hr_lite 0.57.1 → 0.60.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 288b37a483def4fc57b059096e2ee8af708d1245dd2587119855635ea73d9c11
-  data.tar.gz: 65fe286df5fb17b8b369ab499b2980e3456b69f92b4f823f89c75e1053af7f35
+  metadata.gz: 051c3d4efb869bb1c40f819e884e245c5d45462c2664a62464c84ec2686b750e
+  data.tar.gz: 263dbc61a8861a69b06b0b6597542e496feac6fd3bb6eb78cadd04a947681f41
 SHA512:
-  metadata.gz: 955e1a2242f0c9585b219c5896b9069253624c9797aaa1028ecc7c068f5e5cde734af64ddfcf4982696a4b066e66bb322ed67e37a46d5b1587d5ff04e4d14ddc
-  data.tar.gz: 57ef0949c6c9f8e4569b8b0157b212ba52ad19f226541f5977d32f8773e1555e444b91eda89ccdc350df84c7bf9db51c279bfd3830aff994c487286c102a6693
+  metadata.gz: c4b151e5a71926157f4976df9ad3fd55f3b60468c6f0d10f7877d2fc9c2363e1ebe7d5d9a86961660848744a840e9b96f597cc1207d86168f20dd7410096ba60
+  data.tar.gz: c457f267dc96c0b89278bf870f431174204cb258879cb68e90b152ef37d224354068732b2b118678e6b1329cf24351c5a26dca8672e120549d83c3b906e622a1

data/CHANGELOG.md

@@ -7,6 +7,29 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.60.0] - 2026-10-21
+
+Background failures reach a person. No migrations.
+
+- **"Failed in the background" card on the HR overview.** A failed event email, leadership email or bell, host notify hook, WFH or work-location notice, audit row, onboarding checklist or calendar read used to write only a log line. Each is now recorded once in the audit trail (`failure.<event>`, with the error class, a 200-character message and the affected user) through `HrLite.record_failure`, and the ten most recent show on the overview to anyone who can open the audit trail. Money-tier subjects stay superadmin-only, as on the audit trail.
+
+## [0.59.0] - 2026-10-21
+
+No silent failures where a person is waiting on the answer. No migrations. Audit: `docs/audits/silent_failures.md`.
+
+- **Decisions say why they failed.** 24 admin and employee actions answered every failed save with a stock line such as "Only pending requests can be decided." They now show the record's own reason, and keep the stock line for the genuine not-pending case.
+- **Offboarding no longer claims access was revoked when it was not.** A failing `offboard_user` hook (offboard, or accepting a resignation on its last day) or `on_designation_change` hook now shows an alert with the cause and what to do by hand.
+- **Search, live tax, lead search and @mentions say when they could not load.** They no longer look like "no results" or show a stale figure. An unreadable ID-card photo (HEIC on desktop) now says so.
+
+## [0.58.0] - 2026-10-21
+
+Leave and birthdays for the whole team, Keka-style. No migrations. Hosts schedule `HrLite::TeamNoticesJob` daily at 10am.
+
+- **Pending leave shows on Home.** "On leave this week" lists pending requests too, tagged "Pending approval". Approval is management's decision, not a reason to hide the leave.
+- **10am "On leave today" email** to every current employee: name and dates, never the leave type. No one out, no email.
+- **10am "Birthdays today" email**, same rules. A 29 Feb birthday falls on 28 Feb outside leap years.
+- **Birthdays this week** card on Home, Monday to Sunday, today marked.
+
 ## [0.57.1] - 2026-10-19
 
 Forms in the host's iOS and Android staff apps (D24). No migrations.

data/README.md

@@ -384,6 +384,7 @@ whatever you run). Each is idempotent and sends nothing on a quiet day.
 | Job | Schedule | Purpose |
 |---|---|---|
 | `HrLite::DailyDigestJob` | each morning | Leadership digest: who is out today, pending approvals, flagged punches, missing checkouts |
+| `HrLite::TeamNoticesJob` | daily, 10am | Emails every current employee who is on leave today and whose birthday it is; each email is skipped when its list is empty |
 | `HrLite::PayrollAutoDraftJob` | monthly, on the 1st | Draft and compute the previous month's payroll from attendance, then notify the approvers (`payroll.approve`) and payroll operators |
 | `HrLite::CaReviewReminderJob` | weekly (it acts only in March) | Tell CA reviewers how many slips and declarations are still unverified before 31 March |
 | `HrLite::CaReviewOverdueJob` | 31 March, evening | Tell payroll and HR what the CA has not verified, and any flags left open |

data/app/assets/javascripts/hr_lite/crm_picker.js

@@ -12,12 +12,14 @@
       if (q.length < 2) return;
       timer = setTimeout(function () {
         fetch(box.dataset.hrlCrm + "?q=" + encodeURIComponent(q), { headers: { Accept: "application/json" }, credentials: "same-origin" })
-          .then(function (r) { return r.ok ? r.json() : []; })
+          .then(function (r) { if (!r.ok) throw r; return r.json(); })
           .then(function (leads) {
             select.length = 1;
+            select.options[0].text = "No lead";
             leads.forEach(function (lead) { select.add(new Option(lead.label, lead.id)); });
             if (leads.length) select.selectedIndex = 1;
-          });
+          })
+          .catch(function () { select.length = 1; select.options[0].text = "Lead search failed. Type again to retry."; });
       }, 250);
     });
   }

data/app/assets/javascripts/hr_lite/mention.js

@@ -59,9 +59,9 @@
 
     var lookup = debounce(function (query) {
       fetch(url + "?q=" + encodeURIComponent(query), { headers: { Accept: "application/json" } })
-        .then(function (r) { return r.ok ? r.json() : []; })
+        .then(function (r) { if (!r.ok) throw r; return r.json(); })
         .then(renderResults)
-        .catch(close);
+        .catch(function () { close(); menu.textContent = "Could not load names. Keep typing to retry."; menu.hidden = false; });
     }, 200);
 
     textarea.addEventListener("input", function () {

data/app/assets/javascripts/hr_lite/photo_crop.js

@@ -30,6 +30,10 @@
       zoom.closest("[data-hrl-photo-adjust]").hidden = false;
       place();
     };
+    img.onerror = function () {
+      input.value = "";
+      alert("Could not read that picture. Choose a JPG or PNG photo.");
+    };
     img.src = URL.createObjectURL(file);
   });
 

data/app/assets/javascripts/hr_lite/search.js

@@ -31,8 +31,9 @@
     clearTimeout(timer);
     timer = setTimeout(function () {
       fetch(form.action + "?frame=1&q=" + encodeURIComponent(input.value), { credentials: "same-origin", cache: "no-store" })
-        .then(function (response) { return response.ok ? response.text() : ""; })
-        .then(function (html) { out.innerHTML = html; });
+        .then(function (response) { if (!response.ok) throw response; return response.text(); })
+        .then(function (html) { out.innerHTML = html; })
+        .catch(function () { out.innerHTML = '<p class="hrl-errors" role="alert">Search failed. Check your connection and try again.</p>'; });
     }, 180);
   });
 

data/app/assets/javascripts/hr_lite/tax_preview.js

@@ -13,8 +13,9 @@
     Array.from(data.keys()).forEach(function (key) { if (/\[proofs\]/.test(key)) data.delete(key); });
     data.delete("_method");
     fetch(form.dataset.hrlTaxPreview, { method: "POST", body: data, credentials: "same-origin", headers: { "Accept": "text/html" } })
-      .then(function (response) { return response.ok ? response.text() : null; })
-      .then(function (html) { if (html) panel.innerHTML = html; });
+      .then(function (response) { if (!response.ok) throw response; return response.text(); })
+      .then(function (html) { panel.innerHTML = html; })
+      .catch(function () { panel.innerHTML = '<p class="hrl-errors" role="alert">Could not work out the tax just now. Check your connection; Save still works.</p>'; });
   }
   var rupees = new Intl.NumberFormat("en-IN", { style: "currency", currency: "INR", maximumFractionDigits: 0 });
   // The limit bar and "₹X of the ₹Y limit counts" follow the amount as typed.

data/app/controllers/hr_lite/admin/assets_controller.rb

@@ -28,8 +28,8 @@ module HrLite
         user = HrLite.user_klass.find(params[:user_id])
         asset.assign_to!(user, actor: hr_current_user)
         redirect_to admin_assets_path, notice: "#{asset.name} given to #{HrLite.display_name(user)}."
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_assets_path, alert: "#{asset.name} is already with somebody."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_assets_path, alert: reason_for(e, "#{asset.name} is already with somebody.")
       end
 
       def take_back
@@ -37,8 +37,8 @@ module HrLite
         asset.return!(actor: hr_current_user, condition: params[:condition_note],
                       status: params[:status].presence_in(Asset::STATUSES) || "available")
         redirect_to admin_assets_path, notice: "#{asset.name} taken back."
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_assets_path, alert: "#{asset.name} is not with anybody."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_assets_path, alert: reason_for(e, "#{asset.name} is not with anybody.")
       end
 
       private

data/app/controllers/hr_lite/admin/attendances_controller.rb

@@ -87,7 +87,7 @@ module HrLite
                                notice: "Nothing to remove for that day."
           end
 
-          record.destroy
+          record.destroy!
           # Its late penalties go too, so checking in again is not charged twice.
           AttendancePenalty.active.where(attendance_record_id: record.id)
                            .find_each { |p| p.update!(removed_at: Time.current, removed_by_id: hr_current_user.id, removal_reason: note) }

data/app/controllers/hr_lite/admin/ca_reviews_controller.rb

@@ -51,8 +51,8 @@ module HrLite
       def resolve
         CaReview.find(params[:id]).resolve!(actor: hr_current_user, note: params[:note])
         redirect_back_to_list notice: "Marked resolved."
-      rescue ActiveRecord::RecordInvalid
-        redirect_back_to_list alert: "Only a flagged item can be resolved."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_back_to_list alert: reason_for(e, "Only a flagged item can be resolved.")
       end
 
       private

data/app/controllers/hr_lite/admin/comp_off_requests_controller.rb

@@ -18,8 +18,8 @@ module HrLite
                     notice: "Approved — #{request.credit_days.to_f} day credited."
       rescue CompOffRequest::MissingCompOffType, CompOffRequest::StaleOffDay => e
         redirect_to admin_comp_off_request_path(request), alert: e.message
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_comp_off_request_path(request), alert: "Only pending requests can be decided."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_comp_off_request_path(request), alert: reason_for(e, "Only pending requests can be decided.")
       end
 
       def reject
@@ -31,8 +31,8 @@ module HrLite
 
         request.reject!(actor: hr_current_user, note: note)
         redirect_to admin_comp_off_requests_path, notice: "Request rejected."
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_comp_off_request_path(request), alert: "Only pending requests can be decided."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_comp_off_request_path(request), alert: reason_for(e, "Only pending requests can be decided.")
       end
 
       private

data/app/controllers/hr_lite/admin/designation_changes_controller.rb

@@ -12,7 +12,10 @@ module HrLite
         @change = DesignationChange.new(change_params.merge(
           user_id: @profile.user_id, created_by_id: hr_current_user.id
         ))
-        if @change.save
+        if @change.save && @change.hook_error
+          redirect_to admin_employee_path(@profile),
+                      alert: "Role change recorded, but it could not be applied to their login (#{@change.hook_error}) — update their access by hand."
+        elsif @change.persisted?
           redirect_to admin_employee_path(@profile), notice: "Role change recorded."
         else
           render :new, status: :unprocessable_entity

data/app/controllers/hr_lite/admin/employees_controller.rb

@@ -101,13 +101,15 @@ module HrLite
         # since an unreturned laptop and un-revoked access both outlive the
         # employment.
         ChecklistItem.open_for!(@profile.user, kind: "offboarding", anchor_date: exit_date)
+        done = "Offboarded — last day #{exit_date.strftime('%d %b %Y')}"
         begin
           HrLite.config.offboard_user.call(@profile.user)
         rescue => e
           Rails.logger.error("[hr_lite] offboard_user failed: #{e.class}: #{e.message}")
+          return redirect_to admin_employee_path(@profile),
+                             alert: "#{done}, but access was NOT revoked (#{e.message.truncate(120)}) — revoke the login by hand."
         end
-        redirect_to admin_employee_path(@profile),
-                    notice: "Offboarded — last day #{exit_date.strftime('%d %b %Y')}, access revoked."
+        redirect_to admin_employee_path(@profile), notice: "#{done}, access revoked."
       rescue ActiveRecord::RecordInvalid => e
         redirect_to admin_employee_path(@profile), alert: e.record.errors.full_messages.to_sentence
       end

data/app/controllers/hr_lite/admin/expenses_controller.rb

@@ -15,8 +15,8 @@ module HrLite
         expense = decidable.find(params[:id])
         expense.approve!(actor: hr_current_user, note: params[:decision_note].presence)
         redirect_to admin_expenses_path, notice: "Claim approved."
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_expenses_path, alert: "Only a submitted claim can be approved."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_expenses_path, alert: reason_for(e, "Only a submitted claim can be approved.")
       end
 
       def reject
@@ -26,8 +26,8 @@ module HrLite
 
         expense.reject!(actor: hr_current_user, note: note)
         redirect_to admin_expenses_path, notice: "Claim rejected."
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_expenses_path, alert: "Only a submitted claim can be rejected."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_expenses_path, alert: reason_for(e, "Only a submitted claim can be rejected.")
       end
 
       def reimburse
@@ -35,8 +35,8 @@ module HrLite
         month = parse_month_param(params[:period_month])
         expense.reimburse!(actor: hr_current_user, period_month: month)
         redirect_to admin_expenses_path, notice: "Will be paid with #{month.strftime('%B %Y')} payroll."
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_expenses_path, alert: "Only an approved claim can go on payroll, and only on a month not yet paid."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_expenses_path, alert: reason_for(e, "Only an approved claim can go on payroll, and only on a month not yet paid.")
       end
 
       # The receipt the employee had to upload, for the person deciding; same rules as a document download.

data/app/controllers/hr_lite/admin/hr_requests_controller.rb

@@ -20,8 +20,8 @@ module HrLite
         assignee = HrLite.user_klass.find(params[:assignee_id])
         request.assign!(actor: hr_current_user, assignee: assignee)
         redirect_to admin_hr_request_path(request), notice: "Assigned to #{HrLite.display_name(assignee)}."
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_hr_request_path(request), alert: "This request is already settled."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_hr_request_path(request), alert: reason_for(e, "This request is already settled.")
       end
 
       def resolve
@@ -30,8 +30,8 @@ module HrLite
         redirect_to admin_hr_requests_path, notice: "Answered."
       rescue ArgumentError
         redirect_to admin_hr_request_path(request), alert: "Write an answer before resolving."
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_hr_request_path(request), alert: "This request is already settled."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_hr_request_path(request), alert: reason_for(e, "This request is already settled.")
       end
 
       private

data/app/controllers/hr_lite/admin/leave_requests_controller.rb

@@ -65,8 +65,8 @@ module HrLite
           redirect_to admin_leave_request_path(request),
                       alert: "Cannot approve — comp-off credit no longer covers this request."
         end
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_leave_request_path(request), alert: "Only pending requests can be decided."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_leave_request_path(request), alert: reason_for(e, "Only pending requests can be decided.")
       end
 
       # LeaveRequest#cancellable_by? has always allowed an admin to call off
@@ -96,8 +96,8 @@ module HrLite
 
         request.reject!(actor: hr_current_user, note: note)
         redirect_to admin_leave_requests_path, notice: "Leave rejected."
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_leave_request_path(request), alert: "Only pending requests can be decided."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_leave_request_path(request), alert: reason_for(e, "Only pending requests can be decided.")
       end
 
       private

data/app/controllers/hr_lite/admin/overview_controller.rb

@@ -6,6 +6,11 @@ module HrLite
       def index
         @query = OverviewQuery.new(user_ids: hr_access.visible_user_ids("leave.view"))
         @kpis = @query.kpis
+        # Emails, bells and audit rows that failed in the background; the audit trail's own gate.
+        return unless hr_can?("profile.manage", scope: :all)
+
+        failures = AuditLog.recent.where("action LIKE ?", "failure.%").includes(:subject).limit(SECTION_CAP)
+        @failures = hr_superadmin? ? failures : failures.outside_money_tier
       end
     end
   end

data/app/controllers/hr_lite/admin/regularization_requests_controller.rb

@@ -18,8 +18,8 @@ module HrLite
       rescue RegularizationRequest::InvalidMerge => e
         redirect_to admin_regularization_request_path(request),
                     alert: "Cannot apply — #{e.message}. Fix the day manually or reject with a note."
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_regularization_request_path(request), alert: "Only pending tickets can be decided."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_regularization_request_path(request), alert: reason_for(e, "Only pending tickets can be decided.")
       end
 
       def reject
@@ -31,8 +31,8 @@ module HrLite
 
         request.reject!(actor: hr_current_user, note: note)
         redirect_to admin_regularization_requests_path, notice: "Ticket rejected."
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_regularization_request_path(request), alert: "Only pending tickets can be decided."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_regularization_request_path(request), alert: reason_for(e, "Only pending tickets can be decided.")
       end
 
       private

data/app/controllers/hr_lite/admin/resignations_controller.rb

@@ -17,6 +17,10 @@ module HrLite
             "#{hr_display_name(resignation.user)}, so no exit date was recorded — " \
             "create the profile to clip attendance and payroll."
         end
+        if resignation.access_error
+          return redirect_to admin_employees_path,
+                             alert: "#{notice} But access was NOT revoked (#{resignation.access_error}) — revoke the login by hand."
+        end
         redirect_to admin_employees_path, notice: notice
       rescue ActiveRecord::RecordInvalid => e
         # A rejected exit date used to be reported as "not pending", which was

data/app/controllers/hr_lite/admin/tax_declarations_controller.rb

@@ -62,8 +62,8 @@ module HrLite
           declaration.verify!(actor: hr_current_user, note: "Proof accepted")
         end
         redirect_to admin_tax_declarations_path, notice: "Accepted and verified — payroll uses these amounts now."
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_tax_declaration_path(declaration), alert: "Only a submitted declaration can be accepted."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_tax_declaration_path(declaration), alert: reason_for(e, "Only a submitted declaration can be accepted.")
       end
 
       def update

data/app/controllers/hr_lite/admin/wfh_requests_controller.rb

@@ -49,8 +49,8 @@ module HrLite
         request = decidable.find(params[:id])
         request.approve!(actor: hr_current_user, note: params[:decision_note].to_s.strip.presence)
         redirect_to admin_wfh_requests_path, notice: "WFH approved for #{hr_display_name(request.user)}."
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_wfh_request_path(request), alert: "Only pending requests can be decided."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_wfh_request_path(request), alert: reason_for(e, "Only pending requests can be decided.")
       end
 
       def reject
@@ -60,8 +60,8 @@ module HrLite
 
         request.reject!(actor: hr_current_user, note: note)
         redirect_to admin_wfh_requests_path, notice: "WFH rejected."
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_wfh_request_path(request), alert: "Only pending requests can be decided."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_wfh_request_path(request), alert: reason_for(e, "Only pending requests can be decided.")
       end
 
       # HR changes an approved or rejected request: dates (past allowed) and/or decision, with a reason.

data/app/controllers/hr_lite/admin/work_locations_controller.rb

@@ -38,11 +38,11 @@ module HrLite
                                                           body: note, path: "/work_locations",
                                                           bell_to: [ location.user ], email_to: [ location.user ])
         rescue => e
-          Rails.logger.error("[hr_lite] work location notification failed: #{e.class}: #{e.message}")
+          HrLite.record_failure("work_location.#{status}", e, subject: location.user)
         end
         redirect_to admin_work_locations_path, notice: "Location #{status}."
-      rescue ActiveRecord::RecordInvalid
-        redirect_to admin_work_locations_path, alert: "Only pending locations can be decided."
+      rescue ActiveRecord::RecordInvalid => e
+        redirect_to admin_work_locations_path, alert: reason_for(e, "Only pending locations can be decided.")
       end
     end
   end

data/app/controllers/hr_lite/application_controller.rb

@@ -100,6 +100,11 @@ module HrLite
       end
     end
 
+    # The record's own reason when it has one; `fallback` names the usual cause.
+    def reason_for(error, fallback)
+      error.record.errors.full_messages.to_sentence.presence || fallback
+    end
+
     # Strict param parsing: anything that isn't the exact expected format
     # falls back to today (never 500s on a mangled URL).
     def parse_month_param(value)

data/app/controllers/hr_lite/comp_off_requests_controller.rb

@@ -27,8 +27,8 @@ module HrLite
       request = CompOffRequest.where(user_id: hr_current_user.id).find(params[:id])
       request.cancel!(actor: hr_current_user)
       redirect_to comp_off_requests_path, notice: "Request cancelled."
-    rescue ActiveRecord::RecordInvalid
-      redirect_to comp_off_requests_path, alert: "Only pending requests can be cancelled."
+    rescue ActiveRecord::RecordInvalid => e
+      redirect_to comp_off_requests_path, alert: reason_for(e, "Only pending requests can be cancelled.")
     end
 
     private

data/app/controllers/hr_lite/home_controller.rb

@@ -3,9 +3,11 @@ module HrLite
     def index
       @latest_kudos = Kudo.recent.includes(:giver, kudo_mentions: :user).limit(3)
       @awards = Award.current
-      @out_week = LeaveRequest.approved.overlapping_range(Date.current, Date.current.end_of_week)
+      # Pending shows too: approval is management's call, not a reason to hide the leave.
+      @out_week = LeaveRequest.where(status: %w[pending approved]).overlapping_range(Date.current, Date.current.end_of_week)
                               .includes(:user).where(user_id: HrLite.active_employees.map(&:id))
                               .sort_by { |leave| hr_display_name(leave.user).downcase }
+      @birthdays = EmployeeProfile.birthdays_in(Date.current.all_week)
       @attention = attention_days
       @waiting = Approval.pending_for(hr_current_user).count
       @mine_pending = [ LeaveRequest.includes(:leave_type), RegularizationRequest, CompOffRequest, WfhRequest ]

data/app/controllers/hr_lite/hr_requests_controller.rb

@@ -30,8 +30,8 @@ module HrLite
       request = own.find(params[:id])
       request.cancel!(actor: hr_current_user)
       redirect_to hr_requests_path, notice: "Request withdrawn."
-    rescue ActiveRecord::RecordInvalid
-      redirect_to hr_requests_path, alert: "That request has already been answered."
+    rescue ActiveRecord::RecordInvalid => e
+      redirect_to hr_requests_path, alert: reason_for(e, "That request has already been answered.")
     end
 
     private

data/app/controllers/hr_lite/regularization_requests_controller.rb

@@ -23,8 +23,8 @@ module HrLite
       request = RegularizationRequest.where(user_id: hr_current_user.id).find(params[:id])
       request.cancel!(actor: hr_current_user)
       redirect_to regularization_requests_path, notice: "Day fix cancelled."
-    rescue ActiveRecord::RecordInvalid
-      redirect_to regularization_requests_path, alert: "Only pending day fixes can be cancelled."
+    rescue ActiveRecord::RecordInvalid => e
+      redirect_to regularization_requests_path, alert: reason_for(e, "Only pending day fixes can be cancelled.")
     end
 
     private

data/app/controllers/hr_lite/tax_declarations_controller.rb

@@ -54,8 +54,8 @@ module HrLite
 
       @declaration.submit!(actor: hr_current_user)
       redirect_to tax_declaration_path, notice: "Submitted — HR will check the proof."
-    rescue ActiveRecord::RecordInvalid
-      redirect_to tax_declaration_path, alert: "Only a draft can be submitted."
+    rescue ActiveRecord::RecordInvalid => e
+      redirect_to tax_declaration_path, alert: reason_for(e, "Only a draft can be submitted.")
     end
 
     private

data/app/controllers/hr_lite/wfh_requests_controller.rb

@@ -26,8 +26,8 @@ module HrLite
     def cancel
       WfhRequest.where(user_id: hr_current_user.id).find(params[:id]).cancel!(actor: hr_current_user)
       redirect_to wfh_requests_path, notice: "WFH request cancelled."
-    rescue ActiveRecord::RecordInvalid
-      redirect_to wfh_requests_path, alert: "Only pending requests can be cancelled."
+    rescue ActiveRecord::RecordInvalid => e
+      redirect_to wfh_requests_path, alert: reason_for(e, "Only pending requests can be cancelled.")
     end
 
     private

data/app/controllers/hr_lite/work_locations_controller.rb

@@ -50,7 +50,7 @@ module HrLite
     def notify(event, title, path, to)
       Notifications.publish(event, title: title, path: path, bell_to: to)
     rescue => e
-      Rails.logger.error("[hr_lite] work location notification failed: #{e.class}: #{e.message}")
+      HrLite.record_failure(event, e, subject: hr_current_user)
     end
   end
 end

data/app/jobs/hr_lite/calendar_meeting_sync_job.rb

@@ -33,7 +33,7 @@ module HrLite
                                       .select { |m| m[:id].present? && m[:starts_at] && m[:ends_at] }
                                       .each { |m| m[:id] = m[:id].to_s }
     rescue => e
-      Rails.logger.warn("[hr_lite] calendar read failed for user #{user.id}: #{e.class}: #{e.message}")
+      HrLite.record_failure("calendar_read", e, subject: user)
       nil
     end
 

data/app/jobs/hr_lite/team_notices_job.rb

@@ -0,0 +1,26 @@
+module HrLite
+  # 10am email to every current employee: who is on leave today, whose
+  # birthday it is. Each goes only when its list has someone on it.
+  class TeamNoticesJob < ApplicationJob
+    queue_as :default
+
+    def perform(date: Date.current)
+      staff = HrLite.active_employees(on: date)
+      out = LeaveRequest.where(status: %w[pending approved], user_id: staff.map(&:id))
+                        .overlapping_range(date, date).includes(:user)
+      announce("leave.out_today", "On leave today", staff, date,
+               out.map { |l| "#{HrLite.display_name(l.user)} — #{l.date_range_label}#{' (pending approval)' if l.pending?}" })
+      announce("birthday.today", "Birthdays today", staff, date,
+               EmployeeProfile.birthdays_in(date..date).map { |p, _| "Happy birthday, #{HrLite.display_name(p.user)}" })
+    end
+
+    private
+
+    def announce(event, title, staff, date, lines)
+      return if lines.empty?
+
+      Notifications.publish(event, title: "#{title} — #{date.strftime('%a %-d %b')}", lines: lines.sort,
+                                   email_to: staff, path: "/")
+    end
+  end
+end

data/app/models/concerns/hr_lite/audited.rb

@@ -37,8 +37,8 @@ module HrLite
       hr_lite_publish_policy_change(log)
     rescue => e
       # The trail is best-effort by design: an audit hiccup must never roll
-      # back the domain write it describes. Logged loudly instead.
-      Rails.logger.error("[hr_lite] audit failed: #{e.class}: #{e.message}")
+      # back the domain write it describes. Shown to HR admins instead.
+      HrLite.record_failure("audit.#{action}", e, subject: self)
     end
 
     def hr_lite_audited_changes(action)

data/app/models/hr_lite/designation_change.rb

@@ -17,6 +17,9 @@ module HrLite
     after_create :apply_to_profile
     after_create :notify
 
+    # Why the host's on_designation_change hook failed, for the screen to say so.
+    attr_reader :hook_error
+
     def readonly?
       persisted? && !destroyed?
     end
@@ -45,6 +48,7 @@ module HrLite
         HrLite.config.on_designation_change.call(user, to_designation)
       rescue => e
         Rails.logger.error("[hr_lite] on_designation_change failed: #{e.class}: #{e.message}")
+        @hook_error = e.message.truncate(120)
       end
     end
 

data/app/models/hr_lite/employee_profile.rb

@@ -101,6 +101,19 @@ module HrLite
       date_of_joining <= date && (date_of_exit.nil? || date_of_exit >= date)
     end
 
+    # 29 Feb birthdays fall on 28 Feb outside leap years.
+    def birthday_in(year)
+      day = Date.valid_date?(year, date_of_birth.month, date_of_birth.day) ? date_of_birth.day : 28
+      Date.new(year, date_of_birth.month, day)
+    end
+
+    # [profile, day] for current staff whose birthday falls in `range`, earliest first.
+    def self.birthdays_in(range)
+      where(user_id: HrLite.active_employees(on: range.first).map(&:id)).where.not(date_of_birth: nil).includes(:user)
+        .filter_map { |p| (day = range.find { |d| p.birthday_in(d.year) == d }) && [ p, day ] }
+        .sort_by { |p, day| [ day, HrLite.display_name(p.user).downcase ] }
+    end
+
     def employment_range_in(month)
       from = [ date_of_joining, month.beginning_of_month ].max
       to = [ date_of_exit || month.end_of_month, month.end_of_month ].min
@@ -221,7 +234,7 @@ module HrLite
       ChecklistItem.open_for!(user, kind: "onboarding", anchor_date: date_of_joining)
     rescue => e
       # A checklist must never be the reason an employee cannot be created.
-      Rails.logger.error("[hr_lite] onboarding checklist failed: #{e.class}: #{e.message}")
+      HrLite.record_failure("onboarding_checklist", e, subject: user)
     end
   end
 end

data/app/models/hr_lite/resignation.rb

@@ -68,6 +68,9 @@ module HrLite
     end
 
     # False when the person had no employee profile to stamp — see accept!.
+    # Why the host could not revoke access, for the screen to say so.
+    attr_reader :access_error
+
     def exit_date_recorded?
       @exit_date_recorded
     end
@@ -82,6 +85,7 @@ module HrLite
       HrLite.config.offboard_user.call(user)
     rescue => e
       Rails.logger.error("[hr_lite] offboard_user failed: #{e.class}: #{e.message}")
+      @access_error = e.message.truncate(120)
     end
 
     def notify_submitted

data/app/models/hr_lite/wfh_request.rb

@@ -96,7 +96,7 @@ module HrLite
       Notifications.publish(event, title: title, body: body.presence, path: path, bell_to: to,
                                    email_to: event == "wfh.requested" ? [] : to)
     rescue => e
-      Rails.logger.error("[hr_lite] wfh notification failed: #{e.class}: #{e.message}")
+      HrLite.record_failure(event, e, subject: user)
     end
 
     def dates_in_window

data/app/views/hr_lite/admin/overview/index.html.erb

@@ -12,6 +12,23 @@
   <div class="hrl-kpi"><div class="hrl-kpi__value"><%= @kpis[:missing_checkout] %></div><div class="hrl-kpi__label">Missing checkouts</div></div>
 </div>
 
+<% if @failures.present? %>
+  <section class="hrl-card">
+    <h2 class="hrl-card__title">Failed in the background</h2>
+    <% @failures.each do |log| %>
+      <div class="hrl-feed__item">
+        <div class="hrl-feed__body">
+          <strong><%= log.action.delete_prefix("failure.").tr("._", "  ").humanize %></strong>
+          — <%= log.subject.is_a?(HrLite.user_klass) ? hr_display_name(log.subject) : "#{log.subject_type.demodulize.underscore.humanize} ##{log.subject_id}" %>,
+          <%= log.created_at.strftime("%d %b, %H:%M") %>
+          <div class="hrl-small hrl-muted"><%= log.audited_changes["error"] %>: <%= log.audited_changes["message"] %></div>
+        </div>
+      </div>
+    <% end %>
+    <a class="hrl-card__link" href="<%= hr_lite.admin_audit_logs_path %>">Audit trail</a>
+  </section>
+<% end %>
+
 <% if pending.zero? && @kpis.except(:pending).values.all?(&:zero?) %>
   <p class="hrl-card hrl-card--empty">All present and accounted for.</p>
 <% else %>

data/app/views/hr_lite/home/index.html.erb

@@ -40,6 +40,22 @@
     <%= render "hr_lite/leave_requests/out_list", leaves: @out_week, empty: "Nobody is on leave this week." %>
   </section>
 
+  <section class="hrl-card">
+    <h2 class="hrl-card__title">Birthdays this week</h2>
+    <% if @birthdays.any? %>
+      <div class="hrl-feed">
+        <% @birthdays.each do |profile, day| %>
+          <div class="hrl-feed__item">
+            <div class="hrl-feed__body"><strong><%= hr_display_name(profile.user) %></strong>
+              <div class="hrl-feed__meta"><%= day == Date.current ? "Today" : day.strftime("%a %-d %b") %></div></div>
+          </div>
+        <% end %>
+      </div>
+    <% else %>
+      <p class="hrl-muted hrl-small">No birthdays this week.</p>
+    <% end %>
+  </section>
+
   <% if @awards.any? %>
     <section class="hrl-card">
       <h2 class="hrl-card__title">Employee of the month, quarter and year</h2>

data/app/views/hr_lite/leave_requests/_out_list.html.erb

@@ -4,7 +4,7 @@
     <% leaves.first(10).each do |leave| %>
       <div class="hrl-feed__item">
         <div class="hrl-feed__body"><%= tag.strong hr_display_name(leave.user), title: "On leave: #{leave.date_range_label}" %>
-          <div class="hrl-feed__meta"><%= leave.date_range_label %></div></div>
+          <div class="hrl-feed__meta"><%= leave.date_range_label %><%= " · Pending approval" if leave.pending? %></div></div>
       </div>
     <% end %>
   </div>

data/lib/hr_lite/notifications.rb

@@ -56,6 +56,9 @@ module HrLite
       "policy.published"      => { bell: true,  email: true,  leadership_email: false, leadership_bell: false },
       "holiday.published"     => { bell: true,  email: true,  leadership_email: false, leadership_bell: false },
       "digest.daily"          => { bell: false, email: false, leadership_email: true,  leadership_bell: false },
+      # 10am team emails (TeamNoticesJob) to every current employee; skipped when the list is empty.
+      "leave.out_today"       => { bell: false, email: true,  leadership_email: false, leadership_bell: false },
+      "birthday.today"        => { bell: false, email: true,  leadership_email: false, leadership_bell: false },
       "resignation.submitted" => { bell: true,  email: false, leadership_email: true,  leadership_bell: true  },
       "resignation.accepted"  => { bell: true,  email: true,  leadership_email: true,  leadership_bell: false },
       "resignation.withdrawn" => { bell: true,  email: false, leadership_email: true,  leadership_bell: false },
@@ -107,7 +110,7 @@ module HrLite
         lead_path = leadership[:path] || path
 
         deliver_bells(event, row, bell_to, title, body, path)
-        deliver_emails(row, email_to, title, body, path, lines, link_url)
+        deliver_emails(event, row, email_to, title, body, path, lines, link_url)
         return if skip_leadership
 
         deliver_leadership_email(event, row, lead_title, lead_body, lead_path, lines, diff)
@@ -125,7 +128,7 @@ module HrLite
         end
       end
 
-      def deliver_emails(row, email_to, title, body, path, lines, link_url = nil)
+      def deliver_emails(event, row, email_to, title, body, path, lines, link_url = nil)
         return unless row[:email]
 
         # Rescued PER RECIPIENT. Wrapping the whole loop meant one bad address
@@ -144,7 +147,7 @@ module HrLite
             held = held_until[user.id]
             held ? mail.deliver_later(wait_until: held) : mail.deliver_later
           rescue => e
-            Rails.logger.error("[hr_lite] event email failed: #{e.class}: #{e.message}")
+            HrLite.record_failure("#{event}.email", e, subject: user)
           end
         end
       end
@@ -159,7 +162,7 @@ module HrLite
                                body: body, lines: lines, diff: diff, path: path, event: event.to_s)
                    .deliver_later
       rescue => e
-        Rails.logger.error("[hr_lite] leadership email failed: #{e.class}: #{e.message}")
+        HrLite.record_failure("#{event}.leadership_email", e)
       end
 
       def deliver_leadership_bells(event, row, bell_to, title, body, path)
@@ -172,7 +175,7 @@ module HrLite
           HrLite.notify(user: leader, kind: event.to_s, title: title, body: body, path: path)
         end
       rescue => e
-        Rails.logger.error("[hr_lite] leadership bell failed: #{e.class}: #{e.message}")
+        HrLite.record_failure("#{event}.leadership_bell", e)
       end
     end
   end

data/lib/hr_lite/version.rb

@@ -1,3 +1,3 @@
 module HrLite
-  VERSION = "0.57.1"
+  VERSION = "0.60.0"
 end

data/lib/hr_lite.rb

@@ -173,8 +173,18 @@ module HrLite
     def notify(user:, kind:, title:, body: nil, path: nil)
       config.notify.call(user: user, kind: kind, title: title, body: body, path: path)
     rescue => e
-      Rails.logger.error("[hr_lite] notify failed: #{e.class}: #{e.message}")
+      record_failure("notify", e, subject: user)
       nil
     end
+
+    # A background side effect failed: log it and keep a row that HR admins
+    # see on the overview, so nothing fails where nobody looks. Never raises.
+    def record_failure(event, error, subject: nil)
+      Rails.logger.error("[hr_lite] #{event} failed: #{error.class}: #{error.message}")
+      AuditLog.create!(actor: Current.actor, action: "failure.#{event}", subject_type: subject ? subject.class.name : config.user_class,
+                       subject_id: subject&.id || 0, audited_changes: { "error" => error.class.name, "message" => error.message.to_s.truncate(200) })
+    rescue => e
+      Rails.logger.error("[hr_lite] recording a failure failed: #{e.class}: #{e.message}")
+    end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hr_lite
 version: !ruby/object:Gem::Version
-  version: 0.57.1
+  version: 0.60.0
 platform: ruby
 authors:
 - kshitiz sinha
@@ -173,6 +173,7 @@ files:
 - app/jobs/hr_lite/payroll_auto_draft_job.rb
 - app/jobs/hr_lite/payroll_compute_job.rb
 - app/jobs/hr_lite/slips_ready_job.rb
+- app/jobs/hr_lite/team_notices_job.rb
 - app/jobs/hr_lite/work_mode_expire_job.rb
 - app/mailers/hr_lite/application_mailer.rb
 - app/mailers/hr_lite/event_mailer.rb