# FamChore — TODO

(Completed work is tracked in MEMORY.md / git history.)

## Open / next features

### Payments / billing
- [ ] Prod webhook secret wiring in Stripe Dashboard (dev uses CLI secret)
- [ ] Optional hardening: server-side session verification on checkout return (`checkout.sessions.retrieve` reusing webhook apply logic) — only if SSE/webhook lag ever becomes a real problem (currently event-driven via PB realtime, see MEMORY 2026-08-22)

### Platform admin
- [x] Platform-admin UI shipped on `/admin`: issue codes (auto-gen XXXX-XXXX values), enable/disable/delete (delete blocked while in use), usage counts, trial vs access typing; stats now include chores completed / active subs / paused-gated / active codes; families table shows plan+paused state. Remaining polish: table link duplication.
- [ ] `/admin` Families table: name link and "View" are duplicates after the broken-link fix — tidy up.

### App / UX
- [ ] Signup wizard: `?plan=` param only pre-highlights the tier at step 4 — confirm whether it should auto-scroll/pulse instead
- [ ] Data card placeholder ("Download CSV / Delete Family coming soon")
- [ ] Parent invite ("Invite Parent") is an alert stub

### Infra / deferred
- [ ] WhatsApp notifications
- [ ] Weekly CRON (`/api/weekly-cron`, Coolify) — settlement stays manual via complete-week/simulateEow