Marc-André Bombeck 01689f77bc feat(security): require fresh verification before destructive account actions ...

Account deletion and the keep-account data reset now demand a recent
second-factor re-verification for accounts that have a second factor
active; single-factor accounts are unaffected and keep the typed-
confirmation-only contract. The gate runs through requireFreshMfaIfEnrolled,
which is cookie-only by construction — a Bearer transport for an MFA-enrolled
account cannot satisfy step-up and surfaces the auth.stepup.required envelope
so the UI can launch a re-verification flow.

2026-06-27 20:34:11 +02:00

..

achievements-no-insults.test.ts

i18n(achievements): replace insulting badge titles

2026-05-10 13:32:19 +02:00

api-handler-safe-request-prop.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

api-response-safe-json.test.ts

feat(api): cap request-body size on batch and export ingest routes

2026-06-03 08:56:19 +02:00

api-response-zod.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

avatar.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

clinical-floors.test.ts

fix(safety): unify clinical floors into one source of truth

2026-06-26 12:58:50 +02:00

crypto.test.ts

fix(crypto): fail closed on weak dev key outside development/test

2026-06-19 20:55:46 +02:00

dashboard-layout.test.ts

feat(dashboard): surface sleep, steps, glucose and vorsorge by default

2026-06-22 07:00:56 +02:00

date-format.test.ts

feat(format): resolve and apply the date-format preference

2026-06-26 12:14:56 +02:00

db-to-json.test.ts

v1.4.34.4 — audit-driven hotfix bundle (security, UX, code-quality, docs)

2026-05-17 00:39:58 +02:00

db.test.ts

fix(db): raise the default statement timeout to 60s

2026-06-20 17:30:59 +02:00

doctor-report-data.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

doctor-report-pdf-core.test.ts

feat(illness): Rest Mode — annotate score/recovery/streaks during an active episode + FHIR/doctor-report

2026-06-16 22:25:50 +02:00

doctor-report-recovery-canonical.test.ts

fix(doctor-report): resolve recovery by night in the user timezone

2026-06-14 17:57:21 +02:00

export.test.ts

feat(glucose): read glucose in one unit across series, CSV, and detail page

2026-06-14 17:16:48 +02:00

format-active-locale.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

format-date-or-relative.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

format-locale.test.ts

feat(settings): a time-format preference and one home for insight pills

2026-06-10 13:34:46 +02:00

geo-asn.test.ts

feat(geo): default IP geolocation to the online ipwho.is resolver

2026-06-20 16:56:20 +02:00

geo-offline-detection.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

geo.test.ts

fix(geo): default to ip-api.com and surface non-ok lookup failures

2026-06-20 19:00:27 +02:00

get-client-ip.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

glucose.test.ts

feat(glucose): read glucose in one unit across series, CSV, and detail page

2026-06-14 17:16:48 +02:00

i18n-locale-integrity.test.ts

feat(ux): close the feedback gaps a new user runs into first

2026-06-10 15:40:37 +02:00

idempotency.test.ts

fix(medications): make the nightly dedup and the pin path respect each other

2026-06-10 16:54:15 +02:00

insights-layout-reorder.test.ts

fix(insights): reconcile customizable-overview review findings

2026-06-07 17:08:25 +02:00

insights-layout.test.ts

Show the steps pill for layouts that predate its tile id

2026-06-27 13:02:48 +02:00

learn-links.test.ts

Add typed Learn-article link registry

2026-06-26 13:22:21 +02:00

measurement-type-enum-coverage.test.ts

feat(oura): capture daily resilience as an ordinal RESILIENCE metric

2026-06-21 10:44:15 +02:00

medical-citations.test.ts

v1.4 medical-safety: protect against silent DBP hypotension, align BP & step citations, ACE body-fat consolidation (#123)

2026-05-08 12:07:46 +02:00

medication-list-layout.test.ts

feat(medications): a sortable table view with an order you choose

2026-06-12 18:10:21 +02:00

medication-schedule.test.ts

chore(release): v1.4.39.4 — dashboard symmetry for daily-schedule intake projection

2026-05-21 11:20:24 +02:00

module-list-prefs.test.ts

feat(labs): default to list view and reuse medication tile primitives

2026-06-20 11:59:13 +02:00

moodlog-secret.test.ts

fix(auth): reject moodLog webhook secrets that fail envelope decryption

2026-05-27 00:08:56 +02:00

motion.test.ts

chore(release): v1.4.44 — REG-11 dashboard summary fix (iOS Home tile sparkline + value)

2026-05-21 22:07:32 +02:00

passkey-errors.test.ts

fix: i18n completeness + UX polish (closes #73, #74) (#75)

2026-04-18 17:15:43 +02:00

process-type.test.ts

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

query-keys.test.ts

feat(coach): goal / if-then plan memory + locale-keyed dashboard snapshot

2026-06-27 01:25:35 +02:00

rate-limit-auth-surface.test.ts

chore(release): v1.4.45 — analytics 9 s perf fix + audit-marathon closure + v1.4.44 hotfix merged

2026-05-21 23:13:21 +02:00

reference-ranges.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

require-auth-bearer.test.ts

refactor(api,tz): one typed client for every call and one home for wall-clock math

2026-06-11 02:19:27 +02:00

require-fresh-mfa-if-enrolled.test.ts

feat(security): require fresh verification before destructive account actions

2026-06-27 20:34:11 +02:00

require-fresh-mfa.test.ts

feat(auth): add a fresh-MFA step-up gate

2026-06-27 19:56:02 +02:00

retry-import.test.ts

fix(charts): degrade chart failures to one card and heal stale shells per version

2026-06-11 21:17:27 +02:00

safe-fetch-dispatcher.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

safe-fetch.test.ts

feat(security): safeFetch wrapper with manual redirect and timeout defaults

2026-05-28 22:32:11 +02:00

server-translator.test.ts

chore(style): repo-wide prettier sweep before v1.4.6 tag

2026-05-09 02:27:17 +02:00

ssrf-pin-inventory.test.ts

feat(ai): make the local-host SSRF escape hatch a host allowlist

2026-06-19 21:20:01 +02:00

time-window-format.test.ts

fix(medications): collapse an equal-bound dose time to a single time

2026-06-07 14:41:15 +02:00