Address code review feedback: improve error handling and security

Co-authored-by: dermatz <6103201+dermatz@users.noreply.github.com>

Author: Copilot

src/Console/Command/Hyva/TokensCommand.php

@@ -86,10 +86,11 @@ protected function executeCommand(InputInterface $input, OutputInterface $output
 
             try {
                 $themeCode = $themeCodePrompt->prompt();
-                \Laravel\Prompts\Prompt::terminal()->restoreTty();
             } catch (\Exception $e) {
                 $this->io->error('Interactive mode failed: ' . $e->getMessage());
                 return Command::FAILURE;
+            } finally {
+                \Laravel\Prompts\Prompt::terminal()->restoreTty();
             }
         }
 

src/Service/HyvaTokens/ConfigReader.php

@@ -25,6 +25,7 @@ public function __construct(
      *
      * @param string $themePath
      * @return array
+     * @throws \Exception
      */
     public function getConfig(string $themePath): array
     {
@@ -40,7 +41,12 @@ public function getConfig(string $themePath): array
 
         if ($this->fileDriver->isExists($configPath)) {
             $configContent = $this->fileDriver->fileGetContents($configPath);
-            $jsonConfig = json_decode($configContent, true);
+            
+            try {
+                $jsonConfig = json_decode($configContent, true, 512, JSON_THROW_ON_ERROR);
+            } catch (\JsonException $e) {
+                throw new \Exception("Invalid JSON in configuration file: " . $e->getMessage());
+            }
 
             if (isset($jsonConfig['tokens'])) {
                 $tokensConfig = $jsonConfig['tokens'];

src/Service/HyvaTokens/CssGenerator.php

@@ -50,7 +50,7 @@ public function write(string $content, string $outputPath): bool
         // Ensure the directory exists
         $directory = dirname($outputPath);
         if (!$this->fileDriver->isDirectory($directory)) {
-            $this->fileDriver->createDirectory($directory, 0755);
+            $this->fileDriver->createDirectory($directory, 0750);
         }
 
         try {

src/Service/HyvaTokens/TokenParser.php

@@ -33,15 +33,16 @@ public function parse(?string $filePath, ?array $inlineValues, string $format):
         }
 
         // Otherwise, read from file
-        if ($filePath === null || !$this->fileDriver->isExists($filePath)) {
+        if ($filePath === null || !$this->fileDriver->isFile($filePath)) {
             throw new \Exception("Token source file not found: " . ($filePath ?? 'null'));
         }
 
         $content = $this->fileDriver->fileGetContents($filePath);
-        $tokens = json_decode($content, true);
-
-        if (json_last_error() !== JSON_ERROR_NONE) {
-            throw new \Exception("Invalid JSON in token file: " . json_last_error_msg());
+        
+        try {
+            $tokens = json_decode($content, true, 512, JSON_THROW_ON_ERROR);
+        } catch (\JsonException $e) {
+            throw new \Exception("Invalid JSON in token file: " . $e->getMessage());
         }
 
         return $this->normalizeTokens($tokens, $format);