famdone/TODO.md

FamDone — TODO

(Completed work is tracked in MEMORY.md / git history.)

Open / next features

Payments / billing

• Prod webhook secret wiring in Stripe Dashboard (dev uses CLI secret)
• Optional hardening: server-side session verification on checkout return (checkout.sessions.retrieve reusing webhook apply logic) — only if SSE/webhook lag ever becomes a real problem (currently event-driven via PB realtime, see MEMORY 2026-08-22)

Platform admin

• Platform-admin UI shipped on /admin: issue codes (auto-gen XXXX-XXXX values), enable/disable/delete (delete blocked while in use), usage counts, trial vs access typing; stats now include chores completed / active subs / paused-gated / active codes; families table shows plan+paused state. Remaining polish: table link duplication.
• /admin Families table: name link and "View" are duplicates after the broken-link fix — tidy up.

App / UX

• Signup wizard: ?plan= param only pre-highlights the tier at step 4 — confirm whether it should auto-scroll/pulse instead
• Data card placeholder ("Download CSV / Delete Family coming soon")
• Parent invite ("Invite Parent") is an alert stub

Infra / deferred

• WhatsApp notifications
• Weekly CRON (/api/weekly-cron, Coolify) — settlement stays manual via complete-week/simulateEow