Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Launch TacTile›Backend & Infrastructure›Backend API·33 in this wave

Approve: Backend APITo do · blocker Implement /api/profile or remove routeDone Implement /api/uploadDone Implement destination analyticsDone Add upload size limits and file validationDone Define the API versioning strategyDone Verify all 14 destination content read endpointsDone Verify the five existing destination update endpoints workIn progress Fix the stale SENTRY_RELEASE on tactile-apiDone iOS decodes payment_destinations as an array — a latent whole-list decode failureTo do Add staging.tactile.to to the API CORS allowlistDone Emit CardSchema (not bare ActionPreview) from the 12 non-QR tool preview generatorsDone pnpm verify is red on main, and CI hides 9 more failures by excluding three test filesDone EMIT LEG: send method:\"link\" from the clients, or the Link bucket stays at zeroTo do POST /api/events/open is documented public+unauth but 401s anonymouslyDone Staging has no RATE_LIMIT_DO binding — both rate limiters fail open thereDone Mask the Wi-Fi password before it reaches agent proposal cards (blocks WifiCard)Done link_hub.ts has the identical partial-drop hole contact.ts just hadDone Add /health endpointDone Replace link-click placeholder zeroDone Verify documents/gallery/audio routes completeDone Add structured logging via pino-compatible APIIn progress Add request-id middlewareDone Add Sentry to WorkersDone Verify the four completed Backend API items in productionIn progress Build update endpoint for menu destinationsDone Build update endpoint for link_hub destinationsDone Build update endpoint for payment destinationsDone Build update endpoint for wifi destinationsDone Build update endpoint for bluetooth destinationsDone Build update endpoint for action destinationsDone Build the webhook MCP module (tools/webhook.ts) — Matthew chose SHIP over cutDone Derive per-type opIds for destination.create/edit so Website + Gallery cards can renderDone

Wave

Backend API

The long pole — Auth, Billing, Email, Custom Domains and Edge Functions all wait on this gate.

TacTile › Launch TacTile › Backend & Infrastructure › Backend API

27/33 done6 open1 open blocker

Selected taskclear

Emit CardSchema (not bare ActionPreview) from the 12 non-QR tool preview generators

DoneOwner · ait_8ee715b2

Root cause of "11 of 13 agent proposal cards render empty or fabricated". Only qr.create emits a CardSchema; every other generator returns a bare ActionPreview, so iOS decodes schema = nil and each native card falls back to hardcoded sample data. No wire-contract change is needed — this is data population in toolPreviews.ts.

No dependencies in this wave — nothing gates it, and nothing waits on it.

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**Emit CardSchema (not bare ActionPreview) from the 12 non-QR tool preview generators** · done

Root cause of "11 of 13 agent proposal cards render empty or fabricated". Only qr.create emits a CardSchema; every other generator returns a bare ActionPreview, so iOS decodes schema = nil and each native card falls back to hardcoded sample data. No wire-contract change is needed — this is data population in toolPreviews.ts.

Where it sits: TacTile › Launch TacTile › Backend &amp; Infrastructure › Backend API

## The brief on file

HANDOFF FROM THE iOS SESSION (2026-08-05). Scoped to packages/** — iOS does not touch it.

*** MATTHEW DECIDED THE OP-ID QUESTION 2026-08-05. THE iOS HALF IS ALREADY BUILT AND MERGING. ***
Decision: the BACKEND sets a specific `opId` and iOS routes on it. Do NOT rename anything in the published
MCP catalog (it has live OAuth clients), and do NOT ask iOS to match `destination.*` — that op is generic
across all 14 kinds, so notes/menu/document proposals would all land on the website card.
iOS side is done: NativeCardRouter.cardKind now reads `(card.schema?.opId ?? card.toolName)`. It is a no-op
until you send an opId, so ship whenever you are ready — there is no lock-step release.
CONCRETE CONSEQUENCE FOR YOU: `destinationsCreatePreview` must emit a per-type opId derived from the
destination type in its input — `website.create`, `gallery.create`, `notes.create`, `menu.create`,
`document.create` … — NOT the literal registered tool name `destination.create`. Same for
`destination.create_gallery` → `gallery.create` and `destination.edit` → `<type>.update`. The exact strings
iOS accepts are the ones matched in NativeCardRouter.cardKind; read them there rather than guessing.

READ THIS NEXT — IT CORRECTS THE BRIEF THAT SENT IT TO YOU.
The iOS session brief said: "the wire contract at packages/agent-core/src/types.ts:168-173 carries only
`preview` and never the tool input. Scope the contract change." That is WRONG and no contract change is
needed. Do NOT edit types.ts. Verified:

  - packages/card-schema/src/index.ts:245 — `export interface CardSchema extends ActionPreview`.
    CardSchema is a strict additive superset carrying opId, title, fields[], tweak{}, collection[],
    connect{}, states[]. It rides the EXISTING `preview: ActionPreview` field. Nothing else required.
  - packages/card-schema/src/index.ts:321 — `isCardSchema(p)` narrows on the presence of `opId`.
  - packages/agent-core/src/pendingActions.ts:52 — `preview: entry.preview ?? {}` persists the object
    wholesale as JSON, so the extra CardSchema keys survive the DB round trip untouched.
  - apps/ios/.../Features/AI/Models/AgentEvent.swift:83 —
    `schema = try? c.decodeIfPresent(CardSchema.self, forKey: .preview)`.
    iOS already decodes the SAME `preview` key as a full CardSchema.

So the transport is finished and proven. qr.create works end to end TODAY over exactly this path.

NOTE ON THE DECODE CONTRACT, because it makes `opId` load-bearing: on iOS `CardSchema.opId` is a
NON-OPTIONAL String decoded with `try` (CardSchema.swift:319), and the event decodes the schema with `try?`.
So omitting `opId` does not degrade gracefully to a partial card — it makes the WHOLE schema nil and the card
silently falls back to its hardcoded sample data. Every CardSchema you emit must carry `opId` and `title`.

THE ACTUAL DEFECT
packages/agent-core/src/toolPreviews.ts has ONE generator that builds a CardSchema:
`qrCreatePreview` at :388-403 (`const card: CardSchema = { kind:"qr", opId:"qr.create",
title:"New QR code", …, tweak:{fields:…} }`). Every other generator returns a bare ActionPreview —
summary/diff/severity only, no `opId`. `grep -n opId packages/agent-core/src/toolPreviews.ts`
returns exactly one emitting site (:390); the rest are comments.

Because `opId` is absent, `isCardSchema()` is false and iOS's `decodeIfPresent(CardSchema.self)`
yields nil. Each native card then falls back to its hardcoded curated default — e.g.
LinkHubCard.swift:628-632 renders "Website·acme.com / Instagram·@acme / LinkedIn·company/acme"
on every real proposal. That is the "fabricated data" users see.

WHAT TO BUILD
For each generator in APPROVAL_REGISTRY (toolPreviews.ts:737-777), return a CardSchema instead of a
bare ActionPreview: set `opId` (per the decision above) and `title`, and populate `fields[]` /
`collection[]` / `tweak{}` from the tool input the generator ALREADY receives as its `input` argument.
That data is present and simply is not being mapped onto the card. Model it on qrCreatePreview.

Priority order (native iOS cards that exist and are live):
  contact.create, contact.field.edit, contacts.update  → ContactvCardCard (fields[])
  menu.create                                          → MenuCard (collection[])
  notes.create                                         → NotesCard (fields[])
  payment.create                                       → PaymentlinkCard (fields[])
  destination.create / .edit / .create_gallery         → WebsiteCard / GalleryCard, via the per-type opId

STILL UNREGISTERED, SEPARATE FROM THIS TASK: linkhub.*, form.*, wifi.*, webhook.*, document.* have NO
entry in APPROVAL_REGISTRY at all, so they emit no preview_proposed event and their five native cards are
unreachable regardless. webhook additionally has no MCP module. Those are pending a ship/cut/unavailable
decision from Matthew — do not invent generators for them here.

DONE WHEN
 - Every generator listed above returns a CardSchema with opId + title + populated fields/collection.
 - A test asserts isCardSchema() is true for each generator's output (preview.test.ts already imports
   ActionPreview at :24 and has the harness).
 - A test asserts a representative generator maps real tool input into fields[]/collection[] — not
   just that the keys exist.
 - A test asserts destinationsCreatePreview emits the PER-TYPE opId, not "destination.create" — that is
   the whole point of the decision above and the easiest thing to regress.
 - pnpm verify green.

BLOCKS: t_fc824b96, t_e2d91554, t_8cab6842, t_56931aa2, t_abca6e79, t_8a9c2cd3, t_29d9f595,
t_5a4e1869, t_9dbacfff, t_eac1ac6c, t_90d3f9b7 — the 11 iOS card tasks, all marked blocked.
The remaining iOS half is small: 11 of the 12 non-QR card views never reference `card.schema`
(`grep -ln card.schema` over Features/AI/Components/Cards returns only QRCreateCard.swift), and
NativeCardRouter passes only `card:` plus the four callbacks. iOS will read card.schema?.fields /
.collection into each card once real data is on the wire.

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

Backend API

Emit CardSchema (not bare ActionPreview) from the 12 non-QR tool preview generators