join-Path $fx 'User Data'
+    foreach ($d in 'Default\Cache', 'Default\Local Storage', 'Profile 3\Code Cache') { New-Item -ItemType Directory -Force -Path (Join-Path $ud $d) | Out-Null }
+    $leaves = @(Get-ChromiumCacheDirs $ud | ForEach-Object { [IO.Path]::GetFileName($_) } | Sort-Object)
+    if (($leaves -join ',') -eq 'Cache,Code Cache') { Write-Ok 'Get-ChromiumCacheDirs returns the two cache folders and never Local Storage' } else { Write-Err "Get-ChromiumCacheDirs wrong: [$($leaves -join ',')]"; $fails++ }
+    # 14c - stale workspace storage: dry-run keeps both, real run removes only the dead entry
+    $checks++
+    $wsRoot = Join-Path $fx 'workspaceStorage'
+    $exists = Join-Path $fx 'exists'; New-Item -ItemType Directory -Force -Path $exists | Out-Null
+    foreach ($pair in @(@('a', $exists), @('b', (Join-Path $fx 'missing')))) {
+      $d = Join-Path $wsRoot $pair[0]; New-Item -ItemType Directory -Force -Path $d | Out-Null
+      $uri = 'file:///' + ([string]$pair[1] -replace '\\', '/')
+      Set-Content -LiteralPath (Join-Path $d 'workspace.json') -Value ('{"folder":"' + $uri + '"}')
+    }
+    & $mute
+    $ws.DryRun = $true
+    Remove-StaleWorkspaceStorage -Root $wsRoot -Label 'fixture'
+    $dryKept = (Test-Path -LiteralPath (Join-Path $wsRoot 'a')) -and (Test-Path -LiteralPath (Join-Path $wsRoot 'b'))
+    $ws.DryRun = $false
+    Remove-StaleWorkspaceStorage -Root $wsRoot -Label 'fixture'
+    & $unmute
+    if ($dryKept -and (Test-Path -LiteralPath (Join-Path $wsRoot 'a')) -and -not (Test-Path -LiteralPath (Join-Path $wsRoot 'b'))) { Write-Ok 'Remove-StaleWorkspaceStorage: dry-run keeps both; real run removes only the entry whose folder is gone' } else { Write-Err 'Remove-StaleWorkspaceStorage behaved wrongly'; $fails++ }
+    # 14d - stale artefacts: three orientations, so a missing gate in either direction shows up.
+    #   A  marker + source idle 400 days -> listed   (the finder works)
+    #   B  marker + fresh source         -> not listed (the idle gate works)
+    #   C  NO marker + source idle 400 days -> not listed (the project-marker test works)
+    # C must be OLD, or the marker test is never what excludes it and the check is half-oriented.
+    $checks++
+    $pr = Join-Path $fx 'projects'
+    foreach ($n in 'A', 'B', 'C') { New-Item -ItemType Directory -Force -Path (Join-Path $pr "$n\node_modules") | Out-Null; Set-Content -LiteralPath (Join-Path $pr "$n\node_modules\x.txt") -Value 'x' }
+    foreach ($n in 'A', 'B') { Set-Content -LiteralPath (Join-Path $pr "$n\package.json") -Value '{}' }
+    Set-Content -LiteralPath (Join-Path $pr 'A\main.js') -Value 'x'
+    Set-Content -LiteralPath (Join-Path $pr 'C\main.js') -Value 'x'
+    foreach ($f in (Join-Path $pr 'A\package.json'), (Join-Path $pr 'A\main.js'), (Join-Path $pr 'C\main.js')) {
+      foreach ($ts in 'LastWriteTime', 'LastAccessTime', 'CreationTime') { Set-ItemProperty -LiteralPath $f -Name $ts -Value $ancient }
+    }
+    $found = @(Find-StaleArtefacts -Roots @($pr) -Days 100)
+    if ($found.Count -eq 1 -and $found[0].Path -like '*\A\node_modules' -and $found[0].Age -ge 100) { Write-Ok 'Find-StaleArtefacts lists the idle project with a marker, and neither the fresh one nor the idle one without a marker' } else { Write-Err "Find-StaleArtefacts wrong: $($found.Count) result(s) [$(($found | ForEach-Object { $_.Path }) -join '; ')]"; $fails++ }
+    # 14e - report export smoke (schema-1 fixture; HTML must escape the title)
+    $checks++
+    $rep = Join-Path $fx 'report-fixture.json'
+    $fixture = '{"schema_version":1,"credits":{"tool":"windowsweep","tool_version":"0.0.0","tool_homepage":"https://github.com/aoneahsan/windowsweep","tool_license":"MIT License","author":{"name":"Ahsan Mahmood","email":"e","website":"w","linkedin":"l"}},"meta":{"started_at":"2026-09-03T10:00:00+05:00","finished_at":"2026-09-03T10:01:00+05:00","duration_seconds":60,"host":"h","user":"u","os":"Windows","powershell":"5.1","mode":"all","dry_run":false,"elevated":false,"developer_mode":true,"idle_days":100,"temp_days":3,"log_file":"C:\\x.log","launcher":"node","via_npx":false,"tool_version":"0.0.0"},"disk":{"before":[{"drive":"C:","size_bytes":100,"free_bytes":10}],"after":[{"drive":"C:","size_bytes":100,"free_bytes":20}]},"steps":[{"n":1,"section":1,"title":"Package <caches>","status":"ran","freed_bytes":4096,"note":""}],"totals":{"total_reclaimed_bytes":4096,"total_reclaimed_human":"4.0 KB","total_estimated_bytes":0,"total_estimated_human":"0 B","steps_run":1,"steps_skipped":0}}'
+    [IO.File]::WriteAllText($rep, $fixture, (New-Object System.Text.UTF8Encoding($false)))
+    & $mute
+    $md = Convert-ReportToMarkdown -Json $rep
+    $html = Convert-ReportToHtml -Json $rep
+    & $unmute
+    $mdText = ''; $htmlText = ''
+    if ($md -and (Test-Path -LiteralPath $md)) { $mdText = Get-Content -LiteralPath $md -Raw }
+    if ($html -and (Test-Path -LiteralPath $html)) { $htmlText = Get-Content -LiteralPath $html -Raw }
+    if ($mdText.Contains('4.0 KB') -and $mdText.Contains('windowsweep') -and $htmlText.Contains('4.0 KB') -and $htmlText.Contains('Package &lt;caches&gt;') -and -not $htmlText.Contains('Package <caches>')) { Write-Ok 'report export: Markdown and HTML written, totals present, HTML escapes the title' } else { Write-Err 'report export smoke failed'; $fails++ }
+
+    Write-Section '[15] Catalogue: every section is reachable, and the new ones declare what they promise'
+    # 15a - Get-AllTargets is driven by the catalogue, not by a literal 0..21 range
+    $checks++
+    # The ids each Get-TargetsNN really RETURNS - sections 0 and 21 own a function that yields no rows.
+    $declared = @()
+    foreach ($s in $Script:WS_SECTIONS) {
+      $fn = 'Get-Targets{0:00}' -f $s.Id
+      if (-not (Get-Command $fn -ErrorAction SilentlyContinue)) { continue }
+      if (@(& $fn).Count -gt 0) { $declared += $s.Id }
+    }
+    $reached = @(Get-AllTargets | ForEach-Object { $_.Section } | Sort-Object -Unique)
+    $missed = @($declared | Where-Object { $reached -notcontains $_ })
+    if ($declared.Count -gt 0 -and $missed.Count -eq 0) { Write-Ok "Get-AllTargets reaches all $($declared.Count) section(s) whose Get-TargetsNN returns rows" } else { Write-Err "Get-AllTargets misses section(s): $($missed -join ',')"; $fails++ }
+    # 15b - every catalogue row is well formed
+    $checks++
+    $bad = @()
+    $ids = New-Object System.Collections.Generic.HashSet[int]
+    foreach ($s in $Script:WS_SECTIONS) {
+      if (-not $ids.Add([int]$s.Id)) { $bad += "duplicate id $($s.Id)" }
+      if (-not (Get-Command $s.Fn -ErrorAction SilentlyContinue)) { $bad += "section $($s.Id): no function $($s.Fn)" }
+      if ($s.Tier -notin 'report', 'rebuilds', 'slow', 'recycle', 'permanent', 'config') { $bad += "section $($s.Id): unknown tier $($s.Tier)" }
+      if ($s.Batch -notin 'safe', 'optin', 'deep', 'interactive') { $bad += "section $($s.Id): unknown batch $($s.Batch)" }
+    }
+    if ($bad.Count -eq 0) { Write-Ok "$($Script:WS_SECTIONS.Count) catalogue rows: unique ids, existing functions, known tier and batch" } else { Write-Err ("catalogue is wrong: " + ($bad -join '; ')); $fails++ }
+    # 15c - section 23 derives its exclusions from the declared targets, so the list cannot drift
+    $checks++
+    $ex = Get-OrphanExclusions
+    $wantSegments = @()
+    foreach ($t in (Get-AllTargets)) {
+      foreach ($pre in @("$($Script:P.A)\", "$($Script:P.L)\")) {
+        if ([string]$t.Path -match [regex]::Escape($pre)) { $seg = (([string]$t.Path).Substring(([string]$t.Path).IndexOf($pre) + $pre.Length) -split '\\')[0]; if ($seg) { $wantSegments += $seg } }
+      }
+    }
+    $wantSegments = @($wantSegments | Sort-Object -Unique)
+    $lost = @($wantSegments | Where-Object { -not $ex.Contains($_) })
+    if ($wantSegments.Count -gt 0 -and $lost.Count -eq 0) { Write-Ok "section 23 excludes all $($wantSegments.Count) AppData folder(s) other sections already clean" } else { Write-Err "section 23 would offer a folder we clean elsewhere: $($lost -join ', ')"; $fails++ }
+    # 15d - the fail-closed gate, in two halves: an empty index WOULD call everything orphaned, and does not
+    $checks++
+    $emptyTokens = New-Object System.Collections.Generic.HashSet[string]([StringComparer]::Ordinal)
+    $emptyIndex = [pscustomobject]@{ Tokens = $emptyTokens; RegistryCount = 0; Rows = @() }
+    $wouldOrphan = Test-OrphanFolderName -Name 'Slack' -Index $emptyIndex
+    & $mute
+    $gated = @(Find-OrphanedAppData -Days 100 -Index $emptyIndex)
+    & $unmute
+    if ($wouldOrphan -and $gated.Count -eq 0) { Write-Ok 'section 23 fails closed: an unreadable registry means zero candidates, not everything' } else { Write-Err "section 23 fail-closed gate broken (predicate=$wouldOrphan candidates=$($gated.Count))"; $fails++ }
+    # 15e - section 22 declares nothing deletable: its roots are protected subtrees
+    $checks++
+    $notCmd = @(Get-Targets22 | Where-Object { $_.Kind -ne 'cmd' })
+    if ($notCmd.Count -eq 0) { Write-Ok 'section 22 declares no deletable target (audit only)' } else { Write-Err "section 22 declares a deletable target: $(($notCmd | ForEach-Object { $_.Path }) -join ', ')"; $fails++ }
+    # 15f - PowerShell variable names are case-insensitive: $p silently destroys the $P roots table
+    $checks++
+    $clash = @()
+    foreach ($f in (Get-ChildItem -LiteralPath (Join-Path $Script:WS_ROOT 'modules') -Filter '*.ps1' -File)) {
+      $tk = $null; $er = $null
+      $ast = [System.Management.Automation.Language.Parser]::ParseFile($f.FullName, [ref]$tk, [ref]$er)
+      foreach ($fn in $ast.FindAll({ param($n) $n -is [System.Management.Automation.Language.FunctionDefinitionAst] }, $true)) {
+        $sets = @($fn.FindAll({ param($n) ($n -is [System.Management.Automation.Language.AssignmentStatementAst]) -and ($n.Left -is [System.Management.Automation.Language.VariableExpressionAst]) -and ($n.Left.VariablePath.UserPath -eq 'P') }, $true))
+        $loops = @($fn.FindAll({ param($n) ($n -is [System.Management.Automation.Language.ForEachStatementAst]) -and ($n.Variable.VariablePath.UserPath -eq 'P') }, $true))
+        if (@($sets | Where-Object { $_.Right.Extent.Text -match '\$Script:P\b' }).Count -eq 0) { continue }
+        if ($sets.Count -gt 1 -or $loops.Count -gt 0) { $clash += "$($f.Name):$($fn.Name)" }
+      }
+    }
+    if ($clash.Count -eq 0) { Write-Ok 'no function reuses $p after taking $P from $Script:P (they are the same variable)' } else { Write-Err "case-insensitive `$P clash in: $($clash -join ', ')"; $fails++ }
+
+    Write-Section '[16] Scripted selection and the machine-readable contract'
+    $ws.SelectPaths = @(); $ws.SelectQueue = @(); $ws.Yes = $false; $ws.Interactive = $false
+    # 16a - --select answers one prompt, in order
+    $checks++
+    $ws.SelectQueue = @('1,3')
+    & $mute
+    $sel = @(Read-MultiSelect -Total 5 -NoAutoYes)
+    & $unmute
+    if (($sel -join ',') -eq '1,3' -and $ws.SelectQueue.Count -eq 0 -and $ws.LastSelectionScripted) { Write-Ok "--select '1,3' of 5 -> 1,3, consumed once, marked as a scripted choice" } else { Write-Err "--select wrong: [$($sel -join ',')] queueLeft=$($ws.SelectQueue.Count) scripted=$($ws.LastSelectionScripted)"; $fails++ }
+    # 16b - --select-file matches paths, and warns about a line that matches nothing here
+    $checks++
+    $cands = @("$fx\one.txt", "$fx\two.txt")
+    $ws.SelectPaths = @("$fx\TWO.TXT", "$fx\not-offered.txt")
+    & $mute
+    $sel2 = @(Read-MultiSelect -Total 2 -NoAutoYes -Candidates $cands)
+    & $unmute
+    $ws.SelectPaths = @()
+    if (($sel2 -join ',') -eq '2' -and $ws.LastSelectionScripted) { Write-Ok '--select-file matches case-insensitively and ignores a line no prompt offers' } else { Write-Err "--select-file wrong: [$($sel2 -join ',')]"; $fails++ }
+    # 16c - RW-002 still holds under the new code: --yes alone selects nothing and is not a scripted choice
+    $checks++
+    $ws.Yes = $true; $ws.SelectQueue = @(); $ws.SelectPaths = @()
+    & $mute
+    $sel3 = @(Read-MultiSelect -Total 4 -NoAutoYes -Candidates @('a', 'b', 'c', 'd'))
+    & $unmute
+    $stillOff = (-not $ws.LastSelectionScripted)
+    $ws.Yes = $false
+    if ($sel3.Count -eq 0 -and $stillOff) { Write-Ok '--yes alone still selects nothing and never counts as a scripted choice' } else { Write-Err "DANGEROUS: --yes selected [$($sel3 -join ',')] scripted=$(-not $stillOff)"; $fails++ }
+    # 16d - the --json document keeps a stable shape even when nothing was collected
+    $checks++
+    $ws.JsonMode = $true; $ws.Candidates = @(); $ws.ScanTargets = @()
+    $doc = (Get-JsonSummary) | ConvertTo-Json -Depth 6 -Compress
+    $back = $null
+    try { $back = $doc | ConvertFrom-Json } catch { $back = $null }
+    $ws.JsonMode = $false
+    $hasBoth = ($back -and $null -ne $back.PSObject.Properties['candidates'] -and $null -ne $back.PSObject.Properties['targets'])
+    if ($hasBoth -and -not $doc.Contains("`n")) { Write-Ok '--json carries candidates and targets as keys even when empty, on one line' } else { Write-Err 'the --json shape is missing candidates/targets or spans lines'; $fails++ }
+    # 16e - --list --json covers the whole catalogue
+    $checks++
+    $cat = (Get-CatalogueJson) | ConvertTo-Json -Depth 6 -Compress | ConvertFrom-Json
+    $catIds = @($cat.sections | ForEach-Object { [int]$_.id } | Sort-Object)
+    $realIds = @($Script:WS_SECTIONS | ForEach-Object { [int]$_.Id } | Sort-Object)
+    if (($catIds -join ',') -eq ($realIds -join ',') -and $cat.safe_batch.Count -gt 0 -and $cat.walkthrough.Count -gt 0) { Write-Ok "--list --json covers all $($catIds.Count) sections plus the batch and profile lists" } else { Write-Err '--list --json does not match the catalogue'; $fails++ }
+    # 16f - the progress line a GUI parses round-trips
+    $checks++
+    $pl = Get-MachineProgressLine -Section 7 -Stage 'end' -Status 'ran' -Freed 4096
+    $ok16f = ($pl -match "^##$Script:WS_NAME section=(\d+) event=(\w+) status=([\w-]+) freed_bytes=(\d+)$") -and ([int]$Matches[1] -eq 7) -and ($Matches[2] -eq 'end') -and ($Matches[3] -eq 'ran') -and ([long]$Matches[4] -eq 4096)
+    $plStart = Get-MachineProgressLine -Section 7 -Stage 'start'
+    if ($ok16f -and $plStart -eq "##$Script:WS_NAME section=7 event=start") { Write-Ok 'the ##windowsweep progress line parses back into section, event, status and freed_bytes' } else { Write-Err "progress line format wrong: $pl"; $fails++ }
+
+    Write-Section '[17] New helpers: global packages, startup state, artefact list'
+    # 17a - only roots that exist are reported
+    $checks++
+    $roots = @(Get-GlobalPackageRoots)
+    $ghost = @($roots | Where-Object { -not (Test-DirPresent $_.Root) })
+    if ($ghost.Count -eq 0) { Write-Ok "Get-GlobalPackageRoots returned $($roots.Count) root(s), all of them present" } else { Write-Err "Get-GlobalPackageRoots returned a missing root: $(($ghost | ForEach-Object { $_.Root }) -join ', ')"; $fails++ }
+    # 17b - three orientations: A the finder works, B the reference test works, C the idle gate works
+    $checks++
+    $names = New-Object System.Collections.Generic.HashSet[string]([StringComparer]::OrdinalIgnoreCase)
+    $null = $names.Add('kept-because-referenced')
+    $idx = [pscustomobject]@{ Names = $names; Bins = (New-Object System.Collections.Generic.HashSet[string]([StringComparer]::OrdinalIgnoreCase)); ScriptText = '' }
+    $pkgA = [pscustomobject]@{ Manager = 'npm'; Name = 'gone-stale'; Version = '1.0.0'; Path = ''; Bytes = [long]1; Idle = 400; Bins = @() }
+    $pkgB = [pscustomobject]@{ Manager = 'npm'; Name = 'kept-because-referenced'; Version = '1.0.0'; Path = ''; Bytes = [long]1; Idle = 400; Bins = @() }
+    $pkgC = [pscustomobject]@{ Manager = 'npm'; Name = 'kept-because-fresh'; Version = '1.0.0'; Path = ''; Bytes = [long]1; Idle = 1; Bins = @() }
+    $vA = (Get-GlobalPackageVerdict -Package $pkgA -Index $idx -Days 100).Verdict
+    $vB = (Get-GlobalPackageVerdict -Package $pkgB -Index $idx -Days 100).Verdict
+    $vC = (Get-GlobalPackageVerdict -Package $pkgC -Index $idx -Days 100).Verdict
+    if ($vA -eq 'candidate' -and $vB -eq 'keep' -and $vC -eq 'keep') { Write-Ok 'global verdict: idle+unreferenced is a candidate; referenced and fresh are both kept' } else { Write-Err "global verdict wrong: A=$vA B=$vB C=$vC"; $fails++ }
+    # 17c - startup state comes from Explorer's disable timestamp, not from a guessed first byte
+    $checks++
+    $disabledVal = [byte[]](1, 0, 0, 0, 39, 190, 225, 241, 9, 168, 220, 1)
+    $enabledVal = [byte[]](1, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
+    $markerVal = [byte[]](3, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0)
+    $shortVal = [byte[]](1, 0, 0, 0)
+    $s1 = Get-StartupApprovedState -Value $disabledVal
+    $s2 = Get-StartupApprovedState -Value $enabledVal
+    $s3 = Get-StartupApprovedState -Value $markerVal
+    $s4 = Get-StartupApprovedState -Value $shortVal
+    if ($s1 -eq 'disabled' -and $s2 -eq 'enabled' -and $s3 -eq 'disabled' -and $s4 -eq 'unknown') { Write-Ok 'startup state: a disable timestamp means disabled, a zero tail means enabled, 03 still counts, a short value is unknown' } else { Write-Err "startup state wrong: stamped=$s1 zeroTail=$s2 marker03=$s3 short=$s4"; $fails++ }
+    # 17d - the artefact list gained the seven additions and still refuses the three that hold real work
+    $checks++
+    $added = @('.nx', '.mypy_cache', '.ruff_cache', '.tox', '.eggs', '.output', '.serverless')
+    $forbidden = @('.venv', 'venv', '.terraform')
+    $missingAdd = @($added | Where-Object { $Script:WS_ARTEFACT_DIRS -notcontains $_ })
+    $present = @($forbidden | Where-Object { $Script:WS_ARTEFACT_DIRS -contains $_ })
+    if ($missingAdd.Count -eq 0 -and $present.Count -eq 0) { Write-Ok 'artefact list has the seven additions and none of .venv, venv, .terraform' } else { Write-Err "artefact list wrong (missing: $($missingAdd -join ',') / forbidden present: $($present -join ','))"; $fails++ }
+    # 17e - .cache is an artefact only beside a Gatsby or Parcel marker; the normal rule must still work
+    $checks++
+    $mk = Join-Path $fx 'marked'
+    foreach ($n in 'gatsby', 'plain', 'normal') { New-Item -ItemType Directory -Force -Path (Join-Path $mk "$n\.cache") | Out-Null; Set-Content -LiteralPath (Join-Path $mk "$n\.cache\f.txt") -Value 'x' }
+    New-Item -ItemType Directory -Force -Path (Join-Path $mk 'normal\node_modules') | Out-Null
+    Set-Content -LiteralPath (Join-Path $mk 'normal\node_modules\f.txt') -Value 'x'
+    Set-Content -LiteralPath (Join-Path $mk 'gatsby\gatsby-config.js') -Value 'module.exports = {}'
+    foreach ($n in 'gatsby', 'plain', 'normal') { Set-Content -LiteralPath (Join-Path $mk "$n\package.json") -Value '{}' }
+    # EVERY file ages, not just the markers: an unmarked .cache counts as source, so a fresh file inside
+    # plain\.cache or normal\.cache would make its project look active and the check would prove nothing.
+    foreach ($f in (Get-ChildItem -LiteralPath $mk -Recurse -File -Force)) {
+      foreach ($ts in 'LastWriteTime', 'LastAccessTime', 'CreationTime') { Set-ItemProperty -LiteralPath $f.FullName -Name $ts -Value $ancient }
+    }
+    & $mute
+    $hits = @(Find-StaleArtefacts -Roots @($mk) -Days 100 | ForEach-Object { $_.Path })
+    & $unmute
+    $gotGatsbyCache = @($hits | Where-Object { $_ -like "*\gatsby\.cache" }).Count -eq 1
+    $noPlainCache = @($hits | Where-Object { $_ -like "*\plain\.cache" }).Count -eq 0
+    $gotNodeModules = @($hits | Where-Object { $_ -like "*\normal\node_modules" }).Count -eq 1
+    if ($gotGatsbyCache -and $noPlainCache -and $gotNodeModules) { Write-Ok '.cache is an artefact only beside a Gatsby/Parcel marker, and node_modules is unaffected' } else { Write-Err "marked-artefact rule wrong: gatsby=$gotGatsbyCache plainExcluded=$noPlainCache nodeModules=$gotNodeModules"; $fails++ }
+
+
+    Write-Section '[18] The 1.2.0 contract additions: newest_write_utc, protected, --exclude-path'
+
+    # 18a - targets[].newest_write_utc reports the newest timestamp under a target, in ISO 8601 UTC.
+    # A fixture with a KNOWN mtime, so the assertion is about the value and not merely about the shape.
+    $checks++
+    $nw = Join-Path $fx 'newest'
+    New-Item -ItemType Directory -Force -Path (Join-Path $nw 'deep') | Out-Null
+    Set-Content -LiteralPath (Join-Path $nw 'old.txt') -Value 'x'
+    Set-Content -LiteralPath (Join-Path $nw 'deep\\new.txt') -Value 'x'
+    $stampOld = [datetime]::new(2021, 3, 4, 5, 6, 7, [DateTimeKind]::Utc)
+    $stampNew = [datetime]::new(2023, 11, 12, 13, 14, 15, [DateTimeKind]::Utc)
+    foreach ($ts in 'LastWriteTime', 'LastAccessTime', 'CreationTime') {
+      Set-ItemProperty -LiteralPath (Join-Path $nw 'old.txt') -Name $ts -Value $stampOld.ToLocalTime()
+      Set-ItemProperty -LiteralPath (Join-Path $nw 'deep\\new.txt') -Name $ts -Value $stampNew.ToLocalTime()
+    }
+    $st = Get-DirectoryStats $nw
+    $iso = Format-Utc8601 $st.Newest
+    # The DEEPER file is the newer one, so a walk that stopped at the top level would report the older stamp
+    # and still look like a working timestamp - which is the failure this fixture is shaped to catch.
+    $wantIso = '2023-11-12T13:14:15Z'
+    $nullIso = Format-Utc8601 ([datetime]::MinValue)
+    if ($iso -eq $wantIso -and $null -eq $nullIso) { Write-Ok "newest_write_utc reads the deepest newest file ($iso) and is null for an empty tree" } else { Write-Err "newest_write_utc wrong: got $iso want $wantIso; MinValue gave '$nullIso'"; $fails++ }
+
+    # 18b - --list --json publishes the SAME protected lists the console prints, from one constant.
+    $checks++
+    $cat = Get-CatalogueJson
+    $prot = $cat.protected
+    $sameSub = ($null -ne $prot) -and ((@($prot.subtrees) -join '|') -eq (@($Script:WS_PROTECT.Subtrees) -join '|'))
+    $sameCat = ($null -ne $prot) -and ((@($prot.categories) -join '|') -eq (@($Script:WS_PROTECT_CATEGORIES) -join '|'))
+    $nonEmpty = ($null -ne $prot) -and (@($prot.subtrees).Count -gt 0) -and (@($prot.categories).Count -gt 0)
+    if ($sameSub -and $sameCat -and $nonEmpty) { Write-Ok "--list --json publishes the same $(@($prot.subtrees).Count) protected subtrees and $(@($prot.categories).Count) categories the console prints" } else { Write-Err "--list --json protected does not match the printed lists (subtrees=$sameSub categories=$sameCat nonEmpty=$nonEmpty)"; $fails++ }
+
+    # 18c - an excluded path SURVIVES a real fixture run while its sibling goes. Not a dry-run: the whole
+    # point is that the chokepoint refuses the deletion rather than merely declining to print it.
+    $checks++
+    $exRoot = Join-Path $fx 'excl'
+    $keep = Join-Path $exRoot 'keep-me'
+    $go = Join-Path $exRoot 'go-away'
+    foreach ($d in $keep, $go) { New-Item -ItemType Directory -Force -Path $d | Out-Null; Set-Content -LiteralPath (Join-Path $d 'f.txt') -Value 'xxxx' }
+    $savedEx = $ws.ExcludePaths
+    $savedExcluded = $ws.Excluded
+    $savedTable = $Script:WS_EXCLUDE
+    try {
+      $ws.ExcludePaths = @($keep)
+      $ws.Excluded = @()
+      Initialize-Exclusions
+      & $mute
+      $rKeep = Remove-PathSafe -Path $keep -Within $exRoot
+      $rGo = Remove-PathSafe -Path $go -Within $exRoot
+      & $unmute
+      $keptOnDisk = Test-Path -LiteralPath $keep
+      # A CHILD, not just the excluded path itself: testing only the exact path let a prefix bug
+      # (a doubled backslash) pass this check while nothing inside an excluded folder was refused.
+      $childReason = Get-ProtectionReason (Join-Path $keep 'f.txt')
+      $childRefused = ($childReason -like 'excluded: *')
+      $goneFromDisk = -not (Test-Path -LiteralPath $go)
+      $reported = (@($ws.Excluded).Count -eq 1)
+      $reasonOk = $rKeep.Reason -like 'excluded: *'
+      if ($keptOnDisk -and $goneFromDisk -and $rGo.Removed -and $reported -and $reasonOk -and $childRefused) { Write-Ok "--exclude-path is honoured by the chokepoint for every section: the excluded folder AND a file inside it are both refused, its sibling is not, and it is reported once" } else { Write-Err "--exclude-path not honoured (kept=$keptOnDisk siblingGone=$goneFromDisk reported=$reported childRefused=$childRefused reason='$($rKeep.Reason)')"; $fails++ }
+    } finally {
+      $ws.ExcludePaths = $savedEx
+      $ws.Excluded = $savedExcluded
+      $Script:WS_EXCLUDE = $savedTable
+    }
+
+
+    # 18d - the rehearsal and the run agree about an EXCLUDED file inside a pruned cache.
+    # Remove-StaleFiles used to apply Get-ProtectionReason only in its real-run loop, so a dry-run
+    # counted files the run then skipped and the estimate came out higher than the run - for exactly
+    # the files a person most wants the two numbers to agree about.
+    $checks++
+    $pr = Join-Path $fx 'prune'
+    $prKeep = Join-Path $pr 'keep'
+    New-Item -ItemType Directory -Force -Path $prKeep | Out-Null
+    $goFile = Join-Path $pr 'go.bin'
+    $keepFile = Join-Path $prKeep 'keep.bin'
+    Set-Content -LiteralPath $goFile -Value ('x' * 400)
+    Set-Content -LiteralPath $keepFile -Value ('y' * 400)
+    foreach ($f in @($goFile, $keepFile)) {
+      foreach ($ts in 'LastWriteTime', 'LastAccessTime', 'CreationTime') {
+        Set-ItemProperty -LiteralPath $f -Name $ts -Value $ancient
+      }
+    }
+    $savedEx2 = $ws.ExcludePaths
+    $savedTbl2 = $Script:WS_EXCLUDE
+    $savedDry = $ws.DryRun
+    $savedFreed = $ws.TotalFreed
+    $savedEst = $ws.TotalEstimated
+    try {
+      $ws.ExcludePaths = @($prKeep)
+      Initialize-Exclusions
+      & $mute
+      $ws.DryRun = $true
+      $dry = Remove-StaleFiles -Root $pr -Within $pr -Days 1
+      $ws.DryRun = $false
+      $real = Remove-StaleFiles -Root $pr -Within $pr -Days 1
+      & $unmute
+      $agree = ($dry.Files -eq $real.Files) -and ($dry.Freed -eq $real.Freed)
+      $keptOnDisk2 = Test-Path -LiteralPath $keepFile
+      $goneFromDisk2 = -not (Test-Path -LiteralPath $goFile)
+      if ($agree -and $keptOnDisk2 -and $goneFromDisk2 -and $dry.Files -eq 1) {
+        Write-Ok "a dry-run and a real prune agree exactly when a file is excluded: both report $($dry.Files) file, the excluded one survives"
+      } else {
+        Write-Err "rehearsal and run disagree (dryFiles=$($dry.Files) realFiles=$($real.Files) dryBytes=$($dry.Freed) realBytes=$($real.Freed) kept=$keptOnDisk2 siblingGone=$goneFromDisk2)"; $fails++
+      }
+    } finally {
+      $ws.ExcludePaths = $savedEx2
+      $Script:WS_EXCLUDE = $savedTbl2
+      $ws.DryRun = $savedDry
+      $ws.TotalFreed = $savedFreed
+      $ws.TotalEstimated = $savedEst
+    }
+
+
+    # 18e - a read-only scan REPORTS the developer answer it was given, and invents one when it was not.
+    # --scan parsed --developer / --not-developer into DeveloperFlag and then never read it, because
+    # Resolve-DeveloperMode ran only for walkthrough, menu, all and only. So section 0 printed
+    # "Developer mode: not decided yet" whatever you passed, and --json returned developer: null. The
+    # desktop window sends those flags to --scan and could not read back the setting it had just sent.
+    # Three orientations, because two of them would pass on the broken code by accident:
+    #   A the flag is honoured,  B a saved answer is honoured,  C neither exists -> still undecided.
+    $checks++
+    $savedFlag = $ws.DeveloperFlag
+    $savedDev = $ws.Developer
+    $savedSrc = $ws.DeveloperSource
+    $savedCfg = $ws.Config
+    $savedInter = $ws.Interactive
+    $savedForget = $ws.ForgetDeveloper
+    try {
+      $ws.Interactive = $true          # -ReadOnly must not ask even here; a prompt would hang the suite
+      $ws.ForgetDeveloper = $false
+
+      # A - the flag wins, and --not-developer is the case that was silently dropped
+      $ws.Config = @{}
+      $ws.DeveloperFlag = $false
+      $ws.Developer = $null
+      $ws.DeveloperSource = $null
+      & $mute
+      Resolve-DeveloperMode -ReadOnly
+      & $unmute
+      $aOk = ($ws.Developer -eq $false) -and ($ws.DeveloperSource -eq 'flag')
+
+      # B - no flag, but a saved answer exists
+      $ws.Config = @{ developer = $true }
+      $ws.DeveloperFlag = $null
+      $ws.Developer = $null
+      $ws.DeveloperSource = $null
+      & $mute
+      Resolve-DeveloperMode -ReadOnly
+      & $unmute
+      $bOk = ($ws.Developer -eq $true) -and ($ws.DeveloperSource -eq 'config')
+
+      # C - neither: a read-only mode must NOT invent a decision, and must not write config.json
+      $ws.Config = @{}
+      $ws.DeveloperFlag = $null
+      $ws.Developer = $null
+      $ws.DeveloperSource = $null
+      & $mute
+      Resolve-DeveloperMode -ReadOnly
+      & $unmute
+      $cOk = ($null -eq $ws.Developer) -and ($null -eq $ws.Config.developer)
+
+      if ($aOk -and $bOk -and $cOk) {
+        Write-Ok "a read-only scan honours --not-developer (flag) and a saved answer (config), and stays undecided when it has neither"
+      } else {
+        Write-Err "read-only developer resolution wrong (flagHonoured=$aOk savedHonoured=$bOk stillUndecided=$cOk)"; $fails++
+      }
+    } finally {
+      $ws.DeveloperFlag = $savedFlag
+      $ws.Developer = $savedDev
+      $ws.DeveloperSource = $savedSrc
+      $ws.Config = $savedCfg
+      $ws.Interactive = $savedInter
+      $ws.ForgetDeveloper = $savedForget
+    }
+
+  } catch {
+    & $unmute
+    Write-Err "extra self-test crashed: $($_.Exception.Message)"; $fails++
+  } finally {
+    & $unmute
+    foreach ($k in @($saved.Keys)) { $ws[$k] = $saved[$k] }
+    try { if (Test-Path -LiteralPath $fx) { [IO.Directory]::Delete((Get-LongPath $fx), $true) } } catch { $null = $_ }
+  }
+  return [pscustomobject]@{ Checks = $checks; Fails = $fails }
+}