Command

LaunchpadPePersonal~~personal.matthewkvamme.com~~Just Electrolyte~~hub.justelectrolyte.com~~RTRelease Timer~~hub.release-timer.com~~TacTile~~internal.tactile.to~~CSClearSource~~clearsource.matthewkvamme.com~~AtAthletic~~hub.matthewkvamme.com~~

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Inbox — on deck·56 in this wave

MATTHEW — 8 decisions that unblock the four sessionsDone · blocker MATTHEW — approve applying migration 0901 to prod (link-channel analytics)Done · blocker REVENUE OUTAGE — nobody can buy: apps/web calls /api/billing/* relatively and no such route existsDone · blocker SECURITY — `private` does nothing: 13 of 14 public /content routes ignore visibilityDone · blocker ESCALATE → Matthew: 13 critical secrets 31-57 days overdue, hidden because verify short-circuits and CI is downTo do · blocker MATTHEW — irreversible before first Play upload: the signing cert says "TapTile Inc"To do · blocker main is red: verify:knip fails on 17 exported-but-unimported types in the new Canvas featureDone · blocker SESSION 1 — Android: unblock the Play Store submissionDone SESSION 2 — Backend: the long pole everything else waits onDone SESSION 3 — iOS: the flagship agent's proposal cardsDone SESSION 4 — Web: close the viewer, then decide port-vs-rebuildDone ROUND 2 · SESSION — Backend: contracts first, then MCP real-ops and the agent quality barDone ROUND 2 · SESSION — iOS: contact viewer (launch gate), then light the 7 firing cardsDone ROUND 2 · SESSION — Android: destinations remainder, then the tablet foundationDone ROUND 2 · SESSION — Web: destination editing on both apps, then the QR studioDone ROUND 3 · SESSION — iOS: light all 7 remaining cards + close the router gapsDone ROUND 3 · SESSION — Backend: collection generators, multipart wrappers, QR render extraction, MCP coverageDone ROUND 3 · SESSION — Web: finish desktop editing, start web-mobile editing from zeroDone ROUND 3 · SESSION — Android: See-all handoff + the tablet punch list (both decisions already recorded)Done ROUND 4 · SESSION — Backend: finish the flagship's wire (webhook module, richer create schemas, MCP coverage)Done ROUND 4 · SESSION — iOS: fix the tweak-discards-edits defect, then open the iPad frontDone ROUND 4 · SESSION — Web: 14/14 editing on both apps, then the desktop QR studio (now unblocked)Done ROUND 4 · SESSION — Android: finish the tablet punch list and get the build QA-ready for KaitlynnDone ROUND 5 · SESSION — Backend: the displaced queue (schema growth, MCP coverage) + the QA env splitDone ROUND 5 · SESSION — iOS: WebhookCard closes the set, the tweak UI test, then the iPad front opensDone ROUND 5 · SESSION — Web: the web-mobile editing port, the secret-reveal surface, QR depthDone ROUND 5 · SESSION — Android: agent-card parity — the flagship cannot ship degraded on AndroidDone ROUND 6 · SESSION — iOS: the iPad round (twice deferred, now the whole round) + the card follow-upsDone ROUND 6 · SESSION — Backend: catalog-reconciled group/family, the webhook secret done right, and two honest handler gapsDone ROUND 6 · SESSION — Web: QR depth to done, and the reveal UI when the gate opensDone ROUND 6 · SESSION — Android: Approvals Inbox parity and session management — the human-in-the-loop layerDone ROUND 7 · SESSION — Web: the web-mobile purchase dead-end, then hazards before QR depthDone ROUND 7 · SESSION — iOS: the two submission-shaped iPad rows, unblock Kaitlynn, cut a buildDone ROUND 7 · SESSION — Android: drive Play to submittable (it is closest, and not gated on tablet)Done ROUND 7 · SESSION — Backend: un-quarantine the hidden tests, then the honest MCP surfaceDone verify:unit has been red for weeks on one node_modules bug — html-encoding-sniffer@6 is CJS but its dep is ESM-onlyDone SPEC → backend: checkout returns every buyer to ONE origin, so app.tactile-connect.com buyers land on tactile.toTo do FOR ANDROID (t_8de5e9bc item 2): the Play account-deletion URL is built and public — use it, do not build a second oneDone ROUND 8 · SESSION — iOS: clear the broken band, then shoot submittable iPad screenshotsDone ROUND 8 · SESSION — Android: shoot the Play listing, the account already has dataDone ROUND 8 · SESSION — Web: clear the four hazards, then finish QR depthDone ROUND 8 · SESSION — Backend: group/family reconciliation, now that it has a harnessDone ROUND 9 · SESSION — iOS: the re-derived gap band, and the one line behind six symptomsDone ROUND 9 · SESSION — Backend: unblock the two cross-platform items other lanes are stuck behindDone ROUND 9 · SESSION — Android + Web: finish the listing, finish QRTo do Decide the triggers for the 6 system error screens — all are unreachableTo do Suspended custom domain can be detached and re-added to evade suspensionDone web-mobile: send return_origin on checkout and the portal, or buyers still land on tactile.to (follow-up to t_4fefd007)To do getDomainStatus poll can overwrite an admin suspension that lands mid-poll (PATCH has no status guard)Done custom-domain-cleanup hard-deletes a detached AND suspended row 30 days after detach, ending the suspension hold (#702 case (o))Done web-mobile staging has no DNS record — the worker has been deploying into the voidBlocked QR parity: 15 snapshot fields have no control on either web surface, and none are documented as deliberateBlocked QR picker reuses the DESTINATION filter panel — wrong content, unscrollableTo do DEFERRED: rotation night + Supabase key migration moved to launch prep (Matthew, 30 Sep)To do Billing reinstate serves Pro-only custom domains to a Plus re-subscriberTo do Merge-order trap: #759's migration-order rule 3 flags open PRs whose migration sorts before main's newest (202610052300); #699 firstTo do

Wave

Inbox — on deck

Briefs Nova has teed up and are ready to run — each task's prompt is a complete, self-contained brief.

TacTile › Inbox — on deck

44/56 done12 open2 open blockers

Selected taskclear

MATTHEW — approve applying migration 0901 to prod (link-channel analytics)

DoneOwner · met_28ab026eBlocker

No dependencies in this wave — nothing gates it, and nothing waits on it.

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**MATTHEW — approve applying migration 0901 to prod (link-channel analytics)** · done · blocker

Where it sits: TacTile › Inbox — on deck

## The brief on file

The backend wave shipped three migrations. Two are applied to prod; 202608060901_analytics_summary_link_opens.sql is NOT — verified live: analytics_scans_summary/timeline in prod still lack the link arm, while the enum, rollups column, and destination_events table are all in place. Until it runs, the "link" channel is half-live: events store, but the summary and timeline RPCs don't count them, so dashboard totals won't add up once link traffic exists.

The migration is pure function replacement — drop+create of the two RPCs in one transaction, zero data statements, SECURITY INVOKER, grants restored verbatim from the live catalog (its own comments document that check). Risk is minimal even against the no-backup database.

I attempted to apply it via the Supabase MCP on 2026-08-06 and the permission gate blocked prod DDL. To execute: tell the session "apply migration 0901" and approve the apply_migration call for project xtzqmvfhtremtmbzykeq, or paste the file into the Supabase SQL editor yourself. Verification afterward: select from analytics_scans_summary should return a link_opens column.

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it