@php($fieldHelp=['timezone'=>'IANA timezone used to assign UTC punches to local workdays.','minimum_minutes'=>'Net minutes required for a full day; shorter complete days show Half day.','half_day_minutes'=>'Days below this threshold carry an additional review flag.','allowed_methods'=>'Choose methods allowed within this scope. Leave unselected to inherit.','allow_reentry'=>'Allow additional in/out sessions after a completed session. Split shifts also allow re-entry.','maximum_session_hours'=>'Limit a recorded session; longer sessions require correction.','early_checkin_minutes'=>'How early employees may check in before scheduled start.','grace_minutes'=>'Ignore this many minutes after scheduled start before marking late.','early_grace_minutes'=>'Ignore this many minutes before scheduled end before marking early.','missing_punch_hours'=>'Elapsed hours before a missing-checkout reminder.','auto_checkout'=>'Cap provisional hours at scheduled end. Keeps checkout missing and requires approval; no punch is invented.','automatic_break_deduction'=>'Deduct the greater of the shift break allowance and actual unpaid breaks, avoiding double deduction.','breaks_required'=>'Flag a completed workday if no break was recorded.','maximum_breaks'=>'Maximum break starts allowed per workday.','overtime_enabled'=>'Calculate excess time separately. Calculation alone never approves pay.','gps_enabled'=>'Collect action-only location when the employee consents. Legacy shift geofences still apply.','geofence_enabled'=>'Validate coordinates against an assigned location radius.','location_required'=>'Require coordinates for each GPS attendance action.','geofence_mode'=>'Strict rejects, warning permits with flags, flexible follows remote policy.','maximum_accuracy'=>'Largest acceptable reported GPS error, in metres.','remote_allowed'=>'Permit remote punches under flexible geofencing.','location_retention_days'=>'Delete encrypted coordinates after this many days; retain original punch and validation outcome.','regularization_days'=>'How many past days employees may submit for correction.','regularization_monthly_limit'=>'Maximum non-withdrawn requests submitted per calendar month.','attachment_required'=>'Require employee-owned supporting evidence that passed scanning.','approval_flow'=>'Manager and HR approvals use different people. Self-approval is never allowed.','delegated_approvers'=>'Tenant user IDs allowed to cover manager review; each needs attendance.approve.','approval_sla_hours'=>'Hours before an open request triggers a deduplicated overdue reminder.','auto_approve_explanations'=>'Accept unchanged late/early explanations only; never change time or payroll automatically.','notify_employee'=>'Send relevant attendance notifications to the employee.','notify_managers'=>'Send relevant attendance notifications to the assigned manager.','notify_hr'=>'Notify authorized HR recipients.','notify_successful_punch'=>'Optionally notify for successful check-in, checkout and break actions.','email_notifications'=>'Additionally queue email through the existing notification engine. SMTP and company delivery opt-in are required.'])
@php($groups=['general'=>['General',['timezone','minimum_minutes','half_day_minutes']],'punch'=>['Punch rules',['allowed_methods','allow_reentry','maximum_session_hours','early_checkin_minutes','grace_minutes','early_grace_minutes','missing_punch_hours','auto_checkout']],'break'=>['Break rules',['automatic_break_deduction','breaks_required','maximum_breaks']],'shift'=>['Shift & overtime',['overtime_enabled']],'biometric'=>['Biometric',['allowed_methods']],'gps'=>['GPS & geofencing',['location_mode','location_required','geofence_mode','maximum_accuracy','remote_allowed','location_retention_days']],'regularization'=>['Regularization',['regularization_days','regularization_monthly_limit','attachment_required','approval_flow','delegated_approvers','approval_sla_hours','auto_approve_explanations']],'notifications'=>['Notifications',['notify_employee','notify_managers','notify_hr','notify_successful_punch','email_notifications','notify_late','notify_early','notify_excess_break','notify_geofence','notify_corrections','notify_locks','notify_overtime','notify_devices']],'permissions'=>['Permissions & locks',[]]])
<div class="att-settings-layout"><aside class="att-settings-nav"><label>Find attendance settings<input type="search" data-attendance-setting-search placeholder="Search settings…"></label>@foreach($groups as $key=>[$label,$fields])<a href="#att-settings-{{ $key }}"><x-icon name="{{ $key==='notifications'?'bell':'settings' }}"/>{{ $label }}</a>@endforeach<a href="#att-break-types">Break types</a><a href="#att-policy-history">Version history</a><a href="#att-report-schedules">Report schedules</a></aside><div class="att-settings-content"><section class="panel"><div class="panel-heading"><h2>Create an effective policy version</h2></div><div class="panel-body"><p class="hint">Company defaults apply first, followed by branch, department, shift and employee overrides. Saving appends a version; historical snapshots stay unchanged.</p><form method="post" action="{{ $base }}/attendance/manage/policy" class="form-grid">@csrf<label>Version name<input name="name" required maxlength="100" placeholder="Attendance policy update"></label><label>Effective from<input type="date" name="effective_on" value="{{ \App\Domain\Operations\Operations::today() }}" required></label><label>Scope<select name="scope_type">@foreach(['company','branch','department','shift','employee'] as $scope)<option value="{{ $scope }}">{{ \Illuminate\Support\Str::headline($scope) }}</option>@endforeach</select></label><label>Scope internal ID (0 for company)<input type="number" name="scope_id" min="0" value="0"></label><p class="hint form-span">Enter values only for rules this version should override. Existing rules remain in force for blank fields.</p>
@foreach($groups as $key=>[$label,$fields])<fieldset id="att-settings-{{ $key }}" class="form-span att-settings-section" data-attendance-setting-section><legend>{{ $label }}</legend><div class="form-grid">@foreach($fields as $field)@if($key!=='biometric')@if($field==='location_mode')<label>Location policy<select name="rules[location_mode]" data-attendance-optional-rule><option value="">Keep inherited policy</option><option value="off">Off — no location collection</option><option value="capture">Capture location — no office restriction</option><option value="geofence">Office geofencing — validate assigned offices</option></select><small>Existing policy stays unchanged until you save. Legacy shift boundaries remain enforced.</small></label>@elseif($field==='timezone')<div><x-timezone-select name="rules[timezone]" label="Timezone" :value="old('rules.timezone','')" :required="false" data-attendance-optional-rule/><small>Leave unselected to keep the inherited timezone.</small></div>@else<label>{{ ucwords(str_replace('_',' ',$field)) }}@if(is_bool($defaults[$field]))<select name="rules[{{ $field }}]" data-attendance-optional-rule><option value="">Keep inherited value</option><option value="1">Enabled</option><option value="0">Disabled</option></select>@elseif($field==='allowed_methods')<select name="rules[allowed_methods][]" multiple><option value="web">Web</option><option value="gps">GPS</option><option value="manual">Manual</option><option value="biometric">Biometric</option></select>@elseif($field==='geofence_mode'||$field==='approval_flow')<select name="rules[{{ $field }}]" data-attendance-optional-rule><option value="">Keep inherited value</option>@foreach($field==='geofence_mode'?['strict','warning','flexible']:['manager_hr','hr','manager'] as $option)<option value="{{ $option }}">{{ $field==='geofence_mode'?(['strict'=>'Block outside office','warning'=>'Allow outside and flag for review','flexible'=>'Apply remote-work policy'][$option]):str_replace('_',' + ',$option) }}</option>@endforeach</select>@else<input name="rules[{{ $field }}]" {{ is_int($defaults[$field])?'type=number min=0':'' }} placeholder="{{ $field==='timezone'?\App\Domain\Operations\Operations::timezone():($field==='delegated_approvers'?'Approver user IDs, comma separated':$defaults[$field]) }}" data-attendance-optional-rule>@endif<small class="hint">{{ $fieldHelp[$field]??('Notify configured recipients about '.str_replace('notify_','',str_replace('_',' ',$field)).'.') }} Default: {{ is_bool($defaults[$field])?($defaults[$field]?'Enabled':'Disabled'):(is_array($defaults[$field])?(implode(', ',$defaults[$field])?:'None'):($defaults[$field]??'Company timezone')) }}.</small></label>@endif @endif @endforeach
@if($key==='gps')<p class="hint form-span">Office boundaries use device coordinates, which can be inaccurate or altered. They support attendance review and do not prove physical presence. Configure offices in <a href="{{ $base }}/attendance?screen=locations">Work locations</a>. Street lookup: {{ config('attendance.geocoding.enabled')?'Configured by platform administrator':'Off — private office addresses and offline area names only' }}.</p>@elseif($key==='biometric')<p class="hint">The reviewed file adapter accepts punch events only. Manage devices and mappings in <a href="{{ $base }}/attendance?screen=devices">Biometric devices</a>. Scheduled inbox imports require an explicit server opt-in; endpoint fields do not make network connections.</p>@elseif($key==='permissions')<p class="hint">attendance.view: register and details · attendance.manage: shifts, rosters and corrections · attendance.approve: independent HR decisions and locks · attendance.devices: device configuration · attendance.settings: policies and locations · attendance.export: downloads and schedules · employees.self: own records and punches. Manage role grants in <a href="{{ $base }}/settings">Admin settings</a>.</p>@elseif($key==='shift')<p class="hint">Create effective shift versions and rotating assignments in <a href="{{ $base }}/attendance?screen=shifts">Shift management</a>. Overtime is calculated separately and requires approval. Automatic checkout caps the provisional hours at scheduled end and flags the estimate for approval. Missing checkout stays an exception; original evidence is never fabricated.</p>@endif</div></fieldset>@endforeach<div class="form-span"><button class="button primary"><x-icon name="check"/>Append policy version</button></div></form></div></section>
<section class="panel" id="att-break-types" data-attendance-setting-section><div class="panel-heading"><h2>Break type policies</h2></div><div class="panel-body">@foreach($breakTypes as $type)<details><summary>{{ $type['name'] }} · {{ $type['paid']?'Paid':'Unpaid' }} · {{ $type['active']?'Active':'Disabled' }}</summary><form class="form-grid" method="post" action="{{ $base }}/attendance/manage/break-type">@csrf<input type="hidden" name="code" value="{{ $type['code'] }}"><label>Name<input name="name" value="{{ $type['name'] }}" required maxlength="80"></label><label>Paid<select name="paid"><option value="0" @selected(!$type['paid'])>Unpaid</option><option value="1" @selected($type['paid'])>Paid</option></select></label>@foreach(['minimum_minutes'=>'Minimum minutes','maximum_minutes'=>'Maximum minutes','maximum_count'=>'Maximum per day','fixed_minutes'=>'Fixed deduction minutes (optional)'] as $field=>$label)<label>{{ $label }}<input type="number" name="{{ $field }}" min="{{ $field==='maximum_minutes'?1:0 }}" max="{{ $field==='maximum_count'?20:480 }}" value="{{ $type[$field] }}" @required($field!=='fixed_minutes')></label>@endforeach<label>State<select name="active"><option value="1" @selected($type['active'])>Active</option><option value="0" @selected(!$type['active'])>Disabled</option></select></label><button class="button secondary small">Save break policy</button></form></details>@endforeach<p class="hint">Each new break captures its policy. Later policy changes do not rewrite existing break evidence.</p></div></section>
<section class="panel" id="att-policy-history" data-attendance-setting-section><div class="panel-heading"><h2>Immutable policy history</h2></div><div class="panel-body">@forelse($policies as $policy)<details><summary>#{{ $policy->id }} · {{ $policy->name }} · {{ $policy->scope_type }} #{{ $policy->scope_id }} · {{ $policy->effective_on->toDateString() }}</summary><pre>{{ json_encode($policy->rules,JSON_PRETTY_PRINT) }}</pre></details>@empty<p>Default policy is active. No overrides saved.</p>@endforelse{{ $policies->links() }}</div></section>
@can('attendance.approve')<section class="panel" data-attendance-setting-section><div class="panel-heading"><h2>Attendance period locks</h2></div><div class="panel-body"><form class="form-grid" method="post" action="{{ $base }}/attendance/manage/lock">@csrf<label>Period<input type="month" name="period" required></label><label>Reason<input name="reason" minlength="5" maxlength="1000" required></label><button class="button secondary">Lock attendance month</button></form>@foreach($locks as $lock)<article><p>{{ $lock->period }} · {{ $lock->reopened_at?'Reopened':'Locked' }} · {{ $lock->reason }}</p>@if(!$lock->reopened_at)<form class="att-inline-form" method="post" action="{{ $base }}/attendance/manage/reopen">@csrf<input type="hidden" name="period" value="{{ $lock->period }}"><label>Independent reopen reason<input name="reason" minlength="5" maxlength="1000" required></label><button class="button secondary small">Reopen</button></form>@endif</article>@endforeach{{ $locks->links() }}</div></section>@endcan
<section class="panel" id="att-report-schedules" data-attendance-setting-section><div class="panel-heading"><h2>My scheduled reports</h2></div><div class="panel-body">@forelse($schedules as $schedule)<form class="att-inline-form" method="post" action="{{ $base }}/attendance/manage/schedule-state">@csrf<input type="hidden" name="id" value="{{ $schedule->id }}"><input type="hidden" name="enabled" value="{{ $schedule->enabled?0:1 }}"><span>{{ $schedule->name }} · {{ $schedule->frequency }} · {{ $schedule->enabled?'Enabled':'Paused' }} · last {{ $schedule->last_sent_on??'Not yet sent' }}</span><button class="button secondary small">{{ $schedule->enabled?'Pause':'Enable' }}</button></form>@empty<p>Create a schedule from Attendance reports.</p>@endforelse{{ $schedules->links() }}</div></section></div></div>

<section class="panel"><div class="panel-heading"><h2>Time & location diagnostics</h2></div><div class="panel-body"><dl class="att-facts"><div><dt>Company timezone</dt><dd>{{ \App\Domain\Operations\Operations::timezone() }}</dd></div><div><dt>Current UTC time</dt><dd>{{ now()->utc()->format('Y-m-d H:i:s') }}</dd></div><div><dt>Company local time</dt><dd>{{ now()->timezone(\App\Domain\Operations\Operations::timezone())->format('d M Y g:i:s A') }}</dd></div><div><dt>Secure connection</dt><dd>{{ request()->isSecure()?'HTTPS active':'HTTPS required on hosting' }}</dd></div></dl><p class="hint">Employee attendance uses the effective policy timezone, which may override the company default. Punch timestamps use the host clock. Ask the hosting provider to keep NTP/time synchronization enabled; this page cannot verify synchronization independently. Browser location needs HTTPS and permission. Exact street names depend on location accuracy and address-data coverage.</p></div></section>