fix(model): resolve a dangling link's parent before judging where it points

[indykish]

Chasing src/loaders.ts to 100% coverage turned up a bug rather than a missing test.

One branch was unreachable — the verdict for a CLAUDE.md symlink orly cannot resolve — and it was unreachable because the write guard refused the whole install before ever reaching it, reporting a link that pointed squarely inside the repository as "outside the target repository".

safeRealpath resolved a dangling link lexically:

resolve(dirname(path), readlink(path))     // "/var/folders/…/repo/nowhere.md"

while its caller compares that answer against a realpath'd root:

isBelow(resolvedDestination, realpathSync(root))   // "/private/var/folders/…/repo"

Wherever the repository itself sits behind a symlink — every macOS temporary directory, and plenty of real checkouts — the two sides were never comparable and the in-repo link lost. Resolving the parent makes both canonical. A link that genuinely points out of the repository is refused exactly as before, and the existing escape test still proves it.

Coverage

src/loaders.ts goes from 95.38% to 100% line and function coverage. Three tests, one per path that had none:

• a stale pointer block is replaced in place, and nothing either side of it
• a CLAUDE.md orly wrote itself is refreshed rather than left stale
• a dangling CLAUDE.md symlink is left alone, not written through

The third is the one that found the bug.

Session notes 1

The README's loader section promised orly leaves your own CLAUDE.md alone, "symlink included" — which a dangling one disproved. It now says which links are left alone and which are refused, and why.

src/model.ts keeps its two uncovered lines: they are the RulesModel class declaration, and they were uncovered before this branch.

Review

No findings. orly gate pr green on every criterion, make conform green, 173 tests pass.

Make

$ bun test src --coverage
 src/loaders.ts            |  100.00 |  100.00 |
 173 pass, 0 fail

$ bash bin/orly gate pr
🟢 docs.updated: 1 user-surface file(s), 1 docs file(s) updated
🟢 PR boundary open — CHORE(close) is the next motion

Ships as 0.9.1.

🤖 Generated with Claude Code

https://claude.ai/code/session_01DTMFyrbXJo3UrzQygaNtcn

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!