# Field work and reviewed document suggestions — v0.16

This is an invented-data local checkpoint. The [v0.16 connected owner walkthrough](CONNECTED-WORKFLOW-WALKTHROUGH.md) now has actual browser evidence, including a short real capture, explicit fictional correction, labour conversion, received-material source review, private direct invoice, local issue, partial receipt and report/PDF checks. Broader staff/photo/two-person/phone flows remain. API, structural render and terminal recovery evidence are recorded separately. The live SHS app is unchanged.

## Choose the work and people

Open **Field work** in the owner workspace or staff workspace. Accepted, scheduled and in-progress jobs appear without a date filter. A staff member needs an enabled membership linked to an active Team resource with an unarchived booking on the exact job. Historical unarchived bookings count under the current assignment model. Owners can also open retained logs and timers on closed jobs to review or resolve them.

Choose one or two actual named people before starting. Staff must include their own linked resource, and every selected person must be assigned to that job. Owners can choose active resources. Team resources carry explicit internal hourly costs; no SHS fixed one-person/two-person rate is copied. A running timer reserves each selected person across all jobs. Pause releases those reservations; resuming must obtain them again.

## Capture, stop, review, record

1. **Start timer** creates a saved work record with the people and their internal rates at that moment. A private note is optional.
2. Keep the field view open. It confirms running timers with the server every 30 seconds. The moving clock between confirmations is an estimate; only server-confirmed time is recorded. There is no offline queue.
3. Use **Pause** during a break and **Resume** to continue the same record. **Stop for review** ends capture. A later start creates another record. Pause before navigating away or closing the app.
4. Lost contact for more than two minutes, a server restart or a detected server-clock change interrupts the timer at its last confirmed timestamp. Unconfirmed time and downtime are never added automatically. Phone backgrounding can interrupt confirmations; it still needs device testing.
5. An owner inspects the captured intervals and enters a reason for **Save owner review**. To correct missing or mistaken time, use **Correct reviewed intervals**. Enter London dates/times and select GMT or BST explicitly. The repeated autumn hour has two valid choices; spring gaps and invalid choices are rejected. The raw capture and prior reviews remain in history.
6. Inspect the rounded minutes and saved internal rates, enter a reason and choose **Record reviewed labour**. Only this action creates job time/cost records. Capture and review alone do not change job costs, quotes, invoices, payments or job stages.
7. To correct already recorded work, return to its field review. The old generated time entries are archived with their history; reconversion creates one new active generation. Generated entries cannot be independently changed under manual Time. An active document reservation must first be resolved before correcting/discarding its field source.

Actual elapsed milliseconds are split at London midnights, including clock changes. Each person's minutes are rounded half up once per London date. Each person/day must round to 1–1,440 minutes and must fit the existing daily limit across all jobs and manual time. A 29-second capture rounds to zero and needs correction or explicit discard; it is not silently billed. Two people working for 90 seconds produce two rounded minutes each, four person-minutes in total. Across midnight, rounding is applied separately to each day. Rates and names captured at the start are retained after later resource edits or archiving.

Reviewed intervals cannot overlap another retained field record for the same person. Manual time has dates/durations rather than clock intervals, so only its daily capacity can be checked automatically. Owners must check for duplicate manual entry of the same real work. Discard retains the raw record and history. There is no destructive timer deletion, payroll, automatic approval or background offline replay.

## Private notes, photos and material observations

Save a private work note or material observation with its London work date. Material observations include quantity and unit. Upload photos through the existing private Job photos panel, choose **Refresh photo choices after uploading**, then select up to 20 existing photos from the exact job for a log. Photo review, customer sharing and gallery publication are still separate owner actions.

Assigned staff may correct their own unreviewed logs. Owners may review, correct with a reason, archive and restore. Editing clears review. Converted material observations keep their original text; subsequent material changes belong under Materials. Exact job/customer history, including archived field records, prevents the guarded bare-enquiry customer relink.

A reviewed material observation creates no cost by itself. An owner must explicitly enter an internal unit cost and choose **To order**, **Ordered** or **Received**, then **Create one reviewed material record**. The saved work date supplies the relevant material dates. The observation can be converted only once. That material becomes a document suggestion only when active and received. Staff field responses exclude cost rates, financial previews and private owner review reasons.

## Review suggestions into a private draft

The owner section shows recorded field labour, separate manual time and received materials for the exact job. Field labour appears once as its complete reviewed record, including its team/date entries; the generated individual time entries are excluded from manual suggestions. Notes provide context and never become charges automatically.

1. Choose Quote or Invoice, or open an existing private draft.
2. Review the private source context, quantity and internal cost. Select whole sources. Sources already reserved/included in another document cannot be selected again.
3. Review the customer-visible description and quantity, then explicitly enter the customer unit price. Prices start blank. Internal costs and staff rates never populate customer prices.
4. Add any manual customer lines, notes and the demonstration VAT choice. These are explicit owner decisions; the prototype does not determine tax policy.
5. Tick the review acknowledgement and **Save reviewed private draft**. This neither shares a quote nor issues/sends an invoice. Open Quotes & invoices to inspect the saved draft and use its existing separate lifecycle actions.

Labour quantities are person-hours rounded to three decimals from recorded minutes. In the 90-second/two-person example, four rounded person-minutes become **0.067 person-hours**. A £100 unit price gives a £6.70 line before any demonstration VAT. Review this rounding and your intended charging basis. You may change a customer line's quantity, but selecting it reserves the whole source; partial-source billing is not supported.

Sourced drafts must be edited through **Review sources and edit draft**, available from Quotes & invoices. This supports both sourced and manual lines. Removing a sourced line and saving releases its reservation. Refreshing a source explicitly adopts its current quantity/version while retaining the customer price for review. If source data changed after selection, sharing, accepting a private quote or issuing an invoice is blocked until reviewed. Already shared/issued document content stays sealed; it does not silently change with work costs.

Quote revisions transfer reservations. Accepted quote-to-invoice conversion checks the sources again and transfers their reservations. Canceling an unused draft or voiding an unpaid invoice releases them. Unpaid invoice correction transfers them atomically to its replacement draft. An issued source remains included, including while payment is outstanding. Paid invoices retain the existing correction/void restrictions; a credit/refund policy is still a separate gap. Source history records reservation, transfer, issue and release.

Private source snapshots, costs, team names and history are excluded from customer document projections. Manually typed lines have no source identity, so automatic source reservations cannot detect semantically duplicated manual charges or historic manual invoices. Review those explicitly. There is no automatic invoice generation, bulk billing, external delivery or money transfer.

## Recovery and limits

Stop the app before backing up. Current format 11, with pinned formats 1–10, preserves the field records first added in format 6. It preserves field logs, photo references, raw intervals/events, owner reviews, captured resources/rates, corrected conversion generations, material links and document source claims/history. It checks these against exact business/job/customer relationships and retained source versions. Older supported formats restore into fresh upgraded copies; format 5 gains empty field tables. The v0.16 actual UI dataset has a separate stopped backup and fresh-restore check with unchanged source/document history and report totals.

Restored running timers become interrupted at their last confirmation, with a system history event and no resource locks. Restore never resumes a clock, adds downtime, records labour, generates invoices or records payments. Passwords/session/grant revocation follows the existing recovery guide. See field-recovery-drill.json and [Backup and recovery](BACKUP-AND-RECOVERY.md).

Local limits: 5,000 field logs and 2,000 timer records per business, 100 intervals per timer, seven actual days per reviewed timer and 40 lines per document. Archived records count. Limits, history storage and operational monitoring need production review.

No browser handoff is pending. The bounded owner capture/correction/conversion, source review, reload, invoice/receipt, PDF privacy and second-business denial checks passed in v0.16. Staff assignments, two-person work, photos/material logs, pause/resume, phone backgrounding, wider keyboard/focus, customer invoice/stage downloads, print and PWA/offline behaviour still need interactive checks. Recurrence, feedback and broader customer journeys, integrations and the wider source register remain outstanding. This checkpoint does not establish full SHS parity or production readiness.