@greenarmor/ges-core 1.5.1 → 1.5.2

package/dist/activity-log/index.js

@@ -1,5 +1,6 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { safeWriteJson } from "../utils/index.js";
 export function loadActivityLog(projectPath) {
     const logPath = path.join(projectPath, ".ges", "activity-log.json");
     try {
@@ -14,14 +15,10 @@ export function loadActivityLog(projectPath) {
 export function appendActivityLog(projectPath, entries) {
     if (entries.length === 0)
         return;
-    const gesDir = path.join(projectPath, ".ges");
-    if (!fs.existsSync(gesDir)) {
-        fs.mkdirSync(gesDir, { recursive: true });
-    }
-    const logPath = path.join(gesDir, "activity-log.json");
+    const logPath = path.join(projectPath, ".ges", "activity-log.json");
     const existing = loadActivityLog(projectPath);
     const updated = existing.concat(entries);
-    fs.writeFileSync(logPath, JSON.stringify(updated, null, 2), "utf-8");
+    safeWriteJson(logPath, updated);
 }
 export function clearActivityLog(projectPath) {
     const logPath = path.join(projectPath, ".ges", "activity-log.json");

package/dist/controls/index.js

@@ -1,5 +1,6 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { safeWriteJson } from "../utils/index.js";
 const GES_DIR = ".ges";
 const CONTROLS_DIR = "controls";
 const CONFIG_FILE = "config.json";
@@ -67,10 +68,6 @@ export function loadControlOverrides(projectPath) {
     }
 }
 export function saveControlOverride(projectPath, controlId, status, reason) {
-    const gesDir = path.join(projectPath, GES_DIR);
-    if (!fs.existsSync(gesDir)) {
-        fs.mkdirSync(gesDir, { recursive: true });
-    }
     const overrides = loadControlOverrides(projectPath);
     const existingIdx = overrides.findIndex(o => o.control_id === controlId);
     const entry = { control_id: controlId, status, reason };
@@ -80,8 +77,8 @@ export function saveControlOverride(projectPath, controlId, status, reason) {
     else {
         overrides.push(entry);
     }
-    const overridesPath = path.join(gesDir, OVERRIDES_FILE);
-    fs.writeFileSync(overridesPath, JSON.stringify(overrides, null, 2), "utf-8");
+    const overridesPath = path.join(projectPath, GES_DIR, OVERRIDES_FILE);
+    safeWriteJson(overridesPath, overrides);
 }
 export function applyOverridesToControls(controls, overrides) {
     if (overrides.length === 0)
@@ -118,7 +115,7 @@ export function addFrameworkToConfig(projectPath, framework) {
         if (fwLower.has(framework.toLowerCase()))
             return false;
         config.frameworks.push(framework);
-        fs.writeFileSync(configPath, JSON.stringify(config, null, 2), "utf-8");
+        safeWriteJson(configPath, config);
         return true;
     }
     catch {
@@ -136,7 +133,7 @@ export function removeFrameworkFromConfig(projectPath, framework) {
         config.frameworks = config.frameworks.filter((f) => f.toLowerCase() !== framework.toLowerCase());
         if (config.frameworks.length === before)
             return false;
-        fs.writeFileSync(configPath, JSON.stringify(config, null, 2), "utf-8");
+        safeWriteJson(configPath, config);
         return true;
     }
     catch {

package/dist/fix-assignments/index.js

@@ -1,5 +1,6 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { safeWriteJson } from "../utils/index.js";
 const ASSIGNMENTS_FILE = "fix-assignments.json";
 function assignmentsPath(projectPath) {
     return path.join(projectPath, ".ges", ASSIGNMENTS_FILE);
@@ -16,11 +17,7 @@ export function loadFixAssignments(projectPath) {
     }
 }
 export function saveFixAssignments(projectPath, assignments) {
-    const gesDir = path.join(projectPath, ".ges");
-    if (!fs.existsSync(gesDir)) {
-        fs.mkdirSync(gesDir, { recursive: true });
-    }
-    fs.writeFileSync(assignmentsPath(projectPath), JSON.stringify(assignments, null, 2), "utf-8");
+    safeWriteJson(assignmentsPath(projectPath), assignments);
 }
 let assignmentCounter = 0;
 export function generateAssignmentId() {

package/dist/fix-history/index.js

@@ -1,5 +1,6 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { safeWriteJson } from "../utils/index.js";
 export function loadFixHistory(projectPath) {
     const histPath = path.join(projectPath, ".ges", "fix-history.json");
     try {
@@ -14,14 +15,10 @@ export function loadFixHistory(projectPath) {
 export function appendFixHistory(projectPath, entries) {
     if (entries.length === 0)
         return;
-    const gesDir = path.join(projectPath, ".ges");
-    if (!fs.existsSync(gesDir)) {
-        fs.mkdirSync(gesDir, { recursive: true });
-    }
-    const histPath = path.join(gesDir, "fix-history.json");
+    const histPath = path.join(projectPath, ".ges", "fix-history.json");
     const existing = loadFixHistory(projectPath);
     const updated = existing.concat(entries);
-    fs.writeFileSync(histPath, JSON.stringify(updated, null, 2), "utf-8");
+    safeWriteJson(histPath, updated);
 }
 export function clearFixHistory(projectPath) {
     const histPath = path.join(projectPath, ".ges", "fix-history.json");

package/dist/governance/index.js

@@ -1,5 +1,6 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { safeWriteJson } from "../utils/index.js";
 const GOVERNANCE_FILE = "governance-records.json";
 function recordsPath(projectPath) {
     return path.join(projectPath, ".ges", GOVERNANCE_FILE);
@@ -16,11 +17,7 @@ export function loadGovernanceRecords(projectPath) {
     }
 }
 export function saveGovernanceRecords(projectPath, records) {
-    const gesDir = path.join(projectPath, ".ges");
-    if (!fs.existsSync(gesDir)) {
-        fs.mkdirSync(gesDir, { recursive: true });
-    }
-    fs.writeFileSync(recordsPath(projectPath), JSON.stringify(records, null, 2), "utf-8");
+    safeWriteJson(recordsPath(projectPath), records);
 }
 let govCounter = 0;
 export function generateGovernanceId() {

package/dist/index.d.ts

@@ -7,3 +7,4 @@ export * from "./activity-log/index.js";
 export * from "./recommendations/index.js";
 export * from "./governance/index.js";
 export * from "./fix-assignments/index.js";
+export * from "./utils/index.js";

package/dist/index.js

@@ -7,3 +7,4 @@ export * from "./activity-log/index.js";
 export * from "./recommendations/index.js";
 export * from "./governance/index.js";
 export * from "./fix-assignments/index.js";
+export * from "./utils/index.js";

package/dist/recommendations/index.js

@@ -1,5 +1,6 @@
 import * as fs from "node:fs";
 import * as path from "node:path";
+import { safeWriteFile } from "../utils/index.js";
 let recCounter = 0;
 export function recordAIRecommendation(projectPath, opts) {
     recCounter++;
@@ -58,7 +59,7 @@ export function recordAIRecommendation(projectPath, opts) {
     md.push(`---`);
     md.push(`*This recommendation was generated by an AI assistant using the GESF MCP server. It is logged here for developer review and is NOT automatically applied to the project.*`);
     md.push("");
-    fs.writeFileSync(path.join(devLogsDir, fileName), md.join("\n"), "utf-8");
+    safeWriteFile(path.join(devLogsDir, fileName), md.join("\n"));
     return recommendation;
 }
 export function loadAIRecommendations(projectPath) {

package/dist/utils/index.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Writes JSON to disk atomically using write-to-temp-then-rename.
+ *
+ * On POSIX systems, `fs.renameSync()` is atomic — the file is either
+ * the old version or the new version, never half-written. This prevents
+ * corruption if the process crashes mid-write (power loss, OOM, SIGKILL).
+ *
+ * The temp file is created in the same directory as the target to ensure
+ * the rename operation is atomic (cross-device renames are not atomic).
+ */
+export declare function safeWriteJson(filePath: string, data: unknown, indent?: number): void;
+/**
+ * Writes a string to disk atomically using write-to-temp-then-rename.
+ *
+ * Creates parent directories if they don't exist.
+ * Uses `.tmp` extension for the intermediate file, cleaned up on error.
+ */
+export declare function safeWriteFile(filePath: string, content: string, _encoding?: BufferEncoding): void;
+/**
+ * Reads and parses a JSON file with error handling.
+ * Returns the fallback value if the file doesn't exist or is malformed.
+ */
+export declare function safeReadJson<T>(filePath: string, fallback: T): T;

package/dist/utils/index.js

@@ -0,0 +1,59 @@
+import * as fs from "node:fs";
+import * as path from "node:path";
+/**
+ * Writes JSON to disk atomically using write-to-temp-then-rename.
+ *
+ * On POSIX systems, `fs.renameSync()` is atomic — the file is either
+ * the old version or the new version, never half-written. This prevents
+ * corruption if the process crashes mid-write (power loss, OOM, SIGKILL).
+ *
+ * The temp file is created in the same directory as the target to ensure
+ * the rename operation is atomic (cross-device renames are not atomic).
+ */
+export function safeWriteJson(filePath, data, indent = 2) {
+    const json = JSON.stringify(data, null, indent);
+    safeWriteFile(filePath, json);
+}
+/**
+ * Writes a string to disk atomically using write-to-temp-then-rename.
+ *
+ * Creates parent directories if they don't exist.
+ * Uses `.tmp` extension for the intermediate file, cleaned up on error.
+ */
+export function safeWriteFile(filePath, content, _encoding = "utf-8") {
+    const dir = path.dirname(filePath);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    const tmpPath = filePath + ".tmp";
+    try {
+        fs.writeFileSync(tmpPath, content, "utf-8");
+        fs.renameSync(tmpPath, filePath);
+    }
+    catch (err) {
+        // Clean up temp file if rename failed
+        try {
+            if (fs.existsSync(tmpPath)) {
+                fs.unlinkSync(tmpPath);
+            }
+        }
+        catch {
+            // ignore cleanup errors
+        }
+        throw err;
+    }
+}
+/**
+ * Reads and parses a JSON file with error handling.
+ * Returns the fallback value if the file doesn't exist or is malformed.
+ */
+export function safeReadJson(filePath, fallback) {
+    try {
+        const raw = fs.readFileSync(filePath, "utf-8");
+        const data = JSON.parse(raw);
+        return data;
+    }
+    catch {
+        return fallback;
+    }
+}

package/package.json

@@ -24,7 +24,7 @@
   "name": "@greenarmor/ges-core",
   "type": "module",
   "types": "./dist/index.d.ts",
-  "version": "1.5.1",
+  "version": "1.5.2",
   "scripts": {
     "build": "tsc",
     "clean": "rm -rf dist tsconfig.tsbuildinfo",