HealthLog

__tests__

test(api): list the stored-tables route among the per-table module-gated reads

2026-09-27 11:02:14 +02:00

account

fix(sharing): invitations need a fresh proof and end with sign out everywhere

2026-09-26 22:34:21 +02:00

admin

fix(backup): keep a wipe's purge request until the next off-host run

2026-09-26 22:08:51 +02:00

ai/test

feat(ai): narrow the auto-read consent and refuse the connection test with AI off

2026-09-24 08:45:03 +02:00

allergies

fix(api): give the shared write ceiling a code a client can branch on

2026-09-10 08:39:09 +02:00

analytics

fix(dashboard): paint the blood-glucose tile for untagged readings

2026-09-09 23:03:21 +02:00

anamnesis

feat(api): add emergency profile read and write route

2026-08-10 05:32:59 +02:00

auth

fix(auth): wrong passwords from elsewhere can no longer lock the owner out

2026-09-26 22:42:40 +02:00

biomarkers

fix(api): give the shared write ceiling a code a client can branch on

2026-09-10 08:39:09 +02:00

body-sites

feat(body-sites): record a body site on conditions and add a body-site view

2026-09-25 21:55:14 +02:00

c/[token]/unlock

fix(api): put Retry-After and the rate-limit triple on every 429

2026-09-10 03:55:46 +02:00

coach

fix(tz): one default zone, and the user's own calendar where Berlin was hard-coded

2026-09-26 16:23:14 +02:00

consent/ai

feat(consent): add the extraction consent kind and purge on withdrawal

2026-09-24 09:05:09 +02:00

custom-metrics

fix(privacy): encrypt Coach conversation titles and custom-metric notes at rest

2026-09-26 19:46:01 +02:00

cycle

fix(tz): one default zone, and the user's own calendar where Berlin was hard-coded

2026-09-26 16:23:14 +02:00

daily/digest

feat(ai): serve Insights and Coach data whatever AI says

2026-09-24 09:19:36 +02:00

dashboard

fix(dashboard): count the logging streak on local day keys

2026-09-26 15:37:25 +02:00

devices

chore(release): prepare v1.31.4

2026-07-21 01:34:29 +02:00

documents

fix(documents): key imports by source instance, keep a token on its origin, and harden the import path

2026-09-26 14:20:17 +02:00

encounters

feat(visits): record procedures and surgeries with a body site

2026-09-25 08:11:37 +02:00

environment

fix(privacy): store environment coordinates at 1 decimal instead of 2

2026-09-27 10:37:37 +02:00

export

fix(export): every whole-record export asks for a fresh proof

2026-09-26 22:21:43 +02:00

family-history

feat: open the anamnesis record surface to managers

2026-08-07 00:01:27 +02:00

feature-flags

feat(ai): publish capabilities on the account payload

2026-09-24 07:49:14 +02:00

fhir

fix(export): every whole-record export asks for a fresh proof

2026-09-26 22:21:43 +02:00

fitbit

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

gamification/achievements

Give a grant a section set and a third level

2026-08-04 17:11:40 +02:00

google-health

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

health

fix(runtime): harden process startup and health

2026-07-21 00:05:03 +02:00

illness

fix(tz): one default zone, and the user's own calendar where Berlin was hard-coded

2026-09-26 16:23:14 +02:00

import

fix(import): re-fold every day a CSV import touched, even when it fails

2026-09-26 22:06:39 +02:00

ingest/medication

Refuse what these four routes used to absorb in silence

2026-08-22 13:23:48 +02:00

insights

Merge branch 'coach/wp5-clarify' into release/v1.39.4

2026-09-27 11:47:52 +02:00

integrations

docs: comments name what the code does, not how it was built

2026-09-11 11:03:04 +02:00

internal

fix(config): treat an empty environment variable as unset

2026-09-26 15:20:42 +02:00

labs

fix(security): grant private AI endpoints by exact origin, dialled pinned

2026-09-26 19:46:11 +02:00

managed-profiles

fix(api): put a ceiling on editing a managed record's identity

2026-09-10 03:24:50 +02:00

mcp

fix(mcp): connecting an assistant asks for a recent sign-in or re-proof

2026-09-26 22:38:40 +02:00

measurement-categories

Exclude the worktrees the tooling was already meant to exclude

2026-08-02 16:36:25 +02:00

measurement-reminders

fix(reminders): read a first-due date sent as a date as that day in the user's zone

2026-09-26 22:19:49 +02:00

measurements

fix(tz): one default zone, and the user's own calendar where Berlin was hard-coded

2026-09-26 16:23:14 +02:00

medications

Merge branch 'fix/auth-takeover-hardening' into release/v1.39.3

2026-09-26 19:14:05 +02:00

mental-health/assessments

docs(sharing): name the screener's score row where the section is consented

2026-09-10 11:15:50 +02:00

meta/capabilities

feat(api): publish retirement in the contract, the capability read, and the coverage guard

2026-08-23 14:06:52 +02:00

monitoring

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

mood

fix(tz): one default zone, and the user's own calendar where Berlin was hard-coded

2026-09-26 16:23:14 +02:00

mood-entries

fix(tz): one default zone, and the user's own calendar where Berlin was hard-coded

2026-09-26 16:23:14 +02:00

nightscout

fix(notifications): name the never-grantable refusal and redact the grant log

2026-09-10 18:45:57 +02:00

notifications

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

nutrients

fix(ingest): treat upsert_failed as a retry in the nutrient and cycle batches

2026-09-25 07:39:07 +02:00

onboarding

Never derive answers given for somebody else onto the guardian

2026-09-10 18:58:21 +02:00

oura

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

personal-records

Refuse what these four routes used to absorb in silence

2026-08-22 13:23:48 +02:00

polar

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

practitioners

fix(privacy): encrypt workout GPS tracks and practitioner contact details at rest

2026-09-27 09:59:34 +02:00

profile/summary

feat(02-12): add scoped profile summary

2026-08-06 04:59:25 +02:00

record-settings

refactor(modules): one record-keyed write for a record's module state

2026-09-10 11:54:19 +02:00

send

test: route the global fetch stub onto the undici pinned engine

2026-06-28 15:18:20 +02:00

settings

Merge branch 'fix/backup-rotation-and-deletion' into release/v1.39.3

2026-09-26 21:48:20 +02:00

share-links

fix(auth): ask for a fresh proof before the record or a credential to it leaves

2026-09-26 19:54:38 +02:00

sleep

Give a grant a section set and a third level

2026-08-04 17:11:40 +02:00

strava

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

sync

fix(tz): one default zone, and the user's own calendar where Berlin was hard-coded

2026-09-26 16:23:14 +02:00

telegram/webhook

fix: carry the cross-branch rules through offhost keys, the Telegram test mock and the OIDC reason list

2026-09-26 22:07:11 +02:00

tokens

fix(auth): ask for a fresh proof before the record or a credential to it leaves

2026-09-26 19:54:38 +02:00

user

Merge branch 'fix/encrypt-free-text-and-local-ai' into release/v1.39.3

2026-09-26 21:50:05 +02:00

vaccinations

feat(vaccinations): show the planned booster's renewal state on the log

2026-09-24 09:44:51 +02:00

version

feat(config): let the operator turn off the breach and update checks

2026-09-26 15:33:34 +02:00

whoop

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

withings

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

workouts

fix(privacy): encrypt workout GPS tracks and practitioner contact details at rest

2026-09-27 09:59:34 +02:00