hr_lite 0.28.0 → 0.30.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 175c2fc4265dd0055f39926d529060dedeb14386991eb9f43d1b3f0e80112dce
-  data.tar.gz: 733cc4423053d7ca4b8d27acd03165dd073481f767131731179432392a3be335
+  metadata.gz: 2f6f41c24e52098ad42a4af7b5827a3fb2fc09a56e5d46d2194122506faa088b
+  data.tar.gz: 6c2323f7e9db6bf95db8f28fac7261b7a670dbdb486b902e30809f5331c95a58
 SHA512:
-  metadata.gz: d26ff16fb6dc9bc592374a0920d659556b7ad8d466fccfa6a24084bfada3bd95fd4b756e2de2ae01138dab005d7e612fd58883b80e1a7ef333f53bd75748f191
-  data.tar.gz: 96b6f9c358ecba6d459da48a97cbdc866f5dbabb1a7ab1dff4345961cdf4e6780c0ae4f7dd56635a66aa41a5078b830423cb1740eada0acda5c4350b4d84590d
+  metadata.gz: c62ee058dcc94b38c24976b2120d7adcb4df515796c92ccb6201b655ea5ee1e54b5b5b8e45c83c34ec811463c50fbc35c651c4d1ae0940317cdb76bf4773bfbc
+  data.tar.gz: 5d130419f330d6aa715f4c43d36e8d7acf10be7df700930514666600659ab2cb241b70311df969aefbc1ab3e879729680b85b4ea9740311b78b305c4a82a0dc4

data/CHANGELOG.md

@@ -7,6 +7,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.30.0] - 2026-10-13
+
+- Attendance slots (`config.attendance_slots = true`, off by default). Employees pick a check-in slot (09:00, 09:30, 10:00 or 10:30; checkout 8h30 later) for today, this week or this month. Saving locks it. HR sets or unlocks a slot from the employee's attendance page. No slot means 10:00.
+- Late penalties. After 5 minutes of grace, each started half hour late adds 30 minutes to that day's checkout. A check-in after 11:00 also adds 1 hour to each of the next two working days, and one after 11:30 makes the day a half day (an approved regularization ticket lifts it). Leaving before the required checkout adds 30 minutes to the next working day (nightly close job). The punch card shows the slot, the required checkout, time left and any shortage, and My attendance lists the month's penalties. HR removes a penalty with a reason; the row is kept.
+- Late buffer. HR gives an employee 1h or 2h with a reason (parental care, medical, health, other) on their profile. It delays the penalty clock. Colleagues see the category on the team board; the note is HR-only and encrypted.
+
+## [0.29.0] - 2026-10-11
+
+- ID card: Share button. Draws front and back side by side into one PNG and opens the phone's share sheet (WhatsApp, mail…); desktops download the PNG. The card photo is now served through the Active Storage proxy (same site), so it shows up in the image when storage redirects to a cloud bucket. Vendors html-to-image 1.11.11 (MIT).
+- ID card: adjust the photo before uploading. The chosen picture previews inside the card's frame; drag to move it, slide to zoom, and the upload is exactly what the frame shows (a 560 px wide JPEG).
+
 ## [0.28.0] - 2026-10-10
 
 - HR and leadership can cancel any approved or pending leave at any time, past dates included. A reason is required; it is kept as the decision note and in the audit log. Employees still cancel their own leave only before it starts. A cancelled past day with no punch shows as absent.

data/app/assets/javascripts/hr_lite/photo_crop.js

@@ -0,0 +1,71 @@
+// ID card photo: the chosen picture previews inside the card's own frame.
+// Drag to move it, slide to zoom, and the upload is exactly what the frame shows.
+(function () {
+  const input = document.querySelector("[data-hrl-photo-input]");
+  if (!input) return;
+  const frame = document.querySelector(".hrl-idcard__photo");
+  const zoom = document.querySelector("[data-hrl-photo-zoom]");
+  let img = null, base = 1, scale = 1, x = 0, y = 0, cropped = false;
+
+  const size = () => [ img.naturalWidth * base * scale, img.naturalHeight * base * scale ];
+  function place() {
+    const [ w, h ] = size();
+    x = Math.min(0, Math.max(frame.clientWidth - w, x));
+    y = Math.min(0, Math.max(frame.clientHeight - h, y));
+    img.style.cssText = `position:absolute;left:0;top:0;max-width:none;width:${w}px;height:${h}px;transform:translate(${x}px,${y}px);cursor:grab`;
+  }
+
+  input.addEventListener("change", function () {
+    const file = input.files[0];
+    if (!file) return;
+    img = new Image();
+    img.onload = function () {
+      base = Math.max(frame.clientWidth / img.naturalWidth, frame.clientHeight / img.naturalHeight);
+      scale = 1;
+      zoom.value = 1;
+      x = (frame.clientWidth - img.naturalWidth * base) / 2;
+      y = (frame.clientHeight - img.naturalHeight * base) / 2;
+      frame.replaceChildren(img);
+      frame.style.touchAction = "none";
+      zoom.closest("[data-hrl-photo-adjust]").hidden = false;
+      place();
+    };
+    img.src = URL.createObjectURL(file);
+  });
+
+  zoom.addEventListener("input", function () {
+    const ratio = zoom.value / scale, cx = frame.clientWidth / 2, cy = frame.clientHeight / 2;
+    x = cx - (cx - x) * ratio;
+    y = cy - (cy - y) * ratio;
+    scale = Number(zoom.value);
+    place();
+  });
+
+  frame.addEventListener("pointerdown", function (down) {
+    if (!img) return;
+    frame.setPointerCapture(down.pointerId);
+    let lastX = down.clientX, lastY = down.clientY;
+    const move = function (event) {
+      x += event.clientX - lastX; y += event.clientY - lastY;
+      lastX = event.clientX; lastY = event.clientY;
+      place();
+    };
+    frame.addEventListener("pointermove", move);
+    frame.addEventListener("pointerup", () => frame.removeEventListener("pointermove", move), { once: true });
+  });
+
+  input.form.addEventListener("submit", function (event) {
+    if (!img || cropped) return;
+    event.preventDefault();
+    const k = base * scale, canvas = document.createElement("canvas");
+    canvas.width = 560; canvas.height = Math.round(560 * frame.clientHeight / frame.clientWidth);
+    canvas.getContext("2d").drawImage(img, -x / k, -y / k, frame.clientWidth / k, frame.clientHeight / k, 0, 0, canvas.width, canvas.height);
+    canvas.toBlob(function (blob) {
+      const files = new DataTransfer();
+      files.items.add(new File([ blob ], "photo.jpg", { type: "image/jpeg" }));
+      input.files = files.files;
+      cropped = true;
+      input.form.requestSubmit();
+    }, "image/jpeg", 0.9);
+  });
+})();

data/app/assets/javascripts/hr_lite/share.js

@@ -0,0 +1,34 @@
+// The ID card's Share button: draws both faces into one PNG and hands it to
+// the phone's share sheet (WhatsApp, mail…). Desktops download it instead.
+document.addEventListener("click", async function (event) {
+  const button = event.target.closest("[data-hrl-share]");
+  if (!button) return;
+
+  button.disabled = true;
+  try {
+    // Front and back side by side in one picture, even where the page stacks them.
+    const faces = document.querySelector(".hrl-idcard-faces");
+    const card = faces.querySelector(".hrl-idcard").getBoundingClientRect();
+    const pad = 24;
+    const blob = await window.htmlToImage.toBlob(faces, {
+      width: card.width * 2 + pad * 3,
+      height: card.height + pad * 2,
+      style: { flexWrap: "nowrap", gap: `${pad}px`, padding: `${pad}px`, margin: "0", justifyContent: "flex-start" },
+      pixelRatio: 2,
+      backgroundColor: "#ffffff",
+      filter: (node) => !node.classList?.contains("hrl-idcard__label")
+    });
+    const file = new File([blob], button.dataset.hrlShare, { type: "image/png" });
+    if (navigator.canShare?.({ files: [file] })) {
+      await navigator.share({ files: [file], title: "ID card" });
+    } else {
+      const link = Object.assign(document.createElement("a"), { href: URL.createObjectURL(file), download: file.name });
+      link.click();
+      setTimeout(() => URL.revokeObjectURL(link.href), 1000);
+    }
+  } catch (error) {
+    if (error.name !== "AbortError") alert("Could not make the image. Use Print instead.");
+  } finally {
+    button.disabled = false;
+  }
+});

data/app/assets/javascripts/hr_lite/vendor/html_to_image.js

@@ -0,0 +1,2 @@
+/* html-to-image 1.11.11 — MIT, (c) bubkoo — https://github.com/bubkoo/html-to-image */
+!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?e(exports):"function"==typeof define&&define.amd?define(["exports"],e):e((t="undefined"!=typeof globalThis?globalThis:t||self).htmlToImage={})}(this,(function(t){"use strict";function e(t,e,n,r){return new(n||(n=Promise))((function(i,o){function u(t){try{a(r.next(t))}catch(t){o(t)}}function c(t){try{a(r.throw(t))}catch(t){o(t)}}function a(t){var e;t.done?i(t.value):(e=t.value,e instanceof n?e:new n((function(t){t(e)}))).then(u,c)}a((r=r.apply(t,e||[])).next())}))}function n(t,e){var n,r,i,o,u={label:0,sent:function(){if(1&i[0])throw i[1];return i[1]},trys:[],ops:[]};return o={next:c(0),throw:c(1),return:c(2)},"function"==typeof Symbol&&(o[Symbol.iterator]=function(){return this}),o;function c(c){return function(a){return function(c){if(n)throw new TypeError("Generator is already executing.");for(;o&&(o=0,c[0]&&(u=0)),u;)try{if(n=1,r&&(i=2&c[0]?r.return:c[0]?r.throw||((i=r.return)&&i.call(r),0):r.next)&&!(i=i.call(r,c[1])).done)return i;switch(r=0,i&&(c=[2&c[0],i.value]),c[0]){case 0:case 1:i=c;break;case 4:return u.label++,{value:c[1],done:!1};case 5:u.label++,r=c[1],c=[0];continue;case 7:c=u.ops.pop(),u.trys.pop();continue;default:if(!(i=u.trys,(i=i.length>0&&i[i.length-1])||6!==c[0]&&2!==c[0])){u=0;continue}if(3===c[0]&&(!i||c[1]>i[0]&&c[1]<i[3])){u.label=c[1];break}if(6===c[0]&&u.label<i[1]){u.label=i[1],i=c;break}if(i&&u.label<i[2]){u.label=i[2],u.ops.push(c);break}i[2]&&u.ops.pop(),u.trys.pop();continue}c=e.call(t,u)}catch(t){c=[6,t],r=0}finally{n=i=0}if(5&c[0])throw c[1];return{value:c[0]?c[1]:void 0,done:!0}}([c,a])}}}var r,i=(r=0,function(){return r+=1,"u".concat("0000".concat((Math.random()*Math.pow(36,4)<<0).toString(36)).slice(-4)).concat(r)});function o(t){for(var e=[],n=0,r=t.length;n<r;n++)e.push(t[n]);return e}function u(t,e){var n=(t.ownerDocument.defaultView||window).getComputedStyle(t).getPropertyValue(e);return n?parseFloat(n.replace("px","")):0}function c(t,e){void 0===e&&(e={});var n,r,i,o=e.width||(r=u(n=t,"border-left-width"),i=u(n,"border-right-width"),n.clientWidth+r+i),c=e.height||function(t){var e=u(t,"border-top-width"),n=u(t,"border-bottom-width");return t.clientHeight+e+n}(t);return{width:o,height:c}}var a=16384;function s(t,e){return void 0===e&&(e={}),t.toBlob?new Promise((function(n){t.toBlob(n,e.type?e.type:"image/png",e.quality?e.quality:1)})):new Promise((function(n){for(var r=window.atob(t.toDataURL(e.type?e.type:void 0,e.quality?e.quality:void 0).split(",")[1]),i=r.length,o=new Uint8Array(i),u=0;u<i;u+=1)o[u]=r.charCodeAt(u);n(new Blob([o],{type:e.type?e.type:"image/png"}))}))}function l(t){return new Promise((function(e,n){var r=new Image;r.decode=function(){return e(r)},r.onload=function(){return e(r)},r.onerror=n,r.crossOrigin="anonymous",r.decoding="async",r.src=t}))}function f(t){return e(this,void 0,void 0,(function(){return n(this,(function(e){return[2,Promise.resolve().then((function(){return(new XMLSerializer).serializeToString(t)})).then(encodeURIComponent).then((function(t){return"data:image/svg+xml;charset=utf-8,".concat(t)}))]}))}))}function h(t,r,i){return e(this,void 0,void 0,(function(){var e,o,u;return n(this,(function(n){return e="http://www.w3.org/2000/svg",o=document.createElementNS(e,"svg"),u=document.createElementNS(e,"foreignObject"),o.setAttribute("width","".concat(r)),o.setAttribute("height","".concat(i)),o.setAttribute("viewBox","0 0 ".concat(r," ").concat(i)),u.setAttribute("width","100%"),u.setAttribute("height","100%"),u.setAttribute("x","0"),u.setAttribute("y","0"),u.setAttribute("externalResourcesRequired","true"),o.appendChild(u),u.appendChild(t),[2,f(o)]}))}))}var d=function(t,e){if(t instanceof e)return!0;var n=Object.getPrototypeOf(t);return null!==n&&(n.constructor.name===e.name||d(n,e))};function v(t,e,n){var r=".".concat(t,":").concat(e),i=n.cssText?function(t){var e=t.getPropertyValue("content");return"".concat(t.cssText," content: '").concat(e.replace(/'|"/g,""),"';")}(n):function(t){return o(t).map((function(e){var n=t.getPropertyValue(e),r=t.getPropertyPriority(e);return"".concat(e,": ").concat(n).concat(r?" !important":"",";")})).join(" ")}(n);return document.createTextNode("".concat(r,"{").concat(i,"}"))}function p(t,e,n){var r=window.getComputedStyle(t,n),o=r.getPropertyValue("content");if(""!==o&&"none"!==o){var u=i();try{e.className="".concat(e.className," ").concat(u)}catch(t){return}var c=document.createElement("style");c.appendChild(v(u,n,r)),e.appendChild(c)}}var g="application/font-woff",m="image/jpeg",w={woff:g,woff2:g,ttf:"application/font-truetype",eot:"application/vnd.ms-fontobject",png:"image/png",jpg:m,jpeg:m,gif:"image/gif",tiff:"image/tiff",svg:"image/svg+xml",webp:"image/webp"};function b(t){var e=function(t){var e=/\.([^./]*?)$/g.exec(t);return e?e[1]:""}(t).toLowerCase();return w[e]||""}function y(t){return-1!==t.search(/^(data:)/)}function x(t,e){return"data:".concat(e,";base64,").concat(t)}function S(t,r,i){return e(this,void 0,void 0,(function(){var e,o;return n(this,(function(n){switch(n.label){case 0:return[4,fetch(t,r)];case 1:if(404===(e=n.sent()).status)throw new Error('Resource "'.concat(e.url,'" not found'));return[4,e.blob()];case 2:return o=n.sent(),[2,new Promise((function(t,n){var r=new FileReader;r.onerror=n,r.onloadend=function(){try{t(i({res:e,result:r.result}))}catch(t){n(t)}},r.readAsDataURL(o)}))]}}))}))}var E={};function C(t,r,i){return e(this,void 0,void 0,(function(){var e,o,u,c,a;return n(this,(function(n){switch(n.label){case 0:if(e=function(t,e,n){var r=t.replace(/\?.*/,"");return n&&(r=t),/ttf|otf|eot|woff2?/i.test(r)&&(r=r.replace(/.*\//,"")),e?"[".concat(e,"]").concat(r):r}(t,r,i.includeQueryParams),null!=E[e])return[2,E[e]];i.cacheBust&&(t+=(/\?/.test(t)?"&":"?")+(new Date).getTime()),n.label=1;case 1:return n.trys.push([1,3,,4]),[4,S(t,i.fetchRequestInit,(function(t){var e=t.res,n=t.result;return r||(r=e.headers.get("Content-Type")||""),function(t){return t.split(/,/)[1]}(n)}))];case 2:return u=n.sent(),o=x(u,r),[3,4];case 3:return c=n.sent(),o=i.imagePlaceholder||"",a="Failed to fetch resource: ".concat(t),c&&(a="string"==typeof c?c:c.message),a&&console.warn(a),[3,4];case 4:return E[e]=o,[2,o]}}))}))}function P(t){return e(this,void 0,void 0,(function(){var e;return n(this,(function(n){return"data:,"===(e=t.toDataURL())?[2,t.cloneNode(!1)]:[2,l(e)]}))}))}function R(t,r){return e(this,void 0,void 0,(function(){var e,i,o,u;return n(this,(function(n){switch(n.label){case 0:return t.currentSrc?(e=document.createElement("canvas"),i=e.getContext("2d"),e.width=t.clientWidth,e.height=t.clientHeight,null==i||i.drawImage(t,0,0,e.width,e.height),[2,l(e.toDataURL())]):(o=t.poster,u=b(o),[4,C(o,u,r)]);case 1:return[2,l(n.sent())]}}))}))}function T(t){var r;return e(this,void 0,void 0,(function(){return n(this,(function(e){switch(e.label){case 0:return e.trys.push([0,3,,4]),(null===(r=null==t?void 0:t.contentDocument)||void 0===r?void 0:r.body)?[4,L(t.contentDocument.body,{},!0)]:[3,2];case 1:return[2,e.sent()];case 2:return[3,4];case 3:return e.sent(),[3,4];case 4:return[2,t.cloneNode(!1)]}}))}))}function A(t,e){return d(e,Element)&&(function(t,e){var n=e.style;if(n){var r=window.getComputedStyle(t);r.cssText?(n.cssText=r.cssText,n.transformOrigin=r.transformOrigin):o(r).forEach((function(i){var o=r.getPropertyValue(i);if("font-size"===i&&o.endsWith("px")){var u=Math.floor(parseFloat(o.substring(0,o.length-2)))-.1;o="".concat(u,"px")}d(t,HTMLIFrameElement)&&"display"===i&&"inline"===o&&(o="block"),"d"===i&&e.getAttribute("d")&&(o="path(".concat(e.getAttribute("d"),")")),n.setProperty(i,o,r.getPropertyPriority(i))}))}}(t,e),function(t,e){p(t,e,":before"),p(t,e,":after")}(t,e),function(t,e){d(t,HTMLTextAreaElement)&&(e.innerHTML=t.value),d(t,HTMLInputElement)&&e.setAttribute("value",t.value)}(t,e),function(t,e){if(d(t,HTMLSelectElement)){var n=e,r=Array.from(n.children).find((function(e){return t.value===e.getAttribute("value")}));r&&r.setAttribute("selected","")}}(t,e)),e}function L(t,r,i){return e(this,void 0,void 0,(function(){return n(this,(function(u){return i||!r.filter||r.filter(t)?[2,Promise.resolve(t).then((function(t){return function(t,r){return e(this,void 0,void 0,(function(){return n(this,(function(e){return d(t,HTMLCanvasElement)?[2,P(t)]:d(t,HTMLVideoElement)?[2,R(t,r)]:d(t,HTMLIFrameElement)?[2,T(t)]:[2,t.cloneNode(!1)]}))}))}(t,r)})).then((function(i){return function(t,r,i){var u,c;return e(this,void 0,void 0,(function(){var e;return n(this,(function(n){switch(n.label){case 0:return e=[],0===(e=null!=(a=t).tagName&&"SLOT"===a.tagName.toUpperCase()&&t.assignedNodes?o(t.assignedNodes()):d(t,HTMLIFrameElement)&&(null===(u=t.contentDocument)||void 0===u?void 0:u.body)?o(t.contentDocument.body.childNodes):o((null!==(c=t.shadowRoot)&&void 0!==c?c:t).childNodes)).length||d(t,HTMLVideoElement)?[2,r]:[4,e.reduce((function(t,e){return t.then((function(){return L(e,i)})).then((function(t){t&&r.appendChild(t)}))}),Promise.resolve())];case 1:return n.sent(),[2,r]}var a}))}))}(t,i,r)})).then((function(e){return A(t,e)})).then((function(t){return function(t,r){return e(this,void 0,void 0,(function(){var e,i,o,u,c,a,s,l,f,h,d,v,p;return n(this,(function(n){switch(n.label){case 0:if(0===(e=t.querySelectorAll?t.querySelectorAll("use"):[]).length)return[2,t];i={},p=0,n.label=1;case 1:return p<e.length?(o=e[p],(u=o.getAttribute("xlink:href"))?(c=t.querySelector(u),a=document.querySelector(u),c||!a||i[u]?[3,3]:(s=i,l=u,[4,L(a,r,!0)])):[3,3]):[3,4];case 2:s[l]=n.sent(),n.label=3;case 3:return p++,[3,1];case 4:if((f=Object.values(i)).length){for(h="http://www.w3.org/1999/xhtml",(d=document.createElementNS(h,"svg")).setAttribute("xmlns",h),d.style.position="absolute",d.style.width="0",d.style.height="0",d.style.overflow="hidden",d.style.display="none",v=document.createElementNS(h,"defs"),d.appendChild(v),p=0;p<f.length;p++)v.appendChild(f[p]);t.appendChild(d)}return[2,t]}}))}))}(t,r)}))]:[2,null]}))}))}var N=/url\((['"]?)([^'"]+?)\1\)/g,k=/url\([^)]+\)\s*format\((["']?)([^"']+)\1\)/g,I=/src:\s*(?:url\([^)]+\)\s*format\([^)]+\)[,;]\s*)+/g;function D(t,r,i,o,u){return e(this,void 0,void 0,(function(){var e,c,a,s;return n(this,(function(n){switch(n.label){case 0:return n.trys.push([0,5,,6]),e=i?function(t,e){if(t.match(/^[a-z]+:\/\//i))return t;if(t.match(/^\/\//))return window.location.protocol+t;if(t.match(/^[a-z]+:/i))return t;var n=document.implementation.createHTMLDocument(),r=n.createElement("base"),i=n.createElement("a");return n.head.appendChild(r),n.body.appendChild(i),e&&(r.href=e),i.href=t,i.href}(r,i):r,c=b(r),a=void 0,u?[4,u(e)]:[3,2];case 1:return s=n.sent(),a=x(s,c),[3,4];case 2:return[4,C(e,c,o)];case 3:a=n.sent(),n.label=4;case 4:return[2,t.replace((l=r,f=l.replace(/([.*+?^${}()|\[\]\/\\])/g,"\\$1"),new RegExp("(url\\(['\"]?)(".concat(f,")(['\"]?\\))"),"g")),"$1".concat(a,"$3"))];case 5:return n.sent(),[3,6];case 6:return[2,t]}var l,f}))}))}function M(t){return-1!==t.search(N)}function H(t,r,i){return e(this,void 0,void 0,(function(){var e,o;return n(this,(function(n){return M(t)?(e=function(t,e){var n=e.preferredFontFormat;return n?t.replace(I,(function(t){for(;;){var e=k.exec(t)||[],r=e[0],i=e[2];if(!i)return"";if(i===n)return"src: ".concat(r,";")}})):t}(t,i),o=function(t){var e=[];return t.replace(N,(function(t,n,r){return e.push(r),t})),e.filter((function(t){return!y(t)}))}(e),[2,o.reduce((function(t,e){return t.then((function(t){return D(t,e,r,i)}))}),Promise.resolve(e))]):[2,t]}))}))}function V(t,r,i){var o;return e(this,void 0,void 0,(function(){var e,u;return n(this,(function(n){switch(n.label){case 0:return(e=null===(o=r.style)||void 0===o?void 0:o.getPropertyValue(t))?[4,H(e,null,i)]:[3,2];case 1:return u=n.sent(),r.style.setProperty(t,u,r.style.getPropertyPriority(t)),[2,!0];case 2:return[2,!1]}}))}))}function F(t,r){return e(this,void 0,void 0,(function(){return n(this,(function(e){switch(e.label){case 0:return[4,V("background",t,r)];case 1:return e.sent()?[3,3]:[4,V("background-image",t,r)];case 2:e.sent(),e.label=3;case 3:return[4,V("mask",t,r)];case 4:return e.sent()?[3,6]:[4,V("mask-image",t,r)];case 5:e.sent(),e.label=6;case 6:return[2]}}))}))}function j(t,r){return e(this,void 0,void 0,(function(){var e,i,o;return n(this,(function(n){switch(n.label){case 0:return(e=d(t,HTMLImageElement))&&!y(t.src)||d(t,SVGImageElement)&&!y(t.href.baseVal)?[4,C(i=e?t.src:t.href.baseVal,b(i),r)]:[2];case 1:return o=n.sent(),[4,new Promise((function(n,r){t.onload=n,t.onerror=r;var i=t;i.decode&&(i.decode=n),"lazy"===i.loading&&(i.loading="eager"),e?(t.srcset="",t.src=o):t.href.baseVal=o}))];case 2:return n.sent(),[2]}}))}))}function q(t,r){return e(this,void 0,void 0,(function(){var e,i;return n(this,(function(n){switch(n.label){case 0:return e=o(t.childNodes),i=e.map((function(t){return U(t,r)})),[4,Promise.all(i).then((function(){return t}))];case 1:return n.sent(),[2]}}))}))}function U(t,r){return e(this,void 0,void 0,(function(){return n(this,(function(e){switch(e.label){case 0:return d(t,Element)?[4,F(t,r)]:[3,4];case 1:return e.sent(),[4,j(t,r)];case 2:return e.sent(),[4,q(t,r)];case 3:e.sent(),e.label=4;case 4:return[2]}}))}))}var O={};function B(t){return e(this,void 0,void 0,(function(){var e,r;return n(this,(function(n){switch(n.label){case 0:return null!=(e=O[t])?[2,e]:[4,fetch(t)];case 1:return[4,n.sent().text()];case 2:return r=n.sent(),e={url:t,cssText:r},O[t]=e,[2,e]}}))}))}function z(t,r){return e(this,void 0,void 0,(function(){var i,o,u,c,a=this;return n(this,(function(s){return i=t.cssText,o=/url\(["']?([^"')]+)["']?\)/g,u=i.match(/url\([^)]+\)/g)||[],c=u.map((function(u){return e(a,void 0,void 0,(function(){var e;return n(this,(function(n){return(e=u.replace(o,"$1")).startsWith("https://")||(e=new URL(e,t.url).href),[2,S(e,r.fetchRequestInit,(function(t){var e=t.result;return i=i.replace(u,"url(".concat(e,")")),[u,e]}))]}))}))})),[2,Promise.all(c).then((function(){return i}))]}))}))}function W(t){if(null==t)return[];for(var e=[],n=t.replace(/(\/\*[\s\S]*?\*\/)/gi,""),r=new RegExp("((@.*?keyframes [\\s\\S]*?){([\\s\\S]*?}\\s*?)})","gi");;){if(null===(u=r.exec(n)))break;e.push(u[0])}n=n.replace(r,"");for(var i=/@import[\s\S]*?url\([^)]*\)[\s\S]*?;/gi,o=new RegExp("((\\s*?(?:\\/\\*[\\s\\S]*?\\*\\/)?\\s*?@media[\\s\\S]*?){([\\s\\S]*?)}\\s*?})|(([\\s\\S]*?){([\\s\\S]*?)})","gi");;){var u;if(null===(u=i.exec(n))){if(null===(u=o.exec(n)))break;i.lastIndex=o.lastIndex}else o.lastIndex=i.lastIndex;e.push(u[0])}return e}function $(t,r){return e(this,void 0,void 0,(function(){var e,i;return n(this,(function(n){return e=[],i=[],t.forEach((function(e){if("cssRules"in e)try{o(e.cssRules||[]).forEach((function(t,n){if(t.type===CSSRule.IMPORT_RULE){var o=n+1,u=B(t.href).then((function(t){return z(t,r)})).then((function(t){return W(t).forEach((function(t){try{e.insertRule(t,t.startsWith("@import")?o+=1:e.cssRules.length)}catch(e){console.error("Error inserting rule from remote css",{rule:t,error:e})}}))})).catch((function(t){console.error("Error loading remote css",t.toString())}));i.push(u)}}))}catch(o){var n=t.find((function(t){return null==t.href}))||document.styleSheets[0];null!=e.href&&i.push(B(e.href).then((function(t){return z(t,r)})).then((function(t){return W(t).forEach((function(t){n.insertRule(t,e.cssRules.length)}))})).catch((function(t){console.error("Error loading remote stylesheet",t)}))),console.error("Error inlining remote css file",o)}})),[2,Promise.all(i).then((function(){return t.forEach((function(t){if("cssRules"in t)try{o(t.cssRules||[]).forEach((function(t){e.push(t)}))}catch(e){console.error("Error while reading CSS rules from ".concat(t.href),e)}})),e}))]}))}))}function _(t){return t.filter((function(t){return t.type===CSSRule.FONT_FACE_RULE})).filter((function(t){return M(t.style.getPropertyValue("src"))}))}function G(t,r){return e(this,void 0,void 0,(function(){return n(this,(function(e){switch(e.label){case 0:if(null==t.ownerDocument)throw new Error("Provided element is not within a Document");return[4,$(o(t.ownerDocument.styleSheets),r)];case 1:return[2,_(e.sent())]}}))}))}function J(t,r){return e(this,void 0,void 0,(function(){var e;return n(this,(function(n){switch(n.label){case 0:return[4,G(t,r)];case 1:return e=n.sent(),[4,Promise.all(e.map((function(t){var e=t.parentStyleSheet?t.parentStyleSheet.href:null;return H(t.cssText,e,r)})))];case 2:return[2,n.sent().join("\n")]}}))}))}function Q(t,r){return e(this,void 0,void 0,(function(){var e,i,o,u,c;return n(this,(function(n){switch(n.label){case 0:return null==r.fontEmbedCSS?[3,1]:(i=r.fontEmbedCSS,[3,5]);case 1:return r.skipFonts?(o=null,[3,4]):[3,2];case 2:return[4,J(t,r)];case 3:o=n.sent(),n.label=4;case 4:i=o,n.label=5;case 5:return(e=i)&&(u=document.createElement("style"),c=document.createTextNode(e),u.appendChild(c),t.firstChild?t.insertBefore(u,t.firstChild):t.appendChild(u)),[2]}}))}))}function X(t,r){return void 0===r&&(r={}),e(this,void 0,void 0,(function(){var e,i,o,u;return n(this,(function(n){switch(n.label){case 0:return e=c(t,r),i=e.width,o=e.height,[4,L(t,r,!0)];case 1:return[4,Q(u=n.sent(),r)];case 2:return n.sent(),[4,U(u,r)];case 3:return n.sent(),function(t,e){var n=t.style;e.backgroundColor&&(n.backgroundColor=e.backgroundColor),e.width&&(n.width="".concat(e.width,"px")),e.height&&(n.height="".concat(e.height,"px"));var r=e.style;null!=r&&Object.keys(r).forEach((function(t){n[t]=r[t]}))}(u,r),[4,h(u,i,o)];case 4:return[2,n.sent()]}}))}))}function K(t,r){return void 0===r&&(r={}),e(this,void 0,void 0,(function(){var e,i,o,u,s,f,h,d,v;return n(this,(function(n){switch(n.label){case 0:return e=c(t,r),i=e.width,o=e.height,[4,X(t,r)];case 1:return[4,l(n.sent())];case 2:return u=n.sent(),s=document.createElement("canvas"),f=s.getContext("2d"),h=r.pixelRatio||function(){var t,e;try{e=process}catch(t){}var n=e&&e.env?e.env.devicePixelRatio:null;return n&&(t=parseInt(n,10),Number.isNaN(t)&&(t=1)),t||window.devicePixelRatio||1}(),d=r.canvasWidth||i,v=r.canvasHeight||o,s.width=d*h,s.height=v*h,r.skipAutoScale||function(t){(t.width>a||t.height>a)&&(t.width>a&&t.height>a?t.width>t.height?(t.height*=a/t.width,t.width=a):(t.width*=a/t.height,t.height=a):t.width>a?(t.height*=a/t.width,t.width=a):(t.width*=a/t.height,t.height=a))}(s),s.style.width="".concat(d),s.style.height="".concat(v),r.backgroundColor&&(f.fillStyle=r.backgroundColor,f.fillRect(0,0,s.width,s.height)),f.drawImage(u,0,0,s.width,s.height),[2,s]}}))}))}t.getFontEmbedCSS=function(t,r){return void 0===r&&(r={}),e(this,void 0,void 0,(function(){return n(this,(function(e){return[2,J(t,r)]}))}))},t.toBlob=function(t,r){return void 0===r&&(r={}),e(this,void 0,void 0,(function(){return n(this,(function(e){switch(e.label){case 0:return[4,K(t,r)];case 1:return[4,s(e.sent())];case 2:return[2,e.sent()]}}))}))},t.toCanvas=K,t.toJpeg=function(t,r){return void 0===r&&(r={}),e(this,void 0,void 0,(function(){return n(this,(function(e){switch(e.label){case 0:return[4,K(t,r)];case 1:return[2,e.sent().toDataURL("image/jpeg",r.quality||1)]}}))}))},t.toPixelData=function(t,r){return void 0===r&&(r={}),e(this,void 0,void 0,(function(){var e,i,o,u;return n(this,(function(n){switch(n.label){case 0:return e=c(t,r),i=e.width,o=e.height,[4,K(t,r)];case 1:return u=n.sent(),[2,u.getContext("2d").getImageData(0,0,i,o).data]}}))}))},t.toPng=function(t,r){return void 0===r&&(r={}),e(this,void 0,void 0,(function(){return n(this,(function(e){switch(e.label){case 0:return[4,K(t,r)];case 1:return[2,e.sent().toDataURL()]}}))}))},t.toSvg=X}));

data/app/assets/stylesheets/hr_lite/hr_lite.css

@@ -525,6 +525,7 @@ a.hrl-tree__name { display: inline-flex; align-items: center; min-height: var(--
   display: flex; align-items: center; justify-content: center; font: 700 calc(34 * var(--u)) var(--hrl-card-display, var(--hrl-font)); color: #64748B;
 }
 .hrl-idcard__photo img { width: 100%; height: 100%; object-fit: cover; display: block; }
+.hrl-photo-zoom { width: 100%; min-height: var(--hrl-target); accent-color: var(--hrl-accent); }
 .hrl-idcard__who { margin-top: calc(124 * var(--u)); text-align: center; padding: 0 calc(24 * var(--u)); }
 .hrl-idcard__name { font: 800 calc(25 * var(--u))/1.1 var(--hrl-card-display, var(--hrl-font)); letter-spacing: -.02em; text-wrap: balance; }
 .hrl-idcard__role { margin-top: calc(6 * var(--u)); font: 500 calc(13 * var(--u))/1.3 var(--hrl-card-body, var(--hrl-font)); color: #334155; }

data/app/controllers/hr_lite/admin/attendances_controller.rb

@@ -111,6 +111,35 @@ module HrLite
         end
       end
 
+      # HR sets a locked slot from today for the period.
+      def slot
+        @employee = find_manageable_employee
+        period = params[:period].to_s
+        slot = AttendanceSlot.new(user_id: @employee.id, set_by_id: hr_current_user.id, period: period,
+                                  start_minute: params[:start_minute].to_i, starts_on: Date.current,
+                                  ends_on: AttendanceSlot.ends_on_for(period, Date.current))
+        flash_for = slot.save ? { notice: "Slot set to #{AttendanceSlot.label(slot.start_minute)}." } : { alert: slot.errors.full_messages.to_sentence }
+        redirect_to admin_attendance_path(@employee.id), flash_for
+      end
+
+      # Lets the employee pick a new slot themselves.
+      def unlock_slot
+        @employee = find_manageable_employee
+        AttendanceSlot.where(user_id: @employee.id, locked: true).where(ends_on: Date.current..).find_each { |s| s.update!(locked: false) }
+        redirect_to admin_attendance_path(@employee.id), notice: "Slot unlocked. #{hr_display_name(@employee)} can pick a new one."
+      end
+
+      def remove_penalty
+        @employee = find_manageable_employee
+        penalty = AttendancePenalty.active.where(user_id: @employee.id).find(params[:penalty_id])
+        reason = params[:removal_reason].to_s.strip
+        month = penalty.date.strftime("%Y-%m")
+        return redirect_to admin_attendance_path(@employee.id, month: month), alert: "A reason is required." if reason.blank?
+
+        penalty.update!(removed_at: Time.current, removed_by_id: hr_current_user.id, removal_reason: reason)
+        redirect_to admin_attendance_path(@employee.id, month: month), notice: "Penalty removed."
+      end
+
       private
 
       # Viewing somebody's month and rewriting their punches are different

data/app/controllers/hr_lite/admin/employees_controller.rb

@@ -115,7 +115,8 @@ module HrLite
           :user_id, :manager_id, :designation, :date_of_birth, :date_of_joining,
           :date_of_exit, :probation_until, :department, :work_location, :pan_number, :pf_uan, :esi_number,
           :bank_account_number, :bank_ifsc, :bank_name, :tax_regime, :declared_annual_deductions,
-          :fy_opening_gross, :fy_opening_tds, :blood_group, :emergency_contact
+          :fy_opening_gross, :fy_opening_tds, :blood_group, :emergency_contact,
+          :buffer_minutes, :buffer_reason, :buffer_note
         )
       end
 

data/app/controllers/hr_lite/attendance_controller.rb

@@ -25,6 +25,29 @@ module HrLite
       punch(:check_out)
     end
 
+    # Saving locks the slot for the period; a locked one only HR changes.
+    def slot
+      raise ActiveRecord::RecordNotFound unless HrLite.config.attendance_slots
+
+      period = params[:period].to_s
+      to = AttendanceSlot.ends_on_for(period, Date.current)
+      if AttendanceSlot.where(user_id: hr_current_user.id, locked: true).overlapping(Date.current, to).exists?
+        return redirect_to attendance_path, alert: "Your slot is locked for that period. Ask HR to change it."
+      end
+      # Today's penalty was priced on the slot at check-in; picking one now would rewrite it.
+      if AttendanceRecord.where(user_id: hr_current_user.id, date: Date.current).where.not(check_in_at: nil).exists?
+        return redirect_to attendance_path, alert: "Pick your slot before checking in."
+      end
+
+      slot = AttendanceSlot.new(user_id: hr_current_user.id, set_by_id: hr_current_user.id, period: period,
+                                start_minute: params[:start_minute].to_i, starts_on: Date.current, ends_on: to)
+      if slot.save
+        redirect_to attendance_path, notice: "Slot #{AttendanceSlot.label(slot.start_minute)} saved and locked until #{to.strftime('%d %b')}."
+      else
+        redirect_to attendance_path, alert: slot.errors.full_messages.to_sentence
+      end
+    end
+
     private
 
     def punch(kind)

data/app/jobs/hr_lite/attendance_close_job.rb

@@ -27,11 +27,23 @@ module HrLite
           tell(user, date, "attendance.short_day",
                "You worked #{(record.worked_duration / 3600.0).round(1)} of #{record.required_hours}h on #{day} — marked half day")
         end
+        penalize_short_day(record) if record&.check_out_at
       end
     end
 
     private
 
+    # Out before the slot's required checkout: +30 min on the next working day.
+    def penalize_short_day(record)
+      return unless HrLite.config.attendance_slots && record.check_out_at < record.required_check_out_at
+
+      next_day = AttendancePenalty.next_working_days(record.date, 1).first
+      AttendancePenalty.find_or_create_by!(attendance_record: record, reason: "short_day", date: next_day) do |p|
+        p.user_id = record.user_id
+        p.minutes = AttendanceSlot::STEP_MINUTES
+      end
+    end
+
     def tell(user, date, event, title)
       rule = HrLite.config.self_regularization
       body = if rule

data/app/models/hr_lite/attendance_penalty.rb

@@ -0,0 +1,30 @@
+module HrLite
+  # Minutes added to one day's required checkout. Never deleted: HR removes
+  # one with a reason and the row stays as the record.
+  class AttendancePenalty < ApplicationRecord
+    include Audited
+
+    REASONS = {
+      "late" => "Late check-in",
+      "late_carry" => "Checked in after 11:00",
+      "short_day" => "Left before the required checkout"
+    }.freeze
+
+    belongs_to :user, class_name: HrLite.config.user_class
+    belongs_to :attendance_record
+    belongs_to :removed_by, class_name: HrLite.config.user_class, optional: true
+
+    validates :reason, inclusion: { in: REASONS.keys }
+    validates :minutes, numericality: { greater_than: 0 }
+    validates :removal_reason, presence: true, if: :removed_at
+
+    scope :active, -> { where(removed_at: nil) }
+
+    def self.next_working_days(date, count)
+      calendar = WorkingCalendar.new((date + 1)..(date + 31))
+      ((date + 1)..(date + 31)).select { |d| calendar.working_day?(d) }.first(count)
+    end
+
+    def label = REASONS.fetch(reason)
+  end
+end

data/app/models/hr_lite/attendance_record.rb

@@ -3,8 +3,9 @@ module HrLite
     STATUSES = %w[present half_day].freeze
     AUTO_CHECKOUT_NOTE = "Auto check-out: no check-out punched".freeze
     SHORT_DAY_NOTE = "Short day: under the required hours".freeze
-    # Half days the close job set (not HR); an approved ticket lifts them.
-    AUTO_NOTES = [ AUTO_CHECKOUT_NOTE, SHORT_DAY_NOTE ].freeze
+    LATE_HALF_DAY_NOTE = "Half day: checked in after 11:30".freeze
+    # Half days the system set (not HR); an approved ticket lifts them.
+    AUTO_NOTES = [ AUTO_CHECKOUT_NOTE, SHORT_DAY_NOTE, LATE_HALF_DAY_NOTE ].freeze
     # Check-in and check-out further apart than this are called out on the board.
     PUNCH_GAP_ALERT_M = 500
 
@@ -45,6 +46,15 @@ module HrLite
       !!(hours && worked_duration && worked_duration < hours.hours)
     end
 
+    # config.attendance_slots: slot start + 8h30 + the day's active penalties.
+    def required_check_out_at
+      return unless HrLite.config.attendance_slots && check_in_at
+
+      extra = AttendancePenalty.active.where(user_id: user_id, date: date).sum(:minutes)
+      date.in_time_zone(HrLite.config.time_zone) +
+        (AttendanceSlot.start_minute_for(user_id, date) + AttendanceSlot::DAY_MINUTES + extra).minutes
+    end
+
     # Metres between where the day was checked in and checked out.
     def punch_gap_m
       return unless check_in_lat && check_in_lng && check_out_lat && check_out_lng

data/app/models/hr_lite/attendance_slot.rb

@@ -0,0 +1,38 @@
+module HrLite
+  # The check-in slot an employee commits to for a day, week or month.
+  # Saving locks it; only an attendance manager changes or unlocks it.
+  class AttendanceSlot < ApplicationRecord
+    include Audited
+
+    START_MINUTES = [ 540, 570, 600, 630 ].freeze # 09:00 09:30 10:00 10:30
+    DEFAULT_START_MINUTE = 600
+    PERIODS = { "day" => "Today", "week" => "This week", "month" => "This month" }.freeze
+    DAY_MINUTES = 510 # 8h30m from slot to checkout
+    GRACE_MINUTES = 5
+    STEP_MINUTES = 30
+    CARRY_AFTER_MINUTE = 660 # 11:00 — +1h on the next 2 working days
+    HALF_DAY_AFTER_MINUTE = 690 # 11:30 — the day is a half day
+
+    belongs_to :user, class_name: HrLite.config.user_class
+
+    validates :start_minute, inclusion: { in: START_MINUTES }
+    validates :period, inclusion: { in: PERIODS.keys }
+    validates :starts_on, :ends_on, presence: true
+
+    scope :overlapping, ->(from, to) { where("starts_on <= ? AND ends_on >= ?", to, from) }
+
+    def self.current(user_id, date) = where(user_id: user_id).overlapping(date, date).order(:created_at).last
+    def self.start_minute_for(user_id, date) = current(user_id, date)&.start_minute || DEFAULT_START_MINUTE
+
+    def self.ends_on_for(period, from)
+      { "week" => from.end_of_week(:monday), "month" => from.end_of_month }.fetch(period, from)
+    end
+
+    # 0 within grace, then +30 for every started half hour: 6–35 late = 30, 36–65 = 60.
+    def self.penalty_minutes(late)
+      late <= GRACE_MINUTES ? 0 : STEP_MINUTES * ((late - GRACE_MINUTES) / STEP_MINUTES.to_f).ceil
+    end
+
+    def self.label(minute) = format("%02d:%02d", *minute.divmod(60))
+  end
+end

data/app/models/hr_lite/employee_profile.rb

@@ -20,6 +20,17 @@ module HrLite
     # read as zero income for the months it cannot see.
     encrypted_money :declared_annual_deductions, :fy_opening_gross, :fy_opening_tds
 
+    # HR-granted late allowance; it delays the penalty clock. Colleagues see
+    # the category, only HR sees the note (encrypted: it can be medical).
+    BUFFER_MINUTES = [ 60, 120 ].freeze
+    BUFFER_REASONS = { "parental_care" => "Parental care", "medical" => "Medical",
+                       "health" => "Health", "other" => "Other" }.freeze
+    encrypts :buffer_note
+    normalizes :buffer_minutes, with: ->(v) { v.presence }
+    validates :buffer_minutes, inclusion: { in: BUFFER_MINUTES }, allow_nil: true
+    validates :buffer_reason, inclusion: { in: BUFFER_REASONS.keys }, if: :buffer_minutes
+    validates :buffer_note, presence: true, if: -> { buffer_minutes && buffer_reason == "other" }
+
     TAX_REGIMES = %w[new old].freeze
     BLOOD_GROUPS = %w[A+ A- B+ B- AB+ AB- O+ O-].freeze
     normalizes :blood_group, with: ->(v) { v.presence } # the "Not set" chip posts ""

data/app/services/hr_lite/attendance_puncher.rb

@@ -53,6 +53,7 @@ module HrLite
 
         apply_geo_flags(record)
         record.save!
+        apply_slot_rules(record) if @kind == :check_in && HrLite.config.attendance_slots
       end
       notify_if_flagged(record)
       Result.new(record: record)
@@ -86,6 +87,25 @@ module HrLite
       "Already checked in at #{record.check_in_at.in_time_zone(HrLite.config.time_zone).strftime('%H:%M')}."
     end
 
+    # Late ladder against slot + buffer; after 11:00 also +1h on the next two
+    # working days; after 11:30 the day is a half day. The buffer shifts all three.
+    def apply_slot_rules(record)
+      local = record.check_in_at.in_time_zone(HrLite.config.time_zone)
+      arrived = local.hour * 60 + local.min - EmployeeProfile.where(user_id: @user.id).pick(:buffer_minutes).to_i
+      late = AttendanceSlot.penalty_minutes(arrived - AttendanceSlot.start_minute_for(@user.id, record.date))
+      penalize(record, record.date, late, "late") if late.positive?
+      return if arrived <= AttendanceSlot::CARRY_AFTER_MINUTE
+
+      AttendancePenalty.next_working_days(record.date, 2).each { |day| penalize(record, day, 60, "late_carry") }
+      return if arrived <= AttendanceSlot::HALF_DAY_AFTER_MINUTE
+
+      record.update!(status: "half_day", regularization_note: AttendanceRecord::LATE_HALF_DAY_NOTE)
+    end
+
+    def penalize(record, date, minutes, reason)
+      AttendancePenalty.create!(user_id: @user.id, date: date, minutes: minutes, reason: reason, attendance_record: record)
+    end
+
     def apply_geo_flags(record)
       label = @kind == :check_in ? "Check-in" : "Check-out"
 

data/app/views/hr_lite/admin/attendances/_slot.html.erb

@@ -0,0 +1,24 @@
+<% slot = HrLite::AttendanceSlot.current(employee.id, Date.current) %>
+<section class="hrl-card">
+  <h2 class="hrl-card__title">Check-in slot</h2>
+  <p class="hrl-small">
+    <span class="hrl-badge"><%= HrLite::AttendanceSlot.label(slot&.start_minute || HrLite::AttendanceSlot::DEFAULT_START_MINUTE) %><%= " (default)" unless slot %></span>
+    <% if slot %><%= slot.locked? ? "Locked" : "Unlocked" %> till <%= slot.ends_on.strftime("%-d %b") %><% end %>
+  </p>
+  <% if slot&.locked? %>
+    <%= form_with url: hr_lite.unlock_slot_admin_attendance_path(employee.id), method: :post, local: true do %>
+      <button type="submit" class="hrl-btn">Unlock so they can pick again</button>
+    <% end %>
+  <% end %>
+  <%= form_with url: hr_lite.slot_admin_attendance_path(employee.id), method: :post, local: true, class: "hrl-mt" do %>
+    <div class="hrl-field">
+      <label for="hrl-admin-slot-start">Set slot</label>
+      <%= select_tag :start_minute, options_for_select(HrLite::AttendanceSlot::START_MINUTES.map { |m| [ HrLite::AttendanceSlot.label(m), m ] }, slot&.start_minute || HrLite::AttendanceSlot::DEFAULT_START_MINUTE), id: "hrl-admin-slot-start" %>
+    </div>
+    <div class="hrl-field">
+      <label for="hrl-admin-slot-period">For</label>
+      <%= select_tag :period, options_for_select(HrLite::AttendanceSlot::PERIODS.invert), id: "hrl-admin-slot-period" %>
+    </div>
+    <button type="submit" class="hrl-btn">Set and lock</button>
+  <% end %>
+</section>

data/app/views/hr_lite/admin/attendances/show.html.erb

@@ -24,6 +24,11 @@
   <p class="hrl-small hrl-muted hrl-mt">Tap a date to fix its punches.</p>
 </section>
 
+<% if HrLite.config.attendance_slots %>
+  <%= render "slot", employee: @employee %>
+  <%= render "hr_lite/attendance/penalties", user: @employee, month: @month, removable: @employee.id != hr_current_user.id %>
+<% end %>
+
 <% if @punches.any? %>
   <section class="hrl-card">
     <h2 class="hrl-card__title">Where they punched</h2>

data/app/views/hr_lite/admin/employees/_form.html.erb

@@ -74,6 +74,17 @@
       <%= f.label :probation_until, "On probation until (blank = not on probation)" %>
       <%= f.date_field :probation_until %>
     </div>
+    <% if HrLite.config.attendance_slots %>
+      <div class="hrl-field">
+        <%= f.label :buffer_minutes, "Late buffer (delays late penalties; colleagues see the reason category)" %>
+        <%= f.select :buffer_minutes, HrLite::EmployeeProfile::BUFFER_MINUTES.map { |m| [ "#{m / 60}h", m ] }, include_blank: "None" %>
+      </div>
+      <div class="hrl-field">
+        <%= f.label :buffer_reason, "Buffer reason" %>
+        <%= f.select :buffer_reason, HrLite::EmployeeProfile::BUFFER_REASONS.invert, include_blank: "Choose one" %>
+      </div>
+      <div class="hrl-field"><%= f.label :buffer_note, "Buffer note (HR only; required for Other)" %><%= f.text_area :buffer_note, rows: 2 %></div>
+    <% end %>
     <div class="hrl-field">
       <%= f.label :date_of_exit, "Date of exit (leave blank while employed)" %>
       <%= f.date_field :date_of_exit %>

data/app/views/hr_lite/attendance/_penalties.html.erb

@@ -0,0 +1,25 @@
+<% penalties = HrLite::AttendancePenalty.where(user_id: user.id, date: month.all_month).order(:date, :id) %>
+<section class="hrl-card">
+  <h2 class="hrl-card__title">Penalties in <%= month.strftime("%B") %></h2>
+  <% if penalties.empty? %>
+    <p class="hrl-card--empty">No penalties this month.</p>
+  <% end %>
+  <% penalties.each do |penalty| %>
+    <div class="hrl-feed__item hrl-small">
+      <div class="hrl-feed__body">
+        <strong><%= penalty.date.strftime("%a %-d %b") %></strong> ·
+        <span class="<%= class_names("hrl-badge", penalty.removed_at ? "hrl-badge--muted" : "hrl-badge--warn") %>">+<%= penalty.minutes %> min</span>
+        <%= penalty.label %>
+        <% if penalty.removed_at %>
+          <div class="hrl-muted">Removed by HR: <%= penalty.removal_reason %></div>
+        <% elsif local_assigns[:removable] %>
+          <%= form_with url: hr_lite.remove_penalty_admin_attendance_path(user.id, penalty_id: penalty.id), method: :post, local: true, class: "hrl-row" do %>
+            <label class="hrl-sr-only" for="hrl-remove-<%= penalty.id %>">Reason to remove</label>
+            <input type="text" class="hrl-input" name="removal_reason" id="hrl-remove-<%= penalty.id %>" required placeholder="Reason to remove">
+            <button type="submit" class="hrl-btn">Remove</button>
+          <% end %>
+        <% end %>
+      </div>
+    </div>
+  <% end %>
+</section>

data/app/views/hr_lite/attendance/_punch_card.html.erb

@@ -28,6 +28,9 @@
       <span class="hrl-muted">Not checked in yet.</span>
     <% end %>
   </div>
+  <% if HrLite.config.attendance_slots %>
+    <%= render "hr_lite/attendance/slot", record: record %>
+  <% end %>
   <% if record&.flagged? %>
     <p class="hrl-small">Flagged: <%= record.flag_note %></p>
   <% end %>

data/app/views/hr_lite/attendance/_slot.html.erb

@@ -0,0 +1,33 @@
+<% slot = HrLite::AttendanceSlot.current(hr_current_user.id, Date.current)
+   start = slot&.start_minute || HrLite::AttendanceSlot::DEFAULT_START_MINUTE
+   due = record&.required_check_out_at %>
+<div class="hrl-row hrl-row--mb hrl-small">
+  <span class="hrl-badge">Slot <%= HrLite::AttendanceSlot.label(start) %><%= " (default)" unless slot %></span>
+  <% if slot&.locked? %><span class="hrl-muted">Locked till <%= slot.ends_on.strftime("%-d %b") %></span><% end %>
+</div>
+<% if due && record.check_out_at %>
+  <% short = due - record.check_out_at %>
+  <p class="hrl-small">Checkout was due <%= due.strftime("%H:%M") %>.
+    <% if short.positive? %><span class="hrl-badge hrl-badge--bad">Short by <%= hrl_duration(short) %></span> +30 min goes on your next working day.<% end %></p>
+<% elsif due %>
+  <% left = due - Time.current %>
+  <p class="hrl-small">Checked in <%= record.check_in_at.strftime("%H:%M") %> · checkout at <strong><%= due.strftime("%H:%M") %></strong> ·
+    <%= left.positive? ? "#{hrl_duration(left)} left" : "you can check out" %></p>
+<% end %>
+<% HrLite::AttendancePenalty.active.where(user_id: hr_current_user.id, date: Date.current).each do |penalty| %>
+  <p class="hrl-small"><span class="hrl-badge hrl-badge--warn">+<%= penalty.minutes %> min</span> <%= penalty.label %></p>
+<% end %>
+<% unless slot&.locked? || record&.check_in_at %>
+  <%= form_with url: hr_lite.slot_attendance_path, method: :post, local: true, class: "hrl-mt" do %>
+    <div class="hrl-field">
+      <label for="hrl-slot-start">Check-in slot</label>
+      <%= select_tag :start_minute, options_for_select(HrLite::AttendanceSlot::START_MINUTES.map { |m| [ "#{HrLite::AttendanceSlot.label(m)} – out #{HrLite::AttendanceSlot.label(m + HrLite::AttendanceSlot::DAY_MINUTES)}", m ] }, start), id: "hrl-slot-start" %>
+    </div>
+    <div class="hrl-field">
+      <label for="hrl-slot-period">For</label>
+      <%= select_tag :period, options_for_select(HrLite::AttendanceSlot::PERIODS.invert), id: "hrl-slot-period" %>
+    </div>
+    <button type="submit" class="hrl-btn hrl-btn--block">Save and lock slot</button>
+    <p class="hrl-small hrl-muted">Once saved, only HR can change it for that period.</p>
+  <% end %>
+<% end %>

data/app/views/hr_lite/attendance/show.html.erb

@@ -25,6 +25,10 @@
     · <a href="<%= hr_lite.regularization_requests_path %>">My tickets</a></p>
 </section>
 
+<% if HrLite.config.attendance_slots %>
+  <%= render "hr_lite/attendance/penalties", user: hr_current_user, month: @month %>
+<% end %>
+
 <% if @day %>
   <% rec, leave = @day_info.record, @day_info.leave
      part = rec&.half_day_part.presence || leave&.half_day_part.presence

data/app/views/hr_lite/id_cards/show.html.erb

@@ -23,7 +23,7 @@
         </div>
         <div class="hrl-idcard__photo">
           <% if @profile.photo.attached? %>
-            <img src="<%= Rails.application.routes.url_helpers.rails_blob_path(@profile.photo, disposition: "inline", only_path: true) %>" alt="<%= hr_display_name(@user) %>">
+            <img src="<%= Rails.application.routes.url_helpers.rails_storage_proxy_path(@profile.photo, disposition: "inline", only_path: true) %>" alt="<%= hr_display_name(@user) %>">
           <% else %>
             <span><%= hr_display_name(@user).to_s.scan(/\b[[:alpha:]]/).first(2).join.upcase %></span>
           <% end %>
@@ -62,6 +62,7 @@
 
   <div class="hrl-idcard-actions">
     <button type="button" class="hrl-btn hrl-btn--primary" data-hrl-print>Print</button>
+    <button type="button" class="hrl-btn" data-hrl-share="id-card-<%= @profile.employee_code %>.png">Share</button>
     <% if own && @print_requested %>
       <p class="hrl-small hrl-muted">Printed card requested on <%= @print_requested.to_date.strftime("%d %b %Y") %>.</p>
     <% elsif own %>
@@ -72,7 +73,11 @@
       <%= form_with url: hr_lite.id_card_photo_path, method: :patch, multipart: true, class: "hrl-row" do |f| %>
         <div class="hrl-field">
           <label for="photo">Change photo</label>
-          <%= f.file_field :photo, id: "photo", accept: HrLite::EmployeeProfile::PHOTO_TYPES.join(","), required: true %>
+          <%= f.file_field :photo, id: "photo", accept: HrLite::EmployeeProfile::PHOTO_TYPES.join(","), required: true, data: { hrl_photo_input: true } %>
+          <div data-hrl-photo-adjust hidden>
+            <label for="photo_zoom">Zoom — drag the photo on the card to move it</label>
+            <input type="range" id="photo_zoom" class="hrl-photo-zoom" min="1" max="3" step="0.01" value="1" data-hrl-photo-zoom>
+          </div>
           <p class="hrl-hint">Face centred, plain background. JPG, PNG or WebP, under <%= HrLite::EmployeeProfile::PHOTO_MAX_BYTES / 1.megabyte %> MB.</p>
         </div>
         <%= f.submit "Upload photo", class: "hrl-btn" %>
@@ -83,4 +88,5 @@
 
 <% content_for :scripts do %>
   <%= javascript_include_tag "hr_lite/print", defer: true %>
+  <%= javascript_include_tag "hr_lite/vendor/html_to_image", "hr_lite/share", "hr_lite/photo_crop", defer: true %>
 <% end %>

data/app/views/hr_lite/team/show.html.erb

@@ -30,7 +30,8 @@
             <tr>
               <td data-label="Name">
                 <span><%= tag.strong hr_display_name(row.user), title: ("On leave: #{row.leave.date_range_label}" if row.leave) %><% if row.profile&.designation.present? %>
-                  <span class="hrl-small hrl-muted"> · <%= row.profile.designation %></span><% end %></span>
+                  <span class="hrl-small hrl-muted"> · <%= row.profile.designation %></span><% end %><% if HrLite.config.attendance_slots && row.profile&.buffer_minutes %>
+                  <span class="hrl-badge hrl-badge--muted">+<%= row.profile.buffer_minutes / 60 %>h buffer · <%= HrLite::EmployeeProfile::BUFFER_REASONS[row.profile.buffer_reason] %></span><% end %></span>
               </td>
               <td data-label="Status"><%= hrl_team_status(row) %></td>
               <td data-label="Hours <%= @date == Date.current ? "today" : "that day" %>" class="hrl-num"><%= hrl_duration(row.day_seconds) %></td>

data/config/routes.rb

@@ -7,6 +7,7 @@ HrLite::Engine.routes.draw do
   resource :attendance, only: :show, controller: "attendance" do
     post :check_in
     post :check_out
+    post :slot
   end
 
   resources :leave_requests, only: %i[index show new create] do
@@ -59,6 +60,7 @@ HrLite::Engine.routes.draw do
     get "overview", to: "overview#index"
     resources :attendances, only: %i[index show update], param: :user_id do
       collection { get :week }
+      member { post :slot; post :unlock_slot; post :remove_penalty }
     end
     resources :leave_requests, only: %i[index show new create edit update] do
       member { post :approve; post :reject; post :cancel }

data/db/migrate/20261013090000_create_hr_lite_attendance_slots.rb

@@ -0,0 +1,16 @@
+class CreateHrLiteAttendanceSlots < ActiveRecord::Migration[8.1]
+  def change
+    create_table :hr_lite_attendance_slots do |t|
+      t.bigint :user_id, null: false
+      t.date :starts_on, null: false
+      t.date :ends_on, null: false
+      t.string :period, null: false
+      t.integer :start_minute, null: false
+      t.boolean :locked, null: false, default: true
+      t.bigint :set_by_id
+
+      t.timestamps
+    end
+    add_index :hr_lite_attendance_slots, [ :user_id, :starts_on, :ends_on ]
+  end
+end

data/db/migrate/20261013090100_create_hr_lite_attendance_penalties.rb

@@ -0,0 +1,19 @@
+class CreateHrLiteAttendancePenalties < ActiveRecord::Migration[8.1]
+  def change
+    create_table :hr_lite_attendance_penalties do |t|
+      t.bigint :user_id, null: false
+      t.date :date, null: false
+      t.integer :minutes, null: false
+      t.string :reason, null: false
+      t.bigint :attendance_record_id, null: false
+      t.datetime :removed_at
+      t.bigint :removed_by_id
+      t.text :removal_reason
+
+      t.timestamps
+    end
+    add_index :hr_lite_attendance_penalties, [ :user_id, :date ]
+    add_index :hr_lite_attendance_penalties, [ :attendance_record_id, :reason, :date ], unique: true,
+              name: "index_hr_lite_attendance_penalties_once"
+  end
+end

data/db/migrate/20261013090200_add_buffer_to_hr_lite_employee_profiles.rb

@@ -0,0 +1,7 @@
+class AddBufferToHrLiteEmployeeProfiles < ActiveRecord::Migration[8.1]
+  def change
+    add_column :hr_lite_employee_profiles, :buffer_minutes, :integer
+    add_column :hr_lite_employee_profiles, :buffer_reason, :string
+    add_column :hr_lite_employee_profiles, :buffer_note, :text
+  end
+end

data/lib/hr_lite/configuration.rb

@@ -16,7 +16,9 @@ module HrLite
                   # e.g. 6 — default probation for new hires (admin edits per employee)
                   :probation_months,
                   # true = a punch without GPS is refused (default: recorded and flagged)
-                  :require_punch_location
+                  :require_punch_location,
+                  # true = check-in slots, late penalties and HR buffers (default off)
+                  :attendance_slots
 
     attr_reader :leave_year_start_month, :slip_release_day, :self_regularization, :work_hours
 
@@ -102,6 +104,7 @@ module HrLite
       @slip_release_day       = nil # e.g. 10 = slips open on the 10th of the next month
       @self_regularization    = nil # e.g. { within_days: 2, per_week: 2 } — employees fix their own missed punch
       @require_punch_location = false
+      @attendance_slots       = false
       @work_hours             = nil # e.g. { day: 8, probation_day: 9, week: 40 } — short days close as half days
 
       # Leadership onboarding/offboarding. onboard_user must return a saved

data/lib/hr_lite/version.rb

@@ -1,3 +1,3 @@
 module HrLite
-  VERSION = "0.28.0"
+  VERSION = "0.30.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hr_lite
 version: !ruby/object:Gem::Version
-  version: 0.28.0
+  version: 0.30.0
 platform: ruby
 authors:
 - kshitiz sinha
@@ -68,9 +68,12 @@ files:
 - app/assets/javascripts/hr_lite/geo_punch.js
 - app/assets/javascripts/hr_lite/mention.js
 - app/assets/javascripts/hr_lite/nav.js
+- app/assets/javascripts/hr_lite/photo_crop.js
 - app/assets/javascripts/hr_lite/print.js
 - app/assets/javascripts/hr_lite/select_filter.js
+- app/assets/javascripts/hr_lite/share.js
 - app/assets/javascripts/hr_lite/tax_preview.js
+- app/assets/javascripts/hr_lite/vendor/html_to_image.js
 - app/assets/stylesheets/hr_lite/application.css
 - app/assets/stylesheets/hr_lite/hr_lite.css
 - app/controllers/hr_lite/admin/appraisals_controller.rb
@@ -165,7 +168,9 @@ files:
 - app/models/hr_lite/approval_step.rb
 - app/models/hr_lite/asset.rb
 - app/models/hr_lite/asset_assignment.rb
+- app/models/hr_lite/attendance_penalty.rb
 - app/models/hr_lite/attendance_record.rb
+- app/models/hr_lite/attendance_slot.rb
 - app/models/hr_lite/audit_log.rb
 - app/models/hr_lite/award.rb
 - app/models/hr_lite/benefit.rb
@@ -231,6 +236,7 @@ files:
 - app/views/hr_lite/admin/appraisals/new.html.erb
 - app/views/hr_lite/admin/assets/index.html.erb
 - app/views/hr_lite/admin/assets/new.html.erb
+- app/views/hr_lite/admin/attendances/_slot.html.erb
 - app/views/hr_lite/admin/attendances/index.html.erb
 - app/views/hr_lite/admin/attendances/show.html.erb
 - app/views/hr_lite/admin/attendances/week.html.erb
@@ -315,7 +321,9 @@ files:
 - app/views/hr_lite/appraisals/show.html.erb
 - app/views/hr_lite/approvals/index.html.erb
 - app/views/hr_lite/attendance/_month_grid.html.erb
+- app/views/hr_lite/attendance/_penalties.html.erb
 - app/views/hr_lite/attendance/_punch_card.html.erb
+- app/views/hr_lite/attendance/_slot.html.erb
 - app/views/hr_lite/attendance/show.html.erb
 - app/views/hr_lite/benefits/index.html.erb
 - app/views/hr_lite/calendar/show.html.erb
@@ -420,6 +428,9 @@ files:
 - db/migrate/20261010100500_grant_hr_lite_tax_to_hr.rb
 - db/migrate/20261010110000_create_hr_lite_ca_reviews.rb
 - db/migrate/20261010110100_seed_hr_lite_ca_role.rb
+- db/migrate/20261013090000_create_hr_lite_attendance_slots.rb
+- db/migrate/20261013090100_create_hr_lite_attendance_penalties.rb
+- db/migrate/20261013090200_add_buffer_to_hr_lite_employee_profiles.rb
 - lib/generators/hr_lite/install/install_generator.rb
 - lib/generators/hr_lite/install/templates/AFTER_INSTALL
 - lib/generators/hr_lite/install/templates/initializer.rb