Marc-André Bombeck eb102ac50c chore(release): v1.28.15 — document thumbnails; admin-shared AI access ...

Document vault shows a per-file thumbnail: a server-rendered preview,
downscaled and re-encoded so location and camera metadata are dropped,
served only to the file's owner over an authenticated request. Files that
cannot be previewed keep their type icon. Generation is bounded — a header
sniff refuses an over-large source before decode, so a crafted image cannot
exhaust the preview worker.

Also folds in admin-managed central AI access — an administrator connects
one access on the server and each user opts in or keeps their own provider,
off until an admin turns it on — and trims the redundant documents-search
caption and per-file searchable/read badges.

2026-07-10 01:32:28 +02:00

..

__tests__

test(documents): wire content-index mocks into the list route test

2026-07-07 18:41:09 +02:00

encrypted-columns.ts

chore(release): v1.28.15 — document thumbnails; admin-shared AI access

2026-07-10 01:32:28 +02:00

encryption-corpus.ts

feat(crypto): rotate the document blob column in bounded, codec-aware batches

2026-07-07 11:05:43 +02:00

note-cipher.ts

feat(security): encrypt medication free-text notes at rest + password-change MFA step-up

2026-06-28 03:05:10 +02:00