Marc-André Bombeck e9886ee554 fix(security): let the app frame its own blob previews ...

A blob: document inherits the policy of the page that minted it, and
WebKit applies the inherited frame-ancestors to the blob frame's own
parent. With 'none', Safari on macOS and iOS refused the PDF preview
iframe and showed an empty box; Chromium does not apply it there and
rendered the preview. 'self' keeps every foreign origin out.

Refs #1311

2026-11-05 00:52:02 +01:00

..

api

refactor(db): drop the runtime schema mirror

2026-11-03 20:32:35 +01:00

baselines

fix(security): let the app frame its own blob previews

2026-11-05 00:52:02 +01:00

helpers

test(jobs): hold every model-bound queue to bounded, backed-off retries

2026-10-24 21:22:08 +02:00

account-deletion-enumeration-guard.test.ts

refactor: keep the size, cast and error-code guards where they were

2026-10-25 18:06:32 +01:00

account-payload-consumer-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

acting-account-boundary-guard.test.ts

refactor(auth): move the request guards out of api-handler into lib/auth/guards

2026-10-23 10:54:23 +02:00

admin-data-wipe-completeness.test.ts

fix(admin): wipe every account's data, not nine tables

2026-08-08 01:05:31 +02:00

aging-fixture-dates-guard.test.ts

test(series): follow the hour bucket into the route mock and the dated-fixture guard

2026-11-02 20:14:18 +01:00

ai-call-timeout-guard.test.ts

test(ai): find the wire clients that dial through the request budget

2026-10-25 00:17:10 +02:00

ai-capability-surface-guard.test.ts

refactor(documents): split the document detail sheet

2026-10-23 13:11:20 +02:00

ai-client-abort-guard.test.ts

fix(insights): let slow-model status notes and AI jobs outlast their calls

2026-10-24 11:00:32 +02:00

ai-consent-enforcement-guard.test.ts

refactor(ai): define the operator-held providers once

2026-09-26 20:27:53 +02:00

ai-egress-capability-guard.test.ts

fix(documents): read a long document through the lab scan's read core

2026-10-24 10:34:31 +02:00

ai-gateway-csp-unchanged.test.ts

test(ai): pin the gateway provider's isolation and host policy

2026-07-26 22:27:48 +02:00

ai-input-invalidation-guard.test.ts

feat(settings): nine groups, module pages and one switch per state

2026-10-21 19:43:02 +02:00

ai-job-expiry-guard.test.ts

refactor(ai): keep one name for one completion's ceiling

2026-10-25 04:50:25 +01:00

ai-job-retry-bound-guard.test.ts

test(jobs): hold every model-bound queue to bounded, backed-off retries

2026-10-24 21:22:08 +02:00

ai-reasoning-admin-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

ai-reasoning-effort-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

ai-request-hops-guard.test.ts

fix(ai): bound one completion call to two requests

2026-10-25 00:11:42 +02:00

analysis-depth-no-ai-guard.test.ts

feat(workouts): show fitness, fatigue and form from the stored training impulse

2026-10-21 22:13:28 +02:00

api-errors-leaf-guard.test.ts

Keep the leaf-guard regexes inside the compiler's target

2026-08-14 02:34:40 +02:00

api-handler-bypass-route.test.ts

fix(http): stop reading request bodies of up to 512 MB before authentication

2026-09-26 16:31:03 +02:00

apple-health-unit-audit-guard.test.ts

refactor(measurements): move the batch ingest out of its route

2026-10-23 11:30:46 +02:00

audit-write-path-guard.test.ts

fix(activity): word the refusals that now reach a delegate's feed

2026-10-23 17:19:21 +02:00

auth-guards-entry-guard.test.ts

refactor(auth): move the request guards out of api-handler into lib/auth/guards

2026-10-23 10:54:23 +02:00

backfill-preserves-updated-at-guard.test.ts

feat(garmin): sync Garmin Connect through the Personal API

2026-11-04 10:14:10 +01:00

background-reasoning-inventory.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

background-task-settle-guard.test.ts

fix(rollups): register read-path warm-ups with the background registry

2026-10-25 00:33:55 +02:00

backup-plan-classification.test.ts

test(guards): stop the slowest guards repeating their own work

2026-10-22 10:30:59 +02:00

backup-readers-stream-guard.test.ts

fix(backup): stream every large section of an uploaded backup

2026-10-25 12:25:15 +01:00

backup-schema-lazy-guard.test.ts

refactor(backup): give each domain its own slice of the payload schema

2026-10-22 08:02:14 +02:00

bearer-scope-enforcement-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

canvas-binary-hoist-guard.test.ts

build: run the image on the official Node 22 Debian slim image

2026-11-04 13:13:56 +01:00

client-bundle-server-import-guard.test.ts

fix(client): keep server modules out of the browser bundle

2026-10-20 06:49:17 +02:00

client-fetch-limit-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

client-poll-inventory-guard.test.ts

fix(insights): let slow-model status notes and AI jobs outlast their calls

2026-10-24 11:00:32 +02:00

client-random-id-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

client-route-zod-guard.test.ts

test(guards): read the source tree once per worker through a shared index

2026-10-22 10:30:50 +02:00

client-threshold-literal-guard.test.ts

test(guards): scan once in the threshold and timezone guards

2026-10-22 13:02:59 +02:00

coach-focus-ring-guard.test.ts

fix(coach): calm the answer column, its replies and its focus marks

2026-10-06 21:24:24 +02:00

coach-stream-ios-compat.test.ts

feat(coach): lay down the reasoning, trail and memory contract

2026-10-06 18:39:50 +02:00

coach-stream-lifecycle-guard.test.ts

feat(coach): move conversations into a collapsible right panel

2026-10-04 20:00:07 +02:00

coach-usage-owner-columns-guard.test.ts

test: give every scanning guard a floor on what it found

2026-10-01 10:52:48 +02:00

coach-voice-guard.test.ts

feat(i18n): register Brazilian Portuguese as a locale

2026-10-22 14:50:00 +02:00

column-reader-audit-matcher.test.ts

fix(audit): teach the column sweep to tell a filter from a write

2026-09-03 05:09:00 +02:00

compose-db-upgrade-guard.test.ts

fix(db): leave a Postgres 16 volume alone while the database runs on it

2026-10-25 16:45:19 +01:00

compose-env-whitelist-guard.test.ts

test(guards): read the source tree once per worker through a shared index

2026-10-22 10:30:50 +02:00

confirm-destructive-style-guard.test.ts

fix(ui): let ConfirmButton's dialog wear the destructive style

2026-10-21 12:02:13 +02:00

consent-grant-explicit-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

container-scripts-ship-guard.test.ts

feat(db): run the app as a role that cannot change the schema

2026-11-03 20:36:37 +01:00

contract-stub-inventory.test.ts

Merge branch 'v143/life' into release/v1.43.0

2026-10-16 03:39:40 +02:00

copy-matches-behaviour-guard.test.ts

test(i18n): give the per-locale copy guards their pt-BR vocabulary

2026-10-22 14:57:32 +02:00

correlation-single-implementation-guard.test.ts

test(guards): count fixed-path reads through readSourceText in the source-read ratchet

2026-10-22 19:08:15 +02:00

customize-shortcut-guard.test.ts

feat(settings): nine groups, module pages and one switch per state

2026-10-21 19:43:02 +02:00

cycle-verdict-guard-defeat.test.ts

Prove the verdict reaches a client and that nothing recomputes it

2026-08-01 10:45:24 +02:00

cycle-verdict-single-decider-guard.test.ts

test(guards): count fixed-path reads through readSourceText in the source-read ratchet

2026-10-22 19:08:15 +02:00

daily-reads-refetch-guard.test.ts

feat(garmin): sync Garmin Connect through the Personal API

2026-11-04 10:14:10 +01:00

dashboard-summary-read-plan-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

dashboard-tile-eligibility-bucket-guard.test.ts

refactor(dashboard): compose the page from a tile registry

2026-10-23 11:06:32 +02:00

data-wipe-completeness.test.ts

chore: strip planning tags from comments and enable the rule

2026-10-20 09:08:40 +02:00

database-pin-is-watched.test.ts

build: run the image on a Wolfi runner

2026-11-03 21:55:30 +01:00

date-order-explicit-formatter-guard.test.ts

refactor(checkups): split the checkups section into form, card and postpone sheet

2026-10-23 12:59:49 +02:00

datetime-helper-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

dawarich-backup-completeness.test.ts

feat(dawarich): fetch daily movement values from a Dawarich instance

2026-10-16 01:20:53 +02:00

dawarich-no-location-schema.test.ts

feat(dawarich): fetch daily movement values from a Dawarich instance

2026-10-16 01:20:53 +02:00

dense-measurement-read-guard.test.ts

Merge branch 'feat/v146-server-meds2' into feat/v146-server

2026-10-23 14:52:03 +02:00

dependency-override-lockstep-guard.test.ts

test: read every spelling of a dependency override pin

2026-09-03 01:42:16 +02:00

derived-response-consumer-guard.test.ts

refactor(validation): route every ISO instant through isoDateTime

2026-10-16 03:57:46 +02:00

derived-sleep-value-contract.test.ts

docs(openapi): publish the sleep score value

2026-10-19 18:56:06 +02:00

derived-wellness-value-contract.test.ts

Emit the strain device block on every wellness read

2026-10-08 18:45:01 +02:00

destructive-control-guard.test.ts

feat(garmin): sync Garmin Connect through the Personal API

2026-11-04 10:14:10 +01:00

detached-work-guard.test.ts

fix(rollups): register read-path warm-ups with the background registry

2026-10-25 00:33:55 +02:00

discovery-matrix-guard.test.ts

test(guards): read the source tree once per worker through a shared index

2026-10-22 10:30:50 +02:00

display-transform-rounding-guard.test.ts

refactor(dashboard): build tiles and charts from shared card builders

2026-10-23 11:14:47 +02:00

doctor-report-control-gating-guard.test.ts

feat(measurements): store resting energy as its own metric

2026-11-04 23:45:55 +01:00

document-sources-owner-only-guard.test.ts

docs(api): publish the document picker routes as cookie-only, and freeze them as owner-only

2026-09-26 13:13:51 +02:00

domain-write-support-guard.test.ts

docs(sharing): say that the writable-section list is existential, not per verb

2026-09-10 11:16:55 +02:00

dose-ledger-single-source-guard.test.ts

test(guards): strip comments through the shared scanner

2026-10-20 09:51:12 +02:00

dynamic-key-exhaustiveness.test.ts

fix(i18n): address the ru review — units, Cyrillic regexes, locale registry

2026-11-02 20:22:03 +00:00

e2e-conditional-skip-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

e2e-critical-no-api-stub-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

e2e-measurement-gating-guard.test.ts

test: allowlist the consent journey's origin-only goto

2026-09-15 14:39:09 +02:00

e2e-route-cleanup-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

e2e-shared-session-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

empty-state-ratchet.test.ts

test(ui): sharpen the page-title and empty-state guards

2026-10-20 16:45:11 +02:00

encounter-reminder-exclusion.test.ts

refactor(mcp): give every read tool a module of its own under mcp/tools

2026-10-23 10:49:40 +02:00

env-empty-is-unset-guard.test.ts

refactor(integrations): move every provider OAuth client onto one factory

2026-10-23 12:57:47 +02:00

environment-backup-completeness.test.ts

feat(db): add the v1.43 schema and drop the readable location columns

2026-10-15 21:48:57 +02:00

error-code-catalogue.test.ts

fix(api): read every module a route reaches when listing the error codes

2026-09-10 08:31:44 +02:00

error-display-helper-guard.test.ts

feat(web): show the error id on server failures and add the support info and report surfaces

2026-10-15 22:31:51 +02:00

error-level-discipline-guard.test.ts

feat(jobs): tell admins when a system job keeps failing

2026-10-29 09:54:43 +01:00

external-id-stability-guard.test.ts

Merge branch 'feat/v146-server-meds2' into feat/v146-server

2026-10-23 14:52:03 +02:00

external-source-token-link-guard.test.ts

feat(measurements): resolve each reading's Apple Health write-back

2026-10-23 19:27:52 +02:00

factor-verification-surface-guard.test.ts

fix(auth): ask for a fresh proof before the record or a credential to it leaves

2026-09-26 19:54:38 +02:00

fast-check-runs-factor.test.ts

ci: fail the mutation floors step, and scale nightly property runs by a factor

2026-10-22 19:04:20 +02:00

feature-flags-mock-guard.test.ts

test(ai): refuse feature-flags mocks that leave the loader's reader out

2026-09-24 10:52:04 +02:00

greeting-hour-single-source.test.ts

fix(dashboard): give the time-of-day greeting one clock

2026-09-03 05:49:18 +02:00

guard-dynamic-import-guard.test.ts

test(guards): load no module graph inside a guard's test body

2026-10-23 22:51:51 +02:00

guard-floor-guard.test.ts

feat(account): hold account deletion and data wipe for a grace window

2026-10-25 13:50:14 +01:00

guardian-notification-payloads.test.ts

feat(02-11): secure guardian notification delivery

2026-08-06 05:44:41 +02:00

guardian-notification-policy.test.ts

feat: add guardian notification fanout

2026-08-06 05:23:38 +02:00

health-score-basis-additive-contract.test.ts

test(score): turn the eligibility pins from a floor into a tier

2026-08-30 14:16:33 +02:00

healthcheck-boot-storm.test.ts

build: ship a wget for health checks written outside the image

2026-11-03 23:27:06 +01:00

home-assistant-room-climate-docs.test.ts

docs(home-assistant): one room, intervals that divide the hour, current keys

2026-10-21 22:00:41 +02:00

i18n-call-site-coverage.test.ts

test(guards): sweep the directories the structural guards were skipping

2026-08-02 16:21:19 +02:00

i18n-catalog-cache-key.test.ts

fix(i18n): key the catalog's cache by its content, not the release

2026-10-09 13:13:26 +02:00

i18n-drift-guard.test.ts

chore: strip planning tags from comments and enable the rule

2026-10-20 09:08:40 +02:00

i18n-english-leak-guard.test.ts

fix(garmin): read weigh-ins in both shapes, keep refused resources out of the way

2026-11-04 10:56:52 +01:00

i18n-no-dot-separator.test.ts

fix(i18n): address the ru review — units, Cyrillic regexes, locale registry

2026-11-02 20:22:03 +00:00

i18n-reference-matcher.test.ts

fix(i18n): stop one key template from whitelisting a whole namespace

2026-07-25 16:23:58 +02:00

i18n-reverse-coverage.test.ts

test(guards): stop the slowest guards repeating their own work

2026-10-22 10:30:59 +02:00

idempotency-contract-publication.test.ts

test(guards): read the source tree once per worker through a shared index

2026-10-22 10:30:50 +02:00

import-cycle-guard.test.ts

test(guards): freeze runtime import cycles and re-export-only modules

2026-10-22 04:29:57 +02:00

inlang-project-settings.test.ts

feat(i18n): let translators edit the catalogues in the browser with Fink

2026-10-22 15:03:16 +02:00

inline-action-guard.test.ts

feat(ui): InlineAction for small text actions, with a 44 px touch floor

2026-10-20 13:03:15 +02:00

insights-cached-text-access-guard.test.ts

test(guards): read the source tree once per worker through a shared index

2026-10-22 10:30:50 +02:00

insights-unit-literal-guard.test.ts

feat(i18n): register Brazilian Portuguese as a locale

2026-10-22 14:50:00 +02:00

intake-toast-single-decision.test.ts

refactor(medications): split the dose-history ledger into its hook, row and dialogs

2026-10-23 12:41:46 +02:00

integration-callback-url-guard.test.ts

Resolve OAuth callback URLs on the server for integration cards

2026-09-01 21:00:12 +02:00

integration-failure-response-consumer-guard.test.ts

feat(settings): one integration card for every connection

2026-10-15 15:06:03 +02:00

integration-truncate-deadlock-retry.test.ts

test(integration): run files in parallel, one cloned database per worker

2026-10-22 05:30:00 +02:00

inventory-write-isolation.test.ts

test(guards): sweep the directories the structural guards were skipping

2026-08-02 16:21:19 +02:00

job-fact-whole-number-guard.test.ts

fix(jobs): report the measurements bloat as whole percent, and keep finished runs finished

2026-10-22 21:43:08 +02:00

job-locale-resolution-guard.test.ts

Resolve job-side locale through the operator default

2026-09-02 10:44:04 +02:00

job-queue-runtime-guard.test.ts

fix(documents): keep document reads inside their job's expiry

2026-10-24 11:28:57 +02:00

job-retention-floor-guard.test.ts

feat(logging): give failed runs and caught failures their own error lines

2026-10-08 09:05:54 +02:00

json-import-openapi-parity.test.ts

feat(import): bring the account's own mood vocabulary along

2026-10-23 22:41:36 +02:00

key-mismatch-refusal-guard.test.ts

Refuse MCP and its OAuth endpoints while the encryption key does not match

2026-10-03 23:32:07 +02:00

labs-module-ai-gate-guard.test.ts

fix(labs): move document lab values filed under their confirmation day

2026-10-29 08:49:40 +01:00

latest-per-type-read-guard.test.ts

test(guards): read the source tree once per worker through a shared index

2026-10-22 10:30:50 +02:00

linear-fit-single-implementation-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

list-cap-reader-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

list-page-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

malformed-json-status-guard.test.ts

fix(api): answer an unparseable body with 400 everywhere

2026-09-10 07:26:32 +02:00

manage-activity-inventory.test.ts

test(medications): reach the actions of moved handler bodies in the activity inventory

2026-10-23 14:49:42 +02:00

managed-profile-contract.test.ts

feat(admin): let an admin delete another account through the grace window

2026-10-29 09:10:26 +01:00

managed-record-navigation.test.tsx

feat(settings): nine groups, module pages and one switch per state

2026-10-21 19:43:02 +02:00

measurement-backup-completeness.test.ts

refactor(backup): build the export from per-domain slices

2026-10-22 07:46:02 +02:00

measurement-reference-index-guard.test.ts

test: give every scanning guard a floor on what it found

2026-10-01 10:52:48 +02:00

measurement-source-label-coverage.test.ts

Fail the suite when a source enum member has no label

2026-09-02 12:08:38 +02:00

measurement-write-plausibility-guard.test.ts

feat(import): carry every field the app's own files write

2026-10-23 21:33:06 +02:00

measurement-write-tail-guard.test.ts

fix(garmin): read weigh-ins in both shapes, keep refused resources out of the way

2026-11-04 10:56:52 +01:00

medication-ingredient-backup-completeness.test.ts

refactor(backup): build the export from per-domain slices

2026-10-22 07:46:02 +02:00

medication-intake-tracking-guard.test.ts

fix(medications): give back the doses an End took when the End is undone

2026-10-25 00:37:35 +02:00

medication-read-order-guard.test.ts

fix(medications): return a medication's schedules in one order everywhere

2026-10-25 19:09:27 +01:00

medications-efficacy-verb-guard.test.ts

test(guards): sweep the directories the structural guards were skipping

2026-08-02 16:21:19 +02:00

memory-block-egress-guard.test.ts

test(guards): count fixed-path reads through readSourceText in the source-read ratchet

2026-10-22 19:08:15 +02:00

migration-add-column-idempotent.test.ts

fix(migrations): idempotent 0440, refill emptied insights cache, deploy note

2026-10-21 21:40:06 +02:00

migration-lock-timeout-guard.test.ts

fix(migrations): bound the lock wait of 0475 and 0480, and of every file after

2026-10-25 02:42:09 +01:00

migration-number-uniqueness.test.ts

test(guards): sweep the directories the structural guards were skipping

2026-08-02 16:21:19 +02:00

module-gate-record-scoped.test.ts

fix(modules): drop the last three fail-open gates and discover the class instead of naming it

2026-09-10 12:14:14 +02:00

mood-backup-completeness.test.ts

fix(backup): restore row stamps and carry sealed labels, course notes and marker context as ciphertext

2026-10-22 19:57:47 +02:00

mood-prediction-write-surface-guard.test.ts

docs(mood): state the validation's real leak boundary, drop the unused weekday floor, correct two comments

2026-08-08 15:30:38 +02:00

moodlog-removal-guard.test.ts

refactor(jobs): declare every queue in a typed registry and load handlers on first job

2026-10-23 12:36:09 +02:00

naive-timestamp-zone-shift-guard.test.ts

test(guards): read the source tree once per worker through a shared index

2026-10-22 10:30:50 +02:00

narrated-locale-guard-defeat.test.ts

Close four ways around the locale guard

2026-07-31 11:08:06 +02:00

narrated-locale-required-guard.test.ts

Pin the Coach read strip's language, and keep the default out

2026-07-31 09:07:50 +02:00

next-image-optimizer-guard.test.ts

test(guards): load no module graph inside a guard's test body

2026-10-23 22:51:51 +02:00

no-control-bytes-guard.test.ts

test(guards): read the source tree once per worker through a shared index

2026-10-22 10:30:50 +02:00

no-server-actions-guard.test.ts

fix(proxy): refuse Server Action calls the app never makes

2026-10-20 20:29:46 +02:00

notification-delivery-identity.test.ts

feat(account): hold account deletion and data wipe for a grace window

2026-10-25 13:50:14 +01:00

oauth-kit-guard.test.ts

refactor(integrations): move every provider OAuth client onto one factory

2026-10-23 12:57:47 +02:00

oidc-native-error-reasons-documented.test.ts

refactor(auth): move the SSO callback's account resolution and sign-in endings out of its route

2026-10-23 15:17:27 +02:00

openapi-account-sharing-components.test.ts

docs(api): publish the sharing request bodies as named schemas

2026-08-07 08:10:48 +02:00

openapi-route-coverage-guard.test.ts

feat(backup): say whether an account can take an erased account's copy

2026-10-29 20:11:08 +01:00

openapi-security-declaration-guard.test.ts

feat(api): publish the v1.43 contract with routes that answer 501 until filled

2026-10-15 21:49:02 +02:00

openapi-sharing-denial.test.ts

fix(modules): drop the last three fail-open gates and discover the class instead of naming it

2026-09-10 12:14:14 +02:00

page-header-h1-guard.test.ts

test(ui): sharpen the page-title and empty-state guards

2026-10-20 16:45:11 +02:00

page-walk-guard.test.ts

test: point guards at the split provider modules

2026-10-23 13:44:21 +02:00

password-breach-check-switch.test.ts

feat(config): let the operator turn off the breach and update checks

2026-09-26 15:33:34 +02:00

prefetch-page-caching-guard.test.ts

feat(insights): mood calendar and chart arrive together; add via the header plus

2026-10-08 16:45:49 +02:00

prisma-enum-mapping-guard.test.ts

fix(environment): name the enum type the database actually has

2026-07-26 14:37:57 +02:00

profile-email-rate-limit-contract.test.ts

Narrow a spent email budget to the field, and record both refusals

2026-09-11 14:36:58 +02:00

profile-rejection-surface-guard.test.ts

test(guards): read the source tree once per worker through a shared index

2026-10-22 10:30:50 +02:00

provider-ai-boundary-guard.test.ts

refactor(integrations): run one write step after every provider sync

2026-10-23 13:12:23 +02:00

provider-rounding-guard.test.ts

test(guards): derive the rounding guard's directories from the connection keys

2026-10-20 10:55:42 +02:00

proxy-body-limit.test.ts

fix(proxy): keep API paths ending in a file extension behind the proxy

2026-10-25 13:52:04 +01:00

proxy-claim-public.test.ts

feat(sharing): hand a managed profile over to the person it describes

2026-10-08 11:18:14 +02:00

proxy-csp-blob-preview.test.ts

fix(security): let the app frame its own blob previews

2026-11-05 00:52:02 +01:00

proxy-csp-hsts-hardening.test.ts

chore: scrub instance details and personal data from committed artefacts

2026-06-10 11:00:26 +02:00

proxy-demo-mode-allowlist.test.ts

chore: strip planning tags from comments and enable the rule

2026-10-20 09:08:40 +02:00

proxy-document-serve-framing.test.ts

fix(security): let the app frame its own blob previews

2026-11-05 00:52:02 +01:00

proxy-early-exit-headers.test.ts

fix(http): say when proxy headers go unread, and trust X-Real-IP only at one hop

2026-09-26 22:45:51 +02:00

proxy-invite-public.test.ts

fix(auth): the invite landing redirects at the edge, no shell, no race

2026-09-11 09:09:46 +02:00

proxy-local-ocr-csp.test.ts

fix(http): stop reading request bodies of up to 512 MB before authentication

2026-09-26 16:31:03 +02:00

proxy-mcp-authorize-csp.test.ts

fix(mcp): let the consent screen return to the connecting client

2026-09-15 14:06:27 +02:00

proxy-notification-action.test.ts

fix(notifications): log every refused notification answer

2026-10-14 18:57:06 +02:00

proxy-onboarding-redirect.test.ts

fix(auth): issue a Secure session cookie under the __Host- prefix

2026-10-25 17:44:31 +01:00

proxy-page-marker.test.ts

fix(pwa): let the service worker leave an origin HealthLog left

2026-09-13 14:00:11 +02:00

proxy-page-no-store.test.ts

fix(proxy): pin no-store on every session-gated page

2026-07-19 10:59:40 +02:00

proxy-privacy-public.test.ts

chore(release): v1.4.26 — privacy policy for App Store submission

2026-05-15 07:35:05 +02:00

proxy-relative-redirect-guard.test.ts

test(guards): load no module graph inside a guard's test body

2026-10-23 22:51:51 +02:00

proxy-retired-routes.test.ts

feat(api): answer a retired route with 410 rather than a bare 404

2026-08-23 14:06:37 +02:00

proxy-server-action.test.ts

fix(proxy): refuse Server Action calls the app never makes

2026-10-20 20:29:46 +02:00

proxy-well-known-public.test.ts

v1.4.33 — polish and reliability

2026-05-16 19:46:43 +02:00

proxy-worker-health.test.ts

fix(runtime): harden process startup and health

2026-07-21 00:05:03 +02:00

published-env-reaches-the-container.test.ts

Add ENCRYPTION_KEY_CHECK=warn as an escape hatch for the boot key check

2026-10-03 23:46:40 +02:00

pulse-day-mean-reader-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

pwa-mobile-shell-guard.test.ts

Merge remote-tracking branch 'origin/release/v1.46.0' into feat/v146-ui

2026-10-23 19:54:08 +02:00

query-client-server-gc-guard.test.ts

fix(ssr): keep a server render's query cache from outliving the request

2026-10-24 02:12:31 +02:00

query-error-error-prop-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

read-failure-markup-guard.test.ts

refactor(admin): split the backups section

2026-10-23 13:20:48 +02:00

read-over-post-guard.test.ts

fix(rate-limit): fail the shared write ceiling open and skip reads over POST

2026-10-20 16:09:28 +02:00

recent-proof-surface-guard.test.ts

feat(admin): let an admin delete another account through the grace window

2026-10-29 09:10:26 +01:00

record-fence-headerless-transport-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

record-session-fence-acceptance-map.test.ts

test(02-12.1): prove Vary on the serving path, not only the contents

2026-08-06 23:04:29 +02:00

record-session-fence-compat.test.ts

feat(02-12.1): carry and verify the record context from the browser

2026-08-06 19:10:02 +02:00

record-session-fence-guard.test.ts

refactor(auth): move the request guards out of api-handler into lib/auth/guards

2026-10-23 10:54:23 +02:00

record-settings-configuration.test.ts

feat: gate a switched browser on the record's modules, not the actor's

2026-09-10 00:02:03 +02:00

record-settings-contract.test.ts

feat(garmin): sync Garmin Connect through the Personal API

2026-11-04 10:14:10 +01:00

record-settings-route-guard.test.ts

feat(integrations): let a guardian connect a managed profile's providers

2026-10-21 19:49:07 +02:00

record-settings-ui.test.tsx

refactor(settings): split the managed record settings forms

2026-10-23 13:13:55 +02:00

record-write-rate-limit-contract.test.ts

fix(api): meter every authenticated write where the caller is resolved

2026-10-20 13:53:54 +02:00

recurrence-course-anchor-guard.test.ts

fix(compliance): carry endedAt into the streak and per-window timelines

2026-10-25 00:26:55 +02:00

relation-links-backup-completeness.test.ts

feat(backup): carry the five relation link tables both ways

2026-10-15 23:57:27 +02:00

report-selection-egress-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

request-id-validation.test.ts

fix(http): adopt an incoming x-request-id only when it is a plain token

2026-10-15 20:24:01 +02:00

resolved-field-consumer-guard.test.ts

Merge branch 'release/v1.46.0' into feat/v146-ui

2026-10-23 16:44:26 +02:00

restore-lock-consolidation-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

retired-route-links-guard.test.ts

fix(security): keep the theme boot script a literal and drop regex tag stripping

2026-10-09 00:41:56 +02:00

rotation-walk-keyset-guard.test.ts

fix(crypto): page the key-rotation walks by id, not by cursor

2026-09-25 09:17:25 +02:00

route-body-parse-ratchet.test.ts

refactor(api): read route bodies through parseJsonBody

2026-10-23 11:12:39 +02:00

runtime-package-pins.test.ts

fix(image): take scheme-less health-check URLs, anchor the compose pin, say which tools left

2026-11-04 14:32:58 +01:00

score-pill-guard.test.ts

feat(ui): ScorePill for every grade chip

2026-10-20 13:24:00 +02:00

self-gating-child-frame-guard.test.ts

fix(ui): draw no empty frame and say when a read failed

2026-10-19 16:43:52 +02:00

self-hosted-font-guard.test.ts

build(fonts): self-host Inter so the build fetches nothing

2026-10-22 07:31:16 +02:00

service-worker-version-anchor.test.ts

fix(sw): re-anchor the fallback cache version and gate it against the release

2026-07-30 11:55:16 +02:00

service-worker.test.ts

fix(pwa): give the offline page a way back and reload once on any stale chunk

2026-10-08 17:23:47 +02:00

session-surface-guard.test.ts

feat(auth): let a single-sign-on account confirm it is you at its provider

2026-10-29 08:56:51 +01:00

session-user-projection-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

settings-copy-tense.test.ts

Revert "feat(topics): add the Topics preview area, its navigation entry and its switch"

2026-10-23 10:46:54 +02:00

settings-glossary-de.test.ts

fix(i18n): future tense for the Topics preview, settled German wording

2026-10-21 22:01:50 +02:00

settings-legacy-routes.test.ts

Revert "feat(topics): add the Topics preview area, its navigation entry and its switch"

2026-10-23 10:46:54 +02:00

share-view-leaf-render-guard.test.ts

feat(doctor-report): add sleep, HRV, steps, workouts and the medication effect

2026-10-21 21:55:57 +02:00

shared-record-navigation.test.tsx

feat: let the record's module map filter its own navigation

2026-09-10 01:09:50 +02:00

sharing-accessibility-states.test.tsx

test: wire every release journey to the tests that carry it

2026-08-07 06:11:36 +02:00

sharing-boundary-copy.test.ts

test(i18n): give the per-locale copy guards their pt-BR vocabulary

2026-10-22 14:57:32 +02:00

sharing-legacy-client-contract.test.ts

refactor(sharing): retire the coarse "may this person add" answer

2026-09-10 11:02:32 +02:00

sharing-native-client-contract.test.ts

test: enforce sharing client step-up

2026-08-07 05:11:02 +02:00

sharing-record-fence-contract.test.ts

test: enforce sharing client step-up

2026-08-07 05:11:02 +02:00

sharing-recoverable-errors.test.tsx

docs: publish the UI standards in docs/contributing

2026-10-21 19:37:22 +02:00

sharing-scope-contract.test.ts

refactor(sharing): read and judge grants from a leaf module

2026-10-23 11:02:10 +02:00

sharing-surface-guard.test.ts

feat(labs): serve one marker's lab line under the labs module

2026-11-04 21:24:12 +01:00

single-pdfjs-guard.test.ts

fix(documents): read and render PDFs in a bounded child process

2026-10-25 13:52:04 +01:00

source-read-helpers.test.ts

test(guards): make path-pinned source reads fail when their subject moves

2026-10-22 04:29:35 +02:00

source-size-ratchet.test.ts

test(guards): let the file-size floor follow the ratchet down

2026-10-23 15:54:10 +02:00

spread-single-implementation-guard.test.ts

refactor(measurements): move the series readers out of their route

2026-10-23 14:13:52 +02:00

sql-now-utc-guard.test.ts

refactor(db): drop the runtime schema mirror

2026-11-03 20:32:35 +01:00

step-up-elevation-guard.test.ts

test(guards): load no module graph inside a guard's test body

2026-10-23 22:51:51 +02:00

step-up-web-caller-guard.test.ts

feat(admin): let an admin delete another account through the grace window

2026-10-29 09:10:26 +01:00

strip-comments-parity.test.ts

test(guards): read the stripper parity sweep through the shared source index

2026-10-23 18:54:32 +02:00

success-affordance-guard.test.ts

feat(garmin): sync Garmin Connect through the Personal API

2026-11-04 10:14:10 +01:00

sw-security-hardening.test.ts

test(01-02): add red PWA cache isolation contracts

2026-07-29 13:37:20 +02:00

swallowed-mock-errors.test.ts

test: fail a test whose code caught and logged a missing mock export

2026-10-22 23:15:43 +02:00

table-scroll-container-guard.test.ts

fix(admin): keep a sideways-scrolling table from widening the page on a phone

2026-10-22 22:52:48 +02:00

test-realism-ratchet.test.ts

test(guards): count fixed-path reads through readSourceText in the source-read ratchet

2026-10-22 19:08:15 +02:00

text-field-focus-guard.test.ts

fix(ui): show text-field focus as a neutral border, not a purple ring

2026-10-05 21:08:48 +02:00

timezone-explicit-formatter-guard.test.ts

test(guards): scan once in the threshold and timezone guards

2026-10-22 13:02:59 +02:00

tombstone-read-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

transcription-read-core-guard.test.ts

fix(documents): keep document reads inside their job's expiry

2026-10-24 11:28:57 +02:00

translate-probe-guard.test.ts

refactor(i18n): ask the catalogue for a sentence in one helper

2026-10-20 09:53:31 +02:00

tz-day-paths-harness.test.ts

refactor(db): drop the runtime schema mirror

2026-11-03 20:32:35 +01:00

ui-code-no-dash-separator.test.ts

fix(i18n): drop spaced dashes as separators from every visible string

2026-10-09 16:05:32 +02:00

ui-standards-doc.test.ts

docs(ui-standards): public wording, one spacing scale, no fragment-redirect claim

2026-10-21 22:02:55 +02:00

unit-preference-display-guard.test.ts

Merge branch 'release/v1.46.0' into feat/v146-ui

2026-10-23 16:44:26 +02:00

unit-suite-browser-install-guard.test.ts

docs(testing): describe the browser project and its helper

2026-10-23 13:16:56 +02:00

url-state-writes-guard.test.ts

refactor(documents): split the vault page into filters, library, selection and detail

2026-10-23 12:35:46 +02:00

user-column-backup-classification.test.ts

refactor(backup): let the account-settings domain own the User column verdicts

2026-10-22 06:50:58 +02:00

utc-day-key-allowlist-guard.test.ts

feat(lint): refuse UTC day keys outside the time zone module

2026-10-01 09:59:57 +02:00

v137-wave-zero-fixtures.test.ts

fix(medications): let a manager end a course and serve End only to who may press it

2026-10-25 00:26:55 +02:00

v1341-locale-parity.test.ts

feat(i18n): register Brazilian Portuguese as a locale

2026-10-22 14:50:00 +02:00

v1391-additive-contract.test.ts

test(contract): pin the v1.39.1 wire changes as additive for shipped clients

2026-09-25 07:39:07 +02:00

verify-message-catalogs-script.test.ts

fix(i18n): serve English for an unreadable catalog, refuse to boot without it

2026-10-22 18:43:03 +02:00

version-stamp-ratchet.test.ts

test(guards): ratchet source size, test realism and version-stamp comments

2026-10-22 04:29:47 +02:00

visit-link-guard.test.ts

fix(visits): open an upcoming appointment where it lives

2026-10-21 12:22:36 +02:00

vorsorge-due-bucket-single-home-guard.test.ts

refactor(checkups): split the checkups section into form, card and postpone sheet

2026-10-23 12:59:49 +02:00

weight-tile-direction-guard.test.ts

refactor(dashboard): compose the page from a tile registry

2026-10-23 11:06:32 +02:00

wget-shim.test.ts

fix(image): take scheme-less health-check URLs, anchor the compose pin, say which tools left

2026-11-04 14:32:58 +01:00

workflow-pipefail-guard.test.ts

ci: fail the mutation floors step, and scale nightly property runs by a factor

2026-10-22 19:04:20 +02:00

workout-canonical-identity-guard.test.ts

refactor(workouts): move the workout detail read and the manual delete out of their route

2026-10-23 14:00:28 +02:00

workout-sport-provenance-guard.test.ts

feat(garmin): sync Garmin Connect through the Personal API

2026-11-04 10:14:10 +01:00

write-rate-limit-guard.test.ts

test(guards): strip comments the way the compiler reads them, in every guard

2026-10-23 18:09:10 +02:00

written-outcome-response-consumer-guard.test.ts

feat(garmin): sync Garmin Connect through the Personal API

2026-11-04 10:14:10 +01:00

zod-refusal-issue-list-guard.test.ts

test(api): count parseJsonBody refusals in the issue-list guard

2026-10-23 11:25:36 +02:00