Daily reports

Read and manage work reports using the timeman scope. Personal keys use the incoming webhook owner’s rights; OAuth app keys use the calling user’s token. Reading other employees’ reports is not audited. Reports may contain personal data. Each GET route has a configured rate limit of 30 requests per minute per key and user; the effective limit is returned in x-ratelimit-limit and divided across backend replicas.

Daily reports belong to workday record IDs from records. Only the credential owner’s records can be written. withAi only reads a stored variant. No report on an existing record returns null.