Command

PePersonal JEJust Electrolyte RTRelease Timer TtTacTile CSClearSource AtAthletic

TacTile›Launch TacTile›Android›Android — Pre-submission blockers·11 in this wave

Approve: Android pre-submission blockersTo do · blocker Provision apps/android/local.properties so the Android app can reach a backendTo do · blocker GitHub Actions is off for the whole repo — billing wall fails every job in 2sTo do · blocker Add launcher icon setDone Bump compileSdk and targetSdk to Play's current floorDone Produce and validate a real signed release AABDone Confirm Supabase session tokens are encrypted at restDone verify:one-contact-address is red on main — design/card-creation-flow.html publishes kaitlynn@tactile.to 14 timesDone Automate versionCode and versionNameDone Un-pin security-crypto from alphaDone Replace deprecated security-crypto with Android Keystore + migrate enrolled devicesTo do

Wave

Android — Pre-submission blockers

Short, hard list that blocks any Play Store submission. Do these first — they are cheap and absolute.

TacTile › Launch TacTile › Android › Android — Pre-submission blockers

7/11 done4 open3 open blockers

Selected taskclear

Provision apps/android/local.properties so the Android app can reach a backend

To doOwner · met_f85c04f8Blocker

Unlocks 2Produce and validate a real signed release AAB Confirm Supabase session tokens are encrypted at rest

Show the prompt

You are Viv, the agent for the TacTile lane of Command.

Open the lane and work there:

```bash
cd ~/Command/tactile && claude
```

Read that lane's CLAUDE.md and lane.json before you touch anything — they
carry your identity, your scope, and the hazards specific to this lane.
Read state from the hub (https://internal.tactile.to) or ask. Never guess at it.

## The task

**Provision apps/android/local.properties so the Android app can reach a backend** · to do · blocker

Where it sits: TacTile › Launch TacTile › Android › Android — Pre-submission blockers

## Unlocks 2

- Produce and validate a real signed release AAB
- Confirm Supabase session tokens are encrypted at rest

## The brief on file

Matthew — this blocks the on-device QA half of BOTH t_62cd5815 (R8 validation) and t_b0dcb211 (session encryption), and it needs a 1Password read, so it is yours rather than an agent's.

THE PROBLEM: /Users/matthewkvamme/Command/tactile/apps/android/local.properties contains ONLY `sdk.dir` (49 bytes). It is gitignored, so it exists only on this machine and nowhere else.

Consequence: SUPABASE_REST_URL, SUPABASE_ANON_KEY, TACTILE_API_BASE_URL and GOOGLE_WEB_CLIENT_ID are all empty strings in BuildConfig (verified in the generated BuildConfig.java for both debug and release). The app then throws its own guard on launch — NetworkConfig.kt:27, "Networking config is missing — BuildConfig fields are empty" — and dies before any screen renders. It is not a crash bug; it is the app correctly refusing to run unconfigured.

So an Android build made on this machine today cannot sign in, cannot create a destination, and cannot scan a QR against a real backend. Every runtime QA step in the pre-submission wave is blocked on this, and the wave's session brief did not know it.

WHAT TO DO: fill apps/android/local.properties from 1Password. The template with the exact key names is committed at apps/android/local.properties.example. Keys needed:
  SUPABASE_REST_URL
  SUPABASE_ANON_KEY          (the anon/publishable key — NEVER the service-role key; the client has no path for it)
  TACTILE_API_BASE_URL
  GOOGLE_WEB_CLIENT_ID       (the WEB OAuth client ID, not the Android one — it must match what Supabase's Google provider validates against; see docs/runbooks/android-auth-provisioning.md)
Optionally DEV_AUTOLOGIN_EMAIL / DEV_AUTOLOGIN_PASSWORD for the debug auto-login (ben@tactile.to is on the device-trust bypass allowlist, so the OTP gate is skipped).

None of these are true secrets — the anon key and client ID ship inside every published build — but they are environment-specific and the file must stay gitignored. Never commit it.

WORTH DECIDING AT THE SAME TIME: this file existing on exactly one laptop is the single point of failure behind all of it. Consider an `op inject`-based script that regenerates local.properties from op:// references (the pattern docs/secrets/ already uses), so a new machine or a future CI runner is one command away instead of a manual copy. That would also unblock wave w_8b2fb838 (Android build & release automation), which cannot work without it.

VERIFY when done:
  cd apps/android
  export JAVA_HOME="/Applications/Android Studio.app/Contents/jbr/Contents/Home"
  ./gradlew :app:assembleDebug && adb install -r app/build/outputs/apk/debug/app-debug.apk
App should reach the sign-in screen and a real sign-in should succeed.

## How to work this

- Do the work, don't just plan it. If the fix is obvious and safe, make it.
- Surface anything needing Matthew's sign-off instead of deciding it yourself.
- Short replies. Lead with the answer, then stop.
- Finish by saying what changed, what you verified, and what you'd do next.

To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it

Lanes

Android — Pre-submission blockers

Provision apps/android/local.properties so the Android app can reach a backend