@phuetz/code-buddy 1.6.0 → 2.0.0

package/dist/utils/cost-tracker.d.ts

@@ -1,10 +1,29 @@
 import { EventEmitter } from "events";
+/**
+ * Detect models served EXCLUSIVELY via the ChatGPT subscription auth
+ * (Codex backend). These are billed against the user's flat-fee
+ * ChatGPT Plus/Pro plan, NOT per token, so cost tracking should report
+ * 0 to avoid showing fictitious USD spend in dashboards.
+ *
+ * Conservative match for the models this app routes through ChatGPT
+ * OAuth by default. The caller paths that route through
+ * `ChatGptResponsesProvider` get cost=0 either way because the backend
+ * doesn't return token usage in the SSE stream.
+ */
+declare function isChatGptSubscriptionModel(model: string): boolean;
+declare function isLocalNoCostModel(model: string): boolean;
 export interface TokenUsage {
     inputTokens: number;
     outputTokens: number;
     model: string;
     timestamp: Date;
     cost: number;
+    /** Whether this usage is based on provider-reported tokens (true) or local estimate (false) */
+    estimated?: boolean;
+    /** Pricing model used: 'known' | 'unknown' | 'subscription' */
+    pricing?: 'known' | 'unknown' | 'subscription';
+    /** Billing type: 'pay-per-use' | 'subscription' */
+    billing?: 'pay-per-use' | 'subscription';
 }
 export interface CostReport {
     sessionCost: number;
@@ -21,6 +40,24 @@ export interface CostReport {
         calls: number;
     }>;
     recentUsage: TokenUsage[];
+    /** Persisted monthly guardrail, when configured. */
+    budgetLimit?: number;
+    /** Persisted daily guardrail, when configured. */
+    dailyLimit?: number;
+}
+/** Extended cost information with provenance metadata */
+export interface ExtendedCostInfo {
+    total: number;
+    /** Whether the cost is based on provider-reported tokens (false) or local estimate (true) */
+    estimated: boolean;
+    /** Pricing model: 'known' (model has known pricing), 'unknown' (model not in pricing table), 'subscription' (forfait) */
+    pricing: 'known' | 'unknown' | 'subscription';
+    /** Billing type: 'pay-per-use' or 'subscription' */
+    billing: 'pay-per-use' | 'subscription';
+    /** Input tokens used for this cost calculation */
+    inputTokens: number;
+    /** Output tokens used for this cost calculation */
+    outputTokens: number;
 }
 export interface CostConfig {
     budgetLimit?: number;
@@ -35,6 +72,7 @@ export interface ModelPricing {
     inputPer1k: number;
     outputPer1k: number;
 }
+declare const MODEL_PRICING: Record<string, ModelPricing>;
 /**
  * Cost Tracker - Track API usage and costs
  */
@@ -52,6 +90,14 @@ export declare class CostTracker extends EventEmitter {
     private saveConfig;
     private loadHistory;
     private saveHistory;
+    /**
+     * Determine billing type for a model
+     */
+    private determineBillingType;
+    /**
+     * Determine pricing status for a model
+     */
+    private determinePricingStatus;
     /**
      * Calculate cost for token usage.
      *
@@ -60,8 +106,24 @@ export declare class CostTracker extends EventEmitter {
      * billed against the user's flat-fee ChatGPT Plus/Pro plan, NOT a
      * per-token API platform balance. Reporting a fictitious USD cost is
      * misleading and shows up in dashboards as "spend" that doesn't exist.
+     *
+     * When providerUsage is provided (provider-reported tokens), it takes precedence
+     * over local estimates. This ensures accuracy when the provider returns usage
+     * in the SSE stream (OpenAI-compatible APIs with include_usage option).
+     */
+    calculateCost(inputTokens: number, outputTokens: number, model: string, cachedTokens?: number, providerUsage?: {
+        promptTokens: number;
+        completionTokens: number;
+    }): number;
+    /**
+     * Calculate cost with extended metadata about the calculation.
+     * This provides transparency about whether the cost is based on provider
+     * usage or local estimates, and the pricing/billing status.
      */
-    calculateCost(inputTokens: number, outputTokens: number, model: string, cachedTokens?: number): number;
+    calculateCostExtended(inputTokens: number, outputTokens: number, model: string, cachedTokens?: number, providerUsage?: {
+        promptTokens: number;
+        completionTokens: number;
+    }): ExtendedCostInfo;
     /**
      * Record token usage
      */
@@ -70,6 +132,8 @@ export declare class CostTracker extends EventEmitter {
      * Check and emit budget alerts
      */
     private checkBudgetAlerts;
+    /** Session-scoped usage rows recorded since construction. */
+    getSessionUsage(): readonly TokenUsage[];
     /**
      * Get cost report
      */
@@ -104,4 +168,5 @@ export declare class CostTracker extends EventEmitter {
      */
     dispose(): void;
 }
+export { isChatGptSubscriptionModel, isLocalNoCostModel, MODEL_PRICING };
 export declare function getCostTracker(config?: Partial<CostConfig>): CostTracker;

package/dist/utils/cost-tracker.js

@@ -1,8 +1,8 @@
-import fs from "fs-extra";
 import * as path from "path";
 import * as os from "os";
 import { EventEmitter } from "events";
 import { getAnalyticsRepository } from '../database/repositories/analytics-repository.js';
+import { readJsonAtomicSync, writeJsonAtomicSync } from './atomic-write.js';
 /**
  * Detect models served EXCLUSIVELY via the ChatGPT subscription auth
  * (Codex backend). These are billed against the user's flat-fee
@@ -18,12 +18,21 @@ function isChatGptSubscriptionModel(model) {
     if (!model)
         return false;
     const m = model.toLowerCase();
-    return (m === 'gpt-5.2' ||
+    return (
+    // Models served EXCLUSIVELY via ChatGPT OAuth/backend (not billable via API key)
+    m === 'gpt-5.2' ||
         m === 'gpt-5.5' ||
         m.startsWith('gpt-5.5-') ||
         m.includes('-codex') ||
         m === 'codex-1' ||
-        m.startsWith('codex-mini'));
+        m.startsWith('codex-mini') ||
+        // gpt-5.6 variants served via ChatGPT Responses backend
+        m === 'gpt-5.6-sol' ||
+        m === 'gpt-5.6' ||
+        m.startsWith('gpt-5.6-') ||
+        // Codex models
+        m === 'codex' ||
+        m.startsWith('codex-'));
 }
 function isLocalNoCostModel(model) {
     if (!model)
@@ -46,7 +55,9 @@ function isLocalNoCostModel(model) {
         m.startsWith('mixtral:'));
 }
 // Model pricing (approximate, update as needed)
+// Pricing is per 1K tokens (inputPer1k, outputPer1k)
 const MODEL_PRICING = {
+    // Grok models
     "grok-4-latest": { inputPer1k: 0.003, outputPer1k: 0.015 },
     "grok-4-fast": { inputPer1k: 0.003, outputPer1k: 0.015 },
     "grok-4-1-fast": { inputPer1k: 0.003, outputPer1k: 0.015 },
@@ -55,6 +66,16 @@ const MODEL_PRICING = {
     "grok-3-mini": { inputPer1k: 0.0003, outputPer1k: 0.0005 },
     "grok-code-fast-1": { inputPer1k: 0.00015, outputPer1k: 0.0006 },
     "grok-2-latest": { inputPer1k: 0.002, outputPer1k: 0.010 },
+    // Mistral models - public pricing (as of 2026-09)
+    // mistral-medium-latest: 1.5 $/M input, 7.5 $/M output = 0.0015 $/K input, 0.0075 $/K output
+    "mistral-medium-latest": { inputPer1k: 0.0015, outputPer1k: 0.0075 },
+    "mistral-medium": { inputPer1k: 0.0015, outputPer1k: 0.0075 },
+    "mistral-large-latest": { inputPer1k: 0.003, outputPer1k: 0.015 },
+    "mistral-large": { inputPer1k: 0.003, outputPer1k: 0.015 },
+    "mistral-small-latest": { inputPer1k: 0.00025, outputPer1k: 0.001 },
+    "mistral-small": { inputPer1k: 0.00025, outputPer1k: 0.001 },
+    "mixtral-8x7b-latest": { inputPer1k: 0.0005, outputPer1k: 0.002 },
+    "mixtral-8x7b": { inputPer1k: 0.0005, outputPer1k: 0.002 },
     // Fallback for unknown models
     "default": { inputPer1k: 0.003, outputPer1k: 0.015 },
 };
@@ -97,10 +118,12 @@ export class CostTracker extends EventEmitter {
     }
     loadConfig() {
         try {
-            if (fs.existsSync(this.configPath)) {
-                const saved = fs.readJsonSync(this.configPath);
+            const saved = readJsonAtomicSync(this.configPath, null, {
+                mode: 0o600,
+                isValid: (value) => Boolean(value && typeof value === 'object' && !Array.isArray(value)),
+            });
+            if (saved)
                 this.config = { ...this.config, ...saved };
-            }
         }
         catch (_error) {
             // Use defaults
@@ -108,9 +131,7 @@ export class CostTracker extends EventEmitter {
     }
     saveConfig() {
         try {
-            const dir = path.dirname(this.configPath);
-            fs.ensureDirSync(dir);
-            fs.writeJsonSync(this.configPath, this.config, { spaces: 2 });
+            writeJsonAtomicSync(this.configPath, this.config, { mode: 0o600 });
         }
         catch (_error) {
             // Ignore
@@ -120,8 +141,11 @@ export class CostTracker extends EventEmitter {
         if (!this.config.trackHistory)
             return;
         try {
-            if (fs.existsSync(this.historyPath)) {
-                const saved = fs.readJsonSync(this.historyPath);
+            const saved = readJsonAtomicSync(this.historyPath, null, {
+                mode: 0o600,
+                isValid: (value) => Array.isArray(value),
+            });
+            if (saved) {
                 this.history = saved.map((u) => ({
                     ...u,
                     timestamp: new Date(u.timestamp),
@@ -140,14 +164,29 @@ export class CostTracker extends EventEmitter {
         if (!this.config.trackHistory)
             return;
         try {
-            const dir = path.dirname(this.historyPath);
-            fs.ensureDirSync(dir);
-            fs.writeJsonSync(this.historyPath, this.history, { spaces: 2 });
+            writeJsonAtomicSync(this.historyPath, this.history, { mode: 0o600 });
         }
         catch (_error) {
             // Ignore
         }
     }
+    /**
+     * Determine billing type for a model
+     */
+    determineBillingType(model) {
+        return isChatGptSubscriptionModel(model) || isLocalNoCostModel(model)
+            ? 'subscription'
+            : 'pay-per-use';
+    }
+    /**
+     * Determine pricing status for a model
+     */
+    determinePricingStatus(model) {
+        if (isChatGptSubscriptionModel(model) || isLocalNoCostModel(model)) {
+            return 'subscription';
+        }
+        return MODEL_PRICING[model] ? 'known' : 'unknown';
+    }
     /**
      * Calculate cost for token usage.
      *
@@ -156,15 +195,51 @@ export class CostTracker extends EventEmitter {
      * billed against the user's flat-fee ChatGPT Plus/Pro plan, NOT a
      * per-token API platform balance. Reporting a fictitious USD cost is
      * misleading and shows up in dashboards as "spend" that doesn't exist.
+     *
+     * When providerUsage is provided (provider-reported tokens), it takes precedence
+     * over local estimates. This ensures accuracy when the provider returns usage
+     * in the SSE stream (OpenAI-compatible APIs with include_usage option).
      */
-    calculateCost(inputTokens, outputTokens, model, cachedTokens = 0) {
+    calculateCost(inputTokens, outputTokens, model, cachedTokens = 0, providerUsage) {
+        // Use provider-reported tokens when available
+        const effectiveInput = providerUsage?.promptTokens ?? (inputTokens - cachedTokens + (cachedTokens * 0.5));
+        const effectiveOutput = providerUsage?.completionTokens ?? outputTokens;
         if (isChatGptSubscriptionModel(model) || isLocalNoCostModel(model)) {
             return 0;
         }
         const pricing = MODEL_PRICING[model] ?? MODEL_PRICING["default"] ?? { inputPer1k: 0.003, outputPer1k: 0.015 };
-        const effectiveInput = inputTokens - cachedTokens + (cachedTokens * 0.5);
         return (effectiveInput / 1000) * pricing.inputPer1k +
-            (outputTokens / 1000) * pricing.outputPer1k;
+            (effectiveOutput / 1000) * pricing.outputPer1k;
+    }
+    /**
+     * Calculate cost with extended metadata about the calculation.
+     * This provides transparency about whether the cost is based on provider
+     * usage or local estimates, and the pricing/billing status.
+     */
+    calculateCostExtended(inputTokens, outputTokens, model, cachedTokens = 0, providerUsage) {
+        const billing = this.determineBillingType(model);
+        const pricingStatus = this.determinePricingStatus(model);
+        const estimated = providerUsage === undefined;
+        // Use provider-reported tokens when available
+        const effectiveInput = providerUsage?.promptTokens ?? (inputTokens - cachedTokens + (cachedTokens * 0.5));
+        const effectiveOutput = providerUsage?.completionTokens ?? outputTokens;
+        let total = 0;
+        if (billing === 'subscription') {
+            total = 0;
+        }
+        else {
+            const pricing = MODEL_PRICING[model] ?? MODEL_PRICING["default"] ?? { inputPer1k: 0.003, outputPer1k: 0.015 };
+            total = (effectiveInput / 1000) * pricing.inputPer1k +
+                (effectiveOutput / 1000) * pricing.outputPer1k;
+        }
+        return {
+            total,
+            estimated,
+            pricing: pricingStatus,
+            billing,
+            inputTokens: effectiveInput,
+            outputTokens: effectiveOutput,
+        };
     }
     /**
      * Record token usage
@@ -254,6 +329,10 @@ export class CostTracker extends EventEmitter {
             this._lastBudgetAlertTime = now;
         }
     }
+    /** Session-scoped usage rows recorded since construction. */
+    getSessionUsage() {
+        return this.sessionUsage;
+    }
     /**
      * Get cost report
      */
@@ -298,6 +377,8 @@ export class CostTracker extends EventEmitter {
             sessionTokens,
             modelBreakdown,
             recentUsage: this.sessionUsage.slice(-10),
+            budgetLimit: this.config.budgetLimit,
+            dailyLimit: this.config.dailyLimit,
         };
     }
     /**
@@ -402,6 +483,8 @@ export class CostTracker extends EventEmitter {
         this.removeAllListeners();
     }
 }
+// Export helper functions for external use (e.g., cost display)
+export { isChatGptSubscriptionModel, isLocalNoCostModel, MODEL_PRICING };
 // Singleton instance
 let costTrackerInstance = null;
 export function getCostTracker(config) {

package/dist/utils/history-manager.js

@@ -7,10 +7,10 @@
  * - Persistent storage in JSON format
  * - Duplicate prevention
  */
-import fs from 'fs-extra';
 import path from 'path';
 import os from 'os';
 import { logger } from './logger.js';
+import { readJsonAtomicSync, writeJsonAtomicSync } from './atomic-write.js';
 /**
  * Manages command history with prefix filtering and navigation
  */
@@ -42,9 +42,10 @@ export class HistoryManager {
      */
     loadHistory() {
         try {
-            if (fs.existsSync(this.config.historyFile)) {
-                const data = fs.readFileSync(this.config.historyFile, 'utf-8');
-                const parsed = JSON.parse(data);
+            const parsed = readJsonAtomicSync(this.config.historyFile, null, {
+                mode: 0o600,
+            });
+            if (parsed !== null) {
                 // Handle both old format (string[]) and new format (HistoryEntry[])
                 if (Array.isArray(parsed)) {
                     if (parsed.length > 0 && typeof parsed[0] === 'string') {
@@ -75,9 +76,7 @@ export class HistoryManager {
      */
     saveHistory() {
         try {
-            const dir = path.dirname(this.config.historyFile);
-            fs.ensureDirSync(dir);
-            fs.writeFileSync(this.config.historyFile, JSON.stringify(this.history, null, 2), 'utf-8');
+            writeJsonAtomicSync(this.config.historyFile, this.history, { mode: 0o600 });
         }
         catch (error) {
             logger.warn('Failed to save history', { error: String(error) });

package/dist/utils/init-project.js

@@ -1,5 +1,6 @@
 import fs from 'fs';
 import path from 'path';
+import { writeFileAtomicSync, writeJsonAtomicSync } from './atomic-write.js';
 // ============================================================================
 // CONTEXT.md generator (rich, profile-aware)
 // ============================================================================
@@ -555,7 +556,7 @@ priority: 1            # lower = higher priority
 
 Files with lower \`priority\` values are injected first (higher precedence).
 `;
-        fs.writeFileSync(knowledgeReadmePath, knowledgeReadmeContent);
+        writeFileAtomicSync(knowledgeReadmePath, knowledgeReadmeContent, { mode: 0o644 });
         result.created.push('.codebuddy/knowledge/README.md');
     }
     // Detect project profile for smart template generation
@@ -572,7 +573,7 @@ Files with lower \`priority\` values are injected first (higher precedence).
     const contextMdPath = path.join(codebuddyDir, 'CONTEXT.md');
     if (!fs.existsSync(contextMdPath) || options.force) {
         const contextContent = generateContextMdContent(profile, workingDirectory);
-        fs.writeFileSync(contextMdPath, contextContent);
+        writeFileAtomicSync(contextMdPath, contextContent, { mode: 0o644 });
         result.created.push('.codebuddy/CONTEXT.md');
     }
     else {
@@ -581,7 +582,7 @@ Files with lower \`priority\` values are injected first (higher precedence).
     // Create CODEBUDDY.md — priority 2 (project-aware custom instructions)
     const codebuddyMdPath = path.join(codebuddyDir, 'CODEBUDDY.md');
     if (!fs.existsSync(codebuddyMdPath) || options.force) {
-        fs.writeFileSync(codebuddyMdPath, generateCODEBUDDYMdContent(profile));
+        writeFileAtomicSync(codebuddyMdPath, generateCODEBUDDYMdContent(profile), { mode: 0o644 });
         result.created.push('.codebuddy/CODEBUDDY.md');
     }
     else {
@@ -595,7 +596,7 @@ Files with lower \`priority\` values are injected first (higher precedence).
     // only ignores `.codebuddy/`, not AGENTS.md).
     const agentsMdPath = path.join(workingDirectory, 'AGENTS.md');
     if (!fs.existsSync(agentsMdPath) || options.force) {
-        fs.writeFileSync(agentsMdPath, generateAgentsMdContent(profile));
+        writeFileAtomicSync(agentsMdPath, generateAgentsMdContent(profile), { mode: 0o644 });
         result.created.push('AGENTS.md');
     }
     else {
@@ -639,7 +640,7 @@ Files with lower \`priority\` values are injected first (higher precedence).
                     }
                 ]
             };
-            fs.writeFileSync(hooksPath, JSON.stringify(hooksContent, null, 2));
+            writeJsonAtomicSync(hooksPath, hooksContent, { mode: 0o600 });
             result.created.push('.codebuddy/hooks.json');
         }
         else {
@@ -675,7 +676,7 @@ Files with lower \`priority\` values are injected first (higher precedence).
                     }
                 }
             };
-            fs.writeFileSync(mcpPath, JSON.stringify(mcpContent, null, 2));
+            writeJsonAtomicSync(mcpPath, mcpContent, { mode: 0o600 });
             result.created.push('.codebuddy/mcp.json');
         }
         else {
@@ -692,7 +693,7 @@ Files with lower \`priority\` values are injected first (higher precedence).
                 blockedCommands: [],
                 blockedPaths: []
             };
-            fs.writeFileSync(securityPath, JSON.stringify(securityContent, null, 2));
+            writeJsonAtomicSync(securityPath, securityContent, { mode: 0o600 });
             result.created.push('.codebuddy/security.json');
         }
         else {
@@ -724,7 +725,7 @@ You can use placeholders:
 
 Example: Analyze the file $1 and suggest improvements.
 `;
-            fs.writeFileSync(exampleCommandPath, exampleCommandContent);
+            writeFileAtomicSync(exampleCommandPath, exampleCommandContent, { mode: 0o644 });
             result.created.push('.codebuddy/commands/example.md');
         }
         const deployCommandPath = path.join(commandsDir, 'deploy.md');
@@ -750,7 +751,7 @@ Safety checks:
 - Ensure no uncommitted changes
 - Confirm before proceeding
 `;
-            fs.writeFileSync(deployCommandPath, deployCommandContent);
+            writeFileAtomicSync(deployCommandPath, deployCommandContent, { mode: 0o644 });
             result.created.push('.codebuddy/commands/deploy.md');
         }
     }
@@ -759,10 +760,13 @@ Safety checks:
     if (!fs.existsSync(settingsPath) || options.force) {
         const settingsContent = {
             model: 'grok-code-fast-1',
-            maxToolRounds: 400,
+            // 50 is the real non-YOLO runtime default; the scaffold previously wrote
+            // 400 (the YOLO cap), which both misrepresented behavior and — if a future
+            // path wires settings.json into the agent — would silently 8× the budget.
+            maxToolRounds: 50,
             theme: 'default'
         };
-        fs.writeFileSync(settingsPath, JSON.stringify(settingsContent, null, 2));
+        writeJsonAtomicSync(settingsPath, settingsContent, { mode: 0o600 });
         result.created.push('.codebuddy/settings.json');
     }
     else {
@@ -793,7 +797,7 @@ Safety checks:
             }
         }
         else {
-            fs.writeFileSync(gitignorePath, codebuddyIgnoreEntries.trim());
+            writeFileAtomicSync(gitignorePath, codebuddyIgnoreEntries.trim(), { mode: 0o644 });
             result.created.push('.gitignore');
         }
     }
@@ -866,7 +870,7 @@ Configure security modes in \`security.json\`:
 
 See the [Code Buddy documentation](https://github.com/phuetz/code-buddy) for more details.
 `;
-        fs.writeFileSync(readmePath, readmeContent);
+        writeFileAtomicSync(readmePath, readmeContent, { mode: 0o644 });
         result.created.push('.codebuddy/README.md');
     }
     return result;

package/dist/utils/input-validation/index.d.ts

@@ -211,28 +211,28 @@ export declare const createTodoListSchema: z.ZodObject<{
         priority: z.ZodDefault<z.ZodOptional<z.ZodEnum<["low", "medium", "high"]>>>;
     }, "strip", z.ZodTypeAny, {
         content: string;
-        status: "pending" | "completed" | "blocked" | "in_progress";
-        priority: "low" | "medium" | "high";
+        status: "pending" | "completed" | "in_progress" | "blocked";
         id: string;
+        priority: "high" | "medium" | "low";
     }, {
         content: string;
-        status: "pending" | "completed" | "blocked" | "in_progress";
+        status: "pending" | "completed" | "in_progress" | "blocked";
         id: string;
-        priority?: "low" | "medium" | "high" | undefined;
+        priority?: "high" | "medium" | "low" | undefined;
     }>, "many">;
 }, "strip", z.ZodTypeAny, {
     todos: {
         content: string;
-        status: "pending" | "completed" | "blocked" | "in_progress";
-        priority: "low" | "medium" | "high";
+        status: "pending" | "completed" | "in_progress" | "blocked";
         id: string;
+        priority: "high" | "medium" | "low";
     }[];
 }, {
     todos: {
         content: string;
-        status: "pending" | "completed" | "blocked" | "in_progress";
+        status: "pending" | "completed" | "in_progress" | "blocked";
         id: string;
-        priority?: "low" | "medium" | "high" | undefined;
+        priority?: "high" | "medium" | "low" | undefined;
     }[];
 }>;
 /**
@@ -247,27 +247,27 @@ export declare const updateTodoListSchema: z.ZodObject<{
     }, "strip", z.ZodTypeAny, {
         id: string;
         content?: string | undefined;
-        status?: "pending" | "completed" | "blocked" | "in_progress" | undefined;
-        priority?: "low" | "medium" | "high" | undefined;
+        status?: "pending" | "completed" | "in_progress" | "blocked" | undefined;
+        priority?: "high" | "medium" | "low" | undefined;
     }, {
         id: string;
         content?: string | undefined;
-        status?: "pending" | "completed" | "blocked" | "in_progress" | undefined;
-        priority?: "low" | "medium" | "high" | undefined;
+        status?: "pending" | "completed" | "in_progress" | "blocked" | undefined;
+        priority?: "high" | "medium" | "low" | undefined;
     }>, "many">;
 }, "strip", z.ZodTypeAny, {
     updates: {
         id: string;
         content?: string | undefined;
-        status?: "pending" | "completed" | "blocked" | "in_progress" | undefined;
-        priority?: "low" | "medium" | "high" | undefined;
+        status?: "pending" | "completed" | "in_progress" | "blocked" | undefined;
+        priority?: "high" | "medium" | "low" | undefined;
     }[];
 }, {
     updates: {
         id: string;
         content?: string | undefined;
-        status?: "pending" | "completed" | "blocked" | "in_progress" | undefined;
-        priority?: "low" | "medium" | "high" | undefined;
+        status?: "pending" | "completed" | "in_progress" | "blocked" | undefined;
+        priority?: "high" | "medium" | "low" | undefined;
     }[];
 }>;
 /**

package/dist/utils/installation-id.js

@@ -9,18 +9,12 @@
  * NOT a security primitive — it's an opaque telemetry/identification
  * value. Don't store secrets here, don't read it for auth decisions.
  */
-import * as fs from 'fs';
 import * as path from 'path';
 import * as os from 'os';
 import * as crypto from 'crypto';
+import { readTextAtomicSync, writeFileAtomicSync } from './atomic-write.js';
 const INSTALL_ID_PATH = path.join(os.homedir(), '.codebuddy', 'installation-id');
 let cached = null;
-function ensureDir() {
-    const dir = path.dirname(INSTALL_ID_PATH);
-    if (!fs.existsSync(dir)) {
-        fs.mkdirSync(dir, { recursive: true });
-    }
-}
 /** UUID v4 — RFC 4122 §4.4. Stays inside Node stdlib (`crypto.randomUUID`
  *  exists since Node 14.17 / 16; we already require ≥18). */
 function newUuid() {
@@ -35,13 +29,11 @@ export function getInstallationId() {
     if (cached)
         return cached;
     try {
-        if (fs.existsSync(INSTALL_ID_PATH)) {
-            const raw = fs.readFileSync(INSTALL_ID_PATH, 'utf-8').trim();
-            // Loose UUID v4 shape check — be tolerant of older formats.
-            if (raw && /^[0-9a-f-]{8,}$/i.test(raw)) {
-                cached = raw;
-                return cached;
-            }
+        const raw = readTextAtomicSync(INSTALL_ID_PATH, '').trim();
+        // Loose UUID v4 shape check — be tolerant of older formats.
+        if (raw && /^[0-9a-f-]{8,}$/i.test(raw)) {
+            cached = raw;
+            return cached;
         }
     }
     catch {
@@ -49,14 +41,7 @@ export function getInstallationId() {
     }
     const fresh = newUuid();
     try {
-        ensureDir();
-        fs.writeFileSync(INSTALL_ID_PATH, fresh, 'utf-8');
-        if (process.platform !== 'win32') {
-            try {
-                fs.chmodSync(INSTALL_ID_PATH, 0o600);
-            }
-            catch { /* non-fatal */ }
-        }
+        writeFileAtomicSync(INSTALL_ID_PATH, fresh);
     }
     catch {
         // Disk write failure is non-fatal — we still return the fresh id

package/dist/utils/interactive-setup.js

@@ -12,6 +12,7 @@ import { logger } from "./logger.js";
 import path from 'path';
 import readline from 'readline';
 import { getCodeBuddyHome, ensureCodeBuddyHome } from './codebuddy-home.js';
+import { readJsonAtomicSync, writeJsonAtomicSync } from './atomic-write.js';
 import { getApiKey as getStoredApiKey, setApiKey as setStoredApiKey, } from '../security/credential-manager.js';
 // ============================================================================
 // Readline Utilities
@@ -220,10 +221,8 @@ function loadExistingApiKey() {
     }
     try {
         const settingsPath = path.join(getCodeBuddyHome(), 'user-settings.json');
-        if (fs.existsSync(settingsPath)) {
-            const settings = JSON.parse(fs.readFileSync(settingsPath, 'utf-8'));
-            return settings.apiKey;
-        }
+        const settings = readJsonAtomicSync(settingsPath, {});
+        return typeof settings.apiKey === 'string' ? settings.apiKey : undefined;
     }
     catch {
         // Ignore errors
@@ -239,9 +238,7 @@ async function saveConfig(config) {
         const settingsPath = path.join(getCodeBuddyHome(), 'user-settings.json');
         // Load existing settings
         let settings = {};
-        if (fs.existsSync(settingsPath)) {
-            settings = JSON.parse(fs.readFileSync(settingsPath, 'utf-8'));
-        }
+        settings = readJsonAtomicSync(settingsPath, {});
         // Update settings.
         // API keys are secrets: persist them to the encrypted credential store,
         // NEVER plaintext in user-settings.json. Mirrors the onboarding wizard
@@ -272,7 +269,7 @@ async function saveConfig(config) {
             settings.theme = config.theme;
         }
         // Save
-        fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2));
+        writeJsonAtomicSync(settingsPath, settings);
         console.log('  API Key: ' + (config.apiKey ? 'Saved' : 'Not set'));
         console.log('  Base URL: ' + (config.baseURL || 'https://api.x.ai/v1 (default)'));
         console.log('  Model: ' + (config.model || 'grok-3-latest'));
@@ -298,10 +295,8 @@ export function needsSetup() {
     }
     try {
         const settingsPath = path.join(getCodeBuddyHome(), 'user-settings.json');
-        if (fs.existsSync(settingsPath)) {
-            const settings = JSON.parse(fs.readFileSync(settingsPath, 'utf-8'));
-            return !settings.apiKey;
-        }
+        const settings = readJsonAtomicSync(settingsPath, {});
+        return !settings.apiKey;
     }
     catch {
         // Ignore errors