fix(file): dedup symlink-cycle glob results and clarify symlink trust model

[dyoshikawa]

Background

Issue #1808 consolidated the follow-up findings from the code and security reviews of PR #1802 (fix(file): follow symbolic links in findFilesByGlobs, resolving #1707). None blocked that PR, but they were tracked so they would not be lost. Each was re-validated against the current code before this fix.

Changes

• fix: Update pnpm version to 10.12.2 in CI and release workflows #1 (mid) — circular symlink duplication. findFilesByGlobs now deduplicates results by real path (realpath), keeping the first path per real file in sorted order. A directory symlink cycle (which globby follows up to the kernel ELOOP limit, ~40 levels) no longer yields ~40× duplicated entries that AiDir.collectOtherFiles would read and re-emit. Added a circular-symlink test and a link-and-target-collapse test.
• fix: add claudecode to valid targets in parser validation #2 (mid) — wrong comment rationale. Confirmed src/lib/git-client.ts does a non-bare clone (--no-checkout --filter=blob:none then git checkout), so symlinks are resolvable — the old comment ("unresolved symlinks in a bare clone are meaningless") was factually wrong. Rewrote it to state the real reason: walkDirectory skips symlinks as a security hardening for untrusted remote content (commit 51bf0443), a distinct code path from the local, trusted findFilesByGlobs.
• Add support for sst/opencode #3 (mid) — realpath containment. Recorded an explicit design decision instead of adding a containment check: enforcing realpath containment against a single root would break issue Support symlinked shared skills in multi-directory repositories #1707's use case of sharing files that live elsewhere in the same repository (and --input-root trees legitimately point outside themselves). The remote-fetch path already skips symlinks, so untrusted content is not an attack vector. Documented in the code comment and the new docs section.
• Add support for Openhands CLI #4 (low) — E2E-level coverage. Added a skills-processor.test.ts case that loads a skill directory which is a symlink to a real directory elsewhere.
• Add support for opencode-ai/opencode #5 (low) — Windows. Guarded the symlink unit tests with describe.skipIf(process.platform === "win32") / it.skipIf(...) since fs.symlink needs admin or Developer Mode on Windows.
• Add support for gemini-cli #6 (low) — discoverability. Added a feature-wide Symlinks section to docs/reference/file-formats.md (covering all features and plain .rulesync/ usage, not just --input-root), cross-linked it from the input-root guide, and synced skills/rulesync/.

pnpm cicheck passes locally (6194 tests; the content sync-check passes once the synced skills files are committed).

Closes #1808

🤖 Generated with Claude Code

[dyoshikawa]

@dyoshikawa Thank you!