tom/HealthLog
1
0 Fork 0
mirror of https://github.com/MBombeck/HealthLog.git synced 2026-11-09 13:01:00 +00:00
Code Issues Packages Projects Releases Wiki Activity
5,165 Commits 11 Branches 539 Tags
5c9befc0ae2aab3e63839d6ab39fb9bf33633aa2
Commit Graph
3640 Commits
Author SHA1 Message Date
Marc-André Bombeck 5c9befc0ae feat(02-12.1): stamp a record-context epoch on every session 
- add sessions.record_epoch, owned by a BEFORE UPDATE trigger so the
  ON DELETE SET NULL path and raw SQL writes cannot skip it
- normalise pre-existing rows so epoch zero means never switched
- project the epoch off the row getSession already loads
 2026-08-06 17:52:10 +02:00
Marc-André Bombeck a08e82d0be Merge commit '38214e472' into work/v137-record-session-fence 2026-08-06 17:10:56 +02:00
Marc-André Bombeck 38214e4726 fix(02-12): hold peer tabs during record switches 
- Clear scoped reads before the server session changes
- Reconcile every tab with a fresh access response
 2026-08-06 15:06:12 +02:00
Marc-André Bombeck a636a3b4c5 fix(02-12): gate shared record navigation 
- Wait for the shared-record banner before generated reads
- Keep the profile doorway in the navigation translation namespace
 2026-08-06 14:35:02 +02:00
Marc-André Bombeck c42df8cbc3 fix(02-12): gate record preload scope 
- Wait for a validated account scope before warming record reads
- Abort scoped preloads and discard handoffs across record transitions
- Cover malformed scope reloads and fresh own-record recovery
 2026-08-06 14:32:32 +02:00
Marc-André Bombeck 2ae3a66816 fix(02-11): bound APNs provider delivery 
- Time out stalled provider sends without unhandled late rejections\n- Record a transient timeout outcome for cascade fallback\n- Cover timeout fallback with unit and integration tests
 2026-08-06 14:10:28 +02:00
Marc-André Bombeck c56d1ca50b fix(02-11): protect guardian egress data lifecycle 
- Exclude and erase egress claims with recipient-side lookup support\n- Serialize data wipes with managed-profile Guardian authorization\n- Cover last-Guardian and queued-claim wipe races
 2026-08-06 14:05:59 +02:00
Marc-André Bombeck 21e111c06c fix(02-12): refuse malformed record access 
- Preserve absent-server compatibility while rejecting published invalid blocks\n- Partition refused record reads and withhold protected presentation
 2026-08-06 14:03:13 +02:00
Marc-André Bombeck 4b79f83cf7 fix(02-11): release guardian lock before provider egress 
- Commit a final authorization claim under the lifecycle lock\n- Keep provider calls and retry outcomes outside database transactions\n- Retain authorization claims with notification delivery diagnostics
 2026-08-06 13:46:42 +02:00
Marc-André Bombeck b844d04676 fix(02-12): reject divergent shared-record state 
- Verify the active record matches its canonical switcher entry\n- Skip the owner OCR probe in delegated Labs records
 2026-08-06 13:39:37 +02:00
Marc-André Bombeck 1818bd874b fix(02-11): authorize guardian egress under lock 
- Hold the managed-profile lock through every provider send\n- Add the notification event retention index and race coverage
 2026-08-06 09:42:47 +02:00
Marc-André Bombeck 358bb39465 fix(02-12): keep scoped record polls dormant 
- suppress whole-record achievements reads for narrowed grants\n- stabilize record journey response assertions
 2026-08-06 08:34:02 +02:00
Marc-André Bombeck e568caa2f1 test(02-12): make record switcher journeys deterministic 
- Address granted records by their published username\n- Start the profile error mock before record navigation
 2026-08-06 08:25:42 +02:00
Marc-André Bombeck c21957db9f fix(02-12): keep record switcher entries reachable 
- Constrain the shared-record submenu to available viewport height\n- Scroll long grant lists without hiding delegated records
 2026-08-06 08:19:43 +02:00
Marc-André Bombeck 60b4845fea feat(02-11): secure guardian notification delivery 
- Remove record-mutating affordances from Guardian channel payloads\n- Reject managed Telegram callbacks and verify channel attribution
 2026-08-06 05:44:41 +02:00
Marc-André Bombeck accb98e223 test(02-11): cover guardian notification channel safety 
- Cover non-interactive Guardian payloads across delivery channels\n- Reject Telegram callbacks tied to managed records
 2026-08-06 05:37:05 +02:00
Marc-André Bombeck 123bc15f16 fix(02-12): restore shared banner contrast 
- Use the foreground token for warning context copy\n- Serialize shared-session browser journeys
 2026-08-06 05:34:16 +02:00
Marc-André Bombeck 59de92b62e fix: isolate guardian notification preferences 2026-08-06 05:33:02 +02:00
Marc-André Bombeck be4ee9ac6d test: cover guardian notification preferences 2026-08-06 05:30:49 +02:00
Marc-André Bombeck a78189b7f6 feat: add guardian notification fanout 2026-08-06 05:23:38 +02:00
Marc-André Bombeck 1c0a5d7777 test: cover guardian notification eligibility 2026-08-06 05:17:56 +02:00
Marc-André Bombeck b231a7892c test(02-12): retire sharing inventory anchors 
- remove obsolete inventory-only journey declarations\n- select persistent shared-record journeys by Playwright project config
 2026-08-06 05:16:32 +02:00
Marc-André Bombeck 5e8b90bcc1 Merge notification delivery identity 2026-08-06 05:12:42 +02:00
Marc-André Bombeck 7104578d27 fix(02-12): honor shared scope in module pages 
- keep scoped record pages out of actor module redirects\n- suppress unrelated illness reads from document-only records
 2026-08-06 05:12:23 +02:00
Marc-André Bombeck f6b9c8e882 fix(02-12): fail closed in record presentation 
- retain elevated chrome only for internally consistent payloads\n- fall back to the caller record on malformed access entries
 2026-08-06 05:07:27 +02:00
Marc-André Bombeck a33cde3034 test(02-12): cover defensive record presentation 
- reject inconsistent access levels before chrome can elevate them\n- fall back to the caller record for malformed payloads
 2026-08-06 05:06:36 +02:00
Marc-André Bombeck b53147559a feat(02-12): scope cycle startup reads 
- resolve calendar reads against the active record\n- resolve cycle insights against the active record
 2026-08-06 05:05:59 +02:00
Marc-André Bombeck e037c1b8c5 test(02-12): admit scoped cycle startup reads 
- freeze calendar and insights as cycle read handlers\n- retain the exact record resolver scope matrix
 2026-08-06 05:05:13 +02:00
Marc-André Bombeck acd96a80e9 fix(02-12): gate protected routes on record scope 
- resolve account capabilities before protected page queries mount\n- leave public routes outside the record loading gate
 2026-08-06 05:04:26 +02:00
Marc-André Bombeck b358cfa3b8 test(02-12): cover record capability hydration 
- hold protected content until account capabilities resolve\n- keep public routes outside the protected loading gate
 2026-08-06 05:03:22 +02:00
Marc-André Bombeck 6c4dd2d96b feat(02-12): route scoped records to granted domains 
- keep shared navigation independent of actor module preferences\n- open scoped records at their first allowed destination\n- announce record access and kind in doorway names
 2026-08-06 05:02:37 +02:00
Marc-André Bombeck 34073cf8dc test(02-12): cover scoped navigation presentation 
- prove profile uses a read-only shared route\n- cover scoped navigation independent of actor module flags\n- require action, access, and kind in record button names
 2026-08-06 05:00:33 +02:00
Marc-André Bombeck affd356677 test: retain sustained safety event claims 
- exercise the shared notification claim boundary\n- preserve rolling sustained-run dedup coverage
 2026-08-06 04:59:50 +02:00
Marc-André Bombeck 9eab70f032 feat(02-12): add scoped profile summary 
- expose bounded read-only profile facts for shared records\n- keep profile navigation separate from Settings mutations
 2026-08-06 04:59:25 +02:00
Marc-André Bombeck 9ba37342d7 fix: claim notification events atomically 
- serialize rolling event claims before delivery\n- keep provider egress outside the transaction
 2026-08-06 04:57:50 +02:00
Marc-André Bombeck ba7bf49fae test: cover atomic notification event claims 
- race record event claims through PostgreSQL\n- require safety producers to honor the claim
 2026-08-06 04:53:50 +02:00
Marc-André Bombeck e2d308ec31 test: cover read-only profile summary 
- Render bounded profile details\n- Exclude profile mutation controls
 2026-08-06 04:53:28 +02:00
Marc-André Bombeck 60f91d27d7 fix: validate account access payloads 
- Share the closed access schema with OpenAPI\n- Fail closed on malformed or stale record metadata
 2026-08-06 04:52:46 +02:00
Marc-André Bombeck 69f97b268c fix: erase notification anchors with record data 
- remove record event anchors during data deletion\n- retain sustained safety dedup coverage
 2026-08-06 04:48:47 +02:00
Marc-André Bombeck 9c4c7b2b7d fix: retain notification anchor boundaries 
- classify local notification anchors outside backups\n- keep reminder dedup fixtures on record events
 2026-08-06 04:46:45 +02:00
Marc-André Bombeck c6b5d5df63 test: cover account access payload parsing 
- Preserve canonical shared and manage payloads\n- Reject malformed and stale access metadata
 2026-08-06 04:46:15 +02:00
Marc-André Bombeck 10a58a7e6a test: cover recipient-scoped Telegram persistence 
- retain independent recipient reminder slots\n- verify chat updates and recipient cascade cleanup
 2026-08-06 04:44:08 +02:00
Marc-André Bombeck 027f2b4355 fix: suppress premature managed safety delivery 
- keep direct safety notifications to ordinary self-delivery\n- move safety dedup anchors out of delivery diagnostics
 2026-08-06 04:41:40 +02:00
Marc-André Bombeck ce94f4773f fix: reject partial notification attribution 
- retain only complete delivery principal pairs\n- preserve legacy self-delivery records
 2026-08-06 04:39:36 +02:00
Marc-André Bombeck 8b275c87db test: cover partial notification attribution 
- reject one-sided delivery identities\n- avoid ambiguous push-attempt ledger writes
 2026-08-06 04:38:48 +02:00
Marc-André Bombeck fa46f27b01 feat: scope Telegram reminder tracking to recipients 
- keep delegated recipient slots independent\n- bind callback cleanup to the recipient account
 2026-08-06 04:38:09 +02:00
Marc-André Bombeck 5807879439 test: cover recipient-scoped telegram reminders 
- Keep identical slots separate for each recipient\n- Update one slot when a recipient changes chat
 2026-08-06 04:33:35 +02:00
Marc-André Bombeck 9380ea0f18 feat: separate notification event anchors 
- Store record-scoped scheduler events outside delivery attempts\n- Keep delivery diagnostics free of bookkeeping rows
 2026-08-06 04:32:52 +02:00
Marc-André Bombeck 2999b75ea6 test: cover notification event anchors 
- Require record-scoped reminder deduplication\n- Keep anchors independent of delivery recipients
 2026-08-06 04:29:54 +02:00
Marc-André Bombeck f0bcb5456c test: name managed settings module key 
- Avoid a reserved module variable in the settings inventory test
 2026-08-06 04:29:38 +02:00