Marc-André Bombeck 93694cacd0 fix(idempotency): scrub hls_ share-link tokens from cached bodies ...

The body-content secret guard matched hlk_ / hlr_ / sk- but not the
new hls_ clinician share-link prefix, so a response echoing a freshly
minted share token could be persisted to the idempotency cache. Add
hls_ to SECRET_PATTERN alongside the existing token prefixes.

2026-06-04 02:34:33 +02:00

..

__tests__

fix(idempotency): scrub hls_ share-link tokens from cached bodies

2026-06-04 02:34:33 +02:00

ai

feat(ai): durable provider-health ledger and credential-expired surfacing

2026-06-04 00:50:13 +02:00

analytics

fix(insights): keep the server-only rollup readers out of the insights client bundle

2026-06-02 17:41:33 +02:00

api

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

auth

feat(profile): capture the insurer IK number

2026-06-01 23:24:10 +02:00

cache

feat(insights): enrich the mood page with calendar, distribution, weekday, and correlation views

2026-06-01 19:54:26 +02:00

charts

chore(release): v1.4.42 — Knip enforcing, queryKey factory closed, iOS Workouts dedup, Withings off-response classification

2026-05-21 19:33:07 +02:00

clinician-share

feat(share-links): public clinician view at /c/[token]

2026-06-04 01:21:42 +02:00

consent

chore(release): v1.4.40 — comprehensive Critical+High architecture closure plus iOS PB30 enablement

2026-05-21 12:48:02 +02:00

dashboard

test(dashboard): cover isDashboardSnapshotEnabled default-on boundary

2026-05-31 20:00:16 +02:00

devices

chore(format): prettier sweep across develop

2026-05-11 08:27:51 +02:00

feature-flags

refactor(targets): retire the standalone Targets page

2026-06-02 17:01:14 +02:00

feedback

feat(security): safeFetch wrapper with manual redirect and timeout defaults

2026-05-28 22:32:11 +02:00

fhir

feat(fhir): read-only FHIR R4 REST search routes

2026-06-04 01:05:06 +02:00

gamification

style(prettier): sweep formatting across the tree

2026-05-10 11:05:40 +02:00

http

v1.4.34 — apple-health import + reliability + web-freeze

2026-05-16 21:25:26 +02:00

i18n

chore(release): v1.4.44 — REG-11 dashboard summary fix (iOS Home tile sparkline + value)

2026-05-21 22:07:32 +02:00

import

fix(import): refuse zip-bomb expansions on the Apple Health export

2026-05-27 00:08:45 +02:00

insights

fix(insights): make TRAJECTORY_TYPES a distinct array, not an alias

2026-06-04 01:56:45 +02:00

integrations

feat(whoop): pg-boss sync workers + self-converging backfill

2026-06-04 01:21:42 +02:00

jobs

feat(insights): period-narrative summary on the overview

2026-06-04 01:21:42 +02:00

logging

feat(whoop): OAuth connect/callback + HMAC-signed webhook + CSP gating

2026-06-04 01:40:27 +02:00

measurements

feat(measurements): add WHOOP source, native score types, and source-priority ladders

2026-06-04 00:49:31 +02:00

medications

fix(medications): route injection-site taps to the nearest quadrant centre

2026-06-02 17:34:52 +02:00

monitoring

chore(release): v1.5.6

2026-05-29 22:07:10 +02:00

mood

fix(mood): write tag links inside the entry transaction

2026-06-01 21:17:02 +02:00

moodlog

feat(security): pin resolved IP on outbound fetches to defeat DNS rebinding

2026-05-28 22:32:11 +02:00

multipart

v1.4.34 — apple-health import + reliability + web-freeze

2026-05-16 21:25:26 +02:00

notifications

chore(release): v1.7.0

2026-05-31 14:36:17 +02:00

observability

chore(release): v1.7.0

2026-05-31 14:36:17 +02:00

onboarding

chore(release): v1.4.49 — audit-backlog closure + server reminder suppression + diagnostic endpoint + analytics cold-path fix

2026-05-23 12:51:41 +02:00

openapi

feat(fhir): read-only FHIR R4 REST search routes

2026-06-04 01:05:06 +02:00

personal-records

feat(measurements): add WHOOP source, native score types, and source-priority ladders

2026-06-04 00:49:31 +02:00

queries

chore(release): v1.7.0

2026-05-31 14:36:17 +02:00

rollups

chore(release): v1.7.0

2026-05-31 14:36:17 +02:00

sources

feat(measurements): add WHOOP source, native score types, and source-priority ladders

2026-06-04 00:49:31 +02:00

sse

refactor(api): extract createSseStream helper from chat route

2026-05-10 22:12:22 +02:00

sync

chore(release): v1.7.0

2026-05-31 14:36:17 +02:00

targets

refactor(targets): retire the standalone Targets page

2026-06-02 17:01:14 +02:00

tz

chore(release): v1.4.42 — Knip enforcing, queryKey factory closed, iOS Workouts dedup, Withings off-response classification

2026-05-21 19:33:07 +02:00

validations

feat(share-links): owner clinician share-link lifecycle API

2026-06-04 01:05:06 +02:00

whoop

feat(whoop): OAuth connect/callback + HMAC-signed webhook + CSP gating

2026-06-04 01:40:27 +02:00

withings

feat(insights): drop the per-metric assessment cache on fresh measurements

2026-05-31 22:05:31 +02:00

workouts

chore(release): v1.4.44 — REG-11 dashboard summary fix (iOS Home tile sparkline + value)

2026-05-21 22:07:32 +02:00

api-handler.ts

v1.4.33 — polish and reliability

2026-05-16 19:46:43 +02:00

api-response.ts

chore: correct body-cap comments, dockerignore licence posture, stale log copy

2026-06-03 09:10:46 +02:00

app-settings.ts

chore(style): repo-wide prettier sweep before v1.4.6 tag

2026-05-09 02:27:17 +02:00

audit-dedup.ts

chore(release): v1.4.45 — analytics 9 s perf fix + audit-marathon closure + v1.4.44 hotfix merged

2026-05-21 23:13:21 +02:00

avatar.ts

feat(avatar): self-hosted avatar storage replacing the Gravatar leak

2026-05-28 22:39:20 +02:00

crypto.ts

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

dashboard-layout.ts

feat(healthkit): ingest seven additive HealthKit signals end-to-end

2026-06-02 22:02:50 +02:00

db-compat.ts

v1.4.35 — persistent measurement rollups + partial read-swap

2026-05-17 09:55:33 +02:00

db.ts

chore(release): v1.4.40 — comprehensive Critical+High architecture closure plus iOS PB30 enablement

2026-05-21 12:48:02 +02:00

doctor-report-data.ts

fix(fhir): resolve the medication-administration cap per call so an operator override takes effect

2026-06-03 01:00:04 +02:00

doctor-report-pdf-core.ts

feat(insights): add a wellness-score summary to the doctor report and FHIR export

2026-06-02 23:13:26 +02:00

doctor-report-pdf.ts

feat(doctor-report): practice name on cover page (persisted as user preference)

2026-05-09 21:36:47 +02:00

export.ts

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

format-locale.ts

chore(release): v1.4.41 — iOS perf hotfix, soft-delete completeness, tree hygiene

2026-05-21 18:36:17 +02:00

format.ts

fix(i18n): formatDateOrRelative dispatches to One/Other plural keys (v1.4.49.2)

2026-05-23 13:53:04 +02:00

geo.ts

feat(security): safeFetch wrapper with manual redirect and timeout defaults

2026-05-28 22:32:11 +02:00

glucose.ts

fix(targets): convert glucose targets back to mg/dL on save

2026-06-02 17:01:14 +02:00

idempotency.ts

fix(idempotency): scrub hls_ share-link tokens from cached bodies

2026-06-04 02:34:33 +02:00

insights-layout.ts

feat(insights): widen the layout tile-id set to the full metric universe

2026-06-02 14:15:31 +02:00

medical-citations.ts

release: v1.4.2 — resurrect v1.4.1 work + bug-fix triple (#152)

2026-05-08 17:46:31 +02:00

medication-category.ts

chore(release): v1.4.41 — iOS perf hotfix, soft-delete completeness, tree hygiene

2026-05-21 18:36:17 +02:00

medication-schedule.ts

chore(release): v1.4.39.4 — dashboard symmetry for daily-schedule intake projection

2026-05-21 11:20:24 +02:00

monitoring-settings.ts

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

moodlog-secret.ts

fix(auth): reject moodLog webhook secrets that fail envelope decryption

2026-05-27 00:08:56 +02:00

motion.ts

chore(release): v1.4.44 — REG-11 dashboard summary fix (iOS Home tile sparkline + value)

2026-05-21 22:07:32 +02:00

passkey-errors.ts

fix: i18n completeness + UX polish (closes #73, #74) (#75)

2026-04-18 17:15:43 +02:00

process-type.ts

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

query-keys.ts

feat(share-links): owner share-link management in Settings

2026-06-04 01:39:58 +02:00

rate-limit.ts

chore(release): v1.4.45 — analytics 9 s perf fix + audit-marathon closure + v1.4.44 hotfix merged

2026-05-21 23:13:21 +02:00

request-cache.ts

v1.4.33 — polish and reliability

2026-05-16 19:46:43 +02:00

safe-fetch-dispatcher.ts

feat(security): pin resolved IP on outbound fetches to defeat DNS rebinding

2026-05-28 22:32:11 +02:00

safe-fetch.ts

feat(security): pin resolved IP on outbound fetches to defeat DNS rebinding

2026-05-28 22:32:11 +02:00

telegram.ts

feat(security): safeFetch wrapper with manual redirect and timeout defaults

2026-05-28 22:32:11 +02:00

time-window-format.ts

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

timezone.ts

chore(release): v1.4.38.2

2026-05-17 23:46:09 +02:00

utils.ts

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

zxcvbn-i18n.ts

release(v1.2): i18n, thresholds, glucose, dashboard customization, feedback, multi-provider AI (#77)

2026-04-18 22:20:12 +02:00