tom/HealthLog

0 Fork 0

mirror of https://github.com/MBombeck/HealthLog.git synced 2026-11-08 04:32:42 +00:00

Files

T

Marc-André Bombeck c44eed365d fix(security): revoke other sessions when the second factor is removed

Removing the second factor is a security-state change, so it should not leave
stale credentials behind. The disable endpoint now drops every other web
session, every native refresh token, and every trusted device, keeping only the
caller's current session. The lockout-recovery CLI does the same out of band,
clearing all sessions and trusted devices for the account.

2026-06-27 21:50:16 +02:00

__tests__

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

i18n

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

assert-deploy.ts

chore: scrub instance details and personal data from committed artefacts

2026-06-10 11:00:26 +02:00

backfill-mood-note-column.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

backfill-rollups.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

check-env.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

check-openapi.ts

chore(release): v1.4.49 — audit-backlog closure + server reminder suppression + diagnostic endpoint + analytics cold-path fix

2026-05-23 12:51:41 +02:00

decrypt-export.ts

feat(export): offer a passphrase-encrypted archive

2026-06-27 20:27:07 +02:00

disable-mfa.ts

fix(security): revoke other sessions when the second factor is removed

2026-06-27 21:50:16 +02:00

drain-per-sample-cumulative.ts

chore(release): v1.4.38

2026-05-17 19:07:03 +02:00

env-manifest.json

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

fetch-geolite2.sh

chore(release): v1.4.28.1

2026-05-16 09:28:40 +02:00

generate-openapi.ts

refactor(openapi,queries): feature-located registries behind thin indexes

2026-06-11 00:10:00 +02:00

generate-sw-version.mjs

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

install-hooks.sh

chore(release): v1.4.31

2026-05-16 14:19:57 +02:00

migrate-demo-edge01.README.md

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

migrate-demo-edge01.sh

chore(scripts): add a single-user cross-instance migration tool

2026-06-07 23:12:52 +02:00

print-bundle-report.mjs

v1.4.34 — apple-health import + reliability + web-freeze

2026-05-16 21:25:26 +02:00

promote-digest.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

README.md

feat(ops): add an intake-anomaly repair script for operators

2026-06-10 11:36:51 +02:00

repair-intake-anomalies.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

reset-password.mjs

feat(insights): cycle ring replaces strain tile, tidy overview spacing, nav order, password-reset CLI

2026-06-06 21:31:12 +02:00

restore-backup.ts

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135 )

2026-05-08 14:33:39 +02:00

rotate-encryption-key.ts

chore: remove the bug-report integration

2026-06-27 20:37:35 +02:00

run-coach-eval.ts

test(coach): add two-layer Coach eval harness

2026-06-27 10:14:52 +02:00

seed-demo-apps01.sql

chore(release): v1.15.15 — one warm, motivating assistant voice

2026-06-07 21:49:27 +02:00

seed-demo-extend-1y.sql

chore(cleanup): drop orphaned doctor-report PDF helper after export-page removal

2026-06-06 23:30:39 +02:00

seed-demo-meds-apps01.sql

chore(release): v1.15.15 — one warm, motivating assistant voice

2026-06-07 21:49:27 +02:00

seed-demo-scores-1y.sql

chore(cleanup): drop orphaned doctor-report PDF helper after export-page removal

2026-06-06 23:30:39 +02:00

seed-demo-v15.sql

docs: drop per-release audit notes + legacy spec, scrub phase markers

2026-05-25 23:43:58 +02:00

seed-demo.ts

feat(demo): showcase the seeded tiles on the demo dashboard

2026-06-22 07:01:03 +02:00

test-notifications.ts

refactor(api,tz): one typed client for every call and one home for wall-clock math

2026-06-11 02:19:27 +02:00

README.md

`scripts/`

One-shot operator and build scripts. These are not part of the running application — they are run by hand during a deploy, a backfill, or a release, or wired into CI. Recurring work belongs on pg-boss (src/lib/jobs/), not here.

How to run them

pnpm dlx tsx scripts/<file>.ts

Use pnpm dlx tsx, not bare pnpm tsx. The production standalone image strips tsx, so the bare invocation fails inside the container. scripts/ is excluded from the project typecheck.

What lives here

generate-openapi.ts — emits docs/api/openapi.yaml from the registered Zod schemas (pnpm openapi:generate).
check-openapi.ts — compares a freshly generated spec against the committed YAML; CI fails on drift (pnpm openapi:check).
check-env.ts — pre-deploy env-var sanity check against env-manifest.json (pnpm check-env); wired into CI.
assert-deploy.ts — post-deploy /api/version assertion.
rotate-encryption-key.ts — AES-256-GCM key rotation; see docs/ops/encryption-key-rotation.md.
restore-backup.ts — restore an off-host AES-GCM backup from an S3-compatible bucket.
repair-intake-anomalies.ts — repair historic medication-ledger defects (duplicate dose-slot rows, implausible taken_at); dry-run by default, see docs/ops/intake-repair.md.
backfill-rollups.ts, drain-per-sample-cumulative.ts, backfill-mood-note-column.ts — historical data backfills (note: the boot-time rollup-full-backfill queue handles new accounts automatically; the CLI is the manual fallback).
seed-demo.ts + seed-demo-v15.sql — populate a demo tenant.
test-notifications.ts — exercise the notification dispatcher + reminder check.
fetch-geolite2.sh — download the MaxMind GeoLite2 MMDBs (needs a licence key) before docker build.
install-hooks.sh — install the local git hooks.
generate-sw-version.mjs, print-bundle-report.mjs — service-worker version stamp and bundle-size report.
i18n/ — locale tooling; __tests__/ — tests for the scripts above.

Conventions

See ../CLAUDE.md "Tests and commands" + "Self-hosting gotchas". Operator runbooks that drive these scripts live in ../docs/ops/.