refactor(memory-core): use replaceFileAtomic for dreaming file writes

SunnyShu0925 · SunnyShu0925 · commit 2fc40b37edaa · 2026-06-25T17:55:08.000+08:00
Align with the sibling dreaming-dreams-file.ts which already uses
replaceFileAtomic from openclaw/plugin-sdk/security-runtime.

Replaces three fs.writeFile calls (inline daily, separate report, deep
report) with replaceFileAtomic for consistent file I/O patterns within
the dreaming module.

Test: existing 9 tests pass unchanged, no behavioral change.
diff --git a/extensions/memory-core/src/dreaming-markdown.ts b/extensions/memory-core/src/dreaming-markdown.ts
@@ -11,6 +11,7 @@ import {
   replaceManagedMarkdownBlock,
   withTrailingNewline,
 } from "openclaw/plugin-sdk/memory-host-markdown";
+import { replaceFileAtomic } from "openclaw/plugin-sdk/security-runtime";
 import { updateDeepDreamsFile } from "./dreaming-dreams-file.js";
 import { resolveMemoryCoreNowMs, resolveMemoryCoreTimestamp } from "./time.js";
 
@@ -88,7 +89,14 @@ export async function writeDailyDreamingPhaseBlock(params: {
       endMarker: markers.end,
       body,
     });
-    await fs.writeFile(inlinePath, withTrailingNewline(updated), "utf-8");
+    await replaceFileAtomic({
+      filePath: inlinePath,
+      content: withTrailingNewline(updated),
+      mode: 0o600,
+      preserveExistingMode: true,
+      tempPrefix: "dreaming-inline",
+      throwOnCleanupError: true,
+    });
   }
 
   if (shouldWriteSeparate(params.storage)) {
@@ -105,7 +113,13 @@ export async function writeDailyDreamingPhaseBlock(params: {
       body,
       "",
     ].join("\n");
-    await fs.writeFile(reportPath, report, "utf-8");
+    await replaceFileAtomic({
+      filePath: reportPath,
+      content: report,
+      mode: 0o600,
+      tempPrefix: "dreaming-report",
+      throwOnCleanupError: true,
+    });
   }
 
   await appendMemoryHostEvent(params.workspaceDir, {
@@ -141,7 +155,13 @@ export async function writeDeepDreamingReport(params: {
   if (shouldWriteSeparate(params.storage)) {
     reportPath = resolveSeparateReportPath(params.workspaceDir, "deep", nowMs, params.timezone);
     await fs.mkdir(path.dirname(reportPath), { recursive: true });
-    await fs.writeFile(reportPath, `# Deep Sleep\n\n${body}\n`, "utf-8");
+    await replaceFileAtomic({
+      filePath: reportPath,
+      content: `# Deep Sleep\n\n${body}\n`,
+      mode: 0o600,
+      tempPrefix: "dreaming-deep",
+      throwOnCleanupError: true,
+    });
   }
   await appendMemoryHostEvent(params.workspaceDir, {
     type: "memory.dream.completed",
