Function _fsWorkspaceId

src/adapters/scripts/_runtimePaths.js:304–341

(projectDir)

}

function _fsWorkspaceId(projectDir) {
  // Whole body is wrapped: the documented contract is "returns null on ANY
  // read/write error" so the session-start/-end hooks degrade gracefully
  // rather than crash. throwIfNoEntry:false only suppresses ENOENT; EACCES/EIO
  // and friends still throw, so a bare lstat/mkdir here must not escape
  // (Bugbot PR #557 round-2 — an unguarded lstat could crash the hook).
  try {
    const dir = path.join(_fsWorkspaceRoot(projectDir), '.evolver');
    const file = path.join(dir, 'workspace-id');
    // Read first, with symlink guards.
    const existing = _readWsIdGuarded(dir, file);
    if (existing) return existing;
    // If the file exists but the guards rejected it (symlink / bad format),
    // refuse rather than create over it.
    if (fs.lstatSync(file, { throwIfNoEntry: false })) return null;
    // Missing — create atomically. Refuse a symlinked .evolver dir (O_NOFOLLOW
    // only guards the final component, not intermediate dirs).
    const dirStat = fs.lstatSync(dir, { throwIfNoEntry: false });
    if (dirStat && dirStat.isSymbolicLink()) return null;
    fs.mkdirSync(dir, { recursive: true });
    const payload = require('crypto').randomBytes(16).toString('hex');
    const flags = fs.constants.O_WRONLY | fs.constants.O_CREAT | fs.constants.O_EXCL |
      (fs.constants.O_NOFOLLOW || 0);
    let fd;
    try {
      fd = fs.openSync(file, flags, 0o600);
    } catch (e) {
      // Lost a race — re-read WITH the same symlink guards (paths.js does the
      // same). A bare readFileSync here would follow a symlink swapped in
      // after our dir lstat (Bugbot PR #557).
      if (e && e.code === 'EEXIST') return _readWsIdGuarded(dir, file);
      return null; // ELOOP/EMLINK from O_NOFOLLOW hitting a symlink — refuse.
    }
    try { fs.writeSync(fd, payload + '\n', 0, 'utf8'); } finally { fs.closeSync(fd); }
    try { fs.chmodSync(file, 0o600); } catch { /* best-effort */ }
    return payload;
  } catch { return null; }
}

// Resolve the current workspace id — the forge-resistant tag the session-end
// writer stamps on every memory-graph entry (`workspace_id`). This is the