Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Launch TacTile›Backend & Infrastructure›Backend API·33 in this wave

Approve: Backend APITo do · blocker Implement /api/profile or remove routeDone Implement /api/uploadDone Implement destination analyticsDone Add upload size limits and file validationDone Define the API versioning strategyDone Verify all 14 destination content read endpointsDone Verify the five existing destination update endpoints workIn progress Fix the stale SENTRY_RELEASE on tactile-apiDone iOS decodes payment_destinations as an array — a latent whole-list decode failureTo do Add staging.tactile.to to the API CORS allowlistDone Emit CardSchema (not bare ActionPreview) from the 12 non-QR tool preview generatorsDone pnpm verify is red on main, and CI hides 9 more failures by excluding three test filesDone EMIT LEG: send method:\"link\" from the clients, or the Link bucket stays at zeroTo do POST /api/events/open is documented public+unauth but 401s anonymouslyDone Staging has no RATE_LIMIT_DO binding — both rate limiters fail open thereDone Mask the Wi-Fi password before it reaches agent proposal cards (blocks WifiCard)Done link_hub.ts has the identical partial-drop hole contact.ts just hadDone Add /health endpointDone Replace link-click placeholder zeroDone Verify documents/gallery/audio routes completeDone Add structured logging via pino-compatible APIIn progress Add request-id middlewareDone Add Sentry to WorkersDone Verify the four completed Backend API items in productionIn progress Build update endpoint for menu destinationsDone Build update endpoint for link_hub destinationsDone Build update endpoint for payment destinationsDone Build update endpoint for wifi destinationsDone Build update endpoint for bluetooth destinationsDone Build update endpoint for action destinationsDone Build the webhook MCP module (tools/webhook.ts) — Matthew chose SHIP over cutDone Derive per-type opIds for destination.create/edit so Website + Gallery cards can renderDone

Wave

Backend API

The long pole — Auth, Billing, Email, Custom Domains and Edge Functions all wait on this gate.

TacTile › Launch TacTile › Backend & Infrastructure › Backend API

27/33 done6 open1 open blocker

Selected taskclear

EMIT LEG: send method:\"link\" from the clients, or the Link bucket stays at zero

To doOwner · met_28110653

No dependencies in this wave — nothing gates it, and nothing waits on it.

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**EMIT LEG: send method:\"link\" from the clients, or the Link bucket stays at zero** · to do

Where it sits: TacTile › Launch TacTile › Backend &amp; Infrastructure › Backend API

## The brief on file

The backend half of the "link" analytics channel landed 2026-08-06 (commit b20d4d18, branch feature/backend-api). The enum, the ingest union, both aggregate RPCs, the daily rollup and the channel-mix percentages all handle `link` now.

**The bucket will still read zero until a client actually sends it.** This is the leg that gets skipped, so it is its own task.

WHAT A LINK OPEN IS (Matthew, 2026-08-06 — "link is a url"): the destination was reached by following its URL. Pasted into a message, sitting in an email signature, clicked from a bio page. No NFC tag tapped, no QR code scanned. Distinct from `direct`, which is now everything else — typed, bookmarked, opened in-app.

THE INGEST POINT: `POST /api/events/open`, body `{ triggerHash?, destinationHash?, method }`. It is the ONLY ingest point — verified by grepping the whole tree for `logAnalyticsEvent`, which has exactly one caller. It now accepts `"nfc" | "qr" | "link" | "direct"` and still falls back to `"direct"` for anything it does not recognise, so sending `"link"` from an old client build is safe and sending garbage is safe.

WHO NEEDS TO CHANGE — split by session, because none of these files are the backend session's:

1. WEB (`apps/web`, `apps/web-mobile`) — the public destination viewer at
   `apps/web/app/t/[hash]/route.ts` is where a URL open actually arrives. It
   should send `method: "link"` when the open came from following a URL rather
   than from a scan. The discriminator needs deciding: an HTTP `Referer` is the
   obvious signal, but a bare pasted URL has none, so referer-only would
   undercount. Worth 10 minutes of thought rather than a guess — whatever rule
   is picked, write it in a comment next to the call, because the difference
   between `link` and `direct` is otherwise unrecoverable from the data later.

2. WEB (`apps/web-mobile`) — `features/analytics/hooks/useLiveFeed.ts:182-184`
   has the same three-value whitelist the API had, and silently relabels
   anything else as `direct`:
     r.method === "nfc" || r.method === "qr" || r.method === "direct" ? r.method : "direct"
   Add the `"link"` arm or the live feed will mislabel every link open.

3. iOS — two things.
   a) `Features/Analytics/Models/AnalyticsModels.swift:62-66` (`struct Methods`)
      and `:96-100` (`struct MethodSeries`) are fixed-key structs with exactly
      nfc/qr/direct. They need a `link` field or the new data is dropped on the
      floor.
   b) ⚠️ A BEHAVIOUR CHANGE LANDS WITHOUT ANY iOS EDIT.
      `Components/MixWidgets.swift:390-419`, `DDTriggerMixWidget.mapChannelSegments`,
      does `for (i, b) in buckets.prefix(3).enumerated()` — it selects by ARRAY
      POSITION, not by key, and skips buckets where `pct == 0`. `link` is at
      position 3 and has always been zero, so it has always been skipped. The
      moment link carries a real count this widget starts drawing a third arc
      for it. That may be correct and desirable — but it will happen silently,
      on a deploy, with no iOS commit, so decide deliberately rather than
      discover it. The channel-mix colour switch at `CampaignWidgets.swift:398`
      already has a `link` case and a `default`, so nothing crashes.

4. ANDROID — `data/analytics/AnalyticsSummary.kt:41-46`, `data class Methods`
   has exactly nfc/qr/direct. kotlinx ignores unknown keys, so a `link` key
   arrives and is silently discarded rather than crashing. Add the field.

VERIFY WHEN DONE: create a destination, open it by following its URL, then
`GET /api/analytics/scans/channel-mix` and confirm the Link bucket is non-zero
and the four percentages sum to 100.

BLOCKED BY: the three migrations (202608060900/0901/0902) being applied. They
are written and reviewed but NOT applied — `ALTER TYPE ... ADD VALUE` is
irreversible and the database has no backups, so Matthew is asked first.

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

Backend API

EMIT LEG: send method:\"link\" from the clients, or the Link bucket stays at zero