# KODA — Claude Code Agent
## What I'm Working On
- Session 5 (2026-03-17) — Fixed QA v2 medium/low issues #5-#10 (commit add171e)
- All criticals/highs from Luna's v2 report confirmed fixed by Luna
- Remaining: #7 (cert pinning — deliberate decision, root only) and #11 (beacon cache plaintext — low risk, accepted)

## Notes From John
- "just do everything in any order, you're fast!!"
- Migrating to VPS (dev.payfrit.com) — will restart there in VS Code
- All teammates are AI agents; names are for routing/specialization, not persona roleplay

## Decisions Made
- Async scan flow for barcode lookups (202 + polling)
- Barcode normalization: try both UPC-A and EAN-13
- OkHttp read timeout bumped to 60s for slow OFF lookups
- Cert pinning: ISRG Root X1 ONLY (LE intermediates rotate unpredictably)
- Tab approval: member-side polling every 3s, 2min timeout, then graceful message
- Cart errors use toast instead of dialog to prevent stacking

## Session 5 Fixes (commit add171e)
- #5: CartActivity tab rejection — ic_error icon + "Order rejected" message
- #6: Api.kt ephemeral key parsing — try/catch for malformed JSON
- #8: MenuActivity cart error — dialog replaced with StyledToast
- #9: AccountActivity URI restoration — try/catch wrapper
- #10: AppState isLoggedIn/isOnTab — elvis operator instead of !! assertions

## Session 4 Fixes
### getDetail.php — PlatformFee missing (commit b5394ae)
- Fixed: total now includes PlatformFee

### Task creation — TaskTypeID missing (commit 628172c)
- Fixed: added TaskTypeID=0 to submitCash.php, submit.php, webhook.php

## E2E Test Results (Order 100, business 55)
- All fees computed correctly

## Luna QA v1 — ALL RESOLVED (commit f62a0bd)
## Luna QA v2 — 9/11 fixed, 2 accepted (cert pinning + beacon cache)

## KDS Task Creation (commit 07abcee)
- submitCash.php + submit.php create kitchen tasks

## Pending Tasks
- No blockers — waiting for John's next task