Marc-André BombeckandClaude Opus 4.7 1a46bfe78a chore(security): MED cluster — Coolify URL scrub + isCurrent device-id + SLEEP_DURATION migration note ...

- Coolify runbook + audit briefs scrub the live deploy URL to a
  placeholder (Sec-MED-2). Real values live in repo secrets.
- /api/auth/me/devices isCurrent now compares against the session's
  device id, not the unauthenticated X-Device-Id header (Sr-MED-5).
- Migration 0036 sleep-duration unit shift documented + verification
  command added to the coolify-auto-deploy howto.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-05-11 02:44:12 +02:00

..

0001_init

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0002_roles_and_settings

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0003_add_missing_columns

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0004_add_audit_log_location

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0005_notification_system

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0006_medication_notifications_enabled

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0007_medication_paused_at

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0008_app_settings_bugreport_github

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0009_app_settings_api_global

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0010_app_settings_monitoring

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0011_app_settings_web_push_vapid

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0012_app_settings_reminder_thresholds

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0013_medication_snoozed_until

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0014_add_moodlog_integration

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0015_add_reminder_phase_tracking

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0016_telegram_scheduled_deletions

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0017_add_data_backups

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0018_add_user_achievements

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0019_add_rate_limits

Initial release v1.0.0

2026-03-10 20:14:33 +01:00

0020_codex_oauth_admin_ai

feat(db): add Codex OAuth tokens and admin AI settings, remove openaiKeyEncrypted

2026-04-06 00:42:46 +02:00

0021_v1_2_personalization_feedback_glucose

release(v1.2): i18n, thresholds, glucose, dashboard customization, feedback, multi-provider AI (#77)

2026-04-18 22:20:12 +02:00

0022_body_composition_metrics

audit(v1.3.3): SpO2 + body-composition + 14 CRITICAL/HIGH security/correctness fixes (#121)

2026-05-08 01:05:56 +02:00

0023_ios_adapters_idempotency_devices

chore(db): migration 0023 — idempotency_keys, devices, healthkit user columns

2026-05-03 21:52:57 +02:00

0024_oxygen_saturation

audit(v1.3.3): SpO2 + body-composition + 14 CRITICAL/HIGH security/correctness fixes (#121)

2026-05-08 01:05:56 +02:00

0025_refresh_tokens

feat(v1.4): multi-tenant prep — off-host backup, encryption-key versioning, worker/web split, native-Bearer UA gating (#135)

2026-05-08 14:33:39 +02:00

0025_user_locale_drift_fix

fix(db): backfill the users.locale column as a migration (#140)

2026-05-08 14:29:44 +02:00

0026_user_ai_openai_key

feat(settings): KI-provider — OpenAI key field, model preset dropdown, gated OAuth

2026-05-08 21:36:36 +02:00

0027_bug_report_enabled_toggle

feat(admin): bug-report toggle, unify "Trennen" button styling

2026-05-08 21:45:18 +02:00

0028_notification_channel_reliability

fix(notifications): auto-disable channels on persistent hard rejects (410, etc.)

2026-05-09 21:01:45 +02:00

0029_integration_status

feat(integrations): connection-state + sync-error UI in Settings → Integrations

2026-05-09 21:04:04 +02:00

0030_onboarding_tour_completed

feat(db): User.onboardingTourCompleted flag

2026-05-09 21:14:00 +02:00

0031_user_last_report_practice_name

feat(doctor-report): practice name on cover page (persisted as user preference)

2026-05-09 21:36:47 +02:00

0032_host_metric

feat(db): HostMetric model for host-load sampling

2026-05-09 23:46:56 +02:00

0033_user_ai_provider_chain

feat(db): User.aiProviderChain for ordered fallback config

2026-05-10 00:20:12 +02:00

0034_recommendation_feedback

feat(db): RecommendationFeedback model with GDPR cascade + provider attribution

2026-05-10 01:25:57 +02:00

0035_coach_conversations_v1420

feat(coach): add CoachConversation, CoachMessage, CoachUsage models

2026-05-10 15:54:28 +02:00

0036_apple_health_measurement_types

chore(security): MED cluster — Coolify URL scrub + isCurrent device-id + SLEEP_DURATION migration note

2026-05-11 02:44:12 +02:00

0037_apns_device_columns

feat(schema): APNs device columns + dispatcher channel-type extension

2026-05-11 00:35:58 +02:00

0038_coach_prefs

feat(coach): per-user prompt-tuning surface (settings cog returns)

2026-05-11 01:35:45 +02:00

0039_medication_schedule_days_of_week

chore(schema): deploy medication_schedules.days_of_week column

2026-05-11 01:36:27 +02:00

0040_recommendation_feedback_target_type

feat(coach): per-message thumbs feedback + admin aggregate view

2026-05-11 01:51:27 +02:00

0041_apns_token_unique_partial

fix(devices): enforce global apnsToken uniqueness via partial index

2026-05-11 02:13:47 +02:00

0042_coach_feedback_message_ref

fix(coach): feedback references coach_messages, drops plaintext column

2026-05-11 02:38:17 +02:00

migration_lock.toml

feat(integrations): connection-state + sync-error UI in Settings → Integrations

2026-05-09 21:04:04 +02:00