FieldCore Status & Roadmap

Full PHP REST API with JWT tokens, role-based access control, rate limiting and audit logging.

Eliminated hardcoded names, amounts, GPS coordinates and all mock content. Pages now show real API data or empty states.

Work logs and scans queue offline and sync automatically when connectivity is restored via background sync.

Managers, technicians and clients each see the right data. Login redirects automatically by role.

Generate QR codes linked to assets, log scans, calculate asset health from scan timestamps.

Patched API to always return HTTP 200 with error details in JSON body, bypassing Synology's nginx error page intercept.

Setup page creates the first admin account, then self-disables once configured.

Users must accept ToS on first login. Acceptance tracked with version in localStorage.

Notify clients when invoices are approved or rejected. Notify managers when technicians submit invoices. Requires SMTP config or a mail service.

Connect Stripe or Square to allow clients to pay invoices directly from the portal. Currently shows a "coming soon" message.

Allow users to reset forgotten passwords via email. Login page shows "Forgot password?" link but it's not yet wired up.

Add/edit/deactivate users from within the manager dashboard instead of requiring direct API calls.

Generate printable PDFs of invoices for clients. Could use a PHP PDF library or browser print styles.

Replace the removed map with real GPS tracking using the browser Geolocation API. Show active technicians on a map in the manager dashboard.

Add server-side search/filter to work logs, invoices and assets. Currently only client-side search exists in the manager dashboard.

Current JSON file storage has no transactions and can corrupt on concurrent writes. SQLite would be more robust and support proper queries.

Allow technicians to attach photos of completed work. Store as base64 or in a separate uploads directory.

Create invoice templates for regular jobs. Auto-generate invoices on a schedule (monthly maintenance contracts, etc).

SSH TOTP session currently has a short timeout. Extend the timeout value in the TOTP script for longer working sessions.

The technician app is already installable as a PWA. Improve the mobile experience with native share, camera, and notification APIs.

Allow clients to see their company logo in the portal header. Store branding preferences per client account.

Revenue charts, technician productivity metrics, invoice aging reports, client spend summaries.

Add TOTP 2FA option for manager accounts to improve account security.