hr_lite 0.43.0 → 0.50.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2ecbd41290643cbba3981491be8aea1e69d0bd38e5dab9dc006c803cd254204a
-  data.tar.gz: 1c6222a8ba272cd6c9818c97d54f16dbef5dc69fb9466293ae89c5809947be1f
+  metadata.gz: 01cbb25a2be4121524133e4ae3cc27c20e703edbe2ad51c41830f89a6223b5d6
+  data.tar.gz: ba0ed1ceeda7d1c25eec0a9607e773b260cd255eadee1f68b4d35667ab0de9d1
 SHA512:
-  metadata.gz: db24e808b285af051a738dc733fb092307edab3f2fb5aef17740140ed40071d32788773d2c1e80aa93152c78a2a6b6daee893df5022852295636734dfa64c297
-  data.tar.gz: 75da26b92e93d18e7da0f92a73b25df66d505aa5f6313717ef3169cbd004c997867d455fccca13590fd770bb66c029f8837bc5724b044d1168a3522d3df12a06
+  metadata.gz: a50669d8acec885fcaa6304e071785a34432c1bd8314edf57faac5f5436651b186e17c226e3413f50bb872f38fc52859dd61c0f248bd2ab09f03215c9a9d962f
+  data.tar.gz: 92b42d0e6301c22de05a6eed335f84065ad81eb5fd8ae3d3887dae0f38c66b485bcec3f9b13b7ea957ebf3dda4b16a38d891d69e351356bd91b50bb69d9a1877

data/CHANGELOG.md

@@ -7,6 +7,61 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.50.0] - 2026-10-16
+
+- Global search: one box for screens and people. It opens with ⌘K or Ctrl+K anywhere, from **Search** at the top of the sidebar, or from **Search** in the phone's More sheet. Typing (2 letters or more) lists matching screens and people; arrows move, Enter opens, and Escape closes. With JavaScript off, Search opens the `/search` page.
+- Screens come from the menu's own gates, so a person only finds what they can already open. A screen matches on its place, its tab and its paths ("wfh" finds My attendance through `/wfh_requests`), plus a few everyday words such as "payslip" or "penalty".
+- People are listed only for those with a team screen, and only people whose attendance they may open: a manager finds their team, HR finds everyone, and an employee finds no one. Search covers name, email and employee code. A person opens on their This week screen. A page outside someone's reach still answers "not allowed", exactly as before.
+- The endpoint has a named rate limit (60 a minute per person).
+
+## [0.49.0] - 2026-10-16
+
+- "This week": one screen per employee for HR, admin and managers. It's the first tab in the person's tabs, at `/admin/attendances/:user_id/summary`. Day, Week (the default) or Month, with ‹ › and a "Go to date" calendar. It shows:
+  - every day's status, check-in and check-out (all punches when there was more than one pair), hours worked, penalty minutes and flags
+  - every request in the period: leave, comp-off, WFH, attendance fixes, expense claims and uploaded documents, each with its status and an "Open" link to where it's decided
+  - leave balances, with any days held for penalties
+  - the penalty-hours section, with Remove hours for those who may manage the person
+- Each past or current day has a "Fix" button that goes straight to that day's Fix card, including reset and penalties.
+- Access is unchanged. The screen needs attendance.view for the person; a manager sees only their team. Each request type shows only if the viewer may open that type's own page for this person: leave and comp-off need leave.view, WFH and fixes need attendance.view, claims need expense.approve, documents need document.view. So HR, which can't approve claims, sees no claims here. Fix and Remove hours need attendance.manage, and never for your own record.
+
+## [0.48.2] - 2026-10-16
+
+- Breaks count as working time. The standard day is 8h 30m including its break, but My work time (and HR's work time report) showed "Working time 8h 00m" for a full 8h 30m shift, because lunch and short breaks were left out. The KPI now reads "Working time (breaks included)" (8h 30m for that shift), and breaks show as "Of which breaks". The daily table's columns are "Working (breaks incl.)" and "Of which breaks". Only the display changed: attendance, penalties, half day and pay already used check-in to check-out.
+
+## [0.48.1] - 2026-10-16
+
+- A choice the punch needs can't be missed on a phone any more. Examples: "Is this your home location?" (Yes, save it / No, I am travelling) and "I am travelling — check out here". The choice sits in the red box, and the page scrolls it to the middle of the screen when the card loads. If the button is tapped without a choice, the page scrolls back to it (the browser's own "select an option" note still shows). Checked at 360 px: the box comes into view, the check-out is held until it's ticked, then it goes through.
+
+## [0.48.0] - 2026-10-16
+
+- When location is blocked, the punch card's message ("Location is blocked. To allow it:") and its steps now show in a red box instead of small grey text. The box clears on the next try.
+- New iPhone steps. Location Services can be on while Safari is still blocked, so the steps now cover all three settings: turn on Location Services; on that screen set Safari Websites (or Chrome, Firefox, Edge) to While Using the App; and for Safari, set Settings → Apps → Safari → Location to Allow (or Ask). Then reload. From the Home Screen app, close and reopen it instead. Checked in the iOS 26 Simulator: tapping Check in and choosing Don't Allow shows these steps in red.
+
+## [0.47.0] - 2026-10-16
+
+- Penalty hours build up and limit leave. A person's attendance penalties (late, after 11:00, short day) add up with no yearly reset until HR removes them. Every 5 hours holds half a day and 10 hours a full day, the same for everyone: 100h = 10 days.
+- In Settings, HR picks "Penalties come off" a leave type (for example Earned leave); with no type picked, penalties limit nothing. The balance itself is not cut: 12 stays 12. You can apply for at most 12 − 10 = 2 days, rounded down to half days. Past that, the request is refused: "For these dates you can apply for at most 2 days of Earned leave — 10 days held for penalties". Other leave types keep today's rule, where days past the balance are unpaid.
+- A "Penalty hours" section on the employee's Attendance page, and on HR's page for that person, shows the hours held, the days they hold, and every HR removal (hours, who, when, reason). HR can remove any number of hours with a required reason: remove 50 of 100 and 50 stay, or remove all of it to settle to 0. The employee gets a bell and an email, and the audit log records it. Removing a single penalty works as before.
+- HR's team attendance view shows "Penalties 100h 00m · 10 days" on each person who has any, linking to their section.
+- "Held for penalties" and "You can apply" show on the employee's balances page, the leave chips, the apply form (with today's limit) and HR's balances grid.
+- Migrations: `hr_lite_settings.penalty_leave_type_id` and `hr_lite_penalty_removals`.
+
+## [0.46.0] - 2026-10-15
+
+- Every check-in and check-out is kept. Checking in again, a repeat check-out and an HR reset used to overwrite the day's check-out, including its time and GPS. Now each punch is saved as its own row: time, GPS, accuracy, place and distance from home. Those rows are never edited or deleted, and saving a change to one raises an error. When a day has more than one in/out pair, "All punches: In 09:30 Office · Out 11:45 Office · In 12:10 Office · Out 18:05 Office" shows on the employee's Today card, their day detail and My work time, and on HR's "Where they punched". A day HR reset with Reset check-in keeps its old punches on show.
+- The day record is still the summary: first check-in to latest check-out. Hours, short day, half day and penalties count the same as before, and the gap between two sessions still counts as worked.
+- Migration: `hr_lite_attendance_punches`. Days punched before this release have no punch rows and show as before.
+
+## [0.45.0] - 2026-10-15
+
+- HR can change a WFH request after deciding it. On an approved or rejected request, the "Change this WFH" card lets HR set new dates and switch between Approved and Rejected, with a required reason. For example, a request rejected for 19–23 Oct can be approved for 20–21 Oct only. Past dates are allowed so a request can match the days actually worked from home, up to 60 days long. It can't clash with that person's other pending or approved WFH. The audit log records the old and new dates and decision ("wfh.changed"), and the employee gets the approved/rejected notice with the reason. Attendance days already punched are not rewritten.
+
+## [0.44.0] - 2026-10-15
+
+- HR can reset today's punch when someone taps by mistake again (after their one "Check in again" is used). On the employee's attendance page, tap today, give the reason, then pick a reset. Each one asks OK/Cancel first. **Reset check-out** puts them back in: the first check-in stands, their work mode reopens, and they check out later. **Reset check-in** clears the whole day so they check in fresh. Both are audited and the employee is notified.
+- Removing a day's punch now also lifts that check-in's late penalties, recorded as removed by HR with the reason. Before, checking in again was charged twice.
+- `data-turbo-confirm` can sit on a button as well as a form, so one form can hold several confirmed actions.
+
 ## [0.43.0] - 2026-10-15
 
 - Shorter day: HR can give one employee 30, 60 or 90 minutes off the working day, for example for a long commute. It's set on their profile, with a required reason. The reason is encrypted, kept out of the audit trail, and seen only by HR. Their day becomes the Settings day minus the allowance (8h30 − 90 min = 7h). That drives their "+30 min", "Short by", checkout due time, half-day line check and slot picker. They see "Your day 7h 00m" on their attendance card. This is separate from the late buffer, which still only delays the late clock.

data/app/assets/javascripts/hr_lite/confirm.js

@@ -18,7 +18,8 @@
       var form = event.target;
       if (!form || form.nodeName !== "FORM") return;
 
-      var message = form.getAttribute("data-turbo-confirm");
+      // A button can carry its own prompt (one form, several actions).
+      var message = (event.submitter && event.submitter.getAttribute("data-turbo-confirm")) || form.getAttribute("data-turbo-confirm");
       if (message && !window.confirm(message)) {
         event.preventDefault();
         event.stopPropagation();

data/app/assets/javascripts/hr_lite/geo_punch.js

@@ -19,13 +19,16 @@
     var ua = navigator.userAgent;
     var ios = /iPhone|iPad|iPod/.test(ua) || (/Macintosh/.test(ua) && navigator.maxTouchPoints > 1);
     if (ios) {
+      // Location Services can be on while Safari Websites (or the browser app) is set
+      // to Never, or this site to Deny — the usual iPhone block.
       var app = /CriOS/.test(ua) ? "Chrome" : /FxiOS/.test(ua) ? "Firefox" : /EdgiOS/.test(ua) ? "Edge" : null;
-      return [
+      var steps = [
         "Open Settings → Privacy & Security → Location Services and turn it on.",
-        app ? "In Settings, open Apps → " + app + " → Location and choose While Using the App."
-            : "In Settings, open Apps → Safari → Location and choose Allow (or Ask).",
-        "Come back here, reload the page and tap again."
+        "On that screen, scroll down to " + (app || "Safari Websites") + " and choose While Using the App."
       ];
+      if (!app) steps.push("Then open Settings → Apps → Safari → Location and choose Allow (or Ask).");
+      steps.push(navigator.standalone ? "Close this app fully, open it again and tap again." : "Reload this page and tap again.");
+      return steps;
     }
     if (/Android/.test(ua)) {
       var samsung = /SamsungBrowser/.test(ua);
@@ -49,6 +52,7 @@
   function showHelp(label, headline) {
     if (!label) return;
     label.textContent = headline;
+    label.classList.replace("hrl-muted", "hrl-errors") || label.classList.add("hrl-errors"); // red until the next try
     var list = document.createElement("ol");
     list.className = "hrl-geo-help";
     locationSteps().forEach(function (step) {
@@ -69,6 +73,13 @@
     var button = form.querySelector("[type=submit]");
     var label = form.querySelector("[data-hrl-geo-status]");
     var required = form.hasAttribute("data-hrl-geo-required");
+    // A choice the punch needs (home or travelling) sits mid-card on a phone and was
+    // missed: bring it into view now, and again if the button is tapped without it.
+    var choose = form.querySelector("[data-hrl-must-choose]");
+    if (choose) {
+      choose.scrollIntoView({ block: "center" });
+      form.addEventListener("invalid", function () { choose.scrollIntoView({ block: "center" }); }, true);
+    }
     var locating = false;
 
     function send(status) {
@@ -88,7 +99,7 @@
       event.preventDefault();
       locating = true;
       if (button) { button.disabled = true; button.setAttribute("aria-busy", "true"); }
-      if (label) { label.hidden = false; label.textContent = "Getting location…"; }
+      if (label) { label.hidden = false; label.classList.replace("hrl-errors", "hrl-muted"); label.textContent = "Getting location…"; }
 
       if (!navigator.geolocation) {
         if (required) hold("This browser cannot share your location. Open this page in Chrome or Safari.");

data/app/assets/javascripts/hr_lite/search.js

@@ -0,0 +1,48 @@
+// The search palette: ⌘K / Ctrl+K or any [data-hrl-search-open] link opens it.
+// Typing loads the short results from /search?frame=1 after a pause; Enter
+// opens the full page; arrows move through results; Escape closes (native).
+// Without JS (or <dialog>) the links simply open the search page.
+(function () {
+  var dialog = document.querySelector("[data-hrl-search]");
+  if (!dialog || !dialog.showModal) return;
+  var form = dialog.querySelector("form");
+  var input = form.querySelector("input");
+  var out = dialog.querySelector("[data-hrl-search-results]");
+  var timer;
+
+  function open(event) {
+    if (event) event.preventDefault();
+    var more = document.querySelector(".hrl-tabbar__more[open]");
+    if (more) more.open = false; // opened from the phone's More sheet
+    if (!dialog.open) dialog.showModal();
+    input.focus();
+    input.select();
+  }
+
+  document.addEventListener("keydown", function (event) {
+    if ((event.metaKey || event.ctrlKey) && event.key.toLowerCase() === "k") open(event);
+  });
+  document.querySelectorAll("[data-hrl-search-open]").forEach(function (link) {
+    link.addEventListener("click", open);
+  });
+  dialog.addEventListener("click", function (event) { if (event.target === dialog) dialog.close(); });
+
+  input.addEventListener("input", function () {
+    clearTimeout(timer);
+    timer = setTimeout(function () {
+      fetch(form.action + "?frame=1&q=" + encodeURIComponent(input.value), { credentials: "same-origin", cache: "no-store" })
+        .then(function (response) { return response.ok ? response.text() : ""; })
+        .then(function (html) { out.innerHTML = html; });
+    }, 180);
+  });
+
+  dialog.addEventListener("keydown", function (event) {
+    if (event.key !== "ArrowDown" && event.key !== "ArrowUp") return;
+    var links = Array.prototype.slice.call(out.querySelectorAll("a"));
+    if (!links.length) return;
+    event.preventDefault();
+    var at = links.indexOf(document.activeElement);
+    at = event.key === "ArrowDown" ? Math.min(at + 1, links.length - 1) : at - 1;
+    (at < 0 ? input : links[at]).focus();
+  });
+})();

data/app/assets/stylesheets/hr_lite/hr_lite.css

@@ -260,7 +260,7 @@ details > form > button[type=submit], details > form > .hrl-btn { margin-top: .2
 .hrl-listrow > :first-child { display: inline-flex; align-items: center; gap: var(--hrl-s-1); line-height: var(--hrl-lh-tight); }
 /* The punch status stays in the accessibility tree (no `hidden`) so its first message is announced; empty, it takes no space. */
 [data-hrl-geo-status]:empty { margin: 0; }
-.hrl-geo-help { margin: var(--hrl-s-2) 0 0; padding-left: var(--hrl-s-4); color: var(--hrl-ink); }
+.hrl-geo-help { margin: var(--hrl-s-2) 0 0; padding-left: var(--hrl-s-4); color: inherit; }
 .hrl-geo-help li + li { margin-top: var(--hrl-s-1); }
 .hrl-grid { display: grid; gap: .85rem; grid-template-columns: 1fr; margin-bottom: .85rem; }
 .hrl-grid > * { min-width: 0; }
@@ -638,3 +638,8 @@ a.hrl-tree__name { display: inline-flex; align-items: center; min-height: var(--
 .hrl-person { width: var(--hrl-target); height: var(--hrl-target); border-radius: var(--hrl-radius-pill); border: 2px solid var(--hrl-line); background: var(--hrl-bg); color: var(--hrl-ink); font-size: var(--hrl-t-small); font-weight: 600; cursor: pointer; }
 .hrl-person--ok { border-color: var(--hrl-ok); background: var(--hrl-ok-bg); color: var(--hrl-ok); }
 .hrl-person--warn { border-color: var(--hrl-warn); background: var(--hrl-warn-bg); color: var(--hrl-warn); }
+
+/* Search palette (search.js): one box for screens and people, ⌘K anywhere. */
+.hrl-search { width: min(36rem, calc(100% - 2rem)); margin: 10vh auto auto; padding: var(--hrl-s-4); border: 1px solid var(--hrl-line); border-radius: var(--hrl-radius); background: var(--hrl-card); color: var(--hrl-ink); }
+.hrl-search::backdrop { background: rgb(15 23 42 / .4); }
+.hrl-search__list { list-style: none; margin: var(--hrl-s-1) 0 0; padding: 0; display: grid; gap: var(--hrl-s-2); }

data/app/controllers/hr_lite/admin/attendances_controller.rb

@@ -11,6 +11,7 @@ module HrLite
         @employees = @employees.select { |user| visible.include?(user.id) } if visible
         @records = AttendanceRecord.for_date(@date).where(user_id: @employees.map(&:id)).index_by(&:user_id)
         @flagged_count = @records.values.count(&:flagged?)
+        @penalty_minutes = AttendancePenalty.held_minutes(@employees.map(&:id))
         # "How many people punched where": off-site punches count as one place.
         @offices = OfficeLocation.active.to_a
         @places = %i[check_in check_out].index_with do |side|
@@ -62,7 +63,8 @@ module HrLite
 
       # Regularization: fix punches with a mandatory note, fully audited.
       # Clearing both punch times deletes the record (that is how an
-      # erroneous punch is removed).
+      # erroneous punch is removed). Reset check-in does the same; reset
+      # check-out leaves them checked in, so they can check in or out again.
       def update
         @employee = find_manageable_employee
         date = parse_date_param(params[:date])
@@ -75,7 +77,7 @@ module HrLite
         end
 
         attrs = params.require(:attendance_record).permit(:check_in_at, :check_out_at, :status, :half_day_part)
-        if attrs[:check_in_at].blank? && attrs[:check_out_at].blank?
+        if params[:reset] == "check_in" || (attrs[:check_in_at].blank? && attrs[:check_out_at].blank?)
           # Nothing to remove used to still write a `destroy` audit row with
           # subject_id 0 and email the employee that a punch was removed.
           unless record.persisted?
@@ -84,6 +86,9 @@ module HrLite
           end
 
           record.destroy
+          # Its late penalties go too, so checking in again is not charged twice.
+          AttendancePenalty.active.where(attendance_record_id: record.id)
+                           .find_each { |p| p.update!(removed_at: Time.current, removed_by_id: hr_current_user.id, removal_reason: note) }
           log_regularization(record, note, removed: true)
           return redirect_to admin_attendance_path(@employee.id, month: date.strftime("%Y-%m")),
                              notice: "Punch removed."
@@ -98,6 +103,7 @@ module HrLite
         end
 
         record.assign_attributes(attrs)
+        record.clear_check_out if params[:reset] == "check_out"
         record.half_day_part = attrs[:half_day_part].presence if attrs.key?(:half_day_part)
         record.status = record.half_day_part ? "half_day" : "present" if attrs.key?(:half_day_part)
         record.status = "present" if record.status.blank?
@@ -107,6 +113,10 @@ module HrLite
 
         if record.save
           log_regularization(record, note, removed: false)
+          if params[:reset] == "check_out" && date == Date.current
+            WorkModeEvent.start!(user_id: @employee.id, mode: record.work_mode || "office", source: "hr",
+                                 actor: hr_current_user, attendance_record: record)
+          end
           redirect_to admin_attendance_path(@employee.id, month: date.strftime("%Y-%m")),
                       notice: "Attendance updated."
         else
@@ -115,6 +125,19 @@ module HrLite
         end
       end
 
+      # One screen per person for a day, week (default) or month: each day, leave,
+      # penalties and every request, each linking to where it is fixed or decided.
+      def summary
+        @employee = find_visible_employee
+        @period = WorkModeDurations::Period.build(params[:period].presence_in(%w[day week month]) || "week", parse_date_param(params[:date]))
+        range = @period.from..@period.to
+        @days = DayStatus.new(user: @employee, range: range)
+        @punches = AttendancePunch.where(user_id: @employee.id, date: range).order(:at, :id).group_by(&:date)
+        @penalties = AttendancePenalty.active.where(user_id: @employee.id, date: range).group(:date).sum(:minutes)
+        @balances = LeaveType.active.where(paid: true).map { |type| LeaveBalance.for(@employee, type, LeaveYear.current_key) }
+        @requests = summary_requests(@employee, range)
+      end
+
       # HR sets a locked slot from today for the period.
       def slot
         @employee = find_manageable_employee
@@ -144,8 +167,53 @@ module HrLite
         redirect_to admin_attendance_path(@employee.id, month: month), notice: "Penalty removed."
       end
 
+      # HR settles part or all of a person's penalty hours with a reason; the rest stays.
+      def remove_penalty_hours
+        @employee = find_manageable_employee
+        minutes = (params[:hours].to_f * 60).round
+        reason = params[:reason].to_s.strip
+        held = AttendancePenalty.held_minutes(@employee.id)[@employee.id].to_i
+        back = admin_attendance_path(@employee.id, anchor: "penalties")
+        return redirect_to back, alert: "A reason is required." if reason.blank?
+        return redirect_to back, alert: "Remove between 0.5h and #{helpers.hrl_days(held / 60.0)}h." unless minutes.positive? && minutes <= held
+
+        removal = PenaltyRemoval.create!(user_id: @employee.id, minutes: minutes, reason: reason, removed_by_id: hr_current_user.id)
+        hours = helpers.hrl_days(minutes / 60.0)
+        AuditLog.record!(action: "attendance.penalty_hours_removed", subject: removal, actor: hr_current_user,
+                         changes: { "minutes" => minutes, "reason" => reason })
+        Notifications.publish("attendance.penalty_removed", title: "HR removed #{hours}h of your penalties", body: reason,
+                                                            path: "/attendance#penalties", bell_to: [ @employee ], email_to: [ @employee ])
+        redirect_to back, notice: "Removed #{hours}h of penalties."
+      end
+
       private
 
+      # [what, when, status, link] per request in the range, only for the types
+      # whose own page this viewer may open for this person.
+      def summary_requests(user, range)
+        id, from, to = user.id, range.first, range.last
+        day = ->(d) { d.strftime("%a %-d %b") }
+        {
+          "leave.view" => -> {
+            LeaveRequest.where(user_id: id).overlapping_range(from, to).includes(:leave_type)
+                        .map { |r| [ r.leave_type.name, r.date_range_label, r.status, admin_leave_request_path(r) ] } +
+              CompOffRequest.where(user_id: id, date_worked: range).map { |r| [ "Comp-off", day.(r.date_worked), r.status, admin_comp_off_request_path(r) ] }
+          },
+          "attendance.view" => -> {
+            WfhRequest.where(user_id: id).overlapping(from, to).map { |r| [ "WFH", r.dates_label, r.status, admin_wfh_request_path(r) ] } +
+              RegularizationRequest.where(user_id: id, date: range).map { |r| [ "Attendance fix", day.(r.date), r.status, admin_regularization_request_path(r) ] }
+          },
+          "expense.approve" => -> {
+            Expense.where(user_id: id, spent_on: range).includes(:category)
+                   .map { |r| [ "Claim · #{r.category.name}", day.(r.spent_on), r.status, admin_expenses_path ] }
+          },
+          "document.view" => -> {
+            Document.where(user_id: id, created_at: from.beginning_of_day..to.end_of_day)
+                    .map { |r| [ "Document · #{r.title}", day.(r.created_at.to_date), r.verification, admin_employee_documents_path(id) ] }
+          }
+        }.select { |perm, _| hr_reaches?(perm, user) }.flat_map { |_, rows| rows.call }
+      end
+
       # Viewing somebody's month and rewriting their punches are different
       # authorities, so they resolve through different permissions — a role
       # can be given the board without being given the pencil.

data/app/controllers/hr_lite/admin/settings_controller.rb

@@ -8,7 +8,7 @@ module HrLite
       def update
         @setting = Setting.instance
         if @setting.update(params.require(:setting).permit(:weekend_policy, :employee_code_prefix, :lunch_break_minutes, :short_break_minutes,
-                                                          :day_minutes, :half_day_below_minutes, :recheck_in_from, :recheck_in_until))
+                                                          :day_minutes, :half_day_below_minutes, :recheck_in_from, :recheck_in_until, :penalty_leave_type_id))
           redirect_to edit_admin_setting_path, notice: "Settings saved."
         else
           render :edit, status: :unprocessable_entity

data/app/controllers/hr_lite/admin/wfh_requests_controller.rb

@@ -1,7 +1,7 @@
 module HrLite
   module Admin
     # WFH board (counts, who is home on a date, every schedule) and the
-    # decision screen. Viewing is attendance.view, deciding attendance.manage.
+    # decision screen. Viewing is attendance.view, deciding and changing attendance.manage.
     class WfhRequestsController < BaseController
       def index
         @from = params[:from].present? ? parse_date_param(params[:from]) : Date.current
@@ -64,6 +64,19 @@ module HrLite
         redirect_to admin_wfh_request_path(request), alert: "Only pending requests can be decided."
       end
 
+      # HR changes an approved or rejected request: dates (past allowed) and/or decision, with a reason.
+      def update
+        request = decidable.where(status: %w[approved rejected]).find(params[:id])
+        note = params[:decision_note].to_s.strip
+        return redirect_to admin_wfh_request_path(request), alert: "A reason is required to change WFH." if note.blank?
+
+        request.change!(actor: hr_current_user, start_date: params[:start_date], end_date: params[:end_date],
+                        status: params[:status].presence_in(%w[approved rejected]) || request.status, note: note)
+        redirect_to admin_wfh_request_path(request), notice: "WFH changed for #{hr_display_name(request.user)}."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_wfh_request_path(request), alert: "Could not change WFH: #{e.record.errors.full_messages.to_sentence}"
+      end
+
       private
 
       # Nobody decides their own request; out-of-scope ids are a 404.

data/app/controllers/hr_lite/search_controller.rb

@@ -0,0 +1,42 @@
+module HrLite
+  # One box for the whole HRMS: the screens this person may open (the menu's
+  # own gates) and the people they may see. Nothing outside their reach is
+  # ever listed; a page they still try to open answers as it always does.
+  class SearchController < ApplicationController
+    MIN_CHARS = 2
+    # Words people type that are in neither a tab's label nor its paths (which also match).
+    WORDS = {
+      "My attendance" => "check in check out punch penalty penalties regularization fix late",
+      "My leave" => "apply leave holiday comp-off balance", "Calendar" => "holidays",
+      "WFH" => "work from home", "Home locations" => "wfh location", "Slips" => "payslip salary slip",
+      "Expenses" => "claim reimbursement", "Employees" => "people staff", "Profile" => "my details",
+      "Settings" => "working day half day penalties leave type check in again"
+    }.freeze
+
+    rate_limit to: 60, within: 1.minute, by: -> { hr_current_user.id }, name: "hr_search"
+
+    def show
+      @q = params[:q].to_s.strip
+      words = @q.downcase.split
+      limit = params[:frame] ? 5 : 10
+      @features = @people = []
+      if @q.length >= MIN_CHARS
+        @features = helpers.hrl_sections.flat_map { |s| s[:tabs].map { |t| [ "#{s[:label]} · #{t[:label]}", public_send(t[:path]), "#{s[:label]} #{t[:label]} #{WORDS[t[:label]]} #{Array(t[:match]).join(' ').tr('/_', '  ')}".downcase ] } }
+                           .select { |_, _, text| words.all? { |w| text.include?(w) } }.first(limit)
+        @people = people_matching(words).first(limit) if hr_operations?
+      end
+      params[:frame] ? render(partial: "results") : render(:show)
+    end
+
+    private
+
+    # Only people whose attendance this viewer may open; the result opens their This week.
+    def people_matching(words)
+      codes = EmployeeProfile.pluck(:user_id, :employee_code).to_h
+      HrLite.employees.select do |user|
+        text = [ HrLite.display_name(user), user.email, codes[user.id] ].join(" ").downcase
+        words.all? { |w| text.include?(w) } && hr_reaches?("attendance.view", user)
+      end
+    end
+  end
+end

data/app/helpers/hr_lite/application_helper.rb

@@ -170,7 +170,8 @@ module HrLite
       "Me" => '<circle cx="12" cy="8" r="4"/><path d="M4 21a8 8 0 0 1 16 0"/>',
       "Help" => '<circle cx="12" cy="12" r="9"/><path d="M9.1 9a3 3 0 0 1 5.8 1c0 2-3 3-3 3M12 17h.01"/>',
       "Admin" => '<path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/>',
-      "More" => '<circle cx="5" cy="12" r="1.5"/><circle cx="12" cy="12" r="1.5"/><circle cx="19" cy="12" r="1.5"/>'
+      "More" => '<circle cx="5" cy="12" r="1.5"/><circle cx="12" cy="12" r="1.5"/><circle cx="19" cy="12" r="1.5"/>',
+      "Search" => '<circle cx="11" cy="11" r="7"/><path d="m20 20-3.5-3.5"/>'
     }.freeze
 
     def hrl_icon(name)

data/app/models/hr_lite/attendance_penalty.rb

@@ -25,6 +25,16 @@ module HrLite
       ((date + 1)..(date + 31)).select { |d| calendar.working_day?(d) }.first(count)
     end
 
+    # Penalty minutes still held per person: every active penalty ever, less the
+    # hours HR removed. They build up until HR removes them; never below 0.
+    def self.held_minutes(user_ids)
+      removed = PenaltyRemoval.where(user_id: user_ids).group(:user_id).sum(:minutes)
+      active.where(user_id: user_ids).group(:user_id).sum(:minutes).to_h { |id, m| [ id, [ m - removed[id].to_i, 0 ].max ] }
+    end
+
+    # Every 5h held is half a day of leave: 7h = 0.5, 10h = 1, 100h = 10.
+    def self.days_for(minutes) = (minutes / 300) * 0.5
+
     def label = REASONS.fetch(reason)
   end
 end

data/app/models/hr_lite/attendance_punch.rb

@@ -0,0 +1,14 @@
+module HrLite
+  # One check-in or check-out as it happened. Append-only: checking in again,
+  # a repeat check-out or an HR reset changes the day record, never these.
+  class AttendancePunch < ApplicationRecord
+    belongs_to :user, class_name: HrLite.config.user_class
+
+    validates :kind, inclusion: { in: %w[in out] }
+
+    def readonly? = persisted?
+
+    # "In 09:30 Office" — the day's punches read as one line.
+    def to_s = [ kind == "in" ? "In" : "Out", at.strftime("%H:%M"), AttendanceRecord::PLACES[place] ].compact.join(" ")
+  end
+end

data/app/models/hr_lite/attendance_record.rb

@@ -83,6 +83,15 @@ module HrLite
       check_out_at.present? && rechecked_in_at.nil? && now >= s.recheck_in_from && now < s.recheck_in_until
     end
 
+    # Every check-in and check-out of the day, oldest first, kept even after an HR reset.
+    def punches = AttendancePunch.where(user_id: user_id, date: date).order(:at, :id).to_a
+
+    # Drops the check-out so the person is in again (check in again, HR reset).
+    def clear_check_out(**attrs)
+      assign_attributes(check_out_at: nil, check_out_lat: nil, check_out_lng: nil, check_out_accuracy_m: nil,
+                        check_out_place: nil, check_out_home_m: nil, check_out_work_location_id: nil, **attrs)
+    end
+
     # Metres between where the day was checked in and checked out.
     def punch_gap_m
       return unless check_in_lat && check_in_lng && check_out_lat && check_out_lng

data/app/models/hr_lite/leave_balance.rb

@@ -71,6 +71,17 @@ module HrLite
       entitled(as_of: as_of) - used
     end
 
+    # What can be applied for: available less days held for penalties, in half days.
+    def applicable(as_of: Date.current) = ([ available(as_of: as_of) - penalty_days, 0 ].max * 2).floor / 2.0
+
+    # Days held off the leave type HR picks in Settings. The balance itself is
+    # not cut; leave can be applied for only up to available less these.
+    def penalty_days
+      return 0 unless leave_type_id && leave_type_id == Setting.instance.penalty_leave_type_id
+
+      AttendancePenalty.days_for(AttendancePenalty.held_minutes(user_id)[user_id].to_i)
+    end
+
     private
 
     # Quota earned by as_of, before carry/adjustments. Monthly accrual

data/app/models/hr_lite/leave_request.rb

@@ -362,15 +362,22 @@ module HrLite
       errors.add(:base, "During probation only 1 day of leave a month is allowed") if taken + days_count > 1
     end
 
-    # Only comp-off is refused past its balance: it is earned credit, never
-    # borrowed. Any other type's excess becomes loss of pay at approval.
+    # Refused past the balance: comp-off (earned credit, never borrowed) and a
+    # balance with days held for penalties. Any other excess becomes loss of pay at approval.
     def sufficient_balance
       return unless start_date && end_date && leave_type
-      return if leave_type.unlimited? || !leave_type.comp_off || errors.any?
+      return if leave_type.unlimited? || errors.any?
 
-      if LeaveDayCounter.count(self) > balance.available(as_of: start_date)
-        errors.add(:base, "Not enough #{leave_type.name} balance")
-      end
+      held = balance.penalty_days
+      return unless leave_type.comp_off || held.positive?
+
+      left = balance.applicable(as_of: start_date)
+      return if LeaveDayCounter.count(self) <= left
+
+      return errors.add(:base, "Not enough #{leave_type.name} balance") unless held.positive?
+
+      days = ->(n) { ActiveSupport::NumberHelper.number_to_rounded(n, precision: 1, strip_insignificant_zeros: true) }
+      errors.add(:base, "For these dates you can apply for at most #{days.(left)} days of #{leave_type.name} — #{days.(held)} #{held == 1 ? 'day' : 'days'} held for penalties")
     end
   end
 end

data/app/models/hr_lite/penalty_removal.rb

@@ -0,0 +1,13 @@
+module HrLite
+  # HR took hours off a person's penalty total, with a reason; the rest stays.
+  # Append-only, so every settlement stays on the person's record.
+  class PenaltyRemoval < ApplicationRecord
+    belongs_to :user, class_name: HrLite.config.user_class
+    belongs_to :removed_by, class_name: HrLite.config.user_class
+
+    validates :minutes, numericality: { only_integer: true, greater_than: 0 }
+    validates :reason, presence: true
+
+    def readonly? = persisted?
+  end
+end

data/app/models/hr_lite/setting.rb

@@ -5,6 +5,9 @@ module HrLite
 
     WEEKEND_POLICIES = %w[sun_only sat_sun second_fourth_sat_sun].freeze
 
+    # Attendance penalties come off this leave type's balance (none: they stay as time).
+    belongs_to :penalty_leave_type, class_name: "HrLite::LeaveType", optional: true
+
     validates :weekend_policy, inclusion: { in: WEEKEND_POLICIES }
     validates :lunch_break_minutes, numericality: { only_integer: true, in: 5..120 }
     validates :short_break_minutes, numericality: { only_integer: true, in: 1..60 }

data/app/models/hr_lite/wfh_request.rb

@@ -12,7 +12,9 @@ module HrLite
 
     validates :start_date, :end_date, :reason, presence: true
     validates :status, inclusion: { in: STATUSES }
-    validate :dates_in_window, :no_overlap, on: :create
+    validate :dates_in_window, on: :create
+    validate :no_overlap
+    validate :changed_dates, on: :update, if: -> { start_date_changed? || end_date_changed? }
 
     scope :pending, -> { where(status: "pending") }
     scope :approved, -> { where(status: "approved") }
@@ -59,6 +61,16 @@ module HrLite
                "/admin/wfh_requests/#{id}", HrLite.admin_users)
     end
 
+    # HR changes a decided request after the fact: dates, decision or both, with a reason.
+    def change!(actor:, start_date:, end_date:, status:, note:)
+      was = "#{dates_label}, #{self.status}"
+      update!(start_date: start_date, end_date: end_date, status: status, decided_by_id: actor.id,
+              decided_at: Time.current, decision_note: note)
+      AuditLog.record!(action: "wfh.changed", subject: self, actor: actor,
+                       changes: { "was" => was, "now" => "#{dates_label}, #{status}", "note" => note })
+      announce("wfh.#{status}", "HR changed your WFH — #{dates_label}, #{status}", note, "/wfh_requests", [ user ])
+    end
+
     def notify_requested
       AuditLog.record!(action: "wfh.requested", subject: self, actor: user,
                        changes: { "dates" => dates_label, "reason" => reason })
@@ -100,10 +112,18 @@ module HrLite
     end
 
     def no_overlap
-      return unless start_date && end_date && user_id
+      return unless start_date && end_date && user_id && %w[pending approved].include?(status)
 
-      clash = self.class.live.where(user_id: user_id).overlapping(start_date, end_date).exists?
+      clash = self.class.live.where(user_id: user_id).where.not(id: id).overlapping(start_date, end_date).exists?
       errors.add(:base, "You already have a pending or approved WFH request on some of these dates") if clash
     end
+
+    # HR may move a request into the past to match the days actually worked.
+    def changed_dates
+      return unless start_date && end_date
+
+      errors.add(:end_date, "must be on or after the start date") if end_date < start_date
+      errors.add(:end_date, "HR can set at most #{HR_MAX_DAYS} days at a time") if days > HR_MAX_DAYS
+    end
   end
 end

data/app/services/hr_lite/attendance_puncher.rb

@@ -69,8 +69,7 @@ module HrLite
               return Result.new(record: record, error: "Check in again is open once a day, #{s.recheck_in_from}–#{s.recheck_in_until}.")
             end
 
-            record.assign_attributes(check_out_at: nil, check_out_lat: nil, check_out_lng: nil, check_out_accuracy_m: nil,
-                                     check_out_place: nil, check_out_home_m: nil, check_out_work_location_id: nil, rechecked_in_at: Time.current)
+            record.clear_check_out(rechecked_in_at: Time.current)
           else
             return Result.new(record: record, error: already_in_message(record)) if record.check_in_at.present?
 
@@ -91,6 +90,9 @@ module HrLite
 
         apply_geo_flags(record)
         record.save!
+        AttendancePunch.create!(user_id: record.user_id, date: record.date, attendance_record_id: record.id,
+                                kind: @kind == :check_in ? "in" : "out", at: reopen ? record.rechecked_in_at : record.public_send("#{@kind}_at"),
+                                lat: @lat, lng: @lng, accuracy_m: @accuracy_m, place: punch_place, home_m: home_m, work_location_id: @location&.id)
         apply_slot_rules(record) if @kind == :check_in && !reopen && HrLite.config.attendance_slots
         track_work_mode(record) if HrLite.config.office_geofence
       end
@@ -232,10 +234,12 @@ module HrLite
       record.public_send("#{side}_lat=", @lat)
       record.public_send("#{side}_lng=", @lng)
       record.public_send("#{side}_accuracy_m=", @accuracy_m)
-      record.public_send("#{side}_place=", @place || ("office" if @lat && @lng && in_office?))
+      record.public_send("#{side}_place=", punch_place)
       record.public_send("#{side}_home_m=", home_m)
     end
 
+    def punch_place = @place || ("office" if @lat && @lng && in_office?)
+
     def already_in_message(record)
       "Already checked in at #{record.check_in_at.in_time_zone(HrLite.config.time_zone).strftime('%H:%M')}."
     end

data/app/views/hr_lite/admin/attendances/index.html.erb

@@ -41,7 +41,10 @@
       <% @employees.each do |employee| %>
         <% record = @records[employee.id] %>
         <tr>
-          <td data-label="Employee"><%= hr_display_name(employee) %></td>
+          <td data-label="Employee"><%= hr_display_name(employee) %>
+            <% if (held = @penalty_minutes[employee.id].to_i).positive? %>
+              <br><a class="hrl-card__link hrl-small" href="<%= hr_lite.admin_attendance_path(employee.id, anchor: "penalties") %>">Penalties <%= hrl_duration(held * 60) %> · <%= hrl_days(HrLite::AttendancePenalty.days_for(held)) %> days</a>
+            <% end %></td>
           <td data-label="In"><%= record&.check_in_at&.strftime("%H:%M") || "—" %></td>
           <td data-label="Out"><%= record&.check_out_at&.strftime("%H:%M") || "—" %></td>
           <td data-label="Location" class="hrl-small">

data/app/views/hr_lite/admin/attendances/show.html.erb

@@ -86,6 +86,15 @@
         <%= f.submit "Save fix", class: "hrl-btn hrl-btn--primary" %>
         <a class="hrl-btn" href="<%= hr_lite.admin_attendance_path(@employee.id, month: @month.strftime("%Y-%m")) %>">Cancel</a>
       </div>
+      <%# A mistaken punch today: put them back in, or clear the day so they check in again. %>
+      <% if @edit_date == Date.current && @edit_record.check_in_at %>
+        <div class="hrl-form-actions">
+          <% if @edit_record.check_out_at %>
+            <button type="submit" name="reset" value="check_out" class="hrl-btn" data-turbo-confirm="Reset today's check-out? They are checked in again and can check out later.">Reset check&#8209;out</button>
+          <% end %>
+          <button type="submit" name="reset" value="check_in" class="hrl-btn hrl-btn--danger" data-turbo-confirm="Reset today's check-in? The whole day is cleared and they check in again.">Reset check&#8209;in</button>
+        </div>
+      <% end %>
     <% end %>
   </section>
 <% end %>

data/app/views/hr_lite/admin/attendances/summary.html.erb

@@ -0,0 +1,73 @@
+<% content_for(:page_title) { "#{hr_display_name(@employee)} — #{@period.label}" } %>
+<% content_for(:tabrow) { render "hr_lite/shared/person_tabs", user: @employee } %>
+<% at = ->(args) { hr_lite.summary_admin_attendance_path(@employee.id, args) }
+   fix = @employee.id != hr_current_user.id && hr_reaches?("attendance.manage", @employee)
+   tones = { present: "hrl-badge--ok", half_day: "hrl-badge--warn", absent: "hrl-badge--bad" } %>
+<div class="hrl-page__head">
+  <h1 class="hrl-page__title"><%= hr_display_name(@employee) %></h1>
+</div>
+
+<section class="hrl-card">
+  <div class="hrl-row hrl-row--tabs hrl-row--mb">
+    <% %w[day week month].each do |kind| %>
+      <a class="hrl-btn <%= 'hrl-btn--primary' if @period.kind == kind %>" <%= 'aria-current="page"'.html_safe if @period.kind == kind %> href="<%= at.(period: kind, date: @period.from) %>"><%= kind.capitalize %></a>
+    <% end %>
+  </div>
+  <div class="hrl-row">
+    <a class="hrl-btn" href="<%= at.(period: @period.kind, date: @period.shift(-1)) %>" aria-label="Previous <%= @period.kind %>">&lsaquo;</a>
+    <strong><%= @period.label %></strong>
+    <a class="hrl-btn" href="<%= at.(period: @period.kind, date: @period.shift(1)) %>" aria-label="Next <%= @period.kind %>">&rsaquo;</a>
+  </div>
+  <%= form_with url: hr_lite.summary_admin_attendance_path(@employee.id), method: :get, local: true, class: "hrl-row hrl-mt" do %>
+    <input type="hidden" name="period" value="<%= @period.kind %>">
+    <div class="hrl-field"><label for="pw-date">Go to date</label><%= date_field_tag :date, @period.from, id: "pw-date" %></div>
+    <div class="hrl-form-actions"><button type="submit" class="hrl-btn">Show</button></div>
+  <% end %>
+</section>
+
+<section class="hrl-card">
+  <h2 class="hrl-card__title">Days</h2>
+  <% (@period.from..@period.to).each do |date| %>
+    <% day = @days.for(date); rec = day.record; punches = @punches[date].to_a %>
+    <div class="hrl-feed__item hrl-row">
+      <div class="hrl-feed__body hrl-small">
+        <strong><%= date.strftime("%a %-d %b") %></strong>
+        <span class="hrl-badge <%= tones[day.kind] %>"><%= HrLite::ApplicationHelper::DAY_STATES[day.kind][1] %></span>
+        <% if rec&.check_in_at %>
+          <div>In <%= rec.check_in_at.strftime("%H:%M") %><% if rec.check_out_at %> · Out <%= rec.check_out_at.strftime("%H:%M") %> · <%= hrl_duration(rec.worked_duration) %> worked<% end %></div>
+        <% end %>
+        <% if punches.size > 2 %><div>All punches: <%= punches.join(" · ") %></div><% end %>
+        <% if (minutes = @penalties[date]) %><div><span class="hrl-badge hrl-badge--warn">+<%= minutes %> min</span> penalty</div><% end %>
+        <% if rec&.flagged? %><div>Flagged: <%= rec.flag_note %></div><% end %>
+      </div>
+      <% if fix && date <= Date.current %>
+        <a class="hrl-btn" href="<%= hr_lite.admin_attendance_path(@employee.id, date: date, month: date.strftime("%Y-%m"), anchor: "regularize") %>">Fix<span class="hrl-sr-only"> <%= date.strftime("%-d %b") %></span></a>
+      <% end %>
+    </div>
+  <% end %>
+</section>
+
+<section class="hrl-card">
+  <h2 class="hrl-card__title">Requests</h2>
+  <% if @requests.empty? %><p class="hrl-card--empty">No requests in this <%= @period.kind %>.</p><% end %>
+  <% @requests.each do |what, dates, status, url| %>
+    <div class="hrl-feed__item hrl-row">
+      <div class="hrl-feed__body hrl-small"><strong><%= what %></strong> · <%= dates %> <%= hrl_request_status_badge(status) %></div>
+      <a class="hrl-btn" href="<%= url %>">Open<span class="hrl-sr-only"> <%= what %>, <%= dates %></span></a>
+    </div>
+  <% end %>
+</section>
+
+<% if hr_reaches?("leave.view", @employee) %>
+  <section class="hrl-card">
+    <h2 class="hrl-card__title">Leave balance</h2>
+    <% @balances.each do |balance| %>
+      <div class="hrl-feed__item hrl-small"><strong><%= balance.leave_type.name %></strong> · <%= hrl_days(balance.available) %> left
+        <% if (held = balance.penalty_days).positive? %> · <%= hrl_days(held) %> held for penalties · can apply <%= hrl_days(balance.applicable) %><% end %></div>
+    <% end %>
+  </section>
+<% end %>
+
+<% if HrLite.config.attendance_slots %>
+  <%= render "hr_lite/attendance/penalties", user: @employee, month: @period.from, removable: fix %>
+<% end %>

data/app/views/hr_lite/admin/leave_balances/index.html.erb

@@ -15,7 +15,7 @@
             <td data-label="Employee"><%= hr_display_name(employee) %><% if @no_joining_date.include?(employee.id) %><br><span class="hrl-badge hrl-badge--bad">No joining date — no leave accrues</span><% end %></td>
             <% @types.each do |type| %>
               <% balance = HrLite::LeaveBalance.for(employee, type, @year) %>
-              <td data-label="<%= type.code %>" class="hrl-num"><span><strong><%= hrl_days(balance.available) %></strong> left<br><span class="hrl-small hrl-muted"><%= hrl_days(balance.used) %>/<%= hrl_days(balance.entitled) %> used</span></span></td>
+              <td data-label="<%= type.code %>" class="hrl-num"><span><strong><%= hrl_days(balance.available) %></strong> left<br><span class="hrl-small hrl-muted"><%= hrl_days(balance.used) %>/<%= hrl_days(balance.entitled) %> used</span><% if (held = balance.penalty_days).positive? %><br><span class="hrl-small"><%= hrl_days(held) %> held for penalties</span><% end %></span></td>
             <% end %>
           </tr>
         <% end %>

data/app/views/hr_lite/admin/settings/edit.html.erb

@@ -39,6 +39,11 @@
       <%= f.time_field :recheck_in_until %>
       <p class="hrl-hint">After checking out, a person can check in again once a day inside these hours.</p>
     </div>
+    <div class="hrl-field">
+      <%= f.label :penalty_leave_type_id, "Penalties come off" %>
+      <%= f.collection_select :penalty_leave_type_id, HrLite::LeaveType.active, :id, :name, { include_blank: "No leave (penalties stay as time)" }, data: { hrl_filter: "Type a leave type to filter" } %>
+      <p class="hrl-hint">Every working day of penalty time this leave year holds one day of this leave, in half days, and leave past it is refused. Removing a penalty gives the day back.</p>
+    </div>
     <div class="hrl-field">
       <%= f.label :employee_code_prefix, "Employee code prefix" %>
       <%= f.text_field :employee_code_prefix %>

data/app/views/hr_lite/admin/wfh_requests/show.html.erb

@@ -38,3 +38,20 @@
     <% end %>
   </section>
 <% end %>
+
+<% if @decidable && (@request.approved? || @request.rejected?) %>
+  <section class="hrl-card">
+    <h2 class="hrl-card__title">Change this WFH</h2>
+    <%= form_with url: hr_lite.admin_wfh_request_path(@request), method: :patch, local: true do |f| %>
+      <div class="hrl-field"><%= f.label :start_date, "From" %><%= f.date_field :start_date, value: @request.start_date, required: true %></div>
+      <div class="hrl-field"><%= f.label :end_date, "To" %><%= f.date_field :end_date, value: @request.end_date, required: true %></div>
+      <fieldset class="hrl-field">
+        <legend class="hrl-small">Decision</legend>
+        <label class="hrl-field--check"><%= f.radio_button :status, "approved", checked: @request.approved? %> Approved</label>
+        <label class="hrl-field--check"><%= f.radio_button :status, "rejected", checked: @request.rejected? %> Rejected</label>
+      </fieldset>
+      <div class="hrl-field"><%= f.label :decision_note, "Reason for the change (required)", for: "change_note" %><%= f.text_area :decision_note, id: "change_note", required: true %></div>
+      <div class="hrl-form-actions"><%= f.button "Save change", type: :submit, class: "hrl-btn hrl-btn--primary" %></div>
+    <% end %>
+  </section>
+<% end %>

data/app/views/hr_lite/attendance/_penalties.html.erb

@@ -1,3 +1,21 @@
+<%# The running total: penalties add up until HR removes hours; every 5h holds half a day of leave. %>
+<% held = HrLite::AttendancePenalty.held_minutes(user.id)[user.id].to_i
+   leave_type = HrLite::Setting.instance.penalty_leave_type %>
+<section class="hrl-card" id="penalties">
+  <h2 class="hrl-card__title">Penalty hours</h2>
+  <p><strong><%= hrl_duration(held * 60) %></strong> held · <%= hrl_days(HrLite::AttendancePenalty.days_for(held)) %> days<%= " of #{leave_type.name}" if leave_type %></p>
+  <p class="hrl-hint">Penalties add up until HR removes them. Every 5 hours holds half a day of leave, which can't be applied for.</p>
+  <% HrLite::PenaltyRemoval.where(user_id: user.id).includes(:removed_by).order(created_at: :desc).each do |removal| %>
+    <div class="hrl-feed__item hrl-small"><div class="hrl-feed__body">Removed <%= hrl_duration(removal.minutes * 60) %> on <%= removal.created_at.strftime("%-d %b %Y") %> by <%= hr_display_name(removal.removed_by) %>: <%= removal.reason %></div></div>
+  <% end %>
+  <% if local_assigns[:removable] && held.positive? %>
+    <%= form_with url: hr_lite.remove_penalty_hours_admin_attendance_path(user.id), method: :post, local: true, class: "hrl-mt" do %>
+      <div class="hrl-field"><label for="hrl-remove-hours">Hours to remove</label><input type="number" class="hrl-input" id="hrl-remove-hours" name="hours" min="0.5" step="0.5" max="<%= held / 60.0 %>" required></div>
+      <div class="hrl-field"><label for="hrl-remove-hours-reason">Reason (required)</label><input type="text" class="hrl-input" id="hrl-remove-hours-reason" name="reason" required></div>
+      <div class="hrl-form-actions"><button type="submit" class="hrl-btn">Remove hours</button></div>
+    <% end %>
+  <% end %>
+</section>
 <% penalties = HrLite::AttendancePenalty.where(user_id: user.id, date: month.all_month).order(:date, :id) %>
 <section class="hrl-card">
   <h2 class="hrl-card__title">Penalties in <%= month.strftime("%B") %></h2>

data/app/views/hr_lite/attendance/_punch_card.html.erb

@@ -39,6 +39,10 @@
       <span class="hrl-muted">Not checked in yet.</span>
     <% end %>
   </div>
+  <%# Checked in again: every earlier in and out stays on show. %>
+  <% if record && (punches = record.punches).size > 2 %>
+    <p class="hrl-small">All punches: <%= punches.join(" · ") %></p>
+  <% end %>
   <% if HrLite.config.attendance_slots %>
     <%= render "hr_lite/attendance/slot", record: record %>
   <% end %>
@@ -77,15 +81,16 @@
         </details>
       <% end %>
       <% if flash[:punch_offer] == "home" %>
-        <fieldset class="hrl-field">
-          <legend class="hrl-small">Is this your home location?</legend>
+        <%# A choice the punch needs: red, and geo_punch.js scrolls it into view on a phone. %>
+        <div class="hrl-errors" data-hrl-must-choose><fieldset class="hrl-field">
+          <legend class="hrl-small">Is this your home location? Choose one to check in.</legend>
           <% if HrLite::WorkLocation.live.where(user_id: hr_current_user.id).count < HrLite::WorkLocation::MAX_LIVE %>
             <label class="hrl-field--check"><input type="radio" name="place" value="home" required> Yes, save this place as a home location</label>
           <% else %>
             <p class="hrl-small"><%= HrLite::WorkLocationsController::CAP_MESSAGE %></p>
           <% end %>
           <label class="hrl-field--check"><input type="radio" name="place" value="travel" required> No, I am travelling</label>
-        </fieldset>
+        </fieldset></div>
       <% end %>
       <button type="submit" class="hrl-btn hrl-btn--primary hrl-btn--big hrl-btn--block"><%= record&.check_out_at ? "Check in again" : "Check in" %></button>
       <p class="hrl-small hrl-muted" data-hrl-geo-status role="status" aria-live="polite"></p>
@@ -96,7 +101,7 @@
       <input type="hidden" name="lat"><input type="hidden" name="lng">
       <input type="hidden" name="accuracy_m"><input type="hidden" name="geo_status">
       <% if flash[:punch_offer] == "travel" %>
-        <div class="hrl-field"><label class="hrl-field--check"><input type="checkbox" name="place" value="travel" required> I am travelling — check out here</label></div>
+        <div class="hrl-field hrl-errors" data-hrl-must-choose><label class="hrl-field--check"><input type="checkbox" name="place" value="travel" required> Tick to confirm: I am travelling — check out here</label></div>
       <% end %>
       <button type="submit" class="hrl-btn hrl-btn--big hrl-btn--block">
         Check out

data/app/views/hr_lite/attendance/_trail.html.erb

@@ -8,6 +8,9 @@
     <% if home_m %> · <%= number_with_delimiter(home_m) %> m from home<% end %>
     <% if accuracy %> · ±<%= accuracy %> m<% end %></div>
 <% end %>
+<% if (punches = record.punches).size > 2 %>
+  <div class="hrl-punch-line">All punches: <%= punches.join(" · ") %></div>
+<% end %>
 <% if (route = record.route_url) %>
   <div class="hrl-punch-line"><a class="hrl-card__link" href="<%= route %>" target="_blank" rel="noopener noreferrer">View route on Google Maps<span class="hrl-sr-only"> for <%= record.date.strftime("%-d %b") %></span></a></div>
 <% end %>

data/app/views/hr_lite/attendance/show.html.erb

@@ -40,6 +40,7 @@
     <dl class="hrl-deflist">
       <dt>In</dt><dd><%= rec&.check_in_at&.strftime("%H:%M") || "—" %></dd>
       <dt>Out</dt><dd><%= rec&.check_out_at&.strftime("%H:%M") || "—" %></dd>
+      <% if rec && (punches = rec.punches).size > 2 %><dt>All punches</dt><dd><%= punches.join(" · ") %></dd><% end %>
       <dt>Worked</dt><dd><%= hrl_duration(rec&.worked_duration) %></dd>
       <% if part %><dt>Half</dt><dd><%= HrLite::DAY_PARTS.rassoc(part)&.first %></dd><% end %>
       <% if leave %><dt>Leave</dt><dd><%= leave.leave_type.name %></dd><% end %>

data/app/views/hr_lite/leave_balances/index.html.erb

@@ -16,6 +16,7 @@
         <dt><%= balance.leave_type.comp_off ? "Credited" : "Entitled" %></dt><dd><%= hrl_days(balance.entitled) %></dd>
         <dt>Used</dt><dd><%= hrl_days(balance.used) %></dd>
         <dt>Available</dt><dd><strong><%= hrl_days(balance.available) %></strong></dd>
+        <% if (held = balance.penalty_days).positive? %><dt>Held for penalties</dt><dd><%= hrl_days(held) %></dd><dt>You can apply</dt><dd><%= hrl_days(balance.applicable) %></dd><% end %>
         <% if balance.carried_forward.positive? %><dt>Carried forward</dt><dd><%= hrl_days(balance.carried_forward) %></dd><% end %>
         <% if balance.adjustment.nonzero? %><dt>Adjustments</dt><dd><%= hrl_days(balance.adjustment) %> <span class="hrl-muted hrl-small"><%= balance.adjustment_note %></span></dd><% end %>
       </dl>

data/app/views/hr_lite/leave_requests/_balance_chips.html.erb

@@ -8,7 +8,7 @@
       <% types.each do |type| %>
         <% balance = HrLite::LeaveBalance.for(user, type, HrLite::LeaveYear.current_key) %>
         <span class="hrl-badge hrl-badge--type" style="--hrl-type: <%= type.color %>">
-          <%= type.name %> · <%= hrl_days(balance.available) %> of <%= hrl_days(balance.entitled) %> left
+          <%= type.name %> · <%= hrl_days(balance.available) %> of <%= hrl_days(balance.entitled) %> left<% if (held = balance.penalty_days).positive? %> · <%= hrl_days(held) %> held for penalties<% end %>
         </span>
       <% end %>
     </div>

data/app/views/hr_lite/leave_requests/new.html.erb

@@ -12,10 +12,10 @@
       <% left = @balances.index_by(&:leave_type_id) %>
       <div class="hrl-chiprow" role="radiogroup" aria-labelledby="hrl-leave-type">
         <% HrLite::LeaveType.active.each_with_index do |type, i| %>
-          <label><%= f.radio_button :leave_type_id, type.id, required: i.zero? %><span><%= type.name.sub(/ leave\z/i, "") %><%= " · #{hrl_days(left[type.id].available)} left" if left[type.id] %><%= " · Unpaid" unless type.paid %></span></label>
+          <label><%= f.radio_button :leave_type_id, type.id, required: i.zero? %><span><%= type.name.sub(/ leave\z/i, "") %><%= " · #{hrl_days(left[type.id].available)} left" if left[type.id] %><% if left[type.id] && (held = left[type.id].penalty_days).positive? %> · <%= hrl_days(held) %> held for penalties<% end %><%= " · Unpaid" unless type.paid %></span></label>
         <% end %>
       </div>
-      <p class="hrl-hint">Days beyond your balance are unpaid (loss of pay), cut from that month's salary.</p>
+      <p class="hrl-hint">Days beyond your balance are unpaid (loss of pay), cut from that month's salary.<% if (capped = @balances.find { |b| b.penalty_days.positive? }) %> Today you can apply for at most <%= hrl_days(capped.applicable) %> days of <%= capped.leave_type.name %>, <%= hrl_days(capped.penalty_days) %> held for penalties.<% end %></p>
     </div>
     <div class="hrl-field">
       <%= f.label :start_date, "From" %>

data/app/views/hr_lite/search/_results.html.erb

@@ -0,0 +1,14 @@
+<% if @q.length < HrLite::SearchController::MIN_CHARS %>
+  <p class="hrl-small hrl-muted">Type at least <%= HrLite::SearchController::MIN_CHARS %> letters — a screen (payslip, WFH, penalty) or a person.</p>
+<% elsif @features.empty? && @people.empty? %>
+  <p class="hrl-small hrl-muted">Nothing you can open matches “<%= @q %>”.</p>
+<% else %>
+  <% [ [ "Screens", @features.map { |label, url, _| [ label, url ] } ],
+       [ "People", @people.map { |user| [ hr_display_name(user), hr_lite.summary_admin_attendance_path(user.id) ] } ] ].each do |title, rows| %>
+    <% next if rows.empty? %>
+    <h2 class="hrl-small hrl-muted hrl-mt"><%= title %></h2>
+    <ul class="hrl-search__list">
+      <% rows.each do |label, url| %><li><a class="hrl-nav__link" href="<%= url %>"><%= label %></a></li><% end %>
+    </ul>
+  <% end %>
+<% end %>

data/app/views/hr_lite/search/show.html.erb

@@ -0,0 +1,9 @@
+<% content_for(:page_title) { "Search" } %>
+<div class="hrl-page__head"><h1 class="hrl-page__title">Search</h1></div>
+<section class="hrl-card">
+  <form action="<%= hr_lite.search_path %>" method="get" role="search" class="hrl-field">
+    <label for="search-page-q">Search screens and people</label>
+    <input id="search-page-q" class="hrl-input" type="search" name="q" value="<%= @q %>" autocomplete="off" autofocus>
+  </form>
+  <%= render "results" %>
+</section>

data/app/views/hr_lite/shared/_person_tabs.html.erb

@@ -2,6 +2,7 @@
 <% ops = hr_operations?
    profile = HrLite::EmployeeProfile.find_by(user_id: user.id)
    tabs = [
+     [ "This week", (hr_lite.summary_admin_attendance_path(user.id) if ops && hr_reaches?("attendance.view", user)) ],
      [ "Overview", (hr_lite.admin_employee_path(profile) if profile && hr_leadership?) ],
      [ "Attendance", (hr_lite.admin_attendance_path(user.id) if ops && hr_reaches?("attendance.view", user)) ],
      [ "Work time", (hr_lite.admin_work_time_path(user_id: user.id) if HrLite.config.office_geofence && ops && hr_can?("work_analytics.view", scope: :team) && hr_reaches?("work_analytics.view", user)) ],

data/app/views/hr_lite/work_time/_bars.html.erb

@@ -30,11 +30,11 @@
   <details class="hrl-small">
     <summary>Show as a table</summary>
     <table class="hrl-table">
-      <thead><tr><th><%= period.bucket.to_s.capitalize %></th><th class="hrl-num">Working</th><th class="hrl-num">Breaks</th><th class="hrl-num">Total</th></tr></thead>
+      <thead><tr><th><%= period.bucket.to_s.capitalize %></th><th class="hrl-num">Working (breaks incl.)</th><th class="hrl-num">Of which breaks</th><th class="hrl-num">Total</th></tr></thead>
       <tbody>
         <% buckets.each do |key, modes| %>
           <tr><td><%= key.strftime(period.bucket == :day ? "%a %-d %b" : fmt) %></td>
-            <td class="hrl-num"><%= hrl_duration(HrLite::WorkModeDurations::WORKING.sum { |m| modes[m] }) %></td>
+            <td class="hrl-num"><%= hrl_duration((HrLite::WorkModeDurations::WORKING + HrLite::WorkModeDurations::BREAKS).sum { |m| modes[m] }) %></td>
             <td class="hrl-num"><%= hrl_duration(HrLite::WorkModeDurations::BREAKS.sum { |m| modes[m] }) %></td>
             <td class="hrl-num"><%= hrl_duration(totals[key]) %></td></tr>
         <% end %>

data/app/views/hr_lite/work_time/_report.html.erb

@@ -34,12 +34,12 @@
 <% else %>
   <% office = result.by_mode["office"]; wfh = result.by_mode["wfh"]; field = result.by_mode["travelling"] + result.by_mode["outside_meeting"] %>
   <div class="hrl-kpis">
-    <% [ [ "Attendance (check-in to check-out)", result.attendance ], [ "Working time", result.working ], [ "Breaks", result.breaks ],
+    <% [ [ "Attendance (check-in to check-out)", result.attendance ], [ "Working time (breaks included)", result.working + result.breaks ], [ "Of which breaks", result.breaks ],
          [ "In office", office ], [ "Work from home", wfh ], [ "Travel and client meetings", field ], [ "Out of office", result.other ] ].each do |kpi_label, secs| %>
       <div class="hrl-kpi"><div class="hrl-kpi__value"><%= hrl_duration(secs) %></div><div class="hrl-kpi__label"><%= kpi_label %></div></div>
     <% end %>
   </div>
-  <p class="hrl-small hrl-muted">Working time = in office, work from home, travelling, client and other meetings, and busy. It is time in those modes, not a measure of output.
+  <p class="hrl-small hrl-muted">Working time = in office, work from home, travelling, client and other meetings, busy, and the breaks taken during the day — an 8h 30m shift includes its break. It is time in those modes, not a measure of output.
     Recorded on <%= pluralize(result.days_with_data.size, "day") %>.</p>
 
   <%= render "hr_lite/work_time/donut", result: result, label: label %>

data/app/views/layouts/hr_lite/application.html.erb

@@ -26,6 +26,7 @@
       </a>
 
       <nav class="hrl-side__nav">
+        <a class="hrl-nav__link" href="<%= hr_lite.search_path %>" data-hrl-search-open><%= hrl_icon("Search") %>Search<span class="hrl-sr-only"> (Ctrl K)</span></a>
         <% hrl_sections.each do |section| %>
           <% if section[:divider] %><span class="hrl-side__divider" aria-hidden="true"></span><% end %>
           <%= hrl_nav_link(section) %>
@@ -94,6 +95,7 @@
         <% if HrLite.config.back_link %>
           <a class="hrl-nav__link hrl-side__back" href="<%= HrLite.config.back_link[:url] %>"><%= HrLite.config.back_link[:label] %></a>
         <% end %>
+        <a class="hrl-nav__link" href="<%= hr_lite.search_path %>" data-hrl-search-open><%= hrl_icon("Search") %>Search<span class="hrl-sr-only"> (Ctrl K)</span></a>
         <%# The second line names the place's tabs, so a phone user knows what is inside before opening it. %>
         <% rest.each do |section| %>
           <%= hrl_nav_link(section, hint: section[:tabs].map { |t| t[:label] }.join(", ")) %>
@@ -105,7 +107,15 @@
   <%= javascript_include_tag "hr_lite/confirm", defer: true %>
   <%= javascript_include_tag "hr_lite/mention", defer: true %>
   <%= javascript_include_tag "hr_lite/nav", defer: true %>
-  <%= javascript_include_tag "hr_lite/select_filter", defer: true %>
+<%= javascript_include_tag "hr_lite/select_filter", defer: true %>
+<%= javascript_include_tag "hr_lite/search", defer: true %>
+<dialog class="hrl-search" data-hrl-search aria-label="Search">
+  <form action="<%= hr_lite.search_path %>" method="get" role="search">
+    <label class="hrl-sr-only" for="hrl-search-q">Search screens and people</label>
+    <input id="hrl-search-q" class="hrl-input" type="search" name="q" placeholder="Search screens and people" autocomplete="off">
+  </form>
+  <div data-hrl-search-results aria-live="polite"></div>
+</dialog>
   <%= yield :scripts %>
 </body>
 </html>

data/config/routes.rb

@@ -58,6 +58,7 @@ HrLite::Engine.routes.draw do
   get "people/:user_id/timeline", to: "timelines#show", as: :person_timeline
   resources :holidays, only: :index
   get "calendar", to: "calendar#show"
+  get "search", to: "search#show", as: :search
   resources :salary_slips, only: %i[index show]
   resource :employee_profile, only: :show, path: "profile"
   patch "id_card/photo", to: "id_cards#photo", as: :id_card_photo
@@ -73,7 +74,7 @@ HrLite::Engine.routes.draw do
     get "overview", to: "overview#index"
     resources :attendances, only: %i[index show update], param: :user_id do
       collection { get :week }
-      member { post :slot; post :unlock_slot; post :remove_penalty }
+      member { get :summary; post :slot; post :unlock_slot; post :remove_penalty; post :remove_penalty_hours }
     end
     resources :leave_requests, only: %i[index show new create edit update] do
       member { post :approve; post :reject; post :cancel }
@@ -87,7 +88,7 @@ HrLite::Engine.routes.draw do
     resources :regularization_requests, only: %i[index show] do
       member { post :approve; post :reject }
     end
-    resources :wfh_requests, only: %i[index show create] do
+    resources :wfh_requests, only: %i[index show create update] do
       member { post :approve; post :reject }
     end
     resources :work_locations, only: :index do

data/db/migrate/20261015100000_create_hr_lite_attendance_punches.rb

@@ -0,0 +1,20 @@
+class CreateHrLiteAttendancePunches < ActiveRecord::Migration[8.1]
+  def change
+    create_table :hr_lite_attendance_punches do |t|
+      t.bigint :user_id, null: false
+      t.date :date, null: false
+      t.bigint :attendance_record_id
+      t.string :kind, null: false
+      t.datetime :at, null: false
+      t.decimal :lat, precision: 9, scale: 6
+      t.decimal :lng, precision: 9, scale: 6
+      t.integer :accuracy_m
+      t.string :place
+      t.integer :home_m
+      t.bigint :work_location_id
+
+      t.timestamps
+    end
+    add_index :hr_lite_attendance_punches, [ :user_id, :date ]
+  end
+end

data/db/migrate/20261016090000_add_penalty_leave_type_to_hr_lite_settings.rb

@@ -0,0 +1,5 @@
+class AddPenaltyLeaveTypeToHrLiteSettings < ActiveRecord::Migration[8.1]
+  def change
+    add_column :hr_lite_settings, :penalty_leave_type_id, :bigint
+  end
+end

data/db/migrate/20261016091000_create_hr_lite_penalty_removals.rb

@@ -0,0 +1,13 @@
+class CreateHrLitePenaltyRemovals < ActiveRecord::Migration[8.1]
+  def change
+    create_table :hr_lite_penalty_removals do |t|
+      t.bigint :user_id, null: false
+      t.integer :minutes, null: false
+      t.text :reason, null: false
+      t.bigint :removed_by_id, null: false
+
+      t.timestamps
+    end
+    add_index :hr_lite_penalty_removals, :user_id
+  end
+end

data/lib/hr_lite/notifications.rb

@@ -21,6 +21,7 @@ module HrLite
       "attendance.missed_check_in"  => { bell: true, email: true, leadership_email: false, leadership_bell: false },
       "attendance.missed_check_out" => { bell: true, email: true, leadership_email: false, leadership_bell: false },
       "attendance.short_day" => { bell: true, email: true, leadership_email: false, leadership_bell: false },
+      "attendance.penalty_removed" => { bell: true, email: true, leadership_email: false, leadership_bell: false },
       "payroll.finalized"     => { bell: false, email: false, leadership_email: true,  leadership_bell: true  },
       "ca.flagged" => { bell: true, email: true, leadership_email: false, leadership_bell: false },
       "ca.reminder" => { bell: true, email: true, leadership_email: false, leadership_bell: false },

data/lib/hr_lite/version.rb

@@ -1,3 +1,3 @@
 module HrLite
-  VERSION = "0.43.0"
+  VERSION = "0.50.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hr_lite
 version: !ruby/object:Gem::Version
-  version: 0.43.0
+  version: 0.50.0
 platform: ruby
 authors:
 - kshitiz sinha
@@ -74,6 +74,7 @@ files:
 - app/assets/javascripts/hr_lite/nav.js
 - app/assets/javascripts/hr_lite/photo_crop.js
 - app/assets/javascripts/hr_lite/print.js
+- app/assets/javascripts/hr_lite/search.js
 - app/assets/javascripts/hr_lite/select_filter.js
 - app/assets/javascripts/hr_lite/share.js
 - app/assets/javascripts/hr_lite/tax_preview.js
@@ -147,6 +148,7 @@ files:
 - app/controllers/hr_lite/regularization_requests_controller.rb
 - app/controllers/hr_lite/resignations_controller.rb
 - app/controllers/hr_lite/salary_slips_controller.rb
+- app/controllers/hr_lite/search_controller.rb
 - app/controllers/hr_lite/tax_declarations_controller.rb
 - app/controllers/hr_lite/team_controller.rb
 - app/controllers/hr_lite/timelines_controller.rb
@@ -184,6 +186,7 @@ files:
 - app/models/hr_lite/asset.rb
 - app/models/hr_lite/asset_assignment.rb
 - app/models/hr_lite/attendance_penalty.rb
+- app/models/hr_lite/attendance_punch.rb
 - app/models/hr_lite/attendance_record.rb
 - app/models/hr_lite/attendance_slot.rb
 - app/models/hr_lite/audit_log.rb
@@ -211,6 +214,7 @@ files:
 - app/models/hr_lite/office_location.rb
 - app/models/hr_lite/payroll_line_item.rb
 - app/models/hr_lite/payroll_run.rb
+- app/models/hr_lite/penalty_removal.rb
 - app/models/hr_lite/performance_plan.rb
 - app/models/hr_lite/policy.rb
 - app/models/hr_lite/policy_acknowledgement.rb
@@ -261,6 +265,7 @@ files:
 - app/views/hr_lite/admin/attendances/_slot.html.erb
 - app/views/hr_lite/admin/attendances/index.html.erb
 - app/views/hr_lite/admin/attendances/show.html.erb
+- app/views/hr_lite/admin/attendances/summary.html.erb
 - app/views/hr_lite/admin/attendances/week.html.erb
 - app/views/hr_lite/admin/audit_logs/index.html.erb
 - app/views/hr_lite/admin/awards/_form.html.erb
@@ -398,6 +403,8 @@ files:
 - app/views/hr_lite/salary_slips/index.html.erb
 - app/views/hr_lite/salary_slips/pdf.html.erb
 - app/views/hr_lite/salary_slips/show.html.erb
+- app/views/hr_lite/search/_results.html.erb
+- app/views/hr_lite/search/show.html.erb
 - app/views/hr_lite/shared/_bell.html.erb
 - app/views/hr_lite/shared/_form_errors.html.erb
 - app/views/hr_lite/shared/_pagination.html.erb
@@ -489,6 +496,9 @@ files:
 - db/migrate/20261015090000_add_working_day_to_hr_lite_settings.rb
 - db/migrate/20261015091000_add_rechecked_in_at_to_hr_lite_attendance_records.rb
 - db/migrate/20261015092000_add_hours_allowance_to_hr_lite_employee_profiles.rb
+- db/migrate/20261015100000_create_hr_lite_attendance_punches.rb
+- db/migrate/20261016090000_add_penalty_leave_type_to_hr_lite_settings.rb
+- db/migrate/20261016091000_create_hr_lite_penalty_removals.rb
 - lib/generators/hr_lite/install/install_generator.rb
 - lib/generators/hr_lite/install/templates/AFTER_INSTALL
 - lib/generators/hr_lite/install/templates/initializer.rb