principles-disciple 1.37.0 → 1.38.0

package/src/core/event-log.ts

@@ -19,6 +19,7 @@ import type {
   EmpathyRollbackEventData,
 } from '../types/event-types.js';
 import { createEmptyDailyStats } from '../types/event-types.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 import type { PluginLogger } from '../openclaw-sdk.js';
 
 /**
@@ -389,7 +390,7 @@ export class EventLog {
     });
     
     try {
-      fs.writeFileSync(this.statsFile, JSON.stringify(data, null, 2), 'utf-8');
+      atomicWriteFileSync(this.statsFile, JSON.stringify(data, null, 2));
     } catch (e) {
       if (this.logger) this.logger.error(`[PD] Failed to flush daily-stats.json: ${String(e)}`);
     }

package/src/core/evolution-reducer.ts

@@ -2,6 +2,7 @@ import * as crypto from 'crypto';
 import * as fs from 'fs';
 import * as path from 'path';
 import { withLock } from '../utils/file-lock.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 import { PathResolver } from './path-resolver.js';
 import { SystemLogger } from './system-logger.js';
 import { shouldIgnorePainProtocolText } from './dictionary.js';
@@ -441,7 +442,7 @@ export class EvolutionReducerImpl implements EvolutionReducer {
           if (!fs.existsSync(parentDir)) {
             fs.mkdirSync(parentDir, { recursive: true });
           }
-          fs.writeFileSync(this.principlesPath, content, 'utf8');
+          atomicWriteFileSync(this.principlesPath, content);
           SystemLogger.log(this.workspaceDir, 'PRINCIPLES_CREATED', `Created PRINCIPLES.md`);
         }
 
@@ -460,7 +461,7 @@ export class EvolutionReducerImpl implements EvolutionReducer {
           content = content + separator + formatted;
         }
 
-        fs.writeFileSync(this.principlesPath, content, 'utf8');
+        atomicWriteFileSync(this.principlesPath, content);
         SystemLogger.log(this.workspaceDir, 'PRINCIPLE_SYNCED', `Principle ${principle.id} synced to PRINCIPLES.md`);
       }, { lockStaleMs: 10000 });
       return true;
@@ -752,7 +753,7 @@ export class EvolutionReducerImpl implements EvolutionReducer {
   private persistBlacklist(entry: { painId?: string; pattern?: string; reason: string; rolledBackAt: string }): void {
     const list = this.loadBlacklist();
     list.push(entry);
-    fs.writeFileSync(this.blacklistPath, JSON.stringify(list, null, 2), 'utf8');
+    atomicWriteFileSync(this.blacklistPath, JSON.stringify(list, null, 2));
   }
 
   private loadBlacklist(): { painId?: string; pattern?: string; reason: string; rolledBackAt: string }[] {

package/src/core/focus-history.ts

@@ -10,6 +10,7 @@
 
 import * as fs from 'fs';
 import * as path from 'path';
+import { atomicWriteFileSync } from '../utils/io.js';
 
 // ============================================================================
 // 工作记忆数据结构
@@ -124,7 +125,7 @@ export function backupToHistory(focusPath: string, content: string): string | nu
     }
 
     try {
-      fs.writeFileSync(backupPath, content, 'utf-8');
+      atomicWriteFileSync(backupPath, content);
       return backupPath;
     } catch (error) {
       logError(`Failed to write backup file: ${backupPath}`, error);
@@ -236,7 +237,7 @@ export function compressFocus(focusPath: string, newContent: string): {
     .replace(/\*\*更新\*\*:\s*\d{4}-\d{2}-\d{2}/, `**更新**: ${today}`);
 
   // 写入新内容
-  fs.writeFileSync(focusPath, updatedContent, 'utf-8');
+  atomicWriteFileSync(focusPath, updatedContent);
 
   // 清理过期历史
   const historyDir = getHistoryDir(focusPath);
@@ -430,7 +431,7 @@ export function extractWorkingMemory(
           
           // 尝试从文本中提取描述
            
-          // eslint-disable-next-line @typescript-eslint/no-use-before-define
+           
           const description = extractDescription(text, filePath);
           
           snapshot.artifacts.push({
@@ -446,23 +447,23 @@ export function extractWorkingMemory(
 
     // 从文本中提取文件操作（备用方式）
      
-    // eslint-disable-next-line @typescript-eslint/no-use-before-define
+     
     extractFileArtifacts(text, snapshot.artifacts, workspaceDir);
 
     // 提取问题
      
-    // eslint-disable-next-line @typescript-eslint/no-use-before-define
+     
     extractProblems(text, snapshot.activeProblems);
 
     // 提取下一步
      
-    // eslint-disable-next-line @typescript-eslint/no-use-before-define
+     
     extractNextActions(text, snapshot.nextActions);
   }
 
   // 去重和限制数量
    
-  // eslint-disable-next-line @typescript-eslint/no-use-before-define
+   
   snapshot.artifacts = deduplicateArtifacts(snapshot.artifacts).slice(-MAX_ARTIFACTS);
   snapshot.activeProblems = snapshot.activeProblems.slice(-MAX_PROBLEMS);
   snapshot.nextActions = snapshot.nextActions.slice(-MAX_NEXT_ACTIONS);
@@ -483,7 +484,7 @@ function extractFileArtifacts(
   const filePathRegex = /(?:file_path|absolute_path)["']?\s*[:=]\s*["']([^"']+\.(ts|js|json|md|yaml|yml|py|sh|mjs|cjs))["']/gi;
 
    
-  // eslint-disable-next-line @typescript-eslint/init-declarations
+   
   let match;
   while ((match = filePathRegex.exec(text)) !== null) {
     const [, filePath] = match;
@@ -514,7 +515,7 @@ function extractFileArtifacts(
 
     // 尝试提取描述（从附近的文本）
      
-    // eslint-disable-next-line @typescript-eslint/no-use-before-define
+     
     const description = extractDescription(text, filePath);
 
     artifacts.push({
@@ -548,7 +549,7 @@ function extractFileArtifacts(
     }
 
      
-    // eslint-disable-next-line @typescript-eslint/no-use-before-define
+     
     const description = extractDescription(text, filePath);
 
     artifacts.push({
@@ -597,7 +598,7 @@ function extractProblems(
   // 问题模式（匹配问题描述）
   const problemPattern = /(?:问题|problem|error|错误|失败|failed)[:：]\s*([^\n]{5,100})/gi;
    
-  // eslint-disable-next-line @typescript-eslint/init-declarations
+   
   let match;
   while ((match = problemPattern.exec(text)) !== null) {
     const content = match[1].trim();
@@ -641,7 +642,7 @@ function extractNextActions(text: string, actions: string[]): void {
 
   for (const pattern of patterns) {
      
-    // eslint-disable-next-line @typescript-eslint/init-declarations
+     
     let match;
     while ((match = pattern.exec(text)) !== null) {
       const action = match[1].trim();
@@ -701,7 +702,7 @@ export function parseWorkingMemorySection(content: string): WorkingMemorySnapsho
   // | 文件路径 | 操作 | 描述 |
   const tableRegex = /\|\s*`?([^`|\n]+)`?\s*\|\s*(created|modified|deleted)\s*\|\s*([^|\n]*)\s*\|/gi;
    
-  // eslint-disable-next-line @typescript-eslint/init-declarations
+   
   let match;
   while ((match = tableRegex.exec(wmContent)) !== null) {
     snapshot.artifacts.push({
@@ -741,7 +742,7 @@ export function mergeWorkingMemory(content: string, snapshot: WorkingMemorySnaps
 
   // 生成 Working Memory 章节
    
-  // eslint-disable-next-line @typescript-eslint/no-use-before-define
+   
   const wmSection = generateWorkingMemorySection(snapshot);
   
   if (wmIndex === -1) {
@@ -958,7 +959,7 @@ function recordCompressTime(stateDir: string): void {
     if (!fs.existsSync(stateDir)) {
       fs.mkdirSync(stateDir, { recursive: true });
     }
-    fs.writeFileSync(path.join(stateDir, LAST_COMPRESS_FILE), Date.now().toString(), 'utf-8');
+    atomicWriteFileSync(path.join(stateDir, LAST_COMPRESS_FILE), Date.now().toString());
   } catch (error) {
     logError('Failed to record compress time', error);
   }
@@ -1171,6 +1172,7 @@ export function autoCompressFocus(
   milestonesArchived: boolean;
   backupPath: string | null;
   reason: string;
+  newContent?: string;
 } {
   // 检查文件是否存在
   if (!fs.existsSync(focusPath)) {
@@ -1250,7 +1252,7 @@ export function autoCompressFocus(
   cleanupHistory(focusPath);
 
   // 8. 写入新内容
-  fs.writeFileSync(focusPath, newContent, 'utf-8');
+  atomicWriteFileSync(focusPath, newContent);
 
   // 9. 记录压缩时间
   if (stateDir) {
@@ -1265,6 +1267,7 @@ export function autoCompressFocus(
     newLines,
     milestonesArchived,
     backupPath,
+    newContent,
     reason: `Auto-compressed: ${oldLines} → ${newLines} lines`
   };
 }
@@ -1393,7 +1396,7 @@ export function recoverFromTemplate(
     }
 
     // 写入恢复的内容
-    fs.writeFileSync(focusPath, template, 'utf-8');
+    atomicWriteFileSync(focusPath, template);
 
     return {
       success: true,

package/src/core/hygiene/tracker.ts

@@ -2,6 +2,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import type { HygieneStats, PersistenceAction } from '../../types/hygiene-types.js';
 import { createEmptyHygieneStats } from '../../types/hygiene-types.js';
+import { atomicWriteFileSync } from '../../utils/io.js';
 import type { PluginLogger } from '../../openclaw-sdk.js';
 
 /**
@@ -79,7 +80,7 @@ export class HygieneTracker {
     
     try {
       // Use a temporary file for atomic write if possible, or simple write
-      fs.writeFileSync(this.statsFile, JSON.stringify(allStats, null, 2), 'utf-8');
+      atomicWriteFileSync(this.statsFile, JSON.stringify(allStats, null, 2));
     } catch (e) {
       this.logger?.error(`[PD] Failed to write hygiene-stats.json: ${String(e)}`);
     }

package/src/core/init.ts

@@ -5,6 +5,7 @@ import type { OpenClawPluginApi, PluginLogger } from '../openclaw-sdk.js';
 import { PD_DIRS } from './paths.js';
 import { defaultContextConfig } from '../types.js';
 import { loadStore, setPrincipleState, type PrincipleTrainingState } from './principle-training-state.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 
 /**
  * Default PROFILE.json content
@@ -102,7 +103,7 @@ export function ensureWorkspaceTemplates(api: OpenClawPluginApi, workspaceDir: s
             if (!fs.existsSync(principlesDir)) {
                 fs.mkdirSync(principlesDir, { recursive: true });
             }
-            fs.writeFileSync(profilePath, JSON.stringify(DEFAULT_PROFILE, null, 2), 'utf-8');
+            atomicWriteFileSync(profilePath, JSON.stringify(DEFAULT_PROFILE, null, 2));
             api.logger.info(`[PD] Initialized PROFILE.json with default contextInjection config`);
         }
     } catch (err) {

package/src/core/model-deployment-registry.ts

@@ -33,6 +33,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import * as crypto from 'crypto';
 import { withLock } from '../utils/file-lock.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 import type { Checkpoint } from './model-training-registry.js';
 import {
   getCheckpoint,
@@ -241,9 +242,7 @@ function readRegistry(stateDir: string): ModelDeploymentRegistry {
 function writeRegistry(stateDir: string, registry: ModelDeploymentRegistry): void {
   ensureRegistryDir(stateDir);
   const registryPath = getRegistryPath(stateDir);
-  const tmpPath = `${registryPath}.tmp`;
-  fs.writeFileSync(tmpPath, JSON.stringify(registry, null, 2), 'utf-8');
-  fs.renameSync(tmpPath, registryPath);
+  atomicWriteFileSync(registryPath, JSON.stringify(registry, null, 2));
 }
 
 /**
@@ -350,7 +349,7 @@ export function assertPromotionGatePassed(stateDir: string, checkpointId: string
  * @throws Error if checkpoint's targetModelFamily violates profile constraints
  */
  
-// eslint-disable-next-line @typescript-eslint/max-params
+ 
 export function bindCheckpointToWorkerProfile(
   stateDir: string,
   workerProfile: WorkerProfile,

package/src/core/model-training-registry.ts

@@ -34,6 +34,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import * as crypto from 'crypto';
 import { withLock } from '../utils/file-lock.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 
 // ---------------------------------------------------------------------------
 // Constants
@@ -239,9 +240,7 @@ function readRegistry(stateDir: string): ModelTrainingRegistry {
 function writeRegistry(stateDir: string, registry: ModelTrainingRegistry): void {
   ensureRegistryDir(stateDir);
   const registryPath = getRegistryPath(stateDir);
-  const tmpPath = `${registryPath}.tmp`;
-  fs.writeFileSync(tmpPath, JSON.stringify(registry, null, 2), 'utf-8');
-  fs.renameSync(tmpPath, registryPath);
+  atomicWriteFileSync(registryPath, JSON.stringify(registry, null, 2));
 }
 
 /**
@@ -322,7 +321,7 @@ export function registerTrainingRun(
  * @throws Error if run not found or transition is invalid
  */
  
-// eslint-disable-next-line @typescript-eslint/max-params
+ 
 export function updateTrainingRunStatus(
   stateDir: string,
   trainRunId: string,

package/src/core/nocturnal-artifact-lineage.ts

@@ -2,6 +2,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import { resolveNocturnalDir } from './nocturnal-paths.js';
 import { withLock } from '../utils/file-lock.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 
 export type ArtifactKind = 'behavioral-sample' | 'rule-implementation-candidate';
 
@@ -56,9 +57,7 @@ function writeArtifactLineageRegistry(
 ): void {
   const registryPath = getLineageRegistryPath(workspaceDir);
   fs.mkdirSync(path.dirname(registryPath), { recursive: true });
-  const tmpPath = `${registryPath}.tmp`;
-  fs.writeFileSync(tmpPath, JSON.stringify(records, null, 2), 'utf-8');
-  fs.renameSync(tmpPath, registryPath);
+  atomicWriteFileSync(registryPath, JSON.stringify(records, null, 2));
 }
 
 export function appendArtifactLineageRecord(

package/src/core/nocturnal-dataset.ts

@@ -31,6 +31,7 @@ import * as crypto from 'crypto';
 import { NocturnalPathResolver, resolveNocturnalDir } from './nocturnal-paths.js';
 import type { NocturnalArtifact } from './nocturnal-arbiter.js';
 import { withLock } from '../utils/file-lock.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 
 // ---------------------------------------------------------------------------
 // Types
@@ -246,9 +247,7 @@ function readRegistry(workspaceDir: string): NocturnalDatasetRecord[] {
 function writeRegistry(workspaceDir: string, records: NocturnalDatasetRecord[]): void {
   ensureRegistryDir(workspaceDir);
   const registryPath = getRegistryPath(workspaceDir);
-  const tmpPath = `${registryPath}.tmp`;
-  fs.writeFileSync(tmpPath, JSON.stringify(records, null, 2), 'utf-8');
-  fs.renameSync(tmpPath, registryPath);
+  atomicWriteFileSync(registryPath, JSON.stringify(records, null, 2));
 }
 
 // ---------------------------------------------------------------------------
@@ -284,7 +283,7 @@ function withRegistryLock<T>(workspaceDir: string, fn: (_records: NocturnalDatas
  * @returns RegisterSampleResult
  */
  
-// eslint-disable-next-line @typescript-eslint/max-params
+ 
 export function registerSample(
   workspaceDir: string,
   artifact: NocturnalArtifact,
@@ -427,7 +426,7 @@ const VALID_TRANSITIONS: Record<NocturnalReviewStatus, NocturnalReviewStatus[]>
  * @throws Error if transition is invalid
  */
  
-// eslint-disable-next-line @typescript-eslint/max-params
+ 
 export function updateReviewStatus(
   workspaceDir: string,
   sampleFingerprint: string,

package/src/core/nocturnal-export.ts

@@ -47,6 +47,7 @@
 import * as fs from 'fs';
 import * as path from 'path';
 import * as crypto from 'crypto';
+import { atomicWriteFileSync } from '../utils/io.js';
 import {
   listDatasetRecords,
   readDatasetArtifact,
@@ -158,7 +159,7 @@ function computeDatasetFingerprint(sampleFingerprints: string[]): string {
  * Caller guarantees record.targetModelFamily is non-null.
  */
  
-// eslint-disable-next-line @typescript-eslint/max-params
+ 
 function serializeORPOSample(
   record: NocturnalDatasetRecord,
   artifact: ReturnType<typeof readDatasetArtifact>,
@@ -167,7 +168,7 @@ function serializeORPOSample(
   datasetFingerprint: string
 ): ORPOSample {
   const now = new Date().toISOString();
-  // eslint-disable-next-line @typescript-eslint/no-use-before-define
+   
   const rejected = buildEvidenceBoundedRejected(artifact, evidenceSummary);
 
   return {
@@ -180,7 +181,7 @@ function serializeORPOSample(
     prompt: rejected,
     chosen: artifact.betterDecision,
     rejected,
-    // eslint-disable-next-line @typescript-eslint/no-use-before-define
+     
     rationale: buildEvidenceBoundedRationale(evidenceSummary),
     datasetMetadata: {
       sampleFingerprint: record.sampleFingerprint,
@@ -295,7 +296,7 @@ export function exportORPOSamples(
   });
 
    
-  // eslint-disable-next-line @typescript-eslint/init-declarations
+   
   let eligibleRecords: typeof allApprovedRecords;
 
   if (targetModelFamily !== undefined && targetModelFamily !== null) {
@@ -345,7 +346,7 @@ export function exportORPOSamples(
 
     // Read artifact (throws on error — distinguishes read failure from missing artifact)
      
-    // eslint-disable-next-line @typescript-eslint/init-declarations
+     
     let artifact;
     try {
       artifact = readDatasetArtifact(workspaceDir, record.sampleFingerprint);
@@ -385,7 +386,7 @@ export function exportORPOSamples(
   const exportsDir = NocturnalPathResolver.exportsDir(workspaceDir);
   const jsonlPath = path.join(exportsDir, `${exportId}.jsonl`);
   const lines = orpoSamples.map((s) => JSON.stringify(s)).join('\n') + '\n';
-  fs.writeFileSync(jsonlPath, lines, 'utf-8');
+  atomicWriteFileSync(jsonlPath, lines);
 
   // Step 8: Write manifest
   const manifest: ORPOExportManifest = {
@@ -404,7 +405,7 @@ export function exportORPOSamples(
     })),
   };
 
-  fs.writeFileSync(manifest.manifestPath, JSON.stringify(manifest, null, 2), 'utf-8');
+  atomicWriteFileSync(manifest.manifestPath, JSON.stringify(manifest, null, 2));
 
   return {
     success: true,

package/src/core/pain.ts

@@ -1,6 +1,6 @@
 import * as fs from 'fs';
 import * as path from 'path';
-import { serializeKvLines, parseKvLines } from '../utils/io.js';
+import { serializeKvLines, parseKvLines, atomicWriteFileSync } from '../utils/io.js';
 import { resolvePdPath } from './paths.js';
 import { ConfigService } from './config-service.js';
 import { SystemLogger } from './system-logger.js';
@@ -98,7 +98,7 @@ export function validatePainFlag(data: Record<string, string>): string[] {
   return missing;
 }
 
-// eslint-disable-next-line @typescript-eslint/max-params
+ 
 export function computePainScore(rc: number, isSpiral: boolean, missingTestCommand: boolean, softScore: number, projectDir?: string): number {
   let score = Math.max(0, softScore || 0);
   
@@ -155,7 +155,7 @@ export function writePainFlag(projectDir: string, painData: PainFlagData): void
   if (!fs.existsSync(dir)) {
     fs.mkdirSync(dir, { recursive: true });
   }
-  fs.writeFileSync(painFlagPath, serializeKvLines(painData), "utf-8");
+  atomicWriteFileSync(painFlagPath, serializeKvLines(painData));
 }
 
 /**
@@ -212,7 +212,7 @@ export function readPainFlagData(projectDir: string): Record<string, string> {
 
     // Detect JSON format (wrong — should be KV)
     if (content.startsWith('{')) {
-      // eslint-disable-next-line @typescript-eslint/init-declarations
+       
       let json: Record<string, unknown>;
       try {
         json = JSON.parse(content);
@@ -225,7 +225,7 @@ export function readPainFlagData(projectDir: string): Record<string, string> {
       const kvData = convertJsonToKv(json);
 
       const repaired = serializeKvLines(kvData);
-      fs.writeFileSync(painFlagPath, repaired, 'utf-8');
+      atomicWriteFileSync(painFlagPath, repaired);
       SystemLogger.log(projectDir, 'PAIN_FLAG_AUTO_REPAIRED', `Auto-repaired pain flag from JSON to KV format (${Object.keys(json).length} fields)`);
       return kvData;
     }
@@ -281,7 +281,7 @@ export function readPainFlagContract(projectDir: string): PainFlagContractResult
  * Errors are silently ignored to avoid disrupting the pain pipeline.
  */
  
-    // eslint-disable-next-line @typescript-eslint/max-params -- complexity 12, refactor candidate
+     
 export function trackPrincipleValue(
   workspaceDir: string,
   painData: { reason?: string; source?: string; score?: string },

package/src/core/path-resolver.ts

@@ -3,6 +3,7 @@ import * as os from 'os';
 import * as fs from 'fs';
 import type { OpenClawPluginApi } from '../openclaw-sdk.js';
 import { PathResolutionError } from '../config/index.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 
 export interface PathResolverOptions {
     workspaceDir?: string;
@@ -391,7 +392,7 @@ export function createDefaultConfig(targetPath?: string): string {
         fs.mkdirSync(dir, { recursive: true });
     }
     
-    fs.writeFileSync(target, JSON.stringify(defaultConfig, null, 2), 'utf8');
+    atomicWriteFileSync(target, JSON.stringify(defaultConfig, null, 2));
     
     console.log(`✅ Created default config at: ${target}`);
     console.log(`   You can edit this file to customize paths.`);

package/src/core/pd-task-reconciler.ts

@@ -5,6 +5,7 @@ import type { PDTaskSpec } from './pd-task-types.js';
 import { BUILTIN_PD_TASKS } from './pd-task-types.js';
 import { readTasks, writeTasks } from './pd-task-store.js';
 import { withLockAsync } from '../utils/file-lock.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 
 const CRON_STORE_PATH = path.join(
   os.homedir(),
@@ -97,9 +98,7 @@ async function readCronStore(logger?: { info?: (_: string) => void; warn?: (_: s
 
 async function writeCronStore(store: CronStoreFile): Promise<void> {
   await withLockAsync(CRON_STORE_PATH, async () => {
-    const tmpPath = CRON_STORE_PATH + '.tmp';
-    fs.writeFileSync(tmpPath, JSON.stringify(store, null, 2), 'utf-8');
-    fs.renameSync(tmpPath, CRON_STORE_PATH);
+    atomicWriteFileSync(CRON_STORE_PATH, JSON.stringify(store, null, 2));
   });
 }
 
@@ -160,7 +159,7 @@ function buildCronJob(
     payload: {
       kind: 'agentTurn',
        
-      // eslint-disable-next-line @typescript-eslint/no-use-before-define
+       
       message: buildTaskPrompt(task, logger),
       lightContext: task.execution.lightContext ?? true,
       timeoutSeconds: task.execution.timeoutSeconds ?? 120,
@@ -295,7 +294,7 @@ export async function reconcilePDTasks(
 
   const cronStore = await readCronStore(logger);
    
-  // eslint-disable-next-line @typescript-eslint/no-use-before-define
+   
   const healthUpdated = healthCheck(declared, cronStore, logger);
   const actions = diff(healthUpdated, cronStore.jobs);
 

package/src/core/pd-task-store.ts

@@ -2,6 +2,7 @@ import * as fs from 'fs';
 import * as path from 'path';
 import type { PDTaskSpec } from './pd-task-types.js';
 import { withLockAsync } from '../utils/file-lock.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 
 const PD_TASKS_FILENAME = 'pd_tasks.json';
 
@@ -39,9 +40,7 @@ export async function writeTasks(workspaceDir: string, tasks: PDTaskSpec[]): Pro
   ensureStateDir(workspaceDir);
 
   await withLockAsync(filePath, async () => {
-    const tmpPath = filePath + '.tmp';
-    fs.writeFileSync(tmpPath, JSON.stringify(tasks, null, 2), 'utf-8');
-    fs.renameSync(tmpPath, filePath);
+    atomicWriteFileSync(filePath, JSON.stringify(tasks, null, 2));
   });
 }
 
@@ -56,7 +55,7 @@ export function initTaskMeta(task: PDTaskSpec): PDTaskSpec {
 }
 
  
-// eslint-disable-next-line @typescript-eslint/max-params
+ 
 export function updateSyncMeta(
   task: PDTaskSpec,
   status: 'ok' | 'error',

package/src/core/principle-tree-ledger.ts

@@ -1,6 +1,7 @@
 import * as fs from 'fs';
 import * as path from 'path';
 import { withLock, withLockAsync } from '../utils/file-lock.js';
+import { atomicWriteFileSync } from '../utils/io.js';
 import type {
   Implementation,
   ImplementationLifecycleState,
@@ -78,7 +79,7 @@ function isRecord(value: unknown): value is Record<string, unknown> {
 }
 
  
-// eslint-disable-next-line @typescript-eslint/max-params
+ 
 function clampFloat(value: unknown, min: number, max: number, fallback: number): number {
   if (typeof value !== 'number' || !Number.isFinite(value)) {
     return fallback;
@@ -87,7 +88,7 @@ function clampFloat(value: unknown, min: number, max: number, fallback: number):
 }
 
  
-// eslint-disable-next-line @typescript-eslint/max-params
+ 
 function clampInt(value: unknown, min: number, max: number, fallback: number): number {
   if (typeof value !== 'number' || !Number.isFinite(value)) {
     return fallback;
@@ -314,13 +315,13 @@ function readLedgerFromFile(filePath: string): HybridLedgerStore {
 
 function writeLedgerUnlocked(filePath: string, store: HybridLedgerStore): void {
   ensureParentDir(filePath);
-  fs.writeFileSync(filePath, serializeLedger(store), 'utf-8');
+  atomicWriteFileSync(filePath, serializeLedger(store));
 }
 
  
 function mutateLedger<T>(stateDir: string, mutate: (store: HybridLedgerStore) => T): T {
    
-  // eslint-disable-next-line @typescript-eslint/no-use-before-define
+   
   const filePath = getLedgerFilePath(stateDir);
   return withLock(filePath, () => {
     const store = readLedgerFromFile(filePath);
@@ -333,7 +334,7 @@ function mutateLedger<T>(stateDir: string, mutate: (store: HybridLedgerStore) =>
  
 async function mutateLedgerAsync<T>(stateDir: string, mutate: (store: HybridLedgerStore) => Promise<T>): Promise<T> {
    
-  // eslint-disable-next-line @typescript-eslint/no-use-before-define
+   
   const filePath = getLedgerFilePath(stateDir);
   return withLockAsync(filePath, async () => {
     const store = readLedgerFromFile(filePath);