Marc-André Bombeck 8d10e5ab94 feat(measurements): resolve each reading's Apple Health write-back ...

A reading sent with a measurements:write token keeps its EXTERNAL source
and now points at the token that carried it (measurements.ingest_token_id).
Every stored row answers a server-resolved appleHealthMirror: true for
WITHINGS, IMPORT and MANUAL, the token's choice for EXTERNAL, false
otherwise. The plain list accepts appleHealthMirror=true so a client can
page exactly those rows.

Migration 0476 adds the columns and links existing EXTERNAL readings only
where one measurement token provably sent them; 0477 builds the index
concurrently. Backups carry the link and a restore keeps it only for a
token the account still holds. A guard holds every EXTERNAL writer to
setting the link.

2026-10-23 19:27:52 +02:00

..

__tests__

refactor(auth): move the request guards out of api-handler into lib/auth/guards

2026-10-23 10:54:23 +02:00

account

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

activity

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

admin

refactor(ai): move the stored-key opener and the Anthropic host check out of provider.ts

2026-10-23 17:19:21 +02:00

ai/test

chore: strip planning tags from comments and enable the rule

2026-10-20 09:08:40 +02:00

ai-runs/[id]

feat(documents): read documents and lab scans in the background

2026-10-03 18:18:56 +02:00

allergies

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

analytics

refactor(analytics): move the default body builder out of its route

2026-10-23 13:52:57 +02:00

anamnesis

refactor(api): read the health-record route bodies through parseJsonBody

2026-10-23 11:29:22 +02:00

auth

refactor(auth): move the SSO callback's account resolution and sign-in endings out of its route

2026-10-23 15:17:27 +02:00

biomarkers

refactor(api): read the health-record route bodies through parseJsonBody

2026-10-23 11:29:22 +02:00

body-sites

feat(body-sites): record a body site on conditions and add a body-site view

2026-09-25 21:55:14 +02:00

c/[token]/unlock

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

coach

refactor(api): read the remaining settings and admin route bodies through parseJsonBody

2026-10-23 11:29:23 +02:00

consent/ai

fix(logging): keep detached work from renaming the request's wide event

2026-10-23 16:32:10 +02:00

custom-metrics

fix(audit): file every refused request through auditLog()

2026-10-23 16:54:57 +02:00

cycle

refactor(api): read the health-record route bodies through parseJsonBody

2026-10-23 11:29:22 +02:00

daily/digest

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

dashboard

fix(audit): file every refused request through auditLog()

2026-10-23 16:54:57 +02:00

dawarich

test(dawarich): cover the daily values, the refusals and the backup ends

2026-10-16 01:23:26 +02:00

day

fix(visits): anchor the notable window at the next visit's preparation

2026-10-21 16:25:26 +02:00

devices

fix(audit): file every refused request through auditLog()

2026-10-23 16:54:57 +02:00

documents

refactor(documents): move the vault upload reading and the list read out of their route

2026-10-23 15:10:26 +02:00

encounters

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

environment

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

export

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

family-history

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

feature-flags

feat(api): date deprecations and log which builds still call them

2026-10-20 13:57:11 +02:00

fhir

test(integration): sessions, devices, security activity and FHIR against Postgres

2026-10-22 05:31:09 +02:00

fitbit

refactor(integrations): move every provider OAuth client onto one factory

2026-10-23 12:57:47 +02:00

gamification/achievements

refactor(auth): move the request guards out of api-handler into lib/auth/guards

2026-10-23 10:54:23 +02:00

google-health

refactor(integrations): move every provider OAuth client onto one factory

2026-10-23 12:57:47 +02:00

health

fix(workouts): keep tracks and climb for accounts that already had them

2026-10-21 20:51:13 +02:00

illness

refactor(api): read the health-record route bodies through parseJsonBody

2026-10-23 11:29:22 +02:00

import

refactor(import): move the CSV import writer out of its route

2026-10-23 15:00:35 +02:00

ingest/medication

fix(audit): file every refused request through auditLog()

2026-10-23 16:54:57 +02:00

insights

fix(audit): file every refused request through auditLog()

2026-10-23 16:54:57 +02:00

integrations

fix(audit): file every refused request through auditLog()

2026-10-23 16:54:57 +02:00

internal

chore: strip planning tags from comments and enable the rule

2026-10-20 09:08:40 +02:00

labs

fix(audit): file every refused request through auditLog()

2026-10-23 16:54:57 +02:00

life-events

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

managed-profiles

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

mcp

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

measurement-categories

Exclude the worktrees the tooling was already meant to exclude

2026-08-02 16:36:25 +02:00

measurement-reminders

refactor(api): read the health-record route bodies through parseJsonBody

2026-10-23 11:29:22 +02:00

measurements

feat(measurements): resolve each reading's Apple Health write-back

2026-10-23 19:27:52 +02:00

medications

fix(medications): answer writes with the shapes the contract declares

2026-10-23 17:10:02 +02:00

mental-health/assessments

refactor(api): read the health-record route bodies through parseJsonBody

2026-10-23 11:29:22 +02:00

meta/capabilities

docs(comments): correct four comments that describe gates and mints that no longer exist

2026-10-01 10:06:39 +02:00

monitoring

fix(monitoring): route Umami events to the endpoint the tracker was built with

2026-10-04 15:13:52 +02:00

mood

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

mood-entries

fix(audit): file every refused request through auditLog()

2026-10-23 16:54:57 +02:00

nightscout

fix(jobs): enqueue during boot waits for the boss instead of dropping

2026-10-21 21:37:21 +02:00

notifications

feat(i18n): register Brazilian Portuguese as a locale

2026-10-22 14:50:00 +02:00

nutrients

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

onboarding

refactor(api): read the remaining settings and admin route bodies through parseJsonBody

2026-10-23 11:29:23 +02:00

oura

refactor(integrations): move every provider OAuth client onto one factory

2026-10-23 12:57:47 +02:00

personal-records

fix(api): one helper for list pages, exact cut signal, total order

2026-10-20 13:29:14 +02:00

polar

refactor(integrations): move every provider OAuth client onto one factory

2026-10-23 12:57:47 +02:00

practitioners

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

profile/summary

feat(02-12): add scoped profile summary

2026-08-06 04:59:25 +02:00

record-settings

refactor(cycle,medications): break the gate and compliance import cycles

2026-10-23 11:05:08 +02:00

search

refactor(api): read the remaining settings and admin route bodies through parseJsonBody

2026-10-23 11:29:23 +02:00

settings

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

share-links

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

sleep

fix(sleep): one day total for every sleep reader, and the latest night is a night

2026-10-20 09:28:40 +02:00

strava

refactor(integrations): move every provider OAuth client onto one factory

2026-10-23 12:57:47 +02:00

symptoms

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

sync

refactor(sync): move the delta feed's domain pages out of its route

2026-10-23 14:45:26 +02:00

telegram/webhook

refactor(telegram): keep the bare help and greeting words in a per-locale table

2026-10-22 15:16:42 +02:00

timeline

feat(timeline): one row per medication, no cap on value lines, range popover

2026-10-09 15:02:14 +02:00

tokens

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

user

refactor(api): read the remaining settings and admin route bodies through parseJsonBody

2026-10-23 11:29:23 +02:00

vaccinations

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

version

chore: strip planning tags from comments and enable the rule

2026-10-20 09:08:40 +02:00

whoop

refactor(integrations): move every provider OAuth client onto one factory

2026-10-23 12:57:47 +02:00

withings

refactor(integrations): move every provider OAuth client onto one factory

2026-10-23 12:57:47 +02:00

workouts

refactor(workouts): move the workout detail read and the manual delete out of their route

2026-10-23 14:00:28 +02:00