fix(hardening): ignore literal text in sync-call metrics

docs/hardening-debt-burndown.md

@@ -31,9 +31,9 @@ Baseline captured: `2026-02-12`.
 
 | Metric | Baseline |
 |---|---:|
-| Sync fs occurrences (all) | 835 |
+| Sync fs occurrences (all) | 807 |
 | Sync fs files affected (all) | 100 |
-| Sync fs occurrences (runtime hotpaths) | 724 |
+| Sync fs occurrences (runtime hotpaths) | 696 |
 | Sync fs files affected (runtime hotpaths) | 89 |
 | Legacy shim markers | 131 |
 | Legacy shim files affected | 56 |

docs/reports/hardening-inventory.json

@@ -1,9 +1,9 @@
 {
   "scope": "src/**/*.{ts,tsx,js,jsx,mjs,cjs}",
   "syncFs": {
-    "totalOccurrences": 835,
+    "totalOccurrences": 807,
     "filesAffected": 100,
-    "hotpathOccurrences": 724,
+    "hotpathOccurrences": 696,
     "hotpathFilesAffected": 89,
     "topHotpathFiles": [
       {
@@ -113,24 +113,6 @@
         ],
         "markers": []
       },
-      {
-        "file": "src/web-server/routes/cliproxy-stats-routes.ts",
-        "count": 20,
-        "calls": [
-          "closeSync",
-          "existsSync",
-          "fstatSync",
-          "mkdirSync",
-          "openSync",
-          "readdirSync",
-          "readFileSync",
-          "readSync",
-          "renameSync",
-          "statSync",
-          "writeFileSync"
-        ],
-        "markers": []
-      },
       {
         "file": "src/web-server/routes/misc-routes.ts",
         "count": 20,
@@ -162,6 +144,17 @@
           "writeFileSync"
         ],
         "markers": []
+      },
+      {
+        "file": "src/commands/cleanup-command.ts",
+        "count": 16,
+        "calls": [
+          "existsSync",
+          "lstatSync",
+          "readdirSync",
+          "unlinkSync"
+        ],
+        "markers": []
       }
     ],
     "topFilesOverall": [
@@ -301,17 +294,14 @@
         "markers": []
       },
       {
-        "file": "src/web-server/routes/cliproxy-stats-routes.ts",
+        "file": "src/web-server/routes/misc-routes.ts",
         "count": 20,
         "calls": [
-          "closeSync",
+          "copyFileSync",
           "existsSync",
-          "fstatSync",
           "mkdirSync",
-          "openSync",
           "readdirSync",
           "readFileSync",
-          "readSync",
           "renameSync",
           "statSync",
           "writeFileSync"

docs/reports/hardening-inventory.md

@@ -6,9 +6,9 @@ Scope: `src/**/*.{ts,tsx,js,jsx,mjs,cjs}`
 
 | Metric | Value |
 |---|---:|
-| Sync fs occurrences (all) | 835 |
+| Sync fs occurrences (all) | 807 |
 | Sync fs files affected (all) | 100 |
-| Sync fs occurrences (runtime hotpaths) | 724 |
+| Sync fs occurrences (runtime hotpaths) | 696 |
 | Sync fs files affected (runtime hotpaths) | 89 |
 | Legacy shim markers | 131 |
 | Legacy shim files affected | 56 |
@@ -24,9 +24,9 @@ Scope: `src/**/*.{ts,tsx,js,jsx,mjs,cjs}`
 | `src/utils/claude-dir-installer.ts` | 21 | copyFileSync, cpSync, existsSync, lstatSync, mkdirSync, readdirSync, renameSync, rmSync, statSync, unlinkSync, writeFileSync |
 | `src/cliproxy/binary/version-cache.ts` | 20 | existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync |
 | `src/management/recovery-manager.ts` | 20 | copyFileSync, existsSync, mkdirSync, renameSync, writeFileSync |
-| `src/web-server/routes/cliproxy-stats-routes.ts` | 20 | closeSync, existsSync, fstatSync, mkdirSync, openSync, readdirSync, readFileSync, readSync, renameSync, statSync, writeFileSync |
 | `src/web-server/routes/misc-routes.ts` | 20 | copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, renameSync, statSync, writeFileSync |
 | `src/web-server/routes/persist-routes.ts` | 17 | closeSync, copyFileSync, existsSync, lstatSync, openSync, readdirSync, readSync, renameSync, unlinkSync, writeFileSync |
+| `src/commands/cleanup-command.ts` | 16 | existsSync, lstatSync, readdirSync, unlinkSync |
 
 ## Top Legacy Shim Marker Files
 

scripts/hardening-inventory.js

@@ -162,9 +162,9 @@ function stripComments(sourceText) {
     }
 
     if (inSingleQuote) {
-      output += current;
+      output += current === '\n' || current === '\r' ? current : ' ';
       if (current === '\\') {
-        output += next ?? '';
+        output += next === '\n' || next === '\r' ? next : ' ';
         index += 2;
         continue;
       }
@@ -176,9 +176,9 @@ function stripComments(sourceText) {
     }
 
     if (inDoubleQuote) {
-      output += current;
+      output += current === '\n' || current === '\r' ? current : ' ';
       if (current === '\\') {
-        output += next ?? '';
+        output += next === '\n' || next === '\r' ? next : ' ';
         index += 2;
         continue;
       }
@@ -190,9 +190,9 @@ function stripComments(sourceText) {
     }
 
     if (inTemplateLiteral) {
-      output += current;
+      output += current === '\n' || current === '\r' ? current : ' ';
       if (current === '\\') {
-        output += next ?? '';
+        output += next === '\n' || next === '\r' ? next : ' ';
         index += 2;
         continue;
       }
@@ -219,21 +219,21 @@ function stripComments(sourceText) {
 
     if (current === "'") {
       inSingleQuote = true;
-      output += current;
+      output += ' ';
       index += 1;
       continue;
     }
 
     if (current === '"') {
       inDoubleQuote = true;
-      output += current;
+      output += ' ';
       index += 1;
       continue;
     }
 
     if (current === '`') {
       inTemplateLiteral = true;
-      output += current;
+      output += ' ';
       index += 1;
       continue;
     }