devtrim 0.12.0

Added

• devtrim dashboard [PATH] generates and opens a private, self-contained HTML disk-usage snapshot with a responsive treemap, folder navigation/search, volume free-space metrics and existing-category cleanup previews. Copied project previews preserve explicit roots with inert shell quoting. --output saves to a chosen new file; --no-open generates without starting a browser. The view never deletes or turns an inventory path into cleanup authority.

Changed

• Lock the maintained brag-video JavaScript and Python environments, document independent installs and disable npm install scripts in the rebuild procedure.
• Document local report/export retention, journal generations, safe owner-directed removal and the effect of removing Trash ownership evidence.
• Document the credential/release compromise response procedure previously deferred as SEC-21, including containment, artifact/tap/site review and recovery through a fresh reviewed beta.
• The demo video shows the 0.11.0 interface: the Project purge entry, the scan clock that q stops, one row per finding with its selection box and the details pane, the plan count in the confirmation, and an outcome that says the Trash still holds the space until devtrim trash-empty. The landing page transcript describes it
• Demo-video tooling: Remotion 4.0.532, React and react-dom 19.3.0 (Dependabot #33–#36). The video source check runs Microsoft's native TypeScript 7.0.2 (typescript-native, #51); classic 5.9.3 stays under typescript for typescript-eslint and Remotion's config loader, which cannot load the 7.0 API yet

Fixed

• Refuse unexpected ownership or multiple hard links in local journal state before modifying it; keep existing files intact on refusal.
• Human previews containing only report-only/non-actionable findings no longer offer an unsupported or ineffective --apply hint. Actionable cleanup previews retain their apply guidance.