tom/HealthLog

0 Fork 0

mirror of https://github.com/MBombeck/HealthLog.git synced 2026-11-07 04:12:04 +00:00

Files

T

Marc-André Bombeck 5196aff766 Merge pull request #846 from MBombeck/fix/restore-perms-trust-proxy

fix: write restored PHI 0o600 and let TRUST_PROXY_HOPS reach the container

2026-08-29 18:15:06 +02:00

__tests__

Write the published demo password on every migration instead of carrying one

2026-08-20 08:20:16 +02:00

i18n

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

assert-deploy.ts

chore: scrub instance details and personal data from committed artefacts

2026-06-10 11:00:26 +02:00

audit-column-readers.ts

chore(audit): sweep for write-only columns from the release battery

2026-07-25 16:24:24 +02:00

backfill-mood-note-column.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

backfill-rollups.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

check-bundle-budget.mjs

fix(build): stabilize release bundle gates

2026-07-29 16:19:30 +02:00

check-env.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

check-openapi.ts

chore(release): v1.4.49 — audit-backlog closure + server reminder suppression + diagnostic endpoint + analytics cold-path fix

2026-05-23 12:51:41 +02:00

cleanup-apple-health-phantom-meds.ts

chore(scripts): apply prettier to the phantom-med cleanup script

2026-07-24 23:18:26 +02:00

convert-noncanonical-measurement-units.ts

test(measurements): cover the unit transform, MCP unit hardening, and a display guard

2026-07-25 00:21:36 +02:00

decrypt-export.ts

feat(export): offer a passphrase-encrypted archive

2026-06-27 20:27:07 +02:00

diagnose-apple-health-meds.ts

chore(scripts): add read-only diagnose + guarded cleanup for phantom Apple-Health mirror meds

2026-07-24 23:02:03 +02:00

diagnose-cycle-state.ts

chore(cycle): add a read-only report for records the module stopped reading

2026-08-07 15:52:59 +02:00

diagnose-implausible-measurements.ts

fix(sync): enforce the plausibility domain on every provider write path

2026-08-07 22:19:43 +02:00

diagnose-manual-sleep-hours.ts

fix(measurements): store a hand-entered night in the unit the field asks for

2026-08-07 14:30:10 +02:00

diagnose-noncanonical-measurement-units.ts

test(measurements): cover the unit transform, MCP unit hardening, and a display guard

2026-07-25 00:21:36 +02:00

disable-mfa.ts

fix(security): revoke other sessions when the second factor is removed

2026-06-27 21:50:16 +02:00

drain-per-sample-cumulative.ts

chore(release): v1.4.38

2026-05-17 19:07:03 +02:00

env-manifest.json

Write restored PHI 0o600 and let TRUST_PROXY_HOPS reach the container

2026-08-27 15:21:50 +02:00

fetch-geolite2.sh

chore(release): v1.4.28.1

2026-05-16 09:28:40 +02:00

generate-i18n-boot.mjs

feat(i18n): add Korean as a seventh end-to-end locale

2026-08-26 16:42:45 +09:00

generate-openapi.ts

refactor(openapi,queries): feature-located registries behind thin indexes

2026-06-11 00:10:00 +02:00

generate-sw-version.mjs

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

i18n-key-tool.mjs

feat(i18n): add Korean as a seventh end-to-end locale

2026-08-26 16:42:45 +09:00

install-hooks.sh

chore(release): v1.4.31

2026-05-16 14:19:57 +02:00

measure-description-lengths.mjs

test(e2e): measure that Settings and Admin read as one surface

2026-08-07 22:16:31 +02:00

migrate-demo-edge01.README.md

Write the published demo password on every migration instead of carrying one

2026-08-20 08:20:16 +02:00

migrate-demo-edge01.sh

Write the published demo password on every migration instead of carrying one

2026-08-20 08:20:16 +02:00

prepare.mjs

fix(ci): harden test determinism and dependencies

2026-07-21 00:36:40 +02:00

promote-digest.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

README.md

fix: harden pnpm supply chain and runtime image (#572 )

2026-07-21 04:36:53 +02:00

repair-google-health-sleep.ts

chore(release): v1.28.18 — Google Health sleep reads its true total

2026-07-10 13:08:55 +02:00

repair-intake-anomalies.ts

fix: harden pnpm supply chain and runtime image (#572 )

2026-07-21 04:36:53 +02:00

reset-password.mjs

fix(01-08): revoke credentials atomically on password reset

2026-07-29 13:55:11 +02:00

restore-backup.ts

Write restored PHI 0o600 and let TRUST_PROXY_HOPS reach the container

2026-08-27 15:21:50 +02:00

rotate-encryption-key.ts

feat(backup): carry emergency profile through rotation and backup

2026-08-10 05:32:59 +02:00

run-coach-eval.ts

test(coach): add two-layer Coach eval harness

2026-06-27 10:14:52 +02:00

seed-demo-apps01.sql

chore(release): v1.15.15 — one warm, motivating assistant voice

2026-06-07 21:49:27 +02:00

seed-demo-extend-1y.sql

chore(cleanup): drop orphaned doctor-report PDF helper after export-page removal

2026-06-06 23:30:39 +02:00

seed-demo-meds-apps01.sql

chore(release): v1.15.15 — one warm, motivating assistant voice

2026-06-07 21:49:27 +02:00

seed-demo-scores-1y.sql

chore(cleanup): drop orphaned doctor-report PDF helper after export-page removal

2026-06-06 23:30:39 +02:00

seed-demo-v15.sql

docs: drop per-release audit notes + legacy spec, scrub phase markers

2026-05-25 23:43:58 +02:00

seed-demo.ts

feat(demo): showcase the seeded tiles on the demo dashboard

2026-06-22 07:01:03 +02:00

split-description.mjs

feat(i18n): add Korean as a seventh end-to-end locale

2026-08-26 16:42:45 +09:00

test-notifications.ts

fix: harden pnpm supply chain and runtime image (#572 )

2026-07-21 04:36:53 +02:00

v1341-audit-ledger-check.mjs

style: satisfy v1.34.1 format gate

2026-07-29 15:59:12 +02:00

v1341-performance-baseline.mjs

style: satisfy v1.34.1 format gate

2026-07-29 15:59:12 +02:00

verify-v137-adversarial.ts

fix: reconcile sharing migrations

2026-08-07 06:21:55 +02:00

README.md

`scripts/`

One-shot operator and build scripts. These are not part of the running application — they are run by hand during a deploy, a backfill, or a release, or wired into CI. Recurring work belongs on pg-boss (src/lib/jobs/), not here.

How to run them

From a source checkout:

pnpm dlx tsx scripts/<file>.ts

The production image intentionally removes npm, pnpm, and Corepack. Only container-safe scripts named by an operator runbook use its pinned healthlog-tsx launcher; scripts that import the full application dependency graph must run from a source checkout. scripts/ is excluded from the project typecheck.

What lives here

generate-openapi.ts — emits docs/api/openapi.yaml from the registered Zod schemas (pnpm openapi:generate).
check-openapi.ts — compares a freshly generated spec against the committed YAML; CI fails on drift (pnpm openapi:check).
check-env.ts — pre-deploy env-var sanity check against env-manifest.json (pnpm check-env); wired into CI.
assert-deploy.ts — post-deploy /api/version assertion.
rotate-encryption-key.ts — AES-256-GCM key rotation; see docs/ops/encryption-key-rotation.md.
restore-backup.ts — restore an off-host AES-GCM backup from an S3-compatible bucket.
repair-intake-anomalies.ts — repair historic medication-ledger defects (duplicate dose-slot rows, implausible taken_at); dry-run by default, see docs/ops/intake-repair.md.
backfill-rollups.ts, drain-per-sample-cumulative.ts, backfill-mood-note-column.ts — historical data backfills (note: the boot-time rollup-full-backfill queue handles new accounts automatically; the CLI is the manual fallback).
seed-demo.ts + seed-demo-v15.sql — populate a demo tenant.
test-notifications.ts — exercise the notification dispatcher + reminder check.
fetch-geolite2.sh — download the MaxMind GeoLite2 MMDBs (needs a licence key) before docker build.
install-hooks.sh — install the local git hooks.
generate-sw-version.mjs, print-bundle-report.mjs — service-worker version stamp and bundle-size report.
i18n/ — locale tooling; __tests__/ — tests for the scripts above.

Conventions

See ../CLAUDE.md "Tests and commands" + "Self-hosting gotchas". Operator runbooks that drive these scripts live in ../docs/ops/.