Repository navigation
Commit 92ae27e
committed
fix(provider): fail closed on unverified profile saves and compensate failed deletions
- Re-read the stored record after saveConfig and fail the upsert when the
read-back fails, compensating the landed save with the pre-save snapshot
instead of letting an unvalidated caller payload drive activation writes.
- Snapshot the manager record and every persistence surface before
deleteProviderProfile commits its manager delete, and restore them
(record, profile-list merge, selection, shared settings, affected view
pins) when a later write in the deletion group fails.
- Keep the mutation queue owned by a mode switch past its timeout via
runToCompletion so the next queued mutation cannot overlap in-flight
writes.
- Track intentionally cleared/re-keyed view ids as tombstones so activation
rollback never resurrects a sibling entry the sibling cleared mid-window.1 parent b5f7dac commit 92ae27e
2 files changed
Lines changed: 525 additions & 110 deletions
0 commit comments