refactor(#2285): repoint all hive-c0re host-path consumers to paths.rs

hive-c0re/src/workers/agent_sockets.rs

@@ -17,8 +17,9 @@ use anyhow::{Context, Result};
 /// gateway container bind-mounts this whole tree (read-only) so it
 /// can `proxy_pass` to any agent. Each agent's container bind-mounts
 /// only its own `<name>/` subdir — agents can only access their own
-/// sockets.
-pub const AGENT_SOCKET_DIR: &str = "/run/hive-agent";
+/// sockets. The literal lives in [`crate::paths`]; re-exported here
+/// under the name this module's consumers have always used.
+pub use crate::paths::AGENT_SOCKET_DIR;
 
 /// Socket filename inside each per-agent subdir. Fixed so the path
 /// derives entirely from `(AGENT_SOCKET_DIR, name)` — no second

hive-c0re/src/workers/auto_update.rs

@@ -29,7 +29,7 @@ use crate::lifecycle::{self, AGENT_PREFIX, MANAGER_NAME};
 /// keep it out of the applied repo's git history. Uses a leading dot so a
 /// glob over `applied/*` doesn't include it.
 pub fn rev_marker_path(name: &str) -> PathBuf {
-    PathBuf::from(format!("/var/lib/hyperhive/applied/.{name}.hyperhive-rev"))
+    crate::paths::applied_rev_marker(name)
 }
 
 /// Resolve the current rev of `hyperhive_flake`. For a path on disk we
@@ -58,13 +58,9 @@ pub fn current_flake_rev(hyperhive_flake: &str) -> Option<String> {
 /// nix-build disk saturation that's long enough that concurrent sweeps
 /// starved the runtime and stalled the per-agent sockets.
 pub async fn agent_config_pending(name: &str, deployed_sha: Option<&str>) -> bool {
+    let applied = crate::paths::applied_dir(name);
     let applied_head = tokio::process::Command::new("git")
-        .args([
-            "-C",
-            &format!("/var/lib/hyperhive/applied/{name}"),
-            "rev-parse",
-            "HEAD",
-        ])
+        .args(["-C", &applied.to_string_lossy(), "rev-parse", "HEAD"])
         .output()
         .await
         .ok()