mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-09 04:50:59 +00:00
Marc-André Bombeck
9f7947a729
Surface the Google Health integration to the operator and document the setup honestly. - A settings card matching the other integration cards: the BYO Google client id and secret form, connect and disconnect, a manual sync, and a distinct reconnect prompt when the connection needs fresh consent. - Register the card in the connections panel and extend the integration key, the docs-link provider, and the query-key factory. - Translations for the card copy across all six locales. The copy states plainly that this reads Fitbit, Pixel Watch, and Fitbit Air through the user's Google account, that it succeeds the Fitbit connection Google retires in September 2026, that the operator registers their own Google client, that stress and readiness are not available, and that a periodic reconnect may be needed. - Rewrite the Google Health runbook into the real setup: a Google Cloud project, the Health API, an OAuth consent screen kept in Testing, a Web Server client, the callback redirect, the four Restricted scopes, the hundred-test-user ceiling, and the reconnect caveat. - Regenerate the OpenAPI contract for the new measurement source.
src/
Application source. HealthLog is a Next.js 16 App Router project (output: "standalone", React 19, TypeScript strict). The path alias @/* resolves to this directory. Everything a request touches lives under here; the layout below follows the request flow rather than alphabetical order.
Request flow
client → src/proxy.ts → src/app/<route>/route.ts → src/lib/api-handler.ts → handler body → src/lib/api-response.ts → client
proxy.ts— the HTTP edge (Next.js 16's renamedmiddleware). Public-path allowlist, demo-mode mutation block, server-side onboarding redirect, worker-only refusal,x-request-id+ CSP nonce generation, every security header.app/— App Router pages (RSC by default) and API routes. Every API route wraps its handler inapiHandler. Seeapp/README.md.lib/— the server/runtime toolkit:apiHandler, auth, crypto, rollups, AI, notifications, pg-boss jobs, integrations, rate limiting. Seelib/README.md.components/— React components (shadcn/ui new-york, kebab-case files). Seecomponents/README.md.
Other directories
hooks/— shared React hooks (use-prefix, kebab-case).types/— shared TypeScript declarations.generated/prisma/— the generated Prisma client (do not edit; regenerated byprisma generate). Imported as@/generated/prisma.instrumentation.ts— Next.js startup hook; boots the pg-boss worker registry and boot-time backfill queues.__tests__/— cross-cutting unit tests; most tests live in__tests__/folders next to the code they cover.
Conventions
See ../CLAUDE.md for the full set. The load-bearing ones: RSC by default ("use client" only when a hook/state/browser API needs it); every API route wraps apiHandler and parses its body with Zod safeParse; userId is always narrowed from session or Bearer, never accepted as a body field; TanStack Query keys come only from src/lib/query-keys/; outbound HTTP goes through src/lib/safe-fetch.ts.