Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Launch TacTile›DevOps›DevOps Foundation·35 in this wave

Approve: DevOps FoundationTo do · blocker NEEDS MATTHEW: staging STRIPE_WEBHOOK_SIGNING_SECRETBlocked · blocker main is RED — 8 unit tests failing on origin/main, so pnpm verify cannot gate any PRDone · blocker The production account's data is 42 days stale — Analytics renders empty at any default windowBlocked · blocker MATTHEW: add db_url to the 1Password Supabase item — two RLS audits have never been runnableDone · blocker Wire apps/api test suite into CIDone Wire Playwright specs into CIDone Wire verify:swift-parity into CIDone Enable branch protection on mainBlocked Verify the staging environment is actually liveDone Web deploy workflow (manual trigger only)To do API deploy workflow (manual trigger only)To do Add post-deploy smoke test to the deploy workflowsTo do Write the rollback procedureTo do Add Sentry to iOSTo do Add Sentry to AndroidTo do Configure uptime monitoringTo do Set the three missing staging secrets on tactile-api-stagingDone Playwright is failing on main and producing no report — every run that gets a runner failsTo do Playwright job must free port 3000 BEFORE its first suite — a watchdog-killed job leaks its server and fails every later runDone Add CHANGELOG.mdTo do Automate release tagging on mainTo do Fix stale Vercel references in the observability runbookDone Add apps/api typecheck to CIDone Clean the SAST baselineTo do Flip SAST to blockingTo do Edge function deploy workflow (manual trigger only)To do Supabase migration check in CITo do Write the release procedureTo do Configure Supabase log drainTo do Centralize Cloudflare Workers logsTo do Replace console.* with structured logging in apps/apiTo do Two runners share one ~/.gradle — scope it per runner without losing the warm cacheTo do MATTHEW: CI capacity — one Mac, two runners, and a full Xcode build now runs on every pushTo do Auto-cancel queued CI runs whose head branch was deletedTo do

Wave

DevOps Foundation

Unblocked now — nothing waits on the surfaces. Wiring existing tests into CI, deploy automation, base observability.

TacTile › Launch TacTile › DevOps › DevOps Foundation

10/35 done25 open3 open blockers

Selected taskclear

Wire Playwright specs into CI

DoneOwner · Vivt_8e519d94

Unlocks 2Enable branch protection on main Approve: DevOps Foundation

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**Wire Playwright specs into CI** · done

Where it sits: TacTile › Launch TacTile › DevOps › DevOps Foundation

## Unlocks 2

- Enable branch protection on main
- Approve: DevOps Foundation

## The brief on file

DONE — VERIFIED 2026-08-02 (Viv). All three criteria met. No code change was needed this session; the harness landed and went blocking in commits 183a8ea9 / 9912222c / aa0dfd37 / d4df43f7 on main.

EVIDENCE FOR EACH CRITERION
1. "Run on PR" — the `playwright` job in .github/workflows/verify.yml ran GREEN on 12 real runs on 2026-08-02 between 02:38 and 04:33 UTC, on both push and pull_request events (e.g. run 30729341854 on PR branch docs/agents-md-accuracy: "Running 63 tests using 1 worker / 18 skipped / 45 passed (38.7s)").
2. "Failure artifacts uploaded on failure" — run 30729341854 produced artifact `playwright-report`, 217928 bytes, unexpired. Reproduced locally with a forced failure: 3.7M apps/web/playwright-report/ + 1.9M apps/web/test-results/ containing 4 test-failed-1.png, 4 video.webm, 2 trace.zip, 4 error-context.md — exactly the two paths the upload step globs. The step is `if: !cancelled()`, so it also keeps the HTML report from green runs.
3. "A forced failure fails the build" — proven locally end-to-end. Full stack (scripts/ci/e2e-supabase.sh up → pnpm build:web → CI=1 playwright test) reproduces CI exactly: baseline 45 passed / 18 skipped, exit 0. Adding one always-red spec → "2 failed", process EXIT=1. `grep -rn continue-on-error .github/workflows/` finds no live key in verify.yml (all 3 hits are comments); the only real one is in sast.yml and is unrelated. A non-zero step therefore fails the job.

The prior session's stated blocker is resolved: the specs are green (they were fixed by the storageState fixture work), and `continue-on-error` was removed from the Run Playwright step.

NOT PROVEN INSIDE GITHUB ACTIONS, AND WHY: since ~04:40 UTC on 2026-08-02, GitHub Actions has refused to START ANY JOB on this repo. Every job in every run since is annotated "The job was not started because recent account payments have failed or your spending limit needs to be increased." Last run that actually executed: 30732592864 (04:33 UTC). First billed-out run: 30733016417 (04:48 UTC). This is a billing/spend decision for Matthew, tracked separately.

TWO THINGS THE NEXT SESSION SHOULD KNOW
- Pixel snapshots do NOT gate CI. snapshots.spec.ts and snapshots-authed.spec.ts both carry `test.skip(!!process.env.CI, …)` — deliberate, documented in the file header: baselines are platform-keyed (-linux.png in CI vs -darwin.png locally) and a full-page diff fails on every intentional copy change. Making them required means committing to regenerating baselines from a runner-matched container. That is a workflow decision, left as a local-only tool.
- The other 7 skips are in auth.spec.ts and are mostly OAuth provider redirects (Google/Apple), which need real third-party providers. Tracked as t_54e2de0c.

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

DevOps Foundation

Wire Playwright specs into CI