pediatric-ai-scribe-v3

danvics/pediatric-ai-scribe-v3

Fork 0

Commit graph

ea03db3d45 Prompt-injection wrap: remaining AI routes Daniel 2026-04-14 05:31:54 +0200
1bff2d3aad Batch of security + scale fixes Daniel 2026-04-14 05:24:40 +0200
7a06a4aa63 Batch of security + scale fixes Daniel 2026-04-14 05:24:40 +0200
63f77aa9cf Batch of security + scale fixes Daniel 2026-04-14 05:24:40 +0200
ca9df371c2 Enforce server-side LLM model whitelist + scope idle timeout to writes Daniel 2026-04-14 05:15:55 +0200
8db25f39be Enforce server-side LLM model whitelist + scope idle timeout to writes Daniel 2026-04-14 05:15:55 +0200
8893e484fd Enforce server-side LLM model whitelist + scope idle timeout to writes Daniel 2026-04-14 05:15:55 +0200
f12bdb0fa4 Fix: revoked sessions now actually log the other device out Daniel 2026-04-14 05:10:16 +0200
a2b1b262cb Fix: revoked sessions now actually log the other device out Daniel 2026-04-14 05:10:16 +0200
dafbf44a32 Fix: revoked sessions now actually log the other device out Daniel 2026-04-14 05:10:16 +0200
2f8bf16ace Hide Active Sessions for SSO-only users Daniel 2026-04-14 05:07:07 +0200
fcf11ec326 Hide Active Sessions for SSO-only users Daniel 2026-04-14 05:07:07 +0200
a8992aee5a Hide Active Sessions for SSO-only users Daniel 2026-04-14 05:07:07 +0200
17fa3d56f4 Add node-pg-migrate for versioned schema changes + better mobile UA labels Daniel 2026-04-14 05:06:19 +0200
64ac4ff6bb Add node-pg-migrate for versioned schema changes + better mobile UA labels Daniel 2026-04-14 05:06:19 +0200
b5abbb69fc Add node-pg-migrate for versioned schema changes + better mobile UA labels Daniel 2026-04-14 05:06:19 +0200
f466ce3e9f Fix critical auth bug: set httpOnly cookie on local login/register Daniel 2026-04-14 04:55:12 +0200
040218a7bf Fix critical auth bug: set httpOnly cookie on local login/register Daniel 2026-04-14 04:55:12 +0200
6febf6c914 Fix critical auth bug: set httpOnly cookie on local login/register Daniel 2026-04-14 04:55:12 +0200
837d99188f Fix local-auth sections not showing for normal users + backup-code modal signature Daniel 2026-04-14 04:43:07 +0200
ed015f3774 Fix local-auth sections not showing for normal users + backup-code modal signature Daniel 2026-04-14 04:43:07 +0200
37e58be5ec Fix local-auth sections not showing for normal users + backup-code modal signature Daniel 2026-04-14 04:43:07 +0200
c45d2b83d2 Hide change-password + 2FA by default, show only when canLocalAuth=true Daniel 2026-04-14 04:38:28 +0200
b6753d5bc9 Hide change-password + 2FA by default, show only when canLocalAuth=true Daniel 2026-04-14 04:38:28 +0200
c7a04626a3 Hide change-password + 2FA by default, show only when canLocalAuth=true Daniel 2026-04-14 04:38:28 +0200
5bfa521d1e Server-side SSO/local-auth enforcement + OIDC account-link hardening Daniel 2026-04-14 04:35:00 +0200
f9732f25d0 Server-side SSO/local-auth enforcement + OIDC account-link hardening Daniel 2026-04-14 04:35:00 +0200
fc17032649 Server-side SSO/local-auth enforcement + OIDC account-link hardening Daniel 2026-04-14 04:35:00 +0200
dc0f191c7a Idle timeout observability + cut write frequency in half + hide local-auth UI for SSO-only users Daniel 2026-04-14 04:32:53 +0200
97f60876c5 Idle timeout observability + cut write frequency in half + hide local-auth UI for SSO-only users Daniel 2026-04-14 04:32:53 +0200
e161c221c4 Idle timeout observability + cut write frequency in half + hide local-auth UI for SSO-only users Daniel 2026-04-14 04:32:53 +0200
242e78e6f3 Sliding 24h idle timeout (web) + persistent mobile + 2FA backup codes Daniel 2026-04-14 04:24:54 +0200
c411e5f16f Sliding 24h idle timeout (web) + persistent mobile + 2FA backup codes Daniel 2026-04-14 04:24:54 +0200
6dffdf91e5 Sliding 24h idle timeout (web) + persistent mobile + 2FA backup codes Daniel 2026-04-14 04:24:54 +0200
c4ab7723da Session lifetime: 7 days → 24 hours Daniel 2026-04-14 04:17:54 +0200
6c98e36511 Session lifetime: 7 days → 24 hours Daniel 2026-04-14 04:17:54 +0200
b294150781 Session lifetime: 7 days → 24 hours Daniel 2026-04-14 04:17:54 +0200
931d75c55c Mobile app hardening — security + Android 14 compat Daniel 2026-04-14 04:15:27 +0200
4a29c496f6 Mobile app hardening — security + Android 14 compat Daniel 2026-04-14 04:15:27 +0200
cdf178b1c3 Mobile app hardening — security + Android 14 compat Daniel 2026-04-14 04:15:27 +0200
f7ef1ac049 Hybrid auth: cookie-only on web, Keychain Bearer on mobile Daniel 2026-04-14 04:11:55 +0200
5a700a2a27 Hybrid auth: cookie-only on web, Keychain Bearer on mobile Daniel 2026-04-14 04:11:55 +0200
fa16cb13cb Hybrid auth: cookie-only on web, Keychain Bearer on mobile Daniel 2026-04-14 04:11:55 +0200
2228169966 Maintenance CLI + unpin postgres digest Daniel 2026-04-14 04:00:13 +0200
0bbecb76f9 Maintenance CLI + unpin postgres digest Daniel 2026-04-14 04:00:13 +0200
4a26abed10 Maintenance CLI + unpin postgres digest pre-httponly-only-2026-04-14 Daniel 2026-04-14 04:00:13 +0200
4f51f1efb5 Pin critical auth indexes to COLLATE "C" (ICU-drift immune) Daniel 2026-04-14 03:55:09 +0200
cd2513d361 Pin critical auth indexes to COLLATE "C" (ICU-drift immune) Daniel 2026-04-14 03:55:09 +0200
d748dcc0d2 Pin critical auth indexes to COLLATE "C" (ICU-drift immune) Daniel 2026-04-14 03:55:09 +0200
cf50d8577e Collation-drift guard + lookup-miss visibility Daniel 2026-04-14 03:52:29 +0200
9423ffc3a7 Collation-drift guard + lookup-miss visibility Daniel 2026-04-14 03:52:29 +0200
b23cb3300e Collation-drift guard + lookup-miss visibility Daniel 2026-04-14 03:52:29 +0200
9da529e593 Login: remove temporary debug logging Daniel 2026-04-14 03:48:56 +0200
43d26fd306 Login: remove temporary debug logging Daniel 2026-04-14 03:48:56 +0200
9b407d1e18 Login: remove temporary debug logging Daniel 2026-04-14 03:48:56 +0200
a8a3ade069 Growth/BMI results: percentiles to 2 decimal places Daniel 2026-04-14 03:37:40 +0200
11f53102ee Growth/BMI results: percentiles to 2 decimal places Daniel 2026-04-14 03:37:40 +0200
e283bb8cda Growth/BMI results: percentiles to 2 decimal places Daniel 2026-04-14 03:37:40 +0200
45244d4eeb Growth chart: accept explicit 0 in any age field Daniel 2026-04-14 03:33:10 +0200
7cc8a1fa99 Growth chart: accept explicit 0 in any age field Daniel 2026-04-14 03:33:10 +0200
13e8937a00 Growth chart: accept explicit 0 in any age field Daniel 2026-04-14 03:33:10 +0200
887a8c3c74 Growth chart age: three boxes (yr/mo/day), any combination Daniel 2026-04-14 03:21:27 +0200
df592d401b Growth chart age: three boxes (yr/mo/day), any combination Daniel 2026-04-14 03:21:27 +0200
5dde108e4a Growth chart age: three boxes (yr/mo/day), any combination Daniel 2026-04-14 03:21:27 +0200
1b51bd619e Growth chart: flexible age input with smart parser Daniel 2026-04-14 03:17:16 +0200
c392e73cfe Growth chart: flexible age input with smart parser Daniel 2026-04-14 03:17:16 +0200
42984e355b Growth chart: flexible age input with smart parser Daniel 2026-04-14 03:17:16 +0200
0a0d050998 Dockerfile: add build tools for argon2 native compile Daniel 2026-04-14 03:09:38 +0200
dc5f8ae758 Dockerfile: add build tools for argon2 native compile Daniel 2026-04-14 03:09:38 +0200
3e05d8eec9 Dockerfile: add build tools for argon2 native compile Daniel 2026-04-14 03:09:38 +0200
54552df795 Stop leaking e.message to clients across all routes Daniel 2026-04-14 03:04:24 +0200
74c5cde8e1 Stop leaking e.message to clients across all routes Daniel 2026-04-14 03:04:24 +0200
9bfadd7344 Stop leaking e.message to clients across all routes Daniel 2026-04-14 03:04:24 +0200
263bd1a1c7 Security hardening: PHI encryption, argon2, DOMPurify, SRI Daniel 2026-04-14 02:49:38 +0200
7c45367c02 Security hardening: PHI encryption, argon2, DOMPurify, SRI Daniel 2026-04-14 02:49:38 +0200
cb17a12172 Security hardening: PHI encryption, argon2, DOMPurify, SRI Daniel 2026-04-14 02:49:38 +0200
cf0af53dd4 Security hardening: low-risk easy wins Daniel 2026-04-14 02:42:32 +0200
e625c634b6 Security hardening: low-risk easy wins Daniel 2026-04-14 02:42:32 +0200
93bc44b5e0 Security hardening: low-risk easy wins Daniel 2026-04-14 02:42:32 +0200
2f2948339c Add hardware-backed secure storage for mobile auth token Daniel 2026-04-14 02:33:32 +0200
c736782c15 Add hardware-backed secure storage for mobile auth token Daniel 2026-04-14 02:33:32 +0200
8409a49c74 Add hardware-backed secure storage for mobile auth token Daniel 2026-04-14 02:33:32 +0200
5cfde78f09 Add APK download link on login page Daniel 2026-04-14 02:29:38 +0200
82b8fa0e0e Add APK download link on login page Daniel 2026-04-14 02:29:38 +0200
942647871a Add APK download link on login page pre-security-hardening-2026-04-14 Daniel 2026-04-14 02:29:38 +0200
84da4d15a3 Enhance audit logging: user agent, session ID, PHI access tracking Daniel 2026-04-11 06:17:05 +0200
011fae9b7a Enhance audit logging: user agent, session ID, PHI access tracking Daniel 2026-04-11 06:17:05 +0200
369e440aa1 Enhance audit logging: user agent, session ID, PHI access tracking Daniel 2026-04-11 06:17:05 +0200
8f04b9c1f1 Add full hour-by-hour exchange transfusion thresholds for all GA groups Daniel 2026-04-11 06:03:48 +0200
ffa6b818db Add full hour-by-hour exchange transfusion thresholds for all GA groups Daniel 2026-04-11 06:03:48 +0200
0c8a4db5c3 Add full hour-by-hour exchange transfusion thresholds for all GA groups Daniel 2026-04-11 06:03:48 +0200
1e98174191 Bilirubin: full hour-by-hour AAP 2022 data (510 data points) Daniel 2026-04-11 06:01:00 +0200
ab1ac25611 Bilirubin: full hour-by-hour AAP 2022 data (510 data points) Daniel 2026-04-11 06:01:00 +0200
30300f169c Bilirubin: full hour-by-hour AAP 2022 data (510 data points) Daniel 2026-04-11 06:01:00 +0200
ad2fb32ac8 Update bilirubin to exact AAP 2022 values, add exchange transfusion Daniel 2026-04-11 05:50:19 +0200
1b5faa3a01 Update bilirubin to exact AAP 2022 values, add exchange transfusion Daniel 2026-04-11 05:50:19 +0200
5d988c397d Update bilirubin to exact AAP 2022 values, add exchange transfusion Daniel 2026-04-11 05:50:19 +0200
6689b723e4 Add pause/stop buttons to SOAP note recording Daniel 2026-04-11 05:19:12 +0200
5bf55499a4 Add pause/stop buttons to SOAP note recording Daniel 2026-04-11 05:19:12 +0200
e700ab1c8b Add pause/stop buttons to SOAP note recording Daniel 2026-04-11 05:19:12 +0200