tom/HealthLog
1
0 Fork 0
mirror of https://github.com/MBombeck/HealthLog.git synced 2026-11-08 12:32:43 +00:00
Code Issues Packages Projects Releases Wiki Activity
4,644 Commits 11 Branches 539 Tags
f06137c0db7177dee70792bdf766cd06a9e18bf4
Commit Graph
3276 Commits
Author SHA1 Message Date
Marc-André Bombeck f06137c0db feat(01-19): add bounded Apple Health ECG parsing 
- validate ZIP paths, compression metadata, and actual decompressed bytes
- normalize ECG CSV descriptors and bounded microvolt samples
 2026-07-29 14:42:18 +02:00
Marc-André Bombeck 0bf3a3573d fix(01-20): render explicit assessment states 
- prioritize safe fallback text over provider metadata
- keep terminal and pending card geometry stable
 2026-07-29 14:40:55 +02:00
Marc-André Bombeck 33a7dafec4 fix(01-20): terminate assessment polling honestly 
- normalize legacy responses into explicit assessment states
- abort on timeout or unmount and expose poll exhaustion
 2026-07-29 14:39:38 +02:00
Marc-André Bombeck b8260474ed fix(01-17): remove duplicate mobile insights spacer 
- suppress only the inherited mobile pre-pill top padding
- preserve safe-area clearance focus paint and 44px targets
 2026-07-29 14:38:19 +02:00
Marc-André Bombeck efe203212a fix(01-20): classify safe assessment outcomes 
- add a discriminated generated and fallback contract
- screen derived prose and expose retryable cache policy
 2026-07-29 14:36:29 +02:00
Marc-André Bombeck 0ae9165aae refactor(01-18): format occurrence identity changes 
- apply repository formatting to reminder and scheduling updates
- preserve verified occurrence behavior without semantic changes
 2026-07-29 14:36:21 +02:00
Marc-André Bombeck 23c738efac fix(01-17): align and pin desktop sidebars 
- place both sidebars on the heading row with one main scroll owner
- bound short-viewport sidebar content without horizontal layout drift
 2026-07-29 14:36:18 +02:00
Marc-André Bombeck 840e47fda5 fix(01-18): preserve authoritative rolling due in consumers 
- expose the canonical due schedule identity from the shared list read
- prevent passed local windows from rebinding a prior overdue occurrence
 2026-07-29 14:35:23 +02:00
Marc-André Bombeck 2de9bccf9d fix(01-18): retain rolling occurrence through due band 
- preserve prior rolling identity independently of local-day flooring
- scope exact resolution by schedule and era while advancing resolved grids
- include open rolling slots for display without widening compliance bands
 2026-07-29 14:33:17 +02:00
Marc-André Bombeck c0af97ce46 fix(01-18): preserve reminder occurrence across midnight 
- select active canonical recurrence slots instead of rebuilding from tick day
- scope intake suppression and dedup metadata to the occurrence local date
 2026-07-29 14:30:23 +02:00
Marc-André Bombeck 7396119ec8 feat(01-17): group gated admin navigation 
- cluster allowed destinations under semantic settings-style headings
- preserve fail-closed role gating and mobile target order
 2026-07-29 14:29:51 +02:00
Marc-André Bombeck 431120d55e fix(01-16): unify records action grammar 
- use Save for new and existing lifestyle facts
- show first-entry or populated-list add actions without duplication
 2026-07-29 14:29:19 +02:00
Marc-André Bombeck c4ec2d552f fix(01-16): normalize assessment prose presentation 
- use the readable foreground at confirmed medication and Mood mounts
- tighten Health Score and medication assessment spacing
 2026-07-29 14:28:47 +02:00
Marc-André Bombeck d67b899138 fix(01-16): remove redundant score and summary presentation 
- keep useful Today prose without repeating the ring score
- remove stored-summary regeneration and Health Score notice/method/list copy
 2026-07-29 14:27:45 +02:00
Marc-André Bombeck 690c4aeb5a test(01-14): add failing truthful cohort contracts 
- distinguish complete partial failed parked skipped and clean-zero outcomes
- require bounded privacy-safe scalar serialization and retry codes
 2026-07-29 14:26:26 +02:00
Marc-André Bombeck 958b0e10d9 fix(01-11): keep reminder fixture type-safe 
- mutate the inferred schedule fixture without widening nullable fields
- preserve the cross-midnight RED expectation unchanged
 2026-07-29 14:24:00 +02:00
Marc-André Bombeck 25612294d1 test(01-11): pin rolling overdue consumer parity 
- compare persisted weekly occurrence across list, dashboard, GLP-1, and take-all
- protect exact intake retries and unrelated occurrence isolation
 2026-07-29 14:23:52 +02:00
Marc-André Bombeck 65ca1aae42 test(01-10): add red responsive navigation contracts 
- pin grouped and heading-aligned Settings and Admin sidebars
- add mobile Insights geometry and deterministic release evidence captures
 2026-07-29 14:22:54 +02:00
Marc-André Bombeck 6f84629482 test(01-13): add red Google sync terminal contracts 
- cover authenticated status polling and bounded resource outcomes
- prove committed workouts invalidate server and client cache surfaces
 2026-07-29 14:22:49 +02:00
Marc-André Bombeck 6cc3de8248 test(01-12): add failing Apple ECG import contracts 
- pin bounded path-safe archive and parser behavior
- require encrypted idempotent fail-soft persistence and WHOOP regressions
 2026-07-29 14:20:56 +02:00
Marc-André Bombeck d5f473d672 test(01-11): specify rolling weekly overdue identity 
- pin the prior-day Mounjaro occurrence across local midnight and DST
- cover resolution state, band end, schedule siblings, and era isolation
 2026-07-29 14:19:03 +02:00
Marc-André Bombeck 18d0facdfe test(01-10): add red assessment and records contracts 
- pin honest assessment fallback, exhaustion, foreground, and state envelopes
- require consistent save and empty-state add action grammar
 2026-07-29 14:18:35 +02:00
Marc-André Bombeck d8e52b831d test(01-13): add red Google sync progress contracts 
- pin workout-first fairness and bounded resource outcomes
- require owner-scoped race-safe current-run progress in PostgreSQL
 2026-07-29 14:18:20 +02:00
Marc-André Bombeck 81893ac972 test(01-11): reproduce cross-midnight reminder identity bug 
- pin prior-day occurrence lookup across timezone and DST boundaries
- prove real worker dedup and distinct next-dose behavior with PostgreSQL
 2026-07-29 14:15:48 +02:00
Marc-André Bombeck 8e944dbcd3 test(01-10): add red dashboard and score presentation contracts 
- preserve useful Today narrative without duplicate score prose
- remove stored-document regeneration from the detail surface
- retain score identity while rejecting redundant method copy
 2026-07-29 14:12:58 +02:00
Marc-André Bombeck 27a3e08436 fix(01-07): make private Nightscout access operator-owned 
- remove the user-facing private-host bypass
- render a redacted operator-action state for denied legacy connections
 2026-07-29 13:57:48 +02:00
Marc-André Bombeck f95da50ba0 fix(01-07): enforce exact Nightscout origins 
- move private-host authority to the server-owned exact-origin policy
- preserve stable redacted policy failures through connect and sync
 2026-07-29 13:57:07 +02:00
Marc-André Bombeck 7874eea04d feat(01-08): require reauthentication before passkey enrollment 
- offer password, TOTP, passkey, and security-key proof choices
- start registration only after the selected existing factor succeeds
 2026-07-29 13:53:59 +02:00
Marc-André Bombeck 89c83510d4 feat(01-08): bind passkey enrollment to fresh cookie proof 
- require an existing-factor proof before issuing registration options
- atomically claim session-bound challenges before credential persistence
 2026-07-29 13:52:22 +02:00
Marc-André Bombeck db08f6c175 fix(01-05): serialize MCP refresh families 
- lock and rotate refresh families inside one database transaction
- revoke CAS losers and insert successors before commit
- sign refresh artifacts only after committed state
 2026-07-29 13:50:14 +02:00
Marc-André Bombeck a177869609 fix(01-07): classify embedded IPv4 destinations 
- Normalize IPv6 literals before transition-prefix inspection
- Reject mapped, compatible, 6to4, and NAT64 private embeddings
- Share the verdict with pinned public and operator dispatchers
 2026-07-29 13:49:49 +02:00
Marc-André Bombeck 36cb64c840 test(01-02): exercise DNS transition cases past fetch port guard 
- replace blocked port 9 with non-blocked test port 8089
- preserve pre-connect ENOTFOUND assertions for all transition forms
 2026-07-29 13:49:46 +02:00
Marc-André Bombeck 20a6731c8b fix(01-05): enforce MCP health read scope 
- require health:read or wildcard for MCP read capability
- reject insufficient scopes before downstream gates and server construction
 2026-07-29 13:47:46 +02:00
Marc-André Bombeck 338dbe6c1f fix(01-06): purge owned PWA caches on session end 
- delete current and legacy HealthLog static page and data caches
- preserve unrelated CacheStorage namespaces during activation and logout
- keep IndexedDB query-cache removal in the session-end boundary
 2026-07-29 13:46:15 +02:00
Marc-André Bombeck 51f5f43957 test(01-01): preserve explicit transaction contract 
- keep the red transaction-client call aligned with the planned signature
- isolate the concurrent documentation commit from MCP test content
 2026-07-29 13:43:27 +02:00
Marc-André Bombeck cc8567d82f docs(01-02): complete PWA and SSRF red contracts plan 
- document expected cache-isolation and transition-form failures
- record preserved public and redirect behavior
- capture atomic task commits and verification evidence
 2026-07-29 13:42:30 +02:00
Marc-André Bombeck 38501f6574 test(01-01): specify transactional refresh rotation 
- require one transaction for rotation and successor insertion
- pin CAS-loss revocation and insertion rollback semantics
 2026-07-29 13:40:03 +02:00
Marc-André Bombeck 3f4afb26a4 test(01-03): pin passkey enrollment reauthentication UX 
- require password, passkey, TOTP and WebAuthn proof choices
- order fresh-factor completion before challenge creation
- keep successful enrollment in one cookie-bound ceremony
 2026-07-29 13:39:55 +02:00
Marc-André Bombeck e25080b214 test(01-02): add red DNS-pinned SSRF contracts 
- refuse standard embedded-private IPv6 resolver answers pre-connect
- preserve public IPv6 to IPv4 fallback connectivity
- prove followed redirects repeat the pinned DNS verdict
 2026-07-29 13:39:52 +02:00
Marc-André Bombeck 5569b8259b test(01-04): pin Nightscout operator-action UI 
- Remove the user-facing private-host bypass contract
- Require redacted operator approval guidance for legacy failures
- Preserve usable public and approved-private connected states
 2026-07-29 13:39:50 +02:00
Marc-André Bombeck 14f451093e test(01-04): pin Nightscout egress enforcement 
- Deny user-authorized and mismatched private origins before network access
- Preserve exact operator-private and public positive flows
- Require stable redacted policy reasons through sync boundaries
 2026-07-29 13:39:06 +02:00
Marc-André Bombeck 9f6cd86c0d test(01-03): add passkey enrollment security contracts 
- require fresh existing-factor proof on both cookie-only legs
- bind registration challenges to user, purpose, session, expiry and one use
- cover bearer, ambient-cookie, stale, foreign and replay attacks
 2026-07-29 13:38:53 +02:00
Marc-André Bombeck 6c0f47acad test(01-01): pin MCP read scope boundaries 
- cover health read and wildcard positive capability paths
- reject unrelated scopes before server registration and database reads
 2026-07-29 13:38:41 +02:00
Marc-André Bombeck fb533147d3 test(01-02): add red IPv6 transition classifier matrix 
- cover mapped compatible 6to4 and NAT64 private embeddings
- exercise both literal URL and raw DNS address verdicts
- preserve public IPv4 native IPv6 and transition forms
 2026-07-29 13:38:11 +02:00
Marc-André Bombeck 3a813b51bd test(01-02): add red PWA cache isolation contracts 
- exercise signed-in service-worker install at CacheStorage boundary
- require data-free offline navigation and immutable public assets
- require current and legacy session cache cleanup
 2026-07-29 13:37:20 +02:00
Marc-André Bombeck 668f85a58d test(01-04): specify exact Nightscout origin policy 
- Parse canonical server-owned private origins
- Reject malformed and non-exact trust grants
- Preserve public and approved-private positive contracts
 2026-07-29 13:36:46 +02:00
Marc-André Bombeck 1d784c6367 fix(analytics,ci): merge health-score meta annotations, migrate integration tests, remove dead exports, raise bundle budget 2026-07-28 23:02:00 +02:00
Marc-André Bombeck 668e3ca6b6 fix(insights,settings): restore hero-strip column width, gate hero fieldset on hydration 2026-07-28 22:03:39 +02:00
Marc-André Bombeck 2bab06e323 feat(medications): resolve each dose slot's own window duration 2026-07-28 21:26:53 +02:00
Marc-André Bombeck ff8ead2db9 fix(analytics): repair route/i18n/guard fallout from health-score merge 2026-07-28 21:19:18 +02:00