@launchsecure/launch-kit 0.0.26 → 0.0.28

package/dist/server/council-entry.js

@@ -31,9 +31,18 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
+// src/server/launch-kit-paths.ts
+var LAUNCHSECURE_DIR;
+var init_launch_kit_paths = __esm({
+  "src/server/launch-kit-paths.ts"() {
+    "use strict";
+    LAUNCHSECURE_DIR = ".launchsecure";
+  }
+});
+
 // src/server/council-lockfile.ts
 function lockDir(projectRoot) {
-  return projectRoot ? (0, import_node_path.join)(projectRoot, ".launchsecure") : (0, import_node_path.join)((0, import_node_os.homedir)(), ".launchsecure");
+  return projectRoot ? (0, import_node_path.join)(projectRoot, LAUNCHSECURE_DIR) : (0, import_node_path.join)((0, import_node_os.homedir)(), LAUNCHSECURE_DIR);
 }
 function lockPath(projectRoot) {
   return (0, import_node_path.join)(lockDir(projectRoot), "launch-council.lock");
@@ -111,6 +120,7 @@ var init_council_lockfile = __esm({
     import_node_fs = require("node:fs");
     import_node_os = require("node:os");
     import_node_path = require("node:path");
+    init_launch_kit_paths();
   }
 });
 
@@ -446,7 +456,7 @@ Be specific with search terms \u2014 use actual names that would appear in code
 
 // src/server/graph-reader.ts
 function readGraphLayer(projectRoot, layer) {
-  const filePath = (0, import_node_path4.join)(projectRoot, GRAPH_DIR, `${layer}.json`);
+  const filePath = (0, import_node_path4.join)(projectRoot, LAUNCHSECURE_DIR, GRAPHS_SUBDIR, `${layer}.json`);
   if (!(0, import_node_fs4.existsSync)(filePath)) return null;
   try {
     return JSON.parse((0, import_node_fs4.readFileSync)(filePath, "utf-8"));
@@ -503,13 +513,14 @@ function searchGraph(projectRoot, searchTerms, layers = ["ui", "api", "db"]) {
     layers: usedLayers
   };
 }
-var import_node_fs4, import_node_path4, GRAPH_DIR;
+var import_node_fs4, import_node_path4, GRAPHS_SUBDIR;
 var init_graph_reader = __esm({
   "src/server/graph-reader.ts"() {
     "use strict";
     import_node_fs4 = require("node:fs");
     import_node_path4 = require("node:path");
-    GRAPH_DIR = ".launchsecure/graphs";
+    init_launch_kit_paths();
+    GRAPHS_SUBDIR = "graphs";
   }
 });
 
@@ -1186,7 +1197,7 @@ async function handleTool(name, args) {
         }));
       }
       try {
-        const logDir = (0, import_node_path6.join)((0, import_node_os2.homedir)(), ".launchsecure");
+        const logDir = (0, import_node_path6.join)((0, import_node_os2.homedir)(), LAUNCHSECURE_DIR);
         (0, import_node_fs6.mkdirSync)(logDir, { recursive: true });
         const logPath = (0, import_node_path6.join)(logDir, "launch-council.log");
         const out = (0, import_node_fs6.openSync)(logPath, "a");
@@ -1326,6 +1337,7 @@ var init_council_mcp = __esm({
     import_node_child_process3 = require("node:child_process");
     import_node_fs6 = require("node:fs");
     import_node_os2 = require("node:os");
+    init_launch_kit_paths();
     init_council_lockfile();
     init_council_config();
     SERVER_INFO = {

package/dist/server/council-serve.js

@@ -152,8 +152,13 @@ var import_node_child_process = require("node:child_process");
 var import_node_fs = require("node:fs");
 var import_node_os = require("node:os");
 var import_node_path = require("node:path");
+
+// src/server/launch-kit-paths.ts
+var LAUNCHSECURE_DIR = ".launchsecure";
+
+// src/server/council-lockfile.ts
 function lockDir(projectRoot) {
-  return projectRoot ? (0, import_node_path.join)(projectRoot, ".launchsecure") : (0, import_node_path.join)((0, import_node_os.homedir)(), ".launchsecure");
+  return projectRoot ? (0, import_node_path.join)(projectRoot, LAUNCHSECURE_DIR) : (0, import_node_path.join)((0, import_node_os.homedir)(), LAUNCHSECURE_DIR);
 }
 function lockPath(projectRoot) {
   return (0, import_node_path.join)(lockDir(projectRoot), "launch-council.lock");
@@ -531,9 +536,9 @@ async function extractIntent(adapter, discussionContent) {
 // src/server/graph-reader.ts
 var import_node_fs4 = require("node:fs");
 var import_node_path4 = require("node:path");
-var GRAPH_DIR = ".launchsecure/graphs";
+var GRAPHS_SUBDIR = "graphs";
 function readGraphLayer(projectRoot, layer) {
-  const filePath = (0, import_node_path4.join)(projectRoot, GRAPH_DIR, `${layer}.json`);
+  const filePath = (0, import_node_path4.join)(projectRoot, LAUNCHSECURE_DIR, GRAPHS_SUBDIR, `${layer}.json`);
   if (!(0, import_node_fs4.existsSync)(filePath)) return null;
   try {
     return JSON.parse((0, import_node_fs4.readFileSync)(filePath, "utf-8"));

package/dist/server/course-entry.js

@@ -0,0 +1,246 @@
+#!/usr/bin/env node
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+
+// src/server/course-entry.ts
+var fs2 = __toESM(require("node:fs"));
+var path2 = __toESM(require("node:path"));
+
+// src/server/cred-shape.ts
+var fs = __toESM(require("node:fs"));
+var path = __toESM(require("node:path"));
+var CONFIG_FILENAME = ".launch-secure.cred.config";
+function inferCourseName(serverUrl) {
+  try {
+    const host = new URL(serverUrl).hostname.toLowerCase();
+    if (host === "localhost" || host === "127.0.0.1" || host.endsWith(".local")) return "local";
+    if (host.includes("staging")) return "staging";
+    if (host.endsWith(".vercel.app")) return "prod";
+    return host.split(".")[0] || "default";
+  } catch {
+    return "default";
+  }
+}
+function toNested(cred) {
+  if (cred.profiles && cred.active && cred.profiles[cred.active]) {
+    return { active: cred.active, profiles: cred.profiles };
+  }
+  if (!cred.pat || !cred.orgSlug || !cred.projectSlug || !cred.serverUrl) {
+    return null;
+  }
+  const name = inferCourseName(cred.serverUrl);
+  return {
+    active: name,
+    profiles: {
+      [name]: {
+        pat: cred.pat,
+        orgSlug: cred.orgSlug,
+        projectSlug: cred.projectSlug,
+        serverUrl: cred.serverUrl
+      }
+    }
+  };
+}
+function readCredFile(repoRoot) {
+  const p = path.join(repoRoot, CONFIG_FILENAME);
+  if (!fs.existsSync(p)) return null;
+  try {
+    return JSON.parse(fs.readFileSync(p, "utf-8"));
+  } catch (err) {
+    throw new Error(`could not parse ${CONFIG_FILENAME}: ${err instanceof Error ? err.message : String(err)}`);
+  }
+}
+function writeJsonAtomic(absPath, value, mode) {
+  const tmp = `${absPath}.tmp`;
+  fs.writeFileSync(tmp, JSON.stringify(value, null, 2) + "\n", "utf-8");
+  if (mode !== void 0) {
+    try {
+      fs.chmodSync(tmp, mode);
+    } catch {
+    }
+  }
+  fs.renameSync(tmp, absPath);
+}
+
+// src/server/course-entry.ts
+var MCP_FILENAME = ".mcp.json";
+var DEFAULT_SERVER_URL = "https://launchsecure-v2.vercel.app";
+function info(msg) {
+  console.log(`[launch-course] ${msg}`);
+}
+function ok(msg) {
+  console.log(`[launch-course] \u2713 ${msg}`);
+}
+function fail(msg) {
+  console.error(`[launch-course] \u2717 ${msg}`);
+  process.exit(1);
+}
+function readCredFile2() {
+  const cred = readCredFile(process.cwd());
+  if (!cred) {
+    fail(`${CONFIG_FILENAME} not found in ${process.cwd()}. Run \`npx launch-kit init \u2026\` first.`);
+  }
+  return cred;
+}
+function toNested2(cred) {
+  const nested = toNested(cred);
+  if (!nested) {
+    fail(`${CONFIG_FILENAME} is missing required fields (pat, orgSlug, projectSlug, serverUrl) and has no profiles. Run \`npx launch-kit init \u2026\` to (re)bootstrap.`);
+  }
+  return nested;
+}
+function parseFlag(argv, key) {
+  const prefix = `--${key}=`;
+  const found = argv.find((a) => a.startsWith(prefix));
+  return found ? found.slice(prefix.length) : void 0;
+}
+function cmdList() {
+  const nested = toNested2(readCredFile2());
+  const names = Object.keys(nested.profiles).sort();
+  if (names.length === 0) {
+    info("(no courses)");
+    return;
+  }
+  info(`courses (${names.length}):`);
+  const nameWidth = Math.max(...names.map((n) => n.length), 8);
+  for (const name of names) {
+    const p = nested.profiles[name];
+    const marker = name === nested.active ? "\u2605" : " ";
+    console.log(`  ${marker} ${name.padEnd(nameWidth)}  ${p.serverUrl}  (${p.orgSlug}/${p.projectSlug})`);
+  }
+}
+function cmdAdd(argv) {
+  const name = argv.find((a) => !a.startsWith("--"));
+  if (!name) fail("usage: launch-course add <name> --token=ls_pat_... --org=<slug> --project=<slug> [--url=<serverUrl>]");
+  const token = parseFlag(argv, "token");
+  const org = parseFlag(argv, "org");
+  const project = parseFlag(argv, "project");
+  const url = (parseFlag(argv, "url") ?? DEFAULT_SERVER_URL).replace(/\/+$/, "");
+  if (!token || !token.startsWith("ls_pat_")) fail("--token=<ls_pat_...> required");
+  if (!org) fail("--org=<slug> required");
+  if (!project) fail("--project=<slug> required");
+  const nested = toNested2(readCredFile2());
+  const existed = Boolean(nested.profiles[name]);
+  nested.profiles[name] = { pat: token, orgSlug: org, projectSlug: project, serverUrl: url };
+  writeJsonAtomic(path2.join(process.cwd(), CONFIG_FILENAME), nested, 384);
+  ok(`${existed ? "updated" : "added"} course "${name}" (${url})`);
+  if (nested.active !== name) {
+    info(`active course is still "${nested.active}" \u2014 run \`launch-course set ${name}\` to switch`);
+  }
+}
+function cmdSet(argv) {
+  const name = argv[0];
+  if (!name) fail("usage: launch-course set <name>");
+  const nested = toNested2(readCredFile2());
+  const target = nested.profiles[name];
+  if (!target) {
+    const known = Object.keys(nested.profiles).sort().join(", ") || "(none)";
+    fail(`no course named "${name}". known: ${known}`);
+  }
+  if (nested.active === name) {
+    info(`already on "${name}" \u2014 nothing to do`);
+    return;
+  }
+  const next = { active: name, profiles: nested.profiles };
+  writeJsonAtomic(path2.join(process.cwd(), CONFIG_FILENAME), next, 384);
+  const mcpStatus = updateMcpUrl(target.serverUrl);
+  ok(`active course \u2192 "${name}" (${target.serverUrl})`);
+  if (mcpStatus === "updated") {
+    info("reconnect MCP in Claude Code: /mcp \u2192 toggle launch-secure off/on (URL is read at connect time)");
+  }
+}
+function cmdRm(argv) {
+  const name = argv[0];
+  if (!name) fail("usage: launch-course rm <name>");
+  const nested = toNested2(readCredFile2());
+  if (!nested.profiles[name]) fail(`no course named "${name}"`);
+  if (nested.active === name) {
+    fail(`cannot remove the active course "${name}". \`launch-course set <other>\` first.`);
+  }
+  delete nested.profiles[name];
+  writeJsonAtomic(path2.join(process.cwd(), CONFIG_FILENAME), nested, 384);
+  ok(`removed course "${name}"`);
+}
+function updateMcpUrl(serverUrl) {
+  const p = path2.join(process.cwd(), MCP_FILENAME);
+  if (!fs2.existsSync(p)) {
+    info(`(no ${MCP_FILENAME} \u2014 skipped URL update; run \`npx launch-kit init \u2026\` to wire MCP)`);
+    return "missing-file";
+  }
+  let mcp;
+  try {
+    mcp = JSON.parse(fs2.readFileSync(p, "utf-8"));
+  } catch (err) {
+    fail(`could not parse ${MCP_FILENAME}: ${err instanceof Error ? err.message : String(err)}`);
+  }
+  const entry = mcp.mcpServers?.["launch-secure"];
+  if (!entry) {
+    info(`(no "launch-secure" entry in ${MCP_FILENAME} \u2014 skipped URL update)`);
+    return "missing-entry";
+  }
+  entry.url = `${serverUrl.replace(/\/+$/, "")}/api/mcp/project`;
+  writeJsonAtomic(p, mcp);
+  ok(`updated ${MCP_FILENAME} launch-secure.url \u2192 ${entry.url}`);
+  return "updated";
+}
+function help() {
+  console.log(`launch-course \u2014 manage LaunchSecure server profiles ("courses").
+
+Usage:
+  launch-course list
+  launch-course add <name> --token=ls_pat_... --org=<slug> --project=<slug> [--url=<serverUrl>]
+  launch-course set <name>
+  launch-course rm  <name>
+
+The cred file (.launch-secure.cred.config) holds every course under \`profiles\`,
+with \`active\` selecting which one drives MCP / launch-pod auth. Legacy flat
+files are auto-migrated on the first multi-profile op. \`launch-course set\`
+also rewrites .mcp.json's launch-secure.url so Claude Code routes to the right
+server on next MCP reconnect.
+`);
+}
+function main() {
+  const [cmd, ...rest] = process.argv.slice(2);
+  switch (cmd) {
+    case "list":
+      return cmdList();
+    case "add":
+      return cmdAdd(rest);
+    case "set":
+    case "use":
+      return cmdSet(rest);
+    case "rm":
+    case "remove":
+    case "delete":
+      return cmdRm(rest);
+    case void 0:
+    case "help":
+    case "--help":
+    case "-h":
+      return help();
+    default:
+      fail(`unknown command "${cmd}". try \`launch-course help\``);
+  }
+}
+main();

package/dist/server/deck-mcp-entry.js

@@ -30,12 +30,21 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
+// src/server/launch-kit-paths.ts
+var LAUNCHSECURE_DIR;
+var init_launch_kit_paths = __esm({
+  "src/server/launch-kit-paths.ts"() {
+    "use strict";
+    LAUNCHSECURE_DIR = ".launchsecure";
+  }
+});
+
 // src/server/deck-lockfile.ts
 function lockDir(projectRoot) {
   if (projectRoot) {
-    return (0, import_node_path.join)(projectRoot, ".launchsecure");
+    return (0, import_node_path.join)(projectRoot, LAUNCHSECURE_DIR);
   }
-  return (0, import_node_path.join)((0, import_node_os.homedir)(), ".launchsecure");
+  return (0, import_node_path.join)((0, import_node_os.homedir)(), LAUNCHSECURE_DIR);
 }
 function lockPath(projectRoot) {
   return (0, import_node_path.join)(lockDir(projectRoot), "launch-deck.lock");
@@ -113,6 +122,7 @@ var init_deck_lockfile = __esm({
     import_node_fs = require("node:fs");
     import_node_os = require("node:os");
     import_node_path = require("node:path");
+    init_launch_kit_paths();
   }
 });
 
@@ -1322,7 +1332,7 @@ async function startDeckServer(opts = {}) {
               const baseUrl = `/deck-files/${sessionEncoded}`;
               const html = generateBlastRadiusHtml(block.manifest, baseUrl);
               const report = generateBlastRadiusReport(block.manifest);
-              const dir = import_node_path3.default.join(cwd, ".launchsecure", "deck-files", body.session);
+              const dir = import_node_path3.default.join(cwd, LAUNCHSECURE_DIR, "deck-files", body.session);
               import_node_fs3.default.mkdirSync(dir, { recursive: true });
               import_node_fs3.default.writeFileSync(import_node_path3.default.join(dir, "blast-radius.html"), html);
               import_node_fs3.default.writeFileSync(import_node_path3.default.join(dir, "blast-radius-report.md"), report);
@@ -1349,7 +1359,7 @@ async function startDeckServer(opts = {}) {
               const sessionEncoded = encodeURIComponent(body.session);
               const baseUrl = `/deck-files/${sessionEncoded}`;
               const filename = `${slugify(block.label)}.html`;
-              const dir = import_node_path3.default.join(cwd, ".launchsecure", "deck-files", body.session);
+              const dir = import_node_path3.default.join(cwd, LAUNCHSECURE_DIR, "deck-files", body.session);
               import_node_fs3.default.mkdirSync(dir, { recursive: true });
               import_node_fs3.default.writeFileSync(import_node_path3.default.join(dir, filename), html);
               block.type = "iframe";
@@ -1397,7 +1407,7 @@ async function startDeckServer(opts = {}) {
           resolveFeedback(session, { comment: "", closed: true });
         }
         try {
-          const deckFilesBase = import_node_path3.default.join(cwd, ".launchsecure", "deck-files");
+          const deckFilesBase = import_node_path3.default.join(cwd, LAUNCHSECURE_DIR, "deck-files");
           if (session === "all") {
             if (import_node_fs3.default.existsSync(deckFilesBase)) {
               import_node_fs3.default.rmSync(deckFilesBase, { recursive: true, force: true });
@@ -1425,7 +1435,7 @@ async function startDeckServer(opts = {}) {
           res.end("Forbidden");
           return;
         }
-        const filePath = import_node_path3.default.join(cwd, ".launchsecure", "deck-files", relative);
+        const filePath = import_node_path3.default.join(cwd, LAUNCHSECURE_DIR, "deck-files", relative);
         if (serveStatic(res, filePath)) return;
         res.writeHead(404);
         res.end("Not found");
@@ -1438,7 +1448,7 @@ async function startDeckServer(opts = {}) {
           res.end("Forbidden");
           return;
         }
-        const filePath = import_node_path3.default.join(cwd, ".launchsecure", "deck-files", relative);
+        const filePath = import_node_path3.default.join(cwd, LAUNCHSECURE_DIR, "deck-files", relative);
         if (!import_node_fs3.default.existsSync(filePath) || !import_node_fs3.default.statSync(filePath).isFile()) {
           res.writeHead(404);
           res.end("Not found");
@@ -1523,7 +1533,7 @@ async function startDeckServer(opts = {}) {
       pendingFeedback.delete(id);
     }
     try {
-      const deckFilesBase = import_node_path3.default.join(cwd, ".launchsecure", "deck-files");
+      const deckFilesBase = import_node_path3.default.join(cwd, LAUNCHSECURE_DIR, "deck-files");
       if (import_node_fs3.default.existsSync(deckFilesBase)) {
         import_node_fs3.default.rmSync(deckFilesBase, { recursive: true, force: true });
       }
@@ -1570,6 +1580,7 @@ var init_deck_serve = __esm({
     import_node_fs3 = __toESM(require("node:fs"));
     import_node_path3 = __toESM(require("node:path"));
     import_ws = require("ws");
+    init_launch_kit_paths();
     init_deck_lockfile();
     init_deck_config();
     init_blast_radius_render();
@@ -1660,7 +1671,7 @@ async function handleTool(name, args) {
             const baseUrl = `/deck-files/${sessionEncoded}`;
             const html = generateBlastRadiusHtml(block.manifest, baseUrl);
             const report = generateBlastRadiusReport(block.manifest);
-            const dir = (0, import_node_path4.join)(projectRoot, ".launchsecure", "deck-files", session);
+            const dir = (0, import_node_path4.join)(projectRoot, LAUNCHSECURE_DIR, "deck-files", session);
             import_node_fs4.default.mkdirSync(dir, { recursive: true });
             import_node_fs4.default.writeFileSync((0, import_node_path4.join)(dir, "blast-radius.html"), html);
             import_node_fs4.default.writeFileSync((0, import_node_path4.join)(dir, "blast-radius-report.md"), report);
@@ -1687,7 +1698,7 @@ async function handleTool(name, args) {
             const sessionEncoded = encodeURIComponent(session);
             const baseUrl = `/deck-files/${sessionEncoded}`;
             const filename = `${slugify(block.label)}.html`;
-            const dir = (0, import_node_path4.join)(projectRoot, ".launchsecure", "deck-files", session);
+            const dir = (0, import_node_path4.join)(projectRoot, LAUNCHSECURE_DIR, "deck-files", session);
             import_node_fs4.default.mkdirSync(dir, { recursive: true });
             import_node_fs4.default.writeFileSync((0, import_node_path4.join)(dir, filename), html);
             block.type = "iframe";
@@ -1782,7 +1793,7 @@ async function handleTool(name, args) {
         }));
       }
       try {
-        const logDir = (0, import_node_path4.join)((0, import_node_os2.homedir)(), ".launchsecure");
+        const logDir = (0, import_node_path4.join)((0, import_node_os2.homedir)(), LAUNCHSECURE_DIR);
         (0, import_node_fs5.mkdirSync)(logDir, { recursive: true });
         const logPath = (0, import_node_path4.join)(logDir, "launch-deck.log");
         const out = (0, import_node_fs5.openSync)(logPath, "a");
@@ -1842,7 +1853,7 @@ async function handleTool(name, args) {
     }
     case "generate_contract": {
       const session = args.session;
-      const dir = (0, import_node_path4.join)(projectRoot, ".launchsecure", "deck-files", session);
+      const dir = (0, import_node_path4.join)(projectRoot, LAUNCHSECURE_DIR, "deck-files", session);
       const manifestPath = (0, import_node_path4.join)(dir, "blast-radius-manifest.json");
       if (!import_node_fs4.default.existsSync(manifestPath)) {
         return text(JSON.stringify({
@@ -1957,6 +1968,7 @@ var init_deck_mcp = __esm({
     import_node_child_process2 = require("node:child_process");
     import_node_fs5 = require("node:fs");
     import_node_os2 = require("node:os");
+    init_launch_kit_paths();
     init_deck_lockfile();
     init_deck_config();
     init_blast_radius_render();

package/dist/server/deck-serve.js

@@ -43,6 +43,9 @@ var import_node_fs3 = __toESM(require("node:fs"));
 var import_node_path3 = __toESM(require("node:path"));
 var import_ws = require("ws");
 
+// src/server/launch-kit-paths.ts
+var LAUNCHSECURE_DIR = ".launchsecure";
+
 // src/server/deck-lockfile.ts
 var import_node_child_process = require("node:child_process");
 var import_node_fs = require("node:fs");
@@ -50,9 +53,9 @@ var import_node_os = require("node:os");
 var import_node_path = require("node:path");
 function lockDir(projectRoot) {
   if (projectRoot) {
-    return (0, import_node_path.join)(projectRoot, ".launchsecure");
+    return (0, import_node_path.join)(projectRoot, LAUNCHSECURE_DIR);
   }
-  return (0, import_node_path.join)((0, import_node_os.homedir)(), ".launchsecure");
+  return (0, import_node_path.join)((0, import_node_os.homedir)(), LAUNCHSECURE_DIR);
 }
 function lockPath(projectRoot) {
   return (0, import_node_path.join)(lockDir(projectRoot), "launch-deck.lock");
@@ -1312,7 +1315,7 @@ async function startDeckServer(opts = {}) {
               const baseUrl = `/deck-files/${sessionEncoded}`;
               const html = generateBlastRadiusHtml(block.manifest, baseUrl);
               const report = generateBlastRadiusReport(block.manifest);
-              const dir = import_node_path3.default.join(cwd, ".launchsecure", "deck-files", body.session);
+              const dir = import_node_path3.default.join(cwd, LAUNCHSECURE_DIR, "deck-files", body.session);
               import_node_fs3.default.mkdirSync(dir, { recursive: true });
               import_node_fs3.default.writeFileSync(import_node_path3.default.join(dir, "blast-radius.html"), html);
               import_node_fs3.default.writeFileSync(import_node_path3.default.join(dir, "blast-radius-report.md"), report);
@@ -1339,7 +1342,7 @@ async function startDeckServer(opts = {}) {
               const sessionEncoded = encodeURIComponent(body.session);
               const baseUrl = `/deck-files/${sessionEncoded}`;
               const filename = `${slugify(block.label)}.html`;
-              const dir = import_node_path3.default.join(cwd, ".launchsecure", "deck-files", body.session);
+              const dir = import_node_path3.default.join(cwd, LAUNCHSECURE_DIR, "deck-files", body.session);
               import_node_fs3.default.mkdirSync(dir, { recursive: true });
               import_node_fs3.default.writeFileSync(import_node_path3.default.join(dir, filename), html);
               block.type = "iframe";
@@ -1387,7 +1390,7 @@ async function startDeckServer(opts = {}) {
           resolveFeedback(session, { comment: "", closed: true });
         }
         try {
-          const deckFilesBase = import_node_path3.default.join(cwd, ".launchsecure", "deck-files");
+          const deckFilesBase = import_node_path3.default.join(cwd, LAUNCHSECURE_DIR, "deck-files");
           if (session === "all") {
             if (import_node_fs3.default.existsSync(deckFilesBase)) {
               import_node_fs3.default.rmSync(deckFilesBase, { recursive: true, force: true });
@@ -1415,7 +1418,7 @@ async function startDeckServer(opts = {}) {
           res.end("Forbidden");
           return;
         }
-        const filePath = import_node_path3.default.join(cwd, ".launchsecure", "deck-files", relative);
+        const filePath = import_node_path3.default.join(cwd, LAUNCHSECURE_DIR, "deck-files", relative);
         if (serveStatic(res, filePath)) return;
         res.writeHead(404);
         res.end("Not found");
@@ -1428,7 +1431,7 @@ async function startDeckServer(opts = {}) {
           res.end("Forbidden");
           return;
         }
-        const filePath = import_node_path3.default.join(cwd, ".launchsecure", "deck-files", relative);
+        const filePath = import_node_path3.default.join(cwd, LAUNCHSECURE_DIR, "deck-files", relative);
         if (!import_node_fs3.default.existsSync(filePath) || !import_node_fs3.default.statSync(filePath).isFile()) {
           res.writeHead(404);
           res.end("Not found");
@@ -1513,7 +1516,7 @@ async function startDeckServer(opts = {}) {
       pendingFeedback.delete(id);
     }
     try {
-      const deckFilesBase = import_node_path3.default.join(cwd, ".launchsecure", "deck-files");
+      const deckFilesBase = import_node_path3.default.join(cwd, LAUNCHSECURE_DIR, "deck-files");
       if (import_node_fs3.default.existsSync(deckFilesBase)) {
         import_node_fs3.default.rmSync(deckFilesBase, { recursive: true, force: true });
       }