Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Launch TacTile›iOS›iOS — Settings, Analytics & tools build·133 in this wave

Approve: iOS Settings, Analytics & toolsTo do · blocker Pro-gate Deep Dive, Compare, Map, and Overview to match backend's plus-tier requirementDone · blocker Decide fate of ProfilePhotoCropReviewView (ship or delete)To do Decide fate of Analytics Overview tab (ship or delete)To do Decide fate of legacy Dashboards widget system (~15 files)To do Decide Goals v2 scope (recurrence, prefill, streak history, sort, status, taxonomy)To do Add re-edit support for saved ConnectCards and Social Hub destinationsDone Build proposed-data mapping layer for native AI proposal cardsDone Decide routing for 'Program NFC Tag' hub tileTo do Build iOS NFC tap-to-write re-encode, password-protect, and mode persistenceTo do Verify analytics numbers against ground truth (not just rendering)To do Define real scope of the destination-analytics pipeline before it's built blindTo do Verify no analytics events are recorded for free accountsTo do Fix unregistered tactile:// URL scheme breaking every AI card "Open in editor" handoffDone Agent sessions: add the PATCH-title and hard-DELETE routes (route layer only — the DB is ready)Done Money display: no currency column on payments, forced 2-decimal formatting, and silent "$" fallback on bad currency codesTo do insights.ts calls callAnthropicMessages directly instead of createModelProvider, violating ADR-0001's amendmentDone Fix stale 'coming soon' copy on Company Info cardDone Produce real Quick Tutorial product walkthrough videoTo do Host and wire real Quick Tutorial videoTo do Delete dead stub properties in SettingsHostViewModelDone Analytics dead-code sweep — Deep Dive legacy + stale commentsTo do Fix 'Set goal' button closure-binding bug in Deep DiveTo do Wire custom date-range Apply in Dashboards device distribution widgetDone Decide fate of Map breadcrumb drill-down featureTo do Fix deprecated GeoTableWidget rendering during loading windowDone Add filter-aware empty state copy to Goals listTo do Fix scoped-goal display name resolution in Goal SheetDone Decide fate of multi-entity Compare dashboard widget conceptTo do Decide fate of Sources dashboard tile (needs new API endpoint)To do Add rename/delete UI for dashboardsDone Decide whether dashboard share/export is in scopeTo do Decide Pro-lock widget scope for Dashboards paletteTo do Fix duplicate widget title bug in Dashboard tilesDone Surface tier-verification error in AnalyticsProGateDone Wire Mute Destination to real persisted stateDone Wire menu destination edit submission (currently a no-op stub)Done Delete dead ConnectCard editor files (FieldEditorView, CardPreviewView, CardStyleSheet)Done AI surface dead-code and stale-comment sweepDone Fix GalleryCard empty state at zero proposed itemsDone Decide real scope for QRLaunchpad Share & ExportTo do Sign off: Settings surfaces not flagged in this auditTo do Sign off: Analytics files/widgets confirmed clean in this auditTo do Sign off: ConnectCard field editors and models confirmed cleanTo do Sign off: AI stubbed-banner behavior confirmed working as intendedTo do Sign off: QR generator and NFC stamp-test harness confirmed clean outside tracked gapsTo do Wire in or remove orphaned AnalyticsKitRealtimeScreen per decisionDone Build real AI Q&A dashboard widget or remove per decisionTo do Build multi-entity Compare dashboard widget or remove per decisionTo do Build Sources dashboard tile backend + wiring or remove per decisionTo do Build dashboard share/export or confirm out of scope per decisionTo do Mark specific widgets Pro-exclusive or remove lock machinery per decisionTo do Wire Map breadcrumb drill-down or remove per decisionTo do Decide: delete the preview-only Analytics widget island (7 files, 8 uncalled client methods)To do Android: two more places show a plan refusal (403) as a generic failure - Assets Families tab, Home insight cardDone A/B variant assignment hashes the daily visitor_hash, so one visitor can change variant from one day to the nextTo do Android: add a ViewModel test that generateInsight() maps a tier refusal to the Pro upsellDone iOS: pin the Deep Dive fetch set with a stubbed-client test (6 requests for account/trigger/destination, 7 for campaign/group)To do iOS Deep Dive trigger hero shows a change percentage without checking the Worker honoured the compare windowDone previousYearWindow gives a zero-length or reversed prior window when the window ends on Feb 29Done Android Activity chart overlays a "last year" line even when the Worker answered the previous periodTo do Wire ProfilePhotoCropReviewView Save + Change Photo buttonsTo do Fix Contact Support photo-library attachment (picker bound to nil)Done Build Segment + Zapier analytics connectorsBlocked Notify user when custom domain provisioning completesBlocked Wire in or remove Analytics Overview tab per decisionTo do Build real custom-range comparison in Deep Dive (Compare sheet + Activity widget)To do Wire 'Continue conversation' CTA to real Insights screenTo do Show real errors instead of fake seed data in Deep Dive asset pickerDone Wire real Avg-time-to-arrive / Next-action KPIs or remove tilesDone Fix Live Activity Feed entity scoping and add loading/error stateBlocked Decide whether Compare tab should be Pro-gatedDone Surface real errors instead of fake totals in Compare tabDone Fix Real-time tab mock-data fallbacks and missing connection/error UIDone Decide fate of orphaned AnalyticsKitRealtimeScreen.swiftDone Fix Map tab hardcoded mock country data and missing error stateDone Wire Dashboards Geo widget tile actions (view full map, granularity chips)To do Delete confirmed-dead legacy Dashboards widget codeTo do Add loading state and surface errors in Goals listDone Fix Goal Sheet stale error state and build asset-picker retry chipDone Build approved Goals v2 scope itemsTo do Wire Dashboards 'Pick a goal' pill and remove hardcoded fallback progressDone Decide fate of AI Q&A dashboard widget stubTo do Decide fate of ConnectCard photo field typeTo do Fix Preview Destination to show real saved card, not fake demo dataDone Persist Destination Name/Description edits on Save and CloseDone Replace AgentConnectCard's hardcoded fake account name with real OAuth dataBlocked Complete AgentDraftStore seeding for remaining proposal card typesDone Wire real 'Send test event' for WebhookCardDone Decide when to build the real Webhook destination connectorTo do Wire agent pending-approvals badge to real pending countTo do Decide whether Approvals Inbox needs Tweak supportDone Add Tweak support to Approvals InboxTo do Build real rename/delete endpoints for agent sessionsDone Auto-refresh QR image after white-label domain reprogramBlocked Build real Static Program flow in NFCStampTestViewTo do Build real Bulk Program flow in NFCStampTestViewTo do Fix NFC Lock Tag toggle (silent no-op, no persistence)Done Build real QR export per decided scopeTo do Decide the account-timezone plan for analytics day-boundariesTo do Wire the account-timezone decision into rollups and AnalyticsRangeTo do QA: brand-new zero-scan account across every Analytics tabBlocked Load-test analytics queries against a high-volume partitioned accountBlocked Verify AI proposal card "Open in editor" handoffs are dead on iPhoneDone Cards whose tweak feedback sends a placeholder instead of the user's edit (iOS #240 defect b, remaining)Done Source-attribution RPC pivot labels don't match the API's by_campaign/by_group keysDone iOS Dashboards "Top performers" tile 400s for a family/campaign-scoped assetTo do is_first_seen only detects "first scan today", not "first scan ever"Done visitor_year_hash keys on browser major version, so browser auto-updates and shared IPs silently reshuffle unique-visitor countsTo do UA parser misclassifies iPad Safari as desktop macOS and Android tablets as mobileDone "hybrid" trigger medium renders as "unknown" on iOS and AndroidTo do Android 24h analytics chart always requests day granularity, never hourlyDone Android goal editor has no "daily" recurrence optionDone Android shows generic 403 error cards instead of an upsell on Free-tier Deep Dive/Compare/Goals/MapDone Android AI Insights 403 (Free/Plus) shows as a generic "couldn't generate" failure, not an upsellDone Android Deep Dive geo region/city drill-down hard-caps at 8 rows with no way to see moreDone Android analytics map has no centroid for Iceland, Luxembourg, Croatia, Costa Rica or EstoniaDone iOS Trigger Mix / Compare NFC% gauge silently excludes link and direct opensDone iOS Deep Dive fetches trigger/destination/campaign/group-scoped data that no live screen ever rendersTo do web-mobile production deploy is 3 months and 89 commits behind origin/main's analytics featureDone destinations.total_opens is read by two endpoints but never incremented anywhereBlocked analytics_rollups_daily and analytics_alerts have no readers anywhere in the appTo do document/notes/video/audio destinations never fire the funnel beacon — Deep Dive funnel widget is permanently all-zero for themDone Decide: Families Leaderboard on iOS (Deep Dive + Dashboards tile) - the roster request can only 400To do Pin the first-seen call site in events.ts: swapping visitor_year_hash for visitor_hash leaves every test greenDone Plus promises "AI analytics (Basic)" but AI Insights is Pro-only: align server or plan listsTo do iOS Activity widget Custom range shows page-level priors under a Custom labelTo do API answers compare=previous_year with the previous period, so iOS "Same period last year" shows the wrong comparisonDone Check the funnel beacon is accepted from a browser: sendBeacon sends credentials and utils/cors.ts sets no Access-Control-Allow-CredentialsDone Run the fixed funnel beacon in WebKit and Firefox: the t_e9f24402 browser run was Chromium 143 onlyBlocked Android Activity "Same period last year" totals row compares with the previous period until the API deploys; no meta.compare checkDone Geo tile: Region and City chips leave the Analytics tile on an endless skeleton (tile VM loads countries only)To do QA: opening a document, note, video or audio link now counts as a view in Analytics (desktop web)Blocked

Wave

iOS — Settings, Analytics & tools build

Remaining build work across Settings, Analytics, ConnectCard, the AI panel, and QR/NFC programming. Everything marked 'coming soon' here is intended to ship.

TacTile › Launch TacTile › iOS › iOS — Settings, Analytics & tools build

60/133 done73 open1 open blocker

Selected taskclear

iOS Deep Dive trigger hero shows a change percentage without checking the Worker honoured the compare window

DoneOwner · Vivt_6d6e5a26

DDTriggerHero reads summary.delta["scans"] with no confirmsCompare check, so a build that carries the custom compare range, against a Worker that predates it, would show a previous-period change under a custom window.

No dependencies in this wave — nothing gates it, and nothing waits on it.

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**iOS Deep Dive trigger hero shows a change percentage without checking the Worker honoured the compare window** · done

DDTriggerHero reads summary.delta["scans"] with no confirmsCompare check, so a build that carries the custom compare range, against a Worker that predates it, would show a previous-period change under a custom window.

Where it sits: TacTile › Launch TacTile › iOS › iOS — Settings, Analytics & tools build

## The brief on file

[2026-10-17 · Viv] r34 CLOSER: CLOSED against draft PR #773 https://github.com/TacTile-dev/TacTile/pull/773 (r32/ios-r3-ship, head 096683af, base main, MERGEABLE; NOT merged, NOT deployed). Commit f1157a03. HONEST SCOPE: this is a pre-wiring guard, not a live-defect fix. DDTriggerHero has no production call site: git grep finds only its definition (TriggerWidgets.swift:22), the #Preview at :474, the tests and a comment in DeepDiveViewModel.swift:82, so the wrong pill was never reachable today. Done-when: the XCTests on stubbed ScanSummary values assert (1) test_triggerHeroPill_customWithoutEcho_showsNoPill, (2) customWithMatchingEcho_showsThePill, (3) previousPeriod_stillShowsIt; plus customWithDifferentWindowEcho, previousYear_needsThePreviousYearEcho, noSummaryYet and deltaWithoutScans. All 7 test_triggerHeroPill_* passed in a REAL simulator (iPhone 17 Pro, iOS 26.5): AnalyticsWireDecodeTests Executed 28 tests, with 0 failures. Mutation (headlineDelta without the confirmsCompare gate), run alone by the acceptance reader: 28 executed, 3 failures (customWithoutEcho, customWithDifferentWindowEcho, previousYear_needsThePreviousYearEcho), (1) red as the Done-when requires; restored byte-identical. A second reader mutation (body bypasses headlineDelta) turned ios-analytics-custom-compare.test.ts red, 1 of 23 failed, restored; source pins 23/23. Stubs only; nothing signed in to production. Readers: acceptance CONFIRMED, safety CONFIRMED (no open PR adds a DDTriggerHero( call that would now fail to compile). Gate: two runs at 096683af, run 2 exit 0 with known-red verify:secrets-rotation only. CI on #773 at 096683af, read Sat 17 Oct 11:21 PDT: build & test, changes, dep-scan, semgrep, static-firewall, playwright, swift-parity and the ios workflow all pass; verify fails only at the step "Secrets rotation audit" (the sanctioned red, t_3e28c5b5; named with gh api on the job steps); no review comments. ui_check: none. NOTE: it stacks on 000ea44e (t_ad8a19ee, still todo), which ships in the same PR.

[2026-10-16 · Viv] r34 BUILDER (batch ios-r3-ship): evidence for f1157a03, unchanged; local on r32/ios-r3-ship, not pushed, no PR, gate not run, so NOT closed. The 7 new XCTests now ran in a REAL simulator (iPhone 17 Pro, iOS 26.5; before this only on the macOS harness): AnalyticsWireDecodeTests Executed 28 tests, with 0 failures. The seven, all passed: test_triggerHeroPill_customWithoutEcho_showsNoPill, customWithMatchingEcho_showsThePill, previousPeriod_stillShowsIt, customWithDifferentWindowEcho_showsNoPill, previousYear_needsThePreviousYearEcho, noSummaryYet_showsNoPill, deltaWithoutScans_showsNoPill. MUTATION (iOS M2, in a combined run with M1): DDTriggerHero.headlineDelta without the confirmsCompare gate (guard let summary else { return nil }) -> Executed 28 tests, with 6 failures; the gate-related reds are test_triggerHeroPill_customWithoutEcho_showsNoPill (the Done-when's test 1), customWithDifferentWindowEcho_showsNoPill and previousYear_needsThePreviousYearEcho. The other three reds are M1's confirmsCompare cases. Both files restored, git diff --quiet rc 0. Honest scope unchanged: git grep finds DDTriggerHero only in TriggerWidgets.swift (its definition and the #Preview at :474) and a comment in DeepDiveViewModel.swift, so this is a pre-wiring guard, not a live-defect fix. NEXT: readers, one gate, draft PR with the stack, then close against it. Logs: ~/TacTile-dev/evidence/r34/ios-r3-ship/xcodebuild-run1.log and xcodebuild-mutation-M1M2.log.

[2026-10-16 · Viv] r33 CLOSER: NOT CLOSED, status doing -> todo. Both readers CONFIRMED f1157a03 (7 new XCTests, 28/28 on the macOS harness against the real sources, source pin 23/23; acceptance reader's mutations red then restored: headline reads delta directly -> pin red; gate uses .previousPeriod -> 3 Swift tests and the pin red). Close rule 3 is unmet, so I cannot close: the commit is on no pushed PR, since it is stacked on 000ea44e and the ship run held the stack. NEXT: the same one draft PR as t_3f63c464 (see t_ad8a19ee), then close this against it. PR body must keep the honest scope: DDTriggerHero has no production call site (git grep finds only the #Preview at TriggerWidgets.swift, about :474), so this is a pre-wiring guard, not a live-defect fix; the 7 XCTests ran on macOS only, re-run on a simulator once "sudo xcodebuild -runFirstLaunch" fixes CoreSimulator.

[2026-10-16 · Viv] r33 SHIP JOB batch:ios-r3-ship: NOT PUSHED. Both readers CONFIRMED commit f1157a03 (7 XCTests 28/28 on the macOS harness, mutations red, DDTriggerHero has no production call site), so it is ship-ready on its own merits. It is stacked on 000ea44e (t_ad8a19ee, shippable=false from the ship job): confirmsCompare has 0 refs on origin/main and tests/unit/ios-analytics-custom-compare.test.ts does not exist there. A cherry-pick onto origin/main 4f2c1d6b conflicts in AnalyticsWireDecodeTests.swift and modify/delete on that test file. I did not rewrite it to stand alone. Lives on local r32/ios-r3-ship (~/TacTile-dev/TacTile-ios-r3-ship), unpushed, no PR, gate not run. NEXT: when 000ea44e is cleared to ship, cut r32/ios-r3-ship-ship from origin/main, cherry-pick 000ea44e, ca8f4610, f1157a03 in order, one gate, one draft PR. Caveat for the PR body: the 7 new XCTests ran on macOS only, re-run on a simulator once CoreSimulator is fixed (sudo xcodebuild -runFirstLaunch). Status left unchanged.

[2026-10-16 · Viv] r33 BUILT, NOT SHIPPED: commit f1157a03 on local r32/ios-r3-ship (worktree ~/TacTile-dev/TacTile-ios-r3-ship), unpushed, no PR, gate not run, both readers still to come. DDTriggerHero takes the page's compareMode as a required property (no default) and reads its pill through the static headlineDelta(_:compareMode:), which returns nil unless summary.confirmsCompare(compareMode), as DashTilesSummary.deltaPct does. The preview call site passes .previousPeriod. No held file touched (DeepDiveViewModel.swift and AnalyticsAPIClient.swift unchanged; no file overlaps #764). EVIDENCE: 7 new XCTests on stubbed ScanSummary values, all green: (1) custom mode with no meta.compare shows no pill, (2) a matching echo shows it, (3) previous period still shows it with or without an echo, plus last year needs the previous_year echo, a different custom window shows none, no summary shows none, a null scans delta shows none. AnalyticsWireDecodeTests 28/28, run on macOS against the real sources because the Xcode 27.1 update broke the simulator (CoreSimulator 1171.7.0 vs 1174.9.2); build-for-testing for the generic iOS Simulator SDK succeeded. MUTATION: gate removed -> 3 Swift tests red including (1), and the source pin in ios-analytics-custom-compare.test.ts (23/23) red; restored. HONEST SCOPE: DDTriggerHero is not instantiated by any screen. git grep finds only the #Preview at TriggerWidgets.swift:457 (it now passes .previousPeriod), so the wrong pill was not reachable; this puts the guard in before a layout wires the hero in.

[2026-10-16 · Viv] r33 BUILDING (status doing) on r32/ios-r3-ship, per NEXT-PROMPT 16 Oct: the "DO NOT START before the PR carrying 000ea44e has merged" premise (confirmsCompare is absent on origin/main) is met by building on that branch. FOUND while reading: DDTriggerHero is not instantiated by any production view. git grep over apps/ios finds its only call site in the #Preview at TriggerWidgets.swift:457, so the wrong pill is not reachable today; the gate is for the day a layout wires the hero in. Time box 60 minutes. Draft PR, not merged, not deployed.

[2026-10-15 · Viv] Filed from t_ad8a19ee (r32 closer). Found by the safety reader of the custom-compare commit; I re-read the lines.

WHAT IS WRONG: apps/ios/TacTileConnect/Features/Analytics/Components/TriggerWidgets.swift:58 (DDTriggerHero.headline) shows deltaPill for summary.value?.delta?["scans"] with no check that the Worker actually used the window the page asked for. The "no chip beats the wrong chip" guard added by commit 000ea44e (local branch r32/ios-r3-ship) is ScanSummary.confirmsCompare (AnalyticsModels.swift:143), and it is applied only at DashTilesSummary.swift:133 (the Key Metrics scorecard). DDTriggerHero takes only entity and summary (TriggerWidgets.swift:21-22), so it has no compare mode to check against.

WHY LOW: it matters only if an iOS build carrying the custom compare range ships BEFORE the API change deploys (prod runs 938b9a6c; the deploy is Matthew's, runbook #732). Ship order API first makes it moot. It is cheap to close so that ship order stops being a safety property.

DO NOT START before the draft PR carrying 000ea44e has merged: confirmsCompare does not exist on origin/main (4f2c1d6b). No open PR touches TriggerWidgets.swift (checked with gh pr list over changed files, 15 Oct).

FIX: pass the page's compareMode into DDTriggerHero from its call site and return no pill unless summary.value.confirmsCompare(mode), exactly as DashTilesSummary.deltaPct does.

DONE WHEN: an XCTest on stubbed ScanSummary values asserts (1) custom mode with no meta.compare shows no pill, (2) a matching echo shows it, (3) previous-period mode still shows it; a mutation removing the gate turns (1) red. Stubs only; no simulator session signs in to production.

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

iOS — Settings, Analytics & tools build

iOS Deep Dive trigger hero shows a change percentage without checking the Worker honoured the compare window