Lanes
One lane at a time — the goal, the critical path, and the current wave of blockers.
MATTHEW — 8 decisions that unblock the four sessionsDone · blockerMATTHEW — approve applying migration 0901 to prod (link-channel analytics)Done · blockerREVENUE OUTAGE — nobody can buy: apps/web calls /api/billing/* relatively and no such route existsDone · blockerSECURITY — `private` does nothing: 13 of 14 public /content routes ignore visibilityDone · blockerESCALATE → Matthew: 13 critical secrets 31-57 days overdue, hidden because verify short-circuits and CI is downTo do · blockerMATTHEW — irreversible before first Play upload: the signing cert says "TapTile Inc"To do · blockermain is red: verify:knip fails on 17 exported-but-unimported types in the new Canvas featureDone · blockerSESSION 1 — Android: unblock the Play Store submissionDoneSESSION 2 — Backend: the long pole everything else waits onDoneSESSION 3 — iOS: the flagship agent's proposal cardsDoneSESSION 4 — Web: close the viewer, then decide port-vs-rebuildDoneROUND 2 · SESSION — Backend: contracts first, then MCP real-ops and the agent quality barDoneROUND 2 · SESSION — iOS: contact viewer (launch gate), then light the 7 firing cardsDoneROUND 2 · SESSION — Android: destinations remainder, then the tablet foundationDoneROUND 2 · SESSION — Web: destination editing on both apps, then the QR studioDoneROUND 3 · SESSION — iOS: light all 7 remaining cards + close the router gapsDoneROUND 3 · SESSION — Backend: collection generators, multipart wrappers, QR render extraction, MCP coverageDoneROUND 3 · SESSION — Web: finish desktop editing, start web-mobile editing from zeroDoneROUND 3 · SESSION — Android: See-all handoff + the tablet punch list (both decisions already recorded)DoneROUND 4 · SESSION — Backend: finish the flagship's wire (webhook module, richer create schemas, MCP coverage)DoneROUND 4 · SESSION — iOS: fix the tweak-discards-edits defect, then open the iPad frontDoneROUND 4 · SESSION — Web: 14/14 editing on both apps, then the desktop QR studio (now unblocked)DoneROUND 4 · SESSION — Android: finish the tablet punch list and get the build QA-ready for KaitlynnDoneROUND 5 · SESSION — Backend: the displaced queue (schema growth, MCP coverage) + the QA env splitDoneROUND 5 · SESSION — iOS: WebhookCard closes the set, the tweak UI test, then the iPad front opensDoneROUND 5 · SESSION — Web: the web-mobile editing port, the secret-reveal surface, QR depthDoneROUND 5 · SESSION — Android: agent-card parity — the flagship cannot ship degraded on AndroidDoneROUND 6 · SESSION — iOS: the iPad round (twice deferred, now the whole round) + the card follow-upsDoneROUND 6 · SESSION — Backend: catalog-reconciled group/family, the webhook secret done right, and two honest handler gapsDoneROUND 6 · SESSION — Web: QR depth to done, and the reveal UI when the gate opensDoneROUND 6 · SESSION — Android: Approvals Inbox parity and session management — the human-in-the-loop layerDoneROUND 7 · SESSION — Web: the web-mobile purchase dead-end, then hazards before QR depthDoneROUND 7 · SESSION — iOS: the two submission-shaped iPad rows, unblock Kaitlynn, cut a buildDoneROUND 7 · SESSION — Android: drive Play to submittable (it is closest, and not gated on tablet)DoneROUND 7 · SESSION — Backend: un-quarantine the hidden tests, then the honest MCP surfaceDoneverify:unit has been red for weeks on one node_modules bug — html-encoding-sniffer@6 is CJS but its dep is ESM-onlyDoneSPEC → backend: checkout returns every buyer to ONE origin, so app.tactile-connect.com buyers land on tactile.toTo doFOR ANDROID (t_8de5e9bc item 2): the Play account-deletion URL is built and public — use it, do not build a second oneDoneROUND 8 · SESSION — iOS: clear the broken band, then shoot submittable iPad screenshotsDoneROUND 8 · SESSION — Android: shoot the Play listing, the account already has dataDoneROUND 8 · SESSION — Web: clear the four hazards, then finish QR depthDoneROUND 8 · SESSION — Backend: group/family reconciliation, now that it has a harnessDoneROUND 9 · SESSION — iOS: the re-derived gap band, and the one line behind six symptomsDoneROUND 9 · SESSION — Backend: unblock the two cross-platform items other lanes are stuck behindDoneROUND 9 · SESSION — Android + Web: finish the listing, finish QRTo doDecide the triggers for the 6 system error screens — all are unreachableTo doSuspended custom domain can be detached and re-added to evade suspensionDoneweb-mobile: send return_origin on checkout and the portal, or buyers still land on tactile.to (follow-up to t_4fefd007)To dogetDomainStatus poll can overwrite an admin suspension that lands mid-poll (PATCH has no status guard)Donecustom-domain-cleanup hard-deletes a detached AND suspended row 30 days after detach, ending the suspension hold (#702 case (o))Doneweb-mobile staging has no DNS record — the worker has been deploying into the voidBlockedQR parity: 15 snapshot fields have no control on either web surface, and none are documented as deliberateBlockedQR picker reuses the DESTINATION filter panel — wrong content, unscrollableTo doDEFERRED: rotation night + Supabase key migration moved to launch prep (Matthew, 30 Sep)To doBilling reinstate serves Pro-only custom domains to a Plus re-subscriberTo doMerge-order trap: #759's migration-order rule 3 flags open PRs whose migration sorts before main's newest (202610052300); #699 firstTo do
Wave
Inbox — on deck
Briefs Nova has teed up and are ready to run — each task's prompt is a complete, self-contained brief.
TacTile › Inbox — on deck
44/56 done12 open2 open blockers
Selected taskclear
Billing reinstate serves Pro-only custom domains to a Plus re-subscriber
To doOwner · Vivt_fa616d55
Found 2 Oct overnight while tracing PR #702. In apps/api/tactile-api/src/routes/billing.ts, the reinstate on an active/trialing subscription event has no plan-tier check, and verifyHost serves on status=active alone. A customer whose Pro subscription lapsed (domain billing-suspended) who re-subscribes at Plus gets the Pro-only custom domain reinstated and serving. A related gap is listed in #702: account deletion cascades custom_domains rows away, which bypasses both the suspension hold and the 30-day cooldown.
No dependencies in this wave — nothing gates it, and nothing waits on it.
Show the prompt
To doIn progressDoneBlockedPick a wave on the left · tap a task to expand it