Method _save

src/session/persistence.js:162–174

(session)

  }

  _save(session) {
    const filePath = path.join(this.sessionsDir, `${session.id}.json`);
    // Redact secrets that may have leaked into messages or tool output before
    // writing to disk. The redaction is one-way: stored sessions never carry
    // raw API keys, bearer tokens, or env-style secret assignments.
    const redacted = redactValue(session);
    // Atomic write: write to a temp file then rename. Prevents reading a
    // half-written session if the process crashes mid-save.
    const tmpPath = filePath + `.tmp.${process.pid}.${Date.now()}`;
    fs.writeFileSync(tmpPath, JSON.stringify(redacted, null, 2), { mode: FILE_MODE });
    fs.renameSync(tmpPath, filePath);
    try { fs.chmodSync(filePath, FILE_MODE); } catch {}
  }

  _generateId() {
    // Time-descending ID so newest sorts first lexicographically.