Marc-André Bombeck 17c4e76165 Let a delegate enter a reading into a shared record ...

Both POST arms of /api/measurements resolve the record rather than the
caller. Every `userId: user.id` in the handler already meant "the record",
so the bodies are untouched: the safety-floor check, the reminder
satisfaction, the rollup recompute and the cache eviction are statements
about the record and stay addressed to it.

The two validation breadcrumbs move from a bare client create to
auditLog(). That helper is the only writer that stamps the acting account,
and a delegate's malformed payload filed without it reads as the owner's
own typing.

2026-08-03 12:10:37 +02:00

..

arrival-wiring.test.ts

Let a delegate enter a reading into a shared record

2026-08-03 12:10:37 +02:00

group-by-day.test.ts

feat(sharing): open the measurement reads to a delegate

2026-08-02 16:30:46 +02:00

put-duplicate-timestamp.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

range-aggregation-route.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

zod-multi-issue.test.ts

Let a delegate enter a reading into a shared record

2026-08-03 12:10:37 +02:00