hr_lite 0.16.0 → 0.19.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 14d37a1d62a035315390be2c619a74722c58e6b53b747422aa4ab48458287102
-  data.tar.gz: fbbb6c7efb893ff38d6992971844fd721deca4819943f0e0dd8f1cd343f4b4fc
+  metadata.gz: d99d3408ecc4296bfb60310343f56df91495a48a6bc277881f6ebbd79a57de80
+  data.tar.gz: 9286e4b08358dbbe9f360967a57b134aa0ee6d74841daf80310ad79b372ae7b2
 SHA512:
-  metadata.gz: 70b42e3a35bd683ab62ecda90d33009511faeda8595cbc9ec9fc9f1ae2388f61592059a4ea1be151ade6ec3062f4ecea2726098f2f58adc55048f8e108de7460
-  data.tar.gz: a19199e7cd8a173713e97d77266d4779951ef47d70171c234ee65d2afec5cc35be8670542db4e49ad2e656efe6031b8aba053cc281f687fd08dd6b20e3d83511
+  metadata.gz: a96b511a5031812bf57b8b10314c1316eb29857f25f0e5dd4e454caea586bf88c3feff01180e3d5bdd8da693421c52524c9da93038740266c8bf9c079dca24ed
+  data.tar.gz: dc3d6659e50a6421935556bb13db5a0749198e119b6bc01fa5a84415a913d26e4a38397c71f2e529c379fdc14663eb9afb8825c1f402e9723e7c1fb2ba933ba8

data/CHANGELOG.md

@@ -7,6 +7,123 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.19.0] - 2026-09-30
+
+Each night closes the day. A missed check-out becomes a half day, and
+employees can fix a recent missed punch themselves. No migration.
+
+### Added
+
+- **`HrLite::AttendanceCloseJob`**, scheduled by the host each night (a run
+  before noon closes the previous day, so retries are safe). On a working
+  day it checks out every punch still open at the day's end (23:59), marks the
+  day `half_day` (payroll pays
+  half and counts half as loss of pay), and emails the employee. Anyone who
+  never checked in is emailed that the day is absent; no record is written.
+  Weekends, holidays and approved leave (full or half day) are skipped. Run it
+  once a day: a re-run emails the no-shows again.
+- **Self-fix.** With `config.self_regularization = { within_days:, per_week: }`,
+  a ticket that fills a missed punch on a working day, today or up to
+  `within_days` back, is approved as soon as the employee submits it, for up to
+  `per_week` days in a Monday–Sunday week. The punch is written the way an HR
+  approval writes it, with the usual audit row, and nobody is notified. Older
+  days, off days, fixes past the weekly limit, a change to a real punch, and a
+  day HR already regularized or rejected go to HR as ordinary tickets; the
+  flash says which happened. A check-out-only ticket for a day with no check-in
+  stays pending for HR.
+  `nil` (default) keeps HR as the only one who fixes punches. The ticket form
+  states the rule when it is on.
+- The Leaves page links "Record leave for someone" for anyone who can approve
+  leave.
+- The record-leave form says why somebody may be missing from the employee
+  list (no HR profile yet). Leadership gets a link to set one up.
+
+### Changed
+
+- Approving a regularization ticket on a day the close job marked half day
+  sets it back to present. A half day HR set on purpose stays.
+- Approving a ticket for a month whose payroll run is in review adds a warning
+  to that run, so the slip is recomputed before it is finalized.
+- The admin overview and daily digest still count a day the close job checked
+  out as a missing checkout.
+
+### Fixed
+
+- The sidebar, and the phone's More sheet, open scrolled to the current screen
+  instead of the top. A Manage item such as Approvals is no longer below the
+  fold.
+- Page action buttons wrap on a narrow phone instead of running off the screen.
+
+### Upgrading
+
+Schedule `HrLite::AttendanceCloseJob` daily at `55 23 * * * Asia/Kolkata` in
+your job scheduler (a run before noon closes the previous day). To let employees fix their own recent misses, set
+`c.self_regularization = { within_days: 2, per_week: 2 }` in the initializer.
+No migration.
+
+## [0.18.0] - 2026-09-29
+
+Salary follows leave. One migration (`paid_days` on leave requests, nullable;
+existing rows read as fully paid).
+
+### Changed
+
+- **Leave beyond the balance is loss of pay, not refused.** On approval —
+  applied by the employee or recorded by HR — the balance covers the leave's
+  earliest working days in half-day steps (`paid_days`), and payroll cuts the
+  rest at the month's gross divided by its calendar days. The balance is never
+  overdrawn by it, so next month's accrual is not swallowed. Each unpaid day is
+  cut in its own month when a leave spans two. The split is fixed at approval;
+  correct it with the slip's LOP override while the run is in review.
+- Comp-off is still refused past its earned credit.
+- The monthly draft alert on the 1st goes to whoever runs payroll
+  (`payroll.manage`), with email, instead of leadership — who cannot open it.
+
+### Added
+
+- The employee is told on applying how many days will be unpaid; the approver
+  sees it on the request before approving.
+- `config.slip_release_day` (1..28): employees see a published slip from that
+  day of the following month, and the "slip ready" bell and email wait until
+  then. `nil` (default) keeps today's behaviour. Needs an ActiveJob backend
+  that runs scheduled jobs.
+
+## [0.17.0] - 2026-09-29
+
+Screens for the things other screens were waiting on. An audit of every HR
+screen found four that could never show anything, because the rows they list
+could only be created from a console. No migration.
+
+### Added
+
+- **Expense categories** (Settings → Expense categories, leadership). Until
+  now nothing created one, so the claim form had no categories and every
+  expense claim failed with "Category must exist". Add or edit name, monthly
+  cap, receipt rule and active; untick Active to retire one (no delete —
+  claims point at it).
+- **One-off pay items** (Payroll → a run → One-off pay items, money tier): a
+  bonus, incentive, arrears, reimbursement or one-time deduction for a person
+  and month, carried by that month's computed slip. A month already paid
+  refuses both adding and removing an item; the loan repayment line stays
+  with the loan. Items are money-tier in the audit trail, so the leadership
+  email no longer carries the amount.
+- **Benefits admin** (Manage → Benefits, `benefit.manage`): add a benefit,
+  enrol somebody with their dependants, end their cover. Employees' Benefits
+  page was always empty before.
+
+### Fixed
+
+- **A manager could adjust anybody's leave balance.** The adjust action never
+  asked whose balance it was. It now needs `leave.manage` reaching that person;
+  the balances grid lists only people the viewer can see, and the adjust form
+  shows only to someone who holds `leave.manage`.
+- The professional-tax state picker on the salary structure form had no
+  options.
+- Sidebar links that led nowhere: the employee Approvals inbox shows only once
+  an approval flow exists; Claims shows to whoever approves claims (Finance
+  sees it, HR no longer lands on access denied); Profile is linked, and with it
+  Resignation; both leave balance pages are linked.
+
 ## [0.16.0] - 2026-09-27
 
 Employee ID cards, print requests through Ask HR, recording leave for

data/README.md

@@ -141,6 +141,10 @@ HrLite.configure do |c|
   c.render_pdf = ->(template:, assigns:, cache_key:) {
     PdfRenderer.render(template: template, assigns: assigns, cache_key: cache_key)
   }
+  c.slip_release_day = 10 # employees see a slip from the 10th of the next month; nil (default) = on publish
+  # Self-fix: employees correct their own missed punch within 2 days, at most
+  # 2 a week. nil (default) = only HR fixes it, via a regularization ticket.
+  c.self_regularization = { within_days: 2, per_week: 2 }
 
   # Mirror promotions into your own user model (optional).
   c.on_designation_change = ->(user, designation) { user.update!(designation: designation) }
@@ -266,6 +270,13 @@ approved; regularization tickets (`/regularization_requests`) let someone who
 forgot to punch propose the real times for admin approval, which writes them
 onto the attendance record with a full audit trail.
 
+With `config.self_regularization = { within_days: 2, per_week: 2 }`, a ticket that
+fills a missed punch on a working day, today or up to 2 days back, is approved on
+submit, by the employee, at most twice per Mon–Sun week. No approver is notified;
+the audit row is the trail. Older days, off days, the third fix of a week, a change
+to a real punch, a day HR already regularized or rejected, or a fix that cannot
+apply (no check-in that day) stay ordinary tickets for HR.
+
 ### Holidays and calendar
 
 `bin/rails hr_lite:seed` inserts the three fixed-date national holidays
@@ -352,6 +363,7 @@ whatever you run). Each is idempotent and sends nothing on a quiet day.
 | `HrLite::DailyDigestJob` | each morning | Leadership digest: who is out today, pending approvals, flagged punches, missing checkouts |
 | `HrLite::PayrollAutoDraftJob` | monthly, on the 1st | Draft and compute the previous month's payroll from attendance, then notify leadership for review (publishing stays a human action) |
 | `HrLite::LeaveYearRolloverJob` | leave year's first day (Jan 1, or Jul 1 for a July–June year) | Materialize carry-forward into the new year's balances |
+| `HrLite::AttendanceCloseJob` | each night, `55 23 * * * Asia/Kolkata` | Close the day: an open punch is checked out at 23:59 and marked half day; a run before noon (a retry, or a morning schedule that lets night shifts check out first) closes the previous day instead; nobody checked in stays absent. Each is emailed how to fix it. Skips weekends, holidays and approved leave. Run it once a day — a re-run tells the no-shows again. |
 
 ## Rake tasks
 

data/app/assets/javascripts/hr_lite/nav.js

@@ -0,0 +1,21 @@
+// Keeps the current screen in view. The rail and the phone's More sheet both
+// scroll, and a Manage item sits below the fold. scrollIntoView is avoided on
+// purpose: it would scroll the page as well as the menu.
+(function () {
+  function centre(panel) {
+    var link = panel && panel.querySelector(".hrl-nav__link--active");
+    if (!link) return;
+    var box = panel.getBoundingClientRect();
+    var item = link.getBoundingClientRect();
+    panel.scrollTop += item.top - box.top - (box.height - item.height) / 2;
+  }
+
+  centre(document.querySelector(".hrl-side"));
+
+  var more = document.querySelector(".hrl-tabbar__more");
+  if (more) {
+    more.addEventListener("toggle", function () {
+      if (more.open) centre(more.querySelector(".hrl-sheet"));
+    });
+  }
+})();

data/app/assets/stylesheets/hr_lite/hr_lite.css

@@ -143,7 +143,7 @@
 .hrl-page__head { display: flex; flex-wrap: wrap; align-items: center; gap: .6rem; margin: .25rem 0 .9rem; }
 .hrl-page__title { font-size: 1.25rem; font-weight: 700; margin: 0; }
 .hrl-page__sub { color: var(--hrl-muted); font-size: .86rem; margin: .15rem 0 0; width: 100%; }
-.hrl-page__actions { margin-left: auto; display: flex; gap: .5rem; }
+.hrl-page__actions { margin-left: auto; display: flex; flex-wrap: wrap; gap: .5rem; }
 
 /* Cards */
 .hrl-card {

data/app/controllers/hr_lite/admin/benefits_controller.rb

@@ -0,0 +1,61 @@
+module HrLite
+  module Admin
+    # Who is covered by what. Before this screen nothing created a benefit,
+    # so every employee's /benefits page said "not enrolled".
+    class BenefitsController < BaseController
+      skip_before_action :require_operations_access!
+      before_action :require_benefits!
+
+      def index
+        @benefits = Benefit.order(:name)
+        @enrolments = paginate(covered.includes(:benefit, :user).order(:enrolled_on))
+      end
+
+      def new
+        @benefit = Benefit.new
+      end
+
+      def create
+        @benefit = Benefit.new(benefit_params)
+        if @benefit.save
+          redirect_to admin_benefits_path, notice: "#{@benefit.name} added."
+        else
+          render :new, status: :unprocessable_entity
+        end
+      end
+
+      def enrol
+        benefit = Benefit.find(params[:id])
+        user = HrLite.user_klass.find(params[:user_id])
+        benefit.benefit_enrolments.create!(user_id: user.id, enrolled_on: parse_date_param(params[:enrolled_on]),
+                                           dependants: params[:dependants].presence || 0)
+        redirect_to admin_benefits_path, notice: "#{HrLite.display_name(user)} enrolled in #{benefit.name}."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_benefits_path, alert: e.record.errors.full_messages.to_sentence
+      end
+
+      # Ends cover rather than deleting the row: who was covered when is
+      # the record an insurance claim gets checked against.
+      def unenrol
+        enrolment = covered.where(benefit_id: params[:id]).find_by!(user_id: params[:user_id])
+        enrolment.update!(ended_on: parse_date_param(params[:ended_on]))
+        redirect_to admin_benefits_path, notice: "Cover ended for #{HrLite.display_name(enrolment.user)}."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_benefits_path, alert: e.record.errors.full_messages.to_sentence
+      end
+
+      private
+
+      def require_benefits! = hr_require_permission!("benefit.manage", scope: :all)
+
+      # Still covered today — including cover that ends on a future date, which
+      # HR must still be able to see and change.
+      def covered = BenefitEnrolment.where("ended_on IS NULL OR ended_on >= ?", Date.current)
+
+      def benefit_params
+        params.require(:benefit).permit(:name, :kind, :provider, :policy_number, :coverage, :employer_premium,
+                                        :employee_premium, :effective_from, :expires_on, :notes)
+      end
+    end
+  end
+end

data/app/controllers/hr_lite/admin/expense_categories_controller.rb

@@ -0,0 +1,43 @@
+module HrLite
+  module Admin
+    # No destroy: claims hold the category by foreign key. Retire one by
+    # unticking Active, which takes it off the claim form.
+    class ExpenseCategoriesController < LeadershipController
+      def index
+        @expense_categories = ExpenseCategory.alphabetical
+      end
+
+      def new
+        @expense_category = ExpenseCategory.new
+      end
+
+      def create
+        @expense_category = ExpenseCategory.new(expense_category_params)
+        if @expense_category.save
+          redirect_to admin_expense_categories_path, notice: "Category added."
+        else
+          render :new, status: :unprocessable_entity
+        end
+      end
+
+      def edit
+        @expense_category = ExpenseCategory.find(params[:id])
+      end
+
+      def update
+        @expense_category = ExpenseCategory.find(params[:id])
+        if @expense_category.update(expense_category_params)
+          redirect_to admin_expense_categories_path, notice: "Category updated."
+        else
+          render :edit, status: :unprocessable_entity
+        end
+      end
+
+      private
+
+      def expense_category_params
+        params.require(:expense_category).permit(:name, :monthly_cap, :receipt_required, :active)
+      end
+    end
+  end
+end

data/app/controllers/hr_lite/admin/leave_balances_controller.rb

@@ -4,12 +4,15 @@ module HrLite
       def index
         @year = sanitized_year
         @types = LeaveType.active.where(paid: true).where.not(annual_quota: nil)
-        @employees = HrLite.employees
+        @employees = HrLite.employees.select { |employee| hr_reaches?("leave.view", employee) }
       end
 
       # Manual credit/debit — also the comp-off credit mechanism.
       def adjust
         user = HrLite.user_klass.find(params[:user_id])
+        # A manager reaches this screen through leave.approve; changing
+        # somebody's quota is leave.manage, for THAT person.
+        hr_require_reach!("leave.manage", user)
         type = LeaveType.find(params[:leave_type_id])
         # Unsanitised, a missing param wrote the adjustment into leave year 0,
         # where no screen can ever show it.

data/app/controllers/hr_lite/admin/leave_requests_controller.rb

@@ -17,7 +17,7 @@ module HrLite
       end
 
       # HR records leave somebody forgot to apply for. Approved on save, by the
-      # person recording it; the balance check still applies.
+      # person recording it; days beyond the balance become loss of pay.
       def new
         @request = LeaveRequest.new(start_date: Date.current, end_date: Date.current)
         @people = recordable
@@ -32,7 +32,7 @@ module HrLite
         end
         return redirect_to(admin_leave_request_path(@request), notice: "Leave recorded and approved.") if recorded
 
-        @request.errors.add(:base, profile ? "Not enough balance — adjust it first or use unpaid leave" : "Pick an employee from the list") if @request.errors.empty?
+        @request.errors.add(:base, profile ? "Not enough comp-off credit" : "Pick an employee from the list") if @request.errors.empty?
         @people = recordable
         render :new, status: :unprocessable_entity
       end
@@ -43,7 +43,7 @@ module HrLite
           redirect_to admin_leave_requests_path, notice: "Leave approved."
         else
           redirect_to admin_leave_request_path(request),
-                      alert: "Cannot approve — balance no longer covers this request."
+                      alert: "Cannot approve — comp-off credit no longer covers this request."
         end
       rescue ActiveRecord::RecordInvalid
         redirect_to admin_leave_request_path(request), alert: "Only pending requests can be decided."

data/app/controllers/hr_lite/admin/payroll_line_items_controller.rb

@@ -0,0 +1,47 @@
+module HrLite
+  module Admin
+    # One-off payslip lines: a bonus, an incentive, arrears, a reimbursement,
+    # a one-time deduction. Money tier, like loans — this is somebody's pay.
+    # Create and destroy are audited by PayrollLineItem's Audited concern.
+    class PayrollLineItemsController < SuperadminController
+      def index
+        @month = parse_month_param(params[:month])
+        @items = paginate(PayrollLineItem.for_month(@month).includes(:user, :component).order(:created_at))
+      end
+
+      def new
+        @item = PayrollLineItem.new(period_month: parse_month_param(params[:month]))
+      end
+
+      def create
+        @item = PayrollLineItem.new(item_params.merge(
+          period_month: parse_month_param(params.dig(:payroll_line_item, :period_month)),
+          created_by_id: hr_current_user.id,
+          # Same list the form offers: loan repayments come from the loan itself.
+          component: addable_components.find_by(id: params.dig(:payroll_line_item, :component_id))
+        ))
+        if @item.save
+          redirect_to admin_payroll_line_items_path(month: @item.period_month.strftime("%Y-%m")),
+                      notice: "#{@item.component.label} added for #{HrLite.display_name(@item.user)}."
+        else
+          render :new, status: :unprocessable_entity
+        end
+      end
+
+      def destroy
+        item = PayrollLineItem.find(params[:id])
+        removed = item.destroy
+        redirect_to admin_payroll_line_items_path(month: item.period_month.strftime("%Y-%m")), status: :see_other,
+                    **(removed ? { notice: "Removed." } : { alert: "That month has already been paid — it can't change now." })
+      end
+
+      private
+
+      def item_params
+        params.require(:payroll_line_item).permit(:user_id, :amount, :note)
+      end
+
+      def addable_components = SalaryComponent.active.where.not(code: "loan_repayment")
+    end
+  end
+end

data/app/controllers/hr_lite/admin/payroll_runs_controller.rb

@@ -48,7 +48,9 @@ module HrLite
       end
 
       def publish
-        transition { |run| run.publish!(actor: hr_current_user) && "Published — employees notified." }
+        day = HrLite.config.slip_release_day
+        opens = day && "Published — employees can open it, and are notified, from the #{day.ordinalize} of next month."
+        transition { |run| run.publish!(actor: hr_current_user) && (opens || "Published — employees notified.") }
       end
 
       # Payout register: the full money sheet including bank details —

data/app/controllers/hr_lite/leave_requests_controller.rb

@@ -19,7 +19,9 @@ module HrLite
     def create
       @request = LeaveRequest.new(request_params.merge(user_id: hr_current_user.id))
       if @request.save
-        redirect_to leave_requests_path, notice: "Leave request submitted."
+        # Say it now, not on the payslip: days past the balance are unpaid.
+        short = @request.days_beyond_balance
+        redirect_to leave_requests_path, notice: "Leave request submitted.#{" #{short.to_s('F')} day(s) are beyond your balance and will be unpaid if approved." if short.positive?}"
       else
         @balances = balance_cards
         render :new, status: :unprocessable_entity

data/app/controllers/hr_lite/regularization_requests_controller.rb

@@ -13,7 +13,7 @@ module HrLite
     def create
       @request = RegularizationRequest.new(request_params.merge(user_id: hr_current_user.id))
       if @request.save
-        redirect_to regularization_requests_path, notice: "Ticket raised — an admin will review it."
+        redirect_to regularization_requests_path, notice: create_notice
       else
         render :new, status: :unprocessable_entity
       end
@@ -29,6 +29,15 @@ module HrLite
 
     private
 
+    def create_notice
+      rule = HrLite.config.self_regularization
+      return "Ticket raised — an admin will review it." unless rule
+      return "Fixed. #{helpers.pluralize(@request.self_fixes_left, 'self-fix')} left this week." if @request.approved?
+
+      "Sent to HR as a ticket — you can fix only a missed punch on a working day in the last #{rule[:within_days]} days yourself, " \
+        "#{rule[:per_week]} times a week."
+    end
+
     def request_params
       params.require(:regularization_request).permit(:date, :check_in_at, :check_out_at, :reason)
     end

data/app/controllers/hr_lite/salary_slips_controller.rb

@@ -1,13 +1,13 @@
 module HrLite
-  # Employee surface: strictly own PUBLISHED slips — a foreign or
-  # unpublished id 404s through the scoped relation, never 403s.
+  # Employee surface: strictly own RELEASED slips — a foreign, unpublished
+  # or not-yet-released id 404s through the scoped relation, never 403s.
   class SalarySlipsController < ApplicationController
     def index
-      @slips = paginate(own_published.recent_first)
+      @slips = paginate(own_released.recent_first)
     end
 
     def show
-      @slip = own_published.find(params[:id])
+      @slip = own_released.find(params[:id])
 
       respond_to do |format|
         format.html
@@ -17,8 +17,8 @@ module HrLite
 
     private
 
-    def own_published
-      SalarySlip.published.where(user_id: hr_current_user.id)
+    def own_released
+      SalarySlip.released.where(user_id: hr_current_user.id)
     end
 
     def send_slip_pdf(slip)

data/app/helpers/hr_lite/application_helper.rb

@@ -11,7 +11,8 @@ module HrLite
       # belongs in "More" rather than displacing something everybody uses.
       # Employee tier all the same — holding an approval IS the authorisation,
       # so a manager and a stand-in covering for one reach the same screen.
-      { label: "Approvals",  path: :approvals_path,      match: [ "/approvals" ] },
+      { label: "Approvals",  path: :approvals_path,      match: [ "/approvals" ],
+        if: -> { HrLite::ApprovalFlow.where(active: true).exists? } },
       { label: "Expenses",   path: :expenses_path,       match: [ "/expenses" ] },
       { label: "Benefits",   path: :benefits_path,       match: [ "/benefits" ] },
       { label: "Policies",   path: :policies_path,       match: [ "/policies" ] },
@@ -19,7 +20,8 @@ module HrLite
       { label: "Org",        path: :org_path,            match: [ "/org" ] },
       { label: "Kudos",      path: :kudos_path,          match: [ "/kudos" ] },
       { label: "Slips",      path: :salary_slips_path,   match: [ "/salary_slips" ] },
-      { label: "Career",     path: :career_path,         match: [ "/career", "/appraisals", "/profile" ] },
+      { label: "Career",     path: :career_path,         match: [ "/career", "/appraisals" ] },
+      { label: "Profile",    path: :employee_profile_path, match: [ "/profile", "/resignation" ] },
       { label: "Documents",  path: :documents_path,      match: [ "/documents" ] },
       { label: "ID card",    path: :id_card_path,        match: [ "/id_card" ] },
       { label: "Tax",        path: :tax_declaration_path, match: [ "/tax_declaration" ] },
@@ -31,15 +33,17 @@ module HrLite
       { label: "Team attendance", path: :admin_attendances_path,     match: [ "/admin/attendances" ] },
       { label: "Approvals",       path: :admin_leave_requests_path,  match: [ "/admin/leave_requests", "/admin/leave_balances", "/admin/comp_off_requests", "/admin/regularization_requests" ] },
       { label: "Reports",         path: :admin_reports_path,         match: [ "/admin/reports" ] },
-      { label: "Claims",          path: :admin_expenses_path,        match: [ "/admin/expenses" ] },
+      { label: "Claims",          path: :admin_expenses_path,        match: [ "/admin/expenses" ],
+        if: -> { hr_can?("expense.approve", scope: :team) } },
       { label: "Help desk",       path: :admin_hr_requests_path,     match: [ "/admin/hr_requests" ] },
       { label: "Assets",          path: :admin_assets_path,          match: [ "/admin/assets" ] },
+      { label: "Benefits",        path: :admin_benefits_path,        match: [ "/admin/benefits" ] },
       { label: "Joining & exits", path: :admin_checklists_path,      match: [ "/admin/checklists" ] }
     ].freeze
 
     LEADERSHIP_NAV_ITEMS = [
       { label: "Employees", path: :admin_employees_path,        match: [ "/admin/employees" ] },
-      { label: "Settings",  path: :admin_leave_types_path,      match: [ "/admin/leave_types", "/admin/office_locations", "/admin/holidays", "/admin/setting" ] },
+      { label: "Settings",  path: :admin_leave_types_path,      match: [ "/admin/leave_types", "/admin/office_locations", "/admin/holidays", "/admin/setting", "/admin/expense_categories" ] },
       { label: "Audit",     path: :admin_audit_logs_path,       match: [ "/admin/audit_logs" ] },
       { label: "Policies",  path: :admin_policies_path,         match: [ "/admin/policies" ] },
       { label: "Documents", path: :admin_documents_path,        match: [ "/admin/documents" ] }
@@ -63,9 +67,11 @@ module HrLite
       RQRCode::QRCode.new(text).as_svg(use_path: true, viewbox: true, color: "0F172A").html_safe
     end
 
-    # Only items whose routes exist yet (the nav grows with each phase).
+    # Only items whose routes exist yet (the nav grows with each phase), and
+    # whose optional `if:` holds — a link that always lands on "access
+    # denied" or an empty page is worse than no link.
     def hrl_nav_items(items)
-      items.select { |item| hr_lite_route?(item[:path]) }
+      items.select { |item| hr_lite_route?(item[:path]) && (item[:if].nil? || instance_exec(&item[:if])) }
     end
 
     def hr_lite_route?(helper_name)

data/app/jobs/hr_lite/attendance_close_job.rb

@@ -0,0 +1,42 @@
+module HrLite
+  # Closes the working day that ended last: a run at 23:55 closes today, and a
+  # retry or late run after midnight (or a morning schedule) closes yesterday.
+  # A punch left open is checked out at the day's end and paid as a half day.
+  # Nobody punched in already reads as absent (DayStatus), so they are only
+  # told. Leave days are left alone.
+  class AttendanceCloseJob < ApplicationJob
+    def perform(date: (Time.current - 12.hours).to_date)
+      return unless WorkingCalendar.new(date..date).working_day?(date)
+
+      on_leave = LeaveRequest.active_on(date).pluck(:user_id)
+      records = AttendanceRecord.for_date(date).index_by(&:user_id)
+      day = date.strftime("%d %b")
+      HrLite.active_employees(on: date).each do |user|
+        next if on_leave.include?(user.id)
+
+        record = records[user.id]
+        if record.nil? || record.check_in_at.nil?
+          tell(user, date, "attendance.missed_check_in", "You didn't check in on #{day} — marked absent")
+        elsif record.check_out_at.nil?
+          record.update!(check_out_at: date.end_of_day, status: "half_day",
+                         regularization_note: AttendanceRecord::AUTO_CHECKOUT_NOTE)
+          tell(user, date, "attendance.missed_check_out", "You didn't check out on #{day} — marked half day")
+        end
+      end
+    end
+
+    private
+
+    def tell(user, date, event, title)
+      rule = HrLite.config.self_regularization
+      body = if rule
+        "Fix it yourself by #{(date + rule[:within_days]).strftime('%d %b')} (up to #{rule[:per_week]} a week), " \
+          "or raise a ticket for HR."
+      else
+        "Raise a regularization ticket to get it fixed."
+      end
+      Notifications.publish(event, title: title, body: body, path: "/regularization_requests/new?date=#{date.iso8601}",
+                                   bell_to: [ user ], email_to: [ user ])
+    end
+  end
+end

data/app/jobs/hr_lite/payroll_auto_draft_job.rb

@@ -1,7 +1,7 @@
 module HrLite
   # Monthly automation: on the 1st, draft + compute the previous month's
-  # payroll from attendance and the policy, then tell leadership it is
-  # waiting for review. Publishing stays a deliberate human action —
+  # payroll from attendance and the policy, then tell whoever runs payroll
+  # (payroll.manage) it is waiting for review — leadership cannot open it. Publishing stays a deliberate human action —
   # the system prepares, people approve.
   class PayrollAutoDraftJob < ApplicationJob
     queue_as :default
@@ -16,10 +16,11 @@ module HrLite
       return unless run.draft? && run.salary_slips.none?
 
       run.compute!(actor: nil)
+      payroll = HrLite.users_holding("payroll.manage", scope: :all).to_a
       Notifications.publish(
         "payroll.draft_ready",
         title: "Payroll #{run.label} computed from attendance — #{run.salary_slips.count} slips await review",
-        path: "/admin/payroll_runs/#{run.id}"
+        path: "/admin/payroll_runs/#{run.id}", bell_to: payroll, email_to: payroll
       )
     end
   end

data/app/jobs/hr_lite/slips_ready_job.rb

@@ -0,0 +1,10 @@
+module HrLite
+  # Tells employees their slip is ready on config.slip_release_day, when
+  # SalarySlip.released first lets them open it. Enqueued by
+  # PayrollRun#publish!, which already sent the leadership copy.
+  class SlipsReadyJob < ApplicationJob
+    def perform(run)
+      run.notify_slips_ready(leadership: false)
+    end
+  end
+end

data/app/models/hr_lite/attendance_record.rb

@@ -1,6 +1,7 @@
 module HrLite
   class AttendanceRecord < ApplicationRecord
     STATUSES = %w[present half_day].freeze
+    AUTO_CHECKOUT_NOTE = "Auto check-out: no check-out punched".freeze
 
     belongs_to :user, class_name: HrLite.config.user_class
     belongs_to :regularized_by, class_name: HrLite.config.user_class, optional: true

data/app/models/hr_lite/audit_log.rb

@@ -14,7 +14,7 @@ module HrLite
     # leadership audit screen or the policy.changed email.
     MONEY_TIER_TYPES = %w[
       HrLite::Appraisal HrLite::DesignationChange HrLite::SalaryStructure
-      HrLite::PayrollRun HrLite::SalarySlip
+      HrLite::PayrollRun HrLite::SalarySlip HrLite::PayrollLineItem
     ].freeze
 
     scope :recent, -> { order(created_at: :desc) }

data/app/models/hr_lite/benefit_enrolment.rb

@@ -9,7 +9,7 @@ module HrLite
     belongs_to :user, class_name: HrLite.config.user_class
 
     validates :enrolled_on, presence: true
-    validates :user_id, uniqueness: { scope: :benefit_id }
+    validates :user_id, uniqueness: { scope: :benefit_id, message: "is already enrolled" }
     validates :dependants, numericality: { greater_than_or_equal_to: 0 }
     validate :ended_after_it_started