mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-08 12:32:43 +00:00
A restore is refused before it deletes anything when its transaction limit would run past three quarters of the job's expiry. At two hours that refused a same-size replacement of about four million readings. The expiry is now six hours, which admits ten million over ten million; a dead worker still frees the account within minutes through the heartbeat, so the longer expiry does not hold an account longer. The refusal now names both counts, the readings in the backup and the ones the account holds now (removed readings included until the nightly clean-up), since clearing the latter costs time too.