Roadmap

Dedicated tablet PWA for shared clock-in stations. Per-device tokens, first-of-day identity selfie, per-session job photos (field context), auto-submit on clock-out (kiosk-only users), tenant-configurable idle timers, cross-device active-session guard, per-tablet recovery PIN so a stuck kiosk can self-recover without an admin call.

Enum renamed for clarity (weekly / per_session / none). Mixed firms can run tenant=weekly (office consultants upload one summary per week) while individual field techs override to per_session (kiosk clock-out photos). Master on/off gate stays per-user separate from the cadence.

16h max clock-out guard rejects sessions left open overnight ('forgot to clock out'). Cross-device concurrent-clock-in guard names WHICH kiosk / source holds the open session. Cross-midnight shifts get a visual arrow marker in the approval grid + 'next day' annotation in tooltips.

super_admin can PATCH any time entry regardless of status (submitted / approved / rejected) — no more reject → auto-draft → edit → re-approve dance. Audit row tags every override with metadata.type: 'admin_direct_edit' + previousStatus.

Clock-in shift date attributed to the tenant's local calendar day (not UTC). Fixes the off-by-one bug where a PT tenant clocking in at 8pm local landed on the wrong calendar day. Shift-start-day convention preserved for payroll compatibility.

Read-only transaction sync (transactions + balance only — never auth / never movement). AES-256-GCM tenant-scoped token storage. 5-rule auto-matcher covers AR / AP / retainer / direct-payment. Auto-categorization rules. QuickBooks IIF export. Per-account opt-in/out.

SSN sole-prop contractors get their own classification (contractor_1099) under People with 1099-NEC reporting via the embedded vendor wrapper. EIN solo LLCs stay vendor-classified (the LLC is the business entity).

iOS / Android web app at /m/*. Time entry + week + approvals + contracts. Add to home screen for icon-launchable app feel. Email reminders for submit + approval-result. Per-user notification prefs.

Per-tenant custom PO formats with snapshot-at-compose. Token catalog for HTML. AcroForm stamping for uploaded PDFs. Always-on PDF preview in every surface (compose / detail / recipient / public sign).

Client + matter-scoped advance deposits with drawdown ledger + low-balance replenishment alerts. Available to every tenant, not just legal (consultants call them monthly retainers, agencies do retainer engagements, CPAs collect tax-prep deposits — same mechanics).

Bundled Caddy in Windows + macOS installers. 4 modes: HTTP-only / self-signed / uploaded / Let's Encrypt. Hot-swap without app downtime. In-app expiry banner (7 / 30 day tiers).

LEDES 1998B + 2000 export. UTBMS task / activity / expense codes. Matters sidecar. Per-client billable-hour rounding to tenths. Upload-validate tool for admin-edited LEDES files.

Firm-uploaded SVG / PNG renders in PDF headers + email signatures. Currently the firm name is text-only.

One legal matter spans multiple projects. Today the matter sidecar is 1:1 with projects. Forward-compatible schema is already in place; this is the service-layer rewire.

Bank Sync auto-matcher covers ~80% of cases via 5 rules; the remaining unmatched currently go to categorization. Picker UI to let admin attach a transaction to any AR / AP / retainer / direct payment manually.

Physical fallback for the rare case where a tech has neither the token nor the PIN. Sticker on the underside of the tablet with a signed re-provision URL — scan with the tablet camera to re-issue a token. Complements the recovery PIN already shipped.

On-prem-first today by design. Multi-tenant PostgreSQL + hosted infrastructure for customers who'd prefer not to self-host.

Strict-segregation rules for client trust funds. Forward-compat reserved on the retainer schema. Anchor-customer led.

PWA covers the time-entry-on-mobile use case today. Native app considered when PWA usage exceeds ~15% of total time entries (we'll measure post-launch).

Customers receive PDF invoices via email today. Portal for invoice history + online payment is customer-demand-led.

QuickBooks IIF export exists today (one-click year-end). Live QBO sync via their OAuth API is on the longer-term roadmap.

TimeTrack Pro is not a payroll system today. OT tagging exists for downstream consumption by Gusto / ADP / Paychex via export. Direct integrations under review.