hr_lite 0.1.2 → 0.2.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 38321c0b3f943e26ccdfbae2109b466196174ec5e1a60c0efcbb0b751e85b9fa
-  data.tar.gz: ac91265eeaddf77c7b9972467b49682eac102fef136a58b2033d769ba3f7d150
+  metadata.gz: 5b975162e55e723ed0bd24a9e032eba889d18e89c106ce55fc051a8566ce41e0
+  data.tar.gz: 2a0bd3e239011f037e300f26f3e8d18e3fb9a4fe7ca17b1317e70d3318a93844
 SHA512:
-  metadata.gz: 191a72380266416ce6d4ab981f8046369261de8d4208e96334fb2236c66854d08c86ceed9e114074b35ae59e83aada5aeb8be86dfe4cce22a977e7d59971dc43
-  data.tar.gz: 575a1d03fc7ecf31dbda85ea7776796992cfde111725e2a94d84835ef38d96f91bb34dec4a8a1e565110ad27e27381bec08fa755eed36fa7c18329593ae21702
+  metadata.gz: 2405b7818d6a8028375fb614ec0d187faf01088996e8d0754b3e7882ebc4adb2846cd4bf026de0aba86504c63264a8cdbbaaad740b610ce12661718581b45e04
+  data.tar.gz: 632fc1794614fa739375e0fe1a4c8b55195f9a51e7b4d5d74f65eadafc157f14b8e391eb7846c84a299634f1fd1e6f5abe64e5b18c253fa0ad276ce495da2c43

data/CHANGELOG.md

@@ -7,6 +7,42 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.2.1] - 2026-07-19
+
+### Added
+
+- Email-invite onboarding: leave the starting password blank and the
+  welcome email carries a set-your-password link from the host's
+  `invite_url_for` hook; `Notifications.publish`/`EventMailer.event`
+  accept an absolute `link_url` for tokenized URLs. (Intended for 0.2.0;
+  missed the merge window.)
+
+## [0.2.0] - 2026-07-19
+
+### Added
+
+- Resignations: employees submit/withdraw from the portal; leadership
+  accepts with a confirmed last working day that stamps the profile's
+  exit date (payroll/attendance clip to it automatically).
+- Onboarding: leadership creates the sign-in with the profile via the
+  `onboard_user` hook (no self sign-up anywhere); offboarding stamps the
+  exit date and revokes access via `offboard_user` — records are never
+  deleted.
+- `PayrollAutoDraftJob`: monthly automation that drafts + computes the
+  previous month's payroll from attendance and notifies leadership for
+  review; publishing stays human.
+- Company logo (`company[:logo_url]`, data-URIs welcome) in the shell
+  and on salary-slip PDFs.
+- Keka-style left-rail navigation on desktop with grouped sections
+  (My work / Team / Organisation); mobile keeps the bottom tab bar.
+- New notification-matrix events: `resignation.*`, `employee.onboarded`,
+  `payroll.draft_ready`.
+
+### Fixed
+
+- The auto-created settings row no longer emails leadership
+  ("Someone created Setting" noise); real settings edits stay audited.
+
 ## [0.1.2] - 2026-07-19
 
 ### Fixed

data/app/assets/stylesheets/hr_lite/hr_lite.css

@@ -33,6 +33,8 @@
   overflow-x: hidden;
 }
 .hrl-body a { color: var(--hrl-accent); text-decoration: none; }
+.hrl-shell { display: flex; min-height: 100vh; }
+.hrl-content { flex: 1; min-width: 0; }
 .hrl-main {
   padding: .85rem;
   padding-bottom: calc(4.4rem + env(safe-area-inset-bottom));
@@ -41,30 +43,26 @@
 }
 .hrl-main > * { min-width: 0; }
 
-/* App bar */
-.hrl-appbar {
-  background: var(--hrl-card);
-  border-bottom: 1px solid var(--hrl-line);
-  padding-top: env(safe-area-inset-top);
-  position: sticky; top: 0; z-index: 20;
-}
-.hrl-appbar__inner {
-  display: flex; align-items: center; gap: .75rem;
-  padding: .6rem .85rem; max-width: 68rem; margin: 0 auto;
-}
-.hrl-appbar__brand { font-weight: 700; font-size: 1.02rem; color: var(--hrl-ink); }
-.hrl-appbar__user { margin-left: auto; color: var(--hrl-muted); font-size: .82rem; white-space: nowrap; }
-
-/* Nav: hidden inline on phones (tabbar covers it), row on >=768px */
-.hrl-nav--top { display: none; }
-.hrl-nav__sep { width: 1px; align-self: stretch; background: var(--hrl-line); margin: 0 .2rem; }
+/* Left rail (Keka-style) — hidden on phones, fixed column on >=768px */
+.hrl-side { display: none; }
 .hrl-nav__link {
   color: var(--hrl-muted); font-size: .88rem; padding: .5rem .6rem;
   border-radius: var(--hrl-radius-sm); min-height: 44px;
   display: inline-flex; align-items: center;
 }
 .hrl-nav__link--active { color: var(--hrl-accent); background: var(--hrl-info-bg); font-weight: 600; }
-.hrl-nav__link--back { margin-left: .25rem; border: 1px solid var(--hrl-line); }
+
+/* Mobile app bar */
+.hrl-appbar--mobile {
+  background: var(--hrl-card);
+  border-bottom: 1px solid var(--hrl-line);
+  padding: calc(.6rem + env(safe-area-inset-top)) .85rem .6rem;
+  position: sticky; top: 0; z-index: 20;
+  display: flex; align-items: center; gap: .75rem;
+}
+.hrl-appbar__brand { font-weight: 700; font-size: 1.02rem; color: var(--hrl-ink); display: inline-flex; align-items: center; }
+.hrl-appbar__logo { height: 28px; width: auto; display: block; }
+.hrl-appbar__user { margin-left: auto; color: var(--hrl-muted); font-size: .82rem; white-space: nowrap; }
 
 /* Bottom tab bar (phone) */
 .hrl-tabbar {
@@ -76,9 +74,33 @@
 .hrl-tabbar .hrl-nav__link { flex: 1; justify-content: center; font-size: .78rem; }
 
 @media (min-width: 768px) {
-  .hrl-nav--top { display: flex; flex-wrap: wrap; gap: .1rem; align-items: center; }
   .hrl-tabbar { display: none; }
-  .hrl-main { padding: 1.25rem; padding-bottom: 2rem; }
+  .hrl-appbar--mobile { display: none; }
+  .hrl-main { padding: 1.4rem 1.6rem 2rem; }
+
+  .hrl-side {
+    display: flex; flex-direction: column;
+    width: 232px; flex: 0 0 232px;
+    background: var(--hrl-card); border-right: 1px solid var(--hrl-line);
+    position: sticky; top: 0; height: 100vh; overflow-y: auto;
+    padding: 1rem .75rem;
+  }
+  .hrl-side__brand { display: block; padding: .25rem .5rem 1rem; }
+  .hrl-side__logo { max-height: 40px; max-width: 100%; display: block; }
+  .hrl-side__brandname { font-weight: 800; font-size: 1.1rem; color: var(--hrl-ink); }
+  .hrl-side__nav { display: flex; flex-direction: column; gap: 2px; }
+  .hrl-side__nav .hrl-nav__link { display: flex; min-height: 38px; padding: .45rem .6rem; }
+  .hrl-side__group {
+    margin: .9rem .5rem .25rem; font-size: .68rem; font-weight: 700;
+    letter-spacing: .08em; text-transform: uppercase; color: var(--hrl-muted);
+  }
+  .hrl-side__group:first-child { margin-top: 0; }
+  .hrl-side__foot {
+    margin-top: auto; padding: .75rem .5rem 0; border-top: 1px solid var(--hrl-line);
+    display: flex; flex-direction: column; gap: .35rem;
+  }
+  .hrl-side__user { font-size: .82rem; font-weight: 600; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+  .hrl-side__back { font-size: .8rem; }
 }
 
 /* Flash */

data/app/controllers/hr_lite/admin/employees_controller.rb

@@ -1,16 +1,20 @@
 module HrLite
   module Admin
-    # Employee HR profiles (leadership). No destroy — exits are a date;
+    # Employee HR profiles (leadership). Onboarding can create the login
+    # itself (config.onboard_user); offboarding stamps the exit date and
+    # revokes access (config.offboard_user) — nothing is ever deleted,
     # payroll history is a statutory record.
     class EmployeesController < LeadershipController
       def index
         @profiles = paginate(EmployeeProfile.includes(:user).order(:employee_code))
         @users_without_profile = HrLite.employees.reject { |u| EmployeeProfile.exists?(user_id: u.id) }
+        @pending_resignations = Resignation.pending.includes(:user).recent_first
       end
 
       def show
         @profile = EmployeeProfile.includes(:user).find(params[:id])
         @structures = SalaryStructure.where(user_id: @profile.user_id).order(effective_from: :desc)
+        @pending_resignation = Resignation.pending.find_by(user_id: @profile.user_id)
       end
 
       def new
@@ -18,12 +22,42 @@ module HrLite
       end
 
       def create
+        new_login = params.dig(:employee_profile, :new_user_email).present?
         @profile = EmployeeProfile.new(profile_params)
+
+        if new_login
+          user = HrLite.config.onboard_user.call(
+            name: params.dig(:employee_profile, :new_user_name).to_s,
+            email: params.dig(:employee_profile, :new_user_email).to_s.strip,
+            password: params.dig(:employee_profile, :new_user_password).to_s
+          )
+          @profile.user_id = user.id
+        end
+
         if @profile.save
-          redirect_to admin_employee_path(@profile), notice: "Employee profile created."
+          if new_login
+            invite_url = HrLite.config.invite_url_for&.call(@profile.user)
+            Notifications.publish(
+              "employee.onboarded",
+              title: "Welcome aboard — your HR account is ready",
+              body: invite_url ? "Set your password with the button below, then sign in with your email."
+                               : "Sign in with your email; your manager has your starting password.",
+              path: "/",
+              link_url: invite_url,
+              bell_to: [ @profile.user ],
+              email_to: [ @profile.user ]
+            )
+          end
+          redirect_to admin_employee_path(@profile), notice: "Employee #{'onboarded' if new_login} profile created."
         else
           render :new, status: :unprocessable_entity
         end
+      rescue ActiveRecord::RecordInvalid => e
+        @profile.errors.add(:base, "Could not create the login: #{e.record.errors.full_messages.to_sentence}")
+        render :new, status: :unprocessable_entity
+      rescue ActiveRecord::RecordNotUnique
+        @profile.errors.add(:base, "Could not create the login: that email already has an account")
+        render :new, status: :unprocessable_entity
       end
 
       def edit
@@ -39,6 +73,22 @@ module HrLite
         end
       end
 
+      # Exit: stamps the date (attendance/payroll clip on it) and revokes
+      # access via the host hook. Audited via the profile update.
+      def offboard
+        @profile = EmployeeProfile.find(params[:id])
+        exit_date = params[:date_of_exit].presence&.to_date || Date.current
+
+        @profile.update!(date_of_exit: exit_date)
+        begin
+          HrLite.config.offboard_user.call(@profile.user)
+        rescue => e
+          Rails.logger.error("[hr_lite] offboard_user failed: #{e.class}: #{e.message}")
+        end
+        redirect_to admin_employee_path(@profile),
+                    notice: "Offboarded — last day #{exit_date.strftime('%d %b %Y')}, access revoked."
+      end
+
       private
 
       def profile_params

data/app/controllers/hr_lite/admin/resignations_controller.rb

@@ -0,0 +1,18 @@
+module HrLite
+  module Admin
+    class ResignationsController < LeadershipController
+      def accept
+        resignation = Resignation.find(params[:id])
+        resignation.accept!(
+          actor: hr_current_user,
+          last_day: params[:last_day].presence&.to_date,
+          note: params[:note]
+        )
+        redirect_to admin_employees_path,
+                    notice: "Resignation accepted — exit date recorded on the profile."
+      rescue ActiveRecord::RecordInvalid
+        redirect_to admin_employees_path, alert: "Only pending resignations can be accepted."
+      end
+    end
+  end
+end

data/app/controllers/hr_lite/resignations_controller.rb

@@ -0,0 +1,40 @@
+module HrLite
+  # Employee self-service resignation: submit, see status, withdraw while
+  # pending. Always scoped to hr_current_user.
+  class ResignationsController < ApplicationController
+    def show
+      @resignation = own.recent_first.first
+      @new_resignation = Resignation.new(proposed_last_day: Date.current + 30) unless @resignation&.pending?
+    end
+
+    def create
+      @resignation = Resignation.new(resignation_params.merge(user_id: hr_current_user.id))
+      if @resignation.save
+        redirect_to resignation_path, notice: "Resignation submitted — leadership has been notified."
+      else
+        @new_resignation = @resignation
+        render :show, status: :unprocessable_entity
+      end
+    end
+
+    def withdraw
+      resignation = own.pending.first
+      if resignation
+        resignation.withdraw!(actor: hr_current_user)
+        redirect_to resignation_path, notice: "Resignation withdrawn."
+      else
+        redirect_to resignation_path, alert: "Nothing pending to withdraw."
+      end
+    end
+
+    private
+
+    def own
+      Resignation.where(user_id: hr_current_user.id)
+    end
+
+    def resignation_params
+      params.require(:resignation).permit(:reason, :proposed_last_day)
+    end
+  end
+end

data/app/jobs/hr_lite/payroll_auto_draft_job.rb

@@ -0,0 +1,23 @@
+module HrLite
+  # Monthly automation: on the 1st, draft + compute the previous month's
+  # payroll from attendance and the policy, then tell leadership it is
+  # waiting for review. Publishing stays a deliberate human action —
+  # the system prepares, people approve.
+  class PayrollAutoDraftJob < ActiveJob::Base
+    queue_as :default
+
+    def perform(month: Date.current.prev_month.beginning_of_month)
+      return unless EmployeeProfile.active_for(month).exists?
+
+      run = PayrollRun.find_or_create_by!(period_month: month)
+      return unless run.draft? || run.review?
+
+      run.compute!(actor: nil)
+      Notifications.publish(
+        "payroll.draft_ready",
+        title: "Payroll #{run.label} computed from attendance — #{run.salary_slips.count} slips await review",
+        path: "/admin/payroll_runs/#{run.id}"
+      )
+    end
+  end
+end

data/app/mailers/hr_lite/event_mailer.rb

@@ -3,11 +3,11 @@ module HrLite
   # body, detail lines, diff table) is assembled by the Notifications bus so
   # adding an event never means adding a template.
   class EventMailer < ApplicationMailer
-    def event(to:, subject:, heading:, body: nil, lines: [], path: nil)
+    def event(to:, subject:, heading:, body: nil, lines: [], path: nil, link_url: nil)
       @heading = heading
       @body = body
       @lines = Array(lines)
-      @cta_url = HrLite::EventMailer.link_for(path)
+      @cta_url = link_url.presence || HrLite::EventMailer.link_for(path)
       mail(to: to, from: HrLite.config.mailer_from, subject: subject)
     end
 

data/app/models/hr_lite/employee_profile.rb

@@ -14,6 +14,10 @@ module HrLite
 
     TAX_REGIMES = %w[new old].freeze
 
+    # Onboarding-form virtuals (the controller hands them to
+    # config.onboard_user; never persisted, never audited).
+    attr_accessor :new_user_name, :new_user_email, :new_user_password
+
     validates :employee_code, presence: true, uniqueness: true
     validates :user_id, uniqueness: true
     validates :date_of_joining, presence: true

data/app/models/hr_lite/resignation.rb

@@ -0,0 +1,84 @@
+module HrLite
+  # Employee-initiated exit. One open resignation per person; accepting it
+  # stamps the employee profile's exit date (which payroll and attendance
+  # already respect) and notifies both sides. Withdrawal is allowed while
+  # pending — leaving should never need an email thread.
+  class Resignation < ApplicationRecord
+    STATUSES = %w[pending accepted withdrawn].freeze
+
+    belongs_to :user, class_name: HrLite.config.user_class
+    belongs_to :decided_by, class_name: HrLite.config.user_class, optional: true
+
+    validates :proposed_last_day, presence: true
+    validates :status, inclusion: { in: STATUSES }
+    validate :last_day_not_past, on: :create
+    validate :single_open_resignation, on: :create
+
+    scope :pending, -> { where(status: "pending") }
+    scope :recent_first, -> { order(created_at: :desc) }
+
+    STATUSES.each { |s| define_method("#{s}?") { status == s } }
+
+    after_create :notify_submitted
+
+    def accept!(actor:, last_day: nil, note: nil)
+      raise ActiveRecord::RecordInvalid.new(self), "not pending" unless pending?
+
+      final_day = last_day.presence || proposed_last_day
+      transaction do
+        update!(status: "accepted", decided_by_id: actor.id, decided_at: Time.current,
+                decision_note: note.presence, proposed_last_day: final_day)
+        profile = EmployeeProfile.find_by(user_id: user_id)
+        profile&.update!(date_of_exit: final_day)
+      end
+
+      Notifications.publish(
+        "resignation.accepted",
+        title: "Resignation accepted — last working day #{final_day.strftime('%d %b %Y')}",
+        body: note.presence,
+        path: "/resignation",
+        bell_to: [ user ],
+        email_to: [ user ]
+      )
+      true
+    end
+
+    def withdraw!(actor:)
+      raise ActiveRecord::RecordInvalid.new(self), "not pending" unless pending? && actor.id == user_id
+
+      update!(status: "withdrawn", decided_at: Time.current)
+      Notifications.publish(
+        "resignation.withdrawn",
+        title: "#{HrLite.display_name(user)} withdrew their resignation",
+        path: "/admin/employees",
+        bell_to: HrLite.admin_users
+      )
+      true
+    end
+
+    private
+
+    def notify_submitted
+      Notifications.publish(
+        "resignation.submitted",
+        title: "#{HrLite.display_name(user)} submitted their resignation " \
+               "(last day proposed: #{proposed_last_day.strftime('%d %b %Y')})",
+        body: reason.presence,
+        path: "/admin/employees",
+        bell_to: HrLite.admin_users
+      )
+    end
+
+    def last_day_not_past
+      return unless proposed_last_day
+
+      errors.add(:proposed_last_day, "cannot be in the past") if proposed_last_day < Date.current
+    end
+
+    def single_open_resignation
+      if self.class.pending.where(user_id: user_id).exists?
+        errors.add(:base, "You already have a pending resignation")
+      end
+    end
+  end
+end

data/app/models/hr_lite/setting.rb

@@ -10,5 +10,16 @@ module HrLite
     def self.instance
       first_or_create!
     end
+
+    private
+
+    # The defaults row bootstraps itself on first read — a system action,
+    # not a governing change; auditing it would email leadership noise.
+    # Real edits (updates) stay fully audited.
+    def hr_lite_audit!(action)
+      return if action == "create" && HrLite::Current.actor.nil?
+
+      super
+    end
   end
 end

data/app/views/hr_lite/admin/employees/_form.html.erb

@@ -4,9 +4,29 @@
     <%= f.hidden_field :user_id %>
     <% if profile.new_record? && profile.user_id.blank? %>
       <div class="hrl-field">
-        <%= f.label :user_id, "Staff member" %>
-        <%= f.select :user_id, HrLite.employees.map { |u| [ HrLite.display_name(u), u.id ] } %>
+        <%= f.label :user_id, "Existing staff member" %>
+        <%= f.select :user_id, HrLite.employees.map { |u| [ HrLite.display_name(u), u.id ] },
+                     include_blank: "— onboard a brand-new person below —" %>
       </div>
+      <fieldset class="hrl-card" style="margin-bottom:.8rem;">
+        <legend class="hrl-card__title">New login (onboarding)</legend>
+        <p class="hrl-hint">Fill these ONLY for someone who has no account yet — their sign-in is
+          created with the profile; there is no self sign-up.</p>
+        <div class="hrl-field">
+          <%= f.label :new_user_name, "Full name" %>
+          <%= f.text_field :new_user_name %>
+        </div>
+        <div class="hrl-field">
+          <%= f.label :new_user_email, "Work email (their sign-in)" %>
+          <%= f.email_field :new_user_email %>
+        </div>
+        <div class="hrl-field">
+          <%= f.label :new_user_password, "Starting password (optional)" %>
+          <%= f.text_field :new_user_password %>
+          <p class="hrl-hint">Leave blank (recommended): they get an email invite and set their own
+            password. Fill it only if you want to hand a password over yourself.</p>
+        </div>
+      </fieldset>
     <% end %>
     <div class="hrl-field"><%= f.label :employee_code %><%= f.text_field :employee_code %></div>
     <div class="hrl-field"><%= f.label :designation %><%= f.text_field :designation %></div>

data/app/views/hr_lite/admin/employees/index.html.erb

@@ -28,6 +28,23 @@
   <% end %>
 </section>
 
+<% if @pending_resignations.any? %>
+  <section class="hrl-card" style="border-color: var(--hrl-warn);">
+    <h2 class="hrl-card__title">Pending resignations</h2>
+    <% @pending_resignations.each do |resignation| %>
+      <div class="hrl-feed__item">
+        <div class="hrl-feed__body">
+          <strong><%= hr_display_name(resignation.user) %></strong>
+          — proposed last day <%= resignation.proposed_last_day.strftime("%d %b %Y") %>
+          <% if resignation.reason.present? %><span class="hrl-small hrl-muted"><%= resignation.reason.truncate(80) %></span><% end %>
+        </div>
+        <% profile = HrLite::EmployeeProfile.find_by(user_id: resignation.user_id) %>
+        <% if profile %><a class="hrl-btn" href="<%= hr_lite.admin_employee_path(profile) %>">Decide</a><% end %>
+      </div>
+    <% end %>
+  </section>
+<% end %>
+
 <% if @users_without_profile.any? %>
   <section class="hrl-card">
     <h2 class="hrl-card__title">Staff without an HR profile</h2>

data/app/views/hr_lite/admin/employees/show.html.erb

@@ -9,6 +9,48 @@
   </div>
 </div>
 
+<% if @pending_resignation %>
+  <section class="hrl-card" style="border-color: var(--hrl-warn);">
+    <h2 class="hrl-card__title">Pending resignation</h2>
+    <dl class="hrl-deflist">
+      <dt>Proposed last day</dt><dd><%= @pending_resignation.proposed_last_day.strftime("%d %B %Y") %></dd>
+      <% if @pending_resignation.reason.present? %><dt>Reason</dt><dd><%= @pending_resignation.reason %></dd><% end %>
+    </dl>
+    <%= form_with url: hr_lite.accept_admin_resignation_path(@pending_resignation), method: :post, local: true do %>
+      <div class="hrl-field">
+        <label for="res_last_day">Confirm last working day</label>
+        <input type="date" id="res_last_day" name="last_day" class="hrl-input"
+               value="<%= @pending_resignation.proposed_last_day %>">
+      </div>
+      <div class="hrl-field">
+        <label for="res_note">Note to the employee (optional)</label>
+        <input type="text" id="res_note" name="note" class="hrl-input">
+      </div>
+      <div class="hrl-form-actions">
+        <button class="hrl-btn hrl-btn--primary" type="submit">Accept resignation</button>
+      </div>
+    <% end %>
+  </section>
+<% end %>
+
+<% if @profile.date_of_exit.nil? %>
+  <section class="hrl-card">
+    <h2 class="hrl-card__title">Offboard</h2>
+    <p class="hrl-small hrl-muted">Stamps the last day (attendance and payroll clip to it) and revokes sign-in.
+      Records are never deleted.</p>
+    <%= form_with url: hr_lite.offboard_admin_employee_path(@profile), method: :post, local: true,
+                  html: { data: { turbo_confirm: "Offboard #{hr_display_name(@profile.user)}?" } } do %>
+      <div class="hrl-field">
+        <label for="off_date">Last working day</label>
+        <input type="date" id="off_date" name="date_of_exit" class="hrl-input" value="<%= Date.current %>">
+      </div>
+      <div class="hrl-form-actions">
+        <button class="hrl-btn hrl-btn--danger" type="submit">Offboard employee</button>
+      </div>
+    <% end %>
+  </section>
+<% end %>
+
 <div class="hrl-grid hrl-grid--2">
   <section class="hrl-card">
     <h2 class="hrl-card__title">Profile</h2>

data/app/views/hr_lite/employee_profiles/show.html.erb

@@ -16,6 +16,7 @@
       <dt>Bank</dt><dd><%= [ @profile.bank_name, @profile.masked_account ].compact.join(" ").presence || "—" %></dd>
     </dl>
     <p class="hrl-small hrl-muted hrl-mt">Something wrong? Ask leadership to correct it — changes are audited.</p>
+    <a class="hrl-btn hrl-mt" href="<%= hr_lite.resignation_path %>">Resignation</a>
   </section>
 <% else %>
   <p class="hrl-card hrl-card--empty">Your HR profile has not been set up yet.</p>

data/app/views/hr_lite/resignations/show.html.erb

@@ -0,0 +1,42 @@
+<% content_for(:page_title) { "Resignation" } %>
+<div class="hrl-page__head">
+  <h1 class="hrl-page__title">Resignation</h1>
+</div>
+
+<% if @resignation %>
+  <section class="hrl-card">
+    <dl class="hrl-deflist">
+      <dt>Status</dt>
+      <dd><span class="hrl-badge <%= { 'accepted' => 'hrl-badge--warn', 'withdrawn' => 'hrl-badge--muted' }[@resignation.status] %>"><%= @resignation.status.humanize %></span></dd>
+      <dt>Last working day</dt><dd><%= @resignation.proposed_last_day.strftime("%d %B %Y") %></dd>
+      <% if @resignation.reason.present? %><dt>Reason</dt><dd><%= @resignation.reason %></dd><% end %>
+      <% if @resignation.decision_note.present? %><dt>Leadership note</dt><dd><%= @resignation.decision_note %></dd><% end %>
+    </dl>
+    <% if @resignation.pending? %>
+      <%= button_to "Withdraw resignation", hr_lite.withdraw_resignation_path, method: :post,
+                    class: "hrl-btn hrl-btn--danger hrl-mt",
+                    form: { data: { turbo_confirm: "Withdraw your resignation?" } } %>
+    <% end %>
+  </section>
+<% end %>
+
+<% if @new_resignation %>
+  <section class="hrl-card">
+    <h2 class="hrl-card__title">Submit resignation</h2>
+    <p class="hrl-small hrl-muted">Leadership is notified immediately and will confirm your last working day.</p>
+    <%= form_with model: @new_resignation, url: hr_lite.resignation_path, local: true do |f| %>
+      <%= render "hr_lite/shared/form_errors", record: @new_resignation %>
+      <div class="hrl-field">
+        <%= f.label :proposed_last_day, "Proposed last working day" %>
+        <%= f.date_field :proposed_last_day %>
+      </div>
+      <div class="hrl-field">
+        <%= f.label :reason, "Reason (optional)" %>
+        <%= f.text_area :reason %>
+      </div>
+      <div class="hrl-form-actions">
+        <%= f.submit "Submit resignation", class: "hrl-btn hrl-btn--primary" %>
+      </div>
+    <% end %>
+  </section>
+<% end %>

data/app/views/hr_lite/salary_slips/pdf.html.erb

@@ -2,6 +2,9 @@
 <div class="pdf-card">
   <div class="pdf-head">
     <div>
+      <% if company[:logo_url].present? %>
+        <img src="<%= company[:logo_url] %>" alt="<%= company[:name] %>" style="height:34px; display:block; margin-bottom:6px;">
+      <% end %>
       <div class="pdf-company"><%= company[:name] %></div>
       <% if company[:address].present? %><div class="pdf-muted"><%= company[:address] %></div><% end %>
     </div>

data/app/views/layouts/hr_lite/application.html.erb

@@ -1,7 +1,8 @@
 <!DOCTYPE html>
 <html lang="en">
 <head>
-  <title><%= [ content_for(:page_title), "#{HrLite.config.company.call[:name].presence || 'HR'} — HR" ].compact.join(" · ") %></title>
+  <% company = HrLite.config.company.call %>
+  <title><%= [ content_for(:page_title), "#{company[:name].presence || 'HR'} — HR" ].compact.join(" · ") %></title>
   <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">
   <%= csrf_meta_tags %>
   <%= csp_meta_tag %>
@@ -12,37 +13,65 @@
   <% end %>
 </head>
 <body class="hrl-body">
-  <header class="hrl-appbar">
-    <div class="hrl-appbar__inner">
-      <a class="hrl-appbar__brand" href="<%= hr_lite.root_path %>"><%= HrLite.config.company.call[:name].presence || "HR" %></a>
-      <nav class="hrl-nav hrl-nav--top" aria-label="HR">
+  <div class="hrl-shell">
+    <%# Keka-style left rail on desktop; slides away on phones (tabbar takes over). %>
+    <aside class="hrl-side" aria-label="HR navigation">
+      <a class="hrl-side__brand" href="<%= hr_lite.root_path %>">
+        <% if company[:logo_url].present? %>
+          <img class="hrl-side__logo" src="<%= company[:logo_url] %>" alt="<%= company[:name] %>">
+        <% else %>
+          <span class="hrl-side__brandname"><%= company[:name].presence || "HR" %></span>
+        <% end %>
+      </a>
+
+      <nav class="hrl-side__nav">
+        <span class="hrl-side__group">My work</span>
         <% hrl_nav_items(HrLite::ApplicationHelper::NAV_ITEMS).each do |item| %>
           <%= hrl_nav_link(item) %>
         <% end %>
+
         <% if hr_admin? || hr_leadership? %>
-          <span class="hrl-nav__sep" aria-hidden="true"></span>
+          <span class="hrl-side__group">Team</span>
           <% hrl_nav_items(HrLite::ApplicationHelper::ADMIN_NAV_ITEMS).each do |item| %>
             <%= hrl_nav_link(item) %>
           <% end %>
         <% end %>
+
         <% if hr_leadership? %>
+          <span class="hrl-side__group">Organisation</span>
           <% hrl_nav_items(HrLite::ApplicationHelper::LEADERSHIP_NAV_ITEMS).each do |item| %>
             <%= hrl_nav_link(item) %>
           <% end %>
         <% end %>
+      </nav>
+
+      <div class="hrl-side__foot">
+        <span class="hrl-side__user" title="<%= hr_current_user&.email %>"><%= hr_display_name(hr_current_user) %></span>
         <% if HrLite.config.back_link %>
-          <a class="hrl-nav__link hrl-nav__link--back" href="<%= HrLite.config.back_link[:url] %>"><%= HrLite.config.back_link[:label] %></a>
+          <a class="hrl-side__back" href="<%= HrLite.config.back_link[:url] %>"><%= HrLite.config.back_link[:label] %></a>
         <% end %>
-      </nav>
-      <span class="hrl-appbar__user"><%= hr_display_name(hr_current_user) %></span>
-    </div>
-  </header>
+      </div>
+    </aside>
 
-  <main class="hrl-main">
-    <% if flash[:notice].present? %><div class="hrl-flash hrl-flash--ok" role="status"><%= flash[:notice] %></div><% end %>
-    <% if flash[:alert].present? %><div class="hrl-flash hrl-flash--warn" role="alert"><%= flash[:alert] %></div><% end %>
-    <%= yield %>
-  </main>
+    <div class="hrl-content">
+      <header class="hrl-appbar hrl-appbar--mobile">
+        <a class="hrl-appbar__brand" href="<%= hr_lite.root_path %>">
+          <% if company[:logo_url].present? %>
+            <img class="hrl-appbar__logo" src="<%= company[:logo_url] %>" alt="<%= company[:name] %>">
+          <% else %>
+            <%= company[:name].presence || "HR" %>
+          <% end %>
+        </a>
+        <span class="hrl-appbar__user"><%= hr_display_name(hr_current_user) %></span>
+      </header>
+
+      <main class="hrl-main">
+        <% if flash[:notice].present? %><div class="hrl-flash hrl-flash--ok" role="status"><%= flash[:notice] %></div><% end %>
+        <% if flash[:alert].present? %><div class="hrl-flash hrl-flash--warn" role="alert"><%= flash[:alert] %></div><% end %>
+        <%= yield %>
+      </main>
+    </div>
+  </div>
 
   <nav class="hrl-tabbar" aria-label="HR sections">
     <% hrl_nav_items(HrLite::ApplicationHelper::NAV_ITEMS).first(5).each do |item| %>

data/config/routes.rb

@@ -17,6 +17,9 @@ HrLite::Engine.routes.draw do
   get "calendar", to: "calendar#show"
   resources :salary_slips, only: %i[index show]
   resource :employee_profile, only: :show, path: "profile"
+  resource :resignation, only: %i[show create], controller: "resignations" do
+    post :withdraw
+  end
   get "career", to: "career#show"
   resources :appraisals, only: %i[index show]
 
@@ -34,7 +37,11 @@ HrLite::Engine.routes.draw do
     resources :holidays, only: %i[index create update destroy] do
       collection { post :bulk_create }
     end
+    resources :resignations, only: [] do
+      member { post :accept }
+    end
     resources :employees, except: :destroy do
+      member { post :offboard }
       resources :salary_structures, only: %i[new create edit update]
       resources :appraisals, only: %i[new create edit update destroy] do
         member { post :share }

data/db/migrate/20260719065841_create_hr_lite_resignations.rb

@@ -0,0 +1,16 @@
+class CreateHrLiteResignations < ActiveRecord::Migration[8.1]
+  def change
+    create_table :hr_lite_resignations do |t|
+      t.bigint :user_id, null: false
+      t.text :reason
+      t.date :proposed_last_day, null: false
+      t.string :status, null: false, default: "pending"
+      t.bigint :decided_by_id
+      t.datetime :decided_at
+      t.text :decision_note
+
+      t.timestamps
+    end
+    add_index :hr_lite_resignations, [ :user_id, :status ]
+  end
+end

data/lib/hr_lite/configuration.rb

@@ -8,7 +8,8 @@ module HrLite
                   :employees_scope, :mentionable_users, :notify, :render_pdf, :company,
                   :time_zone, :currency_symbol, :on_designation_change,
                   :leadership_emails, :leadership_check, :extra_stylesheets,
-                  :mailer_from, :public_url_base, :notification_matrix, :back_link
+                  :mailer_from, :public_url_base, :notification_matrix, :back_link,
+                  :onboard_user, :offboard_user, :invite_url_for
 
     # 0.1.0 pre-release name for public_url_base; kept as an alias so early
     # adopters' initializers don't break.
@@ -40,6 +41,27 @@ module HrLite
       @public_url_base       = nil # e.g. "https://hr.example.com" — enables email links + HrLite.public_url
       @notification_matrix   = nil # resolved lazily to Notifications::DEFAULT_MATRIX
       @back_link             = nil # optional {label:, url:} for the shell nav
+
+      # Leadership onboarding/offboarding. onboard_user must return a saved
+      # user record (default: create on user_class with whatever of
+      # name/email/password it supports). offboard_user should revoke the
+      # person's access — the engine never deletes anything (statutory
+      # records), it only stamps the exit date.
+      @onboard_user = ->(name:, email:, password:) {
+        klass = HrLite.user_klass
+        attributes = { email: email }
+        attributes[:name] = name if klass.column_names.include?("name")
+        if klass.method_defined?(:password=)
+          attributes[:password] = password
+          attributes[:password_confirmation] = password if klass.method_defined?(:password_confirmation=)
+        end
+        klass.create!(attributes)
+      }
+      @offboard_user = ->(user) { }
+      # Optional: return an absolute set-your-password URL for a freshly
+      # onboarded user (e.g. a Devise reset link). When present, the welcome
+      # email carries it and leadership never needs to hand over a password.
+      @invite_url_for = nil
     end
   end
 

data/lib/hr_lite/notifications.rb

@@ -24,7 +24,12 @@ module HrLite
       "appraisal.shared"      => { bell: true,  email: true,  leadership_email: true,  leadership_bell: false },
       "promotion.recorded"    => { bell: true,  email: true,  leadership_email: true,  leadership_bell: true  },
       "policy.changed"        => { bell: false, email: false, leadership_email: true,  leadership_bell: true  },
-      "digest.daily"          => { bell: false, email: false, leadership_email: true,  leadership_bell: false }
+      "digest.daily"          => { bell: false, email: false, leadership_email: true,  leadership_bell: false },
+      "resignation.submitted" => { bell: true,  email: false, leadership_email: true,  leadership_bell: true  },
+      "resignation.accepted"  => { bell: true,  email: true,  leadership_email: true,  leadership_bell: false },
+      "resignation.withdrawn" => { bell: true,  email: false, leadership_email: true,  leadership_bell: false },
+      "employee.onboarded"    => { bell: true,  email: true,  leadership_email: true,  leadership_bell: false },
+      "payroll.draft_ready"   => { bell: false, email: false, leadership_email: true,  leadership_bell: true  }
     }.freeze
 
     class << self
@@ -32,7 +37,7 @@ module HrLite
         HrLite.config.notification_matrix || DEFAULT_MATRIX
       end
 
-      def publish(event, title:, body: nil, path: nil, bell_to: [], email_to: [], lines: [], diff: nil)
+      def publish(event, title:, body: nil, path: nil, bell_to: [], email_to: [], lines: [], diff: nil, link_url: nil)
         row = matrix[event.to_s]
         unless row
           Rails.logger.warn("[hr_lite] unknown notification event #{event}")
@@ -40,7 +45,7 @@ module HrLite
         end
 
         deliver_bells(event, row, bell_to, title, body, path)
-        deliver_emails(row, email_to, title, body, path, lines)
+        deliver_emails(row, email_to, title, body, path, lines, link_url)
         deliver_leadership_email(event, row, title, body, path, lines, diff)
         deliver_leadership_bells(event, row, bell_to, title, body, path)
         nil
@@ -56,14 +61,15 @@ module HrLite
         end
       end
 
-      def deliver_emails(row, email_to, title, body, path, lines)
+      def deliver_emails(row, email_to, title, body, path, lines, link_url = nil)
         return unless row[:email]
 
         Array(email_to).compact.uniq.each do |user|
           next if user.email.blank?
 
           EventMailer.event(to: user.email, subject: title, heading: title,
-                            body: body, lines: lines, path: path).deliver_later
+                            body: body, lines: lines, path: path,
+                            link_url: link_url).deliver_later
         end
       rescue => e
         Rails.logger.error("[hr_lite] event email failed: #{e.class}: #{e.message}")

data/lib/hr_lite/version.rb

@@ -1,3 +1,3 @@
 module HrLite
-  VERSION = "0.1.2"
+  VERSION = "0.2.1"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hr_lite
 version: !ruby/object:Gem::Version
-  version: 0.1.2
+  version: 0.2.1
 platform: ruby
 authors:
 - kshitiz sinha
@@ -68,6 +68,7 @@ files:
 - app/controllers/hr_lite/admin/office_locations_controller.rb
 - app/controllers/hr_lite/admin/overview_controller.rb
 - app/controllers/hr_lite/admin/payroll_runs_controller.rb
+- app/controllers/hr_lite/admin/resignations_controller.rb
 - app/controllers/hr_lite/admin/salary_slips_controller.rb
 - app/controllers/hr_lite/admin/salary_structures_controller.rb
 - app/controllers/hr_lite/admin/settings_controller.rb
@@ -82,12 +83,14 @@ files:
 - app/controllers/hr_lite/kudos_controller.rb
 - app/controllers/hr_lite/leave_balances_controller.rb
 - app/controllers/hr_lite/leave_requests_controller.rb
+- app/controllers/hr_lite/resignations_controller.rb
 - app/controllers/hr_lite/salary_slips_controller.rb
 - app/controllers/hr_lite/users_controller.rb
 - app/helpers/hr_lite/application_helper.rb
 - app/jobs/hr_lite/application_job.rb
 - app/jobs/hr_lite/daily_digest_job.rb
 - app/jobs/hr_lite/leave_year_rollover_job.rb
+- app/jobs/hr_lite/payroll_auto_draft_job.rb
 - app/mailers/hr_lite/application_mailer.rb
 - app/mailers/hr_lite/event_mailer.rb
 - app/models/concerns/hr_lite/audited.rb
@@ -106,6 +109,7 @@ files:
 - app/models/hr_lite/leave_type.rb
 - app/models/hr_lite/office_location.rb
 - app/models/hr_lite/payroll_run.rb
+- app/models/hr_lite/resignation.rb
 - app/models/hr_lite/salary_slip.rb
 - app/models/hr_lite/salary_structure.rb
 - app/models/hr_lite/setting.rb
@@ -178,6 +182,7 @@ files:
 - app/views/hr_lite/leave_requests/index.html.erb
 - app/views/hr_lite/leave_requests/new.html.erb
 - app/views/hr_lite/leave_requests/show.html.erb
+- app/views/hr_lite/resignations/show.html.erb
 - app/views/hr_lite/salary_slips/_slip_detail.html.erb
 - app/views/hr_lite/salary_slips/index.html.erb
 - app/views/hr_lite/salary_slips/pdf.html.erb
@@ -205,6 +210,7 @@ files:
 - db/migrate/20260718194537_create_hr_lite_salary_slips.rb
 - db/migrate/20260718195953_create_hr_lite_appraisals.rb
 - db/migrate/20260718195954_create_hr_lite_designation_changes.rb
+- db/migrate/20260719065841_create_hr_lite_resignations.rb
 - lib/generators/hr_lite/install/install_generator.rb
 - lib/generators/hr_lite/install/templates/AFTER_INSTALL
 - lib/generators/hr_lite/install/templates/initializer.rb