Function assertSecureDirIfPresent

scripts/start-obsidian-e2e-instance.mjs:201–212

(dir, options = {})

// refuse a hijacked/symlinked root, but must not create one — a missing root
// just means there is nothing to clean up. Returns false when the path is absent.
export async function assertSecureDirIfPresent(dir, options = {}) {
	const currentUid = resolveCurrentUid(options);
	let stat;
	try {
		stat = await fs.lstat(dir);
	} catch (error) {
		if (error?.code === "ENOENT") return false;
		throw error;
	}
	assertOwnedDir(dir, stat, currentUid);
	return true;
}

export async function prepareObsidianProfile(options) {
	// Fail closed if our profile tree is not a private directory we own