hr_lite 0.62.0 → 0.64.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7f779cdbd416cb664617888bbb71b2c6866742b52e3ad5525ac2c5819a9b9908
-  data.tar.gz: 346563b5b820eabc5aec4d83076cb1a3dd37f6309c159ad15c7a3f70698032a3
+  metadata.gz: 86b218a8a46bb4b5c3527df1fb637aee4b7617e8ef8abfd4e018274bc08e05af
+  data.tar.gz: 3e645c3511f89479289ac9169317183232d54c7443846208062d9b764bf692f0
 SHA512:
-  metadata.gz: 682e1b50a140c01d357a77666d721629e713dc8c1f97465ea8943c92b8d0cee5a5e47933c98f9451d5e80019bdc548879a27f1c72002279a19ab051500873ce6
-  data.tar.gz: 57fa8aa33593a9f4ac0d88abf82dcc47dd32f666872924038ffb1de4754cb981312fec76e23fcd9706bc31b2aa75a3dc40a42bd25b8d4c947d26705b2f356f2c
+  metadata.gz: 8ac6f7b8261f2dbaa74acb697effd3deb137d6f3d84647df9260c602ea457d7cb7067b631bdcbef4c09d56555f5688884bcac7607b48ae52002b0946291e4597
+  data.tar.gz: dfd0bb1099a90b72051f91569303e321d1d3a4cd216baf3cd9ba11f4dae720e5738be651fb584863b2fbe080702f0b8b517c70f49c9223f3ae6563cf72c0b6e6

data/CHANGELOG.md

@@ -7,6 +7,27 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.64.0] - 2026-10-22
+
+Decision emails. One migration: `purpose` on hiring templates.
+
+- **Selected, Rejected and On hold each send a saved email.** The first time a button is used with no email set, HR is taken to write it, with Write with AI on hand. Then they return to the candidate and click again. After that, every click moves the stage and sends that email through the HR person's own Gmail, once per candidate. Decisions are refused while the mailbox is not connected.
+- **Decision emails can be edited, never deleted.** There is one per decision, and the purpose never changes. The templates page lists them first, flagging any that are not set.
+
+## [0.63.1] - 2026-10-22
+
+A reply link can only be answered by the candidate it belongs to. No migrations.
+
+- **Previews never show a real reply link.** The template preview and the send-confirm check render "[Name's round N link]" instead, so HR can no longer open a previewed candidate's link and answer as them. A real link is made only when an email is actually sent.
+- **The reply page names its owner and checks their email.** It says "This form is for <full name>" and asks for the email the link was sent to. A different email is refused and nothing is saved.
+
+## [0.63.0] - 2026-10-22
+
+Every penalty row now says why it exists. No migrations.
+
+- **Penalty cause, behind an "i".** Tap a row in "Penalties in <month>" (or its "i") to see the day and punch that caused it and what it adds to the day it sits on, e.g. "You checked in at 19:39 on Mon 19 Oct, after 11:00, so +1h goes on your next 2 working days. So Thu 22 Oct needs 60 min more before checkout." A carried penalty (late after 11:00, or left early) used to show only the day it landed on, so it read as a penalty for a day the person was on time.
+- **How to avoid or clear them.** The Penalty hours card adds: check in by your slot and stay until the required checkout; if a punch was wrong, fix that day and ask HR to remove the penalties it caused.
+
 ## [0.62.0] - 2026-10-22
 
 Hiring replies per round, an AI draft button and the sender's signature. Two migrations: a new `hr_lite_hiring_replies` table, and `allow_sunday` on campaigns.

data/app/assets/stylesheets/hr_lite/hr_lite.css

@@ -294,6 +294,10 @@ details > form > button[type=submit], details > form > .hrl-btn { margin-top: .2
 .hrl-btn[disabled] { opacity: .55; cursor: default; }
 summary.hrl-btn { list-style: none; }
 summary.hrl-btn::-webkit-details-marker { display: none; } /* Safari before 18.4 draws it whatever the display */
+/* A line with an "i": tap anywhere on it for why; the reason drops below. */
+.hrl-why > summary { display: flex; align-items: center; justify-content: space-between; gap: .5rem; min-height: 44px; list-style: none; cursor: pointer; }
+.hrl-why > summary::-webkit-details-marker { display: none; }
+.hrl-why > summary > .hrl-icon { color: var(--hrl-accent); }
 
 /* Badges & chips */
 .hrl-badge {

data/app/controllers/hr_lite/admin/hiring_candidates_controller.rb

@@ -38,10 +38,25 @@ module HrLite
         render :show
       end
 
+      # Selected / Rejected / On hold also send that decision's saved email. With
+      # none saved yet, HR writes it first; the decision waits until it exists.
       def stage
         to = params[:to].presence_in(MANUAL) or raise ArgumentError, "That is not a decision HR makes here."
+        raise ArgumentError, "#{@candidate.stage_label} cannot move to #{to.humanize}." unless HiringCandidate::MOVES.fetch(@candidate.stage).include?(to)
+
+        template = HiringTemplate.for_decision(to)
+        if HiringTemplate::PURPOSES.key?(to) && !template
+          return redirect_to hr_lite.new_admin_hiring_template_path(purpose: to, candidate_id: @candidate.id),
+                             alert: "Write the #{HiringTemplate::PURPOSES[to]} email first. Every #{HiringTemplate::PURPOSES[to]} click sends it."
+        end
+        raise ArgumentError, "Connect your Google account for hiring before sending decision emails." if template && !HrLite.config.hiring&.sender&.dig(:ready)
+
         @candidate.move_to!(to, reason: params[:reason], note: params[:note])
-        redirect_to hr_lite.admin_hiring_candidate_path(@candidate), notice: "Moved to #{@candidate.stage_label}."
+        if template && (message = HiringMessage.create_or_find_by!(candidate: @candidate, template: template) { |m| m.batch = SecureRandom.uuid; m.sent_by = hr_current_user }).previously_new_record?
+          HiringSendJob.perform_later(message.id)
+        end
+        redirect_to hr_lite.admin_hiring_candidate_path(@candidate),
+                    notice: "Moved to #{@candidate.stage_label}.#{" The #{template.name} email is on its way." if template}"
       rescue ArgumentError => e
         redirect_to hr_lite.admin_hiring_candidate_path(@candidate), alert: e.message
       end

data/app/controllers/hr_lite/admin/hiring_sends_controller.rb

@@ -52,7 +52,7 @@ module HrLite
         already = HiringMessage.where(template: @template, candidate_id: scope.select(:id)).pluck(:candidate_id).to_set
         @recipients, @left_out = [], []
         scope.includes(:campaign, :interviews).each do |candidate|
-          missing = HiringMerge.new(candidate, sender_name: @sender&.dig(:name)).render(@template).missing
+          missing = HiringMerge.new(candidate, sender_name: @sender&.dig(:name), preview: true).render(@template).missing
           reason = already.include?(candidate.id) ? "already sent this template" : (missing.join(", ") if missing.any?)
           reason ? @left_out << [ candidate, reason ] : @recipients << candidate
         end

data/app/controllers/hr_lite/admin/hiring_templates_controller.rb

@@ -10,13 +10,16 @@ module HrLite
                  with: -> { redirect_to hr_lite.admin_hiring_templates_path, alert: "Twenty AI drafts an hour is the limit. Try again later." }
 
       def index = @templates = HiringTemplate.alphabetical
-      def new = @template = HiringTemplate.new
+      def new = @template = HiringTemplate.new(purpose: params[:purpose].presence_in(HiringTemplate::PURPOSES.keys))
 
       def create
-        @template = HiringTemplate.new(template_params)
+        @template = HiringTemplate.new(template_params.merge(purpose: params.dig(:hiring_template, :purpose).presence))
         return draft if params[:ai].present?
         return render(:new, status: :unprocessable_entity) unless @template.save
 
+        candidate = HiringCandidate.find_by(id: params[:candidate_id]) if @template.purpose
+        return redirect_to(hr_lite.admin_hiring_candidate_path(candidate), notice: "Saved. Click #{HiringTemplate::PURPOSES[@template.purpose]} again to send it.") if candidate
+
         redirect_to hr_lite.edit_admin_hiring_template_path(@template), notice: "Saved."
       end
 
@@ -58,10 +61,10 @@ module HrLite
         return true unless @preview_for
 
         sender_name = HrLite.config.hiring&.sender&.dig(:name)
-        @preview = HiringMerge.new(@preview_for, sender_name:).render(@template)
+        @preview = HiringMerge.new(@preview_for, sender_name:, preview: true).render(@template)
         # Readiness across the previewed candidate's campaign: who a send would reach.
         @campaign_size = @preview_for.campaign.candidates.count
-        @ready = @preview_for.campaign.candidates.includes(:campaign, :interviews).count { |c| HiringMerge.new(c, sender_name:).render(@template).missing.empty? }
+        @ready = @preview_for.campaign.candidates.includes(:campaign, :interviews).count { |c| HiringMerge.new(c, sender_name:, preview: true).render(@template).missing.empty? }
         true
       end
 

data/app/controllers/hr_lite/hiring_replies_controller.rb

@@ -19,7 +19,7 @@ module HrLite
     def show; end
 
     def create
-      @reply.submit!(interested: params[:interested].to_s, date: params[:date], slot: params[:slot], joining: params[:joining],
+      @reply.submit!(email: params[:email], interested: params[:interested].to_s, date: params[:date], slot: params[:slot], joining: params[:joining],
                      yes_no: params.permit(*HiringReply::YES_NO.keys).to_h, alternate_phone: params[:alternate_phone].to_s.strip,
                      files: params.fetch(:documents, {}).permit(*HiringReply::DOCUMENTS.fetch(@reply.round, {}).keys).to_h,
                      kyc: params.permit(:aadhaar_number, :pan_number, :pan_pending, :no_salary_slips, :consent).to_h.symbolize_keys)

data/app/helpers/hr_lite/application_helper.rb

@@ -198,6 +198,7 @@ module HrLite
       "People" => '<path d="M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2"/><circle cx="9" cy="7" r="4"/><path d="M22 21v-2a4 4 0 0 0-3-3.9M16 3.1a4 4 0 0 1 0 7.8"/>',
       "Me" => '<circle cx="12" cy="8" r="4"/><path d="M4 21a8 8 0 0 1 16 0"/>',
       "Help" => '<circle cx="12" cy="12" r="9"/><path d="M9.1 9a3 3 0 0 1 5.8 1c0 2-3 3-3 3M12 17h.01"/>',
+      "Info" => '<circle cx="12" cy="12" r="9"/><path d="M12 11v6M12 7.5h.01"/>',
       "Hiring" => '<rect x="2" y="7" width="20" height="14" rx="2"/><path d="M16 21V5a2 2 0 0 0-2-2h-4a2 2 0 0 0-2 2v16"/>',
       "Admin" => '<path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/>',
       "More" => '<circle cx="5" cy="12" r="1.5"/><circle cx="12" cy="12" r="1.5"/><circle cx="19" cy="12" r="1.5"/>',

data/app/models/hr_lite/attendance_penalty.rb

@@ -36,5 +36,18 @@ module HrLite
     def self.days_for(minutes) = (minutes / 300) * 0.5
 
     def label = REASONS.fetch(reason)
+
+    # Why this row exists, naming the day and punch that caused it.
+    def cause
+      r = attendance_record
+      t = ->(at) { at.nil? ? "—" : at.in_time_zone(HrLite.config.time_zone).then { |l| l.strftime(l.to_date == r.date ? "%H:%M" : "%H:%M on %a %-d %b") } }
+      on = r.date.strftime("%a %-d %b")
+      why = case reason
+      when "late" then "You checked in at #{t[r.check_in_at]} on #{on}, after your slot."
+      when "late_carry" then "You checked in at #{t[r.check_in_at]} on #{on}, after 11:00, so +1h goes on your next 2 working days."
+      else "You checked out at #{t[r.check_out_at]} on #{on}, before that day's required checkout of #{t[r.required_check_out_at]}."
+      end
+      "#{why} So #{date.strftime('%a %-d %b')} needs #{minutes} min more before checkout."
+    end
   end
 end

data/app/models/hr_lite/hiring_reply.rb

@@ -61,8 +61,10 @@ module HrLite
 
     # Saves the reply, moves round 1's candidate to interested / not interested,
     # puts it on their timeline and rings the HR person who emailed them.
-    def submit!(interested: nil, date: nil, slot: nil, joining: nil, yes_no: {}, alternate_phone: nil, files: {}, kyc: {})
+    def submit!(email: nil, interested: nil, date: nil, slot: nil, joining: nil, yes_no: {}, alternate_phone: nil, files: {}, kyc: {})
       raise ArgumentError, "You have already replied. Thank you." if responded_at
+      # The link is personal: the email it was sent to proves the right person opened it.
+      raise ArgumentError, "That email does not match this link. Use the link from your own email." unless email.to_s.strip.casecmp?(candidate.email)
 
       assign_kyc!(kyc) if round == 3
 

data/app/models/hr_lite/hiring_template.rb

@@ -4,7 +4,15 @@ module HrLite
   class HiringTemplate < ApplicationRecord
     has_many :messages, class_name: "HrLite::HiringMessage", foreign_key: :template_id, dependent: :restrict_with_error
 
+    # The emails the Selected / Rejected / On hold buttons send. One each; edited,
+    # never deleted (there is no destroy), and the purpose never changes.
+    PURPOSES = { "selected" => "Selected", "rejected" => "Rejected", "on_hold" => "On hold" }.freeze
+
     validates :name, :subject, :body, presence: true
+    validates :purpose, inclusion: { in: PURPOSES.keys }, uniqueness: true, allow_nil: true
+    attr_readonly :purpose
+
+    def self.for_decision(stage) = find_by(purpose: stage)
 
     scope :alphabetical, -> { order(:name) }
   end

data/app/services/hr_lite/hiring_merge.rb

@@ -14,8 +14,11 @@ module HrLite
 
     def self.tokens(text) = text.to_s.scan(TOKEN).flatten.uniq
 
-    def initialize(candidate, sender_name:)
+    # preview: true shows a label for each reply link instead of the real one, so
+    # nobody can open a candidate's link from a preview and answer as them.
+    def initialize(candidate, sender_name:, preview: false)
       @extra = candidate.extra.to_h.transform_keys(&:to_s)
+      @preview = preview
       @values = @extra.merge(reserved(candidate, sender_name))
     end
 
@@ -48,7 +51,7 @@ module HrLite
         "interview_date" => at&.strftime("%-d %B %Y"), "interview_time" => at&.strftime("%-l:%M %p"),
         "meet_link" => interview&.meet_link, "sender_name" => sender_name,
         # Lazy: a round's link (and its row) is made only when a template names it.
-        **(1..3).to_h { |r| [ "round#{r}_link", -> { HrLite.public_url("/apply/#{candidate.reply_for(r).token}") } ] } }
+        **(1..3).to_h { |r| [ "round#{r}_link", -> { @preview ? "[#{candidate.name}'s round #{r} link]" : HrLite.public_url("/apply/#{candidate.reply_for(r).token}") } ] } }
     end
   end
 end

data/app/views/hr_lite/admin/hiring_candidates/show.html.erb

@@ -58,7 +58,7 @@
         <div class="hrl-form-actions hrl-hiring-decide">
           <% (manual - [ "rejected" ]).each do |to| %>
             <%= button_to to.humanize, hr_lite.stage_admin_hiring_candidate_path(@candidate), method: :patch, params: { to: to }, class: "hrl-btn",
-                          form: { data: { turbo_confirm: ("Mark #{@candidate.name} selected? This is final." if to == "selected") } } %>
+                          form: { data: { turbo_confirm: ("Mark #{@candidate.name} #{to.humanize.downcase}?#{" This is final." if to == "selected"}#{" They get the #{to.humanize} email." if HrLite::HiringTemplate::PURPOSES.key?(to)}" if HrLite::HiringTemplate::PURPOSES.key?(to)) } } %>
           <% end %>
         </div>
         <% if manual.include?("rejected") %>
@@ -74,7 +74,7 @@
                 </select>
               </div>
               <div class="hrl-field"><label for="note">Note (needed for “Other”)</label><textarea name="note" id="note" rows="2"></textarea></div>
-              <div class="hrl-form-actions"><button class="hrl-btn hrl-btn--danger" type="submit" data-turbo-confirm="Reject <%= @candidate.name %>? This is final.">Confirm rejection</button></div>
+              <div class="hrl-form-actions"><button class="hrl-btn hrl-btn--danger" type="submit" data-turbo-confirm="Reject <%= @candidate.name %>? This is final. They get the Rejected email.">Confirm rejection</button></div>
             <% end %>
           </details>
         <% end %>

data/app/views/hr_lite/admin/hiring_templates/_form.html.erb

@@ -1,5 +1,9 @@
 <%= form_with model: template, url: (template.persisted? ? hr_lite.admin_hiring_template_path(template) : hr_lite.admin_hiring_templates_path), local: true do |f| %>
   <%= render "hr_lite/shared/form_errors", record: template %>
+  <% if template.new_record? && template.purpose %>
+    <input type="hidden" name="hiring_template[purpose]" value="<%= template.purpose %>">
+    <% if params[:candidate_id].present? %><input type="hidden" name="candidate_id" value="<%= params[:candidate_id] %>"><% end %>
+  <% end %>
   <div class="hrl-field"><%= f.label :name, "Template name" %><%= f.text_field :name, required: true %></div>
   <div class="hrl-field"><%= f.label :subject %><%= f.text_field :subject, required: true %></div>
   <div class="hrl-field"><%= f.label :body, "Message" %><%= f.text_area :body, rows: 16, required: true %></div>

data/app/views/hr_lite/admin/hiring_templates/edit.html.erb

@@ -1,5 +1,8 @@
 <% content_for(:page_title) { @template.name } %>
-<div class="hrl-page__head"><h1 class="hrl-page__title"><%= @template.name %></h1></div>
+<div class="hrl-page__head">
+  <h1 class="hrl-page__title"><%= @template.name %></h1>
+  <% if @template.purpose %><p class="hrl-page__sub"><span class="hrl-badge">Decision email: <%= HrLite::HiringTemplate::PURPOSES[@template.purpose] %></span> Sent when you click <%= HrLite::HiringTemplate::PURPOSES[@template.purpose] %>. It can be edited, not deleted.</p><% end %>
+</div>
 
 <% if @preview %>
   <div class="hrl-flash <%= @ready == @campaign_size ? "hrl-flash--ok" : "hrl-flash--warn" %>">

data/app/views/hr_lite/admin/hiring_templates/index.html.erb

@@ -3,9 +3,30 @@
   <h1 class="hrl-page__title">Hiring email templates</h1>
   <div class="hrl-page__actions"><a class="hrl-btn hrl-btn--primary" href="<%= hr_lite.new_admin_hiring_template_path %>">New template</a></div>
 </div>
+
 <section class="hrl-card">
+  <h2 class="hrl-card__title">Decision emails</h2>
+  <p class="hrl-small hrl-muted">Sent when you click Selected, Rejected or On hold on a candidate. You can edit them; they cannot be deleted.</p>
   <ul class="hrl-feed">
-    <% @templates.each do |template| %>
+    <% decisions = @templates.select(&:purpose).index_by(&:purpose) %>
+    <% HrLite::HiringTemplate::PURPOSES.each do |purpose, label| %>
+      <li class="hrl-feed__item"><div class="hrl-feed__body">
+        <% if (template = decisions[purpose]) %>
+          <a class="hrl-card__link" href="<%= hr_lite.edit_admin_hiring_template_path(template) %>"><%= label %>: <%= template.name %></a>
+          <span class="hrl-feed__meta"><%= template.subject %></span>
+        <% else %>
+          <strong><%= label %></strong> <span class="hrl-badge hrl-badge--warn">Not set</span>
+          <a class="hrl-btn" href="<%= hr_lite.new_admin_hiring_template_path(purpose: purpose) %>">Write the <%= label %> email</a>
+        <% end %>
+      </div></li>
+    <% end %>
+  </ul>
+</section>
+
+<section class="hrl-card">
+  <h2 class="hrl-card__title">Other emails</h2>
+  <ul class="hrl-feed">
+    <% @templates.reject(&:purpose).each do |template| %>
       <li class="hrl-feed__item"><div class="hrl-feed__body">
         <a class="hrl-card__link" href="<%= hr_lite.edit_admin_hiring_template_path(template) %>"><%= template.name %></a>
         <span class="hrl-feed__meta"><%= template.subject %></span>

data/app/views/hr_lite/admin/hiring_templates/new.html.erb

@@ -1,3 +1,6 @@
 <% content_for(:page_title) { "New template" } %>
-<div class="hrl-page__head"><h1 class="hrl-page__title">New hiring email</h1></div>
+<div class="hrl-page__head">
+  <h1 class="hrl-page__title"><%= @template.purpose ? "The #{HrLite::HiringTemplate::PURPOSES[@template.purpose]} email" : "New hiring email" %></h1>
+  <% if @template.purpose %><p class="hrl-page__sub">Sent every time someone clicks <%= HrLite::HiringTemplate::PURPOSES[@template.purpose] %> on a candidate. Paste what you would write, then use Write with AI to tidy it and add the fields.</p><% end %>
+</div>
 <section class="hrl-card"><%= render "form", template: @template %></section>

data/app/views/hr_lite/attendance/_penalties.html.erb

@@ -4,7 +4,7 @@
 <section class="hrl-card" id="penalties">
   <h2 class="hrl-card__title">Penalty hours</h2>
   <p><strong><%= hrl_duration(held * 60) %></strong> held · <%= pluralize(hrl_days(HrLite::AttendancePenalty.days_for(held)), "day") %><%= " of #{leave_type.name}" if leave_type %></p>
-  <p class="hrl-hint">Penalties add up until HR removes them.<% if leave_type %> Every 5 hours holds half a day of leave, which can't be applied for.<% end %></p>
+  <p class="hrl-hint">Penalties add up until HR removes them.<% if leave_type %> Every 5 hours holds half a day of leave, which can't be applied for.<% end %> To avoid more, check in by your slot and stay until the required checkout. If a punch was wrong, fix that day and ask HR to remove the penalties it caused.</p>
   <% HrLite::PenaltyRemoval.where(user_id: user.id).includes(:removed_by).order(created_at: :desc).each do |removal| %>
     <div class="hrl-feed__item hrl-small"><div class="hrl-feed__body">Removed <%= hrl_duration(removal.minutes * 60) %> on <%= removal.created_at.strftime("%-d %b %Y") %> by <%= hr_display_name(removal.removed_by) %>: <%= removal.reason %></div></div>
   <% end %>
@@ -16,7 +16,7 @@
     <% end %>
   <% end %>
 </section>
-<% penalties = HrLite::AttendancePenalty.where(user_id: user.id, date: month.all_month).order(:date, :id) %>
+<% penalties = HrLite::AttendancePenalty.where(user_id: user.id, date: month.all_month).includes(:attendance_record).order(:date, :id) %>
 <section class="hrl-card">
   <h2 class="hrl-card__title">Penalties in <%= month.strftime("%B") %></h2>
   <% if penalties.empty? %>
@@ -25,13 +25,19 @@
   <% penalties.each do |penalty| %>
     <div class="hrl-feed__item hrl-small">
       <div class="hrl-feed__body">
-        <strong><%= penalty.date.strftime("%a %-d %b") %></strong> ·
-        <span class="<%= class_names("hrl-badge", penalty.removed_at ? "hrl-badge--muted" : "hrl-badge--warn") %>">+<%= penalty.minutes %> min</span>
-        <%= penalty.label %>
+        <details class="hrl-why">
+          <summary>
+            <span><strong><%= penalty.date.strftime("%a %-d %b") %></strong> ·
+            <span class="<%= class_names("hrl-badge", penalty.removed_at ? "hrl-badge--muted" : "hrl-badge--warn") %>">+<%= penalty.minutes %> min</span>
+            <%= penalty.label %></span>
+            <%= hrl_icon("Info") %><span class="hrl-sr-only">Why?</span>
+          </summary>
+          <div class="hrl-muted"><%= penalty.cause %></div>
+        </details>
         <% if penalty.removed_at %>
           <div class="hrl-muted">Removed by HR: <%= penalty.removal_reason %></div>
         <% elsif local_assigns[:removable] %>
-          <%= form_with url: hr_lite.remove_penalty_admin_attendance_path(user.id, penalty_id: penalty.id), method: :post, local: true, class: "hrl-row" do %>
+          <%= form_with url: hr_lite.remove_penalty_admin_attendance_path(user.id, penalty_id: penalty.id), method: :post, local: true, class: "hrl-row hrl-mt" do %>
             <label class="hrl-sr-only" for="hrl-remove-<%= penalty.id %>">Reason to remove</label>
             <input type="text" class="hrl-input" name="removal_reason" id="hrl-remove-<%= penalty.id %>" required placeholder="Reason to remove">
             <button type="submit" class="hrl-btn">Remove</button>

data/app/views/hr_lite/hiring_replies/show.html.erb

@@ -3,7 +3,7 @@
 <% content_for(:page_title) { campaign.position } %>
 <div class="hrl-page__head">
   <h1 class="hrl-page__title"><%= campaign.position %></h1>
-  <p class="hrl-page__sub">Hi <%= @candidate.first_name %>, <%= round == 1 ? "thank you for your interest." : "congratulations on reaching round #{round}." %></p>
+  <p class="hrl-page__sub">This form is for <strong><%= @candidate.name %></strong>. Hi <%= @candidate.first_name %>, <%= round == 1 ? "thank you for your interest." : "congratulations on reaching round #{round}." %></p>
 </div>
 
 <% if @reply.responded_at %>
@@ -13,6 +13,13 @@
   </section>
 <% else %>
   <%= form_with url: hr_lite.hiring_reply_path(@reply.token), method: :post, local: true, multipart: true do %>
+    <section class="hrl-card">
+      <div class="hrl-field">
+        <label for="email">Your email (the one this link was sent to)</label>
+        <input type="email" name="email" id="email" autocomplete="email" required value="<%= params[:email] %>">
+      </div>
+    </section>
+
     <% if round == 1 %>
       <section class="hrl-card">
         <fieldset class="hrl-field">

data/db/migrate/20261022120000_add_purpose_to_hr_lite_hiring_templates.rb

@@ -0,0 +1,8 @@
+class AddPurposeToHrLiteHiringTemplates < ActiveRecord::Migration[8.1]
+  # The email a decision button sends (selected / rejected / on_hold). One per
+  # purpose; nil for ordinary templates.
+  def change
+    add_column :hr_lite_hiring_templates, :purpose, :string
+    add_index :hr_lite_hiring_templates, :purpose, unique: true, where: "purpose IS NOT NULL"
+  end
+end

data/lib/hr_lite/version.rb

@@ -1,3 +1,3 @@
 module HrLite
-  VERSION = "0.62.0"
+  VERSION = "0.64.0"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: hr_lite
 version: !ruby/object:Gem::Version
-  version: 0.62.0
+  version: 0.64.0
 platform: ruby
 authors:
 - kshitiz sinha
@@ -547,6 +547,7 @@ files:
 - db/migrate/20261021100500_seed_hr_lite_hiring.rb
 - db/migrate/20261022090000_create_hr_lite_hiring_replies.rb
 - db/migrate/20261022090100_add_allow_sunday_to_hr_lite_hiring_campaigns.rb
+- db/migrate/20261022120000_add_purpose_to_hr_lite_hiring_templates.rb
 - lib/generators/hr_lite/install/install_generator.rb
 - lib/generators/hr_lite/install/templates/AFTER_INSTALL
 - lib/generators/hr_lite/install/templates/initializer.rb