hr_lite 0.14.0 → 0.16.0

data/app/controllers/hr_lite/tax_declarations_controller.rb

@@ -0,0 +1,100 @@
+module HrLite
+  # The employee's own declaration for a financial year. Replaces an admin
+  # typing one lump sum into the profile: the whole year's TDS is projected
+  # from this, so the person whose money it is fills it in.
+  class TaxDeclarationsController < ApplicationController
+    def show
+      @declaration = current_declaration || build_declaration
+      @regime = @declaration.regime
+    end
+
+    def update
+      # A bare record, not the form's scaffold: `build_declaration` fills in
+      # one blank line per section so the form is a list rather than an empty
+      # box, and saving those blanks fails a NOT NULL amount.
+      @declaration = current_declaration ||
+                     TaxDeclaration.new(user_id: hr_current_user.id,
+                                        financial_year: financial_year, regime: employee_regime)
+      # A verified declaration is what payroll is deducting against; changing
+      # it would silently re-open a decision HR has already made.
+      if @declaration.verified?
+        return redirect_to tax_declaration_path,
+                           alert: "This year's declaration is verified. Ask HR to reopen it."
+      end
+
+      if @declaration.update(declaration_params)
+        redirect_to tax_declaration_path, notice: "Saved."
+      else
+        # Re-render needs the full set of lines back, or the form loses the
+        # sections the person had not filled in yet.
+        fill_missing_sections(@declaration)
+        render :show, status: :unprocessable_entity
+      end
+    end
+
+    def submit
+      @declaration = current_declaration
+      return redirect_to tax_declaration_path, alert: "Nothing to submit yet." if @declaration.nil?
+
+      @declaration.submit!(actor: hr_current_user)
+      redirect_to tax_declaration_path, notice: "Submitted — HR will check the proof."
+    rescue ActiveRecord::RecordInvalid
+      redirect_to tax_declaration_path, alert: "Only a draft can be submitted."
+    end
+
+    private
+
+    def financial_year
+      FinancialYear.start_for(params[:financial_year].present? ? Date.parse(params[:financial_year]) : Date.current)
+    rescue Date::Error
+      FinancialYear.start_for(Date.current)
+    end
+
+    def current_declaration
+      TaxDeclaration.find_by(user_id: hr_current_user.id, financial_year: financial_year)
+    end
+
+    def build_declaration
+      declaration = TaxDeclaration.new(user_id: hr_current_user.id, financial_year: financial_year,
+                                       regime: employee_regime)
+      # One blank line per section, so the form is a list of the things a
+      # person can actually claim rather than an empty box and a plus button.
+      fill_missing_sections(declaration)
+      declaration
+    end
+
+    # Every section gets a line, whether or not it has been claimed yet.
+    def fill_missing_sections(declaration)
+      present = declaration.tax_declaration_items.map(&:section)
+      (TaxDeclarationItem::SECTIONS - present).each do |section|
+        declaration.tax_declaration_items.build(section: section)
+      end
+    end
+
+    def employee_regime
+      EmployeeProfile.find_by(user_id: hr_current_user.id)&.tax_regime.presence || "new"
+    end
+
+    # The form posts a line for every section, because that is what a list of
+    # claimable things looks like. Most of them are blank — a section with no
+    # amount is not a claim, and saving it violates a NOT NULL amount.
+    # An EXISTING line blanked out is a claim being withdrawn, so it is
+    # destroyed rather than skipped.
+    def declaration_params
+      permitted = params.require(:tax_declaration).permit(
+        :regime,
+        tax_declaration_items_attributes: %i[id section label declared_amount _destroy]
+      )
+      items = permitted[:tax_declaration_items_attributes]
+      return permitted if items.blank?
+
+      permitted[:tax_declaration_items_attributes] = items.to_h.filter_map { |key, row|
+        next [ key, row.merge("_destroy" => "1") ] if row["declared_amount"].blank? && row["id"].present?
+        next if row["declared_amount"].blank?
+
+        [ key, row ]
+      }.to_h
+      permitted
+    end
+  end
+end

data/app/helpers/hr_lite/application_helper.rb

@@ -19,7 +19,11 @@ module HrLite
       { label: "Org",        path: :org_path,            match: [ "/org" ] },
       { label: "Kudos",      path: :kudos_path,          match: [ "/kudos" ] },
       { label: "Slips",      path: :salary_slips_path,   match: [ "/salary_slips" ] },
-      { label: "Career",     path: :career_path,         match: [ "/career", "/appraisals", "/profile" ] }
+      { label: "Career",     path: :career_path,         match: [ "/career", "/appraisals", "/profile" ] },
+      { label: "Documents",  path: :documents_path,      match: [ "/documents" ] },
+      { label: "ID card",    path: :id_card_path,        match: [ "/id_card" ] },
+      { label: "Tax",        path: :tax_declaration_path, match: [ "/tax_declaration" ] },
+      { label: "Loans",      path: :loans_path,          match: [ "/loans" ] }
     ].freeze
 
     ADMIN_NAV_ITEMS = [
@@ -36,7 +40,9 @@ module HrLite
     LEADERSHIP_NAV_ITEMS = [
       { label: "Employees", path: :admin_employees_path,        match: [ "/admin/employees" ] },
       { label: "Settings",  path: :admin_leave_types_path,      match: [ "/admin/leave_types", "/admin/office_locations", "/admin/holidays", "/admin/setting" ] },
-      { label: "Audit",     path: :admin_audit_logs_path,       match: [ "/admin/audit_logs" ] }
+      { label: "Audit",     path: :admin_audit_logs_path,       match: [ "/admin/audit_logs" ] },
+      { label: "Policies",  path: :admin_policies_path,         match: [ "/admin/policies" ] },
+      { label: "Documents", path: :admin_documents_path,        match: [ "/admin/documents" ] }
     ].freeze
 
     # Money screens, plus role management: granting somebody payroll is the
@@ -45,9 +51,18 @@ module HrLite
     SUPERADMIN_NAV_ITEMS = [
       { label: "Payroll", path: :admin_payroll_runs_path, match: [ "/admin/payroll_runs", "/admin/salary_slips" ] },
       { label: "Roles",   path: :admin_roles_path,        match: [ "/admin/roles" ] },
-      { label: "Rates",   path: :admin_statutory_rate_cards_path, match: [ "/admin/statutory_rate_cards" ] }
+      { label: "Rates",   path: :admin_statutory_rate_cards_path, match: [ "/admin/statutory_rate_cards" ] },
+      { label: "Tax",     path: :admin_tax_declarations_path, match: [ "/admin/tax_declarations" ] },
+      { label: "Loans",   path: :admin_loans_path,        match: [ "/admin/loans" ] }
     ].freeze
 
+    # The ID card's QR: office address and phone as plain text, so any phone
+    # camera shows who to call about a found card. No URL, nothing to host.
+    def hrl_office_qr_svg(company, brand)
+      text = [ brand, company[:address], company[:phone] ].compact_blank.join("\n")
+      RQRCode::QRCode.new(text).as_svg(use_path: true, viewbox: true, color: "0F172A").html_safe
+    end
+
     # Only items whose routes exist yet (the nav grows with each phase).
     def hrl_nav_items(items)
       items.select { |item| hr_lite_route?(item[:path]) }

data/app/models/hr_lite/approval_flow.rb

@@ -4,7 +4,7 @@ module HrLite
   class ApprovalFlow < ApplicationRecord
     include Audited
 
-    has_many :approval_steps, -> { order(:position) },
+    has_many :approval_steps, -> { order(:position) }, inverse_of: :flow,
              class_name: "HrLite::ApprovalStep", foreign_key: :flow_id, dependent: :destroy
     accepts_nested_attributes_for :approval_steps, allow_destroy: true
 

data/app/models/hr_lite/employee_profile.rb

@@ -13,7 +13,7 @@ module HrLite
     # profiles as roots (founders/directors).
     belongs_to :manager, class_name: HrLite.config.user_class, optional: true
 
-    encrypts :pan_number, :pf_uan, :esi_number, :bank_account_number, :bank_ifsc
+    encrypts :pan_number, :pf_uan, :esi_number, :bank_account_number, :bank_ifsc, :blood_group, :emergency_contact
     # fy_opening_*: income already paid this financial year that this install
     # did not run — a previous employer, or the months before payroll was
     # switched on here. Feeds the TDS projection so a mid-year start does not
@@ -21,12 +21,21 @@ module HrLite
     encrypted_money :declared_annual_deductions, :fy_opening_gross, :fy_opening_tds
 
     TAX_REGIMES = %w[new old].freeze
+    BLOOD_GROUPS = %w[A+ A- B+ B- AB+ AB- O+ O-].freeze
+    # The ID-card photo. Images a browser can print; content-sniffed like
+    # Document, so the check is on the real bytes.
+    PHOTO_TYPES = %w[image/jpeg image/png image/webp].freeze
+    PHOTO_MAX_BYTES = 5.megabytes
+
+    has_one_attached :photo
 
     # Onboarding-form virtuals (the controller hands them to
     # config.onboard_user; never persisted, never audited).
     attr_accessor :new_user_name, :new_user_email, :new_user_password
 
     before_validation :assign_employee_code, on: :create
+    # Without a role a new hire cannot see policies or raise an HR request.
+    after_create { (role = Role.find_by(name: Role::EMPLOYEE)) && RoleAssignment.find_or_create_by!(user_id:, role:) }
 
     validates :employee_code, presence: true, uniqueness: true
     validates :user_id, uniqueness: true
@@ -37,6 +46,8 @@ module HrLite
     validates :bank_ifsc, format: { with: /\A[A-Z]{4}0[A-Z0-9]{6}\z/, message: "is not a valid IFSC" },
                           allow_blank: true
     validates :pf_uan, format: { with: /\A\d{12}\z/, message: "must be 12 digits" }, allow_blank: true
+    validates :blood_group, inclusion: { in: BLOOD_GROUPS }, allow_blank: true
+    validate :photo_is_a_small_image
     validate :exit_after_joining
     validate :manager_chain_acyclic
     validate :manager_is_active_staff, if: :manager_id_changed?
@@ -97,7 +108,7 @@ module HrLite
     private
 
     # Codes are system-assigned: Settings prefix + zero-padded next number
-    # (EMP001, EMP002, ...). Scans the highest existing suffix for the
+    # (ESA-000001, ESA-000002, ...). Scans the highest existing suffix for the
     # CURRENT prefix so changing the prefix restarts a fresh sequence
     # without colliding with history.
     def assign_employee_code
@@ -108,7 +119,7 @@ module HrLite
                  .pluck(:employee_code)
                  .filter_map { |code| code.delete_prefix(prefix)[/\A\d+\z/]&.to_i }
                  .max || 0
-      self.employee_code = format("%s%03d", prefix, last + 1)
+      self.employee_code = format("%s%06d", prefix, last + 1)
     end
 
     def sanitize_sql_like(value)
@@ -140,6 +151,13 @@ module HrLite
       end
     end
 
+    def photo_is_a_small_image
+      return unless photo.attached?
+      return errors.add(:photo, "must be a JPG, PNG or WebP image") unless PHOTO_TYPES.include?(photo.blob.content_type)
+
+      errors.add(:photo, "must be under #{PHOTO_MAX_BYTES / 1.megabyte} MB") if photo.blob.byte_size > PHOTO_MAX_BYTES
+    end
+
     def mask_middle(value)
       return nil if value.blank?
       return "•" * value.length if value.length <= 4

data/app/models/hr_lite/hr_request.rb

@@ -8,7 +8,7 @@ module HrLite
 
     CATEGORIES = %w[
       salary_certificate employment_certificate address_change bank_change
-      document_request payroll_query tax_query insurance_query policy_query other
+      document_request payroll_query tax_query insurance_query policy_query id_card other
     ].freeze
 
     belongs_to :user, class_name: HrLite.config.user_class
@@ -17,6 +17,7 @@ module HrLite
     validates :subject, presence: true
     validates :category, inclusion: { in: CATEGORIES }
     validates :status, inclusion: { in: STATUSES }
+    validate :id_card_can_be_printed, on: :create, if: -> { category == "id_card" }
 
     scope :open_requests, -> { where(status: %w[open in_progress]) }
     scope :recent_first, -> { order(created_at: :desc) }
@@ -25,7 +26,7 @@ module HrLite
 
     after_create_commit :notify_desk
 
-    def category_label = category.humanize
+    def category_label = category.humanize.sub(/\AId\b/, "ID")
 
     def assign!(actor:, assignee:)
       update!(assigned_to_id: assignee.id, status: "in_progress")
@@ -68,8 +69,16 @@ module HrLite
       Notifications.publish(
         "hr_request.raised",
         title: "#{HrLite.display_name(user)} asked: #{subject}",
-        body: body.presence, path: "/admin/hr_requests/#{id}", bell_to: desk
+        body: body.presence, path: "/admin/hr_requests/#{id}", bell_to: desk, email_to: desk
       )
     end
+
+    def id_card_can_be_printed
+      if !EmployeeProfile.find_by(user_id: user_id)&.photo&.attached?
+        errors.add(:base, "Add your photo to the ID card first")
+      elsif self.class.open_requests.exists?(user_id: user_id, category: "id_card")
+        errors.add(:base, "Your ID card print is already requested")
+      end
+    end
   end
 end

data/app/models/hr_lite/leave_request.rb

@@ -7,6 +7,8 @@ module HrLite
     belongs_to :user, class_name: HrLite.config.user_class
     belongs_to :leave_type
     belongs_to :decided_by, class_name: HrLite.config.user_class, optional: true
+    # Set when HR records leave the employee forgot to apply for.
+    belongs_to :created_by, class_name: HrLite.config.user_class, optional: true
 
     validates :start_date, :end_date, presence: true
     validates :status, inclusion: { in: STATUSES }
@@ -22,7 +24,7 @@ module HrLite
     end
 
     before_validation :cache_days_count, on: :create
-    after_create :notify_requested
+    after_create :notify_requested, unless: :recorded_by_hr?
 
     scope :pending, -> { where(status: "pending") }
     scope :approved, -> { where(status: "approved") }
@@ -209,13 +211,20 @@ module HrLite
       LeaveDayCounter.count(self) > balance.available(as_of: start_date)
     end
 
+    def recorded_by_hr? = created_by_id.present? && created_by_id != user_id
+
+    # Recorded leave is approved in the same transaction, so there is nothing
+    # left for a flow to route.
+    def open_approval_route = pending? && super
+
     def notify_requested
       Notifications.publish(
         "leave.requested",
         title: "#{HrLite.display_name(user)} applied for #{leave_type.name} (#{date_range_label})",
         body: reason.presence,
         path: "/admin/leave_requests/#{id}",
-        bell_to: HrLite.admin_users
+        bell_to: HrLite.admin_users,
+        email_to: HrLite.admin_users
       )
     end
 
@@ -224,6 +233,8 @@ module HrLite
     # channel). Deliberately excludes the reason: dates are team-relevant,
     # the why is not.
     def notify_team
+      return if end_date < Date.current # nobody needs to hear who was out
+
       team = HrLite.active_employees.reject { |member| member.id == user_id }
       return if team.empty?
 
@@ -285,7 +296,7 @@ module HrLite
       clash = self.class.where(user_id: user_id, status: %w[pending approved])
                   .where.not(id: id)
                   .overlapping_range(start_date, end_date)
-      errors.add(:base, "You already have leave overlapping these dates") if clash.exists?
+      errors.add(:base, "Leave already overlaps these dates") if clash.exists?
     end
 
     # A full-day leave over a day that already has a check-in makes no
@@ -296,7 +307,7 @@ module HrLite
 
       punched = AttendanceRecord.where(user_id: user_id, date: start_date..end_date)
                                 .where.not(check_in_at: nil)
-      errors.add(:base, "You have marked attendance in this period") if punched.exists?
+      errors.add(:base, "Attendance is marked in this period") if punched.exists?
     end
 
     def sufficient_balance

data/app/models/hr_lite/policy.rb

@@ -12,6 +12,8 @@ module HrLite
     validates :effective_from, presence: true
     validates :version, numericality: { greater_than: 0 }
 
+    after_create_commit :announce, if: :published?
+
     scope :published, -> { where(published: true) }
     scope :live_on, ->(date) { published.where(effective_from: ..date) }
     scope :newest_first, -> { order(effective_from: :desc, version: :desc) }
@@ -34,6 +36,8 @@ module HrLite
       )
     end
 
+    def announcement? = !acknowledgement_required
+
     def acknowledged_by?(user)
       policy_acknowledgements.exists?(user_id: user.id)
     end
@@ -55,5 +59,16 @@ module HrLite
     rescue ActiveRecord::RecordNotUnique
       policy_acknowledgements.find_by!(user_id: user.id)
     end
+
+    private
+
+    def announce
+      staff = HrLite.active_employees
+      Notifications.publish(
+        "policy.published",
+        title: "#{announcement? ? 'Announcement' : 'Policy'}: #{title}#{' (please read and acknowledge)' unless announcement?}",
+        body: body.truncate(300), path: "/policies/#{id}", bell_to: staff, email_to: staff
+      )
+    end
   end
 end

data/app/models/hr_lite/setting.rb

@@ -7,7 +7,7 @@ module HrLite
 
     validates :weekend_policy, inclusion: { in: WEEKEND_POLICIES }
     validates :employee_code_prefix, presence: true,
-                                     format: { with: /\A[A-Za-z]{1,10}\z/, message: "letters only, max 10" }
+                                     format: { with: /\A[A-Za-z]{1,10}-?\z/, message: "letters only (max 10), optionally ending in -" }
 
     def self.instance
       first_or_create!

data/app/models/hr_lite/tax_declaration.rb

@@ -11,8 +11,11 @@ module HrLite
     STATUSES = %w[draft submitted verified rejected].freeze
     REGIMES = %w[new old].freeze
 
+    # inverse_of is load-bearing, not decoration: the foreign key is not
+    # derived from the class name, so without it a nested item on an UNSAVED
+    # declaration cannot see its parent and fails "declaration must exist".
     has_many :tax_declaration_items, -> { order(:section) },
-             class_name: "HrLite::TaxDeclarationItem",
+             class_name: "HrLite::TaxDeclarationItem", inverse_of: :declaration,
              foreign_key: :declaration_id, dependent: :destroy
     accepts_nested_attributes_for :tax_declaration_items, allow_destroy: true
 

data/app/views/hr_lite/admin/documents/index.html.erb

@@ -0,0 +1,89 @@
+<% content_for(:page_title) { "Documents" } %>
+<div class="hrl-page__head"><h1 class="hrl-page__title">Documents</h1></div>
+
+<section class="hrl-card">
+  <p class="hrl-muted hrl-small">
+    Seeing that a document exists and opening it are different things — a
+    passport is visible here, but the file itself only opens for whoever its
+    visibility allows.
+  </p>
+  <div class="hrl-row">
+    <a class="hrl-btn <%= "hrl-btn--primary" if @category.nil? %>"
+       href="<%= hr_lite.admin_documents_path %>">All</a>
+    <% @categories.each do |category| %>
+      <a class="hrl-btn <%= "hrl-btn--primary" if @category == category %>"
+         href="<%= hr_lite.admin_documents_path(category: category) %>"><%= category.humanize %></a>
+    <% end %>
+  </div>
+</section>
+
+<section class="hrl-card">
+  <h2 class="hrl-card__title">Waiting to be checked (<%= @pending.size %>)</h2>
+  <% if @pending.empty? %>
+    <p class="hrl-muted">Nothing pending.</p>
+  <% else %>
+    <div class="hrl-table-wrap">
+      <table class="hrl-table hrl-table--stack">
+        <thead><tr><th>Person</th><th>Document</th><th>File</th><th></th></tr></thead>
+        <tbody>
+          <% @pending.each do |doc| %>
+            <tr>
+              <td data-label="Person"><%= hr_display_name(doc.user) %></td>
+              <td data-label="Document">
+                <%= doc.title %>
+                <div class="hrl-small hrl-muted"><%= doc.category.humanize %></div>
+              </td>
+              <td data-label="File">
+                <% if doc.readable_by?(hr_current_user) && doc.file.attached? %>
+                  <a class="hrl-small" href="<%= hr_lite.download_document_path(doc) %>">Open</a>
+                <% else %>
+                  <span class="hrl-small hrl-muted">Not yours to open</span>
+                <% end %>
+              </td>
+              <td data-label="">
+                <%= button_to "Verify", hr_lite.verify_admin_document_path(doc),
+                      method: :post, class: "hrl-btn hrl-btn--primary" %>
+                <%= form_with url: hr_lite.reject_admin_document_path(doc), method: :post, local: true do %>
+                  <%= text_field_tag :note, nil, placeholder: "What is wrong with it" %>
+                  <%= submit_tag "Reject", class: "hrl-btn" %>
+                <% end %>
+              </td>
+            </tr>
+          <% end %>
+        </tbody>
+      </table>
+    </div>
+  <% end %>
+</section>
+
+<section class="hrl-card">
+  <h2 class="hrl-card__title">Everything on file</h2>
+  <div class="hrl-table-wrap">
+    <table class="hrl-table hrl-table--stack">
+      <thead><tr><th>Person</th><th>Document</th><th>Expires</th><th>Checked</th></tr></thead>
+      <tbody>
+        <% @documents.each do |doc| %>
+          <tr>
+            <td data-label="Person">
+              <a href="<%= hr_lite.admin_employee_documents_path(user_id: doc.user_id) %>">
+                <%= hr_display_name(doc.user) %>
+              </a>
+            </td>
+            <td data-label="Document"><%= doc.title %></td>
+            <td data-label="Expires">
+              <% if doc.expires_on %>
+                <span class="<%= "hrl-badge hrl-badge--bad" if doc.expired? %>">
+                  <%= doc.expires_on.strftime("%d %b %Y") %>
+                </span>
+              <% else %>—<% end %>
+            </td>
+            <td data-label="Checked">
+              <%= hrl_request_status_badge(doc.verification == "verified" ? "approved" : doc.verification) %>
+            </td>
+          </tr>
+        <% end %>
+      </tbody>
+    </table>
+  </div>
+  <%= hrl_pagination %>
+</section>

data/app/views/hr_lite/admin/documents/show.html.erb

@@ -0,0 +1,42 @@
+<% content_for(:page_title) { hr_display_name(@employee) } %>
+<div class="hrl-page__head">
+  <h1 class="hrl-page__title"><%= hr_display_name(@employee) %> — documents</h1>
+</div>
+
+<% if @missing.any? %>
+  <section class="hrl-card hrl-card--warn">
+    <h2 class="hrl-card__title">Not on file</h2>
+    <p><%= @missing.map(&:humanize).to_sentence %></p>
+  </section>
+<% end %>
+
+<section class="hrl-card">
+  <% if @documents.empty? %>
+    <p class="hrl-muted">Nothing uploaded.</p>
+  <% else %>
+    <div class="hrl-table-wrap">
+      <table class="hrl-table hrl-table--stack">
+        <thead><tr><th>Document</th><th>Expires</th><th>Checked</th><th></th></tr></thead>
+        <tbody>
+          <% @documents.each do |doc| %>
+            <tr>
+              <td data-label="Document">
+                <strong><%= doc.title %></strong>
+                <div class="hrl-small hrl-muted"><%= doc.category.humanize %></div>
+              </td>
+              <td data-label="Expires"><%= doc.expires_on&.strftime("%d %b %Y") || "—" %></td>
+              <td data-label="Checked">
+                <%= hrl_request_status_badge(doc.verification == "verified" ? "approved" : doc.verification) %>
+              </td>
+              <td data-label="">
+                <% if doc.readable_by?(hr_current_user) && doc.file.attached? %>
+                  <a class="hrl-small" href="<%= hr_lite.download_document_path(doc) %>">Open</a>
+                <% end %>
+              </td>
+            </tr>
+          <% end %>
+        </tbody>
+      </table>
+    </div>
+  <% end %>
+</section>

data/app/views/hr_lite/admin/employees/_form.html.erb

@@ -57,6 +57,11 @@
     <div class="hrl-field"><%= f.label :work_location %><%= f.text_field :work_location %></div>
     <div class="hrl-field"><%= f.label :date_of_birth %><%= f.date_field :date_of_birth %></div>
     <div class="hrl-field"><%= f.label :date_of_joining %><%= f.date_field :date_of_joining %></div>
+    <div class="hrl-field">
+      <%= f.label :blood_group %>
+      <%= f.select :blood_group, HrLite::EmployeeProfile::BLOOD_GROUPS, include_blank: "—" %>
+    </div>
+    <div class="hrl-field"><%= f.label :emergency_contact, "Emergency contact (printed on the ID card)" %><%= f.telephone_field :emergency_contact %></div>
     <div class="hrl-field">
       <%= f.label :date_of_exit, "Date of exit (leave blank while employed)" %>
       <%= f.date_field :date_of_exit %>

data/app/views/hr_lite/admin/employees/show.html.erb

@@ -3,6 +3,7 @@
   <h1 class="hrl-page__title"><%= hr_display_name(@profile.user) %> <span class="hrl-muted">(<%= @profile.employee_code %>)</span></h1>
   <div class="hrl-page__actions">
     <a class="hrl-btn" href="<%= hr_lite.edit_admin_employee_path(@profile) %>">Edit</a>
+    <a class="hrl-btn" href="<%= hr_lite.id_card_path(user_id: @profile.user_id) %>">ID card</a>
     <% if hr_superadmin? %>
       <a class="hrl-btn" href="<%= hr_lite.new_admin_employee_appraisal_path(@profile) %>">New appraisal</a>
       <a class="hrl-btn" href="<%= hr_lite.new_admin_employee_designation_change_path(@profile) %>">Role change</a>

data/app/views/hr_lite/admin/hr_requests/show.html.erb

@@ -7,6 +7,9 @@
     <%= @request.created_at.to_date.strftime("%d %b %Y") %> ·
     <%= hrl_request_status_badge(@request.status) %>
   </p>
+  <% if @request.category == "id_card" %>
+    <a class="hrl-btn hrl-mt" href="<%= hr_lite.id_card_path(user_id: @request.user_id) %>">Open the ID card to print</a>
+  <% end %>
   <% if @request.body.present? %>
     <div class="hrl-prose"><%= simple_format(@request.body) %></div>
   <% end %>

data/app/views/hr_lite/admin/leave_requests/index.html.erb

@@ -1,6 +1,9 @@
 <% content_for(:page_title) { "Leave approvals" } %>
 <div class="hrl-page__head">
   <h1 class="hrl-page__title">Leave approvals</h1>
+  <div class="hrl-page__actions">
+    <a class="hrl-btn" href="<%= hr_lite.new_admin_leave_request_path %>">Record leave</a>
+  </div>
 </div>
 
 <%= render "hr_lite/admin/shared/approvals_tabs", active: :leaves %>

data/app/views/hr_lite/admin/leave_requests/new.html.erb

@@ -0,0 +1,35 @@
+<% content_for(:page_title) { "Record leave" } %>
+<div class="hrl-page__head">
+  <h1 class="hrl-page__title">Record leave for an employee</h1>
+  <p class="hrl-page__sub">For leave somebody took but never applied for. It is saved as approved, and they get an email.</p>
+</div>
+
+<section class="hrl-card">
+  <%= form_with model: @request, url: hr_lite.admin_leave_requests_path, method: :post, local: true do |f| %>
+    <%= render "hr_lite/shared/form_errors", record: @request %>
+    <div class="hrl-field">
+      <%= label_tag :employee_code, "Employee (type a name or code)" %>
+      <%= text_field_tag :employee_code, params[:employee_code], list: "hrl-employees", required: true, autocomplete: "off" %>
+      <datalist id="hrl-employees">
+        <% @people.each do |p| %>
+          <option value="<%= p.employee_code %>"><%= hr_display_name(p.user) %></option>
+        <% end %>
+      </datalist>
+    </div>
+    <div class="hrl-field">
+      <%= f.label :leave_type_id, "Type" %>
+      <%= f.collection_select :leave_type_id, HrLite::LeaveType.active, :id, :name %>
+    </div>
+    <div class="hrl-field"><%= f.label :start_date, "From" %><%= f.date_field :start_date %></div>
+    <div class="hrl-field"><%= f.label :end_date, "To" %><%= f.date_field :end_date %></div>
+    <div class="hrl-field hrl-field--check">
+      <%= f.check_box :half_day %>
+      <%= f.label :half_day, "Half day (single-day only)" %>
+    </div>
+    <div class="hrl-field"><%= f.label :reason, "Note (optional)" %><%= f.text_area :reason %></div>
+    <div class="hrl-form-actions">
+      <%= f.submit "Record leave", class: "hrl-btn hrl-btn--primary" %>
+      <a class="hrl-btn" href="<%= hr_lite.admin_leave_requests_path %>">Cancel</a>
+    </div>
+  <% end %>
+</section>

data/app/views/hr_lite/admin/loans/index.html.erb

@@ -0,0 +1,43 @@
+<% content_for(:page_title) { "Loans" } %>
+<div class="hrl-page__head">
+  <h1 class="hrl-page__title">Loans &amp; advances</h1>
+  <div class="hrl-page__actions">
+    <a class="hrl-btn hrl-btn--primary" href="<%= hr_lite.new_admin_loan_path %>">Record a loan</a>
+  </div>
+</div>
+
+<section class="hrl-card">
+  <p>Outstanding across every active loan: <strong><%= hrl_money(@outstanding) %></strong></p>
+  <div class="hrl-row">
+    <% HrLite::Loan::STATUSES.each do |status| %>
+      <a class="hrl-btn <%= "hrl-btn--primary" if @status == status %>"
+         href="<%= hr_lite.admin_loans_path(status: status) %>"><%= status.humanize %></a>
+    <% end %>
+  </div>
+</section>
+
+<section class="hrl-card">
+  <% if @loans.empty? %>
+    <p class="hrl-muted">Nothing <%= @status %>.</p>
+  <% else %>
+    <div class="hrl-table-wrap">
+      <table class="hrl-table hrl-table--stack">
+        <thead><tr><th>Person</th><th>Principal</th><th>Instalment</th><th>Outstanding</th><th></th></tr></thead>
+        <tbody>
+          <% @loans.each do |loan| %>
+            <tr>
+              <td data-label="Person"><%= hr_display_name(loan.user) %></td>
+              <td data-label="Principal" class="hrl-num"><%= hrl_money(loan.principal) %></td>
+              <td data-label="Instalment" class="hrl-num"><%= hrl_money(loan.monthly_instalment) %></td>
+              <td data-label="Outstanding" class="hrl-num"><%= hrl_money(loan.outstanding) %></td>
+              <td data-label="">
+                <a class="hrl-small" href="<%= hr_lite.admin_loan_path(loan) %>">Open</a>
+              </td>
+            </tr>
+          <% end %>
+        </tbody>
+      </table>
+    </div>
+  <% end %>
+  <%= hrl_pagination %>
+</section>