windowsweep 1.3.2 → 1.4.1

package/AI-INTEGRATION-GUIDE.md

@@ -3,7 +3,7 @@
 This is the contract an automated caller can rely on: what windowsweep promises, what it refuses, what it
 prints, and what it returns. It is written for an agent or a script rather than a person. For what the tool
 *is*, read the [README](https://github.com/aoneahsan/windowsweep#readme); for what each section touches, read
-[Sections 0-25](https://github.com/aoneahsan/windowsweep/blob/main/docs/sections.md).
+[Sections 0-29](https://github.com/aoneahsan/windowsweep/blob/main/docs/sections.md).
 
 **windowsweep deletes files.** Every command below that is not marked read-only can remove data. There is no
 undo for caches. Treat a real run as an irreversible operation and preview it first.
@@ -22,17 +22,17 @@ summary**, and every human-readable line goes to stderr. `--json` also implies `
 
 ## What `--yes` covers, and what it never covers
 
-`--yes` auto-confirms **regenerable caches only**: sections 0-3, 5-10, 21, and 12-13 when the console is
+`--yes` auto-confirms **regenerable caches and superseded releases only**: sections 0-3, 5-10, 21, 28, and 12-13 when the console is
 already elevated.
 
 | Never covered by `--yes` | Behaviour |
 |---|---|
-| Sections 17, 18, 19, 23 | The selection prompt appears even with `--yes` and defaults to none. With no console attached nothing is selected, and each asks a final question `--yes` does not answer. Only `--select` / `--select-file` supply a choice (see below) |
-| Sections 11, 15, 16, 20 | Deep. Refused in batch mode unless `--i-understand-deep` is also passed |
+| Sections 17, 18, 19, 23, 26, 27 | The selection prompt appears even with `--yes` and defaults to none. With no console attached nothing is selected, and each asks a final question `--yes` does not answer. Only `--select` / `--select-file` supply a choice (see below) |
+| Sections 11, 15, 16, 20, 29 | Deep. Refused in batch mode unless `--i-understand-deep` is also passed |
 | `--uninstall-data` | Always asks; `--yes` does not answer it |
 | `--purge-all` | From a console it asks for a typed `purge` once per run. In a batch run `--yes` is the confirmation |
 
-In batch mode (`--all`, `--only`, `--profile`) sections 17, 18, 19 and 23 are refused outright and reported as
+In batch mode (`--all`, `--only`, `--profile`) sections 17, 18, 19, 23, 26 and 27 are refused outright and reported as
 `refused`, unless a `--select` or `--select-file` choice was supplied. They need a person choosing items -
 in advance is fine, absent is not.
 
@@ -133,7 +133,7 @@ answered by a script, so `--elevate` does not belong in an unattended context.
 - - **Protected paths are refused regardless of flags**: every drive root, fifteen declared roots (Windows, System32, SysWOW64, both Program Files folders, ProgramData, `C:\Users` with Default and Public, the profile root, and the AppData Roaming, Local and LocalLow folders), 66 protected subtrees, 50 path patterns and 13 file names. Two paths are declared exceptions - `%LOCALAPPDATA%\Android\Sdk\.temp` and `.downloadIntermediates` - and there are no others. No flag bypasses any of it.
 - **Junctions and symlinks are removed as links, never followed.**
 - **`--dry-run` and `--scan` write nothing** but the log and the report.
-- **Section numbers are a public contract.** 0-25 today; a section may be retired as a no-op, and a number is
+- **Section numbers are a public contract.** 0-29 in the current source; a section may be retired as a no-op, and a number is
   never reused. Read `--list --json` rather than hard-coding the set.
 - **Zero runtime dependencies.** The package is PowerShell plus a Node launcher that uses only built-in
   modules.
@@ -144,7 +144,7 @@ answered by a script, so `--elevate` does not belong in an unattended context.
   local package and the command fails. Run it from anywhere else.
 - Do not schedule `npx windowsweep` as a task action. The npx cache is evicted and the task breaks; install
   globally and use `--install-task`, which refuses under npx for this reason.
-- Do not pipe `y` into the tool to force a personal section. Sections 17, 18, 19 and 23 are interactive by
+- Do not pipe `y` into the tool to force a personal section. Sections 17, 18, 19, 23, 26 and 27 are interactive by
   design and a piped answer selects nothing - pass `--select` or `--select-file` instead, which is the
   supported way and names exactly what goes.
 - Do not treat a green `--dry-run` as proof that a real run frees the same amount: an app that is open at run
@@ -152,7 +152,7 @@ answered by a script, so `--elevate` does not belong in an unattended context.
 
 ## Driving the interactive sections (1.1.0+)
 
-Sections 17, 18, 19 and 23 refuse to run unattended, because they delete things a person should choose. Two
+Sections 17, 18, 19, 23, 26 and 27 refuse to run unattended, because they delete things a person should choose. Two
 flags supply that choice in advance, and either one lifts the refusal:
 
 ```powershell

package/CHANGELOG.md

@@ -9,6 +9,96 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 
 ## [Unreleased]
 
+## [1.4.1] - 2026-11-03
+
+### Fixed
+
+- The desktop app now reads published release records on start, resume and reconnect. An urgent release blocks an older build immediately; a normal release is announced immediately and required from the next start. Its Update button uses the signed updater.
+- Removed the desktop updater's six-hour network timer. Release broadcasts and lifecycle events trigger the checks.
+- Corrected the package's release notes and documentation for section 19's Recycle Bin rule and section 26's permanent uninstall action.
+
+## [1.4.0] - 2026-11-03
+
+### Added
+
+- **Section 26 - uninstall the programs you pick.** It lists the installed programs - never Windows parts,
+  runtimes, drivers, hardware software, build kits or patches - and removes the ones you select with their own
+  uninstaller, one at a time, silently where the uninstaller has a silent form (MSI, Inno Setup, NSIS, Chromium
+  family, WiX bundles, winget, Docker Desktop, Qt, Adobe Creative Cloud, rustup) and in the vendor's own window
+  otherwise. A program installed for all users needs an elevated run. After a real uninstall it offers the
+  folders the program left for the Recycle Bin. `--yes` never selects here; `--select` or `--select-file` does.
+- **Section 27 - folders uninstalled programs left behind.** It lists the top-level folders in Program Files,
+  both Common Files and ProgramData that no installed program, service, driver, PATH or environment entry, Run
+  entry, shortcut, scheduled task or running process still uses and that have been idle `--days`, and moves the
+  ones you pick to the Recycle Bin. A folder inside a protected location is shown, never removed, and an
+  unreadable registry offers nothing. Registered COM servers and type libraries count as use too (shared Office
+  and ADO components live in Common Files and are registered only that way), and shared Microsoft folders,
+  install caches and hardware-driver folders are never offered. It also lists environment entries that name
+  something that no longer exists (report only). Administrator; it joins the elevated walkthrough.
+- **`--json` candidates can carry a `label`.** Section 26's program candidates use the program's uninstall
+  registry key as their `path` and its name as `label`; the folders it offers after an uninstall carry
+  `leftover: <program>`.
+- **Section 4 also clears what emulators leave behind.** It looks in every folder the emulator may keep AVDs in
+  (`ANDROID_AVD_HOME`, `ANDROID_EMULATOR_HOME`, `ANDROID_SDK_HOME`, `ANDROID_PREFS_ROOT`), moves pointer `.ini` files
+  whose AVD is gone to the Recycle Bin, and removes system images no remaining AVD uses - and the emulator once no
+  AVD is left - with the SDK's own `sdkmanager`. An AVD whose settings name no image keeps every image, and a folder
+  an interrupted SDK install left is named for you to remove.
+- **`--browser-profile-roots "P1;P2"` (config `browserProfileRoots`) for section 7.** Folders holding test or
+  automation browser profiles: section 7 clears the cache folders of each Chromium profile found in them, and skips
+  a profile a running browser holds. Only those cache folders are opened up; the profiles stay protected.
+- **`--temp-roots "P1;P2"` (config `tempRoots`) for section 10.** Folders you use as scratch space: each entry
+  nothing wrote for `--temp-days` goes whole, unless a running program's command line names it.
+- **Section 24 shows when each program last ran.** In an elevated run it reads Windows Prefetch and adds a RAN
+  column; "none" means no run is on record. File names many programs ship (`uninstall.exe`, `update.exe`,
+  `setup.exe`, crash handlers) never count, because Prefetch records a run by file name only.
+- **Section 19 is now a data scanner: large or old personal files.** It lists files in Downloads, and in folders
+  you add with `--personal-roots "P1;P2"` (config `personalRoots`), that are large (`--large-file-mb` or more, at
+  any age) or old (untouched for `--days`, at any size) - each file once, with its reason, age and the timestamps
+  that age came from. A folder is refused as a root when it is a drive root, your profile folder, inside Windows,
+  Program Files, ProgramData or AppData, a link, or protected. Removal stays yours: exact files only, never by
+  `--yes`, always the Recycle Bin - and a file that changed after the list was made, or is now reached through a
+  link, is refused. File names and paths stay on your machine. `--json` candidates for section 19 add `reason`
+  (`large`/`old`/`both`), `age_basis` (`write` or `write+access`), `modified`, `root` and `selectable` (with
+  `skip_reason` and `index` 0 for a file that cannot be picked); the summary adds `personal_roots`.
+- **Section 28 - superseded tool releases and old downloaded updates.** Tools that update themselves often keep
+  every old release. This removes the superseded ones and keeps the release in use, any newer one and the newest
+  older one; a release a running program uses is skipped. It covers Codex standalone releases, Electron updaters
+  named without "@" (installers and pending updates idle 7+ days), Ollama's downloaded update and - in developer
+  mode, with `--scan-roots` - Node versions no project asks for, removed with nvm itself. It joins `--all` and the
+  `dev` and `deep` profiles.
+- **Section 29 - Chrome's on-device AI model.** Chrome downloads a model of several GB and fetches it again if the
+  folder is deleted. This sets the `GenAILocalFoundationalModelSettings` policy that stops the download; Chrome
+  then removes the model on its next start, and the folder goes at once when Chrome is closed. Chrome shows
+  "Managed by your organization" while the policy is set; the section prints the one-line undo. It is a deep,
+  administrator section that no batch or profile runs.
+
+### Changed
+
+- **Idle age uses write time where last-access is live.** When nearly every file written a week or more ago
+  was also "read" in the last day - an indexer, a backup, an antivirus or a disk scanner reading everything -
+  last-access says nothing, and the idle gate used to keep every file. Each root is now sampled once; where
+  last-access is live, idle age uses write and creation time, the log says so, and `--json` lists those volumes
+  in `access_live_volumes`. Everywhere else the rule is unchanged. The sample walks on until it holds enough old
+  files, so a folder of mostly new files - a busy temp folder - is judged on its own and the answer no longer
+  depends on which section ran first.
+- **More folders are protected roots.** Both Common Files folders and `ProgramData\Microsoft` can never be
+  removed as a whole, whatever an installer registered as its own folder.
+
+### Fixed
+
+- **`--exclude-path` now also holds inside the tool's own exceptions.** An exception (the Android SDK temp
+  folders, and from this release the superseded Codex releases) used to let a path through even when you had
+  excluded it.
+- **Section 23 no longer offers folders that still belong to something.** It offered the desktop app's own
+  data folder, a Store app's data, an installed program known by its initials, and a tool running from its
+  own folder. A reverse-DNS folder name (`com.vendor.app`) is now matched segment by segment, a shared vendor
+  stem counts as a claim, a program of three or more words also claims its initials, and the folders in a
+  running program's command-line paths count as claimed. The desktop app's install and data folders are
+  protected outright.
+- **`--json` is one line again on every run.** Section 12's Delivery Optimization step printed two lines to
+  stdout ahead of the JSON document. Its words now go to the log, and the runner discards anything a section
+  leaves on its output stream.
+
 ## [1.3.2] - 2026-09-28
 
 No change to what is cleaned, how it is decided, or what is refused: the engine is 1.3.1's, file for file.

package/README.md

@@ -4,12 +4,11 @@
 
 <h1>windowsweep</h1>
 
-<p><strong>Developer-aware Windows cleanup CLI: dry-run first, personal folders refused, zero install via npx.</strong></p>
+<p><strong>Windows cleanup CLI: dry-run first, personal files chosen row by row, zero install via npx.</strong></p>
 
 [![npm version](https://img.shields.io/npm/v/windowsweep.svg)](https://www.npmjs.com/package/windowsweep)
 [![downloads](https://img.shields.io/npm/dm/windowsweep.svg)](https://www.npmjs.com/package/windowsweep)
 [![license](https://img.shields.io/npm/l/windowsweep.svg)](https://github.com/aoneahsan/windowsweep/blob/main/LICENSE)
-[![ci](https://github.com/aoneahsan/windowsweep/actions/workflows/ci.yml/badge.svg)](https://github.com/aoneahsan/windowsweep/actions/workflows/ci.yml)
 [![node](https://img.shields.io/node/v/windowsweep.svg)](https://nodejs.org)
 [![platform](https://img.shields.io/badge/platform-Windows%2010%20%7C%2011-0078d4?logo=windows&logoColor=white)](https://github.com/aoneahsan/windowsweep#platform-support)
 
@@ -19,10 +18,11 @@
 
 > [!IMPORTANT]
 > **This tool deletes files.** Most of what it removes are caches that rebuild themselves; personal files it
-> lists go to the Recycle Bin; and two sections - emptying the Recycle Bin, clearing event logs - are
-> permanent, with no undo of any kind. Those two sit behind `--i-understand-deep`, along with the hibernation
+> lists go to the Recycle Bin; emptying the Recycle Bin and clearing event logs have no undo. Those two sit
+> behind `--i-understand-deep`, along with the hibernation
 > file and disk-image compaction. Start with `npx windowsweep --scan`, which deletes nothing, then
 > `npx windowsweep --dry-run --all --yes`, which shows exactly what a real run would remove.
+> Uninstalling a program you select in section 26 is permanent too.
 > **Windows only** - npm refuses to install it elsewhere.
 
 What it reclaims is the disk space that quietly disappears on a Windows machine: package-manager and build caches,
@@ -36,14 +36,14 @@ It is the Windows member of a family with [linux-cleanup](https://github.com/aon
 
 | | |
 |---|---|
-| **Version** | `1.3.2` |
+| **Version** | `1.4.1` |
 | **License** | MIT |
 | **Node** | `>=14` (launcher only) |
 | **Runtime** | Windows PowerShell 5.1 (built in) or PowerShell 7 |
 | **Platforms** | Windows 10 (1809+) and Windows 11 |
-| **Install size** | ~120 kB packed · ~401 kB unpacked · 46 files · no dependencies |
+| **Install size** | ~167 kB packed · ~560 kB unpacked · 53 files · no dependencies |
 | **Undo** | Recycle Bin for personal files; none for caches (they regenerate) |
-| **Status** | Stable · 1.3.2, released 2026-09-28 |
+| **Status** | Stable · 1.4.1, released 2026-11-03 |
 
 <a id="table-of-contents"></a>
 ## 🧭 Table of Contents&nbsp;[#](#table-of-contents)
@@ -88,7 +88,7 @@ the lot again, and your afternoon is gone. `windowsweep` takes the narrower path
 |---|---|---|---|
 | **Knows developer caches** | yarn, npm, pnpm, Gradle, Cypress, Playwright, AVDs, Docker, editors | no | some |
 | **Default action** | prune files idle 100+ days; keep the newest version of every tool | fixed categories | wipe the whole cache |
-| **Personal folders** | hard refusal, no flag bypasses it | out of scope | usually configurable |
+| **Personal folders** | Downloads and folders you add are scanned for large or old files; only chosen files go to the Recycle Bin | out of scope | usually configurable |
 | **Junctions and symlinks** | never followed | n/a | varies |
 | **Dry-run** | every section, exact estimate | no | sometimes |
 | **Unattended use** | `--all --yes`, Scheduled Task | Storage Sense | GUI-first |
@@ -117,7 +117,7 @@ reclaims disk space, nothing else.
 - check [6] walks every directory and file target and fails if one resolves inside a protected path.
 - **A dry-run that writes nothing** - `--dry-run` short-circuits every deletion and every destructive command
   and reports an exact estimate. `--scan` and `--list-targets` are read-only.
-- **Personal files go to the Recycle Bin** - partial downloads and large stale files are listed, you pick, and
+- **Personal files go to the Recycle Bin** - partial downloads and large or old files are listed, you pick, and
   Windows keeps the undo.
 - **Batch policy** - `--all` runs the safe batch only; deep sections need `--i-understand-deep`; personal
   sections never run unattended.
@@ -126,7 +126,7 @@ reclaims disk space, nothing else.
 - **Running-app guard** - an open browser, editor or app keeps its caches; the tool tells you which to close.
 - **Session reports** - schema-versioned JSON, exportable to Markdown or a self-contained HTML page, plus
   `--json` for scripts.
-- **Self-test** - 156 checks prove the guards on your machine with a real junction, a 445-character path and
+- **Self-test** - 223 checks prove the guards on your machine with a real junction, a path longer than 260 characters and
   a dry-run fixture before you trust it.
 - **Offline by design** - the command-line tool makes zero network calls: no telemetry, no update check.
   Self-test check [9] fails the build on an HTTP or socket call in the source. Crash bundles stay on disk.
@@ -138,7 +138,7 @@ reclaims disk space, nothing else.
 |---|---|---|
 | Windows 11 | ✅ | Same engine and PowerShell hosts; a real run on Windows 11 is on the verification list ([project status](https://github.com/aoneahsan/windowsweep/blob/main/docs/features/windowsweep-completion/00-tracker.json)) |
 | Windows 10 (1809 and later) | ✅ | The primary development target; every real run so far |
-| Windows Server 2019+ | ⚠️ | Uses nothing newer than 1809; CI runs the self-test and a dry-run on Windows Server (`windows-latest`) on every push to `main` and every pull request, but no real cleanup has been run on Server |
+| Windows Server 2019+ | ⚠️ | Uses nothing newer than 1809; no real cleanup has been verified on Server |
 | Linux | ❌ | `os: ["win32"]` makes npm refuse to install; use [linux-cleanup](https://github.com/aoneahsan/linux-cleanup) |
 | macOS | ❌ | Use [macleanup](https://github.com/aoneahsan/macleanup) |
 
@@ -202,6 +202,8 @@ section with `a` run / `s` skip / `q` quit and a running total.
 
 ### The sections
 
+This table describes version 1.4.1.
+
 **Tier** says what happens to the data: *report* deletes nothing, *rebuilds* comes back on its own, *slow*
 comes back but costs minutes, *Recycle Bin* is recoverable until you empty it (`--list` shows this tier as
 `recycle`), *permanent* is not, *config* changes a setting.
@@ -227,19 +229,23 @@ comes back but costs minutes, *Recycle Bin* is recoverable until you empty it (`
 | 16 | Clear Windows Event Logs | **permanent** | yes | deep |
 | 17 | Stale project build artefacts (`node_modules`, `dist`, `.next`, `target`, ...) | rebuilds | - | interactive, developer-gated |
 | 18 | Partial / orphan downloads | Recycle Bin | - | interactive |
-| 19 | Large stale personal files in Downloads | Recycle Bin | - | interactive |
+| 19 | Large or old personal files in Downloads and folders you add | Recycle Bin | - | interactive |
 | 20 | Docker Desktop / WSL disk-image compaction | config | yes | deep, developer-gated |
 | 21 | Disk usage report | report | - | safe |
 | 22 | Global packages audit (npm, pnpm, yarn, bun, deno) - never uninstalls | report | - | safe · audit only |
 | 23 | Orphaned application data under AppData | Recycle Bin | - | interactive |
 | 24 | Installed programs not modified for N+ days - never uninstalls | report | - | safe · audit only |
 | 25 | Startup items audit - never changes them | report | - | safe · audit only |
+| 26 | Uninstall programs you pick | **permanent** | per program | interactive |
+| 27 | Leftover program folders | Recycle Bin | yes | interactive |
+| 28 | Superseded tool releases | rebuilds | - | safe |
+| 29 | Chrome on-device AI model policy | config | yes | deep |
 
 *Safe* sections run in `--all`; *opt-in* ones run when named in `--only` or a profile; *deep* ones also need
 `--i-understand-deep`; *interactive* ones never run unattended unless you pass a selection. The three
 *audit only* sections are read-only and safe, but stay out of `--all` so a cleanup run is a cleanup run -
 `--profile audit` is where they live. Every section is documented in
-[Sections 0-25](https://windowsweep-docs.aoneahsan.com/sections).
+[Sections 0-29](https://windowsweep-docs.aoneahsan.com/sections).
 
 ### Reclaim interactively
 
@@ -308,17 +314,20 @@ windowsweep [mode] [options]
 |---|---|---|
 | `--dry-run` | off | Delete nothing; show what would go and how much it frees |
 | `-y`, `--yes` | off | Auto-confirm regenerable caches. Never personal files |
-| `--i-understand-deep` | off | Allow sections 11, 15, 16, 20 unattended (with `--yes`) |
+| `--i-understand-deep` | off | Allow sections 11, 15, 16, 20, 29 unattended (with `--yes`) |
 | `--elevate` | off | Relaunch elevated through a UAC prompt |
 | `-d N`, `--days N` | `100` | Idle window: a file goes when its newest timestamp is N+ days old |
 | `--temp-days N` | `3` | Idle window for temp folders |
 | `--purge-all` | off | 🔥 Clear cache targets completely instead of pruning idle files |
 | `--developer`, `--not-developer`, `--forget-developer` | saved answer | Override or re-ask the developer question |
 | `--scan-roots "P1;P2"` | auto | Section 17 project roots |
+| `--personal-roots "P1;P2"` | Downloads only | Extra section 19 folders; explicit empty keeps Downloads only |
+| `--browser-profile-roots "P1;P2"` | none | Cache leaves inside declared automation browser profiles |
+| `--temp-roots "P1;P2"` | none | Idle scratch-folder entries |
 | `--exclude-path P` | - | A tree to leave alone, in **every** section (repeatable) |
 | `--hiberfil off\|reduced\|keep` | ask | What section 15 does |
-| `--permanent` | off | Sections 18, 19 and 23 delete instead of using the Recycle Bin |
-| `--select L`, `--select-file P` | off | Answer an interactive section's selection in advance, by index or by path - the one way sections 17/18/19/23 run unattended |
+| `--permanent` | off | Sections 18 and 23 delete instead of using the Recycle Bin; section 19 always recycles selected personal files |
+| `--select L`, `--select-file P` | off | Answer an interactive section's selection in advance; section 19 requires exact paths in `--select-file` |
 | `--notify` | off | A Windows notification when the run ends |
 | `--json`, `--quiet`, `--no-color`, `--ascii`, `--no-report`, `--cleanup-logs` | off | Output and record controls |
 
@@ -396,9 +405,8 @@ More: [Troubleshooting](https://windowsweep-docs.aoneahsan.com/troubleshooting).
   Bin instead.
 - **Windows only.** Linux and macOS are blocked at install and at launch.
 - **It cannot promise a number.** `--scan` measures your disk; the README will not guess.
-- **The idle gate is conservative.** Windows keeps last-access times off on most volumes, so the tool reads the
-  newest of write, access and creation time - a file can only look fresher than it is, never older. Some old
-  caches survive the default window; `--days` and `--purge-all` exist for that.
+- **The idle gate checks each volume.** Where last-access is live it uses write and creation time; elsewhere
+  it uses the newest of write, access and creation. `--days` and `--purge-all` change how much is offered.
 - **Admin sections need an elevated console** and a UAC click; a Scheduled Task runs the safe batch only.
 - **Disk Cleanup (section 13) cannot preview sizes.** Its dry-run names the handlers it would run and nothing more.
 - **No automated test suite beyond `--self-test`.** Correctness rests on the self-test's fixtures, dry-runs and
@@ -439,7 +447,7 @@ More: [FAQ](https://windowsweep-docs.aoneahsan.com/faq).
 | [Quick start](https://windowsweep-docs.aoneahsan.com/quick-start) | running your first cleanup |
 | [Safety model](https://windowsweep-docs.aoneahsan.com/safety-model) | you want every guarantee spelled out before deleting anything |
 | [Developer mode](https://windowsweep-docs.aoneahsan.com/developer-mode) | you want to know what the first question changes |
-| [Sections 0-25](https://windowsweep-docs.aoneahsan.com/sections) | you want to know precisely what one section touches |
+| [Sections 0-29](https://windowsweep-docs.aoneahsan.com/sections) | you want to know precisely what one section touches |
 | [CLI reference](https://windowsweep-docs.aoneahsan.com/cli-reference) | you need an exact flag, exit code or variable |
 | [Admin sections and elevation](https://windowsweep-docs.aoneahsan.com/admin-and-elevation) | before running the system profile or touching the hibernation file |
 | [Reports and logs](https://windowsweep-docs.aoneahsan.com/reports-and-logs) | parsing the JSON or finding a log |
@@ -451,16 +459,9 @@ More: [FAQ](https://windowsweep-docs.aoneahsan.com/faq).
 <a id="changelog"></a>
 ## 🔄 Changelog&nbsp;[#](#changelog)
 
-Latest release: **`1.3.2`** - the engine is 1.3.1's, file for file. The version moves so the desktop app and
-the engine it bundles keep one number, and the desktop app's 1.3.2 fixes its Google sign-in.
-
-Before it, **`1.3.1`** - nothing about what is cleaned, how it is decided or what is refused changed. The tool
-names the windowsweep team as its maker instead of one person, and the web address it prints is the product's
-own site.
-
-Before that, **`1.3.0`** - the documentation address the tool carries became the documentation site, two files
-that had grown past the project's own 500-line ceiling were split (the deletion chokepoint stayed exactly where
-it was), and the at-a-glance rows inside the published package were corrected.
+Latest release: **`1.4.1`** - the 1.4 scanner searches Downloads and folders you add for large or old files;
+you choose individual files for the Recycle Bin. The uninstall and leftover-folder sections require explicit
+selection. This patch corrects release documentation and adds the desktop release notice and update gate.
 Full history: [CHANGELOG.md](https://github.com/aoneahsan/windowsweep/blob/main/CHANGELOG.md).
 
 <a id="contributing"></a>

package/VERSION

@@ -1 +1 @@
-1.3.2
+1.4.1

package/lib/actions.ps1

@@ -106,6 +106,19 @@ function Test-KnownCacheLeaf {
   return ($known -contains [IO.Path]::GetFileName($Path))
 }
 
+function Add-CacheLeafExceptions {
+  <# .SYNOPSIS D79 (P9): lift the protected lists (lib/safety.ps1) for EXACTLY these folders, each of which must
+     carry a declared cache folder's name - never a profile, an app root or a protected root. Returns the count. #>
+  param([string[]] $Paths)
+  $pr = $Script:WS_PROTECT; $n = 0
+  foreach ($x in @($Paths)) {
+    $f = Get-FullPath $x
+    if (-not $f -or $pr.Exact.Contains($f) -or -not (Test-KnownCacheLeaf $f) -or $pr.Exceptions -contains $f) { continue }
+    $pr.Exceptions = @($pr.Exceptions) + $f; $pr.ExceptionPrefixes = @($pr.ExceptionPrefixes) + ($f + '\'); $n++
+  }
+  return $n
+}
+
 function Invoke-TargetList {
   <# .SYNOPSIS Run every target with its mode under the dry-run, developer, purge and running-app policies. Returns bytes freed/estimated. #>
   param([pscustomobject[]] $Targets)

package/lib/config.ps1

@@ -10,6 +10,9 @@ function Get-DefaultConfig {
     largeFileMb = 100
     scanRoots = @()
     excludePaths = @()
+    browserProfileRoots = @()
+    tempRoots = @()
+    personalRoots = @()
     welcomed = $false
   }
 }
@@ -28,6 +31,7 @@ function Import-Config {
       }
       if ($null -eq $cfg.scanRoots) { $cfg.scanRoots = @() }
       if ($null -eq $cfg.excludePaths) { $cfg.excludePaths = @() }
+      foreach ($k in 'browserProfileRoots', 'tempRoots', 'personalRoots') { if ($null -eq $cfg[$k]) { $cfg[$k] = @() } }
     } catch {
       Write-Warn "config file unreadable, using defaults: $path ($($_.Exception.Message))"
     }

package/lib/constants.ps1

@@ -4,10 +4,10 @@
 # Single source of truth for the version is package.json: the Node launcher exports it as
 # WINDOWSWEEP_VERSION. A direct checkout falls back to this literal; the version:check script
 # asserts the two never drift.
-$Script:WS_VERSION_FALLBACK = '1.3.2'
+$Script:WS_VERSION_FALLBACK = '1.4.1'
 
 $Script:WS_NAME = 'windowsweep'
-$Script:WS_TAGLINE = 'Developer-aware Windows cleanup CLI: dry-run first, personal folders refused, zero install via npx.'
+$Script:WS_TAGLINE = 'Windows cleanup CLI: dry-run first, personal files chosen row by row, zero install via npx.'
 # The maker is the team, never one person. WS_AUTHOR lands mid-line ("by the windowsweep team");
 # WS_TEAM is the form a label shows standing alone ("Author: The windowsweep team").
 $Script:WS_AUTHOR = 'the windowsweep team'
@@ -63,31 +63,35 @@ $Script:WS_SECTIONS = @(
   @{ Id = 16; Key = 'eventlogs';  Title = 'Clear Windows Event Logs - PERMANENT';                     Tier = 'permanent'; Admin = $true;  Batch = 'deep';        Dev = $false; Fn = 'Invoke-Section16' }
   @{ Id = 17; Key = 'projects';   Title = 'Stale project build artefacts (node_modules, dist, .next, target, ...)'; Tier = 'rebuilds'; Admin = $false; Batch = 'interactive'; Dev = $true; Fn = 'Invoke-Section17' }
   @{ Id = 18; Key = 'partials';   Title = 'Partial / orphan downloads -> Recycle Bin';                Tier = 'recycle';   Admin = $false; Batch = 'interactive'; Dev = $false; Fn = 'Invoke-Section18' }
-  @{ Id = 19; Key = 'large';      Title = 'Large stale personal files (Downloads) -> Recycle Bin';    Tier = 'recycle';   Admin = $false; Batch = 'interactive'; Dev = $false; Fn = 'Invoke-Section19' }
+  @{ Id = 19; Key = 'large';      Title = 'Large or old personal files (Downloads and folders you add) -> Recycle Bin'; Tier = 'recycle';   Admin = $false; Batch = 'interactive'; Dev = $false; Fn = 'Invoke-Section19' }
   @{ Id = 20; Key = 'vhdx';       Title = 'Docker Desktop / WSL disk image compaction (stops Docker + WSL)'; Tier = 'config'; Admin = $true; Batch = 'deep';    Dev = $true;  Fn = 'Invoke-Section20' }
   @{ Id = 21; Key = 'diskusage';  Title = 'Disk usage report (largest entries, drives, disk images)'; Tier = 'report';    Admin = $false; Batch = 'safe';        Dev = $false; Fn = 'Invoke-Section21' }
   @{ Id = 22; Key = 'globals';    Title = 'Globally installed packages audit (npm, pnpm, yarn, bun, deno) - report only'; Tier = 'report'; Admin = $false; Batch = 'safe'; Dev = $false; Fn = 'Invoke-Section22' }
   @{ Id = 23; Key = 'orphaned';   Title = 'Orphaned application data under AppData -> Recycle Bin';   Tier = 'recycle';   Admin = $false; Batch = 'interactive'; Dev = $false; Fn = 'Invoke-Section23' }
   @{ Id = 24; Key = 'programs';   Title = 'Installed programs not modified for N+ days - report only'; Tier = 'report';   Admin = $false; Batch = 'safe';        Dev = $false; Fn = 'Invoke-Section24' }
   @{ Id = 25; Key = 'startup';    Title = 'Startup items audit (Run keys, Startup folders, logon tasks) - report only'; Tier = 'report'; Admin = $false; Batch = 'safe'; Dev = $false; Fn = 'Invoke-Section25' }
+  @{ Id = 26; Key = 'uninstall';  Title = 'Uninstall programs you pick, each with its own uninstaller, then the folders they left -> Recycle Bin'; Tier = 'permanent'; Admin = $false; Batch = 'interactive'; Dev = $false; Fn = 'Invoke-Section26' }
+  @{ Id = 27; Key = 'leftovers';  Title = 'Folders uninstalled programs left in Program Files, Common Files and ProgramData -> Recycle Bin'; Tier = 'recycle'; Admin = $true; Batch = 'interactive'; Dev = $false; Fn = 'Invoke-Section27' }
+  @{ Id = 28; Key = 'releases';  Title = 'Superseded tool releases and old downloaded updates (Codex, Electron updaters, Ollama, unrequested Node) - current kept'; Tier = 'rebuilds'; Admin = $false; Batch = 'safe'; Dev = $false; Fn = 'Invoke-Section28' }
+  @{ Id = 29; Key = 'browserai';  Title = 'Chrome on-device AI model - set the policy that removes it (Chrome shows "Managed by your organization")'; Tier = 'config'; Admin = $true; Batch = 'deep'; Dev = $false; Fn = 'Invoke-Section29' }
 )
 
 # The safe batch run by --all. Admin sections 12 and 13 join it only when already elevated.
-$Script:WS_SAFE_BATCH = @(0, 1, 2, 3, 5, 6, 7, 8, 9, 10, 21)
+$Script:WS_SAFE_BATCH = @(0, 1, 2, 3, 5, 6, 7, 8, 9, 10, 21, 28)
 $Script:WS_SAFE_BATCH_ADMIN = @(12, 13)
 
 $Script:WS_PROFILES = @{
-  'dev'        = @(1, 2, 3, 4, 5, 6, 17)
+  'dev'        = @(1, 2, 3, 4, 5, 6, 17, 28)
   'minimal'    = @(7, 8, 9, 10)
   'cache-only' = @(1, 2, 3, 6, 7, 8, 9)
   'system'     = @(12, 13, 14)
-  'deep'       = @(0, 1, 2, 3, 5, 6, 7, 8, 9, 10, 12, 13, 14, 21)
+  'deep'       = @(0, 1, 2, 3, 5, 6, 7, 8, 9, 10, 12, 13, 14, 21, 28)
   'audit'      = @(0, 21, 22, 24, 25)
 }
 
 # Walkthrough order (interactive default mode). Admin sections are inserted when elevated.
-$Script:WS_WALKTHROUGH = @(1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 17, 18, 19, 23)
-$Script:WS_WALKTHROUGH_ADMIN = @(12, 13, 14)
+$Script:WS_WALKTHROUGH = @(1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 28, 11, 17, 18, 19, 23)
+$Script:WS_WALKTHROUGH_ADMIN = @(12, 13, 14, 27)
 
 function Get-Section {
   <# .SYNOPSIS Returns the catalogue entry for a section id, or $null. #>

package/lib/external.ps1

@@ -70,15 +70,28 @@ function Test-CanElevate {
 function Invoke-Elevated {
   <# .SYNOPSIS Relaunch this run elevated (UAC prompt) and wait for it. Returns the child's exit code. #>
   $ws = $Script:WS
+  $summaryPath = $null
+  if ($ws.JsonMode) {
+    $token = [guid]::NewGuid().ToString('N')
+    $summaryPath = Join-Path $ws.ReportsDir ("elevated-summary-$token.json")
+  }
   $childArgs = @('-NoProfile', '-NoLogo', '-ExecutionPolicy', 'Bypass', '-File', ('"' + $ws.ScriptPath + '"'))
   foreach ($a in $ws.RawArgs) {
     if ($a -eq '--elevate') { continue }
     if ($a -match '[\s"]') { $childArgs += ('"' + ($a -replace '"', '\"') + '"') } else { $childArgs += $a }
   }
   $childArgs += '--elevated-child'
+  if ($summaryPath) { $childArgs += @('--elevated-summary-token', $token) }
   Write-Info 'Requesting elevation (a UAC prompt appears). The elevated run opens in a new window and writes its own log.'
   try {
     $proc = Start-Process -FilePath 'powershell.exe' -ArgumentList $childArgs -Verb RunAs -Wait -PassThru
+    if ($summaryPath -and (Test-Path -LiteralPath $summaryPath)) {
+      try {
+        $json = [IO.File]::ReadAllText($summaryPath).Trim()
+        $null = $json | ConvertFrom-Json -ErrorAction Stop
+        [Console]::Out.WriteLine($json)
+      } finally { Remove-Item -LiteralPath $summaryPath -Force -ErrorAction SilentlyContinue }
+    }
     return $proc.ExitCode
   } catch {
     Write-Err "elevation refused or failed: $($_.Exception.Message)"