M12-04I Status

status: done task: release archive staging after quota/OOM and recover with a small archive updated: 2026-08-18 America/New_York enablingTask: false parityStateChange: false

Scope

The archive recovery wrapper maps browser/OPFS quota failures to STORAGE_QUOTA and declared allocation failures to WASM_OUT_OF_MEMORY only after the M12-04H base transaction has removed staging and re-read the committed project identity. Cleanup or identity drift remains STORAGE_TRANSACTION; unrelated range and IO failures are not misclassified as OOM.

Real temporary-directory tests partially write the failing payload before injecting each fault. Both paths leave zero staging entries and preserve the previous revision, SHA-256, and committed bytes. The same storage instance then accepts and atomically commits a smaller archive without a Worker or process restart.

Evidence

node --test web/tests/unit/library-archive-recovery.test.mjs passed 4/4.
Quota and OOM each remove a partially written 4 KiB staging payload and preserve revision 9.
Each failed storage instance immediately commits small-project at revision 10 with zero staging entries.
npm --prefix web run test:library-archive-cancellation passed 6/6 and npm --prefix web run typecheck passed.

Artifact Hashes

parent manifest: 7fce600a416aec5ade1a91a13d86caf4cb1f65b710054b59d525ff8b1d3c7409
base transaction: c40adc1449172014cc1820db567e155828314abb404b66e4de13c26ddee06e4b
recovery protocol: 0ae9801ea151403b244c5f58f7f99231bba7a25abb1f61e3669879510b92dccf
unit: a931edef8f3ca1243a80ec2b8e9ff5b8da1dfd339f3d8c162ad2ebd08d3db6a1
package commands: cfb232baa494ff59f6c8d65514a08c86332ee9354350b2a0392b6f932a7ee42c
manifest: 574afa68a787b9481d0e098d38b94cb810a9827fe185b0df796d62cc160ba7c5

Next Task

M12-04J: add malicious ZIP/TAR fixtures to the long-term security regression.

Rollback

Remove the recovery wrapper, real-filesystem unit suite, manifest, and this status entry. Restore M12-04H as the queue tail and move the machine queue back to M12-04I. No parity ledger rollback is required.

2.1 KiB Raw Blame History