Marc-André Bombeck d6571c4e9c feat(symptoms): add person-defined symptoms and timestamped occurrences ...

A symptom of one's own ("aura", "headache") is a definition with an
encrypted name and an icon from the cycle custom-symptom allowlist; each
occurrence carries a time, a 0-10 intensity (the pain score's scale), an
optional encrypted note and an optional link to one of the record's open
illness episodes. Both ride the illness module: every route answers
illness.disabled when it is off.

- Migration 0369 (idempotent): symptom_definitions and symptom_events,
  intensity CHECK 0-10, episode link ON DELETE SET NULL.
- /api/symptoms/definitions{,/[id]} and /api/symptoms/events{,/[id]}:
  eight active definitions per record (a hidden one frees its slot,
  showing it again re-checks), hide or purge, events create/list/edit/
  delete, a new link must name an open episode of the same record
  (422 symptoms.episode.notOpen). Error group symptoms.*.
- Sharing: reads at READ, logging an occurrence at WRITE, defining and
  editing at MANAGE; C1/C3/C4 audit details; frozen lists, the handler
  matrix and the activity verbs updated.
- Both encrypted columns registered and rotated; both models in the wipe
  plan; both carried at both backup ends with occurrences nested in their
  definition, plaintext in a portable file and ciphertext in a recovery
  file, and a link to an episode the file lacks dropped and named
  (symptomEpisodeReference).
- OpenAPI regenerated.

2026-10-03 21:13:45 +02:00

..

api

fix(auth): refuse a sign-in over plain http before it spends a factor (#1097)

2026-10-03 18:21:19 +02:00

helpers

fix(cycle): read basal temperature and the unit-bearing chart titles in the reader's units

2026-10-01 13:23:17 +02:00

account-payload-consumer-guard.test.ts

feat(ai): publish capabilities on the account payload

2026-09-24 07:49:14 +02:00

acting-account-boundary-guard.test.ts

fix(02-12.1): check record context before an idempotent replay

2026-08-06 18:54:20 +02:00

admin-data-wipe-completeness.test.ts

fix(admin): wipe every account's data, not nine tables

2026-08-08 01:05:31 +02:00

ai-call-timeout-guard.test.ts

test(ai): guard that every model call runs under the response-timeout setting

2026-10-02 23:03:45 +02:00

ai-capability-surface-guard.test.ts

refactor(web): retire the feature-flag reader for the capability map

2026-09-24 11:05:59 +02:00

ai-consent-enforcement-guard.test.ts

refactor(ai): define the operator-held providers once

2026-09-26 20:27:53 +02:00

ai-egress-capability-guard.test.ts

feat(documents): read documents and lab scans in the background

2026-10-03 18:18:56 +02:00

ai-gateway-csp-unchanged.test.ts

test(ai): pin the gateway provider's isolation and host policy

2026-07-26 22:27:48 +02:00

ai-input-invalidation-guard.test.ts

fix(ai): refresh the account's AI answer after every change to its inputs

2026-09-24 12:11:14 +02:00

api-errors-leaf-guard.test.ts

Keep the leaf-guard regexes inside the compiler's target

2026-08-14 02:34:40 +02:00

api-handler-bypass-route.test.ts

fix(http): stop reading request bodies of up to 512 MB before authentication

2026-09-26 16:31:03 +02:00

apple-health-unit-audit-guard.test.ts

test: ban a length rescale, not every literal thousand

2026-09-10 00:37:22 +02:00

background-task-settle-guard.test.ts

fix(test): stop the score suites from talking to a real database

2026-09-09 22:39:39 +02:00

backup-plan-classification.test.ts

fix(backup): carry each medication's category through backup and restore

2026-09-27 14:17:42 +02:00

backup-readers-stream-guard.test.ts

feat(backup): run a restore as a background job with progress

2026-09-25 07:39:06 +02:00

bearer-scope-enforcement-guard.test.ts

feat(tokens): mint a workouts:write token for headless workout ingest

2026-09-30 22:21:46 +02:00

client-random-id-guard.test.ts

Make uploads and every other write work over plain HTTP

2026-09-05 16:22:39 +02:00

coach-stream-ios-compat.test.ts

feat(coach): wire contract for steps, result tables, method, follow-ups and clarification

2026-09-27 10:33:13 +02:00

coach-stream-lifecycle-guard.test.ts

coach: reopen an interrupted conversation with a visible retry

2026-08-13 06:16:45 +02:00

coach-usage-owner-columns-guard.test.ts

test: give every scanning guard a floor on what it found

2026-10-01 10:52:48 +02:00

column-reader-audit-matcher.test.ts

fix(audit): teach the column sweep to tell a filter from a write

2026-09-03 05:09:00 +02:00

compose-env-whitelist-guard.test.ts

test(coach): register the live scenario run with the egress and env guards

2026-09-27 13:11:52 +02:00

container-scripts-ship-guard.test.ts

fix(image): ship the operator scripts the runbooks run in the container

2026-09-26 15:26:03 +02:00

copy-matches-behaviour-guard.test.ts

fix(settings): say precisely what withdrawing AI consent stops and deletes

2026-09-24 12:20:14 +02:00

customize-shortcut-guard.test.ts

fix(sharing): show a guardian the controls the routes accept (#939)

2026-09-09 19:42:27 +02:00

cycle-verdict-guard-defeat.test.ts

Prove the verdict reaches a client and that nothing recomputes it

2026-08-01 10:45:24 +02:00

cycle-verdict-single-decider-guard.test.ts

test(guards): sweep the directories the structural guards were skipping

2026-08-02 16:21:19 +02:00

daily-reads-refetch-guard.test.ts

Pair every daily-read invalidation with its inactive refetch

2026-08-13 18:48:10 +02:00

dashboard-summary-read-plan-guard.test.ts

test: pin the dashboard summary read shapes against a plan regression

2026-09-03 01:47:52 +02:00

dashboard-tile-eligibility-bucket-guard.test.ts

test: guard tile eligibility against a missing null arm

2026-09-09 23:03:38 +02:00

data-wipe-completeness.test.ts

Hygiene: name the FHIR immunization gap, cache the digest offline, freeze the no-FK pair, document the pin bump

2026-08-14 09:56:45 +02:00

database-pin-is-watched.test.ts

chore(deps): keep PostgreSQL majors out of the update stream

2026-09-16 13:05:14 +02:00

date-order-explicit-formatter-guard.test.ts

fix(tz): one default zone, and the user's own calendar where Berlin was hard-coded

2026-09-26 16:23:14 +02:00

dense-measurement-read-guard.test.ts

test(guard): police dense measurement reads in request handlers and raw SQL

2026-10-01 09:02:23 +02:00

dependency-override-lockstep-guard.test.ts

test: read every spelling of a dependency override pin

2026-09-03 01:42:16 +02:00

derived-response-consumer-guard.test.ts

feat(ai): serve Insights and Coach data whatever AI says

2026-09-24 09:19:36 +02:00

derived-wellness-value-contract.test.ts

feat(insights): let a caller choose the derived-metric window

2026-08-24 02:00:55 +02:00

destructive-control-guard.test.ts

fix(workouts): report manual saves through the outcome module and register the delete

2026-10-02 21:31:25 +02:00

discovery-matrix-guard.test.ts

fix(insights): scan one discovery matrix from every correlation surface

2026-08-23 17:38:14 +02:00

display-transform-rounding-guard.test.ts

fix(units): keep converted values on the rounding helpers

2026-10-01 09:17:44 +02:00

doctor-report-control-gating-guard.test.ts

feat(doctor-report): add a surgical history section

2026-09-25 08:11:42 +02:00

document-sources-owner-only-guard.test.ts

docs(api): publish the document picker routes as cookie-only, and freeze them as owner-only

2026-09-26 13:13:51 +02:00

domain-write-support-guard.test.ts

docs(sharing): say that the writable-section list is existential, not per verb

2026-09-10 11:16:55 +02:00

dynamic-key-exhaustiveness.test.ts

fix(i18n): make the Korean locale actually work end to end

2026-08-26 20:00:44 +09:00

e2e-conditional-skip-guard.test.ts

test(e2e): run the delegated-writes journey and fail on silent skips

2026-09-27 04:48:08 +02:00

e2e-measurement-gating-guard.test.ts

test: allowlist the consent journey's origin-only goto

2026-09-15 14:39:09 +02:00

e2e-route-cleanup-guard.test.ts

test(guards): sweep the directories the structural guards were skipping

2026-08-02 16:21:19 +02:00

e2e-shared-session-guard.test.ts

test(e2e): give the account-switching journey its own session

2026-08-02 16:49:47 +02:00

encounter-reminder-exclusion.test.ts

fix(reminders): keep an open check-up due after its reminder

2026-09-26 10:01:27 +02:00

env-empty-is-unset-guard.test.ts

refactor(integrations): read the OAuth redirect URIs through the env helpers

2026-09-26 17:08:47 +02:00

error-code-catalogue.test.ts

fix(api): read every module a route reaches when listing the error codes

2026-09-10 08:31:44 +02:00

external-id-stability-guard.test.ts

test(guards): sweep the directories the structural guards were skipping

2026-08-02 16:21:19 +02:00

factor-verification-surface-guard.test.ts

fix(auth): ask for a fresh proof before the record or a credential to it leaves

2026-09-26 19:54:38 +02:00

feature-flags-mock-guard.test.ts

test(ai): refuse feature-flags mocks that leave the loader's reader out

2026-09-24 10:52:04 +02:00

greeting-hour-single-source.test.ts

fix(dashboard): give the time-of-day greeting one clock

2026-09-03 05:49:18 +02:00

guard-floor-guard.test.ts

test: fail any structural guard that cannot fail on an empty sweep

2026-10-01 10:52:48 +02:00

guardian-notification-payloads.test.ts

feat(02-11): secure guardian notification delivery

2026-08-06 05:44:41 +02:00

guardian-notification-policy.test.ts

feat: add guardian notification fanout

2026-08-06 05:23:38 +02:00

health-score-basis-additive-contract.test.ts

test(score): turn the eligibility pins from a floor into a tier

2026-08-30 14:16:33 +02:00

i18n-call-site-coverage.test.ts

test(guards): sweep the directories the structural guards were skipping

2026-08-02 16:21:19 +02:00

i18n-drift-guard.test.ts

test(guards): sweep the directories the structural guards were skipping

2026-08-02 16:21:19 +02:00

i18n-english-leak-guard.test.ts

i18n(measurements): say how a duration entry was read

2026-10-03 18:35:26 +02:00

i18n-reference-matcher.test.ts

fix(i18n): stop one key template from whitelisting a whole namespace

2026-07-25 16:23:58 +02:00

i18n-reverse-coverage.test.ts

feat(insights): serve status notes from the new table, only while available

2026-09-24 09:06:22 +02:00

idempotency-contract-publication.test.ts

fix(backup): refuse a stored copy that will not open with 422

2026-09-10 05:25:30 +02:00

insights-unit-literal-guard.test.ts

feat(i18n): add Korean as a seventh end-to-end locale

2026-08-26 16:42:45 +09:00

intake-toast-single-decision.test.ts

Close the delegated-access gaps the release audit left open

2026-08-04 14:55:32 +02:00

integration-callback-url-guard.test.ts

Resolve OAuth callback URLs on the server for integration cards

2026-09-01 21:00:12 +02:00

integration-failure-response-consumer-guard.test.ts

test(api): guard response field consumers

2026-07-28 21:05:42 +02:00

integration-truncate-deadlock-retry.test.ts

test(integration): retry a truncate that lost a deadlock

2026-09-11 12:38:31 +02:00

inventory-write-isolation.test.ts

test(guards): sweep the directories the structural guards were skipping

2026-08-02 16:21:19 +02:00

job-locale-resolution-guard.test.ts

Resolve job-side locale through the operator default

2026-09-02 10:44:04 +02:00

job-queue-runtime-guard.test.ts

test(guard): declare every queue's runtime and hold long ones to it

2026-10-01 09:24:15 +02:00

malformed-json-status-guard.test.ts

fix(api): answer an unparseable body with 400 everywhere

2026-09-10 07:26:32 +02:00

manage-activity-inventory.test.ts

feat(i18n): add Korean as a seventh end-to-end locale

2026-08-26 16:42:45 +09:00

managed-profile-contract.test.ts

docs: publish the last-Guardian refusal where it is actually raised

2026-08-07 05:43:06 +02:00

managed-record-navigation.test.tsx

fix(settings): list record content only where the grant manages it

2026-09-13 14:49:56 +02:00

measurement-backup-completeness.test.ts

fix(insights): scope generation guard to prompt fields, clear cache on restore

2026-07-28 21:11:43 +02:00

measurement-reference-index-guard.test.ts

test: give every scanning guard a floor on what it found

2026-10-01 10:52:48 +02:00

measurement-source-label-coverage.test.ts

Fail the suite when a source enum member has no label

2026-09-02 12:08:38 +02:00

measurement-write-plausibility-guard.test.ts

Merge branch 'feat/restore-background-job' into release/v1.39.1

2026-09-25 08:10:06 +02:00

measurement-write-tail-guard.test.ts

fix(measurements): re-warm status assessments from every measurement write

2026-09-26 16:07:51 +02:00

medication-intake-tracking-guard.test.ts

fix(medications): leave record-only doses out of the nudge, the status model and the BP correlation

2026-09-25 10:03:08 +02:00

medications-efficacy-verb-guard.test.ts

test(guards): sweep the directories the structural guards were skipping

2026-08-02 16:21:19 +02:00

migration-number-uniqueness.test.ts

test(guards): sweep the directories the structural guards were skipping

2026-08-02 16:21:19 +02:00

module-gate-record-scoped.test.ts

fix(modules): drop the last three fail-open gates and discover the class instead of naming it

2026-09-10 12:14:14 +02:00

mood-backup-completeness.test.ts

feat(backup): carry the mood day context through export and restore

2026-08-08 07:14:04 +02:00

mood-prediction-write-surface-guard.test.ts

docs(mood): state the validation's real leak boundary, drop the unused weekday floor, correct two comments

2026-08-08 15:30:38 +02:00

moodlog-removal-guard.test.ts

feat(i18n): add Korean as a seventh end-to-end locale

2026-08-26 16:42:45 +09:00

narrated-locale-guard-defeat.test.ts

Close four ways around the locale guard

2026-07-31 11:08:06 +02:00

narrated-locale-required-guard.test.ts

Pin the Coach read strip's language, and keep the default out

2026-07-31 09:07:50 +02:00

notification-delivery-identity.test.ts

fix(02-11): release guardian lock before provider egress

2026-08-06 13:46:42 +02:00

oidc-native-error-reasons-documented.test.ts

docs(openapi): list every OIDC error reason the native leg can receive

2026-09-26 19:59:11 +02:00

openapi-account-sharing-components.test.ts

docs(api): publish the sharing request bodies as named schemas

2026-08-07 08:10:48 +02:00

openapi-route-coverage-guard.test.ts

feat(encryption): back up the key, and refuse to serve when it cannot open the database

2026-10-03 18:06:28 +02:00

openapi-security-declaration-guard.test.ts

feat(api): publish retirement in the contract, the capability read, and the coverage guard

2026-08-23 14:06:52 +02:00

openapi-sharing-denial.test.ts

fix(modules): drop the last three fail-open gates and discover the class instead of naming it

2026-09-10 12:14:14 +02:00

password-breach-check-switch.test.ts

feat(config): let the operator turn off the breach and update checks

2026-09-26 15:33:34 +02:00

prefetch-page-caching-guard.test.ts

Enrol the two new prefetching pages in their structural guards

2026-08-13 19:11:57 +02:00

prisma-enum-mapping-guard.test.ts

fix(environment): name the enum type the database actually has

2026-07-26 14:37:57 +02:00

profile-email-rate-limit-contract.test.ts

Narrow a spent email budget to the field, and record both refusals

2026-09-11 14:36:58 +02:00

profile-rejection-surface-guard.test.ts

docs: comments name what the code does, not how it was built

2026-09-11 11:03:04 +02:00

proxy-body-limit.test.ts

fix(http): stop reading request bodies of up to 512 MB before authentication

2026-09-26 16:31:03 +02:00

proxy-csp-blob-preview.test.ts

Let the app CSP frame and render its own blob previews

2026-08-13 12:08:59 +02:00

proxy-csp-hsts-hardening.test.ts

chore: scrub instance details and personal data from committed artefacts

2026-06-10 11:00:26 +02:00

proxy-demo-mode-allowlist.test.ts

fix(demo): the shared demo account takes no free text and no new record

2026-09-11 10:57:42 +02:00

proxy-document-serve-framing.test.ts

feat(share-links): attach documents and serve them through the share token

2026-07-07 18:43:13 +02:00

proxy-early-exit-headers.test.ts

fix(http): say when proxy headers go unread, and trust X-Real-IP only at one hop

2026-09-26 22:45:51 +02:00

proxy-invite-public.test.ts

fix(auth): the invite landing redirects at the edge, no shell, no race

2026-09-11 09:09:46 +02:00

proxy-local-ocr-csp.test.ts

fix(http): stop reading request bodies of up to 512 MB before authentication

2026-09-26 16:31:03 +02:00

proxy-mcp-authorize-csp.test.ts

fix(mcp): let the consent screen return to the connecting client

2026-09-15 14:06:27 +02:00

proxy-onboarding-redirect.test.ts

fix(release): harden v1.31 arrival contracts

2026-07-20 00:40:20 +02:00

proxy-page-marker.test.ts

fix(pwa): let the service worker leave an origin HealthLog left

2026-09-13 14:00:11 +02:00

proxy-page-no-store.test.ts

fix(proxy): pin no-store on every session-gated page

2026-07-19 10:59:40 +02:00

proxy-privacy-public.test.ts

chore(release): v1.4.26 — privacy policy for App Store submission

2026-05-15 07:35:05 +02:00

proxy-relative-redirect-guard.test.ts

Stop redirecting to the address the process bound to

2026-08-22 10:55:40 +02:00

proxy-retired-routes.test.ts

feat(api): answer a retired route with 410 rather than a bare 404

2026-08-23 14:06:37 +02:00

proxy-well-known-public.test.ts

v1.4.33 — polish and reliability

2026-05-16 19:46:43 +02:00

proxy-worker-health.test.ts

fix(runtime): harden process startup and health

2026-07-21 00:05:03 +02:00

published-env-reaches-the-container.test.ts

feat(encryption): back up the key, and refuse to serve when it cannot open the database

2026-10-03 18:06:28 +02:00

recent-proof-surface-guard.test.ts

feat(tokens): mint a workouts:write token for headless workout ingest

2026-09-30 22:21:46 +02:00

record-fence-headerless-transport-guard.test.ts

test(sharing): read loadDocument as a headerless navigation sink

2026-09-24 10:57:45 +02:00

record-session-fence-acceptance-map.test.ts

test(02-12.1): prove Vary on the serving path, not only the contents

2026-08-06 23:04:29 +02:00

record-session-fence-compat.test.ts

feat(02-12.1): carry and verify the record context from the browser

2026-08-06 19:10:02 +02:00

record-session-fence-guard.test.ts

docs(02-12.1): narrow two overstated claims

2026-08-06 20:48:50 +02:00

record-settings-configuration.test.ts

feat: gate a switched browser on the record's modules, not the actor's

2026-09-10 00:02:03 +02:00

record-settings-contract.test.ts

fix(settings): a fresh managed connection reads as connected again

2026-09-11 10:54:56 +02:00

record-settings-route-guard.test.ts

fix: complete managed record settings

2026-08-06 03:40:13 +02:00

record-settings-ui.test.tsx

feat(i18n): add Korean as a seventh end-to-end locale

2026-08-26 16:42:45 +09:00

record-write-rate-limit-contract.test.ts

fix(api): give the shared write ceiling a code a client can branch on

2026-09-10 08:39:09 +02:00

report-selection-egress-guard.test.ts

test(guards): sweep the directories the structural guards were skipping

2026-08-02 16:21:19 +02:00

resolved-field-consumer-guard.test.ts

test(guard): freeze client reads of server-resolved fields

2026-10-01 10:09:28 +02:00

restore-lock-consolidation-guard.test.ts

fix(restore): order the restore and the consolidation passes by one lock

2026-09-28 00:34:11 +02:00

rotation-walk-keyset-guard.test.ts

fix(crypto): page the key-rotation walks by id, not by cursor

2026-09-25 09:17:25 +02:00

service-worker-version-anchor.test.ts

fix(sw): re-anchor the fallback cache version and gate it against the release

2026-07-30 11:55:16 +02:00

service-worker.test.ts

fix(pwa): keep a subscribed worker registered behind a gateway

2026-09-13 14:45:31 +02:00

session-surface-guard.test.ts

fix(auth): the refusal code joins the published catalogue

2026-09-11 09:51:32 +02:00

share-view-leaf-render-guard.test.ts

fix(medications): scope a snooze to its slot and key report adherence by id

2026-09-26 15:38:20 +02:00

shared-record-navigation.test.tsx

feat: let the record's module map filter its own navigation

2026-09-10 01:09:50 +02:00

sharing-accessibility-states.test.tsx

test: wire every release journey to the tests that carry it

2026-08-07 06:11:36 +02:00

sharing-boundary-copy.test.ts

fix(i18n): make the Korean locale actually work end to end

2026-08-26 20:00:44 +09:00

sharing-legacy-client-contract.test.ts

refactor(sharing): retire the coarse "may this person add" answer

2026-09-10 11:02:32 +02:00

sharing-native-client-contract.test.ts

test: enforce sharing client step-up

2026-08-07 05:11:02 +02:00

sharing-record-fence-contract.test.ts

test: enforce sharing client step-up

2026-08-07 05:11:02 +02:00

sharing-recoverable-errors.test.tsx

test(sharing): follow the invite form's reset through the re-proof flow

2026-09-27 00:14:32 +02:00

sharing-scope-contract.test.ts

feat: define scoped sharing levels

2026-08-05 23:58:18 +02:00

sharing-surface-guard.test.ts

feat(symptoms): add person-defined symptoms and timestamped occurrences

2026-10-03 21:13:45 +02:00

step-up-elevation-guard.test.ts

fix(auth): ask for a fresh proof before the record or a credential to it leaves

2026-09-26 19:54:38 +02:00

success-affordance-guard.test.ts

feat(coach): result table with copy for a spreadsheet or as text

2026-09-27 11:54:31 +02:00

sw-security-hardening.test.ts

test(01-02): add red PWA cache isolation contracts

2026-07-29 13:37:20 +02:00

timezone-explicit-formatter-guard.test.ts

fix(dates): show a stated calendar date as that date east of UTC+12

2026-10-03 18:44:06 +02:00

tz-day-paths-harness.test.ts

test(tz): run core day paths with the host at both edges of the clock

2026-10-01 10:02:50 +02:00

unguarded-correlation-guard.test.ts

fix(insights): gate the mood correlation cards on significance

2026-09-03 02:07:29 +02:00

unit-preference-display-guard.test.ts

fix(glucose): state band edges in the reader's glucose unit

2026-10-01 22:07:07 +02:00

unit-suite-browser-install-guard.test.ts

ci: give every job that runs the unit suite a browser

2026-09-09 22:47:31 +02:00

user-column-backup-classification.test.ts

feat(backup): classify every User column and carry the account settings

2026-10-01 13:04:36 +02:00

utc-day-key-allowlist-guard.test.ts

feat(lint): refuse UTC day keys outside the time zone module

2026-10-01 09:59:57 +02:00

v137-wave-zero-fixtures.test.ts

feat(symptoms): add person-defined symptoms and timestamped occurrences

2026-10-03 21:13:45 +02:00

v1341-locale-parity.test.ts

refactor(web): retire the feature-flag reader for the capability map

2026-09-24 11:05:59 +02:00

v1391-additive-contract.test.ts

test(contract): pin the v1.39.1 wire changes as additive for shipped clients

2026-09-25 07:39:07 +02:00

vorsorge-due-bucket-single-home-guard.test.ts

fix(checkups): say "overdue since yesterday" instead of "overdue by 1 days"

2026-09-26 10:01:04 +02:00

weight-tile-direction-guard.test.ts

feat(weight): judge the weight trend against the stored target

2026-09-24 09:22:50 +02:00

workout-canonical-identity-guard.test.ts

test(guards): sweep the directories the structural guards were skipping

2026-08-02 16:21:19 +02:00

workout-sport-provenance-guard.test.ts

feat(backup): run a restore as a background job with progress

2026-09-25 07:39:06 +02:00

written-outcome-response-consumer-guard.test.ts

feat(labs): keep the reference range a report prints beside a value

2026-08-07 21:40:41 +02:00

zod-refusal-issue-list-guard.test.ts

fix(api): answer the unknown-leaf refusal with a sentence and a code

2026-09-10 08:35:35 +02:00