principles-disciple 1.36.0 → 1.38.0

package/src/core/event-log.ts

@@ -19,6 +19,7 @@ import type {
   EmpathyRollbackEventData,
 } from '../types/event-types.js';
 import { createEmptyDailyStats } from '../types/event-types.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 import type { PluginLogger } from '../openclaw-sdk.js';
 
 /**
@@ -295,6 +296,9 @@ export class EventLog {
 
   private startFlushTimer(): void {
     this.flushTimer = setInterval(() => this.flush(), this.flushIntervalMs);
+    // Don't keep the process alive just for this timer
+    // This allows tests and CLI to exit without waiting for flush
+    this.flushTimer.unref();
   }
 
   flush(): void {
@@ -386,7 +390,7 @@ export class EventLog {
     });
     
     try {
-      fs.writeFileSync(this.statsFile, JSON.stringify(data, null, 2), 'utf-8');
+      atomicWriteFileSync(this.statsFile, JSON.stringify(data, null, 2));
     } catch (e) {
       if (this.logger) this.logger.error(`[PD] Failed to flush daily-stats.json: ${String(e)}`);
     }

package/src/core/evolution-engine.ts

@@ -469,6 +469,7 @@ export class EvolutionEngine {
       this.retryTimer = setTimeout(() => {
         this.processRetryQueue();
       }, 1000);
+      this.retryTimer.unref(); // Don't keep process alive for retry
     }
   }
 

package/src/core/evolution-reducer.ts

@@ -2,6 +2,7 @@ import * as crypto from 'crypto';
 import * as fs from 'fs';
 import * as path from 'path';
 import { withLock } from '../utils/file-lock.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 import { PathResolver } from './path-resolver.js';
 import { SystemLogger } from './system-logger.js';
 import { shouldIgnorePainProtocolText } from './dictionary.js';
@@ -441,7 +442,7 @@ export class EvolutionReducerImpl implements EvolutionReducer {
           if (!fs.existsSync(parentDir)) {
             fs.mkdirSync(parentDir, { recursive: true });
           }
-          fs.writeFileSync(this.principlesPath, content, 'utf8');
+          atomicWriteFileSync(this.principlesPath, content);
           SystemLogger.log(this.workspaceDir, 'PRINCIPLES_CREATED', `Created PRINCIPLES.md`);
         }
 
@@ -460,7 +461,7 @@ export class EvolutionReducerImpl implements EvolutionReducer {
           content = content + separator + formatted;
         }
 
-        fs.writeFileSync(this.principlesPath, content, 'utf8');
+        atomicWriteFileSync(this.principlesPath, content);
         SystemLogger.log(this.workspaceDir, 'PRINCIPLE_SYNCED', `Principle ${principle.id} synced to PRINCIPLES.md`);
       }, { lockStaleMs: 10000 });
       return true;
@@ -752,7 +753,7 @@ export class EvolutionReducerImpl implements EvolutionReducer {
   private persistBlacklist(entry: { painId?: string; pattern?: string; reason: string; rolledBackAt: string }): void {
     const list = this.loadBlacklist();
     list.push(entry);
-    fs.writeFileSync(this.blacklistPath, JSON.stringify(list, null, 2), 'utf8');
+    atomicWriteFileSync(this.blacklistPath, JSON.stringify(list, null, 2));
   }
 
   private loadBlacklist(): { painId?: string; pattern?: string; reason: string; rolledBackAt: string }[] {

package/src/core/focus-history.ts

@@ -10,6 +10,7 @@
 
 import * as fs from 'fs';
 import * as path from 'path';
+import { atomicWriteFileSync } from '../utils/io.js';
 
 // ============================================================================
 // 工作记忆数据结构
@@ -124,7 +125,7 @@ export function backupToHistory(focusPath: string, content: string): string | nu
     }
 
     try {
-      fs.writeFileSync(backupPath, content, 'utf-8');
+      atomicWriteFileSync(backupPath, content);
       return backupPath;
     } catch (error) {
       logError(`Failed to write backup file: ${backupPath}`, error);
@@ -236,7 +237,7 @@ export function compressFocus(focusPath: string, newContent: string): {
     .replace(/\*\*更新\*\*:\s*\d{4}-\d{2}-\d{2}/, `**更新**: ${today}`);
 
   // 写入新内容
-  fs.writeFileSync(focusPath, updatedContent, 'utf-8');
+  atomicWriteFileSync(focusPath, updatedContent);
 
   // 清理过期历史
   const historyDir = getHistoryDir(focusPath);
@@ -430,7 +431,7 @@ export function extractWorkingMemory(
           
           // 尝试从文本中提取描述
            
-          // eslint-disable-next-line @typescript-eslint/no-use-before-define
+           
           const description = extractDescription(text, filePath);
           
           snapshot.artifacts.push({
@@ -446,23 +447,23 @@ export function extractWorkingMemory(
 
     // 从文本中提取文件操作（备用方式）
      
-    // eslint-disable-next-line @typescript-eslint/no-use-before-define
+     
     extractFileArtifacts(text, snapshot.artifacts, workspaceDir);
 
     // 提取问题
      
-    // eslint-disable-next-line @typescript-eslint/no-use-before-define
+     
     extractProblems(text, snapshot.activeProblems);
 
     // 提取下一步
      
-    // eslint-disable-next-line @typescript-eslint/no-use-before-define
+     
     extractNextActions(text, snapshot.nextActions);
   }
 
   // 去重和限制数量
    
-  // eslint-disable-next-line @typescript-eslint/no-use-before-define
+   
   snapshot.artifacts = deduplicateArtifacts(snapshot.artifacts).slice(-MAX_ARTIFACTS);
   snapshot.activeProblems = snapshot.activeProblems.slice(-MAX_PROBLEMS);
   snapshot.nextActions = snapshot.nextActions.slice(-MAX_NEXT_ACTIONS);
@@ -483,7 +484,7 @@ function extractFileArtifacts(
   const filePathRegex = /(?:file_path|absolute_path)["']?\s*[:=]\s*["']([^"']+\.(ts|js|json|md|yaml|yml|py|sh|mjs|cjs))["']/gi;
 
    
-  // eslint-disable-next-line @typescript-eslint/init-declarations
+   
   let match;
   while ((match = filePathRegex.exec(text)) !== null) {
     const [, filePath] = match;
@@ -514,7 +515,7 @@ function extractFileArtifacts(
 
     // 尝试提取描述（从附近的文本）
      
-    // eslint-disable-next-line @typescript-eslint/no-use-before-define
+     
     const description = extractDescription(text, filePath);
 
     artifacts.push({
@@ -548,7 +549,7 @@ function extractFileArtifacts(
     }
 
      
-    // eslint-disable-next-line @typescript-eslint/no-use-before-define
+     
     const description = extractDescription(text, filePath);
 
     artifacts.push({
@@ -597,7 +598,7 @@ function extractProblems(
   // 问题模式（匹配问题描述）
   const problemPattern = /(?:问题|problem|error|错误|失败|failed)[:：]\s*([^\n]{5,100})/gi;
    
-  // eslint-disable-next-line @typescript-eslint/init-declarations
+   
   let match;
   while ((match = problemPattern.exec(text)) !== null) {
     const content = match[1].trim();
@@ -641,7 +642,7 @@ function extractNextActions(text: string, actions: string[]): void {
 
   for (const pattern of patterns) {
      
-    // eslint-disable-next-line @typescript-eslint/init-declarations
+     
     let match;
     while ((match = pattern.exec(text)) !== null) {
       const action = match[1].trim();
@@ -701,7 +702,7 @@ export function parseWorkingMemorySection(content: string): WorkingMemorySnapsho
   // | 文件路径 | 操作 | 描述 |
   const tableRegex = /\|\s*`?([^`|\n]+)`?\s*\|\s*(created|modified|deleted)\s*\|\s*([^|\n]*)\s*\|/gi;
    
-  // eslint-disable-next-line @typescript-eslint/init-declarations
+   
   let match;
   while ((match = tableRegex.exec(wmContent)) !== null) {
     snapshot.artifacts.push({
@@ -741,7 +742,7 @@ export function mergeWorkingMemory(content: string, snapshot: WorkingMemorySnaps
 
   // 生成 Working Memory 章节
    
-  // eslint-disable-next-line @typescript-eslint/no-use-before-define
+   
   const wmSection = generateWorkingMemorySection(snapshot);
   
   if (wmIndex === -1) {
@@ -958,7 +959,7 @@ function recordCompressTime(stateDir: string): void {
     if (!fs.existsSync(stateDir)) {
       fs.mkdirSync(stateDir, { recursive: true });
     }
-    fs.writeFileSync(path.join(stateDir, LAST_COMPRESS_FILE), Date.now().toString(), 'utf-8');
+    atomicWriteFileSync(path.join(stateDir, LAST_COMPRESS_FILE), Date.now().toString());
   } catch (error) {
     logError('Failed to record compress time', error);
   }
@@ -1171,6 +1172,7 @@ export function autoCompressFocus(
   milestonesArchived: boolean;
   backupPath: string | null;
   reason: string;
+  newContent?: string;
 } {
   // 检查文件是否存在
   if (!fs.existsSync(focusPath)) {
@@ -1250,7 +1252,7 @@ export function autoCompressFocus(
   cleanupHistory(focusPath);
 
   // 8. 写入新内容
-  fs.writeFileSync(focusPath, newContent, 'utf-8');
+  atomicWriteFileSync(focusPath, newContent);
 
   // 9. 记录压缩时间
   if (stateDir) {
@@ -1265,6 +1267,7 @@ export function autoCompressFocus(
     newLines,
     milestonesArchived,
     backupPath,
+    newContent,
     reason: `Auto-compressed: ${oldLines} → ${newLines} lines`
   };
 }
@@ -1393,7 +1396,7 @@ export function recoverFromTemplate(
     }
 
     // 写入恢复的内容
-    fs.writeFileSync(focusPath, template, 'utf-8');
+    atomicWriteFileSync(focusPath, template);
 
     return {
       success: true,

package/src/core/hygiene/tracker.ts

@@ -2,6 +2,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import type { HygieneStats, PersistenceAction } from '../../types/hygiene-types.js';
 import { createEmptyHygieneStats } from '../../types/hygiene-types.js';
+import { atomicWriteFileSync } from '../../utils/io.js';
 import type { PluginLogger } from '../../openclaw-sdk.js';
 
 /**
@@ -79,7 +80,7 @@ export class HygieneTracker {
     
     try {
       // Use a temporary file for atomic write if possible, or simple write
-      fs.writeFileSync(this.statsFile, JSON.stringify(allStats, null, 2), 'utf-8');
+      atomicWriteFileSync(this.statsFile, JSON.stringify(allStats, null, 2));
     } catch (e) {
       this.logger?.error(`[PD] Failed to write hygiene-stats.json: ${String(e)}`);
     }

package/src/core/init.ts

@@ -5,6 +5,7 @@ import type { OpenClawPluginApi, PluginLogger } from '../openclaw-sdk.js';
 import { PD_DIRS } from './paths.js';
 import { defaultContextConfig } from '../types.js';
 import { loadStore, setPrincipleState, type PrincipleTrainingState } from './principle-training-state.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 
 /**
  * Default PROFILE.json content
@@ -102,7 +103,7 @@ export function ensureWorkspaceTemplates(api: OpenClawPluginApi, workspaceDir: s
             if (!fs.existsSync(principlesDir)) {
                 fs.mkdirSync(principlesDir, { recursive: true });
             }
-            fs.writeFileSync(profilePath, JSON.stringify(DEFAULT_PROFILE, null, 2), 'utf-8');
+            atomicWriteFileSync(profilePath, JSON.stringify(DEFAULT_PROFILE, null, 2));
             api.logger.info(`[PD] Initialized PROFILE.json with default contextInjection config`);
         }
     } catch (err) {

package/src/core/model-deployment-registry.ts

@@ -33,6 +33,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import * as crypto from 'crypto';
 import { withLock } from '../utils/file-lock.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 import type { Checkpoint } from './model-training-registry.js';
 import {
   getCheckpoint,
@@ -241,9 +242,7 @@ function readRegistry(stateDir: string): ModelDeploymentRegistry {
 function writeRegistry(stateDir: string, registry: ModelDeploymentRegistry): void {
   ensureRegistryDir(stateDir);
   const registryPath = getRegistryPath(stateDir);
-  const tmpPath = `${registryPath}.tmp`;
-  fs.writeFileSync(tmpPath, JSON.stringify(registry, null, 2), 'utf-8');
-  fs.renameSync(tmpPath, registryPath);
+  atomicWriteFileSync(registryPath, JSON.stringify(registry, null, 2));
 }
 
 /**
@@ -350,7 +349,7 @@ export function assertPromotionGatePassed(stateDir: string, checkpointId: string
  * @throws Error if checkpoint's targetModelFamily violates profile constraints
  */
  
-// eslint-disable-next-line @typescript-eslint/max-params
+ 
 export function bindCheckpointToWorkerProfile(
   stateDir: string,
   workerProfile: WorkerProfile,

package/src/core/model-training-registry.ts

@@ -34,6 +34,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import * as crypto from 'crypto';
 import { withLock } from '../utils/file-lock.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 
 // ---------------------------------------------------------------------------
 // Constants
@@ -239,9 +240,7 @@ function readRegistry(stateDir: string): ModelTrainingRegistry {
 function writeRegistry(stateDir: string, registry: ModelTrainingRegistry): void {
   ensureRegistryDir(stateDir);
   const registryPath = getRegistryPath(stateDir);
-  const tmpPath = `${registryPath}.tmp`;
-  fs.writeFileSync(tmpPath, JSON.stringify(registry, null, 2), 'utf-8');
-  fs.renameSync(tmpPath, registryPath);
+  atomicWriteFileSync(registryPath, JSON.stringify(registry, null, 2));
 }
 
 /**
@@ -322,7 +321,7 @@ export function registerTrainingRun(
  * @throws Error if run not found or transition is invalid
  */
  
-// eslint-disable-next-line @typescript-eslint/max-params
+ 
 export function updateTrainingRunStatus(
   stateDir: string,
   trainRunId: string,

package/src/core/nocturnal-artifact-lineage.ts

@@ -2,6 +2,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import { resolveNocturnalDir } from './nocturnal-paths.js';
 import { withLock } from '../utils/file-lock.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 
 export type ArtifactKind = 'behavioral-sample' | 'rule-implementation-candidate';
 
@@ -56,9 +57,7 @@ function writeArtifactLineageRegistry(
 ): void {
   const registryPath = getLineageRegistryPath(workspaceDir);
   fs.mkdirSync(path.dirname(registryPath), { recursive: true });
-  const tmpPath = `${registryPath}.tmp`;
-  fs.writeFileSync(tmpPath, JSON.stringify(records, null, 2), 'utf-8');
-  fs.renameSync(tmpPath, registryPath);
+  atomicWriteFileSync(registryPath, JSON.stringify(records, null, 2));
 }
 
 export function appendArtifactLineageRecord(

package/src/core/nocturnal-dataset.ts

@@ -31,6 +31,7 @@ import * as crypto from 'crypto';
 import { NocturnalPathResolver, resolveNocturnalDir } from './nocturnal-paths.js';
 import type { NocturnalArtifact } from './nocturnal-arbiter.js';
 import { withLock } from '../utils/file-lock.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 
 // ---------------------------------------------------------------------------
 // Types
@@ -246,9 +247,7 @@ function readRegistry(workspaceDir: string): NocturnalDatasetRecord[] {
 function writeRegistry(workspaceDir: string, records: NocturnalDatasetRecord[]): void {
   ensureRegistryDir(workspaceDir);
   const registryPath = getRegistryPath(workspaceDir);
-  const tmpPath = `${registryPath}.tmp`;
-  fs.writeFileSync(tmpPath, JSON.stringify(records, null, 2), 'utf-8');
-  fs.renameSync(tmpPath, registryPath);
+  atomicWriteFileSync(registryPath, JSON.stringify(records, null, 2));
 }
 
 // ---------------------------------------------------------------------------
@@ -284,7 +283,7 @@ function withRegistryLock<T>(workspaceDir: string, fn: (_records: NocturnalDatas
  * @returns RegisterSampleResult
  */
  
-// eslint-disable-next-line @typescript-eslint/max-params
+ 
 export function registerSample(
   workspaceDir: string,
   artifact: NocturnalArtifact,
@@ -427,7 +426,7 @@ const VALID_TRANSITIONS: Record<NocturnalReviewStatus, NocturnalReviewStatus[]>
  * @throws Error if transition is invalid
  */
  
-// eslint-disable-next-line @typescript-eslint/max-params
+ 
 export function updateReviewStatus(
   workspaceDir: string,
   sampleFingerprint: string,

package/src/core/nocturnal-export.ts

@@ -47,6 +47,7 @@
 import * as fs from 'fs';
 import * as path from 'path';
 import * as crypto from 'crypto';
+import { atomicWriteFileSync } from '../utils/io.js';
 import {
   listDatasetRecords,
   readDatasetArtifact,
@@ -158,7 +159,7 @@ function computeDatasetFingerprint(sampleFingerprints: string[]): string {
  * Caller guarantees record.targetModelFamily is non-null.
  */
  
-// eslint-disable-next-line @typescript-eslint/max-params
+ 
 function serializeORPOSample(
   record: NocturnalDatasetRecord,
   artifact: ReturnType<typeof readDatasetArtifact>,
@@ -167,7 +168,7 @@ function serializeORPOSample(
   datasetFingerprint: string
 ): ORPOSample {
   const now = new Date().toISOString();
-  // eslint-disable-next-line @typescript-eslint/no-use-before-define
+   
   const rejected = buildEvidenceBoundedRejected(artifact, evidenceSummary);
 
   return {
@@ -180,7 +181,7 @@ function serializeORPOSample(
     prompt: rejected,
     chosen: artifact.betterDecision,
     rejected,
-    // eslint-disable-next-line @typescript-eslint/no-use-before-define
+     
     rationale: buildEvidenceBoundedRationale(evidenceSummary),
     datasetMetadata: {
       sampleFingerprint: record.sampleFingerprint,
@@ -295,7 +296,7 @@ export function exportORPOSamples(
   });
 
    
-  // eslint-disable-next-line @typescript-eslint/init-declarations
+   
   let eligibleRecords: typeof allApprovedRecords;
 
   if (targetModelFamily !== undefined && targetModelFamily !== null) {
@@ -345,7 +346,7 @@ export function exportORPOSamples(
 
     // Read artifact (throws on error — distinguishes read failure from missing artifact)
      
-    // eslint-disable-next-line @typescript-eslint/init-declarations
+     
     let artifact;
     try {
       artifact = readDatasetArtifact(workspaceDir, record.sampleFingerprint);
@@ -385,7 +386,7 @@ export function exportORPOSamples(
   const exportsDir = NocturnalPathResolver.exportsDir(workspaceDir);
   const jsonlPath = path.join(exportsDir, `${exportId}.jsonl`);
   const lines = orpoSamples.map((s) => JSON.stringify(s)).join('\n') + '\n';
-  fs.writeFileSync(jsonlPath, lines, 'utf-8');
+  atomicWriteFileSync(jsonlPath, lines);
 
   // Step 8: Write manifest
   const manifest: ORPOExportManifest = {
@@ -404,7 +405,7 @@ export function exportORPOSamples(
     })),
   };
 
-  fs.writeFileSync(manifest.manifestPath, JSON.stringify(manifest, null, 2), 'utf-8');
+  atomicWriteFileSync(manifest.manifestPath, JSON.stringify(manifest, null, 2));
 
   return {
     success: true,

package/src/core/nocturnal-trinity-types.ts

@@ -5,6 +5,8 @@
  * Extracted to break circular dependency.
  */
 
+import type { TrinityArtificerContext } from './nocturnal-artificer.js';
+
 // ---------------------------------------------------------------------------
 // Dreamer Types
 // ---------------------------------------------------------------------------
@@ -92,3 +94,125 @@ export interface PhilosopherOutput {
   /** Timestamp of generation */
   generatedAt: string;
 }
+
+// ---------------------------------------------------------------------------
+// Trinity Result Types
+// ---------------------------------------------------------------------------
+
+/**
+ * Tournament trace entry for explainability.
+ */
+export interface TournamentTraceEntry {
+  candidateIndex: number;
+  reason: string;
+}
+
+/**
+ * Analysis of a rejected candidate — why it lost the tournament.
+ * Informs training signal for "what to avoid".
+ */
+export interface RejectedAnalysis {
+  /** Mental model that led to the rejected candidate */
+  whyRejected: string;
+  /** Observable caution triggers that were missed or ignored */
+  warningSignals: string[];
+  /** Correct reasoning path that should have been seen */
+  correctiveThinking: string;
+}
+
+/**
+ * Justification for the chosen candidate — why it won the tournament.
+ * Informs training signal for "what to do".
+ */
+export interface ChosenJustification {
+  /** Why this candidate was selected over others */
+  whyChosen: string;
+  /** 1-3 transferable insights from this decision */
+  keyInsights: string[];
+  /** When this approach does NOT apply */
+  limitations: string[];
+}
+
+/**
+ * Contrastive analysis: key differences between chosen and rejected paths.
+ * Synthesizes the core lesson from the tournament.
+ */
+export interface ContrastiveAnalysis {
+  /** ONE key insight distinguishing chosen from rejected */
+  criticalDifference: string;
+  /** Pattern: "When X, do Y" */
+  decisionTrigger: string;
+  /** How to systematically avoid the rejected path */
+  preventionStrategy: string;
+}
+
+/**
+ * Telemetry about Trinity chain execution.
+ */
+export interface TrinityTelemetry {
+  chainMode: 'trinity' | 'single-reflector';
+  usedStubs: boolean;
+  dreamerPassed: boolean;
+  philosopherPassed: boolean;
+  scribePassed: boolean;
+  candidateCount: number;
+  selectedCandidateIndex: number;
+  stageFailures: string[];
+  tournamentTrace?: TournamentTraceEntry[];
+  winnerAggregateScore?: number;
+  winnerThresholdPassed?: boolean;
+  eligibleCandidateCount?: number;
+  diversityCheckPassed?: boolean;
+  candidateRiskLevels?: string[];
+  philosopher6D?: {
+    avgScores: {
+      principleAlignment: number;
+      specificity: number;
+      actionability: number;
+      executability: number;
+      safetyImpact: number;
+      uxImpact: number;
+    };
+    highRiskCount: number;
+  };
+}
+
+/**
+ * Validation failure for a Trinity stage.
+ */
+export interface TrinityStageFailure {
+  stage: 'dreamer' | 'philosopher' | 'scribe';
+  reason: string;
+}
+
+/**
+ * Result of Trinity chain execution.
+ */
+export interface TrinityResult {
+  success: boolean;
+  artifact?: TrinityDraftArtifact;
+  telemetry: TrinityTelemetry;
+  failures: TrinityStageFailure[];
+  fallbackOccurred: boolean;
+  artificerContext?: TrinityArtificerContext;
+}
+
+/**
+ * Scribe output — final structured artifact draft.
+ */
+export interface TrinityDraftArtifact {
+  selectedCandidateIndex: number;
+  badDecision: string;
+  betterDecision: string;
+  rationale: string;
+  sessionId: string;
+  principleId: string;
+  sourceSnapshotRef: string;
+  telemetry: TrinityTelemetry;
+  thinkingModelDelta?: number;
+  planningRatioGain?: number;
+  artificerContext?: TrinityArtificerContext;
+  contrastiveAnalysis?: ContrastiveAnalysis;
+  rejectedAnalysis?: RejectedAnalysis;
+  chosenJustification?: ChosenJustification;
+}

package/src/core/pain.ts

@@ -1,6 +1,6 @@
 import * as fs from 'fs';
 import * as path from 'path';
-import { serializeKvLines, parseKvLines } from '../utils/io.js';
+import { serializeKvLines, parseKvLines, atomicWriteFileSync } from '../utils/io.js';
 import { resolvePdPath } from './paths.js';
 import { ConfigService } from './config-service.js';
 import { SystemLogger } from './system-logger.js';
@@ -98,7 +98,7 @@ export function validatePainFlag(data: Record<string, string>): string[] {
   return missing;
 }
 
-// eslint-disable-next-line @typescript-eslint/max-params
+ 
 export function computePainScore(rc: number, isSpiral: boolean, missingTestCommand: boolean, softScore: number, projectDir?: string): number {
   let score = Math.max(0, softScore || 0);
   
@@ -155,7 +155,7 @@ export function writePainFlag(projectDir: string, painData: PainFlagData): void
   if (!fs.existsSync(dir)) {
     fs.mkdirSync(dir, { recursive: true });
   }
-  fs.writeFileSync(painFlagPath, serializeKvLines(painData), "utf-8");
+  atomicWriteFileSync(painFlagPath, serializeKvLines(painData));
 }
 
 /**
@@ -212,7 +212,7 @@ export function readPainFlagData(projectDir: string): Record<string, string> {
 
     // Detect JSON format (wrong — should be KV)
     if (content.startsWith('{')) {
-      // eslint-disable-next-line @typescript-eslint/init-declarations
+       
       let json: Record<string, unknown>;
       try {
         json = JSON.parse(content);
@@ -225,7 +225,7 @@ export function readPainFlagData(projectDir: string): Record<string, string> {
       const kvData = convertJsonToKv(json);
 
       const repaired = serializeKvLines(kvData);
-      fs.writeFileSync(painFlagPath, repaired, 'utf-8');
+      atomicWriteFileSync(painFlagPath, repaired);
       SystemLogger.log(projectDir, 'PAIN_FLAG_AUTO_REPAIRED', `Auto-repaired pain flag from JSON to KV format (${Object.keys(json).length} fields)`);
       return kvData;
     }
@@ -281,7 +281,7 @@ export function readPainFlagContract(projectDir: string): PainFlagContractResult
  * Errors are silently ignored to avoid disrupting the pain pipeline.
  */
  
-    // eslint-disable-next-line @typescript-eslint/max-params -- complexity 12, refactor candidate
+     
 export function trackPrincipleValue(
   workspaceDir: string,
   painData: { reason?: string; source?: string; score?: string },

package/src/core/path-resolver.ts

@@ -3,6 +3,7 @@ import * as os from 'os';
 import * as fs from 'fs';
 import type { OpenClawPluginApi } from '../openclaw-sdk.js';
 import { PathResolutionError } from '../config/index.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 
 export interface PathResolverOptions {
     workspaceDir?: string;
@@ -391,7 +392,7 @@ export function createDefaultConfig(targetPath?: string): string {
         fs.mkdirSync(dir, { recursive: true });
     }
     
-    fs.writeFileSync(target, JSON.stringify(defaultConfig, null, 2), 'utf8');
+    atomicWriteFileSync(target, JSON.stringify(defaultConfig, null, 2));
     
     console.log(`✅ Created default config at: ${target}`);
     console.log(`   You can edit this file to customize paths.`);