fix: use owner-level unidesk state

scripts/src/commander.ts

@@ -67,7 +67,7 @@ function processDiscoveryPlan(sessionId: string): Record<string, unknown> {
     sessionId,
     mutation: false,
     signals: [
-      ".state/commander/sessions/<sessionId>.json",
+      "/root/.unidesk/.state/commander/sessions/<sessionId>.json",
       "host process table filtered by executable and cwd markers",
       "PTY/stdio bridge heartbeat file",
       "last prompt/trace event sequence",
@@ -280,7 +280,7 @@ function healthEndpointValidation(): Record<string, unknown> {
 function stateFileValidation(sessionId: string): Record<string, unknown> {
   return {
     surface: "state file",
-    storageRoot: ".state/commander/",
+    storageRoot: "/root/.unidesk/.state/commander/",
     validationMethod: "write and read a session record only under a temporary directory during dry-run/manual inspection",
     files: [
       `sessions/${sessionId}.json`,
@@ -294,7 +294,7 @@ function stateFileValidation(sessionId: string): Record<string, unknown> {
       "temporary state root is deleted after the smoke contract",
     ],
     noRuntimeSideEffects: [
-      "do not touch the live .state/commander directory",
+      "do not touch the live /root/.unidesk/.state/commander directory",
       "do not patch database state",
       "do not discover or signal live host Codex processes",
     ],