dashboards(tiles): each tile can measure its OWN slice, not the view's total (#304)

[ikrasovytskyi]

First half of #304 — the half that makes a dashboard mean anything.

The problem

Every tile showed the same number, because the only scope was the view's single
filter. Three tiles reading 303, one labelled "Count of Epics Opened" — a free-text
label describing something it wasn't measuring.

"it's like bullshitty functionality now. like I can't select what to show. Except
for how to aggregate..."

What changed

A tile carries its own filter, ANDed with the view's filter and the viewer's
personal override. It uses:

• the same filter AST as views / /records/query / rollups — not a second
  condition language;
• the same FiltersSection builder the view toolbar uses — one filter UI in the
  product, not two.

Why a tile is now its own component

It owns its query. That's deliberate:

• the tile's scope goes to the server, so operator semantics stay the server's —
  no client-side filter evaluator that can drift from it;
• results stay grant-scoped, so a tile can never read past the viewer's access;
• two tiles with identical scope share one request (react-query dedupes on the
  query key), so N tiles is not N round trips.

cleanViewConfig prunes a tile filter's dead conditions exactly as it prunes the
view's — but keeps the tile. That's #305's rule holding: partially-dead is not junk.

Deliberately not in this PR

• Cross-database tiles. A per-tile database_id needs viewer-scoped access
  checks — a mistake there turns a dashboard into a data-leak surface. That deserves
  its own reviewable change, not a footnote in this one.
• Widget (chart) filters. Their fetch isn't per-widget yet, so I did not add
  a filter field to the widget schema — a field that would be accepted and then
  silently ignored is worse than no field.

Verification

• 2 new unit tests: a tile filter survives the read path (zod would strip an unknown
  key) and a condition on a deleted field is pruned while the tile itself
  survives.
• API suite 1824 passed / 187 files (only backup-restore.test.ts fails — needs
  Docker, documented in CLAUDE.md). Web 491 passed.
• pnpm lint, pnpm typecheck, pnpm build green; pnpm sdk:generate run and the
  drift committed.
• Not browser-verified (no jsdom in apps/web). Worth confirming after deploy: two
  tiles, same database, different filters → different numbers.

🤖 Generated with Claude Code

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	storyos-docs	ed22954	Commit Preview URL Branch Preview URL	Aug 12 2026, 10:41 PM