mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-08 12:32:43 +00:00
Marc-André Bombeck
7386630962
Four verified HIGH data-integrity fixes, each in-place per-provider (no shared helper), from the campaign's data-integrity audit + adversarial verification: F1 — drain-per-sample-cumulative buildScanWhere was the only one of four sibling drains missing deletedAt: null; the nightly cumulative fold re-summed soft-deleted Apple samples and hard-deleted the legacy-steps audit tombstones. Added the filter (mirrors consolidate-daily-mean, dense-intraday-retention, consolidate-legacy-steps). F2 — the additive late-fold merge had no single-flight guard, so two overlapping runs (deploy overlap, or the admin endpoint racing the cron) produced a permanent 2x daily total. Added a pg_advisory_xact_lock per (user, externalId) plus an in-transaction re-read of the live contributors so the serialised-second fold contributes zero (a bare lock alone would still re-add its stale scanned sum). Mirrors the documents quota advisory-lock pattern. F3 — Withings sleep externalId keyed on segment START while measuredAt + the natural key use END; a re-scored segment missed the externalId probe, the sweep tombstoned the old row, and the re-keyed insert collided on the natural key and wedged. Added the natural-key rescue (re-key in place), mirroring the same-file measure path. F4 — Withings measure sync stamped lastSyncedAt + recordSyncSuccess unconditionally after a warn-only per-row loop; a transient write failure stranded the reading behind the 10-min overlap forever. Now holds the watermark and records failure on a hard row error (mirrors google-health/fitbit), while a benign P2002 still advances. Regression test per finding (reverting the three source files fails exactly four tests). Integration suite green against real Postgres.
docs/ — internal reference + operator playbooks
The user-facing documentation lives at https://docs.healthlog.dev — that's the canonical surface for self-hosting guides, integration walkthroughs, AI-provider setup, and the doctor-report workflow.
The files in this directory are the internal operator playbooks, audit notes, and machine-readable specs that ship alongside the source:
api/— the OpenAPI 3.1 spec for the native-client subset (iOS DTO codegen target). Seeapi/README.mdfor the preview commands. Also home to the MCP-server contract:api/mcp-capabilities.md(tools, resources, prompts, write model) andapi/mcp-skills.md(building a connector / skill).ops/— backup / restore + encryption-key-rotation playbooks. These are the runbooks an operator reaches for during an incident.self-hosting/— horizontal-scaling notes (HEALTHLOG_PROCESS_TYPE=web|worker|all) and the deploy-pipeline recipe. Routine install steps stay ondocs.healthlog.dev. Includesself-hosting/mcp.md— enabling the off-by-default MCP connector and pointing Claude.ai / ChatGPT / Claude Desktop at it, andself-hosting/sso.md— OIDC SSO login: IdP setup, the identity-pinning security model,OIDC_ONLYconsequences, and the break-glass runbook.migration/— release-by-release migration notes. Read the entry for the version you're upgrading from.audit/— per-release audit summaries archived for forensic traceability.apple-store-connect-checklist.md— the iOS submission gate.doctor-report.md— PDF generator design notes.codex-protocol-spec.md— Codex / ChatGPT OAuth protocol reverse-engineering notes.ui-guidelines.md— UI / a11y house style.
If you're a self-hoster looking to spin up an instance, start at https://docs.healthlog.dev or jump to the Quick Start in the project README.