Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Launch TacTile›Web›Web — Settings, Analytics & agent build·26 in this wave

Approve: Settings, Analytics & agent buildTo do · blocker Viv — Build the analytics Compare page or gate it behind a beta flag.To do Viv — Source the AI agent's model label from the actual serving model instead of a hardcoded string.Done Viv — Write real Privacy Policy content and clear it for launch.To do Viv — Write real Terms of Service content and clear it for launch.To do Viv — Add a branded not-found.tsx to apps/web.Done Viv — Restrict CORS on the RAG query API route.Done me — Decide whether CSP enforcement (CSP_ENFORCE=1) is set in the production deployment environment, and confirm it before next release.To do Viv — Add disabled state to 'Lock tag' and 'Password protect' toggles on trigger management, or ship the feature.To do Viv — Fix or disable 'Edit Design' button on QR trigger detail.Done Viv — Finish or remove the 4 unavailable analytics widgets (geo-map, live-counter, goal-progress, ai-qa).Done Viv — Pull pricing feature bullets from shared billing config instead of hand-maintained duplicate strings.To do Viv — Add route-level loading.tsx skeletons for key authenticated routes.To do Viv — Restyle app/error.tsx and app/global-error.tsx to match the design system.To do Viv — Consolidate the three duplicated account-deletion implementations into one.To do Viv — Rename or restructure features/destinations/pages/SettingsPage.tsx to reflect that it manages workspace/account settings, not destinations.To do Viv — Implement inline_lock badge rendering in the analytics Gate component.Done Viv — Replace the marketing homepage's 'Dashboard screenshot coming soon' placeholder with a real product screenshot or demo visual.To do Viv — Un-skip and implement the 10 skipped Supabase auth Playwright tests.To do Caitlin — Verify desktop auth flows end-to-end: sign in (OAuth + email/password + OTP), sign up, forgot/reset password, device-trust verify-device (if flag enabled), sign out.To do Caitlin — Verify Assets feature (Triggers, Groups, Families tabs) end-to-end, including trigger detail linking/renaming/deleting and family/group management.To do Caitlin — Verify Analytics Overview, Dive, and Campaigns pages render real data correctly (Compare page tracked separately as unfinished).To do Caitlin — Verify all seven apps/web Settings pages (workspace identity, agent, custom domain, subscription, security, notifications, data) function correctly end-to-end.To do Caitlin — Verify the AI agent chat UI end-to-end (send message, receive streamed response, conversation history).To do Caitlin — Verify public destination viewers /t/[hash], /d/[hash], /n/[hash] across all destination types they support.To do A paying customer silently loses their paid blocks when the plan lookup errors — usePlan's error is never surfacedTo do

Wave

Web — Settings, Analytics & agent build

TacTile › Launch TacTile › Web › Web — Settings, Analytics & agent build

6/26 done20 open1 open blocker

Selected taskclear

A paying customer silently loses their paid blocks when the plan lookup errors — usePlan's error is never surfaced

To doOwner · ait_04680bcb

No dependencies in this wave — nothing gates it, and nothing waits on it.

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**A paying customer silently loses their paid blocks when the plan lookup errors — usePlan's error is never surfaced** · to do

Where it sits: TacTile › Launch TacTile › Web › Web — Settings, Analytics & agent build

## The brief on file

Filed 2026-08-13 by the round-21 web session. It is the deliberately-deferred half of #418 (0e1e89ef), which fixed the OTHER direction.

WHAT #418 FIXED: all eight `apps/web` analytics tier gates failed OPEN on a plan-lookup error — a free account saw paid blocks whenever the lookup hiccuped. That is closed, via `lib/tier.ts` and 10 converted call sites, and mutation-proved.

WHAT REMAINS — the mirror bug: none of the 8 `usePlan()` consumers read `error`. So when the lookup fails, a PAYING Plus customer is silently treated as free and loses their plus-only blocks, with no message, no retry, and no indication anything went wrong. Failing closed is the right default for the gate; showing nothing is not the right default for the user.

WHY IT WAS DEFERRED RATHER THAN MISSED: the round-21 brief explicitly instructed the session not to let an error-UI redesign expand that PR, and it obeyed. Correct call — this needs a design answer (inline retry? a banner? a degraded-mode marker on the blocks themselves?) rather than a mechanical fix, and bolting one on would have made a proved 3-item PR unreviewable.

THE WORK: decide the error affordance, then surface it at the 8 consumers. Note the constraint that shaped #418 — `hasTier` has no discriminating mutation and its test says so in the source; do not treat that test as proof of a behaviour change.

Run `bash scripts/verify/gate.sh` before opening a PR. Chain is 43; `verify:secrets-rotation` is the one allowed red (12 overdue credentials, tracked at t_185119c7).

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

Web — Settings, Analytics & agent build

A paying customer silently loses their paid blocks when the plan lookup errors — usePlan's error is never surfaced