Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Launch TacTile›DevOps›DevOps Foundation·35 in this wave

Approve: DevOps FoundationTo do · blocker NEEDS MATTHEW: staging STRIPE_WEBHOOK_SIGNING_SECRETBlocked · blocker main is RED — 8 unit tests failing on origin/main, so pnpm verify cannot gate any PRDone · blocker The production account's data is 42 days stale — Analytics renders empty at any default windowBlocked · blocker MATTHEW: add db_url to the 1Password Supabase item — two RLS audits have never been runnableDone · blocker Wire apps/api test suite into CIDone Wire Playwright specs into CIDone Wire verify:swift-parity into CIDone Enable branch protection on mainBlocked Verify the staging environment is actually liveDone Web deploy workflow (manual trigger only)To do API deploy workflow (manual trigger only)To do Add post-deploy smoke test to the deploy workflowsTo do Write the rollback procedureTo do Add Sentry to iOSTo do Add Sentry to AndroidTo do Configure uptime monitoringTo do Set the three missing staging secrets on tactile-api-stagingDone Playwright is failing on main and producing no report — every run that gets a runner failsTo do Playwright job must free port 3000 BEFORE its first suite — a watchdog-killed job leaks its server and fails every later runDone Add CHANGELOG.mdTo do Automate release tagging on mainTo do Fix stale Vercel references in the observability runbookDone Add apps/api typecheck to CIDone Clean the SAST baselineTo do Flip SAST to blockingTo do Edge function deploy workflow (manual trigger only)To do Supabase migration check in CITo do Write the release procedureTo do Configure Supabase log drainTo do Centralize Cloudflare Workers logsTo do Replace console.* with structured logging in apps/apiTo do Two runners share one ~/.gradle — scope it per runner without losing the warm cacheTo do MATTHEW: CI capacity — one Mac, two runners, and a full Xcode build now runs on every pushTo do Auto-cancel queued CI runs whose head branch was deletedTo do

Wave

DevOps Foundation

Unblocked now — nothing waits on the surfaces. Wiring existing tests into CI, deploy automation, base observability.

TacTile › Launch TacTile › DevOps › DevOps Foundation

10/35 done25 open3 open blockers

Selected taskclear

Replace console.* with structured logging in apps/api

To doOwner · Vivt_630f88da

Unlocks 1Approve: DevOps Foundation

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**Replace console.* with structured logging in apps/api** · to do

Where it sits: TacTile › Launch TacTile › DevOps › DevOps Foundation

## Unlocks 1

- Approve: DevOps Foundation

## The brief on file

NOT STARTED — round 17 ran out of runway after items 1-3. Count updated and
reconnaissance recorded so the next session does not re-derive it.

COUNT: 380 console.* sites under apps/api/tactile-api/src, not the ~346 this
row used to claim and not the 379 the round-17 brief measured. It drifted
upward BY ONE DURING round 17 itself, which is the real finding: new code is
still being written against console while this row sits open.
  grep -rno 'console\.\(log\|error\|warn\|info\|debug\)' apps/api/tactile-api/src --include='*.ts' | wc -l

Per-file: videos.ts 50, customDomains.ts 28, billing.ts 21, documents.ts 20,
qr.ts 19, then webhooks.ts and triggers.ts TIED at 15 (there is no clean top-6).

FOUR THINGS THAT WILL COST THE NEXT SESSION TIME IF NOT READ FIRST:

1. videos.ts has 50 grep hits but only 49 REAL call sites — videos.ts:313 is a
   comment containing the string. A codemod keying off 50 hunts a site that
   does not exist.
2. There are ZERO message-only sites in videos.ts. Every one of the 49 carries
   a second argument. Any proof plan that asks for "one message-only site" in
   the shape distribution cannot be satisfied; the real distribution is
   ~31 one-line object literals, the rest multi-line or bare-err.
3. jscodeshift ^17.1.1 IS in root devDependencies — but there is NO
   @types/jscodeshift, and its default parser does not handle TypeScript. The
   transform must be invoked with --parser=tsx.
4. packages/utils/AGENTS.md:34 says codemod recipes live in
   packages/utils/src/codemods and are "currently empty". The directory DOES
   NOT EXIST. And packages/utils is a published workspace package, so a
   transform landing there ships. Decide the home deliberately.

Must be an AST codemod, never a regex: many sites carry multi-line object
literals a regex corrupts, and pino's argument order is inverted from
console's, so the transform is a structural transposition.

The obvious assertion — "zero console. remains in videos.ts" — cannot tell a
correct transposition from a corrupting one: a codemod that dropped half the
keys out of every multi-line literal passes it perfectly. Snapshot the emitted
JSON record's KEYS for 3-4 sites spanning the shape distribution instead.

OUT OF SCOPE and must not be bundled in: the `wrangler tail` against staging to
observe the logger on a deployed Worker. That needs a deploy and 1Password.

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

DevOps Foundation

Replace console.* with structured logging in apps/api