Marc-André Bombeck d902125371 feat(account): tell admins about a refused erasure, and what undo leaves revoked ...

When the grace window ends for an account that has become the last
active guardian of a managed profile, the purge job refuses to erase it
and the account stays locked. Until now only the worker error log said
so. Every admin now gets one localized notification naming the account
and the ways out (another guardian, deleting the profile, or undoing
the deletion). An audit row on the account records that it was reported,
so the hourly retries stay quiet; a deletion undone and asked for again
is reported afresh.

The undo confirmation in the admin users list now says that sign-in
works again but API tokens, share links and trusted devices stay revoked
and have to be set up again (for a managed profile: its share links and
tokens).

2026-10-25 14:28:15 +01:00

..

browser

test(measurements): drive the measurement form in a real browser

2026-10-23 13:07:29 +02:00

durations

refactor(settings): remove the preview-feature opt-ins

2026-10-25 00:44:15 +02:00

fixtures

fix(medications): let a manager end a course and serve End only to who may press it

2026-10-25 00:26:55 +02:00

integration

feat(account): tell admins about a refused erasure, and what undo leaves revoked

2026-10-25 14:28:15 +01:00

kit

fix(analytics): cut every summary window on the request's clock

2026-10-24 12:14:33 +02:00

property

ci: fail the mutation floors step, and scale nightly property runs by a factor

2026-10-22 19:04:20 +02:00

quarantine

test: a flaky-test quarantine with an expiry the guard enforces

2026-10-22 05:33:09 +02:00

support

test: fail a test whose code caught and logged a missing mock export

2026-10-22 23:15:43 +02:00

unit-projects.ts

ci: shard both suites by measured duration and split the unit suite

2026-10-22 05:39:35 +02:00