Marc-André Bombeck fe17d06572 Give mood-tag and cycle-symptom edits an audit row ...

Editing a custom mood tag or group, and editing a custom cycle symptom,
wrote nothing to the audit ledger, while their delete siblings did. Two
of these paths destroy data: a custom mood tag or cycle symptom purged
with ?purge=true cascades its entry links and unpicks historical
entries, so a destruction left no trace of who ran it or when.

Every vocabulary-mutating verb now records an audit row: create, edit,
and delete for both custom tags and custom groups, and edit for a custom
cycle symptom. Encrypted labels are never logged; the row carries only
the field names touched and the resulting active state. The two
display-only writes on this surface, hiding a catalogue tag and
reordering the layout, stay ledger-free by design and say so inline,
since a per-user display preference is not a health-data write and a row
on every drag-to-reorder would be noise rather than a record.

2026-08-09 14:57:12 +02:00

..

analytics

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

insights

test(modules): pin every module-gated route with a gate-inventory invariant

2026-06-15 23:38:37 +02:00

linked-context

fix(mood): the linked day read crosses sections, so it declares record

2026-08-08 09:58:22 +02:00

prognosis

docs(mood): state the validation's real leak boundary, drop the unused weekday floor, correct two comments

2026-08-08 15:30:38 +02:00

tags

Give mood-tag and cycle-symptom edits an audit row

2026-08-09 14:57:12 +02:00