Keysat
54fa77f2eb
Per-user sessions UI (Settings -> Active sessions) - listMySessions returns the current user's still-valid sessions with last-8-char token suffix (UX hint) and an isCurrent flag (the authoritative "this device" marker). - revokeSession refuses if the target is the actor's current token — use Sign out for that flow. Per-row Revoke button on every other. - revokeAllOtherSessions = the previously-internal `deleteOtherSessions` helper exposed as a single button "Sign out other devices". - All gated to the actor's own userId (never lets a user touch another user's sessions). CSV parser refactor + tests - Extracted parseCSV, NAME_MAP, parseFloatMaybe, parseIntMaybe, getVariationNote, resolveExerciseName, parseDate from app/api/import/parse/route.ts to lib/csvParser.ts. Behavior byte-identical; route is now a thin wrapper that imports from the lib. - 18 tests covering: empty input, simple rows, lowercased headers, quoted-field commas, escaped double quotes, CRLF normalization, empty-line handling; numeric maybe-parsers; getVariationNote known patterns + null pass-through; ALL 27 NAME_MAP entries map to their canonical target; named CSV-shorthand examples; M/D/YYYY + ISO date parsing with noon-UTC anchoring (so US negative-offset zones still see the same calendar day). Workout + exercise CRUD route tests - New tests/routes-crud.test.ts: GET/POST /api/exercises, GET/POST /api/workouts. 401 on unauthenticated, per-user data isolation, query filtering, soft-delete exclusion, isCustom stamping, duplicate detection, type-driven inputFields defaults (cardio gets duration+calories), Zod validation rejection, set creation with weight/reps/rpe persisted, negative-reps rejected. - Helper builds NextRequest objects so the routes' nextUrl.searchParams access works. Composite indexes for hot query paths (schema.prisma + entrypoint) - Session: (userId, expiresAt) for "list my still-valid sessions" and per-user cleanup. - Workout: (userId, deletedAt, date) for the workout list query (filter by user + alive + date order). - SetLog: (workoutId, setNumber) for the always-ordered set fetch under each workout. - Existing single-column indexes kept; composites are additive. - Entrypoint runs CREATE INDEX IF NOT EXISTS so live snapshots pick up the new indexes on first boot after upgrade. verify-database StartOS action (start9/0.4/startos/actions/verifyDatabase.ts) - Read-only. Runs PRAGMA integrity_check + quick_check + row-count queries against /data/app.db, reports as a structured result. - allowedStatuses: only-running. Mounts the volume read-only. - Use after a StartOS Backup, after a host crash, or after a fresh sideload to confirm the data is sound before relying on it. Test suite now 67 tests across 7 files in ~2.4s.
22 lines
880 B
TypeScript
22 lines
880 B
TypeScript
import { sdk } from '../sdk'
|
|
import { changeAdminCredentials } from './changeAdminCredentials'
|
|
import { toggleSignups } from './toggleSignups'
|
|
import { verifyDatabase } from './verifyDatabase'
|
|
|
|
/**
|
|
* Package actions registered with StartOS.
|
|
*
|
|
* - change-admin-credentials: rotate the admin email + password from the
|
|
* StartOS UI without dropping to a shell. See changeAdminCredentials.ts
|
|
* for the full design notes.
|
|
* - toggle-signups: open/close the multi-user sign-up gate. The same
|
|
* toggle is also available in-app at Settings -> Instance Settings
|
|
* (admin only). See toggleSignups.ts.
|
|
* - verify-database: read-only PRAGMA integrity_check + quick_check
|
|
* plus row-count snapshot. Run after a backup or a host crash.
|
|
*/
|
|
export const actions = sdk.Actions.of()
|
|
.addAction(changeAdminCredentials)
|
|
.addAction(toggleSignups)
|
|
.addAction(verifyDatabase)
|