chore: sync core lib and CLAUDE.md from agent-core

[avifenesh]

Automated sync of lib/ and CLAUDE.md from agent-core.

---

Note

Medium Risk
Changes file read/write behavior in fixer.js to reject symlink targets (including .backup files), which could alter or block existing workflows and affects filesystem-side effects.

Overview
Hardens lib/enhance/fixer.js by introducing assertNotSymlink() and using it to refuse following symlinks for any file the fixer reads/writes, including .backup siblings.

applyFixes() now checks the target path before reading and again immediately before writing (narrowing TOCTOU), validates the backup path before creating backups, and restoreFromBackup() similarly refuses symlinks for both backup and restore targets; assertNotSymlink is exported.

^{Reviewed by Cursor Bugbot for commit 76c2bb6. Configure here.}

[gemini-code-assist]

Warning

You have reached your daily quota limit. Please wait up to 24 hours and I will start processing your requests again!