put_cover/delete_cover mutated storage before the DB pointer, so a transient DB failure could leave the row pointing at a deleted blob. Reorder to put->set-DB->delete-old and clear-DB->delete-blob, so a failure only orphans a blob, never dangles the pointer. Happy path covered by the 16 existing cover tests. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
864 B
864 B