fix: audit cache symlinks without traversal

[seonghobae]

Summary

• fingerprint cache-internal symlink entries without resolving or traversing their targets
• keep allowlisted root symlinks and special files fail-closed
• document the live uv/Playwright planning gap and focused regression proof

Validation

• cargo test --manifest-path src-tauri/Cargo.toml generated_cache_reclaim::tests:: --lib (11 passed)
• git diff --check

No live cache, cloud-provider, Photos, container, or VM mutation was performed.

---

Protected prerequisite status

This PR remains Draft while the generated-cache owner PR #295 and its protected safety prerequisites remain Proposed and unmerged. Parent-handle checks reduce a reproduced gap; they do not prove exclusion of arbitrary late writers. Atomic no-replace restoration and current-head validation remain acceptance work. Unique changes are preserved through normal non-force parent integration; this status change is not a close or a shipped-safety claim.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[devin-ai-integration]

Devin Review found 1 new potential issue.

⚠️ 1 issue in files not directly in the diff

⚠️ Partial deletions appear unexecuted

When an exact-delete command removes some candidates before returning nonzero, executed becomes false despite the completed mutations. Audit consumers can treat a destructive attempt as harmless failure.