Marc-André Bombeck 9cb06ec44d fix(idempotency): read a rebuilt multipart form as the same request ...

A client that rebuilds a form for a retry picks a fresh random boundary,
so the raw bytes differ and a repeated document upload ran a second time
instead of replaying. The boundary named in Content-Type is replaced by a
fixed token before hashing.

2026-10-04 10:43:00 +02:00

..

achievements-no-insults.test.ts

i18n(achievements): replace insulting badge titles

2026-05-10 13:32:19 +02:00

acting-account-resolver.test.ts

test: enforce sharing client step-up

2026-08-07 05:11:02 +02:00

ai-refusal-envelope.test.ts

feat(ai): capability loader, gates and refusal envelope

2026-09-24 07:46:12 +02:00

api-handler-429-dressing.test.ts

fix(api): dress only the 429s a limiter actually refused

2026-09-10 04:55:19 +02:00

api-handler-key-mismatch.test.ts

feat(encryption): back up the key, and refuse to serve when it cannot open the database

2026-10-03 18:06:28 +02:00

api-handler-safe-request-prop.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

api-response-safe-json.test.ts

feat(api): cap request-body size on batch and export ingest routes

2026-06-03 08:56:19 +02:00

api-response-unrecognized-keys.test.ts

fix: refuse an unrecognised request field where the caller can act on it

2026-09-03 05:49:13 +02:00

api-response-zod.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

auth-error-codes.test.ts

fix(api): give the generic auth refusals a stable errorCode

2026-09-10 04:24:34 +02:00

avatar.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

clinical-floors.test.ts

refactor(dashboard): remove the orphaned verdict resolver

2026-08-02 02:32:24 +02:00

crypto-bytes.test.ts

feat(documents): upload policy layer and binary content codec

2026-07-07 11:04:51 +02:00

crypto.test.ts

fix(crypto): fail closed on weak dev key outside development/test

2026-06-19 20:55:46 +02:00

dashboard-layout.test.ts

Let the dashboard hero show what matters most to its owner

2026-08-14 09:46:35 +02:00

date-format-preference-surfaces.test.ts

fix(format): carry the date-order preference to every numeric date

2026-09-05 17:06:34 +02:00

date-format.test.ts

fix(dates): show the year whenever a date is not the current one

2026-07-18 01:23:37 +02:00

db-to-json.test.ts

v1.4.34.4 — audit-driven hotfix bundle (security, UX, code-quality, docs)

2026-05-17 00:39:58 +02:00

db.test.ts

chore(release): prepare v1.31.4

2026-07-21 01:34:29 +02:00

docker-entrypoint.test.ts

fix(runtime): harden process startup and health

2026-07-21 00:05:03 +02:00

doctor-report-allergy-reaction.test.ts

fix(doctor-report): mark an undecryptable allergy reaction instead of blanking it

2026-07-08 23:46:54 +02:00

doctor-report-data.test.ts

fix(medications): scope a snooze to its slot and key report adherence by id

2026-09-26 15:38:20 +02:00

doctor-report-module-backstop.test.ts

test(export): prove the scope holds at the artefact, not just at the switch

2026-07-26 00:45:08 +02:00

doctor-report-pdf-core.test.ts

fix(glucose): state band edges in the reader's glucose unit

2026-10-01 22:07:07 +02:00

doctor-report-recovery-canonical.test.ts

fix(doctor-report): resolve recovery by night in the user timezone

2026-06-14 17:57:21 +02:00

env.test.ts

fix(config): treat an empty environment variable as unset

2026-09-26 15:20:42 +02:00

export.test.ts

feat(mood): carry the five level-A values through backup, restore and CSV

2026-08-08 01:08:27 +02:00

format-active-locale.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

format-date-or-relative.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

format-locale-calendar-date.test.ts

fix(dates): show a stated calendar date as that date east of UTC+12

2026-10-03 18:44:06 +02:00

format-locale.test.ts

fix(format): carry the date-order preference to every numeric date

2026-09-05 17:06:34 +02:00

geo-asn.test.ts

fix(geo): read the offline databases first

2026-08-08 01:05:44 +02:00

geo-offline-detection.test.ts

Send the offline-geo admin notice once per configuration state

2026-08-29 19:20:33 +02:00

geo-offline-first.test.ts

fix(geo): read the offline databases first

2026-08-08 01:05:44 +02:00

geo.test.ts

fix(config): treat an empty environment variable as unset

2026-09-26 15:20:42 +02:00

get-client-ip.test.ts

fix(http): say when proxy headers go unread, and trust X-Real-IP only at one hop

2026-09-26 22:45:51 +02:00

glitchtip-path-secret-redaction.test.ts

fix(mood): make the bulk upsert and its tag links one transaction

2026-07-19 14:16:02 +02:00

glucose.test.ts

fix(glucose): state band edges in the reader's glucose unit

2026-10-01 22:07:07 +02:00

i18n-locale-integrity.test.ts

test: give every scanning guard a floor on what it found

2026-10-01 10:52:48 +02:00

idempotency.test.ts

fix(idempotency): read a rebuilt multipart form as the same request

2026-10-04 10:43:00 +02:00

insights-layout-reorder.test.ts

fix(insights): reconcile customizable-overview review findings

2026-06-07 17:08:25 +02:00

insights-layout.test.ts

fix: guard managed setting label inventories

2026-08-06 04:01:00 +02:00

learn-links.test.ts

Add typed Learn-article link registry

2026-06-26 13:22:21 +02:00

measurement-type-enum-coverage.test.ts

test(export): prove the scope holds at the artefact, not just at the switch

2026-07-26 00:45:08 +02:00

medical-citations.test.ts

v1.4 medical-safety: protect against silent DBP hypotension, align BP & step citations, ACE body-fat consolidation (#123)

2026-05-08 12:07:46 +02:00

medication-category.test.ts

Let a person name their own medication categories

2026-10-03 21:38:03 +02:00

medication-list-layout.test.ts

feat(medications): a sortable table view with an order you choose

2026-06-12 18:10:21 +02:00

medication-schedule.test.ts

refactor(medications): drop the legacy today walker and its own zone solver

2026-09-26 17:07:02 +02:00

module-list-prefs.test.ts

feat(labs): default to list view and reuse medication tile primitives

2026-06-20 11:59:13 +02:00

motion.test.ts

chore(release): v1.4.44 — REG-11 dashboard summary fix (iOS Home tile sparkline + value)

2026-05-21 22:07:32 +02:00

passkey-errors.test.ts

fix: i18n completeness + UX polish (closes #73, #74) (#75)

2026-04-18 17:15:43 +02:00

private-origin-policy.test.ts

fix(egress): keep loopback grantable under an exact operator origin

2026-09-10 19:08:04 +02:00

process-type.test.ts

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

query-keys.test.ts

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

random-id.test.ts

Make uploads and every other write work over plain HTTP

2026-09-05 16:22:39 +02:00

rate-limit-auth-surface.test.ts

fix(http): trust X-Real-IP only behind a declared proxy

2026-09-26 20:10:12 +02:00

rate-limit-headers.test.ts

fix(api): floor Retry-After at one second on a refusal

2026-09-10 04:55:47 +02:00

reference-ranges.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

request-cache.test.ts

fix(ai): read AI switches, modules and consent afresh inside background jobs

2026-09-24 12:08:39 +02:00

require-auth-bearer.test.ts

test(auth): assert the cookie path returns the derived authMethod

2026-07-23 21:36:01 +02:00

require-fresh-mfa-if-enrolled.test.ts

fix(security): keep the first sign-in from alerting on a fresh account

2026-06-27 20:53:48 +02:00

require-fresh-mfa-or-elevation-if-enrolled.test.ts

auth: let a token prove a second factor for erasure

2026-09-02 11:51:09 +02:00

require-fresh-mfa.test.ts

Let a passkey satisfy the passkey-removal step-up

2026-08-23 17:44:13 +02:00

require-recent-proof.test.ts

fix(auth): adding a credential beside a second factor needs that factor

2026-09-26 22:16:44 +02:00

require-record-auth-scope.test.ts

Add a self-service measurements:write API token scope

2026-08-31 08:46:16 +00:00

retry-import.test.ts

fix(charts): degrade chart failures to one card and heal stale shells per version

2026-06-11 21:17:27 +02:00

safe-fetch-dispatcher.test.ts

fix(egress): keep loopback grantable under an exact operator origin

2026-09-10 19:08:04 +02:00

safe-fetch-pinned.test.ts

fix(nightscout): pin approved private origins

2026-07-29 15:54:01 +02:00

safe-fetch.test.ts

fix(nightscout): pin approved private origins

2026-07-29 15:54:01 +02:00

safe-json-bounded-read.test.ts

fix(http): stop reading request bodies of up to 512 MB before authentication

2026-09-26 16:31:03 +02:00

secret-shape.test.ts

fix(logging): scrub every credential prefix the app mints

2026-09-26 20:10:57 +02:00

server-translator.test.ts

chore(style): repo-wide prettier sweep before v1.4.6 tag

2026-05-09 02:27:17 +02:00

ssrf-pin-inventory.test.ts

fix(security): keep ALLOW_LOCAL_AI_PRIVATE_HOSTS=true for the operator's own AI, deprecated

2026-09-26 20:59:10 +02:00

time-window-format.test.ts

fix(medications): collapse an equal-bound dose time to a single time

2026-06-07 14:41:15 +02:00

timezone-mirror.test.ts

fix(format): carry the date-order preference to every numeric date

2026-09-05 17:06:34 +02:00

url-safety.test.ts

fix(security): reject a same-origin next path that re-resolves protocol-relative

2026-07-17 17:30:04 +02:00