Roadmap
Planning
Last updated: September 2026
A complete view of what has shipped and what comes next, organized by completion status and priority.
Completed Features
All features below are live in production as of AquaDealers v3.0.0.
Core Billing & Inventory
- ✓ Core billing with FIFO lot tracking
- ✓ Estimates and returns
- ✓ Bill editing with audit trail
- ✓ Bill cancellation (same-day)
- ✓ Per-farmer product discounts and rate memory
- ✓ GST billing (per-item rates, CGST/SGST)
- ✓ Rate adjustment history
- ✓ Expiry management
- ✓ Low stock alerts
- ✓ Transaction undo (48h window)
Farmer & Supplier Management
- ✓ Farmer management with paginated ledger
- ✓ Public farmer statement sharing
- ✓ Supplier management with ledger
Multi-branch & Staff
- ✓ Multi-branch with stock transfers
- ✓ Staff access with PIN auth
- ✓ Admin portal with impersonation
- ✓ Branch color theming
Financials & Reports
- ✓ Cash book with daily closing
- ✓ Expense tracking
- ✓ Daily Book register
- ✓ Monthly finance pack
- ✓ Profit report (FIFO-based COGS)
- ✓ Sales register
- ✓ Stock report with valuation
Communication & Platform
- ✓ WhatsApp API bill notifications
- ✓ Offline-first PWA billing
- ✓ Invoice template customization (5 designs)
Recommended Next
Prioritized backlog ranked by impact and urgency. Effort estimates: Low = days, Medium = 1-2 weeks, High = 2+ weeks.
P0 — Critical Security
These items address active security vulnerabilities and should be resolved before any feature work.
| # | Item | Effort | Notes |
|---|
| 1 | Rotate leaked service role key | Low | Key is in scripts/migrate/.env.migration. Rotate in Supabase dashboard, update deploy scripts. |
| 2 | Add RLS to farmer_return_credit_applications | Low | Table was created without ENABLE ROW LEVEL SECURITY. Single migration. |
| 3 | Remove anon grants on admin RPCs | Low | All admin_* functions currently callable by unauthenticated users. |
P1 — High Impact
| # | Item | Effort | Notes |
|---|
| 1 | Server-side PDF generation | Medium | Eliminate 3-5s mobile freeze from html2canvas. Edge function with Puppeteer or similar. |
| 2 | Server-side report aggregation | Medium | Fix unbounded queries in reportsService.ts. New aggregate RPCs for monthly reports. |
| 3 | Round-off field on bills | Low | Indian dealers round to nearest rupee. Add round_off column to bills table. |
| 4 | Admin login rate limiting | Low | No brute-force protection on admin auth. Add rate limit trigger similar to staff. |
| 5 | Restrict storage bucket access | Low | farmer-profiles and product-images buckets are public. Switch to authenticated policies. |
P2 — Useful
| # | Item | Effort | Notes |
|---|
| 1 | Batch WhatsApp dues reminders | Medium | Send dues reminders to all farmers with outstanding balance in one action. |
| 2 | Profit per product report | Medium | Breakdown FIFO COGS by product/category. |
| 3 | Harvest-timed collection reminders | Medium | Trigger reminders based on farmer stocking_date and typical crop cycle. |
| 4 | Farmer risk scoring UI | Medium | Visualize payment history patterns. Data already exists in ledger. |
| 5 | Dark mode support | Medium | Currently hardcoded color-scheme: light. Needs token remap. |
| 6 | WhatsApp delivery webhooks | High | Replace polling with authkey.io webhook callbacks for real-time status. |
| 7 | Server-side staff permission enforcement | High | Current staff permissions are client-side only. Add RPC-level checks. |
P3 — Nice to Have
| # | Item | Effort | Notes |
|---|
| 1 | Tablet-specific layouts | Medium | 768-1024px currently gets mobile layout. Dedicated breakpoint needed. |
| 2 | Barcode/QR scanning for products | High | Camera-based scanning for faster product selection at counter. |
| 3 | Multi-language invoice templates | Medium | Telugu, Hindi invoice output. App already has i18next but PDF templates are English-only. |
| 4 | Farmer mobile app (view statements) | High | Dedicated farmer-facing app for statement viewing and payment history. Currently public link only. |
AquaDealers
← All Docs