Function loadConfigSafely

apps/desktop/src/main/vault.ts:490–524

Internal: reads the persisted config and reports whether the bytes on * disk were actually readable. Distinguishes three states: * - `{ readable: true, config }` — a valid config was read (primary or backup) * - `{ readable: true, config: defaults }` — neither file exists (first run)

()

 *  `readable: false` is the dangerous state: returning defaults here lets a
 *  subsequent `saveConfig` clobber the (recoverable) on-disk vault path. */
async function loadConfigSafely(): Promise<
  { readable: true; config: PersistedConfig } | { readable: false }
> {
  const target = configPath()
  const backup = configBackupPath()
  try {
    const primary = await readConfigFile(target)
    if (primary) return { readable: true, config: primary }
  } catch (err) {
    // Primary file exists but is unreadable/corrupt. Try the backup before
    // giving up — losing settings is bad, losing the vault is worse.
    console.error('Failed to read primary config; trying backup', err)
    try {
      const fromBackup = await readConfigFile(backup)
      if (fromBackup) {
        console.warn('Restored config from backup after primary read failure')
        return { readable: true, config: fromBackup }
      }
    } catch (backupErr) {
      console.error('Backup config also unreadable', backupErr)
    }
    return { readable: false }
  }
  // Primary missing or empty. Try backup as a last resort (e.g. crash mid-rename).
  try {
    const fromBackup = await readConfigFile(backup)
    if (fromBackup) {
      console.warn('Primary config missing; restored from backup')
      return { readable: true, config: fromBackup }
    }
  } catch (backupErr) {
    console.error('Backup config unreadable', backupErr)
  }
  return { readable: true, config: { ...DEFAULT_CONFIG } }
}

/** Reads the persisted config, returning defaults if nothing readable is on
 *  disk. Read callers (createWindow, listLocalVaults, etc.) tolerate a stale