hr_lite 0.13.0 → 0.14.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8202157b6f35309884c9df17895d711553e114a57925c8c2e381e51a7be863ba
-  data.tar.gz: 3cb55e413c6bcc70bd3aa39a5c212690a21c9cf747b17bfdf5894ef6d73945de
+  metadata.gz: '04966d2c7a57a06e49c64c6a375b148c497f83340a79445eb0f243dd783246f0'
+  data.tar.gz: 1112874bf22548910a651e53123056fd1341e045598060660c12f93b284789bb
 SHA512:
-  metadata.gz: 0ddf504c20a84c58a712fd4efe695e9b90b27eea8acc8883bfb37d33df398778169c35eb2c11f37830e91c9ceec63560df57c631246b2b22381b52df5ce30144
-  data.tar.gz: 4a724d4a55068129237e010aca71ce94c392656bb56953a6f1ec5329ddf5d33b6ffd91f76c82229a152f85d134a60ca29308634133f0a3a72779cff3cc6dafdb
+  metadata.gz: '00219df8c7244175712e7a87768f50301fa2f8b0110ae201f343409064bdb1083cce3eef587ad046cf7e1831a1981eb7d3c6e816e2a9d431cbbb86aaf5ef8c89'
+  data.tar.gz: 53af8da6feddf2be67301f9754f2912a08fe246bada0b68eb89b2eb49b70a3279db4ded5645f3438bc859e1a57be3cde29e6c1fc59526db2747d1cc98a5525c6

data/CHANGELOG.md

@@ -7,6 +7,37 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.14.0] - 2026-08-18
+
+The admin half, plus the two ends of employment that were still manual.
+**Adds one migration.**
+
+### Added
+
+- **Admin screens for everything shipped since 0.11.0**: decide a claim and
+  record the payroll month it was paid with, answer or hand on a help-desk
+  request, hand out and take back an asset. The engine had all of this; there
+  was no way to do any of it.
+- **Assets.** One live holder at a time, enforced by a partial unique index —
+  two open assignments would mean the laptop is in two places, which it is
+  not. Assignments are append-only and record what condition it came back in,
+  because "screen cracked" is the difference between an asset returned and an
+  asset written off.
+- **Joining and leaving checklists**, from templates. The joining list opens
+  when a profile is created and the leaving list when an exit date is
+  stamped — the checklist nobody remembers to start is the one that does not
+  happen. Opening is idempotent, so adding a template later adds only what is
+  new. A failure to build one can never stop an employee being created.
+- Each step names the permission its owner should hold, so IT taking back a
+  laptop and HR collecting a document are not the same person by accident.
+- Permissions `asset.view`, `asset.manage`, `checklist.manage`.
+
+### Why it matters
+
+An asset that is never returned is a cost nobody notices, and access that is
+never revoked is a security problem that outlives the employment. Both were
+previously somebody's memory.
+
 ## [0.13.0] - 2026-08-18
 
 The screens. No migration.
@@ -762,7 +793,8 @@ Initial release.
   bus with per-event channel matrix (bell, email, leadership email/bell),
   daily leadership digest and an append-only audit trail.
 
-[Unreleased]: https://github.com/kshtzkr/hr_lite/compare/v0.13.0...HEAD
+[Unreleased]: https://github.com/kshtzkr/hr_lite/compare/v0.14.0...HEAD
+[0.14.0]: https://github.com/kshtzkr/hr_lite/compare/v0.13.0...v0.14.0
 [0.13.0]: https://github.com/kshtzkr/hr_lite/compare/v0.12.0...v0.13.0
 [0.12.0]: https://github.com/kshtzkr/hr_lite/compare/v0.11.0...v0.12.0
 [0.11.0]: https://github.com/kshtzkr/hr_lite/compare/v0.10.0...v0.11.0

data/app/controllers/hr_lite/admin/assets_controller.rb

@@ -0,0 +1,53 @@
+module HrLite
+  module Admin
+    # Who has the laptop.
+    class AssetsController < BaseController
+      skip_before_action :require_operations_access!
+      before_action :require_assets!
+
+      def index
+        @assets = paginate(Asset.order(:status, :name).includes(asset_assignments: :user))
+        @outstanding = AssetAssignment.live.includes(:asset, :user)
+      end
+
+      def new
+        @asset = Asset.new
+      end
+
+      def create
+        @asset = Asset.new(asset_params)
+        if @asset.save
+          redirect_to admin_assets_path, notice: "#{@asset.name} added."
+        else
+          render :new, status: :unprocessable_entity
+        end
+      end
+
+      def assign
+        asset = Asset.find(params[:id])
+        user = HrLite.user_klass.find(params[:user_id])
+        asset.assign_to!(user, actor: hr_current_user)
+        redirect_to admin_assets_path, notice: "#{asset.name} given to #{HrLite.display_name(user)}."
+      rescue ActiveRecord::RecordInvalid
+        redirect_to admin_assets_path, alert: "#{asset.name} is already with somebody."
+      end
+
+      def take_back
+        asset = Asset.find(params[:id])
+        asset.return!(actor: hr_current_user, condition: params[:condition_note],
+                      status: params[:status].presence_in(Asset::STATUSES) || "available")
+        redirect_to admin_assets_path, notice: "#{asset.name} taken back."
+      rescue ActiveRecord::RecordInvalid
+        redirect_to admin_assets_path, alert: "#{asset.name} is not with anybody."
+      end
+
+      private
+
+      def require_assets! = hr_require_permission!("asset.manage", scope: :all)
+
+      def asset_params
+        params.require(:asset).permit(:name, :category, :serial_number, :purchased_on, :notes)
+      end
+    end
+  end
+end

data/app/controllers/hr_lite/admin/checklists_controller.rb

@@ -0,0 +1,32 @@
+module HrLite
+  module Admin
+    # Joining and leaving, step by step, with what is overdue at the top.
+    class ChecklistsController < BaseController
+      skip_before_action :require_operations_access!
+      before_action :require_checklists!
+
+      def index
+        @kind = params[:kind].presence_in(ChecklistTemplate::KINDS) || "onboarding"
+        @items = ChecklistItem.for_kind(@kind).outstanding.includes(:user)
+                              .order(Arel.sql("due_on IS NULL, due_on"))
+        @overdue = @items.select(&:overdue?)
+      end
+
+      def complete
+        item = ChecklistItem.find(params[:id])
+        item.complete!(actor: hr_current_user, note: params[:note])
+        redirect_to admin_checklists_path(kind: item.kind), notice: "#{item.title} — done."
+      end
+
+      def reopen
+        item = ChecklistItem.find(params[:id])
+        item.reopen!(actor: hr_current_user)
+        redirect_to admin_checklists_path(kind: item.kind), notice: "#{item.title} — reopened."
+      end
+
+      private
+
+      def require_checklists! = hr_require_permission!("checklist.manage", scope: :all)
+    end
+  end
+end

data/app/controllers/hr_lite/admin/employees_controller.rb

@@ -93,6 +93,10 @@ module HrLite
         exit_date = params[:date_of_exit].present? ? parse_date_param(params[:date_of_exit]) : Date.current
 
         @profile.update!(date_of_exit: exit_date)
+        # The last day has a list too — and it is the one that matters most,
+        # since an unreturned laptop and un-revoked access both outlive the
+        # employment.
+        ChecklistItem.open_for!(@profile.user, kind: "offboarding", anchor_date: exit_date)
         begin
           HrLite.config.offboard_user.call(@profile.user)
         rescue => e

data/app/controllers/hr_lite/admin/expenses_controller.rb

@@ -0,0 +1,45 @@
+module HrLite
+  module Admin
+    # The other side of the claim: decide it, then say when it was paid.
+    class ExpensesController < BaseController
+      skip_before_action :require_operations_access!
+      before_action :require_deciding!
+
+      def index
+        @status = params[:status].presence_in(Expense::STATUSES) || "submitted"
+        scope = Expense.where(status: @status).includes(:user, :category).recent_first
+        @expenses = paginate(hr_scope(scope, "expense.approve"))
+      end
+
+      def approve
+        expense = decidable.find(params[:id])
+        expense.approve!(actor: hr_current_user, note: params[:decision_note].presence)
+        redirect_to admin_expenses_path, notice: "Claim approved."
+      end
+
+      def reject
+        expense = decidable.find(params[:id])
+        note = params[:decision_note].to_s.strip
+        return redirect_to admin_expenses_path, alert: "A note is required to reject." if note.blank?
+
+        expense.reject!(actor: hr_current_user, note: note)
+        redirect_to admin_expenses_path, notice: "Claim rejected."
+      end
+
+      def reimburse
+        expense = decidable.find(params[:id])
+        month = parse_month_param(params[:period_month])
+        expense.reimburse!(actor: hr_current_user, period_month: month)
+        redirect_to admin_expenses_path, notice: "Marked reimbursed with #{month.strftime('%B %Y')}."
+      rescue ActiveRecord::RecordInvalid
+        redirect_to admin_expenses_path, alert: "Only an approved claim can be reimbursed."
+      end
+
+      private
+
+      def require_deciding! = hr_require_permission!("expense.approve", scope: :team)
+
+      def decidable = hr_scope(Expense.all, "expense.approve")
+    end
+  end
+end

data/app/controllers/hr_lite/admin/hr_requests_controller.rb

@@ -0,0 +1,38 @@
+module HrLite
+  module Admin
+    # The desk itself.
+    class HrRequestsController < BaseController
+      skip_before_action :require_operations_access!
+      before_action :require_desk!
+
+      def index
+        @status = params[:status].presence_in(HrRequest::STATUSES) || "open"
+        @requests = paginate(HrRequest.where(status: @status).includes(:user, :assigned_to)
+                                      .recent_first)
+      end
+
+      def show
+        @request = HrRequest.find(params[:id])
+      end
+
+      def assign
+        request = HrRequest.find(params[:id])
+        assignee = HrLite.user_klass.find(params[:assignee_id])
+        request.assign!(actor: hr_current_user, assignee: assignee)
+        redirect_to admin_hr_request_path(request), notice: "Assigned to #{HrLite.display_name(assignee)}."
+      end
+
+      def resolve
+        request = HrRequest.find(params[:id])
+        request.resolve!(actor: hr_current_user, resolution: params[:resolution].to_s.strip)
+        redirect_to admin_hr_requests_path, notice: "Answered."
+      rescue ArgumentError
+        redirect_to admin_hr_request_path(request), alert: "Write an answer before resolving."
+      end
+
+      private
+
+      def require_desk! = hr_require_permission!("hr_request.manage", scope: :all)
+    end
+  end
+end

data/app/helpers/hr_lite/application_helper.rb

@@ -26,7 +26,11 @@ module HrLite
       { label: "Overview",        path: :admin_overview_path,        match: [ "/admin/overview" ] },
       { label: "Team attendance", path: :admin_attendances_path,     match: [ "/admin/attendances" ] },
       { label: "Approvals",       path: :admin_leave_requests_path,  match: [ "/admin/leave_requests", "/admin/leave_balances", "/admin/comp_off_requests", "/admin/regularization_requests" ] },
-      { label: "Reports",         path: :admin_reports_path,         match: [ "/admin/reports" ] }
+      { label: "Reports",         path: :admin_reports_path,         match: [ "/admin/reports" ] },
+      { label: "Claims",          path: :admin_expenses_path,        match: [ "/admin/expenses" ] },
+      { label: "Help desk",       path: :admin_hr_requests_path,     match: [ "/admin/hr_requests" ] },
+      { label: "Assets",          path: :admin_assets_path,          match: [ "/admin/assets" ] },
+      { label: "Joining & exits", path: :admin_checklists_path,      match: [ "/admin/checklists" ] }
     ].freeze
 
     LEADERSHIP_NAV_ITEMS = [

data/app/models/hr_lite/asset.rb

@@ -0,0 +1,57 @@
+module HrLite
+  # A laptop, a phone, a SIM. An asset nobody tracks is a cost nobody
+  # notices, and the moment it matters is somebody's last day.
+  class Asset < ApplicationRecord
+    include Audited
+
+    STATUSES = %w[available assigned returned lost damaged retired].freeze
+    CATEGORIES = %w[laptop phone sim id_card accessory vehicle other].freeze
+
+    has_many :asset_assignments, class_name: "HrLite::AssetAssignment", dependent: :destroy
+
+    validates :name, presence: true
+    validates :status, inclusion: { in: STATUSES }
+    validates :category, inclusion: { in: CATEGORIES }
+    validates :serial_number, uniqueness: { allow_blank: true }
+
+    scope :available, -> { where(status: "available") }
+    scope :out, -> { where(status: "assigned") }
+
+    STATUSES.each { |s| define_method("#{s}?") { status == s } }
+
+    def live_assignment = asset_assignments.find_by(returned_on: nil)
+
+    def holder = live_assignment&.user
+
+    def assign_to!(user, actor: nil, on: Date.current)
+      raise ActiveRecord::RecordInvalid.new(self), "already assigned" if live_assignment
+
+      transaction do
+        asset_assignments.create!(user_id: user.id, assigned_on: on, assigned_by_id: actor&.id)
+        update!(status: "assigned")
+      end
+      true
+    end
+
+    # `condition` records what came back — "screen cracked" is the difference
+    # between an asset returned and an asset written off.
+    def return!(actor: nil, on: Date.current, condition: nil, status: "available")
+      assignment = live_assignment
+      raise ActiveRecord::RecordInvalid.new(self), "not assigned" if assignment.nil?
+
+      transaction do
+        assignment.update!(returned_on: on, condition_note: condition.presence)
+        update!(status: status)
+      end
+      true
+    end
+
+    # Everything still out with somebody who has left — the report that
+    # should exist before an exit, not after.
+    def self.outstanding_for(user)
+      joins(:asset_assignments)
+        .where(hr_lite_asset_assignments: { user_id: user.id, returned_on: nil })
+        .distinct
+    end
+  end
+end

data/app/models/hr_lite/asset_assignment.rb

@@ -0,0 +1,24 @@
+module HrLite
+  # Who had it, when, and what state it came back in. Append-only: editing an
+  # assignment away is how a missing laptop stops being anybody's.
+  class AssetAssignment < ApplicationRecord
+    belongs_to :asset, class_name: "HrLite::Asset"
+    belongs_to :user, class_name: HrLite.config.user_class
+    belongs_to :assigned_by, class_name: HrLite.config.user_class, optional: true
+
+    validates :assigned_on, presence: true
+    validate :returned_after_it_was_given
+
+    scope :live, -> { where(returned_on: nil) }
+
+    def live? = returned_on.nil?
+
+    private
+
+    def returned_after_it_was_given
+      return if returned_on.nil? || assigned_on.nil? || returned_on >= assigned_on
+
+      errors.add(:returned_on, "cannot be before the day it was handed over")
+    end
+  end
+end

data/app/models/hr_lite/checklist_item.rb

@@ -0,0 +1,43 @@
+module HrLite
+  # One step for one person. Kept even when its template is later deleted —
+  # what a company DID on somebody's first day is history, and history should
+  # not change because a template was tidied up.
+  class ChecklistItem < ApplicationRecord
+    include Audited
+
+    belongs_to :template, class_name: "HrLite::ChecklistTemplate", optional: true
+    belongs_to :user, class_name: HrLite.config.user_class
+    belongs_to :completed_by, class_name: HrLite.config.user_class, optional: true
+
+    validates :kind, inclusion: { in: ChecklistTemplate::KINDS }
+    validates :title, presence: true
+
+    scope :outstanding, -> { where(completed_at: nil) }
+    scope :for_kind, ->(kind) { where(kind: kind.to_s) }
+    scope :overdue, ->(on = Date.current) { outstanding.where(due_on: ...on) }
+
+    def done? = completed_at.present?
+
+    def overdue?(on = Date.current) = !done? && due_on.present? && due_on < on
+
+    def complete!(actor:, note: nil)
+      update!(completed_at: Time.current, completed_by_id: actor&.id, note: note.presence)
+    end
+
+    def reopen!(actor:)
+      update!(completed_at: nil, completed_by_id: nil)
+    end
+
+    # Builds somebody's list from the active templates. Idempotent: running
+    # it twice does not double the list, so a re-run after adding a template
+    # adds only what is new.
+    def self.open_for!(user, kind:, anchor_date:)
+      ChecklistTemplate.for_kind(kind).filter_map do |template|
+        next if exists?(user_id: user.id, kind: kind.to_s, title: template.title)
+
+        create!(user_id: user.id, template: template, kind: kind.to_s, title: template.title,
+                due_on: anchor_date + template.due_offset_days)
+      end
+    end
+  end
+end

data/app/models/hr_lite/checklist_template.rb

@@ -0,0 +1,50 @@
+module HrLite
+  # "Collect the signed offer letter", "Revoke email access". The steps a
+  # company means to take every time and forgets once.
+  class ChecklistTemplate < ApplicationRecord
+    include Audited
+
+    KINDS = %w[onboarding offboarding].freeze
+
+    validates :kind, inclusion: { in: KINDS }
+    validates :title, presence: true
+    validate :owner_permission_is_declared
+
+    scope :active, -> { where(active: true) }
+    scope :for_kind, ->(kind) { active.where(kind: kind.to_s).order(:position, :id) }
+
+    def self.seed_defaults!
+      [
+        { kind: "onboarding", title: "Collect signed offer letter", position: 10,
+          owner_permission: "document.manage" },
+        { kind: "onboarding", title: "Collect PAN and Aadhaar", position: 20,
+          owner_permission: "document.manage" },
+        { kind: "onboarding", title: "Create payroll record and salary structure",
+          position: 30, owner_permission: "salary.manage", due_offset_days: 3 },
+        { kind: "onboarding", title: "Hand over laptop and access", position: 40,
+          owner_permission: "profile.manage" },
+        { kind: "offboarding", title: "Collect laptop and accessories", position: 10,
+          owner_permission: "profile.manage" },
+        { kind: "offboarding", title: "Revoke email and system access", position: 20,
+          owner_permission: "profile.manage" },
+        { kind: "offboarding", title: "Full and final settlement", position: 30,
+          owner_permission: "payroll.manage", due_offset_days: 30 },
+        { kind: "offboarding", title: "Issue relieving and experience letters",
+          position: 40, owner_permission: "document.manage", due_offset_days: 7 }
+      ].filter_map do |attributes|
+        next if exists?(kind: attributes[:kind], title: attributes[:title])
+
+        create!(attributes)
+        "#{attributes[:kind]}: #{attributes[:title]}"
+      end
+    end
+
+    private
+
+    def owner_permission_is_declared
+      return if owner_permission.blank? || Permissions.valid?(owner_permission)
+
+      errors.add(:owner_permission, "is not a known permission")
+    end
+  end
+end

data/app/models/hr_lite/employee_profile.rb

@@ -6,6 +6,7 @@ module HrLite
   class EmployeeProfile < ApplicationRecord
     include EncryptedMoney
     include Audited
+    after_create_commit :open_onboarding_checklist
 
     belongs_to :user, class_name: HrLite.config.user_class
     # Reporting line (L1). Optional; the org chart treats manager-less
@@ -152,5 +153,17 @@ module HrLite
 
       errors.add(:date_of_exit, "must be after joining")
     end
+
+    private
+
+    # Day one has a list, and it is the same list every time. Opened on
+    # create rather than by hand, because the one nobody remembers to start
+    # is the one that does not happen.
+    def open_onboarding_checklist
+      ChecklistItem.open_for!(user, kind: "onboarding", anchor_date: date_of_joining)
+    rescue => e
+      # A checklist must never be the reason an employee cannot be created.
+      Rails.logger.error("[hr_lite] onboarding checklist failed: #{e.class}: #{e.message}")
+    end
   end
 end

data/app/views/hr_lite/admin/assets/index.html.erb

@@ -0,0 +1,59 @@
+<% content_for(:page_title) { "Assets" } %>
+<div class="hrl-page__head">
+  <h1 class="hrl-page__title">Assets</h1>
+  <div class="hrl-page__actions">
+    <a class="hrl-btn hrl-btn--primary" href="<%= hr_lite.new_admin_asset_path %>">Add asset</a>
+  </div>
+</div>
+
+<% if @outstanding.any? %>
+  <section class="hrl-card">
+    <h2 class="hrl-card__title">Currently out</h2>
+    <ul>
+      <% @outstanding.each do |assignment| %>
+        <li class="hrl-small">
+          <strong><%= assignment.asset.name %></strong> —
+          <%= hr_display_name(assignment.user) %>,
+          since <%= assignment.assigned_on.strftime("%d %b %Y") %>
+        </li>
+      <% end %>
+    </ul>
+  </section>
+<% end %>
+
+<section class="hrl-card">
+  <div class="hrl-table-wrap">
+    <table class="hrl-table hrl-table--stack">
+      <thead><tr><th>Asset</th><th>Status</th><th>With</th><th></th></tr></thead>
+      <tbody>
+        <% @assets.each do |asset| %>
+          <tr>
+            <td data-label="Asset">
+              <strong><%= asset.name %></strong>
+              <div class="hrl-small hrl-muted">
+                <%= asset.category.humanize %><%= " · #{asset.serial_number}" if asset.serial_number.present? %>
+              </div>
+            </td>
+            <td data-label="Status"><%= hrl_request_status_badge(asset.status) %></td>
+            <td data-label="With"><%= asset.holder ? hr_display_name(asset.holder) : "—" %></td>
+            <td data-label="">
+              <% if asset.assigned? %>
+                <%= form_with url: hr_lite.take_back_admin_asset_path(asset), method: :post do %>
+                  <%= text_field_tag :condition_note, nil, placeholder: "Condition" %>
+                  <%= submit_tag "Take back", class: "hrl-btn" %>
+                <% end %>
+              <% elsif asset.available? %>
+                <%= form_with url: hr_lite.assign_admin_asset_path(asset), method: :post do %>
+                  <%= select_tag :user_id,
+                        options_for_select(HrLite.employees.map { |u| [ hr_display_name(u), u.id ] }) %>
+                  <%= submit_tag "Hand over", class: "hrl-btn" %>
+                <% end %>
+              <% end %>
+            </td>
+          </tr>
+        <% end %>
+      </tbody>
+    </table>
+  </div>
+  <%= hrl_pagination %>
+</section>

data/app/views/hr_lite/admin/assets/new.html.erb

@@ -0,0 +1,23 @@
+<% content_for(:page_title) { "Add asset" } %>
+<div class="hrl-page__head"><h1 class="hrl-page__title">Add asset</h1></div>
+
+<section class="hrl-card">
+  <%= form_with model: @asset, url: hr_lite.admin_assets_path, method: :post, local: true do |f| %>
+    <%= render "hr_lite/shared/form_errors", record: @asset %>
+    <div class="hrl-field"><%= f.label :name %><%= f.text_field :name %></div>
+    <div class="hrl-field">
+      <%= f.label :category %>
+      <%= f.select :category, HrLite::Asset::CATEGORIES.map { |c| [ c.humanize, c ] } %>
+    </div>
+    <div class="hrl-field">
+      <%= f.label :serial_number, "Serial number (optional)" %>
+      <%= f.text_field :serial_number %>
+    </div>
+    <div class="hrl-field"><%= f.label :purchased_on %><%= f.date_field :purchased_on %></div>
+    <div class="hrl-field"><%= f.label :notes %><%= f.text_field :notes %></div>
+    <div class="hrl-form-actions">
+      <%= f.submit "Save", class: "hrl-btn hrl-btn--primary" %>
+      <a class="hrl-btn" href="<%= hr_lite.admin_assets_path %>">Cancel</a>
+    </div>
+  <% end %>
+</section>

data/app/views/hr_lite/admin/checklists/index.html.erb

@@ -0,0 +1,50 @@
+<% content_for(:page_title) { "Joining & exits" } %>
+<div class="hrl-page__head"><h1 class="hrl-page__title">Joining &amp; exits</h1></div>
+
+<section class="hrl-card">
+  <div class="hrl-row">
+    <% HrLite::ChecklistTemplate::KINDS.each do |kind| %>
+      <a class="hrl-btn <%= "hrl-btn--primary" if kind == @kind %>"
+         href="<%= hr_lite.admin_checklists_path(kind: kind) %>"><%= kind.humanize %></a>
+    <% end %>
+  </div>
+</section>
+
+<% if @overdue.any? %>
+  <section class="hrl-card">
+    <h2 class="hrl-card__title"><%= @overdue.size %> overdue</h2>
+    <p class="hrl-small hrl-muted">
+      An unreturned laptop and un-revoked access both outlive the employment.
+    </p>
+  </section>
+<% end %>
+
+<section class="hrl-card">
+  <% if @items.empty? %>
+    <p class="hrl-muted">Nothing outstanding.</p>
+  <% else %>
+    <div class="hrl-table-wrap">
+      <table class="hrl-table hrl-table--stack">
+        <thead><tr><th>Step</th><th>Who</th><th>Due</th><th></th></tr></thead>
+        <tbody>
+          <% @items.each do |item| %>
+            <tr>
+              <td data-label="Step">
+                <%= item.title %>
+                <% if item.overdue? %><span class="hrl-badge hrl-badge--bad">Overdue</span><% end %>
+              </td>
+              <td data-label="Who"><%= hr_display_name(item.user) %></td>
+              <td data-label="Due"><%= item.due_on&.strftime("%d %b %Y") || "—" %></td>
+              <td data-label="">
+                <%= form_with url: hr_lite.complete_admin_checklist_path(item), method: :post do %>
+                  <%= text_field_tag :note, nil, placeholder: "Note" %>
+                  <%= submit_tag "Done", class: "hrl-btn hrl-btn--primary" %>
+                <% end %>
+              </td>
+            </tr>
+          <% end %>
+        </tbody>
+      </table>
+    </div>
+  <% end %>
+</section>

data/app/views/hr_lite/admin/expenses/index.html.erb

@@ -0,0 +1,54 @@
+<% content_for(:page_title) { "Claims" } %>
+<div class="hrl-page__head"><h1 class="hrl-page__title">Expense claims</h1></div>
+
+<section class="hrl-card">
+  <div class="hrl-row">
+    <% HrLite::Expense::STATUSES.each do |status| %>
+      <a class="hrl-btn <%= "hrl-btn--primary" if status == @status %>"
+         href="<%= hr_lite.admin_expenses_path(status: status) %>"><%= status.humanize %></a>
+    <% end %>
+  </div>
+</section>
+
+<section class="hrl-card">
+  <% if @expenses.empty? %>
+    <p class="hrl-muted">Nothing <%= @status %>.</p>
+  <% else %>
+    <div class="hrl-table-wrap">
+      <table class="hrl-table hrl-table--stack">
+        <thead><tr><th>Who</th><th>What</th><th>Amount</th><th></th></tr></thead>
+        <tbody>
+          <% @expenses.each do |expense| %>
+            <tr>
+              <td data-label="Who"><%= hr_display_name(expense.user) %></td>
+              <td data-label="What">
+                <%= expense.category.name %>
+                <div class="hrl-small hrl-muted">
+                  <%= expense.description %> · <%= expense.spent_on.strftime("%d %b %Y") %>
+                </div>
+              </td>
+              <td data-label="Amount" class="hrl-num"><%= hrl_money(expense.amount) %></td>
+              <td data-label="">
+                <% if expense.submitted? %>
+                  <%= form_with url: hr_lite.approve_admin_expense_path(expense), method: :post do %>
+                    <%= submit_tag "Approve", class: "hrl-btn hrl-btn--primary" %>
+                  <% end %>
+                  <%= form_with url: hr_lite.reject_admin_expense_path(expense), method: :post do %>
+                    <%= text_field_tag :decision_note, nil, placeholder: "Why not" %>
+                    <%= submit_tag "Reject", class: "hrl-btn" %>
+                  <% end %>
+                <% elsif expense.approved? %>
+                  <%= form_with url: hr_lite.reimburse_admin_expense_path(expense), method: :post do %>
+                    <%= text_field_tag :period_month, Date.current.strftime("%Y-%m"), size: 8 %>
+                    <%= submit_tag "Mark reimbursed", class: "hrl-btn" %>
+                  <% end %>
+                <% end %>
+              </td>
+            </tr>
+          <% end %>
+        </tbody>
+      </table>
+    </div>
+    <%= hrl_pagination %>
+  <% end %>
+</section>

data/app/views/hr_lite/admin/hr_requests/index.html.erb

@@ -0,0 +1,41 @@
+<% content_for(:page_title) { "Help desk" } %>
+<div class="hrl-page__head"><h1 class="hrl-page__title">Help desk</h1></div>
+
+<section class="hrl-card">
+  <div class="hrl-row">
+    <% HrLite::HrRequest::STATUSES.each do |status| %>
+      <a class="hrl-btn <%= "hrl-btn--primary" if status == @status %>"
+         href="<%= hr_lite.admin_hr_requests_path(status: status) %>"><%= status.humanize %></a>
+    <% end %>
+  </div>
+</section>
+
+<section class="hrl-card">
+  <% if @requests.empty? %>
+    <p class="hrl-muted">Nothing <%= @status.humanize.downcase %>.</p>
+  <% else %>
+    <div class="hrl-table-wrap">
+      <table class="hrl-table hrl-table--stack">
+        <thead><tr><th>Request</th><th>Who</th><th>With</th><th></th></tr></thead>
+        <tbody>
+          <% @requests.each do |request| %>
+            <tr>
+              <td data-label="Request">
+                <a href="<%= hr_lite.admin_hr_request_path(request) %>"><%= request.subject %></a>
+                <div class="hrl-small hrl-muted"><%= request.category_label %></div>
+              </td>
+              <td data-label="Who"><%= hr_display_name(request.user) %></td>
+              <td data-label="With">
+                <%= request.assigned_to ? hr_display_name(request.assigned_to) : "—" %>
+              </td>
+              <td data-label="">
+                <a class="hrl-small" href="<%= hr_lite.admin_hr_request_path(request) %>">Open</a>
+              </td>
+            </tr>
+          <% end %>
+        </tbody>
+      </table>
+    </div>
+    <%= hrl_pagination %>
+  <% end %>
+</section>

data/app/views/hr_lite/admin/hr_requests/show.html.erb

@@ -0,0 +1,47 @@
+<% content_for(:page_title) { @request.subject } %>
+<div class="hrl-page__head"><h1 class="hrl-page__title"><%= @request.subject %></h1></div>
+
+<section class="hrl-card">
+  <p class="hrl-small hrl-muted">
+    <%= @request.category_label %> · <%= hr_display_name(@request.user) %> ·
+    <%= @request.created_at.to_date.strftime("%d %b %Y") %> ·
+    <%= hrl_request_status_badge(@request.status) %>
+  </p>
+  <% if @request.body.present? %>
+    <div class="hrl-prose"><%= simple_format(@request.body) %></div>
+  <% end %>
+</section>
+
+<% unless @request.resolved? || @request.closed? || @request.cancelled? %>
+  <section class="hrl-card">
+    <h2 class="hrl-card__title">Answer</h2>
+    <%= form_with url: hr_lite.resolve_admin_hr_request_path(@request), method: :post do %>
+      <div class="hrl-field">
+        <%= label_tag :resolution, "What you did" %>
+        <%= text_area_tag :resolution, nil, rows: 4 %>
+      </div>
+      <div class="hrl-form-actions">
+        <%= submit_tag "Send answer", class: "hrl-btn hrl-btn--primary" %>
+      </div>
+    <% end %>
+
+    <%= form_with url: hr_lite.assign_admin_hr_request_path(@request), method: :post do %>
+      <div class="hrl-field">
+        <%= label_tag :assignee_id, "Or hand it to somebody" %>
+        <%= select_tag :assignee_id,
+              options_for_select(HrLite.users_holding("hr_request.manage")
+                                       .map { |u| [ hr_display_name(u), u.id ] }) %>
+      </div>
+      <div class="hrl-form-actions">
+        <%= submit_tag "Assign", class: "hrl-btn" %>
+      </div>
+    <% end %>
+  </section>
+<% end %>
+
+<% if @request.resolution.present? %>
+  <section class="hrl-card">
+    <h2 class="hrl-card__title">Answered</h2>
+    <div class="hrl-prose"><%= simple_format(@request.resolution) %></div>
+  </section>
+<% end %>

data/config/routes.rb

@@ -62,6 +62,18 @@ HrLite::Engine.routes.draw do
     end
     resources :statutory_rate_cards, only: %i[index new create edit update]
     resources :reports, only: %i[index show]
+    resources :expenses, only: :index do
+      member { post :approve; post :reject; post :reimburse }
+    end
+    resources :hr_requests, only: %i[index show] do
+      member { post :assign; post :resolve }
+    end
+    resources :assets, only: %i[index new create] do
+      member { post :assign; post :take_back }
+    end
+    resources :checklists, only: :index do
+      member { post :complete; post :reopen }
+    end
     resources :leave_types, except: :show
     resources :office_locations, except: :show
     resources :holidays, only: %i[index create update destroy] do

data/db/migrate/20260818010401_create_hr_lite_assets_and_onboarding.rb

@@ -0,0 +1,76 @@
+class CreateHrLiteAssetsAndOnboarding < ActiveRecord::Migration[8.1]
+  # The two ends of employment that were still manual: the laptop somebody is
+  # given on day one, and the checklist nobody remembers on their last.
+  #
+  # An asset that is never returned is a cost nobody notices, and access that
+  # is never revoked is a security problem that outlives the employment.
+  def change
+    create_table :hr_lite_assets do |t|
+      t.string :name, null: false
+      # laptop | phone | sim | id_card | accessory | vehicle | other
+      t.string :category, null: false, default: "other"
+      t.string :serial_number
+      t.date :purchased_on
+      # available | assigned | returned | lost | damaged | retired
+      t.string :status, null: false, default: "available"
+      t.text :notes
+      t.timestamps
+    end
+    add_index :hr_lite_assets, :status
+    add_index :hr_lite_assets, :serial_number, unique: true,
+              where: "serial_number IS NOT NULL"
+    add_check_constraint :hr_lite_assets,
+                         "status IN ('available', 'assigned', 'returned', 'lost', 'damaged', 'retired')",
+                         name: "hr_lite_assets_status_check"
+
+    # Append-only: who had it, when, and what state it came back in. Editing
+    # an assignment away is how a missing laptop stops being anybody's.
+    create_table :hr_lite_asset_assignments do |t|
+      t.references :asset, null: false, index: true,
+                   foreign_key: { to_table: :hr_lite_assets, on_delete: :cascade }
+      t.bigint :user_id, null: false
+      t.date :assigned_on, null: false
+      t.date :returned_on
+      t.string :condition_note
+      t.bigint :assigned_by_id
+      t.timestamps
+    end
+    add_index :hr_lite_asset_assignments, %i[user_id returned_on]
+    # One live holder at a time — two open assignments means the asset is in
+    # two places, which it is not.
+    add_index :hr_lite_asset_assignments, :asset_id,
+              unique: true, where: "returned_on IS NULL",
+              name: "index_hr_lite_asset_assignments_one_live_per_asset"
+
+    create_table :hr_lite_checklist_templates do |t|
+      # onboarding | offboarding
+      t.string :kind, null: false
+      t.string :title, null: false
+      t.integer :position, null: false, default: 0
+      # Which permission the person who ticks it should hold — IT hands back
+      # a laptop, HR collects a document, and neither should be the other.
+      t.string :owner_permission
+      # Days from the joining or leaving date this is due.
+      t.integer :due_offset_days, null: false, default: 0
+      t.boolean :active, null: false, default: true
+      t.timestamps
+    end
+    add_index :hr_lite_checklist_templates, %i[kind position]
+    add_check_constraint :hr_lite_checklist_templates, "kind IN ('onboarding', 'offboarding')",
+                         name: "hr_lite_checklist_templates_kind_check"
+
+    create_table :hr_lite_checklist_items do |t|
+      t.bigint :user_id, null: false
+      t.references :template, index: true,
+                   foreign_key: { to_table: :hr_lite_checklist_templates, on_delete: :nullify }
+      t.string :kind, null: false
+      t.string :title, null: false
+      t.date :due_on
+      t.datetime :completed_at
+      t.bigint :completed_by_id
+      t.string :note
+      t.timestamps
+    end
+    add_index :hr_lite_checklist_items, %i[user_id kind completed_at]
+  end
+end

data/lib/hr_lite/permissions.rb

@@ -56,6 +56,9 @@ module HrLite
       "hr_request.manage" => [ "Help desk", "Answer and assign HR requests" ],
       "policy.view" => [ "Policies", "Read published policies" ],
       "policy.manage" => [ "Policies", "Write, publish and re-issue policies" ],
+      "asset.view" => [ "Assets", "See company assets and who holds them" ],
+      "asset.manage" => [ "Assets", "Assign and take back company assets" ],
+      "checklist.manage" => [ "Lifecycle", "Work through joining and leaving checklists" ],
       "settings.manage" => [ "Administration", "Change company settings, offices and policy" ],
       "audit.view" => [ "Administration", "Read the audit trail" ],
       "audit.view_money" => [ "Administration", "Read audit rows about pay, appraisals and promotions" ],

data/lib/hr_lite/role_seeds.rb

@@ -19,7 +19,7 @@ module HrLite
           "profile.view" => "self", "appraisal.view" => "self",
           "resignation.view" => "self", "document.view" => "self", "tax.view" => "self",
           "expense.claim" => "self", "benefit.view" => "self",
-          "hr_request.raise" => "self", "policy.view" => "all"
+          "hr_request.raise" => "self", "policy.view" => "all", "asset.view" => "self"
         }
       },
       Role::MANAGER => {
@@ -40,7 +40,8 @@ module HrLite
           "appraisal.view" => "self", "resignation.view" => "all",
           "document.view" => "all", "tax.view" => "self",
           "expense.claim" => "self", "benefit.view" => "all", "benefit.manage" => "all",
-          "hr_request.raise" => "self", "hr_request.manage" => "all", "policy.view" => "all"
+          "hr_request.raise" => "self", "hr_request.manage" => "all", "policy.view" => "all",
+          "asset.view" => "all", "asset.manage" => "all", "checklist.manage" => "all"
         }
       },
       Role::FINANCE => {
@@ -65,7 +66,8 @@ module HrLite
           "resignation.view" => "all", "resignation.manage" => "all",
           "settings.manage" => "all", "audit.view" => "all", "payroll.view" => "self",
           "document.view" => "all", "expense.approve" => "all", "benefit.manage" => "all",
-          "hr_request.manage" => "all", "policy.view" => "all", "policy.manage" => "all"
+          "hr_request.manage" => "all", "policy.view" => "all", "policy.manage" => "all",
+          "asset.view" => "all", "asset.manage" => "all", "checklist.manage" => "all"
         }
       },
       Role::SUPER_ADMIN => {

data/lib/hr_lite/version.rb

@@ -1,3 +1,3 @@
 module HrLite
-  VERSION = "0.13.0"
+  VERSION = "0.14.0"
 end

data/lib/tasks/hr_lite_tasks.rake

@@ -5,7 +5,8 @@ namespace :hr_lite do
     require "hr_lite/role_seeds"
     require "hr_lite/statutory_seeds"
     created = HrLite::Seeds.run! + HrLite::RoleSeeds.call + HrLite::StatutorySeeds.call +
-              HrLite::SalaryComponent.seed_defaults!
+              HrLite::SalaryComponent.seed_defaults! +
+              HrLite::ChecklistTemplate.seed_defaults!
     puts created.any? ? "hr_lite:seed created: #{created.join(', ')}" : "hr_lite:seed — nothing to do"
   end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hr_lite
 version: !ruby/object:Gem::Version
-  version: 0.13.0
+  version: 0.14.0
 platform: ruby
 authors:
 - kshitiz sinha
@@ -56,13 +56,17 @@ files:
 - app/assets/stylesheets/hr_lite/application.css
 - app/assets/stylesheets/hr_lite/hr_lite.css
 - app/controllers/hr_lite/admin/appraisals_controller.rb
+- app/controllers/hr_lite/admin/assets_controller.rb
 - app/controllers/hr_lite/admin/attendances_controller.rb
 - app/controllers/hr_lite/admin/audit_logs_controller.rb
 - app/controllers/hr_lite/admin/base_controller.rb
+- app/controllers/hr_lite/admin/checklists_controller.rb
 - app/controllers/hr_lite/admin/comp_off_requests_controller.rb
 - app/controllers/hr_lite/admin/designation_changes_controller.rb
 - app/controllers/hr_lite/admin/employees_controller.rb
+- app/controllers/hr_lite/admin/expenses_controller.rb
 - app/controllers/hr_lite/admin/holidays_controller.rb
+- app/controllers/hr_lite/admin/hr_requests_controller.rb
 - app/controllers/hr_lite/admin/leadership_controller.rb
 - app/controllers/hr_lite/admin/leave_balances_controller.rb
 - app/controllers/hr_lite/admin/leave_requests_controller.rb
@@ -121,10 +125,14 @@ files:
 - app/models/hr_lite/approval_delegation.rb
 - app/models/hr_lite/approval_flow.rb
 - app/models/hr_lite/approval_step.rb
+- app/models/hr_lite/asset.rb
+- app/models/hr_lite/asset_assignment.rb
 - app/models/hr_lite/attendance_record.rb
 - app/models/hr_lite/audit_log.rb
 - app/models/hr_lite/benefit.rb
 - app/models/hr_lite/benefit_enrolment.rb
+- app/models/hr_lite/checklist_item.rb
+- app/models/hr_lite/checklist_template.rb
 - app/models/hr_lite/comp_off_request.rb
 - app/models/hr_lite/designation_change.rb
 - app/models/hr_lite/document.rb
@@ -178,9 +186,12 @@ files:
 - app/views/hr_lite/admin/appraisals/_form.html.erb
 - app/views/hr_lite/admin/appraisals/edit.html.erb
 - app/views/hr_lite/admin/appraisals/new.html.erb
+- app/views/hr_lite/admin/assets/index.html.erb
+- app/views/hr_lite/admin/assets/new.html.erb
 - app/views/hr_lite/admin/attendances/index.html.erb
 - app/views/hr_lite/admin/attendances/show.html.erb
 - app/views/hr_lite/admin/audit_logs/index.html.erb
+- app/views/hr_lite/admin/checklists/index.html.erb
 - app/views/hr_lite/admin/comp_off_requests/index.html.erb
 - app/views/hr_lite/admin/comp_off_requests/show.html.erb
 - app/views/hr_lite/admin/designation_changes/new.html.erb
@@ -189,7 +200,10 @@ files:
 - app/views/hr_lite/admin/employees/index.html.erb
 - app/views/hr_lite/admin/employees/new.html.erb
 - app/views/hr_lite/admin/employees/show.html.erb
+- app/views/hr_lite/admin/expenses/index.html.erb
 - app/views/hr_lite/admin/holidays/index.html.erb
+- app/views/hr_lite/admin/hr_requests/index.html.erb
+- app/views/hr_lite/admin/hr_requests/show.html.erb
 - app/views/hr_lite/admin/leave_balances/index.html.erb
 - app/views/hr_lite/admin/leave_requests/index.html.erb
 - app/views/hr_lite/admin/leave_requests/show.html.erb
@@ -306,6 +320,7 @@ files:
 - db/migrate/20260818002627_create_hr_lite_payroll_components_and_loans.rb
 - db/migrate/20260818003616_create_hr_lite_documents_and_declarations.rb
 - db/migrate/20260818004707_create_hr_lite_employee_services.rb
+- db/migrate/20260818010401_create_hr_lite_assets_and_onboarding.rb
 - lib/generators/hr_lite/install/install_generator.rb
 - lib/generators/hr_lite/install/templates/AFTER_INSTALL
 - lib/generators/hr_lite/install/templates/initializer.rb