Marc-André Bombeck f158f01f18 Merge branch 'feat/ai-extraction-routes' into feat/ai-jobs-stored-text ...

Brings in the extraction routes and the capability re-check at the wire
(`aiEgressRefusal`), so the jobs and stored-text work can share it.
Conflicts in the document routes, the fenced chat, the auto-read toggle
and its contract text resolve to the extraction branch: those files no
longer call the per-pick document consent helper.

2026-09-24 09:27:43 +02:00

..

__tests__

feat(ai): gate document, lab and medication extraction on their capabilities

2026-09-24 08:44:57 +02:00

account

fix(sharing): widen the grant db slice for the expired-row sweep

2026-08-08 21:14:23 +02:00

admin

feat(ai): replace the Correlations switch with Reading documents

2026-09-24 07:36:47 +02:00

ai/test

feat(ai): narrow the auto-read consent and refuse the connection test with AI off

2026-09-24 08:45:03 +02:00

allergies

fix(api): give the shared write ceiling a code a client can branch on

2026-09-10 08:39:09 +02:00

analytics

fix(dashboard): paint the blood-glucose tile for untagged readings

2026-09-09 23:03:21 +02:00

anamnesis

feat(api): add emergency profile read and write route

2026-08-10 05:32:59 +02:00

auth

feat(consent): add the extraction consent kind and purge on withdrawal

2026-09-24 09:05:09 +02:00

biomarkers

fix(api): give the shared write ceiling a code a client can branch on

2026-09-10 08:39:09 +02:00

c/[token]/unlock

fix(api): put Retry-After and the rate-limit triple on every 429

2026-09-10 03:55:46 +02:00

coach

fix: refuse an unrecognised request field where the caller can act on it

2026-09-03 05:49:13 +02:00

consent/ai

feat(consent): add the extraction consent kind and purge on withdrawal

2026-09-24 09:05:09 +02:00

custom-metrics

fix(api): give the shared write ceiling a code a client can branch on

2026-09-10 08:39:09 +02:00

cycle

Merge the scoped-grant fences, the delegate controls that ask their own section and the published switch refusals

2026-09-10 12:29:09 +02:00

daily/digest

fix(api): put Retry-After and the rate-limit triple on every 429

2026-09-10 03:55:46 +02:00

dashboard

Mock the two new route dependencies, and cover the dead switch

2026-09-03 07:42:00 +00:00

devices

…

documents/inbound

feat(ai): resolve the AI capability before any background model work

2026-09-24 09:07:16 +02:00

encounters

Merge the scoped-grant fences, the delegate controls that ask their own section and the published switch refusals

2026-09-10 12:29:09 +02:00

environment

fix(medications): identify an imported dose by when it was taken

2026-07-26 14:37:57 +02:00

export

feat(backup): carry the setup answers out of the account and back in

2026-09-10 11:03:56 +02:00

family-history

feat: open the anamnesis record surface to managers

2026-08-07 00:01:27 +02:00

feature-flags

feat(ai): publish capabilities on the account payload

2026-09-24 07:49:14 +02:00

fhir

fix(insights): scope generation guard to prompt fields, clear cache on restore

2026-07-28 21:11:43 +02:00

fitbit

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

gamification/achievements

Give a grant a section set and a third level

2026-08-04 17:11:40 +02:00

google-health

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

health

…

illness

test(api): pin the pagination tiebreaker in the two route tests

2026-09-10 04:17:45 +02:00

import

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

ingest/medication

Refuse what these four routes used to absorb in silence

2026-08-22 13:23:48 +02:00

insights

feat(ai): gate document, lab and medication extraction on their capabilities

2026-09-24 08:44:57 +02:00

integrations

docs: comments name what the code does, not how it was built

2026-09-11 11:03:04 +02:00

internal

fix(api): put Retry-After and the rate-limit triple on every 429

2026-09-10 03:55:46 +02:00

labs

feat(ai): gate document, lab and medication extraction on their capabilities

2026-09-24 08:44:57 +02:00

managed-profiles

fix(api): put a ceiling on editing a managed record's identity

2026-09-10 03:24:50 +02:00

mcp

fix(mcp): let the consent screen return to the connecting client

2026-09-15 14:06:27 +02:00

measurement-categories

Exclude the worktrees the tooling was already meant to exclude

2026-08-02 16:36:25 +02:00

measurement-reminders

test(api): pin the pagination tiebreaker in the two route tests

2026-09-10 04:17:45 +02:00

measurements

fix(api): give the shared write ceiling a code a client can branch on

2026-09-10 08:39:09 +02:00

medications

feat(ai): gate document, lab and medication extraction on their capabilities

2026-09-24 08:44:57 +02:00

mental-health/assessments

docs(sharing): name the screener's score row where the section is consented

2026-09-10 11:15:50 +02:00

meta/capabilities

feat(api): publish retirement in the contract, the capability read, and the coverage guard

2026-08-23 14:06:52 +02:00

monitoring

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

mood

Give mood-tag and cycle-symptom edits an audit row

2026-08-09 14:57:12 +02:00

mood-entries

fix(api): give the shared write ceiling a code a client can branch on

2026-09-10 08:39:09 +02:00

nightscout

fix(notifications): name the never-grantable refusal and redact the grant log

2026-09-10 18:45:57 +02:00

notifications

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

nutrients

fix(api): put Retry-After and the rate-limit triple on every 429

2026-09-10 03:55:46 +02:00

onboarding

Never derive answers given for somebody else onto the guardian

2026-09-10 18:58:21 +02:00

oura

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

personal-records

Refuse what these four routes used to absorb in silence

2026-08-22 13:23:48 +02:00

polar

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

practitioners

feat(practitioners): search and group the address book by specialty

2026-08-09 06:53:57 +02:00

profile/summary

feat(02-12): add scoped profile summary

2026-08-06 04:59:25 +02:00

record-settings

refactor(modules): one record-keyed write for a record's module state

2026-09-10 11:54:19 +02:00

send

…

settings

fix(notifications): record a relay refusal at warn, not error

2026-09-13 14:50:32 +02:00

share-links

Retire allowFhirApi and resourceTypes off the share-link response

2026-08-01 11:38:16 +02:00

sleep

Give a grant a section set and a third level

2026-08-04 17:11:40 +02:00

strava

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

sync

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

telegram/webhook

fix(webhooks): rate-limit every verb that checks the shared secret

2026-09-03 01:42:56 +02:00

tokens

Address review: move the query-shape case, document the mint race

2026-09-03 11:15:49 +02:00

user

feat(ai): replace the Correlations switch with Reading documents

2026-09-24 07:36:47 +02:00

vaccinations

Merge the scoped-grant fences, the delegate controls that ask their own section and the published switch refusals

2026-09-10 12:29:09 +02:00

version

…

whoop

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

withings

fix(api): name the refused fields on every shape rejection

2026-09-10 07:19:55 +02:00

workouts

fix(api): put Retry-After and the rate-limit triple on every 429

2026-09-10 03:55:46 +02:00