Marc-André Bombeck 78ac2c5aeb refactor(sharing): read and judge grants from a leaf module ...

lib/sharing/grants.ts held both the grant transitions and the predicates
every reader asks (state, level, scope, the live grant for a pair). The
transitions reach into the managed-profile lifecycle and the OAuth connect
target, and both of those read a live grant, so grants, lifecycle and
connect-target formed an import cycle.

The predicates, findActiveGrant and touchGrantUsage move verbatim to
lib/sharing/grant-access.ts, which imports only the database client and
the scope vocabulary. Importers and the mocks that replaced those
functions point at the new module. Runtime import cycles fall from 7 to 6.

2026-10-23 11:02:10 +02:00

..

__tests__

refactor(auth): move the request guards out of api-handler into lib/auth/guards

2026-10-23 10:54:23 +02:00

account

refactor(sharing): read and judge grants from a leaf module

2026-10-23 11:02:10 +02:00

activity

feat(activity): add an activity calendar with personal baseline and goals

2026-10-21 21:38:32 +02:00

admin

feat(i18n): register Brazilian Portuguese as a locale

2026-10-22 14:50:00 +02:00

ai/test

chore: strip planning tags from comments and enable the rule

2026-10-20 09:08:40 +02:00

ai-runs/[id]

feat(documents): read documents and lab scans in the background

2026-10-03 18:18:56 +02:00

allergies

fix(api): meter every authenticated write where the caller is resolved

2026-10-20 13:53:54 +02:00

analytics

fix(api): publish what the GET handlers send

2026-10-20 13:16:22 +02:00

anamnesis

fix(anamnesis): one newest AUDIT-C entry, scored against the wording offered

2026-10-16 05:36:42 +02:00

auth

refactor(sharing): read and judge grants from a leaf module

2026-10-23 11:02:10 +02:00

biomarkers

fix(labs): stop projecting lab trends from stale or short series

2026-10-21 22:40:43 +02:00

body-sites

feat(body-sites): record a body site on conditions and add a body-site view

2026-09-25 21:55:14 +02:00

c/[token]/unlock

fix(api): put Retry-After and the rate-limit triple on every 429

2026-09-10 03:55:46 +02:00

coach

refactor(insights): drop the readable cached-text column

2026-10-21 19:24:21 +02:00

consent/ai

chore: strip planning tags from comments and enable the rule

2026-10-20 09:08:40 +02:00

custom-metrics

fix(api): meter every authenticated write where the caller is resolved

2026-10-20 13:53:54 +02:00

cycle

fix(api): meter every authenticated write where the caller is resolved

2026-10-20 13:53:54 +02:00

daily/digest

refactor(insights): drop the readable cached-text column

2026-10-21 19:24:21 +02:00

dashboard

refactor(insights): drop the readable cached-text column

2026-10-21 19:24:21 +02:00

dawarich

test(dawarich): cover the daily values, the refusals and the backup ends

2026-10-16 01:23:26 +02:00

day

fix(visits): anchor the notable window at the next visit's preparation

2026-10-21 16:25:26 +02:00

devices

chore: strip planning tags from comments and enable the rule

2026-10-20 09:08:40 +02:00

documents

fix(rate-limit): fail the shared write ceiling open and skip reads over POST

2026-10-20 16:09:28 +02:00

encounters

feat(visits): resolve where the window before a booked visit starts

2026-10-21 12:32:12 +02:00

environment

feat(dawarich): fetch daily movement values from a Dawarich instance

2026-10-16 01:20:53 +02:00

export

feat(doctor-report): mark screener totals answered in an unvalidated translation

2026-10-23 08:14:32 +02:00

family-history

fix(api): one helper for list pages, exact cut signal, total order

2026-10-20 13:29:14 +02:00

feature-flags

feat(api): date deprecations and log which builds still call them

2026-10-20 13:57:11 +02:00

fhir

test(integration): sessions, devices, security activity and FHIR against Postgres

2026-10-22 05:31:09 +02:00

fitbit

fix(jobs): enqueue during boot waits for the boss instead of dropping

2026-10-21 21:37:21 +02:00

gamification/achievements

refactor(auth): move the request guards out of api-handler into lib/auth/guards

2026-10-23 10:54:23 +02:00

google-health

fix(jobs): enqueue during boot waits for the boss instead of dropping

2026-10-21 21:37:21 +02:00

health

fix(workouts): keep tracks and climb for accounts that already had them

2026-10-21 20:51:13 +02:00

illness

fix(api): one helper for list pages, exact cut signal, total order

2026-10-20 13:29:14 +02:00

import

test: fail a test whose code caught and logged a missing mock export

2026-10-22 23:15:43 +02:00

ingest/medication

refactor(medications): drop the compliance rollup table that nothing reads

2026-10-20 13:01:45 +02:00

insights

fix(ai): screen numberless halving and dose changes, and hold continuations to the plan

2026-10-22 18:20:02 +02:00

integrations

fix(healthkit): count a type as arrived only when the batch brought something new

2026-10-22 10:34:45 +02:00

internal

chore: strip planning tags from comments and enable the rule

2026-10-20 09:08:40 +02:00

labs

fix(labs): read a lab report page by page and keep a cut-off read's rows

2026-10-21 10:40:45 +02:00

life-events

fix(api): meter every authenticated write where the caller is resolved

2026-10-20 13:53:54 +02:00

managed-profiles

fix(api): read the error code before the status

2026-10-20 09:48:15 +02:00

mcp

test(auth): read the password hash off the stored row in proof tests

2026-10-20 20:56:08 +02:00

measurement-categories

Exclude the worktrees the tooling was already meant to exclude

2026-08-02 16:36:25 +02:00

measurement-reminders

chore: strip planning tags from comments and enable the rule

2026-10-20 09:08:40 +02:00

measurements

test: fail a test whose code caught and logged a missing mock export

2026-10-22 23:15:43 +02:00

medications

feat(i18n): register Brazilian Portuguese as a locale

2026-10-22 14:50:00 +02:00

mental-health/assessments

feat(mental-health): record which wording a check-in was answered in

2026-10-23 08:14:15 +02:00

meta/capabilities

docs(comments): correct four comments that describe gates and mints that no longer exist

2026-10-01 10:06:39 +02:00

monitoring

fix(monitoring): route Umami events to the endpoint the tracker was built with

2026-10-04 15:13:52 +02:00

mood

test(integration): move the mood tag route tests onto Postgres

2026-10-22 05:32:21 +02:00

mood-entries

fix(api): meter every authenticated write where the caller is resolved

2026-10-20 13:53:54 +02:00

nightscout

fix(jobs): enqueue during boot waits for the boss instead of dropping

2026-10-21 21:37:21 +02:00

notifications

feat(i18n): register Brazilian Portuguese as a locale

2026-10-22 14:50:00 +02:00

nutrients

fix(api): meter every authenticated write where the caller is resolved

2026-10-20 13:53:54 +02:00

onboarding

chore: strip planning tags from comments and enable the rule

2026-10-20 09:08:40 +02:00

oura

fix(jobs): enqueue during boot waits for the boss instead of dropping

2026-10-21 21:37:21 +02:00

personal-records

fix(api): one helper for list pages, exact cut signal, total order

2026-10-20 13:29:14 +02:00

polar

fix(jobs): enqueue during boot waits for the boss instead of dropping

2026-10-21 21:37:21 +02:00

practitioners

fix(records): show a deleted practitioner on the live visits that name it

2026-10-20 16:01:13 +02:00

profile/summary

feat(02-12): add scoped profile summary

2026-08-06 04:59:25 +02:00

record-settings

feat(integrations): let a guardian connect a managed profile's providers

2026-10-21 19:49:07 +02:00

search

fix(search): key the in-flight search by actor and record

2026-10-11 15:17:43 +02:00

settings

feat(i18n): register Brazilian Portuguese as a locale

2026-10-22 14:50:00 +02:00

share-links

test(auth): read the password hash off the stored row in proof tests

2026-10-20 20:56:08 +02:00

sleep

fix(sleep): one day total for every sleep reader, and the latest night is a night

2026-10-20 09:28:40 +02:00

strava

test(integration): drive the Strava sync against Postgres

2026-10-22 05:32:09 +02:00

symptoms

fix(api): one helper for list pages, exact cut signal, total order

2026-10-20 13:29:14 +02:00

sync

refactor(auth): move the request guards out of api-handler into lib/auth/guards

2026-10-23 10:54:23 +02:00

telegram/webhook

refactor(telegram): keep the bare help and greeting words in a per-locale table

2026-10-22 15:16:42 +02:00

timeline

feat(timeline): one row per medication, no cap on value lines, range popover

2026-10-09 15:02:14 +02:00

tokens

test(kit): call route handlers through the real API kit against Postgres

2026-10-22 05:30:31 +02:00

topics

feat(topics): compute topic overviews and topic pages on the server

2026-10-23 08:18:43 +02:00

user

fix(ai): write no key-removal audit for a slot that held no key

2026-10-21 16:50:14 +02:00

vaccinations

fix(api): meter every authenticated write where the caller is resolved

2026-10-20 13:53:54 +02:00

version

chore: strip planning tags from comments and enable the rule

2026-10-20 09:08:40 +02:00

whoop

fix(jobs): enqueue during boot waits for the boss instead of dropping

2026-10-21 21:37:21 +02:00

withings

fix(integrations): one provider account per record, borrowed apps return

2026-10-21 21:18:33 +02:00

workouts

fix(workouts): resolve duplicate clusters the same way on every surface

2026-10-22 18:21:02 +02:00