hr_lite 0.30.0 → 0.31.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2f6f41c24e52098ad42a4af7b5827a3fb2fc09a56e5d46d2194122506faa088b
-  data.tar.gz: 6c2323f7e9db6bf95db8f28fac7261b7a670dbdb486b902e30809f5331c95a58
+  metadata.gz: cc6f0b0eab85d612fdadaffc907d6b8d64eda04ed9fba81c5611ef37266916cf
+  data.tar.gz: 81a344480832392ca76230a465597bc085e6e155b063f7f823fc2348de9891cf
 SHA512:
-  metadata.gz: c62ee058dcc94b38c24976b2120d7adcb4df515796c92ccb6201b655ea5ee1e54b5b5b8e45c83c34ec811463c50fbc35c651c4d1ae0940317cdb76bf4773bfbc
-  data.tar.gz: 5d130419f330d6aa715f4c43d36e8d7acf10be7df700930514666600659ab2cb241b70311df969aefbc1ab3e879729680b85b4ea9740311b78b305c4a82a0dc4
+  metadata.gz: e9dba6adb15c59d153c44e29e5bbba3e24df80b6c2f8caaa4383bc49b98ba052a30780a51fe70bbfaf989188b8642bdb3de096214595dbeb511c3da6faf4a642
+  data.tar.gz: b8c776a6b48436ba780f09f948a5233d7372dd5abb5ed540c10507cb26de5a0cd7ec4f0f1a7cd40c528c5af18c0c8bc49e0d6959418d3b0c0b2a769450703011

data/CHANGELOG.md

@@ -7,6 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.31.0] - 2026-10-13
+
+- Office geofence (`config.office_geofence = true`, off by default). A check-in must come from inside an active office's radius (Admin → Offices), with a GPS fix at least that precise; otherwise it is refused with "You are not within the office location. Please request Work From Home (WFH) approval from HR." A denied or failed location says why. Check-out is unchanged.
+- Work from home requests. Employees request one or more dates from today up to 30 days ahead, with a reason; a 30-day calendar marks pending, approved and rejected dates. Overlapping live requests are refused. HR approves or rejects (a remark is required to reject) from Approvals → WFH; nobody decides their own. Only an approved request covering today lets a check-in skip the geofence; the day's record links to it and shows "WFH". Submission and decisions are audited and notified; a notification failure never blocks either.
+- HR gives WFH directly from the WFH board: approved at once, from today onwards, up to 60 days per grant. Audited (`wfh.granted`) and the employee is told.
+- Permanent WFH: a profile switch HR sets. The person checks in from anywhere; a check-in inside an office radius is recorded as office, not WFH. The same holds for a date-approved WFH day. Attendance records carry `wfh` and show "WFH" only for remote check-ins.
+- WFH board for HR: employees requested and approved, pending and rejected counts, who is home on a chosen date (approved requests and permanent WFH, each person once) with whether they checked in from home or the office, and every schedule, filtered by date range, name, department, status and WFH attendance.
+
 ## [0.30.0] - 2026-10-13
 
 - Attendance slots (`config.attendance_slots = true`, off by default). Employees pick a check-in slot (09:00, 09:30, 10:00 or 10:30; checkout 8h30 later) for today, this week or this month. Saving locks it. HR sets or unlocks a slot from the employee's attendance page. No slot means 10:00.

data/app/controllers/hr_lite/admin/employees_controller.rb

@@ -116,7 +116,7 @@ module HrLite
           :date_of_exit, :probation_until, :department, :work_location, :pan_number, :pf_uan, :esi_number,
           :bank_account_number, :bank_ifsc, :bank_name, :tax_regime, :declared_annual_deductions,
           :fy_opening_gross, :fy_opening_tds, :blood_group, :emergency_contact,
-          :buffer_minutes, :buffer_reason, :buffer_note
+          :buffer_minutes, :buffer_reason, :buffer_note, :permanent_wfh
         )
       end
 

data/app/controllers/hr_lite/admin/wfh_requests_controller.rb

@@ -0,0 +1,103 @@
+module HrLite
+  module Admin
+    # WFH board (counts, who is home on a date, every schedule) and the
+    # decision screen. Viewing is attendance.view, deciding attendance.manage.
+    class WfhRequestsController < BaseController
+      def index
+        @from = params[:from].present? ? parse_date_param(params[:from]) : Date.current
+        @to = [ params[:to].present? ? parse_date_param(params[:to]) : @from + WfhRequest::MAX_DAYS_AHEAD, @from ].max
+        @on = params[:on].present? ? parse_date_param(params[:on]) : Date.current
+        @status = params[:status].presence_in(WfhRequest::STATUSES)
+        @attendance = params[:attendance].presence_in(%w[checked_in not_checked_in])
+        @departments = EmployeeProfile.where.not(department: [ nil, "" ]).distinct.order(:department).pluck(:department)
+
+        visible = hr_scope(WfhRequest.all, "attendance.view")
+        visible = visible.where(user_id: filtered_user_ids) if filtered_user_ids
+        range = visible.overlapping(@from, @to)
+        @kpis = {
+          requested: range.distinct.count(:user_id),
+          approved: range.approved.distinct.count(:user_id),
+          pending: range.pending.count,
+          rejected: range.where(status: "rejected").count
+        }
+
+        load_home(visible)
+
+        scoped = @status ? range.where(status: @status) : range
+        @requests = paginate(scoped.includes(:user).order(:user_id, :start_date, :id))
+      end
+
+      # HR gives WFH outright, approved on creation, up to 60 days.
+      def create
+        employee = HrLite.user_klass.find(params[:user_id])
+        hr_require_reach!("attendance.manage", employee)
+        raise ActiveRecord::RecordNotFound if employee.id == hr_current_user.id
+
+        request = WfhRequest.grant!(user_id: employee.id, by: hr_current_user, start_date: params[:start_date],
+                                    end_date: params[:end_date], reason: params[:reason].to_s.strip)
+        redirect_to admin_wfh_requests_path, notice: "WFH given to #{hr_display_name(employee)} for #{request.dates_label}."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_wfh_requests_path, alert: "Could not give WFH: #{e.record.errors.full_messages.to_sentence}"
+      end
+
+      def show
+        @request = hr_scope(WfhRequest.all, "attendance.view").find(params[:id])
+        @decidable = decidable.exists?(@request.id)
+      end
+
+      def approve
+        request = decidable.find(params[:id])
+        request.approve!(actor: hr_current_user, note: params[:decision_note].to_s.strip.presence)
+        redirect_to admin_wfh_requests_path, notice: "WFH approved for #{hr_display_name(request.user)}."
+      rescue ActiveRecord::RecordInvalid
+        redirect_to admin_wfh_request_path(request), alert: "Only pending requests can be decided."
+      end
+
+      def reject
+        request = decidable.find(params[:id])
+        note = params[:decision_note].to_s.strip
+        return redirect_to admin_wfh_request_path(request), alert: "A remark is required to reject." if note.blank?
+
+        request.reject!(actor: hr_current_user, note: note)
+        redirect_to admin_wfh_requests_path, notice: "WFH rejected."
+      rescue ActiveRecord::RecordInvalid
+        redirect_to admin_wfh_request_path(request), alert: "Only pending requests can be decided."
+      end
+
+      private
+
+      # Nobody decides their own request; out-of-scope ids are a 404.
+      def decidable = hr_scope(WfhRequest.all, "attendance.manage").where.not(user_id: hr_current_user.id)
+
+      HomeRow = Struct.new(:user, :label, :request)
+
+      # Everyone home on @on: an approved request, else permanent WFH. One row a person.
+      def load_home(visible)
+        rows = visible.approved.overlapping(@on, @on).includes(:user).order(:user_id)
+                      .map { |r| HomeRow.new(r.user, r.dates_label, r) }.uniq { |row| row.user.id }
+        permanent = hr_scope(EmployeeProfile.where(permanent_wfh: true), "attendance.view")
+        permanent = permanent.where(user_id: filtered_user_ids) if filtered_user_ids
+        ids = permanent.pluck(:user_id) - rows.map { |row| row.user.id }
+        rows += HrLite.user_klass.where(id: ids).map { |u| HomeRow.new(u, "Permanent WFH", nil) }
+        @records = AttendanceRecord.where(date: @on, user_id: rows.map { |row| row.user.id }).where.not(check_in_at: nil).index_by(&:user_id)
+        @home_count = rows.size
+        @home = @attendance ? rows.select { |row| @records.key?(row.user.id) == (@attendance == "checked_in") } : rows
+        @grantable = HrLite.employees.select { |u| u.id != hr_current_user.id && hr_reaches?("attendance.manage", u) }
+      end
+
+      def filtered_user_ids
+        return @filtered_user_ids if defined?(@filtered_user_ids)
+
+        ids = nil
+        if (q = params[:q].to_s.strip.downcase).present?
+          ids = HrLite.employees.select { |u| HrLite.display_name(u).to_s.downcase.include?(q) }.map(&:id)
+        end
+        if (dept = params[:department].presence)
+          in_dept = EmployeeProfile.where(department: dept).pluck(:user_id)
+          ids = ids ? ids & in_dept : in_dept
+        end
+        @filtered_user_ids = ids
+      end
+    end
+  end
+end

data/app/controllers/hr_lite/wfh_requests_controller.rb

@@ -0,0 +1,45 @@
+module HrLite
+  # Employee-side WFH requests. Scoping to hr_current_user IS the
+  # authorization; there is no edit, so a decided request cannot change.
+  class WfhRequestsController < ApplicationController
+    def index
+      @requests = paginate(WfhRequest.where(user_id: hr_current_user.id).recent_first)
+      @request = WfhRequest.new(start_date: Date.current, end_date: Date.current)
+      load_calendar
+    end
+
+    def create
+      @request = WfhRequest.new(params.require(:wfh_request).permit(:start_date, :end_date, :reason)
+                                      .merge(user_id: hr_current_user.id, status: "pending"))
+      # Row lock on the user: two tabs can't both pass the overlap check.
+      saved = WfhRequest.transaction { HrLite.user_klass.lock.find(hr_current_user.id) && @request.save }
+      if saved
+        @request.notify_requested
+        redirect_to wfh_requests_path, notice: "WFH request sent to HR."
+      else
+        @requests = paginate(WfhRequest.where(user_id: hr_current_user.id).recent_first)
+        load_calendar
+        render :index, status: :unprocessable_entity
+      end
+    end
+
+    def cancel
+      WfhRequest.where(user_id: hr_current_user.id).find(params[:id]).cancel!(actor: hr_current_user)
+      redirect_to wfh_requests_path, notice: "WFH request cancelled."
+    rescue ActiveRecord::RecordInvalid
+      redirect_to wfh_requests_path, alert: "Only pending requests can be cancelled."
+    end
+
+    private
+
+    # Status per date for the next 30 days; a later request wins a shared date.
+    def load_calendar
+      @window = Date.current..(Date.current + WfhRequest::MAX_DAYS_AHEAD)
+      @day_status = {}
+      WfhRequest.where(user_id: hr_current_user.id, status: %w[pending approved rejected])
+                .overlapping(@window.first, @window.last).order(:id).each do |request|
+        (request.start_date..request.end_date).each { |d| @day_status[d] = request.status if @window.cover?(d) }
+      end
+    end
+  end
+end

data/app/helpers/hr_lite/application_helper.rb

@@ -2,7 +2,7 @@ module HrLite
   module ApplicationHelper
     NAV_ITEMS = [
       { label: "Home",       path: :root_path,           match: [ "/" ], group: "My work" },
-      { label: "Attendance", path: :attendance_path,     match: [ "/attendance", "/regularization_requests" ], group: "My work" },
+      { label: "Attendance", path: :attendance_path,     match: [ "/attendance", "/regularization_requests", "/wfh_requests" ], group: "My work" },
       { label: "Leaves",     path: :leave_requests_path, match: [ "/leave_requests", "/leave_balances", "/comp_off_requests" ], group: "My work" },
       { label: "Team",       path: :team_path,           match: [ "/team" ], group: "My work" },
       # The phone tab bar shows the first four; the rest fill the More sheet,
@@ -33,7 +33,7 @@ module HrLite
     ADMIN_NAV_ITEMS = [
       { label: "Overview",        path: :admin_overview_path,        match: [ "/admin/overview" ] },
       { label: "Team attendance", path: :admin_attendances_path,     match: [ "/admin/attendances" ] },
-      { label: "Approvals",       path: :admin_leave_requests_path,  match: [ "/admin/leave_requests", "/admin/leave_balances", "/admin/comp_off_requests", "/admin/regularization_requests" ] },
+      { label: "Approvals",       path: :admin_leave_requests_path,  match: [ "/admin/leave_requests", "/admin/leave_balances", "/admin/comp_off_requests", "/admin/regularization_requests", "/admin/wfh_requests" ] },
       { label: "Reports",         path: :admin_reports_path,         match: [ "/admin/reports" ] },
       { label: "Claims",          path: :admin_expenses_path,        match: [ "/admin/expenses" ],
         if: -> { hr_can?("expense.approve", scope: :team) } },

data/app/models/hr_lite/attendance_record.rb

@@ -11,6 +11,7 @@ module HrLite
 
     belongs_to :user, class_name: HrLite.config.user_class
     belongs_to :regularized_by, class_name: HrLite.config.user_class, optional: true
+    belongs_to :wfh_request, optional: true
 
     validates :date, presence: true, uniqueness: { scope: :user_id }
     validates :status, inclusion: { in: STATUSES }

data/app/models/hr_lite/wfh_request.rb

@@ -0,0 +1,108 @@
+module HrLite
+  # "Let me work from home on these dates." HR approves or rejects; only an
+  # approved request covering today lets a check-in skip the office geofence.
+  class WfhRequest < ApplicationRecord
+    STATUSES = %w[pending approved rejected cancelled].freeze
+    MAX_DAYS_AHEAD = 30
+    HR_MAX_DAYS = 60 # a span HR grants directly
+
+    belongs_to :user, class_name: HrLite.config.user_class
+    belongs_to :decided_by, class_name: HrLite.config.user_class, optional: true
+    belongs_to :created_by, class_name: HrLite.config.user_class, optional: true
+
+    validates :start_date, :end_date, :reason, presence: true
+    validates :status, inclusion: { in: STATUSES }
+    validate :dates_in_window, :no_overlap, on: :create
+
+    scope :pending, -> { where(status: "pending") }
+    scope :approved, -> { where(status: "approved") }
+    scope :live, -> { where(status: %w[pending approved]) }
+    scope :overlapping, ->(from, to) { where("start_date <= ? AND end_date >= ?", to, from) }
+    scope :recent_first, -> { order(start_date: :desc, id: :desc) }
+
+    STATUSES.each { |s| define_method("#{s}?") { status == s } }
+
+    def self.approved_for(user_id, date) = approved.where(user_id: user_id).overlapping(date, date).first
+
+    # HR grants WFH outright: approved on creation, up to HR_MAX_DAYS long.
+    def self.grant!(user_id:, by:, start_date:, end_date:, reason:)
+      request = create!(user_id: user_id, start_date: start_date, end_date: end_date, reason: reason,
+                        status: "approved", created_by_id: by.id, decided_by_id: by.id, decided_at: Time.current)
+      AuditLog.record!(action: "wfh.granted", subject: request, actor: by,
+                       changes: { "dates" => request.dates_label, "reason" => reason })
+      request.send(:announce, "wfh.approved", "HR gave you WFH — #{request.dates_label}", reason, "/wfh_requests", [ request.user ])
+      request
+    end
+
+    def granted? = created_by_id.present? && created_by_id != user_id
+
+    def dates_label
+      start_date == end_date ? start_date.strftime("%a %-d %b") : "#{start_date.strftime('%-d %b')} – #{end_date.strftime('%-d %b')}"
+    end
+
+    def days = (end_date - start_date).to_i + 1
+
+    def approve!(actor:, note: nil)
+      transition!("approved", actor, note)
+      announce("wfh.approved", "WFH approved — #{dates_label}", decision_note, "/wfh_requests", [ user ])
+    end
+
+    def reject!(actor:, note:)
+      transition!("rejected", actor, note)
+      announce("wfh.rejected", "WFH rejected — #{dates_label}", decision_note, "/wfh_requests", [ user ])
+    end
+
+    def cancel!(actor:)
+      transition!("cancelled", actor, nil)
+      announce("wfh.cancelled", "#{HrLite.display_name(user)} cancelled WFH for #{dates_label}", nil,
+               "/admin/wfh_requests/#{id}", HrLite.admin_users)
+    end
+
+    def notify_requested
+      AuditLog.record!(action: "wfh.requested", subject: self, actor: user,
+                       changes: { "dates" => dates_label, "reason" => reason })
+      announce("wfh.requested", "#{HrLite.display_name(user)} requested WFH for #{dates_label}", reason,
+               "/admin/wfh_requests/#{id}", HrLite.admin_users)
+    end
+
+    private
+
+    def transition!(new_status, actor, note)
+      with_lock do
+        raise ActiveRecord::RecordInvalid.new(self), "not pending" unless pending?
+
+        update!(status: new_status, decided_by_id: actor.id, decided_at: Time.current, decision_note: note)
+      end
+      AuditLog.record!(action: "wfh.#{new_status}", subject: self, actor: actor,
+                       changes: { "dates" => dates_label, "note" => note }.compact)
+      true
+    end
+
+    # A notification failure never undoes a request or a decision.
+    def announce(event, title, body, path, to)
+      Notifications.publish(event, title: title, body: body.presence, path: path, bell_to: to,
+                                   email_to: event == "wfh.requested" ? [] : to)
+    rescue => e
+      Rails.logger.error("[hr_lite] wfh notification failed: #{e.class}: #{e.message}")
+    end
+
+    def dates_in_window
+      return unless start_date && end_date
+
+      errors.add(:start_date, "cannot be in the past") if start_date < Date.current
+      errors.add(:end_date, "must be on or after the start date") if end_date < start_date
+      if granted?
+        errors.add(:end_date, "HR can grant at most #{HR_MAX_DAYS} days at a time") if days > HR_MAX_DAYS
+      elsif end_date > Date.current + MAX_DAYS_AHEAD
+        errors.add(:end_date, "must be within #{MAX_DAYS_AHEAD} days from today")
+      end
+    end
+
+    def no_overlap
+      return unless start_date && end_date && user_id
+
+      clash = self.class.live.where(user_id: user_id).overlapping(start_date, end_date).exists?
+      errors.add(:base, "You already have a pending or approved WFH request on some of these dates") if clash
+    end
+  end
+end

data/app/services/hr_lite/attendance_puncher.rb

@@ -6,6 +6,7 @@ module HrLite
   class AttendancePuncher
     # What the browser can legitimately report (geo_punch.js).
     GEO_STATUSES = %w[ok denied unavailable timeout insecure].freeze
+    OFF_SITE_MESSAGE = "You are not within the office location. Please request Work From Home (WFH) approval from HR.".freeze
 
     Result = Struct.new(:record, :error, keyword_init: true) do
       def ok? = error.nil?
@@ -34,6 +35,10 @@ module HrLite
                                  "or raise a regularization ticket.")
       end
 
+      if (error = geofence_error)
+        return Result.new(error: error)
+      end
+
       record = resolve_record
       return Result.new(error: "No open check-in to close.") if record.nil?
 
@@ -43,6 +48,8 @@ module HrLite
           return Result.new(record: record, error: already_in_message(record)) if record.check_in_at.present?
 
           stamp(record, :check_in)
+          record.wfh = !!@remote
+          record.wfh_request_id = @wfh&.id if @remote
         when :check_out
           return Result.new(record: record, error: "Check in first.") if record.check_in_at.blank?
 
@@ -76,6 +83,31 @@ module HrLite
       retry
     end
 
+    # config.office_geofence: a check-in must be inside an office radius with
+    # a fix at least that precise, unless HR approved WFH for today or made
+    # the person permanent WFH. Inside the radius the day is office either way.
+    def geofence_error
+      return unless @kind == :check_in && HrLite.config.office_geofence && OfficeLocation.active.exists?
+      return if in_office?
+
+      @wfh = WfhRequest.approved_for(@user.id, Date.current)
+      @remote = @wfh.present? || EmployeeProfile.where(user_id: @user.id).pick(:permanent_wfh)
+      return if @remote
+      return OFF_SITE_MESSAGE if @lat && @lng
+
+      "We could not read your location (#{@geo_status}). Turn location on and try again, " \
+        "or request Work From Home (WFH) approval from HR."
+    end
+
+    def in_office?
+      return false unless @lat && @lng && @accuracy_m.to_f.positive?
+
+      OfficeLocation.active.any? do |office|
+        @accuracy_m.to_f <= office.radius_m &&
+          Geo.distance_m(office.lat, office.lng, @lat.to_f, @lng.to_f) <= office.radius_m
+      end
+    end
+
     def stamp(record, side)
       record.public_send("#{side}_at=", Time.current)
       record.public_send("#{side}_lat=", @lat)
@@ -112,6 +144,8 @@ module HrLite
       if @lat.nil? || @lng.nil?
         reason = @geo_status == "ok" ? "unavailable" : @geo_status
         record.add_flag!("#{label} without GPS (#{reason})")
+      elsif record.wfh
+        nil # WFH: off-site is the point
       elsif OfficeLocation.active.exists? && !OfficeLocation.covering?(@lat, @lng)
         office = OfficeLocation.nearest(@lat, @lng)
         distance_km = (Geo.distance_m(office.lat, office.lng, @lat, @lng) / 1000.0).round(1)

data/app/views/hr_lite/admin/attendances/show.html.erb

@@ -39,7 +39,7 @@
           <% [ [ "In", record.check_in_at, record.check_in_lat, record.check_in_lng ],
                [ "Out", record.check_out_at, record.check_out_lat, record.check_out_lng ] ].each do |label, at, lat, lng| %>
             <% next unless at %>
-            <div><%= label %> <%= at.strftime("%H:%M") %> · <%= HrLite::OfficeLocation.place(lat, lng, @offices) || "No GPS" %>
+            <div><%= label %> <%= at.strftime("%H:%M") %> · <%= record.wfh ? "WFH" : (HrLite::OfficeLocation.place(lat, lng, @offices) || "No GPS") %>
               <% if lat && lng %>
                 · <a class="hrl-card__link" href="https://www.google.com/maps?q=<%= lat %>,<%= lng %>" target="_blank" rel="noopener noreferrer">Map<span class="hrl-sr-only"> of <%= label.downcase %> <%= record.date.strftime("%-d %b") %></span></a>
               <% end %>

data/app/views/hr_lite/admin/employees/_form.html.erb

@@ -85,6 +85,9 @@
       </div>
       <div class="hrl-field"><%= f.label :buffer_note, "Buffer note (HR only; required for Other)" %><%= f.text_area :buffer_note, rows: 2 %></div>
     <% end %>
+    <% if HrLite.config.office_geofence %>
+      <div class="hrl-field hrl-field--check"><%= f.check_box :permanent_wfh %><%= f.label :permanent_wfh, "Permanent work from home (checks in from anywhere; inside the office it counts as office)" %></div>
+    <% end %>
     <div class="hrl-field">
       <%= f.label :date_of_exit, "Date of exit (leave blank while employed)" %>
       <%= f.date_field :date_of_exit %>

data/app/views/hr_lite/admin/shared/_approvals_tabs.html.erb

@@ -1,4 +1,4 @@
-<%# locals: active (:leaves | :comp_off | :regularizations | :balances) %>
+<%# locals: active (:leaves | :comp_off | :regularizations | :wfh | :balances) %>
 <% tab = ->(key) { tag.attributes(class: [ "hrl-btn", ("hrl-btn--primary" if active == key) ], aria: { current: ("page" if active == key) }) } %>
 <div class="hrl-row hrl-row--mb hrl-row--tabs">
   <a <%= tab.(:leaves) %>
@@ -9,6 +9,9 @@
   <a <%= tab.(:regularizations) %>
      href="<%= hr_lite.admin_regularization_requests_path %>">Regularization
     <% if (n = HrLite::RegularizationRequest.pending.count).positive? %><span class="hrl-badge hrl-badge--warn"><%= n %></span><% end %></a>
+  <a <%= tab.(:wfh) %>
+     href="<%= hr_lite.admin_wfh_requests_path %>">WFH
+    <% if (n = HrLite::WfhRequest.pending.count).positive? %><span class="hrl-badge hrl-badge--warn"><%= n %></span><% end %></a>
   <a <%= tab.(:balances) %>
      href="<%= hr_lite.admin_leave_balances_path %>">Balances</a>
 </div>

data/app/views/hr_lite/admin/wfh_requests/index.html.erb

@@ -0,0 +1,91 @@
+<% content_for(:page_title) { "WFH" } %>
+<div class="hrl-page__head">
+  <h1 class="hrl-page__title">Work from home</h1>
+</div>
+
+<%= render "hr_lite/admin/shared/approvals_tabs", active: :wfh %>
+
+<section class="hrl-card">
+  <%= form_with url: hr_lite.admin_wfh_requests_path, method: :get, local: true do %>
+    <div class="hrl-field"><label for="wfh-from">From</label><%= date_field_tag :from, @from, id: "wfh-from" %></div>
+    <div class="hrl-field"><label for="wfh-to">To</label><%= date_field_tag :to, @to, id: "wfh-to" %></div>
+    <div class="hrl-field"><label for="wfh-q">Employee name</label><%= search_field_tag :q, params[:q], id: "wfh-q" %></div>
+    <% if @departments.any? %>
+      <div class="hrl-field"><label for="wfh-dept">Department</label><%= select_tag :department, options_for_select(@departments, params[:department]), include_blank: "All", id: "wfh-dept" %></div>
+    <% end %>
+    <div class="hrl-field"><label for="wfh-status">Status</label><%= select_tag :status, options_for_select(HrLite::WfhRequest::STATUSES.map { |s| [ s.humanize, s ] }, @status), include_blank: "All", id: "wfh-status" %></div>
+    <div class="hrl-field"><label for="wfh-on">Who is home on</label><%= date_field_tag :on, @on, id: "wfh-on" %></div>
+    <div class="hrl-field"><label for="wfh-att">WFH attendance</label><%= select_tag :attendance, options_for_select([ [ "Checked in", "checked_in" ], [ "Not checked in", "not_checked_in" ] ], @attendance), include_blank: "All", id: "wfh-att" %></div>
+    <div class="hrl-form-actions">
+      <button type="submit" class="hrl-btn hrl-btn--primary">Filter</button>
+      <a class="hrl-btn" href="<%= hr_lite.admin_wfh_requests_path %>">Reset</a>
+    </div>
+  <% end %>
+</section>
+
+<div class="hrl-kpis">
+  <div class="hrl-kpi"><div class="hrl-kpi__value"><%= @kpis[:requested] %></div><div class="hrl-kpi__label">Employees requested</div></div>
+  <div class="hrl-kpi"><div class="hrl-kpi__value"><%= @kpis[:approved] %></div><div class="hrl-kpi__label">Employees approved</div></div>
+  <div class="hrl-kpi"><div class="hrl-kpi__value"><%= @kpis[:pending] %></div><div class="hrl-kpi__label">Pending requests</div></div>
+  <div class="hrl-kpi"><div class="hrl-kpi__value"><%= @kpis[:rejected] %></div><div class="hrl-kpi__label">Rejected requests</div></div>
+  <div class="hrl-kpi"><div class="hrl-kpi__value"><%= @home_count %></div><div class="hrl-kpi__label">Home on <%= @on.strftime("%-d %b") %></div></div>
+</div>
+
+<section class="hrl-card">
+  <h2 class="hrl-card__title">Working from home on <%= @on.strftime("%a %-d %b") %></h2>
+  <% if @home.any? %>
+    <% @home.each do |row| %>
+      <% rec = @records[row.user.id]
+         state, tone = rec ? (rec.wfh ? [ "WFH check-in", "ok" ] : [ "In office", "muted" ]) : [ "Not checked in", "muted" ] %>
+      <div class="hrl-feed__item hrl-row">
+        <div class="hrl-feed__body"><strong><%= hr_display_name(row.user) %></strong> · <%= row.label %>
+          <span class="hrl-badge hrl-badge--<%= tone %>"><%= state %></span></div>
+        <% if row.request %>
+          <a class="hrl-btn" href="<%= hr_lite.admin_wfh_request_path(row.request) %>">Open<span class="hrl-sr-only"> <%= hr_display_name(row.user) %>'s request</span></a>
+        <% end %>
+      </div>
+    <% end %>
+  <% else %>
+    <p class="hrl-card--empty">Nobody is working from home on this date.</p>
+  <% end %>
+</section>
+
+<% if @grantable.any? %>
+  <section class="hrl-card">
+    <h2 class="hrl-card__title">Give WFH</h2>
+    <p class="hrl-small hrl-muted">Approved straight away, up to <%= HrLite::WfhRequest::HR_MAX_DAYS %> days from today or later.</p>
+    <%= form_with url: hr_lite.admin_wfh_requests_path, method: :post, local: true do %>
+      <div class="hrl-field"><label for="grant-user">Employee</label><%= select_tag :user_id, options_for_select(@grantable.map { |u| [ hr_display_name(u), u.id ] }), include_blank: "Choose one", required: true, id: "grant-user" %></div>
+      <div class="hrl-field"><label for="grant-from">From</label><%= date_field_tag :start_date, Date.current, min: Date.current, required: true, id: "grant-from" %></div>
+      <div class="hrl-field"><label for="grant-to">To</label><%= date_field_tag :end_date, Date.current, min: Date.current, required: true, id: "grant-to" %></div>
+      <div class="hrl-field"><label for="grant-reason">Reason</label><%= text_area_tag :reason, nil, rows: 2, required: true, id: "grant-reason" %></div>
+      <div class="hrl-form-actions"><button type="submit" class="hrl-btn hrl-btn--primary">Give WFH</button></div>
+    <% end %>
+  </section>
+<% end %>
+
+<section class="hrl-card">
+  <h2 class="hrl-card__title">Schedules <%= @from.strftime("%-d %b") %> – <%= @to.strftime("%-d %b") %></h2>
+  <% if @requests.any? %>
+    <div class="hrl-table-wrap">
+      <table class="hrl-table hrl-table--stack">
+        <thead><tr><th>Employee</th><th>Dates</th><th>Reason</th><th>Submitted</th><th>Status</th><th></th></tr></thead>
+        <tbody>
+          <% @requests.each do |request| %>
+            <tr>
+              <td data-label="Employee"><%= hr_display_name(request.user) %></td>
+              <td data-label="Dates"><%= request.dates_label %> <span class="hrl-small hrl-muted">· <%= pluralize(request.days, "day") %></span></td>
+              <td data-label="Reason"><%= truncate(request.reason, length: 80) %></td>
+              <td data-label="Submitted"><%= request.created_at.strftime("%-d %b") %></td>
+              <td data-label="Status"><%= hrl_request_status_badge(request.status) %></td>
+              <td data-label=""><a class="hrl-btn" href="<%= hr_lite.admin_wfh_request_path(request) %>">Open</a></td>
+            </tr>
+          <% end %>
+        </tbody>
+      </table>
+    </div>
+    <%= hrl_pagination %>
+  <% else %>
+    <p class="hrl-card--empty">No WFH requests match.</p>
+  <% end %>
+</section>

data/app/views/hr_lite/admin/wfh_requests/show.html.erb

@@ -0,0 +1,40 @@
+<% content_for(:page_title) { "WFH — #{hr_display_name(@request.user)}" } %>
+<div class="hrl-page__head">
+  <h1 class="hrl-page__title">WFH — <%= hr_display_name(@request.user) %></h1>
+  <div class="hrl-page__actions">
+    <a class="hrl-btn" href="<%= hr_lite.admin_wfh_requests_path %>">All WFH</a>
+    <a class="hrl-btn" href="<%= hr_lite.admin_attendance_path(@request.user_id, month: @request.start_date.strftime("%Y-%m")) %>">Their month</a>
+  </div>
+</div>
+
+<section class="hrl-card">
+  <dl class="hrl-deflist">
+    <dt>Dates</dt><dd><%= @request.dates_label %> (<%= pluralize(@request.days, "day") %>)</dd>
+    <dt>Reason</dt><dd><%= @request.reason %></dd>
+    <dt>Submitted</dt><dd><%= @request.created_at.strftime("%d %b %Y %H:%M") %></dd>
+    <dt>Status</dt><dd><%= hrl_request_status_badge(@request.status) %></dd>
+    <% if @request.decided_at %>
+      <dt>Decided</dt>
+      <dd><%= hr_display_name(@request.decided_by) %> · <%= @request.decided_at.strftime("%d %b %H:%M") %>
+        <% if @request.decision_note.present? %> · <%= @request.decision_note %><% end %></dd>
+    <% end %>
+  </dl>
+</section>
+
+<% if @request.pending? && @decidable %>
+  <%# Two forms: Rails binds the CSRF token to each form's own action. %>
+  <section class="hrl-card">
+    <h2 class="hrl-card__title">Approve</h2>
+    <%= form_with url: hr_lite.approve_admin_wfh_request_path(@request), method: :post, local: true do |f| %>
+      <div class="hrl-field"><%= f.label :decision_note, "Remark (optional)", for: "approve_note" %><%= f.text_area :decision_note, id: "approve_note" %></div>
+      <div class="hrl-form-actions"><%= f.button "Approve WFH", type: :submit, class: "hrl-btn hrl-btn--primary" %></div>
+    <% end %>
+  </section>
+  <section class="hrl-card">
+    <h2 class="hrl-card__title">Reject</h2>
+    <%= form_with url: hr_lite.reject_admin_wfh_request_path(@request), method: :post, local: true do |f| %>
+      <div class="hrl-field"><%= f.label :decision_note, "Remark (required)", for: "reject_note" %><%= f.text_area :decision_note, id: "reject_note" %></div>
+      <div class="hrl-form-actions"><%= f.button "Reject", type: :submit, class: "hrl-btn hrl-btn--danger" %></div>
+    <% end %>
+  </section>
+<% end %>

data/app/views/hr_lite/attendance/_punch_card.html.erb

@@ -18,6 +18,9 @@
     <% if record&.check_out_at %>
       <span class="hrl-badge hrl-badge--muted">Out <%= record.check_out_at.strftime("%H:%M") %></span>
     <% end %>
+    <% if record&.wfh %>
+      <span class="hrl-badge hrl-badge--ok">WFH</span>
+    <% end %>
     <% if record&.flagged? %>
       <span class="hrl-badge hrl-badge--bad">Flagged</span>
     <% end %>
@@ -74,6 +77,9 @@
   <% end %>
 
   <a class="hrl-card__link" href="<%= hr_lite.attendance_path %>">View my month</a>
+  <% if HrLite.config.office_geofence %>
+    · <a class="hrl-card__link" href="<%= hr_lite.wfh_requests_path %>">Work from home</a>
+  <% end %>
 
   <% if local_assigns.key?(:attention) %>
     <div class="hrl-row">

data/app/views/hr_lite/wfh_requests/index.html.erb

@@ -0,0 +1,70 @@
+<% content_for(:page_title) { "Work from home" } %>
+<% content_for(:back, "Attendance") %>
+<div class="hrl-page__head">
+  <h1 class="hrl-page__title">Work from home</h1>
+</div>
+
+<section class="hrl-card">
+  <h2 class="hrl-card__title">Request WFH</h2>
+  <p class="hrl-small hrl-muted">Pick dates from today up to <%= HrLite::WfhRequest::MAX_DAYS_AHEAD %> days ahead. HR approves or rejects; only approved dates let you check in away from the office.</p>
+  <%= form_with model: @request, url: hr_lite.wfh_requests_path, scope: :wfh_request, local: true do |f| %>
+    <%= render "hr_lite/shared/form_errors", record: @request %>
+    <% min, max = @window.first.iso8601, @window.last.iso8601 %>
+    <div class="hrl-field"><%= f.label :start_date, "From" %><%= f.date_field :start_date, min: min, max: max, required: true %></div>
+    <div class="hrl-field"><%= f.label :end_date, "To (same day for one day)" %><%= f.date_field :end_date, min: min, max: max, required: true %></div>
+    <div class="hrl-field"><%= f.label :reason, "Why do you need WFH?" %><%= f.text_area :reason, rows: 3, required: true %></div>
+    <div class="hrl-form-actions"><%= f.submit "Send to HR", class: "hrl-btn hrl-btn--primary" %></div>
+  <% end %>
+</section>
+
+<section class="hrl-card">
+  <h2 class="hrl-card__title">Next <%= HrLite::WfhRequest::MAX_DAYS_AHEAD %> days</h2>
+  <% marks = { "approved" => [ "WFH", "Approved", "present" ], "pending" => [ "Pend", "Pending", "pending" ], "rejected" => [ "Rej", "Rejected", "absent" ] } %>
+  <div class="hrl-mgrid" role="group" aria-label="Your WFH dates">
+    <% %w[Mo Tu We Th Fr Sa Su].each do |d| %><div class="hrl-mgrid__head"><%= d %></div><% end %>
+    <% (@window.first.cwday - 1).times do %><div></div><% end %>
+    <% @window.each do |date| %>
+      <% code, word, mod = marks[@day_status[date]] %>
+      <div class="<%= class_names("hrl-mgrid__day", "hrl-mgrid__day--#{mod}": mod, "hrl-mgrid__day--today": date == Date.current) %>"
+           role="group" aria-label="<%= date.strftime('%-d %b') %><%= ", #{word}" if word %>">
+        <span class="hrl-mgrid__num"><%= date.day %></span>
+        <% if code %><span class="hrl-mgrid__tag"><%= code %></span><% end %>
+      </div>
+    <% end %>
+  </div>
+  <div class="hrl-legend hrl-small">
+    <% marks.each_value do |_code, word, mod| %>
+      <span class="hrl-badge hrl-mgrid__key hrl-mgrid__day--<%= mod %>"><%= word %></span>
+    <% end %>
+  </div>
+</section>
+
+<section class="hrl-card">
+  <h2 class="hrl-card__title">My requests</h2>
+  <% if @requests.any? %>
+    <div class="hrl-table-wrap">
+      <table class="hrl-table hrl-table--stack">
+        <thead><tr><th>Dates</th><th>Reason</th><th>Status</th><th>HR remarks</th><th></th></tr></thead>
+        <tbody>
+          <% @requests.each do |request| %>
+            <tr>
+              <td data-label="Dates"><%= request.dates_label %> <span class="hrl-small hrl-muted">· <%= pluralize(request.days, "day") %></span></td>
+              <td data-label="Reason"><%= request.reason %></td>
+              <td data-label="Status"><%= hrl_request_status_badge(request.status) %></td>
+              <td data-label="HR remarks" class="hrl-small hrl-muted"><%= request.decision_note.presence || "—" %></td>
+              <td data-label="" class="<%= 'hrl-cell--void' unless request.pending? %>">
+                <% if request.pending? %>
+                  <%= button_to "Cancel", hr_lite.cancel_wfh_request_path(request), method: :post,
+                                class: "hrl-btn hrl-btn--danger", form: { data: { turbo_confirm: "Cancel this request?" } } %>
+                <% end %>
+              </td>
+            </tr>
+          <% end %>
+        </tbody>
+      </table>
+    </div>
+    <%= hrl_pagination %>
+  <% else %>
+    <p class="hrl-card--empty">No WFH requests yet.</p>
+  <% end %>
+</section>

data/config/routes.rb

@@ -20,6 +20,9 @@ HrLite::Engine.routes.draw do
   resources :regularization_requests, only: %i[index new create] do
     member { post :cancel }
   end
+  resources :wfh_requests, only: %i[index create] do
+    member { post :cancel }
+  end
   resources :approvals, only: :index
   resources :expenses, only: %i[index new create] do
     member { post :cancel }
@@ -74,6 +77,9 @@ HrLite::Engine.routes.draw do
     resources :regularization_requests, only: %i[index show] do
       member { post :approve; post :reject }
     end
+    resources :wfh_requests, only: %i[index show create] do
+      member { post :approve; post :reject }
+    end
     resources :roles, except: :show do
       resources :assignments, only: %i[create destroy], controller: "role_assignments"
     end

data/db/migrate/20261013100000_create_hr_lite_wfh_requests.rb

@@ -0,0 +1,22 @@
+class CreateHrLiteWfhRequests < ActiveRecord::Migration[8.1]
+  def change
+    create_table :hr_lite_wfh_requests do |t|
+      t.bigint :user_id, null: false
+      t.date :start_date, null: false
+      t.date :end_date, null: false
+      t.text :reason, null: false
+      t.string :status, null: false, default: "pending"
+      t.bigint :decided_by_id
+      t.datetime :decided_at
+      t.text :decision_note
+      t.bigint :created_by_id
+
+      t.timestamps
+    end
+    add_index :hr_lite_wfh_requests, [ :user_id, :start_date, :end_date ]
+    add_index :hr_lite_wfh_requests, [ :status, :start_date ]
+    add_check_constraint :hr_lite_wfh_requests, "status IN ('pending','approved','rejected','cancelled')",
+                         name: "hr_lite_wfh_requests_status"
+    add_check_constraint :hr_lite_wfh_requests, "end_date >= start_date", name: "hr_lite_wfh_requests_range"
+  end
+end

data/db/migrate/20261013100100_add_wfh_request_id_to_hr_lite_attendance_records.rb

@@ -0,0 +1,7 @@
+class AddWfhRequestIdToHrLiteAttendanceRecords < ActiveRecord::Migration[8.1]
+  def change
+    add_column :hr_lite_attendance_records, :wfh_request_id, :bigint
+    add_index :hr_lite_attendance_records, :wfh_request_id
+    add_column :hr_lite_attendance_records, :wfh, :boolean, null: false, default: false
+  end
+end

data/db/migrate/20261013100200_add_permanent_wfh_to_hr_lite_employee_profiles.rb

@@ -0,0 +1,5 @@
+class AddPermanentWfhToHrLiteEmployeeProfiles < ActiveRecord::Migration[8.1]
+  def change
+    add_column :hr_lite_employee_profiles, :permanent_wfh, :boolean, null: false, default: false
+  end
+end

data/lib/hr_lite/configuration.rb

@@ -18,7 +18,9 @@ module HrLite
                   # true = a punch without GPS is refused (default: recorded and flagged)
                   :require_punch_location,
                   # true = check-in slots, late penalties and HR buffers (default off)
-                  :attendance_slots
+                  :attendance_slots,
+                  # true = check-in only inside an active office radius, unless WFH is approved for the day
+                  :office_geofence
 
     attr_reader :leave_year_start_month, :slip_release_day, :self_regularization, :work_hours
 
@@ -105,6 +107,7 @@ module HrLite
       @self_regularization    = nil # e.g. { within_days: 2, per_week: 2 } — employees fix their own missed punch
       @require_punch_location = false
       @attendance_slots       = false
+      @office_geofence        = false
       @work_hours             = nil # e.g. { day: 8, probation_day: 9, week: 40 } — short days close as half days
 
       # Leadership onboarding/offboarding. onboard_user must return a saved

data/lib/hr_lite/notifications.rb

@@ -68,7 +68,11 @@ module HrLite
       "regularization.requested" => { bell: true, email: false, leadership_email: true,  leadership_bell: false },
       "regularization.approved"  => { bell: true, email: true,  leadership_email: true,  leadership_bell: false },
       "regularization.rejected"  => { bell: true, email: true,  leadership_email: false, leadership_bell: false },
-      "regularization.cancelled" => { bell: true, email: false, leadership_email: true,  leadership_bell: false }
+      "regularization.cancelled" => { bell: true, email: false, leadership_email: true,  leadership_bell: false },
+      "wfh.requested"         => { bell: true,  email: false, leadership_email: true,  leadership_bell: false },
+      "wfh.approved"          => { bell: true,  email: true,  leadership_email: false, leadership_bell: false },
+      "wfh.rejected"          => { bell: true,  email: true,  leadership_email: false, leadership_bell: false },
+      "wfh.cancelled"         => { bell: true,  email: false, leadership_email: false, leadership_bell: false }
     }.freeze
 
     class << self

data/lib/hr_lite/version.rb

@@ -1,3 +1,3 @@
 module HrLite
-  VERSION = "0.30.0"
+  VERSION = "0.31.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hr_lite
 version: !ruby/object:Gem::Version
-  version: 0.30.0
+  version: 0.31.0
 platform: ruby
 authors:
 - kshitiz sinha
@@ -115,6 +115,7 @@ files:
 - app/controllers/hr_lite/admin/statutory_rate_cards_controller.rb
 - app/controllers/hr_lite/admin/superadmin_controller.rb
 - app/controllers/hr_lite/admin/tax_declarations_controller.rb
+- app/controllers/hr_lite/admin/wfh_requests_controller.rb
 - app/controllers/hr_lite/application_controller.rb
 - app/controllers/hr_lite/appraisals_controller.rb
 - app/controllers/hr_lite/approvals_controller.rb
@@ -143,6 +144,7 @@ files:
 - app/controllers/hr_lite/team_controller.rb
 - app/controllers/hr_lite/timelines_controller.rb
 - app/controllers/hr_lite/users_controller.rb
+- app/controllers/hr_lite/wfh_requests_controller.rb
 - app/helpers/hr_lite/application_helper.rb
 - app/jobs/hr_lite/application_job.rb
 - app/jobs/hr_lite/approval_escalation_job.rb
@@ -212,6 +214,7 @@ files:
 - app/models/hr_lite/statutory_rate_card_record.rb
 - app/models/hr_lite/tax_declaration.rb
 - app/models/hr_lite/tax_declaration_item.rb
+- app/models/hr_lite/wfh_request.rb
 - app/services/hr_lite/access.rb
 - app/services/hr_lite/approval_route.rb
 - app/services/hr_lite/attendance_puncher.rb
@@ -317,6 +320,8 @@ files:
 - app/views/hr_lite/admin/tax_declarations/overview.html.erb
 - app/views/hr_lite/admin/tax_declarations/person.html.erb
 - app/views/hr_lite/admin/tax_declarations/show.html.erb
+- app/views/hr_lite/admin/wfh_requests/index.html.erb
+- app/views/hr_lite/admin/wfh_requests/show.html.erb
 - app/views/hr_lite/appraisals/index.html.erb
 - app/views/hr_lite/appraisals/show.html.erb
 - app/views/hr_lite/approvals/index.html.erb
@@ -373,6 +378,7 @@ files:
 - app/views/hr_lite/team/show.html.erb
 - app/views/hr_lite/timelines/_events.html.erb
 - app/views/hr_lite/timelines/show.html.erb
+- app/views/hr_lite/wfh_requests/index.html.erb
 - app/views/layouts/hr_lite/application.html.erb
 - app/views/layouts/hr_lite/mailer.html.erb
 - app/views/layouts/hr_lite/mailer.text.erb
@@ -431,6 +437,9 @@ files:
 - db/migrate/20261013090000_create_hr_lite_attendance_slots.rb
 - db/migrate/20261013090100_create_hr_lite_attendance_penalties.rb
 - db/migrate/20261013090200_add_buffer_to_hr_lite_employee_profiles.rb
+- db/migrate/20261013100000_create_hr_lite_wfh_requests.rb
+- db/migrate/20261013100100_add_wfh_request_id_to_hr_lite_attendance_records.rb
+- db/migrate/20261013100200_add_permanent_wfh_to_hr_lite_employee_profiles.rb
 - lib/generators/hr_lite/install/install_generator.rb
 - lib/generators/hr_lite/install/templates/AFTER_INSTALL
 - lib/generators/hr_lite/install/templates/initializer.rb