Marc-André Bombeck 15f0e499f9 refactor: share the secret-shape matcher from one leaf ...

The idempotency cache refuses to persist a body carrying a HealthLog token or an AI provider key. The notification test routes are about to refuse echoing such text too, so the pattern moves to src/lib/secret-shape.ts instead of being written a second time. Behaviour of the cache is unchanged.

2026-09-13 13:56:58 +02:00

..

achievements-no-insults.test.ts

i18n(achievements): replace insulting badge titles

2026-05-10 13:32:19 +02:00

acting-account-resolver.test.ts

test: enforce sharing client step-up

2026-08-07 05:11:02 +02:00

api-handler-429-dressing.test.ts

fix(api): dress only the 429s a limiter actually refused

2026-09-10 04:55:19 +02:00

api-handler-safe-request-prop.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

api-response-safe-json.test.ts

feat(api): cap request-body size on batch and export ingest routes

2026-06-03 08:56:19 +02:00

api-response-unrecognized-keys.test.ts

fix: refuse an unrecognised request field where the caller can act on it

2026-09-03 05:49:13 +02:00

api-response-zod.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

auth-error-codes.test.ts

fix(api): give the generic auth refusals a stable errorCode

2026-09-10 04:24:34 +02:00

avatar.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

clinical-floors.test.ts

refactor(dashboard): remove the orphaned verdict resolver

2026-08-02 02:32:24 +02:00

crypto-bytes.test.ts

feat(documents): upload policy layer and binary content codec

2026-07-07 11:04:51 +02:00

crypto.test.ts

fix(crypto): fail closed on weak dev key outside development/test

2026-06-19 20:55:46 +02:00

dashboard-layout.test.ts

Let the dashboard hero show what matters most to its owner

2026-08-14 09:46:35 +02:00

date-format-preference-surfaces.test.ts

fix(format): carry the date-order preference to every numeric date

2026-09-05 17:06:34 +02:00

date-format.test.ts

fix(dates): show the year whenever a date is not the current one

2026-07-18 01:23:37 +02:00

db-to-json.test.ts

v1.4.34.4 — audit-driven hotfix bundle (security, UX, code-quality, docs)

2026-05-17 00:39:58 +02:00

db.test.ts

chore(release): prepare v1.31.4

2026-07-21 01:34:29 +02:00

docker-entrypoint.test.ts

fix(runtime): harden process startup and health

2026-07-21 00:05:03 +02:00

doctor-report-allergy-reaction.test.ts

fix(doctor-report): mark an undecryptable allergy reaction instead of blanking it

2026-07-08 23:46:54 +02:00

doctor-report-data.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

doctor-report-module-backstop.test.ts

test(export): prove the scope holds at the artefact, not just at the switch

2026-07-26 00:45:08 +02:00

doctor-report-pdf-core.test.ts

fix(format): carry the date-order preference to every numeric date

2026-09-05 17:06:34 +02:00

doctor-report-recovery-canonical.test.ts

fix(doctor-report): resolve recovery by night in the user timezone

2026-06-14 17:57:21 +02:00

export.test.ts

feat(mood): carry the five level-A values through backup, restore and CSV

2026-08-08 01:08:27 +02:00

format-active-locale.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

format-date-or-relative.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

format-locale.test.ts

fix(format): carry the date-order preference to every numeric date

2026-09-05 17:06:34 +02:00

geo-asn.test.ts

fix(geo): read the offline databases first

2026-08-08 01:05:44 +02:00

geo-offline-detection.test.ts

Send the offline-geo admin notice once per configuration state

2026-08-29 19:20:33 +02:00

geo-offline-first.test.ts

fix(geo): read the offline databases first

2026-08-08 01:05:44 +02:00

geo.test.ts

fix(admin): name the configured geo provider in the system snapshot

2026-06-30 18:08:57 +02:00

get-client-ip.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

glitchtip-path-secret-redaction.test.ts

fix(mood): make the bulk upsert and its tag links one transaction

2026-07-19 14:16:02 +02:00

glucose.test.ts

feat(glucose): name the bucket for readings with no meal-time context

2026-09-09 23:03:13 +02:00

i18n-locale-integrity.test.ts

Label every ingest source instead of leaking its enum value

2026-09-02 12:08:31 +02:00

idempotency.test.ts

fix(auth): sign out the other devices, lose a refresh to a revocation, key the replay cache by authority

2026-09-08 20:23:30 +02:00

insights-layout-reorder.test.ts

fix(insights): reconcile customizable-overview review findings

2026-06-07 17:08:25 +02:00

insights-layout.test.ts

fix: guard managed setting label inventories

2026-08-06 04:01:00 +02:00

learn-links.test.ts

Add typed Learn-article link registry

2026-06-26 13:22:21 +02:00

measurement-type-enum-coverage.test.ts

test(export): prove the scope holds at the artefact, not just at the switch

2026-07-26 00:45:08 +02:00

medical-citations.test.ts

v1.4 medical-safety: protect against silent DBP hypotension, align BP & step citations, ACE body-fat consolidation (#123)

2026-05-08 12:07:46 +02:00

medication-list-layout.test.ts

feat(medications): a sortable table view with an order you choose

2026-06-12 18:10:21 +02:00

medication-schedule.test.ts

chore(release): v1.4.39.4 — dashboard symmetry for daily-schedule intake projection

2026-05-21 11:20:24 +02:00

module-list-prefs.test.ts

feat(labs): default to list view and reuse medication tile primitives

2026-06-20 11:59:13 +02:00

motion.test.ts

chore(release): v1.4.44 — REG-11 dashboard summary fix (iOS Home tile sparkline + value)

2026-05-21 22:07:32 +02:00

passkey-errors.test.ts

fix: i18n completeness + UX polish (closes #73, #74) (#75)

2026-04-18 17:15:43 +02:00

private-origin-policy.test.ts

fix(egress): keep loopback grantable under an exact operator origin

2026-09-10 19:08:04 +02:00

process-type.test.ts

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

query-keys.test.ts

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

random-id.test.ts

Make uploads and every other write work over plain HTTP

2026-09-05 16:22:39 +02:00

rate-limit-auth-surface.test.ts

Remove the anonymous account-discovery endpoint

2026-09-11 13:56:49 +02:00

rate-limit-headers.test.ts

fix(api): floor Retry-After at one second on a refusal

2026-09-10 04:55:47 +02:00

reference-ranges.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

require-auth-bearer.test.ts

test(auth): assert the cookie path returns the derived authMethod

2026-07-23 21:36:01 +02:00

require-fresh-mfa-if-enrolled.test.ts

fix(security): keep the first sign-in from alerting on a fresh account

2026-06-27 20:53:48 +02:00

require-fresh-mfa-or-elevation-if-enrolled.test.ts

auth: let a token prove a second factor for erasure

2026-09-02 11:51:09 +02:00

require-fresh-mfa.test.ts

Let a passkey satisfy the passkey-removal step-up

2026-08-23 17:44:13 +02:00

require-record-auth-scope.test.ts

Add a self-service measurements:write API token scope

2026-08-31 08:46:16 +00:00

retry-import.test.ts

fix(charts): degrade chart failures to one card and heal stale shells per version

2026-06-11 21:17:27 +02:00

safe-fetch-dispatcher.test.ts

fix(egress): keep loopback grantable under an exact operator origin

2026-09-10 19:08:04 +02:00

safe-fetch-pinned.test.ts

fix(nightscout): pin approved private origins

2026-07-29 15:54:01 +02:00

safe-fetch.test.ts

fix(nightscout): pin approved private origins

2026-07-29 15:54:01 +02:00

secret-shape.test.ts

refactor: share the secret-shape matcher from one leaf

2026-09-13 13:56:58 +02:00

server-translator.test.ts

chore(style): repo-wide prettier sweep before v1.4.6 tag

2026-05-09 02:27:17 +02:00

ssrf-pin-inventory.test.ts

feat(notifications): honour NOTIFICATION_PRIVATE_ORIGINS on send

2026-09-10 16:39:24 +02:00

time-window-format.test.ts

fix(medications): collapse an equal-bound dose time to a single time

2026-06-07 14:41:15 +02:00

timezone-mirror.test.ts

fix(format): carry the date-order preference to every numeric date

2026-09-05 17:06:34 +02:00

url-safety.test.ts

fix(security): reject a same-origin next path that re-resolves protocol-relative

2026-07-17 17:30:04 +02:00