feat: add bounded whole-home allocation map

[seonghobae]

Outcome

• add a read-only allocated-block map with caller-supplied entry and duration budgets
• never follow symlinks or cross filesystem devices, and report partial evidence with an exact stop reason
• classify provider, Photos, VM, generated/cache, per-user /private/var/folders, and customer/application data boundaries without authorizing deletion
• repair the stacked base compile regression where generated-cache audit referenced an out-of-scope contract binding

Live evidence

Targeted read-only probes measured Mobile Documents 41,275,700 KiB, Application Support 44,091,144 KiB, Group Containers 16,582,836 KiB, and /private/var 25,965,024 KiB. Broad recursive du exceeded the operator observation and was cancelled without mutation.

Validation

• cargo test --manifest-path src-tauri/Cargo.toml allocation_map::tests:: --lib (2 passed)
• cargo check --manifest-path src-tauri/Cargo.toml --bin disksage-allocation-map
• git diff --check

Stacked on #322. No user, provider, Photos, or VM data was mutated.

---

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 681b75c9-30ad-46b0-83b1-b5dc00c48534

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}