Reduce local debug detail in mailbox and session helpers

src/utils/authFileDescriptor.ts

@@ -40,7 +40,7 @@ export function maybePersistTokenForSubprocesses(
     mkdirSync(CCR_TOKEN_DIR, { recursive: true, mode: 0o700 })
     // eslint-disable-next-line custom-rules/no-sync-fs -- one-shot startup write in CCR, caller is sync
     writeFileSync(path, token, { encoding: 'utf8', mode: 0o600 })
-    logForDebugging(`Persisted ${tokenName} to ${path} for subprocess access`)
+    logForDebugging(`Persisted ${tokenName} for subprocess access`)
   } catch (error) {
     logForDebugging(
       `Failed to persist ${tokenName} to disk (non-fatal): ${errorMessage(error)}`,
@@ -65,7 +65,7 @@ export function readTokenFromWellKnownFile(
     if (!token) {
       return null
     }
-    logForDebugging(`Read ${tokenName} from well-known file ${path}`)
+    logForDebugging(`Read ${tokenName} from well-known file`)
     return token
   } catch (error) {
     // ENOENT is the expected outcome outside CCR — stay silent. Anything
@@ -73,7 +73,7 @@ export function readTokenFromWellKnownFile(
     // debug log so subprocess auth failures aren't mysterious.
     if (!isENOENT(error)) {
       logForDebugging(
-        `Failed to read ${tokenName} from ${path}: ${errorMessage(error)}`,
+        `Failed to read ${tokenName} from well-known file: ${errorMessage(error)}`,
         { level: 'debug' },
       )
     }
@@ -124,7 +124,7 @@ function getCredentialFromFd({
   const fd = parseInt(fdEnv, 10)
   if (Number.isNaN(fd)) {
     logForDebugging(
-      `${envVar} must be a valid file descriptor number, got: ${fdEnv}`,
+      `${envVar} must be a valid file descriptor number`,
       { level: 'error' },
     )
     setCached(null)
@@ -148,13 +148,13 @@ function getCredentialFromFd({
       setCached(null)
       return null
     }
-    logForDebugging(`Successfully read ${label} from file descriptor ${fd}`)
+    logForDebugging(`Successfully read ${label} from file descriptor`)
     setCached(token)
     maybePersistTokenForSubprocesses(wellKnownPath, token, label)
     return token
   } catch (error) {
     logForDebugging(
-      `Failed to read ${label} from file descriptor ${fd}: ${errorMessage(error)}`,
+      `Failed to read ${label} from file descriptor: ${errorMessage(error)}`,
       { level: 'error' },
     )
     // FD env var was set but read failed — typically a subprocess that