I\'ve been playing with FSEvents
in a little application of mine to synchronize the content of my application with what\'s on the hard drive (basically, it\'s a lit
You need to use the flag kFSEventStreamCreateFlagUseExtendedData
(available since OS X 10.13). A stream created with that flag will include the inode of the event file. That way you can detect "rename chains" that happened in a reported event batch.
P.S. macOS may reuse the inode of a deleted file for a newly created one, although if you process the events right away, the risk is negligible.