windowsweep 1.1.0 → 1.2.0

package/modules/health.ps1

@@ -1,101 +1,101 @@
-# health.ps1 - section 0: read-only system health report.
-
-function Get-Targets00 { return @() }
-
-function Get-HiberfilInfo {
-  $p = Join-Path $Script:P.SD '\hiberfil.sys'
-  $size = [long]0
-  # Get-Item cannot open the hibernation file without elevation, but FileInfo reads its size from the directory entry.
-  try { $f = New-Object IO.FileInfo($p); if ($f.Exists) { $size = [long]$f.Length } } catch { $size = 0 }
-  $state = 'unknown'
-  try {
-    $a = (& powercfg.exe /a 2>$null) -join ' '
-    if ($a -match 'Hibernate' -and $a -notmatch 'Hibernation has not been enabled') { $state = 'available' } else { $state = 'off' }
-  } catch { $null = $_ }
-  return [pscustomobject]@{ Path = $p; Bytes = $size; State = $state }
-}
-
-function Get-DiskImageFiles {
-  <# .SYNOPSIS Docker Desktop / WSL virtual disks (they grow but never shrink on their own). #>
-  $L = $Script:P.L
-  $out = @()
-  foreach ($root in @((Join-Path $L 'Docker\wsl'), (Join-Path $L 'Packages'))) {
-    if (-not (Test-DirPresent $root)) { continue }
-    try { $out += Get-ChildItem -LiteralPath $root -Recurse -Filter '*.vhdx' -File -Depth 4 -ErrorAction SilentlyContinue } catch { $null = $_ }
-  }
-  return $out
-}
-
-function Get-BlockingApps {
-  <# .SYNOPSIS Running apps whose caches this tool skips while they run. #>
-  $map = [ordered]@{ chrome = 'Chrome'; msedge = 'Edge'; brave = 'Brave'; firefox = 'Firefox'; vivaldi = 'Vivaldi'; opera = 'Opera'; Code = 'VS Code'; Cursor = 'Cursor'; Windsurf = 'Windsurf'; Discord = 'Discord'; slack = 'Slack'; 'ms-teams' = 'Teams'; Zoom = 'Zoom'; Spotify = 'Spotify'; Postman = 'Postman'; Figma = 'Figma'; Notion = 'Notion' }
-  $out = @()
-  foreach ($k in $map.Keys) { if (Test-ProcessRunning @($k)) { $out += $map[$k] } }
-  return $out
-}
-
-function Invoke-Section00 {
-  $ws = $Script:WS
-  Write-SectionIntro @('Read-only snapshot of the machine: nothing is changed here.')
-  try {
-    $os = Get-CimInstance Win32_OperatingSystem -ErrorAction Stop
-    Write-Kv 'Windows:' "$($os.Caption) $($os.Version) (build $($os.BuildNumber))"
-    $up = (Get-Date) - $os.LastBootUpTime
-    Write-Kv 'Uptime:' ("{0}d {1}h {2}m" -f $up.Days, $up.Hours, $up.Minutes)
-    Write-Kv 'RAM:' ("{0} total, {1} free" -f (Format-Bytes ($os.TotalVisibleMemorySize * 1KB)), (Format-Bytes ($os.FreePhysicalMemory * 1KB)))
-  } catch { Write-Kv 'Windows:' $ws.OsCaption }
-  Write-Kv 'PowerShell:' "$($PSVersionTable.PSVersion) ($($PSVersionTable.PSEdition))"
-  $adm = 'no'
-  if ($ws.IsAdmin) { $adm = 'yes' } elseif (Test-CanElevate) { $adm = 'no (your account can elevate: --elevate)' } else { $adm = 'no (standard user; admin sections need an administrator)' }
-  Write-Kv 'Elevated:' $adm
-  $dev = 'not decided yet'
-  if ($null -ne $ws.Developer) { if ($ws.Developer) { $dev = "on ($($ws.DeveloperSource))" } else { $dev = "off ($($ws.DeveloperSource))" } }
-  Write-Kv 'Developer mode:' $dev
-  $hints = @(Get-ToolchainHints)
-  if ($hints.Count -gt 0) { Write-Kv 'Dev tooling found:' ($hints -join ', ') }
-  Write-UiLine '' 'Gray'
-  Show-DriveTable
-  try {
-    $sys = New-Object IO.DriveInfo($Script:P.SD)
-    $pct = 100.0 * $sys.AvailableFreeSpace / $sys.TotalSize
-    if ($sys.AvailableFreeSpace -lt 10GB -or $pct -lt 10) { Write-Warn ("system drive has only {0} free ({1:N1}%) - Windows slows down badly below ~10%; this run should help" -f (Format-Bytes $sys.AvailableFreeSpace), $pct) }
-  } catch { $null = $_ }
-  Write-UiLine '' 'Gray'
-  $h = Get-HiberfilInfo
-  if ($h.Bytes -gt 0) { Write-Kv 'hiberfil.sys:' ("{0} (hibernation {1}) - section 15 can shrink or remove it (admin)" -f (Format-Bytes $h.Bytes), $h.State) } else { Write-Kv 'hiberfil.sys:' 'absent (hibernation off)' }
-  try {
-    foreach ($pf in (Get-CimInstance Win32_PageFileUsage -ErrorAction Stop)) { Write-Kv 'pagefile:' ("{0}  {1} allocated" -f $pf.Name, (Format-Bytes ($pf.AllocatedBaseSize * 1MB))) }
-  } catch { $null = $_ }
-  foreach ($img in (Get-DiskImageFiles)) { Write-Kv 'disk image:' ("{0}  {1} (section 20 compacts it, admin)" -f $img.FullName, (Format-Bytes $img.Length)) }
-  if (Test-CommandPresent 'wsl.exe') {
-    try {
-      $raw = & wsl.exe --list --verbose 2>$null
-      $txt = (($raw | ForEach-Object { [string]$_ }) -join "`n") -replace "`0", ''
-      $lines = @($txt -split "`n" | ForEach-Object { $_.Trim() } | Where-Object { $_ -and $_ -notmatch '^NAME' })
-      if ($lines.Count -gt 0) { Write-Kv 'WSL distros:' (($lines | ForEach-Object { ($_ -replace '\s+', ' ') }) -join ' | ') }
-    } catch { $null = $_ }
-  }
-  Write-UiLine '' 'Gray'
-  try { $n = @(Get-CimInstance Win32_StartupCommand -ErrorAction Stop).Count; Write-Kv 'Startup items:' "$n (section 25 lists them all; change them in Task Manager > Startup - this tool never does)" } catch { $null = $_ }
-  try {
-    $ss = (Get-ItemProperty 'HKCU:\Software\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy' -ErrorAction Stop).'01'
-    $ssText = 'off'
-    if ($ss -eq 1) { $ssText = 'on' }
-    Write-Kv 'Storage Sense:' $ssText
-  } catch { $null = $_ }
-  try {
-    $la = (& fsutil.exe behavior query disablelastaccess 2>$null) -join ' '
-    if ($la -match '=\s*(\d)') {
-      $v = [int]$Matches[1]
-      $laText = 'disabled - idle age uses write/creation times (the safe reading)'
-      if ($v -eq 1 -or $v -eq 3) { $laText = 'enabled - last-access times are reliable' }
-      Write-Kv 'Last-access tracking:' $laText
-    }
-  } catch { $null = $_ }
-  $blocking = @(Get-BlockingApps)
-  if ($blocking.Count -gt 0) {
-    Write-UiLine '' 'Gray'
-    Write-Warn ("running now, their caches will be skipped until closed: " + ($blocking -join ', '))
-  }
-  Add-Freed 0
-}
+# health.ps1 - section 0: read-only system health report.
+
+function Get-Targets00 { return @() }
+
+function Get-HiberfilInfo {
+  $p = Join-Path $Script:P.SD '\hiberfil.sys'
+  $size = [long]0
+  # Get-Item cannot open the hibernation file without elevation, but FileInfo reads its size from the directory entry.
+  try { $f = New-Object IO.FileInfo($p); if ($f.Exists) { $size = [long]$f.Length } } catch { $size = 0 }
+  $state = 'unknown'
+  try {
+    $a = (& powercfg.exe /a 2>$null) -join ' '
+    if ($a -match 'Hibernate' -and $a -notmatch 'Hibernation has not been enabled') { $state = 'available' } else { $state = 'off' }
+  } catch { $null = $_ }
+  return [pscustomobject]@{ Path = $p; Bytes = $size; State = $state }
+}
+
+function Get-DiskImageFiles {
+  <# .SYNOPSIS Docker Desktop / WSL virtual disks (they grow but never shrink on their own). #>
+  $L = $Script:P.L
+  $out = @()
+  foreach ($root in @((Join-Path $L 'Docker\wsl'), (Join-Path $L 'Packages'))) {
+    if (-not (Test-DirPresent $root)) { continue }
+    try { $out += Get-ChildItem -LiteralPath $root -Recurse -Filter '*.vhdx' -File -Depth 4 -ErrorAction SilentlyContinue } catch { $null = $_ }
+  }
+  return $out
+}
+
+function Get-BlockingApps {
+  <# .SYNOPSIS Running apps whose caches this tool skips while they run. #>
+  $map = [ordered]@{ chrome = 'Chrome'; msedge = 'Edge'; brave = 'Brave'; firefox = 'Firefox'; vivaldi = 'Vivaldi'; opera = 'Opera'; Code = 'VS Code'; Cursor = 'Cursor'; Windsurf = 'Windsurf'; Discord = 'Discord'; slack = 'Slack'; 'ms-teams' = 'Teams'; Zoom = 'Zoom'; Spotify = 'Spotify'; Postman = 'Postman'; Figma = 'Figma'; Notion = 'Notion' }
+  $out = @()
+  foreach ($k in $map.Keys) { if (Test-ProcessRunning @($k)) { $out += $map[$k] } }
+  return $out
+}
+
+function Invoke-Section00 {
+  $ws = $Script:WS
+  Write-SectionIntro @('Read-only snapshot of the machine: nothing is changed here.')
+  try {
+    $os = Get-CimInstance Win32_OperatingSystem -ErrorAction Stop
+    Write-Kv 'Windows:' "$($os.Caption) $($os.Version) (build $($os.BuildNumber))"
+    $up = (Get-Date) - $os.LastBootUpTime
+    Write-Kv 'Uptime:' ("{0}d {1}h {2}m" -f $up.Days, $up.Hours, $up.Minutes)
+    Write-Kv 'RAM:' ("{0} total, {1} free" -f (Format-Bytes ($os.TotalVisibleMemorySize * 1KB)), (Format-Bytes ($os.FreePhysicalMemory * 1KB)))
+  } catch { Write-Kv 'Windows:' $ws.OsCaption }
+  Write-Kv 'PowerShell:' "$($PSVersionTable.PSVersion) ($($PSVersionTable.PSEdition))"
+  $adm = 'no'
+  if ($ws.IsAdmin) { $adm = 'yes' } elseif (Test-CanElevate) { $adm = 'no (your account can elevate: --elevate)' } else { $adm = 'no (standard user; admin sections need an administrator)' }
+  Write-Kv 'Elevated:' $adm
+  $dev = 'not decided yet'
+  if ($null -ne $ws.Developer) { if ($ws.Developer) { $dev = "on ($($ws.DeveloperSource))" } else { $dev = "off ($($ws.DeveloperSource))" } }
+  Write-Kv 'Developer mode:' $dev
+  $hints = @(Get-ToolchainHints)
+  if ($hints.Count -gt 0) { Write-Kv 'Dev tooling found:' ($hints -join ', ') }
+  Write-UiLine '' 'Gray'
+  Show-DriveTable
+  try {
+    $sys = New-Object IO.DriveInfo($Script:P.SD)
+    $pct = 100.0 * $sys.AvailableFreeSpace / $sys.TotalSize
+    if ($sys.AvailableFreeSpace -lt 10GB -or $pct -lt 10) { Write-Warn ("system drive has only {0} free ({1:N1}%) - the sections below list what can be reclaimed" -f (Format-Bytes $sys.AvailableFreeSpace), $pct) }
+  } catch { $null = $_ }
+  Write-UiLine '' 'Gray'
+  $h = Get-HiberfilInfo
+  if ($h.Bytes -gt 0) { Write-Kv 'hiberfil.sys:' ("{0} (hibernation {1}) - section 15 can shrink or remove it (admin)" -f (Format-Bytes $h.Bytes), $h.State) } else { Write-Kv 'hiberfil.sys:' 'absent (hibernation off)' }
+  try {
+    foreach ($pf in (Get-CimInstance Win32_PageFileUsage -ErrorAction Stop)) { Write-Kv 'pagefile:' ("{0}  {1} allocated" -f $pf.Name, (Format-Bytes ($pf.AllocatedBaseSize * 1MB))) }
+  } catch { $null = $_ }
+  foreach ($img in (Get-DiskImageFiles)) { Write-Kv 'disk image:' ("{0}  {1} (section 20 compacts it, admin)" -f $img.FullName, (Format-Bytes $img.Length)) }
+  if (Test-CommandPresent 'wsl.exe') {
+    try {
+      $raw = & wsl.exe --list --verbose 2>$null
+      $txt = (($raw | ForEach-Object { [string]$_ }) -join "`n") -replace "`0", ''
+      $lines = @($txt -split "`n" | ForEach-Object { $_.Trim() } | Where-Object { $_ -and $_ -notmatch '^NAME' })
+      if ($lines.Count -gt 0) { Write-Kv 'WSL distros:' (($lines | ForEach-Object { ($_ -replace '\s+', ' ') }) -join ' | ') }
+    } catch { $null = $_ }
+  }
+  Write-UiLine '' 'Gray'
+  try { $n = @(Get-CimInstance Win32_StartupCommand -ErrorAction Stop).Count; Write-Kv 'Startup items:' "$n (section 25 lists them all; change them in Task Manager > Startup - this tool never does)" } catch { $null = $_ }
+  try {
+    $ss = (Get-ItemProperty 'HKCU:\Software\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy' -ErrorAction Stop).'01'
+    $ssText = 'off'
+    if ($ss -eq 1) { $ssText = 'on' }
+    Write-Kv 'Storage Sense:' $ssText
+  } catch { $null = $_ }
+  try {
+    $la = (& fsutil.exe behavior query disablelastaccess 2>$null) -join ' '
+    if ($la -match '=\s*(\d)') {
+      $v = [int]$Matches[1]
+      $laText = 'disabled - idle age uses write/creation times (keeps more)'
+      if ($v -eq 1 -or $v -eq 3) { $laText = 'enabled - last-access times are reliable' }
+      Write-Kv 'Last-access tracking:' $laText
+    }
+  } catch { $null = $_ }
+  $blocking = @(Get-BlockingApps)
+  if ($blocking.Count -gt 0) {
+    Write-UiLine '' 'Gray'
+    Write-Warn ("running now, their caches will be skipped until closed: " + ($blocking -join ', '))
+  }
+  Add-Freed 0
+}

package/modules/installed_programs.ps1

@@ -1,118 +1,118 @@
-# installed_programs.ps1 - section 24: installed programs nothing has modified for N+ days. Report only.
-#
-# It NEVER runs an uninstaller, in any mode. Windows keeps no reliable "last launched" record, so the number
-# reported is "not modified", derived from the files under InstallLocation - never described as "unused".
-
-function Get-WingetIdMap {
-  <# .SYNOPSIS One winget call, parsed once: normalised program name -> package id. Empty when winget is absent. #>
-  $map = @{}
-  if (-not (Test-CommandPresent 'winget')) { return $map }
-  $lines = @()
-  try { $lines = @(& winget list --disable-interactivity 2>$null) } catch { return $map }
-  foreach ($line in $lines) {
-    $text = [string]$line
-    # "Name   Id   Version   Source" with runs of spaces between columns; ids never contain a space.
-    if ($text -notmatch '^(.+?)\s\s+([^\s]+)\s\s+') { continue }
-    $name = ConvertTo-MatchToken $Matches[1]
-    $id = $Matches[2]
-    if ($name.Length -lt 3 -or $id -eq 'Id') { continue }
-    if (-not $map.ContainsKey($name)) { $map[$name] = $id }
-  }
-  return $map
-}
-
-function Get-InstallLocationIdleDays {
-  <# .SYNOPSIS Days since the newest LAST-WRITE at depth <= 2 under an install folder, or -1 when unknowable.
-     Deliberately NOT Get-NewestTimestampUtc, which the cleanup sections use: that takes the newest of write,
-     access and creation, and last-access is live on this machine - measured 2026-09-04, every install folder
-     read as 0 days idle that way (Git, Gpg4win, RustDesk, Malwarebytes all 0d) while last-write gave 120d,
-     203d, 163d and 148d. This section asks "not modified", so last-write is the matching question. #>
-  param([string] $Location, [int] $MaxEntries = 4000)
-  if ([string]::IsNullOrWhiteSpace($Location)) { return -1 }
-  $root = Get-FullPath ($Location.Trim().Trim('"').TrimEnd('\'))
-  if (-not $root -or -not (Test-DirPresent $root)) { return -1 }
-  $newest = [datetime]::MinValue
-  $seen = 0
-  $stack = New-Object System.Collections.Generic.Stack[object]
-  $stack.Push(@($root, 0))
-  while ($stack.Count -gt 0 -and $seen -lt $MaxEntries) {
-    $item = $stack.Pop()
-    foreach ($e in (Get-ChildEntries ([string]$item[0]))) {
-      $seen++
-      if (Test-ReparsePoint $e) { continue }
-      if ($e -is [IO.DirectoryInfo]) {
-        if ([int]$item[1] -lt 2) { $stack.Push(@((Remove-LongPrefix $e.FullName), [int]$item[1] + 1)) }
-        continue
-      }
-      if ($e.LastWriteTimeUtc -gt $newest) { $newest = $e.LastWriteTimeUtc }
-    }
-  }
-  if ($newest -eq [datetime]::MinValue) { return -1 }
-  return [int][math]::Floor(([datetime]::UtcNow - $newest).TotalDays)
-}
-
-function Get-ProgramRemovalHint {
-  <# .SYNOPSIS The command that removes a program: winget when it knows it, otherwise its own UninstallString. #>
-  param([pscustomobject] $Row, [hashtable] $WingetMap)
-  $key = ConvertTo-MatchToken $Row.DisplayName
-  if ($WingetMap.ContainsKey($key)) { return "winget uninstall --id $($WingetMap[$key])" }
-  if ($Row.UninstallString) { return $Row.UninstallString }
-  return '(no uninstall command recorded - remove it from Settings > Apps)'
-}
-
-function Get-Targets24 {
-  <# .SYNOPSIS Informational only. Section 24 declares nothing deletable: Program Files is protected. #>
-  return @((New-Target 24 'Installed programs (registry)' 'HKLM + HKCU Uninstall hives' -Kind cmd -Note 'report only; this section never runs an uninstaller'))
-}
-
-function Invoke-Section24 {
-  $ws = $Script:WS
-  Write-SectionIntro @(
-    'Programs whose files nothing has modified for a long time, largest first, with the command that removes',
-    'each one. Windows keeps no reliable record of when a program last RAN, so this is "not modified", not',
-    '"not used" - check the list before acting. This section never runs an uninstaller.'
-  )
-  $rows = @(Get-InstalledProgramRows | Where-Object { $_.SystemComponent -ne 1 })
-  if ($rows.Count -eq 0) { Write-Warn 'no uninstall entries could be read'; return }
-  Write-Note "$($rows.Count) installed program(s) found; measuring the ones with an install folder"
-  $winget = Get-WingetIdMap
-  $scored = @()
-  foreach ($r in $rows) {
-    $idle = Get-InstallLocationIdleDays -Location $r.InstallLocation
-    if ($idle -lt $ws.Days) { continue }
-    $scored += [pscustomobject]@{ Row = $r; Idle = $idle; Bytes = ([long]$r.EstimatedSizeKb * 1024) }
-  }
-  $lines = @("installed programs not modified for $($ws.Days)+ days - $(Get-Date -Format 'yyyy-MM-dd HH:mm')", '')
-  if ($scored.Count -eq 0) {
-    Write-Info "no installed program has been untouched for $($ws.Days)+ days"
-  } else {
-    Write-UiLine ("  {0,-44} {1,-14} {2,10} {3,6}  {4}" -f 'PROGRAM', 'VERSION', 'SIZE', 'IDLE', 'PUBLISHER') 'White'
-    foreach ($s in ($scored | Sort-Object Bytes -Descending)) {
-      $size = 'unknown'
-      if ($s.Bytes -gt 0) { $size = Format-Bytes $s.Bytes }
-      $line = "  {0,-44} {1,-14} {2,10} {3,5}d  {4}" -f $s.Row.DisplayName, $s.Row.DisplayVersion, $size, $s.Idle, $s.Row.Publisher
-      Write-UiLine $line 'Gray'
-      $lines += $line.Trim()
-      $lines += ('    remove with: ' + (Get-ProgramRemovalHint -Row $s.Row -WingetMap $winget))
-    }
-    Write-Section 'Remove one yourself with'
-    foreach ($s in ($scored | Sort-Object Bytes -Descending | Select-Object -First 10)) {
-      Write-Plain ('  ' + (Get-ProgramRemovalHint -Row $s.Row -WingetMap $winget))
-    }
-  }
-  Write-Section 'Store apps (not system packages)'
-  $appx = @()
-  try { $appx = @(Get-AppxPackage -ErrorAction SilentlyContinue | Where-Object { -not $_.IsFramework -and $_.SignatureKind -ne 'System' }) } catch { $appx = @() }
-  if ($appx.Count -eq 0) { Write-Info 'none found' } else {
-    foreach ($a in ($appx | Sort-Object Name)) {
-      Write-UiLine ("  {0,-52} {1}" -f $a.Name, $a.Version) 'Gray'
-      $lines += ("store  {0}  {1}" -f $a.Name, $a.Version)
-      $lines += ('    remove with: Remove-AppxPackage -Package ' + $a.PackageFullName)
-    }
-    Write-Note 'remove one with:  Remove-AppxPackage -Package <PackageFullName>'
-  }
-  if (-not $ws.NoReport) {
-    $out = Join-Path $ws.ReportsDir ('installed-programs-' + $ws.Stamp + '.txt')
-    try { [IO.File]::WriteAllLines($out, $lines); Write-Note "list saved: $out" } catch { $null = $_ }
-  }
-}
+# installed_programs.ps1 - section 24: installed programs nothing has modified for N+ days. Report only.
+#
+# It NEVER runs an uninstaller, in any mode. Windows keeps no reliable "last launched" record, so the number
+# reported is "not modified", derived from the files under InstallLocation - never described as "unused".
+
+function Get-WingetIdMap {
+  <# .SYNOPSIS One winget call, parsed once: normalised program name -> package id. Empty when winget is absent. #>
+  $map = @{}
+  if (-not (Test-CommandPresent 'winget')) { return $map }
+  $lines = @()
+  try { $lines = @(& winget list --disable-interactivity 2>$null) } catch { return $map }
+  foreach ($line in $lines) {
+    $text = [string]$line
+    # "Name   Id   Version   Source" with runs of spaces between columns; ids never contain a space.
+    if ($text -notmatch '^(.+?)\s\s+([^\s]+)\s\s+') { continue }
+    $name = ConvertTo-MatchToken $Matches[1]
+    $id = $Matches[2]
+    if ($name.Length -lt 3 -or $id -eq 'Id') { continue }
+    if (-not $map.ContainsKey($name)) { $map[$name] = $id }
+  }
+  return $map
+}
+
+function Get-InstallLocationIdleDays {
+  <# .SYNOPSIS Days since the newest LAST-WRITE at depth <= 2 under an install folder, or -1 when unknowable.
+     Deliberately NOT Get-NewestTimestampUtc, which the cleanup sections use: that takes the newest of write,
+     access and creation, and last-access is live on this machine - measured 2026-09-04, every install folder
+     read as 0 days idle that way (Git, Gpg4win, RustDesk, Malwarebytes all 0d) while last-write gave 120d,
+     203d, 163d and 148d. This section asks "not modified", so last-write is the matching question. #>
+  param([string] $Location, [int] $MaxEntries = 4000)
+  if ([string]::IsNullOrWhiteSpace($Location)) { return -1 }
+  $root = Get-FullPath ($Location.Trim().Trim('"').TrimEnd('\'))
+  if (-not $root -or -not (Test-DirPresent $root)) { return -1 }
+  $newest = [datetime]::MinValue
+  $seen = 0
+  $stack = New-Object System.Collections.Generic.Stack[object]
+  $stack.Push(@($root, 0))
+  while ($stack.Count -gt 0 -and $seen -lt $MaxEntries) {
+    $item = $stack.Pop()
+    foreach ($e in (Get-ChildEntries ([string]$item[0]))) {
+      $seen++
+      if (Test-ReparsePoint $e) { continue }
+      if ($e -is [IO.DirectoryInfo]) {
+        if ([int]$item[1] -lt 2) { $stack.Push(@((Remove-LongPrefix $e.FullName), [int]$item[1] + 1)) }
+        continue
+      }
+      if ($e.LastWriteTimeUtc -gt $newest) { $newest = $e.LastWriteTimeUtc }
+    }
+  }
+  if ($newest -eq [datetime]::MinValue) { return -1 }
+  return [int][math]::Floor(([datetime]::UtcNow - $newest).TotalDays)
+}
+
+function Get-ProgramRemovalHint {
+  <# .SYNOPSIS The command that removes a program: winget when it knows it, otherwise its own UninstallString. #>
+  param([pscustomobject] $Row, [hashtable] $WingetMap)
+  $key = ConvertTo-MatchToken $Row.DisplayName
+  if ($WingetMap.ContainsKey($key)) { return "winget uninstall --id $($WingetMap[$key])" }
+  if ($Row.UninstallString) { return $Row.UninstallString }
+  return '(no uninstall command recorded - remove it from Settings > Apps)'
+}
+
+function Get-Targets24 {
+  <# .SYNOPSIS Informational only. Section 24 declares nothing deletable: Program Files is protected. #>
+  return @((New-Target 24 'Installed programs (registry)' 'HKLM + HKCU Uninstall hives' -Kind cmd -Note 'report only; this section never runs an uninstaller'))
+}
+
+function Invoke-Section24 {
+  $ws = $Script:WS
+  Write-SectionIntro @(
+    'Programs whose files nothing has modified for a long time, largest first, with the command that removes',
+    'each one. Windows keeps no reliable record of when a program last RAN, so this is "not modified", not',
+    '"not used" - check the list before acting. This section never runs an uninstaller.'
+  )
+  $rows = @(Get-InstalledProgramRows | Where-Object { $_.SystemComponent -ne 1 })
+  if ($rows.Count -eq 0) { Write-Warn 'no uninstall entries could be read'; return }
+  Write-Note "$($rows.Count) installed program(s) found; measuring the ones with an install folder"
+  $winget = Get-WingetIdMap
+  $scored = @()
+  foreach ($r in $rows) {
+    $idle = Get-InstallLocationIdleDays -Location $r.InstallLocation
+    if ($idle -lt $ws.Days) { continue }
+    $scored += [pscustomobject]@{ Row = $r; Idle = $idle; Bytes = ([long]$r.EstimatedSizeKb * 1024) }
+  }
+  $lines = @("installed programs not modified for $($ws.Days)+ days - $(Get-Date -Format 'yyyy-MM-dd HH:mm')", '')
+  if ($scored.Count -eq 0) {
+    Write-Info "no installed program has been untouched for $($ws.Days)+ days"
+  } else {
+    Write-UiLine ("  {0,-44} {1,-14} {2,10} {3,6}  {4}" -f 'PROGRAM', 'VERSION', 'SIZE', 'IDLE', 'PUBLISHER') 'White'
+    foreach ($s in ($scored | Sort-Object Bytes -Descending)) {
+      $size = 'unknown'
+      if ($s.Bytes -gt 0) { $size = Format-Bytes $s.Bytes }
+      $line = "  {0,-44} {1,-14} {2,10} {3,5}d  {4}" -f $s.Row.DisplayName, $s.Row.DisplayVersion, $size, $s.Idle, $s.Row.Publisher
+      Write-UiLine $line 'Gray'
+      $lines += $line.Trim()
+      $lines += ('    remove with: ' + (Get-ProgramRemovalHint -Row $s.Row -WingetMap $winget))
+    }
+    Write-Section 'Remove one yourself with'
+    foreach ($s in ($scored | Sort-Object Bytes -Descending | Select-Object -First 10)) {
+      Write-Plain ('  ' + (Get-ProgramRemovalHint -Row $s.Row -WingetMap $winget))
+    }
+  }
+  Write-Section 'Store apps (not system packages)'
+  $appx = @()
+  try { $appx = @(Get-AppxPackage -ErrorAction SilentlyContinue | Where-Object { -not $_.IsFramework -and $_.SignatureKind -ne 'System' }) } catch { $appx = @() }
+  if ($appx.Count -eq 0) { Write-Info 'none found' } else {
+    foreach ($a in ($appx | Sort-Object Name)) {
+      Write-UiLine ("  {0,-52} {1}" -f $a.Name, $a.Version) 'Gray'
+      $lines += ("store  {0}  {1}" -f $a.Name, $a.Version)
+      $lines += ('    remove with: Remove-AppxPackage -Package ' + $a.PackageFullName)
+    }
+    Write-Note 'remove one with:  Remove-AppxPackage -Package <PackageFullName>'
+  }
+  if (-not $ws.NoReport) {
+    $out = Join-Path $ws.ReportsDir ('installed-programs-' + $ws.Stamp + '.txt')
+    try { [IO.File]::WriteAllLines($out, $lines); Write-Note "list saved: $out" } catch { $null = $_ }
+  }
+}

package/modules/menu.ps1

@@ -1,63 +1,63 @@
-# menu.ps1 - jump-to menu: run one section at a time; toggle dry-run and auto-yes.
-
-function Show-Menu {
-  $ws = $Script:WS
-  Write-UiLine '' 'Gray'
-  Write-Banner
-  $sys = New-Object IO.DriveInfo($Script:P.SD)
-  $dry = 'OFF'
-  if ($ws.DryRun) { $dry = 'ON' }
-  $yes = 'OFF'
-  if ($ws.Yes) { $yes = 'ON' }
-  $adm = 'no'
-  if ($ws.IsAdmin) { $adm = 'yes' }
-  Write-UiLine ("  system drive free: {0}   dry-run: {1}   auto-yes: {2}   elevated: {3}" -f (Format-Bytes $sys.AvailableFreeSpace), $dry, $yes, $adm) 'Cyan'
-  Write-UiLine '' 'Gray'
-  foreach ($s in $Script:WS_SECTIONS) {
-    $mark = ' '
-    if ($ws.Report.steps | Where-Object { $_.section -eq $s.Id -and $_.status -in 'ran', 'dry-run' }) { $mark = $ws.Glyph.ok }
-    $flags = ''
-    if ($s.Admin) { $flags += ' [admin]' }
-    if ($s.Batch -eq 'deep') { $flags += ' [deep]' }
-    if ($s.Batch -eq 'interactive') { $flags += ' [interactive]' }
-    $color = 'Gray'
-    if ($s.Admin -and -not $ws.IsAdmin) { $color = 'DarkGray' }
-    Write-UiLine ("  {0} [{1,2}] {2}{3}" -f $mark, $s.Id, $s.Title, $flags) $color
-  }
-  Write-UiLine '' 'Gray'
-  Write-UiLine '   [A] run the safe batch     [D] toggle dry-run     [Y] toggle auto-yes     [S] summary     [Q] quit' 'White'
-}
-
-function Invoke-Menu {
-  $ws = $Script:WS
-  if (-not $ws.Interactive) {
-    Write-Err 'The menu needs an interactive console. For unattended runs use:  windowsweep --all --yes'
-    $ws.ExitCode = $Script:WS_EXIT_USAGE
-    return
-  }
-  while ($true) {
-    Show-Menu
-    $lo = ($Script:WS_SECTIONS | Measure-Object Id -Minimum).Minimum
-    $hi = ($Script:WS_SECTIONS | Measure-Object Id -Maximum).Maximum
-    $choice = Read-Choice -Prompt "  Select [$lo-$hi / A / D / Y / S / Q]: " -Default ''
-    if ($choice -eq '') { continue }
-    switch -Regex ($choice) {
-      '^q' { Show-SessionSummary; return }
-      '^a' {
-        $ids = @($Script:WS_SAFE_BATCH)
-        if ($ws.IsAdmin) { $ids += $Script:WS_SAFE_BATCH_ADMIN }
-        $ws.BatchMode = $true
-        try { foreach ($id in $ids) { Invoke-SectionById -Id $id } } finally { $ws.BatchMode = $false }
-        Wait-Enter
-      }
-      '^d' { $ws.DryRun = -not $ws.DryRun }
-      '^y' { $ws.Yes = -not $ws.Yes }
-      '^s' { Show-SessionSummary; Wait-Enter }
-      '^\d+$' {
-        $id = [int]$choice
-        if (Get-Section $id) { Invoke-SectionById -Id $id; Wait-Enter } else { Write-Warn "no section $id" }
-      }
-      default { Write-Warn "unrecognised choice: $choice" }
-    }
-  }
-}
+# menu.ps1 - jump-to menu: run one section at a time; toggle dry-run and auto-yes.
+
+function Show-Menu {
+  $ws = $Script:WS
+  Write-UiLine '' 'Gray'
+  Write-Banner
+  $sys = New-Object IO.DriveInfo($Script:P.SD)
+  $dry = 'OFF'
+  if ($ws.DryRun) { $dry = 'ON' }
+  $yes = 'OFF'
+  if ($ws.Yes) { $yes = 'ON' }
+  $adm = 'no'
+  if ($ws.IsAdmin) { $adm = 'yes' }
+  Write-UiLine ("  system drive free: {0}   dry-run: {1}   auto-yes: {2}   elevated: {3}" -f (Format-Bytes $sys.AvailableFreeSpace), $dry, $yes, $adm) 'Cyan'
+  Write-UiLine '' 'Gray'
+  foreach ($s in $Script:WS_SECTIONS) {
+    $mark = ' '
+    if ($ws.Report.steps | Where-Object { $_.section -eq $s.Id -and $_.status -in 'ran', 'dry-run' }) { $mark = $ws.Glyph.ok }
+    $flags = ''
+    if ($s.Admin) { $flags += ' [admin]' }
+    if ($s.Batch -eq 'deep') { $flags += ' [deep]' }
+    if ($s.Batch -eq 'interactive') { $flags += ' [interactive]' }
+    $color = 'Gray'
+    if ($s.Admin -and -not $ws.IsAdmin) { $color = 'DarkGray' }
+    Write-UiLine ("  {0} [{1,2}] {2}{3}" -f $mark, $s.Id, $s.Title, $flags) $color
+  }
+  Write-UiLine '' 'Gray'
+  Write-UiLine '   [A] run the safe batch     [D] toggle dry-run     [Y] toggle auto-yes     [S] summary     [Q] quit' 'White'
+}
+
+function Invoke-Menu {
+  $ws = $Script:WS
+  if (-not $ws.Interactive) {
+    Write-Err 'The menu needs an interactive console. For unattended runs use:  windowsweep --all --yes'
+    $ws.ExitCode = $Script:WS_EXIT_USAGE
+    return
+  }
+  while ($true) {
+    Show-Menu
+    $lo = ($Script:WS_SECTIONS | Measure-Object Id -Minimum).Minimum
+    $hi = ($Script:WS_SECTIONS | Measure-Object Id -Maximum).Maximum
+    $choice = Read-Choice -Prompt "  Select [$lo-$hi / A / D / Y / S / Q]: " -Default ''
+    if ($choice -eq '') { continue }
+    switch -Regex ($choice) {
+      '^q' { Show-SessionSummary; return }
+      '^a' {
+        $ids = @($Script:WS_SAFE_BATCH)
+        if ($ws.IsAdmin) { $ids += $Script:WS_SAFE_BATCH_ADMIN }
+        $ws.BatchMode = $true
+        try { foreach ($id in $ids) { Invoke-SectionById -Id $id } } finally { $ws.BatchMode = $false }
+        Wait-Enter
+      }
+      '^d' { $ws.DryRun = -not $ws.DryRun }
+      '^y' { $ws.Yes = -not $ws.Yes }
+      '^s' { Show-SessionSummary; Wait-Enter }
+      '^\d+$' {
+        $id = [int]$choice
+        if (Get-Section $id) { Invoke-SectionById -Id $id; Wait-Enter } else { Write-Warn "no section $id" }
+      }
+      default { Write-Warn "unrecognised choice: $choice" }
+    }
+  }
+}