- LabDraft.tsx discard button: chain .catch to surface a failed discard in
the existing error banner instead of an unhandled rejection.
- LabDraw.tsx toggleHistory: wrap the marker-history fetch in try/catch so a
failed request silently no-ops (the row just doesn't expand) rather than
throwing unhandled from the click handler.
- normalize.ts num(): parseFloat truncated at the first comma, so "1,200"
silently became 1 (1000x error) and "5,5" became 5. Now strictly matches
either US thousands-grouping or a plain number spanning the whole string;
anything else (incl. ambiguous "5,5") returns null instead of a wrong value.
- labs.ts confirm handler: the pending-status check ran before the request
body was read, so two concurrent confirms could both pass it and
double-insert. Added a guarded UPDATE ... WHERE status = 'pending' as the
first statement inside the existing synchronous transaction; zero rows
affected throws and the route returns 409, with the fast-path check kept
for the common case.
- Added missing `await` on two rejects.toThrow assertions (llm.test.ts,
extract.test.ts) that were previously resolving before the assertion
settled.
- Bumped the 11th-failed-login rate-limit test to a 30s timeout — 10
sequential argon2id verifies can exceed bun:test's 5s default under load.
Implement Content-Security-Policy headers and strict content-type handling
for non-API responses, with x-content-type-options applied to all routes.
Adds security-headers test suite to verify header presence.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
bun-sqlite's Database.transaction is synchronous, but async callbacks return
a pending Promise at the first await, causing immediate COMMIT before the
entire callback completes. This allowed partial inserts with no rollback.
Fixed by:
- Remove async from transaction callback
- Add .run() to each insert/update to execute synchronously
- Add regression test proving atomicity: transaction that throws mid-loop
rolls back all changes (both tables empty after failure)
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
- Add ConfirmDraftBody schema to shared types
- Implement GET /api/labs/drafts/:id (retrieves draft with extracted data)
- Implement POST /api/labs/drafts/:id/confirm (normalizes markers, inserts lab draw + biomarkers in transaction, marks draft confirmed)
- Implement POST /api/labs/drafts/:id/discard (marks draft discarded)
- Add comprehensive test suite with 3 new tests
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Anonymous HTTPS clone fails while the repo is private; token works either
way, and the internal gitea:3000 host skips the reverse proxy.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
The login rate limiter keyed on the client-controlled x-forwarded-for
header, letting an attacker rotate XFF for unlimited password guesses
while also growing the failures Map unboundedly (memory DoS). Since
this is a single-password instance, replace with one global
{count, resetAt} tracker per app instance: check the 15-min window and
reject at >=10 failures before verifying the password, increment on
failure, reset on success.
- Add serveStatic middleware to server/src/app.ts to serve web/dist
- Include SPA fallback route for client-side routing deep links
- Create Dockerfile with multi-stage build (Node deps + build, slim runtime)
- Add docker-compose.yml for single-command deployment
- Add docs/deploy.md with deployment instructions and Caddy reverse proxy example
- Add bun run build:web step to CI pipeline after typecheck
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Projects are non-composite with noEmit, so build mode (-b) re-builds every run.
Use -p for proper project checking: bunx tsc -p server && bunx tsc -p shared && bunx tsc -p web
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Removes composite project references in favor of simpler -p checking.
Adds noEmit to tsconfig so tsc is typecheck-only.
Adds smoke test to unblock CI test gate.
Ignores tsbuildinfo artifacts from git.
