Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Launch TacTile›iOS›iOS — Settings, Analytics & tools build·133 in this wave

Approve: iOS Settings, Analytics & toolsTo do · blocker Pro-gate Deep Dive, Compare, Map, and Overview to match backend's plus-tier requirementDone · blocker Decide fate of ProfilePhotoCropReviewView (ship or delete)To do Decide fate of Analytics Overview tab (ship or delete)To do Decide fate of legacy Dashboards widget system (~15 files)To do Decide Goals v2 scope (recurrence, prefill, streak history, sort, status, taxonomy)To do Add re-edit support for saved ConnectCards and Social Hub destinationsDone Build proposed-data mapping layer for native AI proposal cardsDone Decide routing for 'Program NFC Tag' hub tileTo do Build iOS NFC tap-to-write re-encode, password-protect, and mode persistenceTo do Verify analytics numbers against ground truth (not just rendering)To do Define real scope of the destination-analytics pipeline before it's built blindTo do Verify no analytics events are recorded for free accountsTo do Fix unregistered tactile:// URL scheme breaking every AI card "Open in editor" handoffDone Agent sessions: add the PATCH-title and hard-DELETE routes (route layer only — the DB is ready)Done Money display: no currency column on payments, forced 2-decimal formatting, and silent "$" fallback on bad currency codesTo do insights.ts calls callAnthropicMessages directly instead of createModelProvider, violating ADR-0001's amendmentDone Fix stale 'coming soon' copy on Company Info cardDone Produce real Quick Tutorial product walkthrough videoTo do Host and wire real Quick Tutorial videoTo do Delete dead stub properties in SettingsHostViewModelDone Analytics dead-code sweep — Deep Dive legacy + stale commentsTo do Fix 'Set goal' button closure-binding bug in Deep DiveTo do Wire custom date-range Apply in Dashboards device distribution widgetDone Decide fate of Map breadcrumb drill-down featureTo do Fix deprecated GeoTableWidget rendering during loading windowDone Add filter-aware empty state copy to Goals listTo do Fix scoped-goal display name resolution in Goal SheetDone Decide fate of multi-entity Compare dashboard widget conceptTo do Decide fate of Sources dashboard tile (needs new API endpoint)To do Add rename/delete UI for dashboardsDone Decide whether dashboard share/export is in scopeTo do Decide Pro-lock widget scope for Dashboards paletteTo do Fix duplicate widget title bug in Dashboard tilesDone Surface tier-verification error in AnalyticsProGateDone Wire Mute Destination to real persisted stateDone Wire menu destination edit submission (currently a no-op stub)Done Delete dead ConnectCard editor files (FieldEditorView, CardPreviewView, CardStyleSheet)Done AI surface dead-code and stale-comment sweepDone Fix GalleryCard empty state at zero proposed itemsDone Decide real scope for QRLaunchpad Share & ExportTo do Sign off: Settings surfaces not flagged in this auditTo do Sign off: Analytics files/widgets confirmed clean in this auditTo do Sign off: ConnectCard field editors and models confirmed cleanTo do Sign off: AI stubbed-banner behavior confirmed working as intendedTo do Sign off: QR generator and NFC stamp-test harness confirmed clean outside tracked gapsTo do Wire in or remove orphaned AnalyticsKitRealtimeScreen per decisionDone Build real AI Q&A dashboard widget or remove per decisionTo do Build multi-entity Compare dashboard widget or remove per decisionTo do Build Sources dashboard tile backend + wiring or remove per decisionTo do Build dashboard share/export or confirm out of scope per decisionTo do Mark specific widgets Pro-exclusive or remove lock machinery per decisionTo do Wire Map breadcrumb drill-down or remove per decisionTo do Decide: delete the preview-only Analytics widget island (7 files, 8 uncalled client methods)To do Android: two more places show a plan refusal (403) as a generic failure - Assets Families tab, Home insight cardDone A/B variant assignment hashes the daily visitor_hash, so one visitor can change variant from one day to the nextTo do Android: add a ViewModel test that generateInsight() maps a tier refusal to the Pro upsellDone iOS: pin the Deep Dive fetch set with a stubbed-client test (6 requests for account/trigger/destination, 7 for campaign/group)To do iOS Deep Dive trigger hero shows a change percentage without checking the Worker honoured the compare windowDone previousYearWindow gives a zero-length or reversed prior window when the window ends on Feb 29Done Android Activity chart overlays a "last year" line even when the Worker answered the previous periodTo do Wire ProfilePhotoCropReviewView Save + Change Photo buttonsTo do Fix Contact Support photo-library attachment (picker bound to nil)Done Build Segment + Zapier analytics connectorsBlocked Notify user when custom domain provisioning completesBlocked Wire in or remove Analytics Overview tab per decisionTo do Build real custom-range comparison in Deep Dive (Compare sheet + Activity widget)To do Wire 'Continue conversation' CTA to real Insights screenTo do Show real errors instead of fake seed data in Deep Dive asset pickerDone Wire real Avg-time-to-arrive / Next-action KPIs or remove tilesDone Fix Live Activity Feed entity scoping and add loading/error stateBlocked Decide whether Compare tab should be Pro-gatedDone Surface real errors instead of fake totals in Compare tabDone Fix Real-time tab mock-data fallbacks and missing connection/error UIDone Decide fate of orphaned AnalyticsKitRealtimeScreen.swiftDone Fix Map tab hardcoded mock country data and missing error stateDone Wire Dashboards Geo widget tile actions (view full map, granularity chips)To do Delete confirmed-dead legacy Dashboards widget codeTo do Add loading state and surface errors in Goals listDone Fix Goal Sheet stale error state and build asset-picker retry chipDone Build approved Goals v2 scope itemsTo do Wire Dashboards 'Pick a goal' pill and remove hardcoded fallback progressDone Decide fate of AI Q&A dashboard widget stubTo do Decide fate of ConnectCard photo field typeTo do Fix Preview Destination to show real saved card, not fake demo dataDone Persist Destination Name/Description edits on Save and CloseDone Replace AgentConnectCard's hardcoded fake account name with real OAuth dataBlocked Complete AgentDraftStore seeding for remaining proposal card typesDone Wire real 'Send test event' for WebhookCardDone Decide when to build the real Webhook destination connectorTo do Wire agent pending-approvals badge to real pending countTo do Decide whether Approvals Inbox needs Tweak supportDone Add Tweak support to Approvals InboxTo do Build real rename/delete endpoints for agent sessionsDone Auto-refresh QR image after white-label domain reprogramBlocked Build real Static Program flow in NFCStampTestViewTo do Build real Bulk Program flow in NFCStampTestViewTo do Fix NFC Lock Tag toggle (silent no-op, no persistence)Done Build real QR export per decided scopeTo do Decide the account-timezone plan for analytics day-boundariesTo do Wire the account-timezone decision into rollups and AnalyticsRangeTo do QA: brand-new zero-scan account across every Analytics tabBlocked Load-test analytics queries against a high-volume partitioned accountBlocked Verify AI proposal card "Open in editor" handoffs are dead on iPhoneDone Cards whose tweak feedback sends a placeholder instead of the user's edit (iOS #240 defect b, remaining)Done Source-attribution RPC pivot labels don't match the API's by_campaign/by_group keysDone iOS Dashboards "Top performers" tile 400s for a family/campaign-scoped assetTo do is_first_seen only detects "first scan today", not "first scan ever"Done visitor_year_hash keys on browser major version, so browser auto-updates and shared IPs silently reshuffle unique-visitor countsTo do UA parser misclassifies iPad Safari as desktop macOS and Android tablets as mobileDone "hybrid" trigger medium renders as "unknown" on iOS and AndroidTo do Android 24h analytics chart always requests day granularity, never hourlyDone Android goal editor has no "daily" recurrence optionDone Android shows generic 403 error cards instead of an upsell on Free-tier Deep Dive/Compare/Goals/MapDone Android AI Insights 403 (Free/Plus) shows as a generic "couldn't generate" failure, not an upsellDone Android Deep Dive geo region/city drill-down hard-caps at 8 rows with no way to see moreDone Android analytics map has no centroid for Iceland, Luxembourg, Croatia, Costa Rica or EstoniaDone iOS Trigger Mix / Compare NFC% gauge silently excludes link and direct opensDone iOS Deep Dive fetches trigger/destination/campaign/group-scoped data that no live screen ever rendersTo do web-mobile production deploy is 3 months and 89 commits behind origin/main's analytics featureDone destinations.total_opens is read by two endpoints but never incremented anywhereBlocked analytics_rollups_daily and analytics_alerts have no readers anywhere in the appTo do document/notes/video/audio destinations never fire the funnel beacon — Deep Dive funnel widget is permanently all-zero for themDone Decide: Families Leaderboard on iOS (Deep Dive + Dashboards tile) - the roster request can only 400To do Pin the first-seen call site in events.ts: swapping visitor_year_hash for visitor_hash leaves every test greenDone Plus promises "AI analytics (Basic)" but AI Insights is Pro-only: align server or plan listsTo do iOS Activity widget Custom range shows page-level priors under a Custom labelTo do API answers compare=previous_year with the previous period, so iOS "Same period last year" shows the wrong comparisonDone Check the funnel beacon is accepted from a browser: sendBeacon sends credentials and utils/cors.ts sets no Access-Control-Allow-CredentialsDone Run the fixed funnel beacon in WebKit and Firefox: the t_e9f24402 browser run was Chromium 143 onlyBlocked Android Activity "Same period last year" totals row compares with the previous period until the API deploys; no meta.compare checkDone Geo tile: Region and City chips leave the Analytics tile on an endless skeleton (tile VM loads countries only)To do QA: opening a document, note, video or audio link now counts as a view in Analytics (desktop web)Blocked

Wave

iOS — Settings, Analytics & tools build

Remaining build work across Settings, Analytics, ConnectCard, the AI panel, and QR/NFC programming. Everything marked 'coming soon' here is intended to ship.

TacTile › Launch TacTile › iOS › iOS — Settings, Analytics & tools build

60/133 done73 open1 open blocker

Selected taskclear

Pin the first-seen call site in events.ts: swapping visitor_year_hash for visitor_hash leaves every test green

DoneOwner · Vivt_91a80c35

Found by the independent review of PR #688 (t_475600d5). The fix is correct as written, but nothing tests the wiring.

No dependencies in this wave — nothing gates it, and nothing waits on it.

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**Pin the first-seen call site in events.ts: swapping visitor_year_hash for visitor_hash leaves every test green** · done

Found by the independent review of PR #688 (t_475600d5). The fix is correct as written, but nothing tests the wiring.

Where it sits: TacTile › Launch TacTile › iOS › iOS — Settings, Analytics & tools build

## The brief on file

[2026-10-23 · Viv] r40 DONE (closed by the r40 closer: both readers CONFIRMED, gate passed). Not merged, not deployed.

LANDED: PR #786 https://github.com/TacTile-dev/TacTile/pull/786, stacked on #688 (base r28/first-seen-ever 11a8f221). Branch r40/stack-688-first-seen-pin, head 737f5ea3979473d44b6fa9e0daf0352031d64470, one commit, one existing file: tests/unit/events-open-anonymous.test.ts (+152/-1). New describe "handleOpen keys first-seen on the year hash, not the daily hash": two handler-level tests drive POST /api/events/open over a stubbed fetch and assert the first-seen lookup carries visitor_year_hash=eq.<year hash> and never visitor_hash, and that a prior year-hash row gives p_is_first_seen=false. No src change.

EVIDENCE: 12/12 (10 existing + 2 new). Done-when mutation, events.ts:205 visitorYearHashHex -> visitorHashHex: rc=1, 2 failed / 10 passed, both named tests red; `git checkout` -> 12/12. The pin also holds on the HEAD+origin/main merged tree (swap at :396 -> 2 red). verify:unit rc=0, 230 files, 4634 tests; ts-source-coverage 1210/1288 with 78 allowlisted, unchanged. The test passes on HEAD, so it exposed no bug and nothing was filed. Gate: 1 full run, start load1 4.13, exit 0, "55 passed, 1 failed, of 56", only verify:secrets-rotation.

READERS on the task: SAFETY CONFIRMED - all clauses met; it reran the swap (2 red, restore 12/12) and checked every request goes to a stubbed fetch on a fake host. ACCEPTANCE CONFIRMED - clauses (a)-(f) met; its own mutations (args 4 and 5 swapped, IP hash as 5th arg, ingest.ts:325 helper keyed on the daily hash, pre-#688 sources) each went red, then green.

CI: no CI: non-main base, the local gate is the check.

STAYS OPEN: #786 lands only with or after #688 (the Done-when allows branching off r28/first-seen-ever). Nothing else.

[2026-10-15 · Viv] FILED from the independent review of PR #688 (r28/first-seen-ever, head 11a8f221, draft). Searched the live hub on 15 Oct for "checkUniqueness", "first_seen" and "visitor_year_hash": t_475600d5 is the fix itself, t_3ed799c9 is the browser-major-version half, t_fce634a3 is the A/B variant hash. None pins the call site.

WHAT IS UNPINNED (measured by the reviewer on 11a8f221). apps/api/tactile-api/src/routes/events.ts, the checkUniqueness call in the open handler (about lines 200-206), passes visitorHashHex and then visitorYearHashHex. Swapping the fifth argument to visitorHashHex re-creates the original defect (first-seen keyed on the daily hash) and the suite stays green: verify:api-test 962/962, plus events-open-anonymous, options-preflight and rls-cross-tenant 114/114. ingest.test.ts calls checkUniqueness directly, and tsc cannot tell two hex strings apart.

FIX, either: (1) a handler-level test that drives the open handler with a stubbed fetch and asserts the first-seen lookup URL carries visitor_year_hash=eq.<year hash> and never visitor_hash; or (2) change checkUniqueness to take one object argument ({ visitorHashHex, visitorYearHashHex }) so the two cannot be swapped by position, plus the same test.

DONE WHEN: with the fifth argument swapped in the working tree, a named test goes red; git checkout the file and it is green again. Tests only unless the test exposes a real bug (then file it). Use an existing test file so the ts-source-coverage count does not move. Land after #688 merges, or branch off r28/first-seen-ever. No deploy, no migration, no production call.

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

iOS — Settings, Analytics & tools build

Pin the first-seen call site in events.ts: swapping visitor_year_hash for visitor_hash leaves every test green