Marc-André Bombeck 785a1eacfc Freeze the delegable write set and drive it against Postgres ...

The surface guard grows a write leg. Membership is decided by the argument
a module passes to the record resolver, not by the identifier, because a
delegable read and a delegable write name the same symbol and mean opposite
things. The call matcher resolves aliased and namespace-qualified calls
back to the original name, and proves it can against synthetic modules.

Two assertions carry the decision not to add a provenance column to eleven
tables. Every module in the write list has to call auditLog, which is the
only writer that stamps the acting account, and none of them may reach the
audit table through the client instead. That decision rested on the trail
existing; it now rests on a test.

The prose on the read list said the write arms keep refusing under a
switch. Eleven of them no longer do, so those sentences are rewritten
rather than left to lie.

The integration suite drives the shipped POST exports through the real
handler, resolver, grant table and Prisma. Five legs per verb: the write
lands under the owner and nowhere else, a read grant is refused with
nothing written, a caller who was never granted is refused the same way,
the request after a revocation is refused with no re-login, and a caller
who never switched is indistinguishable from before. The grant is minted
through the invitation flow rather than planted, and the audit assertion
reads both ends of the row.

2026-08-03 12:11:28 +02:00

..

account-grant-lifecycle.test.ts

Let an invitation carry the level it offers

2026-08-03 10:12:08 +02:00

achievements-expansion.test.ts

feat(achievements): worker re-evaluates new + hidden achievements on data change

2026-05-10 10:34:32 +02:00

acting-account-resolver.test.ts

Let an invitation carry the level it offers

2026-08-03 10:12:08 +02:00

admin-backups-audit.test.ts

fix(notifications): auto-disable channels on persistent hard rejects (410, etc.)

2026-05-09 21:00:23 +02:00

admin-backups-canonical-roundtrip.test.ts

fix(backup): a retired catalogue key must not cost the whole file

2026-08-02 09:04:36 +02:00

admin-backups-download.test.ts

fix(admin): /admin/users mobile layout — card-list at < md, no truncation

2026-05-09 20:46:20 +02:00

admin-backups-restore.test.ts

fix(backups): address restore review findings

2026-07-20 13:42:38 +02:00

admin-backups-upload.test.ts

chore: align hardening tests and formatting

2026-07-20 12:24:15 +02:00

admin-data-wipe.test.ts

chore: remove the bug-report integration

2026-06-27 20:37:35 +02:00

admin-drain-cumulative-endpoint.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

admin-host-metrics.test.ts

style(prettier): sweep formatting across the tree

2026-05-10 11:05:40 +02:00

admin-reset-password.test.ts

test(01-03): add atomic reset revocation contracts

2026-07-29 13:42:04 +02:00

analytics-bp-aggregate-paged.test.ts

style: apply prettier 3.9.1 formatting

2026-06-28 19:26:16 +02:00

analytics-health-score.test.ts

Prove the blood-pressure basis survives the assembly, not just both ends

2026-07-31 11:15:27 +02:00

analytics-sleep-stages.test.ts

test(integration): anchor the reconciled sleep night inside the 30-day window

2026-07-04 14:46:19 +02:00

analytics-summaries-slice.test.ts

v1.4.33 — polish and reliability

2026-05-16 19:46:43 +02:00

analytics-weekday-tz.test.ts

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

apns-dispatch.test.ts

chore(release): v1.5.0 — native iOS client public-beta + per-day stats overwrite + compliance fix

2026-05-24 22:22:30 +02:00

apple-health-import-ecg.test.ts

test(01-12): add failing Apple ECG import contracts

2026-07-29 14:20:56 +02:00

apple-health-import-natural-key.test.ts

chore(release): v1.28.49 — Apple Health re-import survives a natural-key collision

2026-07-16 08:48:41 +02:00

apple-health-import-reconcile.test.ts

fix: harden imports and daily medication state (#577)

2026-07-21 13:08:28 +02:00

apple-health-import-worker-failures.test.ts

fix(analytics,ci): merge health-score meta annotations, migrate integration tests, remove dead exports, raise bundle budget

2026-07-28 23:02:00 +02:00

arrival-reaction-claim.test.ts

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

auth-flow.test.ts

chore(db): renumber the session-token migration to 0255

2026-07-19 11:41:12 +02:00

auth-password-change.test.ts

test(auth): bind the rotated cookie through its hash after a password change

2026-07-19 11:40:56 +02:00

backfill-workout-sport.test.ts

test(migrations): seed→apply→assert harness for the workout-sport backfills

2026-07-18 02:09:33 +02:00

backup-custom-cycle-symptom-restore.test.ts

test(backup): cover the assembly a custom cycle symptom has to cross

2026-07-28 00:09:22 +02:00

backup-cycle-symptom-severity-restore.test.ts

fix(backup): carry how hard a symptom hit through export and restore

2026-07-31 07:37:48 +02:00

backup-round-trip.test.ts

Prove a backed-up model travels by making it travel

2026-08-02 19:34:47 +02:00

backup-unknown-catalogue-key-restore.test.ts

fix(backup): a retired catalogue key must not cost the whole file

2026-08-02 09:04:36 +02:00

bearer-scope-enforcement.test.ts

style: satisfy v1.34.1 format gate

2026-07-29 15:59:12 +02:00

biomarker-detail.test.ts

test(labs): integration coverage for biomarker target-range and delete

2026-06-28 14:00:55 +02:00

boot-discovery-scans.test.ts

fix(release): harden v1.31 arrival contracts

2026-07-20 00:40:20 +02:00

bp-in-target.test.ts

test(blood-pressure): pin the in-target headline and BP pillar to the 90-day window

2026-06-14 14:26:58 +02:00

bulk-delete-source-filter.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

cache-invalidation-coverage.test.ts

style: format the cache-invalidation coverage test

2026-06-27 22:40:01 +02:00

cascade-delete.test.ts

chore: remove the bug-report integration

2026-06-27 20:37:35 +02:00

chart-overlay-prefs.test.ts

style(prettier): sweep formatting across the tree

2026-05-10 11:05:40 +02:00

ci-environment.test.ts

chore(release): prepare v1.31.4

2026-07-21 01:34:29 +02:00

coach-availability-probe.test.ts

test(coach): prove the availability probe's SQL against Postgres

2026-07-26 18:34:42 +02:00

coach-budget-reservation.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

coach-chat.test.ts

test(coach): seed the budget-refusal integration test at the user-plan cap

2026-06-26 14:17:36 +02:00

coach-conversation-documents.test.ts

feat(coach): attach multiple documents to a conversation

2026-07-16 23:32:28 +02:00

coach-conversations.test.ts

feat(coach): GET list, GET single, DELETE conversation endpoints

2026-05-10 16:11:12 +02:00

coach-feedback.test.ts

fix(coach): feedback references coach_messages, drops plaintext column

2026-05-11 02:38:17 +02:00

coach-prefs.test.ts

fix(coach-prefs): return the pure default with no token for a never-saved user

2026-07-24 18:28:41 +02:00

consolidate-daily-mean.test.ts

feat(measurements): consolidate gait/mobility HealthKit metrics nightly

2026-06-01 19:54:26 +02:00

consolidate-legacy-steps.test.ts

fix(measurements): legacy step consolidation no longer sweeps provider daily totals

2026-07-15 22:49:07 +02:00

csv-import-contextless-glucose.test.ts

test(import): cover the HealthKit glucose shape against the relaxed constraint

2026-07-25 21:57:06 +02:00

cycle-import-export.test.ts

fix(backup): a retired catalogue key must not cost the whole file

2026-08-02 09:04:36 +02:00

cycle-routes.test.ts

Move the contract tests to the end that now writes

2026-08-02 02:00:08 +02:00

dashboard-widgets-save.test.ts

fix(release): harden v1.31 arrival contracts

2026-07-20 00:40:20 +02:00

delegated-intake-notification.test.ts

Route the delegated-dose alert through one helper that refuses on self

2026-08-03 09:52:02 +02:00

dense-intraday-hourly-rebuild.test.ts

feat(insights): day navigator on the intraday pulse chart; 90-day dense retention with hourly fallback

2026-07-17 14:29:07 +02:00

dense-intraday-retention.test.ts

feat(insights): day navigator on the intraday pulse chart; 90-day dense retention with hourly fallback

2026-07-17 14:29:07 +02:00

device-register.test.ts

chore: align hardening tests and formatting

2026-07-20 12:24:15 +02:00

doctor-report-dense-data.test.ts

test(export): prove the scope holds at the artefact, not just at the switch

2026-07-26 00:45:08 +02:00

doctor-report-sections.test.ts

test(export): prove the scope holds at the artefact, not just at the switch

2026-07-26 00:45:08 +02:00

documents-content-index.test.ts

test(documents): pin contentIndexSource provenance through list/detail/PATCH

2026-07-08 22:05:05 +02:00

documents-vault.test.ts

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

drain-per-sample-cumulative.test.ts

fix: harden imports and daily medication state (#577)

2026-07-21 13:08:28 +02:00

ecg-ingest-roundtrip.test.ts

Stop the plaintext-waveform check passing on a coincidence

2026-08-01 19:35:16 +02:00

ecg-recording-identity-migration.test.ts

Prove the ECG ingest, the dedupe and the migration on dirty data

2026-08-01 19:26:47 +02:00

environment-setup.ts

fix(ci): harden test determinism and dependencies

2026-07-21 00:36:40 +02:00

export-per-type.test.ts

test(export): integration test points at the new plain-segment endpoints

2026-05-10 00:11:36 +02:00

fitbit-activity-sleep-workout-sync.test.ts

test(fitbit): remap integration fixtures onto the classic Web API

2026-06-22 09:00:39 +02:00

fitbit-metrics-sync.test.ts

test(fitbit): remap integration fixtures onto the classic Web API

2026-06-22 09:00:39 +02:00

full-backup-nutrients.test.ts

fix(nutrients): bound the manual water writes and put nutrient totals in the backup

2026-07-19 13:40:03 +02:00

global-setup.ts

fix(ci): harden test determinism and dependencies

2026-07-21 00:36:40 +02:00

google-health-sync-progress.test.ts

test(01-13): add red Google sync progress contracts

2026-07-29 14:18:20 +02:00

google-health-workout-terminal.test.ts

test(01-13): add red Google sync terminal contracts

2026-07-29 14:22:49 +02:00

health-profile-backup-roundtrip.test.ts

fix(insights): scope generation guard to prompt fields, clear cache on restore

2026-07-28 21:11:43 +02:00

health-score-configured-flag.test.ts

Make the round-trip case actually round-trip

2026-08-01 17:56:20 +02:00

health-score-record.test.ts

Prove the false drop cannot come back

2026-07-31 16:48:40 +02:00

idempotency-record-scoped-cell.test.ts

Scope the idempotency replay cell to the record a request claims

2026-08-03 10:18:27 +02:00

idempotency-replay.test.ts

fix(tests): share next/headers cookieJar across integration suite

2026-05-09 18:08:11 +02:00

insights-comprehensive-cache.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

insights-feedback.test.ts

feat(api): /api/insights/feedback persists thumbs with provider attribution

2026-05-10 01:30:06 +02:00

insights-provider-chain-put.test.ts

style(prettier): sweep formatting across the tree

2026-05-10 11:05:40 +02:00

insights-provider-chain.test.ts

fix(ci): clear the v1.25 release-branch gate failures

2026-06-28 19:23:57 +02:00

insights-status-real-text.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

intake-late-take-future-slot.test.ts

fix(medications): keep a late take off a future slot the card supplied

2026-07-07 15:55:50 +02:00

intake-scheduled-for-targeting.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

intake-slot-dedup.test.ts

feat(ux,settings): undo where it was missing and settings that behave one way

2026-06-11 02:19:28 +02:00

integration-failing-legs-backfill.test.ts

test(integrations): prove the leg backfill against rows that carry the old value

2026-07-27 14:35:34 +02:00

integration-status.test.ts

fix(status): expose background failures

2026-07-28 14:00:44 +02:00

integration-sync-escalation.test.ts

feat(integrations): tell the Apple Health card how the last sync arrived

2026-07-27 14:35:33 +02:00

inventory-expiry-container-type-repair.test.ts

test(db): follow the inventory repair to its new number

2026-07-26 18:02:35 +02:00

job-failures.test.ts

fix(medications): identify an imported dose by when it was taken

2026-07-26 14:37:57 +02:00

job-success-outcome.test.ts

fix(jobs): reconcile durable fact inventory

2026-07-29 15:59:27 +02:00

mcp-oauth-refresh-race.test.ts

style: satisfy v1.34.1 format gate

2026-07-29 15:59:12 +02:00

mcp-write-and-range-read.test.ts

feat(mcp): expose medication schedule, integration status, and preventive-care reads

2026-06-28 02:00:37 +02:00

measurement-identity-reconcile.test.ts

refactor(measurements): drop the write-only aggregation columns (migration 0272)

2026-07-25 15:03:44 +02:00

measurement-rollups.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

measurement-soft-delete.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

measurement-source-write-smoke.test.ts

test: cover every measurement source write path

2026-07-28 15:12:23 +02:00

measurements-aggregate-daily.test.ts

chore(release): v1.4.29

2026-05-16 10:59:42 +02:00

measurements-batch-delete.test.ts

chore(release): v1.7.0

2026-05-31 14:36:17 +02:00

measurements-batch.test.ts

refactor(measurements): drop the write-only aggregation columns (migration 0272)

2026-07-25 15:03:44 +02:00

measurements-sleep-list.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

medication-administrations.test.ts

test(export): prove the scope holds at the artefact, not just at the switch

2026-07-26 00:45:08 +02:00

medication-cadence-worker.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

medication-compliance-rollup-slot.test.ts

fix(medications): converge intake writes onto existing slot rows across sources

2026-06-10 11:18:00 +02:00

medication-dose-history-import.test.ts

fix(medications): make import replay results honest

2026-07-29 16:11:45 +02:00

medication-intake-import-job.test.ts

feat(medications): rule on each export status for what it actually is

2026-07-26 16:37:10 +02:00

medication-intake-import-reported-export.test.ts

test(medications): assert bounded replay details

2026-07-29 16:43:22 +02:00

medication-reminder-cross-midnight.test.ts

style: satisfy v1.34.1 format gate

2026-07-29 15:59:12 +02:00

medication-rolling-overdue-consumers.test.ts

style: satisfy v1.34.1 format gate

2026-07-29 15:59:12 +02:00

medication-weekly-compliance.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

medications-intake-bulk.test.ts

fix(medications): scope the intake idempotency key to its owner

2026-07-25 18:41:40 +02:00

mfa-login-flow.test.ts

feat(auth): branch login through a second-factor challenge

2026-06-27 19:56:30 +02:00

mock-next-headers.ts

fix(tests): share next/headers cookieJar across integration suite

2026-05-09 18:08:11 +02:00

mood-entries-bulk.test.ts

test(mood): align integration fixtures with the curated default catalog

2026-06-14 11:31:52 +02:00

mood-entries-external-id.test.ts

fix(mood): honour externalId for idempotent re-import on the native entry routes

2026-06-05 03:45:04 +02:00

mood-entries-note-column.test.ts

feat(security): add second-factor schema and encrypt free-text health notes at rest

2026-06-27 19:33:10 +02:00

mood-insights-crosstab.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

mood-tag-groups.test.ts

feat(insights): persist correlation patterns

2026-07-28 14:01:11 +02:00

note-encryption-backfill.test.ts

feat(security): add second-factor schema and encrypt free-text health notes at rest

2026-06-27 19:33:10 +02:00

nutrients-batch.test.ts

feat(nutrients): tell the account holder when a sync arrived but nothing landed

2026-07-30 23:30:28 +02:00

partial-unique-live-rows.test.ts

feat(integrations): remove the moodLog integration

2026-07-25 11:36:18 +02:00

passkey-register.test.ts

fix(01-08): align passkey request fixture typing

2026-07-29 13:55:57 +02:00

pr-detection-end-to-end.test.ts

test(score): pin the weight yardstick, the mood gate and rollup/live parity

2026-07-27 23:15:38 +02:00

prisma-schema-name-drift.test.ts

fix(environment): name the enum type the database actually has

2026-07-26 14:37:57 +02:00

provider-token-refresh-serialization.test.ts

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

queue-singleton-policy.integration.test.ts

Pin the queue policy decisions with tests

2026-07-19 02:31:45 +02:00

rate-limit.test.ts

release: v1.4.2 — resurrect v1.4.1 work + bug-fix triple (#152)

2026-05-08 17:46:31 +02:00

reset-password-revocation.test.ts

test(01-03): add atomic reset revocation contracts

2026-07-29 13:42:04 +02:00

rollup-concurrent-recompute.test.ts

chore(release): v1.28.33 — re-importing a cumulative Apple Health export works again

2026-07-14 11:56:29 +02:00

rollup-regression-parity.integration.test.ts

fix(rollups): rebase regression x-axis to a fixed origin for exact accumulators

2026-06-26 13:24:30 +02:00

server-cache-routes.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

session-cookie-validation.test.ts

test(oidc): cover the session resolver behind the duplicate-callback path

2026-07-23 15:16:48 +02:00

sessions-and-known-devices.test.ts

fix(auth): make the re-proved factor decide what an elevation reaches

2026-07-19 13:48:46 +02:00

settings-account-delete.test.ts

chore(release): v1.4.45 — analytics 9 s perf fix + audit-marathon closure + v1.4.44 hotfix merged

2026-05-21 23:13:21 +02:00

settings-data-wipe.test.ts

test(sharing): teach the wipe guard that ownership is not always user_id

2026-08-02 10:03:04 +02:00

setup.ts

Merge remote-tracking branch 'origin/main' into work/native-stepup-rebase

2026-07-23 09:04:43 +02:00

share-link-documents.test.ts

test(share-links): drop the unused owner binding in the ownership guard

2026-07-07 22:00:14 +02:00

sharing-account-access.test.ts

Format the account-access round trip

2026-08-02 15:43:49 +02:00

sharing-audit-actor.test.ts

Let an invitation carry the level it offers

2026-08-03 10:12:08 +02:00

sharing-delegable-routes.test.ts

feat(sharing): open the medication reads to a delegate

2026-08-02 17:06:23 +02:00

sharing-delegable-writes.test.ts

Freeze the delegable write set and drive it against Postgres

2026-08-03 12:11:28 +02:00

sharing-lifecycle.test.ts

feat(sharing): invite, accept, switch, revoke, renounce

2026-08-02 13:04:25 +02:00

soft-delete-copy-parity.test.ts

test(settings): prove the wipe against real Postgres, and state what deletion means

2026-07-26 14:04:44 +02:00

source-aware-rollups.integration.test.ts

feat(rollups): collapse overlapping sources across all read paths

2026-06-04 10:05:47 +02:00

source-priority-two-axis.test.ts

fix(analytics): restore device-priority sleep selection

2026-07-29 16:08:41 +02:00

step-consolidation-repair.test.ts

fix(measurements): legacy step consolidation no longer sweeps provider daily totals

2026-07-15 22:49:07 +02:00

step-up-elevation.test.ts

test(step-up): wait for the audit breadcrumb instead of sleeping and hoping

2026-07-31 01:12:22 +02:00

sync-changes.test.ts

Anchor the sync fixtures on a relative clock

2026-08-03 10:34:48 +02:00

sync-state.test.ts

Move the contract tests to the end that now writes

2026-08-02 02:00:08 +02:00

timezone-per-user.test.ts

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

user-avatar.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

whoop-connect-ticket.test.ts

feat(whoop): native-scheme connect redirect and Bearer connect ticket

2026-06-05 08:10:13 +02:00

whoop-owner-identity.test.ts

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

withings-activity-sync.test.ts

v1.4.37 — final web polish before iOS focus

2026-05-17 15:36:38 +02:00

withings-oauth-flow.test.ts

test(withings): expect the no-credentials connect to redirect, not 400

2026-07-18 02:30:33 +02:00

withings-oauth.test.ts

chore(release): v1.5.0 — native iOS client public-beta + per-day stats overwrite + compliance fix

2026-05-24 22:22:30 +02:00

withings-sleep-stage-composite.test.ts

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

withings-sleep-sync.test.ts

v1.4.37 — final web polish before iOS focus

2026-05-17 15:36:38 +02:00

workout-batch-create.test.ts

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

workout-batch-race.test.ts

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

workout-insight-claim.test.ts

fix(release): harden v1.31 arrival contracts

2026-07-20 00:40:20 +02:00