3 Commits

Include renames

Author	SHA1	Message	Date
Marc-André Bombeck	9eab70f032	feat(02-12): add scoped profile summary ... - expose bounded read-only profile facts for shared records\n- keep profile navigation separate from Settings mutations	2026-08-06 04:59:25 +02:00
Marc-André Bombeck	1a95739561	fix(crypto): log swallowed decrypt on undecryptable read-path fields ... The cycle/illness/records note DTOs, the biomarker context, and the custom mood/cycle labels each degraded an undecryptable value to a blank/generic fallback with no signal — a key-rotation gap read as 'left blank' and the catch was silent. Keep the fail-soft read posture (one bad row never 500s the list) but emit a wide-event on each swallowed decrypt so a systemic key gap surfaces. The visible per-field 'unreadable' marker in the UI is the deferred remainder.	2026-07-09 00:21:16 +02:00
Marc-André Bombeck	5052b2cc08	feat(records): CRUD API + OpenAPI for allergies and family history ... Add the `/api/allergies` and `/api/family-history` endpoints (list / create / read / update / soft-delete), each wrapped in `apiHandler` with Zod `safeParse` + `returnAllZodIssues`. `userId` is always narrowed from the session/Bearer — never a body field — and the Prisma `data` is built field-by-field (no mass assignment). Creates wrap in `withIdempotency`. The free-text reaction/note are encrypted before write and decrypted fail-soft on read via the server-authoritative DTOs. Register the query-key factory entries and the OpenAPI route tables (new `Records` tag); regenerate `docs/api/openapi.yaml`.	2026-06-28 16:03:05 +02:00