Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Launch TacTile›Android›Android QA — Sign-off·94 in this wave

Approve: Android QA sign-offTo do · blocker Decide how QA runs against a prod-only database before Kaitlynn's phone passTo do · blocker QA: Destination creation — all 14 typesBlocked QA: Destination launchpad and editingTo do QA: Delete account and sign outDone QA: Auth and onboarding — all six stepsBlocked QA: New destination category gridDone QA: Category source pickersDone QA: Website destinationDone QA: Link Hub destinationDone QA: Payment destinationDone QA: Menu destinationDone QA: Gallery destinationDone QA: Video destinationDone QA: Audio destinationDone QA: Note destinationDone QA: Document destinationDone QA: Wifi destinationDone QA: Bluetooth destinationDone QA: Form destinationBlocked QA: Action destinations — all 8 sub-typesBlocked QA: Shop cart and checkoutDone QA: DashboardDone QA: CanvasDone QA: Assets — all four tabsDone QA: Group and family launchpadsDone QA: Analytics — all six subpagesDone QA: QR generation and design editorDone QA: NFC encoder and launchpadTo do QA: Settings — all seven screensDone QA: AI agent and approvals inboxBlocked QA: ConnectCard and vCard buildersDone QA: ShopDone QA: Canvas node tap and launchpad (confirmed silent dead end)Done QA: Canvas search overlayDone QA: Assets — Triggers tabTo do QA: Assets — Destinations tabDone QA: Assets — Groups tabTo do QA: Assets — Families tabDone QA: Group launchpad screenTo do QA: Family launchpad screenBlocked QA: Analytics — Deep DiveDone QA: Analytics — CompareDone QA: Analytics — Real-timeDone QA: Analytics — GoalsDone QA: Analytics — DashboardsDone QA: Analytics — MapDone QA: Analytics — pickers and sheetsDone QA: QR logo cropperDone QA: QR code list reachability (confirm currently unreachable)Done QA: Trigger launchpad (Manage QR / Manage NFC Tag)To do QA: Settings root listDone QA: Profile settingsDone QA: Appearance settingsDone QA: Notifications settingsDone QA: Help CenterDone QA: Contact supportDone QA: Custom domain settingsDone QA: Profile photo crop screenDone QA: Agent sessions sheetDone QA: Shop home and product detailDone FIX: Payment destination — Just testing the QADone FIX: Form destination [Android] — same issue with the menu (safari can't open... message)Done FIX: Action destinations — all 8 sub-types [Android] — for facetime, when i enter the phone number or apple ID field, the…Done FIX: Destination creation — all 14 types [Android] — link and payments creation looks good. previewer for payments doesn't…Done FIX: Destination launchpad and editing [Android] — the launchpads need work to visually match branding better and just…To do FIX: Auth and onboarding — all six steps [Android] — i can't test thisBlocked FIX: Gallery destination [Android] — when i am selecting images to add, the blue button at the bottom of the…Done FIX: Audio destination [Android] — when i hit the record audio button, it needs to open the device's…Done FIX: Analytics — Real-time [Android] — the main widget on the real-time dashboard does not match the UI. it…Done FIX: Help Center [Android] — the annimation that happens when a question is expanded looks bad.…Done FIX: Assets — Families tab [Android] — visually each family needs to be in a card to match the styling of…Done FIX: Analytics — all six subpages [Android] — map is totally messed up. when i select map from the list of dashboard…Done FIX: Contact support [Android] — when i hit the compose email button it opens the email but it should…Done FIX: Analytics — Map [Android] — seems totally broken. the map takes over the whole screen right now and…Done FIX: Assets — Triggers tab [Android] — the trigger groups listed at the top of the list of triggers still need…Done FIX: Help Center [Android] — the fix worked. now hide the troubleshooting section. hide the…Done FIX: Audio destination [Android] — still won't let me record auidoDone FIX: AI agent and approvals inbox [Android] — after asking it to make a red qr code then asking it to connect it to a…Done FIX: Assets — Groups tab [Android] — there is no group tab, since groups are listed at the top of the…To do FIX: Trigger launchpad (Manage QR / Manage NFC Tag) [Android] — looks pretty good for now i guess. however when i hit edit for any…To do FIX: Group launchpad screen [Android] — there currently is no group launchpad. that needs to be created.To do FIX: Family launchpad screen [Android] — remove the schedule section from family launchpad. there is no timeline…Done FIX: AI agent and approvals inbox [Android] — seems like nothing happens when i hit reject, tweak, or approve. no…Done Android Preview fires a real webhook — make destination preview side-effect-freeDone FIX: Destination creation — all 14 types [Android] — gallery looks good. the venmo payment preview looks ok but when i hit…Done FIX: Family launchpad screen [Android] — i need to be able to close the keyboard by sliding it down and tapping…Done FIX: Assets — Triggers tab [Android] — looks good. there needs to be a manage group page like there is for a…To do QA: Android analytics 24h chart groups scans by the hourBlocked QA: Android goal editor offers a Daily repeatBlocked QA: Android Free account sees upgrade cards on every Analytics pageBlocked QA: Android AI Insights asks a Plus account to upgrade to ProBlocked QA: Android AI agent draws a failed step with a red mark, not a green checkBlocked QA: Android Program NFC still recognises a normal TacTile stickerBlocked

Wave

Android QA — Sign-off

Page-by-page human sign-off on PHONE ONLY. Owner Kaitlynn, gate Matthew. Tablet verification is a separate later wave (Android QA — Tablet), because phone must prove the backend and feature logic before any tablet effort. All 16 checks were rewritten to phone-only on 2026-07-26.

TacTile › Launch TacTile › Android › Android QA — Sign-off

68/94 done26 open2 open blockers

Selected taskclear

Android Preview fires a real webhook — make destination preview side-effect-free

DoneOwner · Vivt_0cc032e8

Split out of the preview-cluster triage (t_f4bf5b5e, PR #652). Tapping Preview on an Android webhook action destination fires the real webhook to the customer's endpoint.

No dependencies in this wave — nothing gates it, and nothing waits on it.

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**Android Preview fires a real webhook — make destination preview side-effect-free** · done

Split out of the preview-cluster triage (t_f4bf5b5e, PR #652). Tapping Preview on an Android webhook action destination fires the real webhook to the customer's endpoint.

Where it sits: TacTile › Launch TacTile › Android › Android QA — Sign-off

## The brief on file

[overnight 29→30 Sep] Created by Viv from t_f4bf5b5e's triage. DECIDED (not a Matthew call): a Preview must be side-effect-free, so it must never POST to a customer's webhook URL.

WHY IT IS NOT A ONE-LINER: DestinationRecord on Android carries no action subtype, so the preview path cannot tell a webhook action from any other action without a fetch. The spec for the fix is written in PR #652's body (github.com/TacTile-dev/TacTile/pull/652) — start there.

DONE WHEN: previewing a webhook action on Android shows what it would send (URL, method, payload shape) without any network call to the target; a unit/Robolectric test pins that the preview path makes zero outbound requests for webhook actions; `pnpm verify:android-unit` green.

[overnight 29→30 Sep, batch 2] DONE — draft PR #656 (github.com/TacTile-dev/TacTile/pull/656), commit 71dff3b9.

WHAT IT DID: the launchpad's Preview (the button and the live-link row) opened https://tactile.to/t/<hash> in a Custom Tab, and for a webhook action that page POSTs the creator's endpoint from TacTile's servers. Now an ACTION is looked up first (one GET /api/actions/{hash}/content) and: webhook → a local card in the in-app sheet, NOTHING sent; every other action subtype → the live link as before; anything we cannot classify (offline, 5xx, undecodable, blank or unknown subtype) → Preview stays closed with a message — never fire on doubt. The other 13 destination kinds are untouched (same link, no extra request). previewNeedsLookup is an exhaustive `when` over DestinationKind with no else, so a fifteenth kind is a compile error there.

THE CARD vs YOUR DONE-WHEN: it asked for "URL, method, payload shape"; #652's sketch said "Method row only, hides the target URL". I shipped the middle: title, Method (as the server will use it), Endpoint = the HOST only (the path and query are usually the credential; userinfo is dropped), Body = its shape, never its content ({"hash": <destination id>} by default, "Your own body (N characters)", or none for GET) and "Preview only. Nothing was sent to your endpoint." No link on it. If you want Method-only, delete two rows in webhookPreviewCardHtml (PreviewPlan.kt). If you want the full URL, it is one line, but the URL is usually the secret.

PROOF THAT NOTHING IS SENT: LaunchpadPreviewWireTest drives the real Retrofit DestinationsApi + resolver against a MockWebServer and asserts the server received EXACTLY ONE request (GET the action record), no body, and none under /t/. The Compose test mounts the real view model: Preview on a webhook never reaches the link opener. 49 new tests, 30 source mutations each turn a test red. A source scan pins that both click sites use the gate and there is one Custom Tab launch (a syntax rule; the behaviour is proved one layer down).

NOT RUN ON A DEVICE. Recommended before trusting it: on a build with #656, save a webhook pointing at a throwaway receiver (e.g. a request-bin URL), open its launchpad, tap Preview and the live-link row, and expect ZERO hits at the receiver.

BEHAVIOUR CHANGE TO KNOW: Preview on an action now needs the lookup to succeed; offline it says "Couldn't check what this action does, so Preview stayed closed. Try again." (the live link itself needed the network anyway).

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

Android QA — Sign-off

Android Preview fires a real webhook — make destination preview side-effect-free