Marc-André Bombeck 5856b2a547 auth: let a token prove a second factor for erasure ...

Account deletion and the record wipe both demand a fresh second-factor
proof once a factor is enrolled, and that proof lived on the session row.
A native client has no session row, so an account with TOTP or a security
key could not delete itself from the app on any request it could build:
requireFreshMfaIfEnrolled fell through to requireFreshMfa, which resolves
via getSession and answers 401 to a perfectly valid token. App Store
guideline 5.1.1(v) asks for exactly that deletion.

Add requireFreshMfaOrElevationIfEnrolled beside the cookie-only sibling
rather than softening it. Its cookie arm is the sibling's, unchanged;
its Bearer arm takes the single-use elevation the second-factor
management routes already accept, with the fresh-factor rule pinned on,
so a password-proved elevation cannot erase an account any more than a
password login satisfies the gate on the web. No factor rides the request
body: one mint surface, one redemption path. Scope stays fail-closed, so
a narrow token is refused before the header is read.

The elevation is spent immediately before the erasure, after the typed
confirmation and the last-admin check, so a rejected request does not
burn a proof against a 5-per-15-minute mint ceiling. The Bearer branch
of requireMfaManagementAuth moves into a shared helper so both gates read
and claim in the same place.

The elevation guard grows a section naming the two routes, because the
set of surfaces an elevation can unlock only stays small if adding to it
is a visible edit.

2026-09-02 11:51:09 +02:00

..

account-grant-lifecycle.test.ts

fix(sharing): let an expired grant be re-granted instead of colliding

2026-08-08 21:01:50 +02:00

achievements-expansion.test.ts

feat(achievements): worker re-evaluates new + hidden achievements on data change

2026-05-10 10:34:32 +02:00

acting-account-resolver.test.ts

feat(02-12.1): refuse a record request whose context has moved

2026-08-06 18:21:40 +02:00

admin-backups-audit.test.ts

fix(notifications): auto-disable channels on persistent hard rejects (410, etc.)

2026-05-09 21:00:23 +02:00

admin-backups-canonical-roundtrip.test.ts

Carry recorded side effects through the backup and back

2026-08-03 21:15:45 +02:00

admin-backups-download.test.ts

fix(admin): /admin/users mobile layout — card-list at < md, no truncation

2026-05-09 20:46:20 +02:00

admin-backups-restore.test.ts

fix(backups): address restore review findings

2026-07-20 13:42:38 +02:00

admin-backups-upload.test.ts

chore: align hardening tests and formatting

2026-07-20 12:24:15 +02:00

admin-data-wipe.test.ts

fix(admin): wipe every account's data, not nine tables

2026-08-08 01:05:31 +02:00

admin-drain-cumulative-endpoint.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

admin-host-metrics.test.ts

style(prettier): sweep formatting across the tree

2026-05-10 11:05:40 +02:00

admin-reset-password.test.ts

test(01-03): add atomic reset revocation contracts

2026-07-29 13:42:04 +02:00

analytics-bp-aggregate-paged.test.ts

style: apply prettier 3.9.1 formatting

2026-06-28 19:26:16 +02:00

analytics-health-score.test.ts

test: the two-domain case grades instead of going dark

2026-08-30 14:40:43 +02:00

analytics-sleep-stages.test.ts

test(integration): anchor the reconciled sleep night inside the 30-day window

2026-07-04 14:46:19 +02:00

analytics-summaries-slice.test.ts

v1.4.33 — polish and reliability

2026-05-16 19:46:43 +02:00

analytics-weekday-tz.test.ts

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

apns-dispatch.test.ts

fix(02-11): bound APNs provider delivery

2026-08-06 14:10:28 +02:00

apple-health-import-ecg.test.ts

test(01-12): add failing Apple ECG import contracts

2026-07-29 14:20:56 +02:00

apple-health-import-natural-key.test.ts

chore(release): v1.28.49 — Apple Health re-import survives a natural-key collision

2026-07-16 08:48:41 +02:00

apple-health-import-reconcile.test.ts

fix: harden imports and daily medication state (#577)

2026-07-21 13:08:28 +02:00

apple-health-import-worker-failures.test.ts

fix(analytics,ci): merge health-score meta annotations, migrate integration tests, remove dead exports, raise bundle budget

2026-07-28 23:02:00 +02:00

arrival-reaction-claim.test.ts

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

auth-flow.test.ts

chore(db): renumber the session-token migration to 0255

2026-07-19 11:41:12 +02:00

auth-password-change.test.ts

test(auth): bind the rotated cookie through its hash after a password change

2026-07-19 11:40:56 +02:00

backfill-workout-sport.test.ts

test(migrations): seed→apply→assert harness for the workout-sport backfills

2026-07-18 02:09:33 +02:00

backup-custom-cycle-symptom-restore.test.ts

test(backup): cover the assembly a custom cycle symptom has to cross

2026-07-28 00:09:22 +02:00

backup-cycle-symptom-severity-restore.test.ts

fix(backup): carry how hard a symptom hit through export and restore

2026-07-31 07:37:48 +02:00

backup-missing-section-restore.test.ts

Refuse a backup that claims a section it does not carry (#237)

2026-08-23 16:55:59 +02:00

backup-portable-file-restore.test.ts

Pin that a refused restore has not already wiped the account

2026-08-22 00:01:52 +02:00

backup-round-trip.test.ts

Carry the archived schedule eras, chain and all

2026-08-22 11:51:52 +02:00

backup-unknown-catalogue-key-restore.test.ts

fix(backup): a retired catalogue key must not cost the whole file

2026-08-02 09:04:36 +02:00

bearer-scope-enforcement.test.ts

Fix the B8 delegation cases to actually claim a record

2026-08-31 11:57:26 +00:00

biomarker-detail.test.ts

test(labs): integration coverage for biomarker target-range and delete

2026-06-28 14:00:55 +02:00

boot-discovery-scans.test.ts

fix(release): harden v1.31 arrival contracts

2026-07-20 00:40:20 +02:00

bp-in-target.test.ts

test(blood-pressure): pin the in-target headline and BP pillar to the 90-day window

2026-06-14 14:26:58 +02:00

briefing-cache-locale.test.ts

Tag the briefing cache with its language and refuse a foreign one

2026-09-02 10:44:03 +02:00

bulk-delete-source-filter.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

cache-invalidation-coverage.test.ts

style: format the cache-invalidation coverage test

2026-06-27 22:40:01 +02:00

cascade-delete.test.ts

chore: remove the bug-report integration

2026-06-27 20:37:35 +02:00

chart-overlay-prefs.test.ts

style(prettier): sweep formatting across the tree

2026-05-10 11:05:40 +02:00

ci-environment.test.ts

chore(release): prepare v1.31.4

2026-07-21 01:34:29 +02:00

coach-availability-probe.test.ts

test(coach): prove the availability probe's SQL against Postgres

2026-07-26 18:34:42 +02:00

coach-budget-reservation.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

coach-chat.test.ts

test(coach): seed the budget-refusal integration test at the user-plan cap

2026-06-26 14:17:36 +02:00

coach-conversation-documents.test.ts

feat(coach): attach multiple documents to a conversation

2026-07-16 23:32:28 +02:00

coach-conversations.test.ts

feat(coach): GET list, GET single, DELETE conversation endpoints

2026-05-10 16:11:12 +02:00

coach-feedback.test.ts

fix(coach): feedback references coach_messages, drops plaintext column

2026-05-11 02:38:17 +02:00

coach-prefs.test.ts

fix(coach-prefs): return the pure default with no token for a never-saved user

2026-07-24 18:28:41 +02:00

coach-reminder-surfacing.test.ts

fix(coach): make the launcher's dot mean a message you can read

2026-08-07 16:29:58 +02:00

coach-stale-rollup-tail.test.ts

Stop narrating rollup buckets the record cannot account for

2026-08-22 16:14:54 +02:00

consolidate-daily-mean.test.ts

feat(measurements): consolidate gait/mobility HealthKit metrics nightly

2026-06-01 19:54:26 +02:00

consolidate-legacy-steps.test.ts

fix(measurements): legacy step consolidation no longer sweeps provider daily totals

2026-07-15 22:49:07 +02:00

correlations-rollup-swap.test.ts

Round-trip the rollup swap through the real writer

2026-08-13 22:07:57 +02:00

csv-import-contextless-glucose.test.ts

test(import): cover the HealthKit glucose shape against the relaxed constraint

2026-07-25 21:57:06 +02:00

cycle-flow-opens-cycle.test.ts

test(cycle): pin the fixture clock to the suite's clock

2026-08-08 01:02:08 +02:00

cycle-import-export.test.ts

fix(backup): a retired catalogue key must not cost the whole file

2026-08-02 09:04:36 +02:00

cycle-routes.test.ts

test(cycle): pin the fixture clock to the suite's clock

2026-08-08 01:02:08 +02:00

cycle-start-round-trip.test.ts

fix(cycle): make removing a period start restore the neighbour it moved

2026-08-07 15:03:10 +02:00

dashboard-widgets-save.test.ts

fix(release): harden v1.31 arrival contracts

2026-07-20 00:40:20 +02:00

delegated-intake-notification.test.ts

Route the delegated-dose alert through one helper that refuses on self

2026-08-03 09:52:02 +02:00

dense-intraday-hourly-rebuild.test.ts

feat(insights): day navigator on the intraday pulse chart; 90-day dense retention with hourly fallback

2026-07-17 14:29:07 +02:00

dense-intraday-retention.test.ts

feat(insights): day navigator on the intraday pulse chart; 90-day dense retention with hourly fallback

2026-07-17 14:29:07 +02:00

device-register.test.ts

chore: align hardening tests and formatting

2026-07-20 12:24:15 +02:00

doctor-report-dense-data.test.ts

feat(vaccinations): publish the routes, classify them, gate the module

2026-08-08 14:27:36 +02:00

doctor-report-sections.test.ts

feat(vaccinations): publish the routes, classify them, gate the module

2026-08-08 14:27:36 +02:00

documents-content-index.test.ts

test(documents): pin contentIndexSource provenance through list/detail/PATCH

2026-07-08 22:05:05 +02:00

documents-vault.test.ts

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

drain-per-sample-cumulative.test.ts

fix: harden imports and daily medication state (#577)

2026-07-21 13:08:28 +02:00

ecg-ingest-roundtrip.test.ts

Stop the plaintext-waveform check passing on a coincidence

2026-08-01 19:35:16 +02:00

ecg-recording-identity-migration.test.ts

Prove the ECG ingest, the dedupe and the migration on dirty data

2026-08-01 19:26:47 +02:00

emergency-profile-migration.test.ts

feat(profile): add emergency profile storage

2026-08-10 05:32:58 +02:00

emergency-profile-route.test.ts

feat(api): add emergency profile read and write route

2026-08-10 05:32:59 +02:00

encounter-appointment-reminder.test.ts

Pin the orphan sweep in both directions

2026-08-08 12:20:19 +02:00

encounter-phase2-surfaces.test.ts

fix(encounters): the visit list carries its links

2026-08-08 15:06:10 +02:00

encounter-scoped-delegate.test.ts

test(encounters): guard the batched link redaction on the visit list

2026-08-08 15:54:19 +02:00

environment-setup.ts

fix(ci): harden test determinism and dependencies

2026-07-21 00:36:40 +02:00

export-per-type.test.ts

test(export): integration test points at the new plain-segment endpoints

2026-05-10 00:11:36 +02:00

fitbit-activity-sleep-workout-sync.test.ts

test(fitbit): remap integration fixtures onto the classic Web API

2026-06-22 09:00:39 +02:00

fitbit-metrics-sync.test.ts

test(fitbit): remap integration fixtures onto the classic Web API

2026-06-22 09:00:39 +02:00

full-backup-nutrients.test.ts

fix(nutrients): bound the manual water writes and put nutrient totals in the backup

2026-07-19 13:40:03 +02:00

global-setup.ts

fix(ci): harden test determinism and dependencies

2026-07-21 00:36:40 +02:00

google-health-sync-progress.test.ts

test(01-13): add red Google sync progress contracts

2026-07-29 14:18:20 +02:00

google-health-workout-terminal.test.ts

test(01-13): add red Google sync terminal contracts

2026-07-29 14:22:49 +02:00

guardian-notification-fanout.test.ts

test: wire every release journey to the tests that carry it

2026-08-07 06:11:36 +02:00

health-profile-backup-roundtrip.test.ts

feat(backup): carry emergency profile through rotation and backup

2026-08-10 05:32:59 +02:00

health-score-configured-flag.test.ts

Make the round-trip case actually round-trip

2026-08-01 17:56:20 +02:00

health-score-labs-pillars.test.ts

fix(score): read biomarker bounds by their real column names

2026-08-12 22:52:03 +02:00

health-score-record.test.ts

feat: the score says when a pillar stopped counting

2026-08-30 16:16:57 +02:00

health-status-implausible-values.test.ts

fix(insights): keep impossible readings out of the personal band

2026-08-07 14:16:17 +02:00

idempotency-record-scoped-cell.test.ts

fix: reauthorize delegated replay

2026-08-06 01:29:07 +02:00

idempotency-replay.test.ts

fix(tests): share next/headers cookieJar across integration suite

2026-05-09 18:08:11 +02:00

insights-comprehensive-cache.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

insights-feedback.test.ts

feat(api): /api/insights/feedback persists thumbs with provider attribution

2026-05-10 01:30:06 +02:00

insights-provider-chain-put.test.ts

style(prettier): sweep formatting across the tree

2026-05-10 11:05:40 +02:00

insights-provider-chain.test.ts

fix(ci): clear the v1.25 release-branch gate failures

2026-06-28 19:23:57 +02:00

insights-status-real-text.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

intake-backfill-missed-slot.test.ts

fix(medications): record the slot a backfilled dose names

2026-08-07 14:03:09 +02:00

intake-late-take-future-slot.test.ts

fix(medications): keep a late take off a future slot the card supplied

2026-07-07 15:55:50 +02:00

intake-scheduled-for-targeting.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

intake-slot-dedup.test.ts

feat(ux,settings): undo where it was missing and settings that behave one way

2026-06-11 02:19:28 +02:00

integration-failing-legs-backfill.test.ts

test(integrations): prove the leg backfill against rows that carry the old value

2026-07-27 14:35:34 +02:00

integration-status.test.ts

fix(status): expose background failures

2026-07-28 14:00:44 +02:00

integration-sync-escalation.test.ts

feat(integrations): tell the Apple Health card how the last sync arrived

2026-07-27 14:35:33 +02:00

inventory-expiry-container-type-repair.test.ts

test(db): follow the inventory repair to its new number

2026-07-26 18:02:35 +02:00

job-failures.test.ts

fix(medications): identify an imported dose by when it was taken

2026-07-26 14:37:57 +02:00

job-success-outcome.test.ts

fix(jobs): reconcile durable fact inventory

2026-07-29 15:59:27 +02:00

lab-source-reference-range.test.ts

Drop a reference window whose floor sits above its ceiling

2026-08-31 19:38:08 +02:00

link-service.test.ts

feat(vaccinations): teach the link facade the dose-to-document pair

2026-08-08 14:05:58 +02:00

managed-profile-guardian-concurrency.test.ts

test: cover managed profile Guardian races

2026-08-06 02:36:08 +02:00

managed-profile-lifecycle.test.ts

test: read the Guardian grant id under its published name

2026-08-07 05:24:11 +02:00

managed-profile-surface.test.ts

test: enforce sharing client step-up

2026-08-07 05:11:02 +02:00

mcp-oauth-refresh-race.test.ts

style: satisfy v1.34.1 format gate

2026-07-29 15:59:12 +02:00

mcp-write-and-range-read.test.ts

Expect the fenced label on the real-DB preventive-care read

2026-08-14 03:56:38 +02:00

measurement-identity-reconcile.test.ts

refactor(measurements): drop the write-only aggregation columns (migration 0272)

2026-07-25 15:03:44 +02:00

measurement-rollups.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

measurement-soft-delete.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

measurement-source-write-smoke.test.ts

test: cover every measurement source write path

2026-07-28 15:12:23 +02:00

measurements-aggregate-daily.test.ts

chore(release): v1.4.29

2026-05-16 10:59:42 +02:00

measurements-batch-delete.test.ts

chore(release): v1.7.0

2026-05-31 14:36:17 +02:00

measurements-batch.test.ts

refactor(measurements): drop the write-only aggregation columns (migration 0272)

2026-07-25 15:03:44 +02:00

measurements-duplicate-conflict.test.ts

fix: answer a duplicate measurement with 409 on both write paths

2026-08-06 20:56:16 +02:00

measurements-sleep-list.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

medication-administrations.test.ts

test(export): prove the scope holds at the artefact, not just at the switch

2026-07-26 00:45:08 +02:00

medication-cadence-worker.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

medication-compliance-rollup-slot.test.ts

fix(medications): converge intake writes onto existing slot rows across sources

2026-06-10 11:18:00 +02:00

medication-dose-history-import.test.ts

fix: retain import actor attribution

2026-08-06 02:00:35 +02:00

medication-intake-import-job.test.ts

fix: retain import actor attribution

2026-08-06 02:00:35 +02:00

medication-intake-import-reported-export.test.ts

fix: retain import actor attribution

2026-08-06 02:00:35 +02:00

medication-per-slot-consumption.test.ts

test(medications): type the consumption stamp reduce accumulator

2026-08-10 07:58:48 +02:00

medication-reminder-cross-midnight.test.ts

test: observe the reminder dedup anchor where it is written

2026-08-07 06:02:31 +02:00

medication-rolling-overdue-consumers.test.ts

style: satisfy v1.34.1 format gate

2026-07-29 15:59:12 +02:00

medication-weekly-compliance.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

medications-intake-bulk.test.ts

fix(medications): scope the intake idempotency key to its owner

2026-07-25 18:41:40 +02:00

mfa-login-flow.test.ts

feat(auth): branch login through a second-factor challenge

2026-06-27 19:56:30 +02:00

mock-next-headers.ts

fix(02-12.1): check record context before an idempotent replay

2026-08-06 18:54:20 +02:00

mood-a1-backfill.test.ts

feat(mood): map existing entries onto the pleasantness scale

2026-08-08 01:03:05 +02:00

mood-backup-round-trip.test.ts

feat(backup): carry the mood day context through export and restore

2026-08-08 07:14:04 +02:00

mood-context-linkage.test.ts

fix(mood): the linked day read crosses sections, so it declares record

2026-08-08 09:58:22 +02:00

mood-context.test.ts

fix(api): a bad dimension skips its own bulk entry, as the contract said

2026-08-08 09:58:50 +02:00

mood-dimension-features.test.ts

docs(mood): state the validation's real leak boundary, drop the unused weekday floor, correct two comments

2026-08-08 15:30:38 +02:00

mood-entries-bulk.test.ts

test(mood): align integration fixtures with the curated default catalog

2026-06-14 11:31:52 +02:00

mood-entries-external-id.test.ts

fix(mood): honour externalId for idempotent re-import on the native entry routes

2026-06-05 03:45:04 +02:00

mood-entries-note-column.test.ts

feat(security): add second-factor schema and encrypt free-text health notes at rest

2026-06-27 19:33:10 +02:00

mood-insights-crosstab.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

mood-prognosis-ladder.test.ts

fix(mood): refuse a forecast below the data floor on the read path, not only in the job

2026-08-08 15:30:00 +02:00

mood-tag-groups.test.ts

feat(insights): persist correlation patterns

2026-07-28 14:01:11 +02:00

mood-writers-agree.test.ts

fix(mood): one spelling on the wire, one day-key helper, one written decision

2026-08-08 03:03:38 +02:00

note-encryption-backfill.test.ts

feat(security): add second-factor schema and encrypt free-text health notes at rest

2026-06-27 19:33:10 +02:00

notification-attribution.test.ts

test(02-11): verify final claim uses database time

2026-08-06 13:47:42 +02:00

nutrients-batch.test.ts

feat(nutrients): tell the account holder when a sync arrived but nothing landed

2026-07-30 23:30:28 +02:00

partial-unique-live-rows.test.ts

feat(integrations): remove the moodLog integration

2026-07-25 11:36:18 +02:00

passkey-register.test.ts

fix(01-08): align passkey request fixture typing

2026-07-29 13:55:57 +02:00

pr-detection-end-to-end.test.ts

test(score): pin the weight yardstick, the mood gate and rollup/live parity

2026-07-27 23:15:38 +02:00

practitioner-specialty-search.test.ts

feat(practitioners): search and group the address book by specialty

2026-08-09 06:53:57 +02:00

prisma-schema-name-drift.test.ts

fix(environment): name the enum type the database actually has

2026-07-26 14:37:57 +02:00

provider-token-refresh-serialization.test.ts

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

queue-singleton-policy.integration.test.ts

Pin the queue policy decisions with tests

2026-07-19 02:31:45 +02:00

rate-limit.test.ts

release: v1.4.2 — resurrect v1.4.1 work + bug-fix triple (#152)

2026-05-08 17:46:31 +02:00

record-session-epoch-trigger.test.ts

feat(02-12.1): stamp a record-context epoch on every session

2026-08-06 17:52:10 +02:00

record-session-fence-idempotency.test.ts

test(02-12.1): prove the record-session fence end to end

2026-08-06 19:33:15 +02:00

record-session-fence.test.ts

feat(02-12.1): refuse a record request whose context has moved

2026-08-06 18:21:40 +02:00

record-settings-authorization.test.ts

fix: preserve managed target defaults

2026-08-06 03:52:49 +02:00

reset-password-revocation.test.ts

test(01-03): add atomic reset revocation contracts

2026-07-29 13:42:04 +02:00

rollup-concurrent-recompute.test.ts

chore(release): v1.28.33 — re-importing a cumulative Apple Health export works again

2026-07-14 11:56:29 +02:00

rollup-regression-parity.integration.test.ts

fix(rollups): rebase regression x-axis to a fixed origin for exact accumulators

2026-06-26 13:24:30 +02:00

server-cache-routes.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

session-cookie-validation.test.ts

test(oidc): cover the session resolver behind the duplicate-callback path

2026-07-23 15:16:48 +02:00

sessions-and-known-devices.test.ts

fix(auth): make the re-proved factor decide what an elevation reaches

2026-07-19 13:48:46 +02:00

settings-account-delete.test.ts

chore(release): v1.4.45 — analytics 9 s perf fix + audit-marathon closure + v1.4.44 hotfix merged

2026-05-21 23:13:21 +02:00

settings-data-wipe.test.ts

fix(admin): wipe every account's data, not nine tables

2026-08-08 01:05:31 +02:00

settings-erasure-bearer-step-up.test.ts

auth: let a token prove a second factor for erasure

2026-09-02 11:51:09 +02:00

setup.ts

fix(02-12.1): check record context before an idempotent replay

2026-08-06 18:54:20 +02:00

share-link-documents.test.ts

test(share-links): drop the unused owner binding in the ownership guard

2026-07-07 22:00:14 +02:00

sharing-account-access.test.ts

Carry the owner's full name through the account-access round trip test

2026-08-08 18:02:21 +02:00

sharing-audit-actor.test.ts

Harden the guards that could go green for the wrong reason

2026-08-14 02:33:07 +02:00

sharing-delegable-routes.test.ts

Let the GLP-1 read reach the record its own write already reaches

2026-08-22 13:04:33 +02:00

sharing-delegable-writes.test.ts

feat: open the anamnesis record surface to managers

2026-08-07 00:01:27 +02:00

sharing-front-door.test.ts

fix(02-12.1): check record context before an idempotent replay

2026-08-06 18:54:20 +02:00

sharing-idempotency-revocation.test.ts

test: wire every release journey to the tests that carry it

2026-08-07 06:11:36 +02:00

sharing-import-attribution.test.ts

test: wire every release journey to the tests that carry it

2026-08-07 06:11:36 +02:00

sharing-lifecycle.test.ts

test: wire every release journey to the tests that carry it

2026-08-07 06:11:36 +02:00

sharing-manage-handler-matrix.test.ts

Register the skip and snooze admissions in the MANAGE handler matrix

2026-08-14 14:27:58 +02:00

sharing-provider-origin.test.ts

test: wire every release journey to the tests that carry it

2026-08-07 06:11:36 +02:00

sharing-scope-fence.test.ts

fix(02-12.1): check record context before an idempotent replay

2026-08-06 18:54:20 +02:00

sharing-scope-routes.test.ts

feat: add scoped record invitations

2026-08-05 23:58:30 +02:00

sleep-entry-hours-round-trip.test.ts

fix(measurements): store a hand-entered night in the unit the field asks for

2026-08-07 14:30:10 +02:00

soft-delete-copy-parity.test.ts

test(settings): prove the wipe against real Postgres, and state what deletion means

2026-07-26 14:04:44 +02:00

source-aware-rollups.integration.test.ts

feat(rollups): collapse overlapping sources across all read paths

2026-06-04 10:05:47 +02:00

source-priority-two-axis.test.ts

fix(analytics): restore device-priority sleep selection

2026-07-29 16:08:41 +02:00

step-consolidation-repair.test.ts

fix(measurements): legacy step consolidation no longer sweeps provider daily totals

2026-07-15 22:49:07 +02:00

step-up-elevation.test.ts

Let a passkey satisfy the passkey-removal step-up

2026-08-23 17:44:13 +02:00

sync-changes.test.ts

Anchor the sync fixtures on a relative clock

2026-08-03 10:34:48 +02:00

sync-state.test.ts

Move the contract tests to the end that now writes

2026-08-02 02:00:08 +02:00

timezone-per-user.test.ts

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

user-avatar.test.ts

style: apply prettier across the tree

2026-06-19 22:20:31 +02:00

vaccination-booster-mint.test.ts

feat(vaccinations): mint the booster reminder a logged dose suggests

2026-08-08 21:01:25 +02:00

vaccination-booster-satisfy.test.ts

feat(vaccinations): let a logged dose clear the boosters it answers

2026-08-08 14:36:08 +02:00

vaccination-managed-profile.test.ts

test(vaccinations): prove the managed-profile and scoped-grant record paths

2026-08-08 23:00:39 +02:00

whoop-connect-ticket.test.ts

feat(whoop): native-scheme connect redirect and Bearer connect ticket

2026-06-05 08:10:13 +02:00

whoop-owner-identity.test.ts

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

wipe-seeder.ts

fix(admin): wipe every account's data, not nine tables

2026-08-08 01:05:31 +02:00

withings-activity-sync.test.ts

v1.4.37 — final web polish before iOS focus

2026-05-17 15:36:38 +02:00

withings-oauth-flow.test.ts

test(withings): expect the no-credentials connect to redirect, not 400

2026-07-18 02:30:33 +02:00

withings-oauth.test.ts

chore(release): v1.5.0 — native iOS client public-beta + per-day stats overwrite + compliance fix

2026-05-24 22:22:30 +02:00

withings-sleep-stage-composite.test.ts

chore(release): v1.4.25

2026-05-14 23:49:32 +02:00

withings-sleep-sync.test.ts

v1.4.37 — final web polish before iOS focus

2026-05-17 15:36:38 +02:00

workout-batch-create.test.ts

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

workout-batch-enrich.test.ts

test(workouts): pin the losing side of a concurrent enrichment

2026-08-08 09:53:09 +02:00

workout-batch-race.test.ts

release: v1.32.0 — hardening and scalability (#580)

2026-07-22 04:14:15 +02:00

workout-detail-hr-series.test.ts

test(integration): keep the HR-curve fixture inside the retention horizon

2026-08-13 10:25:39 +02:00

workout-insight-claim.test.ts

fix(release): harden v1.31 arrival contracts

2026-07-20 00:40:20 +02:00