Product plan · 2026-10-15
A complete inventory within the audited Rupert scope, with implementation evidence and delivery gates. These are priorities, not promised dates.
Ship the feature catalog, planner maintenance and conservative worker concurrency. Reconcile production documentation.
Both adapter CI jobs pass; authenticated catalog renders; diagnostics contain no customer data; Pages links and mobile layout verified.
Complete native stock coverage and exact location/identity count comparisons; extend reviewed gram recipes, lot consumption, exception review, scanner counts and reservations. Then add material/Sheets reconciliation, transfers and backorders. Payment and terminal execution have separate acceptance gates.
Tenant/role isolation, exact source identities, completeness, replay and concurrent stock/mapping tests pass; counts use one verified source/location pool. Overlap commissions award 1% independently to each worker. Primary POS requires demonstrated taxes, tender/tip/refund/settlement, hardware and operator acceptance before cutover.
Returns/exchanges, carrier labels, lot/serial traceability and marketplace listing adapters.
Sandbox round trips cover partial fulfillment, cancellation, duplicate events and failed payments; no automatic equalization of independent inventories.
Double-entry ledger, reconciliation, open books, forecasts, profit sharing and payroll exports.
Trial balance balances, closed periods reject edits, source-to-report totals reconcile, compensation permissions pass and provider exports reconcile.
Manufacturing, CRM/marketing, public integrations, offline mobile work and multi-company reporting.
Each module has an owner, data contract, migration, tenant/security tests, operational runbook and a measured capacity check before release.
Available = implemented; Partial = narrower than the full workflow; Planned = not enabled. Access also depends on your role and configured services.
| Feature | Status | Scope and limitations | Evidence |
|---|---|---|---|
| Commerce · F01Shopify + Square mirror | Available | Read-only source sync; independent location stock, no automatic equalization. | Source |
| Commerce · F02SwipeSimple sales import | Available | Reviewed, tenant-scoped Rupert line-item CSV imports with explicit paid status, timestamp, currency and tender; whole-file validation, atomic writes and unchanged replay safety. Native SwipeSimple reports may need conversion; refunds, split tenders, tax/tips/fees and direct API access are not supported. | Source |
| Commerce · F03Sales journal | Available | Hourly/location sales pivot and order details. | Source |
| Commerce · F04Register settlement | Available | Local cash sessions, recorded tender totals and physical closing-count audit; processor settlement, payouts and bank deposits are not performed. | Source |
| Commerce · F05Customer directory | Available | Unified customer history and search; not a marketing CRM pipeline. | Source |
| Commerce · F06Invoices and packing slips | Available | Printable documents for existing orders. | Source |
| Commerce · F07Fulfillment and tracking | Available | Record tracking and fulfillment transitions; carrier label purchasing is planned separately. | Source |
| Commerce · F08Refund recording | Partial | Local refund workflow; verify platform settlement separately. | Source |
| Stock · F09Location inventory | Available | Inventory workspace with filtered, paginated source/location pools, signed observations, local and warehouse holds, advisory availability, incoming transfers, waiting demand and complete CSV export. Native Shopify/C-Trax comparison retains source freshness and identity gates; physical reference stock is never summed across sources. | Source |
| Stock · F10Catalog identity links | Available | One-to-one normalized-SKU auto matching with protected manual mappings and persistent explicit unlink decisions. Ambiguous automatic claims remain unresolved; local decisions serialize per tenant. Channel stock remains independent. | Source |
| Stock · F11Count approval workflow | Available | Local prepare/submit/approve/reject/reopen audit flow. New Shopify comparisons use the exact native on-hand location snapshot with shop/catalog epoch and freshness checks; C-Trax retains native store/variant snapshots. Missing or ambiguous evidence has no delta; prior submitted bases stay frozen. Approval does not write source stock. | Source |
| Stock · F12Reorder advice | Available | Sales pace, days of cover and suggested reorder quantities; advice only. | Source |
| Stock · F13Size families | Available | Root/member derivation with explicit approval for outbound platform changes. | Source |
| Purchasing · F14Vendors and purchase orders | Available | Supplier records, draft/place/receive lifecycle, whole-unit partial deliveries, immutable receipt deltas, monotonic cumulative totals and replay-safe receiving. Draft edits and receiving serialize with placement/cancellation; receipts do not mutate source stock. | Source |
| Wholesale · F15Vendor catalog and cart | Available | Token-gated warehouse catalog, bulk tiers, cart and checkout. | Source |
| Wholesale · F16Card payment integration | Partial | Authorize.net integration exists; credentials and end-to-end settlement must be verified per deployment. | Source |
| Finance · F17Expenses and vendor payments | Available | Money-out records, payable balances and reversible soft deletion. | Source |
| Finance · F18Chart of accounts and reporting | Available | Account classification, receivables/payables, a double-entry general ledger and financial statements. | Source |
| People · F19Staff directory | Available | Departments, positions, status lifecycle and HR records. | Source |
| People · F20Timesheets and PTO | Available | Top-level submitted-hours review queue for admins, managers and least-privileged shift leaders; approve/return with audit history and no self-review. Timesheets links to all available retained Square and C-Trax history, with reviewer/all-employee filters including inactive, open, unmatched and unassigned records, latest clock/break punches, original evidence and immutable C-Trax observation history. Exact native identities and consolidation preserve staff history; formula-safe CSV respects own-worker/workspace boundaries. Source-history implementation deployed and complete source reads succeeded on October 17, 2026; authenticated access/render and pre/post-deployment recovery verification passed. Automatic C-Trax labor refresh has workspace opt-in, revision/actor/connection checks, safe attempt/freshness status and 15-minute server dispatch at minutes 02/17/32/47; enabled and verified for Herbal Healers on SER8 on October 17, 2026. Square retains its existing opt-in schedule. Approval rechecks retained entries, active employment, changed imported hours and pending clock corrections. No automatic approvals, additive cross-source totals or payroll posting; staff self-service, payroll locks and PTO remain available. | Source |
| People · F21Payroll calculations | Partial | Pay runs and payslips; no claim of tax filing, direct deposit or statutory compliance. | Source |
| Work · F22Projects and tasks | Available | Project/task transitions and tracking. | Source |
| Work · F23Goals and KPIs | Available | Goal lifecycle, KPI readings and history. | Source |
| System · F24Role and tenant permissions | Available | Tenant-scoped roles, permissions and user overrides. | Source |
| System · F25Login and Google OAuth | Available | Password login and configured Google domains. | Source |
| System · F26Audit and access history | Available | Activity and access-log views. | Source |
| System · F27Global search | Available | SQLite FTS5 trigram or PostgreSQL search, tenant-scoped results. | Source |
| System · F28Sync and worker monitoring | Available | Sync history, system page and host freshness watcher. | Source |
| System · F29SQLite backup and restore | Available | Consistent snapshots and restore tooling; off-host recovery needs a separate drill. | Source |
| System · F30Features and roadmap | Available | Signed-in feature catalog; shared with the public Pages site. | Source |
| System · F31SQLite planner maintenance | Available | Configuration/space diagnostics and explicit bounded PRAGMA optimize. | Source |
| System · F32SQLite concurrency defaults | Available | One background job thread by default on SQLite; configurable for measured workloads. | Source |
| Stock · F33Barcode scanning and labels | Partial | Exact SKU and imported native barcode scan-to-count, replay-safe draft entry and audit receipts; C-Trax native-ID worksheets cover missing SKUs. Shopify missing-SKU worksheets, scan-to-receive, label printing and camera/offline support remain separate work. | Source |
| Stock · F34Transfers, reservations and backorders | Partial | Exact source/item/location reservations, transfers with held allocation, confirmed dispatch, partial receipts, and backorders with demand/allocation/fulfillment/cancellation. Immutable actor/event history, replay protection, freshness/identity gates and shared warehouse/local capacity. Source-enforced reservations, C-Trax transfer execution, automatic source writes and partial backorder allocation remain planned. | Source |
| Stock · F35Serial, lot and expiry tracking | Partial | Raw-material lot receipts, movements and selected-lot sale-use receipts are implemented. Finished-good serials, expiry/recall and broader receipt-to-return traceability remain planned. | Source |
| Commerce · F36Carrier rates and label purchase | Planned | Rate comparison, approved label purchase, void/refund and tracking webhooks. | Source |
| Commerce · F37Returns and exchanges | Planned | Return authorization, inspection, restock and separately confirmed payment settlement. | Source |
| Commerce · F38Marketplace listings and channels | Planned | Amazon/eBay/Etsy/WooCommerce adapters with identity mapping and replay-safe imports. | Source |
| Finance · F39Double-entry ledger and close | Available | Balanced journal entries with idempotent posting from sales, expenses and vendor payments; manual entries; trial balance, income statement and balance sheet with CSV export; and ledger period locks that block edits to closed periods. | Source |
| Finance · F40Bank reconciliation and accounting exports | Available | Statement-to-GL matching workbench (sign/amount/date) with confirm and difference reporting, duplicate-line review with ignore, and QuickBooks IIF / CSV ledger export. | Source |
| Finance · F41Open-book profitability | Planned | Permissioned COGS/labor/margin by channel and product, traceable to source records. | Source |
| Finance · F42Budgets and forecast vs actual | Planned | Versioned assumptions, monthly variance and explainable inventory demand forecasts. | Source |
| People · F43Profit-share distribution ledger | Planned | Owner-approved formula versions, accruals and payout records; individual compensation stays permissioned. | Source |
| People · F44Shift scheduling and payroll export | Planned | Shift coverage and approved payroll provider export with reconciliation. | Source |
| Production · F45BOM, kits and manufacturing | Planned | Component consumption, yield, costing and assembly reversals. | Source |
| CRM · F46Leads, loyalty and marketing | Planned | Lead stages, consent records, segmentation and reviewed campaign drafts. | Source |
| System · F47Public API and integrations | Partial | Versioned tenant-scoped read API for catalog, inventory and roadmap; scoped, expiring, revocable hashed tokens. Provider setup and KORONA/Cova read checks are separate from write APIs, webhooks and business-data adapters still planned. | Source |
| System · F48Native and offline mobile workflows | Planned | Optional native client and conflict-aware offline count/receive queue. Responsive web access exists; no native or offline client is enabled. | Source |
| System · F49Multi-company consolidation | Planned | Cross-company consolidation separated from existing tenant isolation. | Source |
| Stock · F50Bulk raw material tracking | Partial | Integer-milligram lot ledger, exact Shopify variant recipes with immutable effective versions, reviewed one-time whole-sale-line deductions against a selected lot, shortage/replay protection and receipt CSV. Automatic consumption/refunds, split-lot or multi-material recipes and owner-selected Google Sheets sync remain planned. | Source |
| Commerce · F51Image-based POS cart | Partial | C-Trax native catalog with exact website image links; paired private tip confirmation, real cash sales/change/receipts/register totals, native item tax checks, local stock allocations and paid-sale stock outbox. Optional verified Authorize.net hosted-card checkout with read-only recovery; live card activation requires merchant credentials. Demo simulates both tenders. Discounts, split tenders, refunds, source order creation and PAX/TRX terminals remain outside scope. | Source |
| People · F52POS, inventory and reporting roles | Available | Cashier/POS, inventory staff member, reporting and admin presets; tenant-scoped role assignment, protected super-admin role and deactivated-session rejection. | Source |
| People · F53Remote clock-in and corrections | Available | Linked active workers clock in/out remotely and request time corrections; permissioned reviewers approve/reject with audit history. No automatic timesheet or payroll posting. | Source |
| People · F54Overlapping-shift commission preview | Partial | A separate 1% estimate for every worker present at an eligible sale, including overlaps; selected source/currency and disclosed imported-data basis. Final policy, refund reconciliation and payouts remain pending. | Source |
| Commerce · F55Customer tipping | Partial | Private paired customer display with explicit no-tip, percentage or custom confirmation, invalidated when the cart changes. Implemented cash and conditional hosted-card checkout include confirmed tips. PAX terminal tipping, tip reversal/refunds and actual merchant acceptance remain pending. | Source |
| Commerce · F56Daily register summaries | Partial | Event-dated canonical register detail and CSV plus native C-Trax source sales/tax/discount/tip/tender controls and local review. Missing/open/cross-day cash evidence remains unknown. Source register closing, complete refund/fee coverage and payout-to-bank reconciliation remain separate. | Source |
| Commerce · F57Processor and terminal integration | Partial | Conditional Authorize.net hosted-browser capture and read-only uncertain-outcome recovery, plus NMI sandbox-only tokenized checkout; NMI production charging is blocked. PAX/EMV/contactless commands, refund/void execution and vendor-connected/live acceptance remain incomplete. Correct store merchant scope must be confirmed. | Source |
| System · F58POS and payment account setup | Available | Encrypted provider-specific account preparation and explicit credential/read checks, separate from per-store checkout activation. C-Trax and SwipeSimple source readers exist independently. Saved setup and checks do not prove payment/terminal/settlement readiness or this merchant account’s gateway mapping. | Source |
| Stock · F59Inventory exception review | Available | Bounded read-only queue for stored stock/identity issues, unverifiable or excess local holds, incomplete Shopify source orders, pending counts and depleted bulk lots; source/location filters, pagination and coverage limits. Does not repair stock or recover missing source provenance. | Source |
| System · F60Private owner checklist | Available | Store-admin-only private domain/owner contacts and an encrypted service register: purposes, support contacts, renewal/review cadence and actual next dates, owner-reported MFA, ordinary HTTPS login shortcuts and vault item labels. Feature attestations require scoped evidence/dates; encrypted immutable history, stale-edit/scope protection and authenticated private printing preserve the local record. Owner attestations and manual follow-ups do not automate tests, vendor approvals, credential renewal or messages. | Source |
| System · F61Private company workspace signup | Available | Google-verified company-email requests enter a private platform review queue. Explicit platform-admin approval atomically creates an isolated workspace, first store administrator, allowed email domain and finance defaults; rejection and replay/version protections preserve history. New public Google accounts and approved workspaces receive the configured referral attribution. Email verification is not proof of domain ownership; domain-owner review, common consumer-domain exclusion and per-workspace credentials remain required. No DNS, provider connection or payment activation is performed. | Source |
| System · F62Private instance and signup dashboard | Available | Fresh active platform-super-admin access to instance-wide workspace/account totals, new setup and signup review counts, referral attribution, bounded setup listings and read-only database/job diagnostics. Configured deployment label identifies the instance; backup records describe recorded uploads rather than a restore guarantee. Account and applicant details remain in the authenticated application; no host shell, Incus management socket or database SQL console is exposed. | Source |
| System · F63Compact role-aware navigation and access boundaries | Available | Named work areas, local accessible icons, permitted-tools disclosures and role-labelled account menus reduce header clutter. Search categories, dashboard widgets/queries and cached responses follow business permissions. Reader defaults exclude personnel/payroll; staff member pay/time/leave sections have separate gates. Workspace user/permission administration and host/instance utilities require their respective administrator roles; size-membership edits require settings write. Existing explicit business permission overrides remain supported. | Source |
| Finance · F64Long-term Valmar and Authorize.net integrations | Partial | Long-term Valmar/Authorize.net objective with implemented separate Authorize.net reporting and portal-evidence paths, SwipeSimple website evidence and deposit/reconciliation workflows. Exact merchant/gateway mapping, supported vendor entitlement and complete payment-to-bank matching remain unverified. Legacy SwipeSimple CSV inbox stays disabled without an approved producer; working website reads are separate. | Source |
| Marketing · F65Community thread and reply review | Available | Optional tenant-scoped topic-search links and manual thread intake/triage; existing group-code records with dated merchant evidence, versioned reply approval, eligibility checks and manual publication/removal history. No automated crawling/posting, merchant code activation, influencer CMS or conversion attribution. | Source |
| Commerce · F66C-Trax daily sales and register reconciliation | Partial | Encrypted native store/day order, payment and per-unit line snapshots; independent source report checks, conservative register cash variance, CSV and digest-bound local review. Opt-in scheduled today/yesterday reads. Detailed refunds, cash-tip drawer handling, settlement and terminal execution remain unverified or separate. | Source |
| System · F67Master credentials and sync repair | Partial | One permission-scoped setup desk with encrypted named forms, credential completeness, explicit checks/reads and structured source-attempt receipts. Separate acquisition/source timestamps, typed failure repair guidance, C-Trax stock/sales channels, safe queue/worker evidence and in-page stale/failure alerts. Historical unknowns remain unknown; verified event coverage, outbound alerts and ownership/rotation remain planned. No automatic credential or source-schedule changes. | Source |
| Marketing · F68Influencer collaborations and product gifting | Available | Tenant-scoped influencer directory and encrypted contacts; collaborations, reviewed product gifts and manual shipment history; explicitly reviewed Shopify percentage/fixed code creation with expiry, usage limits, exact store/terms readback and recoverable creation intents; discount-applying UTM referral links, existing-code records and versioned documents. Separate contacts/discount permissions and encrypted audits. Shopify app access is required. No outreach, inventory/order writes, conversion tracking or commissions. | Source |