tom/HealthLog

0 Fork 0

mirror of https://github.com/MBombeck/HealthLog.git synced 2026-11-07 04:12:04 +00:00

Files

T

Marc-André Bombeck ea4d284cc9 ci: carry the report per shard and point the guard at the running job

The determinism guard reads the job that runs the browser, which is now
the shard matrix rather than the gate that only carries the required
check name. The report artifact is named per shard so the two uploads
cannot clobber each other.

2026-08-08 04:45:04 +02:00

__tests__

ci: carry the report per shard and point the guard at the running job

2026-08-08 04:45:04 +02:00

i18n

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

assert-deploy.ts

chore: scrub instance details and personal data from committed artefacts

2026-06-10 11:00:26 +02:00

audit-column-readers.ts

chore(audit): sweep for write-only columns from the release battery

2026-07-25 16:24:24 +02:00

backfill-mood-note-column.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

backfill-rollups.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

check-bundle-budget.mjs

fix(build): stabilize release bundle gates

2026-07-29 16:19:30 +02:00

check-env.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

check-openapi.ts

chore(release): v1.4.49 — audit-backlog closure + server reminder suppression + diagnostic endpoint + analytics cold-path fix

2026-05-23 12:51:41 +02:00

cleanup-apple-health-phantom-meds.ts

chore(scripts): apply prettier to the phantom-med cleanup script

2026-07-24 23:18:26 +02:00

convert-noncanonical-measurement-units.ts

test(measurements): cover the unit transform, MCP unit hardening, and a display guard

2026-07-25 00:21:36 +02:00

decrypt-export.ts

feat(export): offer a passphrase-encrypted archive

2026-06-27 20:27:07 +02:00

diagnose-apple-health-meds.ts

chore(scripts): add read-only diagnose + guarded cleanup for phantom Apple-Health mirror meds

2026-07-24 23:02:03 +02:00

diagnose-cycle-state.ts

chore(cycle): add a read-only report for records the module stopped reading

2026-08-07 15:52:59 +02:00

diagnose-implausible-measurements.ts

fix(sync): enforce the plausibility domain on every provider write path

2026-08-07 22:19:43 +02:00

diagnose-manual-sleep-hours.ts

fix(measurements): store a hand-entered night in the unit the field asks for

2026-08-07 14:30:10 +02:00

diagnose-noncanonical-measurement-units.ts

test(measurements): cover the unit transform, MCP unit hardening, and a display guard

2026-07-25 00:21:36 +02:00

disable-mfa.ts

fix(security): revoke other sessions when the second factor is removed

2026-06-27 21:50:16 +02:00

drain-per-sample-cumulative.ts

chore(release): v1.4.38

2026-05-17 19:07:03 +02:00

env-manifest.json

fix: close two gaps the last audit round left open

2026-08-07 02:26:29 +02:00

fetch-geolite2.sh

chore(release): v1.4.28.1

2026-05-16 09:28:40 +02:00

generate-i18n-boot.mjs

perf(i18n): generate the catalog boot scripts as static assets

2026-07-07 13:15:37 +02:00

generate-openapi.ts

refactor(openapi,queries): feature-located registries behind thin indexes

2026-06-11 00:10:00 +02:00

generate-sw-version.mjs

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

install-hooks.sh

chore(release): v1.4.31

2026-05-16 14:19:57 +02:00

migrate-demo-edge01.README.md

feat(integrations): remove the moodLog integration

2026-07-25 11:36:18 +02:00

migrate-demo-edge01.sh

feat(integrations): remove the moodLog integration

2026-07-25 11:36:18 +02:00

prepare.mjs

fix(ci): harden test determinism and dependencies

2026-07-21 00:36:40 +02:00

promote-digest.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

README.md

fix: harden pnpm supply chain and runtime image (#572 )

2026-07-21 04:36:53 +02:00

repair-google-health-sleep.ts

chore(release): v1.28.18 — Google Health sleep reads its true total

2026-07-10 13:08:55 +02:00

repair-intake-anomalies.ts

fix: harden pnpm supply chain and runtime image (#572 )

2026-07-21 04:36:53 +02:00

reset-password.mjs

fix(01-08): revoke credentials atomically on password reset

2026-07-29 13:55:11 +02:00

restore-backup.ts

fix: harden pnpm supply chain and runtime image (#572 )

2026-07-21 04:36:53 +02:00

rotate-encryption-key.ts

fix(insights): scope generation guard to prompt fields, clear cache on restore

2026-07-28 21:11:43 +02:00

run-coach-eval.ts

test(coach): add two-layer Coach eval harness

2026-06-27 10:14:52 +02:00

seed-demo-apps01.sql

chore(release): v1.15.15 — one warm, motivating assistant voice

2026-06-07 21:49:27 +02:00

seed-demo-extend-1y.sql

chore(cleanup): drop orphaned doctor-report PDF helper after export-page removal

2026-06-06 23:30:39 +02:00

seed-demo-meds-apps01.sql

chore(release): v1.15.15 — one warm, motivating assistant voice

2026-06-07 21:49:27 +02:00

seed-demo-scores-1y.sql

chore(cleanup): drop orphaned doctor-report PDF helper after export-page removal

2026-06-06 23:30:39 +02:00

seed-demo-v15.sql

docs: drop per-release audit notes + legacy spec, scrub phase markers

2026-05-25 23:43:58 +02:00

seed-demo.ts

feat(demo): showcase the seeded tiles on the demo dashboard

2026-06-22 07:01:03 +02:00

test-notifications.ts

fix: harden pnpm supply chain and runtime image (#572 )

2026-07-21 04:36:53 +02:00

v1341-audit-ledger-check.mjs

style: satisfy v1.34.1 format gate

2026-07-29 15:59:12 +02:00

v1341-performance-baseline.mjs

style: satisfy v1.34.1 format gate

2026-07-29 15:59:12 +02:00

verify-v137-adversarial.ts

fix: reconcile sharing migrations

2026-08-07 06:21:55 +02:00

README.md

`scripts/`

One-shot operator and build scripts. These are not part of the running application — they are run by hand during a deploy, a backfill, or a release, or wired into CI. Recurring work belongs on pg-boss (src/lib/jobs/), not here.

How to run them

From a source checkout:

pnpm dlx tsx scripts/<file>.ts

The production image intentionally removes npm, pnpm, and Corepack. Only container-safe scripts named by an operator runbook use its pinned healthlog-tsx launcher; scripts that import the full application dependency graph must run from a source checkout. scripts/ is excluded from the project typecheck.

What lives here

generate-openapi.ts — emits docs/api/openapi.yaml from the registered Zod schemas (pnpm openapi:generate).
check-openapi.ts — compares a freshly generated spec against the committed YAML; CI fails on drift (pnpm openapi:check).
check-env.ts — pre-deploy env-var sanity check against env-manifest.json (pnpm check-env); wired into CI.
assert-deploy.ts — post-deploy /api/version assertion.
rotate-encryption-key.ts — AES-256-GCM key rotation; see docs/ops/encryption-key-rotation.md.
restore-backup.ts — restore an off-host AES-GCM backup from an S3-compatible bucket.
repair-intake-anomalies.ts — repair historic medication-ledger defects (duplicate dose-slot rows, implausible taken_at); dry-run by default, see docs/ops/intake-repair.md.
backfill-rollups.ts, drain-per-sample-cumulative.ts, backfill-mood-note-column.ts — historical data backfills (note: the boot-time rollup-full-backfill queue handles new accounts automatically; the CLI is the manual fallback).
seed-demo.ts + seed-demo-v15.sql — populate a demo tenant.
test-notifications.ts — exercise the notification dispatcher + reminder check.
fetch-geolite2.sh — download the MaxMind GeoLite2 MMDBs (needs a licence key) before docker build.
install-hooks.sh — install the local git hooks.
generate-sw-version.mjs, print-bundle-report.mjs — service-worker version stamp and bundle-size report.
i18n/ — locale tooling; __tests__/ — tests for the scripts above.

Conventions

See ../CLAUDE.md "Tests and commands" + "Self-hosting gotchas". Operator runbooks that drive these scripts live in ../docs/ops/.