Joseph Doherty
bdccdbf6dd
Server-033 (Medium): TryRestoreFromDiskAsync now completes the _firstLoad gate once the restored snapshot is published, so a browse call racing the first refresh is served immediately instead of waiting out the 5s bootstrap budget while an unreachable-database query runs. Server-034 (Low): GalaxyHierarchySnapshotStore.TryLoadAsync catches JsonException / IOException / UnauthorizedAccessException and returns null, honoring the Try contract for a corrupt or unreadable snapshot file. Server-035 (Low): SaveAsync bounds the write with a linked CancellationToken (CommandTimeoutSeconds budget) so a stuck disk cannot pin the refresh loop. Server-036 (Low): PersistSnapshotAsync no longer logs a save cancelled by gateway shutdown as a persistence failure. Server-037 (Low): added cache tests for the corrupt-snapshot restore path and for PersistSnapshot=false, plus a store test for corrupt JSON. All 100 Galaxy tests pass; gateway builds clean. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>