Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Launch TacTile›Backend & Infrastructure›Backend API·33 in this wave

Approve: Backend APITo do · blocker Implement /api/profile or remove routeDone Implement /api/uploadDone Implement destination analyticsDone Add upload size limits and file validationDone Define the API versioning strategyDone Verify all 14 destination content read endpointsDone Verify the five existing destination update endpoints workBlocked Fix the stale SENTRY_RELEASE on tactile-apiDone iOS decodes payment_destinations as an array — a latent whole-list decode failureDone Add staging.tactile.to to the API CORS allowlistDone Emit CardSchema (not bare ActionPreview) from the 12 non-QR tool preview generatorsDone pnpm verify is red on main, and CI hides 9 more failures by excluding three test filesDone EMIT LEG: send method:\"link\" from the clients, or the Link bucket stays at zeroTo do POST /api/events/open is documented public+unauth but 401s anonymouslyDone Staging has no RATE_LIMIT_DO binding — both rate limiters fail open thereDone Mask the Wi-Fi password before it reaches agent proposal cards (blocks WifiCard)Done link_hub.ts has the identical partial-drop hole contact.ts just hadDone Add /health endpointDone Replace link-click placeholder zeroDone Verify documents/gallery/audio routes completeDone Add structured logging via pino-compatible APITo do Add request-id middlewareDone Add Sentry to WorkersDone Verify the four completed Backend API items in productionDone Build update endpoint for menu destinationsDone Build update endpoint for link_hub destinationsDone Build update endpoint for payment destinationsDone Build update endpoint for wifi destinationsDone Build update endpoint for bluetooth destinationsDone Build update endpoint for action destinationsDone Build the webhook MCP module (tools/webhook.ts) — Matthew chose SHIP over cutDone Derive per-type opIds for destination.create/edit so Website + Gallery cards can renderDone

Wave

Backend API

The long pole — Auth, Billing, Email, Custom Domains and Edge Functions all wait on this gate.

TacTile › Launch TacTile › Backend & Infrastructure › Backend API

29/33 done4 open1 open blocker

Selected taskclear

iOS decodes payment_destinations as an array — a latent whole-list decode failure

DoneOwner · Vivt_f4bc0113

No dependencies in this wave — nothing gates it, and nothing waits on it.

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**iOS decodes payment_destinations as an array — a latent whole-list decode failure** · done

Where it sits: TacTile › Launch TacTile › Backend &amp; Infrastructure › Backend API

## The brief on file

DONE 2026-09-21 (Viv). Branch fix/ios-payment-embed-select, commit 209ed2e2. Not merged, not pushed.

Steps 1-4 of the original brief were ALREADY on main before today — PostgRESTToOne<Row> at SupabaseClient.swift:155-168, paymentDestinations and actionDestinations retyped off bare arrays at :183-184, both call sites reading .value? (DestinationModels.swift:277, AppSession.swift:232), and scripts/verify/ios-postgrest-embeds.mjs wired as check 38. Only STEP 5 was left, and it is the one that changes what a user sees.

WHAT SHIPPED: payment_destinations(provider) added to both live selects — fetchActions (:368) and fetchAction (:417). Until now neither asked for the embed, so the JSON key was absent, the optional chain short-circuited, and paymentProvider was silently nil for EVERY destination. The payment-provider badge has never rendered, and nobody noticed because there was nothing to notice.

WHY THIS EDIT WAS THE DANGEROUS ONE BEFORE THE TYPE WAS FIXED, recorded so the lesson survives: PostgREST returns a to-one embed as an OBJECT; the property used to be [PaymentEmbed]?; JSONDecoder does not soften a container-type mismatch. Adding the embed against the old type would have thrown typeMismatch out of fetchActions and emptied the WHOLE destinations list — the symptom of "fixing" the badge would have been the entire screen going blank. The generic is what made today's one-line change safe.

VERIFIED, three legs, none of them a compile:
  1. STATIC — verify:ios-postgrest-embeds rule Q goes 3 -> 5 decodable embeds, exit 0 both before and after, resolving both sites to PostgRESTToOne<PaymentEmbed>.
  2. BUILD — xcodebuild Debug, scheme "TacTile Connect", iPhone 17 Pro simulator: BUILD SUCCEEDED.
  3. RUNTIME — installed and launched on the booted sim, signed in as the QA account. Assets -> Destinations renders "No destinations yet." That exact string is the discriminator: AppSession/AssetsHostView render the empty state ONLY when destinationsState == .empty (lastError nil), while a decode failure produces .outage(message:) and a different view. Simulator log carried no typeMismatch. So the list genuinely loaded with the new embed in the select rather than swallowing a throw.

NOT PROVEN, stated rather than glossed: the badge painting. The QA account holds zero payment destinations, so the render path had no data to exercise. The fetch is proven; the pixel is not. Anyone with a payment-backed destination on a QA account can close that in a minute.

SWEEP (step 4 of the brief): no bare-array embeds left in SupabaseClient.swift — all three embed-shaped properties (paymentDestinations, actionDestinations, triggers) use PostgRESTToOne. The durable guard the brief asked for already exists as check 38.

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

Backend API

iOS decodes payment_destinations as an array — a latent whole-list decode failure