Upload folder using huggingface_hub

Dockerfile

@@ -22,7 +22,7 @@ RUN apt-get update && \
 
 # Build argument to control whether we're building standalone or in-repo
 ARG BUILD_MODE=in-repo
-ARG ENV_NAME=basic_openenv
+ARG ENV_NAME=hr_onboarding_env
 
 # Copy environment code (always at root of build context)
 COPY . /app/env

ENVIRONMENT_DEEP_DIVE.md

@@ -0,0 +1,963 @@
+# HR Onboarding & Offboarding Environment — Deep Dive
+
+This document explains **everything** about the environment in detail: what it is, how it works internally, what each component does, how the agent interacts with it, how reward is computed, and what makes tasks easy or hard. Read this if you want a complete mental model of the system.
+
+---
+
+## Table of Contents
+
+1. [What Is This Environment?](#1-what-is-this-environment)
+2. [The Big Picture: How It All Fits Together](#2-the-big-picture-how-it-all-fits-together)
+3. [World State: The Simulated Company](#3-world-state-the-simulated-company)
+4. [Tools: What the Agent Can Do](#4-tools-what-the-agent-can-do)
+5. [Tasks: What the Agent Is Asked To Do](#5-tasks-what-the-agent-is-asked-to-do)
+6. [Rubrics: How We Score the Agent](#6-rubrics-how-we-score-the-agent)
+7. [The OpenEnv Interface: How It All Connects](#7-the-openenv-interface-how-it-all-connects)
+8. [A Full Episode Walkthrough](#8-a-full-episode-walkthrough)
+9. [Business Rules & Edge Cases](#9-business-rules--edge-cases)
+10. [File-by-File Reference](#10-file-by-file-reference)
+
+---
+
+## 1. What Is This Environment?
+
+This is a **reinforcement learning environment** that simulates the HR department of a fictional company called **AcmeCorp**. The environment is designed to train and evaluate LLM agents on real-world enterprise workflows.
+
+### The Analogy
+
+Think of it like a video game:
+- **The world** is AcmeCorp — a company with 200 employees, 8 departments, laptops, software licenses, access badges, etc.
+- **The player** is an LLM agent that acts as an HR automation bot.
+- **The quest** is a task like "Onboard Priya Sharma to Engineering" or "Offboard a departing director."
+- **The moves** are tool calls — the agent can call `hr_create_employee`, `it_assign_asset`, `email_send`, etc.
+- **The score** is computed by a rubric that checks: Did the agent call the right tools? In the right order? With the right parameters?
+
+### Why Does This Exist?
+
+We're training LLMs to be better at **multi-step tool calling** in enterprise settings. Most LLM benchmarks test simple Q&A or single-tool-use. This environment tests whether an agent can:
+
+1. **Plan** a sequence of 3-10 tool calls to complete a complex workflow
+2. **Follow business rules** (RBAC levels, department restrictions, headcount limits)
+3. **Handle edge cases** (license seats full, manager on leave, contractor-specific policies)
+4. **Recover from errors** (tool returns an error → agent adapts)
+5. **Prioritize** (complete all required steps within a limited step budget of 15)
+
+---
+
+## 2. The Big Picture: How It All Fits Together
+
+```
+┌─────────────────────────────────────────────────────────┐
+│                    LLM AGENT                            │
+│  (GPT, Claude, Qwen, etc.)                             │
+│                                                         │
+│  Receives: task instruction + tool results              │
+│  Produces: tool calls (JSON)                            │
+└────────────────────────┬────────────────────────────────┘
+                         │
+                    tool call
+                  {"tool": "hr_create_employee",
+                   "params": {"name": "Priya Sharma", ...}}
+                         │
+                         ▼
+┌─────────────────────────────────────────────────────────┐
+│              ENVIRONMENT (this repo)                    │
+│                                                         │
+│  ┌──────────┐   ┌──────────┐   ┌──────────┐            │
+│  │  Tasks   │   │  Tools   │   │ Rubrics  │            │
+│  │ (77)     │   │ (25)     │   │ (scoring)│            │
+│  └────┬─────┘   └────┬─────┘   └────┬─────┘            │
+│       │              │              │                   │
+│       │    ┌─────────▼──────────┐   │                   │
+│       └───►│    World State     │◄──┘                   │
+│            │  (500+ entities)   │                       │
+│            │  - 200 employees   │                       │
+│            │  - 100 IT assets   │                       │
+│            │  - 20 access roles │                       │
+│            │  - 15 policies     │                       │
+│            │  - 15 licenses     │                       │
+│            │  - 15 sec groups   │                       │
+│            │  - 8 departments   │                       │
+│            └────────────────────┘                       │
+└─────────────────────────────────────────────────────────┘
+```
+
+**Data flow for one episode:**
+
+1. `env.reset()` → Picks a task, resets world state, returns task instruction to agent
+2. Agent reads instruction → decides which tool to call → sends `HROnboardingAction`
+3. `env.step(action)` → Executes tool against world state → returns result to agent
+4. Repeat steps 2-3 up to 15 times
+5. When episode ends → Rubric evaluator checks the action log → computes reward (0.0 to 1.0)
+
+---
+
+## 3. World State: The Simulated Company
+
+The world state (`server/world.py`) is the **single source of truth** for everything in the simulated company. It's an in-memory database that tools read from and write to.
+
+### 3.1 Entities (loaded from `server/data/`)
+
+#### Employees (`employees.json` — 200 records)
+
+Every employee has:
+
+```json
+{
+  "emp_id": "emp_0001",
+  "name": "Alice Johnson",
+  "email": "alice.johnson@acmecorp.com",
+  "department": "Engineering",
+  "level": "L4",
+  "role": "Engineering Manager",
+  "manager_id": "emp_0003",
+  "status": "active",
+  "date_of_joining": "2019-03-15",
+  "date_of_leaving": null,
+  "is_contractor": false,
+  "phone": "+1-650-555-1234",
+  "location": "San Francisco"
+}
+```
+
+Key fields:
+- **`level`**: L1 (Associate) → L2 (Senior) → L3 (Team Lead) → L4 (Manager) → L5 (Director) → L6 (VP). This drives RBAC — certain actions require certain levels.
+- **`status`**: `active` (normal), `pending` (just created, not yet onboarded), `offboarded` (no longer at company)
+- **`manager_id`**: Creates a tree hierarchy. Every employee (except department heads) has a manager.
+- **`is_contractor`**: Contractors have different onboarding rules (no VPN, limited access, requires legal approval).
+
+The 200 employees are distributed across 8 departments with realistic org hierarchies (each department has a head at L5/L6, managers at L3/L4, and individual contributors at L1/L2).
+
+#### Departments (`departments.json` — 8 departments)
+
+```json
+{
+  "dept_id": "dept_001",
+  "name": "Engineering",
+  "head": "emp_0003",
+  "budget": 5000000,
+  "headcount_limit": 45,
+  "required_tools": ["GitHub", "Jira", "AWS", "Slack", "VSCode"],
+  "onboarding_steps": [
+    "Submit signed offer letter and NDA",
+    "Complete background check verification",
+    "Provision email and Slack accounts",
+    "Assign laptop and peripherals",
+    "Set up development environment access",
+    "Schedule orientation with team lead",
+    "Add to relevant Slack channels"
+  ],
+  "offboarding_steps": [
+    "Revoke all system access",
+    "Return laptop and equipment",
+    "Complete knowledge transfer",
+    "Conduct exit interview",
+    "Process final payroll",
+    "Remove from Slack channels and mailing lists"
+  ]
+}
+```
+
+Key fields:
+- **`headcount_limit`**: Maximum number of active+pending employees allowed. If a department is at its limit, `hr_create_employee` will return an error. Two departments (Data Science = 25, Marketing = 30) are intentionally at or near their limits to create edge cases.
+- **`onboarding_steps` / `offboarding_steps`**: Department-specific checklists. When you create an onboarding request, these become the steps that must be completed.
+- **`required_tools`**: Which software tools the department uses (used for context, not enforced).
+
+#### IT Assets (`it_assets.json` — 100 assets)
+
+```json
+{
+  "asset_id": "asset_001",
+  "type": "laptop",
+  "brand": "Apple",
+  "model": "MacBook Pro 16\" M3 Max",
+  "specs": "16-inch Liquid Retina XDR, M3 Max, 64GB RAM, 2TB SSD",
+  "status": "assigned",
+  "assigned_to": "emp_0001",
+  "purchase_date": "2024-01-15"
+}
+```
+
+Breakdown: 50 laptops, 25 monitors, 15 phones, 10 headsets. About half are assigned, half are available. The agent needs to check available assets before assigning one during onboarding.
+
+#### Access Roles (`access_roles.json` — 20 roles)
+
+```json
+{
+  "role_id": "role_001",
+  "name": "basic_employee",
+  "permissions": ["email_access", "slack_access", "intranet_access"],
+  "department": "all",
+  "level_requirement": "L1"
+}
+```
+
+Each role has:
+- **`department`**: Which department can use this role. `"all"` means any department. `"Engineering"` means only Engineering employees.
+- **`level_requirement`**: Minimum level needed. `"L1"` means anyone. `"L4"` means only managers and above.
+
+Example roles:
+- `basic_employee` (all departments, L1+) — email, slack, intranet
+- `engineering_developer` (Engineering only, L1+) — github, aws_dev, ci_cd
+- `security_admin` (Security only, L4+) — siem, vault, firewall_mgmt
+- `executive_access` (all departments, L5+) — board_docs, exec_dashboard
+
+If an L1 employee tries to get `security_admin` (L4+ required), the tool returns an error. If a Marketing employee tries to get `engineering_developer` (Engineering only), the tool returns an error. These are the RBAC constraints the agent must learn.
+
+#### Policies (`policies.json` — 15 policies)
+
+```json
+{
+  "policy_id": "pol_001",
+  "title": "Standard Employee Onboarding Policy",
+  "department": "all",
+  "content": "All new employees must complete the following steps within their first 30 days...",
+  "last_updated": "2024-06-15",
+  "key_rules": [
+    "Employee record must be created before any provisioning",
+    "Manager approval required for all onboarding requests",
+    "IT assets must be checked for availability before assignment"
+  ]
+}
+```
+
+Policies cover: onboarding, offboarding, badge access, contractor hiring, termination procedures, software licensing, data handling, remote work, etc. The `policy_lookup` tool lets the agent read these before acting.
+
+#### Software Licenses (dynamically initialized — 15 licenses)
+
+Not stored in a JSON file; initialized in `world.py` at runtime. Each license tracks:
+- `total_seats` and `used_seats`
+- `department_restriction` (which department can use it, or `null` for all)
+
+**Two licenses are intentionally full** (used_seats = total_seats):
+- **Netsuite** (15/15 seats) — Finance tool
+- **LinkedIn Sales Navigator** (25/25 seats) — Sales tool
+
+This creates edge cases: if a task asks the agent to assign a Netsuite license to a new Finance hire, the agent should discover it's full and handle that situation.
+
+#### Security Groups (dynamically initialized — 15 groups)
+
+Groups like `all_employees`, `engineering_team`, `vpn_users`, `server_room_access`, `contractors`, etc. Each has a list of accessible resources.
+
+#### Templates (`templates.json` — 12 templates)
+
+Email and Slack message templates for welcome messages, farewell emails, IT setup notifications, etc. These provide context for communication tasks.
+
+### 3.2 Dynamic Collections (created during episodes)
+
+These start empty and get populated as the agent takes actions:
+- **`onboarding_requests`**: Created by `onboarding_create_request`
+- **`offboarding_requests`**: Created by `offboarding_create_request`
+- **`approvals`**: Created by `approval_request`
+- **`emails`**: Created by `email_send`
+- **`slack_messages`**: Created by `slack_send_message`
+- **`meetings`**: Created by `meeting_schedule`
+- **`badges`**: Created by `access_create_badge`
+
+### 3.3 World State Reset
+
+At the start of each episode (`env.reset()`), the world state is deep-copied back to its initial state. This means:
+- All 200 employees are back to their original status
+- All assets are back to their original assignment
+- All dynamic collections (requests, emails, meetings, etc.) are cleared
+- The action log is cleared
+
+This ensures each episode is independent — the agent starts from a clean slate every time.
+
+### 3.4 Indexes
+
+For performance, the world state builds lookup indexes:
+- `_emp_by_id`: O(1) employee lookup by emp_id
+- `_emp_by_email`: O(1) lookup by email
+- `_emp_by_dept`: O(1) lookup by department (returns list)
+- `_dept_by_id` / `_dept_by_name`: O(1) department lookup
+- `_asset_by_id`: O(1) asset lookup
+- `_role_by_id`: O(1) access role lookup
+- `_policy_by_id`: O(1) policy lookup
+
+These are rebuilt after every reset and after certain mutations (like `reassign_reports`).
+
+---
+
+## 4. Tools: What the Agent Can Do
+
+The agent interacts with the world through **25 tools** defined in `server/tools.py`. Each tool is a function that takes parameters, operates on the world state, and returns a result dict.
+
+### 4.1 Architecture
+
+```
+Agent sends: {"tool_name": "hr_create_employee", "arguments": {...}}
+                        │
+                        ▼
+              ┌─────────────────┐
+              │  ToolRegistry   │
+              │                 │
+              │  execute(name,  │──── if unknown tool ──→ {"success": false, "error": "Unknown tool"}
+              │         params) │
+              │                 │
+              │  routes to:     │
+              │  _hr_create_..()│──→ calls world.create_employee(params)
+              └────────┬────────┘
+                       │
+                       ▼
+              ┌─────────────────┐
+              │   WorldState    │
+              │                 │──→ validates inputs
+              │  create_employee│──→ checks headcount limits
+              │                 │──→ generates emp_id
+              │                 │──→ adds to state
+              │                 │──→ updates indexes
+              └────────┬────────┘
+                       │
+                       ▼
+              Result: {"success": true, "employee": {...}}
+              + logged to action_log for rubric evaluation
+```
+
+Every tool call is **logged** to the action log with:
+- `tool`: name of the tool called
+- `params`: parameters passed
+- `result`: what the tool returned
+- `timestamp`: when it was called
+
+This log is what the rubric evaluator uses to score the agent.
+
+### 4.2 Tool Categories
+
+#### HR System Tools (5 tools)
+
+| Tool | What It Does | Modifies State? |
+|------|-------------|----------------|
+| `hr_create_employee` | Creates a new employee record. Validates department exists, checks headcount limit, generates emp_id, sets status to "pending". | YES — adds employee |
+| `hr_read_employee` | Looks up one employee by emp_id or email. | No — read only |
+| `hr_update_employee` | Updates any employee field (except emp_id). Used to change status, department, manager, etc. | YES — modifies employee |
+| `hr_search_employees` | Searches employees by filters (department, level, status, location, role, name). Returns all matches. | No — read only |
+| `hr_get_org_chart` | Returns the org hierarchy for a department as a tree structure (who reports to whom). | No — read only |
+
+#### Onboarding/Offboarding Tools (6 tools)
+
+| Tool | What It Does | Modifies State? |
+|------|-------------|----------------|
+| `onboarding_create_request` | Creates an onboarding request for a "pending" employee. Generates a checklist of department-specific steps. | YES — creates request |
+| `onboarding_get_status` | Checks progress of an onboarding request (which steps are done/pending). | No — read only |
+| `onboarding_complete_step` | Marks a specific onboarding step as completed. If all steps are done, sets request to "completed" and employee status to "active". | YES — updates request & employee |
+| `offboarding_create_request` | Creates an offboarding request. Different steps for resignation vs termination. | YES — creates request |
+| `offboarding_get_status` | Checks offboarding progress. | No — read only |
+| `offboarding_complete_step` | Marks an offboarding step as completed. If all done, sets employee to "offboarded". | YES — updates request & employee |
+
+**Important**: Termination offboarding has different steps than resignation: `["access_revocation", "asset_return", "final_payroll", "legal_review"]` — notably, no farewell communications or exit interview.
+
+#### IT Provisioning Tools (5 tools)
+
+| Tool | What It Does | Modifies State? |
+|------|-------------|----------------|
+| `it_assign_asset` | Assigns a specific asset (by asset_id) to an employee. Asset must be "available". | YES — marks asset as assigned |
+| `it_get_available_assets` | Lists all unassigned assets, optionally filtered by type (laptop, monitor, phone, headset). | No — read only |
+| `it_create_account` | Creates IT accounts (email, Slack, VPN, GitHub, etc.) for an employee. | YES — adds accounts to employee |
+| `it_revoke_access` | Revokes all IT accounts for an employee (sets status to "revoked"). Used in offboarding. | YES — modifies accounts |
+| `it_get_software_licenses` | Checks license seat availability. Shows total_seats, used_seats, and department_restriction. | No — read only |
+
+#### Access Control Tools (4 tools)
+
+| Tool | What It Does | Modifies State? |
+|------|-------------|----------------|
+| `access_assign_role` | Assigns an RBAC role to an employee. **Checks level requirements and department restrictions.** | YES — adds role to employee |
+| `access_create_badge` | Creates a physical access badge with zone permissions. **Server room access requires L4+ security approval.** | YES — creates badge |
+| `access_revoke_role` | Removes a specific role from an employee. | YES — removes role |
+| `access_get_security_groups` | Lists all 15 security groups and their resources. | No — read only |
+
+#### Communication Tools (3 tools)
+
+| Tool | What It Does | Modifies State? |
+|------|-------------|----------------|
+| `email_send` | Sends an email. Requires from_address, to_address, subject, body. | YES — logs email |
+| `slack_send_message` | Posts a Slack message. Requires channel, sender, text. | YES — logs message |
+| `meeting_schedule` | Schedules a meeting. Requires title, attendees (list of emp_ids), datetime, meeting_type. | YES — logs meeting |
+
+#### Policy & Approval Tools (2 tools)
+
+| Tool | What It Does | Modifies State? |
+|------|-------------|----------------|
+| `policy_lookup` | Searches policies by topic, department, or policy_id. Returns policy content and key_rules. | No — read only |
+| `approval_request` | Submits an approval. **Checks approver level** (L3+ for manager approval, L4+ for security approval). | YES — creates approval |
+
+### 4.3 Error Handling
+
+Every tool returns `{"success": true, ...}` or `{"success": false, "error": "..."}`. Common errors:
+
+- `"Employee emp_XXXX not found"` — invalid emp_id
+- `"Department 'X' has reached its headcount limit (N)"` — can't create more employees
+- `"Asset asset_XXX is not available"` — already assigned to someone
+- `"Role X not found"` — invalid role_id
+- `"Employee level L1 does not meet minimum L4 for role security_admin"` — RBAC violation
+- `"Role engineering_developer is restricted to Engineering department"` — department restriction
+- `"No available seats for Netsuite (all 15 seats in use)"` — license full
+- `"Approver must be L4+ for security approval"` — approver too junior
+- `"Server room access requires L4+ security approval"` — missing prerequisite approval
+
+The agent must learn to handle these errors gracefully — check availability before assigning, verify role requirements before assigning access, etc.
+
+---
+
+## 5. Tasks: What the Agent Is Asked To Do
+
+Tasks are defined in `server/tasks.py`. The `TaskGenerator` class creates 77 tasks using the world state data (actual employee names, IDs, departments).
+
+### 5.1 Task Structure
+
+Every task has:
+
+```python
+Task(
+    task_id="task_0015",
+    instruction="Onboard new hire Priya Sharma to Engineering as L2 Software Engineer. Create their employee record and initiate the onboarding request.",
+    difficulty="medium",
+    category="onboarding",
+    expected_tools=["hr_create_employee", "onboarding_create_request"],
+    rubric_criteria=[
+        {"name": "created_employee", "description": "Created employee record", "check": "tool_used:hr_create_employee"},
+        {"name": "correct_name", "description": "Used correct name", "check": "param_value:hr_create_employee.name=Priya Sharma"},
+        {"name": "correct_dept", "description": "Assigned to correct department", "check": "param_value:hr_create_employee.department=Engineering"},
+        {"name": "correct_level", "description": "Set correct level", "check": "param_value:hr_create_employee.level=L2"},
+        {"name": "correct_role", "description": "Set correct role", "check": "param_value:hr_create_employee.role=Software Engineer"},
+        {"name": "initiated_onboarding", "description": "Created onboarding request", "check": "tool_used:onboarding_create_request"},
+        {"name": "sequencing", "description": "Created employee before onboarding request", "check": "tool_order:hr_create_employee<onboarding_create_request"},
+    ],
+    setup_fn=None,  # or a function that pre-configures world state
+    context={"name": "Priya Sharma", "department": "Engineering", "level": "L2", "role": "Software Engineer"},
+)
+```
+
+### 5.2 Task Categories & Counts
+
+#### Simple Lookup Tasks (14 tasks)
+
+These require 1-2 tool calls. Testing basic tool selection and parameter passing.
+
+- **Employee lookups** (3): "Look up the employee record for X (ID: emp_XXXX)."
+  - Expected: `hr_read_employee` with correct emp_id
+  - Rubric: 2 criteria (correct tool + correct parameter)
+
+- **Department search** (2): "List all employees in the Y department."
+  - Expected: `hr_search_employees` with department filter
+  - Rubric: 2 criteria
+
+- **Org chart** (1): "Show me the organizational chart for the Z department."
+  - Expected: `hr_get_org_chart`
+  - Rubric: 2 criteria
+
+- **Asset availability** (1): "What laptops are currently available for assignment?"
+  - Expected: `it_get_available_assets`
+  - Rubric: 1 criterion
+
+- **License check** (1): "Check how many Jira license seats are available."
+  - Expected: `it_get_software_licenses`
+  - Rubric: 1 criterion
+
+- **Policy lookup** (1): "What is the company's policy on onboarding new employees?"
+  - Expected: `policy_lookup`
+  - Rubric: 1 criterion
+
+- **Security groups** (1): "List all security groups and their accessible resources."
+  - Expected: `access_get_security_groups`
+  - Rubric: 1 criterion
+
+- **Onboarding status** (3): "Check the onboarding status for employee X (emp_XXXX)."
+  - Expected: `onboarding_get_status`
+  - Rubric: 2 criteria
+  - **Setup function**: Pre-creates an onboarding request so there's something to look up
+
+- **Resource availability** (1): "Check if there are available laptops and Jira licenses for a new Engineering hire."
+  - Expected: `it_get_available_assets` + `it_get_software_licenses`
+  - Rubric: 2 criteria
+
+#### Medium Onboarding Tasks (10 tasks)
+
+These require 2-4 tool calls. Testing multi-step workflows.
+
+- "Onboard new hire X to Y as LZ Role. Create their employee record and initiate the onboarding request."
+  - Expected: `hr_create_employee` → `onboarding_create_request`
+  - Rubric: 7 criteria (create, correct name/dept/level/role, onboarding, sequencing)
+  - 10 different hire combinations across different departments
+
+#### Complex Onboarding Tasks (10 tasks)
+
+These require 5-10 tool calls. Full end-to-end workflows.
+
+**Full onboarding (5 tasks)**: "Fully onboard X as LY Role in Z. Create employee record, initiate onboarding, assign a laptop, create IT accounts, set up access roles, send welcome email, and schedule orientation meeting."
+  - Expected: `hr_create_employee` → `onboarding_create_request` → `it_get_available_assets` → `it_assign_asset` → `it_create_account` → `access_assign_role` → `email_send` or `slack_send_message` → `meeting_schedule`
+  - Rubric: 10 criteria (all the above + sequencing + completeness)
+  - Context includes manager emp_id
+
+**Complex onboarding with approvals (5 tasks)**: "Onboard X as LY Role in Z. Create record, initiate onboarding, complete at least 3 onboarding steps, assign access roles, and get required approvals."
+  - Expected: `hr_create_employee` → `onboarding_create_request` → `onboarding_complete_step` (×3+) → `access_assign_role` → `approval_request`
+  - Rubric: 6-7 criteria
+
+#### Medium Offboarding Tasks (12 tasks)
+
+- "Initiate offboarding for X who is resigning. Create the offboarding request and revoke their system access."
+  - Expected: `offboarding_create_request` → `it_revoke_access`
+  - Rubric: 3-4 criteria
+  - **Setup function**: Sets the employee's `date_of_leaving` to create realistic context
+
+#### Complex Offboarding Tasks (8 tasks)
+
+**Full offboarding (4 tasks)**: "Fully offboard X, a LY Role in Z who is resigning. Create offboarding request, revoke all access roles, reclaim their laptop, revoke IT access, send farewell email, schedule exit interview."
+  - Expected: many tools in sequence
+  - Rubric: 8-10 criteria
+  - **Setup function**: Assigns assets, roles, and badges to the employee so there's something to revoke/reclaim
+
+**Complex offboarding with handover (4 tasks)**: "Process the complete offboarding for X from Y. Create the offboarding request, revoke access, reclaim assets, send farewell, complete at least 3 offboarding steps."
+  - Rubric: 6-7 criteria
+
+#### Edge Case Tasks (12 tasks)
+
+These test business rule awareness and error handling.
+
+- **Headcount limit** (2): "Onboard a new L1 to Marketing/Finance." (Department is at limit)
+  - Agent should get an error from `hr_create_employee` and the rubric checks that the error message contains "headcount_limit"
+
+- **License full** (2): "Assign a Netsuite/LinkedIn Sales Navigator license to a new hire."
+  - Agent should discover no seats available
+
+- **Manager on leave** (1): "Onboard to Security but the manager is on leave — find the skip-level manager."
+  - **Setup function**: Sets the designated manager's status to "on_leave"
+  - Agent needs to use `hr_read_employee` to check, realize the manager is unavailable, then look up the org chart or the manager's manager
+
+- **Contractor onboarding** (1): "Onboard contractor Amit Verma to Engineering. Contractors need legal approval."
+  - Agent should set `is_contractor: true` and submit a `legal_approval`
+
+- **Asset return during offboarding** (1): "Offboard Marta Wagner who has company assets that need to be returned."
+  - **Setup function**: Assigns assets to this employee
+  - Agent should use `it_get_available_assets` or similar to find assigned assets, then reclaim them
+
+- **Offer rescinded** (1): "The offer for Wei Xu has been rescinded. They are currently mid-onboarding."
+  - **Setup function**: Creates an in-progress onboarding request
+  - Agent should offboard someone who hasn't fully onboarded yet
+
+- **Termination** (1): "Mark Taylor is being terminated effective immediately."
+  - Agent should use `reason: "termination"` (different offboarding steps, no farewell email)
+  - Rubric checks `tool_not_used:email_send` (no farewell for terminations)
+
+- **Level mismatch** (1): "Assign the security_admin access role to a new L1 Security Associate."
+  - security_admin requires L4+ → should fail
+  - Rubric checks that the error contains the level requirement
+
+- **Department restriction** (1): "A Marketing employee needs access to the Engineering GitHub repository."
+  - engineering_developer role is Engineering-only → should fail
+
+- **Policy-dependent task** (1): "Before onboarding a new Security team member, look up the badge access policy and check what approvals are needed."
+  - Agent should call `policy_lookup` before acting
+
+#### Cross-Workflow Tasks (10 tasks)
+
+**Department transfers** (3): "X is transferring from A to B. Process the department transfer."
+  - Agent needs to offboard from old department + onboard to new one
+  - Expected: `hr_update_employee` (change department) + `offboarding_create_request` + `onboarding_create_request`
+
+**Rehires** (2): "Rehire X who was previously offboarded."
+  - **Setup function**: Sets employee status to "offboarded"
+  - Agent should update status back to "pending" and create new onboarding request
+
+**Bulk status queries** (3): "Generate a status report for all employees in X department. List each employee, their status, and current onboarding/offboarding status."
+  - Tests multiple tool calls: `hr_search_employees` + multiple `onboarding_get_status`
+
+**Manager departure** (2): "Manager X in Engineering is leaving. They have N direct reports. Process their offboarding and reassign their reports."
+  - Agent needs to: find direct reports → find skip-level manager → offboard departing manager → reassign reports
+  - **Setup function**: Ensures the manager has direct reports
+
+### 5.3 Setup Functions
+
+Many tasks have a `setup_fn` — a function that modifies the world state before the task starts. This creates the preconditions the task assumes.
+
+Examples:
+- Onboarding status tasks: Creates an onboarding request so there's something to look up
+- Offboarding tasks: Assigns assets/roles/badges to the employee, sets their leaving date
+- Edge case tasks: Sets a manager's status to "on_leave", or an employee's status to "offboarded" for rehire
+- Manager departure: Ensures the manager has direct reports in the org hierarchy
+
+The agent never sees the setup function — it only sees the task instruction and tool results.
+
+---
+
+## 6. Rubrics: How We Score the Agent
+
+The rubric system (`server/rubrics.py`) evaluates the agent's action log against a set of criteria for each task.
+
+### 6.1 How Scoring Works
+
+```
+Agent's action log:
+  1. hr_create_employee({"name": "Priya Sharma", "department": "Engineering", ...})
+  2. onboarding_create_request({"employee_id": "emp_0201"})
+
+Task rubric:
+  ✓ tool_used:hr_create_employee               → PASS (tool was called)
+  ✓ param_value:hr_create_employee.name=Priya Sharma  → PASS (correct name)
+  ✓ param_value:hr_create_employee.department=Engineering → PASS
+  ✓ param_value:hr_create_employee.level=L2     → PASS
+  ✓ param_value:hr_create_employee.role=Software Engineer → PASS
+  ✓ tool_used:onboarding_create_request         → PASS
+  ✓ tool_order:hr_create_employee<onboarding_create_request → PASS (correct order)
+
+Score = 7/7 = 1.0 (100%)
+Passed = True (all criteria met)
+```
+
+### 6.2 Rubric Check Types (8 types)
+
+| Check Type | Format | What It Checks |
+|-----------|--------|---------------|
+| `tool_used` | `tool_used:hr_create_employee` | Was this tool called at least once? |
+| `tool_not_used` | `tool_not_used:email_send` | Was this tool **NOT** called? (e.g., no farewell email for terminations) |
+| `tool_used_any` | `tool_used_any:email_send,slack_send_message` | Was at **least one** of these tools called? |
+| `param_value` | `param_value:hr_create_employee.name=Priya Sharma` | Was the tool called with this **exact** parameter value? |
+| `param_contains` | `param_contains:policy_lookup.topic=onboard` | Does the parameter **contain** this substring? (case-insensitive) |
+| `tool_order` | `tool_order:hr_create_employee<onboarding_create_request` | Was tool A called **before** tool B? |
+| `tool_count` | `tool_count:onboarding_complete_step>=3` | Was the tool called at **least N times**? |
+| `result_contains` | `result_contains:headcount_limit` | Does any tool result contain this substring? (for edge cases where we expect errors) |
+
+### 6.3 How Checks Work Internally
+
+The `RubricEvaluator` parses each criterion's `check` string:
+
+```python
+"tool_order:hr_create_employee<onboarding_create_request"
+    ↓
+check_type = "tool_order"
+check_args = "hr_create_employee<onboarding_create_request"
+    ↓
+_check_tool_order("hr_create_employee<onboarding_create_request", action_log)
+    ↓
+Find first occurrence of hr_create_employee → index 0
+Find first occurrence of onboarding_create_request → index 1
+Is 0 < 1? → True → PASS
+```
+
+For `param_value`, it checks both direct parameters and nested `updates` dict (for `hr_update_employee`):
+
+```python
+"param_value:hr_update_employee.status=active"
+    ↓
+For each action where tool == "hr_update_employee":
+  Check params.get("status") == "active"
+  OR check params.get("updates", {}).get("status") == "active"
+```
+
+### 6.4 Reward Computation
+
+```
+reward = passed_criteria_count / total_criteria_count
+```
+
+- A score of 1.0 means all criteria passed
+- A score of 0.5 means half the criteria passed
+- The task is considered "passed" only if ALL criteria are satisfied (score == 1.0)
+
+In the training script, additional modifiers are applied:
+- **Step penalty**: -0.01 per step taken (encourages efficiency)
+- **Completion bonus**: +0.2 if all criteria passed
+
+---
+
+## 7. The OpenEnv Interface: How It All Connects
+
+### 7.1 What Is OpenEnv?
+
+OpenEnv is Meta + HuggingFace's standard for packaging RL environments for LLM agents. It provides:
+- A base `Environment` class (server-side) with `reset()`, `step()`, `state`
+- An `EnvClient` class (client-side) that connects over HTTP/WebSocket
+- A `create_app()` function that wraps the environment in a FastAPI server
+- Pydantic `Action` and `Observation` base classes for type safety
+
+### 7.2 Our Implementation
+
+```
+┌──────────────────────────────────────────┐
+│           models.py                       │
+│  HROnboardingAction(Action):              │
+│    - tool_name: str                       │
+│    - arguments: Dict[str, Any]            │
+│                                           │
+│  HROnboardingObservation(Observation):    │
+│    - task_id: str                         │
+│    - instruction: str                     │
+│    - tool_name: str                       │
+│    - tool_result: Dict[str, Any]          │
+│    - step: int                            │
+│    - max_steps: int                       │
+│    - available_tools: List[str]           ���
+│    - done: bool        (from Observation) │
+│    - reward: float     (from Observation) │
+│    - metadata: dict    (from Observation) │
+└──────────────────────────────────────────┘
+
+┌──────────────────────────────────────────┐
+│  server/hr_onboarding_environment.py      │
+│                                           │
+│  class HROnboardingEnvironment(Environment):
+│                                           │
+│    reset() → HROnboardingObservation      │
+│      1. Reset world state                 │
+│      2. Pick next task                    │
+│      3. Run setup_fn if any               │
+│      4. Return observation with:          │
+│         - task instruction                │
+│         - available tool names            │
+│         - difficulty & category metadata  │
+│                                           │
+│    step(action) → HROnboardingObservation │
+│      1. Increment step counter            │
+│      2. Execute tool via ToolRegistry     │
+│      3. Check if max_steps reached        │
+│      4. If done: evaluate rubric → reward │
+│      5. Return observation with:          │
+│         - tool result                     │
+│         - reward (0.0 until final step)   │
+│         - done flag                       │
+│         - eval breakdown in metadata      │
+│                                           │
+│    state → State(episode_id, step_count)  │
+└──────────────────────────────────────────┘
+
+┌──────────────────────────────────────────┐
+│  server/app.py                            │
+│                                           │
+│  app = create_app(                        │
+│    HROnboardingEnvironment,               │
+│    HROnboardingAction,                    │
+│    HROnboardingObservation,               │
+│    env_name="hr_onboarding_env",          │
+│    max_concurrent_envs=4,                 │
+│  )                                        │
+│                                           │
+│  Endpoints:                               │
+│    POST /reset  → reset + return obs      │
+│    POST /step   → execute action          │
+│    GET  /state  → current state           │
+│    GET  /schema → Action/Obs schemas      │
+│    GET  /health → {"status": "healthy"}   │
+│    WS   /ws     → persistent session      │
+└──────────────────────────────────────────┘
+
+┌──────────────────────────────────────────┐
+│  client.py                                │
+│                                           │
+│  class HROnboardingEnv(EnvClient):        │
+│    Connects to server via HTTP/WebSocket  │
+│    Provides Python API: .reset(), .step() │
+└──────────────────────────────────────────┘
+```
+
+### 7.3 Episode Lifecycle
+
+1. **Client calls `reset()`** → Server creates new episode, picks task, returns observation
+2. **Client calls `step(action)`** (up to 15 times) → Server executes tool, returns result
+3. **On step 15 (or earlier if agent signals done)** → Server evaluates rubric, sets `done=True`, returns final reward
+4. **If client calls `step()` after done** → Server returns `{"error": "Episode already finished"}`
+
+### 7.4 Important: Reward is Only on Final Step
+
+During intermediate steps (1 to 14), `reward` is always `0.0`. The actual rubric evaluation only happens when `done=True` (step 15 or agent signals done). This is by design — the agent doesn't get feedback until the episode ends, which makes it a proper RL problem (delayed reward).
+
+---
+
+## 8. A Full Episode Walkthrough
+
+Let's trace a **complex onboarding task** step by step.
+
+### Task
+
+> "Fully onboard John Lee as L3 Team Lead - ML in Data Science. Their manager will be Rohan Reddy (emp_0128). Create the employee record, initiate onboarding, assign a laptop, create IT accounts (email, Slack, VPN), set up appropriate access roles for their level, send a welcome email to the team channel, and schedule an orientation meeting with their manager."
+
+### What the Agent Should Do
+
+```
+Step 1: hr_create_employee
+  → name: "John Lee", department: "Data Science", level: "L3",
+    role: "Team Lead - ML", manager_id: "emp_0128"
+  → Result: {success: true, employee: {emp_id: "emp_0201", ...}}
+
+Step 2: onboarding_create_request
+  → employee_id: "emp_0201"
+  → Result: {success: true, request: {request_id: "onb_0001", steps: {...}}}
+
+Step 3: it_get_available_assets
+  → asset_type: "laptop"
+  → Result: {success: true, count: 24, assets: [{asset_id: "asset_003", ...}, ...]}
+
+Step 4: it_assign_asset
+  → asset_id: "asset_003", employee_id: "emp_0201"
+  → Result: {success: true}
+
+Step 5: it_create_account
+  → employee_id: "emp_0201", account_types: ["email", "slack", "vpn"]
+  → Result: {success: true, accounts_created: [...]}
+
+Step 6: access_assign_role
+  → employee_id: "emp_0201", role_id: "role_004" (data_scientist, requires L1+, Data Science)
+  → Result: {success: true, role: "data_scientist", permissions: [...]}
+
+Step 7: slack_send_message
+  → channel: "#data-science", sender: "hr-bot", text: "Welcome John Lee to the team! ..."
+  → Result: {success: true}
+
+Step 8: meeting_schedule
+  → title: "Orientation: John Lee", attendees: ["emp_0201", "emp_0128"],
+    datetime: "2026-03-10T10:00:00", meeting_type: "orientation"
+  → Result: {success: true}
+
+Agent signals done.
+```
+
+### Rubric Evaluation
+
+```
+ [PASS] created_employee:     tool_used:hr_create_employee         ✓
+ [PASS] initiated_onboarding: tool_used:onboarding_create_request  ✓
+ [PASS] assigned_laptop:      tool_used:it_assign_asset            ✓
+ [PASS] created_accounts:     tool_used:it_create_account          ✓
+ [PASS] assigned_access:      tool_used:access_assign_role         ✓
+ [PASS] sent_welcome:         tool_used_any:email_send,slack_send_message  ✓
+ [PASS] scheduled_orientation: tool_used:meeting_schedule           ✓
+ [PASS] sequencing_create_first: tool_order:hr_create_employee<onboarding_create_request  ✓
+ [PASS] sequencing_asset_check: tool_order:it_get_available_assets<it_assign_asset  ✓
+ [PASS] completeness:         tool_count:onboarding_complete_step>=3  ✗
+
+Score: 9/10 = 0.9 (90%)
+```
+
+Note: The agent scored 9/10 because it didn't complete any onboarding steps (the `onboarding_complete_step` tool was not called at all). A perfect agent would also call `onboarding_complete_step` 3+ times to mark steps like "Provision email and Slack accounts", "Assign laptop and peripherals", etc. as done.
+
+### What Happens When Things Go Wrong
+
+If the agent calls `hr_create_employee` with `department: "Data Science"` and the department is at its headcount limit:
+
+```
+Step 1: hr_create_employee → {success: false, error: "Department 'Data Science' has reached its headcount limit (25)"}
+```
+
+A good agent should recognize this error and try a different approach (or report the issue). A bad agent will keep retrying the same call.
+
+---
+
+## 9. Business Rules & Edge Cases
+
+### 9.1 RBAC (Role-Based Access Control)
+
+The level hierarchy governs who can do what:
+
+```
+L1 (Associate)  → Basic access roles only
+L2 (Senior)     → Same as L1 + can mentor
+L3 (Team Lead)  → Can approve onboarding (manager_approval)
+L4 (Manager)    → Can approve security (security_approval), server room badge access
+L5 (Director)   → All approvals + executive access
+L6 (VP)         → Same as L5
+```
+
+Access roles have two constraints:
+1. **Level requirement**: Employee must be at or above the role's minimum level
+2. **Department restriction**: Employee must be in the role's allowed department (or role allows "all")
+
+### 9.2 Headcount Limits
+
+Each department has a `headcount_limit`. When the number of active+pending employees reaches this limit, `hr_create_employee` fails. The agent should recognize this and either:
+- Report the limitation
+- Check headcount first with `hr_search_employees`
+- Look up the relevant policy
+
+### 9.3 License Seat Limits
+
+Two licenses are intentionally full:
+- **Netsuite** (15/15) — used by Finance
+- **LinkedIn Sales Navigator** (25/25) — used by Sales
+
+Agents should call `it_get_software_licenses` to check availability before trying to assign.
+
+### 9.4 Contractor Rules
+
+When `is_contractor: true`:
+- **Legal approval required** in addition to manager approval
+- **No VPN access** by default
+- **Limited access roles** (contractors group, not full department group)
+
+### 9.5 Termination vs Resignation
+
+Different offboarding steps:
+- **Resignation**: access_revocation, asset_return, knowledge_transfer, exit_interview, final_payroll, farewell_communications
+- **Termination**: access_revocation, asset_return, final_payroll, legal_review (NO farewell email, NO exit interview)
+
+The rubric for termination tasks checks `tool_not_used:email_send` — the agent should NOT send a farewell email.
+
+### 9.6 Server Room Badge Access
+
+Creating a badge with `access_zones: ["server_room"]` requires:
+1. Employee must be L4+ OR
+2. A `security_approval` must exist for the relevant onboarding request
+
+### 9.7 Manager On Leave
+
+Some tasks set a manager's status to "on_leave". The agent should:
+1. Try to look up the manager and see they're on leave
+2. Use `hr_get_org_chart` or `hr_read_employee` on the manager to find the skip-level manager
+3. Use the skip-level manager for approvals and orientation scheduling
+
+---
+
+## 10. File-by-File Reference
+
+```
+rl_hack/
+├── __init__.py                    # Exports: HROnboardingEnv, HROnboardingAction, HROnboardingObservation
+├── models.py                      # Pydantic models: Action (tool_name + arguments) and Observation (task_id + instruction + tool_result + step + reward + done)
+├── client.py                      # EnvClient subclass: connects to server via HTTP/WebSocket, provides .reset() and .step()
+├── openenv.yaml                   # OpenEnv manifest: tells HF Spaces this is a FastAPI environment on port 7860
+├── pyproject.toml                 # Python package config: name, version, dependencies (openenv-core)
+├── test_with_llm.py               # Test script: runs GPT-4o-mini against a task, prints rubric evaluation
+├── .env                           # API keys (gitignored)
+├── README.md                      # User-facing docs with quick start, tool table, task overview
+├── ENVIRONMENT_DEEP_DIVE.md       # This document
+│
+└── server/
+    ├── __init__.py                # Exports HROnboardingEnvironment
+    ├── app.py                     # FastAPI app created via create_app(), serves on port 7860
+    ├── hr_onboarding_environment.py  # Core environment class: reset(), step(), state. Orchestrates world, tools, tasks, rubrics.
+    ├── world.py                   # WorldState: loads data, manages 500+ entities, enforces business rules, provides mutation methods
+    ├── tools.py                   # 25 tool definitions (TOOL_DEFINITIONS list) + ToolRegistry class that maps names to functions
+    ├── tasks.py                   # TaskGenerator: creates 77 tasks with instructions, rubric criteria, and setup functions
+    ├── rubrics.py                 # RubricEvaluator: 8 check types, evaluates action log against criteria, computes score
+    ├── Dockerfile                 # Multi-stage Docker build using openenv-base image
+    ├── requirements.txt           # Server dependencies: openenv, fastapi, uvicorn
+    └── data/
+        ├── employees.json         # 200 employee records with full org hierarchy
+        ├── departments.json       # 8 departments with headcount limits, required tools, onboarding/offboarding steps
+        ├── it_assets.json         # 100 IT assets (50 laptops, 25 monitors, 15 phones, 10 headsets)
+        ├── access_roles.json      # 20 RBAC roles with level/department restrictions
+        ├── policies.json          # 15 company policies (onboarding, offboarding, badges, contractors, etc.)
+        └── templates.json         # 12 email/Slack message templates
+```
+
+---
+
+## Appendix: Quick Numbers
+
+| Metric | Value |
+|--------|-------|
+| Total entities | ~500+ |
+| Employees | 200 |
+| Departments | 8 |
+| IT Assets | 100 |
+| Access Roles | 20 |
+| Software Licenses | 15 (2 intentionally full) |
+| Security Groups | 15 |
+| Policies | 15 |
+| Message Templates | 12 |
+| Tools | 25 |
+| Tasks | 77 |
+| Max steps per episode | 15 |
+| Simple tasks | 14 |
+| Medium tasks | 22 |
+| Complex tasks | 29 |
+| Edge case tasks | 12 |
+| Rubric check types | 8 |

README.md

@@ -1,255 +1,351 @@
 ---
-title: Basic Openenv Environment Server
-emoji: 🚀
-colorFrom: pink
+title: HR Onboarding & Offboarding Environment
+emoji: 🏢
+colorFrom: green
 colorTo: blue
 sdk: docker
 pinned: false
 app_port: 7860
-base_path: /web
+base_path: /playground
 tags:
   - openenv
 ---
 
-# Basic Openenv Environment
+# HR Onboarding & Offboarding Environment
 
-A simple test environment that echoes back messages. Perfect for testing the env APIs as well as demonstrating environment usage patterns.
+An OpenEnv-compatible RL environment that simulates enterprise HR onboarding and offboarding workflows. The agent interacts with a realistic HR system (200+ employees, 8 departments, RBAC, approval chains) by calling tools to complete multi-step tasks.
 
-## Quick Start
+Built for the Scaler AI hackathon (Statement 3.1).
 
-The simplest way to use the Basic Openenv environment is through the `BasicOpenenvEnv` class:
+## Quick Start
 
 ```python
-from basic_openenv import BasicOpenenvAction, BasicOpenenvEnv
-
-try:
-    # Create environment from Docker image
-    basic_openenvenv = BasicOpenenvEnv.from_docker_image("basic_openenv-env:latest")
-
-    # Reset
-    result = basic_openenvenv.reset()
-    print(f"Reset: {result.observation.echoed_message}")
-
-    # Send multiple messages
-    messages = ["Hello, World!", "Testing echo", "Final message"]
+from rl_hack import HROnboardingAction, HROnboardingEnv
 
-    for msg in messages:
-        result = basic_openenvenv.step(BasicOpenenvAction(message=msg))
-        print(f"Sent: '{msg}'")
-        print(f"  → Echoed: '{result.observation.echoed_message}'")
-        print(f"  → Length: {result.observation.message_length}")
-        print(f"  → Reward: {result.reward}")
-
-finally:
-    # Always clean up
-    basic_openenvenv.close()
+# Connect to the environment
+with HROnboardingEnv(base_url="http://localhost:7860") as env:
+    result = env.reset()
+    print(result.observation)  # Task instruction + available tools
+
+    # Agent calls tools to complete the task
+    result = env.step(HROnboardingAction(
+        tool_name="hr_create_employee",
+        arguments={"name": "Priya Sharma", "department": "Engineering", "level": "L2", "role": "Software Engineer"}
+    ))
+    print(result.observation)  # Tool result
+    print(result.reward)       # Rubric-based reward
 ```
 
-That's it! The `BasicOpenenvEnv.from_docker_image()` method handles:
-- Starting the Docker container
-- Waiting for the server to be ready
-- Connecting to the environment
-- Container cleanup when you call `close()`
+## Tools / Actions (25 MCP Tools)
+
+The agent interacts with the environment by calling these tools. Each tool modifies the world state and returns a result.
+
+### HR System (5 tools)
+
+| # | Tool | Description | Key Parameters |
+|---|------|-------------|----------------|
+| 1 | `hr_create_employee` | Create a new employee record | `name`, `department`, `level`, `role`, `manager_id`, `is_contractor` |
+| 2 | `hr_read_employee` | Look up employee by ID or email | `emp_id` or `email` |
+| 3 | `hr_update_employee` | Update employee fields (status, department, etc.) | `emp_id`, `updates` (dict) |
+| 4 | `hr_search_employees` | Search/filter employees by criteria | `department`, `level`, `status`, `location`, `role` |
+| 5 | `hr_get_org_chart` | Get reporting hierarchy for a department | `department` |
+
+### Onboarding / Offboarding (6 tools)
+
+| # | Tool | Description | Key Parameters |
+|---|------|-------------|----------------|
+| 6 | `onboarding_create_request` | Initiate onboarding for a new hire | `employee_id` |
+| 7 | `onboarding_get_status` | Check onboarding progress | `request_id` or `employee_id` |
+| 8 | `onboarding_complete_step` | Mark an onboarding step as done | `request_id`, `step` |
+| 9 | `offboarding_create_request` | Initiate offboarding for departing employee | `employee_id`, `reason`, `exit_date` |
+| 10 | `offboarding_get_status` | Check offboarding progress | `request_id` or `employee_id` |
+| 11 | `offboarding_complete_step` | Mark an offboarding step as done | `request_id`, `step` |
+
+### IT Provisioning (5 tools)
+
+| # | Tool | Description | Key Parameters |
+|---|------|-------------|----------------|
+| 12 | `it_assign_asset` | Assign laptop/monitor/phone to employee | `asset_id`, `employee_id` |
+| 13 | `it_get_available_assets` | List unassigned assets by type | `asset_type` (laptop, monitor, phone, headset) |
+| 14 | `it_create_account` | Create email/Slack/VPN/GitHub accounts | `employee_id`, `account_types` |
+| 15 | `it_revoke_access` | Revoke all IT access (for offboarding) | `employee_id` |
+| 16 | `it_get_software_licenses` | Check license seat availability | `software_name` |
+
+### Access Control (4 tools)
+
+| # | Tool | Description | Key Parameters |
+|---|------|-------------|----------------|
+| 17 | `access_assign_role` | Assign RBAC role (checks level/dept restrictions) | `employee_id`, `role_id` |
+| 18 | `access_create_badge` | Create physical access badge | `employee_id`, `access_zones` |
+| 19 | `access_revoke_role` | Revoke a specific access role | `employee_id`, `role_id` |
+| 20 | `access_get_security_groups` | List all security groups and resources | _(none)_ |
+
+### Communication (3 tools)
+
+| # | Tool | Description | Key Parameters |
+|---|------|-------------|----------------|
+| 21 | `email_send` | Send email (welcome, farewell, notifications) | `from_address`, `to_address`, `subject`, `body` |
+| 22 | `slack_send_message` | Post in Slack channel or DM | `channel`, `sender`, `text` |
+| 23 | `meeting_schedule` | Schedule orientation, 1-on-1, exit interview | `title`, `attendees`, `datetime`, `meeting_type` |
 
-## Building the Docker Image
+### Policy & Approval (2 tools)
 
-Before using the environment, you need to build the Docker image:
+| # | Tool | Description | Key Parameters |
+|---|------|-------------|----------------|
+| 24 | `policy_lookup` | Look up company policies by topic/department | `topic`, `department`, `policy_id` |
+| 25 | `approval_request` | Submit approval (manager/IT/security/legal) | `request_id`, `approver_id`, `approval_type` |
 
-```bash
-# From project root
-docker build -t basic_openenv-env:latest -f server/Dockerfile .
-```
+## Tasks (77 tasks across 4 categories)
 
-## Deploying to Hugging Face Spaces
+Each episode presents one task. The agent must call the right tools in the right order.
 
-You can easily deploy your OpenEnv environment to Hugging Face Spaces using the `openenv push` command:
+### Task Categories
 
-```bash
-# From the environment directory (where openenv.yaml is located)
-openenv push
+| Category | Count | Example |
+|----------|-------|---------|
+| **Lookup** (simple) | 11 | "List all employees in the Engineering department" |
+| **Onboarding** | 32 | "Fully onboard John Lee as L3 Team Lead in Data Science — create record, assign laptop, provision accounts, set up access, send welcome email, schedule orientation" |
+| **Offboarding** | 24 | "Offboard departing director — revoke all access, reclaim assets, reassign reports, send farewell, schedule exit interview" |
+| **Cross-workflow** | 10 | "Employee transferring from Engineering to Product — offboard from old dept, onboard to new" |
 
-# Or specify options
-openenv push --namespace my-org --private
-```
+### Difficulty Levels
 
-The `openenv push` command will:
-1. Validate that the directory is an OpenEnv environment (checks for `openenv.yaml`)
-2. Prepare a custom build for Hugging Face Docker space (enables web interface)
-3. Upload to Hugging Face (ensuring you're logged in)
+| Difficulty | Count | Tools per task | Description |
+|------------|-------|---------------|-------------|
+| Simple | 19 | 1-2 | Single lookups or status checks |
+| Medium | 21 | 2-4 | Create + initiate workflows |
+| Complex | 25 | 5-10 | Full end-to-end workflows with approvals |
+| Edge case | 12 | 2-5 | Business rule violations, policy constraints |
 
-### Prerequisites
+### Edge Cases (designed to test policy compliance)
 
-- Authenticate with Hugging Face: The command will prompt for login if not already authenticated
+- Department at **headcount limit** — create employee should fail
+- Software license **seats full** (Netsuite, LinkedIn Sales Navigator)
+- Manager **on leave** — must find skip-level manager for approvals
+- **Contractor** onboarding — different rules (no VPN, limited access, legal approval required)
+- **Termination** vs resignation — different offboarding steps, no farewell email
+- **Offer rescinded** — offboard someone mid-onboarding
+- **Level mismatch** — L1 employee can't get L4+ access roles
+- **Department restriction** — Marketing employee can't get Engineering GitHub role
 
-### Options
+## World State (500+ entities)
 
-- `--directory`, `-d`: Directory containing the OpenEnv environment (defaults to current directory)
-- `--repo-id`, `-r`: Repository ID in format 'username/repo-name' (defaults to 'username/env-name' from openenv.yaml)
-- `--base-image`, `-b`: Base Docker image to use (overrides Dockerfile FROM)
-- `--private`: Deploy the space as private (default: public)
+| Entity | Count | Description |
+|--------|-------|-------------|
+| Employees | 200 | Full org hierarchy across 8 departments (L1-L6) |
+| Departments | 8 | Engineering, Product, Marketing, Sales, Finance, HR, Data Science, Security |
+| IT Assets | 100 | Laptops (50), monitors (25), phones (15), headsets (10) |
+| Access Roles | 20 | RBAC roles with level/department restrictions |
+| Software Licenses | 15 | Jira, GitHub, AWS, Slack, Salesforce, etc. (2 intentionally full) |
+| Policies | 15 | Onboarding, offboarding, badge access, contractor, termination, etc. |
+| Security Groups | 15 | engineering_team, vpn_users, server_room_access, etc. |
+| Message Templates | 12 | Welcome/farewell emails, Slack messages, notifications |
+
+### RBAC Rules
+
+- **L1** Associate → **L2** Senior → **L3** Team Lead → **L4** Manager → **L5** Director → **L6** VP
+- L3+ can approve onboarding
+- L4+ required for security approvals and server room badge access
+- Contractors require legal approval
+- Access roles have minimum level requirements and department restrictions
+
+## Reward / Rubric
+
+Each task has a rubric with verifiable criteria. Reward = proportion of criteria satisfied.
+
+### Rubric Check Types
+
+| Check | Example | What it verifies |
+|-------|---------|-----------------|
+| `tool_used` | `tool_used:hr_create_employee` | Tool was called at least once |
+| `tool_not_used` | `tool_not_used:slack_send_message` | Tool was NOT called (e.g. no farewell for terminations) |
+| `tool_used_any` | `tool_used_any:email_send,slack_send_message` | At least one of the tools was used |
+| `param_value` | `param_value:hr_create_employee.name=Priya Sharma` | Tool called with specific parameter value |
+| `param_contains` | `param_contains:policy_lookup.topic=onboard` | Parameter contains substring |
+| `tool_order` | `tool_order:hr_create_employee<onboarding_create_request` | Tool A called before Tool B |
+| `tool_count` | `tool_count:onboarding_complete_step>=3` | Tool called at least N times |
+| `result_contains` | `result_contains:headcount_limit` | Any tool result contains substring |
+
+### Example Rubric (medium task)
 
-### Examples
+Task: "Onboard Priya Sharma to Engineering as L2 Software Engineer"
 
-```bash
-# Push to your personal namespace (defaults to username/env-name from openenv.yaml)
-openenv push
+| Criterion | Check |
+|-----------|-------|
+| Created employee record | `tool_used:hr_create_employee` |
+| Correct name | `param_value:hr_create_employee.name=Priya Sharma` |
+| Correct department | `param_value:hr_create_employee.department=Engineering` |
+| Correct level | `param_value:hr_create_employee.level=L2` |
+| Correct role | `param_value:hr_create_employee.role=Software Engineer` |
+| Initiated onboarding | `tool_used:onboarding_create_request` |
+| Correct sequencing | `tool_order:hr_create_employee<onboarding_create_request` |
 
-# Push to a specific repository
-openenv push --repo-id my-org/my-env
+**Score**: 7/7 = 1.0 (pass) or partial (e.g. 5/7 = 0.71)
 
-# Push with a custom base image
-openenv push --base-image ghcr.io/meta-pytorch/openenv-base:latest
+## Environment API
 
-# Push as a private space
-openenv push --private
+### OpenEnv Interface (MCPEnvironment)
 
-# Combine options
-openenv push --repo-id my-org/my-env --base-image custom-base:latest --private
+```
+reset()  → Observation   # Pick task, reset world state, return instruction
+step()   → Observation   # Agent calls a tool, get result + reward
+state    → State         # Current step count, episode ID
 ```
 
-After deployment, your space will be available at:
-`https://huggingface.co/spaces/<repo-id>`
-
-The deployed space includes:
-- **Web Interface** at `/web` - Interactive UI for exploring the environment
-- **API Documentation** at `/docs` - Full OpenAPI/Swagger interface
-- **Health Check** at `/health` - Container health monitoring
-- **WebSocket** at `/ws` - Persistent session endpoint for low-latency interactions
-
-## Environment Details
+### Episode Flow
 
-### Action
-**BasicOpenenvAction**: Contains a single field
-- `message` (str) - The message to echo back
+```
+1. env.reset()
+   → Task: "Fully onboard John Lee as L3 Team Lead..."
 
-### Observation
-**BasicOpenenvObservation**: Contains the echo response and metadata
-- `echoed_message` (str) - The message echoed back
-- `message_length` (int) - Length of the message
-- `reward` (float) - Reward based on message length (length × 0.1)
-- `done` (bool) - Always False for echo environment
-- `metadata` (dict) - Additional info like step count
+2. Agent calls: hr_create_employee(name="John Lee", department="Data Science", level="L3", ...)
+   → env.step() → {"success": true, "emp_id": "emp_0201"}
 
-### Reward
-The reward is calculated as: `message_length × 0.1`
-- "Hi" → reward: 0.2
-- "Hello, World!" → reward: 1.3
-- Empty message → reward: 0.0
+3. Agent calls: onboarding_create_request(employee_id="emp_0201")
+   → env.step() → {"success": true, "request_id": "onb_0001", "steps": {...}}
 
-## Advanced Usage
+4. Agent calls: it_get_available_assets(asset_type="laptop")
+   → env.step() → {"success": true, "assets": [...]}
 
-### Connecting to an Existing Server
+5. Agent calls: it_assign_asset(asset_id="asset_003", employee_id="emp_0201")
+   → env.step() → {"success": true}
 
-If you already have a Basic Openenv environment server running, you can connect directly:
+   ... more tool calls ...
 
-```python
-from basic_openenv import BasicOpenenvEnv
+N. Episode ends (max 15 steps or agent signals done)
+   → Reward: 8/10 criteria satisfied = 0.8
+```
 
-# Connect to existing server
-basic_openenvenv = BasicOpenenvEnv(base_url="<ENV_HTTP_URL_HERE>")
+## Project Structure
 
-# Use as normal
-result = basic_openenvenv.reset()
-result = basic_openenvenv.step(BasicOpenenvAction(message="Hello!"))
+```
+rl_hack/
+├── README.md                          # This file
+├── openenv.yaml                       # OpenEnv manifest
+├── pyproject.toml                     # Project metadata
+├── __init__.py                        # Module exports
+├── client.py                          # HROnboardingEnv client
+├── models.py                          # Action/Observation Pydantic models
+├── test_with_llm.py                   # Test script (GPT agent)
+├── .env                               # API keys (gitignored)
+└── server/
+    ├── __init__.py
+    ├── app.py                         # FastAPI application
+    ├── hr_onboarding_environment.py   # Core environment (Environment subclass)
+    ├── world.py                       # World state (entities, RBAC, mutations)
+    ├── tools.py                       # Tool registry (25 tools)
+    ├── tasks.py                       # Task definitions + generation (77 tasks)
+    ├── rubrics.py                     # Rubric evaluator (reward computation)
+    ├── data/
+    │   ├── employees.json             # 200 employee records
+    │   ├── departments.json           # 8 departments with policies
+    │   ├── policies.json              # 15 business rule documents
+    │   ├── it_assets.json             # 100 IT assets
+    │   ├── access_roles.json          # 20 RBAC roles
+    │   └── templates.json             # 12 message templates
+    ├── Dockerfile                     # Container image
+    └── requirements.txt               # Server dependencies
 ```
 
-Note: When connecting to an existing server, `basic_openenvenv.close()` will NOT stop the server.
+## Testing with an LLM Agent
 
-### Using the Context Manager
+You can test the environment locally using GPT (or any OpenAI-compatible model) as the agent.
 
-The client supports context manager usage for automatic connection management:
+### Setup
 
-```python
-from basic_openenv import BasicOpenenvAction, BasicOpenenvEnv
+1. Create a `.env` file in the repo root:
+   ```
+   OPENAI_API_KEY="sk-proj-..."
+   ```
 
-# Connect with context manager (auto-connects and closes)
-with BasicOpenenvEnv(base_url="http://localhost:8000") as env:
-    result = env.reset()
-    print(f"Reset: {result.observation.echoed_message}")
-    # Multiple steps with low latency
-    for msg in ["Hello", "World", "!"]:
-        result = env.step(BasicOpenenvAction(message=msg))
-        print(f"Echoed: {result.observation.echoed_message}")
-```
+2. Install dependencies:
+   ```bash
+   pip install openai python-dotenv openenv-core
+   ```
 
-The client uses WebSocket connections for:
-- **Lower latency**: No HTTP connection overhead per request
-- **Persistent session**: Server maintains your environment state
-- **Efficient for episodes**: Better for many sequential steps
+### Run
 
-### Concurrent WebSocket Sessions
+```bash
+cd rl_hack
 
-The server supports multiple concurrent WebSocket connections. To enable this,
-modify `server/app.py` to use factory mode:
+# Test on default task (simple lookup)
+uv run python -m test_with_llm.py
 
-```python
-# In server/app.py - use factory mode for concurrent sessions
-app = create_app(
-    BasicOpenenvEnvironment,  # Pass class, not instance
-    BasicOpenenvAction,
-    BasicOpenenvObservation,
-    max_concurrent_envs=4,  # Allow 4 concurrent sessions
-)
+# Test a specific task by index (0-76)
+uv run python -m test_with_llm 14    # medium onboarding task
+uv run python -m test_with_llm 24    # complex full onboarding
+uv run python -m test_with_llm 55    # edge case (headcount limit)
 ```
 
-Then multiple clients can connect simultaneously:
+The script will:
+- Reset the environment and pick a task
+- Use GPT-4o-mini to generate tool calls
+- Execute each tool call against the environment
+- Print the rubric evaluation with pass/fail per criterion
+
+### Example Output
 
-```python
-from basic_openenv import BasicOpenenvAction, BasicOpenenvEnv
-from concurrent.futures import ThreadPoolExecutor
-
-def run_episode(client_id: int):
-    with BasicOpenenvEnv(base_url="http://localhost:8000") as env:
-        result = env.reset()
-        for i in range(10):
-            result = env.step(BasicOpenenvAction(message=f"Client {client_id}, step {i}"))
-        return client_id, result.observation.message_length
-
-# Run 4 episodes concurrently
-with ThreadPoolExecutor(max_workers=4) as executor:
-    results = list(executor.map(run_episode, range(4)))
+```
+Task ID: task_0015
+Difficulty: medium
+Instruction: Onboard new hire Priya Sharma to Engineering as L2 Software Engineer...
+
+--- Step 1/15 ---
+LLM: {"tool": "hr_create_employee", "params": {"name": "Priya Sharma", ...}}
+  Tool: hr_create_employee
+  Result: {"success": true, "employee": {"emp_id": "emp_0201", ...}}
+
+--- Step 2/15 ---
+LLM: {"tool": "onboarding_create_request", "params": {"employee_id": "emp_0201"}}
+  Tool: onboarding_create_request
+  Result: {"success": true, ...}
+
+FINAL EVALUATION
+Score: 100% (7/7 criteria)
+Passed: True
+  [PASS] created_employee
+  [PASS] correct_name
+  [PASS] correct_dept
+  [PASS] initiated_onboarding
+  [PASS] sequencing
 ```
 
-## Development & Testing
+### Task Index Reference
 
-### Direct Environment Testing
+| Index | Difficulty | Category | Description |
+|-------|-----------|----------|-------------|
+| 0-13 | Simple | Lookup/Onboarding | Single lookups, status checks |
+| 14-23 | Medium | Onboarding | Create employee + initiate workflow |
+| 24-34 | Complex | Onboarding | Full end-to-end with IT, access, comms |
+| 35-46 | Medium | Offboarding | Initiate offboarding + revoke access |
+| 47-54 | Complex | Offboarding | Full offboarding with asset reclaim |
+| 55-66 | Edge case | Various | Headcount limits, license caps, RBAC |
+| 67-76 | Complex | Cross-workflow | Transfers, rehires, manager departures |
 
-Test the environment logic directly without starting the HTTP server:
+## Building & Running
 
 ```bash
-# From the server directory
-python3 server/basic_openenv_environment.py
+# Build Docker image
+docker build -t hr-onboarding-env:latest -f server/Dockerfile .
+
+# Run locally (as OpenEnv HTTP server)
+uvicorn server.app:app --reload --host 0.0.0.0 --port 7860
+
+# Deploy to HF Spaces
+openenv push
 ```
 
-This verifies that:
-- Environment resets correctly
-- Step executes actions properly
-- State tracking works
-- Rewards are calculated correctly
+## Training
 
-### Running Locally
+We use Unsloth + GRPO to train an LLM agent on this environment:
 
-Run the server locally for development:
+- **Model**: Qwen 2.5-7B-Instruct (4-bit quantized)
+- **Algorithm**: GRPO (Group Relative Policy Optimization)
+- **Rollouts**: 8 per prompt
+- **Train/eval split**: 80/20 (62 train, 15 eval tasks)
 
-```bash
-uvicorn server.app:app --reload
-```
+See `training/` directory in the parent repo for training scripts.
 
-## Project Structure
+## Live Demo
 
-```
-basic_openenv/
-├── .dockerignore         # Docker build exclusions
-├── __init__.py            # Module exports
-├── README.md              # This file
-├── openenv.yaml           # OpenEnv manifest
-├── pyproject.toml         # Project metadata and dependencies
-├── uv.lock                # Locked dependencies (generated)
-├── client.py              # BasicOpenenvEnv client
-├── models.py              # Action and Observation models
-└── server/
-    ├── __init__.py        # Server module exports
-    ├── basic_openenv_environment.py  # Core environment logic
-    ├── app.py             # FastAPI application (HTTP + WebSocket endpoints)
-    └── Dockerfile         # Container image definition
-```
+Try the environment on Hugging Face Spaces: https://huggingface.co/spaces/devxpy/rl_hack

__init__.py

@@ -1,16 +1,10 @@
-# Copyright (c) Meta Platforms, Inc. and affiliates.
-# All rights reserved.
-#
-# This source code is licensed under the BSD-style license found in the
-# LICENSE file in the root directory of this source tree.
+"""HR Onboarding/Offboarding Environment."""
 
-"""Basic Openenv Environment."""
-
-from .client import BasicOpenenvEnv
-from .models import BasicOpenenvAction, BasicOpenenvObservation
+from .client import HROnboardingEnv
+from .models import HROnboardingAction, HROnboardingObservation
 
 __all__ = [
-    "BasicOpenenvAction",
-    "BasicOpenenvObservation",
-    "BasicOpenenvEnv",
+    "HROnboardingAction",
+    "HROnboardingObservation",
+    "HROnboardingEnv",
 ]

client.py

@@ -1,10 +1,4 @@
-# Copyright (c) Meta Platforms, Inc. and affiliates.
-# All rights reserved.
-#
-# This source code is licensed under the BSD-style license found in the
-# LICENSE file in the root directory of this source tree.
-
-"""Basic Openenv Environment Client."""
+"""HR Onboarding/Offboarding Environment Client."""
 
 from typing import Dict
 
@@ -12,66 +6,59 @@ from openenv.core.client_types import StepResult
 from openenv.core.env_server.types import State
 from openenv.core import EnvClient
 
-from .models import BasicOpenenvAction, BasicOpenenvObservation
+from .models import HROnboardingAction, HROnboardingObservation
 
 
-class BasicOpenenvEnv(
-    EnvClient[BasicOpenenvAction, BasicOpenenvObservation]
+class HROnboardingEnv(
+    EnvClient[HROnboardingAction, HROnboardingObservation]
 ):
     """
-    Client for the Basic Openenv Environment.
+    Client for the HR Onboarding/Offboarding Environment.
 
-    This client maintains a persistent WebSocket connection to the environment server,
-    enabling efficient multi-step interactions with lower latency.
-    Each client instance has its own dedicated environment session on the server.
+    Maintains a persistent WebSocket connection to the environment server.
+    Each client instance has its own dedicated environment session.
 
     Example:
-        >>> # Connect to a running server
-        >>> with BasicOpenenvEnv(base_url="http://localhost:8000") as client:
+        >>> with HROnboardingEnv(base_url="http://localhost:7860") as client:
         ...     result = client.reset()
-        ...     print(result.observation.echoed_message)
+        ...     print(result.observation.instruction)
         ...
-        ...     result = client.step(BasicOpenenvAction(message="Hello!"))
-        ...     print(result.observation.echoed_message)
+        ...     result = client.step(HROnboardingAction(
+        ...         tool_name="hr_read_employee",
+        ...         arguments={"emp_id": "emp_0001"}
+        ...     ))
+        ...     print(result.observation.tool_result)
 
     Example with Docker:
-        >>> # Automatically start container and connect
-        >>> client = BasicOpenenvEnv.from_docker_image("basic_openenv-env:latest")
+        >>> client = HROnboardingEnv.from_docker_image("hr-onboarding-env:latest")
         >>> try:
         ...     result = client.reset()
-        ...     result = client.step(BasicOpenenvAction(message="Test"))
+        ...     result = client.step(HROnboardingAction(
+        ...         tool_name="hr_search_employees",
+        ...         arguments={"department": "Engineering"}
+        ...     ))
         ... finally:
         ...     client.close()
     """
 
-    def _step_payload(self, action: BasicOpenenvAction) -> Dict:
-        """
-        Convert BasicOpenenvAction to JSON payload for step message.
-
-        Args:
-            action: BasicOpenenvAction instance
-
-        Returns:
-            Dictionary representation suitable for JSON encoding
-        """
+    def _step_payload(self, action: HROnboardingAction) -> Dict:
+        """Convert HROnboardingAction to JSON payload for step message."""
         return {
-            "message": action.message,
+            "tool_name": action.tool_name,
+            "arguments": action.arguments,
         }
 
-    def _parse_result(self, payload: Dict) -> StepResult[BasicOpenenvObservation]:
-        """
-        Parse server response into StepResult[BasicOpenenvObservation].
-
-        Args:
-            payload: JSON response data from server
-
-        Returns:
-            StepResult with BasicOpenenvObservation
-        """
+    def _parse_result(self, payload: Dict) -> StepResult[HROnboardingObservation]:
+        """Parse server response into StepResult[HROnboardingObservation]."""
         obs_data = payload.get("observation", {})
-        observation = BasicOpenenvObservation(
-            echoed_message=obs_data.get("echoed_message", ""),
-            message_length=obs_data.get("message_length", 0),
+        observation = HROnboardingObservation(
+            task_id=obs_data.get("task_id", ""),
+            instruction=obs_data.get("instruction", ""),
+            tool_name=obs_data.get("tool_name", ""),
+            tool_result=obs_data.get("tool_result", {}),
+            step=obs_data.get("step", 0),
+            max_steps=obs_data.get("max_steps", 15),
+            available_tools=obs_data.get("available_tools", []),
             done=payload.get("done", False),
             reward=payload.get("reward"),
             metadata=obs_data.get("metadata", {}),
@@ -84,15 +71,7 @@ class BasicOpenenvEnv(
         )
 
     def _parse_state(self, payload: Dict) -> State:
-        """
-        Parse server response into State object.
-
-        Args:
-            payload: JSON response from state request
-
-        Returns:
-            State object with episode_id and step_count
-        """
+        """Parse server response into State object."""
         return State(
             episode_id=payload.get("episode_id"),
             step_count=payload.get("step_count", 0),

models.py

@@ -1,28 +1,45 @@
-# Copyright (c) Meta Platforms, Inc. and affiliates.
-# All rights reserved.
-#
-# This source code is licensed under the BSD-style license found in the
-# LICENSE file in the root directory of this source tree.
-
 """
-Data models for the Basic Openenv Environment.
+Data models for the HR Onboarding/Offboarding Environment.
 
-The basic_openenv environment is a simple test environment that echoes back messages.
+Defines the Action and Observation types used by the environment.
+The agent sends HROnboardingAction (a tool call) and receives
+HROnboardingObservation (the tool result + task context).
 """
 
+from typing import Any, Dict, List, Optional
+
 from pydantic import Field
 
 from openenv.core.env_server.types import Action, Observation
 
 
-class BasicOpenenvAction(Action):
-    """Action for the Basic Openenv environment - just a message to echo."""
+class HROnboardingAction(Action):
+    """Action for the HR environment — a tool call with name and arguments.
+
+    The agent picks one of 25 available tools and provides arguments.
+
+    Example:
+        HROnboardingAction(
+            tool_name="hr_create_employee",
+            arguments={"name": "Priya Sharma", "department": "Engineering",
+                       "level": "L2", "role": "Software Engineer"}
+        )
+    """
+
+    tool_name: str = Field(..., description="Name of the tool to call (e.g. hr_create_employee, it_assign_asset)")
+    arguments: Dict[str, Any] = Field(default_factory=dict, description="Arguments to pass to the tool")
 
-    message: str = Field(..., description="Message to echo back")
 
+class HROnboardingObservation(Observation):
+    """Observation returned after each step in the HR environment.
 
-class BasicOpenenvObservation(Observation):
-    """Observation from the Basic Openenv environment - the echoed message."""
+    Contains the tool execution result, task context, and episode progress.
+    """
 
-    echoed_message: str = Field(default="", description="The echoed message")
-    message_length: int = Field(default=0, description="Length of the echoed message")
+    task_id: str = Field(default="", description="Current task identifier")
+    instruction: str = Field(default="", description="Task instruction for the agent")
+    tool_name: str = Field(default="", description="Name of the tool that was called")
+    tool_result: Dict[str, Any] = Field(default_factory=dict, description="Result returned by the tool")
+    step: int = Field(default=0, description="Current step number")
+    max_steps: int = Field(default=15, description="Maximum steps allowed")
+    available_tools: List[str] = Field(default_factory=list, description="List of available tool names")

openenv.yaml

@@ -1,5 +1,5 @@
 spec_version: 1
-name: basic_openenv
+name: hr_onboarding_env
 type: space
 runtime: fastapi
 app: server.app:app

pyproject.toml

@@ -1,31 +1,14 @@
-# Copyright (c) Meta Platforms, Inc. and affiliates.
-# All rights reserved.
-#
-# This source code is licensed under the BSD-style license found in the
-# LICENSE file in the root directory of this source tree.
-
 [build-system]
 requires = ["setuptools>=45", "wheel"]
 build-backend = "setuptools.build_meta"
 
 [project]
-name = "openenv-basic_openenv"
+name = "openenv-hr_onboarding_env"
 version = "0.1.0"
-description = "Basic Openenv environment for OpenEnv"
+description = "HR Onboarding/Offboarding environment for OpenEnv — simulates enterprise HR workflows with 25 tools, 77 tasks, RBAC, and rubric-based rewards"
 requires-python = ">=3.10"
 dependencies = [
-    # Core OpenEnv runtime (provides FastAPI server + HTTP client types)
-    # install from github
-    # "openenv-core[core] @ git+https://github.com/meta-pytorch/OpenEnv.git",
     "openenv-core[core]>=0.2.0",
-    # Environment-specific dependencies
-    # Add all dependencies needed for your environment here
-    # Examples:
-    # "numpy>=1.19.0",
-    # "torch>=2.0.0",
-    # "gymnasium>=0.29.0",
-    # "openspiel>=1.0.0",
-    # "smolagents>=1.22.0,<2",
 ]
 
 [project.optional-dependencies]
@@ -35,11 +18,9 @@ dev = [
 ]
 
 [project.scripts]
-# Server entry point - enables running via: uv run --project . server
-# or: python -m basic_openenv.server.app
-server = "basic_openenv.server.app:main"
+server = "hr_onboarding_env.server.app:main"
 
 [tool.setuptools]
 include-package-data = true
-packages = ["basic_openenv", "basic_openenv.server"]
-package-dir = { "basic_openenv" = ".", "basic_openenv.server" = "server" }
+packages = ["hr_onboarding_env", "hr_onboarding_env.server"]
+package-dir = { "hr_onboarding_env" = ".", "hr_onboarding_env.server" = "server" }

server/__init__.py

@@ -1,11 +1,5 @@
-# Copyright (c) Meta Platforms, Inc. and affiliates.
-# All rights reserved.
-#
-# This source code is licensed under the BSD-style license found in the
-# LICENSE file in the root directory of this source tree.
+"""HR Onboarding/Offboarding environment server components."""
 
-"""Basic Openenv environment server components."""
+from .hr_onboarding_environment import HROnboardingEnvironment
 
-from .basic_openenv_environment import BasicOpenenvEnvironment
-
-__all__ = ["BasicOpenenvEnvironment"]
+__all__ = ["HROnboardingEnvironment"]

server/app.py

@@ -1,80 +1,157 @@
-# Copyright (c) Meta Platforms, Inc. and affiliates.
-# All rights reserved.
-#
-# This source code is licensed under the BSD-style license found in the
-# LICENSE file in the root directory of this source tree.
-
 """
-FastAPI application for the Basic Openenv Environment.
-
-This module creates an HTTP server that exposes the BasicOpenenvEnvironment
-over HTTP and WebSocket endpoints, compatible with EnvClient.
-
-Endpoints:
-    - POST /reset: Reset the environment
-    - POST /step: Execute an action
-    - GET /state: Get current environment state
-    - GET /schema: Get action/observation schemas
-    - WS /ws: WebSocket endpoint for persistent sessions
-
-Usage:
-    # Development (with auto-reload):
-    uvicorn server.app:app --reload --host 0.0.0.0 --port 8000
-
-    # Production:
-    uvicorn server.app:app --host 0.0.0.0 --port 8000 --workers 4
+FastAPI application for the HR Onboarding/Offboarding Environment.
 
-    # Or run directly:
-    python -m server.app
+Serves both the OpenEnv API endpoints and an interactive web playground UI.
 """
 
 try:
     from openenv.core.env_server.http_server import create_app
 except Exception as e:  # pragma: no cover
     raise ImportError(
-        "openenv is required for the web interface. Install dependencies with '\n    uv sync\n'"
+        "openenv is required. Install with: uv sync"
     ) from e
 
-# Import from local models.py (PYTHONPATH includes /app/env in Docker)
-from models import BasicOpenenvAction, BasicOpenenvObservation
-from .basic_openenv_environment import BasicOpenenvEnvironment
-from fastapi.responses import RedirectResponse
+from models import HROnboardingAction, HROnboardingObservation
+from .hr_onboarding_environment import HROnboardingEnvironment
+from .tools import TOOL_DEFINITIONS
+from .rubrics import RubricEvaluator
+
+from fastapi import Request
+from fastapi.responses import HTMLResponse, RedirectResponse
+from fastapi.staticfiles import StaticFiles
+from pathlib import Path
 import os
+import json
 
 
 # Required for OpenEnv to mount the HF-style web UI at /web.
 os.environ.setdefault("ENABLE_WEB_INTERFACE", "true")
 
 
-# Create the app with web interface and README integration
+# Create the OpenEnv app
 app = create_app(
-    BasicOpenenvEnvironment,
-    BasicOpenenvAction,
-    BasicOpenenvObservation,
-    env_name="basic_openenv",
-    max_concurrent_envs=1,  # increase this number to allow more concurrent WebSocket sessions
+    HROnboardingEnvironment,
+    HROnboardingAction,
+    HROnboardingObservation,
+    env_name="hr_onboarding_env",
+    max_concurrent_envs=4,
 )
 
+# Mount static files
+STATIC_DIR = Path(__file__).parent / "static"
+app.mount("/static", StaticFiles(directory=str(STATIC_DIR)), name="static")
+
+# Shared environment instance for the playground
+_playground_env = HROnboardingEnvironment(seed=42, max_steps=15)
+
+
+# --- Playground API endpoints ---
 
 @app.get("/", include_in_schema=False)
 def root_redirect():
-    """Match HF Space UX: open app at /web UI."""
-    return RedirectResponse(url="/web")
+    """Serve the interactive playground UI."""
+    return RedirectResponse(url="/playground")
+
+
+@app.get("/playground", include_in_schema=False)
+def playground():
+    """Serve the interactive playground HTML."""
+    html_path = STATIC_DIR / "index.html"
+    return HTMLResponse(html_path.read_text())
+
+
+@app.get("/api/tasks")
+def get_tasks():
+    """Return all tasks with metadata for the task picker."""
+    env = _playground_env
+    tasks = []
+    # Save current state
+    orig_idx = env._task_idx
+
+    for i in range(len(env._tasks)):
+        task = env._tasks[i]
+        tasks.append({
+            "index": i,
+            "task_id": task.task_id,
+            "instruction": task.instruction,
+            "difficulty": task.difficulty,
+            "category": task.category,
+            "expected_tools": task.expected_tools,
+            "num_criteria": len(task.rubric_criteria),
+        })
+
+    env._task_idx = orig_idx
+    return tasks
+
+
+@app.get("/api/tool_definitions")
+def get_tool_definitions():
+    """Return all tool definitions with descriptions and parameters."""
+    return TOOL_DEFINITIONS
+
+
+@app.post("/api/reset")
+async def playground_reset(request: Request):
+    """Reset the environment to a specific task."""
+    body = await request.json()
+    task_idx = body.get("task_idx", 0)
+
+    env = _playground_env
+    # Set task index so reset() picks the right task
+    env._task_idx = task_idx
+    obs = env.reset()
+
+    return {
+        "task_id": obs.task_id,
+        "instruction": obs.instruction,
+        "step": obs.step,
+        "max_steps": obs.max_steps,
+        "available_tools": obs.available_tools,
+        "done": obs.done,
+        "reward": obs.reward,
+        "metadata": obs.metadata,
+    }
+
+
+@app.post("/api/step")
+async def playground_step(request: Request):
+    """Execute one tool call step."""
+    body = await request.json()
+    tool_name = body.get("tool_name", "")
+    arguments = body.get("arguments", {})
+
+    env = _playground_env
+    action = HROnboardingAction(tool_name=tool_name, arguments=arguments)
+    obs = env.step(action)
+
+    return {
+        "task_id": obs.task_id,
+        "instruction": obs.instruction,
+        "tool_name": obs.tool_name,
+        "tool_result": obs.tool_result,
+        "step": obs.step,
+        "max_steps": obs.max_steps,
+        "done": obs.done,
+        "reward": obs.reward,
+        "metadata": obs.metadata,
+    }
+
+
+@app.post("/api/evaluate")
+async def playground_evaluate():
+    """Force evaluation of current episode."""
+    env = _playground_env
+    evaluator = RubricEvaluator()
+
+    if env._current_task:
+        result = evaluator.evaluate(env._current_task, env.world.action_log)
+        return result
+
+    return {"score": 0, "passed": False, "criteria_results": [], "passed_count": 0, "total_criteria": 0}
 
 
 def main():
-    """
-    Entry point for direct execution via uv run or python -m.
-
-    This function enables running the server without Docker:
-        uv run --project . server
-        uv run --project . server --port 8001
-        python -m basic_openenv.server.app
-
-    For production deployments, consider using uvicorn directly with
-    multiple workers:
-        uvicorn basic_openenv.server.app:app --workers 4
-    """
+    """Entry point for direct execution."""
     import argparse
     import uvicorn
 

server/data/access_roles.json

@@ -0,0 +1,162 @@
+[
+  {
+    "role_id": "role_001",
+    "name": "engineering_developer",
+    "permissions": ["code_repo_read", "code_repo_write", "ci_cd_trigger", "staging_deploy", "jira_access", "confluence_read", "slack_engineering"],
+    "department": "Engineering",
+    "level_requirement": "L1",
+    "description": "Standard developer access to code repositories, CI/CD pipelines, staging environments, and engineering collaboration tools."
+  },
+  {
+    "role_id": "role_002",
+    "name": "engineering_admin",
+    "permissions": ["code_repo_admin", "ci_cd_admin", "staging_deploy", "production_deploy", "infra_access", "secrets_management", "jira_admin", "confluence_write", "slack_engineering", "pagerduty_admin"],
+    "department": "Engineering",
+    "level_requirement": "L4",
+    "description": "Administrative engineering access including production deployments, infrastructure management, and secrets management."
+  },
+  {
+    "role_id": "role_003",
+    "name": "engineering_lead",
+    "permissions": ["code_repo_read", "code_repo_write", "code_repo_approve", "ci_cd_trigger", "staging_deploy", "production_deploy", "jira_admin", "confluence_write", "slack_engineering", "pagerduty_oncall"],
+    "department": "Engineering",
+    "level_requirement": "L3",
+    "description": "Engineering lead access with code review approval rights, production deployment capabilities, and project management tools."
+  },
+  {
+    "role_id": "role_004",
+    "name": "product_viewer",
+    "permissions": ["jira_access", "confluence_read", "analytics_dashboard_read", "slack_product", "figma_view"],
+    "department": "Product",
+    "level_requirement": "L1",
+    "description": "Read-only access to product management tools, analytics dashboards, and design files."
+  },
+  {
+    "role_id": "role_005",
+    "name": "product_manager",
+    "permissions": ["jira_admin", "confluence_write", "analytics_dashboard_read", "analytics_dashboard_write", "slack_product", "figma_view", "figma_comment", "feature_flags_manage", "a_b_testing_admin"],
+    "department": "Product",
+    "level_requirement": "L2",
+    "description": "Full product management access including analytics, feature flag management, A/B testing, and project tracking administration."
+  },
+  {
+    "role_id": "role_006",
+    "name": "finance_analyst",
+    "permissions": ["erp_read", "financial_reports_read", "expense_system_read", "budget_dashboard_read", "slack_finance", "confluence_read"],
+    "department": "Finance",
+    "level_requirement": "L1",
+    "description": "Read access to financial systems, ERP data, expense reports, and budget dashboards."
+  },
+  {
+    "role_id": "role_007",
+    "name": "finance_manager",
+    "permissions": ["erp_read", "erp_write", "financial_reports_read", "financial_reports_write", "expense_system_admin", "budget_dashboard_admin", "payroll_read", "slack_finance", "confluence_write", "vendor_management"],
+    "department": "Finance",
+    "level_requirement": "L3",
+    "description": "Full finance management access including ERP write, payroll viewing, expense administration, and vendor management."
+  },
+  {
+    "role_id": "role_008",
+    "name": "hr_coordinator",
+    "permissions": ["hris_read", "hris_write_basic", "recruiting_ats_read", "benefits_portal_read", "slack_hr", "confluence_read", "onboarding_system_read"],
+    "department": "Human Resources",
+    "level_requirement": "L1",
+    "description": "Basic HR operations access for coordinating onboarding, maintaining employee records, and viewing recruiting pipelines."
+  },
+  {
+    "role_id": "role_009",
+    "name": "hr_manager",
+    "permissions": ["hris_read", "hris_write", "hris_admin", "recruiting_ats_admin", "benefits_portal_admin", "payroll_read", "payroll_write", "compensation_data_read", "slack_hr", "confluence_write", "onboarding_system_admin", "offboarding_system_admin", "performance_review_admin"],
+    "department": "Human Resources",
+    "level_requirement": "L3",
+    "description": "Full HR management access including HRIS administration, recruiting, payroll, benefits, performance reviews, and onboarding/offboarding systems."
+  },
+  {
+    "role_id": "role_010",
+    "name": "security_analyst",
+    "permissions": ["siem_read", "vulnerability_scanner_read", "access_logs_read", "dlp_dashboard_read", "slack_security", "confluence_read", "incident_management_read"],
+    "department": "Security",
+    "level_requirement": "L2",
+    "description": "Security monitoring access for reviewing SIEM alerts, vulnerability scans, access logs, and DLP incidents."
+  },
+  {
+    "role_id": "role_011",
+    "name": "security_admin",
+    "permissions": ["siem_admin", "vulnerability_scanner_admin", "access_logs_read", "access_management_admin", "dlp_admin", "firewall_admin", "slack_security", "confluence_write", "incident_management_admin", "secrets_management", "identity_provider_admin"],
+    "department": "Security",
+    "level_requirement": "L4",
+    "description": "Full security administration including SIEM, access management, DLP, firewall rules, identity provider configuration, and incident response."
+  },
+  {
+    "role_id": "role_012",
+    "name": "data_science_analyst",
+    "permissions": ["data_warehouse_read", "jupyter_notebooks", "ml_platform_read", "analytics_dashboard_read", "slack_data", "confluence_read", "s3_data_buckets_read"],
+    "department": "Data Science",
+    "level_requirement": "L1",
+    "description": "Data analysis access including data warehouse queries, Jupyter notebooks, ML platform viewing, and analytics dashboards."
+  },
+  {
+    "role_id": "role_013",
+    "name": "data_science_lead",
+    "permissions": ["data_warehouse_read", "data_warehouse_write", "jupyter_notebooks", "ml_platform_admin", "analytics_dashboard_write", "gpu_cluster_access", "slack_data", "confluence_write", "s3_data_buckets_read", "s3_data_buckets_write", "model_registry_admin"],
+    "department": "Data Science",
+    "level_requirement": "L3",
+    "description": "Advanced data science access including data warehouse writes, ML platform administration, GPU cluster usage, and model registry management."
+  },
+  {
+    "role_id": "role_014",
+    "name": "sales_crm_user",
+    "permissions": ["crm_read", "crm_write", "sales_dashboard_read", "email_sequences", "slack_sales", "confluence_read", "contract_management_read"],
+    "department": "Sales",
+    "level_requirement": "L1",
+    "description": "Standard sales access to CRM, sales dashboards, email outreach tools, and contract viewing."
+  },
+  {
+    "role_id": "role_015",
+    "name": "sales_manager",
+    "permissions": ["crm_admin", "sales_dashboard_admin", "email_sequences", "commission_reports_read", "slack_sales", "confluence_write", "contract_management_write", "quota_management", "territory_management"],
+    "department": "Sales",
+    "level_requirement": "L3",
+    "description": "Sales management access including CRM administration, commission reports, quota setting, and territory management."
+  },
+  {
+    "role_id": "role_016",
+    "name": "marketing_specialist",
+    "permissions": ["marketing_automation_read", "marketing_automation_write", "social_media_management", "analytics_dashboard_read", "slack_marketing", "confluence_read", "cms_write", "design_tools_access"],
+    "department": "Marketing",
+    "level_requirement": "L1",
+    "description": "Marketing operations access including automation platforms, social media management, CMS, and analytics."
+  },
+  {
+    "role_id": "role_017",
+    "name": "customer_support_agent",
+    "permissions": ["ticketing_system_read", "ticketing_system_write", "knowledge_base_read", "crm_read", "slack_support", "confluence_read", "phone_system_access"],
+    "department": "Customer Support",
+    "level_requirement": "L1",
+    "description": "Customer support agent access to ticketing system, knowledge base, CRM viewing, and phone system."
+  },
+  {
+    "role_id": "role_018",
+    "name": "design_contributor",
+    "permissions": ["figma_edit", "design_system_read", "design_system_write", "slack_design", "confluence_read", "jira_access", "asset_library_access"],
+    "department": "Design",
+    "level_requirement": "L1",
+    "description": "Design team access including Figma editing, design system contributions, and asset library management."
+  },
+  {
+    "role_id": "role_019",
+    "name": "legal_counsel",
+    "permissions": ["contract_management_read", "contract_management_write", "legal_document_vault", "compliance_dashboard_read", "e_discovery_access", "slack_legal", "confluence_write", "vendor_management"],
+    "department": "Legal",
+    "level_requirement": "L2",
+    "description": "Legal team access to contract management, document vault, compliance monitoring, e-discovery tools, and vendor management."
+  },
+  {
+    "role_id": "role_020",
+    "name": "general_employee",
+    "permissions": ["email_access", "slack_general", "confluence_read", "hris_self_service", "benefits_portal_self_service", "expense_system_submit", "learning_platform_access"],
+    "department": "all",
+    "level_requirement": "L1",
+    "description": "Baseline access granted to all employees including email, Slack, self-service HR portal, benefits, expense submission, and learning platform."
+  }
+]

server/data/departments.json

@@ -0,0 +1,279 @@
+{
+  "departments": [
+    {
+      "dept_id": "dept_001",
+      "name": "Engineering",
+      "head_id": "emp_0001",
+      "budget": 12500000,
+      "headcount_limit": 60,
+      "current_headcount": 54,
+      "required_tools": ["Jira", "GitHub", "AWS", "Slack", "VSCode License", "Docker", "Confluence"],
+      "onboarding_steps": [
+        "Submit signed offer letter and NDA",
+        "Complete background check verification",
+        "Provision laptop with approved dev image",
+        "Create GitHub organization account and assign teams",
+        "Grant AWS IAM role based on team assignment",
+        "Set up Jira board access and Confluence spaces",
+        "Assign engineering buddy for first 30 days",
+        "Schedule intro meetings with team lead and skip-level manager",
+        "Enroll in mandatory secure coding training",
+        "Complete first-week architecture overview sessions",
+        "Set up local development environment with team repo access",
+        "Review on-call rotation expectations and PagerDuty setup"
+      ],
+      "offboarding_steps": [
+        "Revoke GitHub organization access and transfer owned repos",
+        "Remove AWS IAM credentials and rotate shared secrets",
+        "Deactivate Jira and Confluence accounts",
+        "Collect company-issued laptop and peripherals",
+        "Remove from PagerDuty on-call rotations",
+        "Transfer ownership of critical services and documentation",
+        "Conduct knowledge transfer sessions with remaining team",
+        "Complete exit interview with engineering manager",
+        "Revoke VPN and SSH key access",
+        "Remove from all Slack engineering channels"
+      ]
+    },
+    {
+      "dept_id": "dept_002",
+      "name": "Product",
+      "head_id": "emp_0002",
+      "budget": 6200000,
+      "headcount_limit": 30,
+      "current_headcount": 26,
+      "required_tools": ["Jira", "Figma", "Slack", "Confluence", "Amplitude", "Productboard"],
+      "onboarding_steps": [
+        "Submit signed offer letter and NDA",
+        "Complete background check verification",
+        "Provision laptop with standard business image",
+        "Grant Jira and Confluence access with product spaces",
+        "Set up Figma viewer account",
+        "Provide Amplitude and Productboard credentials",
+        "Assign product mentor for first 60 days",
+        "Schedule intro meetings with cross-functional stakeholders",
+        "Complete product domain training modules",
+        "Review current product roadmap and OKRs",
+        "Shadow customer calls for first two weeks"
+      ],
+      "offboarding_steps": [
+        "Transfer product ownership and roadmap documents",
+        "Reassign Jira epics and stories to remaining PMs",
+        "Revoke Amplitude and Productboard access",
+        "Hand over stakeholder relationships and meeting cadences",
+        "Complete exit interview with VP Product",
+        "Collect company-issued equipment",
+        "Remove from Slack product channels",
+        "Archive personal Confluence spaces",
+        "Revoke Figma access"
+      ]
+    },
+    {
+      "dept_id": "dept_003",
+      "name": "Marketing",
+      "head_id": "emp_0003",
+      "budget": 4800000,
+      "headcount_limit": 25,
+      "current_headcount": 25,
+      "required_tools": ["Hubspot", "Canva", "Slack", "Google Analytics", "Hootsuite", "Marketo", "WordPress"],
+      "onboarding_steps": [
+        "Submit signed offer letter and NDA",
+        "Complete background check verification",
+        "Provision laptop with standard business image",
+        "Set up Hubspot CRM access with appropriate role",
+        "Grant Canva team account and brand kit access",
+        "Provide Google Analytics and Hootsuite credentials",
+        "Configure Marketo user with campaign permissions",
+        "Assign marketing mentor for first 30 days",
+        "Complete brand guidelines and tone-of-voice training",
+        "Review current campaign calendar and quarterly goals",
+        "Schedule intro meetings with agency partners"
+      ],
+      "offboarding_steps": [
+        "Transfer campaign ownership and scheduled content",
+        "Revoke Hubspot, Marketo, and Hootsuite access",
+        "Reassign social media account credentials",
+        "Hand over agency and vendor relationships",
+        "Complete exit interview with marketing director",
+        "Collect company-issued equipment",
+        "Remove from Slack marketing channels",
+        "Transfer Google Analytics property access",
+        "Revoke WordPress admin privileges",
+        "Archive brand assets created by departing employee"
+      ]
+    },
+    {
+      "dept_id": "dept_004",
+      "name": "Sales",
+      "head_id": "emp_0004",
+      "budget": 7500000,
+      "headcount_limit": 30,
+      "current_headcount": 27,
+      "required_tools": ["Salesforce", "Slack", "Gong", "Outreach", "LinkedIn Sales Navigator", "Zoom"],
+      "onboarding_steps": [
+        "Submit signed offer letter and NDA",
+        "Complete background check verification",
+        "Provision laptop with standard business image",
+        "Set up Salesforce CRM account with territory assignment",
+        "Grant Gong and Outreach licenses",
+        "Provision LinkedIn Sales Navigator seat",
+        "Assign sales mentor and shadow partner for first 30 days",
+        "Complete product knowledge certification",
+        "Review territory plan and quota targets",
+        "Attend sales methodology boot camp",
+        "Shadow five customer calls before solo engagement"
+      ],
+      "offboarding_steps": [
+        "Reassign Salesforce accounts and open opportunities",
+        "Transfer pipeline and forecast data to manager",
+        "Revoke Gong, Outreach, and LinkedIn Sales Navigator access",
+        "Notify active customers of account transition",
+        "Complete exit interview with sales director",
+        "Collect company-issued equipment and demo devices",
+        "Remove from Slack sales channels",
+        "Revoke Salesforce credentials and API tokens",
+        "Hand over pending contract negotiations",
+        "Deactivate Zoom webinar host privileges"
+      ]
+    },
+    {
+      "dept_id": "dept_005",
+      "name": "Finance",
+      "head_id": "emp_0005",
+      "budget": 3200000,
+      "headcount_limit": 20,
+      "current_headcount": 20,
+      "required_tools": ["NetSuite", "Slack", "Expensify", "Tableau", "Excel Advanced", "Stripe Dashboard"],
+      "onboarding_steps": [
+        "Submit signed offer letter and NDA",
+        "Complete enhanced background and credit check",
+        "Provision laptop with finance-secured image",
+        "Set up NetSuite account with role-based access controls",
+        "Grant Expensify admin or reviewer access",
+        "Provide Tableau credentials with finance dashboards",
+        "Complete SOX compliance training",
+        "Review internal controls documentation",
+        "Assign finance buddy for first 30 days",
+        "Schedule intro meetings with external auditors",
+        "Complete data handling and PII training"
+      ],
+      "offboarding_steps": [
+        "Revoke NetSuite access and rotate shared credentials",
+        "Transfer Expensify approval chains",
+        "Remove Tableau dashboard ownership",
+        "Complete handover of open reconciliations and reports",
+        "Revoke Stripe Dashboard access",
+        "Conduct exit interview with CFO or finance director",
+        "Collect company-issued equipment",
+        "Remove from Slack finance channels",
+        "Notify external auditors of personnel change",
+        "Archive financial models and working papers"
+      ]
+    },
+    {
+      "dept_id": "dept_006",
+      "name": "HR",
+      "head_id": "emp_0006",
+      "budget": 2100000,
+      "headcount_limit": 15,
+      "current_headcount": 13,
+      "required_tools": ["Workday", "Slack", "Greenhouse", "BambooHR", "DocuSign", "Culture Amp"],
+      "onboarding_steps": [
+        "Submit signed offer letter and NDA",
+        "Complete background check verification",
+        "Provision laptop with HR-secured image",
+        "Set up Workday account with HRIS admin permissions",
+        "Grant Greenhouse ATS access with recruiter role",
+        "Provide BambooHR and Culture Amp credentials",
+        "Complete HIPAA and employee data privacy training",
+        "Review employee handbook and current policies",
+        "Assign HR mentor for first 30 days",
+        "Schedule intro meetings with department heads",
+        "Complete conflict resolution and interviewer training"
+      ],
+      "offboarding_steps": [
+        "Revoke Workday HRIS admin access immediately",
+        "Transfer Greenhouse pipeline and candidate ownership",
+        "Remove BambooHR and Culture Amp access",
+        "Hand over active employee relations cases",
+        "Complete exit interview with CHRO",
+        "Collect company-issued equipment",
+        "Remove from Slack HR channels",
+        "Revoke DocuSign sending privileges",
+        "Transfer benefits administration contacts",
+        "Ensure compliance documentation is up to date"
+      ]
+    },
+    {
+      "dept_id": "dept_007",
+      "name": "Data Science",
+      "head_id": "emp_0007",
+      "budget": 5800000,
+      "headcount_limit": 25,
+      "current_headcount": 22,
+      "required_tools": ["Jupyter", "Databricks", "AWS SageMaker", "Slack", "GitHub", "Snowflake", "Tableau"],
+      "onboarding_steps": [
+        "Submit signed offer letter and NDA",
+        "Complete background check verification",
+        "Provision laptop with data science workstation image",
+        "Set up Databricks workspace and cluster access",
+        "Grant AWS SageMaker and S3 bucket permissions",
+        "Provide Snowflake account with appropriate warehouse access",
+        "Configure GitHub repo access for ML pipelines",
+        "Assign data science mentor for first 30 days",
+        "Complete data governance and ethics training",
+        "Review model registry and deployment pipeline docs",
+        "Set up Jupyter environment with approved packages",
+        "Schedule intro meetings with data engineering partners"
+      ],
+      "offboarding_steps": [
+        "Transfer model ownership and experiment tracking data",
+        "Revoke Databricks and SageMaker access",
+        "Remove Snowflake credentials and query history",
+        "Hand over active model deployments and monitoring",
+        "Revoke GitHub ML pipeline repo access",
+        "Complete exit interview with data science director",
+        "Collect company-issued equipment and GPU hardware",
+        "Remove from Slack data science channels",
+        "Archive Jupyter notebooks and transfer to team repo",
+        "Revoke Tableau published data source ownership"
+      ]
+    },
+    {
+      "dept_id": "dept_008",
+      "name": "Security",
+      "head_id": "emp_0008",
+      "budget": 4100000,
+      "headcount_limit": 15,
+      "current_headcount": 13,
+      "required_tools": ["Splunk", "CrowdStrike", "Slack", "Okta Admin", "Burp Suite", "Snyk", "Vault"],
+      "onboarding_steps": [
+        "Submit signed offer letter and enhanced NDA with security addendum",
+        "Complete comprehensive background check including criminal and financial history",
+        "Provision hardened laptop with security team image",
+        "Set up Splunk account with SIEM dashboard access",
+        "Grant CrowdStrike console access",
+        "Provide Okta admin credentials with scoped permissions",
+        "Configure Vault access with least-privilege policy",
+        "Assign security mentor for first 60 days",
+        "Complete advanced security clearance training",
+        "Review incident response playbooks and escalation paths",
+        "Set up Burp Suite and Snyk licenses",
+        "Complete red team / blue team orientation exercise"
+      ],
+      "offboarding_steps": [
+        "Revoke Okta admin access immediately upon notice",
+        "Remove Splunk and CrowdStrike console access",
+        "Rotate all shared secrets and credentials known to employee",
+        "Revoke Vault access and audit token usage",
+        "Transfer incident response case ownership",
+        "Complete exit interview with CISO",
+        "Collect company-issued equipment including security hardware tokens",
+        "Remove from Slack security channels including incident response",
+        "Revoke VPN and privileged network access",
+        "Conduct security-specific exit debrief on confidentiality obligations",
+        "Update all security runbooks to remove personal references"
+      ]
+    }
+  ]
+}

server/data/employees.json

@@ -0,0 +1,3002 @@
+[
+  {
+    "emp_id": "emp_0001",
+    "name": "Rajesh Kumar",
+    "email": "rajesh.kumar@acmecorp.com",
+    "department": "Engineering",
+    "level": "L6",
+    "role": "VP of Engineering",
+    "manager_id": null,
+    "status": "active",
+    "date_of_joining": "2018-03-15",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-332-7891",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0002",
+    "name": "James Wilson",
+    "email": "james.wilson@acmecorp.com",
+    "department": "Engineering",
+    "level": "L5",
+    "role": "Director of Engineering",
+    "manager_id": "emp_0001",
+    "status": "active",
+    "date_of_joining": "2018-06-01",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-221-4532",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0003",
+    "name": "Wei Zhang",
+    "email": "wei.zhang@acmecorp.com",
+    "department": "Engineering",
+    "level": "L5",
+    "role": "Senior Engineering Manager",
+    "manager_id": "emp_0001",
+    "status": "active",
+    "date_of_joining": "2018-09-10",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-443-8821",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0004",
+    "name": "Priya Sharma",
+    "email": "priya.sharma@acmecorp.com",
+    "department": "Engineering",
+    "level": "L4",
+    "role": "Engineering Manager",
+    "manager_id": "emp_0002",
+    "status": "active",
+    "date_of_joining": "2019-01-14",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-556-3312",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0005",
+    "name": "Michael Brown",
+    "email": "michael.brown@acmecorp.com",
+    "department": "Engineering",
+    "level": "L4",
+    "role": "Staff Engineer",
+    "manager_id": "emp_0003",
+    "status": "active",
+    "date_of_joining": "2019-03-22",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-512-778-4421",
+    "location": "Austin"
+  },
+  {
+    "emp_id": "emp_0006",
+    "name": "Hans Mueller",
+    "email": "hans.mueller@acmecorp.com",
+    "department": "Engineering",
+    "level": "L4",
+    "role": "Principal Engineer",
+    "manager_id": "emp_0002",
+    "status": "active",
+    "date_of_joining": "2019-05-18",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-889-2234",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0007",
+    "name": "Ananya Reddy",
+    "email": "ananya.reddy@acmecorp.com",
+    "department": "Engineering",
+    "level": "L3",
+    "role": "Senior Software Engineer",
+    "manager_id": "emp_0004",
+    "status": "active",
+    "date_of_joining": "2019-07-08",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-332-5567",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0008",
+    "name": "Jing Liu",
+    "email": "jing.liu@acmecorp.com",
+    "department": "Engineering",
+    "level": "L3",
+    "role": "Tech Lead",
+    "manager_id": "emp_0005",
+    "status": "active",
+    "date_of_joining": "2019-11-04",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-114-7789",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0009",
+    "name": "Sarah Johnson",
+    "email": "sarah.johnson@acmecorp.com",
+    "department": "Engineering",
+    "level": "L3",
+    "role": "Senior Developer",
+    "manager_id": "emp_0006",
+    "status": "active",
+    "date_of_joining": "2020-02-17",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-556-3341",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0010",
+    "name": "Lars Johansson",
+    "email": "lars.johansson@acmecorp.com",
+    "department": "Engineering",
+    "level": "L3",
+    "role": "Senior Software Engineer",
+    "manager_id": "emp_0004",
+    "status": "active",
+    "date_of_joining": "2020-04-23",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-667-8812",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0011",
+    "name": "Rohan Patel",
+    "email": "rohan.patel@acmecorp.com",
+    "department": "Engineering",
+    "level": "L3",
+    "role": "Tech Lead",
+    "manager_id": "emp_0005",
+    "status": "pending",
+    "date_of_joining": "2025-09-15",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-221-9934",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0012",
+    "name": "David Garcia",
+    "email": "david.garcia@acmecorp.com",
+    "department": "Engineering",
+    "level": "L2",
+    "role": "Software Engineer II",
+    "manager_id": "emp_0007",
+    "status": "active",
+    "date_of_joining": "2020-06-15",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-512-334-2218",
+    "location": "Austin"
+  },
+  {
+    "emp_id": "emp_0013",
+    "name": "Ming Wang",
+    "email": "ming.wang@acmecorp.com",
+    "department": "Engineering",
+    "level": "L2",
+    "role": "Developer",
+    "manager_id": "emp_0008",
+    "status": "active",
+    "date_of_joining": "2020-08-20",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-887-1123",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0014",
+    "name": "Elena Rossi",
+    "email": "elena.rossi@acmecorp.com",
+    "department": "Engineering",
+    "level": "L2",
+    "role": "Engineer",
+    "manager_id": "emp_0009",
+    "status": "active",
+    "date_of_joining": "2021-01-11",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-445-6678",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0015",
+    "name": "Karthik Iyer",
+    "email": "karthik.iyer@acmecorp.com",
+    "department": "Engineering",
+    "level": "L2",
+    "role": "Software Engineer II",
+    "manager_id": "emp_0010",
+    "status": "active",
+    "date_of_joining": "2021-03-05",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-778-3345",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0016",
+    "name": "Jennifer Davis",
+    "email": "jennifer.davis@acmecorp.com",
+    "department": "Engineering",
+    "level": "L2",
+    "role": "Developer",
+    "manager_id": "emp_0007",
+    "status": "active",
+    "date_of_joining": "2021-05-19",
+    "date_of_leaving": null,
+    "is_contractor": true,
+    "phone": "+1-415-992-4456",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0017",
+    "name": "Stefan Weber",
+    "email": "stefan.weber@acmecorp.com",
+    "department": "Engineering",
+    "level": "L2",
+    "role": "Engineer",
+    "manager_id": "emp_0008",
+    "status": "offboarded",
+    "date_of_joining": "2020-02-01",
+    "date_of_leaving": "2022-11-15",
+    "is_contractor": false,
+    "phone": "+1-650-113-7782",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0018",
+    "name": "Aditya Gupta",
+    "email": "aditya.gupta@acmecorp.com",
+    "department": "Engineering",
+    "level": "L1",
+    "role": "Software Engineer I",
+    "manager_id": "emp_0012",
+    "status": "active",
+    "date_of_joining": "2022-01-10",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-556-8890",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0019",
+    "name": "Mary Thompson",
+    "email": "mary.thompson@acmecorp.com",
+    "department": "Engineering",
+    "level": "L1",
+    "role": "Junior Developer",
+    "manager_id": "emp_0013",
+    "status": "active",
+    "date_of_joining": "2022-03-28",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-334-5567",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0020",
+    "name": "Tao Chen",
+    "email": "tao.chen@acmecorp.com",
+    "department": "Engineering",
+    "level": "L1",
+    "role": "Associate Engineer",
+    "manager_id": "emp_0014",
+    "status": "active",
+    "date_of_joining": "2022-06-13",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-221-3345",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0021",
+    "name": "Pierre Moreau",
+    "email": "pierre.moreau@acmecorp.com",
+    "department": "Engineering",
+    "level": "L1",
+    "role": "Software Engineer I",
+    "manager_id": "emp_0015",
+    "status": "active",
+    "date_of_joining": "2022-09-05",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-778-2234",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0022",
+    "name": "Shreya Nair",
+    "email": "shreya.nair@acmecorp.com",
+    "department": "Engineering",
+    "level": "L1",
+    "role": "Junior Developer",
+    "manager_id": "emp_0012",
+    "status": "active",
+    "date_of_joining": "2023-01-16",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-889-6671",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0023",
+    "name": "Robert Martinez",
+    "email": "robert.martinez@acmecorp.com",
+    "department": "Engineering",
+    "level": "L1",
+    "role": "Software Engineer I",
+    "manager_id": "emp_0013",
+    "status": "active",
+    "date_of_joining": "2023-04-03",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-512-445-7783",
+    "location": "Austin"
+  },
+  {
+    "emp_id": "emp_0024",
+    "name": "Feng Li",
+    "email": "feng.li@acmecorp.com",
+    "department": "Engineering",
+    "level": "L1",
+    "role": "Associate Engineer",
+    "manager_id": "emp_0016",
+    "status": "pending",
+    "date_of_joining": "2025-11-01",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-556-9912",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0025",
+    "name": "Ingrid Larsson",
+    "email": "ingrid.larsson@acmecorp.com",
+    "department": "Engineering",
+    "level": "L1",
+    "role": "Software Engineer I",
+    "manager_id": "emp_0014",
+    "status": "active",
+    "date_of_joining": "2023-07-21",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-667-1145",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0026",
+    "name": "Vivaan Singh",
+    "email": "vivaan.singh@acmecorp.com",
+    "department": "Engineering",
+    "level": "L1",
+    "role": "Junior Developer",
+    "manager_id": "emp_0015",
+    "status": "active",
+    "date_of_joining": "2023-10-09",
+    "date_of_leaving": null,
+    "is_contractor": true,
+    "phone": "+1-408-113-4456",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0027",
+    "name": "Karen Robinson",
+    "email": "karen.robinson@acmecorp.com",
+    "department": "Engineering",
+    "level": "L1",
+    "role": "Software Engineer I",
+    "manager_id": "emp_0016",
+    "status": "offboarded",
+    "date_of_joining": "2021-08-15",
+    "date_of_leaving": "2023-05-20",
+    "is_contractor": false,
+    "phone": "+1-512-889-2238",
+    "location": "Austin"
+  },
+  {
+    "emp_id": "emp_0028",
+    "name": "Hao Wu",
+    "email": "hao.wu@acmecorp.com",
+    "department": "Engineering",
+    "level": "L1",
+    "role": "Associate Engineer",
+    "manager_id": "emp_0012",
+    "status": "active",
+    "date_of_joining": "2024-02-12",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-334-8801",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0029",
+    "name": "Sofia Petrov",
+    "email": "sofia.petrov@acmecorp.com",
+    "department": "Product",
+    "level": "L6",
+    "role": "VP of Product",
+    "manager_id": null,
+    "status": "active",
+    "date_of_joining": "2018-04-02",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-221-5543",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0030",
+    "name": "Amit Joshi",
+    "email": "amit.joshi@acmecorp.com",
+    "department": "Product",
+    "level": "L5",
+    "role": "Director of Product",
+    "manager_id": "emp_0029",
+    "status": "active",
+    "date_of_joining": "2018-08-20",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-667-3319",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0031",
+    "name": "Elizabeth Taylor",
+    "email": "elizabeth.taylor@acmecorp.com",
+    "department": "Product",
+    "level": "L5",
+    "role": "Director of Product",
+    "manager_id": "emp_0029",
+    "status": "active",
+    "date_of_joining": "2019-02-11",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-443-7718",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0032",
+    "name": "Lei Huang",
+    "email": "lei.huang@acmecorp.com",
+    "department": "Product",
+    "level": "L4",
+    "role": "Group Product Manager",
+    "manager_id": "emp_0030",
+    "status": "active",
+    "date_of_joining": "2019-06-03",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-889-4421",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0033",
+    "name": "Marco Ferrari",
+    "email": "marco.ferrari@acmecorp.com",
+    "department": "Product",
+    "level": "L4",
+    "role": "Principal Product Manager",
+    "manager_id": "emp_0031",
+    "status": "active",
+    "date_of_joining": "2019-09-17",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-556-8832",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0034",
+    "name": "Kavya Desai",
+    "email": "kavya.desai@acmecorp.com",
+    "department": "Product",
+    "level": "L3",
+    "role": "Senior Product Manager",
+    "manager_id": "emp_0032",
+    "status": "active",
+    "date_of_joining": "2020-01-20",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-334-6654",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0035",
+    "name": "Thomas White",
+    "email": "thomas.white@acmecorp.com",
+    "department": "Product",
+    "level": "L3",
+    "role": "Lead Product Designer",
+    "manager_id": "emp_0033",
+    "status": "active",
+    "date_of_joining": "2020-05-11",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-778-9945",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0036",
+    "name": "Xin Yang",
+    "email": "xin.yang@acmecorp.com",
+    "department": "Product",
+    "level": "L3",
+    "role": "Senior Product Manager",
+    "manager_id": "emp_0032",
+    "status": "active",
+    "date_of_joining": "2020-08-24",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-445-1167",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0037",
+    "name": "Sven Berg",
+    "email": "sven.berg@acmecorp.com",
+    "department": "Product",
+    "level": "L2",
+    "role": "Product Manager",
+    "manager_id": "emp_0034",
+    "status": "active",
+    "date_of_joining": "2021-01-18",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-221-3378",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0038",
+    "name": "Diya Mehta",
+    "email": "diya.mehta@acmecorp.com",
+    "department": "Product",
+    "level": "L2",
+    "role": "Product Designer",
+    "manager_id": "emp_0035",
+    "status": "active",
+    "date_of_joining": "2021-04-05",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-556-2241",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0039",
+    "name": "Richard Harris",
+    "email": "richard.harris@acmecorp.com",
+    "department": "Product",
+    "level": "L2",
+    "role": "Product Manager",
+    "manager_id": "emp_0036",
+    "status": "active",
+    "date_of_joining": "2021-07-12",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-889-5567",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0040",
+    "name": "Hui Zhou",
+    "email": "hui.zhou@acmecorp.com",
+    "department": "Product",
+    "level": "L2",
+    "role": "Product Designer",
+    "manager_id": "emp_0034",
+    "status": "pending",
+    "date_of_joining": "2025-10-15",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-113-8893",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0041",
+    "name": "Nikhil Verma",
+    "email": "nikhil.verma@acmecorp.com",
+    "department": "Product",
+    "level": "L1",
+    "role": "Associate Product Manager",
+    "manager_id": "emp_0037",
+    "status": "active",
+    "date_of_joining": "2022-02-14",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-778-4432",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0042",
+    "name": "Patricia Anderson",
+    "email": "patricia.anderson@acmecorp.com",
+    "department": "Product",
+    "level": "L1",
+    "role": "Product Analyst",
+    "manager_id": "emp_0038",
+    "status": "active",
+    "date_of_joining": "2022-05-09",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-334-7789",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0043",
+    "name": "Yan Ma",
+    "email": "yan.ma@acmecorp.com",
+    "department": "Product",
+    "level": "L1",
+    "role": "Associate Product Manager",
+    "manager_id": "emp_0039",
+    "status": "active",
+    "date_of_joining": "2022-08-22",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-667-2256",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0044",
+    "name": "Klaus Fischer",
+    "email": "klaus.fischer@acmecorp.com",
+    "department": "Product",
+    "level": "L1",
+    "role": "Product Analyst",
+    "manager_id": "emp_0037",
+    "status": "active",
+    "date_of_joining": "2023-01-30",
+    "date_of_leaving": null,
+    "is_contractor": true,
+    "phone": "+1-415-992-1123",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0045",
+    "name": "Meera Rao",
+    "email": "meera.rao@acmecorp.com",
+    "department": "Product",
+    "level": "L1",
+    "role": "Associate Product Manager",
+    "manager_id": "emp_0038",
+    "status": "offboarded",
+    "date_of_joining": "2021-06-01",
+    "date_of_leaving": "2023-09-15",
+    "is_contractor": false,
+    "phone": "+1-408-221-5578",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0046",
+    "name": "Daniel Smith",
+    "email": "daniel.smith@acmecorp.com",
+    "department": "Product",
+    "level": "L1",
+    "role": "Product Analyst",
+    "manager_id": "emp_0039",
+    "status": "active",
+    "date_of_joining": "2023-06-19",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-512-556-3349",
+    "location": "Austin"
+  },
+  {
+    "emp_id": "emp_0047",
+    "name": "Rui Xu",
+    "email": "rui.xu@acmecorp.com",
+    "department": "Product",
+    "level": "L1",
+    "role": "Associate Product Manager",
+    "manager_id": "emp_0037",
+    "status": "active",
+    "date_of_joining": "2024-01-08",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-889-6612",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0048",
+    "name": "Anna Schmidt",
+    "email": "anna.schmidt@acmecorp.com",
+    "department": "Marketing",
+    "level": "L6",
+    "role": "VP of Marketing",
+    "manager_id": null,
+    "status": "active",
+    "date_of_joining": "2018-05-14",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-443-9934",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0049",
+    "name": "Vikram Chopra",
+    "email": "vikram.chopra@acmecorp.com",
+    "department": "Marketing",
+    "level": "L5",
+    "role": "Senior Director of Marketing",
+    "manager_id": "emp_0048",
+    "status": "active",
+    "date_of_joining": "2018-10-22",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-334-1156",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0050",
+    "name": "Jessica Martin",
+    "email": "jessica.martin@acmecorp.com",
+    "department": "Marketing",
+    "level": "L4",
+    "role": "Marketing Director",
+    "manager_id": "emp_0049",
+    "status": "active",
+    "date_of_joining": "2019-04-08",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-778-2267",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0051",
+    "name": "Qiang Sun",
+    "email": "qiang.sun@acmecorp.com",
+    "department": "Marketing",
+    "level": "L4",
+    "role": "Head of Growth",
+    "manager_id": "emp_0049",
+    "status": "active",
+    "date_of_joining": "2019-08-19",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-445-3378",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0052",
+    "name": "Erik Wagner",
+    "email": "erik.wagner@acmecorp.com",
+    "department": "Marketing",
+    "level": "L3",
+    "role": "Senior Marketing Manager",
+    "manager_id": "emp_0050",
+    "status": "active",
+    "date_of_joining": "2020-01-13",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-113-4489",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0053",
+    "name": "Neha Bhat",
+    "email": "neha.bhat@acmecorp.com",
+    "department": "Marketing",
+    "level": "L3",
+    "role": "Growth Lead",
+    "manager_id": "emp_0051",
+    "status": "active",
+    "date_of_joining": "2020-05-25",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-889-7712",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0054",
+    "name": "Matthew Rodriguez",
+    "email": "matthew.rodriguez@acmecorp.com",
+    "department": "Marketing",
+    "level": "L3",
+    "role": "Brand Manager",
+    "manager_id": "emp_0050",
+    "status": "active",
+    "date_of_joining": "2020-09-07",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-221-8856",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0055",
+    "name": "Shan Guo",
+    "email": "shan.guo@acmecorp.com",
+    "department": "Marketing",
+    "level": "L2",
+    "role": "Marketing Specialist",
+    "manager_id": "emp_0052",
+    "status": "active",
+    "date_of_joining": "2021-02-01",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-556-1134",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0056",
+    "name": "Katarina Volkov",
+    "email": "katarina.volkov@acmecorp.com",
+    "department": "Marketing",
+    "level": "L2",
+    "role": "Content Strategist",
+    "manager_id": "emp_0053",
+    "status": "active",
+    "date_of_joining": "2021-05-17",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-667-2278",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0057",
+    "name": "Pranav Mishra",
+    "email": "pranav.mishra@acmecorp.com",
+    "department": "Marketing",
+    "level": "L2",
+    "role": "Brand Specialist",
+    "manager_id": "emp_0054",
+    "status": "active",
+    "date_of_joining": "2021-08-30",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-992-3367",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0058",
+    "name": "Linda Jackson",
+    "email": "linda.jackson@acmecorp.com",
+    "department": "Marketing",
+    "level": "L2",
+    "role": "Marketing Specialist",
+    "manager_id": "emp_0052",
+    "status": "pending",
+    "date_of_joining": "2025-08-01",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-334-4490",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0059",
+    "name": "Zhi Lin",
+    "email": "zhi.lin@acmecorp.com",
+    "department": "Marketing",
+    "level": "L1",
+    "role": "Marketing Associate",
+    "manager_id": "emp_0055",
+    "status": "active",
+    "date_of_joining": "2022-03-14",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-778-5543",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0060",
+    "name": "Olaf Schulz",
+    "email": "olaf.schulz@acmecorp.com",
+    "department": "Marketing",
+    "level": "L1",
+    "role": "Content Writer",
+    "manager_id": "emp_0056",
+    "status": "active",
+    "date_of_joining": "2022-06-27",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-889-6623",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0061",
+    "name": "Riya Pillai",
+    "email": "riya.pillai@acmecorp.com",
+    "department": "Marketing",
+    "level": "L1",
+    "role": "Marketing Coordinator",
+    "manager_id": "emp_0057",
+    "status": "active",
+    "date_of_joining": "2022-10-10",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-113-9978",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0062",
+    "name": "Anthony Thomas",
+    "email": "anthony.thomas@acmecorp.com",
+    "department": "Marketing",
+    "level": "L1",
+    "role": "Marketing Associate",
+    "manager_id": "emp_0055",
+    "status": "active",
+    "date_of_joining": "2023-02-20",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-512-445-1134",
+    "location": "Austin"
+  },
+  {
+    "emp_id": "emp_0063",
+    "name": "Chen Luo",
+    "email": "chen.luo@acmecorp.com",
+    "department": "Marketing",
+    "level": "L1",
+    "role": "Content Writer",
+    "manager_id": "emp_0056",
+    "status": "active",
+    "date_of_joining": "2023-05-08",
+    "date_of_leaving": null,
+    "is_contractor": true,
+    "phone": "+1-650-992-2245",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0064",
+    "name": "Marie Dubois",
+    "email": "marie.dubois@acmecorp.com",
+    "department": "Marketing",
+    "level": "L1",
+    "role": "Marketing Coordinator",
+    "manager_id": "emp_0057",
+    "status": "offboarded",
+    "date_of_joining": "2021-04-12",
+    "date_of_leaving": "2023-08-30",
+    "is_contractor": false,
+    "phone": "+1-212-556-7712",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0065",
+    "name": "Arjun Chauhan",
+    "email": "arjun.chauhan@acmecorp.com",
+    "department": "Marketing",
+    "level": "L1",
+    "role": "Marketing Associate",
+    "manager_id": "emp_0055",
+    "status": "active",
+    "date_of_joining": "2024-03-11",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-221-6634",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0066",
+    "name": "Barbara Miller",
+    "email": "barbara.miller@acmecorp.com",
+    "department": "Sales",
+    "level": "L6",
+    "role": "VP of Sales",
+    "manager_id": null,
+    "status": "active",
+    "date_of_joining": "2018-02-19",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-889-3345",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0067",
+    "name": "Suresh Thakur",
+    "email": "suresh.thakur@acmecorp.com",
+    "department": "Sales",
+    "level": "L5",
+    "role": "Senior Director of Sales",
+    "manager_id": "emp_0066",
+    "status": "active",
+    "date_of_joining": "2018-07-16",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-667-8823",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0068",
+    "name": "Jun Zheng",
+    "email": "jun.zheng@acmecorp.com",
+    "department": "Sales",
+    "level": "L4",
+    "role": "Regional Sales Director",
+    "manager_id": "emp_0067",
+    "status": "active",
+    "date_of_joining": "2019-01-28",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-334-4456",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0069",
+    "name": "Henrik Becker",
+    "email": "henrik.becker@acmecorp.com",
+    "department": "Sales",
+    "level": "L4",
+    "role": "Head of Enterprise Sales",
+    "manager_id": "emp_0067",
+    "status": "active",
+    "date_of_joining": "2019-05-13",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-445-5567",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0070",
+    "name": "Pooja Menon",
+    "email": "pooja.menon@acmecorp.com",
+    "department": "Sales",
+    "level": "L3",
+    "role": "Senior Account Executive",
+    "manager_id": "emp_0068",
+    "status": "active",
+    "date_of_joining": "2019-10-07",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-778-6678",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0071",
+    "name": "Steven Williams",
+    "email": "steven.williams@acmecorp.com",
+    "department": "Sales",
+    "level": "L3",
+    "role": "Sales Manager",
+    "manager_id": "emp_0069",
+    "status": "active",
+    "date_of_joining": "2020-03-16",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-113-7789",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0072",
+    "name": "Peng Han",
+    "email": "peng.han@acmecorp.com",
+    "department": "Sales",
+    "level": "L3",
+    "role": "Enterprise Sales Rep",
+    "manager_id": "emp_0068",
+    "status": "active",
+    "date_of_joining": "2020-07-27",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-889-8812",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0073",
+    "name": "Astrid Koch",
+    "email": "astrid.koch@acmecorp.com",
+    "department": "Sales",
+    "level": "L3",
+    "role": "Sales Manager",
+    "manager_id": "emp_0069",
+    "status": "pending",
+    "date_of_joining": "2025-07-01",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-221-9923",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0074",
+    "name": "Deepak Rao",
+    "email": "deepak.rao@acmecorp.com",
+    "department": "Sales",
+    "level": "L2",
+    "role": "Account Executive II",
+    "manager_id": "emp_0070",
+    "status": "active",
+    "date_of_joining": "2020-11-09",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-556-1145",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0075",
+    "name": "Brian Jones",
+    "email": "brian.jones@acmecorp.com",
+    "department": "Sales",
+    "level": "L2",
+    "role": "Sales Engineer",
+    "manager_id": "emp_0071",
+    "status": "active",
+    "date_of_joining": "2021-02-22",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-512-334-2256",
+    "location": "Austin"
+  },
+  {
+    "emp_id": "emp_0076",
+    "name": "Mei Xie",
+    "email": "mei.xie@acmecorp.com",
+    "department": "Sales",
+    "level": "L2",
+    "role": "Business Development Rep",
+    "manager_id": "emp_0072",
+    "status": "active",
+    "date_of_joining": "2021-06-14",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-667-3367",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0077",
+    "name": "Luca Hoffman",
+    "email": "luca.hoffman@acmecorp.com",
+    "department": "Sales",
+    "level": "L2",
+    "role": "Account Executive II",
+    "manager_id": "emp_0070",
+    "status": "active",
+    "date_of_joining": "2021-09-27",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-778-4478",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0078",
+    "name": "Tanvi Kumar",
+    "email": "tanvi.kumar@acmecorp.com",
+    "department": "Sales",
+    "level": "L2",
+    "role": "Sales Engineer",
+    "manager_id": "emp_0071",
+    "status": "active",
+    "date_of_joining": "2022-01-10",
+    "date_of_leaving": null,
+    "is_contractor": true,
+    "phone": "+1-408-889-5589",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0079",
+    "name": "Kevin Harris",
+    "email": "kevin.harris@acmecorp.com",
+    "department": "Sales",
+    "level": "L2",
+    "role": "Business Development Rep",
+    "manager_id": "emp_0072",
+    "status": "offboarded",
+    "date_of_joining": "2020-04-15",
+    "date_of_leaving": "2022-08-20",
+    "is_contractor": false,
+    "phone": "+1-212-992-6623",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0080",
+    "name": "Yun Zhu",
+    "email": "yun.zhu@acmecorp.com",
+    "department": "Sales",
+    "level": "L1",
+    "role": "Sales Development Rep",
+    "manager_id": "emp_0074",
+    "status": "active",
+    "date_of_joining": "2022-04-18",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-445-7734",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0081",
+    "name": "Sergio Laurent",
+    "email": "sergio.laurent@acmecorp.com",
+    "department": "Sales",
+    "level": "L1",
+    "role": "Account Executive I",
+    "manager_id": "emp_0075",
+    "status": "active",
+    "date_of_joining": "2022-07-25",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-556-8845",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0082",
+    "name": "Ishaan Patel",
+    "email": "ishaan.patel@acmecorp.com",
+    "department": "Sales",
+    "level": "L1",
+    "role": "Inside Sales Rep",
+    "manager_id": "emp_0076",
+    "status": "active",
+    "date_of_joining": "2022-11-07",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-113-9956",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0083",
+    "name": "Mark Taylor",
+    "email": "mark.taylor@acmecorp.com",
+    "department": "Sales",
+    "level": "L1",
+    "role": "Sales Development Rep",
+    "manager_id": "emp_0077",
+    "status": "active",
+    "date_of_joining": "2023-02-13",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-667-1167",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0084",
+    "name": "Ling Wu",
+    "email": "ling.wu@acmecorp.com",
+    "department": "Sales",
+    "level": "L1",
+    "role": "Account Executive I",
+    "manager_id": "emp_0074",
+    "status": "active",
+    "date_of_joining": "2023-05-29",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-221-2278",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0085",
+    "name": "Eva Richter",
+    "email": "eva.richter@acmecorp.com",
+    "department": "Sales",
+    "level": "L1",
+    "role": "Inside Sales Rep",
+    "manager_id": "emp_0075",
+    "status": "active",
+    "date_of_joining": "2023-09-11",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-334-3389",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0086",
+    "name": "Sai Sharma",
+    "email": "sai.sharma@acmecorp.com",
+    "department": "Sales",
+    "level": "L1",
+    "role": "Sales Development Rep",
+    "manager_id": "emp_0076",
+    "status": "pending",
+    "date_of_joining": "2025-10-01",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-445-4490",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0087",
+    "name": "Timothy Garcia",
+    "email": "timothy.garcia@acmecorp.com",
+    "department": "Sales",
+    "level": "L1",
+    "role": "Account Executive I",
+    "manager_id": "emp_0077",
+    "status": "active",
+    "date_of_joining": "2024-01-22",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-512-556-5501",
+    "location": "Austin"
+  },
+  {
+    "emp_id": "emp_0088",
+    "name": "Xin Chen",
+    "email": "xin.chen@acmecorp.com",
+    "department": "Sales",
+    "level": "L1",
+    "role": "Inside Sales Rep",
+    "manager_id": "emp_0074",
+    "status": "active",
+    "date_of_joining": "2024-05-06",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-778-6612",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0089",
+    "name": "Nikolai Petrov",
+    "email": "nikolai.petrov@acmecorp.com",
+    "department": "Finance",
+    "level": "L6",
+    "role": "VP of Finance",
+    "manager_id": null,
+    "status": "active",
+    "date_of_joining": "2018-01-15",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-889-7723",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0090",
+    "name": "Rahul Gupta",
+    "email": "rahul.gupta@acmecorp.com",
+    "department": "Finance",
+    "level": "L5",
+    "role": "Senior Director of Finance",
+    "manager_id": "emp_0089",
+    "status": "active",
+    "date_of_joining": "2018-06-25",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-113-2234",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0091",
+    "name": "Susan Davis",
+    "email": "susan.davis@acmecorp.com",
+    "department": "Finance",
+    "level": "L4",
+    "role": "Finance Director",
+    "manager_id": "emp_0090",
+    "status": "active",
+    "date_of_joining": "2019-02-04",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-221-3345",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0092",
+    "name": "Hui Wang",
+    "email": "hui.wang@acmecorp.com",
+    "department": "Finance",
+    "level": "L4",
+    "role": "Head of FP&A",
+    "manager_id": "emp_0090",
+    "status": "active",
+    "date_of_joining": "2019-07-15",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-334-8834",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0093",
+    "name": "Clara Weber",
+    "email": "clara.weber@acmecorp.com",
+    "department": "Finance",
+    "level": "L3",
+    "role": "Finance Manager",
+    "manager_id": "emp_0091",
+    "status": "active",
+    "date_of_joining": "2020-01-06",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-445-9945",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0094",
+    "name": "Aarav Verma",
+    "email": "aarav.verma@acmecorp.com",
+    "department": "Finance",
+    "level": "L3",
+    "role": "Senior Financial Analyst",
+    "manager_id": "emp_0092",
+    "status": "active",
+    "date_of_joining": "2020-05-18",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-556-1156",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0095",
+    "name": "Joseph Robinson",
+    "email": "joseph.robinson@acmecorp.com",
+    "department": "Finance",
+    "level": "L3",
+    "role": "Controller",
+    "manager_id": "emp_0091",
+    "status": "active",
+    "date_of_joining": "2020-09-28",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-667-2267",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0096",
+    "name": "Tao Li",
+    "email": "tao.li@acmecorp.com",
+    "department": "Finance",
+    "level": "L2",
+    "role": "Financial Analyst II",
+    "manager_id": "emp_0093",
+    "status": "active",
+    "date_of_joining": "2021-01-25",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-778-3378",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0097",
+    "name": "Jean Moreau",
+    "email": "jean.moreau@acmecorp.com",
+    "department": "Finance",
+    "level": "L2",
+    "role": "Senior Accountant",
+    "manager_id": "emp_0094",
+    "status": "active",
+    "date_of_joining": "2021-05-10",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-889-4489",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0098",
+    "name": "Vihaan Iyer",
+    "email": "vihaan.iyer@acmecorp.com",
+    "department": "Finance",
+    "level": "L2",
+    "role": "Tax Analyst",
+    "manager_id": "emp_0095",
+    "status": "active",
+    "date_of_joining": "2021-09-13",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-992-5590",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0099",
+    "name": "Andrew White",
+    "email": "andrew.white@acmecorp.com",
+    "department": "Finance",
+    "level": "L2",
+    "role": "Financial Analyst II",
+    "manager_id": "emp_0093",
+    "status": "active",
+    "date_of_joining": "2022-01-03",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-113-6601",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0100",
+    "name": "Yun Liu",
+    "email": "yun.liu@acmecorp.com",
+    "department": "Finance",
+    "level": "L1",
+    "role": "Financial Analyst I",
+    "manager_id": "emp_0096",
+    "status": "active",
+    "date_of_joining": "2022-04-11",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-221-7712",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0101",
+    "name": "Pablo Rossi",
+    "email": "pablo.rossi@acmecorp.com",
+    "department": "Finance",
+    "level": "L1",
+    "role": "Accounting Associate",
+    "manager_id": "emp_0097",
+    "status": "active",
+    "date_of_joining": "2022-07-25",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-334-8823",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0102",
+    "name": "Shaurya Mehta",
+    "email": "shaurya.mehta@acmecorp.com",
+    "department": "Finance",
+    "level": "L1",
+    "role": "Bookkeeper",
+    "manager_id": "emp_0098",
+    "status": "active",
+    "date_of_joining": "2022-11-14",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-445-9934",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0103",
+    "name": "Charles Martin",
+    "email": "charles.martin@acmecorp.com",
+    "department": "Finance",
+    "level": "L1",
+    "role": "Financial Analyst I",
+    "manager_id": "emp_0099",
+    "status": "active",
+    "date_of_joining": "2023-03-06",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-556-1145",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0104",
+    "name": "Feng Yang",
+    "email": "feng.yang@acmecorp.com",
+    "department": "Finance",
+    "level": "L1",
+    "role": "Accounting Associate",
+    "manager_id": "emp_0096",
+    "status": "offboarded",
+    "date_of_joining": "2021-03-15",
+    "date_of_leaving": "2023-07-20",
+    "is_contractor": false,
+    "phone": "+1-650-667-2256",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0105",
+    "name": "Ivan Volkov",
+    "email": "ivan.volkov@acmecorp.com",
+    "department": "Finance",
+    "level": "L1",
+    "role": "Bookkeeper",
+    "manager_id": "emp_0097",
+    "status": "active",
+    "date_of_joining": "2023-08-28",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-778-3334",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0106",
+    "name": "Reyansh Singh",
+    "email": "reyansh.singh@acmecorp.com",
+    "department": "Finance",
+    "level": "L1",
+    "role": "Financial Analyst I",
+    "manager_id": "emp_0098",
+    "status": "active",
+    "date_of_joining": "2024-01-15",
+    "date_of_leaving": null,
+    "is_contractor": true,
+    "phone": "+1-408-889-4445",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0107",
+    "name": "William Thompson",
+    "email": "william.thompson@acmecorp.com",
+    "department": "HR",
+    "level": "L6",
+    "role": "VP of HR",
+    "manager_id": null,
+    "status": "active",
+    "date_of_joining": "2018-03-05",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-113-5556",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0108",
+    "name": "Diya Nair",
+    "email": "diya.nair@acmecorp.com",
+    "department": "HR",
+    "level": "L5",
+    "role": "Senior Director of HR",
+    "manager_id": "emp_0107",
+    "status": "active",
+    "date_of_joining": "2018-08-13",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-221-6667",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0109",
+    "name": "Lei Zhou",
+    "email": "lei.zhou@acmecorp.com",
+    "department": "HR",
+    "level": "L4",
+    "role": "HR Director",
+    "manager_id": "emp_0108",
+    "status": "active",
+    "date_of_joining": "2019-03-11",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-334-7778",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0110",
+    "name": "Marta Wagner",
+    "email": "marta.wagner@acmecorp.com",
+    "department": "HR",
+    "level": "L4",
+    "role": "Head of Talent Acquisition",
+    "manager_id": "emp_0108",
+    "status": "active",
+    "date_of_joining": "2019-07-22",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-445-8889",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0111",
+    "name": "Amit Desai",
+    "email": "amit.desai@acmecorp.com",
+    "department": "HR",
+    "level": "L3",
+    "role": "Senior HR Manager",
+    "manager_id": "emp_0109",
+    "status": "active",
+    "date_of_joining": "2020-02-03",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-556-9990",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0112",
+    "name": "Jason Anderson",
+    "email": "jason.anderson@acmecorp.com",
+    "department": "HR",
+    "level": "L3",
+    "role": "HR Business Partner",
+    "manager_id": "emp_0110",
+    "status": "active",
+    "date_of_joining": "2020-06-15",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-512-667-1101",
+    "location": "Austin"
+  },
+  {
+    "emp_id": "emp_0113",
+    "name": "Min Hu",
+    "email": "min.hu@acmecorp.com",
+    "department": "HR",
+    "level": "L3",
+    "role": "Senior Recruiter",
+    "manager_id": "emp_0109",
+    "status": "active",
+    "date_of_joining": "2020-10-26",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-778-2212",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0114",
+    "name": "Friedrich Schulz",
+    "email": "friedrich.schulz@acmecorp.com",
+    "department": "HR",
+    "level": "L2",
+    "role": "HR Specialist",
+    "manager_id": "emp_0111",
+    "status": "active",
+    "date_of_joining": "2021-03-08",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-889-3323",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0115",
+    "name": "Kavya Thakur",
+    "email": "kavya.thakur@acmecorp.com",
+    "department": "HR",
+    "level": "L2",
+    "role": "Recruiter",
+    "manager_id": "emp_0112",
+    "status": "active",
+    "date_of_joining": "2021-06-21",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-992-4434",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0116",
+    "name": "John Brown",
+    "email": "john.brown@acmecorp.com",
+    "department": "HR",
+    "level": "L2",
+    "role": "Compensation Analyst",
+    "manager_id": "emp_0113",
+    "status": "active",
+    "date_of_joining": "2021-10-04",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-113-5545",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0117",
+    "name": "Wei Xu",
+    "email": "wei.xu@acmecorp.com",
+    "department": "HR",
+    "level": "L2",
+    "role": "HR Specialist",
+    "manager_id": "emp_0111",
+    "status": "pending",
+    "date_of_joining": "2025-09-01",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-445-6656",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0118",
+    "name": "Carlos Schmidt",
+    "email": "carlos.schmidt@acmecorp.com",
+    "department": "HR",
+    "level": "L1",
+    "role": "HR Coordinator",
+    "manager_id": "emp_0114",
+    "status": "active",
+    "date_of_joining": "2022-02-07",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-556-7767",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0119",
+    "name": "Krishna Mishra",
+    "email": "krishna.mishra@acmecorp.com",
+    "department": "HR",
+    "level": "L1",
+    "role": "Recruiting Coordinator",
+    "manager_id": "emp_0115",
+    "status": "active",
+    "date_of_joining": "2022-05-23",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-667-8878",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0120",
+    "name": "Sarah Martinez",
+    "email": "sarah.martinez@acmecorp.com",
+    "department": "HR",
+    "level": "L1",
+    "role": "HR Associate",
+    "manager_id": "emp_0116",
+    "status": "active",
+    "date_of_joining": "2022-09-05",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-778-9989",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0121",
+    "name": "Hao Sun",
+    "email": "hao.sun@acmecorp.com",
+    "department": "HR",
+    "level": "L1",
+    "role": "HR Coordinator",
+    "manager_id": "emp_0114",
+    "status": "active",
+    "date_of_joining": "2023-01-16",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-889-1190",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0122",
+    "name": "Alexei Koch",
+    "email": "alexei.koch@acmecorp.com",
+    "department": "HR",
+    "level": "L1",
+    "role": "Recruiting Coordinator",
+    "manager_id": "emp_0115",
+    "status": "offboarded",
+    "date_of_joining": "2021-02-10",
+    "date_of_leaving": "2023-04-15",
+    "is_contractor": false,
+    "phone": "+1-415-334-2201",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0123",
+    "name": "Tanvi Sharma",
+    "email": "tanvi.sharma@acmecorp.com",
+    "department": "HR",
+    "level": "L1",
+    "role": "HR Associate",
+    "manager_id": "emp_0116",
+    "status": "active",
+    "date_of_joining": "2023-06-26",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-445-3312",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0124",
+    "name": "Andrew Johnson",
+    "email": "andrew.johnson@acmecorp.com",
+    "department": "HR",
+    "level": "L1",
+    "role": "HR Coordinator",
+    "manager_id": "emp_0114",
+    "status": "active",
+    "date_of_joining": "2024-02-05",
+    "date_of_leaving": null,
+    "is_contractor": true,
+    "phone": "+1-512-556-4423",
+    "location": "Austin"
+  },
+  {
+    "emp_id": "emp_0125",
+    "name": "Jing Ma",
+    "email": "jing.ma@acmecorp.com",
+    "department": "Data Science",
+    "level": "L5",
+    "role": "Director of Data Science",
+    "manager_id": null,
+    "status": "active",
+    "date_of_joining": "2018-09-03",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-113-4434",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0126",
+    "name": "Vikram Singh",
+    "email": "vikram.singh@acmecorp.com",
+    "department": "Data Science",
+    "level": "L5",
+    "role": "Director of Data Science",
+    "manager_id": null,
+    "status": "active",
+    "date_of_joining": "2019-01-21",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-221-5545",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0127",
+    "name": "Dmitri Larsson",
+    "email": "dmitri.larsson@acmecorp.com",
+    "department": "Data Science",
+    "level": "L4",
+    "role": "Staff Data Scientist",
+    "manager_id": "emp_0125",
+    "status": "active",
+    "date_of_joining": "2019-06-10",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-334-6656",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0128",
+    "name": "Rohan Reddy",
+    "email": "rohan.reddy@acmecorp.com",
+    "department": "Data Science",
+    "level": "L4",
+    "role": "Principal ML Engineer",
+    "manager_id": "emp_0126",
+    "status": "active",
+    "date_of_joining": "2019-10-28",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-445-7767",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0129",
+    "name": "Michael Jones",
+    "email": "michael.jones@acmecorp.com",
+    "department": "Data Science",
+    "level": "L3",
+    "role": "Senior Data Scientist",
+    "manager_id": "emp_0127",
+    "status": "active",
+    "date_of_joining": "2020-03-09",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-556-8878",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0130",
+    "name": "Rui Zhang",
+    "email": "rui.zhang@acmecorp.com",
+    "department": "Data Science",
+    "level": "L3",
+    "role": "Senior ML Engineer",
+    "manager_id": "emp_0128",
+    "status": "active",
+    "date_of_joining": "2020-07-20",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-667-9989",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0131",
+    "name": "Stefan Hoffman",
+    "email": "stefan.hoffman@acmecorp.com",
+    "department": "Data Science",
+    "level": "L3",
+    "role": "Lead Analyst",
+    "manager_id": "emp_0127",
+    "status": "active",
+    "date_of_joining": "2020-11-30",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-778-1190",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0132",
+    "name": "Neha Patel",
+    "email": "neha.patel@acmecorp.com",
+    "department": "Data Science",
+    "level": "L3",
+    "role": "Senior Data Scientist",
+    "manager_id": "emp_0128",
+    "status": "pending",
+    "date_of_joining": "2025-11-15",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-889-2201",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0133",
+    "name": "Robert Garcia",
+    "email": "robert.garcia@acmecorp.com",
+    "department": "Data Science",
+    "level": "L2",
+    "role": "Data Scientist",
+    "manager_id": "emp_0129",
+    "status": "active",
+    "date_of_joining": "2021-03-15",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-512-992-3312",
+    "location": "Austin"
+  },
+  {
+    "emp_id": "emp_0134",
+    "name": "Ming Huang",
+    "email": "ming.huang@acmecorp.com",
+    "department": "Data Science",
+    "level": "L2",
+    "role": "ML Engineer II",
+    "manager_id": "emp_0130",
+    "status": "active",
+    "date_of_joining": "2021-06-28",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-113-4423",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0135",
+    "name": "Ingrid Schmidt",
+    "email": "ingrid.schmidt@acmecorp.com",
+    "department": "Data Science",
+    "level": "L2",
+    "role": "Analytics Engineer",
+    "manager_id": "emp_0131",
+    "status": "active",
+    "date_of_joining": "2021-10-11",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-221-5534",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0136",
+    "name": "Pranav Joshi",
+    "email": "pranav.joshi@acmecorp.com",
+    "department": "Data Science",
+    "level": "L2",
+    "role": "Data Scientist",
+    "manager_id": "emp_0129",
+    "status": "active",
+    "date_of_joining": "2022-02-14",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-334-6645",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0137",
+    "name": "Karen Smith",
+    "email": "karen.smith@acmecorp.com",
+    "department": "Data Science",
+    "level": "L2",
+    "role": "ML Engineer II",
+    "manager_id": "emp_0130",
+    "status": "offboarded",
+    "date_of_joining": "2020-09-01",
+    "date_of_leaving": "2023-02-28",
+    "is_contractor": false,
+    "phone": "+1-212-445-7756",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0138",
+    "name": "Qiang Guo",
+    "email": "qiang.guo@acmecorp.com",
+    "department": "Data Science",
+    "level": "L2",
+    "role": "Analytics Engineer",
+    "manager_id": "emp_0131",
+    "status": "active",
+    "date_of_joining": "2022-06-20",
+    "date_of_leaving": null,
+    "is_contractor": true,
+    "phone": "+1-650-556-8867",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0139",
+    "name": "Eva Fischer",
+    "email": "eva.fischer@acmecorp.com",
+    "department": "Data Science",
+    "level": "L1",
+    "role": "Data Analyst",
+    "manager_id": "emp_0133",
+    "status": "active",
+    "date_of_joining": "2022-09-05",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-667-9978",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0140",
+    "name": "Aditya Chopra",
+    "email": "aditya.chopra@acmecorp.com",
+    "department": "Data Science",
+    "level": "L1",
+    "role": "Junior Data Scientist",
+    "manager_id": "emp_0134",
+    "status": "active",
+    "date_of_joining": "2022-12-12",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-778-1189",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0141",
+    "name": "David Williams",
+    "email": "david.williams@acmecorp.com",
+    "department": "Data Science",
+    "level": "L1",
+    "role": "ML Engineer I",
+    "manager_id": "emp_0135",
+    "status": "active",
+    "date_of_joining": "2023-03-27",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-512-889-2290",
+    "location": "Austin"
+  },
+  {
+    "emp_id": "emp_0142",
+    "name": "Shan Lin",
+    "email": "shan.lin@acmecorp.com",
+    "department": "Data Science",
+    "level": "L1",
+    "role": "Data Analyst",
+    "manager_id": "emp_0136",
+    "status": "active",
+    "date_of_joining": "2023-07-10",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-992-3301",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0143",
+    "name": "Marie Fischer",
+    "email": "marie.fischer@acmecorp.com",
+    "department": "Data Science",
+    "level": "L1",
+    "role": "Junior Data Scientist",
+    "manager_id": "emp_0133",
+    "status": "active",
+    "date_of_joining": "2023-10-23",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-113-4412",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0144",
+    "name": "Vihaan Rao",
+    "email": "vihaan.rao@acmecorp.com",
+    "department": "Data Science",
+    "level": "L1",
+    "role": "ML Engineer I",
+    "manager_id": "emp_0134",
+    "status": "pending",
+    "date_of_joining": "2025-10-15",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-221-5523",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0145",
+    "name": "Timothy Johnson",
+    "email": "timothy.johnson@acmecorp.com",
+    "department": "Data Science",
+    "level": "L1",
+    "role": "Data Analyst",
+    "manager_id": "emp_0135",
+    "status": "active",
+    "date_of_joining": "2024-02-19",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-334-6634",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0146",
+    "name": "Peng Zheng",
+    "email": "peng.zheng@acmecorp.com",
+    "department": "Data Science",
+    "level": "L1",
+    "role": "Junior Data Scientist",
+    "manager_id": "emp_0136",
+    "status": "active",
+    "date_of_joining": "2024-06-03",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-445-7745",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0147",
+    "name": "Henrik Richter",
+    "email": "henrik.richter@acmecorp.com",
+    "department": "Data Science",
+    "level": "L1",
+    "role": "ML Engineer I",
+    "manager_id": "emp_0138",
+    "status": "active",
+    "date_of_joining": "2024-09-16",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-556-8856",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0148",
+    "name": "Shreya Gupta",
+    "email": "shreya.gupta@acmecorp.com",
+    "department": "Data Science",
+    "level": "L1",
+    "role": "Data Analyst",
+    "manager_id": "emp_0133",
+    "status": "active",
+    "date_of_joining": "2025-01-06",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-667-9967",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0149",
+    "name": "Sven Becker",
+    "email": "sven.becker@acmecorp.com",
+    "department": "Security",
+    "level": "L5",
+    "role": "Senior Director of Security",
+    "manager_id": null,
+    "status": "active",
+    "date_of_joining": "2018-05-21",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-334-1178",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0150",
+    "name": "Deepak Menon",
+    "email": "deepak.menon@acmecorp.com",
+    "department": "Security",
+    "level": "L5",
+    "role": "Senior Director of Security",
+    "manager_id": null,
+    "status": "active",
+    "date_of_joining": "2018-11-12",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-445-2289",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0151",
+    "name": "Elizabeth Garcia",
+    "email": "elizabeth.garcia@acmecorp.com",
+    "department": "Security",
+    "level": "L4",
+    "role": "Security Director",
+    "manager_id": "emp_0149",
+    "status": "active",
+    "date_of_joining": "2019-04-15",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-556-3390",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0152",
+    "name": "Jun Xu",
+    "email": "jun.xu@acmecorp.com",
+    "department": "Security",
+    "level": "L4",
+    "role": "Head of Infrastructure Security",
+    "manager_id": "emp_0150",
+    "status": "active",
+    "date_of_joining": "2019-09-02",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-667-4401",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0153",
+    "name": "Pierre Laurent",
+    "email": "pierre.laurent@acmecorp.com",
+    "department": "Security",
+    "level": "L3",
+    "role": "Senior Security Engineer",
+    "manager_id": "emp_0151",
+    "status": "active",
+    "date_of_joining": "2020-01-20",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-778-5512",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0154",
+    "name": "Arjun Pillai",
+    "email": "arjun.pillai@acmecorp.com",
+    "department": "Security",
+    "level": "L3",
+    "role": "Security Architect",
+    "manager_id": "emp_0152",
+    "status": "active",
+    "date_of_joining": "2020-06-08",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-889-6623",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0155",
+    "name": "Jennifer Williams",
+    "email": "jennifer.williams@acmecorp.com",
+    "department": "Security",
+    "level": "L3",
+    "role": "AppSec Lead",
+    "manager_id": "emp_0151",
+    "status": "active",
+    "date_of_joining": "2020-10-19",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-992-7734",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0156",
+    "name": "Chen Han",
+    "email": "chen.han@acmecorp.com",
+    "department": "Security",
+    "level": "L2",
+    "role": "Security Engineer II",
+    "manager_id": "emp_0153",
+    "status": "active",
+    "date_of_joining": "2021-02-15",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-113-8845",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0157",
+    "name": "Olaf Berg",
+    "email": "olaf.berg@acmecorp.com",
+    "department": "Security",
+    "level": "L2",
+    "role": "Penetration Tester",
+    "manager_id": "emp_0154",
+    "status": "active",
+    "date_of_joining": "2021-05-31",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-221-9956",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0158",
+    "name": "Meera Chauhan",
+    "email": "meera.chauhan@acmecorp.com",
+    "department": "Security",
+    "level": "L2",
+    "role": "Compliance Analyst",
+    "manager_id": "emp_0155",
+    "status": "active",
+    "date_of_joining": "2021-09-13",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-334-1167",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0159",
+    "name": "Kevin Davis",
+    "email": "kevin.davis@acmecorp.com",
+    "department": "Security",
+    "level": "L2",
+    "role": "Security Engineer II",
+    "manager_id": "emp_0153",
+    "status": "active",
+    "date_of_joining": "2022-01-24",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-512-445-2278",
+    "location": "Austin"
+  },
+  {
+    "emp_id": "emp_0160",
+    "name": "Yan Chen",
+    "email": "yan.chen@acmecorp.com",
+    "department": "Security",
+    "level": "L2",
+    "role": "Penetration Tester",
+    "manager_id": "emp_0154",
+    "status": "offboarded",
+    "date_of_joining": "2020-07-01",
+    "date_of_leaving": "2022-12-15",
+    "is_contractor": false,
+    "phone": "+1-650-556-3389",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0161",
+    "name": "Marco Dubois",
+    "email": "marco.dubois@acmecorp.com",
+    "department": "Security",
+    "level": "L2",
+    "role": "Compliance Analyst",
+    "manager_id": "emp_0155",
+    "status": "active",
+    "date_of_joining": "2022-05-09",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-667-4490",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0162",
+    "name": "Sai Iyer",
+    "email": "sai.iyer@acmecorp.com",
+    "department": "Security",
+    "level": "L1",
+    "role": "Security Analyst I",
+    "manager_id": "emp_0156",
+    "status": "active",
+    "date_of_joining": "2022-08-22",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-778-5501",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0163",
+    "name": "Thomas Robinson",
+    "email": "thomas.robinson@acmecorp.com",
+    "department": "Security",
+    "level": "L1",
+    "role": "SOC Analyst",
+    "manager_id": "emp_0157",
+    "status": "active",
+    "date_of_joining": "2022-12-05",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-889-6612",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0164",
+    "name": "Zhi Wu",
+    "email": "zhi.wu@acmecorp.com",
+    "department": "Security",
+    "level": "L1",
+    "role": "Security Engineer I",
+    "manager_id": "emp_0158",
+    "status": "active",
+    "date_of_joining": "2023-03-20",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-992-7723",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0165",
+    "name": "Sofia Wagner",
+    "email": "sofia.wagner@acmecorp.com",
+    "department": "Security",
+    "level": "L1",
+    "role": "Security Analyst I",
+    "manager_id": "emp_0159",
+    "status": "active",
+    "date_of_joining": "2023-07-03",
+    "date_of_leaving": null,
+    "is_contractor": true,
+    "phone": "+1-415-113-8834",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0166",
+    "name": "Rahul Thakur",
+    "email": "rahul.thakur@acmecorp.com",
+    "department": "Security",
+    "level": "L1",
+    "role": "SOC Analyst",
+    "manager_id": "emp_0156",
+    "status": "active",
+    "date_of_joining": "2023-10-16",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-221-9945",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0167",
+    "name": "Matthew Miller",
+    "email": "matthew.miller@acmecorp.com",
+    "department": "Security",
+    "level": "L1",
+    "role": "Security Engineer I",
+    "manager_id": "emp_0157",
+    "status": "pending",
+    "date_of_joining": "2025-08-15",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-512-334-1156",
+    "location": "Austin"
+  },
+  {
+    "emp_id": "emp_0168",
+    "name": "Xin Liu",
+    "email": "xin.liu@acmecorp.com",
+    "department": "Security",
+    "level": "L1",
+    "role": "Security Analyst I",
+    "manager_id": "emp_0158",
+    "status": "active",
+    "date_of_joining": "2024-02-26",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-445-2267",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0169",
+    "name": "Clara Petrov",
+    "email": "clara.petrov@acmecorp.com",
+    "department": "Security",
+    "level": "L1",
+    "role": "SOC Analyst",
+    "manager_id": "emp_0159",
+    "status": "active",
+    "date_of_joining": "2024-06-10",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-556-3378",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0170",
+    "name": "Nikhil Kumar",
+    "email": "nikhil.kumar@acmecorp.com",
+    "department": "Security",
+    "level": "L1",
+    "role": "Security Engineer I",
+    "manager_id": "emp_0161",
+    "status": "active",
+    "date_of_joining": "2024-09-23",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-667-4489",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0171",
+    "name": "Aarav Patel",
+    "email": "aarav.patel@acmecorp.com",
+    "department": "Engineering",
+    "level": "L1",
+    "role": "Junior Developer",
+    "manager_id": "emp_0012",
+    "status": "active",
+    "date_of_joining": "2024-04-15",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-332-1178",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0172",
+    "name": "Patricia Brown",
+    "email": "patricia.brown@acmecorp.com",
+    "department": "Engineering",
+    "level": "L2",
+    "role": "Software Engineer II",
+    "manager_id": "emp_0009",
+    "status": "active",
+    "date_of_joining": "2022-03-07",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-889-4456",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0173",
+    "name": "Hui Lin",
+    "email": "hui.lin@acmecorp.com",
+    "department": "Engineering",
+    "level": "L1",
+    "role": "Associate Engineer",
+    "manager_id": "emp_0013",
+    "status": "active",
+    "date_of_joining": "2024-07-22",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-334-2289",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0174",
+    "name": "Erik Schulz",
+    "email": "erik.schulz@acmecorp.com",
+    "department": "Product",
+    "level": "L2",
+    "role": "Product Manager",
+    "manager_id": "emp_0035",
+    "status": "active",
+    "date_of_joining": "2022-09-12",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-445-3390",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0175",
+    "name": "Pooja Kumar",
+    "email": "pooja.kumar@acmecorp.com",
+    "department": "Product",
+    "level": "L1",
+    "role": "Product Analyst",
+    "manager_id": "emp_0039",
+    "status": "active",
+    "date_of_joining": "2024-03-18",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-556-4401",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0176",
+    "name": "Brian Martinez",
+    "email": "brian.martinez@acmecorp.com",
+    "department": "Marketing",
+    "level": "L2",
+    "role": "Content Strategist",
+    "manager_id": "emp_0053",
+    "status": "active",
+    "date_of_joining": "2022-11-28",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-667-5512",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0177",
+    "name": "Mei Zhou",
+    "email": "mei.zhou@acmecorp.com",
+    "department": "Marketing",
+    "level": "L1",
+    "role": "Marketing Associate",
+    "manager_id": "emp_0057",
+    "status": "active",
+    "date_of_joining": "2024-05-13",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-778-6623",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0178",
+    "name": "Katarina Moreau",
+    "email": "katarina.moreau@acmecorp.com",
+    "department": "Sales",
+    "level": "L2",
+    "role": "Account Executive II",
+    "manager_id": "emp_0071",
+    "status": "active",
+    "date_of_joining": "2022-08-15",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-889-7734",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0179",
+    "name": "Vivaan Desai",
+    "email": "vivaan.desai@acmecorp.com",
+    "department": "Sales",
+    "level": "L1",
+    "role": "Sales Development Rep",
+    "manager_id": "emp_0075",
+    "status": "active",
+    "date_of_joining": "2024-08-19",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-992-8845",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0180",
+    "name": "Joseph Thomas",
+    "email": "joseph.thomas@acmecorp.com",
+    "department": "Finance",
+    "level": "L2",
+    "role": "Senior Accountant",
+    "manager_id": "emp_0094",
+    "status": "active",
+    "date_of_joining": "2022-07-11",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-113-9956",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0181",
+    "name": "Feng Zhu",
+    "email": "feng.zhu@acmecorp.com",
+    "department": "Finance",
+    "level": "L1",
+    "role": "Accounting Associate",
+    "manager_id": "emp_0099",
+    "status": "active",
+    "date_of_joining": "2024-04-29",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-221-1167",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0182",
+    "name": "Marta Richter",
+    "email": "marta.richter@acmecorp.com",
+    "department": "HR",
+    "level": "L2",
+    "role": "Recruiter",
+    "manager_id": "emp_0113",
+    "status": "active",
+    "date_of_joining": "2022-10-17",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-334-2278",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0183",
+    "name": "Ishaan Singh",
+    "email": "ishaan.singh@acmecorp.com",
+    "department": "HR",
+    "level": "L1",
+    "role": "HR Associate",
+    "manager_id": "emp_0115",
+    "status": "active",
+    "date_of_joining": "2024-06-24",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-445-3389",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0184",
+    "name": "Steven Harris",
+    "email": "steven.harris@acmecorp.com",
+    "department": "Engineering",
+    "level": "L3",
+    "role": "Senior Software Engineer",
+    "manager_id": "emp_0006",
+    "status": "active",
+    "date_of_joining": "2021-04-19",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-512-556-4490",
+    "location": "Austin"
+  },
+  {
+    "emp_id": "emp_0185",
+    "name": "Riya Chopra",
+    "email": "riya.chopra@acmecorp.com",
+    "department": "Engineering",
+    "level": "L2",
+    "role": "Engineer",
+    "manager_id": "emp_0010",
+    "status": "active",
+    "date_of_joining": "2022-06-06",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-667-5501",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0186",
+    "name": "Daniel Jackson",
+    "email": "daniel.jackson@acmecorp.com",
+    "department": "Engineering",
+    "level": "L1",
+    "role": "Software Engineer I",
+    "manager_id": "emp_0014",
+    "status": "active",
+    "date_of_joining": "2024-10-07",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-778-6612",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0187",
+    "name": "Yun Hu",
+    "email": "yun.hu@acmecorp.com",
+    "department": "Product",
+    "level": "L3",
+    "role": "Lead Product Designer",
+    "manager_id": "emp_0033",
+    "status": "active",
+    "date_of_joining": "2021-08-09",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-889-7723",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0188",
+    "name": "Hans Fischer",
+    "email": "hans.fischer@acmecorp.com",
+    "department": "Sales",
+    "level": "L3",
+    "role": "Senior Account Executive",
+    "manager_id": "emp_0069",
+    "status": "active",
+    "date_of_joining": "2021-11-22",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-445-8834",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0189",
+    "name": "Ananya Kumar",
+    "email": "ananya.kumar@acmecorp.com",
+    "department": "Finance",
+    "level": "L3",
+    "role": "Finance Manager",
+    "manager_id": "emp_0092",
+    "status": "active",
+    "date_of_joining": "2021-06-14",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-113-9945",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0190",
+    "name": "Richard Thompson",
+    "email": "richard.thompson@acmecorp.com",
+    "department": "Marketing",
+    "level": "L3",
+    "role": "Senior Marketing Manager",
+    "manager_id": "emp_0051",
+    "status": "active",
+    "date_of_joining": "2021-09-27",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-221-1190",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0191",
+    "name": "Ling Guo",
+    "email": "ling.guo@acmecorp.com",
+    "department": "Engineering",
+    "level": "L4",
+    "role": "Engineering Manager",
+    "manager_id": "emp_0003",
+    "status": "active",
+    "date_of_joining": "2020-05-11",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-334-5501",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0192",
+    "name": "Alexei Johansson",
+    "email": "alexei.johansson@acmecorp.com",
+    "department": "Marketing",
+    "level": "L4",
+    "role": "Marketing Director",
+    "manager_id": "emp_0049",
+    "status": "active",
+    "date_of_joining": "2020-08-17",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-667-6612",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0193",
+    "name": "Priya Mehta",
+    "email": "priya.mehta@acmecorp.com",
+    "department": "Engineering",
+    "level": "L1",
+    "role": "Software Engineer I",
+    "manager_id": "emp_0015",
+    "status": "pending",
+    "date_of_joining": "2025-11-20",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-889-7712",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0194",
+    "name": "Jean Weber",
+    "email": "jean.weber@acmecorp.com",
+    "department": "Data Science",
+    "level": "L3",
+    "role": "Senior ML Engineer",
+    "manager_id": "emp_0127",
+    "status": "active",
+    "date_of_joining": "2021-04-05",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-992-8823",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0195",
+    "name": "Suresh Reddy",
+    "email": "suresh.reddy@acmecorp.com",
+    "department": "Sales",
+    "level": "L1",
+    "role": "Inside Sales Rep",
+    "manager_id": "emp_0078",
+    "status": "offboarded",
+    "date_of_joining": "2022-02-14",
+    "date_of_leaving": "2024-06-30",
+    "is_contractor": false,
+    "phone": "+1-408-113-2234",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0196",
+    "name": "Linda Rodriguez",
+    "email": "linda.rodriguez@acmecorp.com",
+    "department": "Finance",
+    "level": "L1",
+    "role": "Bookkeeper",
+    "manager_id": "emp_0099",
+    "status": "pending",
+    "date_of_joining": "2025-09-15",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-212-334-3345",
+    "location": "New York"
+  },
+  {
+    "emp_id": "emp_0197",
+    "name": "Tao Sun",
+    "email": "tao.sun@acmecorp.com",
+    "department": "HR",
+    "level": "L3",
+    "role": "HR Business Partner",
+    "manager_id": "emp_0110",
+    "status": "active",
+    "date_of_joining": "2021-07-19",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-556-4456",
+    "location": "San Francisco"
+  },
+  {
+    "emp_id": "emp_0198",
+    "name": "Sergio Ferrari",
+    "email": "sergio.ferrari@acmecorp.com",
+    "department": "Security",
+    "level": "L3",
+    "role": "Security Architect",
+    "manager_id": "emp_0152",
+    "status": "active",
+    "date_of_joining": "2021-10-04",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-415-221-5567",
+    "location": "London"
+  },
+  {
+    "emp_id": "emp_0199",
+    "name": "Kavya Sharma",
+    "email": "kavya.sharma@acmecorp.com",
+    "department": "Data Science",
+    "level": "L1",
+    "role": "Data Analyst",
+    "manager_id": "emp_0136",
+    "status": "active",
+    "date_of_joining": "2025-03-10",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-408-334-8856",
+    "location": "Bangalore"
+  },
+  {
+    "emp_id": "emp_0200",
+    "name": "Pablo Schmidt",
+    "email": "pablo.schmidt@acmecorp.com",
+    "department": "Engineering",
+    "level": "L1",
+    "role": "Junior Developer",
+    "manager_id": "emp_0016",
+    "status": "active",
+    "date_of_joining": "2025-05-19",
+    "date_of_leaving": null,
+    "is_contractor": false,
+    "phone": "+1-650-889-9934",
+    "location": "San Francisco"
+  }
+]

server/data/it_assets.json

@@ -0,0 +1,102 @@
+[
+  {"asset_id": "asset_001", "type": "laptop", "brand": "Apple", "model": "MacBook Pro 16 M3", "specs": "16-inch Retina, M3 Pro, 18GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_042", "purchase_date": "2024-03-15", "location": "San Francisco HQ"},
+  {"asset_id": "asset_002", "type": "laptop", "brand": "Apple", "model": "MacBook Pro 14 M3", "specs": "14-inch Retina, M3, 16GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_017", "purchase_date": "2024-06-20", "location": "San Francisco HQ"},
+  {"asset_id": "asset_003", "type": "laptop", "brand": "Dell", "model": "XPS 15 9530", "specs": "15.6-inch OLED, i7-13700H, 32GB RAM, 1TB SSD", "status": "available", "assigned_to": null, "purchase_date": "2024-01-10", "location": "New York Office"},
+  {"asset_id": "asset_004", "type": "laptop", "brand": "Lenovo", "model": "ThinkPad X1 Carbon Gen 11", "specs": "14-inch IPS, i7-1365U, 16GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_003", "purchase_date": "2023-11-05", "location": "Austin Office"},
+  {"asset_id": "asset_005", "type": "laptop", "brand": "Apple", "model": "MacBook Air 15 M3", "specs": "15.3-inch Liquid Retina, M3, 16GB RAM, 256GB SSD", "status": "assigned", "assigned_to": "emp_088", "purchase_date": "2024-07-01", "location": "San Francisco HQ"},
+  {"asset_id": "asset_006", "type": "laptop", "brand": "Dell", "model": "Latitude 5540", "specs": "15.6-inch FHD, i5-1345U, 16GB RAM, 256GB SSD", "status": "available", "assigned_to": null, "purchase_date": "2024-02-18", "location": "Chicago Office"},
+  {"asset_id": "asset_007", "type": "laptop", "brand": "Lenovo", "model": "ThinkPad T14s Gen 4", "specs": "14-inch WUXGA, Ryzen 7 PRO 7840U, 32GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_055", "purchase_date": "2023-09-22", "location": "Austin Office"},
+  {"asset_id": "asset_008", "type": "laptop", "brand": "Apple", "model": "MacBook Pro 16 M3 Max", "specs": "16-inch Liquid Retina XDR, M3 Max, 36GB RAM, 1TB SSD", "status": "assigned", "assigned_to": "emp_012", "purchase_date": "2024-04-10", "location": "San Francisco HQ"},
+  {"asset_id": "asset_009", "type": "laptop", "brand": "HP", "model": "EliteBook 840 G10", "specs": "14-inch FHD, i7-1365U, 16GB RAM, 512GB SSD", "status": "available", "assigned_to": null, "purchase_date": "2024-05-14", "location": "New York Office"},
+  {"asset_id": "asset_010", "type": "laptop", "brand": "Dell", "model": "XPS 13 Plus 9320", "specs": "13.4-inch OLED, i7-1360P, 16GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_031", "purchase_date": "2023-12-01", "location": "Chicago Office"},
+  {"asset_id": "asset_011", "type": "laptop", "brand": "Apple", "model": "MacBook Pro 14 M3 Pro", "specs": "14-inch Liquid Retina XDR, M3 Pro, 18GB RAM, 1TB SSD", "status": "assigned", "assigned_to": "emp_067", "purchase_date": "2024-08-05", "location": "San Francisco HQ"},
+  {"asset_id": "asset_012", "type": "laptop", "brand": "Lenovo", "model": "ThinkPad X1 Yoga Gen 8", "specs": "14-inch WUXGA Touch, i7-1365U, 16GB RAM, 512GB SSD", "status": "maintenance", "assigned_to": null, "purchase_date": "2023-06-15", "location": "Austin Office"},
+  {"asset_id": "asset_013", "type": "laptop", "brand": "Dell", "model": "Precision 5680", "specs": "16-inch FHD+, i9-13900H, 64GB RAM, 2TB SSD, RTX 3500", "status": "assigned", "assigned_to": "emp_008", "purchase_date": "2024-01-25", "location": "San Francisco HQ"},
+  {"asset_id": "asset_014", "type": "laptop", "brand": "HP", "model": "ZBook Studio G10", "specs": "16-inch DreamColor, i9-13900H, 64GB RAM, 2TB SSD, RTX 4080", "status": "assigned", "assigned_to": "emp_022", "purchase_date": "2023-10-30", "location": "New York Office"},
+  {"asset_id": "asset_015", "type": "laptop", "brand": "Apple", "model": "MacBook Air 13 M3", "specs": "13.6-inch Liquid Retina, M3, 8GB RAM, 256GB SSD", "status": "available", "assigned_to": null, "purchase_date": "2024-09-12", "location": "Chicago Office"},
+  {"asset_id": "asset_016", "type": "laptop", "brand": "Lenovo", "model": "ThinkPad P16s Gen 2", "specs": "16-inch WQXGA, i7-1360P, 32GB RAM, 1TB SSD", "status": "assigned", "assigned_to": "emp_044", "purchase_date": "2024-03-08", "location": "Austin Office"},
+  {"asset_id": "asset_017", "type": "laptop", "brand": "Dell", "model": "Latitude 7440", "specs": "14-inch FHD+, i7-1365U, 16GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_071", "purchase_date": "2023-08-19", "location": "San Francisco HQ"},
+  {"asset_id": "asset_018", "type": "laptop", "brand": "Apple", "model": "MacBook Pro 16 M3 Pro", "specs": "16-inch Liquid Retina XDR, M3 Pro, 36GB RAM, 512GB SSD", "status": "retired", "assigned_to": null, "purchase_date": "2022-04-20", "location": "San Francisco HQ"},
+  {"asset_id": "asset_019", "type": "laptop", "brand": "HP", "model": "EliteBook 1040 G10", "specs": "14-inch WUXGA, i7-1365U, 32GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_033", "purchase_date": "2024-02-28", "location": "New York Office"},
+  {"asset_id": "asset_020", "type": "laptop", "brand": "Lenovo", "model": "ThinkPad X13 Gen 4", "specs": "13.3-inch WUXGA, i5-1345U, 16GB RAM, 256GB SSD", "status": "available", "assigned_to": null, "purchase_date": "2024-07-22", "location": "Chicago Office"},
+  {"asset_id": "asset_021", "type": "laptop", "brand": "Dell", "model": "XPS 17 9730", "specs": "17-inch UHD+, i7-13700H, 32GB RAM, 1TB SSD, RTX 4070", "status": "assigned", "assigned_to": "emp_005", "purchase_date": "2023-12-15", "location": "San Francisco HQ"},
+  {"asset_id": "asset_022", "type": "laptop", "brand": "Apple", "model": "MacBook Pro 14 M3", "specs": "14-inch Liquid Retina XDR, M3, 16GB RAM, 1TB SSD", "status": "assigned", "assigned_to": "emp_092", "purchase_date": "2024-05-30", "location": "Austin Office"},
+  {"asset_id": "asset_023", "type": "laptop", "brand": "Lenovo", "model": "ThinkPad T16 Gen 2", "specs": "16-inch WUXGA, i7-1360P, 16GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_019", "purchase_date": "2024-01-05", "location": "New York Office"},
+  {"asset_id": "asset_024", "type": "laptop", "brand": "HP", "model": "ProBook 450 G10", "specs": "15.6-inch FHD, i5-1335U, 16GB RAM, 256GB SSD", "status": "available", "assigned_to": null, "purchase_date": "2024-08-18", "location": "Chicago Office"},
+  {"asset_id": "asset_025", "type": "laptop", "brand": "Dell", "model": "Latitude 9440 2-in-1", "specs": "14-inch QHD+ Touch, i7-1365U, 32GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_061", "purchase_date": "2023-11-20", "location": "San Francisco HQ"},
+  {"asset_id": "asset_026", "type": "laptop", "brand": "Apple", "model": "MacBook Pro 16 M3", "specs": "16-inch Liquid Retina XDR, M3 Pro, 18GB RAM, 1TB SSD", "status": "assigned", "assigned_to": "emp_037", "purchase_date": "2024-04-25", "location": "Austin Office"},
+  {"asset_id": "asset_027", "type": "laptop", "brand": "Lenovo", "model": "ThinkPad X1 Carbon Gen 11", "specs": "14-inch WQUXGA, i7-1365U, 32GB RAM, 1TB SSD", "status": "retired", "assigned_to": null, "purchase_date": "2021-09-10", "location": "New York Office"},
+  {"asset_id": "asset_028", "type": "laptop", "brand": "Dell", "model": "Precision 7680", "specs": "16-inch FHD+, i9-13950HX, 128GB RAM, 4TB SSD, RTX 5000", "status": "assigned", "assigned_to": "emp_002", "purchase_date": "2024-06-01", "location": "San Francisco HQ"},
+  {"asset_id": "asset_029", "type": "laptop", "brand": "HP", "model": "EliteBook 860 G10", "specs": "16-inch WUXGA, i7-1365U, 16GB RAM, 512GB SSD", "status": "available", "assigned_to": null, "purchase_date": "2024-09-05", "location": "Chicago Office"},
+  {"asset_id": "asset_030", "type": "laptop", "brand": "Apple", "model": "MacBook Air 15 M3", "specs": "15.3-inch Liquid Retina, M3, 24GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_078", "purchase_date": "2024-07-15", "location": "San Francisco HQ"},
+  {"asset_id": "asset_031", "type": "laptop", "brand": "Lenovo", "model": "ThinkPad P14s Gen 4", "specs": "14-inch WUXGA, Ryzen 7 PRO 7840U, 32GB RAM, 1TB SSD", "status": "assigned", "assigned_to": "emp_049", "purchase_date": "2024-02-10", "location": "Austin Office"},
+  {"asset_id": "asset_032", "type": "laptop", "brand": "Dell", "model": "XPS 15 9530", "specs": "15.6-inch FHD+, i7-13700H, 16GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_084", "purchase_date": "2023-10-08", "location": "New York Office"},
+  {"asset_id": "asset_033", "type": "laptop", "brand": "Apple", "model": "MacBook Pro 14 M3 Pro", "specs": "14-inch Liquid Retina XDR, M3 Pro, 36GB RAM, 1TB SSD", "status": "available", "assigned_to": null, "purchase_date": "2024-10-01", "location": "San Francisco HQ"},
+  {"asset_id": "asset_034", "type": "laptop", "brand": "HP", "model": "ZBook Firefly 14 G10", "specs": "14-inch FHD, i7-1365U, 32GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_025", "purchase_date": "2024-03-20", "location": "Chicago Office"},
+  {"asset_id": "asset_035", "type": "laptop", "brand": "Lenovo", "model": "ThinkPad X1 Nano Gen 3", "specs": "13-inch 2K, i7-1360P, 16GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_056", "purchase_date": "2023-07-12", "location": "Austin Office"},
+  {"asset_id": "asset_036", "type": "laptop", "brand": "Dell", "model": "Latitude 5440", "specs": "14-inch FHD, i5-1345U, 16GB RAM, 256GB SSD", "status": "available", "assigned_to": null, "purchase_date": "2024-08-28", "location": "New York Office"},
+  {"asset_id": "asset_037", "type": "laptop", "brand": "Apple", "model": "MacBook Pro 16 M3 Max", "specs": "16-inch Liquid Retina XDR, M3 Max, 48GB RAM, 2TB SSD", "status": "assigned", "assigned_to": "emp_001", "purchase_date": "2024-05-05", "location": "San Francisco HQ"},
+  {"asset_id": "asset_038", "type": "laptop", "brand": "Lenovo", "model": "ThinkPad T14 Gen 4", "specs": "14-inch WUXGA, i7-1360P, 16GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_063", "purchase_date": "2024-01-18", "location": "Chicago Office"},
+  {"asset_id": "asset_039", "type": "laptop", "brand": "HP", "model": "EliteBook 640 G10", "specs": "14-inch FHD, i5-1345U, 16GB RAM, 256GB SSD", "status": "maintenance", "assigned_to": null, "purchase_date": "2023-05-22", "location": "Austin Office"},
+  {"asset_id": "asset_040", "type": "laptop", "brand": "Dell", "model": "XPS 13 9340", "specs": "13.4-inch FHD+, i7-1360P, 16GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_076", "purchase_date": "2024-06-14", "location": "San Francisco HQ"},
+  {"asset_id": "asset_041", "type": "laptop", "brand": "Apple", "model": "MacBook Air 13 M3", "specs": "13.6-inch Liquid Retina, M3, 16GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_098", "purchase_date": "2024-09-20", "location": "New York Office"},
+  {"asset_id": "asset_042", "type": "laptop", "brand": "Lenovo", "model": "ThinkPad X1 Carbon Gen 11", "specs": "14-inch WUXGA, i5-1345U, 16GB RAM, 256GB SSD", "status": "available", "assigned_to": null, "purchase_date": "2024-04-02", "location": "Chicago Office"},
+  {"asset_id": "asset_043", "type": "laptop", "brand": "Dell", "model": "Precision 5570", "specs": "15.6-inch UHD+, i7-12800H, 32GB RAM, 1TB SSD, RTX A2000", "status": "retired", "assigned_to": null, "purchase_date": "2022-01-15", "location": "San Francisco HQ"},
+  {"asset_id": "asset_044", "type": "laptop", "brand": "HP", "model": "ZBook Studio G10", "specs": "16-inch WQUXGA, i7-13700H, 32GB RAM, 1TB SSD, RTX 4070", "status": "assigned", "assigned_to": "emp_014", "purchase_date": "2024-02-05", "location": "Austin Office"},
+  {"asset_id": "asset_045", "type": "laptop", "brand": "Apple", "model": "MacBook Pro 14 M3", "specs": "14-inch Liquid Retina XDR, M3, 16GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_039", "purchase_date": "2024-07-08", "location": "New York Office"},
+  {"asset_id": "asset_046", "type": "laptop", "brand": "Lenovo", "model": "ThinkPad L14 Gen 4", "specs": "14-inch FHD, Ryzen 5 PRO 7530U, 16GB RAM, 256GB SSD", "status": "available", "assigned_to": null, "purchase_date": "2024-10-10", "location": "Chicago Office"},
+  {"asset_id": "asset_047", "type": "laptop", "brand": "Dell", "model": "Latitude 7340", "specs": "13.3-inch FHD+, i7-1365U, 16GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_051", "purchase_date": "2023-09-05", "location": "San Francisco HQ"},
+  {"asset_id": "asset_048", "type": "laptop", "brand": "Apple", "model": "MacBook Pro 16 M3 Pro", "specs": "16-inch Liquid Retina XDR, M3 Pro, 18GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_082", "purchase_date": "2024-05-18", "location": "Austin Office"},
+  {"asset_id": "asset_049", "type": "laptop", "brand": "HP", "model": "EliteBook 845 G10", "specs": "14-inch WUXGA, Ryzen 7 PRO 7840U, 16GB RAM, 512GB SSD", "status": "assigned", "assigned_to": "emp_027", "purchase_date": "2024-03-28", "location": "New York Office"},
+  {"asset_id": "asset_050", "type": "laptop", "brand": "Lenovo", "model": "ThinkPad X1 Extreme Gen 5", "specs": "16-inch WQUXGA, i9-12900H, 64GB RAM, 2TB SSD, RTX 3080 Ti", "status": "retired", "assigned_to": null, "purchase_date": "2022-06-30", "location": "San Francisco HQ"},
+  {"asset_id": "asset_051", "type": "monitor", "brand": "Dell", "model": "UltraSharp U2723QE", "specs": "27-inch 4K IPS, USB-C Hub, 60Hz", "status": "assigned", "assigned_to": "emp_042", "purchase_date": "2024-03-15", "location": "San Francisco HQ"},
+  {"asset_id": "asset_052", "type": "monitor", "brand": "LG", "model": "UltraFine 5K 27MD5KL", "specs": "27-inch 5K IPS, Thunderbolt 3, P3 Wide Color", "status": "assigned", "assigned_to": "emp_012", "purchase_date": "2024-04-10", "location": "San Francisco HQ"},
+  {"asset_id": "asset_053", "type": "monitor", "brand": "Samsung", "model": "ViewFinity S9 S90PC", "specs": "27-inch 5K IPS, USB-C, Matte Display", "status": "available", "assigned_to": null, "purchase_date": "2024-08-01", "location": "New York Office"},
+  {"asset_id": "asset_054", "type": "monitor", "brand": "Dell", "model": "UltraSharp U3423WE", "specs": "34-inch WQHD Curved IPS, USB-C Hub, 60Hz", "status": "assigned", "assigned_to": "emp_003", "purchase_date": "2023-11-05", "location": "Austin Office"},
+  {"asset_id": "asset_055", "type": "monitor", "brand": "LG", "model": "UltraWide 34WN80C", "specs": "34-inch WQHD IPS, USB-C, HDR10", "status": "assigned", "assigned_to": "emp_055", "purchase_date": "2023-09-22", "location": "Austin Office"},
+  {"asset_id": "asset_056", "type": "monitor", "brand": "Apple", "model": "Studio Display", "specs": "27-inch 5K Retina, Thunderbolt 3, 12MP Camera", "status": "assigned", "assigned_to": "emp_001", "purchase_date": "2024-05-05", "location": "San Francisco HQ"},
+  {"asset_id": "asset_057", "type": "monitor", "brand": "Dell", "model": "P2422H", "specs": "24-inch FHD IPS, HDMI/DP/VGA, 60Hz", "status": "available", "assigned_to": null, "purchase_date": "2024-06-20", "location": "Chicago Office"},
+  {"asset_id": "asset_058", "type": "monitor", "brand": "HP", "model": "Z27k G3 4K", "specs": "27-inch 4K IPS, USB-C, Thunderbolt 4", "status": "assigned", "assigned_to": "emp_022", "purchase_date": "2023-10-30", "location": "New York Office"},
+  {"asset_id": "asset_059", "type": "monitor", "brand": "LG", "model": "UltraFine 4K 27UQ850", "specs": "27-inch 4K IPS, USB-C, HDR400", "status": "assigned", "assigned_to": "emp_017", "purchase_date": "2024-06-20", "location": "San Francisco HQ"},
+  {"asset_id": "asset_060", "type": "monitor", "brand": "Dell", "model": "UltraSharp U2422H", "specs": "24-inch FHD IPS, USB-C Hub, 60Hz", "status": "available", "assigned_to": null, "purchase_date": "2024-09-15", "location": "Austin Office"},
+  {"asset_id": "asset_061", "type": "monitor", "brand": "Samsung", "model": "Smart Monitor M8 S32BM", "specs": "32-inch 4K VA, USB-C, Smart TV Features", "status": "assigned", "assigned_to": "emp_067", "purchase_date": "2024-08-05", "location": "San Francisco HQ"},
+  {"asset_id": "asset_062", "type": "monitor", "brand": "LG", "model": "DualUp 28MQ780", "specs": "27.6-inch SDQHD IPS, USB-C, Nano IPS", "status": "assigned", "assigned_to": "emp_008", "purchase_date": "2024-01-25", "location": "San Francisco HQ"},
+  {"asset_id": "asset_063", "type": "monitor", "brand": "Dell", "model": "UltraSharp U4924DW", "specs": "49-inch DQHD Curved IPS, USB-C, KVM", "status": "assigned", "assigned_to": "emp_002", "purchase_date": "2024-06-01", "location": "San Francisco HQ"},
+  {"asset_id": "asset_064", "type": "monitor", "brand": "HP", "model": "E27 G5 FHD", "specs": "27-inch FHD IPS, HDMI/DP, 60Hz", "status": "available", "assigned_to": null, "purchase_date": "2024-10-05", "location": "New York Office"},
+  {"asset_id": "asset_065", "type": "monitor", "brand": "LG", "model": "UltraWide 40WP95C", "specs": "39.7-inch 5K2K IPS, Thunderbolt 4, Nano IPS", "status": "assigned", "assigned_to": "emp_005", "purchase_date": "2023-12-15", "location": "San Francisco HQ"},
+  {"asset_id": "asset_066", "type": "monitor", "brand": "Dell", "model": "S2722QC", "specs": "27-inch 4K IPS, USB-C, 60Hz", "status": "assigned", "assigned_to": "emp_044", "purchase_date": "2024-03-08", "location": "Austin Office"},
+  {"asset_id": "asset_067", "type": "monitor", "brand": "Samsung", "model": "ViewFinity S8 S80UA", "specs": "32-inch 4K VA, USB-C, HDR10", "status": "available", "assigned_to": null, "purchase_date": "2024-07-30", "location": "Chicago Office"},
+  {"asset_id": "asset_068", "type": "monitor", "brand": "Apple", "model": "Pro Display XDR", "specs": "32-inch 6K Retina, Thunderbolt 3, XDR, P3 Wide Color", "status": "assigned", "assigned_to": "emp_014", "purchase_date": "2024-02-05", "location": "Austin Office"},
+  {"asset_id": "asset_069", "type": "monitor", "brand": "Dell", "model": "P2723QE", "specs": "27-inch 4K IPS, USB-C Hub, 60Hz", "status": "assigned", "assigned_to": "emp_031", "purchase_date": "2023-12-01", "location": "Chicago Office"},
+  {"asset_id": "asset_070", "type": "monitor", "brand": "HP", "model": "Z24f G3 FHD", "specs": "24-inch FHD IPS, HDMI/DP, 60Hz", "status": "available", "assigned_to": null, "purchase_date": "2024-11-01", "location": "New York Office"},
+  {"asset_id": "asset_071", "type": "monitor", "brand": "LG", "model": "27UP850N", "specs": "27-inch 4K IPS, USB-C, DCI-P3 95%", "status": "assigned", "assigned_to": "emp_049", "purchase_date": "2024-02-10", "location": "Austin Office"},
+  {"asset_id": "asset_072", "type": "monitor", "brand": "Dell", "model": "UltraSharp U2723QE", "specs": "27-inch 4K IPS, USB-C Hub, 60Hz", "status": "available", "assigned_to": null, "purchase_date": "2024-09-28", "location": "San Francisco HQ"},
+  {"asset_id": "asset_073", "type": "monitor", "brand": "Samsung", "model": "Odyssey G7 S28AG70", "specs": "28-inch 4K IPS, 144Hz, G-Sync Compatible", "status": "assigned", "assigned_to": "emp_025", "purchase_date": "2024-03-20", "location": "Chicago Office"},
+  {"asset_id": "asset_074", "type": "monitor", "brand": "LG", "model": "UltraGear 27GP950", "specs": "27-inch 4K Nano IPS, 160Hz, HDMI 2.1", "status": "assigned", "assigned_to": "emp_056", "purchase_date": "2023-07-12", "location": "Austin Office"},
+  {"asset_id": "asset_075", "type": "monitor", "brand": "Dell", "model": "P2723D", "specs": "27-inch QHD IPS, USB-C, 60Hz", "status": "maintenance", "assigned_to": null, "purchase_date": "2023-03-18", "location": "New York Office"},
+  {"asset_id": "asset_076", "type": "phone", "brand": "Apple", "model": "iPhone 15 Pro", "specs": "6.1-inch, A17 Pro, 256GB, 5G", "status": "assigned", "assigned_to": "emp_001", "purchase_date": "2024-05-05", "location": "San Francisco HQ"},
+  {"asset_id": "asset_077", "type": "phone", "brand": "Apple", "model": "iPhone 15", "specs": "6.1-inch, A16, 128GB, 5G", "status": "assigned", "assigned_to": "emp_012", "purchase_date": "2024-04-10", "location": "San Francisco HQ"},
+  {"asset_id": "asset_078", "type": "phone", "brand": "Samsung", "model": "Galaxy S24 Ultra", "specs": "6.8-inch, Snapdragon 8 Gen 3, 256GB, 5G", "status": "assigned", "assigned_to": "emp_003", "purchase_date": "2024-02-15", "location": "Austin Office"},
+  {"asset_id": "asset_079", "type": "phone", "brand": "Apple", "model": "iPhone 15 Pro Max", "specs": "6.7-inch, A17 Pro, 512GB, 5G", "status": "available", "assigned_to": null, "purchase_date": "2024-09-25", "location": "New York Office"},
+  {"asset_id": "asset_080", "type": "phone", "brand": "Google", "model": "Pixel 8 Pro", "specs": "6.7-inch, Tensor G3, 128GB, 5G", "status": "assigned", "assigned_to": "emp_055", "purchase_date": "2024-01-10", "location": "Austin Office"},
+  {"asset_id": "asset_081", "type": "phone", "brand": "Apple", "model": "iPhone 14", "specs": "6.1-inch, A15, 128GB, 5G", "status": "assigned", "assigned_to": "emp_033", "purchase_date": "2023-06-20", "location": "New York Office"},
+  {"asset_id": "asset_082", "type": "phone", "brand": "Samsung", "model": "Galaxy S24", "specs": "6.2-inch, Exynos 2400, 128GB, 5G", "status": "available", "assigned_to": null, "purchase_date": "2024-10-15", "location": "Chicago Office"},
+  {"asset_id": "asset_083", "type": "phone", "brand": "Apple", "model": "iPhone 15 Pro", "specs": "6.1-inch, A17 Pro, 128GB, 5G", "status": "assigned", "assigned_to": "emp_067", "purchase_date": "2024-08-05", "location": "San Francisco HQ"},
+  {"asset_id": "asset_084", "type": "phone", "brand": "Google", "model": "Pixel 8", "specs": "6.2-inch, Tensor G3, 128GB, 5G", "status": "assigned", "assigned_to": "emp_044", "purchase_date": "2024-03-08", "location": "Austin Office"},
+  {"asset_id": "asset_085", "type": "phone", "brand": "Apple", "model": "iPhone 15", "specs": "6.1-inch, A16, 256GB, 5G", "status": "available", "assigned_to": null, "purchase_date": "2024-11-01", "location": "San Francisco HQ"},
+  {"asset_id": "asset_086", "type": "phone", "brand": "Samsung", "model": "Galaxy Z Fold5", "specs": "7.6-inch Foldable, Snapdragon 8 Gen 2, 256GB, 5G", "status": "assigned", "assigned_to": "emp_005", "purchase_date": "2023-12-15", "location": "San Francisco HQ"},
+  {"asset_id": "asset_087", "type": "phone", "brand": "Apple", "model": "iPhone 14 Pro", "specs": "6.1-inch, A16, 256GB, 5G", "status": "retired", "assigned_to": null, "purchase_date": "2022-10-05", "location": "New York Office"},
+  {"asset_id": "asset_088", "type": "phone", "brand": "Google", "model": "Pixel 7a", "specs": "6.1-inch, Tensor G2, 128GB, 5G", "status": "assigned", "assigned_to": "emp_071", "purchase_date": "2023-08-19", "location": "San Francisco HQ"},
+  {"asset_id": "asset_089", "type": "phone", "brand": "Apple", "model": "iPhone 15 Pro", "specs": "6.1-inch, A17 Pro, 256GB, 5G", "status": "assigned", "assigned_to": "emp_022", "purchase_date": "2024-01-20", "location": "New York Office"},
+  {"asset_id": "asset_090", "type": "phone", "brand": "Samsung", "model": "Galaxy S23", "specs": "6.1-inch, Snapdragon 8 Gen 2, 128GB, 5G", "status": "available", "assigned_to": null, "purchase_date": "2024-07-10", "location": "Chicago Office"},
+  {"asset_id": "asset_091", "type": "headset", "brand": "Jabra", "model": "Evolve2 85", "specs": "ANC, Bluetooth 5.1, USB-C, 37hr battery", "status": "assigned", "assigned_to": "emp_042", "purchase_date": "2024-03-15", "location": "San Francisco HQ"},
+  {"asset_id": "asset_092", "type": "headset", "brand": "Poly", "model": "Voyager Focus 2", "specs": "ANC, Bluetooth 5.1, USB-A, 19hr battery", "status": "assigned", "assigned_to": "emp_017", "purchase_date": "2024-06-20", "location": "San Francisco HQ"},
+  {"asset_id": "asset_093", "type": "headset", "brand": "Sony", "model": "WH-1000XM5", "specs": "ANC, Bluetooth 5.2, LDAC, 30hr battery", "status": "available", "assigned_to": null, "purchase_date": "2024-08-10", "location": "New York Office"},
+  {"asset_id": "asset_094", "type": "headset", "brand": "Jabra", "model": "Evolve2 75", "specs": "ANC, Bluetooth 5.2, USB-C, 36hr battery", "status": "assigned", "assigned_to": "emp_003", "purchase_date": "2023-11-05", "location": "Austin Office"},
+  {"asset_id": "asset_095", "type": "headset", "brand": "Bose", "model": "QuietComfort Ultra", "specs": "ANC, Bluetooth 5.3, Spatial Audio, 24hr battery", "status": "assigned", "assigned_to": "emp_012", "purchase_date": "2024-04-10", "location": "San Francisco HQ"},
+  {"asset_id": "asset_096", "type": "headset", "brand": "Poly", "model": "Blackwire 5220", "specs": "Wired USB-C/3.5mm, Inline Controls, Noise Cancelling Mic", "status": "available", "assigned_to": null, "purchase_date": "2024-09-18", "location": "Chicago Office"},
+  {"asset_id": "asset_097", "type": "headset", "brand": "Jabra", "model": "Engage 50 II", "specs": "Wired USB-C, Super Wideband, Busylight", "status": "assigned", "assigned_to": "emp_055", "purchase_date": "2023-09-22", "location": "Austin Office"},
+  {"asset_id": "asset_098", "type": "headset", "brand": "Sony", "model": "WH-1000XM4", "specs": "ANC, Bluetooth 5.0, LDAC, 30hr battery", "status": "maintenance", "assigned_to": null, "purchase_date": "2023-02-14", "location": "New York Office"},
+  {"asset_id": "asset_099", "type": "headset", "brand": "Bose", "model": "700 UC", "specs": "ANC, Bluetooth 5.0, USB-A, 20hr battery", "status": "assigned", "assigned_to": "emp_008", "purchase_date": "2024-01-25", "location": "San Francisco HQ"},
+  {"asset_id": "asset_100", "type": "headset", "brand": "Jabra", "model": "Evolve2 55", "specs": "ANC, Bluetooth 5.2, USB-C, 16hr battery", "status": "assigned", "assigned_to": "emp_067", "purchase_date": "2024-08-05", "location": "San Francisco HQ"}
+]

server/data/policies.json

@@ -0,0 +1,288 @@
+{
+  "policies": [
+    {
+      "policy_id": "pol_001",
+      "title": "Onboarding Policy",
+      "department": "all",
+      "content": "All new hires must complete the onboarding process within 5 business days of their start date. The onboarding workflow is initiated automatically upon offer acceptance and must follow the department-specific step sequence without skipping or reordering steps. Failure to complete onboarding within the allotted window triggers an escalation to the department head and HR Business Partner.\n\nEach new hire must be assigned a designated onboarding buddy within their department before their first day. The buddy is responsible for guiding the new employee through cultural integration, tool setup verification, and initial project context. Managers must confirm onboarding completion in the HRIS system within 24 hours of the final step being finished.\n\nAll onboarding documentation, including signed NDAs, tax forms, and equipment receipts, must be uploaded to the employee's digital file in Workday before the end of the first week. Incomplete documentation will result in a hold on system access provisioning until resolved.",
+      "last_updated": "2025-11-15",
+      "key_rules": [
+        "onboarding_deadline_business_days: 5",
+        "buddy_assignment_required: true",
+        "buddy_must_be_same_department: true",
+        "manager_confirmation_deadline_hours: 24",
+        "documentation_upload_deadline: end_of_first_week",
+        "incomplete_docs_blocks_access: true",
+        "steps_must_follow_sequence: true"
+      ]
+    },
+    {
+      "policy_id": "pol_002",
+      "title": "Offboarding Policy",
+      "department": "all",
+      "content": "The offboarding process must be initiated within 24 hours of a resignation or termination decision. For voluntary departures, the standard notice period is 15 business days. For involuntary terminations, system access must be revoked within 2 hours of the termination meeting. All offboarding steps must be completed within 3 business days of the employee's last working day.\n\nThe departing employee's manager is responsible for ensuring knowledge transfer is completed before the last day. A knowledge transfer checklist must be signed off by both the manager and a designated knowledge recipient. Any company intellectual property, code, documents, or data on personal devices must be verified as deleted or returned.\n\nThe final paycheck, including any accrued PTO, must be processed within the pay period following the last working day. Exit interviews are mandatory for all full-time employees and must be conducted by an HR representative who is not the employee's direct HR Business Partner to ensure objectivity.",
+      "last_updated": "2025-12-01",
+      "key_rules": [
+        "offboarding_initiation_deadline_hours: 24",
+        "voluntary_notice_period_business_days: 15",
+        "involuntary_access_revocation_hours: 2",
+        "offboarding_completion_deadline_business_days: 3",
+        "knowledge_transfer_signoff_required: true",
+        "exit_interview_mandatory: true",
+        "exit_interview_conducted_by: independent_hr_representative"
+      ]
+    },
+    {
+      "policy_id": "pol_003",
+      "title": "Remote Work Policy",
+      "department": "all",
+      "content": "Employees at level L3 and above are eligible for fully remote work arrangements with manager approval. L1 and L2 employees must work on-site for a minimum of 3 days per week during their first 6 months, after which they may request remote work privileges. Remote work requests must be submitted through the HRIS system and approved by both the direct manager and department head.\n\nRemote employees must maintain a secure home office environment that meets the company's information security standards. This includes using a company-approved VPN at all times, ensuring a private workspace for confidential calls, and maintaining a reliable internet connection with a minimum speed of 50 Mbps download. Equipment provided for remote work remains company property and must be returned upon offboarding.\n\nInternational remote work is permitted for up to 30 calendar days per year with prior VP-level approval and tax compliance review by the Finance team. Employees working remotely from a different state for more than 14 consecutive days must notify HR for tax withholding adjustments.",
+      "last_updated": "2025-10-20",
+      "key_rules": [
+        "remote_eligible_level: L3+",
+        "junior_onsite_minimum_days: 3",
+        "junior_onsite_period_months: 6",
+        "vpn_required: true",
+        "minimum_internet_speed_mbps: 50",
+        "international_remote_max_days: 30",
+        "international_remote_approval_level: VP",
+        "state_change_notification_threshold_days: 14"
+      ]
+    },
+    {
+      "policy_id": "pol_004",
+      "title": "Equipment Return Policy",
+      "department": "all",
+      "content": "All company-issued equipment must be returned within 5 business days of an employee's last working day. Equipment includes but is not limited to laptops, monitors, keyboards, mice, headsets, security hardware tokens, and mobile devices. Remote employees will receive a prepaid shipping label and packaging materials via email on their last day.\n\nEquipment must be returned in working condition. Normal wear and tear is expected, but damage resulting from negligence or misuse may result in a deduction from the final paycheck, up to the replacement cost of the item. The IT department will conduct a condition assessment within 48 hours of receiving returned equipment and document findings in the asset management system.\n\nFailure to return equipment within the specified window will trigger an escalation process: a reminder email at day 3, a formal notice at day 5, a payroll deduction notice at day 10, and legal action for equipment valued over $1,000 if not returned within 30 days. Employees who return all equipment on or before their last day are eligible for the \"clean exit\" expedited reference process.",
+      "last_updated": "2025-09-30",
+      "key_rules": [
+        "return_deadline_business_days: 5",
+        "condition_assessment_deadline_hours: 48",
+        "reminder_email_day: 3",
+        "formal_notice_day: 5",
+        "payroll_deduction_notice_day: 10",
+        "legal_action_threshold_value: 1000",
+        "legal_action_deadline_days: 30",
+        "clean_exit_incentive: true"
+      ]
+    },
+    {
+      "policy_id": "pol_005",
+      "title": "Data Access Policy",
+      "department": "all",
+      "content": "Data access is granted on a strict need-to-know basis following the principle of least privilege. Access levels are categorized into four tiers: Public (Tier 1), Internal (Tier 2), Confidential (Tier 3), and Restricted (Tier 4). Tier 1 and Tier 2 access is provisioned automatically during onboarding based on department assignment. Tier 3 access requires manager approval and a completed data handling training certification. Tier 4 access requires VP-level approval, security team review, and a signed data access agreement.\n\nAll data access permissions are reviewed quarterly as part of the access recertification process. Managers must confirm or revoke access for each direct report within 10 business days of the review notification. Unconfirmed access is automatically revoked after the review window closes. Any access anomalies detected by the security team trigger an immediate investigation.\n\nUpon offboarding, all data access must be revoked within 1 hour for Tier 4, 4 hours for Tier 3, and 24 hours for Tier 1 and Tier 2. Data downloads exceeding 500 MB within 7 days of a resignation notice trigger an automatic alert to the security team for review.",
+      "last_updated": "2026-01-10",
+      "key_rules": [
+        "access_model: least_privilege",
+        "tier3_requires_manager_approval: true",
+        "tier3_requires_data_handling_training: true",
+        "tier4_requires_vp_approval: true",
+        "tier4_requires_security_review: true",
+        "quarterly_access_review: true",
+        "review_confirmation_deadline_business_days: 10",
+        "offboarding_tier4_revocation_hours: 1",
+        "offboarding_tier3_revocation_hours: 4",
+        "offboarding_tier1_tier2_revocation_hours: 24",
+        "download_alert_threshold_mb: 500",
+        "download_alert_window_days: 7"
+      ]
+    },
+    {
+      "policy_id": "pol_006",
+      "title": "Contractor Policy",
+      "department": "all",
+      "content": "Contractors may be engaged for a maximum duration of 12 months per engagement. Extensions beyond 12 months require VP-level approval and a written justification demonstrating why the role cannot be converted to a full-time position. No contractor may work for the company for more than 18 cumulative months within any 24-month period to maintain compliance with labor classification regulations.\n\nContractors are issued limited-access credentials that restrict them to project-specific tools and data. Contractors may not be granted Tier 3 or Tier 4 data access under any circumstances. All contractor accounts are provisioned with an automatic expiration date matching their contract end date. Contractor onboarding follows the same department-specific steps as full-time employees, with the exception of benefits enrollment and equity grant steps.\n\nContractor rate approvals follow a tiered structure: engagements under $100/hour require manager approval, $100-$200/hour require director approval, and over $200/hour require VP approval. All contractor invoices must be submitted through the procurement system and approved by the engaging manager within 5 business days.",
+      "last_updated": "2025-11-01",
+      "key_rules": [
+        "contractor_max_duration_months: 12",
+        "extension_approval_level: VP",
+        "max_cumulative_months_in_24: 18",
+        "contractor_max_data_tier: 2",
+        "auto_expiration_enabled: true",
+        "rate_approval_under_100: manager",
+        "rate_approval_100_to_200: director",
+        "rate_approval_over_200: VP",
+        "invoice_approval_deadline_business_days: 5"
+      ]
+    },
+    {
+      "policy_id": "pol_007",
+      "title": "Termination Policy",
+      "department": "all",
+      "content": "Involuntary terminations must be approved through a multi-level review process before execution. The termination request must be initiated by the direct manager, reviewed by the HR Business Partner, approved by the department head, and given final authorization by the VP of HR. For employees at L5 or above, CEO approval is additionally required. The entire approval chain must be completed within 5 business days of initiation.\n\nPerformance-based terminations require documented evidence of at least two performance improvement plan (PIP) cycles, each lasting a minimum of 30 days, unless the termination is for cause (policy violation, misconduct, or illegal activity). Terminations for cause may bypass the PIP requirement but still require the full approval chain. All termination documentation must be retained for a minimum of 7 years.\n\nSeverance packages are offered based on tenure: employees with less than 1 year receive 2 weeks of base pay, 1-3 years receive 4 weeks, 3-5 years receive 8 weeks, and 5+ years receive 12 weeks plus continued benefits for the severance period. Severance agreements must include a standard release of claims and are subject to legal review before being presented to the employee.",
+      "last_updated": "2025-12-15",
+      "key_rules": [
+        "approval_chain: [manager, hr_bp, dept_head, vp_hr]",
+        "l5_plus_requires_ceo_approval: true",
+        "approval_chain_deadline_business_days: 5",
+        "pip_cycles_required: 2",
+        "pip_minimum_duration_days: 30",
+        "for_cause_bypasses_pip: true",
+        "documentation_retention_years: 7",
+        "severance_under_1yr_weeks: 2",
+        "severance_1_to_3yr_weeks: 4",
+        "severance_3_to_5yr_weeks: 8",
+        "severance_over_5yr_weeks: 12"
+      ]
+    },
+    {
+      "policy_id": "pol_008",
+      "title": "Department Transfer Policy",
+      "department": "all",
+      "content": "Internal department transfers are available to employees who have been in their current role for a minimum of 12 months and have received a performance rating of \"Meets Expectations\" or above in their most recent review cycle. Transfer requests must be submitted through the HRIS system and require approval from both the current manager and the receiving department head. A transfer cannot be approved if the receiving department is at its headcount limit.\n\nThe transfer process follows a structured timeline: the employee submits a transfer request, the current manager has 5 business days to acknowledge, the receiving department conducts interviews within 10 business days, and a final decision is communicated within 15 business days of the initial request. If approved, the effective transfer date must be at least 30 days from approval to allow for transition planning.\n\nUpon transfer, the employee undergoes a modified onboarding process in the new department, which includes tool provisioning, team introductions, and domain-specific training. Access to the previous department's tools and data is revoked within 5 business days of the transfer date, unless a temporary exception is approved by both department heads for knowledge transfer purposes, which may not exceed 15 business days.",
+      "last_updated": "2025-10-05",
+      "key_rules": [
+        "minimum_tenure_months: 12",
+        "minimum_performance_rating: meets_expectations",
+        "current_manager_approval_required: true",
+        "receiving_head_approval_required: true",
+        "headcount_limit_enforced: true",
+        "manager_acknowledgment_deadline_business_days: 5",
+        "interview_deadline_business_days: 10",
+        "decision_deadline_business_days: 15",
+        "transition_buffer_days: 30",
+        "old_access_revocation_business_days: 5",
+        "temporary_access_exception_max_days: 15"
+      ]
+    },
+    {
+      "policy_id": "pol_009",
+      "title": "Rehire Policy",
+      "department": "all",
+      "content": "Former employees are eligible for rehire consideration if they departed in good standing and their exit record does not include any policy violations, termination for cause, or unresolved compliance issues. A minimum cooling-off period of 6 months must elapse between the departure date and any rehire application. Former employees who were terminated for cause are permanently ineligible for rehire.\n\nRehired employees retain their original employee ID with a rehire suffix (e.g., emp_0042_R1) for tracking purposes. Prior tenure is recognized for PTO accrual purposes if the gap in employment is less than 24 months; otherwise, the employee starts with the standard new-hire PTO allocation. Rehires must complete the full onboarding process regardless of prior tenure, though the onboarding buddy assignment may be waived at the manager's discretion.\n\nRehire offers must be approved by the department head and VP of HR. Compensation for rehires is benchmarked against current market rates and internal equity; prior salary does not guarantee equivalent compensation. Any prior equity grants that were forfeited are not reinstated. Rehired employees are subject to a new 90-day probationary period.",
+      "last_updated": "2025-08-22",
+      "key_rules": [
+        "good_standing_required: true",
+        "cooling_off_period_months: 6",
+        "terminated_for_cause_permanently_ineligible: true",
+        "original_id_retained_with_suffix: true",
+        "tenure_recognition_gap_max_months: 24",
+        "full_onboarding_required: true",
+        "buddy_waivable_for_rehire: true",
+        "approval_required: [dept_head, vp_hr]",
+        "prior_equity_not_reinstated: true",
+        "probation_period_days: 90"
+      ]
+    },
+    {
+      "policy_id": "pol_010",
+      "title": "Badge Access Policy",
+      "department": "Security",
+      "content": "Physical badge access is provisioned based on department assignment and role level. Standard office access (floors 1-3, common areas, cafeteria) is granted to all employees. Restricted areas including the server room (floor B1), executive suite (floor 4), and security operations center (floor B2) require L4+ level clearance and explicit approval from the Security department head. Temporary visitor badges are valid for 8 hours and must be signed in and out at reception.\n\nBadge access changes take effect within 4 hours of approval for standard areas and within 1 hour for restricted areas. All badge access events are logged and retained for 12 months. The security team conducts monthly audits of badge access logs to identify anomalies such as after-hours access or tailgating attempts. Employees who lose their badge must report it within 2 hours; the lost badge is immediately deactivated and a replacement is issued within 24 hours.\n\nUpon offboarding, badge access must be deactivated before the employee leaves the building on their last day. For involuntary terminations, badge deactivation occurs simultaneously with the termination notification. Badge access is automatically suspended if an employee has not badged in for 30 consecutive days, pending manager confirmation of status.",
+      "last_updated": "2026-01-20",
+      "key_rules": [
+        "standard_access_areas: [floors_1_3, common_areas, cafeteria]",
+        "restricted_access_requires_level: L4+",
+        "restricted_access_requires_security_head_approval: true",
+        "visitor_badge_validity_hours: 8",
+        "standard_access_change_hours: 4",
+        "restricted_access_change_hours: 1",
+        "access_log_retention_months: 12",
+        "lost_badge_report_deadline_hours: 2",
+        "replacement_badge_deadline_hours: 24",
+        "offboarding_deactivation: before_building_exit",
+        "inactivity_suspension_days: 30"
+      ]
+    },
+    {
+      "policy_id": "pol_011",
+      "title": "Software License Policy",
+      "department": "all",
+      "content": "Software licenses are provisioned based on department-specific required tools lists maintained by each department head. License requests for tools outside the approved department list require director-level approval and a business justification. All software must be vetted by the Security team for compliance before being added to any department's approved list. The annual software budget per employee is capped at $5,000 for standard roles and $8,000 for engineering and data science roles.\n\nLicenses are assigned to individual employees and may not be shared. When an employee goes on leave exceeding 30 days, their licenses may be temporarily reassigned with manager approval. Upon offboarding, all licenses must be deactivated within 24 hours and reallocated or released to reduce costs. The IT team maintains a license utilization dashboard and flags licenses with less than 10% usage over 90 days for review.\n\nEnterprise license agreements are negotiated annually by the procurement team. Department heads must submit license forecasts by Q3 each year for the following fiscal year's budget planning. Any mid-year license additions exceeding $10,000 in total cost require CFO approval.",
+      "last_updated": "2025-11-18",
+      "key_rules": [
+        "provisioning_based_on_department_list: true",
+        "non_standard_requires_director_approval: true",
+        "security_vetting_required: true",
+        "annual_budget_per_employee_standard: 5000",
+        "annual_budget_per_employee_eng_ds: 8000",
+        "license_sharing_prohibited: true",
+        "leave_reassignment_threshold_days: 30",
+        "offboarding_deactivation_hours: 24",
+        "low_usage_flag_threshold_percent: 10",
+        "low_usage_flag_window_days: 90",
+        "mid_year_addition_cfo_approval_threshold: 10000"
+      ]
+    },
+    {
+      "policy_id": "pol_012",
+      "title": "Approval Chain Policy",
+      "department": "all",
+      "content": "All administrative actions affecting employee status, access, or compensation follow a defined approval chain based on the action type and impact level. Standard actions (PTO requests, expense reports under $500, tool access within department list) require only direct manager approval. Elevated actions (role changes, salary adjustments, cross-department access) require manager plus director approval. Critical actions (terminations, L5+ promotions, Tier 4 data access, budget exceptions) require the full chain up to VP level.\n\nApproval requests have defined SLA windows: standard actions must be resolved within 2 business days, elevated actions within 5 business days, and critical actions within 5 business days. If an approver does not respond within the SLA window, the request automatically escalates to the next level in the chain. Approvers may delegate their approval authority to a designated backup during planned absences, but delegation must be registered in the HRIS system in advance.\n\nAll approval decisions are logged with timestamps, approver identity, and any comments. Approval logs are immutable and retained for 5 years for audit purposes. Retrospective approvals (approving an action after it has already been taken) are flagged as policy violations and trigger a compliance review.",
+      "last_updated": "2025-12-10",
+      "key_rules": [
+        "standard_action_approval: manager",
+        "elevated_action_approval: [manager, director]",
+        "critical_action_approval: [manager, director, vp]",
+        "standard_sla_business_days: 2",
+        "elevated_sla_business_days: 5",
+        "critical_sla_business_days: 5",
+        "auto_escalation_on_sla_breach: true",
+        "delegation_must_be_pre_registered: true",
+        "approval_log_retention_years: 5",
+        "retrospective_approval_triggers_compliance_review: true",
+        "expense_standard_threshold: 500"
+      ]
+    },
+    {
+      "policy_id": "pol_013",
+      "title": "Probation Policy",
+      "department": "all",
+      "content": "All new hires and rehires are subject to a 90-day probationary period beginning on their start date. During probation, employees receive bi-weekly check-ins with their manager and a formal 30-day, 60-day, and 90-day performance review. The probation period may be extended by up to 30 additional days if the employee shows improvement potential but has not yet met all performance benchmarks, subject to HR Business Partner approval.\n\nDuring probation, either the company or the employee may end the employment relationship with 5 business days' notice instead of the standard 15 business days. Employees on probation are not eligible for internal transfers, promotions, or remote work arrangements. Probationary employees accrue PTO from day one but may not use more than 3 PTO days during the probation period without manager and HR approval.\n\nSuccessful completion of probation is confirmed in writing by the manager and recorded in the HRIS system. Employees who fail probation are subject to the standard offboarding process. Probation outcomes must be documented with specific examples of performance against the role's defined success criteria established during onboarding.",
+      "last_updated": "2025-09-15",
+      "key_rules": [
+        "probation_duration_days: 90",
+        "check_in_frequency: bi_weekly",
+        "formal_reviews_at_days: [30, 60, 90]",
+        "max_extension_days: 30",
+        "extension_requires_hr_bp_approval: true",
+        "notice_period_during_probation_days: 5",
+        "transfer_eligible_during_probation: false",
+        "promotion_eligible_during_probation: false",
+        "remote_work_eligible_during_probation: false",
+        "max_pto_during_probation_days: 3",
+        "completion_confirmed_in_writing: true"
+      ]
+    },
+    {
+      "policy_id": "pol_014",
+      "title": "Exit Interview Policy",
+      "department": "all",
+      "content": "Exit interviews are mandatory for all departing full-time employees and optional for contractors with engagements exceeding 6 months. The exit interview must be conducted between 3 and 1 business days before the employee's last working day. Exit interviews are conducted by an HR representative who has not been directly involved in any HR cases related to the departing employee to ensure neutrality and encourage candid feedback.\n\nThe exit interview follows a standardized questionnaire covering job satisfaction, management effectiveness, team dynamics, growth opportunities, compensation competitiveness, and reasons for departure. The interviewer may ask follow-up questions but must not attempt to make a counter-offer or negotiate retention during the exit interview. Retention conversations, if appropriate, must happen separately and before the exit interview is scheduled.\n\nExit interview data is anonymized and aggregated quarterly for trend analysis. Individual exit interview records are classified as Confidential (Tier 3) and accessible only to HR leadership and the VP of the relevant department. Insights are presented to the executive team quarterly with recommendations for retention improvements. Departing employees may request to receive a copy of their exit interview transcript within 30 days of departure.",
+      "last_updated": "2025-10-30",
+      "key_rules": [
+        "mandatory_for_full_time: true",
+        "optional_for_contractors_over_months: 6",
+        "timing_window_business_days_before_last_day: [1, 3]",
+        "interviewer_must_be_neutral: true",
+        "counter_offer_during_interview_prohibited: true",
+        "data_classification: tier_3_confidential",
+        "quarterly_trend_analysis_required: true",
+        "transcript_request_window_days: 30",
+        "standardized_questionnaire_required: true",
+        "accessible_by: [hr_leadership, dept_vp]"
+      ]
+    },
+    {
+      "policy_id": "pol_015",
+      "title": "Asset Management Policy",
+      "department": "all",
+      "content": "All company assets issued to employees are tracked in the centralized asset management system with a unique asset tag. Assets are categorized as High Value (laptops, monitors, mobile devices valued over $500), Standard (keyboards, mice, headsets, adapters), and Consumable (cables, screen protectors, cleaning supplies). High Value assets require employee signature upon receipt and are associated with the employee's record in the HRIS system.\n\nAsset lifecycle management follows defined thresholds: laptops are refreshed every 36 months, monitors every 48 months, and mobile devices every 24 months. Early refresh requests require director approval and a documented business justification. Employees may purchase their assigned laptop at depreciated book value upon offboarding, subject to IT security wipe and data destruction verification.\n\nLost or stolen assets must be reported to IT and Security within 4 hours of discovery. For devices containing company data, a remote wipe is initiated immediately upon report. The employee is not held financially responsible for lost or stolen assets provided the report is filed within the required window and there is no evidence of negligence. Annual asset audits are conducted in Q1, and discrepancies must be resolved within 15 business days.",
+      "last_updated": "2026-02-01",
+      "key_rules": [
+        "asset_tracking_system: centralized",
+        "high_value_threshold: 500",
+        "high_value_requires_signature: true",
+        "laptop_refresh_months: 36",
+        "monitor_refresh_months: 48",
+        "mobile_refresh_months: 24",
+        "early_refresh_requires_director_approval: true",
+        "employee_purchase_at_depreciated_value: true",
+        "lost_stolen_report_deadline_hours: 4",
+        "remote_wipe_on_report: true",
+        "annual_audit_quarter: Q1",
+        "audit_discrepancy_resolution_business_days: 15"
+      ]
+    }
+  ]
+}

server/data/templates.json

@@ -0,0 +1,86 @@
+[
+  {
+    "template_id": "tmpl_001",
+    "name": "welcome_email",
+    "subject": "Welcome to {{company_name}}, {{first_name}}!",
+    "body": "Dear {{first_name}} {{last_name}},\n\nWelcome to {{company_name}}! We are thrilled to have you join the {{department}} team as a {{job_title}}.\n\nYour start date is {{start_date}}, and your manager will be {{manager_name}}. Please arrive at {{office_location}} by {{arrival_time}} on your first day.\n\nHere are a few things to prepare before your first day:\n- Bring a valid government-issued photo ID\n- Review the pre-boarding documents sent to your personal email\n- Complete any outstanding background check forms\n\nYour onboarding buddy will be {{buddy_name}}, who will help you get settled during your first few weeks.\n\nIf you have any questions before your start date, please don't hesitate to reach out to your HR contact at {{hr_contact_email}}.\n\nWe look forward to seeing you!\n\nBest regards,\n{{hr_sender_name}}\nHuman Resources\n{{company_name}}",
+    "channel": "email"
+  },
+  {
+    "template_id": "tmpl_002",
+    "name": "welcome_slack",
+    "subject": null,
+    "body": "Hey everyone! :wave: Please join me in welcoming *{{first_name}} {{last_name}}* to the {{department}} team! {{first_name}} is joining us as a *{{job_title}}* starting {{start_date}}.\n\n{{first_name}}, a little about your new team: {{team_description}}\n\nYour onboarding buddy is {{buddy_name}} -- feel free to reach out to them with any questions. We're so glad to have you on board! :tada:",
+    "channel": "slack"
+  },
+  {
+    "template_id": "tmpl_003",
+    "name": "farewell_email",
+    "subject": "Farewell and Best Wishes to {{first_name}} {{last_name}}",
+    "body": "Dear Team,\n\nI am writing to let you know that {{first_name}} {{last_name}} will be leaving {{company_name}} effective {{last_day}}.\n\n{{first_name}} has been a valued member of the {{department}} team for {{tenure}}, and we wish them all the best in their future endeavors.\n\nPlease join us for a farewell gathering on {{farewell_event_date}} at {{farewell_event_time}} in {{farewell_event_location}}.\n\nFor any ongoing projects or handover questions, please reach out to {{handover_contact_name}} ({{handover_contact_email}}).\n\nWe thank {{first_name}} for their contributions and wish them continued success.\n\nBest regards,\n{{manager_name}}\n{{department}}",
+    "channel": "email"
+  },
+  {
+    "template_id": "tmpl_004",
+    "name": "farewell_slack",
+    "subject": null,
+    "body": "Hi team -- I wanted to share that *{{first_name}} {{last_name}}* will be moving on from {{company_name}}, with {{last_day}} being their last day.\n\n{{first_name}} has been an incredible part of the {{department}} team, and we're grateful for everything they've contributed over the past {{tenure}}.\n\nPlease stop by the farewell gathering on {{farewell_event_date}} to say goodbye and wish them well! :heart:\n\nFor any project handovers, please contact {{handover_contact_name}}.",
+    "channel": "slack"
+  },
+  {
+    "template_id": "tmpl_005",
+    "name": "onboarding_reminder",
+    "subject": "Reminder: Onboarding Tasks Due for {{first_name}} {{last_name}}",
+    "body": "Dear {{recipient_name}},\n\nThis is a reminder that the following onboarding tasks for {{first_name}} {{last_name}} ({{job_title}}, {{department}}) are due by {{due_date}}:\n\n{{task_list}}\n\nNew hire start date: {{start_date}}\nDays remaining: {{days_remaining}}\n\nPlease complete these tasks as soon as possible to ensure a smooth onboarding experience. You can track progress in the onboarding dashboard at {{dashboard_url}}.\n\nIf you have any questions or need assistance, contact {{hr_contact_name}} at {{hr_contact_email}}.\n\nThank you,\nHR Onboarding System",
+    "channel": "email"
+  },
+  {
+    "template_id": "tmpl_006",
+    "name": "offboarding_reminder",
+    "subject": "Reminder: Offboarding Tasks Due for {{first_name}} {{last_name}}",
+    "body": "Dear {{recipient_name}},\n\nThis is a reminder that the following offboarding tasks for {{first_name}} {{last_name}} ({{job_title}}, {{department}}) must be completed by {{due_date}}:\n\n{{task_list}}\n\nLast working day: {{last_day}}\nDays remaining: {{days_remaining}}\n\nTimely completion of these tasks is critical for security compliance and a smooth transition. Track progress at {{dashboard_url}}.\n\nIf you have any questions, contact {{hr_contact_name}} at {{hr_contact_email}}.\n\nThank you,\nHR Offboarding System",
+    "channel": "email"
+  },
+  {
+    "template_id": "tmpl_007",
+    "name": "asset_assignment_confirmation",
+    "subject": "IT Asset Assigned: {{asset_type}} - {{asset_model}}",
+    "body": "Dear {{first_name}} {{last_name}},\n\nThe following IT asset has been assigned to you:\n\nAsset ID: {{asset_id}}\nType: {{asset_type}}\nBrand/Model: {{asset_brand}} {{asset_model}}\nSpecs: {{asset_specs}}\nSerial Number: {{serial_number}}\n\nAssignment Date: {{assignment_date}}\nPickup Location: {{pickup_location}}\n\nPlease review and acknowledge the IT Asset Usage Policy at {{policy_url}}. By accepting this asset, you agree to the terms outlined in the policy.\n\nIf you experience any issues with your equipment, please submit a ticket at {{support_url}} or contact IT Support at {{it_support_email}}.\n\nBest regards,\n{{it_admin_name}}\nIT Department",
+    "channel": "email"
+  },
+  {
+    "template_id": "tmpl_008",
+    "name": "access_grant_notification",
+    "subject": "Access Granted: {{role_name}} Role",
+    "body": "Dear {{first_name}} {{last_name}},\n\nYou have been granted the following access role:\n\nRole: {{role_name}}\nRole ID: {{role_id}}\nDescription: {{role_description}}\nGranted By: {{granted_by}}\nEffective Date: {{effective_date}}\n\nPermissions included:\n{{permissions_list}}\n\nPlease review the access policies and acceptable use guidelines at {{policy_url}}. If you believe you have been granted access in error, or if you need additional permissions, please contact your manager or the Security team at {{security_email}}.\n\nThis access will be reviewed periodically as part of our security compliance program.\n\nBest regards,\nAccess Management System\n{{company_name}}",
+    "channel": "email"
+  },
+  {
+    "template_id": "tmpl_009",
+    "name": "orientation_invite",
+    "subject": "You're Invited: New Hire Orientation - {{orientation_date}}",
+    "body": "Dear {{first_name}} {{last_name}},\n\nWelcome to {{company_name}}! You are invited to attend the New Hire Orientation session:\n\nDate: {{orientation_date}}\nTime: {{orientation_time}}\nLocation: {{orientation_location}}\nDuration: {{orientation_duration}}\n\nAgenda:\n{{agenda}}\n\nPlease bring:\n- Government-issued photo ID\n- Completed tax forms (W-4 and state equivalent)\n- Voided check or bank details for direct deposit setup\n\nLunch will be provided. If you have dietary restrictions, please reply to this email.\n\nCalendar invite: {{calendar_link}}\n\nIf you have any questions, contact {{hr_contact_name}} at {{hr_contact_email}}.\n\nSee you there!\n\nBest regards,\n{{hr_sender_name}}\nHuman Resources",
+    "channel": "email"
+  },
+  {
+    "template_id": "tmpl_010",
+    "name": "exit_interview_invite",
+    "subject": "Exit Interview Scheduled - {{interview_date}}",
+    "body": "Dear {{first_name}} {{last_name}},\n\nAs part of our offboarding process, we would like to invite you to an exit interview:\n\nDate: {{interview_date}}\nTime: {{interview_time}}\nLocation: {{interview_location}}\nInterviewer: {{interviewer_name}}\nDuration: Approximately {{interview_duration}}\n\nThe exit interview is an opportunity for you to share your experiences, feedback, and suggestions. Your input is valuable and helps us improve as an organization. All responses will be kept confidential.\n\nTopics we may discuss:\n- Your overall experience at {{company_name}}\n- Team dynamics and management\n- Career development opportunities\n- Suggestions for improvement\n\nIf the scheduled time does not work, please reply to reschedule.\n\nCalendar invite: {{calendar_link}}\n\nThank you,\n{{hr_sender_name}}\nHuman Resources",
+    "channel": "email"
+  },
+  {
+    "template_id": "tmpl_011",
+    "name": "manager_notification_new_hire",
+    "subject": "New Hire Notification: {{first_name}} {{last_name}} Joining Your Team",
+    "body": "Dear {{manager_name}},\n\nThis is to confirm that {{first_name}} {{last_name}} will be joining your team in the {{department}} department.\n\nNew Hire Details:\n- Name: {{first_name}} {{last_name}}\n- Job Title: {{job_title}}\n- Level: {{level}}\n- Start Date: {{start_date}}\n- Office Location: {{office_location}}\n- Employee ID: {{employee_id}}\n\nAs their manager, please complete the following before their start date:\n\n1. Prepare a 30-60-90 day plan\n2. Identify and confirm an onboarding buddy (suggested: {{suggested_buddy}})\n3. Schedule a welcome 1:1 for their first day\n4. Review and approve their access role requests\n5. Ensure their workspace/desk is set up\n6. Add them to relevant team meetings and channels\n\nOnboarding dashboard: {{dashboard_url}}\n\nPlease reach out to {{hr_contact_name}} ({{hr_contact_email}}) if you have any questions.\n\nBest regards,\nHR Onboarding Team",
+    "channel": "email"
+  },
+  {
+    "template_id": "tmpl_012",
+    "name": "manager_notification_departure",
+    "subject": "Employee Departure Notification: {{first_name}} {{last_name}}",
+    "body": "Dear {{manager_name}},\n\nThis is to confirm that {{first_name}} {{last_name}} ({{job_title}}, {{department}}) has submitted their resignation / been approved for departure.\n\nDeparture Details:\n- Employee: {{first_name}} {{last_name}} ({{employee_id}})\n- Last Working Day: {{last_day}}\n- Reason: {{departure_reason}}\n- Notice Period: {{notice_period}}\n\nAs their manager, please ensure the following are completed before their last day:\n\n1. Knowledge transfer plan and documentation\n2. Project handover to {{handover_contact_name}}\n3. Return of all IT assets (laptop, monitor, phone, headset, badges)\n4. Removal from team meetings and channels\n5. Final performance notes\n6. Notify clients/stakeholders as appropriate\n\nIT asset return must be completed by {{asset_return_date}}.\nAccess revocation will occur automatically on {{access_revocation_date}}.\n\nOffboarding dashboard: {{dashboard_url}}\n\nPlease reach out to {{hr_contact_name}} ({{hr_contact_email}}) if you have any questions.\n\nBest regards,\nHR Offboarding Team",
+    "channel": "email"
+  }
+]

server/hr_onboarding_environment.py

@@ -0,0 +1,173 @@
+"""
+HR Onboarding/Offboarding Environment Implementation.
+
+An OpenEnv environment that simulates enterprise HR workflows.
+The agent calls tools (hr_create_employee, it_assign_asset, etc.)
+to complete onboarding/offboarding tasks. Reward is computed via rubrics.
+"""
+
+import json
+import random
+from typing import Any, Dict, List, Optional
+from uuid import uuid4
+
+from openenv.core.env_server.interfaces import Environment
+from openenv.core.env_server.types import State
+
+from models import HROnboardingAction, HROnboardingObservation
+
+try:
+    from .world import WorldState
+    from .tools import ToolRegistry, TOOL_DEFINITIONS
+    from .tasks import TaskGenerator
+    from .rubrics import RubricEvaluator
+except ImportError:
+    from world import WorldState
+    from tools import ToolRegistry, TOOL_DEFINITIONS
+    from tasks import TaskGenerator
+    from rubrics import RubricEvaluator
+
+
+class HROnboardingEnvironment(Environment):
+    """
+    HR Onboarding/Offboarding environment.
+
+    Simulates an enterprise HR system with 200+ employees, 8 departments,
+    RBAC, approval chains, and IT provisioning. The agent calls one of 25
+    tools per step to complete onboarding/offboarding tasks.
+
+    Example:
+        >>> env = HROnboardingEnvironment()
+        >>> obs = env.reset()
+        >>> print(obs.instruction)  # "Onboard Priya Sharma to Engineering..."
+        >>>
+        >>> obs = env.step(HROnboardingAction(
+        ...     tool_name="hr_create_employee",
+        ...     arguments={"name": "Priya Sharma", "department": "Engineering",
+        ...                "level": "L2", "role": "Software Engineer"}
+        ... ))
+        >>> print(obs.tool_result)  # {"success": true, "employee": {...}}
+        >>> print(obs.reward)       # 0.0 (intermediate) or 0.85 (final)
+    """
+
+    SUPPORTS_CONCURRENT_SESSIONS: bool = True
+
+    def __init__(self, seed: int = 42, max_steps: int = 15):
+        """Initialize the HR environment."""
+        self._seed = seed
+        self._max_steps = max_steps
+        self._rng = random.Random(seed)
+
+        # World state + tools
+        self.world = WorldState()
+        self.tool_registry = ToolRegistry(self.world)
+        self.evaluator = RubricEvaluator()
+
+        # Tasks
+        self._task_gen = TaskGenerator(self.world, seed=seed)
+        self._tasks = self._task_gen.generate_all_tasks()
+        self._task_idx = 0
+        self._current_task = None
+
+        # Episode state
+        self._state = State(episode_id=str(uuid4()), step_count=0)
+        self._done = False
+        self._tool_names = [t["name"] for t in TOOL_DEFINITIONS]
+
+    def reset(self) -> HROnboardingObservation:
+        """
+        Reset the environment for a new episode.
+
+        Picks the next task, resets world state, returns initial observation
+        with the task instruction and available tools.
+        """
+        self.world.reset()
+        self._done = False
+
+        # Pick next task (cycle through)
+        self._current_task = self._tasks[self._task_idx % len(self._tasks)]
+        self._task_idx += 1
+
+        # Apply task setup if any
+        if self._current_task.setup_fn:
+            self._current_task.setup_fn(self.world)
+
+        self._state = State(episode_id=str(uuid4()), step_count=0)
+
+        return HROnboardingObservation(
+            task_id=self._current_task.task_id,
+            instruction=self._current_task.instruction,
+            tool_name="",
+            tool_result={},
+            step=0,
+            max_steps=self._max_steps,
+            available_tools=self._tool_names,
+            done=False,
+            reward=0.0,
+            metadata={
+                "difficulty": self._current_task.difficulty,
+                "category": self._current_task.category,
+                "context": self._current_task.context,
+            },
+        )
+
+    def step(self, action: HROnboardingAction) -> HROnboardingObservation:  # type: ignore[override]
+        """
+        Execute one step: call the specified tool and return the result.
+
+        Args:
+            action: HROnboardingAction with tool_name and arguments.
+
+        Returns:
+            HROnboardingObservation with tool result, reward (on final step), and done flag.
+        """
+        if self._done:
+            return HROnboardingObservation(
+                task_id=self._current_task.task_id if self._current_task else "",
+                instruction="",
+                tool_name=action.tool_name,
+                tool_result={"error": "Episode already finished"},
+                step=self._state.step_count,
+                max_steps=self._max_steps,
+                available_tools=self._tool_names,
+                done=True,
+                reward=0.0,
+            )
+
+        self._state.step_count += 1
+
+        # Execute the tool
+        result = self.tool_registry.execute(action.tool_name, action.arguments)
+
+        # Check if episode is done
+        done = self._state.step_count >= self._max_steps
+        self._done = done
+
+        # Compute reward on final step
+        reward = 0.0
+        eval_info = {}
+        if done and self._current_task:
+            eval_result = self.evaluator.evaluate(self._current_task, self.world.action_log)
+            reward = eval_result["score"]
+            eval_info = eval_result
+
+        return HROnboardingObservation(
+            task_id=self._current_task.task_id if self._current_task else "",
+            instruction=self._current_task.instruction if self._current_task else "",
+            tool_name=action.tool_name,
+            tool_result=result,
+            step=self._state.step_count,
+            max_steps=self._max_steps,
+            available_tools=self._tool_names,
+            done=done,
+            reward=reward,
+            metadata={
+                "step": self._state.step_count,
+                **({"evaluation": eval_info} if eval_info else {}),
+            },
+        )
+
+    @property
+    def state(self) -> State:
+        """Get the current environment state."""
+        return self._state

server/rubrics.py

@@ -0,0 +1,176 @@
+"""Reward/evaluation rubrics for HR Onboarding/Offboarding tasks.
+
+Each task has a set of rubric criteria. This module evaluates agent action logs
+against those criteria to compute rewards.
+"""
+
+import re
+from typing import Any
+try:
+    from .tasks import Task
+except ImportError:
+    from tasks import Task
+
+
+class RubricEvaluator:
+    """Evaluates agent performance against task rubric criteria."""
+
+    def __init__(self):
+        self._checkers = {
+            "tool_used": self._check_tool_used,
+            "tool_not_used": self._check_tool_not_used,
+            "tool_used_any": self._check_tool_used_any,
+            "param_value": self._check_param_value,
+            "param_contains": self._check_param_contains,
+            "tool_order": self._check_tool_order,
+            "tool_count": self._check_tool_count,
+            "result_contains": self._check_result_contains,
+        }
+
+    def evaluate(self, task: Task, action_log: list[dict]) -> dict:
+        """Evaluate action log against task rubric criteria.
+
+        Returns:
+            {
+                "task_id": str,
+                "criteria_results": list of {name, passed, description},
+                "score": float (0.0-1.0),
+                "passed": bool (all criteria satisfied),
+            }
+        """
+        criteria_results = []
+        for criterion in task.rubric_criteria:
+            check_str = criterion["check"]
+            passed = self._evaluate_criterion(check_str, action_log)
+            criteria_results.append({
+                "name": criterion["name"],
+                "description": criterion["description"],
+                "passed": passed,
+            })
+
+        total = len(criteria_results)
+        passed_count = sum(1 for c in criteria_results if c["passed"])
+        score = passed_count / total if total > 0 else 0.0
+
+        return {
+            "task_id": task.task_id,
+            "criteria_results": criteria_results,
+            "score": score,
+            "passed": all(c["passed"] for c in criteria_results),
+            "passed_count": passed_count,
+            "total_criteria": total,
+        }
+
+    def _evaluate_criterion(self, check_str: str, action_log: list[dict]) -> bool:
+        """Parse and evaluate a single criterion check string."""
+        # Parse check type and args
+        parts = check_str.split(":", 1)
+        if len(parts) != 2:
+            return False
+
+        check_type = parts[0]
+        check_args = parts[1]
+
+        checker = self._checkers.get(check_type)
+        if not checker:
+            return False
+
+        return checker(check_args, action_log)
+
+    def _check_tool_used(self, tool_name: str, action_log: list[dict]) -> bool:
+        """Check if a specific tool was used at least once."""
+        return any(a["tool"] == tool_name for a in action_log)
+
+    def _check_tool_not_used(self, tool_name: str, action_log: list[dict]) -> bool:
+        """Check that a specific tool was NOT used."""
+        return not any(a["tool"] == tool_name for a in action_log)
+
+    def _check_tool_used_any(self, tools_csv: str, action_log: list[dict]) -> bool:
+        """Check if any of the comma-separated tools were used."""
+        tool_names = [t.strip() for t in tools_csv.split(",")]
+        return any(a["tool"] in tool_names for a in action_log)
+
+    def _check_param_value(self, spec: str, action_log: list[dict]) -> bool:
+        """Check if a tool was called with a specific parameter value.
+        Format: tool_name.param_name=expected_value
+        """
+        match = re.match(r"(\w+)\.(\w+)=(.+)", spec)
+        if not match:
+            return False
+        tool_name, param_name, expected_value = match.groups()
+
+        for action in action_log:
+            if action["tool"] == tool_name:
+                actual = action["params"].get(param_name)
+                if actual is not None and str(actual) == expected_value:
+                    return True
+                # Check nested in 'updates' dict
+                updates = action["params"].get("updates", {})
+                if param_name in updates and str(updates[param_name]) == expected_value:
+                    return True
+        return False
+
+    def _check_param_contains(self, spec: str, action_log: list[dict]) -> bool:
+        """Check if a tool parameter contains a substring.
+        Format: tool_name.param_name=substring
+        """
+        match = re.match(r"(\w+)\.(\w+)=(.+)", spec)
+        if not match:
+            return False
+        tool_name, param_name, substring = match.groups()
+
+        for action in action_log:
+            if action["tool"] == tool_name:
+                actual = action["params"].get(param_name, "")
+                if substring.lower() in str(actual).lower():
+                    return True
+        return False
+
+    def _check_tool_order(self, spec: str, action_log: list[dict]) -> bool:
+        """Check that tool A was called before tool B.
+        Format: tool_a<tool_b
+        """
+        parts = spec.split("<")
+        if len(parts) != 2:
+            return False
+        tool_a, tool_b = parts
+
+        idx_a = None
+        idx_b = None
+        for i, action in enumerate(action_log):
+            if action["tool"] == tool_a and idx_a is None:
+                idx_a = i
+            if action["tool"] == tool_b and idx_b is None:
+                idx_b = i
+
+        if idx_a is None or idx_b is None:
+            return False
+        return idx_a < idx_b
+
+    def _check_tool_count(self, spec: str, action_log: list[dict]) -> bool:
+        """Check that a tool was called at least N times.
+        Format: tool_name>=N
+        """
+        match = re.match(r"(\w+)>=(\d+)", spec)
+        if not match:
+            return False
+        tool_name, min_count = match.groups()
+        min_count = int(min_count)
+
+        count = sum(1 for a in action_log if a["tool"] == tool_name)
+        return count >= min_count
+
+    def _check_result_contains(self, substring: str, action_log: list[dict]) -> bool:
+        """Check if any tool result contains a substring."""
+        for action in action_log:
+            result_str = str(action.get("result", ""))
+            if substring.lower() in result_str.lower():
+                return True
+        return False
+
+
+def compute_reward(task: Task, action_log: list[dict]) -> float:
+    """Convenience function to compute reward for a task given action log."""
+    evaluator = RubricEvaluator()
+    result = evaluator.evaluate(task, action_log)
+    return result["score"]

server/static/index.html

@@ -0,0 +1,831 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>HR Onboarding Environment</title>
+  <style>
+    * { margin: 0; padding: 0; box-sizing: border-box; }
+
+    body {
+      font-family: 'Inter', -apple-system, BlinkMacSystemFont, 'Segoe UI', sans-serif;
+      background: #0f1117;
+      color: #e0e0e0;
+      min-height: 100vh;
+    }
+
+    .header {
+      background: linear-gradient(135deg, #1a1f2e 0%, #0f1117 100%);
+      border-bottom: 1px solid #2a2f3e;
+      padding: 20px 32px;
+      display: flex;
+      align-items: center;
+      gap: 16px;
+    }
+
+    .header-icon {
+      font-size: 32px;
+    }
+
+    .header h1 {
+      font-size: 22px;
+      font-weight: 700;
+      color: #fff;
+    }
+
+    .header p {
+      font-size: 13px;
+      color: #888;
+      margin-top: 2px;
+    }
+
+    .header-badges {
+      margin-left: auto;
+      display: flex;
+      gap: 8px;
+    }
+
+    .badge {
+      background: #1e2433;
+      border: 1px solid #2a3040;
+      border-radius: 20px;
+      padding: 4px 12px;
+      font-size: 12px;
+      color: #8899aa;
+    }
+
+    .badge b { color: #58a6ff; }
+
+    .container {
+      display: grid;
+      grid-template-columns: 340px 1fr 320px;
+      height: calc(100vh - 80px);
+      gap: 0;
+    }
+
+    /* Left panel - Task selector */
+    .panel-left {
+      background: #13161f;
+      border-right: 1px solid #1e2230;
+      display: flex;
+      flex-direction: column;
+      overflow: hidden;
+    }
+
+    .panel-header {
+      padding: 16px;
+      border-bottom: 1px solid #1e2230;
+      font-size: 13px;
+      font-weight: 600;
+      text-transform: uppercase;
+      letter-spacing: 0.5px;
+      color: #667;
+    }
+
+    .task-filters {
+      padding: 12px 16px;
+      display: flex;
+      gap: 6px;
+      flex-wrap: wrap;
+      border-bottom: 1px solid #1e2230;
+    }
+
+    .filter-btn {
+      background: #1a1f2e;
+      border: 1px solid #2a2f3e;
+      border-radius: 6px;
+      padding: 4px 10px;
+      font-size: 11px;
+      color: #889;
+      cursor: pointer;
+      transition: all 0.15s;
+    }
+
+    .filter-btn:hover { border-color: #58a6ff; color: #58a6ff; }
+    .filter-btn.active { background: #1c2d4a; border-color: #58a6ff; color: #58a6ff; }
+
+    .task-list {
+      flex: 1;
+      overflow-y: auto;
+      padding: 8px;
+    }
+
+    .task-item {
+      padding: 10px 12px;
+      border-radius: 8px;
+      cursor: pointer;
+      margin-bottom: 4px;
+      transition: all 0.15s;
+    }
+
+    .task-item:hover { background: #1a1f2e; }
+    .task-item.active { background: #1c2d4a; border-left: 3px solid #58a6ff; }
+
+    .task-item .task-id {
+      font-size: 11px;
+      color: #556;
+      font-family: monospace;
+    }
+
+    .task-item .task-title {
+      font-size: 13px;
+      color: #ccc;
+      margin-top: 2px;
+      line-height: 1.4;
+      display: -webkit-box;
+      -webkit-line-clamp: 2;
+      -webkit-box-orient: vertical;
+      overflow: hidden;
+    }
+
+    .task-item .task-meta {
+      display: flex;
+      gap: 6px;
+      margin-top: 6px;
+    }
+
+    .task-tag {
+      font-size: 10px;
+      padding: 2px 6px;
+      border-radius: 4px;
+      font-weight: 600;
+      text-transform: uppercase;
+    }
+
+    .tag-simple { background: #1a3a2a; color: #4ade80; }
+    .tag-medium { background: #3a3a1a; color: #facc15; }
+    .tag-complex { background: #3a1a1a; color: #f87171; }
+    .tag-edge_case { background: #2a1a3a; color: #c084fc; }
+    .tag-lookup { background: #1a2a3a; color: #60a5fa; }
+    .tag-onboarding { background: #1a3a2a; color: #34d399; }
+    .tag-offboarding { background: #3a2a1a; color: #fb923c; }
+    .tag-cross_workflow { background: #2a1a3a; color: #a78bfa; }
+
+    /* Center panel - Main interaction area */
+    .panel-center {
+      display: flex;
+      flex-direction: column;
+      overflow: hidden;
+    }
+
+    .task-instruction {
+      padding: 20px 24px;
+      background: #161a24;
+      border-bottom: 1px solid #1e2230;
+    }
+
+    .task-instruction h3 {
+      font-size: 14px;
+      color: #58a6ff;
+      margin-bottom: 8px;
+      display: flex;
+      align-items: center;
+      gap: 8px;
+    }
+
+    .task-instruction p {
+      font-size: 14px;
+      line-height: 1.6;
+      color: #d0d0d0;
+    }
+
+    .step-indicator {
+      display: flex;
+      align-items: center;
+      gap: 8px;
+      margin-top: 12px;
+      font-size: 12px;
+      color: #667;
+    }
+
+    .step-bar {
+      flex: 1;
+      height: 4px;
+      background: #1e2230;
+      border-radius: 2px;
+      overflow: hidden;
+    }
+
+    .step-bar-fill {
+      height: 100%;
+      background: #58a6ff;
+      border-radius: 2px;
+      transition: width 0.3s ease;
+    }
+
+    .action-log {
+      flex: 1;
+      overflow-y: auto;
+      padding: 16px 24px;
+    }
+
+    .log-entry {
+      margin-bottom: 16px;
+      animation: fadeIn 0.3s ease;
+    }
+
+    @keyframes fadeIn {
+      from { opacity: 0; transform: translateY(8px); }
+      to { opacity: 1; transform: translateY(0); }
+    }
+
+    .log-step-label {
+      font-size: 11px;
+      color: #556;
+      margin-bottom: 4px;
+      font-family: monospace;
+    }
+
+    .log-action {
+      background: #1a1f2e;
+      border: 1px solid #252b3b;
+      border-radius: 8px;
+      padding: 12px;
+      margin-bottom: 6px;
+    }
+
+    .log-action .tool-name {
+      color: #58a6ff;
+      font-family: monospace;
+      font-size: 13px;
+      font-weight: 600;
+    }
+
+    .log-action pre {
+      margin-top: 6px;
+      font-size: 12px;
+      color: #8899aa;
+      white-space: pre-wrap;
+      word-break: break-word;
+      font-family: 'JetBrains Mono', monospace;
+      max-height: 120px;
+      overflow-y: auto;
+    }
+
+    .log-result {
+      background: #141820;
+      border: 1px solid #1e2430;
+      border-radius: 8px;
+      padding: 12px;
+    }
+
+    .log-result.success { border-left: 3px solid #4ade80; }
+    .log-result.error { border-left: 3px solid #f87171; }
+
+    .log-result pre {
+      font-size: 12px;
+      color: #8899aa;
+      white-space: pre-wrap;
+      word-break: break-word;
+      font-family: 'JetBrains Mono', monospace;
+      max-height: 150px;
+      overflow-y: auto;
+    }
+
+    /* Input area */
+    .input-area {
+      border-top: 1px solid #1e2230;
+      padding: 16px 24px;
+      background: #13161f;
+    }
+
+    .tool-select-row {
+      display: flex;
+      gap: 8px;
+      margin-bottom: 10px;
+    }
+
+    .tool-select-row select {
+      flex: 1;
+      background: #1a1f2e;
+      border: 1px solid #2a3040;
+      border-radius: 8px;
+      padding: 8px 12px;
+      color: #d0d0d0;
+      font-size: 13px;
+      font-family: monospace;
+    }
+
+    .tool-select-row select:focus { outline: none; border-color: #58a6ff; }
+
+    .params-input {
+      width: 100%;
+      background: #1a1f2e;
+      border: 1px solid #2a3040;
+      border-radius: 8px;
+      padding: 10px 14px;
+      color: #d0d0d0;
+      font-size: 13px;
+      font-family: 'JetBrains Mono', monospace;
+      resize: vertical;
+      min-height: 60px;
+    }
+
+    .params-input:focus { outline: none; border-color: #58a6ff; }
+
+    .params-input::placeholder { color: #445; }
+
+    .input-buttons {
+      display: flex;
+      gap: 8px;
+      margin-top: 10px;
+    }
+
+    .btn {
+      padding: 8px 20px;
+      border-radius: 8px;
+      font-size: 13px;
+      font-weight: 600;
+      cursor: pointer;
+      border: none;
+      transition: all 0.15s;
+    }
+
+    .btn-primary {
+      background: #58a6ff;
+      color: #000;
+    }
+    .btn-primary:hover { background: #79b8ff; }
+    .btn-primary:disabled { background: #2a3a4a; color: #556; cursor: not-allowed; }
+
+    .btn-secondary {
+      background: #1e2433;
+      color: #889;
+      border: 1px solid #2a3040;
+    }
+    .btn-secondary:hover { border-color: #58a6ff; color: #58a6ff; }
+
+    .btn-danger {
+      background: #3a1a1a;
+      color: #f87171;
+      border: 1px solid #4a2020;
+    }
+    .btn-danger:hover { background: #4a2020; }
+
+    /* Right panel - Info & Evaluation */
+    .panel-right {
+      background: #13161f;
+      border-left: 1px solid #1e2230;
+      display: flex;
+      flex-direction: column;
+      overflow: hidden;
+    }
+
+    .tools-section {
+      flex: 1;
+      overflow-y: auto;
+      padding: 12px;
+    }
+
+    .tool-info {
+      padding: 8px 10px;
+      border-radius: 6px;
+      cursor: pointer;
+      font-size: 12px;
+      font-family: monospace;
+      color: #8899aa;
+      transition: all 0.15s;
+    }
+
+    .tool-info:hover { background: #1a1f2e; color: #58a6ff; }
+
+    .tool-info .tool-desc {
+      font-family: 'Inter', sans-serif;
+      font-size: 11px;
+      color: #556;
+      margin-top: 2px;
+      display: none;
+    }
+
+    .tool-info:hover .tool-desc { display: block; }
+
+    /* Evaluation panel */
+    .eval-section {
+      border-top: 1px solid #1e2230;
+      padding: 16px;
+      max-height: 50%;
+      overflow-y: auto;
+    }
+
+    .eval-header {
+      display: flex;
+      align-items: center;
+      justify-content: space-between;
+      margin-bottom: 12px;
+    }
+
+    .eval-score {
+      font-size: 28px;
+      font-weight: 800;
+      color: #58a6ff;
+    }
+
+    .eval-score.pass { color: #4ade80; }
+    .eval-score.fail { color: #f87171; }
+    .eval-score.partial { color: #facc15; }
+
+    .eval-criteria {
+      list-style: none;
+    }
+
+    .eval-criteria li {
+      padding: 6px 0;
+      font-size: 12px;
+      display: flex;
+      align-items: flex-start;
+      gap: 8px;
+      border-bottom: 1px solid #1a1f2a;
+    }
+
+    .eval-criteria .icon-pass { color: #4ade80; }
+    .eval-criteria .icon-fail { color: #f87171; }
+
+    .eval-criteria .criteria-desc {
+      color: #889;
+      font-size: 11px;
+    }
+
+    /* Welcome state */
+    .welcome {
+      display: flex;
+      flex-direction: column;
+      align-items: center;
+      justify-content: center;
+      height: 100%;
+      text-align: center;
+      padding: 40px;
+    }
+
+    .welcome h2 {
+      font-size: 20px;
+      color: #fff;
+      margin-bottom: 8px;
+    }
+
+    .welcome p {
+      color: #667;
+      font-size: 14px;
+      max-width: 400px;
+      line-height: 1.6;
+    }
+
+    /* Scrollbar styling */
+    ::-webkit-scrollbar { width: 6px; }
+    ::-webkit-scrollbar-track { background: transparent; }
+    ::-webkit-scrollbar-thumb { background: #2a3040; border-radius: 3px; }
+    ::-webkit-scrollbar-thumb:hover { background: #3a4050; }
+
+    /* Loading spinner */
+    .spinner {
+      display: inline-block;
+      width: 14px;
+      height: 14px;
+      border: 2px solid #2a3040;
+      border-top-color: #58a6ff;
+      border-radius: 50%;
+      animation: spin 0.6s linear infinite;
+    }
+
+    @keyframes spin { to { transform: rotate(360deg); } }
+
+    @media (max-width: 1024px) {
+      .container {
+        grid-template-columns: 1fr;
+        grid-template-rows: auto 1fr;
+      }
+      .panel-left, .panel-right { display: none; }
+    }
+  </style>
+</head>
+<body>
+  <div class="header">
+    <div class="header-icon">🏢</div>
+    <div>
+      <h1>HR Onboarding & Offboarding Environment</h1>
+      <p>OpenEnv RL Environment — Interactive Playground</p>
+    </div>
+    <div class="header-badges">
+      <span class="badge"><b>25</b> Tools</span>
+      <span class="badge"><b>77</b> Tasks</span>
+      <span class="badge"><b>200</b> Employees</span>
+      <span class="badge"><b>15</b> Max Steps</span>
+    </div>
+  </div>
+
+  <div class="container">
+    <!-- Left: Task Selector -->
+    <div class="panel-left">
+      <div class="panel-header">Tasks</div>
+      <div class="task-filters">
+        <button class="filter-btn active" data-filter="all">All</button>
+        <button class="filter-btn" data-filter="simple">Simple</button>
+        <button class="filter-btn" data-filter="medium">Medium</button>
+        <button class="filter-btn" data-filter="complex">Complex</button>
+        <button class="filter-btn" data-filter="edge_case">Edge Case</button>
+      </div>
+      <div class="task-list" id="taskList">
+        <div style="padding: 20px; color: #556; font-size: 13px;">Loading tasks...</div>
+      </div>
+    </div>
+
+    <!-- Center: Interaction Area -->
+    <div class="panel-center">
+      <div class="task-instruction" id="taskInstruction">
+        <div class="welcome">
+          <h2>Select a task to begin</h2>
+          <p>Pick a task from the left panel. You'll get an instruction, then call tools step by step to complete it. Your performance is scored by a rubric at the end.</p>
+        </div>
+      </div>
+
+      <div class="action-log" id="actionLog"></div>
+
+      <div class="input-area" id="inputArea" style="display: none;">
+        <div class="tool-select-row">
+          <select id="toolSelect">
+            <option value="">-- select a tool --</option>
+          </select>
+        </div>
+        <textarea class="params-input" id="paramsInput" placeholder='{"emp_id": "emp_0001"}'></textarea>
+        <div class="input-buttons">
+          <button class="btn btn-primary" id="btnStep" onclick="sendStep()">Send Tool Call</button>
+          <button class="btn btn-secondary" id="btnDone" onclick="finishEpisode()">Finish & Evaluate</button>
+          <button class="btn btn-danger" id="btnReset" onclick="resetCurrentTask()">Reset Task</button>
+        </div>
+      </div>
+    </div>
+
+    <!-- Right: Tools & Evaluation -->
+    <div class="panel-right">
+      <div class="panel-header">Available Tools</div>
+      <div class="tools-section" id="toolsSection"></div>
+      <div class="eval-section" id="evalSection" style="display: none;">
+        <div class="panel-header" style="padding: 0 0 8px 0; border: none;">Evaluation</div>
+        <div class="eval-header">
+          <span class="eval-score" id="evalScore">--</span>
+          <span id="evalLabel" style="font-size: 12px; color: #667;"></span>
+        </div>
+        <ul class="eval-criteria" id="evalCriteria"></ul>
+      </div>
+    </div>
+  </div>
+
+  <script>
+    const API_BASE = window.location.origin;
+    let tasks = [];
+    let currentTaskIdx = null;
+    let currentStep = 0;
+    let maxSteps = 15;
+    let episodeDone = false;
+    let availableTools = [];
+    let toolDefs = [];
+
+    // --- Init ---
+    async function init() {
+      await loadTasks();
+      await loadToolDefs();
+      renderTaskList();
+      renderToolsPanel();
+    }
+
+    async function loadTasks() {
+      const res = await fetch(`${API_BASE}/api/tasks`);
+      tasks = await res.json();
+    }
+
+    async function loadToolDefs() {
+      const res = await fetch(`${API_BASE}/api/tool_definitions`);
+      toolDefs = await res.json();
+    }
+
+    // --- Task List ---
+    function renderTaskList(filter = 'all') {
+      const list = document.getElementById('taskList');
+      const filtered = filter === 'all' ? tasks : tasks.filter(t => t.difficulty === filter);
+      list.innerHTML = filtered.map((t, i) => `
+        <div class="task-item" data-idx="${t.index}" onclick="selectTask(${t.index})">
+          <div class="task-id">${t.task_id}</div>
+          <div class="task-title">${t.instruction}</div>
+          <div class="task-meta">
+            <span class="task-tag tag-${t.difficulty}">${t.difficulty}</span>
+            <span class="task-tag tag-${t.category}">${t.category}</span>
+          </div>
+        </div>
+      `).join('');
+    }
+
+    // Filter buttons
+    document.querySelectorAll('.filter-btn').forEach(btn => {
+      btn.addEventListener('click', () => {
+        document.querySelectorAll('.filter-btn').forEach(b => b.classList.remove('active'));
+        btn.classList.add('active');
+        renderTaskList(btn.dataset.filter);
+      });
+    });
+
+    // --- Select & Reset Task ---
+    async function selectTask(idx) {
+      currentTaskIdx = idx;
+      currentStep = 0;
+      episodeDone = false;
+
+      // Highlight active
+      document.querySelectorAll('.task-item').forEach(el => el.classList.remove('active'));
+      const active = document.querySelector(`.task-item[data-idx="${idx}"]`);
+      if (active) active.classList.add('active');
+
+      // Reset env
+      const res = await fetch(`${API_BASE}/api/reset`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ task_idx: idx }),
+      });
+      const data = await res.json();
+
+      // Update instruction
+      const instrEl = document.getElementById('taskInstruction');
+      const task = tasks.find(t => t.index === idx);
+      instrEl.innerHTML = `
+        <h3>
+          <span class="task-tag tag-${task.difficulty}">${task.difficulty}</span>
+          <span class="task-tag tag-${task.category}">${task.category}</span>
+          ${data.task_id}
+        </h3>
+        <p>${data.instruction}</p>
+        <div class="step-indicator">
+          <span>Step ${currentStep}/${maxSteps}</span>
+          <div class="step-bar"><div class="step-bar-fill" style="width: 0%"></div></div>
+        </div>
+      `;
+
+      // Clear log & show input
+      document.getElementById('actionLog').innerHTML = '';
+      document.getElementById('inputArea').style.display = 'block';
+      document.getElementById('evalSection').style.display = 'none';
+
+      // Populate tool select
+      availableTools = data.available_tools || [];
+      const sel = document.getElementById('toolSelect');
+      sel.innerHTML = '<option value="">-- select a tool --</option>' +
+        availableTools.map(t => `<option value="${t}">${t}</option>`).join('');
+
+      updateButtons();
+    }
+
+    async function resetCurrentTask() {
+      if (currentTaskIdx !== null) {
+        await selectTask(currentTaskIdx);
+      }
+    }
+
+    // --- Send Step ---
+    async function sendStep() {
+      const toolName = document.getElementById('toolSelect').value;
+      if (!toolName) { alert('Select a tool first'); return; }
+
+      let params = {};
+      const paramsText = document.getElementById('paramsInput').value.trim();
+      if (paramsText) {
+        try {
+          params = JSON.parse(paramsText);
+        } catch (e) {
+          alert('Invalid JSON in parameters: ' + e.message);
+          return;
+        }
+      }
+
+      document.getElementById('btnStep').disabled = true;
+      document.getElementById('btnStep').innerHTML = '<span class="spinner"></span> Running...';
+
+      const res = await fetch(`${API_BASE}/api/step`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ tool_name: toolName, arguments: params }),
+      });
+      const data = await res.json();
+
+      currentStep = data.step || currentStep + 1;
+      episodeDone = data.done || false;
+
+      // Add to log
+      addLogEntry(toolName, params, data.tool_result, data.done, data.reward);
+
+      // Update step indicator
+      updateStepIndicator();
+
+      // If done, show evaluation
+      if (episodeDone && data.metadata && data.metadata.evaluation) {
+        showEvaluation(data.metadata.evaluation);
+      }
+
+      // Clear input
+      document.getElementById('paramsInput').value = '';
+      updateButtons();
+    }
+
+    async function finishEpisode() {
+      // Keep calling step until done to trigger evaluation
+      if (!episodeDone) {
+        // Send a no-op step to trigger final evaluation
+        const res = await fetch(`${API_BASE}/api/evaluate`, {
+          method: 'POST',
+          headers: { 'Content-Type': 'application/json' },
+        });
+        const data = await res.json();
+        episodeDone = true;
+        showEvaluation(data);
+        updateButtons();
+      }
+    }
+
+    // --- Log ---
+    function addLogEntry(toolName, params, result, done, reward) {
+      const log = document.getElementById('actionLog');
+      const isSuccess = result && result.success !== false;
+      const resultJson = JSON.stringify(result, null, 2);
+      const paramsJson = JSON.stringify(params, null, 2);
+
+      const entry = document.createElement('div');
+      entry.className = 'log-entry';
+      entry.innerHTML = `
+        <div class="log-step-label">Step ${currentStep}</div>
+        <div class="log-action">
+          <span class="tool-name">${toolName}</span>
+          <pre>${paramsJson}</pre>
+        </div>
+        <div class="log-result ${isSuccess ? 'success' : 'error'}">
+          <pre>${resultJson.length > 800 ? resultJson.substring(0, 800) + '\n...' : resultJson}</pre>
+        </div>
+      `;
+      log.appendChild(entry);
+      log.scrollTop = log.scrollHeight;
+    }
+
+    // --- Evaluation ---
+    function showEvaluation(evalData) {
+      const section = document.getElementById('evalSection');
+      section.style.display = 'block';
+
+      const score = evalData.score || 0;
+      const scoreEl = document.getElementById('evalScore');
+      scoreEl.textContent = `${Math.round(score * 100)}%`;
+      scoreEl.className = 'eval-score ' + (score >= 1 ? 'pass' : score >= 0.5 ? 'partial' : 'fail');
+
+      const labelEl = document.getElementById('evalLabel');
+      labelEl.textContent = evalData.passed ? 'ALL CRITERIA MET' : `${evalData.passed_count}/${evalData.total_criteria} criteria`;
+
+      const criteria = document.getElementById('evalCriteria');
+      criteria.innerHTML = (evalData.criteria_results || []).map(c => `
+        <li>
+          <span class="${c.passed ? 'icon-pass' : 'icon-fail'}">${c.passed ? '✓' : '✗'}</span>
+          <div>
+            <div style="color: ${c.passed ? '#4ade80' : '#f87171'}">${c.name}</div>
+            <div class="criteria-desc">${c.description}</div>
+          </div>
+        </li>
+      `).join('');
+    }
+
+    // --- Helpers ---
+    function updateStepIndicator() {
+      const pct = (currentStep / maxSteps) * 100;
+      const indicator = document.querySelector('.step-indicator');
+      if (indicator) {
+        indicator.querySelector('span').textContent = `Step ${currentStep}/${maxSteps}`;
+        indicator.querySelector('.step-bar-fill').style.width = `${pct}%`;
+      }
+    }
+
+    function updateButtons() {
+      document.getElementById('btnStep').disabled = episodeDone;
+      document.getElementById('btnStep').innerHTML = episodeDone ? 'Episode Done' : 'Send Tool Call';
+    }
+
+    function renderToolsPanel() {
+      const section = document.getElementById('toolsSection');
+      section.innerHTML = toolDefs.map(t => `
+        <div class="tool-info" onclick="selectTool('${t.name}')">
+          ${t.name}
+          <div class="tool-desc">${t.description.substring(0, 80)}${t.description.length > 80 ? '...' : ''}</div>
+        </div>
+      `).join('');
+    }
+
+    function selectTool(name) {
+      document.getElementById('toolSelect').value = name;
+      // Show parameter hints
+      const tool = toolDefs.find(t => t.name === name);
+      if (tool && tool.parameters && tool.parameters.properties) {
+        const props = tool.parameters.properties;
+        const required = tool.parameters.required || [];
+        const hint = {};
+        for (const [key, val] of Object.entries(props)) {
+          hint[key] = val.description || val.type;
+        }
+        document.getElementById('paramsInput').placeholder = JSON.stringify(hint, null, 2);
+      }
+    }
+
+    init();
+  </script>
+</body>
+</html>

server/tasks.py

@@ -0,0 +1,871 @@
+"""Task definitions and generation for HR Onboarding/Offboarding environment.
+
+Each task has:
+- A natural language instruction
+- Difficulty level (simple, medium, complex, edge_case)
+- Category (onboarding, offboarding, cross_workflow, lookup)
+- Expected tool sequence (for rubric evaluation)
+- Rubric criteria
+- World state setup (pre-conditions to set before the task)
+"""
+
+import random
+import copy
+from typing import Any, Optional
+try:
+    from .world import WorldState
+except ImportError:
+    from world import WorldState
+
+
+class Task:
+    """A single task definition."""
+
+    def __init__(self, task_id: str, instruction: str, difficulty: str, category: str,
+                 expected_tools: list[str], rubric_criteria: list[dict],
+                 setup_fn: Any = None, context: dict = None):
+        self.task_id = task_id
+        self.instruction = instruction
+        self.difficulty = difficulty  # simple, medium, complex, edge_case
+        self.category = category  # onboarding, offboarding, cross_workflow, lookup
+        self.expected_tools = expected_tools
+        self.rubric_criteria = rubric_criteria
+        self.setup_fn = setup_fn  # function to prepare world state
+        self.context = context or {}  # dynamic context (emp_ids, etc.)
+
+    def to_dict(self) -> dict:
+        return {
+            "task_id": self.task_id,
+            "instruction": self.instruction,
+            "difficulty": self.difficulty,
+            "category": self.category,
+            "expected_tools": self.expected_tools,
+            "rubric_criteria": [c for c in self.rubric_criteria],
+            "context": self.context,
+        }
+
+
+def _pick_employee(world: WorldState, status: str = "active", department: str = None,
+                   level: str = None, has_manager: bool = None) -> Optional[dict]:
+    """Pick a random employee matching criteria."""
+    candidates = world.state["employees"]
+    if status:
+        candidates = [e for e in candidates if e["status"] == status]
+    if department:
+        candidates = [e for e in candidates if e["department"] == department]
+    if level:
+        candidates = [e for e in candidates if e["level"] == level]
+    if has_manager is True:
+        candidates = [e for e in candidates if e.get("manager_id")]
+    if has_manager is False:
+        candidates = [e for e in candidates if not e.get("manager_id")]
+    return random.choice(candidates) if candidates else None
+
+
+def _pick_manager_in_dept(world: WorldState, department: str, min_level: str = "L3") -> Optional[dict]:
+    """Pick a manager-level employee in a department."""
+    min_lvl = int(min_level[1])
+    candidates = [e for e in world.state["employees"]
+                  if e["department"] == department
+                  and e["status"] == "active"
+                  and int(e["level"][1]) >= min_lvl]
+    return random.choice(candidates) if candidates else None
+
+
+class TaskGenerator:
+    """Generates tasks from templates, binding them to specific world state entities."""
+
+    def __init__(self, world: WorldState, seed: int = 42):
+        self.world = world
+        self.rng = random.Random(seed)
+        self._task_counter = 0
+
+    def _next_id(self) -> str:
+        self._task_counter += 1
+        return f"task_{self._task_counter:04d}"
+
+    def generate_all_tasks(self) -> list[Task]:
+        """Generate the full task set (~100 tasks)."""
+        tasks = []
+        tasks.extend(self._simple_lookup_tasks())
+        tasks.extend(self._simple_onboarding_tasks())
+        tasks.extend(self._medium_onboarding_tasks())
+        tasks.extend(self._complex_onboarding_tasks())
+        tasks.extend(self._simple_offboarding_tasks())
+        tasks.extend(self._medium_offboarding_tasks())
+        tasks.extend(self._complex_offboarding_tasks())
+        tasks.extend(self._edge_case_tasks())
+        tasks.extend(self._cross_workflow_tasks())
+        return tasks
+
+    def generate_train_eval_split(self, eval_ratio: float = 0.2) -> tuple[list[Task], list[Task]]:
+        """Split tasks into training and evaluation sets."""
+        all_tasks = self.generate_all_tasks()
+        self.rng.shuffle(all_tasks)
+        split_idx = int(len(all_tasks) * (1 - eval_ratio))
+        return all_tasks[:split_idx], all_tasks[split_idx:]
+
+    # ---- Simple Lookup Tasks (10) ----
+    def _simple_lookup_tasks(self) -> list[Task]:
+        tasks = []
+        depts = ["Engineering", "Product", "Marketing", "Sales", "Finance", "HR", "Data Science", "Security"]
+
+        # 1. Look up employee by ID
+        for _ in range(3):
+            emp = _pick_employee(self.world, status="active")
+            if not emp:
+                continue
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=f"Look up the employee record for {emp['name']} (ID: {emp['emp_id']}).",
+                difficulty="simple",
+                category="lookup",
+                expected_tools=["hr_read_employee"],
+                rubric_criteria=[
+                    {"name": "correct_tool", "description": "Used hr_read_employee", "check": "tool_used:hr_read_employee"},
+                    {"name": "correct_id", "description": "Passed correct emp_id", "check": f"param_value:hr_read_employee.emp_id={emp['emp_id']}"},
+                ],
+                context={"target_emp_id": emp["emp_id"], "target_name": emp["name"]},
+            ))
+
+        # 2. Search employees by department
+        for dept in self.rng.sample(depts, 2):
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=f"List all employees in the {dept} department.",
+                difficulty="simple",
+                category="lookup",
+                expected_tools=["hr_search_employees"],
+                rubric_criteria=[
+                    {"name": "correct_tool", "description": "Used hr_search_employees", "check": "tool_used:hr_search_employees"},
+                    {"name": "correct_dept", "description": "Filtered by correct department", "check": f"param_value:hr_search_employees.department={dept}"},
+                ],
+                context={"department": dept},
+            ))
+
+        # 3. Get org chart
+        dept = self.rng.choice(depts)
+        tasks.append(Task(
+            task_id=self._next_id(),
+            instruction=f"Show me the organizational chart for the {dept} department.",
+            difficulty="simple",
+            category="lookup",
+            expected_tools=["hr_get_org_chart"],
+            rubric_criteria=[
+                {"name": "correct_tool", "description": "Used hr_get_org_chart", "check": "tool_used:hr_get_org_chart"},
+                {"name": "correct_dept", "description": "Passed correct department", "check": f"param_value:hr_get_org_chart.department={dept}"},
+            ],
+            context={"department": dept},
+        ))
+
+        # 4. Check available assets
+        tasks.append(Task(
+            task_id=self._next_id(),
+            instruction="What laptops are currently available for assignment?",
+            difficulty="simple",
+            category="lookup",
+            expected_tools=["it_get_available_assets"],
+            rubric_criteria=[
+                {"name": "correct_tool", "description": "Used it_get_available_assets", "check": "tool_used:it_get_available_assets"},
+                {"name": "correct_type", "description": "Filtered by laptop type", "check": "param_value:it_get_available_assets.asset_type=laptop"},
+            ],
+        ))
+
+        # 5. Check software licenses
+        tasks.append(Task(
+            task_id=self._next_id(),
+            instruction="Check how many Jira license seats are available.",
+            difficulty="simple",
+            category="lookup",
+            expected_tools=["it_get_software_licenses"],
+            rubric_criteria=[
+                {"name": "correct_tool", "description": "Used it_get_software_licenses", "check": "tool_used:it_get_software_licenses"},
+                {"name": "correct_software", "description": "Filtered by Jira", "check": "param_value:it_get_software_licenses.software_name=Jira"},
+            ],
+        ))
+
+        # 6. Look up policy
+        tasks.append(Task(
+            task_id=self._next_id(),
+            instruction="What is the company's policy on onboarding new employees?",
+            difficulty="simple",
+            category="lookup",
+            expected_tools=["policy_lookup"],
+            rubric_criteria=[
+                {"name": "correct_tool", "description": "Used policy_lookup", "check": "tool_used:policy_lookup"},
+                {"name": "relevant_topic", "description": "Searched for onboarding topic", "check": "param_contains:policy_lookup.topic=onboard"},
+            ],
+        ))
+
+        # 7. Get security groups
+        tasks.append(Task(
+            task_id=self._next_id(),
+            instruction="List all security groups and their accessible resources.",
+            difficulty="simple",
+            category="lookup",
+            expected_tools=["access_get_security_groups"],
+            rubric_criteria=[
+                {"name": "correct_tool", "description": "Used access_get_security_groups", "check": "tool_used:access_get_security_groups"},
+            ],
+        ))
+
+        return tasks
+
+    # ---- Simple Onboarding Tasks (5) ----
+    def _simple_onboarding_tasks(self) -> list[Task]:
+        tasks = []
+
+        # Check onboarding status for a pending employee
+        for _ in range(3):
+            emp = _pick_employee(self.world, status="pending")
+            if not emp:
+                continue
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=f"Check the onboarding status for employee {emp['name']} ({emp['emp_id']}).",
+                difficulty="simple",
+                category="onboarding",
+                expected_tools=["onboarding_get_status"],
+                rubric_criteria=[
+                    {"name": "correct_tool", "description": "Used onboarding_get_status", "check": "tool_used:onboarding_get_status"},
+                    {"name": "correct_emp", "description": "Checked correct employee", "check": f"param_value:onboarding_get_status.employee_id={emp['emp_id']}"},
+                ],
+                context={"target_emp_id": emp["emp_id"]},
+            ))
+
+        # Check available assets for a department
+        dept = self.rng.choice(["Engineering", "Data Science"])
+        tasks.append(Task(
+            task_id=self._next_id(),
+            instruction=f"Check if there are available laptops and Jira licenses for a new {dept} hire.",
+            difficulty="simple",
+            category="onboarding",
+            expected_tools=["it_get_available_assets", "it_get_software_licenses"],
+            rubric_criteria=[
+                {"name": "checked_assets", "description": "Checked available assets", "check": "tool_used:it_get_available_assets"},
+                {"name": "checked_licenses", "description": "Checked software licenses", "check": "tool_used:it_get_software_licenses"},
+            ],
+            context={"department": dept},
+        ))
+
+        return tasks
+
+    # ---- Medium Onboarding Tasks (10) ----
+    def _medium_onboarding_tasks(self) -> list[Task]:
+        tasks = []
+        names = [
+            ("Priya Sharma", "Engineering", "L2", "Software Engineer"),
+            ("Alex Chen", "Product", "L2", "Product Analyst"),
+            ("Maria Garcia", "Marketing", "L1", "Marketing Associate"),
+            ("James Wilson", "Data Science", "L2", "Data Analyst"),
+            ("Aisha Patel", "Sales", "L1", "Sales Representative"),
+            ("Tom Nguyen", "Finance", "L2", "Financial Analyst"),
+            ("Sara Kim", "HR", "L1", "HR Coordinator"),
+            ("David Brown", "Security", "L2", "Security Analyst"),
+            ("Li Wei", "Engineering", "L3", "Senior Engineer"),
+            ("Emma Davis", "Product", "L3", "Senior PM"),
+        ]
+
+        for name, dept, level, role in names:
+            manager = _pick_manager_in_dept(self.world, dept)
+            manager_name = manager["name"] if manager else "their department head"
+            manager_id = manager["emp_id"] if manager else None
+
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=f"Onboard new hire {name} to {dept} as {level} {role}. "
+                           f"Create their employee record and initiate the onboarding request.",
+                difficulty="medium",
+                category="onboarding",
+                expected_tools=["hr_create_employee", "onboarding_create_request"],
+                rubric_criteria=[
+                    {"name": "created_employee", "description": "Created employee record", "check": "tool_used:hr_create_employee"},
+                    {"name": "correct_name", "description": "Used correct name", "check": f"param_value:hr_create_employee.name={name}"},
+                    {"name": "correct_dept", "description": "Assigned to correct department", "check": f"param_value:hr_create_employee.department={dept}"},
+                    {"name": "correct_level", "description": "Set correct level", "check": f"param_value:hr_create_employee.level={level}"},
+                    {"name": "correct_role", "description": "Set correct role", "check": f"param_value:hr_create_employee.role={role}"},
+                    {"name": "initiated_onboarding", "description": "Created onboarding request", "check": "tool_used:onboarding_create_request"},
+                    {"name": "sequencing", "description": "Created employee before onboarding request", "check": "tool_order:hr_create_employee<onboarding_create_request"},
+                ],
+                context={"new_hire_name": name, "department": dept, "level": level, "role": role, "manager_id": manager_id},
+            ))
+
+        return tasks
+
+    # ---- Complex Onboarding Tasks (10) ----
+    def _complex_onboarding_tasks(self) -> list[Task]:
+        tasks = []
+
+        # Full onboarding with everything
+        complex_hires = [
+            ("John Lee", "Data Science", "L3", "Team Lead - ML"),
+            ("Fatima Al-Rashid", "Engineering", "L4", "Engineering Manager"),
+            ("Carlos Mendez", "Security", "L3", "Senior Security Engineer"),
+            ("Rachel Green", "Product", "L2", "Product Designer"),
+            ("Raj Kapoor", "Engineering", "L2", "Backend Developer"),
+        ]
+
+        for name, dept, level, role in complex_hires:
+            manager = _pick_manager_in_dept(self.world, dept)
+            manager_ref = f" Their manager will be {manager['name']} ({manager['emp_id']})." if manager else ""
+
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=f"Fully onboard {name} as {level} {role} in {dept}.{manager_ref} "
+                           f"Create the employee record, initiate onboarding, assign a laptop, "
+                           f"create IT accounts (email, Slack, VPN), set up appropriate access roles "
+                           f"for their level, send a welcome email to the team channel, "
+                           f"and schedule an orientation meeting with their manager.",
+                difficulty="complex",
+                category="onboarding",
+                expected_tools=[
+                    "hr_create_employee", "onboarding_create_request", "it_get_available_assets",
+                    "it_assign_asset", "it_create_account", "access_assign_role",
+                    "slack_send_message", "email_send", "meeting_schedule",
+                    "onboarding_complete_step",
+                ],
+                rubric_criteria=[
+                    {"name": "created_employee", "description": "Created employee record", "check": "tool_used:hr_create_employee"},
+                    {"name": "initiated_onboarding", "description": "Created onboarding request", "check": "tool_used:onboarding_create_request"},
+                    {"name": "assigned_laptop", "description": "Assigned a laptop", "check": "tool_used:it_assign_asset"},
+                    {"name": "created_accounts", "description": "Created IT accounts", "check": "tool_used:it_create_account"},
+                    {"name": "assigned_access", "description": "Assigned access roles", "check": "tool_used:access_assign_role"},
+                    {"name": "sent_welcome", "description": "Sent welcome communication", "check": "tool_used_any:email_send,slack_send_message"},
+                    {"name": "scheduled_orientation", "description": "Scheduled orientation meeting", "check": "tool_used:meeting_schedule"},
+                    {"name": "sequencing_create_first", "description": "Created employee before other steps", "check": "tool_order:hr_create_employee<onboarding_create_request"},
+                    {"name": "sequencing_asset_check", "description": "Checked available assets before assigning", "check": "tool_order:it_get_available_assets<it_assign_asset"},
+                    {"name": "completeness", "description": "Completed at least 3 onboarding steps", "check": "tool_count:onboarding_complete_step>=3"},
+                ],
+                context={"new_hire_name": name, "department": dept, "level": level, "role": role,
+                          "manager_id": manager["emp_id"] if manager else None},
+            ))
+
+        # Complex with approval chains
+        for name, dept, level, role in [
+            ("Sanjay Gupta", "Security", "L2", "Security Analyst"),
+            ("Nina Petrova", "Engineering", "L4", "Director of Platform"),
+            ("Hassan Ahmed", "Data Science", "L3", "Lead Data Scientist"),
+            ("Laura Martinez", "Finance", "L3", "Senior Financial Analyst"),
+            ("Kevin O'Brien", "Product", "L4", "VP of Product"),
+        ]:
+            manager = _pick_manager_in_dept(self.world, dept, min_level="L4")
+            needs_security = dept == "Security" or int(level[1]) >= 4
+
+            instruction = (
+                f"Onboard {name} as {level} {role} in {dept}. "
+                f"Create the employee record, initiate onboarding, and obtain all necessary approvals. "
+            )
+            if needs_security:
+                instruction += "Note: this role requires security approval for badge access. "
+            instruction += (
+                "Then assign appropriate assets, create accounts, provision access roles, "
+                "create a physical badge, send welcome communications, and schedule orientation."
+            )
+
+            criteria = [
+                {"name": "created_employee", "description": "Created employee record", "check": "tool_used:hr_create_employee"},
+                {"name": "initiated_onboarding", "description": "Created onboarding request", "check": "tool_used:onboarding_create_request"},
+                {"name": "got_approval", "description": "Submitted approval request", "check": "tool_used:approval_request"},
+                {"name": "assigned_asset", "description": "Assigned an asset", "check": "tool_used:it_assign_asset"},
+                {"name": "created_accounts", "description": "Created IT accounts", "check": "tool_used:it_create_account"},
+                {"name": "assigned_role", "description": "Assigned access role", "check": "tool_used:access_assign_role"},
+                {"name": "created_badge", "description": "Created physical badge", "check": "tool_used:access_create_badge"},
+                {"name": "sent_communications", "description": "Sent welcome communications", "check": "tool_used_any:email_send,slack_send_message"},
+                {"name": "scheduled_meeting", "description": "Scheduled orientation", "check": "tool_used:meeting_schedule"},
+            ]
+            if needs_security:
+                criteria.append({"name": "security_approval", "description": "Got security approval before badge",
+                                 "check": "tool_order:approval_request<access_create_badge"})
+
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=instruction,
+                difficulty="complex",
+                category="onboarding",
+                expected_tools=["hr_create_employee", "onboarding_create_request", "approval_request",
+                               "it_get_available_assets", "it_assign_asset", "it_create_account",
+                               "access_assign_role", "access_create_badge", "email_send",
+                               "slack_send_message", "meeting_schedule", "onboarding_complete_step"],
+                rubric_criteria=criteria,
+                context={"new_hire_name": name, "department": dept, "level": level, "role": role,
+                          "manager_id": manager["emp_id"] if manager else None,
+                          "needs_security_approval": needs_security},
+            ))
+
+        return tasks
+
+    # ---- Simple Offboarding Tasks (5) ----
+    def _simple_offboarding_tasks(self) -> list[Task]:
+        tasks = []
+
+        for _ in range(5):
+            emp = _pick_employee(self.world, status="active")
+            if not emp:
+                continue
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=f"Check the offboarding status for {emp['name']} ({emp['emp_id']}).",
+                difficulty="simple",
+                category="offboarding",
+                expected_tools=["offboarding_get_status"],
+                rubric_criteria=[
+                    {"name": "correct_tool", "description": "Used offboarding_get_status", "check": "tool_used:offboarding_get_status"},
+                    {"name": "correct_emp", "description": "Checked correct employee", "check": f"param_value:offboarding_get_status.employee_id={emp['emp_id']}"},
+                ],
+                context={"target_emp_id": emp["emp_id"]},
+            ))
+
+        return tasks
+
+    # ---- Medium Offboarding Tasks (8) ----
+    def _medium_offboarding_tasks(self) -> list[Task]:
+        tasks = []
+        offboarding_scenarios = [
+            ("resignation", "Sarah Kim is resigning"),
+            ("resignation", "Michael Torres is leaving for another opportunity"),
+            ("resignation", "Ananya Desai is moving to a different city"),
+            ("termination", "Jake Powell is being terminated for policy violations"),
+            ("resignation", "Sophie Liu has accepted an offer elsewhere"),
+            ("resignation", "Daniel Park is retiring"),
+            ("resignation", "Christina Muller is taking a career break"),
+            ("resignation", "Yuki Tanaka is going back to school"),
+        ]
+
+        for reason, scenario in offboarding_scenarios:
+            emp = _pick_employee(self.world, status="active", has_manager=True)
+            if not emp:
+                continue
+
+            name = emp["name"]
+            instruction = (
+                f"Initiate offboarding for {name} ({emp['emp_id']}) who {scenario.split(' is ')[1] if ' is ' in scenario else 'is leaving'}. "
+                f"Revoke their system access and notify IT."
+            )
+
+            criteria = [
+                {"name": "created_request", "description": "Created offboarding request", "check": "tool_used:offboarding_create_request"},
+                {"name": "correct_reason", "description": "Set correct reason", "check": f"param_value:offboarding_create_request.reason={reason}"},
+                {"name": "revoked_access", "description": "Revoked IT access", "check": "tool_used:it_revoke_access"},
+                {"name": "notified", "description": "Sent notification", "check": "tool_used_any:email_send,slack_send_message"},
+            ]
+
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=instruction,
+                difficulty="medium",
+                category="offboarding",
+                expected_tools=["offboarding_create_request", "it_revoke_access", "email_send"],
+                rubric_criteria=criteria,
+                context={"target_emp_id": emp["emp_id"], "reason": reason},
+            ))
+
+        return tasks
+
+    # ---- Complex Offboarding Tasks (8) ----
+    def _complex_offboarding_tasks(self) -> list[Task]:
+        tasks = []
+
+        # Full offboarding for managers/directors with reports
+        for _ in range(4):
+            # Find an employee who has direct reports
+            candidates = [e for e in self.world.state["employees"]
+                         if e["status"] == "active" and int(e["level"][1]) >= 3]
+            if not candidates:
+                continue
+            emp = self.rng.choice(candidates)
+            reports = self.world.get_direct_reports(emp["emp_id"])
+            skip_mgr = self.world.get_skip_level_manager(emp["emp_id"])
+            skip_mgr_ref = f" Reassign their reports to {skip_mgr['name']} ({skip_mgr['emp_id']})." if skip_mgr else " Reassign their reports to their skip-level manager."
+
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=(
+                    f"Fully offboard {emp['name']} ({emp['emp_id']}), a {emp['level']} {emp['role']} in {emp['department']} "
+                    f"who is resigning. Revoke all access roles and IT access, reclaim their assigned assets, "
+                    f"revoke their badge.{skip_mgr_ref} "
+                    f"Send a farewell email to the team, schedule an exit interview, "
+                    f"and complete all offboarding steps."
+                ),
+                difficulty="complex",
+                category="offboarding",
+                expected_tools=[
+                    "offboarding_create_request", "it_revoke_access", "access_revoke_role",
+                    "email_send", "slack_send_message", "meeting_schedule",
+                    "offboarding_complete_step",
+                ],
+                rubric_criteria=[
+                    {"name": "created_request", "description": "Created offboarding request", "check": "tool_used:offboarding_create_request"},
+                    {"name": "revoked_it", "description": "Revoked IT access", "check": "tool_used:it_revoke_access"},
+                    {"name": "revoked_roles", "description": "Revoked access roles", "check": "tool_used_any:access_revoke_role"},
+                    {"name": "farewell", "description": "Sent farewell communication", "check": "tool_used_any:email_send,slack_send_message"},
+                    {"name": "exit_interview", "description": "Scheduled exit interview", "check": "tool_used:meeting_schedule"},
+                    {"name": "completed_steps", "description": "Completed offboarding steps", "check": "tool_count:offboarding_complete_step>=2"},
+                ],
+                context={"target_emp_id": emp["emp_id"], "has_reports": len(reports) > 0,
+                          "skip_manager_id": skip_mgr["emp_id"] if skip_mgr else None},
+            ))
+
+        # Offboarding with asset reclamation
+        for _ in range(4):
+            emp = _pick_employee(self.world, status="active")
+            if not emp:
+                continue
+
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=(
+                    f"Process the complete offboarding for {emp['name']} ({emp['emp_id']}) from {emp['department']}. "
+                    f"Create the offboarding request, revoke all system access and roles, "
+                    f"check for and reclaim any assigned assets, send farewell notifications "
+                    f"via email and Slack, and complete all offboarding steps."
+                ),
+                difficulty="complex",
+                category="offboarding",
+                expected_tools=[
+                    "offboarding_create_request", "it_revoke_access",
+                    "email_send", "slack_send_message", "offboarding_complete_step",
+                ],
+                rubric_criteria=[
+                    {"name": "created_request", "description": "Created offboarding request", "check": "tool_used:offboarding_create_request"},
+                    {"name": "revoked_it", "description": "Revoked IT access", "check": "tool_used:it_revoke_access"},
+                    {"name": "farewell_email", "description": "Sent farewell email", "check": "tool_used:email_send"},
+                    {"name": "farewell_slack", "description": "Sent farewell Slack message", "check": "tool_used:slack_send_message"},
+                    {"name": "completed_steps", "description": "Completed offboarding steps", "check": "tool_count:offboarding_complete_step>=2"},
+                ],
+                context={"target_emp_id": emp["emp_id"]},
+            ))
+
+        return tasks
+
+    # ---- Edge Case Tasks (15) ----
+    def _edge_case_tasks(self) -> list[Task]:
+        tasks = []
+
+        # 1. Headcount limit exceeded
+        for dept in ["Marketing", "Finance"]:
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=f"Onboard a new L1 Associate to the {dept} department. Create their employee record and start onboarding.",
+                difficulty="edge_case",
+                category="onboarding",
+                expected_tools=["hr_create_employee"],
+                rubric_criteria=[
+                    {"name": "attempted_create", "description": "Attempted to create employee", "check": "tool_used:hr_create_employee"},
+                    {"name": "handled_limit", "description": "Recognized or handled headcount limit error", "check": "result_contains:headcount_limit"},
+                ],
+                context={"department": dept, "edge_case": "headcount_limit"},
+            ))
+
+        # 2. Software license full
+        tasks.append(Task(
+            task_id=self._next_id(),
+            instruction="Assign a Netsuite license to a new Finance hire. Check license availability first.",
+            difficulty="edge_case",
+            category="onboarding",
+            expected_tools=["it_get_software_licenses"],
+            rubric_criteria=[
+                {"name": "checked_licenses", "description": "Checked license availability", "check": "tool_used:it_get_software_licenses"},
+                {"name": "identified_full", "description": "Recognized licenses are full", "check": "result_contains:no available seats"},
+            ],
+            context={"edge_case": "license_full", "software": "Netsuite"},
+        ))
+
+        # 3. LinkedIn Sales Navigator also full
+        tasks.append(Task(
+            task_id=self._next_id(),
+            instruction="Check if there are available LinkedIn Sales Navigator licenses for a new Sales hire.",
+            difficulty="edge_case",
+            category="onboarding",
+            expected_tools=["it_get_software_licenses"],
+            rubric_criteria=[
+                {"name": "checked_licenses", "description": "Checked licenses", "check": "tool_used:it_get_software_licenses"},
+            ],
+            context={"edge_case": "license_full", "software": "LinkedIn Sales Navigator"},
+        ))
+
+        # 4. Manager on leave — find skip-level
+        emp = _pick_employee(self.world, status="active", has_manager=True)
+        if emp:
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=(
+                    f"Onboard a new hire to {emp['department']} but their designated manager "
+                    f"({emp['manager_id']}) is on leave. Find the skip-level manager to handle approvals "
+                    f"and proceed with onboarding."
+                ),
+                difficulty="edge_case",
+                category="onboarding",
+                expected_tools=["hr_read_employee", "hr_get_org_chart", "hr_create_employee", "onboarding_create_request", "approval_request"],
+                rubric_criteria=[
+                    {"name": "looked_up_manager", "description": "Looked up the manager or org chart", "check": "tool_used_any:hr_read_employee,hr_get_org_chart"},
+                    {"name": "found_skip_level", "description": "Identified skip-level manager", "check": "tool_count:hr_read_employee>=2"},
+                    {"name": "proceeded", "description": "Proceeded with onboarding", "check": "tool_used:hr_create_employee"},
+                ],
+                context={"edge_case": "manager_on_leave", "department": emp["department"], "manager_id": emp["manager_id"]},
+            ))
+
+        # 5. Onboard contractor (different rules)
+        tasks.append(Task(
+            task_id=self._next_id(),
+            instruction=(
+                "Onboard contractor Amit Verma to Engineering as an L2 Contract Developer. "
+                "Contractors have limited access — no VPN, restricted to Jira and Slack only, "
+                "and require legal approval. Create the record, initiate onboarding, "
+                "get legal approval, and provision appropriate (limited) access."
+            ),
+            difficulty="edge_case",
+            category="onboarding",
+            expected_tools=["hr_create_employee", "onboarding_create_request", "approval_request",
+                           "it_create_account", "access_assign_role"],
+            rubric_criteria=[
+                {"name": "created_contractor", "description": "Created employee with is_contractor=true", "check": "param_value:hr_create_employee.is_contractor=True"},
+                {"name": "initiated_onboarding", "description": "Created onboarding request", "check": "tool_used:onboarding_create_request"},
+                {"name": "legal_approval", "description": "Got legal approval", "check": "param_value:approval_request.approval_type=legal_approval"},
+                {"name": "limited_access", "description": "Created limited accounts", "check": "tool_used:it_create_account"},
+            ],
+            context={"edge_case": "contractor_onboarding", "name": "Amit Verma"},
+        ))
+
+        # 6. Offboard employee with unreturned assets
+        emp = _pick_employee(self.world, status="active")
+        if emp:
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=(
+                    f"Offboard {emp['name']} ({emp['emp_id']}) who has company assets that need to be returned. "
+                    f"Check what assets they have assigned, create the offboarding request, "
+                    f"reclaim all assets, revoke access, and complete the process."
+                ),
+                difficulty="edge_case",
+                category="offboarding",
+                expected_tools=["hr_read_employee", "offboarding_create_request", "it_revoke_access"],
+                rubric_criteria=[
+                    {"name": "checked_employee", "description": "Looked up employee record", "check": "tool_used:hr_read_employee"},
+                    {"name": "created_request", "description": "Created offboarding request", "check": "tool_used:offboarding_create_request"},
+                    {"name": "revoked_access", "description": "Revoked access", "check": "tool_used:it_revoke_access"},
+                ],
+                context={"target_emp_id": emp["emp_id"], "edge_case": "unreturned_assets"},
+            ))
+
+        # 7. Offboard someone mid-onboarding (offer rescinded)
+        emp = _pick_employee(self.world, status="pending")
+        if emp:
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=(
+                    f"The offer for {emp['name']} ({emp['emp_id']}) has been rescinded. "
+                    f"They are currently mid-onboarding. Cancel their onboarding, revoke any "
+                    f"provisioned access, and update their status to offboarded."
+                ),
+                difficulty="edge_case",
+                category="offboarding",
+                expected_tools=["hr_read_employee", "onboarding_get_status", "it_revoke_access",
+                               "hr_update_employee"],
+                rubric_criteria=[
+                    {"name": "checked_onboarding", "description": "Checked onboarding status", "check": "tool_used_any:onboarding_get_status,hr_read_employee"},
+                    {"name": "revoked_access", "description": "Revoked any provisioned access", "check": "tool_used:it_revoke_access"},
+                    {"name": "updated_status", "description": "Updated employee status to offboarded", "check": "tool_used:hr_update_employee"},
+                ],
+                context={"target_emp_id": emp["emp_id"], "edge_case": "offer_rescinded"},
+            ))
+
+        # 8. Termination (different policy)
+        emp = _pick_employee(self.world, status="active", has_manager=True)
+        if emp:
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=(
+                    f"{emp['name']} ({emp['emp_id']}) is being terminated effective immediately. "
+                    f"Follow the termination policy: immediately revoke all access, reclaim assets, "
+                    f"create termination offboarding request, and handle final payroll. "
+                    f"Do NOT send farewell communications for terminations."
+                ),
+                difficulty="edge_case",
+                category="offboarding",
+                expected_tools=["offboarding_create_request", "it_revoke_access", "offboarding_complete_step"],
+                rubric_criteria=[
+                    {"name": "created_request", "description": "Created offboarding with termination reason", "check": "param_value:offboarding_create_request.reason=termination"},
+                    {"name": "revoked_access", "description": "Revoked all access", "check": "tool_used:it_revoke_access"},
+                    {"name": "no_farewell", "description": "Did NOT send farewell communications", "check": "tool_not_used:slack_send_message"},
+                    {"name": "completed_steps", "description": "Completed termination steps", "check": "tool_used:offboarding_complete_step"},
+                ],
+                context={"target_emp_id": emp["emp_id"], "edge_case": "termination"},
+            ))
+
+        # 9. Role level mismatch
+        tasks.append(Task(
+            task_id=self._next_id(),
+            instruction=(
+                "Assign the security_admin access role to a new L1 Security Associate. "
+                "The security_admin role requires L4+ level."
+            ),
+            difficulty="edge_case",
+            category="onboarding",
+            expected_tools=["access_assign_role"],
+            rubric_criteria=[
+                {"name": "attempted_assign", "description": "Attempted to assign role", "check": "tool_used:access_assign_role"},
+                {"name": "handled_error", "description": "Recognized level requirement error", "check": "result_contains:does not meet minimum"},
+            ],
+            context={"edge_case": "level_mismatch"},
+        ))
+
+        # 10. Department restriction on role
+        tasks.append(Task(
+            task_id=self._next_id(),
+            instruction=(
+                "A Marketing employee needs access to the Engineering GitHub repository. "
+                "Try to assign them the engineering_developer role."
+            ),
+            difficulty="edge_case",
+            category="onboarding",
+            expected_tools=["access_assign_role"],
+            rubric_criteria=[
+                {"name": "attempted_assign", "description": "Attempted to assign role", "check": "tool_used:access_assign_role"},
+                {"name": "handled_restriction", "description": "Recognized department restriction", "check": "result_contains:restricted to"},
+            ],
+            context={"edge_case": "department_restriction"},
+        ))
+
+        # 11. Look up policy before action
+        tasks.append(Task(
+            task_id=self._next_id(),
+            instruction=(
+                "Before onboarding a new Security team member, look up the badge access policy "
+                "and the onboarding policy to understand what approvals are needed. "
+                "Then explain the requirements."
+            ),
+            difficulty="edge_case",
+            category="lookup",
+            expected_tools=["policy_lookup"],
+            rubric_criteria=[
+                {"name": "looked_up_badge", "description": "Looked up badge/access policy", "check": "tool_used:policy_lookup"},
+                {"name": "multiple_lookups", "description": "Looked up multiple policies", "check": "tool_count:policy_lookup>=2"},
+            ],
+            context={"edge_case": "policy_check"},
+        ))
+
+        return tasks
+
+    # ---- Cross-Workflow Tasks (10) ----
+    def _cross_workflow_tasks(self) -> list[Task]:
+        tasks = []
+
+        # 1-3. Department transfer
+        transfers = [
+            ("Engineering", "Product"),
+            ("Sales", "Marketing"),
+            ("Data Science", "Engineering"),
+        ]
+        for from_dept, to_dept in transfers:
+            emp = _pick_employee(self.world, status="active", department=from_dept)
+            if not emp:
+                continue
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=(
+                    f"{emp['name']} ({emp['emp_id']}) is transferring from {from_dept} to {to_dept}. "
+                    f"Process the department transfer: offboard them from {from_dept} "
+                    f"(revoke department-specific access), update their department, "
+                    f"and onboard them to {to_dept} (assign new access roles, notify new team)."
+                ),
+                difficulty="complex",
+                category="cross_workflow",
+                expected_tools=[
+                    "hr_read_employee", "it_revoke_access", "hr_update_employee",
+                    "access_assign_role", "slack_send_message", "email_send",
+                ],
+                rubric_criteria=[
+                    {"name": "read_employee", "description": "Read employee record", "check": "tool_used:hr_read_employee"},
+                    {"name": "revoked_old_access", "description": "Revoked old department access", "check": "tool_used:it_revoke_access"},
+                    {"name": "updated_dept", "description": "Updated department", "check": "tool_used:hr_update_employee"},
+                    {"name": "new_access", "description": "Assigned new department roles", "check": "tool_used:access_assign_role"},
+                    {"name": "notified_team", "description": "Notified new team", "check": "tool_used_any:email_send,slack_send_message"},
+                ],
+                context={"target_emp_id": emp["emp_id"], "from_dept": from_dept, "to_dept": to_dept},
+            ))
+
+        # 4-5. Rehire previously offboarded employee
+        for _ in range(2):
+            emp = _pick_employee(self.world, status="offboarded")
+            if not emp:
+                continue
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=(
+                    f"Rehire {emp['name']} ({emp['emp_id']}) who was previously offboarded. "
+                    f"Update their status, create a new onboarding request, "
+                    f"provision IT accounts, assign appropriate access, and send welcome-back communications."
+                ),
+                difficulty="complex",
+                category="cross_workflow",
+                expected_tools=[
+                    "hr_read_employee", "hr_update_employee", "onboarding_create_request",
+                    "it_create_account", "access_assign_role", "email_send", "slack_send_message",
+                ],
+                rubric_criteria=[
+                    {"name": "read_employee", "description": "Read employee record first", "check": "tool_used:hr_read_employee"},
+                    {"name": "updated_status", "description": "Updated status to pending/active", "check": "tool_used:hr_update_employee"},
+                    {"name": "new_onboarding", "description": "Created new onboarding request", "check": "tool_used:onboarding_create_request"},
+                    {"name": "provisioned_accounts", "description": "Created IT accounts", "check": "tool_used:it_create_account"},
+                    {"name": "welcome_back", "description": "Sent welcome-back communication", "check": "tool_used_any:email_send,slack_send_message"},
+                ],
+                context={"target_emp_id": emp["emp_id"], "rehire": True},
+            ))
+
+        # 6-8. Bulk operations
+        for dept in self.rng.sample(["Engineering", "Product", "Data Science"], 3):
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=(
+                    f"The {dept} team is onboarding 2 new hires at the same time. "
+                    f"Check available assets and licenses, then report what resources "
+                    f"are available for the new hires."
+                ),
+                difficulty="medium",
+                category="cross_workflow",
+                expected_tools=["it_get_available_assets", "it_get_software_licenses", "hr_search_employees"],
+                rubric_criteria=[
+                    {"name": "checked_assets", "description": "Checked available assets", "check": "tool_used:it_get_available_assets"},
+                    {"name": "checked_licenses", "description": "Checked software licenses", "check": "tool_used:it_get_software_licenses"},
+                ],
+                context={"department": dept},
+            ))
+
+        # 9-10. Manager leaving — handle succession
+        for _ in range(2):
+            candidates = [e for e in self.world.state["employees"]
+                         if e["status"] == "active" and int(e["level"][1]) >= 3
+                         and e.get("manager_id")]
+            if not candidates:
+                continue
+            mgr = self.rng.choice(candidates)
+            reports = self.world.get_direct_reports(mgr["emp_id"])
+            skip = self.world.get_skip_level_manager(mgr["emp_id"])
+
+            tasks.append(Task(
+                task_id=self._next_id(),
+                instruction=(
+                    f"Manager {mgr['name']} ({mgr['emp_id']}) in {mgr['department']} is leaving. "
+                    f"They have {len(reports)} direct reports. Process their offboarding: "
+                    f"reassign their direct reports to the skip-level manager, "
+                    f"revoke all their access, create the offboarding request, "
+                    f"and notify the team about the transition."
+                ),
+                difficulty="complex",
+                category="cross_workflow",
+                expected_tools=[
+                    "hr_read_employee", "hr_get_org_chart", "offboarding_create_request",
+                    "hr_update_employee", "it_revoke_access", "email_send", "slack_send_message",
+                ],
+                rubric_criteria=[
+                    {"name": "read_manager", "description": "Looked up manager info", "check": "tool_used:hr_read_employee"},
+                    {"name": "offboarding", "description": "Created offboarding request", "check": "tool_used:offboarding_create_request"},
+                    {"name": "reassigned", "description": "Updated reports' manager", "check": "tool_used:hr_update_employee"},
+                    {"name": "revoked_access", "description": "Revoked manager's access", "check": "tool_used:it_revoke_access"},
+                    {"name": "notified_team", "description": "Notified team", "check": "tool_used_any:email_send,slack_send_message"},
+                ],
+                context={"target_emp_id": mgr["emp_id"], "report_count": len(reports),
+                          "skip_manager_id": skip["emp_id"] if skip else None},
+            ))
+
+        return tasks

server/tools.py

@@ -0,0 +1,515 @@
+"""MCP Tool definitions for HR Onboarding/Offboarding environment.
+
+Each tool is a callable that takes parameters and operates on the WorldState.
+Tools are designed to mirror realistic enterprise HR/IT APIs.
+"""
+
+import json
+from typing import Any, Callable
+try:
+    from .world import WorldState
+except ImportError:
+    from world import WorldState
+
+
+TOOL_DEFINITIONS = [
+    {
+        "name": "hr_create_employee",
+        "description": "Create a new employee record in the HR system. Requires name, department, level, and role. Returns the created employee record with generated emp_id.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "name": {"type": "string", "description": "Full name of the employee"},
+                "department": {"type": "string", "description": "Department name (Engineering, Product, Marketing, Sales, Finance, HR, Data Science, Security)"},
+                "level": {"type": "string", "description": "Employee level (L1-L6)"},
+                "role": {"type": "string", "description": "Job title/role"},
+                "manager_id": {"type": "string", "description": "Employee ID of the manager"},
+                "is_contractor": {"type": "boolean", "description": "Whether this is a contractor (default: false)"},
+                "location": {"type": "string", "description": "Office location"},
+                "date_of_joining": {"type": "string", "description": "Start date (YYYY-MM-DD)"},
+            },
+            "required": ["name", "department", "level", "role"],
+        },
+    },
+    {
+        "name": "hr_read_employee",
+        "description": "Look up an employee by their employee ID or email address. Returns full employee record.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "emp_id": {"type": "string", "description": "Employee ID (e.g. emp_0001)"},
+                "email": {"type": "string", "description": "Employee email address"},
+            },
+        },
+    },
+    {
+        "name": "hr_update_employee",
+        "description": "Update fields on an existing employee record. Cannot modify emp_id.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "emp_id": {"type": "string", "description": "Employee ID to update"},
+                "updates": {"type": "object", "description": "Dictionary of fields to update (e.g. {status: 'active', department: 'Engineering'})"},
+            },
+            "required": ["emp_id", "updates"],
+        },
+    },
+    {
+        "name": "hr_search_employees",
+        "description": "Search employees by criteria. Filter by department, level, status, location, or role.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "department": {"type": "string", "description": "Filter by department"},
+                "level": {"type": "string", "description": "Filter by level (L1-L6)"},
+                "status": {"type": "string", "description": "Filter by status (active, pending, offboarded)"},
+                "location": {"type": "string", "description": "Filter by location"},
+                "role": {"type": "string", "description": "Filter by role/title"},
+                "name": {"type": "string", "description": "Filter by name (exact match)"},
+            },
+        },
+    },
+    {
+        "name": "hr_get_org_chart",
+        "description": "Get the organizational hierarchy/reporting structure for a department. Shows manager-report relationships.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "department": {"type": "string", "description": "Department name"},
+            },
+            "required": ["department"],
+        },
+    },
+    {
+        "name": "onboarding_create_request",
+        "description": "Initiate an onboarding request for a new hire. The employee must exist in the HR system with 'pending' status. Creates a checklist of onboarding steps based on department.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "employee_id": {"type": "string", "description": "Employee ID of the new hire"},
+            },
+            "required": ["employee_id"],
+        },
+    },
+    {
+        "name": "onboarding_get_status",
+        "description": "Check the status of an onboarding request. Can look up by request ID or employee ID.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "request_id": {"type": "string", "description": "Onboarding request ID"},
+                "employee_id": {"type": "string", "description": "Employee ID"},
+            },
+        },
+    },
+    {
+        "name": "onboarding_complete_step",
+        "description": "Mark an onboarding step as completed. Steps must be valid for the request.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "request_id": {"type": "string", "description": "Onboarding request ID"},
+                "step": {"type": "string", "description": "Step name to mark as completed"},
+            },
+            "required": ["request_id", "step"],
+        },
+    },
+    {
+        "name": "offboarding_create_request",
+        "description": "Initiate an offboarding request for a departing employee. Specify reason (resignation, termination, transfer) and optional exit date.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "employee_id": {"type": "string", "description": "Employee ID"},
+                "reason": {"type": "string", "description": "Reason for offboarding (resignation, termination, transfer)"},
+                "exit_date": {"type": "string", "description": "Last working date (YYYY-MM-DD)"},
+            },
+            "required": ["employee_id"],
+        },
+    },
+    {
+        "name": "offboarding_get_status",
+        "description": "Check the status of an offboarding request. Can look up by request ID or employee ID.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "request_id": {"type": "string", "description": "Offboarding request ID"},
+                "employee_id": {"type": "string", "description": "Employee ID"},
+            },
+        },
+    },
+    {
+        "name": "offboarding_complete_step",
+        "description": "Mark an offboarding step as completed.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "request_id": {"type": "string", "description": "Offboarding request ID"},
+                "step": {"type": "string", "description": "Step name to mark as completed"},
+            },
+            "required": ["request_id", "step"],
+        },
+    },
+    {
+        "name": "it_assign_asset",
+        "description": "Assign an IT asset (laptop, monitor, phone, headset) to an employee. Asset must be available.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "asset_id": {"type": "string", "description": "Asset ID to assign"},
+                "employee_id": {"type": "string", "description": "Employee ID to assign to"},
+            },
+            "required": ["asset_id", "employee_id"],
+        },
+    },
+    {
+        "name": "it_get_available_assets",
+        "description": "List available (unassigned) IT assets. Optionally filter by type.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "asset_type": {"type": "string", "description": "Filter by asset type (laptop, monitor, phone, headset)"},
+            },
+        },
+    },
+    {
+        "name": "it_create_account",
+        "description": "Create IT accounts (email, Slack, VPN, etc.) for an employee.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "employee_id": {"type": "string", "description": "Employee ID"},
+                "account_types": {
+                    "type": "array",
+                    "items": {"type": "string"},
+                    "description": "Types of accounts to create (email, slack, vpn, github, jira, etc.)",
+                },
+            },
+            "required": ["employee_id"],
+        },
+    },
+    {
+        "name": "it_revoke_access",
+        "description": "Revoke all IT system access for an employee (used during offboarding).",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "employee_id": {"type": "string", "description": "Employee ID"},
+            },
+            "required": ["employee_id"],
+        },
+    },
+    {
+        "name": "it_get_software_licenses",
+        "description": "Check software license availability. Optionally filter by software name.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "software_name": {"type": "string", "description": "Filter by software name"},
+            },
+        },
+    },
+    {
+        "name": "access_assign_role",
+        "description": "Assign an access role to an employee. Checks level requirements and department restrictions.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "employee_id": {"type": "string", "description": "Employee ID"},
+                "role_id": {"type": "string", "description": "Access role ID to assign"},
+            },
+            "required": ["employee_id", "role_id"],
+        },
+    },
+    {
+        "name": "access_create_badge",
+        "description": "Create a physical access badge for an employee. Server room access requires L4+ security approval.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "employee_id": {"type": "string", "description": "Employee ID"},
+                "access_zones": {
+                    "type": "array",
+                    "items": {"type": "string"},
+                    "description": "List of access zones (main_entrance, floor_X, server_room, parking)",
+                },
+            },
+            "required": ["employee_id"],
+        },
+    },
+    {
+        "name": "access_revoke_role",
+        "description": "Revoke a specific access role from an employee.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "employee_id": {"type": "string", "description": "Employee ID"},
+                "role_id": {"type": "string", "description": "Access role ID to revoke"},
+            },
+            "required": ["employee_id", "role_id"],
+        },
+    },
+    {
+        "name": "access_get_security_groups",
+        "description": "List all security groups. Optionally see members and resources.",
+        "parameters": {
+            "type": "object",
+            "properties": {},
+        },
+    },
+    {
+        "name": "email_send",
+        "description": "Send an email. Used for welcome emails, notifications, farewell messages, etc.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "from_address": {"type": "string", "description": "Sender email address"},
+                "to_address": {"type": "string", "description": "Recipient email address"},
+                "subject": {"type": "string", "description": "Email subject line"},
+                "body": {"type": "string", "description": "Email body text"},
+            },
+            "required": ["from_address", "to_address", "subject", "body"],
+        },
+    },
+    {
+        "name": "slack_send_message",
+        "description": "Post a message in a Slack channel or send a DM.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "channel": {"type": "string", "description": "Slack channel (e.g. #engineering, #general, @username)"},
+                "sender": {"type": "string", "description": "Sender username or bot name"},
+                "text": {"type": "string", "description": "Message text"},
+            },
+            "required": ["channel", "sender", "text"],
+        },
+    },
+    {
+        "name": "meeting_schedule",
+        "description": "Schedule a meeting (orientation, 1-on-1, exit interview, etc.).",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "title": {"type": "string", "description": "Meeting title"},
+                "attendees": {
+                    "type": "array",
+                    "items": {"type": "string"},
+                    "description": "List of attendee employee IDs or emails",
+                },
+                "datetime": {"type": "string", "description": "Meeting date and time (ISO format)"},
+                "meeting_type": {"type": "string", "description": "Type of meeting (orientation, one_on_one, exit_interview, team_intro)"},
+            },
+            "required": ["title", "attendees", "datetime"],
+        },
+    },
+    {
+        "name": "policy_lookup",
+        "description": "Look up company policies by topic or department. Returns policy content and key rules.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "topic": {"type": "string", "description": "Policy topic to search for"},
+                "department": {"type": "string", "description": "Department-specific policies"},
+                "policy_id": {"type": "string", "description": "Specific policy ID"},
+            },
+        },
+    },
+    {
+        "name": "approval_request",
+        "description": "Submit an approval request (manager approval, IT approval, security approval). Approver must meet level requirements.",
+        "parameters": {
+            "type": "object",
+            "properties": {
+                "request_id": {"type": "string", "description": "The onboarding/offboarding request ID this approval is for"},
+                "approver_id": {"type": "string", "description": "Employee ID of the approver"},
+                "approval_type": {"type": "string", "description": "Type of approval (manager_approval, it_approval, security_approval, legal_approval)"},
+            },
+            "required": ["request_id", "approver_id", "approval_type"],
+        },
+    },
+]
+
+
+class ToolRegistry:
+    """Registry of all available tools, mapping names to executors."""
+
+    def __init__(self, world: WorldState):
+        self.world = world
+        self._tools: dict[str, Callable] = self._register_tools()
+
+    def _register_tools(self) -> dict[str, Callable]:
+        return {
+            "hr_create_employee": self._hr_create_employee,
+            "hr_read_employee": self._hr_read_employee,
+            "hr_update_employee": self._hr_update_employee,
+            "hr_search_employees": self._hr_search_employees,
+            "hr_get_org_chart": self._hr_get_org_chart,
+            "onboarding_create_request": self._onboarding_create_request,
+            "onboarding_get_status": self._onboarding_get_status,
+            "onboarding_complete_step": self._onboarding_complete_step,
+            "offboarding_create_request": self._offboarding_create_request,
+            "offboarding_get_status": self._offboarding_get_status,
+            "offboarding_complete_step": self._offboarding_complete_step,
+            "it_assign_asset": self._it_assign_asset,
+            "it_get_available_assets": self._it_get_available_assets,
+            "it_create_account": self._it_create_account,
+            "it_revoke_access": self._it_revoke_access,
+            "it_get_software_licenses": self._it_get_software_licenses,
+            "access_assign_role": self._access_assign_role,
+            "access_create_badge": self._access_create_badge,
+            "access_revoke_role": self._access_revoke_role,
+            "access_get_security_groups": self._access_get_security_groups,
+            "email_send": self._email_send,
+            "slack_send_message": self._slack_send_message,
+            "meeting_schedule": self._meeting_schedule,
+            "policy_lookup": self._policy_lookup,
+            "approval_request": self._approval_request,
+        }
+
+    @property
+    def tool_definitions(self) -> list[dict]:
+        return TOOL_DEFINITIONS
+
+    @property
+    def tool_names(self) -> list[str]:
+        return list(self._tools.keys())
+
+    def execute(self, tool_name: str, params: dict) -> dict:
+        """Execute a tool by name with given parameters. Returns result dict."""
+        if tool_name not in self._tools:
+            return {"success": False, "error": f"Unknown tool: {tool_name}. Available tools: {self.tool_names}"}
+        try:
+            result = self._tools[tool_name](params)
+            self.world.log_action(tool_name, params, result)
+            return result
+        except Exception as e:
+            error_result = {"success": False, "error": f"Tool execution error: {str(e)}"}
+            self.world.log_action(tool_name, params, error_result)
+            return error_result
+
+    # ---- Tool Implementations ----
+
+    def _hr_create_employee(self, params: dict) -> dict:
+        return self.world.create_employee(params)
+
+    def _hr_read_employee(self, params: dict) -> dict:
+        emp = None
+        if "emp_id" in params:
+            emp = self.world.get_employee(params["emp_id"])
+        elif "email" in params:
+            emp = self.world.get_employee_by_email(params["email"])
+        if emp:
+            return {"success": True, "employee": emp}
+        return {"success": False, "error": "Employee not found"}
+
+    def _hr_update_employee(self, params: dict) -> dict:
+        return self.world.update_employee(params["emp_id"], params["updates"])
+
+    def _hr_search_employees(self, params: dict) -> dict:
+        results = self.world.search_employees(**params)
+        return {"success": True, "count": len(results), "employees": results}
+
+    def _hr_get_org_chart(self, params: dict) -> dict:
+        chart = self.world.get_org_chart(params["department"])
+        if chart:
+            return {"success": True, "org_chart": chart}
+        return {"success": False, "error": f"No employees found in department '{params['department']}'"}
+
+    def _onboarding_create_request(self, params: dict) -> dict:
+        return self.world.create_onboarding_request(params["employee_id"])
+
+    def _onboarding_get_status(self, params: dict) -> dict:
+        status = self.world.get_onboarding_status(
+            request_id=params.get("request_id"),
+            emp_id=params.get("employee_id"),
+        )
+        if status:
+            return {"success": True, "onboarding_status": status}
+        return {"success": False, "error": "Onboarding request not found"}
+
+    def _onboarding_complete_step(self, params: dict) -> dict:
+        return self.world.complete_onboarding_step(params["request_id"], params["step"])
+
+    def _offboarding_create_request(self, params: dict) -> dict:
+        return self.world.create_offboarding_request(
+            params["employee_id"],
+            reason=params.get("reason", "resignation"),
+            exit_date=params.get("exit_date"),
+        )
+
+    def _offboarding_get_status(self, params: dict) -> dict:
+        status = self.world.get_offboarding_status(
+            request_id=params.get("request_id"),
+            emp_id=params.get("employee_id"),
+        )
+        if status:
+            return {"success": True, "offboarding_status": status}
+        return {"success": False, "error": "Offboarding request not found"}
+
+    def _offboarding_complete_step(self, params: dict) -> dict:
+        return self.world.complete_offboarding_step(params["request_id"], params["step"])
+
+    def _it_assign_asset(self, params: dict) -> dict:
+        return self.world.assign_asset(params["asset_id"], params["employee_id"])
+
+    def _it_get_available_assets(self, params: dict) -> dict:
+        assets = self.world.get_available_assets(params.get("asset_type"))
+        return {"success": True, "count": len(assets), "assets": assets}
+
+    def _it_create_account(self, params: dict) -> dict:
+        return self.world.create_it_account(
+            params["employee_id"],
+            account_types=params.get("account_types"),
+        )
+
+    def _it_revoke_access(self, params: dict) -> dict:
+        return self.world.revoke_it_access(params["employee_id"])
+
+    def _it_get_software_licenses(self, params: dict) -> dict:
+        licenses = self.world.get_software_licenses(params.get("software_name"))
+        return {"success": True, "licenses": licenses}
+
+    def _access_assign_role(self, params: dict) -> dict:
+        return self.world.assign_role(params["employee_id"], params["role_id"])
+
+    def _access_create_badge(self, params: dict) -> dict:
+        return self.world.create_badge(
+            params["employee_id"],
+            access_zones=params.get("access_zones"),
+        )
+
+    def _access_revoke_role(self, params: dict) -> dict:
+        return self.world.revoke_role(params["employee_id"], params["role_id"])
+
+    def _access_get_security_groups(self, params: dict) -> dict:
+        return {"success": True, "security_groups": self.world.state["security_groups"]}
+
+    def _email_send(self, params: dict) -> dict:
+        return self.world.send_email(
+            params["from_address"], params["to_address"],
+            params["subject"], params["body"],
+        )
+
+    def _slack_send_message(self, params: dict) -> dict:
+        return self.world.send_slack_message(
+            params["channel"], params["sender"], params["text"],
+        )
+
+    def _meeting_schedule(self, params: dict) -> dict:
+        return self.world.schedule_meeting(
+            params["title"], params["attendees"],
+            params["datetime"], params.get("meeting_type", "general"),
+        )
+
+    def _policy_lookup(self, params: dict) -> dict:
+        policies = self.world.lookup_policy(
+            topic=params.get("topic"),
+            department=params.get("department"),
+            policy_id=params.get("policy_id"),
+        )
+        return {"success": True, "count": len(policies), "policies": policies}
+
+    def _approval_request(self, params: dict) -> dict:
+        return self.world.create_approval(
+            params["request_id"], params["approver_id"], params["approval_type"],
+        )

server/world.py

@@ -0,0 +1,737 @@
+"""World state management for HR Onboarding/Offboarding environment.
+
+Manages all entities (employees, departments, assets, etc.) and enforces
+business rules like RBAC, approval chains, and headcount limits.
+"""
+
+import json
+import copy
+import os
+from datetime import datetime, timedelta
+from typing import Any, Optional
+from pathlib import Path
+
+DATA_DIR = Path(__file__).parent / "data"
+
+
+class WorldState:
+    """Manages the full world state: all entities and their relationships."""
+
+    def __init__(self):
+        self._initial_state: dict[str, Any] = {}
+        self.state: dict[str, Any] = {}
+        self._action_log: list[dict] = []
+        self._load_data()
+
+    def _load_data(self):
+        """Load all entity data from JSON files."""
+        data_files = {
+            "employees": "employees.json",
+            "departments": "departments.json",
+            "policies": "policies.json",
+            "it_assets": "it_assets.json",
+            "access_roles": "access_roles.json",
+            "templates": "templates.json",
+        }
+        for key, filename in data_files.items():
+            path = DATA_DIR / filename
+            if path.exists():
+                with open(path) as f:
+                    data = json.load(f)
+                # Handle wrapped data (e.g. {"departments": [...]})
+                if isinstance(data, dict) and key in data:
+                    data = data[key]
+                self.state[key] = data
+            else:
+                self.state[key] = []
+
+        # Initialize dynamic collections
+        self.state.setdefault("onboarding_requests", [])
+        self.state.setdefault("offboarding_requests", [])
+        self.state.setdefault("approvals", [])
+        self.state.setdefault("emails", [])
+        self.state.setdefault("slack_messages", [])
+        self.state.setdefault("meetings", [])
+        self.state.setdefault("badges", [])
+        self.state.setdefault("security_groups", self._init_security_groups())
+
+        # Build indexes for fast lookup
+        self._build_indexes()
+
+        # Save initial state for reset
+        self._initial_state = copy.deepcopy(self.state)
+
+    def _init_security_groups(self) -> list[dict]:
+        """Create default security groups."""
+        groups = [
+            {"group_id": "sg_001", "name": "all_employees", "members": [], "resources_accessible": ["email", "slack", "intranet"]},
+            {"group_id": "sg_002", "name": "engineering_team", "members": [], "resources_accessible": ["github", "aws_dev", "ci_cd", "jira"]},
+            {"group_id": "sg_003", "name": "prod_access", "members": [], "resources_accessible": ["aws_prod", "monitoring", "pagerduty"]},
+            {"group_id": "sg_004", "name": "data_team", "members": [], "resources_accessible": ["databricks", "snowflake", "jupyter"]},
+            {"group_id": "sg_005", "name": "finance_access", "members": [], "resources_accessible": ["netsuite", "expense_system", "payroll"]},
+            {"group_id": "sg_006", "name": "hr_access", "members": [], "resources_accessible": ["workday", "benefits_portal", "recruiting"]},
+            {"group_id": "sg_007", "name": "security_team", "members": [], "resources_accessible": ["siem", "vault", "firewall_mgmt"]},
+            {"group_id": "sg_008", "name": "sales_team", "members": [], "resources_accessible": ["salesforce", "hubspot", "linkedin_sales"]},
+            {"group_id": "sg_009", "name": "server_room_access", "members": [], "resources_accessible": ["server_room_a", "server_room_b"]},
+            {"group_id": "sg_010", "name": "vpn_users", "members": [], "resources_accessible": ["vpn_corporate", "vpn_dev"]},
+            {"group_id": "sg_011", "name": "admin_access", "members": [], "resources_accessible": ["admin_console", "user_mgmt", "audit_logs"]},
+            {"group_id": "sg_012", "name": "product_team", "members": [], "resources_accessible": ["figma", "amplitude", "productboard"]},
+            {"group_id": "sg_013", "name": "marketing_team", "members": [], "resources_accessible": ["hubspot", "canva", "google_analytics"]},
+            {"group_id": "sg_014", "name": "executives", "members": [], "resources_accessible": ["board_docs", "exec_dashboard", "all_financials"]},
+            {"group_id": "sg_015", "name": "contractors", "members": [], "resources_accessible": ["email", "slack", "jira"]},
+        ]
+        # Populate members from employees
+        return groups
+
+    def _build_indexes(self):
+        """Build lookup indexes for fast entity access."""
+        self._emp_by_id = {}
+        self._emp_by_email = {}
+        self._emp_by_dept = {}
+        for emp in self.state.get("employees", []):
+            self._emp_by_id[emp["emp_id"]] = emp
+            self._emp_by_email[emp.get("email", "")] = emp
+            dept = emp.get("department", "")
+            self._emp_by_dept.setdefault(dept, []).append(emp)
+
+        self._dept_by_id = {d["dept_id"]: d for d in self.state.get("departments", [])}
+        self._dept_by_name = {d["name"]: d for d in self.state.get("departments", [])}
+        self._asset_by_id = {a["asset_id"]: a for a in self.state.get("it_assets", [])}
+        self._role_by_id = {r["role_id"]: r for r in self.state.get("access_roles", [])}
+        self._policy_by_id = {p["policy_id"]: p for p in self.state.get("policies", [])}
+
+    def reset(self):
+        """Reset world state to initial conditions and clear action log."""
+        self.state = copy.deepcopy(self._initial_state)
+        self._action_log = []
+        self._build_indexes()
+
+    def snapshot(self) -> dict:
+        """Return a deep copy of the current state (for debugging/evaluation)."""
+        return copy.deepcopy(self.state)
+
+    def log_action(self, tool_name: str, params: dict, result: Any):
+        """Log a tool call for rubric evaluation."""
+        self._action_log.append({
+            "tool": tool_name,
+            "params": params,
+            "result": result,
+            "timestamp": datetime.now().isoformat(),
+        })
+
+    @property
+    def action_log(self) -> list[dict]:
+        return list(self._action_log)
+
+    # ---- Entity Lookup Methods ----
+
+    def get_employee(self, emp_id: str) -> Optional[dict]:
+        return self._emp_by_id.get(emp_id)
+
+    def get_employee_by_email(self, email: str) -> Optional[dict]:
+        return self._emp_by_email.get(email)
+
+    def search_employees(self, **filters) -> list[dict]:
+        results = list(self.state["employees"])
+        for key, value in filters.items():
+            if value is not None:
+                results = [e for e in results if str(e.get(key, "")).lower() == str(value).lower()]
+        return results
+
+    def get_department(self, dept_id: str = None, name: str = None) -> Optional[dict]:
+        if dept_id:
+            return self._dept_by_id.get(dept_id)
+        if name:
+            return self._dept_by_name.get(name)
+        return None
+
+    def get_employees_in_dept(self, department: str) -> list[dict]:
+        return self._emp_by_dept.get(department, [])
+
+    def get_manager(self, emp_id: str) -> Optional[dict]:
+        emp = self.get_employee(emp_id)
+        if emp and emp.get("manager_id"):
+            return self.get_employee(emp["manager_id"])
+        return None
+
+    def get_skip_level_manager(self, emp_id: str) -> Optional[dict]:
+        manager = self.get_manager(emp_id)
+        if manager:
+            return self.get_manager(manager["emp_id"])
+        return None
+
+    def get_direct_reports(self, emp_id: str) -> list[dict]:
+        return [e for e in self.state["employees"] if e.get("manager_id") == emp_id]
+
+    def get_org_chart(self, department: str) -> dict:
+        """Build org chart for a department as a tree."""
+        dept_emps = self.get_employees_in_dept(department)
+        if not dept_emps:
+            return {}
+
+        # Find the root (highest level with no manager in dept, or L6)
+        def build_tree(emp):
+            reports = [e for e in dept_emps if e.get("manager_id") == emp["emp_id"]]
+            return {
+                "emp_id": emp["emp_id"],
+                "name": emp["name"],
+                "level": emp["level"],
+                "role": emp["role"],
+                "status": emp["status"],
+                "reports": [build_tree(r) for r in reports],
+            }
+
+        roots = [e for e in dept_emps if e.get("manager_id") is None
+                 or e["manager_id"] not in {x["emp_id"] for x in dept_emps}]
+        if not roots:
+            roots = sorted(dept_emps, key=lambda e: e.get("level", "L1"), reverse=True)[:1]
+
+        return {"department": department, "org_tree": [build_tree(r) for r in roots]}
+
+    # ---- Asset Methods ----
+
+    def get_available_assets(self, asset_type: str = None) -> list[dict]:
+        assets = [a for a in self.state["it_assets"] if a["status"] == "available"]
+        if asset_type:
+            assets = [a for a in assets if a["type"].lower() == asset_type.lower()]
+        return assets
+
+    def assign_asset(self, asset_id: str, emp_id: str) -> dict:
+        asset = self._asset_by_id.get(asset_id)
+        if not asset:
+            return {"success": False, "error": f"Asset {asset_id} not found"}
+        if asset["status"] != "available":
+            return {"success": False, "error": f"Asset {asset_id} is not available (status: {asset['status']})"}
+        emp = self.get_employee(emp_id)
+        if not emp:
+            return {"success": False, "error": f"Employee {emp_id} not found"}
+
+        asset["status"] = "assigned"
+        asset["assigned_to"] = emp_id
+        return {"success": True, "asset_id": asset_id, "assigned_to": emp_id}
+
+    def reclaim_asset(self, asset_id: str) -> dict:
+        asset = self._asset_by_id.get(asset_id)
+        if not asset:
+            return {"success": False, "error": f"Asset {asset_id} not found"}
+        if asset["status"] != "assigned":
+            return {"success": False, "error": f"Asset {asset_id} is not currently assigned"}
+        prev_owner = asset["assigned_to"]
+        asset["status"] = "available"
+        asset["assigned_to"] = None
+        return {"success": True, "asset_id": asset_id, "reclaimed_from": prev_owner}
+
+    def get_assets_for_employee(self, emp_id: str) -> list[dict]:
+        return [a for a in self.state["it_assets"] if a.get("assigned_to") == emp_id]
+
+    # ---- Software License Methods ----
+
+    def get_software_licenses(self, software_name: str = None) -> list[dict]:
+        licenses = self.state.get("access_roles", [])
+        # Licenses are tracked in departments' required_tools + a separate license pool
+        # For simplicity, we embed license info in a dedicated structure
+        if not self.state.get("software_licenses"):
+            self.state["software_licenses"] = self._init_software_licenses()
+        result = self.state["software_licenses"]
+        if software_name:
+            result = [l for l in result if l["software_name"].lower() == software_name.lower()]
+        return result
+
+    def _init_software_licenses(self) -> list[dict]:
+        return [
+            {"license_id": "lic_001", "software_name": "Jira", "total_seats": 80, "used_seats": 72, "department_restriction": None},
+            {"license_id": "lic_002", "software_name": "GitHub", "total_seats": 60, "used_seats": 55, "department_restriction": "Engineering"},
+            {"license_id": "lic_003", "software_name": "AWS", "total_seats": 40, "used_seats": 35, "department_restriction": "Engineering"},
+            {"license_id": "lic_004", "software_name": "Slack", "total_seats": 250, "used_seats": 195, "department_restriction": None},
+            {"license_id": "lic_005", "software_name": "Salesforce", "total_seats": 35, "used_seats": 30, "department_restriction": "Sales"},
+            {"license_id": "lic_006", "software_name": "Hubspot", "total_seats": 30, "used_seats": 28, "department_restriction": "Marketing"},
+            {"license_id": "lic_007", "software_name": "Figma", "total_seats": 25, "used_seats": 20, "department_restriction": "Product"},
+            {"license_id": "lic_008", "software_name": "Databricks", "total_seats": 20, "used_seats": 18, "department_restriction": "Data Science"},
+            {"license_id": "lic_009", "software_name": "Netsuite", "total_seats": 15, "used_seats": 15, "department_restriction": "Finance"},  # Full!
+            {"license_id": "lic_010", "software_name": "Workday", "total_seats": 20, "used_seats": 12, "department_restriction": "HR"},
+            {"license_id": "lic_011", "software_name": "Canva", "total_seats": 25, "used_seats": 20, "department_restriction": "Marketing"},
+            {"license_id": "lic_012", "software_name": "Google Analytics", "total_seats": 30, "used_seats": 22, "department_restriction": None},
+            {"license_id": "lic_013", "software_name": "VSCode License", "total_seats": 70, "used_seats": 60, "department_restriction": None},
+            {"license_id": "lic_014", "software_name": "Amplitude", "total_seats": 20, "used_seats": 15, "department_restriction": "Product"},
+            {"license_id": "lic_015", "software_name": "LinkedIn Sales Navigator", "total_seats": 25, "used_seats": 25, "department_restriction": "Sales"},  # Full!
+        ]
+
+    def consume_license(self, license_id: str) -> dict:
+        if not self.state.get("software_licenses"):
+            self.state["software_licenses"] = self._init_software_licenses()
+        for lic in self.state["software_licenses"]:
+            if lic["license_id"] == license_id:
+                if lic["used_seats"] >= lic["total_seats"]:
+                    return {"success": False, "error": f"No available seats for {lic['software_name']} (all {lic['total_seats']} seats in use)"}
+                lic["used_seats"] += 1
+                return {"success": True, "software": lic["software_name"], "remaining_seats": lic["total_seats"] - lic["used_seats"]}
+        return {"success": False, "error": f"License {license_id} not found"}
+
+    def release_license(self, license_id: str) -> dict:
+        if not self.state.get("software_licenses"):
+            return {"success": False, "error": "No licenses initialized"}
+        for lic in self.state["software_licenses"]:
+            if lic["license_id"] == license_id:
+                if lic["used_seats"] > 0:
+                    lic["used_seats"] -= 1
+                return {"success": True, "software": lic["software_name"], "remaining_seats": lic["total_seats"] - lic["used_seats"]}
+        return {"success": False, "error": f"License {license_id} not found"}
+
+    # ---- Employee Mutation Methods ----
+
+    def create_employee(self, data: dict) -> dict:
+        required = ["name", "department", "level", "role"]
+        for field in required:
+            if field not in data:
+                return {"success": False, "error": f"Missing required field: {field}"}
+
+        dept = self.get_department(name=data["department"])
+        if not dept:
+            return {"success": False, "error": f"Department '{data['department']}' not found"}
+
+        # Check headcount limit
+        current = len([e for e in self.state["employees"]
+                       if e["department"] == data["department"] and e["status"] in ("active", "pending")])
+        if current >= dept.get("headcount_limit", 999):
+            return {"success": False, "error": f"Department '{data['department']}' has reached its headcount limit ({dept['headcount_limit']})"}
+
+        # Generate emp_id
+        existing_ids = [int(e["emp_id"].split("_")[1]) for e in self.state["employees"]]
+        new_id = f"emp_{max(existing_ids) + 1:04d}" if existing_ids else "emp_0001"
+
+        email = f"{data['name'].lower().replace(' ', '.')}@acmecorp.com"
+
+        employee = {
+            "emp_id": new_id,
+            "name": data["name"],
+            "email": data.get("email", email),
+            "department": data["department"],
+            "level": data["level"],
+            "role": data["role"],
+            "manager_id": data.get("manager_id"),
+            "status": "pending",
+            "date_of_joining": data.get("date_of_joining", datetime.now().strftime("%Y-%m-%d")),
+            "date_of_leaving": None,
+            "is_contractor": data.get("is_contractor", False),
+            "phone": data.get("phone", ""),
+            "location": data.get("location", "San Francisco"),
+        }
+
+        self.state["employees"].append(employee)
+        self._emp_by_id[new_id] = employee
+        self._emp_by_email[employee["email"]] = employee
+        self._emp_by_dept.setdefault(employee["department"], []).append(employee)
+
+        return {"success": True, "employee": employee}
+
+    def update_employee(self, emp_id: str, updates: dict) -> dict:
+        emp = self.get_employee(emp_id)
+        if not emp:
+            return {"success": False, "error": f"Employee {emp_id} not found"}
+
+        protected_fields = {"emp_id"}
+        for key, value in updates.items():
+            if key in protected_fields:
+                return {"success": False, "error": f"Cannot modify protected field: {key}"}
+            emp[key] = value
+
+        return {"success": True, "employee": emp}
+
+    # ---- Onboarding/Offboarding Request Methods ----
+
+    def create_onboarding_request(self, emp_id: str) -> dict:
+        emp = self.get_employee(emp_id)
+        if not emp:
+            return {"success": False, "error": f"Employee {emp_id} not found"}
+        if emp["status"] == "active":
+            return {"success": False, "error": f"Employee {emp_id} is already active"}
+
+        existing = [r for r in self.state["onboarding_requests"]
+                    if r["employee_id"] == emp_id and r["status"] != "completed"]
+        if existing:
+            return {"success": False, "error": f"Active onboarding request already exists for {emp_id}"}
+
+        dept = self.get_department(name=emp["department"])
+        steps = dept.get("onboarding_steps", [
+            "hr_paperwork", "it_account_setup", "asset_assignment",
+            "access_provisioning", "orientation_scheduled", "manager_intro",
+            "welcome_communications"
+        ]) if dept else ["hr_paperwork", "it_account_setup", "asset_assignment",
+                         "access_provisioning", "orientation_scheduled", "manager_intro",
+                         "welcome_communications"]
+
+        req_ids = [int(r["request_id"].split("_")[1]) for r in self.state["onboarding_requests"]] or [0]
+        new_id = f"onb_{max(req_ids) + 1:04d}"
+
+        request = {
+            "request_id": new_id,
+            "employee_id": emp_id,
+            "department": emp["department"],
+            "status": "in_progress",
+            "steps": {step: "pending" for step in steps},
+            "steps_completed": [],
+            "approvals_required": self._get_required_approvals(emp),
+            "approvals_received": [],
+            "created_date": datetime.now().strftime("%Y-%m-%d"),
+        }
+
+        self.state["onboarding_requests"].append(request)
+        return {"success": True, "request": request}
+
+    def create_offboarding_request(self, emp_id: str, reason: str = "resignation", exit_date: str = None) -> dict:
+        emp = self.get_employee(emp_id)
+        if not emp:
+            return {"success": False, "error": f"Employee {emp_id} not found"}
+        if emp["status"] == "offboarded":
+            return {"success": False, "error": f"Employee {emp_id} is already offboarded"}
+
+        existing = [r for r in self.state["offboarding_requests"]
+                    if r["employee_id"] == emp_id and r["status"] != "completed"]
+        if existing:
+            return {"success": False, "error": f"Active offboarding request already exists for {emp_id}"}
+
+        dept = self.get_department(name=emp["department"])
+        steps = dept.get("offboarding_steps", [
+            "access_revocation", "asset_return", "knowledge_transfer",
+            "exit_interview", "final_payroll", "farewell_communications"
+        ]) if dept else ["access_revocation", "asset_return", "knowledge_transfer",
+                         "exit_interview", "final_payroll", "farewell_communications"]
+
+        if reason == "termination":
+            steps = ["access_revocation", "asset_return", "final_payroll", "legal_review"]
+
+        req_ids = [int(r["request_id"].split("_")[1]) for r in self.state["offboarding_requests"]] or [0]
+        new_id = f"off_{max(req_ids) + 1:04d}"
+
+        if not exit_date:
+            exit_date = (datetime.now() + timedelta(days=14)).strftime("%Y-%m-%d")
+
+        request = {
+            "request_id": new_id,
+            "employee_id": emp_id,
+            "department": emp["department"],
+            "reason": reason,
+            "status": "in_progress",
+            "exit_date": exit_date,
+            "steps": {step: "pending" for step in steps},
+            "steps_completed": [],
+            "handover_status": "pending",
+            "created_date": datetime.now().strftime("%Y-%m-%d"),
+        }
+
+        self.state["offboarding_requests"].append(request)
+        return {"success": True, "request": request}
+
+    def complete_onboarding_step(self, request_id: str, step: str) -> dict:
+        req = next((r for r in self.state["onboarding_requests"] if r["request_id"] == request_id), None)
+        if not req:
+            return {"success": False, "error": f"Onboarding request {request_id} not found"}
+        if req["status"] == "completed":
+            return {"success": False, "error": f"Onboarding request {request_id} is already completed"}
+        if step not in req["steps"]:
+            return {"success": False, "error": f"Invalid step '{step}'. Valid steps: {list(req['steps'].keys())}"}
+        if req["steps"][step] == "completed":
+            return {"success": False, "error": f"Step '{step}' is already completed"}
+
+        req["steps"][step] = "completed"
+        req["steps_completed"].append(step)
+
+        # Check if all steps are done
+        if all(v == "completed" for v in req["steps"].values()):
+            req["status"] = "completed"
+            emp = self.get_employee(req["employee_id"])
+            if emp:
+                emp["status"] = "active"
+
+        return {"success": True, "request_id": request_id, "step": step,
+                "all_complete": req["status"] == "completed",
+                "remaining_steps": [k for k, v in req["steps"].items() if v != "completed"]}
+
+    def complete_offboarding_step(self, request_id: str, step: str) -> dict:
+        req = next((r for r in self.state["offboarding_requests"] if r["request_id"] == request_id), None)
+        if not req:
+            return {"success": False, "error": f"Offboarding request {request_id} not found"}
+        if req["status"] == "completed":
+            return {"success": False, "error": f"Offboarding request {request_id} is already completed"}
+        if step not in req["steps"]:
+            return {"success": False, "error": f"Invalid step '{step}'. Valid steps: {list(req['steps'].keys())}"}
+        if req["steps"][step] == "completed":
+            return {"success": False, "error": f"Step '{step}' is already completed"}
+
+        req["steps"][step] = "completed"
+        req["steps_completed"].append(step)
+
+        if all(v == "completed" for v in req["steps"].values()):
+            req["status"] = "completed"
+            emp = self.get_employee(req["employee_id"])
+            if emp:
+                emp["status"] = "offboarded"
+                emp["date_of_leaving"] = req["exit_date"]
+
+        return {"success": True, "request_id": request_id, "step": step,
+                "all_complete": req["status"] == "completed",
+                "remaining_steps": [k for k, v in req["steps"].items() if v != "completed"]}
+
+    def get_onboarding_status(self, request_id: str = None, emp_id: str = None) -> Optional[dict]:
+        if request_id:
+            return next((r for r in self.state["onboarding_requests"] if r["request_id"] == request_id), None)
+        if emp_id:
+            reqs = [r for r in self.state["onboarding_requests"] if r["employee_id"] == emp_id]
+            return reqs[-1] if reqs else None
+        return None
+
+    def get_offboarding_status(self, request_id: str = None, emp_id: str = None) -> Optional[dict]:
+        if request_id:
+            return next((r for r in self.state["offboarding_requests"] if r["request_id"] == request_id), None)
+        if emp_id:
+            reqs = [r for r in self.state["offboarding_requests"] if r["employee_id"] == emp_id]
+            return reqs[-1] if reqs else None
+        return None
+
+    # ---- Approval Methods ----
+
+    def _get_required_approvals(self, emp: dict) -> list[str]:
+        """Determine what approvals are needed based on employee level and department."""
+        approvals = ["manager_approval"]
+        level_num = int(emp["level"][1])
+        if level_num >= 3:
+            approvals.append("it_approval")
+        if emp["department"] == "Security" or level_num >= 4:
+            approvals.append("security_approval")
+        if emp.get("is_contractor"):
+            approvals.append("legal_approval")
+        return approvals
+
+    def create_approval(self, request_id: str, approver_id: str, approval_type: str) -> dict:
+        emp = self.get_employee(approver_id)
+        if not emp:
+            return {"success": False, "error": f"Approver {approver_id} not found"}
+
+        level_num = int(emp["level"][1])
+        if approval_type == "manager_approval" and level_num < 3:
+            return {"success": False, "error": f"Approver must be L3+ for manager approval (current: {emp['level']})"}
+        if approval_type == "security_approval" and level_num < 4:
+            return {"success": False, "error": f"Approver must be L4+ for security approval (current: {emp['level']})"}
+
+        approval_ids = [int(a["approval_id"].split("_")[1]) for a in self.state["approvals"]] or [0]
+        new_id = f"apr_{max(approval_ids) + 1:04d}"
+
+        approval = {
+            "approval_id": new_id,
+            "request_id": request_id,
+            "approver_id": approver_id,
+            "type": approval_type,
+            "status": "approved",
+            "timestamp": datetime.now().isoformat(),
+        }
+        self.state["approvals"].append(approval)
+
+        # Update onboarding/offboarding request approvals
+        for req in self.state["onboarding_requests"] + self.state["offboarding_requests"]:
+            if req["request_id"] == request_id:
+                if approval_type not in req.get("approvals_received", []):
+                    req.setdefault("approvals_received", []).append(approval_type)
+
+        return {"success": True, "approval": approval}
+
+    # ---- Access Role Methods ----
+
+    def assign_role(self, emp_id: str, role_id: str) -> dict:
+        emp = self.get_employee(emp_id)
+        if not emp:
+            return {"success": False, "error": f"Employee {emp_id} not found"}
+        role = self._role_by_id.get(role_id)
+        if not role:
+            return {"success": False, "error": f"Role {role_id} not found"}
+
+        # Check level requirement
+        emp_level = int(emp["level"][1])
+        req_level = int(role.get("level_requirement", "L1")[1])
+        if emp_level < req_level:
+            return {"success": False, "error": f"Employee level {emp['level']} does not meet minimum {role['level_requirement']} for role {role['name']}"}
+
+        # Check department restriction
+        if role["department"] != "all" and role["department"] != emp["department"]:
+            return {"success": False, "error": f"Role {role['name']} is restricted to {role['department']} department"}
+
+        emp.setdefault("assigned_roles", []).append(role_id)
+        return {"success": True, "emp_id": emp_id, "role": role["name"], "permissions": role["permissions"]}
+
+    def revoke_role(self, emp_id: str, role_id: str) -> dict:
+        emp = self.get_employee(emp_id)
+        if not emp:
+            return {"success": False, "error": f"Employee {emp_id} not found"}
+        roles = emp.get("assigned_roles", [])
+        if role_id not in roles:
+            return {"success": False, "error": f"Employee {emp_id} does not have role {role_id}"}
+        roles.remove(role_id)
+        return {"success": True, "emp_id": emp_id, "revoked_role": role_id}
+
+    def revoke_all_access(self, emp_id: str) -> dict:
+        emp = self.get_employee(emp_id)
+        if not emp:
+            return {"success": False, "error": f"Employee {emp_id} not found"}
+        revoked_roles = emp.get("assigned_roles", []).copy()
+        emp["assigned_roles"] = []
+
+        # Remove from security groups
+        for sg in self.state["security_groups"]:
+            if emp_id in sg["members"]:
+                sg["members"].remove(emp_id)
+
+        return {"success": True, "emp_id": emp_id, "revoked_roles": revoked_roles}
+
+    # ---- Badge Methods ----
+
+    def create_badge(self, emp_id: str, access_zones: list[str] = None) -> dict:
+        emp = self.get_employee(emp_id)
+        if not emp:
+            return {"success": False, "error": f"Employee {emp_id} not found"}
+
+        # Server room access requires L4+ approval
+        if access_zones and "server_room" in access_zones:
+            level_num = int(emp["level"][1])
+            if level_num < 4:
+                approvals = [a for a in self.state["approvals"]
+                             if a["type"] == "security_approval"
+                             and a["status"] == "approved"]
+                relevant = [a for a in approvals
+                            if any(r["employee_id"] == emp_id
+                                   for r in self.state["onboarding_requests"]
+                                   if r["request_id"] == a["request_id"])]
+                if not relevant:
+                    return {"success": False, "error": "Server room access requires L4+ security approval"}
+
+        badge_ids = [int(b["badge_id"].split("_")[1]) for b in self.state["badges"]] or [0]
+        new_id = f"badge_{max(badge_ids) + 1:04d}"
+
+        if not access_zones:
+            access_zones = ["main_entrance", "floor_" + emp.get("location", "sf").lower().replace(" ", "_")]
+
+        badge = {
+            "badge_id": new_id,
+            "employee_id": emp_id,
+            "access_zones": access_zones,
+            "status": "active",
+            "issued_date": datetime.now().strftime("%Y-%m-%d"),
+        }
+        self.state["badges"].append(badge)
+        return {"success": True, "badge": badge}
+
+    def revoke_badge(self, badge_id: str) -> dict:
+        badge = next((b for b in self.state["badges"] if b["badge_id"] == badge_id), None)
+        if not badge:
+            return {"success": False, "error": f"Badge {badge_id} not found"}
+        badge["status"] = "revoked"
+        return {"success": True, "badge_id": badge_id, "status": "revoked"}
+
+    def get_badges_for_employee(self, emp_id: str) -> list[dict]:
+        return [b for b in self.state["badges"] if b["employee_id"] == emp_id and b["status"] == "active"]
+
+    # ---- Communication Methods ----
+
+    def send_email(self, from_addr: str, to_addr: str, subject: str, body: str) -> dict:
+        email_ids = [int(e["email_id"].split("_")[1]) for e in self.state["emails"]] or [0]
+        new_id = f"email_{max(email_ids) + 1:04d}"
+        email = {
+            "email_id": new_id,
+            "from": from_addr,
+            "to": to_addr,
+            "subject": subject,
+            "body": body,
+            "timestamp": datetime.now().isoformat(),
+        }
+        self.state["emails"].append(email)
+        return {"success": True, "email": email}
+
+    def send_slack_message(self, channel: str, sender: str, text: str) -> dict:
+        msg_ids = [int(m["msg_id"].split("_")[1]) for m in self.state["slack_messages"]] or [0]
+        new_id = f"msg_{max(msg_ids) + 1:04d}"
+        message = {
+            "msg_id": new_id,
+            "channel": channel,
+            "sender": sender,
+            "text": text,
+            "timestamp": datetime.now().isoformat(),
+        }
+        self.state["slack_messages"].append(message)
+        return {"success": True, "message": message}
+
+    def schedule_meeting(self, title: str, attendees: list[str], meeting_datetime: str,
+                         meeting_type: str = "general") -> dict:
+        meeting_ids = [int(m["meeting_id"].split("_")[1]) for m in self.state["meetings"]] or [0]
+        new_id = f"mtg_{max(meeting_ids) + 1:04d}"
+        meeting = {
+            "meeting_id": new_id,
+            "title": title,
+            "attendees": attendees,
+            "datetime": meeting_datetime,
+            "type": meeting_type,
+        }
+        self.state["meetings"].append(meeting)
+        return {"success": True, "meeting": meeting}
+
+    # ---- Policy Methods ----
+
+    def lookup_policy(self, topic: str = None, department: str = None, policy_id: str = None) -> list[dict]:
+        policies = self.state.get("policies", [])
+        if policy_id:
+            return [p for p in policies if p["policy_id"] == policy_id]
+        results = policies
+        if topic:
+            results = [p for p in results if topic.lower() in p.get("title", "").lower()
+                       or topic.lower() in p.get("content", "").lower()]
+        if department:
+            results = [p for p in results if p.get("department") in (department, "all")]
+        return results
+
+    # ---- IT Account Methods ----
+
+    def create_it_account(self, emp_id: str, account_types: list[str] = None) -> dict:
+        emp = self.get_employee(emp_id)
+        if not emp:
+            return {"success": False, "error": f"Employee {emp_id} not found"}
+
+        if not account_types:
+            account_types = ["email", "slack", "vpn"]
+
+        created = []
+        for acct_type in account_types:
+            created.append({
+                "type": acct_type,
+                "username": emp["email"].split("@")[0],
+                "status": "active",
+            })
+
+        emp.setdefault("it_accounts", []).extend(created)
+        return {"success": True, "emp_id": emp_id, "accounts_created": created}
+
+    def revoke_it_access(self, emp_id: str) -> dict:
+        emp = self.get_employee(emp_id)
+        if not emp:
+            return {"success": False, "error": f"Employee {emp_id} not found"}
+
+        accounts = emp.get("it_accounts", [])
+        for acct in accounts:
+            acct["status"] = "revoked"
+
+        return {"success": True, "emp_id": emp_id, "accounts_revoked": len(accounts)}
+
+    # ---- Reassignment (for offboarding) ----
+
+    def reassign_reports(self, from_emp_id: str, to_emp_id: str) -> dict:
+        from_emp = self.get_employee(from_emp_id)
+        to_emp = self.get_employee(to_emp_id)
+        if not from_emp:
+            return {"success": False, "error": f"Employee {from_emp_id} not found"}
+        if not to_emp:
+            return {"success": False, "error": f"Employee {to_emp_id} not found"}
+
+        reports = self.get_direct_reports(from_emp_id)
+        for report in reports:
+            report["manager_id"] = to_emp_id
+
+        self._build_indexes()
+        return {"success": True, "reassigned_count": len(reports),
+                "from": from_emp_id, "to": to_emp_id,
+                "reassigned_employees": [r["emp_id"] for r in reports]}

test_with_llm.py

@@ -0,0 +1,132 @@
+"""Test HR Onboarding Environment with OpenAI GPT as the agent."""
+
+import sys
+import json
+import os
+import re
+
+from dotenv import load_dotenv
+load_dotenv()
+
+sys.path.insert(0, ".")
+sys.path.insert(0, "./server")
+
+from openai import OpenAI
+from server.hr_onboarding_environment import HROnboardingEnvironment
+from models import HROnboardingAction, HROnboardingObservation
+from server.tools import TOOL_DEFINITIONS
+from server.rubrics import RubricEvaluator
+
+# --- Setup ---
+client = OpenAI()
+env = HROnboardingEnvironment(seed=42, max_steps=15)
+tool_desc = json.dumps(TOOL_DEFINITIONS, indent=2)
+
+# Pick which task to test (default: 0, or pass via CLI)
+task_idx = int(sys.argv[1]) if len(sys.argv) > 1 else 0
+
+# --- Reset to the desired task ---
+for _ in range(task_idx + 1):
+    obs = env.reset()
+
+print("=" * 70)
+print("HR ONBOARDING ENVIRONMENT — LLM AGENT TEST")
+print("=" * 70)
+print(f"\nTask ID: {obs.task_id}")
+print(f"Difficulty: {obs.metadata.get('difficulty', '?')}")
+print(f"Category: {obs.metadata.get('category', '?')}")
+print(f"\nInstruction: {obs.instruction}")
+print(f"\nAvailable tools ({len(obs.available_tools)}): {', '.join(obs.available_tools[:10])}...")
+print("=" * 70)
+
+system_prompt = f"""You are an HR automation agent for AcmeCorp. You help with employee onboarding and offboarding by calling the appropriate tools.
+
+For each step, respond with ONLY a JSON tool call in this exact format:
+{{"tool": "<tool_name>", "params": {{<parameters>}}}}
+
+When you believe the task is complete, respond with:
+{{"tool": "__done__", "params": {{}}}}
+
+Important rules:
+- Respond with ONLY the JSON object, no other text
+- Use the exact tool names and parameter names from the tool definitions
+- Think about what information you need and what tools to call in what order
+
+Available tools:
+{tool_desc}
+"""
+
+messages = [
+    {"role": "system", "content": system_prompt},
+    {"role": "user", "content": obs.instruction},
+]
+
+# --- Agent loop ---
+for step in range(1, obs.max_steps + 1):
+    print(f"\n--- Step {step}/{obs.max_steps} ---")
+
+    response = client.chat.completions.create(
+        model="gpt-4o-mini",
+        messages=messages,
+        temperature=0.1,
+        max_tokens=512,
+    )
+
+    assistant_msg = response.choices[0].message.content.strip()
+    print(f"LLM: {assistant_msg[:200]}")
+
+    # Parse tool call
+    try:
+        json_match = re.search(r'\{.*\}', assistant_msg, re.DOTALL)
+        if json_match:
+            tool_call = json.loads(json_match.group())
+        else:
+            tool_call = json.loads(assistant_msg)
+    except json.JSONDecodeError:
+        print(f"  ERROR: Could not parse JSON")
+        messages.append({"role": "assistant", "content": assistant_msg})
+        messages.append({"role": "user", "content": 'Respond with valid JSON: {"tool": "<name>", "params": {<args>}}'})
+        continue
+
+    tool_name = tool_call.get("tool", "")
+    params = tool_call.get("params", {})
+
+    if tool_name == "__done__":
+        print("\n  Agent signaled DONE.")
+        break
+
+    # Execute action
+    action = HROnboardingAction(tool_name=tool_name, arguments=params)
+    obs = env.step(action)
+
+    result_str = json.dumps(obs.tool_result, indent=2)
+    print(f"  Tool: {tool_name}")
+    print(f"  Result: {result_str[:300]}{'...' if len(result_str) > 300 else ''}")
+
+    messages.append({"role": "assistant", "content": assistant_msg})
+    messages.append({"role": "user", "content": f"Tool result:\n{result_str}\n\nContinue with next tool call, or {{\"tool\": \"__done__\", \"params\": {{}}}} if done."})
+
+    if obs.done:
+        print(f"\n  Episode done. Reward: {obs.reward}")
+        break
+
+# --- Final evaluation ---
+print("\n" + "=" * 70)
+print("FINAL EVALUATION")
+print("=" * 70)
+
+evaluator = RubricEvaluator()
+task = env._current_task
+eval_result = evaluator.evaluate(task, env.world.action_log)
+
+print(f"\nTask: {task.task_id}")
+print(f"Score: {eval_result['score']:.0%} ({eval_result['passed_count']}/{eval_result['total_criteria']} criteria)")
+print(f"Passed: {eval_result['passed']}")
+print(f"\nCriteria breakdown:")
+for c in eval_result["criteria_results"]:
+    status = "PASS" if c["passed"] else "FAIL"
+    print(f"  [{status}] {c['name']}: {c['description']}")
+
+print(f"\nAction log ({len(env.world.action_log)} calls):")
+for i, a in enumerate(env.world.action_log):
+    print(f"  {i+1}. {a['tool']}({json.dumps(a['params'])[:80]})")

uv.lock

@@ -1,5 +1,5 @@
 version = 1
-revision = 3
+revision = 2
 requires-python = ">=3.10"
 
 [[package]]
@@ -1070,28 +1070,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/12/cf/03675d8bd8ecbf4445504d8071adab19f5f993676795708e36402ab38263/openapi_pydantic-0.5.1-py3-none-any.whl", hash = "sha256:a3a09ef4586f5bd760a8df7f43028b60cafb6d9f61de2acba9574766255ab146", size = 96381, upload-time = "2025-01-08T19:29:25.275Z" },
 ]
 
-[[package]]
-name = "openenv-basic-openenv"
-version = "0.1.0"
-source = { editable = "." }
-dependencies = [
-    { name = "openenv-core", extra = ["core"] },
-]
-
-[package.optional-dependencies]
-dev = [
-    { name = "pytest" },
-    { name = "pytest-cov" },
-]
-
-[package.metadata]
-requires-dist = [
-    { name = "openenv-core", extras = ["core"], specifier = ">=0.2.0" },
-    { name = "pytest", marker = "extra == 'dev'", specifier = ">=8.0.0" },
-    { name = "pytest-cov", marker = "extra == 'dev'", specifier = ">=4.0.0" },
-]
-provides-extras = ["dev"]
-
 [[package]]
 name = "openenv-core"
 version = "0.2.1"
@@ -1125,6 +1103,28 @@ core = [
     { name = "websockets" },
 ]
 
+[[package]]
+name = "openenv-hr-onboarding-env"
+version = "0.1.0"
+source = { editable = "." }
+dependencies = [
+    { name = "openenv-core", extra = ["core"] },
+]
+
+[package.optional-dependencies]
+dev = [
+    { name = "pytest" },
+    { name = "pytest-cov" },
+]
+
+[package.metadata]
+requires-dist = [
+    { name = "openenv-core", extras = ["core"], specifier = ">=0.2.0" },
+    { name = "pytest", marker = "extra == 'dev'", specifier = ">=8.0.0" },
+    { name = "pytest-cov", marker = "extra == 'dev'", specifier = ">=4.0.0" },
+]
+provides-extras = ["dev"]
+
 [[package]]
 name = "opentelemetry-api"
 version = "1.40.0"