Make cleanup navigation reliable

CHANGELOG.md

@@ -2,6 +2,19 @@
 
 All notable changes to OpenDiskTree are recorded here.
 
+## 1.3.3 — 2026-09-03
+
+- Stop presenting permanent macOS system access denials as actionable scan errors during a full-disk scan.
+- Continue reporting protected user data, explicit folder-scan failures and non-permission I/O errors.
+- Remove previously stored permanent system access denials when opening an older local index.
+- Prevent a slower folder query from restoring stale rows after navigating back to the parent directory.
+- Retry an empty current folder selection and show an explicit loading state instead of an unexplained blank table.
+- Recalculate only affected parent folders after a Trash operation instead of blocking navigation with a full-index aggregation.
+- Finish interrupted snapshot bookkeeping on launch when an item already reached the system Trash.
+- Prevent background history maintenance from removing a recent running scan or the last usable snapshot.
+- Make the inaccessible counter open a searchable error list with copy and Finder actions, including live errors while a scan is running.
+- Add Command- and Shift-click multi-selection with one reviewed Trash operation for the selected batch.
+
 ## 1.3.2 — 2026-08-09
 
 - Apply incremental results directly to the current snapshot instead of copying every unchanged row into another multi-gigabyte snapshot.

README.md

@@ -58,7 +58,9 @@ The command creates `OpenDiskTree-arm64.dmg`, `OpenDiskTree-arm64.zip` and `SHA2
 
 Use **Scan Folder** for a normal directory or external local disk. **Scan Full Disk** starts at `/` and avoids mounted external, network and APFS backing volumes so the same data is not counted twice.
 
-macOS protects Mail, Messages, browser data and several other directories. To include them, open **Full Disk Access…**, enable OpenDiskTree in System Settings, quit the app and launch it again. The scanner never installs a privileged helper; paths that remain inaccessible are counted and exported as scan errors.
+macOS protects Mail, Messages, browser data and several other directories. To include them, open **Full Disk Access…**, enable OpenDiskTree in System Settings, quit the app and launch it again. The scanner never installs a privileged helper. Unexpected access failures are counted and exported as scan errors; permanently closed system-owned paths are skipped quietly during a full-disk scan because they cannot be opened by a non-privileged app even with Full Disk Access.
+
+The orange **inaccessible** count is a button. Open it to inspect every path and system error, search the list, copy it for troubleshooting or reveal the nearest available parent directory in Finder. These entries do not stop the scan, but totals below an inaccessible directory can be incomplete.
 
 When you choose a folder through **Scan Folder**, OpenDiskTree stores a macOS security-scoped bookmark for that folder and reuses it on the next launch. The first access still requires the normal macOS confirmation. Scanning the entire `/` volume is governed by the separate Full Disk Access setting; rebuilding an ad-hoc local copy can make macOS treat it as a new app identity and ask again.
 
@@ -70,6 +72,8 @@ The app starts a separate quick overview while the exact scan is preparing. It l
 
 While a scan is running, the status bar shows elapsed time, processing rate and the current path. Folder totals and the treemap settle after the final aggregation pass; until then the interface labels them as calculating rather than displaying a misleading zero.
 
+The results table supports normal macOS multi-selection with **Command-click** and **Shift-click**. The inspector summarizes the selected size and statuses, and can move the reviewed selection to the system Trash in one operation. Strict cleanup rules still block the whole batch if it contains application-managed or protected data; successful and failed items are recorded separately.
+
 ## Understanding the labels
 
 - **Safe to delete** is reserved for disposable data such as diagnostic logs, with a reason visible in the inspector.