Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Launch TacTile›iOS›iOS — Settings, Analytics & tools build·133 in this wave

Approve: iOS Settings, Analytics & toolsTo do · blocker Pro-gate Deep Dive, Compare, Map, and Overview to match backend's plus-tier requirementDone · blocker Decide fate of ProfilePhotoCropReviewView (ship or delete)To do Decide fate of Analytics Overview tab (ship or delete)To do Decide fate of legacy Dashboards widget system (~15 files)To do Decide Goals v2 scope (recurrence, prefill, streak history, sort, status, taxonomy)To do Add re-edit support for saved ConnectCards and Social Hub destinationsDone Build proposed-data mapping layer for native AI proposal cardsDone Decide routing for 'Program NFC Tag' hub tileTo do Build iOS NFC tap-to-write re-encode, password-protect, and mode persistenceTo do Verify analytics numbers against ground truth (not just rendering)To do Define real scope of the destination-analytics pipeline before it's built blindTo do Verify no analytics events are recorded for free accountsTo do Fix unregistered tactile:// URL scheme breaking every AI card "Open in editor" handoffDone Agent sessions: add the PATCH-title and hard-DELETE routes (route layer only — the DB is ready)Done Money display: no currency column on payments, forced 2-decimal formatting, and silent "$" fallback on bad currency codesTo do insights.ts calls callAnthropicMessages directly instead of createModelProvider, violating ADR-0001's amendmentDone Fix stale 'coming soon' copy on Company Info cardDone Produce real Quick Tutorial product walkthrough videoTo do Host and wire real Quick Tutorial videoTo do Delete dead stub properties in SettingsHostViewModelDone Analytics dead-code sweep — Deep Dive legacy + stale commentsTo do Fix 'Set goal' button closure-binding bug in Deep DiveTo do Wire custom date-range Apply in Dashboards device distribution widgetDone Decide fate of Map breadcrumb drill-down featureTo do Fix deprecated GeoTableWidget rendering during loading windowDone Add filter-aware empty state copy to Goals listTo do Fix scoped-goal display name resolution in Goal SheetDone Decide fate of multi-entity Compare dashboard widget conceptTo do Decide fate of Sources dashboard tile (needs new API endpoint)To do Add rename/delete UI for dashboardsDone Decide whether dashboard share/export is in scopeTo do Decide Pro-lock widget scope for Dashboards paletteTo do Fix duplicate widget title bug in Dashboard tilesDone Surface tier-verification error in AnalyticsProGateDone Wire Mute Destination to real persisted stateDone Wire menu destination edit submission (currently a no-op stub)Done Delete dead ConnectCard editor files (FieldEditorView, CardPreviewView, CardStyleSheet)Done AI surface dead-code and stale-comment sweepDone Fix GalleryCard empty state at zero proposed itemsDone Decide real scope for QRLaunchpad Share & ExportTo do Sign off: Settings surfaces not flagged in this auditTo do Sign off: Analytics files/widgets confirmed clean in this auditTo do Sign off: ConnectCard field editors and models confirmed cleanTo do Sign off: AI stubbed-banner behavior confirmed working as intendedTo do Sign off: QR generator and NFC stamp-test harness confirmed clean outside tracked gapsTo do Wire in or remove orphaned AnalyticsKitRealtimeScreen per decisionDone Build real AI Q&A dashboard widget or remove per decisionTo do Build multi-entity Compare dashboard widget or remove per decisionTo do Build Sources dashboard tile backend + wiring or remove per decisionTo do Build dashboard share/export or confirm out of scope per decisionTo do Mark specific widgets Pro-exclusive or remove lock machinery per decisionTo do Wire Map breadcrumb drill-down or remove per decisionTo do Decide: delete the preview-only Analytics widget island (7 files, 8 uncalled client methods)To do Android: two more places show a plan refusal (403) as a generic failure - Assets Families tab, Home insight cardDone A/B variant assignment hashes the daily visitor_hash, so one visitor can change variant from one day to the nextTo do Android: add a ViewModel test that generateInsight() maps a tier refusal to the Pro upsellDone iOS: pin the Deep Dive fetch set with a stubbed-client test (6 requests for account/trigger/destination, 7 for campaign/group)To do iOS Deep Dive trigger hero shows a change percentage without checking the Worker honoured the compare windowDone previousYearWindow gives a zero-length or reversed prior window when the window ends on Feb 29Done Android Activity chart overlays a "last year" line even when the Worker answered the previous periodTo do Wire ProfilePhotoCropReviewView Save + Change Photo buttonsTo do Fix Contact Support photo-library attachment (picker bound to nil)Done Build Segment + Zapier analytics connectorsBlocked Notify user when custom domain provisioning completesBlocked Wire in or remove Analytics Overview tab per decisionTo do Build real custom-range comparison in Deep Dive (Compare sheet + Activity widget)To do Wire 'Continue conversation' CTA to real Insights screenTo do Show real errors instead of fake seed data in Deep Dive asset pickerDone Wire real Avg-time-to-arrive / Next-action KPIs or remove tilesDone Fix Live Activity Feed entity scoping and add loading/error stateBlocked Decide whether Compare tab should be Pro-gatedDone Surface real errors instead of fake totals in Compare tabDone Fix Real-time tab mock-data fallbacks and missing connection/error UIDone Decide fate of orphaned AnalyticsKitRealtimeScreen.swiftDone Fix Map tab hardcoded mock country data and missing error stateDone Wire Dashboards Geo widget tile actions (view full map, granularity chips)To do Delete confirmed-dead legacy Dashboards widget codeTo do Add loading state and surface errors in Goals listDone Fix Goal Sheet stale error state and build asset-picker retry chipDone Build approved Goals v2 scope itemsTo do Wire Dashboards 'Pick a goal' pill and remove hardcoded fallback progressDone Decide fate of AI Q&A dashboard widget stubTo do Decide fate of ConnectCard photo field typeTo do Fix Preview Destination to show real saved card, not fake demo dataDone Persist Destination Name/Description edits on Save and CloseDone Replace AgentConnectCard's hardcoded fake account name with real OAuth dataBlocked Complete AgentDraftStore seeding for remaining proposal card typesDone Wire real 'Send test event' for WebhookCardDone Decide when to build the real Webhook destination connectorTo do Wire agent pending-approvals badge to real pending countTo do Decide whether Approvals Inbox needs Tweak supportDone Add Tweak support to Approvals InboxTo do Build real rename/delete endpoints for agent sessionsDone Auto-refresh QR image after white-label domain reprogramBlocked Build real Static Program flow in NFCStampTestViewTo do Build real Bulk Program flow in NFCStampTestViewTo do Fix NFC Lock Tag toggle (silent no-op, no persistence)Done Build real QR export per decided scopeTo do Decide the account-timezone plan for analytics day-boundariesTo do Wire the account-timezone decision into rollups and AnalyticsRangeTo do QA: brand-new zero-scan account across every Analytics tabBlocked Load-test analytics queries against a high-volume partitioned accountBlocked Verify AI proposal card "Open in editor" handoffs are dead on iPhoneDone Cards whose tweak feedback sends a placeholder instead of the user's edit (iOS #240 defect b, remaining)Done Source-attribution RPC pivot labels don't match the API's by_campaign/by_group keysDone iOS Dashboards "Top performers" tile 400s for a family/campaign-scoped assetTo do is_first_seen only detects "first scan today", not "first scan ever"Done visitor_year_hash keys on browser major version, so browser auto-updates and shared IPs silently reshuffle unique-visitor countsTo do UA parser misclassifies iPad Safari as desktop macOS and Android tablets as mobileDone "hybrid" trigger medium renders as "unknown" on iOS and AndroidTo do Android 24h analytics chart always requests day granularity, never hourlyDone Android goal editor has no "daily" recurrence optionDone Android shows generic 403 error cards instead of an upsell on Free-tier Deep Dive/Compare/Goals/MapDone Android AI Insights 403 (Free/Plus) shows as a generic "couldn't generate" failure, not an upsellDone Android Deep Dive geo region/city drill-down hard-caps at 8 rows with no way to see moreDone Android analytics map has no centroid for Iceland, Luxembourg, Croatia, Costa Rica or EstoniaDone iOS Trigger Mix / Compare NFC% gauge silently excludes link and direct opensDone iOS Deep Dive fetches trigger/destination/campaign/group-scoped data that no live screen ever rendersTo do web-mobile production deploy is 3 months and 89 commits behind origin/main's analytics featureDone destinations.total_opens is read by two endpoints but never incremented anywhereBlocked analytics_rollups_daily and analytics_alerts have no readers anywhere in the appTo do document/notes/video/audio destinations never fire the funnel beacon — Deep Dive funnel widget is permanently all-zero for themDone Decide: Families Leaderboard on iOS (Deep Dive + Dashboards tile) - the roster request can only 400To do Pin the first-seen call site in events.ts: swapping visitor_year_hash for visitor_hash leaves every test greenDone Plus promises "AI analytics (Basic)" but AI Insights is Pro-only: align server or plan listsTo do iOS Activity widget Custom range shows page-level priors under a Custom labelTo do API answers compare=previous_year with the previous period, so iOS "Same period last year" shows the wrong comparisonDone Check the funnel beacon is accepted from a browser: sendBeacon sends credentials and utils/cors.ts sets no Access-Control-Allow-CredentialsDone Run the fixed funnel beacon in WebKit and Firefox: the t_e9f24402 browser run was Chromium 143 onlyBlocked Android Activity "Same period last year" totals row compares with the previous period until the API deploys; no meta.compare checkDone Geo tile: Region and City chips leave the Analytics tile on an endless skeleton (tile VM loads countries only)To do QA: opening a document, note, video or audio link now counts as a view in Analytics (desktop web)Blocked

Wave

iOS — Settings, Analytics & tools build

Remaining build work across Settings, Analytics, ConnectCard, the AI panel, and QR/NFC programming. Everything marked 'coming soon' here is intended to ship.

TacTile › Launch TacTile › iOS › iOS — Settings, Analytics & tools build

60/133 done73 open1 open blocker

Selected taskclear

insights.ts calls callAnthropicMessages directly instead of createModelProvider, violating ADR-0001's amendment

DoneOwner · vivt_dc9f1bb7

No dependencies in this wave — nothing gates it, and nothing waits on it.

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**insights.ts calls callAnthropicMessages directly instead of createModelProvider, violating ADR-0001's amendment** · done

Where it sits: TacTile › Launch TacTile › iOS › iOS — Settings, Analytics & tools build

## The brief on file

[2026-10-08 · Viv] HUB-STATE NOTE: marked done, but origin/main apps/api insights.ts still imports callAnthropicMessages (line 13) and calls it at lines 84 and 205; the fix lives only on draft PR #650 (r26/insights-model-provider, head 6ebf6730), NOT merged, red on static-firewall. Merging it flips the production AI default to DeepSeek and needs DEEPSEEK_API_KEY on the prod Worker first (PRODUCTION). Status left as done per the run definition; flagged so nobody assumes it shipped.

Symptom: the AI Insights endpoint bypasses TacTile's own two-tier provider architecture on a customer-facing path (high priority: ADR violation on a Tier-2 customer route).

Evidence (origin/main): apps/api/tactile-api/src/routes/analytics/insights.ts imports `callAnthropicMessages` directly from `@tactile/agent-core` (line 13) and calls it at lines 84 and 205, instead of going through `createModelProvider(config)` the way every other Tier-2 customer-facing site is required to per docs/adr/0001-max-vs-console-split.md's 2026-06-27 amendment ("customer default is now DeepSeek... the Anthropic Console path is reachable only via the internal-only flag AGENT_PROVIDER=anthropic").

Practical effect: this route can never pick up the DeepSeek default, can't be toggled the way every other customer-facing model call site can, and its stub-on-missing-key behavior is reimplemented ad hoc instead of inheriting the shared provider's stub semantics. tests/architecture/no-direct-anthropic-imports.test.ts is supposed to fail CI on exactly this pattern outside packages/agent-core/src/anthropic.ts — worth checking during the fix why this file wasn't caught (possibly predates the ADR amendment, or the test's exclusion list needs tightening).

Fixed means: insights.ts builds its client via createModelProvider(config) like the other Tier-2 routes, and the architecture test passes without an added exception for this file.

File: apps/api/tactile-api/src/routes/analytics/insights.ts, docs/adr/0001-max-vs-console-split.md, tests/architecture/no-direct-anthropic-imports.test.ts.

Found 2026-09-27 in the analytics seed v2 sweep.

[2026-09-28 batch 1] in progress in a draft PR (link to follow)

[2026-09-28 batch 1] Draft PR #650 (r26/insights-model-provider): now goes through createModelProvider, and the architecture gate is extended. This flips the prod default to DeepSeek. Needs DEEPSEEK_API_KEY on the prod Worker, and DeepSeek on sub-processors.md.

[overnight 29→30 Sep] DONE — the "Fixed means" line is met in draft PR #650 (r26/insights-model-provider), head 6ebf6730. Not merged; merge is Matthew's.
- insights.ts (insightsRoute AND insightsAskRoute) builds its client via createModelProvider({provider: AGENT_PROVIDER ?? "deepseek", deepSeekApiKey, anthropicApiKey}). The architecture gate is widened (bans callAnthropicMessages AND createAnthropicClient outside packages/agent-core, namespace imports included; a file reading env.ANTHROPIC_API_KEY must route it through createModelProvider). No exception was added for insights.ts.
- Why the old test missed it: it matched raw @anthropic-ai/sdk imports; callAnthropicMessages is a re-export from @tactile/agent-core, one hop away, so insights.ts never named the SDK.
- Re-run tonight in the worktree: verify:arch 8 pass / 5 skipped (the widened gate is 7 tests), verify:api-check clean, verify:api-test 963/963. Mutation: putting origin/main's insights.ts back turns 2 gate tests red naming insights.ts; the PR's version is green.
- CI on the PR: static-firewall red is inherited from main (fix is draft #642); playwright was cancelled (contention); verify is red on "Secrets rotation audit" (inherited, main's own scheduled run fails it too) and on "ts-source-coverage", which IS this PR's: its new test file makes apps/api tests 61 orphans against the recorded 60 (reproduced locally). The fix is one number plus one written sentence in scripts/verify/ts-source-coverage.mjs (count 60 -> 61, "Raised 60 -> 61 for tests/routes/analytics-insights.test.ts ..."). I did not make it: the auto-mode classifier denied editing that gate as a CI bypass. #653 has the same failure (its events-open-forward.test.ts), so the two are parallel bumps; whichever merges second must re-derive 62 with git ls-files.
BEFORE MERGE (Matthew):
1. DEEPSEEK_API_KEY must exist on the prod tactile-api Worker. In prod a missing key throws the boot guard instead of stubbing, so both insights routes would 500; this merge also flips prod insights from Anthropic Haiku to DeepSeek Flash. (routes/agent.ts already defaults to DeepSeek in prod, which is circumstantial evidence the key is set; not checkable from here.)
2. Listing DeepSeek in docs/legal/sub-processors.md is a LEGAL commitment: customer analytics labels, country data and the free-text question go to DeepSeek by default. Your call; I did not touch docs/legal.
3. The ts-source-coverage count raise above, or CI stays red on this PR.

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

iOS — Settings, Analytics & tools build

insights.ts calls callAnthropicMessages directly instead of createModelProvider, violating ADR-0001's amendment