Daniel Salazar d57f638eda fix: keep system sites writable and their names out of reach (#4064) ...

Follow-up to #4056. Icons and profiles are now written as the system user,
so on a storage-limited install they counted against its allowance (100 MB
by default) and every write past that returned 413, including a user's
profile save. Both writes now pass the unmetered allowance, as writes the
system makes on users' behalf already may.

ensureSystemSite reclaims a mismatched subdomain row in place instead of
delete+create, so the name is never free for a user to register, the row
keeps its uuid, and `protected` is never cleared; the previous holder's
bindings are dropped. If the row vanished since the read it falls through
to create. puter-app-icons is now protected like puter-profiles, both names
are reserved from user registration, and they live in util/systemSite so
the subdomain driver doesn't import the services. The icon service's
shutdown wait is capped at 5 s so a stalled run can't hold up the metering
flush.

2026-10-04 00:23:01 -07:00

..

ProfileService.test.ts

fix: keep system sites writable and their names out of reach (#4064)

2026-10-04 00:23:01 -07:00

ProfileService.ts

fix: keep system sites writable and their names out of reach (#4064)

2026-10-04 00:23:01 -07:00