tom/HealthLog

0 Fork 0

mirror of https://github.com/MBombeck/HealthLog.git synced 2026-11-07 04:12:04 +00:00

Files

T

Marc-André Bombeck c2ac1428e5 chore(deps): take the weekly production updates, zod held on 4.4

Next 16.4.0, pg-boss 12.37.1, the AWS SDK 3.1146, @napi-rs/canvas 1.0.10,
@node-rs/argon2 2.2.2, @simplewebauthn/server 14.0.3, TanStack Query and
Virtual, lucide-react, mmdb-lib, nodemailer, otpauth, pg, radix-ui,
react-day-picker, react-hook-form, tailwind-merge and yaml.

pg-boss moves its schema from 42 to 45 (three additive migrations, nullable
columns and one partial index, no table rewrite); the worker applies them on
start as before. The retention test pins the installed version, so it moves
to 12.37.1 after re-checking every source line it asserts.

zod stays on 4.4.3. 4.5 requires seconds in `z.iso.datetime()` and 4.6
rewrites nullable unions in the generated JSON Schema into `type` arrays,
which reshapes the OpenAPI document and the MCP tool schemas. Dependabot
skips zod 4.5 and later until that move is made on purpose.

2026-10-09 23:03:03 +02:00

__tests__

Merge the final display polish into release/v1.42.0

2026-10-09 17:25:50 +02:00

app

test(dashboard): assert the top card switch on its region, not on the day's digest

2026-10-09 18:23:48 +02:00

cli

…

components

fix(documents): keep four tiles across a 1440 px window with the day strip docked

2026-10-09 20:21:10 +02:00

hooks

feat(shell): add a command palette for pages, settings, modules and actions

2026-10-09 16:35:21 +02:00

lib

chore(deps): take the weekly production updates, zod held on 4.4

2026-10-09 23:03:03 +02:00

types

fix(backup): notice a backup run the process died under, and take its account last

2026-10-04 15:56:56 +02:00

instrumentation.ts

feat(encryption): back up the key, and refuse to serve when it cannot open the database

2026-10-03 18:06:28 +02:00

proxy.ts

feat: lay down the shared v1.42 contract

2026-10-08 07:56:59 +02:00

README.md

…

README.md

`src/`

Application source. HealthLog is a Next.js 16 App Router project (output: "standalone", React 19, TypeScript strict). The path alias @/* resolves to this directory. Everything a request touches lives under here; the layout below follows the request flow rather than alphabetical order.

Request flow

client → src/proxy.ts → src/app/<route>/route.ts → src/lib/api-handler.ts → handler body → src/lib/api-response.ts → client

proxy.ts — the HTTP edge (Next.js 16's renamed middleware). Public-path allowlist, demo-mode mutation block, server-side onboarding redirect, worker-only refusal, x-request-id + CSP nonce generation, every security header.
app/ — App Router pages (RSC by default) and API routes. Every API route wraps its handler in apiHandler. See app/README.md.
lib/ — the server/runtime toolkit: apiHandler, auth, crypto, rollups, AI, notifications, pg-boss jobs, integrations, rate limiting. See lib/README.md.
components/ — React components (shadcn/ui new-york, kebab-case files). See components/README.md.

Other directories

hooks/ — shared React hooks (use- prefix, kebab-case).
types/ — shared TypeScript declarations.
generated/prisma/ — the generated Prisma client (do not edit; regenerated by prisma generate). Imported as @/generated/prisma.
instrumentation.ts — Next.js startup hook; boots the pg-boss worker registry and boot-time backfill queues.
__tests__/ — cross-cutting unit tests; most tests live in __tests__/ folders next to the code they cover.

Conventions

See ../CLAUDE.md for the full set. The load-bearing ones: RSC by default ("use client" only when a hook/state/browser API needs it); every API route wraps apiHandler and parses its body with Zod safeParse; userId is always narrowed from session or Bearer, never accepted as a body field; TanStack Query keys come only from src/lib/query-keys/; outbound HTTP goes through src/lib/safe-fetch.ts.