Marc-André Bombeck a8b0365ca5 fix(auth): carry a generated secret in the session cookie, not the row id ...

The cookie was the Session row's cuid. cuid is built for collision-
resistant identity across distributed writers, not for unguessability —
it encodes a millisecond timestamp and a process-local counter and never
touches a CSPRNG. A session cookie is a bearer credential and has to be
unguessable, so it now carries 32 random bytes and only the HMAC of that
value is stored, matching how api_tokens and refresh_tokens already hold
their secrets.

Compatibility is passive, and deliberately so. A backfill cannot help:
the cookie already sitting in a browser is the cuid, and nothing we
generate server-side can be pushed into it — backfilling would sign
everyone out at deploy. Upgrading a row in place on first use loses to
the parallel requests a single page load fires: each mints its own
secret, one write wins, and the losers cannot re-emit the winner's
secret because only a hash is stored, so the browser can end up holding
a value the row does not honour. Instead, rows minted before the column
keep a NULL token_hash and stay resolvable by id, and are denied the
sliding-expiry extension so they drain within the 30-day session
lifetime. Every login from this release forward is on a secret at once,
and an id stops authenticating the moment its row holds one.

Note for operators: API_TOKEN_HMAC_KEY now also keys session cookies, so
rotating it signs browser sessions out as well as invalidating tokens.
It is already Core-required, so no deployment gains a new prerequisite.

2026-07-19 11:40:56 +02:00

..

0001_init

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0002_roles_and_settings

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0003_add_missing_columns

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0004_add_audit_log_location

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0005_notification_system

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0006_medication_notifications_enabled

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0007_medication_paused_at

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0008_app_settings_bugreport_github

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0009_app_settings_api_global

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0010_app_settings_monitoring

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0011_app_settings_web_push_vapid

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0012_app_settings_reminder_thresholds

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0013_medication_snoozed_until

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0014_add_moodlog_integration

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0015_add_reminder_phase_tracking

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0016_telegram_scheduled_deletions

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0017_add_data_backups

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0018_add_user_achievements

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0019_add_rate_limits

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0020_codex_oauth_admin_ai

feat(db): add Codex OAuth tokens and admin AI settings, remove openaiKeyEncrypted

2026-04-06 00:42:46 +02:00

0021_v1_2_personalization_feedback_glucose

release(v1.2): i18n, thresholds, glucose, dashboard customization, feedback, multi-provider AI (#77)

2026-04-18 22:20:12 +02:00

0022_body_composition_metrics

audit(v1.3.3): SpO2 + body-composition + 14 CRITICAL/HIGH security/correctness fixes (#121)

2026-05-08 01:05:56 +02:00

0023_ios_adapters_idempotency_devices

chore(db): migration 0023 — idempotency_keys, devices, healthkit user columns

2026-05-03 21:52:57 +02:00

0024_oxygen_saturation

audit(v1.3.3): SpO2 + body-composition + 14 CRITICAL/HIGH security/correctness fixes (#121)

2026-05-08 01:05:56 +02:00

0025_refresh_tokens

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

0025_user_locale_drift_fix

fix(db): backfill the users.locale column as a migration (#140)

2026-05-08 14:29:44 +02:00

0026_user_ai_openai_key

feat(settings): KI-provider — OpenAI key field, model preset dropdown, gated OAuth

2026-05-08 21:36:36 +02:00

0027_bug_report_enabled_toggle

feat(admin): bug-report toggle, unify "Trennen" button styling

2026-05-08 21:45:18 +02:00

0028_notification_channel_reliability

fix(notifications): auto-disable channels on persistent hard rejects (410, etc.)

2026-05-09 21:01:45 +02:00

0029_integration_status

feat(integrations): connection-state + sync-error UI in Settings → Integrations

2026-05-09 21:04:04 +02:00

0030_onboarding_tour_completed

feat(db): User.onboardingTourCompleted flag

2026-05-09 21:14:00 +02:00

0031_user_last_report_practice_name

feat(doctor-report): practice name on cover page (persisted as user preference)

2026-05-09 21:36:47 +02:00

0032_host_metric

feat(db): HostMetric model for host-load sampling

2026-05-09 23:46:56 +02:00

0033_user_ai_provider_chain

feat(db): User.aiProviderChain for ordered fallback config

2026-05-10 00:20:12 +02:00

0034_recommendation_feedback

feat(db): RecommendationFeedback model with GDPR cascade + provider attribution

2026-05-10 01:25:57 +02:00

0035_coach_conversations_v1420

feat(coach): add CoachConversation, CoachMessage, CoachUsage models

2026-05-10 15:54:28 +02:00

0036_apple_health_measurement_types

chore(security): MED cluster — Coolify URL scrub + isCurrent device-id + SLEEP_DURATION migration note

2026-05-11 02:44:12 +02:00

0037_apns_device_columns

feat(schema): APNs device columns + dispatcher channel-type extension

2026-05-11 00:35:58 +02:00

0038_coach_prefs

feat(coach): per-user prompt-tuning surface (settings cog returns)

2026-05-11 01:35:45 +02:00

0039_medication_schedule_days_of_week

chore(schema): deploy medication_schedules.days_of_week column

2026-05-11 01:36:27 +02:00

0040_recommendation_feedback_target_type

feat(coach): per-message thumbs feedback + admin aggregate view

2026-05-11 01:51:27 +02:00

0041_apns_token_unique_partial

fix(devices): enforce global apnsToken uniqueness via partial index

2026-05-11 02:13:47 +02:00

0042_coach_feedback_message_ref

fix(coach): feedback references coach_messages, drops plaintext column

2026-05-11 02:38:17 +02:00

0043_per_user_timezone

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0044_mood_entry_tz_column

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0045_doctor_report_prefs

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0046_glp1_dose_history

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0047_medication_schedule_window_snake_case

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0048_user_source_priority

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0049_withings_full_metrics

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0050_withings_connection_scope

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0051_measurement_device_type

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0052_apple_health_enum_extensions

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0053_workout_and_route

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0054_personal_record

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0055_measurement_sleepstage_composite

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0056_medication_inventory_item

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0057_user_onboarding_step

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0058_user_research_mode

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0059_medication_side_effect

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0060_onboarding_step_not_null

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

0061_audit_log_carrier

chore(release): v1.4.27

2026-05-15 22:59:10 +02:00

0062_v1430_sync_mode_foundation

chore(release): v1.4.30

2026-05-16 12:37:55 +02:00

0063_mood_entry_note_column

chore(release): v1.4.30

2026-05-16 12:37:55 +02:00

0064_v1430_measurement_type_additions

chore(release): v1.4.30

2026-05-16 12:37:55 +02:00

0065_v1431_assistant_feature_flags

chore(release): v1.4.31

2026-05-16 14:19:57 +02:00

0066_v1434_import_jobs

v1.4.34 — apple-health import + reliability + web-freeze

2026-05-16 21:25:26 +02:00

0067_v1434_measurement_rollups

v1.4.35 — persistent measurement rollups + partial read-swap

2026-05-17 09:55:33 +02:00

0068_v1436_insights_exclude_metrics

v1.4.36 — perf, charts, AI payload trim, UX punch

2026-05-17 13:22:51 +02:00

0069_v054_mood_reminder

feat(notifications): APNs category + MOOD_REMINDER event for iOS v0.5.4 (#190)

2026-05-17 23:08:17 +02:00

0070_v1439_mood_rollups

chore(release): v1.4.39 — mood, medication-compliance, and cumulative-sum rollup tiers

2026-05-21 07:39:10 +02:00

0071_v1439_medication_compliance_rollups

chore(release): v1.4.39 — mood, medication-compliance, and cumulative-sum rollup tiers

2026-05-21 07:39:10 +02:00

0072_v1439_rollup_sum_value

chore(release): v1.4.39 — mood, medication-compliance, and cumulative-sum rollup tiers

2026-05-21 07:39:10 +02:00

0073_v1439_medication_intake_unique_per_source

chore(release): v1.4.39.4 — dashboard symmetry for daily-schedule intake projection

2026-05-21 11:20:24 +02:00

0074_v1440_consent_receipts

chore(release): v1.4.40 — comprehensive Critical+High architecture closure plus iOS PB30 enablement

2026-05-21 12:48:02 +02:00

0075_v1443_integration_park

chore(release): v1.4.45 — analytics 9 s perf fix + audit-marathon closure + v1.4.44 hotfix merged

2026-05-21 23:13:21 +02:00

0076_v1447_withings_oauth_state

chore(release): v1.4.47 — audit-backlog closure + drag-to-reorder + Coach disable + OAuth nonce ledger

2026-05-22 09:18:52 +02:00

0077_v1447_drop_legacy_consecutive_failures

chore(release): v1.4.47 — audit-backlog closure + drag-to-reorder + Coach disable + OAuth nonce ledger

2026-05-22 09:18:52 +02:00

0078_v1447_user_disable_coach

chore(release): v1.4.47 — audit-backlog closure + drag-to-reorder + Coach disable + OAuth nonce ledger

2026-05-22 09:18:52 +02:00

0079_v1449_user_notification_prefs

chore(release): v1.4.49 — audit-backlog closure + server reminder suppression + diagnostic endpoint + analytics cold-path fix

2026-05-23 12:51:41 +02:00

0080_v1449_push_attempts

chore(release): v1.4.49 — audit-backlog closure + server reminder suppression + diagnostic endpoint + analytics cold-path fix

2026-05-23 12:51:41 +02:00

0081_v15_medication_scheduling

feat(medications): v1.5 scheduling fields + backfill migration

2026-05-28 07:52:11 +02:00

0082_v154_clinical_category_diabetes_antibiotic

feat(meds): extend MedicationCategory with diabetes and antibiotic

2026-05-28 19:33:11 +02:00

0083_v155_ios_measurement_types

fix(measurements): wire the six deferred Apple Health identifiers

2026-05-28 22:32:18 +02:00

0084_v155_user_insights_layout

feat(insights): server-persist insights tile order + visibility

2026-05-28 22:32:40 +02:00

0085_v155_user_avatar

feat(avatar): self-hosted avatar storage replacing the Gravatar leak

2026-05-28 22:39:20 +02:00

0086_v155_ios_walking_step_length_speed

fix(measurements): wire walking step length and walking speed

2026-05-28 23:38:21 +02:00

0087_v156_step_consolidation

chore(release): v1.5.6

2026-05-29 22:07:10 +02:00

0088_v160_delivery_form

chore(release): v1.6.0

2026-05-30 00:10:12 +02:00

0091_v170_med_flags_and_device_delivery

chore(release): v1.7.0

2026-05-31 14:36:17 +02:00

0092_v170_schedule_types

chore(release): v1.7.0

2026-05-31 14:36:17 +02:00

0093_v170_profile_identity_fields

chore(release): v1.7.0

2026-05-31 14:36:17 +02:00

0094_v170_user_unit_preference

chore(release): v1.7.0

2026-05-31 14:36:17 +02:00

0095_v170_reminder_message_time_of_day

chore(release): v1.7.0

2026-05-31 14:36:17 +02:00

0096_v170_measurement_sync_keyset_index

chore(release): v1.7.0

2026-05-31 14:36:17 +02:00

0097_v170_mood_intake_sync

chore(release): v1.7.0

2026-05-31 14:36:17 +02:00

0098_app_settings_global_toggles_drift_fix

fix(seed): repair demo seed against the current schema

2026-06-01 17:31:45 +02:00

0099_v185_medication_injection_tracking

feat(medications): make injection-site tracking and rotation real

2026-06-01 20:25:34 +02:00

0100_v185_user_global_excluded_injection_sites

feat(medications): make injection-site tracking and rotation real

2026-06-01 20:25:34 +02:00

0101_v185_mood_tag_taxonomy

feat(mood): structured tag taxonomy + note capture and timeline

2026-06-01 20:25:42 +02:00

0102_v186_user_insurer_ik_number

feat(profile): capture the insurer IK number

2026-06-01 23:24:10 +02:00

0103_v190_medication_drug_codes

feat(medications): add optional ATC + RxNorm codes to the medication row

2026-06-02 16:45:23 +02:00

0104_v1100_additive_healthkit_metrics

feat(healthkit): ingest seven additive HealthKit signals end-to-end

2026-06-02 22:02:50 +02:00

0105_v1100_categorical_event_rows

feat(healthkit): add a categorical device-event row class

2026-06-02 22:07:28 +02:00

0106_v1100_computed_scores

docs: document the wellness-summary report section and correct the computed-scores note

2026-06-02 23:43:22 +02:00

0107_v1100_workout_hr_series

feat(workouts): add a route-independent per-workout heart-rate series

2026-06-02 22:02:46 +02:00

0108_v1100_dense_intraday_retention

feat(measurements): add a bounded dense intra-day retention tier for HRV/HR

2026-06-02 22:49:43 +02:00

0109_v1103_strain_trimp_cache

feat(insights): anchor STRAIN to the user's own training load

2026-06-03 19:31:16 +02:00

0110_v1110_clinician_share_links

feat(db): add ClinicianShareLink model (migration 0110)

2026-06-04 00:49:31 +02:00

0111_v1110_whoop_integration

feat(measurements): add WHOOP source, native score types, and source-priority ladders

2026-06-04 00:49:31 +02:00

0112_v1110_provider_health_ledger

feat(ai): durable provider-health ledger and credential-expired surfacing

2026-06-04 00:50:13 +02:00

0113_v1110_insight_narratives

feat(insights): period-narrative summary on the overview

2026-06-04 01:21:42 +02:00

0114_v1110_coach_conversation_summary

feat(coach): add encrypted conversation-summary columns (migration 0114)

2026-06-04 03:38:19 +02:00

0115_v1111_source_aware_rollups

feat(rollups): make measurement rollups source-aware (migration 0115)

2026-06-04 09:29:49 +02:00

0116_v1111_coach_facts

feat(coach): scaffold conversation-summary + facts storage

2026-06-04 10:11:19 +02:00

0117_v1120_fitbit_integration

feat(fitbit): add the Fitbit connection data model and FITBIT measurement source

2026-06-04 21:02:10 +02:00

0118_v1120_mood_tag_hobbies_nutrition

feat(mood): add hobbies and nutrition tag categories, persist bulk tagKeys

2026-06-04 22:36:58 +02:00

0119_v1120_mood_rated_factors

fix(mood): assert tag-link entry ownership and guard mood migrations with IF NOT EXISTS

2026-06-05 01:05:47 +02:00

0120_v1120_mood_factor_family

feat(mood): seed a rated family factor in the mood catalog

2026-06-05 01:07:27 +02:00

0121_v1121_partial_unique_live_rows

fix(db): live-row partial unique for intake re-take, mood external-id dedup key, perf indexes

2026-06-05 03:01:36 +02:00

0122_v1121_mood_external_id

fix(db): live-row partial unique for intake re-take, mood external-id dedup key, perf indexes

2026-06-05 03:01:36 +02:00

0123_v1121_perf_indexes

fix(db): live-row partial unique for intake re-take, mood external-id dedup key, perf indexes

2026-06-05 03:01:36 +02:00

0124_v1122_whoop_connect_ticket

feat(whoop): native-scheme connect redirect and Bearer connect ticket

2026-06-05 08:10:13 +02:00

0125_v1128_whoop_extra_metrics

feat(measurements): add average/max heart rate + sleep disturbance types

2026-06-05 14:45:58 +02:00

0126_v1129_mood_catalog_revision

feat(mood): revise factor + tag catalog (migration 0126)

2026-06-05 15:28:47 +02:00

0127_v1130_custom_mood_tags

chore(release): v1.13.0 — per-user custom mood tags + catalogue hide

2026-06-05 20:50:05 +02:00

0128_v1150_cycle_core

feat(cycle): add cycle-tracking schema foundation

2026-06-06 08:19:32 +02:00

0129_v1150_cycle_symptom_taxonomy

feat(cycle): add cycle-tracking schema foundation

2026-06-06 08:19:32 +02:00

0130_v1150_cycle_prediction

feat(cycle): add cycle-tracking schema foundation

2026-06-06 08:19:32 +02:00

0131_v1150_cycle_sensitive_encryption

fix(cycle): honour the sensitive-data encryption toggle + harden the write path

2026-06-06 11:49:23 +02:00

0132_v1150_cycle_enable_flag

feat(cycle): add cycle-tracking API surface + offline sync

2026-06-06 08:57:12 +02:00

0133_v1150_cycle_symptom_severity

feat(cycle): single-day read endpoint, symptom severity, and a richer log-day sheet

2026-06-06 12:39:28 +02:00

0134_v1151_cycle_custom_symptom_category

feat(cycle): user-defined custom symptoms

2026-06-06 16:54:43 +02:00

0135_v1159_intake_auto_missed

fix(medications): count forgotten doses as missed, not skipped

2026-06-07 13:26:41 +02:00

0136_v11513_source_filter_indexes

feat(api): add source filter to measurement and mood lists

2026-06-07 19:23:59 +02:00

0137_v11518_dose_windows

feat(medications): persist a per-dose configurable intake window

2026-06-08 18:29:05 +02:00

0138_v11520_time_format

feat(settings): a time-format preference and one home for insight pills

2026-06-10 13:34:46 +02:00

0139_v11520_intake_attribution_source

feat(coach,auth): self-context for the assistant, invite links, proactive nudges

2026-06-10 15:40:48 +02:00

0140_v11520_user_health_profile

feat(coach,auth): self-context for the assistant, invite links, proactive nudges

2026-06-10 15:40:48 +02:00

0141_v11520_invite_tokens

feat(coach,auth): self-context for the assistant, invite links, proactive nudges

2026-06-10 15:40:48 +02:00

0142_v1160_invite_redemptions

feat(coach,admin): finish the self-context and invite surfaces end to end

2026-06-10 16:18:48 +02:00

0143_v1160_self_context_fields

feat(coach,admin): finish the self-context and invite surfaces end to end

2026-06-10 16:18:48 +02:00

0144_v1163_schedule_revisions

feat(medications): schedules remember their history

2026-06-10 22:21:44 +02:00

0145_v1164_dose_taken

feat(medications,coach,insights): record the dose you actually took

2026-06-11 00:10:01 +02:00

0146_v1165_schedule_revision_source

feat(medications,admin): the schedule's history is visible and invites count their uses

2026-06-11 11:45:58 +02:00

0147_v1166_schedule_revision_supersede

feat(medications,coach,admin,perf): era corrections, a truthful weekly status and one card language everywhere

2026-06-11 13:57:15 +02:00

0148_v1168_insight_snapshot_hash

perf(insights): regenerate texts only when the underlying data changed

2026-06-11 21:17:05 +02:00

0149_v11610_inventory_units

fix(medications): every taken dose moves the stock, in units that match the product

2026-06-12 17:42:31 +02:00

0150_v11610_medication_list_layout

feat(medications): a sortable table view with an order you choose

2026-06-12 18:10:21 +02:00

0151_v11611_medication_low_stock_stamp

feat(medications): low-stock notifications with a runway threshold

2026-06-12 21:04:09 +02:00

0152_v1170_mood_tag_groups

feat(mood): tags get groups, icons and a home of their own

2026-06-12 22:03:01 +02:00

0153_v11611_medication_as_needed

feat(medications): as-needed medications log without a schedule

2026-06-12 22:56:03 +02:00

0154_v11612_fractional_units_per_dose

feat(medications): fractional dosing via decimal units per dose (#316)

2026-06-13 16:07:50 +02:00

0155_v11613_mood_tag_curation

fix(mood): deactivate the sleep-quality factor in the curated catalog

2026-06-14 10:29:22 +02:00

0156_v1170_cycle_temp_excluded

feat(cycle): exclude disturbed temperatures from the symptothermal engine

2026-06-14 15:04:25 +02:00

0157_v1170_cycle_secondary_symptom

feat(cycle): choose cervix as the symptothermal secondary symptom

2026-06-14 15:23:26 +02:00

0158_v11616_whoop_per_resource_cursor

Add per-resource cursors, fetch-by-id, and full backfill to WHOOP sync

2026-06-14 17:19:09 +02:00

0159_v11616_consent_active_unique

Harden consent receipts and document iOS series + ai-provider contract

2026-06-14 17:42:00 +02:00

0160_v1170_new_measurement_sources

Drop unused polar refresh-token column

2026-06-14 21:23:56 +02:00

0161_v1170_reorder_lead_days

Make migration 0161 re-runnable with IF NOT EXISTS

2026-06-14 20:58:49 +02:00

0162_v1171_creds_reminders_labs

fix(migrations): reference the mapped measurement_type enum in the reminders table

2026-06-15 01:49:28 +02:00

0163_v1171_sleep_timeline_backfill

chore(migrations): renumber sleep-timeline backfill to 0163 for monotonic order

2026-06-14 23:20:54 +02:00

0164_v1171_onboarding_goals

chore(migrations): renumber onboarding-goals to 0164 for monotonic order

2026-06-14 23:22:52 +02:00

0165_v1171_oura_coverage

feat(measurements): add Sleep Score and body-temperature deviation types

2026-06-15 00:09:33 +02:00

0166_v1171_polar_recovery_strain

feat(measurements): add ANS_CHARGE and CARDIO_LOAD measurement types

2026-06-15 00:07:30 +02:00

0167_module_enable_disable

feat(modules): add module_preferences_json disabled-allowlist column

2026-06-15 20:53:46 +02:00

0168_operator_module_availability

feat(modules): add operator-level server-wide module availability

2026-06-15 22:44:35 +02:00

0169_v1181_reminder_engine_fields

feat(schema): add the v1.18.1 data foundation

2026-06-16 20:36:13 +02:00

0170_v1181_biomarker_catalog

fix(vorsorge,coach): align reminders + coach chrome with the gold standard

2026-06-16 23:11:08 +02:00

0171_v1181_illness_episode

fix(vorsorge,coach): align reminders + coach chrome with the gold standard

2026-06-16 23:11:08 +02:00

0172_v1181_coach_reminder_unique

fix(vorsorge,coach): align reminders + coach chrome with the gold standard

2026-06-16 23:11:08 +02:00

0173_v1186_tour_progress

feat(onboarding): add resumable module-tour progress field + API

2026-06-18 19:27:28 +02:00

0174_v1186_diabetes_opt_in

feat(glucose): add a diabetes opt-in preference

2026-06-18 20:17:13 +02:00

0175_v1186_disclaimer_ack

feat(onboarding): one-time medical-disclaimer acknowledgment

2026-06-18 21:37:13 +02:00

0176_v1186_coach_last_seen

fix(migrations): renumber coach last-seen migration to 0176

2026-06-18 22:05:17 +02:00

0177_v1186_coach_message_role_index

fix(coach): cap proactive nudges by the persisted conversation, not push success

2026-06-18 22:41:47 +02:00

0178_v1187_session_expiry_indexes

perf(db): index session and challenge expiry columns

2026-06-19 20:52:31 +02:00

0179_v1187_briefing_reroll_date

chore(db): renumber the briefing-reroll migration to 0179

2026-06-19 21:25:22 +02:00

0180_v1187_share_link_passphrase

chore(db): renumber the share-link passphrase migration to 0180

2026-06-19 22:07:46 +02:00

0181_v1189_qualitative_lab_results

feat(labs): record qualitative lab results

2026-06-20 11:17:43 +02:00

0182_v1189_coach_message_token_usage

feat(coach): surface per-turn token usage on the chat stream

2026-06-20 11:58:58 +02:00

0183_v11810_measurements_live_covering_idx

perf(measurements): cover soft-delete reads and cap the all-time live scan

2026-06-20 16:52:19 +02:00

0184_v11810_labs_local_ocr

feat(labs): add local-OCR text mode for image-blind AI providers

2026-06-20 16:50:06 +02:00

0185_v1190_ecg_waveform

feat(withings): capture the full ECG waveform, not just the AFib verdict

2026-06-21 10:22:29 +02:00

0186_v1190_oura_resilience

feat(oura): capture daily resilience as an ordinal RESILIENCE metric

2026-06-21 10:44:15 +02:00

0187_v1190_telegram_prompt_context

chore(db): make the 0187 telegram-prompt-context migration rerun-safe

2026-06-21 21:06:17 +02:00

0188_v1192_hr_bucket_min_max

feat(measurements): add per-bucket heart-rate min/max to the hourly contract

2026-06-21 21:06:09 +02:00

0189_v1192_telegram_chat_unique_and_source

feat(telegram): unique chat binding and numeric measurement capture

2026-06-21 21:06:42 +02:00

0190_v1200_rollup_regression_accumulators

feat(rollups): store per-bucket regression accumulators

2026-06-22 07:01:42 +02:00

0191_v1200_fitbit_pkce_verifier

feat(fitbit): add PKCE code_verifier column to the OAuth-state ledger

2026-06-22 07:20:41 +02:00

0192_v1210_date_format

feat(profile): add date-format preference column

2026-06-26 12:05:49 +02:00

0193_v1210_rollup_x_rescale

fix(rollups): rebase regression x-axis to a fixed origin for exact accumulators

2026-06-26 13:24:30 +02:00

0194_v1213_coach_plan

feat(coach): goal / if-then plan memory + locale-keyed dashboard snapshot

2026-06-27 01:25:35 +02:00

0195_biomarker_hidden

feat(labs): add a hidden flag to the biomarker catalog

2026-06-27 12:48:48 +02:00

0196_coach_reminder

feat(coach): add the CoachReminder episodic-memory model

2026-06-27 13:37:50 +02:00

0197_coach_plan_outcome

fix(db): target the users table in the v1.22 AI-settings migration

2026-06-27 15:46:03 +02:00

0198_v122_ai_settings

fix(db): target the users table in the v1.22 AI-settings migration

2026-06-27 15:46:03 +02:00

0199_v123_mfa_columns

feat(security): add second-factor schema and encrypt free-text health notes at rest

2026-06-27 19:33:10 +02:00

0200_v123_mfa_tables

feat(security): add second-factor schema and encrypt free-text health notes at rest

2026-06-27 19:33:10 +02:00

0201_v123_note_encryption

feat(security): add second-factor schema and encrypt free-text health notes at rest

2026-06-27 19:33:10 +02:00

0202_v123_totp_laststep

feat(auth): add TOTP second factor and recovery codes

2026-06-27 19:56:16 +02:00

0203_v123_known_devices

feat(security): alert on a new-device sign-in

2026-06-27 20:34:31 +02:00

0204_v123_trusted_devices

feat(auth): allow trusting a device to skip the second factor

2026-06-27 21:49:39 +02:00

0205_v123_drop_bugreport

chore: remove the bug-report integration

2026-06-27 20:37:35 +02:00

0206_mcp_phase3_oauth_connection

merge: bring the MCP server onto the v1.23 base

2026-06-28 00:52:04 +02:00

0207_mcp_phase5_write_surface

merge: bring the MCP server onto the v1.23 base

2026-06-28 00:52:04 +02:00

0208_v125_med_notes_encryption

feat(security): encrypt medication free-text notes at rest + password-change MFA step-up

2026-06-28 03:05:10 +02:00

0210_v125_measurement_useractivity_index

perf: bound heavy-tenant memory on feature, consolidation, backup and auth paths

2026-06-28 03:07:15 +02:00

0211_v125_med_pause_era

fix(insights): correct medication compliance and per-user insight bucketing

2026-06-28 03:28:37 +02:00

0213_v125_mental_health_assessment

feat(mental-health): opt-in PHQ-9 / GAD-7 screeners with item-9 crisis signposting

2026-06-28 15:47:39 +02:00

0214_v125_physical_clinical_measurements

feat(signals): register the v1.25 clinical signals through the registry

2026-06-28 15:47:25 +02:00

0215_v125_allergies

feat(records): add allergy + family-history data model

2026-06-28 16:02:54 +02:00

0216_v125_family_history

feat(records): add allergy + family-history data model

2026-06-28 16:02:54 +02:00

0217_v125_environmental_context

feat(environment): add environmental-context data model (migration 0217)

2026-06-28 16:58:13 +02:00

0218_v125_inbound_documents

feat(documents): add inbound clinical-document data model (migration 0218)

2026-06-28 16:56:54 +02:00

0219_v125_env_home_since

feat(environment): add home effective-from and reserve a DEVICE location source

2026-06-28 17:35:45 +02:00

0220_v125_extracted_facts_encrypt

fix(documents): encrypt staged extracted-fact PHI at rest

2026-06-28 18:12:51 +02:00

0221_v125_mental_health_external_id_dedup

feat(mental-health): accept client source + externalId with durable dedup

2026-06-28 19:06:21 +02:00

0222_v125_documents_library

fix(insights): route alert-card compliance through the cadence-aware engine + deep data cleanups

2026-06-29 00:37:39 +02:00

0223_custom_metrics

chore(release): v1.25.9 — custom metrics

2026-06-30 08:59:44 +02:00

0224_v127_google_health

feat(google-health): add the connection data model and migration

2026-07-03 14:13:06 +02:00

0225_v1276_mental_wellbeing_scores

feat(mental-health): make the screener score rows server-owned COMPUTED measurements

2026-07-05 14:54:17 +02:00

0226_v1279_screening_scores

feat(mental-health): add the WHO-5 and SCI screening instruments

2026-07-05 20:33:29 +02:00

0227_document_vault

feat(documents): add the vault data model (migration 0227)

2026-07-07 11:04:31 +02:00

0228_document_content_index

feat(documents): add DocumentContentIndex table for blind content search

2026-07-07 18:08:12 +02:00

0229_share_link_documents

feat(share-links): add frozen document-membership join (migration 0229)

2026-07-07 18:34:58 +02:00

0230_document_chat

feat(documents): add document_id chat discriminator + verbatim index column (mig 0230)

2026-07-09 02:34:06 +02:00

0231_documents_auto_ai_read

feat(documents): add per-user automatic AI reading opt-in

2026-07-09 10:32:59 +02:00

0232_medication_efficacy_targets

feat(medications): server-authoritative medication-efficacy view + API

2026-07-09 12:45:50 +02:00

0233_strava_integration

feat(strava): add per-user BYO-OAuth workout source + Garmin indirect-path docs

2026-07-09 21:25:25 +02:00

0234_drop_lab_ocr_provider

feat(labs-ocr): read PDFs on the configured provider, retire the separate scan provider

2026-07-09 23:29:06 +02:00

0235_admin_central_codex

feat(ai): add operator-shared central Codex connection with per-user opt-in

2026-07-10 00:10:56 +02:00

0236_document_thumbnails

feat(documents): preview thumbnails in the vault overview

2026-07-10 01:15:32 +02:00

0237_share_link_document_only

chore(release): v1.28.16 — documents-only shares stay documents-only

2026-07-10 02:08:03 +02:00

0238_google_health_sleep_repaired

chore(release): v1.28.21 — sleep history heals itself; plateau context; sync diagnostics

2026-07-10 21:23:00 +02:00

0239_apple_health_medications

chore(release): v1.28.23 — sleep disagreement on the dashboard; Apple Health medication groundwork

2026-07-11 00:18:23 +02:00

0240_oidc_identity

feat(auth): pin OIDC accounts to their (issuer, sub) identity

2026-07-14 11:43:53 +02:00

0241_nutrient_intake_days

chore(release): v1.28.34 — nutrient intake lands as quiet context (server side)

2026-07-14 13:10:47 +02:00

0242_import_job_heartbeat

chore(release): v1.28.36 — re-importing after a failed Apple Health import actually retries

2026-07-15 22:07:25 +02:00

0243_perf_boot_discovery_partial_indexes

chore(release): v1.28.46 — server performance on large instances

2026-07-16 06:47:36 +02:00

0244_morning_digest_refresh_marker

feat(daily): finalise the morning digest when last night's sleep lands

2026-07-16 22:57:27 +02:00

0245_coach_conversation_documents

feat(coach): attach multiple documents to a conversation

2026-07-16 23:32:28 +02:00

0247_backfill_whoop_workout_sport

fix(db): backfill non-canonical WHOOP workout sport_type values

2026-07-17 14:28:56 +02:00

0248_dismissed_priority_items

feat(daily): let the Today rail dismiss milestone / ECG / tension cards

2026-07-17 14:29:07 +02:00

0249_nutrient_intake_day_source

feat(nutrients): source-aware day totals; manual water write path

2026-07-17 16:08:39 +02:00

0250_inbound_document_summary

feat(documents): persist an auto summary for uploaded documents

2026-07-17 17:46:28 +02:00

0251_backfill_strava_workout_sport

fix(strava): normalise raw sport labels to canonical WorkoutSportType

2026-07-17 23:12:12 +02:00

0252_oidc_native_handoff

feat(auth): native OIDC SSO session handoff for the iOS client

2026-07-18 16:50:56 +02:00

0253_perf_medication_intake_indexes

perf(medications): index the dashboard meds-today read shapes

2026-07-18 18:04:26 +02:00

0254_document_summary_state

Tell the four document-summary outcomes apart

2026-07-19 10:01:06 +02:00

0254_session_token_hash

fix(auth): carry a generated secret in the session cookie, not the row id

2026-07-19 11:40:56 +02:00

migration_lock.toml

feat(integrations): connection-state + sync-error UI in Settings → Integrations

2026-05-09 21:04:04 +02:00