Merge remote-tracking branch 'origin/release/v1.47.2' into takeover/1370

# Conflicts:
#	CHANGELOG.md
#	src/lib/module-list-prefs.ts

src/__tests__/baselines/source-file-lines.json

@@ -11,7 +11,7 @@
     "components/insights/coach-panel/use-coach.ts": 1486,
     "components/insights/derived/vitals-dashboard.tsx": 1033,
     "components/insights/health-score-card.tsx": 1023,
-    "components/insights/insights-tab-strip.tsx": 1086,
+    "components/insights/insights-tab-strip.tsx": 1087,
     "components/measurements/measurement-form.tsx": 815,
     "components/medications/detail/medication-detail-tabs.tsx": 1157,
     "components/medications/medication-table.tsx": 853,
@@ -39,7 +39,7 @@
     "lib/daily/digest.ts": 1317,
     "lib/daily/load-digest.ts": 1000,
     "lib/daily/today-overview.ts": 838,
-    "lib/dashboard-layout.ts": 976,
+    "lib/dashboard-layout.ts": 977,
     "lib/dashboard/snapshot.ts": 1550,
     "lib/day/records.ts": 1174,
     "lib/export/backup-plan.ts": 838,

src/__tests__/baselines/test-as-never.json

@@ -1,7 +1,7 @@
 {
   "$comment": "as never casts in tests, per test file under src/. Maintained by src/__tests__/test-realism-ratchet.test.ts.",
   "count": 523,
-  "total": 5476,
+  "total": 5475,
   "entries": {
     "__tests__/api/auth/login/mfa-branch.test.ts": 10,
     "__tests__/api/auth/mfa/verify.test.ts": 9,
@@ -440,7 +440,7 @@
     "lib/jobs/__tests__/insight-status-generate.test.ts": 2,
     "lib/jobs/__tests__/measurement-maintenance-schedule.test.ts": 2,
     "lib/jobs/__tests__/measurement-reminder-byhour.test.ts": 2,
-    "lib/jobs/__tests__/measurement-reminder.test.ts": 33,
+    "lib/jobs/__tests__/measurement-reminder.test.ts": 32,
     "lib/jobs/__tests__/medication-intake-import.test.ts": 1,
     "lib/jobs/__tests__/medication-reminder-check.test.ts": 27,
     "lib/jobs/__tests__/mood-reminder.test.ts": 15,

src/__tests__/cycle-feed-content-guard.test.ts

@@ -118,13 +118,20 @@ beforeEach(() => {
 });
 
 describe("the calendar feed body", () => {
-  it.each(["DISCREET", "DESCRIPTIVE"] as const)(
-    "carries no day-log content in %s mode",
-    async (titleMode) => {
+  it.each(
+    (["DISCREET", "DESCRIPTIVE"] as const).flatMap((titleMode) =>
+      (["EXACT", "MARGIN", "BAND"] as const).map(
+        (forecastStyle) => [titleMode, forecastStyle] as const,
+      ),
+    ),
+  )(
+    "carries no day-log content in %s mode, %s forecasts",
+    async (titleMode, forecastStyle) => {
       const built = await buildCycleFeed(
         {
           ...FEED,
           titleMode,
+          forecastStyle,
           historyCycles: 12,
           horizonCycles: 6,
           includeFertile: true,
@@ -146,6 +153,7 @@ describe("the calendar feed body", () => {
       {
         ...FEED,
         titleMode: "DESCRIPTIVE",
+        forecastStyle: "MARGIN",
         historyCycles: 6,
         includeFertile: true,
       },

src/__tests__/dense-measurement-read-guard.test.ts

@@ -149,6 +149,8 @@ const ALLOWED_SQL: Record<string, string> = {
     "Selects from `unnest` of the caller's type list; `measurements` is read inside `EXISTS`, one row per type at most.",
   "lib/dashboard/summary-reads.ts::1":
     "Selects from `unnest` of the type list; `measurements` is read only inside COUNT scalar subqueries, before the fold window for a type the DAY rollups cover.",
+  "lib/measurements/read-glucose-ketone-index.ts::1":
+    "Ketone readings in the window: typed off a fingerstick meter, a few a day at most. Each one is paired with a glucose reading, so the rows themselves are needed.",
   "lib/dashboard/summary-reads.ts::2":
     "Selects from `generate_series` of the streak window's local days; `measurements` is read inside `EXISTS`, one row per day at most.",
 };

src/__tests__/doctor-report-control-gating-guard.test.ts

@@ -70,8 +70,8 @@ describe("report scope gating — structural guard", () => {
   it("reads a plausible catalogue", () => {
     // Sanity floor: a silently degraded catalogue would pass everything below
     // vacuously.
-    expect(ALL_LEAF_IDS.length).toBe(111);
-    expect(Object.keys(MEASUREMENT_LEAF_GROUP)).toHaveLength(91);
+    expect(ALL_LEAF_IDS.length).toBe(112);
+    expect(Object.keys(MEASUREMENT_LEAF_GROUP)).toHaveLength(92);
     expect(Object.keys(STRUCTURED_LEAF_GROUP)).toHaveLength(20);
   });
 

src/__tests__/sharing-surface-guard.test.ts

@@ -930,7 +930,7 @@ const DELEGABLE_ROUTES: Record<string, DelegableEntry> = {
   },
   "app/api/labs/overview/route.ts": {
     domain: "labs",
-    why: "The Labs list's per-marker overview of the record: the newest reading of each biomarker, its count and a short trend. The same rows and the same biomarker include as `GET /api/labs`, grouped server-side; read only.",
+    why: "The Labs list's per-marker overview of the record: the newest reading of each biomarker, its count and a short trend. The same rows and the same biomarker include as `GET /api/labs`, grouped server-side; read only. The category order it applies comes from the caller's own list layout, never the owner's, so it reveals nothing about the record.",
   },
   "app/api/biomarkers/route.ts": {
     domain: "labs",

src/__tests__/unit-preference-display-guard.test.ts

@@ -294,7 +294,7 @@ const UNIT_LITERAL_ALLOWLIST: Record<
     reason: "the onboarding unit picker: its options are the two units",
   },
   "components/measurements/measurement-form.tsx": {
-    lines: 11,
+    lines: 12,
     reason:
       "input parsing: canonical units of the entry table, replaced by the transform's unit at render and inverted on save",
   },
@@ -362,9 +362,9 @@ const UNIT_LITERAL_ALLOWLIST: Record<
     reason: "the legacy export endpoint's canonical storage-unit contract",
   },
   "lib/measurements/series/kinds.ts": {
-    lines: 4,
+    lines: 5,
     reason:
-      "canonical wire units; glucose is overridden to the reader's unit per request",
+      "canonical wire units; glucose is overridden to the reader's unit per request, ketones have no unit choice",
   },
   "lib/doctor-report/stat-display.ts": {
     lines: 3,