windowsweep 1.2.0 → 1.3.1

package/AI-INTEGRATION-GUIDE.md

@@ -71,7 +71,7 @@ choice, and says so.
 ## The `--json` line
 
 ```json
-{"tool":"windowsweep","version":"1.1.0","mode":"all","dry_run":false,"elevated":false,"developer":true,
+{"tool":"windowsweep","version":"1.2.0","mode":"all","dry_run":false,"elevated":false,"developer":true,
  "freed_bytes":0,"estimated_bytes":0,
  "sections":[{"section":1,"status":"ran","freed_bytes":0}],
  "candidates":[],"targets":[],

package/CHANGELOG.md

@@ -9,6 +9,58 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ## [Unreleased]
 
+## [1.3.1] - 2026-09-25
+
+No change to what is cleaned, how it is decided, or what is refused. This release names the team as the
+tool's maker instead of one person, and points the web address it prints at the product's own site.
+
+### Changed
+
+- **The maker lines name the team.** The end-of-run line, the walkthrough and the usage header read
+  *by the windowsweep team*; `--version` and the session log's header read `Author: The windowsweep team`.
+- **The web address the tool prints is the product's own site**, `https://windowsweep.aoneahsan.com`,
+  instead of a personal site: the `Web:` row of `--version` and `--feedback`, the session log's header and
+  the walkthrough. The contact form lives there.
+- **The report credits** keep their four keys and their string type, so a reader of `schema_version: 1`
+  keeps working: `author.name` is `the windowsweep team`, `author.website` is the product's site, and
+  `author.email` and `author.linkedin` are empty strings. A report written earlier keeps what it recorded.
+- **The Email and LinkedIn rows of `--version` are gone**, and so is the email address in the usage
+  header and the session log's header. The address stays where it is a contact channel: the crash message
+  and `--feedback`.
+
+### Fixed
+
+- **The README's install-size row inside the 1.3.0 package** said 44 files and about 396 kB unpacked;
+  that package held 46 files and about 400 kB, because the two files 1.3.0 split out were never counted.
+  The row is measured from this package.
+
+## [1.3.0] - 2026-09-17
+
+No change to what is cleaned, how it is decided, or what is refused. This release moves one printed
+address, splits two files that had grown past the project's own 500-line ceiling, and corrects the
+version rows inside the published package.
+
+### Changed
+
+- **The documentation address the tool carries is now the documentation site**,
+  `https://windowsweep-docs.aoneahsan.com`, instead of the README on GitHub. The site has served the
+  same pages over HTTPS since 2026-09-12.
+- **`lib/external.ps1`** takes `Invoke-External`, `Test-CommandPresent`, `Test-ProcessRunning`,
+  `Test-IsAdmin`, `Test-CanElevate` and `Invoke-Elevated` out of `lib/safety.ps1`, which is back under
+  500 lines. The deletion chokepoint stays where it was: running a process and raising privilege are a
+  different job from refusing a path.
+- **`modules/self_test_contract.ps1`** takes self-test group [18] out of `modules/self_test_extra.ps1`,
+  same fixture, same checks. Both moves are verbatim, and each was watched failing on a planted defect
+  before it was believed.
+- **The self-test grew by the two new files**, because groups [3] and [4] check every engine file by
+  name. No check was added, changed or removed - the suite is the same suite, counting one more file
+  twice.
+
+### Fixed
+
+- **The README at-a-glance rows inside the published package** were stale at 1.1.0 through the 1.2.0
+  cascade. They are correct here.
+
 ## [1.2.0] - 2026-09-08
 
 ### Added

package/README.md

@@ -13,7 +13,7 @@
 [![node](https://img.shields.io/node/v/windowsweep.svg)](https://nodejs.org)
 [![platform](https://img.shields.io/badge/platform-Windows%2010%20%7C%2011-0078d4?logo=windows&logoColor=white)](https://github.com/aoneahsan/windowsweep#platform-support)
 
-[Docs](https://github.com/aoneahsan/windowsweep/blob/main/docs/README.md) · [AI Guide](https://github.com/aoneahsan/windowsweep/blob/main/AI-INTEGRATION-GUIDE.md) · [npm](https://www.npmjs.com/package/windowsweep) · [GitHub](https://github.com/aoneahsan/windowsweep) · [Changelog](https://github.com/aoneahsan/windowsweep/blob/main/CHANGELOG.md) · [Contributing](https://github.com/aoneahsan/windowsweep/blob/main/CONTRIBUTING.md) · [Support](https://github.com/aoneahsan/windowsweep/issues)
+[Website](https://windowsweep.aoneahsan.com) · [Docs](https://windowsweep-docs.aoneahsan.com/) · [AI Guide](https://github.com/aoneahsan/windowsweep/blob/main/AI-INTEGRATION-GUIDE.md) · [npm](https://www.npmjs.com/package/windowsweep) · [GitHub](https://github.com/aoneahsan/windowsweep) · [Changelog](https://github.com/aoneahsan/windowsweep/blob/main/CHANGELOG.md) · [Contributing](https://github.com/aoneahsan/windowsweep/blob/main/CONTRIBUTING.md) · [Support](https://github.com/aoneahsan/windowsweep/issues)
 
 </div>
 
@@ -36,14 +36,14 @@ It is the Windows member of a family with [linux-cleanup](https://github.com/aon
 
 | | |
 |---|---|
-| **Version** | `1.1.0` |
+| **Version** | `1.3.1` |
 | **License** | MIT |
 | **Node** | `>=14` (launcher only) |
 | **Runtime** | Windows PowerShell 5.1 (built in) or PowerShell 7 |
 | **Platforms** | Windows 10 (1809+) and Windows 11 |
-| **Install size** | ~109 kB packed · ~366 kB unpacked · 44 files · no dependencies |
+| **Install size** | ~120 kB packed · ~401 kB unpacked · 46 files · no dependencies |
 | **Undo** | Recycle Bin for personal files; none for caches (they regenerate) |
-| **Status** | Stable · 1.1.0, released 2026-09-04 |
+| **Status** | Stable · 1.3.1, released 2026-09-25 |
 
 <a id="table-of-contents"></a>
 ## 🧭 Table of Contents&nbsp;[#](#table-of-contents)
@@ -126,7 +126,7 @@ reclaims disk space, nothing else.
 - **Running-app guard** - an open browser, editor or app keeps its caches; the tool tells you which to close.
 - **Session reports** - schema-versioned JSON, exportable to Markdown or a self-contained HTML page, plus
   `--json` for scripts.
-- **Self-test** - 151 checks prove the guards on your machine with a real junction, a 445-character path and
+- **Self-test** - 156 checks prove the guards on your machine with a real junction, a 445-character path and
   a dry-run fixture before you trust it.
 - **Offline by design** - the command-line tool makes zero network calls: no telemetry, no update check.
   Self-test check [9] fails the build on an HTTP or socket call in the source. Crash bundles stay on disk.
@@ -180,7 +180,7 @@ cd windowsweep
 Both launchers start PowerShell with `-ExecutionPolicy Bypass`, so the machine's script policy never blocks a
 run. Logs and reports land in `%USERPROFILE%\.windowsweep\` on every path - outside the npm cache, so history
 survives `npx` evictions. Full detail:
-[Installation](https://github.com/aoneahsan/windowsweep/blob/main/docs/installation.md).
+[Installation](https://windowsweep-docs.aoneahsan.com/installation).
 
 <a id="quick-start"></a>
 ## 🚀 Quick Start&nbsp;[#](#quick-start)
@@ -239,7 +239,7 @@ comes back but costs minutes, *Recycle Bin* is recoverable until you empty it (`
 `--i-understand-deep`; *interactive* ones never run unattended unless you pass a selection. The three
 *audit only* sections are read-only and safe, but stay out of `--all` so a cleanup run is a cleanup run -
 `--profile audit` is where they live. Every section is documented in
-[Sections 0-25](https://github.com/aoneahsan/windowsweep/blob/main/docs/sections.md).
+[Sections 0-25](https://windowsweep-docs.aoneahsan.com/sections).
 
 ### Reclaim interactively
 
@@ -281,7 +281,7 @@ There is no configuration you must do. Defaults live in `%USERPROFILE%\.windowsw
 | `NO_COLOR`, `WINDOWSWEEP_NO_COLOR` | unset | Disable colour |
 | `WINDOWSWEEP_ASCII` | unset | Plain ASCII glyphs |
 
-Full reference: [CLI reference](https://github.com/aoneahsan/windowsweep/blob/main/docs/cli-reference.md).
+Full reference: [CLI reference](https://windowsweep-docs.aoneahsan.com/cli-reference).
 
 <a id="command-line"></a>
 ## 💻 Command Line&nbsp;[#](#command-line)
@@ -323,7 +323,7 @@ windowsweep [mode] [options]
 | `--json`, `--quiet`, `--no-color`, `--ascii`, `--no-report`, `--cleanup-logs` | off | Output and record controls |
 
 Every flag, exit code and environment variable:
-[CLI reference](https://github.com/aoneahsan/windowsweep/blob/main/docs/cli-reference.md).
+[CLI reference](https://windowsweep-docs.aoneahsan.com/cli-reference).
 
 <a id="examples"></a>
 ## 🧪 Examples&nbsp;[#](#examples)
@@ -344,17 +344,17 @@ Every flag, exit code and environment variable:
 ## 🎛️ Advanced Features&nbsp;[#](#advanced-features)
 
 - **Profiles** - `dev`, `minimal`, `cache-only`, `system`, `deep`, `audit`.
-  [Docs](https://github.com/aoneahsan/windowsweep/blob/main/docs/profiles.md)
+  [Docs](https://windowsweep-docs.aoneahsan.com/profiles)
 - **Keep-newest rule** - Cypress, Playwright, Gradle distributions and Squirrel app installs keep their newest
   version whatever the idle gate says.
-  [Docs](https://github.com/aoneahsan/windowsweep/blob/main/docs/safety-model.md)
+  [Docs](https://windowsweep-docs.aoneahsan.com/safety-model)
 - **Editor hygiene** - workspace storage whose folder is gone and extension folders the editor's own
   `extensions.json` no longer references.
-  [Docs](https://github.com/aoneahsan/windowsweep/blob/main/docs/sections.md)
+  [Docs](https://windowsweep-docs.aoneahsan.com/sections)
 - **Disk-image compaction** - hands back the space a Docker Desktop or WSL `.vhdx` never returns on its own.
-  [Docs](https://github.com/aoneahsan/windowsweep/blob/main/docs/admin-and-elevation.md)
+  [Docs](https://windowsweep-docs.aoneahsan.com/admin-and-elevation)
 - **Report export** - schema-versioned JSON to Markdown or a self-contained HTML page, no extra tools.
-  [Docs](https://github.com/aoneahsan/windowsweep/blob/main/docs/reports-and-logs.md)
+  [Docs](https://windowsweep-docs.aoneahsan.com/reports-and-logs)
 - **Crash bundles** - the command line writes one locally on an unexpected exit, never transmitted.
 
 <a id="desktop-app"></a>
@@ -366,13 +366,13 @@ A Tauri window that drives this engine rather than reimplementing it: it runs th
 - **A picker** for the four sections that ask a person to choose.
 - **Settings, most of them flags.**
 
-Screen by screen: [Desktop app](https://github.com/aoneahsan/windowsweep/blob/main/docs/desktop.md).
+Screen by screen: [Desktop app](https://windowsweep-docs.aoneahsan.com/desktop).
 
 The engine still makes no network calls at all. The window sends usage and crash reports to improve the product for everyone, and there is no switch. Never sent: a file path, a folder name, a drive label, your user name, your machine name, or the contents of anything. Sign-in is separate and optional.
 
-The installer is not signed with a paid code-signing certificate, so SmartScreen warns on first run. Every release publishes a SHA-256 checksum and a minisign signature the app's own updater checks; neither is a code-signing certificate. What to do about the dialog: [Desktop app](https://github.com/aoneahsan/windowsweep/blob/main/docs/desktop.md).
+The installer is not signed with a paid code-signing certificate, so SmartScreen warns on first run. Every release publishes a SHA-256 checksum and a minisign signature the app's own updater checks; neither is a code-signing certificate. What to do about the dialog: [Desktop app](https://windowsweep-docs.aoneahsan.com/desktop).
 
-Download the `.msi` or the `.exe` installer from [Releases](https://github.com/aoneahsan/windowsweep/releases). What each one installs, and what Windows says the first time: [Desktop app](https://github.com/aoneahsan/windowsweep/blob/main/docs/desktop.md).
+Download the `.msi` or the `.exe` installer from [Releases](https://github.com/aoneahsan/windowsweep/releases). What each one installs, and what Windows says the first time: [Desktop app](https://windowsweep-docs.aoneahsan.com/desktop).
 
 <a id="recovery-troubleshooting"></a>
 ## 🚑 Recovery & Troubleshooting&nbsp;[#](#recovery-troubleshooting)
@@ -387,7 +387,7 @@ Download the `.msi` or the `.exe` installer from [Releases](https://github.com/a
 | Reclaimed less than `--scan` showed | The idle gate kept recently used files; open apps were skipped | Lower `--days`, close the apps, or `--purge-all` |
 | An extension folder was removed | The editor's `extensions.json` no longer referenced it | Reinstall from the editor; referenced folders are never touched |
 
-More: [Troubleshooting](https://github.com/aoneahsan/windowsweep/blob/main/docs/troubleshooting.md).
+More: [Troubleshooting](https://windowsweep-docs.aoneahsan.com/troubleshooting).
 
 <a id="limitations"></a>
 ## 🚧 Limitations&nbsp;[#](#limitations)
@@ -428,32 +428,41 @@ An open browser keeps its cache files locked and half-written. Close it and run
 Every Windows machine has PowerShell 5.1: no runtime to install, no binary to trust, and the source is readable
 in an afternoon.
 
-More: [FAQ](https://github.com/aoneahsan/windowsweep/blob/main/docs/faq.md).
+More: [FAQ](https://windowsweep-docs.aoneahsan.com/faq).
 
 <a id="documentation"></a>
 ## 📚 Documentation&nbsp;[#](#documentation)
 
 | Document | Read it when |
 |---|---|
-| [Documentation index](https://github.com/aoneahsan/windowsweep/blob/main/docs/README.md) | you want the full map |
-| [Quick start](https://github.com/aoneahsan/windowsweep/blob/main/docs/quick-start.md) | running your first cleanup |
-| [Safety model](https://github.com/aoneahsan/windowsweep/blob/main/docs/safety-model.md) | you want every guarantee spelled out before deleting anything |
-| [Developer mode](https://github.com/aoneahsan/windowsweep/blob/main/docs/developer-mode.md) | you want to know what the first question changes |
-| [Sections 0-25](https://github.com/aoneahsan/windowsweep/blob/main/docs/sections.md) | you want to know precisely what one section touches |
-| [CLI reference](https://github.com/aoneahsan/windowsweep/blob/main/docs/cli-reference.md) | you need an exact flag, exit code or variable |
-| [Admin sections and elevation](https://github.com/aoneahsan/windowsweep/blob/main/docs/admin-and-elevation.md) | before running the system profile or touching the hibernation file |
-| [Reports and logs](https://github.com/aoneahsan/windowsweep/blob/main/docs/reports-and-logs.md) | parsing the JSON or finding a log |
+| [Documentation index](https://windowsweep-docs.aoneahsan.com/) | you want the full map |
+| [Quick start](https://windowsweep-docs.aoneahsan.com/quick-start) | running your first cleanup |
+| [Safety model](https://windowsweep-docs.aoneahsan.com/safety-model) | you want every guarantee spelled out before deleting anything |
+| [Developer mode](https://windowsweep-docs.aoneahsan.com/developer-mode) | you want to know what the first question changes |
+| [Sections 0-25](https://windowsweep-docs.aoneahsan.com/sections) | you want to know precisely what one section touches |
+| [CLI reference](https://windowsweep-docs.aoneahsan.com/cli-reference) | you need an exact flag, exit code or variable |
+| [Admin sections and elevation](https://windowsweep-docs.aoneahsan.com/admin-and-elevation) | before running the system profile or touching the hibernation file |
+| [Reports and logs](https://windowsweep-docs.aoneahsan.com/reports-and-logs) | parsing the JSON or finding a log |
 | [AI integration guide](https://github.com/aoneahsan/windowsweep/blob/main/AI-INTEGRATION-GUIDE.md) | an agent or a script runs it for you |
-| [Desktop app](https://github.com/aoneahsan/windowsweep/blob/main/docs/desktop.md) | you want the window rather than the command line |
-| [Troubleshooting](https://github.com/aoneahsan/windowsweep/blob/main/docs/troubleshooting.md) | something failed |
+| [Desktop app](https://windowsweep-docs.aoneahsan.com/desktop) | you want the window rather than the command line |
+| [Troubleshooting](https://windowsweep-docs.aoneahsan.com/troubleshooting) | something failed |
 | [Project status](https://github.com/aoneahsan/windowsweep/blob/main/docs/features/windowsweep-completion/00-tracker.json) | you want to know what is verified and what is still open: every phase and sub-task with its state and evidence |
 
 <a id="changelog"></a>
 ## 🔄 Changelog&nbsp;[#](#changelog)
 
-Latest release: **`1.1.0`** - four new sections (global packages, orphaned app data, idle programs, startup
-items), `--select` / `--select-file` so a script or a GUI can drive the interactive sections, `--notify`, and
-`candidates[]`, `targets[]`, progress lines and `--list --json` for machine callers.
+Latest release: **`1.3.1`** - nothing about what is cleaned, how it is decided or what is refused changed.
+The tool names the windowsweep team as its maker instead of one person, and the web address it prints is the
+product's own site.
+
+Before it, **`1.3.0`** - the documentation address the tool carries became the documentation site, two files
+that had grown past the project's own 500-line ceiling were split (the deletion chokepoint stayed exactly where
+it was), and the at-a-glance rows inside the published package were corrected.
+
+Before that, **`1.2.0`** - `--exclude-path` honoured in every section at the deletion chokepoint (it
+protected one section out of twenty-six, and never a folder's children), a dry-run that counts exactly what a
+real run removes, `newest_write_utc` on every scanned target, `protected` in `--list --json`, `excluded[]` in
+the summary, and the console and report strings in one voice.
 Full history: [CHANGELOG.md](https://github.com/aoneahsan/windowsweep/blob/main/CHANGELOG.md).
 
 <a id="contributing"></a>
@@ -498,15 +507,16 @@ this tool deletes files, so review what it proposes before confirming.
 <a id="author"></a>
 ## 👤 Author&nbsp;[#](#author)
 
-**Ahsan Mahmood** - [aoneahsan.com](https://aoneahsan.com) · [GitHub](https://github.com/aoneahsan) ·
-[LinkedIn](https://linkedin.com/in/aoneahsan) · [aoneahsan@gmail.com](mailto:aoneahsan@gmail.com)
+**The windowsweep team** - [team page](https://windowsweep-docs.aoneahsan.com/about) ·
+[contact form](https://windowsweep.aoneahsan.com/contact), after signing in
 
 <a id="links"></a>
 ## 🔗 Links&nbsp;[#](#links)
 
 | | |
 |---|---|
-| Documentation | https://github.com/aoneahsan/windowsweep/blob/main/docs/README.md |
+| Website | https://windowsweep.aoneahsan.com |
+| Documentation | https://windowsweep-docs.aoneahsan.com/ |
 | npm | https://www.npmjs.com/package/windowsweep |
 | Repository | https://github.com/aoneahsan/windowsweep |
 | Issues | https://github.com/aoneahsan/windowsweep/issues |

package/VERSION

@@ -1 +1 @@
-1.2.0
+1.3.1

package/lib/constants.ps1

@@ -4,19 +4,20 @@
 # Single source of truth for the version is package.json: the Node launcher exports it as
 # WINDOWSWEEP_VERSION. A direct checkout falls back to this literal; the version:check script
 # asserts the two never drift.
-$Script:WS_VERSION_FALLBACK = '1.2.0'
+$Script:WS_VERSION_FALLBACK = '1.3.1'
 
 $Script:WS_NAME = 'windowsweep'
 $Script:WS_TAGLINE = 'Developer-aware Windows cleanup CLI: dry-run first, personal folders refused, zero install via npx.'
-$Script:WS_AUTHOR = 'Ahsan Mahmood'
+# The maker is the team, never one person. WS_AUTHOR lands mid-line ("by the windowsweep team");
+# WS_TEAM is the form a label shows standing alone ("Author: The windowsweep team").
+$Script:WS_AUTHOR = 'the windowsweep team'
+$Script:WS_TEAM = 'The windowsweep team'
 $Script:WS_EMAIL = 'aoneahsan@gmail.com'
-$Script:WS_WEB = 'https://aoneahsan.com'
-$Script:WS_LINKEDIN = 'https://linkedin.com/in/aoneahsan'
-$Script:WS_GITHUB = 'https://github.com/aoneahsan'
+$Script:WS_WEB = 'https://windowsweep.aoneahsan.com'
 $Script:WS_REPO = 'https://github.com/aoneahsan/windowsweep'
 $Script:WS_ISSUES = 'https://github.com/aoneahsan/windowsweep/issues'
 $Script:WS_NPM = 'https://www.npmjs.com/package/windowsweep'
-$Script:WS_DOCS = 'https://github.com/aoneahsan/windowsweep/blob/main/docs/README.md'
+$Script:WS_DOCS = 'https://windowsweep-docs.aoneahsan.com'
 $Script:WS_SUPPORT = 'https://aoneahsan.com/payment?project-id=windowsweep&project-identifier=windowsweep'
 $Script:WS_LICENSE = 'MIT License'
 

package/lib/external.ps1

@@ -0,0 +1,87 @@
+# external.ps1 - running an external process, and asking about / raising privilege.
+#
+# Split out of lib/safety.ps1 at the 1.3.0 cascade (RW-121), which brought that file back under the
+# 500-line ceiling IRON rule 6 sets. The functions below are VERBATIM - none changed, and no behaviour
+# moved with them. The deletion chokepoint stays in safety.ps1: Remove-PathSafe, Send-ToRecycleBin and
+# the protection guard are that file's whole reason to exist, and they are not what was over the line.
+# Running a process and elevating are a different job, which is why this is the split by concern.
+#
+# Dot-sourced from windowsweep.ps1 immediately after safety, so every caller still resolves at run time.
+
+function Invoke-External {
+  <# .SYNOPSIS Run an external command, streaming its output to the log. -Destructive commands are skipped in --dry-run. #>
+  param([Parameter(Mandatory = $true)][string] $FilePath, [string[]] $ArgumentList = @(), [switch] $Destructive, [switch] $Quiet, [string] $Label = '')
+  $display = "$FilePath $($ArgumentList -join ' ')"
+  $tag = ''
+  if ($Label) { $tag = " [$Label]" }
+  if ($Destructive -and $Script:WS.DryRun) {
+    Write-DryRun "would run: $display"
+    return [pscustomobject]@{ Ran = $false; ExitCode = 0; Output = @() }
+  }
+  Write-LogLine "run${tag}: $display"
+  $lines = @()
+  try {
+    $raw = & $FilePath @ArgumentList 2>&1
+    foreach ($l in $raw) {
+      $s = [string]$l
+      $lines += $s
+      if (-not $Quiet) { Write-Note $s } else { Write-LogLine $s }
+    }
+    $code = $LASTEXITCODE
+    if ($null -eq $code) { $code = 0 }
+  } catch {
+    $lines += $_.Exception.Message
+    $code = 1
+  }
+  Write-LogLine "exit $code$tag : $display"
+  return [pscustomobject]@{ Ran = $true; ExitCode = $code; Output = $lines }
+}
+
+function Test-CommandPresent {
+  param([string] $Name)
+  return ($null -ne (Get-Command $Name -ErrorAction SilentlyContinue))
+}
+
+function Test-ProcessRunning {
+  <# .SYNOPSIS True when any process with one of the given names is running. #>
+  param([string[]] $Names)
+  foreach ($n in $Names) {
+    if (@(Get-Process -Name $n -ErrorAction SilentlyContinue).Count -gt 0) { return $true }
+  }
+  return $false
+}
+
+function Test-IsAdmin {
+  try {
+    $id = [Security.Principal.WindowsIdentity]::GetCurrent()
+    return (New-Object Security.Principal.WindowsPrincipal($id)).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
+  } catch { return $false }
+}
+
+function Test-CanElevate {
+  <# .SYNOPSIS True when the account belongs to Administrators (even in a filtered, non-elevated token). #>
+  try {
+    $out = & "$env:SystemRoot\System32\whoami.exe" /groups /fo csv 2>$null
+    foreach ($l in $out) { if ($l -match 'S-1-5-32-544') { return $true } }
+  } catch { $null = $_ }
+  return $false
+}
+
+function Invoke-Elevated {
+  <# .SYNOPSIS Relaunch this run elevated (UAC prompt) and wait for it. Returns the child's exit code. #>
+  $ws = $Script:WS
+  $childArgs = @('-NoProfile', '-NoLogo', '-ExecutionPolicy', 'Bypass', '-File', ('"' + $ws.ScriptPath + '"'))
+  foreach ($a in $ws.RawArgs) {
+    if ($a -eq '--elevate') { continue }
+    if ($a -match '[\s"]') { $childArgs += ('"' + ($a -replace '"', '\"') + '"') } else { $childArgs += $a }
+  }
+  $childArgs += '--elevated-child'
+  Write-Info 'Requesting elevation (a UAC prompt appears). The elevated run opens in a new window and writes its own log.'
+  try {
+    $proc = Start-Process -FilePath 'powershell.exe' -ArgumentList $childArgs -Verb RunAs -Wait -PassThru
+    return $proc.ExitCode
+  } catch {
+    Write-Err "elevation refused or failed: $($_.Exception.Message)"
+    return $Script:WS_EXIT_REFUSED
+  }
+}

package/lib/log.ps1

@@ -14,7 +14,7 @@ function Initialize-Log {
   $header = @(
     '# ============================================================'
     "# $Script:WS_NAME v$(Get-ToolVersion) - session log"
-    "# Author:   $Script:WS_AUTHOR <$Script:WS_EMAIL>"
+    "# Author:   $Script:WS_TEAM"
     "# Web:      $Script:WS_WEB"
     "# License:  $Script:WS_LICENSE"
     "# Started:  $(Get-Date -Format 'yyyy-MM-dd HH:mm:ss zzz')"
@@ -106,7 +106,7 @@ function Save-Report {
     schema_version = 1
     credits = [ordered]@{
       tool = $Script:WS_NAME; tool_version = (Get-ToolVersion); tool_homepage = $Script:WS_REPO; tool_license = $Script:WS_LICENSE
-      author = [ordered]@{ name = $Script:WS_AUTHOR; email = $Script:WS_EMAIL; website = $Script:WS_WEB; linkedin = $Script:WS_LINKEDIN }
+      author = [ordered]@{ name = $Script:WS_AUTHOR; email = ''; website = $Script:WS_WEB; linkedin = '' }
     }
     meta = [ordered]@{
       started_at = $ws.Report.startedAt

package/lib/safety.ps1

@@ -462,80 +462,6 @@ function Send-ToRecycleBin {
   return $r
 }
 
-function Invoke-External {
-  <# .SYNOPSIS Run an external command, streaming its output to the log. -Destructive commands are skipped in --dry-run. #>
-  param([Parameter(Mandatory = $true)][string] $FilePath, [string[]] $ArgumentList = @(), [switch] $Destructive, [switch] $Quiet, [string] $Label = '')
-  $display = "$FilePath $($ArgumentList -join ' ')"
-  $tag = ''
-  if ($Label) { $tag = " [$Label]" }
-  if ($Destructive -and $Script:WS.DryRun) {
-    Write-DryRun "would run: $display"
-    return [pscustomobject]@{ Ran = $false; ExitCode = 0; Output = @() }
-  }
-  Write-LogLine "run${tag}: $display"
-  $lines = @()
-  try {
-    $raw = & $FilePath @ArgumentList 2>&1
-    foreach ($l in $raw) {
-      $s = [string]$l
-      $lines += $s
-      if (-not $Quiet) { Write-Note $s } else { Write-LogLine $s }
-    }
-    $code = $LASTEXITCODE
-    if ($null -eq $code) { $code = 0 }
-  } catch {
-    $lines += $_.Exception.Message
-    $code = 1
-  }
-  Write-LogLine "exit $code$tag : $display"
-  return [pscustomobject]@{ Ran = $true; ExitCode = $code; Output = $lines }
-}
-
-function Test-CommandPresent {
-  param([string] $Name)
-  return ($null -ne (Get-Command $Name -ErrorAction SilentlyContinue))
-}
-
-function Test-ProcessRunning {
-  <# .SYNOPSIS True when any process with one of the given names is running. #>
-  param([string[]] $Names)
-  foreach ($n in $Names) {
-    if (@(Get-Process -Name $n -ErrorAction SilentlyContinue).Count -gt 0) { return $true }
-  }
-  return $false
-}
-
-function Test-IsAdmin {
-  try {
-    $id = [Security.Principal.WindowsIdentity]::GetCurrent()
-    return (New-Object Security.Principal.WindowsPrincipal($id)).IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)
-  } catch { return $false }
-}
-
-function Test-CanElevate {
-  <# .SYNOPSIS True when the account belongs to Administrators (even in a filtered, non-elevated token). #>
-  try {
-    $out = & "$env:SystemRoot\System32\whoami.exe" /groups /fo csv 2>$null
-    foreach ($l in $out) { if ($l -match 'S-1-5-32-544') { return $true } }
-  } catch { $null = $_ }
-  return $false
-}
-
-function Invoke-Elevated {
-  <# .SYNOPSIS Relaunch this run elevated (UAC prompt) and wait for it. Returns the child's exit code. #>
-  $ws = $Script:WS
-  $childArgs = @('-NoProfile', '-NoLogo', '-ExecutionPolicy', 'Bypass', '-File', ('"' + $ws.ScriptPath + '"'))
-  foreach ($a in $ws.RawArgs) {
-    if ($a -eq '--elevate') { continue }
-    if ($a -match '[\s"]') { $childArgs += ('"' + ($a -replace '"', '\"') + '"') } else { $childArgs += $a }
-  }
-  $childArgs += '--elevated-child'
-  Write-Info 'Requesting elevation (a UAC prompt appears). The elevated run opens in a new window and writes its own log.'
-  try {
-    $proc = Start-Process -FilePath 'powershell.exe' -ArgumentList $childArgs -Verb RunAs -Wait -PassThru
-    return $proc.ExitCode
-  } catch {
-    Write-Err "elevation refused or failed: $($_.Exception.Message)"
-    return $Script:WS_EXIT_REFUSED
-  }
-}
+# Running an external process, and asking about / raising privilege, moved to lib/external.ps1 at the
+# 1.3.0 cascade (RW-121): Invoke-External, Test-CommandPresent, Test-ProcessRunning, Test-IsAdmin,
+# Test-CanElevate and Invoke-Elevated. The deletion chokepoint stays here, which is the point of the split.

package/modules/release_helpers.ps1

@@ -5,10 +5,8 @@ function Show-Version {
   Write-Host ("  $Script:WS_NAME v$(Get-ToolVersion)")
   Write-Host ("  $Script:WS_TAGLINE")
   Write-Host ''
-  Write-Host ("  Author:    $Script:WS_AUTHOR")
-  Write-Host ("  Email:     $Script:WS_EMAIL")
+  Write-Host ("  Author:    $Script:WS_TEAM")
   Write-Host ("  Web:       $Script:WS_WEB")
-  Write-Host ("  LinkedIn:  $Script:WS_LINKEDIN")
   Write-Host ("  Source:    $Script:WS_REPO")
   Write-Host ("  License:   $Script:WS_LICENSE")
   Write-Host ''

package/modules/runner.ps1

@@ -187,6 +187,10 @@ function Show-SessionSummary {
   Write-Kv 'Duration:' (Format-Duration $secs)
   $ran = @($ws.Report.steps | Where-Object { $_.status -in 'ran', 'dry-run' }).Count
   $skipped = @($ws.Report.steps | Where-Object { $_.status -notin 'ran', 'dry-run' }).Count
+  # C-091: 'skipped' is every step that did not run, so it folds in REFUSED and FAILED as well as skipped.
+  # The label is kept deliberately - the exported report was aligned to this exact wording on purpose, and
+  # renaming both costs two surfaces and a stored artefact's vocabulary to buy a word. The fact lives here,
+  # beside the slot, so a reader of `9 / 2` can find out which.
   Write-Kv 'Sections run / skipped:' "$ran / $skipped"
   Write-Kv 'Log:' $ws.LogFile
   $rep = Save-Report

package/modules/self_test_contract.ps1

@@ -0,0 +1,195 @@
+# self_test_contract.ps1 - self-test group [18]: the 1.2.0 --json and --exclude-path contract.
+#
+# Split out of modules/self_test_extra.ps1 at the 1.3.0 cascade (RW-121), which brought that file back
+# under the 500-line ceiling IRON rule 6 sets. The body below is VERBATIM - no check was changed, added or
+# removed, and the self-test count is unchanged. Called from Invoke-SelfTestExtra inside its own fixture,
+# so the fixture root is passed in and cleaned up there.
+
+function Invoke-SelfTestContract {
+  <# .SYNOPSIS Group [18]. Takes the caller's fixture root. Returns an object with Checks and Fails counts. #>
+  param([Parameter(Mandatory)] [string] $Fixture)
+  $ws = $Script:WS
+  $checks = 0; $fails = 0
+  $fx = $Fixture
+  $mute = { $Script:WS.Mute = $true }
+  $unmute = { $Script:WS.Mute = $false }
+  $ancient = (Get-Date).AddDays(-400)
+
+    Write-Section '[18] The 1.2.0 contract additions: newest_write_utc, protected, --exclude-path'
+
+    # 18a - targets[].newest_write_utc reports the newest timestamp under a target, in ISO 8601 UTC.
+    # A fixture with a KNOWN mtime, so the assertion is about the value and not merely about the shape.
+    $checks++
+    $nw = Join-Path $fx 'newest'
+    New-Item -ItemType Directory -Force -Path (Join-Path $nw 'deep') | Out-Null
+    Set-Content -LiteralPath (Join-Path $nw 'old.txt') -Value 'x'
+    Set-Content -LiteralPath (Join-Path $nw 'deep\\new.txt') -Value 'x'
+    $stampOld = [datetime]::new(2021, 3, 4, 5, 6, 7, [DateTimeKind]::Utc)
+    $stampNew = [datetime]::new(2023, 11, 12, 13, 14, 15, [DateTimeKind]::Utc)
+    foreach ($ts in 'LastWriteTime', 'LastAccessTime', 'CreationTime') {
+      Set-ItemProperty -LiteralPath (Join-Path $nw 'old.txt') -Name $ts -Value $stampOld.ToLocalTime()
+      Set-ItemProperty -LiteralPath (Join-Path $nw 'deep\\new.txt') -Name $ts -Value $stampNew.ToLocalTime()
+    }
+    $st = Get-DirectoryStats $nw
+    $iso = Format-Utc8601 $st.Newest
+    # The DEEPER file is the newer one, so a walk that stopped at the top level would report the older stamp
+    # and still look like a working timestamp - which is the failure this fixture is shaped to catch.
+    $wantIso = '2023-11-12T13:14:15Z'
+    $nullIso = Format-Utc8601 ([datetime]::MinValue)
+    if ($iso -eq $wantIso -and $null -eq $nullIso) { Write-Ok "newest_write_utc reads the deepest newest file ($iso) and is null for an empty tree" } else { Write-Err "newest_write_utc wrong: got $iso want $wantIso; MinValue gave '$nullIso'"; $fails++ }
+
+    # 18b - --list --json publishes the SAME protected lists the console prints, from one constant.
+    $checks++
+    $cat = Get-CatalogueJson
+    $prot = $cat.protected
+    $sameSub = ($null -ne $prot) -and ((@($prot.subtrees) -join '|') -eq (@($Script:WS_PROTECT.Subtrees) -join '|'))
+    $sameCat = ($null -ne $prot) -and ((@($prot.categories) -join '|') -eq (@($Script:WS_PROTECT_CATEGORIES) -join '|'))
+    $nonEmpty = ($null -ne $prot) -and (@($prot.subtrees).Count -gt 0) -and (@($prot.categories).Count -gt 0)
+    if ($sameSub -and $sameCat -and $nonEmpty) { Write-Ok "--list --json publishes the same $(@($prot.subtrees).Count) protected subtrees and $(@($prot.categories).Count) categories the console prints" } else { Write-Err "--list --json protected does not match the printed lists (subtrees=$sameSub categories=$sameCat nonEmpty=$nonEmpty)"; $fails++ }
+
+    # 18c - an excluded path SURVIVES a real fixture run while its sibling goes. Not a dry-run: the whole
+    # point is that the chokepoint refuses the deletion rather than merely declining to print it.
+    $checks++
+    $exRoot = Join-Path $fx 'excl'
+    $keep = Join-Path $exRoot 'keep-me'
+    $go = Join-Path $exRoot 'go-away'
+    foreach ($d in $keep, $go) { New-Item -ItemType Directory -Force -Path $d | Out-Null; Set-Content -LiteralPath (Join-Path $d 'f.txt') -Value 'xxxx' }
+    $savedEx = $ws.ExcludePaths
+    $savedExcluded = $ws.Excluded
+    $savedTable = $Script:WS_EXCLUDE
+    try {
+      $ws.ExcludePaths = @($keep)
+      $ws.Excluded = @()
+      Initialize-Exclusions
+      & $mute
+      $rKeep = Remove-PathSafe -Path $keep -Within $exRoot
+      $rGo = Remove-PathSafe -Path $go -Within $exRoot
+      & $unmute
+      $keptOnDisk = Test-Path -LiteralPath $keep
+      # A CHILD, not just the excluded path itself: testing only the exact path let a prefix bug
+      # (a doubled backslash) pass this check while nothing inside an excluded folder was refused.
+      $childReason = Get-ProtectionReason (Join-Path $keep 'f.txt')
+      $childRefused = ($childReason -like 'excluded: *')
+      $goneFromDisk = -not (Test-Path -LiteralPath $go)
+      $reported = (@($ws.Excluded).Count -eq 1)
+      $reasonOk = $rKeep.Reason -like 'excluded: *'
+      if ($keptOnDisk -and $goneFromDisk -and $rGo.Removed -and $reported -and $reasonOk -and $childRefused) { Write-Ok "--exclude-path is honoured by the chokepoint for every section: the excluded folder AND a file inside it are both refused, its sibling is not, and it is reported once" } else { Write-Err "--exclude-path not honoured (kept=$keptOnDisk siblingGone=$goneFromDisk reported=$reported childRefused=$childRefused reason='$($rKeep.Reason)')"; $fails++ }
+    } finally {
+      $ws.ExcludePaths = $savedEx
+      $ws.Excluded = $savedExcluded
+      $Script:WS_EXCLUDE = $savedTable
+    }
+
+
+    # 18d - the rehearsal and the run agree about an EXCLUDED file inside a pruned cache.
+    # Remove-StaleFiles used to apply Get-ProtectionReason only in its real-run loop, so a dry-run
+    # counted files the run then skipped and the estimate came out higher than the run - for exactly
+    # the files a person most wants the two numbers to agree about.
+    $checks++
+    $pr = Join-Path $fx 'prune'
+    $prKeep = Join-Path $pr 'keep'
+    New-Item -ItemType Directory -Force -Path $prKeep | Out-Null
+    $goFile = Join-Path $pr 'go.bin'
+    $keepFile = Join-Path $prKeep 'keep.bin'
+    Set-Content -LiteralPath $goFile -Value ('x' * 400)
+    Set-Content -LiteralPath $keepFile -Value ('y' * 400)
+    foreach ($f in @($goFile, $keepFile)) {
+      foreach ($ts in 'LastWriteTime', 'LastAccessTime', 'CreationTime') {
+        Set-ItemProperty -LiteralPath $f -Name $ts -Value $ancient
+      }
+    }
+    $savedEx2 = $ws.ExcludePaths
+    $savedTbl2 = $Script:WS_EXCLUDE
+    $savedDry = $ws.DryRun
+    $savedFreed = $ws.TotalFreed
+    $savedEst = $ws.TotalEstimated
+    try {
+      $ws.ExcludePaths = @($prKeep)
+      Initialize-Exclusions
+      & $mute
+      $ws.DryRun = $true
+      $dry = Remove-StaleFiles -Root $pr -Within $pr -Days 1
+      $ws.DryRun = $false
+      $real = Remove-StaleFiles -Root $pr -Within $pr -Days 1
+      & $unmute
+      $agree = ($dry.Files -eq $real.Files) -and ($dry.Freed -eq $real.Freed)
+      $keptOnDisk2 = Test-Path -LiteralPath $keepFile
+      $goneFromDisk2 = -not (Test-Path -LiteralPath $goFile)
+      if ($agree -and $keptOnDisk2 -and $goneFromDisk2 -and $dry.Files -eq 1) {
+        Write-Ok "a dry-run and a real prune agree exactly when a file is excluded: both report $($dry.Files) file, the excluded one survives"
+      } else {
+        Write-Err "rehearsal and run disagree (dryFiles=$($dry.Files) realFiles=$($real.Files) dryBytes=$($dry.Freed) realBytes=$($real.Freed) kept=$keptOnDisk2 siblingGone=$goneFromDisk2)"; $fails++
+      }
+    } finally {
+      $ws.ExcludePaths = $savedEx2
+      $Script:WS_EXCLUDE = $savedTbl2
+      $ws.DryRun = $savedDry
+      $ws.TotalFreed = $savedFreed
+      $ws.TotalEstimated = $savedEst
+    }
+
+
+    # 18e - a read-only scan REPORTS the developer answer it was given, and invents one when it was not.
+    # --scan parsed --developer / --not-developer into DeveloperFlag and then never read it, because
+    # Resolve-DeveloperMode ran only for walkthrough, menu, all and only. So section 0 printed
+    # "Developer mode: not decided yet" whatever you passed, and --json returned developer: null. The
+    # desktop window sends those flags to --scan and could not read back the setting it had just sent.
+    # Three orientations, because two of them would pass on the broken code by accident:
+    #   A the flag is honoured,  B a saved answer is honoured,  C neither exists -> still undecided.
+    $checks++
+    $savedFlag = $ws.DeveloperFlag
+    $savedDev = $ws.Developer
+    $savedSrc = $ws.DeveloperSource
+    $savedCfg = $ws.Config
+    $savedInter = $ws.Interactive
+    $savedForget = $ws.ForgetDeveloper
+    try {
+      $ws.Interactive = $true          # -ReadOnly must not ask even here; a prompt would hang the suite
+      $ws.ForgetDeveloper = $false
+
+      # A - the flag wins, and --not-developer is the case that was silently dropped
+      $ws.Config = @{}
+      $ws.DeveloperFlag = $false
+      $ws.Developer = $null
+      $ws.DeveloperSource = $null
+      & $mute
+      Resolve-DeveloperMode -ReadOnly
+      & $unmute
+      $aOk = ($ws.Developer -eq $false) -and ($ws.DeveloperSource -eq 'flag')
+
+      # B - no flag, but a saved answer exists
+      $ws.Config = @{ developer = $true }
+      $ws.DeveloperFlag = $null
+      $ws.Developer = $null
+      $ws.DeveloperSource = $null
+      & $mute
+      Resolve-DeveloperMode -ReadOnly
+      & $unmute
+      $bOk = ($ws.Developer -eq $true) -and ($ws.DeveloperSource -eq 'config')
+
+      # C - neither: a read-only mode must NOT invent a decision, and must not write config.json
+      $ws.Config = @{}
+      $ws.DeveloperFlag = $null
+      $ws.Developer = $null
+      $ws.DeveloperSource = $null
+      & $mute
+      Resolve-DeveloperMode -ReadOnly
+      & $unmute
+      $cOk = ($null -eq $ws.Developer) -and ($null -eq $ws.Config.developer)
+
+      if ($aOk -and $bOk -and $cOk) {
+        Write-Ok "a read-only scan honours --not-developer (flag) and a saved answer (config), and stays undecided when it has neither"
+      } else {
+        Write-Err "read-only developer resolution wrong (flagHonoured=$aOk savedHonoured=$bOk stillUndecided=$cOk)"; $fails++
+      }
+    } finally {
+      $ws.DeveloperFlag = $savedFlag
+      $ws.Developer = $savedDev
+      $ws.DeveloperSource = $savedSrc
+      $ws.Config = $savedCfg
+      $ws.Interactive = $savedInter
+      $ws.ForgetDeveloper = $savedForget
+    }
+
+  return [pscustomobject]@{ Checks = $checks; Fails = $fails }
+}

package/modules/self_test_extra.ps1

@@ -349,181 +349,10 @@ function Invoke-SelfTestExtra {
     if ($gotGatsbyCache -and $noPlainCache -and $gotNodeModules) { Write-Ok '.cache is an artefact only beside a Gatsby/Parcel marker, and node_modules is unaffected' } else { Write-Err "marked-artefact rule wrong: gatsby=$gotGatsbyCache plainExcluded=$noPlainCache nodeModules=$gotNodeModules"; $fails++ }
 
 
-    Write-Section '[18] The 1.2.0 contract additions: newest_write_utc, protected, --exclude-path'
-
-    # 18a - targets[].newest_write_utc reports the newest timestamp under a target, in ISO 8601 UTC.
-    # A fixture with a KNOWN mtime, so the assertion is about the value and not merely about the shape.
-    $checks++
-    $nw = Join-Path $fx 'newest'
-    New-Item -ItemType Directory -Force -Path (Join-Path $nw 'deep') | Out-Null
-    Set-Content -LiteralPath (Join-Path $nw 'old.txt') -Value 'x'
-    Set-Content -LiteralPath (Join-Path $nw 'deep\\new.txt') -Value 'x'
-    $stampOld = [datetime]::new(2021, 3, 4, 5, 6, 7, [DateTimeKind]::Utc)
-    $stampNew = [datetime]::new(2023, 11, 12, 13, 14, 15, [DateTimeKind]::Utc)
-    foreach ($ts in 'LastWriteTime', 'LastAccessTime', 'CreationTime') {
-      Set-ItemProperty -LiteralPath (Join-Path $nw 'old.txt') -Name $ts -Value $stampOld.ToLocalTime()
-      Set-ItemProperty -LiteralPath (Join-Path $nw 'deep\\new.txt') -Name $ts -Value $stampNew.ToLocalTime()
-    }
-    $st = Get-DirectoryStats $nw
-    $iso = Format-Utc8601 $st.Newest
-    # The DEEPER file is the newer one, so a walk that stopped at the top level would report the older stamp
-    # and still look like a working timestamp - which is the failure this fixture is shaped to catch.
-    $wantIso = '2023-11-12T13:14:15Z'
-    $nullIso = Format-Utc8601 ([datetime]::MinValue)
-    if ($iso -eq $wantIso -and $null -eq $nullIso) { Write-Ok "newest_write_utc reads the deepest newest file ($iso) and is null for an empty tree" } else { Write-Err "newest_write_utc wrong: got $iso want $wantIso; MinValue gave '$nullIso'"; $fails++ }
-
-    # 18b - --list --json publishes the SAME protected lists the console prints, from one constant.
-    $checks++
-    $cat = Get-CatalogueJson
-    $prot = $cat.protected
-    $sameSub = ($null -ne $prot) -and ((@($prot.subtrees) -join '|') -eq (@($Script:WS_PROTECT.Subtrees) -join '|'))
-    $sameCat = ($null -ne $prot) -and ((@($prot.categories) -join '|') -eq (@($Script:WS_PROTECT_CATEGORIES) -join '|'))
-    $nonEmpty = ($null -ne $prot) -and (@($prot.subtrees).Count -gt 0) -and (@($prot.categories).Count -gt 0)
-    if ($sameSub -and $sameCat -and $nonEmpty) { Write-Ok "--list --json publishes the same $(@($prot.subtrees).Count) protected subtrees and $(@($prot.categories).Count) categories the console prints" } else { Write-Err "--list --json protected does not match the printed lists (subtrees=$sameSub categories=$sameCat nonEmpty=$nonEmpty)"; $fails++ }
-
-    # 18c - an excluded path SURVIVES a real fixture run while its sibling goes. Not a dry-run: the whole
-    # point is that the chokepoint refuses the deletion rather than merely declining to print it.
-    $checks++
-    $exRoot = Join-Path $fx 'excl'
-    $keep = Join-Path $exRoot 'keep-me'
-    $go = Join-Path $exRoot 'go-away'
-    foreach ($d in $keep, $go) { New-Item -ItemType Directory -Force -Path $d | Out-Null; Set-Content -LiteralPath (Join-Path $d 'f.txt') -Value 'xxxx' }
-    $savedEx = $ws.ExcludePaths
-    $savedExcluded = $ws.Excluded
-    $savedTable = $Script:WS_EXCLUDE
-    try {
-      $ws.ExcludePaths = @($keep)
-      $ws.Excluded = @()
-      Initialize-Exclusions
-      & $mute
-      $rKeep = Remove-PathSafe -Path $keep -Within $exRoot
-      $rGo = Remove-PathSafe -Path $go -Within $exRoot
-      & $unmute
-      $keptOnDisk = Test-Path -LiteralPath $keep
-      # A CHILD, not just the excluded path itself: testing only the exact path let a prefix bug
-      # (a doubled backslash) pass this check while nothing inside an excluded folder was refused.
-      $childReason = Get-ProtectionReason (Join-Path $keep 'f.txt')
-      $childRefused = ($childReason -like 'excluded: *')
-      $goneFromDisk = -not (Test-Path -LiteralPath $go)
-      $reported = (@($ws.Excluded).Count -eq 1)
-      $reasonOk = $rKeep.Reason -like 'excluded: *'
-      if ($keptOnDisk -and $goneFromDisk -and $rGo.Removed -and $reported -and $reasonOk -and $childRefused) { Write-Ok "--exclude-path is honoured by the chokepoint for every section: the excluded folder AND a file inside it are both refused, its sibling is not, and it is reported once" } else { Write-Err "--exclude-path not honoured (kept=$keptOnDisk siblingGone=$goneFromDisk reported=$reported childRefused=$childRefused reason='$($rKeep.Reason)')"; $fails++ }
-    } finally {
-      $ws.ExcludePaths = $savedEx
-      $ws.Excluded = $savedExcluded
-      $Script:WS_EXCLUDE = $savedTable
-    }
-
-
-    # 18d - the rehearsal and the run agree about an EXCLUDED file inside a pruned cache.
-    # Remove-StaleFiles used to apply Get-ProtectionReason only in its real-run loop, so a dry-run
-    # counted files the run then skipped and the estimate came out higher than the run - for exactly
-    # the files a person most wants the two numbers to agree about.
-    $checks++
-    $pr = Join-Path $fx 'prune'
-    $prKeep = Join-Path $pr 'keep'
-    New-Item -ItemType Directory -Force -Path $prKeep | Out-Null
-    $goFile = Join-Path $pr 'go.bin'
-    $keepFile = Join-Path $prKeep 'keep.bin'
-    Set-Content -LiteralPath $goFile -Value ('x' * 400)
-    Set-Content -LiteralPath $keepFile -Value ('y' * 400)
-    foreach ($f in @($goFile, $keepFile)) {
-      foreach ($ts in 'LastWriteTime', 'LastAccessTime', 'CreationTime') {
-        Set-ItemProperty -LiteralPath $f -Name $ts -Value $ancient
-      }
-    }
-    $savedEx2 = $ws.ExcludePaths
-    $savedTbl2 = $Script:WS_EXCLUDE
-    $savedDry = $ws.DryRun
-    $savedFreed = $ws.TotalFreed
-    $savedEst = $ws.TotalEstimated
-    try {
-      $ws.ExcludePaths = @($prKeep)
-      Initialize-Exclusions
-      & $mute
-      $ws.DryRun = $true
-      $dry = Remove-StaleFiles -Root $pr -Within $pr -Days 1
-      $ws.DryRun = $false
-      $real = Remove-StaleFiles -Root $pr -Within $pr -Days 1
-      & $unmute
-      $agree = ($dry.Files -eq $real.Files) -and ($dry.Freed -eq $real.Freed)
-      $keptOnDisk2 = Test-Path -LiteralPath $keepFile
-      $goneFromDisk2 = -not (Test-Path -LiteralPath $goFile)
-      if ($agree -and $keptOnDisk2 -and $goneFromDisk2 -and $dry.Files -eq 1) {
-        Write-Ok "a dry-run and a real prune agree exactly when a file is excluded: both report $($dry.Files) file, the excluded one survives"
-      } else {
-        Write-Err "rehearsal and run disagree (dryFiles=$($dry.Files) realFiles=$($real.Files) dryBytes=$($dry.Freed) realBytes=$($real.Freed) kept=$keptOnDisk2 siblingGone=$goneFromDisk2)"; $fails++
-      }
-    } finally {
-      $ws.ExcludePaths = $savedEx2
-      $Script:WS_EXCLUDE = $savedTbl2
-      $ws.DryRun = $savedDry
-      $ws.TotalFreed = $savedFreed
-      $ws.TotalEstimated = $savedEst
-    }
-
-
-    # 18e - a read-only scan REPORTS the developer answer it was given, and invents one when it was not.
-    # --scan parsed --developer / --not-developer into DeveloperFlag and then never read it, because
-    # Resolve-DeveloperMode ran only for walkthrough, menu, all and only. So section 0 printed
-    # "Developer mode: not decided yet" whatever you passed, and --json returned developer: null. The
-    # desktop window sends those flags to --scan and could not read back the setting it had just sent.
-    # Three orientations, because two of them would pass on the broken code by accident:
-    #   A the flag is honoured,  B a saved answer is honoured,  C neither exists -> still undecided.
-    $checks++
-    $savedFlag = $ws.DeveloperFlag
-    $savedDev = $ws.Developer
-    $savedSrc = $ws.DeveloperSource
-    $savedCfg = $ws.Config
-    $savedInter = $ws.Interactive
-    $savedForget = $ws.ForgetDeveloper
-    try {
-      $ws.Interactive = $true          # -ReadOnly must not ask even here; a prompt would hang the suite
-      $ws.ForgetDeveloper = $false
-
-      # A - the flag wins, and --not-developer is the case that was silently dropped
-      $ws.Config = @{}
-      $ws.DeveloperFlag = $false
-      $ws.Developer = $null
-      $ws.DeveloperSource = $null
-      & $mute
-      Resolve-DeveloperMode -ReadOnly
-      & $unmute
-      $aOk = ($ws.Developer -eq $false) -and ($ws.DeveloperSource -eq 'flag')
-
-      # B - no flag, but a saved answer exists
-      $ws.Config = @{ developer = $true }
-      $ws.DeveloperFlag = $null
-      $ws.Developer = $null
-      $ws.DeveloperSource = $null
-      & $mute
-      Resolve-DeveloperMode -ReadOnly
-      & $unmute
-      $bOk = ($ws.Developer -eq $true) -and ($ws.DeveloperSource -eq 'config')
-
-      # C - neither: a read-only mode must NOT invent a decision, and must not write config.json
-      $ws.Config = @{}
-      $ws.DeveloperFlag = $null
-      $ws.Developer = $null
-      $ws.DeveloperSource = $null
-      & $mute
-      Resolve-DeveloperMode -ReadOnly
-      & $unmute
-      $cOk = ($null -eq $ws.Developer) -and ($null -eq $ws.Config.developer)
-
-      if ($aOk -and $bOk -and $cOk) {
-        Write-Ok "a read-only scan honours --not-developer (flag) and a saved answer (config), and stays undecided when it has neither"
-      } else {
-        Write-Err "read-only developer resolution wrong (flagHonoured=$aOk savedHonoured=$bOk stillUndecided=$cOk)"; $fails++
-      }
-    } finally {
-      $ws.DeveloperFlag = $savedFlag
-      $ws.Developer = $savedDev
-      $ws.DeveloperSource = $savedSrc
-      $ws.Config = $savedCfg
-      $ws.Interactive = $savedInter
-      $ws.ForgetDeveloper = $savedForget
-    }
+    # [18] moved to modules/self_test_contract.ps1 at the 1.3.0 cascade (RW-121), to bring this file back
+    # under the 500-line ceiling. Same fixture root, same counters, the checks themselves unchanged.
+    $contract = Invoke-SelfTestContract -Fixture $fx
+    $checks += $contract.Checks; $fails += $contract.Fails
 
   } catch {
     & $unmute

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "windowsweep",
-  "version": "1.2.0",
+  "version": "1.3.1",
   "description": "Developer-aware Windows cleanup CLI: dry-run first, personal folders refused, zero install via npx.",
   "bin": {
     "windowsweep": "bin/windowsweep.js"
@@ -53,7 +53,7 @@
     "url": "https://aoneahsan.com"
   },
   "license": "MIT",
-  "homepage": "https://github.com/aoneahsan/windowsweep",
+  "homepage": "https://windowsweep.aoneahsan.com",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/aoneahsan/windowsweep.git"

package/windowsweep.ps1

@@ -29,7 +29,7 @@ $Script:WS = @{
   Refusals = @(); Hints = @(); ExitCode = 0; Finished = $false; AllowOwnData = $false
 }
 
-foreach ($lib in @('constants', 'ui', 'log', 'fs', 'safety', 'config', 'scan', 'actions')) {
+foreach ($lib in @('constants', 'ui', 'log', 'fs', 'safety', 'external', 'config', 'scan', 'actions')) {
   . (Join-Path $Script:WS_ROOT "lib\$lib.ps1")
 }
 foreach ($m in (Get-ChildItem -LiteralPath (Join-Path $Script:WS_ROOT 'modules') -Filter '*.ps1' | Sort-Object Name)) {
@@ -103,7 +103,7 @@ OUTPUT
   Logs:    $($Script:WS.LogsDir)
   Reports: $($Script:WS.ReportsDir)
 
-$Script:WS_NAME v$v  by $Script:WS_AUTHOR <$Script:WS_EMAIL>  $Script:WS_WEB
+$Script:WS_NAME v$v  by $Script:WS_AUTHOR  $Script:WS_WEB
 $Script:WS_REPO  -  $Script:WS_LICENSE
 "@
   Write-Host $text